last executing test programs: 5m28.645747101s ago: executing program 32 (id=5091): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000220000000000000002000000851100f72000"/40], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m29.811108296s ago: executing program 33 (id=6205): sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a11800150006", 0x21}], 0x1}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 1m27.475248225s ago: executing program 34 (id=6212): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, 0x0, 0x0) write(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0) read(r1, &(0x7f0000000180), 0x1000) 1m26.114780801s ago: executing program 35 (id=6221): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000380)={0x8, 0x4d, 0x2ba8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x3, 0x9, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000380)={0x200, 0x4f, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x1, 0x3, 0x9}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0xcaf8, 0x40000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x4, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000180)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x8, 0x8, 0x3}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0xcaf8, 0x40000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x8, 0x8, 0x3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) (fail_nth: 6) 1m13.948916957s ago: executing program 36 (id=6287): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x519c02, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x6, 0xfffffffffffffffe}) 1m10.511645633s ago: executing program 37 (id=6318): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) mkdir(&(0x7f0000000300)='./bus\x00', 0x63) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file2\x00', 0x20402, 0xb6) (fail_nth: 6) 1m2.075006719s ago: executing program 38 (id=6360): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000011) r2 = fsopen(&(0x7f0000000040)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='source\x00', &(0x7f00000000c0)='//127.0.0.1/share\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) unshare(0x26020480) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) openat$cgroup_int(r4, &(0x7f0000000180)='cgroup.max.depth\x00', 0x2, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0) syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x40000002, 0x3da}, &(0x7f0000000600), &(0x7f00000005c0), &(0x7f0000000180)) ioctl$TIOCSETD(r5, 0x5423, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) 1m1.037274888s ago: executing program 39 (id=6365): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20044000}, 0x60000000) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x28, 0x3, 0x6, 0x801, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c050}, 0x48d2) unshare(0x64000600) unshare(0x0) mkdirat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x2c) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x140, 0xa3) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r4, 0x40085112, &(0x7f0000000080)=@e={0xff, 0xa}) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x2d41, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000240)={0x50, 0x0, r6, {0x7, 0x1f, 0x1, 0x202, 0x3160, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50) syz_fuse_handle_req(r5, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6(0xa, 0x6, 0x9) keyctl$set_timeout(0xf, 0x0, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x802c550a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000f000000050030000000000005002f000000000008000300", @ANYRES32=r7], 0x2c}}, 0x4000000) 59.293449031s ago: executing program 40 (id=6373): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r0, 0x0, 0x17, 0x0, &(0x7f00000001c0)=0x1) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x16, 0xf, &(0x7f0000000500)=ANY=[@ANYRESHEX=r1, @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x32, 0x0, &(0x7f00000000c0)="c0fbedd8cbc20fb9b8209a08efe418dcbd8680924054903d770425382a1f1f7e6849bb01d62d0a01152cfdf1a05cbb40e804", 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1, 0x2}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r4) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000180)={{@hyper}, 0x0, 0x2}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r1, 0x7b1, &(0x7f00000001c0)={0x0, 0x6, 0x0, 0x7}) socket$inet_tcp(0x2, 0x1, 0x0) (async) getsockopt$inet_int(r0, 0x0, 0x17, 0x0, &(0x7f00000001c0)=0x1) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x16, 0xf, &(0x7f0000000500)=ANY=[@ANYRESHEX=r1, @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x32, 0x0, &(0x7f00000000c0)="c0fbedd8cbc20fb9b8209a08efe418dcbd8680924054903d770425382a1f1f7e6849bb01d62d0a01152cfdf1a05cbb40e804", 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1, 0x2}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r4) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000180)={{@hyper}, 0x0, 0x2}) (async) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r1, 0x7b1, &(0x7f00000001c0)={0x0, 0x6, 0x0, 0x7}) (async) 56.708617254s ago: executing program 41 (id=6380): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20044000}, 0x60000000) unshare(0x64000600) unshare(0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000280)={[{@nfs_export_off}, {@uuid_null}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) openat$dir(0xffffffffffffff9c, 0x0, 0x140, 0xa3) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r3, 0x40085112, &(0x7f0000000080)=@e={0xff, 0xa}) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x2d41, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000240)={0x50, 0x0, r5, {0x7, 0x1f, 0x1, 0x202, 0x3160, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6(0xa, 0x6, 0x9) keyctl$set_timeout(0xf, 0x0, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x802c550a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)) sendmsg$BATADV_CMD_SET_MESH(r0, 0x0, 0x4000000) 53.247580824s ago: executing program 2 (id=6386): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x3fd, 0x1, 0x1fd, 0x1, 0x6, 0x6}, 0x1c) recvmmsg$unix(r0, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) bind$tipc(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)={0x14, r4, 0x801, 0x70bd29, 0x25dfdbfc, {0x7}}, 0x14}}, 0x80880) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="7bc200000000", @ANYRES16=r4, @ANYBLOB="00042bbd7000fedbdf250300000014001f002001000000000000000000000000000108001700", @ANYRES32=r5, @ANYBLOB="050007000200000008000a0000000000060003000700000005000400fd0000000c001000060000000000000008000c0002000000"], 0x64}, 0x1, 0x0, 0x0, 0x8080}, 0x4001) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000001700)={{0x14}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x60}, 0x1, 0x0, 0x0, 0x40080a5}, 0x20008040) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x9, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000002000010000000000000000000200000000000000000000001400110067656e65766531000000000000000000080010000000000008000a"], 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r9 = syz_open_dev$video4linux(&(0x7f0000000280), 0x40, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r9, 0xc0305602, &(0x7f00000001c0)={0x0, 0xc, 0x200b}) write$binfmt_misc(r7, &(0x7f0000000000), 0xfffffecc) splice(r6, 0x0, r8, 0x0, 0x8001, 0xd) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r12 = fsopen(&(0x7f0000000040)='udf\x00', 0x1) r13 = fcntl$dupfd(r12, 0x0, r12) fsconfig$FSCONFIG_SET_STRING(r13, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) sendmsg$NL80211_CMD_RADAR_DETECT(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002cbd7000fedbdf255e00000008000300", @ANYRES32=r11], 0x34}}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000280)={'pimreg\x00', @remote}) 53.121507548s ago: executing program 42 (id=6386): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x3fd, 0x1, 0x1fd, 0x1, 0x6, 0x6}, 0x1c) recvmmsg$unix(r0, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) bind$tipc(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)={0x14, r4, 0x801, 0x70bd29, 0x25dfdbfc, {0x7}}, 0x14}}, 0x80880) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="7bc200000000", @ANYRES16=r4, @ANYBLOB="00042bbd7000fedbdf250300000014001f002001000000000000000000000000000108001700", @ANYRES32=r5, @ANYBLOB="050007000200000008000a0000000000060003000700000005000400fd0000000c001000060000000000000008000c0002000000"], 0x64}, 0x1, 0x0, 0x0, 0x8080}, 0x4001) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000001700)={{0x14}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x60}, 0x1, 0x0, 0x0, 0x40080a5}, 0x20008040) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x9, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000002000010000000000000000000200000000000000000000001400110067656e65766531000000000000000000080010000000000008000a"], 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r9 = syz_open_dev$video4linux(&(0x7f0000000280), 0x40, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r9, 0xc0305602, &(0x7f00000001c0)={0x0, 0xc, 0x200b}) write$binfmt_misc(r7, &(0x7f0000000000), 0xfffffecc) splice(r6, 0x0, r8, 0x0, 0x8001, 0xd) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r12 = fsopen(&(0x7f0000000040)='udf\x00', 0x1) r13 = fcntl$dupfd(r12, 0x0, r12) fsconfig$FSCONFIG_SET_STRING(r13, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) sendmsg$NL80211_CMD_RADAR_DETECT(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002cbd7000fedbdf255e00000008000300", @ANYRES32=r11], 0x34}}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000280)={'pimreg\x00', @remote}) 49.288372216s ago: executing program 1 (id=6394): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x40000000}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000000}, [@map_val={0x18, 0x6, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xa12}]}, &(0x7f0000000240)='GPL\x00', 0xc, 0x0, 0x0, 0x41000, 0x50, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl(r1, 0x8983, &(0x7f0000000040)="00000000657468300000000000000000000000000000000003030303030303030303030303030303030303030303030300000000") ioctl(r1, 0x8983, &(0x7f0000000080)="01000000657468302e37373100"/52) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000000), &(0x7f00000000c0)=0xc) 49.180283273s ago: executing program 43 (id=6394): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x40000000}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000000}, [@map_val={0x18, 0x6, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xa12}]}, &(0x7f0000000240)='GPL\x00', 0xc, 0x0, 0x0, 0x41000, 0x50, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl(r1, 0x8983, &(0x7f0000000040)="00000000657468300000000000000000000000000000000003030303030303030303030303030303030303030303030300000000") ioctl(r1, 0x8983, &(0x7f0000000080)="01000000657468302e37373100"/52) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000000), &(0x7f00000000c0)=0xc) 47.989973828s ago: executing program 44 (id=6402): setns(0xc9, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000900)=@newtfilter={0x74, 0x2c, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x48, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0x6, 0x5, 0x3, 0xb68, 0x6, 0x7f, 0xe1c5, 0x9, [{0x80000000, 0x4, 0x3, 0x94}, {0x3, 0x6, 0x101, 0xe0000000}, {0x6, 0x1, 0x40, 0xf2}]}}]}}]}, 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x8100, &(0x7f0000000700)={&(0x7f0000000800)=@delqdisc={0x24, 0x25, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 45.28637141s ago: executing program 45 (id=6411): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x519c02, 0x0) 41.101722708s ago: executing program 46 (id=6418): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x404c03, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x9}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x810}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f62726964676500140001007767"], 0xa8}, 0x1, 0x0, 0x0, 0x20040854}, 0x20040801) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c697000140007800800064000000200080008"], 0x60}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r6], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)={0x1c, 0x44, 0x107, 0xfffffffe, 0x25dfdbfc, {0x3, 0x7c}, [@nested={0x4, 0x145}, @nested={0x4, 0x1}]}, 0x1c}}, 0xc000) socket$igmp6(0xa, 0x3, 0x2) 38.241862779s ago: executing program 47 (id=6424): r0 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) listen(r2, 0x6f6) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 36.545251927s ago: executing program 48 (id=6431): timer_create(0xfffffffd, 0x0, &(0x7f00000011c0)=0x0) exit(0x7) timer_gettime(r0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x110) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) (async) socket$netlink(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x4, 0xe0, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x80) (async) r3 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x0, 0x9, 0xa, 0x3}) mq_timedreceive(r3, 0x0, 0xfffffffffffffee3, 0x1, 0x0) (async) mq_timedreceive(r3, &(0x7f0000000180)=""/196, 0xc4, 0x0, 0x0) (async) mq_timedreceive(r3, &(0x7f0000000640)=""/155, 0x9b, 0x1000, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000300)) add_key$fscrypt_provisioning(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) (async, rerun: 64) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000b80)) (rerun: 64) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) (async, rerun: 32) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async, rerun: 32) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000340)={0x10, 0x30, 0xfa00, {&(0x7f0000000080), 0x3, {0xa, 0x4e23, 0x9, @dev={0xfe, 0x80, '\x00', 0x2f}, 0xffffff08}}}, 0x39) (async, rerun: 64) r4 = socket$inet_smc(0x2b, 0x1, 0x0) (rerun: 64) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x66, 0x0, &(0x7f00000000c0)) (async) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r5) 35.539147288s ago: executing program 8 (id=6434): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x81) r1 = syz_open_dev$vcsa(&(0x7f0000000180), 0x87, 0x80a00) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000480), 0x200000c, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x1fffffffe, 0x8, 0x6, 0x8, 0xc, {0x1, 0x8010001, 0x4d0, 0x40d, 0x6, 0x0, 0xed1, 0x2, 0x5, 0xc000, 0x7ff, r3, r4, 0x3d5, 0x20000002}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000000e80)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x2010, &(0x7f0000002ec0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}, {@dfltgid={'dfltgid', 0x3d, r4}}], [{@fsmagic={'fsmagic', 0x3d, 0x6}}, {@euid_gt={'euid>', r5}}, {@flag='nomand'}, {@obj_type={'obj_type', 0x3d, ':chain\x00'}}]}}) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r7 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r7) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000e40)=@chain={'key_or_keyring:', r7}) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000780)="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", 0x559, r6) 35.42913947s ago: executing program 8 (id=6435): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) setpgid(0x0, r3) write(r0, &(0x7f0000000480)='usbip-vudc.0', 0xc) 35.381126815s ago: executing program 8 (id=6436): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$rtc(0xffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f00000000c0)) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r1 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000240)={0x80000000}) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x10000, 0x5, 0x7, 0x800003, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x10009, 0x3, 0x8000, 0x6000, 0x0, 0x0, 0x0, 0xd, 0x7}}, {0x0, 0x13}}}, 0xa0) 35.007638236s ago: executing program 8 (id=6437): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000004c0), 0x111, 0xb}}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioprio_set$pid(0x0, 0x0, 0x4007) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setattr(0x0, &(0x7f0000000480)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x4}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x3f00) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) write$binfmt_script(r5, 0x0, 0x0) close(r5) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) keyctl$update(0x2, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000002100210107000000000000000a000000000000000000000008001a"], 0x24}}, 0x4004000) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r6, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 34.89543815s ago: executing program 49 (id=6437): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000004c0), 0x111, 0xb}}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioprio_set$pid(0x0, 0x0, 0x4007) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setattr(0x0, &(0x7f0000000480)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x4}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x3f00) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) write$binfmt_script(r5, 0x0, 0x0) close(r5) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) keyctl$update(0x2, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000002100210107000000000000000a000000000000000000000008001a"], 0x24}}, 0x4004000) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r6, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 33.657079947s ago: executing program 6 (id=6419): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406a053b030000000000010902220001010080320904000001030000000921110100012217000705810340"], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101302, 0x0) syz_open_dev$loop(0x0, 0x401, 0x145981) syz_open_dev$sndctrl(0x0, 0x0, 0x183582) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000e40)=@filter={'filter\x00', 0x4, 0x4, 0x34c, 0xffffffff, 0x0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @loopback, [0xffffffff, 0xffffff00, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0x0, 0xffffff00], 'geneve0\x00', 'sit0\x00', {}, {0xff}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa4, 0xd4}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x3, 0x3}, {0xffffffffffffffff, 0x3, 0x1}, 0x9, 0xfffeffff}}}, {{@ipv6={@private2, @dev={0xfe, 0x80, '\x00', 0x23}, [0x0, 0x0, 0x0, 0xffffffff], [0xffffffff, 0x0, 0xff000000, 0x1ffffff01], 'sit0\x00', 'batadv_slave_1\x00', {0xff}, {}, 0x34}, 0x0, 0xa4, 0xe4}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x20, 0x0, {0x2000010}}}}, {{@uncond, 0x0, 0xa4, 0xcc}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x3, 0x2}, {0x0, 0x4}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3a8) r2 = socket$inet6(0xa, 0x802, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, 0x0, 0x20000000) ptrace(0x10, 0x0) ptrace$pokeuser(0x6, 0x0, 0x118, 0x8137da) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, 0x0, 0x40) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, &(0x7f0000000440)='./dev\x00', &(0x7f0000000480)='devtmpfs\x00', 0x0, 0x0) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000100)={0x4}) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000180)={0x4}) r6 = openat$binderfs(0xffffff9c, &(0x7f0000000080)='./binderfs2/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0xd0, 0x0, &(0x7f0000000300)=[@clear_death={0x400c630f, 0x1}, @increfs_done, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x50, 0x0, &(0x7f00000000c0)={@fda={0x66646185, 0x8, 0x0, 0xf}, @flat=@weak_binder={0x77622a85, 0x101}, @fd}, 0x0}, 0x1440}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000200)={@fda={0x66646185, 0x8, 0x2, 0x1c}, @fda={0x66646185, 0x6, 0x2, 0x40}, @fd={0x66642a85, 0x0, r6}}, &(0x7f00000002c0)={0x0, 0x1c, 0x38}}, 0x1000}, @acquire_done={0x40106309, 0x2}], 0xa, 0x0, &(0x7f0000000400)="c2a16573245e21b95cfa"}) syz_usb_control_io$hid(r0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000004380)=[{{&(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/31, 0x1f}, {&(0x7f0000000680)=""/34, 0x22}], 0x3, &(0x7f0000000700)=""/163, 0xa3}, 0x7}, {{&(0x7f00000007c0)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000840)=""/104, 0x68}, {&(0x7f00000008c0)=""/247, 0xf7}, {&(0x7f00000009c0)=""/122, 0x7a}, {&(0x7f0000000a40)=""/231, 0xe7}], 0x4, &(0x7f0000000b80)=""/150, 0x96}, 0x82}, {{&(0x7f0000000c40)=@x25={0x9, @remote}, 0x80, &(0x7f0000001580)=[{0x0}, {&(0x7f0000000d00)=""/221, 0xdd}, {&(0x7f0000001200)=""/233, 0xe9}, {&(0x7f0000001300)=""/188, 0xbc}, {&(0x7f00000013c0)=""/32, 0x20}, {&(0x7f0000001400)=""/127, 0x7f}, {&(0x7f0000001480)=""/232, 0xe8}], 0x7, &(0x7f00000015c0)=""/229, 0xe5}, 0x8}, {{&(0x7f00000016c0)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000001880)=[{&(0x7f0000001740)=""/220, 0xdc}, {&(0x7f0000001840)=""/4, 0x4}], 0x2, &(0x7f00000018c0)=""/12, 0xc}, 0xe2}, {{&(0x7f0000001900)=@caif=@rfm, 0x80, &(0x7f0000001f00)=[{&(0x7f0000001980)=""/148, 0x94}, {&(0x7f0000001a40)=""/108, 0x6c}, {&(0x7f0000001ac0)=""/140, 0x8c}, {&(0x7f0000001b80)=""/2, 0x2}, {&(0x7f0000001bc0)=""/148, 0x94}, {&(0x7f0000001c80)=""/199, 0xc7}, {&(0x7f0000001d80)=""/118, 0x76}, {&(0x7f0000001e00)=""/48, 0x30}, {&(0x7f0000001e40)=""/139, 0x8b}], 0x9}, 0x6}, {{&(0x7f0000001f80)=@hci, 0x80, &(0x7f0000003080)=[{&(0x7f0000002000)=""/114, 0x72}, {&(0x7f0000002080)=""/4096, 0x1000}], 0x2, &(0x7f00000030c0)=""/121, 0x79}, 0xbbf}, {{0x0, 0x0, &(0x7f0000003340)=[{&(0x7f0000003140)=""/247, 0xf7}, {&(0x7f0000003240)=""/198, 0xc6}], 0x2, &(0x7f0000003380)=""/4096, 0x1000}, 0xea}], 0x7, 0x0, &(0x7f00000044c0)) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022170000000600ff0901a10185020901150026ff0075089509"], 0x0}, 0x0) 31.797626525s ago: executing program 6 (id=6439): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x803, 0x3, &(0x7f0000002480)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) acct(0x0) 31.337663628s ago: executing program 6 (id=6440): r0 = syz_io_uring_setup(0xeff, &(0x7f0000000340)={0x0, 0x573a, 0x100, 0x83, 0x23ac}, &(0x7f0000000100), &(0x7f0000000440), &(0x7f0000000180)) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x23, 0x0, r1) 31.27921988s ago: executing program 6 (id=6441): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) r3 = fsmount(r2, 0x0, 0x2) fchdir(r3) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, r4) setpgid(0x0, r4) write(r0, &(0x7f0000000480)='usbip-vudc.0', 0xc) 31.254198348s ago: executing program 6 (id=6442): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', &(0x7f0000000140)='tracefs\x00', 0x180008c, 0x0) 30.938008436s ago: executing program 6 (id=6443): r0 = socket(0x28, 0x5, 0x0) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) sendmsg$NL80211_CMD_DEL_STATION(r0, 0x0, 0x8000) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, 0x0, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, 0x0, r4, r5, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0x6d1, 0x0, 0x0, 0x1000, 0x5}}}, &(0x7f0000000300)=0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) pipe(&(0x7f0000000600)) io_setup(0x3ff, &(0x7f0000000500)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x6}) unshare(0x22020600) syz_ublk_setup_queues(r2, r6, &(0x7f0000000540)={0x0, 0x1aa5, 0x80, 0x2, 0x20000}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3104, 0x1, 0x0, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587d, 0x200, 0x1, 0x69, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffe, 0x800, 0x10000, 0x400000, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6253, 0x20, 0x3, 0x0, 0x0, r2}}], 0x1, &(0x7f00000003c0)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0xdbd, 0x0, 0x0}}, 0x0) 30.845516121s ago: executing program 50 (id=6443): r0 = socket(0x28, 0x5, 0x0) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) sendmsg$NL80211_CMD_DEL_STATION(r0, 0x0, 0x8000) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, 0x0, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, 0x0, r4, r5, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0x6d1, 0x0, 0x0, 0x1000, 0x5}}}, &(0x7f0000000300)=0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) pipe(&(0x7f0000000600)) io_setup(0x3ff, &(0x7f0000000500)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x6}) unshare(0x22020600) syz_ublk_setup_queues(r2, r6, &(0x7f0000000540)={0x0, 0x1aa5, 0x80, 0x2, 0x20000}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3104, 0x1, 0x0, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587d, 0x200, 0x1, 0x69, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffe, 0x800, 0x10000, 0x400000, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6253, 0x20, 0x3, 0x0, 0x0, r2}}], 0x1, &(0x7f00000003c0)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0xdbd, 0x0, 0x0}}, 0x0) 29.001917359s ago: executing program 9 (id=6425): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f00000002c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000940)=""/32, 0x20, 0x4, 0xffffffff, 0x0, 0x0, 0x3}}, 0x120) syz_open_dev$hidraw(&(0x7f0000000080), 0x1, 0x200) close(r0) (fail_nth: 4) 28.879929802s ago: executing program 9 (id=6445): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000001ac0)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) lseek(r1, 0x9, 0x4) accept4(r0, 0x0, 0x0, 0x0) close(0x3) close(0x4) 28.870686866s ago: executing program 9 (id=6446): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1c5) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x414581, 0x112) (fail_nth: 6) 28.699726761s ago: executing program 9 (id=6447): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) r3 = fsmount(r2, 0x0, 0x2) fchdir(r3) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, r4) setpgid(0x0, r4) write(r0, &(0x7f0000000480)='usbip-vudc.0', 0xc) 28.610649391s ago: executing program 9 (id=6448): syz_usb_connect(0x2, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES16, @ANYRESOCT], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000000)={0x40, 0x1, 0xb, 0x8, "2af15ef6983d2e9e4cea7f3567bf701fa00d6a39ad4b3eb72544d4c1ba33b030"}) 27.897720349s ago: executing program 9 (id=6449): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b411000000000000611078000800000063412c00100000009500000000000000ca6154217ec4f4294ce2fd91e70f787ce1150589195602f644a193043486fc7df92f"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x4c}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$ttyS3(0xffffff9c, 0x0, 0x208801, 0x0) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) getpid() mkdirat(0xffffffffffffffff, 0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r2, &(0x7f00000000c0)='1\x00', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r3, &(0x7f00000001c0)='1\x00', 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x90) r4 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_SET_COMMAND_Q(r4, 0x2271, &(0x7f0000000000)=0xe) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000180)="99746fd6240820005da6a2786bc091866e068d151c32264c688e0ebee1cba7f88de369868532bac75b8ad563c3e5660000000000", 0x34}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) 27.77136491s ago: executing program 51 (id=6449): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b411000000000000611078000800000063412c00100000009500000000000000ca6154217ec4f4294ce2fd91e70f787ce1150589195602f644a193043486fc7df92f"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x4c}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$ttyS3(0xffffff9c, 0x0, 0x208801, 0x0) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) getpid() mkdirat(0xffffffffffffffff, 0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r2, &(0x7f00000000c0)='1\x00', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r3, &(0x7f00000001c0)='1\x00', 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x90) r4 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_SET_COMMAND_Q(r4, 0x2271, &(0x7f0000000000)=0xe) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000180)="99746fd6240820005da6a2786bc091866e068d151c32264c688e0ebee1cba7f88de369868532bac75b8ad563c3e5660000000000", 0x34}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) 24.383447581s ago: executing program 2 (id=6432): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) mkdirat(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x40) mkdir(&(0x7f00000000c0)='./bus\x00', 0xc0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@index_on}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x3}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000000201091405000000"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000440)=@newtaction={0x18, 0x30, 0x8, 0xffe4, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24004040}, 0x80000) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYRES16=r0, @ANYRESHEX=r2], 0x74}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000002c0)={0x0, &(0x7f00000002c0)}) close_range(r6, r6, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r8 = fanotify_init(0x200, 0x0) fanotify_mark(r8, 0x51, 0x10, r7, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r9, &(0x7f0000000340), 0x8) r10 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f00000005c0)=@ethtool_drvinfo={0x3, "8a0d98976fa77c52154820c0bade20c6cc80e4d6896979f863007b9caf4e0fee", "cb3c292d34c34ace42f5a7d38a8da2838809a1a8d73bf14ff8bff111c7afbd81", "f7c893d41751a78a5431f9f71ecec3e8a3c2e552d432efb39a2f1ca28b1f91df", "31e10dc5b71519bfa16623871e1af24fd6e471ab0d203770f70bad15c7f6bb0a", "cf61dc6f215ca0b22abd5c938b2acff2ed2dc6f6851f9fe77fb382ae8bd5fbb6", "7b8601e788761d2872fdd753", 0x3, 0x6, 0x3, 0x5, 0x101}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) openat$fb0(0xffffff9c, &(0x7f0000000000), 0x630001, 0x0) 24.214890266s ago: executing program 2 (id=6451): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = socket$kcm(0xa, 0x1, 0x106) close(r0) ioctl$XFS_IOC_FSGROWFSRT(r1, 0x400c5870, &(0x7f0000000100)={0xfffffffffffffff8, 0x401}) socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) read(r0, &(0x7f0000000000)=""/31, 0x1f) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) openat$ppp(0xffffff9c, &(0x7f0000000040), 0x921100, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, r4, 0x1, 0x0, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x90) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6000000000140600fc000000000000000000000000000000ff02000000000000000000000000000100004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="81000000907a0000"], 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0x1c, 0x0, &(0x7f00000000c0)) llistxattr(&(0x7f0000002300)='./file0\x00', 0x0, 0xfffffdf3) 24.133080487s ago: executing program 1 (id=6438): r0 = socket(0x28, 0x5, 0x0) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) sendmsg$NL80211_CMD_DEL_STATION(r0, 0x0, 0x8000) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r3 = syz_ublk_setup_io_uring(0x1d, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0x6d1, 0x0, 0x0, 0x1000, 0x5}}}, &(0x7f0000000300)=0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) pipe(&(0x7f0000000600)) io_setup(0x3ff, &(0x7f0000000500)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x6}) unshare(0x22020600) syz_ublk_setup_queues(r2, r7, &(0x7f0000000540)={0x0, 0x1aa5, 0x80, 0x2, 0x20000}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3104, 0x1, 0x0, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587d, 0x200, 0x1, 0x69, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffe, 0x800, 0x10000, 0x400000, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6253, 0x20, 0x3, 0x0, 0x0, r2}}], 0x1, &(0x7f00000003c0)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0xdbd, 0x0, 0x0}}, 0x0) 23.99902264s ago: executing program 1 (id=6452): syz_usb_connect(0x3, 0x24, &(0x7f0000000600)=ANY=[@ANYRES32=0x0], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_connect$cdc_ecm(0x3, 0x62, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x50, 0x1, 0x1, 0xe5, 0x0, 0x9, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x7f, {{0x7, 0x24, 0x6, 0x0, 0x0, 'cx'}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x544, 0xffff, 0x6, 0x6}, [@country_functional={0xc, 0x24, 0x7, 0x81, 0x4, [0xa, 0x1, 0x4]}, @dmm={0x7, 0x24, 0x14, 0x3733, 0x6}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x8, 0xa, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x5, 0x2, 0x8}}}}}]}}]}}, &(0x7f0000000840)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x110, 0xe, 0x3, 0x2, 0x10, 0x10}, 0x27, &(0x7f00000003c0)={0x5, 0xf, 0x27, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x5, 0x6, 0x5, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x5, 0xe, 0x1}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x19, 0x1, 0x1000}, @ext_cap={0x5, 0x10, 0x2, 0x10, 0x5, 0x4, 0x8000}]}, 0x3, [{0x101, &(0x7f0000000400)=@string={0x101, 0x3, "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"}}, {0xfc, &(0x7f0000000940)=@string={0xfc, 0x3, "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"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x804}}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001cdb000000000000000000007d4e4865cd06006e36e099d57a418fc91c23c2eaa966fd7059f0af041afead6da492", @ANYRES32=r2, @ANYBLOB="80001e060a000200bbbbbbbbbbbb0000"], 0x28}, 0x1, 0x0, 0x0, 0x240008d5}, 0x20040000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newtfilter={0x70, 0x2c, 0xf3f, 0x70bd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r7, {0x2, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x2, 0x3, 0x5}, {0x9, 0xfffffff9, 0x0, 0x3}}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x1, 0x2, 0x1}, {0x7, 0x0, 0x1}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x200058c0}, 0x4880) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000200)="03", 0x1}], 0x1}, 0x20004014) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020) syz_open_dev$I2C(&(0x7f0000000040), 0x2, 0x222102) r8 = socket$inet(0x2, 0x2, 0x1) recvmmsg(r8, &(0x7f0000004ac0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x1, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000005c0)=ANY=[@ANYRESOCT=r4], 0x9c}}, 0x40) socket$inet6(0xa, 0x2, 0x0) r10 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f00000001c0)={0x1, 0xfffb, 0x1, 0xf4, 0x2, 0x9, 0x0, 0x3, 0x0}, &(0x7f0000000200)=0x20) socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r10, 0x84, 0x75, &(0x7f0000000540)={r11, 0x200}, 0xffffffffffffffc4) 22.640073957s ago: executing program 2 (id=6453): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) r3 = fsmount(r2, 0x0, 0x2) fchdir(r3) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, r4) setpgid(0x0, r4) write(r0, &(0x7f0000000480)='usbip-vudc.0', 0xc) 22.605256664s ago: executing program 2 (id=6454): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100697036746e6c000014000280060012000000000006000f"], 0x44}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x4, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x4) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 21.761785163s ago: executing program 2 (id=6456): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000380)="91be3d1e0d", 0x5, 0x20000085, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x240) 21.610528513s ago: executing program 52 (id=6456): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000380)="91be3d1e0d", 0x5, 0x20000085, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x240) 20.927415204s ago: executing program 1 (id=6460): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) pipe(&(0x7f0000000140)) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) setpgid(0x0, r3) write(r0, &(0x7f0000000480)='usbip-vudc.0', 0xc) 20.451697149s ago: executing program 1 (id=6461): syz_usb_connect(0x2, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES16, @ANYRESOCT], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000000)={0x40, 0x1, 0xb, 0x8, "2af15ef6983d2e9e4cea7f3567bf701fa00d6a39ad4b3eb72544d4c1ba33b030"}) 19.900348725s ago: executing program 1 (id=6464): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\t\x00\x00\x00\b\x00\x00\x00\b\x00\x00\x00@'], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1bc) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x55, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002020000402505a7a400010000000109024300020100c001090400000102020100052400100104240202052401000105240600010705810308000a09040100020a00000007058202000200070503020002"], 0x0) getxattr(&(0x7f0000000040)='./dev/ttyACM0\x00', &(0x7f0000000180)=@random={'system.', 'devtmpfs\x00'}, &(0x7f0000000240)=""/178, 0xb2) syz_usb_control_io(r1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/ttyACM0\x00', 0x1aff80, 0x0) syz_usb_disconnect(r1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r0}, 0x38) syz_open_dev$amidi(&(0x7f0000000000), 0x4, 0x80) 19.621087265s ago: executing program 53 (id=6464): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\t\x00\x00\x00\b\x00\x00\x00\b\x00\x00\x00@'], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1bc) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x55, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002020000402505a7a400010000000109024300020100c001090400000102020100052400100104240202052401000105240600010705810308000a09040100020a00000007058202000200070503020002"], 0x0) getxattr(&(0x7f0000000040)='./dev/ttyACM0\x00', &(0x7f0000000180)=@random={'system.', 'devtmpfs\x00'}, &(0x7f0000000240)=""/178, 0xb2) syz_usb_control_io(r1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/ttyACM0\x00', 0x1aff80, 0x0) syz_usb_disconnect(r1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r0}, 0x38) syz_open_dev$amidi(&(0x7f0000000000), 0x4, 0x80) 13.659688574s ago: executing program 5 (id=6465): openat$tun(0xffffffffffffff9c, &(0x7f0000000800), 0x20102, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text16={0x10, &(0x7f0000000040)="66b8000000000f23d00f21f86635300000010f23f86566f20f38f0226ade67df34d7d9f10fc75902f20f7cccf30f2c9c4100b8c3008ed8ba4100ed", 0x3b}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) getrandom(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10010, 0xffffffffffffffff, 0x90dbe000) r4 = syz_io_uring_setup(0x28b5, &(0x7f0000000480)={0x0, 0xf6dd, 0xc0000, 0x0, 0x51}, &(0x7f0000000380), &(0x7f0000000000), &(0x7f0000000340)) io_uring_enter(r4, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000060000000e0000000000001018000000006161bec6060fd923ef441d4d0f9a10722116cac8"], &(0x7f0000000a40)=""/90, 0x3c, 0x5a, 0x0, 0x401}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0xc, &(0x7f0000000240)=ANY=[@ANYRES64=r5, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000af82bc86e0671eb99d82d7bc4c4fcc000000b70400000000000085000000c3000000951715c3e87eb799bce85b13729330a7c0572734e97cf3a13aa6da578ed9356fc2fcd52906d99e352cbe45aab2d13e941ea54806a395c5d5f32ab916675f74b201f8e4"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', r5, @fallback=0x14, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r7, &(0x7f00000001c0)='0', 0x1) recvmsg$unix(r7, &(0x7f0000000a00)={&(0x7f0000000580)=@abs, 0x6e, &(0x7f0000000840)=[{&(0x7f0000000600)=""/247, 0xf7}, {&(0x7f0000000700)=""/80, 0x50}, {&(0x7f0000000780)=""/82, 0x52}], 0x3, &(0x7f0000000940)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}], 0x70}, 0x10000) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000180)=r8, 0x4) sendmsg$inet(r10, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 13.35917005s ago: executing program 5 (id=6486): openat$tun(0xffffffffffffff9c, &(0x7f0000000800), 0x20102, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text16={0x10, &(0x7f0000000040)="66b8000000000f23d00f21f86635300000010f23f86566f20f38f0226ade67df34d7d9f10fc75902f20f7cccf30f2c9c4100b8c3008ed8ba4100ed", 0x3b}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x6, &(0x7f00000003c0)) getrandom(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10010, 0xffffffffffffffff, 0x90dbe000) r4 = syz_io_uring_setup(0x28b5, &(0x7f0000000480)={0x0, 0xf6dd, 0xc0000, 0x0, 0x51}, &(0x7f0000000380), &(0x7f0000000000), &(0x7f0000000340)) io_uring_enter(r4, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000060000000e0000000000001018000000006161bec6060fd923ef441d4d0f9a10722116cac8"], &(0x7f0000000a40)=""/90, 0x3c, 0x5a, 0x0, 0x401}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0xc, &(0x7f0000000240)=ANY=[@ANYRES64=r5, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000af82bc86e0671eb99d82d7bc4c4fcc000000b70400000000000085000000c3000000951715c3e87eb799bce85b13729330a7c0572734e97cf3a13aa6da578ed9356fc2fcd52906d99e352cbe45aab2d13e941ea54806a395c5d5f32ab916675f74b201f8e4"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', r5, @fallback=0x14, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r7, &(0x7f00000001c0)='0', 0x1) recvmsg$unix(r7, &(0x7f0000000a00)={&(0x7f0000000580)=@abs, 0x6e, &(0x7f0000000840)=[{&(0x7f0000000600)=""/247, 0xf7}, {&(0x7f0000000700)=""/80, 0x50}, {&(0x7f0000000780)=""/82, 0x52}], 0x3, &(0x7f0000000940)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}], 0x70}, 0x10000) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000180)=r8, 0x4) sendmsg$inet(r10, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 13.230399632s ago: executing program 5 (id=6487): r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'gretap0\x00', &(0x7f0000000140)=@ethtool_gstrings={0x1b, 0x4, 0x40, "259cd9ebad2ccc7ca9c5e6acca9242e12e3a8b7ba9dcabaf4c4dfd7377e1e4d2b422cc83303297112b64b181f0e419acb6992ad1fdf1e9f4ce5ee817dbdef745"}}) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) mount$binderfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='max=']) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) prlimit64(0x0, 0x7a5d90deaf5cb300, &(0x7f0000000140)={0xf, 0xfffffffe}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() r1 = syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_ep_write(r1, 0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) close(r3) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='none\x00', &(0x7f0000000100)='./config\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/eem.usb0\x00', 0x1ed) openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/eem.usb0/host_addr\x00', 0x0, 0x0) r4 = syz_open_dev$dmmidi(&(0x7f0000000200), 0x2, 0x8901) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r4, 0xc0245720, &(0x7f00000001c0)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRESDEC=r3, @ANYRES32=r2, @ANYBLOB="00000005006113a118e6baa90000000000000000bba8", @ANYRESOCT=r4, @ANYRES32=r3, @ANYBLOB="0000f3ffffffffffffff00"/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000029c0)={0x6, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002ec0000850000008200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r7, 0x4008af00, &(0x7f0000000080)=0x200000000) r8 = dup2(r7, r7) write$vhost_msg_v2(r8, &(0x7f0000000380)={0x2, 0x0, {&(0x7f0000000580)=""/103, 0xffffffffffffffda, 0x0, 0x1, 0x2}}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 12.120458679s ago: executing program 4 (id=6498): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x51}}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sendto$inet6(r4, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000005bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000013c0)="fe", 0x1}], 0x1}}], 0x2, 0xc00cc44) 11.600231305s ago: executing program 5 (id=6499): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) setpgid(0x0, r3) write(r0, &(0x7f0000000480)='usbip-vudc.0', 0xc) 11.527795528s ago: executing program 5 (id=6502): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x4, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/148, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x8b63bfea1a14a3c7}, 0x16) socket$netlink(0x10, 0x3, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config/nvmet/ports/1\x00', &(0x7f0000000040)='bpf\x00', 0x13d2829, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/testnqn/attr_allow_any_host\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nvmet/subsystems/testnqn/namespaces\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/testnqn/namespaces/1\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000280)='/dev/nullb0\x00', 0xc) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/ports/1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r3, &(0x7f0000000400)='rdma', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/ports/1/addr_adrfam\x00', 0x2, 0x0) write(r4, &(0x7f0000000480)='ipv4', 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x2, 0x0) write(r5, &(0x7f0000000500)='172.20.20.20\x00', 0xd) r6 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x2, 0x0) write(r6, &(0x7f0000000580)='4421\x00', 0x4) symlinkat(&(0x7f00000005c0)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./config/nvmet/ports/1/subsystems/testnqn\x00') r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) write(r7, &(0x7f0000000680)='nqn=testnqn,transport=rdma,traddr=172.20.20.20,trsvcid=4421\x00', 0x3b) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x3c1, 0x3, 0x5d0, 0x0, 0x8, 0x7f02ae, 0x0, 0x200, 0x508, 0x2e8, 0x2e8, 0x508, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x3d8, 0x3fc, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r1}}, @common=@inet=@recent1={{0x104}, {0x7fff, 0x101, 0x10, 0x0, 'syz1\x00', 0xe, [0xffffffff, 0xffffff00, 0xffffff00, 0xff000000]}}]}, @common=@unspec=@CLASSIFY={0x24, 'CLASSIFY\x00', 0x0, {0x1}}}, {{@ipv6={@private2, @private2, [0x0, 0x0, 0x0, 0xff000000], [0x0, 0xff], 'veth0_to_team\x00', 'netdevsim0\x00', {}, {0xff}, 0x0, 0x0, 0x1}, 0x0, 0xa4, 0x10c}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x11, 0xec, 0x5, 0x400, 'snmp\x00', 'syz0\x00', {0xffffffff8cdbbefd}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x62c) 11.247335718s ago: executing program 4 (id=6504): openat$tun(0xffffffffffffff9c, &(0x7f0000000800), 0x20102, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text16={0x10, &(0x7f0000000040)="66b8000000000f23d00f21f86635300000010f23f86566f20f38f0226ade67df34d7d9f10fc75902f20f7cccf30f2c9c4100b8c3008ed8ba4100ed", 0x3b}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x6, &(0x7f00000003c0)) getrandom(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10010, 0xffffffffffffffff, 0x90dbe000) r4 = syz_io_uring_setup(0x28b5, &(0x7f0000000480)={0x0, 0xf6dd, 0xc0000, 0x0, 0x51}, &(0x7f0000000380), &(0x7f0000000000), &(0x7f0000000340)) io_uring_enter(r4, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000060000000e0000000000001018000000006161bec6060fd923ef441d4d0f9a10722116cac8"], &(0x7f0000000a40)=""/90, 0x3c, 0x5a, 0x0, 0x401}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0xc, &(0x7f0000000240)=ANY=[@ANYRES64=r5, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000af82bc86e0671eb99d82d7bc4c4fcc000000b70400000000000085000000c3000000951715c3e87eb799bce85b13729330a7c0572734e97cf3a13aa6da578ed9356fc2fcd52906d99e352cbe45aab2d13e941ea54806a395c5d5f32ab916675f74b201f8e4"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', r5, @fallback=0x14, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r7, &(0x7f00000001c0)='0', 0x1) recvmsg$unix(r7, &(0x7f0000000a00)={&(0x7f0000000580)=@abs, 0x6e, &(0x7f0000000840)=[{&(0x7f0000000600)=""/247, 0xf7}, {&(0x7f0000000700)=""/80, 0x50}, {&(0x7f0000000780)=""/82, 0x52}], 0x3, &(0x7f0000000940)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}], 0x70}, 0x10000) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000180)=r8, 0x4) sendmsg$inet(r10, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 11.138260889s ago: executing program 4 (id=6505): socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000200), 0x80000000000037f, 0x404c015) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mount(0x0, 0x0, 0x0, 0x44021, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = syz_io_uring_setup(0x1267, &(0x7f0000000200)={0x0, 0x60b1, 0x4000, 0x0, 0x3a4}, &(0x7f0000000140), &(0x7f0000000280), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, &(0x7f0000000040)={0x5, r1, 0x3e, {0x481, 0x23}, 0x7f}, 0x1) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a312000000038000000030a01040000000000000000010000010900010073797a30000000000c000240000000000000000109000300030000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000100)={0xa00965, 0x1}) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000440)={r3, r3, 0x8, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'}) shutdown(r3, 0x1) 10.570144505s ago: executing program 5 (id=6506): r0 = syz_open_dev$video(&(0x7f0000000200), 0x5, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x2, 0x1, 0x1}) syz_open_dev$char_usb(0xc, 0xb4, 0x8) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000500)=0x1) 10.380361032s ago: executing program 54 (id=6506): r0 = syz_open_dev$video(&(0x7f0000000200), 0x5, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x2, 0x1, 0x1}) syz_open_dev$char_usb(0xc, 0xb4, 0x8) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000500)=0x1) 10.272778828s ago: executing program 4 (id=6510): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) setpgid(0x0, r3) write(r0, &(0x7f0000000480)='usbip-vudc.0', 0xc) 10.16721175s ago: executing program 4 (id=6511): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100697036746e6c000014000280060012000000000006000f"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) 9.785368516s ago: executing program 4 (id=6515): syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e04141a0c"], 0x7) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3e) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2f, &(0x7f0000000380)=0x9, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x2006}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x4c}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000040)={{@any, 0xffffffff}, @host, 0x7, 0x6, 0x3, 0x6, 0x7, 0x6, 0x80}) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000100)='vlan0\x00', 0x10) sendmmsg$inet(r2, &(0x7f0000002680)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000400)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000000700)='\a', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000480)='=&', 0x2}], 0x1}}], 0x3, 0x119e75c40673edef) close_range(r1, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc0}, "254d618a7f51f8e20eff5cc8f94c57a4ed33322ce8249b9cc17f8764ad21138744202919994fd272dd7bc922571b5262104f4bed8e04b1449dcfef0a7c1b7bd015895f61767034e8af789211252ab7dab4841a6ac8ecf039d7079092892357ae13bef4ad5ff04321e195cbdca68f34e56bb1fd02d6902bdd2a66c145bb02f34ab42107b85130135b1185f9bfa8cb57f39321347d3857d6d0f3eeae0df6ff272a4522e65e218ea2ca9b270cdc2fd2a2d18eaf8a44c56a82e1374f7188447686e3"}, 0xc4) gettid() 9.58968329s ago: executing program 55 (id=6515): syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e04141a0c"], 0x7) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3e) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2f, &(0x7f0000000380)=0x9, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x2006}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x4c}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000040)={{@any, 0xffffffff}, @host, 0x7, 0x6, 0x3, 0x6, 0x7, 0x6, 0x80}) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000100)='vlan0\x00', 0x10) sendmmsg$inet(r2, &(0x7f0000002680)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000400)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000000700)='\a', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000480)='=&', 0x2}], 0x1}}], 0x3, 0x119e75c40673edef) close_range(r1, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc0}, "254d618a7f51f8e20eff5cc8f94c57a4ed33322ce8249b9cc17f8764ad21138744202919994fd272dd7bc922571b5262104f4bed8e04b1449dcfef0a7c1b7bd015895f61767034e8af789211252ab7dab4841a6ac8ecf039d7079092892357ae13bef4ad5ff04321e195cbdca68f34e56bb1fd02d6902bdd2a66c145bb02f34ab42107b85130135b1185f9bfa8cb57f39321347d3857d6d0f3eeae0df6ff272a4522e65e218ea2ca9b270cdc2fd2a2d18eaf8a44c56a82e1374f7188447686e3"}, 0xc4) gettid() 4.281774886s ago: executing program 0 (id=6542): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x300, @mcast1, 0x40000}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000029c0)={r3, @in={{0x2, 0x4e24, @empty}}, 0x7, 0x3, 0xb9, 0x9, 0x80, 0x2, 0x5}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r5 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007110af00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@deltaction={0x14, 0x31, 0x200, 0x70bd29, 0x4}, 0x14}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtfilter={0x48, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}}, @TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @rand_addr=0x64010100}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r5, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004054}, 0x4000044) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r7 = socket(0x10, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000001300)=@newtfilter={0x48, 0x2c, 0xd27, 0x30bd22, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0xfff2, 0xf}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x6, 0x3}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x48}}, 0x4c800) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=""/52, 0x34) 3.952170507s ago: executing program 0 (id=6544): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1802"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0xd2e7, 0x2) ioctl$vim2m_VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000140)=0x1) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r4) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) read$char_usb(r5, &(0x7f0000000300)=""/107, 0x6b) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x1c, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x80) read$char_usb(r5, &(0x7f00000001c0)=""/238, 0xee) r7 = socket(0x2, 0x3, 0xff) bind$inet(r7, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r7, &(0x7f00000001c0)={&(0x7f0000000240)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000180)=[{&(0x7f00000004c0)=""/250, 0xfa}], 0x1, 0x0, 0x0, 0x4c880}, 0x48800) getsockopt$PNPIPE_HANDLE(r7, 0x113, 0x3, &(0x7f0000000180), &(0x7f0000000380)=0x4) syz_usb_ep_write(r4, 0x81, 0x1, &(0x7f00000002c0)='(') ioctl$sock_SIOCETHTOOL(r2, 0x8946, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0700000000000000000005000000180001801402020073797a5f74756e007e058a5b6a2e18835d8b7b6532f977b70000000000000000180003800800040000000000080002000900000004000100"], 0x44}}, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f00000000c0)=0x4040, 0x4) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r2, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xe}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x48c00}, 0x80001) 2.309754583s ago: executing program 8 (id=6516): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r1, &(0x7f0000000340)="703a732f5f202e2f66696c65303a30f598a24f5aa26e5fae28ebad", 0x1b) open(0x0, 0x18d03e, 0x0) open(&(0x7f00000004c0)='./bus\x00', 0xc2802, 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20400, 0xfa) r3 = openat(r2, &(0x7f0000000180)='./file2\x00', 0x143042, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5405, 0x0, 0x2) copy_file_range(r3, &(0x7f0000000000)=0x3ff, r3, 0x0, 0x6, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x20, 0x1402, 0x420, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004801}, 0x0) 2.179742531s ago: executing program 8 (id=6549): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x8000200, 0x807c2, 0x41544b65, 0x0, 0x20425, 0x10004, 0x3, 0x2, 0xfeedcafe, 0x3, 0x2, 0x1}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = socket$inet(0x2, 0xa, 0x4) r2 = fcntl$dupfd(r1, 0x406, r1) r3 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, r3, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r3, 0x5386, &(0x7f0000000040)) syz_ublk_add_dev(r2, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2e, 0x2, 0x0, r2, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x3, 0x90b, 0x0, 0x0, 0x1000, 0x8, 0xffffffffffffffff, 0x0, 0x80}}}, &(0x7f0000000280)) r4 = syz_io_uring_setup(0x6b47, &(0x7f0000000340)={0x0, 0x38bd, 0x80, 0x0, 0x19d, 0x0, r2}, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r5 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) r6 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x5, 0x50}, &(0x7f0000000100)=0x0, 0x0, &(0x7f0000000180)=0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, 0x0, r8, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x4d2c11947fe9151f, {0x0, r9}}) syz_ublk_setup_queues(r5, 0x0, &(0x7f0000019080)={0x0, 0x5ec8, 0x1, 0x2, 0x10d, 0x0, r5}, &(0x7f0000019180)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2067, 0x8000, 0x3, 0x17, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xce5e, 0x10, 0x2, 0x71, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xecae, 0x200, 0x1, 0x11a, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88d9, 0x800, 0x1, 0x186, 0x0, r5}}], 0x4, &(0x7f000001a400)={0x2e, 0x20, 0x0, r5, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x44}, 0x0, r9, '\x00', {0x4, 0x32d, 0x0, &(0x7f0000019400)=@buf_max_buf="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"}}, &(0x7f000001a480)) syz_ublk_setup_queues(r2, 0x0, &(0x7f00000002c0)={0x0, 0x2f8a, 0x20000, 0x103, 0x100, 0x0, r2}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xde4f, 0x4, 0x0, 0x2d8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa499, 0x80, 0x3, 0x1a4, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcd, 0x800, 0x1, 0xea, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa828, 0x8, 0x0, 0x266, 0x0, r2}}], 0x4, &(0x7f0000001700)={0x2e, 0x10, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x4}, 0x0, r9, '\x00', {0x4, 0xeb4, 0x0, &(0x7f0000000700)=@buf_4k="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"}}, &(0x7f0000001780)) r10 = socket$inet_sctp(0x2, 0x1, 0x84) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000017c0)=ANY=[@ANYBLOB="440000001000030c00"/20, @ANYRES32=0x0, @ANYBLOB="fd0b93342c8399e87f1deff10000000000000000240012800b00010065727370616e0000140002800500160000000000080007007f000001"], 0x44}}, 0x0) sendmmsg$inet_sctp(r10, &(0x7f00000005c0)=[{&(0x7f0000003080)=@in={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f00000030c0)=[{&(0x7f0000005d00)="ec", 0x1}], 0x1, 0x0, 0x0, 0x90}], 0x1, 0x1) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r10, 0x84, 0x1e, &(0x7f00000006c0)=0x6, 0x4) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r10, 0x84, 0x1e, &(0x7f0000000040), &(0x7f0000000140)=0x4) write$binfmt_elf64(r2, 0x0, 0x540) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES16, @ANYRES16], 0x0) r12 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) ioctl$EVIOCSKEYCODE_V2(r12, 0x40284504, &(0x7f0000004e40)={0xfb, 0x11, 0x0, 0x98, "4d512c91002a4950676142687108dcd3f82acf5a895bd90fca2bb40bb4fbf29c"}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x6}) ioctl(r13, 0x8b22, &(0x7f0000000040)) 2.063883118s ago: executing program 7 (id=6550): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0xbc0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x50) 1.976165831s ago: executing program 7 (id=6551): r0 = mq_open(&(0x7f0000000040)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fc1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3\x00\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x1, 0x1f0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0xbf, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r1) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/net/lo/ifindex\x00', 0x0, 0x0) read(r4, &(0x7f0000000500)=""/100, 0x64) (async, rerun: 32) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async, rerun: 32) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r5 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) (async, rerun: 32) io_uring_enter(r5, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) (async, rerun: 32) sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000fedbdf252b0000000c00050000000000000000000001007770612e3000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x4800) (async) syz_emit_ethernet(0x4e, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60cb289100182b00fe8000000000000000000000000000bbfe8000000000000000000000000000aa3b0000000018907804000000000000000104000000000000b20e7cf7ee8137119b0414e0da6f3c531260779ceda818d25be87302aa91f857c1d72e9a4ab60e89820993"], 0x0) setpriority(0x0, 0xffffffffffffffff, 0x0) (async) r6 = eventfd2(0x5, 0x800) write$eventfd(r6, &(0x7f0000000000)=0xffffffffffffffff, 0x8) r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r7, &(0x7f0000000700)='/dev/loop0,65', 0xd) (async) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r7, 0xc0884123, &(0x7f0000000400)={0x0, "07778710af4d1ef97be7c27713117f5d6f1560dc899a8165c68c656dcb27db5d4a8aefd8dc461a1a1f4e2147fe25bf1f61a5559d760c10fae8f88b98f75ccf2b", {0x6, 0x3}}) (async) mq_unlink(&(0x7f0000000000)='eth0\x00') (async, rerun: 64) close(r0) (rerun: 64) r8 = syz_open_dev$amidi(&(0x7f00000004c0), 0xfffffffd, 0x101000) fstat64(r8, &(0x7f0000000640)) 1.884301045s ago: executing program 7 (id=6552): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x18, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 1.880715373s ago: executing program 7 (id=6553): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x51}}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sendto$inet6(r5, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000005bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000013c0)="fe", 0x1}], 0x1}}], 0x2, 0xc00cc44) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000005c0), r6) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)={0x3c, r7, 0x603, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x808}, 0x24040090) syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x50) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004ec0)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x70bd2b, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1.431279441s ago: executing program 0 (id=6555): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f0000000000)={0x2, 0x2}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) write(r1, &(0x7f0000000200)="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", 0xfd) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) connect$x25(0xffffffffffffffff, &(0x7f0000000100), 0x12) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x7fff, 0x8008, 0x84, 0x4, 0x65, 0x8, 0x89c4}, 0x20) sendto$inet6(r0, &(0x7f00000004c0)="b0", 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)='\x00', 0x1, 0xc000, 0x0, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000300)={0x24, r3, 0x831b97362602f4f3, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_RULES={0x8, 0x22, 0x0, 0x1, [{0x57}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000841}, 0x4004000) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(0xffffffffffffffff, &(0x7f00000083c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, r4, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="7001000000000000f9ffffffffffffff03000000000000000100000000000000070000000000000004c60000000000000400000009000000000000000000000000000000000000000500000000000000670c0000000000000200000000000000030000000000000004000000a4000000010000000020000007000000", @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="f9ffffff01000000000000000000000000000000fefffffffbffffff19000000ffff00005fd211d83fbed8dd6634610b131853628fe31bdaf92c07c8790000000000000002000000000000000100000000000000f4ffffffffffffff0c0c000000000000010000000400000002000000000000000f805f21000000000800000000000000fddc00000000000004000000000000000000000001000000050000009a0000000000000043a4ea1d06000000", @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="04000000ac000000000000000600000000000000000400e5ff0000000a0000000c00a67365a8ade9f3000000000000000000000000000008000000"], 0x0, 0x0, 0x0}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000002bc0)={'\x00', 0x6, 0x5, 0x4, 0x80, 0xf}) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setreuid(r8, 0x0) getresgid(&(0x7f0000002c00), &(0x7f0000002c40), &(0x7f0000002c80)) getpid() msgrcv(0x0, 0x0, 0x2000, 0x1, 0x5800) 1.387220295s ago: executing program 3 (id=6556): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.285109849s ago: executing program 0 (id=6557): setns(0xc9, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') readv(r0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/125, 0x7d}], 0x1) (fail_nth: 1) 1.282819429s ago: executing program 3 (id=6558): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback, 0x8001}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0xfffffffc, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x3, 0x0, 0x0, 0x1, 0x89f, 0x8, 0x1]}}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd0, &(0x7f0000000340)=0x6, 0x4) 1.247170749s ago: executing program 3 (id=6559): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) socket$alg(0x26, 0x5, 0x0) r0 = fsopen(&(0x7f00000002c0)='ntfs3\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) 1.189610139s ago: executing program 0 (id=6560): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) socket$alg(0x26, 0x5, 0x0) r0 = fsopen(&(0x7f00000002c0)='ntfs3\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) (fail_nth: 2) 1.189309101s ago: executing program 0 (id=6561): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) r1 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)={0x11}) r2 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r2, 0x110, 0x4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xc4c4) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x800448d2, &(0x7f0000000680)={0x1, &(0x7f0000000400)=[{@fixed}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write$binfmt_misc(r4, &(0x7f0000000240)="1ca2fbfc54a2", 0x6) write(r1, &(0x7f00000004c0)="33bd1982554eb1b6efac06f2920c25602ec4322b63c18bc2d9b85049c2ce0b58358c0061086b2bffdf859da8fb43b92fcd9eacbbdec759e7151c94b46e1894f6511de787da69f2cba47f1f58f6446520d37c7e68b2b4b21fa385b18f9a8322d1f6541f3dca86a73cb82e1927183bd40e3adfe2b0270ef6e640561ad489a4d3a320f81128dadf0002697fae6e88b0a5c5c0bcdd8f038bc00b555868f0ab8da03e90e6bfb32dc30093d57e8b1f721e8284809ba4895bde13f0bba6000000000000000000", 0xc3) userfaultfd(0x801) close(0x3) 1.18329126s ago: executing program 3 (id=6562): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0xa}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x991c}]}}]}, 0x44}}, 0x0) (fail_nth: 2) 1.07053961s ago: executing program 3 (id=6563): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x1c}}, 0x0) syz_usb_connect$uac2(0x4, 0xd4, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0xb05, 0x17a0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc2, 0x3, 0x1, 0x0, 0x0, 0x4, {0x8, 0xb, 0x1, 0x0, 0x1, 0x2, 0x20, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x0, 0x3, 0xe, 0x1}, [@mixer_unit={0x5, 0x24, 0x4, 0x2, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x0, 0x7, 0x7, 0xc1}, @as_header={0x10, 0x24, 0x1, 0x1, 0x8, 0x2, 0x0, 0x8, 0x8, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x9, 0x5, 0x0, {0x8, 0x25, 0x1, 0x2, 0xf, 0x4, 0xc}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x2, 0x4, 0x2, 0x0, 0x45, 0x0, 0x9}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x76, 0x2, 0x5, 0x8, 0x5}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xa7, 0x9, 0xc, 0x8}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x0, 0x2, 0x3, 0x7f, "faccb6e41f54"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x6, 0x4, 0x7, 0x3, "", 'i'}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x0, 0x74, 0x6, {0x8, 0x25, 0x1, 0x80, 0x0, 0x3, 0x5}}}}}}}}]}}, &(0x7f0000001240)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x110, 0x0, 0x9, 0x0, 0x8, 0x2}, 0x5, &(0x7f0000000300)={0x5, 0xf, 0x5}, 0x4, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x41d}}, {0x4, &(0x7f0000001180)=@lang_id={0x4, 0x3, 0x100a}}, {0x4, &(0x7f00000011c0)=@lang_id={0x4, 0x3, 0x4c0a}}, {0x4, &(0x7f0000001200)=@lang_id={0x4, 0x3, 0x2009}}]}) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) unshare(0x200) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r3) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0b06000000000000000030000000050036000000000008000200", @ANYRES32=r5, @ANYBLOB="0500350000000000050033"], 0x3c}}, 0x0) unshare(0x4a000600) r7 = socket(0xf, 0x2, 0x80000001) shutdown(r7, 0x1) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x14, 0x0, 0x1, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20008080}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/3344], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="b907ef23f66a54f05c13e5f0888e", 0x0, 0x0, 0x18000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000012c0), r7) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x200, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r12, {0xffe0}, {0x1d, 0xa}, {0x10, 0xc}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x2, 0x9, 0x4, 0xfffff801, 0x10001, 0x20000000}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x57d, 0x10000}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240408a0}, 0x4890) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000001300)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r7, &(0x7f0000001880)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x44100000}, 0xc, &(0x7f0000001840)={&(0x7f0000001340)={0x494, r10, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xc8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xac, 0x3, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa1b}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfd78}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x661}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0x15, 0x5, "ee3e3fc0ed799b709fea5e813287affa30"}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x324, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x101}, @ETHTOOL_A_BITSET_MASK={0x4d, 0x5, "7e33ded82e902950026aa2517caa209eb34136732d59852b0ff81e771903a0b9e8e5fbdf07f24a1bba8faea930397bccea9abe3d233263e60c9e427aa02888cd3e4a0c78ebec0a9126"}, @ETHTOOL_A_BITSET_MASK={0x36, 0x5, "7854c1de6644cdbdb77047de05f51b7979238152e013544bf304241aa7de8c321aafc05e8d7f4c3530aac878c83118e57dfb"}, @ETHTOOL_A_BITSET_VALUE={0xf1, 0x4, "75d26431f1106f7ae59b560e51aec1eb20bf2195d9dcc6c05e36828beb6c7bc408fa4e2b2e37f4bc5c209d4355916642b1a89f46e8a744a9262fed32e02d1f5626e3f82d1c2af35cbbaec5e369c8b88395fb4655e16eb2b127ecf8f72c12106849bc4fa61591aaf78ff1e30aa5f91b5a35bfa29c29f564c0f1598e8fae3c0531c7ee082106b7257ec3ea8b2549ae35db2aaea7839a8a36d4f75cb7ae9053c67122db3aa7c742d009056911a1b19400b30b992e69fd29f1355091ad3163447afb3741aa089e81897c26e7421f5697b27a631487eb7c080330cf5aede3c52bef2de79fa2c8822b3b2acd894cc32d"}, @ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4}]}, @ETHTOOL_A_BITSET_BITS={0x74, 0x3, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb}]}, {0x4}]}, @ETHTOOL_A_BITSET_BITS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ':\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x84}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x73}]}]}, @ETHTOOL_A_BITSET_VALUE={0xd6, 0x4, "fb5ac51a4ee6c0027cceb7d9682628a1e3109060101fb11b3de0be1ae185cbf513b3842bca20fe4959c557affe6783339fda213b932a0c1630998ac0b782bd2a494523c946a81f088f397424bead71e1c37f84c2583d6888852ef73005aa90eafcdb24c5f2b6476f242893fba1581827103ed5b9e3e134b822a2ee6dffeaf694610521cf3d73a79083aa2260832c8157762d7eda241d82978d1eb2d483f08ff6c22c35a0d6cb8471f0984c34d29c4900c71736a2930d5d327e77f92814bb92cb98d5dc2662bfa69c33226c7303d39558b5e9"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}]}, 0x494}, 0x1, 0x0, 0x0, 0x8040}, 0x1) write$binfmt_misc(r9, &(0x7f0000000000), 0xd) syz_emit_vhci(&(0x7f00000018c0)=ANY=[@ANYBLOB="0470116b6061b834f31adf798cc2ccd620424c8966339c745b143a7506e80281857503e6851899105584d350985423f6a8008a33afebea2e1ef5a64bc8002951074fca1a734cb8652252f44c9a0278cb8ae1359b78d43101d310483be3aee1129ce1902ec0bcfb4c6218c4db2c6c04fc38c612d06e2848fc23c847919d2e2384f59d90e5d2bca9ff03fa7487f6f4833e486ed712b8901685d7a08a535fb1cf129ace8f5cdfd74cc6e96433086eb629de37ef9041aabb53b7e453f2ca6597feffb135dbe599cd606a2cf8d92c843eef5d0afaab73a2754fb61fe29f58961c7a0000"], 0x8) 957.728509ms ago: executing program 7 (id=6564): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x1000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8, 0x40]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x3, 0x0, 0x0, 0x1, 0x89f, 0x8, 0x1]}}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd0, &(0x7f0000000340)=0x6, 0x4) 820.753542ms ago: executing program 7 (id=6565): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406a053b030000000000010902220001010080320904000001030000000921110100012217000705810340"], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101302, 0x0) syz_open_dev$loop(0x0, 0x401, 0x145981) syz_open_dev$sndctrl(0x0, 0x0, 0x183582) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000e40)=@filter={'filter\x00', 0x4, 0x4, 0x34c, 0xffffffff, 0x0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @loopback, [0xffffffff, 0xffffff00, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0x0, 0xffffff00], 'geneve0\x00', 'sit0\x00', {}, {0xff}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa4, 0xd4}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x3, 0x3}, {0xffffffffffffffff, 0x3, 0x1}, 0x9, 0xfffeffff}}}, {{@ipv6={@private2, @dev={0xfe, 0x80, '\x00', 0x23}, [0x0, 0x0, 0x0, 0xffffffff], [0xffffffff, 0x0, 0xff000000, 0x1ffffff01], 'sit0\x00', 'batadv_slave_1\x00', {0xff}, {}, 0x34}, 0x0, 0xa4, 0xe4}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x20, 0x0, {0x2000010}}}}, {{@uncond, 0x0, 0xa4, 0xcc}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x3, 0x2}, {0x0, 0x4}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3a8) r2 = socket$inet6(0xa, 0x802, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, 0x0, 0x20000000) ptrace(0x10, 0x0) ptrace$pokeuser(0x6, 0x0, 0x118, 0x8137da) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, 0x0, 0x40) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, &(0x7f0000000440)='./dev\x00', &(0x7f0000000480)='devtmpfs\x00', 0x0, 0x0) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000100)={0x4}) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000180)={0x4}) r6 = openat$binderfs(0xffffff9c, &(0x7f0000000080)='./binderfs2/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0xd0, 0x0, &(0x7f0000000300)=[@clear_death={0x400c630f, 0x1}, @increfs_done, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x50, 0x0, &(0x7f00000000c0)={@fda={0x66646185, 0x8, 0x0, 0xf}, @flat=@weak_binder={0x77622a85, 0x101}, @fd}, 0x0}, 0x1440}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000200)={@fda={0x66646185, 0x8, 0x2, 0x1c}, @fda={0x66646185, 0x6, 0x2, 0x40}, @fd={0x66642a85, 0x0, r6}}, &(0x7f00000002c0)={0x0, 0x1c, 0x38}}, 0x1000}, @acquire_done={0x40106309, 0x2}], 0xa, 0x0, &(0x7f0000000400)="c2a16573245e21b95cfa"}) syz_usb_control_io$hid(r0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000004380)=[{{&(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f0000000640)=""/31, 0x1f}, {&(0x7f0000000680)=""/34, 0x22}], 0x3, &(0x7f0000000700)=""/163, 0xa3}, 0x7}, {{&(0x7f00000007c0)=@in={0x2, 0x0, @empty}, 0x80, 0x0, 0x0, &(0x7f0000000b80)=""/150, 0x96}, 0x82}, {{&(0x7f0000000c40)=@x25={0x9, @remote}, 0x80, &(0x7f0000001580)=[{&(0x7f0000000cc0)=""/2, 0x2}, {&(0x7f0000000d00)=""/221, 0xdd}, {&(0x7f0000001200)=""/233, 0xe9}, {&(0x7f0000001300)=""/188, 0xbc}, {&(0x7f00000013c0)=""/32, 0x20}, {&(0x7f0000001400)=""/127, 0x7f}, {&(0x7f0000001480)=""/232, 0xe8}], 0x7, &(0x7f00000015c0)=""/229, 0xe5}, 0x8}, {{&(0x7f00000016c0)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000001880)=[{&(0x7f0000001740)=""/220, 0xdc}, {&(0x7f0000001840)=""/4, 0x4}], 0x2, &(0x7f00000018c0)=""/12, 0xc}, 0xe2}, {{&(0x7f0000001900)=@caif=@rfm, 0x80, &(0x7f0000001f00)=[{&(0x7f0000001980)=""/148, 0x94}, {&(0x7f0000001a40)=""/108, 0x6c}, {&(0x7f0000001ac0)=""/140, 0x8c}, {&(0x7f0000001b80)=""/2, 0x2}, {&(0x7f0000001bc0)=""/148, 0x94}, {&(0x7f0000001c80)=""/199, 0xc7}, {&(0x7f0000001d80)=""/118, 0x76}, {&(0x7f0000001e00)=""/48, 0x30}, {&(0x7f0000001e40)=""/139, 0x8b}], 0x9}, 0x6}, {{&(0x7f0000001f80)=@hci, 0x80, &(0x7f0000003080)=[{&(0x7f0000002000)=""/114, 0x72}, {&(0x7f0000002080)=""/4096, 0x1000}], 0x2, &(0x7f00000030c0)=""/121, 0x79}, 0xbbf}, {{0x0, 0x0, &(0x7f0000003340)=[{&(0x7f0000003140)=""/247, 0xf7}, {&(0x7f0000003240)=""/198, 0xc6}], 0x2, &(0x7f0000003380)=""/4096, 0x1000}, 0xea}], 0x7, 0x0, &(0x7f00000044c0)) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022170000000600ff0901a10185020901150026ff0075089509"], 0x0}, 0x0) 0s ago: executing program 3 (id=6566): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) kernel console output (not intermixed with test programs): ffe00000d8000 CS:RIP=0010:ffffffff81001e70 [ 1390.221496][T30858] kvm_intel: EFER= 0x0000000000000d01 [ 1390.221514][T30858] kvm_intel: PAT = 0x0407050600070106 [ 1390.221532][T30858] kvm_intel: *** Control State *** [ 1390.221538][T30858] kvm_intel: CPUBased=0xb5986dfa SecondaryExec=0x000000e2 TertiaryExec=0x0000000000000000 [ 1390.221548][T30858] kvm_intel: PinBased=0x0000007f EntryControls=0000d1ff ExitControls=002befff [ 1390.221578][T30858] kvm_intel: ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1390.221592][T30858] kvm_intel: VMEntry: intr_info=80000090 errcode=00000000 ilen=00000000 [ 1390.221604][T30858] kvm_intel: VMExit: intr_info=00000000 errcode=00000000 ilen=00000001 [ 1390.221615][T30858] kvm_intel: reason=80000021 qualification=0000000000000000 [ 1390.221624][T30858] kvm_intel: IDTVectoring: info=00000000 errcode=00000000 [ 1390.221643][T30858] kvm_intel: TSC Offset = 0xfffffcb526facac0 [ 1390.221662][T30858] kvm_intel: EPT pointer = 0x0000000057a2805e [ 1390.221680][T30858] kvm_intel: Virtual processor ID = 0x0001 [ 1390.229397][T28109] Bluetooth: Frame is too long (len 18, expected len 4) [ 1390.287783][T30841] wg2 speed is unknown, defaulting to 1000 [ 1390.562844][ T44] audit: type=1800 audit(1788143064.417:10965): pid=30878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6429" name="UDC" dev="configfs" ino=197741 res=0 errno=0 [ 1390.755864][T14890] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1390.888793][ T44] audit: type=1800 audit(1788143064.747:10966): pid=30741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="new_device" dev="sysfs" ino=26902 res=0 errno=0 [ 1390.912387][ T44] audit: type=1800 audit(1788143064.767:10967): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=3115518 res=0 errno=0 [ 1390.955476][T28109] Bluetooth: hci0: command tx timeout [ 1390.955546][T28109] Bluetooth: hci2: command tx timeout [ 1390.969145][T14890] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1391.018783][T30623] veth0_vlan: entered promiscuous mode [ 1391.024109][T30623] veth1_vlan: entered promiscuous mode [ 1391.099301][T14890] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1391.194035][T30623] veth0_macvtap: entered promiscuous mode [ 1391.223498][T30623] veth1_macvtap: entered promiscuous mode [ 1391.254008][T14890] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1391.327272][ T44] audit: type=1800 audit(1788143065.187:10968): pid=26722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=3116958 res=0 errno=0 [ 1391.337292][ T44] audit: type=1800 audit(1788143065.197:10969): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=3116969 res=0 errno=0 [ 1391.339622][ T5738] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1391.360227][ T5738] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1391.364936][ T5738] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1391.365831][ T5738] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1391.366648][ T5738] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1391.382848][T30841] bridge0: port 1(bridge_slave_0) entered blocking state [ 1391.384583][T30841] bridge0: port 1(bridge_slave_0) entered disabled state [ 1391.384998][T30841] bridge_slave_0: entered allmulticast mode [ 1391.387686][T30841] bridge_slave_0: entered promiscuous mode [ 1391.392928][T30841] bridge0: port 2(bridge_slave_1) entered blocking state [ 1391.397570][ T44] audit: type=1800 audit(1788143065.247:10970): pid=26722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=3117403 res=0 errno=0 [ 1391.406462][T30841] bridge0: port 2(bridge_slave_1) entered disabled state [ 1391.406683][T30841] bridge_slave_1: entered allmulticast mode [ 1391.408009][T30841] bridge_slave_1: entered promiscuous mode [ 1391.425052][ T44] audit: type=1800 audit(1788143065.287:10971): pid=26722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=3117488 res=0 errno=0 [ 1391.510964][T30623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1391.525775][T30741] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1391.537906][T30741] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1391.538835][T30741] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1391.543754][T30741] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1391.554159][T30841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1391.560008][T30841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1391.563591][T30623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1391.565364][T30741] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1391.577409][T30741] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1391.595885][T30741] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1391.601580][T30741] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1391.610668][T30841] team0: Port device team_slave_0 added [ 1391.618699][T30841] team0: Port device team_slave_1 added [ 1391.656440][T30841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1391.656493][T30841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1391.656543][T30841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1391.657475][T30841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1391.657483][T30841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1391.657497][T30841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1391.715173][T15558] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1391.715266][T15558] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1391.728342][ T44] audit: type=1800 audit(1788143065.587:10972): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=3118700 res=0 errno=0 [ 1391.744650][T28109] Bluetooth: hci1: command tx timeout [ 1391.843434][T30841] hsr_slave_0: entered promiscuous mode [ 1391.844615][T30841] hsr_slave_1: entered promiscuous mode [ 1391.845195][T30841] debugfs: 'hsr0' already exists in 'hsr' [ 1391.845213][T30841] Cannot create hsr debugfs directory [ 1391.882156][ T228] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1391.882207][ T228] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1391.922263][T30899] wg2 speed is unknown, defaulting to 1000 [ 1391.942874][T18226] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1391.942936][T18226] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1391.993363][T30741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1392.030355][T30741] 8021q: adding VLAN 0 to HW filter on device team0 [ 1392.038544][T18226] bridge0: port 1(bridge_slave_0) entered blocking state [ 1392.038617][T18226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1392.073094][T18226] bridge0: port 2(bridge_slave_1) entered blocking state [ 1392.073167][T18226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1392.306004][ T5789] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1392.395606][T15558] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1392.608136][T30899] bridge0: port 1(bridge_slave_0) entered blocking state [ 1392.608327][T30899] bridge0: port 1(bridge_slave_0) entered disabled state [ 1392.608439][T30899] bridge_slave_0: entered allmulticast mode [ 1392.609943][T30899] bridge_slave_0: entered promiscuous mode [ 1392.612551][T30899] bridge0: port 2(bridge_slave_1) entered blocking state [ 1392.612673][T30899] bridge0: port 2(bridge_slave_1) entered disabled state [ 1392.612767][T30899] bridge_slave_1: entered allmulticast mode [ 1392.614110][T30899] bridge_slave_1: entered promiscuous mode [ 1392.645217][T30899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1392.647994][T30899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1392.689614][T30899] team0: Port device team_slave_0 added [ 1392.696260][T30899] team0: Port device team_slave_1 added [ 1392.701642][T30741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1392.740559][T30899] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1392.742952][T30899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1392.742973][T30899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1392.743980][T30899] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1392.743989][T30899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1392.744003][T30899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1392.799102][T30899] hsr_slave_0: entered promiscuous mode [ 1392.802032][T30899] hsr_slave_1: entered promiscuous mode [ 1392.804989][T30899] debugfs: 'hsr0' already exists in 'hsr' [ 1392.805047][T30899] Cannot create hsr debugfs directory [ 1392.965261][ T5738] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1392.983537][ T5738] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1393.008388][ T5738] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1393.013949][ T5738] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1393.018950][ T5738] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1393.034756][T28109] Bluetooth: hci2: command tx timeout [ 1393.251224][T14890] bridge_slave_1: left allmulticast mode [ 1393.251294][T14890] bridge_slave_1: left promiscuous mode [ 1393.251502][T14890] bridge0: port 2(bridge_slave_1) entered disabled state [ 1393.259547][T14890] bridge_slave_0: left allmulticast mode [ 1393.259625][T14890] bridge_slave_0: left promiscuous mode [ 1393.260150][T14890] bridge0: port 1(bridge_slave_0) entered disabled state [ 1393.409641][T14890] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1393.415203][T14890] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1393.420052][T14890] bond0 (unregistering): Released all slaves [ 1393.434575][T28109] Bluetooth: hci3: command tx timeout [ 1393.520503][T30741] veth0_vlan: entered promiscuous mode [ 1393.528444][ T5450] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1393.529829][T30741] veth1_vlan: entered promiscuous mode [ 1393.578580][T30741] veth0_macvtap: entered promiscuous mode [ 1393.581656][T30741] veth1_macvtap: entered promiscuous mode [ 1393.645845][T30741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1393.741593][T30741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1393.743941][ T5450] 8021q: adding VLAN 0 to HW filter on device eth26 [ 1393.765742][T30957] wg2 speed is unknown, defaulting to 1000 [ 1393.825998][T28109] Bluetooth: hci1: command tx timeout [ 1393.826259][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1393.826825][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1393.827110][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1393.964291][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1393.987055][T18265] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1393.987124][T18265] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1394.003006][ T5450] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1394.015727][T18226] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1394.015766][T18226] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1394.097006][ T5450] 8021q: adding VLAN 0 to HW filter on device eth27 [ 1394.335374][ T9] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 1394.382231][T14890] hsr_slave_0: left promiscuous mode [ 1394.392030][T14890] hsr_slave_1: left promiscuous mode [ 1394.395061][T14890] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1394.398239][T14890] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1394.402403][T14890] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1394.402470][T14890] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1394.408771][T14890] veth1_macvtap: left promiscuous mode [ 1394.408894][T14890] veth0_macvtap: left promiscuous mode [ 1394.408993][T14890] veth1_vlan: left promiscuous mode [ 1394.412790][T14890] veth0_vlan: left promiscuous mode [ 1394.501165][ T9] usb 11-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 1394.505421][ T9] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1394.505472][ T9] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1394.602475][T14890] team0 (unregistering): Port device team_slave_1 removed [ 1394.611456][T14890] team0 (unregistering): Port device team_slave_0 removed [ 1394.905820][T30957] bridge0: port 1(bridge_slave_0) entered blocking state [ 1394.905908][T30957] bridge0: port 1(bridge_slave_0) entered disabled state [ 1394.905972][T30957] bridge_slave_0: entered allmulticast mode [ 1394.906710][T30957] bridge_slave_0: entered promiscuous mode [ 1394.908482][T30957] bridge0: port 2(bridge_slave_1) entered blocking state [ 1394.908525][T30957] bridge0: port 2(bridge_slave_1) entered disabled state [ 1394.908581][T30957] bridge_slave_1: entered allmulticast mode [ 1394.909257][T30957] bridge_slave_1: entered promiscuous mode [ 1395.052838][T30957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1395.067457][T30957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1395.104325][T28109] Bluetooth: hci0: command tx timeout [ 1395.105471][T28109] Bluetooth: hci2: command tx timeout [ 1395.107424][T30957] team0: Port device team_slave_0 added [ 1395.108850][T30957] team0: Port device team_slave_1 added [ 1395.126186][ T9] wacom 0003:056A:033B.00AD: unknown main item tag 0x0 [ 1395.128981][ T9] wacom 0003:056A:033B.00AD: unknown main item tag 0x0 [ 1395.131731][ T9] wacom 0003:056A:033B.00AD: unknown main item tag 0x0 [ 1395.135471][ T44] kauditd_printk_skb: 40 callbacks suppressed [ 1395.135558][ T44] audit: type=1800 audit(1788143068.997:11013): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=3136764 res=0 errno=0 [ 1395.145447][ T9] wacom 0003:056A:033B.00AD: unbalanced collection at end of report description [ 1395.147472][ T44] audit: type=1800 audit(1788143069.007:11014): pid=30841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="new_device" dev="sysfs" ino=26902 res=0 errno=0 [ 1395.159864][ T9] wacom 0003:056A:033B.00AD: parse failed [ 1395.162885][ T9] wacom 0003:056A:033B.00AD: probe with driver wacom failed with error -22 [ 1395.303757][T30957] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1395.303831][T30957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1395.303876][T30957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1395.308014][T30957] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1395.308027][T30957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1395.308049][T30957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1395.359861][T30957] hsr_slave_0: entered promiscuous mode [ 1395.360773][T30957] hsr_slave_1: entered promiscuous mode [ 1395.361170][T30957] debugfs: 'hsr0' already exists in 'hsr' [ 1395.361183][T30957] Cannot create hsr debugfs directory [ 1395.386173][T30303] usb 11-1: USB disconnect, device number 3 [ 1395.533350][ T5738] Bluetooth: hci3: command tx timeout [ 1395.548295][T14890] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1395.689631][T14890] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1395.784727][ T44] audit: type=1800 audit(1788143069.647:11015): pid=30957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=26903 res=0 errno=0 [ 1395.817638][T14890] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1395.875270][ T44] audit: type=1800 audit(1788143069.737:11016): pid=30899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="new_device" dev="sysfs" ino=26902 res=0 errno=0 [ 1395.878797][ T44] audit: type=1800 audit(1788143069.737:11017): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=3139038 res=0 errno=0 [ 1395.913180][ T5738] Bluetooth: hci1: command tx timeout [ 1395.938591][T14890] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1395.970970][ T44] audit: type=1800 audit(1788143069.817:11018): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16180 res=0 errno=0 [ 1396.081505][T30841] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1396.110208][T30841] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1396.111520][T30841] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1396.125093][T30841] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1396.162697][ T44] audit: type=1800 audit(1788143070.017:11019): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=3139399 res=0 errno=0 [ 1396.164536][ T44] audit: type=1800 audit(1788143070.027:11020): pid=26722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=3139404 res=0 errno=0 [ 1396.165511][ T44] audit: type=1800 audit(1788143070.027:11021): pid=26722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=3139408 res=0 errno=0 [ 1396.166240][ T44] audit: type=1800 audit(1788143070.027:11022): pid=26722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=3139407 res=0 errno=0 [ 1396.227566][T30841] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1396.233110][T30841] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1396.233688][T30841] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1396.241893][T30841] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1396.531340][T14890] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1396.630553][ T5450] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1396.666034][T14890] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1396.701019][T30841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1396.705003][ T5450] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1396.741383][T14890] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1396.757464][T30841] 8021q: adding VLAN 0 to HW filter on device team0 [ 1396.760757][ T228] bridge0: port 1(bridge_slave_0) entered blocking state [ 1396.760836][ T228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1396.769084][ T228] bridge0: port 2(bridge_slave_1) entered blocking state [ 1396.769262][ T228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1396.856887][T14890] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1396.861647][ T5450] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1396.880152][ T5450] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1397.015103][T14890] bridge_slave_1: left allmulticast mode [ 1397.015144][T14890] bridge_slave_1: left promiscuous mode [ 1397.015471][T14890] bridge0: port 2(bridge_slave_1) entered disabled state [ 1397.027961][T14890] bridge_slave_0: left allmulticast mode [ 1397.028019][T14890] bridge_slave_0: left promiscuous mode [ 1397.028342][T14890] bridge0: port 1(bridge_slave_0) entered disabled state [ 1397.046855][T28109] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1397.056770][T28109] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1397.059292][T28109] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1397.063254][T14890] bridge_slave_1: left allmulticast mode [ 1397.063330][T14890] bridge_slave_1: left promiscuous mode [ 1397.063508][T14890] bridge0: port 2(bridge_slave_1) entered disabled state [ 1397.070113][T28109] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1397.072862][T28109] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1397.073005][T14890] bridge_slave_0: left allmulticast mode [ 1397.073019][T14890] bridge_slave_0: left promiscuous mode [ 1397.073120][T14890] bridge0: port 1(bridge_slave_0) entered disabled state [ 1397.191091][T28109] Bluetooth: hci0: command tx timeout [ 1397.251241][T14890] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1397.258354][T14890] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1397.262486][T14890] bond0 (unregistering): Released all slaves [ 1397.350898][T14890] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1397.356582][T14890] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1397.360576][T14890] bond0 (unregistering): Released all slaves [ 1397.429769][ T5450] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1397.584320][T28109] Bluetooth: hci3: command tx timeout [ 1397.701320][T30841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1397.716627][ T5450] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1397.798924][T31065] wg2 speed is unknown, defaulting to 1000 [ 1397.813216][ T5450] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1397.873756][ T5450] 8021q: adding VLAN 0 to HW filter on device eth28 [ 1397.976768][T30841] veth0_vlan: entered promiscuous mode [ 1397.986589][T28109] Bluetooth: hci1: command tx timeout [ 1398.012696][T30841] veth1_vlan: entered promiscuous mode [ 1398.037784][T30841] veth0_macvtap: entered promiscuous mode [ 1398.059222][T30841] veth1_macvtap: entered promiscuous mode [ 1398.091025][T30841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1398.093222][T30841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1398.274650][T25123] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1398.284286][T25123] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1398.295570][T25123] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1398.347270][T18226] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1398.347334][T18226] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1398.444606][T15558] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1398.576399][T18262] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1398.576447][T18262] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1398.699035][T14890] hsr_slave_0: left promiscuous mode [ 1398.708342][T14890] hsr_slave_1: left promiscuous mode [ 1398.708805][T14890] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1398.708830][T14890] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1398.709458][T14890] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1398.709481][T14890] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1398.732090][T14890] hsr_slave_0: left promiscuous mode [ 1398.738108][T14890] hsr_slave_1: left promiscuous mode [ 1398.739016][T14890] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1398.739038][T14890] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1398.749584][T14890] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1398.749633][T14890] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1398.763684][T29822] hid-generic 0004:FFFFFFFF:0000.00AE: unknown main item tag 0x0 [ 1398.763731][T29822] hid-generic 0004:FFFFFFFF:0000.00AE: unknown main item tag 0x0 [ 1398.763780][T29822] hid-generic 0004:FFFFFFFF:0000.00AE: unknown main item tag 0x0 [ 1398.763807][T29822] hid-generic 0004:FFFFFFFF:0000.00AE: unknown main item tag 0x0 [ 1398.763834][T29822] hid-generic 0004:FFFFFFFF:0000.00AE: unknown main item tag 0x0 [ 1398.763919][T29822] hid-generic 0004:FFFFFFFF:0000.00AE: unknown main item tag 0x0 [ 1398.763946][T29822] hid-generic 0004:FFFFFFFF:0000.00AE: unknown main item tag 0x0 [ 1398.783799][T14890] veth1_macvtap: left promiscuous mode [ 1398.783824][T14890] veth0_macvtap: left promiscuous mode [ 1398.784634][T29822] hid-generic 0004:FFFFFFFF:0000.00AE: hidraw1: HID v0.00 Device [syz0] on syz0 [ 1398.785299][T14890] veth1_vlan: left promiscuous mode [ 1398.785370][T14890] veth0_vlan: left promiscuous mode [ 1398.787098][T31121] FAULT_INJECTION: forcing a failure. [ 1398.787098][T31121] name failslab, interval 1, probability 0, space 0, times 0 [ 1398.787120][T31121] CPU: 2 UID: 0 PID: 31121 Comm: syz.9.6425 Tainted: G L syzkaller #0 PREEMPT(full) [ 1398.787137][T31121] Tainted: [L]=SOFTLOCKUP [ 1398.787142][T31121] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1398.787149][T31121] Call Trace: [ 1398.787154][T31121] [ 1398.787159][T31121] dump_stack_lvl+0x100/0x190 [ 1398.787180][T31121] should_fail_ex.cold+0x5/0xa [ 1398.787201][T31121] should_failslab+0xc2/0x120 [ 1398.787217][T31121] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1398.787231][T31121] ? skb_clone+0x190/0x400 [ 1398.787248][T31121] skb_clone+0x190/0x400 [ 1398.787263][T31121] netlink_broadcast_filtered+0xb22/0xf20 [ 1398.787290][T31121] netlink_broadcast+0x39/0x50 [ 1398.787310][T31121] kobject_uevent_env+0xcdd/0x18b0 [ 1398.787327][T31121] ? bus_to_subsys+0x114/0x150 [ 1398.787347][T31121] device_del+0x605/0x9b0 [ 1398.787363][T31121] ? __pfx_device_del+0x10/0x10 [ 1398.787377][T31121] ? hidraw_disconnect+0x3e/0x60 [ 1398.787401][T31121] device_unregister+0x1d/0xe0 [ 1398.787415][T31121] device_destroy+0x99/0xe0 [ 1398.787428][T31121] ? __pfx_device_destroy+0x10/0x10 [ 1398.787441][T31121] ? down_write+0x146/0x1f0 [ 1398.787458][T31121] ? __pfx_down_write+0x10/0x10 [ 1398.787476][T31121] drop_ref+0xd8/0x390 [ 1398.787491][T31121] hidraw_disconnect+0x4b/0x60 [ 1398.787506][T31121] hid_disconnect+0x13e/0x1b0 [ 1398.787522][T31121] hid_hw_stop+0x5e/0xe0 [ 1398.787538][T31121] hid_device_remove+0x1ae/0x200 [ 1398.787555][T31121] ? __pfx_hid_device_remove+0x10/0x10 [ 1398.787573][T31121] device_remove+0xcb/0x180 [ 1398.787587][T31121] device_release_driver_internal+0x44e/0x620 [ 1398.787605][T31121] bus_remove_device+0x2bc/0x560 [ 1398.787618][T31121] ? __pfx_bus_remove_device+0x10/0x10 [ 1398.787630][T31121] ? __pfx_device_remove_attrs+0x10/0x10 [ 1398.787647][T31121] device_del+0x376/0x9b0 [ 1398.787662][T31121] ? __pfx_device_del+0x10/0x10 [ 1398.787691][T31121] ? __pfx_enable_work+0x10/0x10 [ 1398.787708][T31121] ? __pfx___might_resched+0x10/0x10 [ 1398.787723][T31121] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1398.787740][T31121] hid_destroy_device+0x19c/0x240 [ 1398.787757][T31121] ? __pfx_uhid_char_release+0x10/0x10 [ 1398.787773][T31121] uhid_char_release+0xeb/0x210 [ 1398.787789][T31121] ? __pfx_uhid_char_release+0x10/0x10 [ 1398.787805][T31121] __fput+0x3ff/0xb50 [ 1398.787824][T31121] fput_close_sync+0x118/0x250 [ 1398.787840][T31121] ? __pfx_fput_close_sync+0x10/0x10 [ 1398.787860][T31121] __ia32_sys_close+0x8b/0x120 [ 1398.787877][T31121] __do_fast_syscall_32+0x13a/0x8b0 [ 1398.787893][T31121] ? lockdep_hardirqs_on+0x7d/0x110 [ 1398.787910][T31121] do_fast_syscall_32+0x32/0x70 [ 1398.787926][T31121] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1398.787942][T31121] RIP: 0023:0xf70aefec [ 1398.787956][T31121] Code: Unable to access opcode bytes at 0xf70aefc2. [ 1398.787962][T31121] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000006 [ 1398.787975][T31121] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 1398.787983][T31121] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1398.787990][T31121] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1398.787998][T31121] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1398.788005][T31121] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1398.788021][T31121] [ 1398.810579][T14890] veth1_macvtap: left promiscuous mode [ 1398.810614][T14890] veth0_macvtap: left promiscuous mode [ 1398.810710][T14890] veth1_vlan: left promiscuous mode [ 1398.810745][T14890] veth0_vlan: left promiscuous mode [ 1398.958602][T31126] FAULT_INJECTION: forcing a failure. [ 1398.958602][T31126] name failslab, interval 1, probability 0, space 0, times 0 [ 1398.958625][T31126] CPU: 2 UID: 0 PID: 31126 Comm: syz.9.6446 Tainted: G L syzkaller #0 PREEMPT(full) [ 1398.958641][T31126] Tainted: [L]=SOFTLOCKUP [ 1398.958646][T31126] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1398.958652][T31126] Call Trace: [ 1398.958658][T31126] [ 1398.958663][T31126] dump_stack_lvl+0x100/0x190 [ 1398.958682][T31126] should_fail_ex.cold+0x5/0xa [ 1398.958697][T31126] should_failslab+0xc2/0x120 [ 1398.958712][T31126] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 1398.958724][T31126] ? mnt_get_write_access+0x52/0x2f0 [ 1398.958741][T31126] ? ovl_alloc_inode+0x25/0x190 [ 1398.958755][T31126] ? __pfx_ovl_alloc_inode+0x10/0x10 [ 1398.958770][T31126] ovl_alloc_inode+0x25/0x190 [ 1398.958783][T31126] alloc_inode+0x68/0x250 [ 1398.958799][T31126] new_inode+0x22/0x1c0 [ 1398.958816][T31126] ovl_new_inode+0x1d/0x50 [ 1398.958832][T31126] ovl_tmpfile+0x237/0x9c0 [ 1398.958851][T31126] ? __pfx_ovl_tmpfile+0x10/0x10 [ 1398.958868][T31126] ? do_raw_spin_unlock+0x145/0x1e0 [ 1398.958885][T31126] ? _raw_spin_unlock+0x28/0x50 [ 1398.958900][T31126] vfs_tmpfile+0x4d7/0xbb0 [ 1398.958916][T31126] path_openat+0xcb1/0x2440 [ 1398.958931][T31126] ? __pfx_path_openat+0x10/0x10 [ 1398.958947][T31126] do_file_open+0x20e/0x430 [ 1398.958961][T31126] ? __pfx_do_file_open+0x10/0x10 [ 1398.958983][T31126] ? _raw_spin_unlock+0x28/0x50 [ 1398.958995][T31126] ? alloc_fd+0x471/0x7a0 [ 1398.959011][T31126] do_sys_openat2+0x10f/0x1e0 [ 1398.959026][T31126] ? __pfx_do_sys_openat2+0x10/0x10 [ 1398.959042][T31126] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1398.959061][T31126] __ia32_compat_sys_openat+0x12d/0x210 [ 1398.959078][T31126] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 1398.959093][T31126] ? fput+0x7c/0x100 [ 1398.959106][T31126] ? ksys_write+0x1ac/0x250 [ 1398.959116][T31126] ? __pfx_ksys_write+0x10/0x10 [ 1398.959130][T31126] __do_fast_syscall_32+0x13a/0x8b0 [ 1398.959145][T31126] ? lockdep_hardirqs_on+0x7d/0x110 [ 1398.959159][T31126] do_fast_syscall_32+0x32/0x70 [ 1398.959175][T31126] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1398.959189][T31126] RIP: 0023:0xf70aefec [ 1398.959203][T31126] Code: Unable to access opcode bytes at 0xf70aefc2. [ 1398.959208][T31126] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 1398.959220][T31126] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080004280 [ 1398.959227][T31126] RDX: 0000000000414581 RSI: 0000000000000112 RDI: 0000000000000000 [ 1398.959234][T31126] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1398.959241][T31126] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1398.959247][T31126] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1398.959261][T31126] [ 1398.987204][T31123] fido_id[31123]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1399.105476][T28109] Bluetooth: hci2: command tx timeout [ 1399.212045][T14890] team0 (unregistering): Port device team_slave_1 removed [ 1399.227548][T14890] team0 (unregistering): Port device team_slave_0 removed [ 1399.273401][T28109] Bluetooth: hci0: command tx timeout [ 1399.440081][T14890] team0 (unregistering): Port device team_slave_1 removed [ 1399.450945][T14890] team0 (unregistering): Port device team_slave_0 removed [ 1399.585615][T31065] bridge0: port 1(bridge_slave_0) entered blocking state [ 1399.585729][T31065] bridge0: port 1(bridge_slave_0) entered disabled state [ 1399.585933][T31065] bridge_slave_0: entered allmulticast mode [ 1399.587323][T31065] bridge_slave_0: entered promiscuous mode [ 1399.589159][T31065] bridge0: port 2(bridge_slave_1) entered blocking state [ 1399.589259][T31065] bridge0: port 2(bridge_slave_1) entered disabled state [ 1399.589398][T31065] bridge_slave_1: entered allmulticast mode [ 1399.590568][T31065] bridge_slave_1: entered promiscuous mode [ 1399.652327][T31065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1399.658385][T31065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1399.664724][T28109] Bluetooth: hci3: command tx timeout [ 1399.683639][T31065] team0: Port device team_slave_0 added [ 1399.694443][T31065] team0: Port device team_slave_1 added [ 1399.709140][T31065] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1399.709193][T31065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1399.709229][T31065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1399.710288][T31065] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1399.710298][T31065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1399.710312][T31065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1399.853201][T31065] hsr_slave_0: entered promiscuous mode [ 1399.854938][T31065] hsr_slave_1: entered promiscuous mode [ 1399.855232][T31065] debugfs: 'hsr0' already exists in 'hsr' [ 1399.855244][T31065] Cannot create hsr debugfs directory [ 1400.069186][T30899] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1400.094531][T30899] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1400.100058][T30899] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1400.115958][T30899] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1400.121065][T30899] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1400.135778][T30899] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1400.136322][T30899] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1400.156868][ T5738] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1400.169238][ T5738] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1400.170217][ T5738] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1400.173554][ T5738] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1400.174506][ T5738] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1400.190150][T30899] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1400.274495][ T44] kauditd_printk_skb: 53 callbacks suppressed [ 1400.274562][ T44] audit: type=1800 audit(1788143074.138:11076): pid=31065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=26903 res=0 errno=0 [ 1400.440672][T30899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1400.496561][T30899] 8021q: adding VLAN 0 to HW filter on device team0 [ 1400.518514][ T228] bridge0: port 1(bridge_slave_0) entered blocking state [ 1400.518600][ T228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1400.528866][T18265] bridge0: port 2(bridge_slave_1) entered blocking state [ 1400.528973][T18265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1400.592058][T30899] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1400.597891][T30899] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1400.617321][T30957] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1400.621640][T30957] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1400.622236][T30957] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1400.640598][T30957] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1400.641175][T30957] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1400.645691][T30957] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1400.646179][T30957] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1400.650700][T30957] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1400.791415][T31142] wg2 speed is unknown, defaulting to 1000 [ 1400.960543][T30957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1401.105873][T14890] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1401.143654][T30957] 8021q: adding VLAN 0 to HW filter on device team0 [ 1401.187698][ T5738] Bluetooth: hci2: command tx timeout [ 1401.249510][T18265] bridge0: port 1(bridge_slave_0) entered blocking state [ 1401.249596][T18265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1401.282016][T14890] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1401.303608][T18265] bridge0: port 2(bridge_slave_1) entered blocking state [ 1401.303797][T18265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1401.325915][ T44] audit: type=1800 audit(1788143075.188:11077): pid=31065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="new_device" dev="sysfs" ino=26902 res=0 errno=0 [ 1401.343923][ T5738] Bluetooth: hci0: command tx timeout [ 1401.435592][T14890] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1401.552836][T14890] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1401.633064][T31065] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1401.637364][T31065] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1401.637961][T31065] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1401.643662][T31065] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1401.674924][T31065] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1401.678828][T31065] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1401.679325][T31065] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1401.683297][T31065] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1401.714279][T30899] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1401.784253][T31142] bridge0: port 1(bridge_slave_0) entered blocking state [ 1401.784477][T31142] bridge0: port 1(bridge_slave_0) entered disabled state [ 1401.784568][T31142] bridge_slave_0: entered allmulticast mode [ 1401.785443][T31142] bridge_slave_0: entered promiscuous mode [ 1401.802288][T31142] bridge0: port 2(bridge_slave_1) entered blocking state [ 1401.802425][T31142] bridge0: port 2(bridge_slave_1) entered disabled state [ 1401.802508][T31142] bridge_slave_1: entered allmulticast mode [ 1401.803226][T31142] bridge_slave_1: entered promiscuous mode [ 1401.851608][T31142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1401.868520][T31142] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1401.913484][T31142] team0: Port device team_slave_0 added [ 1401.956008][T14890] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1401.973308][T31142] team0: Port device team_slave_1 added [ 1401.989749][T30957] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1402.009442][T31142] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1402.009504][T31142] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1402.009725][T31142] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1402.010724][T31142] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1402.010733][T31142] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1402.010746][T31142] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1402.028382][T30899] veth0_vlan: entered promiscuous mode [ 1402.032983][T30899] veth1_vlan: entered promiscuous mode [ 1402.067673][T14890] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1402.108800][T31142] hsr_slave_0: entered promiscuous mode [ 1402.109969][T31142] hsr_slave_1: entered promiscuous mode [ 1402.110258][T31142] debugfs: 'hsr0' already exists in 'hsr' [ 1402.110269][T31142] Cannot create hsr debugfs directory [ 1402.160607][T30957] veth0_vlan: entered promiscuous mode [ 1402.168816][T31065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1402.201094][T14890] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1402.222802][T30957] veth1_vlan: entered promiscuous mode [ 1402.227066][T30899] veth0_macvtap: entered promiscuous mode [ 1402.259278][T30899] veth1_macvtap: entered promiscuous mode [ 1402.265472][T31065] 8021q: adding VLAN 0 to HW filter on device team0 [ 1402.295349][T14890] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1402.304042][ T5738] Bluetooth: hci1: command tx timeout [ 1402.312431][T24678] bridge0: port 1(bridge_slave_0) entered blocking state [ 1402.312521][T24678] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1402.319515][T30899] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1402.330613][ T44] audit: type=1800 audit(1788143076.188:11078): pid=31142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=26903 res=0 errno=0 [ 1402.346333][T30899] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1402.357477][T18262] bridge0: port 2(bridge_slave_1) entered blocking state [ 1402.357548][T18262] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1402.391205][T30957] veth0_macvtap: entered promiscuous mode [ 1402.413078][T30957] veth1_macvtap: entered promiscuous mode [ 1402.425897][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1402.425963][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1402.585203][T30957] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1402.683480][T30957] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1402.741092][T14890] bridge_slave_1: left allmulticast mode [ 1402.741160][T14890] bridge_slave_1: left promiscuous mode [ 1402.741543][T14890] bridge0: port 2(bridge_slave_1) entered disabled state [ 1402.749839][T14890] bridge_slave_0: left allmulticast mode [ 1402.749894][T14890] bridge_slave_0: left promiscuous mode [ 1402.750211][T14890] bridge0: port 1(bridge_slave_0) entered disabled state [ 1402.764713][T14890] bridge_slave_1: left allmulticast mode [ 1402.764764][T14890] bridge_slave_1: left promiscuous mode [ 1402.765120][T14890] bridge0: port 2(bridge_slave_1) entered disabled state [ 1402.769124][T14890] bridge_slave_0: left allmulticast mode [ 1402.769141][T14890] bridge_slave_0: left promiscuous mode [ 1402.769275][T14890] bridge0: port 1(bridge_slave_0) entered disabled state [ 1402.907846][T14890] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1402.912149][T14890] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1402.917241][T14890] bond0 (unregistering): Released all slaves [ 1403.009123][T14890] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1403.019426][T14890] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1403.025808][T14890] bond0 (unregistering): Released all slaves [ 1403.039411][T18265] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1403.039447][T18265] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1403.125128][T24678] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1403.125164][T24678] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1403.265430][ T5738] Bluetooth: hci2: command tx timeout [ 1403.310125][ T5789] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1403.310512][ T5789] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1403.310704][ T5789] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1403.395705][T18265] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1403.395772][T18265] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1403.470075][T18239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1403.470136][T18239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1403.484201][ T5789] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1403.484935][ T5789] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1403.485470][ T5789] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1403.560798][T31065] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1403.875968][T31065] veth0_vlan: entered promiscuous mode [ 1403.883680][T31065] veth1_vlan: entered promiscuous mode [ 1403.919080][T31065] veth0_macvtap: entered promiscuous mode [ 1403.925978][T31065] veth1_macvtap: entered promiscuous mode [ 1403.937472][T31065] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1403.944450][T31065] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1403.963710][ T5789] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1403.963819][ T5789] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1403.963839][ T5789] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1403.963857][ T5789] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1404.024078][T29822] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1404.204236][T29822] usb 6-1: device descriptor read/64, error -71 [ 1404.245506][T14890] hsr_slave_0: left promiscuous mode [ 1404.247582][T14890] hsr_slave_1: left promiscuous mode [ 1404.248277][T14890] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1404.248291][T14890] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1404.249714][T14890] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1404.249725][T14890] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1404.261140][T14890] hsr_slave_0: left promiscuous mode [ 1404.262983][T14890] hsr_slave_1: left promiscuous mode [ 1404.265421][T14890] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1404.265435][T14890] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1404.265948][T14890] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1404.265958][T14890] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1404.281863][T14890] veth1_macvtap: left promiscuous mode [ 1404.281923][T14890] veth0_macvtap: left promiscuous mode [ 1404.282012][T14890] veth1_vlan: left promiscuous mode [ 1404.282064][T14890] veth0_vlan: left promiscuous mode [ 1404.290540][T14890] veth1_macvtap: left promiscuous mode [ 1404.292317][T14890] veth0_macvtap: left promiscuous mode [ 1404.295513][T14890] veth1_vlan: left promiscuous mode [ 1404.297407][T14890] veth0_vlan: left promiscuous mode [ 1404.393655][ T5738] Bluetooth: hci1: command tx timeout [ 1404.467250][T29822] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1404.499874][T14890] team0 (unregistering): Port device team_slave_1 removed [ 1404.507810][T14890] team0 (unregistering): Port device team_slave_0 removed [ 1404.627591][T29822] usb 6-1: device descriptor read/64, error -71 [ 1404.734007][T29822] usb usb6-port1: attempt power cycle [ 1404.754457][T14890] team0 (unregistering): Port device team_slave_1 removed [ 1404.761869][T14890] team0 (unregistering): Port device team_slave_0 removed [ 1404.946035][T18265] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1404.946129][T18265] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1405.067009][T24678] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1405.067046][T24678] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1405.083698][T29822] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1405.095022][ T44] audit: type=1800 audit(1788143078.958:11079): pid=31255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6453" name="UDC" dev="configfs" ino=200226 res=0 errno=0 [ 1405.114824][T29822] usb 6-1: device descriptor read/8, error -71 [ 1405.199506][ T44] audit: type=1800 audit(1788143079.058:11080): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 1405.243813][ T44] audit: type=1800 audit(1788143079.108:11081): pid=31266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.6444" name="syzkaller0" dev="sda1" ino=2067 res=0 errno=0 [ 1405.251564][ T44] audit: type=1800 audit(1788143079.108:11082): pid=31142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="new_device" dev="sysfs" ino=26902 res=0 errno=0 [ 1405.343935][ T5738] Bluetooth: hci2: command tx timeout [ 1405.380594][ T44] audit: type=1800 audit(1788143079.238:11083): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 1405.386400][T29822] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1405.404806][T29822] usb 6-1: device descriptor read/8, error -71 [ 1405.524227][T29822] usb usb6-port1: unable to enumerate USB device [ 1405.579202][T31142] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1405.691815][T31142] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1405.692323][T31142] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1405.696055][T31142] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1405.697036][T31142] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1405.724629][T31142] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1405.726296][T31142] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1405.732841][T31142] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1405.790053][T31142] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1405.799330][T31142] 8021q: adding VLAN 0 to HW filter on device team0 [ 1405.802329][ T228] bridge0: port 1(bridge_slave_0) entered blocking state [ 1405.802444][ T228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1405.806836][ T228] bridge0: port 2(bridge_slave_1) entered blocking state [ 1405.806883][ T228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1406.272295][T28109] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1406.290446][T28109] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1406.294044][T28109] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1406.308019][T28109] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1406.314836][T28109] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1406.362272][T14890] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1406.470211][T28109] Bluetooth: hci1: command tx timeout [ 1406.489681][T31268] binder: BINDER_SET_CONTEXT_MGR already set [ 1406.489731][T31268] binder: 31267:31268 ioctl 4018620d 80004a80 returned -16 [ 1406.602925][ T44] audit: type=1800 audit(1788143080.458:11084): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 1406.637237][T31296] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6458'. [ 1406.637337][T31296] netlink: 'syz.4.6458': attribute type 7 has an invalid length. [ 1406.637397][T31296] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6458'. [ 1406.671193][T14890] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1406.689630][T31142] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1406.694470][T15558] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1406.718750][T15558] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1406.718802][T15558] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1406.719044][T15558] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1406.719255][T31142] veth0_vlan: entered promiscuous mode [ 1406.723499][T31142] veth1_vlan: entered promiscuous mode [ 1406.766196][ T44] audit: type=1800 audit(1788143080.628:11085): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 1406.779504][T14890] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1406.818206][T31142] veth0_macvtap: entered promiscuous mode [ 1406.824874][T31142] veth1_macvtap: entered promiscuous mode [ 1406.832860][T31142] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1406.835709][T31142] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1406.864896][T14890] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1406.949722][T31285] wg2 speed is unknown, defaulting to 1000 [ 1407.012400][T15558] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1407.015739][T15558] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1407.018112][T15558] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1407.019859][T15558] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1407.127114][ T44] audit: type=1800 audit(1788143080.858:11086): pid=31305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.6460" name="UDC" dev="configfs" ino=202967 res=0 errno=0 [ 1407.216807][ T228] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1407.216844][ T228] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1407.267915][T24678] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1407.267954][T24678] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1407.383224][T14890] bridge_slave_1: left allmulticast mode [ 1407.385896][T14890] bridge_slave_1: left promiscuous mode [ 1407.386053][T14890] bridge0: port 2(bridge_slave_1) entered disabled state [ 1407.393141][T14890] bridge_slave_0: left allmulticast mode [ 1407.398999][T14890] bridge_slave_0: left promiscuous mode [ 1407.399195][T14890] bridge0: port 1(bridge_slave_0) entered disabled state [ 1407.578692][T14890] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1407.589885][T14890] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1407.596830][T14890] bond0 (unregistering): Released all slaves [ 1407.780088][ T44] audit: type=1800 audit(1788143081.628:11087): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 1408.015402][T31319] netlink: 'syz.0.6462': attribute type 4 has an invalid length. [ 1408.181625][ T44] audit: type=1800 audit(1788143082.038:11088): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 1408.261769][ T44] audit: type=1800 audit(1788143082.118:11089): pid=31324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.6466" name="file0" dev="tmpfs" ino=46 res=0 errno=0 [ 1408.334743][T31326] FAULT_INJECTION: forcing a failure. [ 1408.334743][T31326] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1408.334801][T31326] CPU: 0 UID: 0 PID: 31326 Comm: syz.4.6466 Tainted: G L syzkaller #0 PREEMPT(full) [ 1408.334830][T31326] Tainted: [L]=SOFTLOCKUP [ 1408.334835][T31326] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1408.334842][T31326] Call Trace: [ 1408.334847][T31326] [ 1408.334852][T31326] dump_stack_lvl+0x100/0x190 [ 1408.334871][T31326] should_fail_ex.cold+0x5/0xa [ 1408.334883][T31326] ? prepare_alloc_pages+0x16d/0x5b0 [ 1408.334900][T31326] should_fail_alloc_page+0xeb/0x140 [ 1408.334915][T31326] prepare_alloc_pages+0x1f0/0x5b0 [ 1408.334932][T31326] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 1408.334957][T31326] ? __lock_acquire+0x4c5/0x1ec0 [ 1408.334974][T31326] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1408.334993][T31326] ? __css_rstat_updated+0x1ce/0x590 [ 1408.335011][T31326] ? lock_acquire+0x1d1/0x380 [ 1408.335026][T31326] ? do_raw_spin_lock+0x128/0x260 [ 1408.335044][T31326] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1408.335061][T31326] ? find_held_lock+0x2b/0x80 [ 1408.335076][T31326] ? __lock_acquire+0x4c5/0x1ec0 [ 1408.335091][T31326] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1408.335107][T31326] ? policy_nodemask+0xed/0x4f0 [ 1408.335123][T31326] alloc_pages_mpol+0x201/0x550 [ 1408.335139][T31326] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1408.335153][T31326] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 1408.335173][T31326] folio_alloc_mpol_noprof+0x36/0x260 [ 1408.335191][T31326] shmem_alloc_folio+0x135/0x160 [ 1408.335207][T31326] shmem_alloc_and_add_folio+0x371/0xd40 [ 1408.335227][T31326] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1408.335245][T31326] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 1408.335262][T31326] ? __lock_acquire+0x4c5/0x1ec0 [ 1408.335279][T31326] shmem_get_folio_gfp+0x75b/0x1980 [ 1408.335299][T31326] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1408.335321][T31326] shmem_write_begin+0x1a4/0x420 [ 1408.335339][T31326] ? __pfx_shmem_write_begin+0x10/0x10 [ 1408.335356][T31326] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 1408.335388][T31326] generic_perform_write+0x292/0xa40 [ 1408.335409][T31326] ? __pfx_generic_perform_write+0x10/0x10 [ 1408.335429][T31326] ? mnt_put_write_access_file+0x4e/0x100 [ 1408.335442][T31326] ? file_update_time_flags+0x38c/0x520 [ 1408.335458][T31326] shmem_file_write_iter+0x10e/0x140 [ 1408.335471][T31326] iter_file_splice_write+0x830/0x10b0 [ 1408.335492][T31326] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1408.335518][T31326] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1408.335532][T31326] do_splice+0x109c/0x1fa0 [ 1408.335546][T31326] ? __lock_acquire+0x4c5/0x1ec0 [ 1408.335561][T31326] ? rcu_read_lock_any_held+0x6a/0x90 [ 1408.335578][T31326] ? __pfx_do_splice+0x10/0x10 [ 1408.335589][T31326] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 1408.335601][T31326] ? __fget_files+0x34/0x3d0 [ 1408.335613][T31326] ? find_held_lock+0x2b/0x80 [ 1408.335626][T31326] __do_splice+0x33b/0x370 [ 1408.335640][T31326] ? __pfx___do_splice+0x10/0x10 [ 1408.335658][T31326] __ia32_sys_splice+0x189/0x250 [ 1408.335673][T31326] __do_fast_syscall_32+0x13a/0x8b0 [ 1408.335688][T31326] ? lockdep_hardirqs_on+0x7d/0x110 [ 1408.335704][T31326] do_fast_syscall_32+0x32/0x70 [ 1408.335719][T31326] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1408.335733][T31326] RIP: 0023:0xf7f14fec [ 1408.335748][T31326] Code: Unable to access opcode bytes at 0xf7f14fc2. [ 1408.335753][T31326] RSP: 002b:00000000f53b550c EFLAGS: 00000292 ORIG_RAX: 0000000000000139 [ 1408.335765][T31326] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 1408.335772][T31326] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000033fe0 [ 1408.335779][T31326] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1408.335786][T31326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1408.335792][T31326] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1408.335807][T31326] [ 1408.387857][T28109] Bluetooth: hci3: command tx timeout [ 1408.415476][ T5738] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1408.473803][ T5738] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1408.486726][ T5738] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1408.489499][ T5738] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1408.489991][ T5738] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1408.500965][T14890] hsr_slave_0: left promiscuous mode [ 1408.521528][T14890] hsr_slave_1: left promiscuous mode [ 1408.522001][T14890] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1408.522014][T14890] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1408.527318][T14890] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1408.527331][T14890] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1408.552755][T14890] veth1_macvtap: left promiscuous mode [ 1408.552790][T14890] veth0_macvtap: left promiscuous mode [ 1408.552834][T14890] veth1_vlan: left promiscuous mode [ 1408.552866][T14890] veth0_vlan: left promiscuous mode [ 1408.553817][T28109] Bluetooth: hci1: command tx timeout [ 1408.874680][T31336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6467'. [ 1408.908692][T14890] team0 (unregistering): Port device team_slave_1 removed [ 1408.929257][T14890] team0 (unregistering): Port device team_slave_0 removed [ 1409.044063][T31285] bridge0: port 1(bridge_slave_0) entered blocking state [ 1409.044217][T31285] bridge0: port 1(bridge_slave_0) entered disabled state [ 1409.044292][T31285] bridge_slave_0: entered allmulticast mode [ 1409.045249][T31285] bridge_slave_0: entered promiscuous mode [ 1409.049701][T31285] bridge0: port 2(bridge_slave_1) entered blocking state [ 1409.049813][T31285] bridge0: port 2(bridge_slave_1) entered disabled state [ 1409.049886][T31285] bridge_slave_1: entered allmulticast mode [ 1409.050813][T31285] bridge_slave_1: entered promiscuous mode [ 1409.071729][T31285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1409.077282][T31285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1409.107097][T31285] team0: Port device team_slave_0 added [ 1409.108854][ T44] audit: type=1800 audit(1788143082.968:11090): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 1409.116310][T31285] team0: Port device team_slave_1 added [ 1409.129770][T31285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1409.131886][T31285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1409.143007][T31285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1409.144109][T31285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1409.144132][T31285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1409.144169][T31285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1409.181957][T31285] hsr_slave_0: entered promiscuous mode [ 1409.192003][T31285] hsr_slave_1: entered promiscuous mode [ 1409.347641][ T44] audit: type=1800 audit(1788143083.208:11091): pid=31285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=26903 res=0 errno=0 [ 1409.399122][T31328] wg2 speed is unknown, defaulting to 1000 [ 1409.877787][T14890] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1410.066966][ T44] audit: type=1800 audit(1788143083.928:11092): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 1410.128134][T14890] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1410.237483][T14890] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1410.366417][T14890] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1410.457870][T28109] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 1410.457924][T28109] CPU: 0 UID: 0 PID: 28109 Comm: kworker/u34:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1410.457955][T28109] Tainted: [L]=SOFTLOCKUP [ 1410.457960][T28109] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1410.457969][T28109] Workqueue: hci2 hci_rx_work [ 1410.457986][T28109] Call Trace: [ 1410.457991][T28109] [ 1410.457996][T28109] dump_stack_lvl+0x100/0x190 [ 1410.458015][T28109] sysfs_warn_dup.cold+0x1c/0x28 [ 1410.458040][T28109] sysfs_create_dir_ns+0x24b/0x2b0 [ 1410.458055][T28109] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1410.458067][T28109] ? find_held_lock+0x2b/0x80 [ 1410.458080][T28109] ? kobject_add_internal+0x25f/0x930 [ 1410.458099][T28109] ? kobject_add_internal+0x25f/0x930 [ 1410.458119][T28109] ? do_raw_spin_unlock+0x145/0x1e0 [ 1410.458138][T28109] kobject_add_internal+0x2c8/0x930 [ 1410.458160][T28109] kobject_add+0x16a/0x1e0 [ 1410.458178][T28109] ? __pfx_kobject_add+0x10/0x10 [ 1410.458196][T28109] ? class_to_subsys+0x10f/0x150 [ 1410.458215][T28109] ? kobject_put+0xb9/0x640 [ 1410.458231][T28109] ? _raw_spin_unlock+0x28/0x50 [ 1410.458247][T28109] device_add+0x294/0x1970 [ 1410.458263][T28109] ? __pfx_dev_set_name+0x10/0x10 [ 1410.458280][T28109] ? __pfx_device_add+0x10/0x10 [ 1410.458295][T28109] ? mgmt_send_event_skb+0x2fb/0x460 [ 1410.458313][T28109] hci_conn_add_sysfs+0x1a3/0x260 [ 1410.458330][T28109] le_conn_complete_evt+0x122f/0x2130 [ 1410.458347][T28109] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1410.458360][T28109] ? hci_event_packet+0x186/0xcd0 [ 1410.458376][T28109] hci_le_conn_complete_evt+0x23c/0x3a0 [ 1410.458389][T28109] ? skb_pull_data+0x15f/0x1e0 [ 1410.458407][T28109] hci_le_meta_evt+0x34a/0x5f0 [ 1410.458421][T28109] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1410.458436][T28109] hci_event_packet+0x51c/0xcd0 [ 1410.458449][T28109] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1410.458463][T28109] ? __pfx_hci_event_packet+0x10/0x10 [ 1410.458478][T28109] ? lockdep_hardirqs_on+0x7d/0x110 [ 1410.458496][T28109] hci_rx_work+0x451/0xfc0 [ 1410.458510][T28109] process_one_work+0xac7/0x1b10 [ 1410.458531][T28109] ? __pfx_process_one_work+0x10/0x10 [ 1410.458546][T28109] ? lock_acquire+0x1d1/0x380 [ 1410.458565][T28109] ? __pfx_hci_rx_work+0x10/0x10 [ 1410.458579][T28109] worker_thread+0x5ef/0xe50 [ 1410.458597][T28109] ? __pfx_worker_thread+0x10/0x10 [ 1410.458611][T28109] ? kthread+0x13a/0x450 [ 1410.458622][T28109] ? __pfx_worker_thread+0x10/0x10 [ 1410.458635][T28109] kthread+0x373/0x450 [ 1410.458646][T28109] ? __pfx_kthread+0x10/0x10 [ 1410.458659][T28109] ret_from_fork+0x730/0xd60 [ 1410.458678][T28109] ? __pfx_ret_from_fork+0x10/0x10 [ 1410.458697][T28109] ? __switch_to+0x800/0x10f0 [ 1410.458711][T28109] ? __pfx_kthread+0x10/0x10 [ 1410.458724][T28109] ret_from_fork_asm+0x1a/0x30 [ 1410.458744][T28109] [ 1410.458841][T28109] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1410.458863][T28109] Bluetooth: hci2: failed to register connection device [ 1410.464961][ T5738] Bluetooth: hci3: command tx timeout [ 1410.474663][ T44] kauditd_printk_skb: 1 callbacks suppressed [ 1410.474675][ T44] audit: type=1800 audit(1788143084.338:11094): pid=31285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="new_device" dev="sysfs" ino=26902 res=0 errno=0 [ 1410.477673][T28109] Bluetooth: hci2: ISO packet for unknown connection handle 774 [ 1410.544443][T28109] Bluetooth: hci0: command tx timeout [ 1410.620386][T31328] bridge0: port 1(bridge_slave_0) entered blocking state [ 1410.620490][T31328] bridge0: port 1(bridge_slave_0) entered disabled state [ 1410.620558][T31328] bridge_slave_0: entered allmulticast mode [ 1410.621841][T31328] bridge_slave_0: entered promiscuous mode [ 1410.681127][ T44] audit: type=1800 audit(1788143084.538:11095): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 1410.703117][T31328] bridge0: port 2(bridge_slave_1) entered blocking state [ 1410.703792][T31328] bridge0: port 2(bridge_slave_1) entered disabled state [ 1410.703918][T31328] bridge_slave_1: entered allmulticast mode [ 1410.705471][T31328] bridge_slave_1: entered promiscuous mode [ 1410.744359][T31328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1410.750466][T14890] bridge_slave_1: left allmulticast mode [ 1410.750522][T14890] bridge_slave_1: left promiscuous mode [ 1410.750853][T14890] bridge0: port 2(bridge_slave_1) entered disabled state [ 1410.757656][T14890] bridge_slave_0: left allmulticast mode [ 1410.757706][T14890] bridge_slave_0: left promiscuous mode [ 1410.758004][T14890] bridge0: port 1(bridge_slave_0) entered disabled state [ 1410.873701][T14890] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1410.879234][T14890] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1410.882994][T14890] bond0 (unregistering): Released all slaves [ 1410.889256][T31328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1410.918008][T31328] team0: Port device team_slave_0 added [ 1410.924322][T31328] team0: Port device team_slave_1 added [ 1410.943470][T12107] usb 9-1: new full-speed USB device number 18 using dummy_hcd [ 1411.022602][T31328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1411.025725][T31328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1411.033955][T31328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1411.062081][T31328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1411.062134][T31328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1411.062155][T31328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1411.078487][T31285] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1411.082342][T31285] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1411.082957][T31285] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1411.086251][T31285] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1411.092364][T31285] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1411.096223][T31285] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1411.096663][T12107] usb 9-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1411.096697][T31285] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1411.097467][T12107] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1411.097482][T12107] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 12592, setting to 64 [ 1411.099072][T12107] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1411.099084][T12107] usb 9-1: Product: syz [ 1411.099092][T12107] usb 9-1: Manufacturer: syz [ 1411.099099][T12107] usb 9-1: SerialNumber: syz [ 1411.100072][T31285] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1411.101091][T12107] usb 9-1: config 0 descriptor?? [ 1411.101601][T31381] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1411.131881][T31328] hsr_slave_0: entered promiscuous mode [ 1411.132418][T31328] hsr_slave_1: entered promiscuous mode [ 1411.132900][T31328] debugfs: 'hsr0' already exists in 'hsr' [ 1411.132914][T31328] Cannot create hsr debugfs directory [ 1411.173693][T12107] rc_core: IR keymap rc-streamzap not found [ 1411.173765][T12107] Registered IR keymap rc-empty [ 1411.174231][T12107] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0 [ 1411.175097][T12107] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0/input77 [ 1411.328717][ T44] audit: type=1800 audit(1788143085.178:11096): pid=31328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=26903 res=0 errno=0 [ 1411.340418][T31252] usb 9-1: USB disconnect, device number 18 [ 1411.346071][T14890] hsr_slave_0: left promiscuous mode [ 1411.350170][T14890] hsr_slave_1: left promiscuous mode [ 1411.350666][T14890] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1411.350679][T14890] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1411.357622][T14890] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1411.357653][T14890] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1411.368555][T14890] veth1_macvtap: left promiscuous mode [ 1411.370367][T14890] veth0_macvtap: left promiscuous mode [ 1411.372156][T14890] veth1_vlan: left promiscuous mode [ 1411.373400][T14890] veth0_vlan: left promiscuous mode [ 1411.522181][T14890] team0 (unregistering): Port device team_slave_1 removed [ 1411.529392][T14890] team0 (unregistering): Port device team_slave_0 removed [ 1411.702103][T31285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1411.744636][T31285] 8021q: adding VLAN 0 to HW filter on device team0 [ 1411.757340][ T228] bridge0: port 1(bridge_slave_0) entered blocking state [ 1411.757409][ T228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1411.764066][ T228] bridge0: port 2(bridge_slave_1) entered blocking state [ 1411.764131][ T228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1411.850983][T31285] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1411.857223][T31285] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1411.893204][ T44] audit: type=1800 audit(1788143085.748:11097): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 1411.964930][ T44] audit: type=1800 audit(1788143085.828:11098): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 1411.993084][ T44] audit: type=1800 audit(1788143085.848:11099): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 1412.051740][T31408] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6474'. [ 1412.061100][T31408] wg2 speed is unknown, defaulting to 1000 [ 1412.276184][ T44] audit: type=1800 audit(1788143086.138:11100): pid=31328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="new_device" dev="sysfs" ino=26902 res=0 errno=0 [ 1412.558361][T31285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1412.561167][ T5738] Bluetooth: hci3: command tx timeout [ 1412.575229][T31328] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1412.579376][T31328] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1412.582239][T31328] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1412.591625][T31328] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1412.592206][T31328] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1412.601604][T31328] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1412.602366][T31328] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1412.609391][T31328] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1412.623209][ T5738] Bluetooth: hci0: command tx timeout [ 1412.706381][T31328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1412.715337][T31328] 8021q: adding VLAN 0 to HW filter on device team0 [ 1412.718485][T18267] bridge0: port 1(bridge_slave_0) entered blocking state [ 1412.718568][T18267] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1412.722891][T18267] bridge0: port 2(bridge_slave_1) entered blocking state [ 1412.722938][T18267] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1412.768916][T31285] veth0_vlan: entered promiscuous mode [ 1412.776745][T31285] veth1_vlan: entered promiscuous mode [ 1412.791103][T31285] veth0_macvtap: entered promiscuous mode [ 1412.796963][T31285] veth1_macvtap: entered promiscuous mode [ 1412.804045][T31285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1412.808182][T31285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1412.873627][T14890] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1412.873843][T14890] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1412.874185][T14890] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1412.874205][T14890] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1412.912616][T18267] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1412.912665][T18267] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1412.966460][T18265] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1412.966511][T18265] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1413.050426][ T44] audit: type=1800 audit(1788143086.908:11101): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16309 res=0 errno=0 [ 1413.112715][T31449] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6457'. [ 1413.119590][ T44] audit: type=1800 audit(1788143086.978:11102): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 1413.150599][T31449] wg2 speed is unknown, defaulting to 1000 [ 1413.349131][T31328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1413.554996][ T44] audit: type=1800 audit(1788143087.418:11103): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 1413.622447][T31479] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6482'. [ 1413.710042][T31328] veth0_vlan: entered promiscuous mode [ 1413.716059][T31479] wg2 speed is unknown, defaulting to 1000 [ 1413.726497][T31328] veth1_vlan: entered promiscuous mode [ 1413.759890][T31328] veth0_macvtap: entered promiscuous mode [ 1413.769913][T31328] veth1_macvtap: entered promiscuous mode [ 1413.779841][T31485] FAULT_INJECTION: forcing a failure. [ 1413.779841][T31485] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1413.779916][T31485] CPU: 0 UID: 0 PID: 31485 Comm: syz.0.6483 Tainted: G L syzkaller #0 PREEMPT(full) [ 1413.779945][T31485] Tainted: [L]=SOFTLOCKUP [ 1413.779950][T31485] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1413.779958][T31485] Call Trace: [ 1413.779962][T31485] [ 1413.779967][T31485] dump_stack_lvl+0x100/0x190 [ 1413.779986][T31485] should_fail_ex.cold+0x5/0xa [ 1413.780000][T31485] _copy_to_user+0x32/0xd0 [ 1413.780014][T31485] simple_read_from_buffer+0xcb/0x170 [ 1413.780028][T31485] proc_fail_nth_read+0x1af/0x230 [ 1413.780048][T31485] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1413.780066][T31485] ? rw_verify_area+0xce/0x6d0 [ 1413.780082][T31485] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1413.780100][T31485] vfs_read+0x1e4/0xb40 [ 1413.780111][T31485] ? lock_acquire+0x1d1/0x380 [ 1413.780126][T31485] ? __fget_files+0x34/0x3d0 [ 1413.780138][T31485] ? __pfx_vfs_read+0x10/0x10 [ 1413.780147][T31485] ? find_held_lock+0x2b/0x80 [ 1413.780159][T31485] ? __fget_files+0x215/0x3d0 [ 1413.780173][T31485] ? __fget_files+0x21f/0x3d0 [ 1413.780188][T31485] ksys_read+0x12a/0x250 [ 1413.780198][T31485] ? __pfx_ksys_read+0x10/0x10 [ 1413.780213][T31485] do_int80_emulation+0x166/0x650 [ 1413.780230][T31485] asm_int80_emulation+0x1a/0x20 [ 1413.780241][T31485] RIP: 0023:0xf71675ab [ 1413.780251][T31485] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1413.780265][T31485] RSP: 002b:00000000f54264bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1413.780282][T31485] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f54265d0 [ 1413.780293][T31485] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 1413.780309][T31485] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1413.780319][T31485] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1413.780327][T31485] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1413.780354][T31485] [ 1413.790968][T31328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1413.798199][T31328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1413.866537][ T5789] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1413.866773][ T5789] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1413.867052][ T5789] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1413.932478][ T228] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1413.932519][ T228] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1413.933789][ T5789] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1414.033714][ T228] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1414.033769][ T228] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1414.487972][T31503] devpts: Bad value for 'max' [ 1414.625061][T31506] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input78 [ 1414.673139][ T5738] Bluetooth: hci3: command tx timeout [ 1414.713486][ T5738] Bluetooth: hci0: command tx timeout [ 1414.733145][T15142] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1415.033760][T15142] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1415.040819][T15142] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1415.043801][T15142] usb 10-1: Product: syz [ 1415.045296][T15142] usb 10-1: Manufacturer: syz [ 1415.046947][T15142] usb 10-1: SerialNumber: syz [ 1415.168330][T31520] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6493'. [ 1415.168397][T31520] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6493'. [ 1415.168647][T31520] FAULT_INJECTION: forcing a failure. [ 1415.168647][T31520] name failslab, interval 1, probability 0, space 0, times 0 [ 1415.168665][T31520] CPU: 0 UID: 0 PID: 31520 Comm: syz.0.6493 Tainted: G L syzkaller #0 PREEMPT(full) [ 1415.168680][T31520] Tainted: [L]=SOFTLOCKUP [ 1415.168685][T31520] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1415.168692][T31520] Call Trace: [ 1415.168696][T31520] [ 1415.168701][T31520] dump_stack_lvl+0x100/0x190 [ 1415.168719][T31520] should_fail_ex.cold+0x5/0xa [ 1415.168735][T31520] should_failslab+0xc2/0x120 [ 1415.168749][T31520] __kmalloc_cache_noprof+0x91/0x6d0 [ 1415.168767][T31520] ? tcf_action_init_1+0x27e/0x6c0 [ 1415.168783][T31520] tcf_action_init_1+0x27e/0x6c0 [ 1415.168797][T31520] ? __pfx_tcf_action_init_1+0x10/0x10 [ 1415.168809][T31520] ? tc_action_load_ops+0x1f5/0x3e0 [ 1415.168822][T31520] ? __pfx_tc_action_load_ops+0x10/0x10 [ 1415.168840][T31520] ? __nla_parse+0x40/0x60 [ 1415.168859][T31520] tcf_action_init+0x43f/0xa60 [ 1415.168883][T31520] ? __pfx_tcf_action_init+0x10/0x10 [ 1415.168906][T31520] ? __kernel_text_address+0xd/0x30 [ 1415.168920][T31520] ? unwind_get_return_address+0x59/0xa0 [ 1415.168934][T31520] ? arch_stack_walk+0xa6/0xf0 [ 1415.168956][T31520] ? kfree_skbmem+0x19a/0x210 [ 1415.168972][T31520] ? kasan_save_stack+0x3f/0x50 [ 1415.168984][T31520] ? kasan_save_stack+0x30/0x50 [ 1415.168995][T31520] ? kasan_save_track+0x14/0x30 [ 1415.169007][T31520] ? kasan_save_free_info+0x3b/0x70 [ 1415.169023][T31520] ? __kasan_slab_free+0x5f/0x80 [ 1415.169035][T31520] ? kmem_cache_free+0x127/0x6c0 [ 1415.169051][T31520] ? kfree_skbmem+0x19a/0x210 [ 1415.169066][T31520] ? consume_skb+0xd1/0x110 [ 1415.169078][T31520] ? nlmon_xmit+0xa5/0xe0 [ 1415.169095][T31520] tcf_action_add+0xed/0x5c0 [ 1415.169110][T31520] ? __pfx_tcf_action_add+0x10/0x10 [ 1415.169143][T31520] ? __nla_parse+0x40/0x60 [ 1415.169161][T31520] tc_ctl_action+0x2e3/0x470 [ 1415.169175][T31520] ? __pfx_tc_ctl_action+0x10/0x10 [ 1415.169193][T31520] ? __pfx_tc_ctl_action+0x10/0x10 [ 1415.169206][T31520] rtnetlink_rcv_msg+0x3c9/0xe90 [ 1415.169222][T31520] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1415.169240][T31520] ? ref_tracker_free+0x37e/0x6c0 [ 1415.169292][T31520] netlink_rcv_skb+0x159/0x420 [ 1415.169304][T31520] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1415.169319][T31520] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1415.169335][T31520] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1415.169355][T31520] netlink_unicast+0x585/0x850 [ 1415.169370][T31520] ? __pfx_netlink_unicast+0x10/0x10 [ 1415.169386][T31520] netlink_sendmsg+0x8b0/0xda0 [ 1415.169399][T31520] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1415.169412][T31520] ? apparmor_socket_sendmsg+0x165/0x280 [ 1415.169427][T31520] ____sys_sendmsg+0xa4d/0xbe0 [ 1415.169442][T31520] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1415.169454][T31520] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1415.169473][T31520] ? _kstrtoull+0x144/0x200 [ 1415.169488][T31520] ? __pfx__kstrtoull+0x10/0x10 [ 1415.169503][T31520] ___sys_sendmsg+0x190/0x1e0 [ 1415.169521][T31520] ? __pfx____sys_sendmsg+0x10/0x10 [ 1415.169538][T31520] ? __lock_acquire+0x4c5/0x1ec0 [ 1415.169557][T31520] ? __fget_files+0x34/0x3d0 [ 1415.169580][T31520] __sys_sendmmsg+0x309/0x440 [ 1415.169595][T31520] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1415.169608][T31520] ? find_held_lock+0x2b/0x80 [ 1415.169623][T31520] ? __mutex_unlock_slowpath+0x35d/0x930 [ 1415.169646][T31520] ? fput+0x7c/0x100 [ 1415.169659][T31520] ? ksys_write+0x1ac/0x250 [ 1415.169672][T31520] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 1415.169688][T31520] ? lockdep_hardirqs_on+0x7d/0x110 [ 1415.169702][T31520] __do_fast_syscall_32+0x13a/0x8b0 [ 1415.169717][T31520] ? lockdep_hardirqs_on+0x7d/0x110 [ 1415.169732][T31520] do_fast_syscall_32+0x32/0x70 [ 1415.169747][T31520] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1415.169761][T31520] RIP: 0023:0xf7f67fec [ 1415.169776][T31520] Code: Unable to access opcode bytes at 0xf7f67fc2. [ 1415.169781][T31520] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 1415.169793][T31520] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 1415.169801][T31520] RDX: 0000000004924b68 RSI: 0000000000000000 RDI: 0000000000000000 [ 1415.169808][T31520] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1415.169814][T31520] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1415.169821][T31520] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1415.169835][T31520] [ 1415.521067][ T44] kauditd_printk_skb: 8 callbacks suppressed [ 1415.521400][ T44] audit: type=1800 audit(1788143088.375:11112): pid=31503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.6487" name="host_addr" dev="configfs" ino=203602 res=0 errno=0 [ 1415.531340][T15142] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1415.531384][T15142] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1415.531400][T15142] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1415.548671][T15142] lan78xx 10-1:1.0: probe with driver lan78xx failed with error -71 [ 1415.554275][T15142] usb 10-1: USB disconnect, device number 4 [ 1415.562437][T31527] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1415.578302][ T44] audit: type=1800 audit(1788143088.435:11113): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 1415.683198][T29834] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1415.813290][T29834] usb 5-1: device descriptor read/64, error -71 [ 1416.054013][T29834] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1416.091715][ T44] audit: type=1800 audit(1788143088.945:11114): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16051 res=0 errno=0 [ 1416.102257][ T44] audit: type=1800 audit(1788143088.955:11115): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16309 res=0 errno=0 [ 1416.137838][ T44] audit: type=1800 audit(1788143088.995:11116): pid=31538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.6499" name="UDC" dev="configfs" ino=205375 res=0 errno=0 [ 1416.159579][ T44] audit: type=1800 audit(1788143089.015:11117): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16309 res=0 errno=0 [ 1416.186863][ T44] audit: type=1800 audit(1788143089.045:11118): pid=31541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.6501" name="pm_freeze_timeout" dev="sysfs" ino=587 res=0 errno=0 [ 1416.195247][T29834] usb 5-1: device descriptor read/64, error -71 [ 1416.267764][ T44] audit: type=1800 audit(1788143089.125:11119): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16309 res=0 errno=0 [ 1416.318244][T29834] usb usb5-port1: attempt power cycle [ 1416.511711][ T44] audit: type=1800 audit(1788143089.365:11120): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 1416.565855][ T44] audit: type=1800 audit(1788143089.425:11121): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 1416.683289][T29834] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1416.688542][T31551] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input79 [ 1416.717293][T29834] usb 5-1: device descriptor read/8, error -71 [ 1416.963049][T29834] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1416.983869][T29834] usb 5-1: device descriptor read/8, error -71 [ 1417.093330][T29834] usb usb5-port1: unable to enumerate USB device [ 1417.278150][T15558] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1417.410135][T31555] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6508'. [ 1417.413229][T31555] netlink: 277 bytes leftover after parsing attributes in process `syz.7.6508'. [ 1417.413293][T31555] netlink: 277 bytes leftover after parsing attributes in process `syz.7.6508'. [ 1417.540007][T31560] FAULT_INJECTION: forcing a failure. [ 1417.540007][T31560] name failslab, interval 1, probability 0, space 0, times 0 [ 1417.540106][T31560] CPU: 3 UID: 0 PID: 31560 Comm: syz.7.6509 Tainted: G L syzkaller #0 PREEMPT(full) [ 1417.540148][T31560] Tainted: [L]=SOFTLOCKUP [ 1417.540156][T31560] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1417.540166][T31560] Call Trace: [ 1417.540172][T31560] [ 1417.540180][T31560] dump_stack_lvl+0x100/0x190 [ 1417.540208][T31560] should_fail_ex.cold+0x5/0xa [ 1417.540231][T31560] should_failslab+0xc2/0x120 [ 1417.540252][T31560] __kmalloc_noprof+0xfc/0x840 [ 1417.540269][T31560] ? rcu_is_watching+0x13/0xc0 [ 1417.540285][T31560] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1417.540316][T31560] tomoyo_realpath_from_path+0xb6/0x690 [ 1417.540345][T31560] tomoyo_path_number_perm+0x23c/0x580 [ 1417.540366][T31560] ? tomoyo_path_number_perm+0x22e/0x580 [ 1417.540389][T31560] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1417.540411][T31560] ? get_pid_task+0x106/0x250 [ 1417.540434][T31560] ? __lock_acquire+0x4c5/0x1ec0 [ 1417.540467][T31560] ? __fget_files+0x34/0x3d0 [ 1417.540486][T31560] ? find_held_lock+0x2b/0x80 [ 1417.540503][T31560] ? __fget_files+0x215/0x3d0 [ 1417.540519][T31560] ? hook_file_ioctl_common+0x140/0x440 [ 1417.540540][T31560] ? __fget_files+0x215/0x3d0 [ 1417.540561][T31560] ? __fget_files+0x21f/0x3d0 [ 1417.540582][T31560] security_file_ioctl_compat+0xd3/0x230 [ 1417.540606][T31560] __ia32_compat_sys_ioctl+0xc2/0x360 [ 1417.540634][T31560] __do_fast_syscall_32+0x13a/0x8b0 [ 1417.540657][T31560] ? lockdep_hardirqs_on+0x7d/0x110 [ 1417.540678][T31560] do_fast_syscall_32+0x32/0x70 [ 1417.540699][T31560] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1417.540720][T31560] RIP: 0023:0xf700efec [ 1417.540739][T31560] Code: Unable to access opcode bytes at 0xf700efc2. [ 1417.540747][T31560] RSP: 002b:00000000f53fd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 1417.540764][T31560] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008955 [ 1417.540775][T31560] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1417.540786][T31560] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1417.540796][T31560] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1417.540806][T31560] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1417.540829][T31560] [ 1417.548338][T31560] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1417.551162][T15558] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1417.625123][T28109] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1417.633456][T28109] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1417.634387][T28109] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1417.634911][T28109] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1417.635215][T28109] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1417.745734][T15558] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1417.806017][T15558] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1417.972664][T31561] wg2 speed is unknown, defaulting to 1000 [ 1418.131528][T15558] bridge_slave_1: left allmulticast mode [ 1418.131601][T15558] bridge_slave_1: left promiscuous mode [ 1418.131921][T15558] bridge0: port 2(bridge_slave_1) entered disabled state [ 1418.138193][T15558] bridge_slave_0: left allmulticast mode [ 1418.138208][T15558] bridge_slave_0: left promiscuous mode [ 1418.138307][T15558] bridge0: port 1(bridge_slave_0) entered disabled state [ 1418.266241][T28109] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1418.288005][T28109] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1418.291369][T28109] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1418.297192][T28109] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1418.297692][T28109] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1418.334441][T15558] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1418.340134][T15558] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1418.347210][T15558] bond0 (unregistering): Released all slaves [ 1418.685045][T31603] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input80 [ 1418.748855][T31581] wg2 speed is unknown, defaulting to 1000 [ 1418.751004][T31561] bridge0: port 1(bridge_slave_0) entered blocking state [ 1418.753014][T31561] bridge0: port 1(bridge_slave_0) entered disabled state [ 1418.753098][T31561] bridge_slave_0: entered allmulticast mode [ 1418.753881][T31561] bridge_slave_0: entered promiscuous mode [ 1418.759917][T31561] bridge0: port 2(bridge_slave_1) entered blocking state [ 1418.759961][T31561] bridge0: port 2(bridge_slave_1) entered disabled state [ 1418.760041][T31561] bridge_slave_1: entered allmulticast mode [ 1418.764809][T31561] bridge_slave_1: entered promiscuous mode [ 1418.798321][T31561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1418.800243][T31561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1418.843777][T31561] team0: Port device team_slave_0 added [ 1418.847397][T31561] team0: Port device team_slave_1 added [ 1418.887300][T31561] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1418.887361][T31561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1418.887395][T31561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1418.896320][T31561] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1418.896368][T31561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1418.896383][T31561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1418.981475][T31614] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6523'. [ 1419.002556][T31561] hsr_slave_0: entered promiscuous mode [ 1419.014237][T31561] hsr_slave_1: entered promiscuous mode [ 1419.018471][T31561] debugfs: 'hsr0' already exists in 'hsr' [ 1419.018546][T31561] Cannot create hsr debugfs directory [ 1419.093461][T15558] hsr_slave_0: left promiscuous mode [ 1419.096534][T15558] hsr_slave_1: left promiscuous mode [ 1419.098955][T15558] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1419.101486][T15558] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1419.106294][T15558] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1419.109545][T15558] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1419.119591][T15558] veth1_macvtap: left promiscuous mode [ 1419.123266][T15558] veth0_macvtap: left promiscuous mode [ 1419.125123][T15558] veth1_vlan: left promiscuous mode [ 1419.127023][T15558] veth0_vlan: left promiscuous mode [ 1419.301159][T15558] team0 (unregistering): Port device team_slave_1 removed [ 1419.309341][T15558] team0 (unregistering): Port device team_slave_0 removed [ 1419.450561][T31614] wg2 speed is unknown, defaulting to 1000 [ 1419.672900][ T5738] Bluetooth: hci0: command tx timeout [ 1419.772201][T31631] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input81 [ 1420.174278][T15558] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1420.176195][T15558] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1420.311250][T31581] bridge0: port 1(bridge_slave_0) entered blocking state [ 1420.311470][T31581] bridge0: port 1(bridge_slave_0) entered disabled state [ 1420.311610][T31581] bridge_slave_0: entered allmulticast mode [ 1420.312487][T31581] bridge_slave_0: entered promiscuous mode [ 1420.315183][T31581] bridge0: port 2(bridge_slave_1) entered blocking state [ 1420.315224][T31581] bridge0: port 2(bridge_slave_1) entered disabled state [ 1420.315294][T31581] bridge_slave_1: entered allmulticast mode [ 1420.317927][T31581] bridge_slave_1: entered promiscuous mode [ 1420.388651][T15558] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1420.388757][T15558] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1420.395524][ T5738] Bluetooth: hci2: command tx timeout [ 1420.402509][T31581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1420.416241][T31581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1420.504887][T31581] team0: Port device team_slave_0 added [ 1420.507040][T31581] team0: Port device team_slave_1 added [ 1420.533699][T15558] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1420.533758][T15558] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1420.618973][T31581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1420.619024][T31581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1420.619047][T31581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1420.620534][T31581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1420.620547][T31581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1420.620568][T31581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1420.689401][ T44] kauditd_printk_skb: 9 callbacks suppressed [ 1420.689491][ T44] audit: type=1800 audit(1788143092.554:11131): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16309 res=0 errno=0 [ 1420.706598][T15558] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1420.706654][T15558] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1420.760015][ T44] audit: type=1800 audit(1788143092.624:11132): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16309 res=0 errno=0 [ 1420.766874][T31581] hsr_slave_0: entered promiscuous mode [ 1420.767647][T31581] hsr_slave_1: entered promiscuous mode [ 1420.770566][T31581] debugfs: 'hsr0' already exists in 'hsr' [ 1420.770584][T31581] Cannot create hsr debugfs directory [ 1420.771627][ T44] audit: type=1800 audit(1788143092.634:11133): pid=31561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="new_device" dev="sysfs" ino=26902 res=0 errno=0 [ 1420.934894][ T44] audit: type=1800 audit(1788143092.804:11134): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16309 res=0 errno=0 [ 1420.994925][ T44] audit: type=1800 audit(1788143092.864:11135): pid=31581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=26903 res=0 errno=0 [ 1421.000111][T31665] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input83 [ 1421.150475][T15558] bridge_slave_1: left allmulticast mode [ 1421.150516][T15558] bridge_slave_1: left promiscuous mode [ 1421.150652][T15558] bridge0: port 2(bridge_slave_1) entered disabled state [ 1421.158904][T15558] bridge_slave_0: left allmulticast mode [ 1421.160916][T15558] bridge_slave_0: left promiscuous mode [ 1421.161057][T15558] bridge0: port 1(bridge_slave_0) entered disabled state [ 1421.349184][T15558] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1421.358612][T15558] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1421.367714][T15558] bond0 (unregistering): Released all slaves [ 1421.370408][T31561] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1421.377150][T31561] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1421.377854][T31561] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1421.380972][T31561] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1421.531899][T31561] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1421.536110][T31561] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1421.561108][T31561] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1421.566705][T31561] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1421.606196][ T44] audit: type=1800 audit(1788143093.474:11136): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16309 res=0 errno=0 [ 1421.626093][T31561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1421.636490][T31561] 8021q: adding VLAN 0 to HW filter on device team0 [ 1421.646129][ T228] bridge0: port 1(bridge_slave_0) entered blocking state [ 1421.646231][ T228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1421.647650][ T228] bridge0: port 2(bridge_slave_1) entered blocking state [ 1421.647694][ T228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1421.696878][T31561] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1421.696941][T31561] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1421.710573][ T44] audit: type=1800 audit(1788143093.574:11137): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16309 res=0 errno=0 [ 1421.742868][ T5738] Bluetooth: hci0: command tx timeout [ 1421.915171][T15558] hsr_slave_0: left promiscuous mode [ 1421.951938][T15558] hsr_slave_1: left promiscuous mode [ 1421.964673][T15558] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1421.964816][T15558] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1421.980241][T15558] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1421.980341][T15558] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1422.005171][T15558] veth1_macvtap: left promiscuous mode [ 1422.005299][T15558] veth0_macvtap: left promiscuous mode [ 1422.005522][T15558] veth1_vlan: left promiscuous mode [ 1422.005665][T15558] veth0_vlan: left promiscuous mode [ 1422.088712][T31690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6537'. [ 1422.088848][T31690] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6537'. [ 1422.097156][T31690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6537'. [ 1422.097300][T31690] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6537'. [ 1422.287998][T31694] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6539'. [ 1422.300384][T15558] team0 (unregistering): Port device team_slave_1 removed [ 1422.311035][T15558] team0 (unregistering): Port device team_slave_0 removed [ 1422.474894][ T5738] Bluetooth: hci2: command tx timeout [ 1422.478618][T31694] wg2 speed is unknown, defaulting to 1000 [ 1422.546100][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.546207][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 1422.691510][ T44] audit: type=1800 audit(1788143093.554:11138): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16309 res=0 errno=0 [ 1422.899269][T31561] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1422.952556][T31561] veth0_vlan: entered promiscuous mode [ 1422.985933][ T44] audit: type=1800 audit(1788143093.854:11139): pid=31581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="new_device" dev="sysfs" ino=26902 res=0 errno=0 [ 1422.994094][T31561] veth1_vlan: entered promiscuous mode [ 1423.086995][T31561] veth0_macvtap: entered promiscuous mode [ 1423.104251][T31561] veth1_macvtap: entered promiscuous mode [ 1423.147943][T31561] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1423.150034][T31561] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1423.177920][T14890] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1423.178020][T14890] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1423.178070][T14890] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1423.178092][T14890] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1423.485292][ T44] audit: type=1800 audit(1788143094.354:11140): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16309 res=0 errno=0 [ 1423.535708][T18267] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1423.535768][T18267] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1423.543106][T31581] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1423.555654][T31581] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1423.556777][T31581] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1423.561894][T31581] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1423.571221][T31581] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1423.576596][T31581] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1423.577102][T31581] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1423.583433][T31581] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1423.787573][T18265] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1423.787619][T18265] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1423.823916][ T5738] Bluetooth: hci0: command tx timeout [ 1424.000209][T31581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1424.025470][T31581] 8021q: adding VLAN 0 to HW filter on device team0 [ 1424.031733][T24678] bridge0: port 1(bridge_slave_0) entered blocking state [ 1424.031853][T24678] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1424.048643][T24678] bridge0: port 2(bridge_slave_1) entered blocking state [ 1424.048743][T24678] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1424.142783][T29273] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1424.295677][T29273] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1424.319896][T29273] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1424.324078][T29273] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1424.343417][T29273] usb 5-1: config 0 descriptor?? [ 1424.543143][T28109] Bluetooth: hci2: command tx timeout [ 1424.558886][T29273] usbhid 5-1:0.0: can't add hid device: -71 [ 1424.562310][T29273] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1424.573099][T29273] usb 5-1: USB disconnect, device number 95 [ 1424.757031][T31581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1424.932936][T31581] veth0_vlan: entered promiscuous mode [ 1424.949736][T31581] veth1_vlan: entered promiscuous mode [ 1424.961758][T31760] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input84 [ 1424.974674][T31581] veth0_macvtap: entered promiscuous mode [ 1424.981453][T31581] veth1_macvtap: entered promiscuous mode [ 1424.992048][T31581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1425.001007][T31581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1425.003599][T29273] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1425.123835][T14890] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1425.123909][T14890] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1425.123964][T14890] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1425.124012][T14890] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1425.173685][T29273] usb 5-1: Using ep0 maxpacket: 32 [ 1425.188215][T29273] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 1425.203857][T29273] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1425.203934][T29273] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1425.226453][T29273] usb 5-1: config 0 descriptor?? [ 1425.233763][T24678] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1425.233800][T24678] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1425.244823][T31766] can0: slcan on ttyS3. [ 1425.248304][T29273] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1425.257941][T31769] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6548'. [ 1425.264018][T29273] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1425.271084][T18265] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1425.271141][T18265] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1425.384046][T31769] wg2 speed is unknown, defaulting to 1000 [ 1425.397297][T31766] can0 (unregistered): slcan off ttyS3. [ 1425.637301][T31777] netlink: 36 bytes leftover after parsing attributes in process `syz.8.6549'. [ 1425.684347][T29552] usb 5-1: USB disconnect, device number 96 [ 1425.685827][T29552] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 1425.753542][ T44] kauditd_printk_skb: 6 callbacks suppressed [ 1425.753627][ T44] audit: type=1800 audit(1788143095.611:11147): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16309 res=0 errno=0 [ 1425.769267][ T44] audit: type=1800 audit(1788143095.631:11148): pid=31784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.6551" name="ifindex" dev="sysfs" ino=3160857 res=0 errno=0 [ 1425.775716][T31784] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6551'. [ 1425.776494][ T44] audit: type=1800 audit(1788143095.631:11149): pid=31784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.6551" name="block2mtd" dev="sysfs" ino=61647 res=0 errno=0 [ 1425.784820][T31784] block2mtd: error: cannot open device /dev/loop0 [ 1425.817486][ T44] audit: type=1800 audit(1788143095.681:11150): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16309 res=0 errno=0 [ 1425.860389][ T44] audit: type=1800 audit(1788143095.721:11151): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16309 res=0 errno=0 [ 1425.902580][T28109] Bluetooth: hci0: command tx timeout [ 1425.942549][T29973] usb 13-1: new full-speed USB device number 2 using dummy_hcd [ 1426.094072][T29973] usb 13-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1426.099525][T29973] usb 13-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1426.107772][T29973] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1426.113884][T29973] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1426.129139][T29973] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1426.129973][T29973] usb 13-1: Product: syz [ 1426.134482][T29973] usb 13-1: Manufacturer: syz [ 1426.135178][T29973] usb 13-1: SerialNumber: syz [ 1426.146580][T29973] usb 13-1: config 0 descriptor?? [ 1426.150701][T31781] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1426.232491][T29973] rc_core: IR keymap rc-streamzap not found [ 1426.234563][T29973] Registered IR keymap rc-empty [ 1426.236839][T29973] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/rc/rc0 [ 1426.242683][T29973] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/rc/rc0/input85 [ 1426.401303][T31800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6556'. [ 1426.401353][T31800] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6556'. [ 1426.401772][T31800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6556'. [ 1426.401784][T31800] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6556'. [ 1426.471262][T31804] FAULT_INJECTION: forcing a failure. [ 1426.471262][T31804] name failslab, interval 1, probability 0, space 0, times 0 [ 1426.471313][T31804] CPU: 2 UID: 0 PID: 31804 Comm: syz.0.6557 Tainted: G L syzkaller #0 PREEMPT(full) [ 1426.471342][T31804] Tainted: [L]=SOFTLOCKUP [ 1426.471347][T31804] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1426.471355][T31804] Call Trace: [ 1426.471361][T31804] [ 1426.471367][T31804] dump_stack_lvl+0x100/0x190 [ 1426.471389][T31804] should_fail_ex.cold+0x5/0xa [ 1426.471405][T31804] should_failslab+0xc2/0x120 [ 1426.471421][T31804] __kvmalloc_node_noprof+0x113/0x9b0 [ 1426.471436][T31804] ? seq_read_iter+0x819/0x1270 [ 1426.471450][T31804] seq_read_iter+0x819/0x1270 [ 1426.471461][T31804] ? aa_file_perm+0x7f3/0x14d0 [ 1426.471484][T31804] seq_read+0x344/0x4d0 [ 1426.471495][T31804] ? __pfx_seq_read+0x10/0x10 [ 1426.471513][T31804] ? import_ubuf+0x1b6/0x220 [ 1426.471526][T31804] ? common_file_perm+0x266/0x500 [ 1426.471543][T31804] ? __pfx_seq_read+0x10/0x10 [ 1426.471554][T31804] proc_reg_read+0x240/0x330 [ 1426.471569][T31804] ? __pfx_proc_reg_read+0x10/0x10 [ 1426.471583][T31804] vfs_readv+0x5d8/0x8d0 [ 1426.471604][T31804] ? __pfx_vfs_readv+0x10/0x10 [ 1426.471624][T31804] ? lock_acquire+0x1d1/0x380 [ 1426.471639][T31804] ? __fget_files+0x34/0x3d0 [ 1426.471656][T31804] ? __fget_files+0x21f/0x3d0 [ 1426.471671][T31804] ? do_readv+0x13e/0x340 [ 1426.471686][T31804] do_readv+0x13e/0x340 [ 1426.471703][T31804] ? __pfx_do_readv+0x10/0x10 [ 1426.471718][T31804] ? ksys_write+0x1ac/0x250 [ 1426.471728][T31804] ? __pfx_ksys_write+0x10/0x10 [ 1426.471742][T31804] __do_fast_syscall_32+0x13a/0x8b0 [ 1426.471759][T31804] ? lockdep_hardirqs_on+0x7d/0x110 [ 1426.471775][T31804] do_fast_syscall_32+0x32/0x70 [ 1426.471790][T31804] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1426.471807][T31804] RIP: 0023:0xf7f67fec [ 1426.471823][T31804] Code: Unable to access opcode bytes at 0xf7f67fc2. [ 1426.471829][T31804] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000091 [ 1426.471841][T31804] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000340 [ 1426.471848][T31804] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 1426.471855][T31804] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1426.471862][T31804] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1426.471869][T31804] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1426.471883][T31804] [ 1426.511209][T31806] FAULT_INJECTION: forcing a failure. [ 1426.511209][T31806] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1426.511232][T31806] CPU: 2 UID: 0 PID: 31806 Comm: syz.0.6560 Tainted: G L syzkaller #0 PREEMPT(full) [ 1426.511249][T31806] Tainted: [L]=SOFTLOCKUP [ 1426.511253][T31806] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1426.511260][T31806] Call Trace: [ 1426.511265][T31806] [ 1426.511271][T31806] dump_stack_lvl+0x100/0x190 [ 1426.511290][T31806] should_fail_ex.cold+0x5/0xa [ 1426.511306][T31806] _copy_from_user+0x2e/0xd0 [ 1426.511320][T31806] memdup_user+0x6b/0xe0 [ 1426.511339][T31806] strndup_user+0x78/0xe0 [ 1426.511357][T31806] __do_sys_fsconfig+0x276/0xcb0 [ 1426.511376][T31806] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 1426.511394][T31806] ? arch_syscall_is_vdso_sigreturn+0x19b/0x200 [ 1426.511420][T31806] ? syscall_user_dispatch+0x76/0x130 [ 1426.511444][T31806] __do_fast_syscall_32+0x13a/0x8b0 [ 1426.511460][T31806] ? lockdep_hardirqs_on+0x7d/0x110 [ 1426.511475][T31806] do_fast_syscall_32+0x32/0x70 [ 1426.511491][T31806] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1426.511506][T31806] RIP: 0023:0xf7f67fec [ 1426.511520][T31806] Code: Unable to access opcode bytes at 0xf7f67fc2. [ 1426.511526][T31806] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 00000000000001af [ 1426.511538][T31806] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000001 [ 1426.511545][T31806] RDX: 0000000080000ac0 RSI: 0000000080000440 RDI: 0000000000000000 [ 1426.511552][T31806] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1426.511559][T31806] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1426.511566][T31806] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1426.511580][T31806] [ 1426.570517][T31812] FAULT_INJECTION: forcing a failure. [ 1426.570517][T31812] name failslab, interval 1, probability 0, space 0, times 0 [ 1426.570541][T31812] CPU: 3 UID: 0 PID: 31812 Comm: syz.3.6562 Tainted: G L syzkaller #0 PREEMPT(full) [ 1426.570559][T31812] Tainted: [L]=SOFTLOCKUP [ 1426.570564][T31812] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1426.570572][T31812] Call Trace: [ 1426.570577][T31812] [ 1426.570582][T31812] dump_stack_lvl+0x100/0x190 [ 1426.570603][T31812] should_fail_ex.cold+0x5/0xa [ 1426.570620][T31812] should_failslab+0xc2/0x120 [ 1426.570636][T31812] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 1426.570650][T31812] ? __alloc_skb+0x5b7/0x710 [ 1426.570663][T31812] ? __alloc_skb+0x140/0x710 [ 1426.570679][T31812] __alloc_skb+0x140/0x710 [ 1426.570691][T31812] ? __alloc_skb+0x5b7/0x710 [ 1426.570720][T31812] ? __pfx___alloc_skb+0x10/0x10 [ 1426.570738][T31812] netlink_alloc_large_skb+0x69/0x150 [ 1426.570753][T31812] netlink_sendmsg+0x680/0xda0 [ 1426.570768][T31812] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1426.570782][T31812] ? apparmor_socket_sendmsg+0x165/0x280 [ 1426.570806][T31812] ____sys_sendmsg+0xa4d/0xbe0 [ 1426.570824][T31812] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1426.570838][T31812] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1426.570863][T31812] ___sys_sendmsg+0x190/0x1e0 [ 1426.570882][T31812] ? __pfx____sys_sendmsg+0x10/0x10 [ 1426.570908][T31812] ? find_held_lock+0x2b/0x80 [ 1426.570932][T31812] __sys_sendmsg+0x160/0x210 [ 1426.570947][T31812] ? __pfx___sys_sendmsg+0x10/0x10 [ 1426.570966][T31812] ? __pfx_ksys_write+0x10/0x10 [ 1426.570982][T31812] __do_fast_syscall_32+0x13a/0x8b0 [ 1426.570999][T31812] ? lockdep_hardirqs_on+0x7d/0x110 [ 1426.571016][T31812] do_fast_syscall_32+0x32/0x70 [ 1426.571033][T31812] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1426.571049][T31812] RIP: 0023:0xf703efec [ 1426.571062][T31812] Code: Unable to access opcode bytes at 0xf703efc2. [ 1426.571068][T31812] RSP: 002b:00000000f542d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1426.571081][T31812] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001300 [ 1426.571089][T31812] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1426.571096][T31812] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1426.571104][T31812] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1426.571111][T31812] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1426.571128][T31812] [ 1426.630505][T31815] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6563'. [ 1426.636746][T28109] Bluetooth: hci2: command tx timeout [ 1426.647523][T31815] wg2 speed is unknown, defaulting to 1000 [ 1426.802115][ T44] audit: type=1800 audit(1788143096.661:11152): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16309 res=0 errno=0 [ 1426.931309][ T44] audit: type=1800 audit(1788143096.791:11153): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16309 res=0 errno=0 [ 1427.193188][T29973] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 1427.344837][T29973] usb 12-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 1427.352018][T29973] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1427.356315][T29973] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1428.165563][T31826] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6566'. [ 1428.165627][T31826] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6566'. [ 1428.202073][ T113] ------------[ cut here ]------------ [ 1428.202140][ T113] current->flags & PF_MEMALLOC [ 1428.202168][ T113] WARNING: mm/page_alloc.c:4816 at __alloc_frozen_pages_noprof+0x1eac/0x3300, CPU#3: kswapd1/113 [ 1428.211027][ T113] Modules linked in: [ 1428.212394][ T113] CPU: 3 UID: 0 PID: 113 Comm: kswapd1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1428.216507][ T113] Tainted: [L]=SOFTLOCKUP [ 1428.218169][ T113] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1428.221315][ T113] RIP: 0010:__alloc_frozen_pages_noprof+0x1eac/0x3300 [ 1428.224629][ T113] Code: 38 d0 7c 08 84 d2 0f 85 de 12 00 00 65 48 8b 05 82 23 1c 12 c7 84 24 94 00 00 00 00 80 00 00 f6 40 2d 08 0f 84 ba e7 ff ff 90 <0f> 0b 90 e9 b1 e7 ff ff 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 [ 1428.232392][ T113] RSP: 0018:ffffc90002156a88 EFLAGS: 00010202 [ 1428.234360][ T113] RAX: ffff888040bb0000 RBX: 0000000000000000 RCX: 1ffff1100fffad29 [ 1428.237285][ T113] RDX: 0000000000000000 RSI: 0000000000000002 RDI: ffff88803fffd938 [ 1428.239750][ T113] RBP: ffff888040bb002c R08: 0000000000008000 R09: 0000000000000001 [ 1428.242912][ T113] R10: 0000000000000002 R11: 0000000000000000 R12: 0000000000148c48 [ 1428.245847][ T113] R13: ffff88803fffb900 R14: 0000000000000000 R15: 1ffff9200042ad6b [ 1428.248305][ T113] FS: 0000000000000000(0000) GS:ffff888096c68000(0000) knlGS:0000000000000000 [ 1428.251095][ T113] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1428.253669][ T113] CR2: 0000000056c306d0 CR3: 000000004dffa000 CR4: 0000000000352ef0 [ 1428.256787][ T113] Call Trace: [ 1428.258038][ T113] [ 1428.258999][ T113] ? __lock_acquire+0x4c5/0x1ec0 [ 1428.260563][ T113] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1428.262750][ T113] ? check_prev_add+0xfe/0xe60 [ 1428.264278][ T113] ? lock_acquire+0x1d1/0x380 [ 1428.265809][ T113] ? clockevents_program_event+0x1bf/0x820 [ 1428.267754][ T113] ? find_held_lock+0x2b/0x80 [ 1428.269248][ T113] ? clockevents_program_event+0x1bf/0x820 [ 1428.271008][ T113] ? __lock_acquire+0x4c5/0x1ec0 [ 1428.272914][ T113] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1428.275174][ T113] ? policy_nodemask+0xed/0x4f0 [ 1428.277239][ T113] alloc_pages_mpol+0x201/0x550 [ 1428.279527][ T113] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1428.281587][ T113] ? filemap_get_entry+0x22d/0x450 [ 1428.283724][ T113] ? filemap_get_entry+0x22d/0x450 [ 1428.285774][ T113] folio_alloc_noprof+0x22/0x250 [ 1428.287842][ T113] filemap_alloc_folio_noprof.part.0+0x3db/0x440 [ 1428.290455][ T113] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 1428.293557][ T113] ? __filemap_get_folio_mpol+0x369/0x1320 [ 1428.295767][ T113] __filemap_get_folio_mpol+0x653/0x1320 [ 1428.298252][ T113] bdev_getblk+0x246/0x6a0 [ 1428.300195][ T113] ? ext4_get_group_desc+0x2b9/0x570 [ 1428.303275][ T113] __ext4_get_inode_loc+0x571/0x1510 [ 1428.305680][ T113] ? __pfx___ext4_get_inode_loc+0x10/0x10 [ 1428.308120][ T113] ? start_this_handle+0xfa7/0x1390 [ 1428.310547][ T113] ? ext4_get_inode_loc+0xbd/0x160 [ 1428.312580][ T113] ext4_get_inode_loc+0xbd/0x160 [ 1428.314764][ T113] ? __pfx_ext4_get_inode_loc+0x10/0x10 [ 1428.317082][ T113] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 1428.319167][ T113] ext4_reserve_inode_write+0x145/0x330 [ 1428.321374][ T113] __ext4_mark_inode_dirty+0x18f/0x910 [ 1428.323634][ T113] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 1428.325923][ T113] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 1428.328715][ T113] ? trace_jbd2_handle_start+0x83/0x240 [ 1428.331341][ T113] ? jbd2__journal_start+0xf7/0x6b0 [ 1428.333592][ T113] ? __ext4_journal_start_sb+0x314/0x610 [ 1428.335679][ T113] ? __ext4_journal_start_sb+0x17b/0x610 [ 1428.338431][ T113] ? ext4_dirty_inode+0xa1/0x130 [ 1428.340293][ T113] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 1428.342870][ T113] ext4_dirty_inode+0xd9/0x130 [ 1428.344657][ T113] ? rcu_is_watching+0x13/0xc0 [ 1428.346542][ T113] __mark_inode_dirty+0x1f3/0x16e0 [ 1428.348489][ T113] sync_lazytime+0x39b/0x5d0 [ 1428.350334][ T113] iput.part.0+0x207/0x1050 [ 1428.352147][ T113] ? dentry_unlink_inode+0x187/0x470 [ 1428.354381][ T113] ? __pfx_do_raw_spin_trylock+0x10/0x10 [ 1428.356093][T29973] hid_parser_main: 25 callbacks suppressed [ 1428.356170][T29973] wacom 0003:056A:033B.00AF: unknown main item tag 0x0 [ 1428.356297][T29973] wacom 0003:056A:033B.00AF: unknown main item tag 0x0 [ 1428.356342][T29973] wacom 0003:056A:033B.00AF: unknown main item tag 0x0 [ 1428.356381][T29973] wacom 0003:056A:033B.00AF: unbalanced collection at end of report description [ 1428.356902][T29973] wacom 0003:056A:033B.00AF: parse failed [ 1428.357060][T29973] wacom 0003:056A:033B.00AF: probe with driver wacom failed with error -22 [ 1428.371740][ T113] iput+0x35/0x40 [ 1428.372968][ T113] dentry_unlink_inode+0x284/0x470 [ 1428.374492][ T113] dentry_kill+0x25d/0xc20 [ 1428.375828][ T113] shrink_dentry_list+0x1e8/0x310 [ 1428.377395][ T113] prune_dcache_sb+0xea/0x150 [ 1428.378822][ T113] ? list_lru_count_one+0x147/0x320 [ 1428.380392][ T113] ? __pfx_prune_dcache_sb+0x10/0x10 [ 1428.382019][ T113] super_cache_scan+0x361/0x5c0 [ 1428.384359][ T113] do_shrink_slab+0x416/0x1200 [ 1428.385890][ T113] shrink_slab+0xa82/0x12e0 [ 1428.387291][ T113] ? shrink_slab+0x677/0x12e0 [ 1428.388765][ T113] ? __pfx_shrink_slab+0x10/0x10 [ 1428.390346][ T113] ? lock_acquire+0x1d1/0x380 [ 1428.391838][ T113] shrink_one+0x398/0x850 [ 1428.393817][ T113] ? shrink_node+0x2b00/0x4320 [ 1428.395563][ T113] shrink_node+0x2b20/0x4320 [ 1428.397263][ T113] ? shrink_node+0x286e/0x4320 [ 1428.398979][ T113] ? __pfx_shrink_node+0x10/0x10 [ 1428.400715][ T113] ? find_held_lock+0x2b/0x80 [ 1428.402639][ T113] ? balance_pgdat+0xb20/0x1f00 [ 1428.404176][ T113] balance_pgdat+0xb20/0x1f00 [ 1428.405702][ T113] ? __pfx_balance_pgdat+0x10/0x10 [ 1428.407398][ T113] ? rcu_is_watching+0x13/0xc0 [ 1428.408963][ T113] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 1428.410873][ T113] ? __lock_acquire+0x4c5/0x1ec0 [ 1428.412626][ T113] ? __schedule+0x126b/0x6920 [ 1428.414124][ T113] ? __lock_acquire+0x4c5/0x1ec0 [ 1428.415711][ T113] ? rcu_is_watching+0x13/0xc0 [ 1428.417264][ T113] kswapd+0x556/0xb50 [ 1428.418532][ T113] ? __pfx_kswapd+0x10/0x10 [ 1428.420057][ T113] ? __rcu_read_lock+0x70/0x70 [ 1428.421642][ T113] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1428.423670][ T113] ? __kthread_parkme+0x18f/0x230 [ 1428.425579][ T113] ? kthread+0x13a/0x450 [ 1428.427288][ T113] ? __pfx_kswapd+0x10/0x10 [ 1428.429079][ T113] kthread+0x373/0x450 [ 1428.430350][ T113] ? __pfx_kthread+0x10/0x10 [ 1428.431779][ T113] ret_from_fork+0x730/0xd60 [ 1428.433568][ T113] ? __pfx_ret_from_fork+0x10/0x10 [ 1428.435812][ T113] ? __switch_to+0x800/0x10f0 [ 1428.437340][ T113] ? __pfx_kthread+0x10/0x10 [ 1428.438883][ T113] ret_from_fork_asm+0x1a/0x30 [ 1428.440803][ T113] [ 1428.441849][ T113] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1428.444320][ T113] CPU: 3 UID: 0 PID: 113 Comm: kswapd1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1428.448058][ T113] Tainted: [L]=SOFTLOCKUP [ 1428.449508][ T113] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1428.452669][ T113] Call Trace: [ 1428.453751][ T113] [ 1428.454699][ T113] dump_stack_lvl+0x100/0x190 [ 1428.456197][ T113] vpanic+0x553/0x970 [ 1428.457516][ T113] ? __pfx_vpanic+0x10/0x10 [ 1428.458959][ T113] panic+0xd1/0xe0 [ 1428.460155][ T113] ? __pfx_panic+0x10/0x10 [ 1428.461646][ T113] check_panic_on_warn.cold+0x19/0x34 [ 1428.463437][ T113] ? __alloc_frozen_pages_noprof+0x1eac/0x3300 [ 1428.465872][ T113] __warn.cold+0x191/0x318 [ 1428.467318][ T113] __report_bug+0x30f/0x440 [ 1428.468779][ T113] ? __alloc_frozen_pages_noprof+0x1eac/0x3300 [ 1428.470733][ T113] ? __pfx___report_bug+0x10/0x10 [ 1428.472355][ T113] ? get_page_from_freelist+0x344/0x35d0 [ 1428.474156][ T113] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1428.476106][ T113] ? __alloc_frozen_pages_noprof+0x1eac/0x3300 [ 1428.478171][ T113] report_bug+0xb3/0x220 [ 1428.479659][ T113] ? __alloc_frozen_pages_noprof+0x1eac/0x3300 [ 1428.481817][ T113] handle_bug+0x16a/0x2a0 [ 1428.483330][ T113] exc_invalid_op+0x17/0x50 [ 1428.484797][ T113] asm_exc_invalid_op+0x1a/0x20 [ 1428.486365][ T113] RIP: 0010:__alloc_frozen_pages_noprof+0x1eac/0x3300 [ 1428.488484][ T113] Code: 38 d0 7c 08 84 d2 0f 85 de 12 00 00 65 48 8b 05 82 23 1c 12 c7 84 24 94 00 00 00 00 80 00 00 f6 40 2d 08 0f 84 ba e7 ff ff 90 <0f> 0b 90 e9 b1 e7 ff ff 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 [ 1428.494468][ T113] RSP: 0018:ffffc90002156a88 EFLAGS: 00010202 [ 1428.496560][ T113] RAX: ffff888040bb0000 RBX: 0000000000000000 RCX: 1ffff1100fffad29 [ 1428.499289][ T113] RDX: 0000000000000000 RSI: 0000000000000002 RDI: ffff88803fffd938 [ 1428.502020][ T113] RBP: ffff888040bb002c R08: 0000000000008000 R09: 0000000000000001 [ 1428.504584][ T113] R10: 0000000000000002 R11: 0000000000000000 R12: 0000000000148c48 [ 1428.507521][ T113] R13: ffff88803fffb900 R14: 0000000000000000 R15: 1ffff9200042ad6b [ 1428.510011][ T113] ? __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 1428.511958][ T113] ? __lock_acquire+0x4c5/0x1ec0 [ 1428.513531][ T113] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1428.515700][ T113] ? check_prev_add+0xfe/0xe60 [ 1428.517281][ T113] ? lock_acquire+0x1d1/0x380 [ 1428.518798][ T113] ? clockevents_program_event+0x1bf/0x820 [ 1428.520649][ T113] ? find_held_lock+0x2b/0x80 [ 1428.522373][ T113] ? clockevents_program_event+0x1bf/0x820 [ 1428.524586][ T113] ? __lock_acquire+0x4c5/0x1ec0 [ 1428.526609][ T113] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1428.528859][ T113] ? policy_nodemask+0xed/0x4f0 [ 1428.530467][ T113] alloc_pages_mpol+0x201/0x550 [ 1428.532128][ T113] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1428.534038][ T113] ? filemap_get_entry+0x22d/0x450 [ 1428.535839][ T113] ? filemap_get_entry+0x22d/0x450 [ 1428.537536][ T113] folio_alloc_noprof+0x22/0x250 [ 1428.539174][ T113] filemap_alloc_folio_noprof.part.0+0x3db/0x440 [ 1428.541212][ T113] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 1428.543295][ T113] ? __filemap_get_folio_mpol+0x369/0x1320 [ 1428.545143][ T113] __filemap_get_folio_mpol+0x653/0x1320 [ 1428.546882][ T113] bdev_getblk+0x246/0x6a0 [ 1428.548294][ T113] ? ext4_get_group_desc+0x2b9/0x570 [ 1428.549935][ T113] __ext4_get_inode_loc+0x571/0x1510 [ 1428.551656][ T113] ? __pfx___ext4_get_inode_loc+0x10/0x10 [ 1428.553527][ T113] ? start_this_handle+0xfa7/0x1390 [ 1428.555226][ T113] ? ext4_get_inode_loc+0xbd/0x160 [ 1428.556987][ T113] ext4_get_inode_loc+0xbd/0x160 [ 1428.558635][ T113] ? __pfx_ext4_get_inode_loc+0x10/0x10 [ 1428.560386][ T113] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 1428.562125][ T113] ext4_reserve_inode_write+0x145/0x330 [ 1428.563943][ T113] __ext4_mark_inode_dirty+0x18f/0x910 [ 1428.565693][ T113] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 1428.567540][ T113] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 1428.569481][ T113] ? trace_jbd2_handle_start+0x83/0x240 [ 1428.571274][ T113] ? jbd2__journal_start+0xf7/0x6b0 [ 1428.572988][ T113] ? __ext4_journal_start_sb+0x314/0x610 [ 1428.574854][ T113] ? __ext4_journal_start_sb+0x17b/0x610 [ 1428.576700][ T113] ? ext4_dirty_inode+0xa1/0x130 [ 1428.578289][ T113] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 1428.579939][ T113] ext4_dirty_inode+0xd9/0x130 [ 1428.581462][ T113] ? rcu_is_watching+0x13/0xc0 [ 1428.582997][ T113] __mark_inode_dirty+0x1f3/0x16e0 [ 1428.585108][ T113] sync_lazytime+0x39b/0x5d0 [ 1428.587339][ T113] iput.part.0+0x207/0x1050 [ 1428.589507][ T113] ? dentry_unlink_inode+0x187/0x470 [ 1428.591807][ T113] ? __pfx_do_raw_spin_trylock+0x10/0x10 [ 1428.593837][ T113] iput+0x35/0x40 [ 1428.595074][ T113] dentry_unlink_inode+0x284/0x470 [ 1428.596728][ T113] dentry_kill+0x25d/0xc20 [ 1428.598156][ T113] shrink_dentry_list+0x1e8/0x310 [ 1428.599754][ T113] prune_dcache_sb+0xea/0x150 [ 1428.601356][ T113] ? list_lru_count_one+0x147/0x320 [ 1428.603123][ T113] ? __pfx_prune_dcache_sb+0x10/0x10 [ 1428.604839][ T113] super_cache_scan+0x361/0x5c0 [ 1428.606506][ T113] do_shrink_slab+0x416/0x1200 [ 1428.608119][ T113] shrink_slab+0xa82/0x12e0 [ 1428.609676][ T113] ? shrink_slab+0x677/0x12e0 [ 1428.611209][ T113] ? __pfx_shrink_slab+0x10/0x10 [ 1428.612763][ T113] ? lock_acquire+0x1d1/0x380 [ 1428.614335][ T113] shrink_one+0x398/0x850 [ 1428.615838][ T113] ? shrink_node+0x2b00/0x4320 [ 1428.617550][ T113] shrink_node+0x2b20/0x4320 [ 1428.619103][ T113] ? shrink_node+0x286e/0x4320 [ 1428.620654][ T113] ? __pfx_shrink_node+0x10/0x10 [ 1428.622265][ T113] ? find_held_lock+0x2b/0x80 [ 1428.623764][ T113] ? balance_pgdat+0xb20/0x1f00 [ 1428.625332][ T113] balance_pgdat+0xb20/0x1f00 [ 1428.626859][ T113] ? __pfx_balance_pgdat+0x10/0x10 [ 1428.628465][ T113] ? rcu_is_watching+0x13/0xc0 [ 1428.630030][ T113] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 1428.632205][ T113] ? __lock_acquire+0x4c5/0x1ec0 [ 1428.634038][ T113] ? __schedule+0x126b/0x6920 [ 1428.635779][ T113] ? __lock_acquire+0x4c5/0x1ec0 [ 1428.637390][ T113] ? rcu_is_watching+0x13/0xc0 [ 1428.638910][ T113] kswapd+0x556/0xb50 [ 1428.640168][ T113] ? __pfx_kswapd+0x10/0x10 [ 1428.641581][ T113] ? __rcu_read_lock+0x70/0x70 [ 1428.643098][ T113] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1428.645017][ T113] ? __kthread_parkme+0x18f/0x230 [ 1428.646643][ T113] ? kthread+0x13a/0x450 [ 1428.647982][ T113] ? __pfx_kswapd+0x10/0x10 [ 1428.649425][ T113] kthread+0x373/0x450 [ 1428.650714][ T113] ? __pfx_kthread+0x10/0x10 [ 1428.652185][ T113] ret_from_fork+0x730/0xd60 [ 1428.653655][ T113] ? __pfx_ret_from_fork+0x10/0x10 [ 1428.655288][ T113] ? __switch_to+0x800/0x10f0 [ 1428.656732][ T113] ? __pfx_kthread+0x10/0x10 [ 1428.658329][ T113] ret_from_fork_asm+0x1a/0x30 [ 1428.660145][ T113] [ 1428.661963][ T113] Kernel Offset: disabled [ 1428.663732][ T113] Rebooting in 86400 seconds..