last executing test programs: 22.768344065s ago: executing program 3 (id=2775): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0xd6}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x37}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}]}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xb8}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000580)={0x0, 0x1, 0x0, 0x2000, &(0x7f00001d2000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000580)={0x0, 0x1, 0x0, 0x2000, &(0x7f00001d2000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4138ae84, &(0x7f00000004c0)=@x86={0x7b, 0x40, 0x27, 0x0, 0x2, 0x5, 0x2, 0x8, 0x2, 0x9, 0x2, 0x7, 0x0, 0x96a9, 0x8, 0x6, 0x27, 0x4, 0x3, '\x00', 0x8, 0x5}) ioctl$KVM_RUN(r3, 0xae80, 0x0) socket$inet(0x2, 0x2, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000100)) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000100)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) (async) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x76, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_io_uring_setup(0x4175, &(0x7f0000000180)={0x0, 0x136f, 0x10000, 0x2, 0x2d0}, &(0x7f0000000040), &(0x7f0000000400), &(0x7f0000000000)) io_uring_enter(r5, 0x7b20, 0xe93c, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_RING_FDS(r5, 0x14, &(0x7f0000001b80)=[{0x0, 0x0, 0x0}], 0x1) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r5, 0x18, 0x0, 0x1) r6 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) ioctl$DVB_DEMUX_DMX_SET_FILTER(r6, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7df6165dc7f832e06000000ff4a70f3"}, 0x4000c, 0x5}) (async) ioctl$DVB_DEMUX_DMX_SET_FILTER(r6, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7df6165dc7f832e06000000ff4a70f3"}, 0x4000c, 0x5}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4040, 0x0) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4040, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0xa500, 0xce) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) setxattr$security_ima(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), &(0x7f0000000340)=ANY=[], 0x9, 0x2) 20.865507381s ago: executing program 3 (id=2788): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc8781, 0x0) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1000, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x8000000, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, 0x0, 0x40000) r10 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(0x0, r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x64) 19.609677393s ago: executing program 3 (id=2794): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f00000006c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x28, 0x18, &(0x7f0000000400)={@flat=@binder={0x73622a85, 0x1, 0x1}, @flat=@binder={0x73622a85, 0x1004}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/8, 0x8, 0x0, 0xe}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}, 0x40}], 0x0, 0x1000000000000, 0x0}) 19.585962259s ago: executing program 3 (id=2795): mremap(&(0x7f000007e000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000007f000/0x1000)=nil) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0x1}}, 0x50) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r4, 0xe503, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001a80), r5) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r5, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001e40)={&(0x7f0000000440)={0x2c, r6, 0x1, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x40000, 0x73) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000083c0)="99529ca7d265e2dba44891e35e7d5dab7921b730436ecd4e999a25bcf86a25f8f029c0dd50373e90b7cf7779b12ecd4423c5b13cfac186975cd723976f3c747612913029d42517c189364bc59d8ebad53ed1b86f8f66c99b1f9b5b40d78cef1f14f81815d53bdca7fef40607358db69eb8c0b1f6b0942ab4b1ee7ca8deb4eddef06381a3d1c52d6147fc5109c7c607591497a6b2477f60cc881d3219c96bffb34aadec3fa97250713cce17cd536721bf9c40a019531ed0bbad139e26a3d4d39b68ab1bf37cb1a4bd197a8789cb1940cd86d9e56713bc36c7cffd07a311f5bc2e91f16d152eb480645e85ec9b3bf09c7fa140dced0afd55d7b99e90a96e7748e2d0dc09672ac199ce529e631efe1783769819c182ca106f6184bcbb387ed246c43562d74c36ac3a7ec2f0e11f70bad0007c03bb9c0d2dacc2148cce4a4aea327c7319016ad146b52bfae0357f9e892e9bec61a13c93551cfa3d4f4bfa7585c93bb0bef01a9114f3dc54179cf9a57fe88f5cff3403e33c9d09e3e9c2e10f1f16894e1b59e3cad47c1f202cf7b756f2851fc96d09459c9a8d34c19e6a3525cd5001aac5181f57286d0e1e88ce5092c7c76b6abdaebf2c499aa47587b48eb12a2b72548c190b0324ebedb81a63333b6edb25550f859c5ccc404a944ff7f61af8800888192fbd4c8e0e417d1d181b4b335a6f52e0a7dae18397e81e3f747cab7be902ed903bdd6a622f178f9b4244718ee1206237257374d2fd1466ab6135ef7ef4a114ae170eafe9cd78cf9ffc36974cbc4b8003072bed78765a0b9f1240f24dec6a9e46db9bb498d40f727c0cbf8f4a6a49539bd0805caf65d80130d7fb60a69dc7ed890874a17530c042cf33a977d331435d68ef33885f638c777ad49564ca77d8b81ddd853a21cd55d95b627310dd633a4f005853a5506cd8f744c367f3cb6998b0fa97de6bb35b166b0c6408c4e0a38ed26235a88520c38ca97ac8a6dc81e6dc6483d383fa09f198997b8eea1c68c9e3320683c9a02dd89ddc34c241e7294ccc88d6b35762892e8746e558bfbc2251949f2ecb763dad5b975eaf36e2864be6a41d3e20514d32f5d4b6350dc7e3cc3a85428ea98efb3b1edc2a2ec1e618452949cc7e2ba1251990168fee342d4f304b7a7af9162bcbe6b09c75d7420d2c547b4e3cee1836df6eddd5dff73a4e308fcd8eaa7a33e6980a6f8ead03257a37d72d3b265d02fa42f57db877654ed513e31c35e1af0bd28511d6b57cfe07b27cbe9767a534b426dfc3dd257d5899444f34cbf4dc74b9eab2e7e3e1e1a8a6ac5e4359d653506b299a5b7c67b92dc462f1216655f952362a3387ad9966b606d98e8d1b544dc27dc6bc78fd18a446736e25c51143db9886b6c09812d5825b5d9e0932f218ff8bea4d9e1c4df9c9d4eb19336d48163a921c4ff1f0beef26b01b7e8c0d23fb59b84e229eaabb791f2cffc9aa4db75162cbfe4c9ae8d76a5b6bc4bff20e3f8f125b9aadb3e728d7f78d61fd55f46b7f59511b876e6563256686e44f25cf38d393a9b762bada272eba8df28e4086c4cd2fe3c9fab97756fb145373e6ca1991bb1ee6589e49c821ff29f047970819f88f724bd077cd3f0ae463d99b3e53078431e3f9bebabc5289a65479359efe3909186aac60a29f561de8c590988c913c9e693ab8106e8287f6565eee6735f7c88cad7124d1c8d9ff347e97912824088ee954de01c6d8a06447f06899607eadbfd078bc3df506252005749378dbd7399c9eca60b81dc0d88dedec31e5cf6e7b6d6d411958df8f9e0bf4443e8d3bdfe49d05f811d17088024d0629fc8ab8e05e309bf55e8e60d342623765f4e8d2dc4a90291cd4354ff9568c8170e6ea56e028bcf2719595253adb8c84050bb9ce4927a1c1f4560da87d109ceda90bbe45a1717763d8025f1ff40f157185ddf17079da272ae10c4f34162caf4b0d31221a57b3059fd449c87554d968a54b2eebd760dc3263c40d9eedf5905d5699d29706ea6e9e81ff2bf92489a06deffe7e978661f37a88450783e23f107c2bfce000dfc91c5fca49e46d9ea978f215a45984699f0d2503b30a741e13be56b7abe3e5663c0825c3cb04ead44ce97719c4ee6f4cdd3c452775ad7163d5c9034583cc2dbc2b0c04917a3e1aa3d0a8bb6fcf94d7922eb1d543c09185827aeb1b72ae7103ef2c014af2ff4b47fca40fb0e66ddf0264476d7a84e9b8dc551d4c407bdbac6757f7a25bd404b45bec1091696203cc438860131ad5f2fd80e3c45629864dd9f7d302b66fb8fb86735c9a6dcf8b135a273dd2ae9473bc905081be9fcb8f91b1ddba1ac692798dac0b9ccffe0319a779f5e10c65f294b22fe475283b023f9cd890e92c5447b1bc1528255c5af383bc1fb6e72cb9a67215a9e25cde63c89baa8c7125c7e8b748b728d07d9cb66778404f54e6a9e3ae1ae82f3d0ce77199f23f94a01b71b805b476fedbebeb52c83a1b857f23ba438c56a6c4c2a5909f721e6e3d240e4a16455e92220d13022ce7ec0b1365ba4e67aa6ecb324f8826579e12cebdfc0d8af63e83b5e5624d5b791f99093f9a27f7baea9fd10111209c0857a04f07408111063ef34026aee27a3d51b40e53883f9094402534bdd21cc49d7f5593e99cb204cd805bee4add0f82cf4b6dc5da14d6b79fbc68c9ccf7fb5fe774f8879e13079b024a8ad24bf123c420d630837a84ba05abf0ae4dc3fc04f25c7f74ff91d0d609c958642a48551e51b5c0074a56a7da10ce153b08cabea636f8489d8e7b655758a41d7f7474c9d76bf4d54d789bfceaffef139854065de6a94b0275a9626aab99ae838364b1a491e55017e4212b6b01f7a41bc9c215ecd17c49a8610db28c699259c58b81a0e84c45fd8e719c05c48501c49e8a6515044d247f58e4cd0bf22fd6ae31f45339d1f801196d426c52269b1aaffaf18e2a03760bb231cb7cefa6d72f1d7eb6a3bbd65d0914221b8fbf531dbd562eb4a1b28983ac7d83d4813b10b34c9525ba644f61a2c4800d4fe96a7bca63da1041ed73cc57fb9d42f9dfc8ca41d80292bbb311c89b0a0fcee1d88a025a7416863342aea00e6f049cb2ddebd17c5c617ff562a8af0c965cbe8341431a30ea239e4a62aa2b19757a3b0de04229a9907f8610c27b26591405845bf8b5b83706ed18d910c4f68777378366ff565617b19168a04560a32ce5ad64aaef9f4377118c4335b24826cdcde78fb4bdb11498553f56d8dfeb3a482c70cc6580c399b92339cbdb3464fcc7b00e9839fd0d2b8b6db90c56b33593a0048bf7983421f29b1285c81a239045b96a9b0cacd70d6d9853206471f06915efc8d3ec4c50fb13601abc73247a656066fd7b329159b3ce9e3302b4c0d6aec58cb0946a8ee8e7f55f1af604f1edb4d887fa6292dc0ce57705c1a25dc62650c127d11a364b397aefc2fcc3a164bdc53165a461b01de9180c1461b309c75af0911b4cc1b8aa05652b62119c87b4b235c573aa15b1516cddf61efd6a7f8c953fbaaee9c0e800e8f519e1494de850ddb976864088fe0cf90bbc54395078ea2501e8baa84d6807e184105bc2a140b663416496886422643bbf764d406af06e7d086678828defda0b648b25666b7b5ea29e927141740d5be0e61bf25d40b8404ffd3c67bb855b11d4faf82b7b8051615c101c3deb0601a0fa9ecd8b4a95082ccbc8222b0982802dd8430e653d6eea2786dc3a91397135faffdc65a5bae048f5c463b1a6648becce961d39d063d28d1ad6dafcea0b0878379adb16cc0d4cea572abeacd9a168a4fe2e338092b5bc93ecf02ac6ccda03e5b23adf511fdf7a79442093233b79c67d3fdd3c36c96a8f67aa79e4743d99cf963ae6161877f73656eb0314d889f4b8649bbce8a759f90eac6c006197b54b2bbac7c9b237f1e3dc099c62a65481960e6ad697fc66316ac084ba99c60f58bf44ff45f3b2006cbc4196a25f124dfaf247e863a855ef6070deb45219a922dcf2be9bd01c340e1ca5ed7c3ddac9f7a677c5d00610991d21e0751ac8044585b39f3fec5b672a11a9bce32196c2003d01ea50b0f0403e16df188ecbbb74f295f01398363ddfecdb63a49347c912c125670205d7b6be999688df85bb7d5ac12b62b4fdc4eadcc2a9a7897028404f697b007603a0ad588c772952d6670ee870771774ad157c0b9cccd4b2192d835606198ea0c65036ae4e406cdc539ff3aa81fa20b7ab58d6f3abdb69cc1f503d593f7025d2035e7f21db76336efc2843a0dc9bd2eb8794718134ee68fc57d4d2bcc18969d08177f442b87433b48540c661940cf9e2462c53efa310c7e47487deab2ae15b1978ef05aa1e14110943f649d82486f710a39854409e74edcaf06b4a92d3580b9cdabf83c6351657698d3d5af7514f382e75d1c912cded577258603fc9ed002e010747cddf7885d34afc9a84d82696c6660cb5ecafb68b564908fc49c4db6a187d037241a26b1141cf20f2e968a53366db0f60b79cd98cf3c897c50b7b9728e6e7100f99e4d5ed2428dbd285516ca6660777a39b4b2617c1be5b0232d60b9c8099f5daedbf190109439c40b46090985200d6c0501313f3fa4d244864575c275faca47aeff32c7b3e3c59392618562a7c2d4b3af85a37a8847f595352024cb63d3a9085c2a502c6a3248f43c5fc828e636cb634b2d393d853ae2dc9605985cf85c060860a90256c7b574c1e01c320687a2bb0b2d51cc2950c485f2ffa5db0ad7aaf753f543de7f86efb775c6bac2989a33757a28836fd27f9347229a0004bd2e546994c69c678fe5717f613f905d945c072004c3a80e0e54215e19ff9972521890d4e705e429f16fc35fe5a15f2e6b75cd719d38f76b087b62e4b5dcdb35f4baa2bab167150bafb6c69e260ca51004bc826d46b77c3f67eaa08497294868e6d91b7b867e4da62052f4f891677256cfbaf19cf32bad99a7da69d8a66537686f89a58d78c7eeaa99cd38009a1a32582bedc5c718e57b19cd405ae659a89909356a07fcef89384d160fa5ae6683cc379642aea4f0c915f72d679bd521399cb16112f2abdede3001400b4a64d2173e153a68631183679b56b8f389ba889784133453a7e892fd3b092f5040870a3cfd6f982990143e7c0882b4ff4c5d049192d36925a25ae4be441aa30dc7e74398b340c45b52c73ed3b0cd640e3cc9fd4be24e7355f386106f65895f1ee850b2a781d1d1d322ca5a3b0fdb78ce1eda048ece94af25437969c99c58c08f1446ca5541e03987a20fd75283e3e116dc4c9222ab7522e4ccf6da14aef49cac9a6a2cd4aba1c54d49e6da4179a66b84e384cd3da53908579b28c11d525ebdc4dc69074cef8a9ecd3aab98f2858769d656b46141c3a4e69a5ed6c0a732c9ec1fce080eaebf537fa5e17236a44ba9c931f555d193e475ffafd20c53ccbab607c1a15fd06742a64691205eb0d00f7f40e4dd8efb279cf09b2522aac0729a631aacb92d5cfa2ce6bb07385b981890b5916755d5cc3a51c8c36bd2987068cc24fcf73840895ca9bbb9aff1059601f771afedf0a48d5921103920515b27d7e607951982feba197df8c61600feb3622b9eea13a4db4068728cb98cca76cfae197f6258758490bf41673ee29acd91fd296ec863c646e0ca6a0f0e9de146c663ba13d962964d7c32804fd12a14c1ca7212ad48bdfab469c6570dca562220ecbe7b6b163ed4c9361c5c10bed5c92861b8786ada20a99245d282e4454187ec02adfe354e30647cb10661c85168f7958e3ce69ab48c9455214707a63c9b1167f0845a6bfcce2a96cd53eab430f13cd527f1666290719a47c517cfa22fec2e9916af8aa93c78e567993d7fb8ee60fc4b903b8c67a3658302c5e5f35250c30427e4c055b6c54705bc599861f80b7200d361965ff98c88cc698a2615cadeac4bdfd3d613377cea52d2bbcb7e6b78ac31d4b2c33eaf0b2ed40b963e3cb25c7dfea3ebfe7b4aff2aaaaf184dc80ab649a108e2c830ce7eaea58a263392aa9cd13d7f7bd607dc7c804b19dfa41b3e5a5155201a87311e22062c93896e70f3a5c4b03521300b61cc311ebd5beb9838d0ed207c6bfc99e4392508e95804b10b36024f32e1fe1138e9ee7773f797b2bc6be7416f4e9691ef4c2a8d06af6c8b84bd1e6fd1ba3d3183475ef6c139ccf8dcf37671fbb96a2ab5e0e042f7c4728cf30bcc1a0de28a5024276ceaa194b4926e7f6a97b78bac36e47f832d56a96cd266434d37bcf2c2f57877717d91b1854972f832354acc207a2ee8caace7504e0e6197dd7e64a01c4c67bb2de8acc0cccc6c6bff0b0cbfe345542c5a795dfa48cc0990ab5702574d36494bc44c20f5b324f7c984d986cc8cb40cb2550076d96a069b6688d22171beed2dc5b6ff3ede8fff4c4a9de6d3817357a7ca7d24d87300b4545ebbac8cf7f09ec637a4f4d6bd07673709b6c363a75ccef585610c5f15de7851b5ab53e02a757bfc3caeb9a9a8996beffdc0cfd1201b6cd99cb035584e51a6c15a5d2e17d2f8aa6b41e26809392fac6caed1e02a53dcea8a413203608780dab33315a76eba24d540e4c5b9790420834bc8d4e47bc65ae52a54c0ff308427a8d7aff746aa6589d17514e40fee5d0b3533cf4ad2c5f9d96db9f50bd69ed8c92b860e199a35cf268c66ed13516a3b4b024f62d4b2a656067eece95575bdb4907efc488a9821bc3a9c81dd11b2128b7a01aa7a9ce6e73de3b4e9beced70206f91575baddbcbe5722337953c8016a0f4b62120d776c43b7d1a879b692107954f45acdf8967dcaa994aad4922d4fe093e16c2d0090906f5036af99e50bb09b04e9c9b3b5085abf621297ce203010249cede92e9b66b446b86b43eaaae228dfdd3b4408c12b404bb727f7e969e7da04fc59900112bf8d38af0416dc616e75f167aa1352215f07115a6f4eb6bb5fff6f5c2fc9ab906392036b44090e65fdaf017dc53bc94e0807d679d793df18cc44e6c846d414cef1569530f7692daf91eaaf4ae89fe2522f2c9cf33b6ca508ebcd006bc1a61f0c800553aff9dc7d57200b25ecb83e1e0b8cd29520b63aa649d3f71a62570eee56e03223ddf31f0c04fa686b7f6dd054e7a259d9ba335c2c5b2c508897506c0db7f01878dec1411c33f0af61b81dbcf9ff8bdc0c50044963a79f3ee1462150c6bd03a32dbdfef8d72f0b8b3a395ffb0cc85792e7bc867feb5e312cb64e29e193388e9f173c162f4a1320a6f99ea3795fb77d982605959909a1aa11076fcc779ea6b80ec1bf0edfc2569ec04d15a0bdeebccf3c75393dca5e81663532f8ced12d08e4c2ae6e2954d427c7bf053dc4718f56f453bc88d74045bd2f9747aae9b5298a0de927f1d6b1308f4e1483487f083e71ed09298deb52bb10079b13def7453eb432498069edb5ade70c5c54913684d934a3febf78753ac13300a91f467ff3f6e2f00898f015d08f7739047b321b3eaee5ad8aa7adbf7833f014d8c576a491af9fca6843b327ed513821cb3951b2e67a275225d7af6b382e2f955adaacba5d1fdea2223202dee132b91d5cf381b51da94145255f584a70c5e8d11e06a44afa6599bf3ed0cb61703eba254333af53afac60e54cf6397f9f7302249ab644f0b576c713b15007be1f4f9bb213660bca8a70251472b86669d361ef968f542e81ddbe8f4d2e9cabe8d7bf6a31f14a2cc272963553a424c105e7750437ec5bf316e30ce60b4b0c27ccc1eb27e60f6472fef27654da49905ff9c01b28695310ecd8701aedff25a83da4b7c41995f902bdf249769dcb53a3efa894710dd66ba8745ae2253cc6b75a038183a0bee21226d48239320efad6727093e4f94bbc2fdcc216200d903c32bb9f16dd17d5dac423ae0696f3decc576b8f1fdce63d0532370af7d1e2fa2ca5c5d17bd88f5e3abb4792dac8689ca13752f83d753b06b037bf5a80a3748983790352775685b0414c9d74849fd217e388f904278ddb6b0abdda941b61579c796e2bb77a9bc363b18642c401faa502a31011544111b6eedaa369976c814773d83220a75f31026d6ad0b8b4298ea6062234db232bc435e096e84f740e55bb14d46ae04af0500aa5bb218aff6c76aa8a8e3140a1b0d6638538fd7f30fa8d992e53abf8af2fbc16b9e8a668c1aac72cea1a746ee5f7f3392a4ec8f1d19f2f426b6069b1cd347cbc38bceba96ce5da49198083403143c740c04639cd1089abb34fe812d85921c47437604f684bca44a1eaa965c0a6e1c1fd1f70ee932af3455b36184cc15934cdb3f28959d37d8fc10696f8ec1e4b0c3d1b9ff74a01b796d1bb68954a3768c8bcec741b3b69da892f8922142b16b2cabb469a9906b34216243fac80374c10e178c5fd36440f8d7a8588a9c2510d86ffa8cb68ce8c330d2111c94724e522f04573dad43bce252eb505d29ca9379a6b281519d38b7174f3ae8f185544f3003c936a7e6b23ca97a313aac6a061caa45fda73522f3061767bb4e33dbe4bde390eb0f07225a8aef939cb6ab2ada10c02527281abad394cd4ea9f59467a08b72047cdb75d7b2b98e5b4542554a60f953ac7a4b980f42518eec05ff2c044549cab0cf33eef36dfbabcbc0300009d898862d2194cfcdd9a713c30bbe52291105193656ea5eb830873ac956469d31689cc3c69edb5cb9a6e31ce3e6fb50ddd4e52ef9fdeacfc0db21e1e83e0d8d0a64f17cacb4dc208a893e7fd8ffa86cfc554dfba3d9fd281115eccb4b9d909f2fbf3fbb66bedd7b5db3f6d4f076f5d8fb54f8832896f8ef6f624162f1dd589be7a8e87dd5065708a8b0bfb18a5c2299f5605ac8a11c1add55b2018e6099380a70bee3e0727ca6ec58928fe6eb3147b47401e8d822eebade713b58335787669e5e0de5d328a1067df4cd9124665bb02ee8adfd1b3618374ef167df1f0fe79456f78aee3da4c1bf397e4637b0cf41a0f4a2910efd02b17bf5f3c15b0084b36fa7d4e85a53e5be366b428244eeba7499c3e54397227928e2ff6e583f332d6f7e8cf4d058f379b58a7d03a4bfa454bb4b6d543804b8970e6a9fe8886179eb418a8ce9e509e8433571f7d32378f2e983fa418c8c91760ec9fb20968e7fc23b7c4ac71693b2576ac0f8ce2020ff1e7a7ff24301b48b544fb29a1ca4f2502daded865e488a16dd33ec67b2eee3025cdc5ef90f253c4b5e0a61d51e495b675c5a1d55b4ba3812c5f44cd08487e61d36b0c2dc32d27333a5ee8a0906bfbcd388bd9389d1509912c0471c7b706a5aff880569a3fb11ac5f14d780deb4c1b1afe30fb6b8daf87b27a4ceb869d587a97f2f5af8d819aa47bbf207db68a6ecbbefb1e109ed0bfbbf3b54fba9e79de8fad9c3bcd3e74b8b92ccea3ff5c558c6cd72d78a711fc39df603bd4aa1439dd302258edd2204e52d7f435c6f552b612fbc321bea971195cd4d8bb033e2a779e239164d7eea6d8fd233b0b9b776246564cfcf44b31a83031a2413bf98a398c9f93da243cef9ce73d81bade8ad551fb0ffa75bc874c11d23ac9d7752f22a0f54c3870f3314a83e64332db810da1ebb288e10c4eb9be9ec037317b8f813e68160a887da3f5c0389510a0734b69ef275e19973b169d340610cf2112e9964cc0566b9b690c3feb36c8526491d3a563f0bead2abbcf0665e048aa3f929351b2f89876580633a403250ae3b5244c8c0e996bf888938dfc8920348d88e272e6eadc7c0387ca1dae228bd620ce3975d43b58758d9412d304a227245587065f58c4573ba2557f1d8333ba007709b1239d682f03405b22135757178fb701bbde81d2f8faaa7666c025d8a8bb426dc4b8e61aed79b3b3d3a9b01ee9142772d869677ede166e7a8be8ab84cdd6946b1478ce77ba307213971cfb24c86c344310f279e38d22254bf4caf83c02e715cb0550e615dc9f8dd2400fa749e3527493c15fb454c158e4c0603ae6e962b7890058ec7c10f0618ee274a15bca6ca9fe5bc5f9e7797c0950299912be9c58463c07d667d4bffe8aa590ae43db08512b40f3d265026bef2facdd508984e5f6d2ac7ef573397f14ed2e2ccdcbe5796e60ae64d173814906d1da5a5bfe8a2a4c5d6bb0b3315b878b4877d0c045f6e6cfa0dfc1ea4de7abe26f2b2d8c93299ed1d83f1b7853c756bfa346cd53b008fec169883983fe0f2405777dd85e17b2e4e8b23432c0dc4c386d67b6597184d0b4b95877362304638484cc0951400f66ee8391dd44417c58b3d46a8345a8049fcd70f7b5f4a6f912e2b18760947c74ef2b732b342878d7e7cc99902de87db36469555fbbfe76189f108d6ab31f4727fe4e22d075afaf6cc726ab17a5e1b4ab6c8f29a459da3c4266b5ad8ff55906a190f8b19a3bb92a50df49647c03d5d6106ec07e9300038d059a75b54ac31683ef8e5eee946e1c84d016ee1e7800a92c0a3823b62e0417fe86b191951f65abc0c38c1e0e8f1121a04b62a8a720790560f922804b1b7e7eaa497e1bede6e3d0dcf0312dbf221561958fa1e85a8f99e6fc82f919e78c17d1beda16cfef25fb5d00f7c32df9a51eac76000c988ffdf011564aa0e319764b16a5a7c728a470ff70772fb76c9ada26a0ac073fcbfa12501c2454b19e02d928e3939a40bfff76c002533b3849cdf8016728445131e5f1e292b7d3dc06bb3a3cfff6fabae0b7341694a8938c1d2497cd70b76c337c9a312e96c8f736d7625a535e1906eba53d199221ca60202a65be0f7e530aca10e61fa39c7601d65954e5ed4cab94345c6b89c7f8a0de5c61a7945e1564731b6715331d13263b2961a163382f7c4934d847033860e402f3aadb4f3e6cf47a97a2031401da4d2c8de8c80cdad71b97b4deb2075a02282f958ac6772354e67f097ca693778224b80892490015e7d697fb9107f75cea708178ffec93fb1d44e8493bad1d42c918e661219ea819e0200759037a5a585c0fe074fd407536fe58013f42612c41bfc66e16870d7a9c00ee93a3122b253fecbf5de3837641f4a1376af0f053463413c26c29f9a346318565276856b963da30ba6ab8c4c8ef6cfddc432328586d9d9829895835759bcde0851ae0c838a3927ea63fe5ba793fae94da61cab00fc05f3a265a2da1221bb2b66775ed7ba856b41011652d4984991e56249360ddfc997245ac1547a1c16382d42df383a8d1c852643b24895c422712e79c436fdfffece4ed1c50922d4f25296aaf6b204522086d188bee254f8303b60537ead1195ac5dd301286f0042dd68aa05a70e4beb779aa0b61a316f736b72c9ab7ed860a0908a078f4b8a53f2df0abf993f689de4b02b9138ca5047fb0bfc9ba3b92bff033e36fc9553260b008cef3d147c62d1d3944fd1eaff79bc5a922ec2190907bfda1b51c2c7fb867db1f8e13a37b5e3ae0165e93350b958a239ec1f2b78561cff854b975307b5b5dd23b040602a5a36bd79947ee04c7d0e5e30f9c4c79f7b4e6eada98bfc6c357cdf8939213423f1b21ba26cfc2b2756ea3eb992372db0ab8a7c37d8ae96bf3ed6be873c1891550ef741812032e1ae938326c399ee43a3061602dda006f1b6b620bebb6a5752bee77e8acf9921ebf4d4c8af7eb5e937c65697c0664c594e31a62377a25605051996c474ca322ce8e0e6ef8a7988be", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)={0xd8, 0x0, 0xfffffffffffffff9, [{{0x1, 0x2, 0x2, 0x100, 0x3, 0x8, {0x6, 0x9, 0x4, 0x80000000000000fc, 0x3, 0x0, 0x7fffffff, 0x58, 0x4, 0x9000, 0x4000009, r2, r3, 0x1, 0x4}}, {0x5, 0x537, 0x2b, 0xf3, ':-(\\\xc9\x80\x00\x00\t\xc3\x00\x00\xf39|\xd8mM\x92\x8d\x14\xd3\xa4a\xb6\x02E\x89\x85V\xc2\x06\x00\x00\x00\x00\x00+\x13;\b\x01\x00'}}]}, 0x0, 0x0, 0x0}) getdents64(r7, &(0x7f0000000100)=""/134, 0x86) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f000000cf00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) process_vm_writev(r8, &(0x7f0000001c80)=[{&(0x7f0000000140)=""/156, 0x9c}], 0x1, &(0x7f0000000400)=[{&(0x7f0000001cc0)=""/98, 0x62}], 0x1, 0x0) write$FUSE_POLL(r4, &(0x7f0000000000)={0x18, 0xfffffffffffffffe, 0x0, {0x25}}, 0x18) 19.119297518s ago: executing program 3 (id=2802): r0 = socket$inet6(0xa, 0x3, 0x5) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x2a8, 0x0, 0x5802, 0x294, 0xf0, 0x294, 0xf0, 0x378, 0x378, 0x1d8, 0x378, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x52020000}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', {0x3}}}}, {{@ipv6={@private2, @local, [0x0, 0xffffff, 0xff, 0xff000000], [0x0, 0xffffff00, 0xff, 0xff000000], 'pimreg1\x00', 'wlan0\x00', {}, {0xff}, 0x0, 0x7, 0x0, 0x8}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x42, 'RATEEST\x00', 0x0, {'syz0\x00', 0x9, 0x3, {0xffffffffffffffff}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) 18.759480751s ago: executing program 3 (id=2810): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) close(0x3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="090b00000000000000000500000008000300", @ANYRES32=r2], 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) 18.733089949s ago: executing program 32 (id=2810): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) close(0x3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="090b00000000000000000500000008000300", @ANYRES32=r2], 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) 2.366904446s ago: executing program 4 (id=2949): r0 = openat$dir(0xffffff9c, &(0x7f0000000680)='./cgroup.cpu/cgroup.procs\x00', 0x80000, 0x24) r1 = openat(r0, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x20a82, 0x1e) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) read$FUSE(r2, &(0x7f0000002900)={0x2020, 0x0, 0x0, 0x0}, 0x2020) sendmsg$sock(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)}, 0x4008800) quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f0000000540)=@md0, r3, &(0x7f00000005c0)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f0000000000)=[@ioring_restriction_sqe_flags_allowed={0x2, 0x2}, @ioring_restriction_register_op={0x0, 0x2}, @ioring_restriction_sqe_flags_required={0x3, 0x18}, @ioring_restriction_register_op={0x0, 0xa}, @ioring_restriction_sqe_op={0x1, 0x18}], 0x5) r4 = socket$igmp6(0xa, 0x3, 0x2) r5 = syz_ublk_setup_io_uring(0x1c, &(0x7f0000001500)={0x0, 0x0, 0x100, 0x2, 0x1e5, 0x0, r1}, &(0x7f0000001580)=0x0, &(0x7f00000015c0)=0x0, &(0x7f0000000140)=0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x24004800) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r9, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r10 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000000, 0x8, 0x1, 0xc05}) mq_getsetattr(r10, &(0x7f0000000040)={0x0, 0x40, 0x4, 0x7ff}, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r12, 0xae60) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r13, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1}) ioctl$KVM_RUN(r13, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r12, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x8000000, 0x9, 0x10001, 0xfffffffd, 0x0, [{0x2, 0x2, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x2, '\x00', 0xa}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x2, 0xf5, '\x00', 0xf}, {0x9, 0x89, 0xc, '\x00', 0xfb}, {0xfd, 0x9, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xef, '\x00', 0x7f}, {0x3, 0x4, 0x1, '\x00', 0x8}, {0x7f, 0x5, 0xb, '\x00', 0x8}, {0xd7, 0xd, 0x8, '\x00', 0xa}, {0x0, 0x28, 0x7, '\x00', 0xdc}, {0x40, 0x1, 0x5, '\x00', 0x2}, {0xfe, 0x3, 0x26}, {0xcf, 0xfa, 0xb, '\x00', 0x5}, {0xf, 0x3, 0x5, '\x00', 0x10}, {0x39, 0x2, 0x6, '\x00', 0x8}, {0x9, 0x6, 0x0, '\x00', 0x8}, {0x5, 0x7, 0x5, '\x00', 0xc}, {0x7, 0x1, 0x7}, {0x0, 0x80, 0x1, '\x00', 0x81}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x3, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4, '\x00', 0x8}]}}) mq_timedreceive(r10, &(0x7f0000000500)=""/4096, 0x1000, 0x6, &(0x7f0000000240)={0x77359400}) madvise(&(0x7f000049f000/0x2000)=nil, 0x2000, 0x9) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f00000003c0)={0x2e, 0x5, 0x7f00, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x3c1, 0x3, 0x444, 0x0, 0x150, 0x150, 0x0, 0xf8010000, 0x37c, 0x238, 0x238, 0x37c, 0x238, 0x3, 0x0, {[{{@ipv6={@local, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [0xffffff00, 0x0, 0xff000000], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x20c, 0x274, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x4}}, @common=@inet=@sctp={{0x144}, {[], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000001, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffd], 0x6, [{}, {}, {}, {0x0, 0x0, 0x1}], 0x80, 0x1, 0x4}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x8000, 0x0, 0xb6, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0x0, 0xffffffff], [], 'batadv_slave_0\x00', 'gre0\x00', {}, {}, 0x87}, 0x0, 0xc8, 0x108, 0x0, {}, [@common=@mh={{0x24}, {"32cf", 0x1}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x5, 0x14, {0x8}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4a0) 2.23784467s ago: executing program 0 (id=2950): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f00000006c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000140)={0x30, 0x30, 0x30}}, 0x40}], 0x0, 0x1000000000000, 0x0}) 2.237342551s ago: executing program 4 (id=2951): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201000000000040f30455070000000000010902240001000040b109040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xd, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000fcfffffffa0000008000000085000000a800000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)={0x20, 0x12, 0x5, {0x5, 0x1, '\x00t\x00'}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x400) 2.08963567s ago: executing program 0 (id=2953): syz_io_uring_setup(0xefd, &(0x7f0000000080)={0x0, 0xfffffffe, 0x2, 0x83, 0x3af}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000040)) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)="180c4552", 0x4) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x900, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c55080000000c547d03d8a0f4bd00", [0x0, 0x6]}}) 1.998164766s ago: executing program 0 (id=2954): syz_emit_ethernet(0x6a, &(0x7f00000006c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0008004503005c00000000002f9078bd300600000000e0000001248081000000000000000cf910000800000086dd86dd88be00000000100000020100000000000004080022eb00000001200000080200000000000000fffd0000080065580000000012c3278771af6bc451c9a7793083aaab03edfd0b037838231c11beca4e2cb4f56381052d9bf27651c74f61d7cbbabe9269e0456f4f0c32fe"], 0x0) r0 = socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x4, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3df], [0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2000, 0x1000]}}}}]}, 0x88}}, 0x20000000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x4) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=0xffffffffffffffff, 0x4) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0x40}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r4, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r5, 0x4) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40186f40, &(0x7f0000000440)=0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x16, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0x4, 0x8, &(0x7f00000002c0)="0000ffff", &(0x7f0000000300)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x20, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000001010000000000ff0000008510000000865168f10d4a77280000009500"/48], &(0x7f0000000040)='syzkaller\x00', 0xffffff93, 0x83, &(0x7f0000000200)=""/131, 0x41000, 0x0, '\x00', r2, @netfilter=0x2d, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x3, 0xb, 0x0, 0x7fffffff}, 0x10, r5, r6, 0x3, 0x0, &(0x7f00000003c0)=[{0x1, 0x2, 0xb, 0x3}, {0x3, 0x4, 0x6, 0x7}, {0x3, 0x1, 0x8}], 0x10, 0x2}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x5, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf3ffffff, 0x0, 0x0, 0x0, 0x80ffffff}, [@jmp={0x5, 0x0, 0x849aee721dcc84be, 0x0, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x43}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) setrlimit(0x0, &(0x7f0000000980)={0x0, 0x62}) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x5, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000600a8000600200002400700027c035c0461c1d67f6f94007134cf6efb807ca007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x7c, 0x4a0f0000}, 0x0) r9 = fsmount(r1, 0x0, 0x2) close(r7) fchdir(r9) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1.89965346s ago: executing program 0 (id=2956): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4090) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0xfffff000, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x1800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0x2, 0x5, 0xb7a4, 0x1, 0xffff}, 0x3e3, [0xc, 0x40, 0xcd6, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffff06bd, 0x2, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x4, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x1, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x9, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffd, 0xa7d6, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x9, 0xfd, 0x101, 0x4, 0x6, 0xa, 0x1b, 0x202, 0x2, 0x5, 0x80000000, 0xffff, 0x9, 0x0, 0x6, 0x2, 0xffffff87, 0xe, 0xa0, 0xf, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x9, 0x1, 0x9, 0x664, 0x4, 0x9, 0x9, 0x2, 0x8, 0xfffffffd, 0x10, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xc6, 0x1, 0x4, 0x6, 0xe6, 0x6, 0x10001, 0x8, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0x2, 0x40, 0x1c, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0x63, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x4, 0x5, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x7, 0xc4c, 0x45e3, 0x5, 0x1, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0xf, 0x0, 0x5, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0xc, 0x3, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80000001, 0x8, 0x8000, 0x4, 0x10, 0x8, 0x9, 0x5, 0x3ff, 0x6, 0x10001, 0x0, 0x4, 0x10000, 0x4, 0xfff7, 0x2, 0x89, 0x2, 0x6, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x0, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x2, 0x4, 0x0, 0x1, 0x4, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x4, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0x1, 0x89aa, 0x8, 0x0, 0xf0ce, 0x4, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x5, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0xd58, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x40000001, 0x80000000, 0xb, 0x0, 0xc8d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0x5, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x4, 0x2, 0x80000000, 0xd, 0x2, 0x1, 0x0, 0x20000005, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0xc, 0x8, 0x9, 0x1, 0x7f, 0x9a, 0x9, 0xb, 0x800, 0x4, 0x3ff, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20000000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x101, 0x4, 0x0, 0x96c6, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b14, 0x10000, 0x1, 0x6, 0x1, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0x1, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x2, 0x2, 0x4, 0x80000000, 0xb46d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0x9, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0xff, 0x5, 0x2, 0x2, 0x4, 0xfffc, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0x0, 0x80, 0x3, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x193, 0x8, 0x0, 0x5, 0xf, 0x3, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x9, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0x3, 0x9, 0x1, 0x80000000, 0x9, 0x0, 0x5, 0x800081, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x1a, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x2, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x9, 0x8, 0x5, 0x8, 0x1ff, 0x7fef, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x8001, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x100, 0x4, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0xfffffffc, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x3, 0x81, 0x8, 0x14, 0x8, 0x9, 0x80, 0xffff, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x9, 0xfffffffb, 0x7, 0x9, 0x2, 0x5, 0x6, 0x2, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0xb8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0x0, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc04, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x9, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x2000008, 0x2000a, 0x9, 0xc0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x0, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x9, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x4, 0x62, 0x2, 0x1, 0xfffffffa, 0x1af88, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0x8, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x0, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xdd, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0xe75, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x101, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0x9, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x5, 0x8]}) write$char_usb(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x600, 0x0, 0xf000, 0x6}, [@IFLA_ADDRESS={0xa, 0x3, @random="99fa3a1c872f"}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x44}}, 0x0) 1.737111737s ago: executing program 2 (id=2958): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0x3, 0x1, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000cc0)=@newqdisc={0x6c, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x10, 0xb}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1, 0x9, 0x20000003, 0x2, 0x3, 0x100, 0x6e, 0x5, 0x8, 0x1, 0xa, 0x1a, 0x1d, 0x0, 0xffff8004, 0x9}}]}}]}, 0x6c}}, 0x24040004) 1.650173815s ago: executing program 2 (id=2959): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000340), 0x2000011a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r2, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x2007ff}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYRES16=0x0], 0x14}, 0x1, 0x0, 0x0, 0x4c850}, 0x4000005) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r4 = openat$ipvs(0xffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r1) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r5, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x5c2d11ed736c188a}, 0x4000) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) 1.450012628s ago: executing program 2 (id=2960): r0 = openat$dir(0xffffff9c, &(0x7f0000000680)='./cgroup.cpu/cgroup.procs\x00', 0x80000, 0x24) r1 = openat(r0, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x20a82, 0x1e) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) read$FUSE(r2, &(0x7f0000002900)={0x2020, 0x0, 0x0, 0x0}, 0x2020) sendmsg$sock(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)}, 0x4008800) quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f0000000540)=@md0, r3, &(0x7f00000005c0)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f0000000000)=[@ioring_restriction_sqe_flags_allowed={0x2, 0x2}, @ioring_restriction_register_op={0x0, 0x2}, @ioring_restriction_sqe_flags_required={0x3, 0x18}, @ioring_restriction_register_op={0x0, 0xa}, @ioring_restriction_sqe_op={0x1, 0x18}], 0x5) r4 = socket$igmp6(0xa, 0x3, 0x2) r5 = syz_ublk_setup_io_uring(0x1c, &(0x7f0000001500)={0x0, 0x0, 0x100, 0x2, 0x1e5, 0x0, r1}, &(0x7f0000001580)=0x0, &(0x7f00000015c0)=0x0, &(0x7f0000000140)=0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x24004800) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r9, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r10 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000000, 0x8, 0x1, 0xc05}) mq_getsetattr(r10, &(0x7f0000000040)={0x0, 0x40, 0x4, 0x7ff}, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r12, 0xae60) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r13, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1}) ioctl$KVM_RUN(r13, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r12, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x8000000, 0x9, 0x10001, 0xfffffffd, 0x0, [{0x2, 0x2, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x2, '\x00', 0xa}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x2, 0xf5, '\x00', 0xf}, {0x9, 0x89, 0xc, '\x00', 0xfb}, {0xfd, 0x9, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xef, '\x00', 0x7f}, {0x3, 0x4, 0x1, '\x00', 0x8}, {0x7f, 0x5, 0xb, '\x00', 0x8}, {0xd7, 0xd, 0x8, '\x00', 0xa}, {0x0, 0x28, 0x7, '\x00', 0xdc}, {0x40, 0x1, 0x5, '\x00', 0x2}, {0xfe, 0x3, 0x26}, {0xcf, 0xfa, 0xb, '\x00', 0x5}, {0xf, 0x3, 0x5, '\x00', 0x10}, {0x39, 0x2, 0x6, '\x00', 0x8}, {0x9, 0x6, 0x0, '\x00', 0x8}, {0x5, 0x7, 0x5, '\x00', 0xc}, {0x7, 0x1, 0x7}, {0x0, 0x80, 0x1, '\x00', 0x81}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x3, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4, '\x00', 0x8}]}}) mq_timedreceive(r10, &(0x7f0000000500)=""/4096, 0x1000, 0x6, &(0x7f0000000240)={0x77359400}) madvise(&(0x7f000049f000/0x2000)=nil, 0x2000, 0x9) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f00000003c0)={0x2e, 0x5, 0x7f00, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x3c1, 0x3, 0x444, 0x0, 0x150, 0x150, 0x0, 0xf8010000, 0x37c, 0x238, 0x238, 0x37c, 0x238, 0x3, 0x0, {[{{@ipv6={@local, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [0xffffff00, 0x0, 0xff000000], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x20c, 0x274, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x4}}, @common=@inet=@sctp={{0x144}, {[], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000001, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffd], 0x6, [{}, {}, {}, {0x0, 0x0, 0x1}], 0x80, 0x1, 0x4}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x8000, 0x0, 0xb6, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0x0, 0xffffffff], [], 'batadv_slave_0\x00', 'gre0\x00', {}, {}, 0x87}, 0x0, 0xc8, 0x108, 0x0, {}, [@common=@mh={{0x24}, {"32cf", 0x1}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x5, 0x14, {0x8}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4a0) 1.114146977s ago: executing program 2 (id=2961): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xa, 0x6}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) close(r3) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0xa797, 0xb, 0x20000000, 0x5}, 0x4f, 0x5, [{0x3e, 0x40, 0x400, 0xc46cc644, 0x551, 0x5}]}, [{0x0, 0x3, 0x9, 0x1, 0x10, 0x9}, {0x9, 0x3ff, 0x8, 0x1, 0xb5c, 0x3}, {0x8, 0x3ff, 0x7, 0x800, 0xe07, 0x4}, {0xffff93ee, 0x5dfd, 0x1, 0x2, 0xfffffffe, 0x39}, {0xd71, 0xff, 0x80000, 0x81, 0x3}, {0x4, 0x7, 0x7, 0xb, 0x8001, 0x8}, {0x9, 0x0, 0x7fff, 0x6, 0x7ff, 0xa1}, {0x40, 0x8, 0x4, 0x8, 0xc, 0x6}, {0x1, 0x2, 0xfffffffd, 0x9, 0x8, 0x6}, {0x81, 0x1, 0x3, 0x400, 0x7, 0xfffffffa}, {0x8, 0xf5, 0x8, 0x1000, 0x7, 0x9}, {0x5, 0x2, 0x3, 0x7, 0x96, 0x10000}, {0x1ff, 0x9, 0x79, 0x6, 0x5, 0xfffffff8}, {0xffff76f4, 0x1e, 0x3, 0x1, 0x8, 0xc0}, {0x89c, 0x0, 0x101, 0x3, 0xffff, 0xd}, {0x7fff, 0x2, 0xaf, 0x80000001, 0x6, 0x9}, {0x800, 0x7, 0xdfcb, 0x8, 0x7f72, 0x6}, {0x3, 0x6, 0x5, 0x3, 0x8, 0x7}, {0x1, 0xfffffffd, 0x1, 0x800, 0x4, 0x5}, {0xfffffffa, 0x8, 0x9, 0x9, 0x6, 0x1bad}, {0x272, 0x800, 0x7, 0xffffffff, 0x80000000, 0x2}, {0x3, 0x9, 0x8, 0x1, 0x40, 0x7}, {0x6, 0x6, 0x5, 0x2, 0x3, 0x101}, {0x0, 0x8001, 0x8, 0x6, 0xf, 0xfffffffc}, {0x3, 0xfffff1ad, 0xa, 0x101, 0x6, 0xd495}, {0x929, 0x5, 0x1, 0x400000, 0x6, 0x9}, {0x1ff, 0x8, 0x8, 0x1, 0x0, 0x3}, {0x2, 0x3, 0x7, 0x0, 0x2, 0xb}, {0xcd, 0x6, 0xa00000, 0x10001, 0x7, 0x1}, {0xfffffffa, 0x1, 0x2d, 0x3, 0x2, 0x2}, {0xb224, 0x8, 0x7, 0x509, 0x5, 0xfce9}, {0x4080, 0x61a0, 0x8, 0x5a4, 0x200, 0x10}, {0x2, 0x0, 0x4, 0x3, 0x9, 0x800}, {0x427d, 0x8d, 0x908d, 0xffffff9c, 0x3, 0x8}, {0xd6, 0x3ff, 0x2, 0x10001, 0x9, 0x6}, {0x5, 0x5, 0x3, 0x1000, 0x80000001, 0x7}, {0x4fe49d73, 0x3, 0x0, 0x101, 0x9130, 0x7}, {0x2, 0xfffffffe, 0xfe, 0x8a69, 0x1, 0xc36}, {0x5c0, 0x6436, 0x8, 0x1, 0x4, 0x5}, {0xe26f, 0x200, 0x3, 0x85a, 0x608, 0xfffffffa}, {0x3, 0x1, 0x1000, 0x1000, 0x9, 0x2}, {0xa, 0x3, 0x40, 0xb0e, 0xc9d3, 0x7fff}, {0x10, 0x0, 0x4, 0x2, 0x8001, 0x1}, {0x8, 0x4, 0x24050b64, 0x84, 0x5, 0x8}, {0x8, 0x5e5, 0x4f0155f4, 0x8, 0x8}, {0xa08, 0x7, 0x2, 0x9, 0xfffffe00}, {0x0, 0x100, 0x2, 0x2, 0x3, 0x5e4}, {0x9, 0x7, 0x6, 0x81, 0x1ff, 0x8}, {0x1, 0xb2bfc89, 0x3, 0x7f, 0x10001, 0x2}, {0x8, 0xea31, 0x81, 0x1, 0x5, 0x18b4}, {0x0, 0x6, 0x36d, 0x1, 0xe1, 0x1}, {0x1400, 0x0, 0x1, 0x800, 0x6, 0x6294}, {0x100, 0x0, 0x6, 0x7d, 0x7fffffff, 0x18}, {0x3, 0x2, 0x5, 0x7, 0x8, 0x4}, {0x0, 0xffff7c05, 0x7, 0xe, 0x9}, {0x3, 0x80, 0x7, 0x5, 0x714, 0x590}, {0x5, 0x8, 0xe, 0x8, 0x49a24cd3}, {0x7, 0x40000003, 0x4, 0xb3, 0x2, 0xfff}, {0x80000000, 0x7, 0x5, 0x30fd, 0x9, 0x7ff}, {0x8, 0xa, 0x1, 0x2, 0xc7e7, 0x1000}, {0x0, 0xffffffff, 0x4, 0x3, 0x157d, 0x7}, {0x6, 0x2, 0x6, 0x74f, 0x4, 0x4}, {0x20d, 0x6, 0x8, 0x3, 0x6, 0x4}, {0x4, 0xb, 0x3, 0xddd, 0x5, 0x5}, {0xd4f, 0x4, 0xffffffff, 0x7, 0x81, 0x201}, {0x7, 0x1, 0x0, 0x4, 0x80000000, 0xffff}, {0x88, 0x9, 0xe, 0x9, 0x8, 0x457}, {0x6, 0xb, 0x8, 0xff, 0xfffffffa, 0x3}, {0x7, 0x5, 0x9, 0x7, 0xf, 0x2}, {0x6, 0x8900, 0xcc, 0x100, 0xffffffe3, 0xff}, {0x8, 0x0, 0x6, 0x400, 0x80, 0xfffffffe}, {0x0, 0x8, 0x5, 0x1, 0xffffffff, 0x8}, {0xb00, 0x7, 0x3, 0x0, 0x7, 0x7}, {0xffff0001, 0xb1ee, 0x6, 0x5823, 0x5, 0x9d}, {0x1, 0x101, 0x80000001, 0x8, 0x46b45ec5, 0xda2}, {0x1, 0x140, 0x5, 0x6d, 0xe, 0x1000}, {0x6, 0x8, 0xfffffb89, 0xa0a0, 0x3, 0xffff}, {0x0, 0x8, 0x1, 0x6, 0x3, 0x3}, {0x400, 0x8, 0x800000, 0x8, 0x1}, {0x7, 0x80000001, 0x0, 0x6, 0x1, 0xfd}, {0x9, 0x1, 0x9a, 0x5, 0x7, 0x6}, {0x6, 0x6, 0x3, 0x4, 0x2}, {0x1, 0x0, 0x800, 0x6, 0x6, 0x9}, {0x41, 0x3, 0x9cb8, 0x0, 0x14, 0x9}, {0x4, 0x6, 0x7, 0x71, 0x0, 0x5}, {0x27f6, 0xfffffff8, 0x80000000, 0x400, 0x4000009, 0x1000}, {0x5, 0x2, 0x6, 0xffffffba, 0x0, 0x2}, {0x5e70, 0x3, 0x7ff, 0x789, 0x5, 0x2}, {0x3db6, 0x9, 0xc, 0x8, 0x3, 0xdef}, {0xf3, 0x4, 0x4, 0x4, 0x5, 0x6}, {0xb57, 0x5, 0xb95, 0x9, 0xfff, 0x7}, {0x7, 0x200, 0x8, 0xfffeffff, 0x1ffc00, 0x8}, {0xfffffffe, 0xd, 0x8, 0x7, 0xa, 0x7}, {0x3, 0x81, 0x7, 0x4, 0x8, 0xcde5}, {0x572d, 0xb699, 0x5, 0x0, 0x8, 0xe}, {0x4bf, 0x3, 0x10000007, 0x1, 0x401}, {0x400, 0x0, 0x1, 0x0, 0x6, 0x3ff}, {0x101, 0x7, 0x4, 0x3c, 0x3, 0x1ff}, {0x4, 0x8, 0x4, 0xfff, 0x2, 0x1}, {0x3, 0x7596, 0x1, 0x9, 0xffff, 0x7fff}, {0x9, 0x800, 0x40, 0x9, 0xffff, 0xbb9}, {0x7, 0x6, 0x9, 0x9, 0x9, 0xffff}, {0x7fff, 0xd8ac, 0x400000, 0x5, 0xbde}, {0x11, 0x9, 0x2ed6, 0x2, 0x0, 0x81}, {0x27d, 0xf, 0xcde, 0x6, 0x5, 0x114a}, {0x1, 0x8, 0x5, 0x8, 0x4, 0xa}, {0xd9, 0x47, 0x7e, 0x6, 0x401, 0x4}, {0xa, 0x7, 0xb69, 0xffffffff, 0x1f, 0x80000000}, {0x10000, 0x6, 0x4, 0x10000, 0x2, 0xc4}, {0x7ff, 0x80, 0x6, 0xfffffff8, 0x3f7, 0x5}, {0x1198, 0x9, 0x5, 0x5, 0x8, 0x9}, {0x4, 0x6, 0xa, 0x6, 0x0, 0x3}, {0x3, 0xafb, 0x1, 0x7, 0x0, 0x4}, {0x1ff, 0x9, 0x2, 0x5, 0x7f, 0xc}, {0xffffffc0, 0x0, 0xb6, 0x3, 0xf000, 0x7}, {0x0, 0x62b, 0x8, 0x800, 0x0, 0x8}, {0x3, 0x3, 0x6, 0x57d, 0x7, 0xd5}, {0xe800, 0x5, 0x2, 0x211, 0x8, 0x1}, {0x3, 0x6, 0x6, 0x5, 0x8}, {0xffff, 0x7fffffff, 0x4c, 0x785, 0x3}, {0x9, 0x401, 0x5000, 0x0, 0x3, 0x1d7}, {0x3, 0x3, 0xf, 0xfddb, 0x6, 0x5}, {0x5, 0x0, 0x6, 0x9, 0x66, 0x4}, {0x8, 0x7, 0x4, 0x4, 0x2, 0x8}, {0x0, 0x6, 0x1, 0x5, 0x2, 0x9}, {0xe5, 0x43, 0x7ff, 0x2, 0x380, 0x2}, {0x8001, 0x5, 0x3, 0x8, 0xffffffff, 0x5}, {0x10000, 0x3, 0x400, 0xcb77, 0x2, 0xfe2a}], [{0x4}, {0x1}, {0x3}, {0x4, 0x1}, {0x3}, {0x2}, {0x5}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {0x2, 0x833b0195d0c1ead6}, {0x4, 0x1}, {0x2}, {0x2}, {}, {0x1}, {0x0, 0x1}, {0x6, 0x1}, {0x4}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x1}, {0x4}, {0x2}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x3}, {0x3}, {0x4}, {0x4, 0xb0a1b2cb829f0c58}, {}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x6}, {0x2, 0x1}, {0x3}, {0x1}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x5}, {0x5}, {}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x4}, {0x4, 0x1}, {0x281f5cc8dc2390cd}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {0x1}, {0x44f390bc39b5fbbd, 0x1}, {0xb3ffe6e0e4e70638, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x3}, {0x2}, {0x4, 0x1}, {}, {0x1}, {0x3, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1}, {0x3}, {0x2, 0x2}, {0x4, 0x1}, {0x1, 0x3}, {0x5, 0x1}, {0x4}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x28}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200084014000e00002fb96dffff1144ee163cddcb000000800000827600000000006000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x300}], 0x2}, 0x40005) 984.88049ms ago: executing program 0 (id=2963): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x8000000, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x4}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0xfd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}}, 0x0) 984.361337ms ago: executing program 1 (id=2964): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000010000000400000008"], 0x50) r1 = openat$cachefiles(0xffffff9c, &(0x7f00000001c0), 0x200, 0x0) ioctl$CDROMREADAUDIO(r1, 0x530e, &(0x7f0000000280)={@msf={0x6, 0xff, 0x8}, 0x1, 0x11, &(0x7f0000000240)=""/17}) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0xfffdfffd}, [@call={0x85, 0x0, 0x0, 0x28}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8}, 0x94) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0xfffdfffd}, [@call={0x85, 0x0, 0x0, 0x28}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e09f547ed3f02dc1fd3d6487775b", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) epoll_create1(0x0) (async) r4 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0x20000014}) (async) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000600)={0xa0000013}) ppoll(&(0x7f0000000140)=[{r5, 0xa180}, {r6, 0x110}], 0x2, 0x0, 0x0, 0x0) close_range(r4, r5, 0x0) (async) close_range(r4, r5, 0x0) sendmmsg$inet_sctp(r2, &(0x7f0000000d00), 0x0, 0x4000044) (async) sendmmsg$inet_sctp(r2, &(0x7f0000000d00), 0x0, 0x4000044) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000600)=""/26) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) (async) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) 984.120954ms ago: executing program 2 (id=2965): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) userfaultfd(0x80801) socketpair$unix(0x1, 0x3, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x5) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b7000000639d00eabca30000000000002403000030feffff720af0ffa4ffffff71a4f0ff000000001f030000000000002e100200000000002604f8ffffff000414010000000300001d130000000000007a0a00fe0020001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb150c537bf2085651d6dd6ce9bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf0134c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4136dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91ff073e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30c1675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab000000000000003f8dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc090000000000000061563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9901010000b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba435926b61c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0aa81192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e5789c6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06eef98aee88ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a274000000000000000000000000000000000000000000000009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06ee0ff698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e913ac1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e495295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000060000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c97552606ffff97e86dc995604346262a177b06c634969a31b5717c416f8224662f4dd46d6081cb96dd607410ee222ec8f206c4b74"], &(0x7f00000001c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffd}, 0x35861afe2a15ad58}, 0x48) 910.359387ms ago: executing program 0 (id=2966): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c638054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd52ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d665b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33172100322d1df18804a9ea2079ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce400000000", 0xc4}, {&(0x7f0000000900)="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", 0x126}], 0x24, 0x0) write(0xffffffffffffffff, 0x0, 0x0) setsockopt(r0, 0x84, 0x4, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2}, 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000ac0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x82}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @exit]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket(0xa, 0x80000, 0x8006) r7 = userfaultfd(0x80801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_UNREGISTER(r7, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000640)=0x8) r9 = openat$vimc2(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r10 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) syz_usb_control_io$hid(r10, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@main=@item_012={0x0, 0x0, 0xb}, @local=@item_4={0x3, 0x2, 0x1, "45501821"}, @global=@item_012={0x1, 0x1, 0x8, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "86"}, @main=@item_4={0x3, 0x0, 0xb, "4070f43f"}]}}, 0x0}, 0x0) r11 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGES(r11, 0xd01c4813, 0x0) readv(r9, &(0x7f0000000780)=[{&(0x7f0000000240)=""/142, 0x8e}], 0x1) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f00000003c0)={r8, 0xcb}, 0x8) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="5c00000013006bec9e3be35c6e17aa210725876c0d000000ba090000160af3653c001ec004000202080002000300e4002c000000ea2933add81715daae69b556a705251e618294ff0051f60a84c9f4d4938037e786a6d00003000000", 0x65}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4a046) 710.417512ms ago: executing program 1 (id=2967): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0x3, 0x1, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000cc0)=@newqdisc={0x6c, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x10, 0xb}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1, 0x9, 0x20000003, 0x2, 0x3, 0x100, 0x6e, 0x5, 0x8, 0x1, 0xa, 0x1a, 0x1d, 0x0, 0xffff8004, 0x9}}]}}]}, 0x6c}}, 0x24040004) 607.460489ms ago: executing program 1 (id=2968): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x18, 0x1411, 0x105, 0x70bd2a, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x400000, 0x0, 0xb}, 0x18) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x0, 0x2}, 0x6) 524.868775ms ago: executing program 4 (id=2969): r0 = openat$dir(0xffffff9c, &(0x7f0000000680)='./cgroup.cpu/cgroup.procs\x00', 0x80000, 0x24) r1 = openat(r0, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x20a82, 0x1e) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) read$FUSE(r2, &(0x7f0000002900)={0x2020, 0x0, 0x0, 0x0}, 0x2020) sendmsg$sock(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)}, 0x4008800) quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f0000000540)=@md0, r3, &(0x7f00000005c0)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f0000000000)=[@ioring_restriction_sqe_flags_allowed={0x2, 0x2}, @ioring_restriction_register_op={0x0, 0x2}, @ioring_restriction_sqe_flags_required={0x3, 0x18}, @ioring_restriction_register_op={0x0, 0xa}, @ioring_restriction_sqe_op={0x1, 0x18}], 0x5) r4 = socket$igmp6(0xa, 0x3, 0x2) r5 = syz_ublk_setup_io_uring(0x1c, &(0x7f0000001500)={0x0, 0x0, 0x100, 0x2, 0x1e5, 0x0, r1}, &(0x7f0000001580)=0x0, &(0x7f00000015c0)=0x0, &(0x7f0000000140)=0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x24004800) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r9, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r10 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000000, 0x8, 0x1, 0xc05}) mq_getsetattr(r10, &(0x7f0000000040)={0x0, 0x40, 0x4, 0x7ff}, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r12, 0xae60) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r13, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1}) ioctl$KVM_RUN(r13, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r12, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x8000000, 0x9, 0x10001, 0xfffffffd, 0x0, [{0x2, 0x2, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x2, '\x00', 0xa}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x2, 0xf5, '\x00', 0xf}, {0x9, 0x89, 0xc, '\x00', 0xfb}, {0xfd, 0x9, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xef, '\x00', 0x7f}, {0x3, 0x4, 0x1, '\x00', 0x8}, {0x7f, 0x5, 0xb, '\x00', 0x8}, {0xd7, 0xd, 0x8, '\x00', 0xa}, {0x0, 0x28, 0x7, '\x00', 0xdc}, {0x40, 0x1, 0x5, '\x00', 0x2}, {0xfe, 0x3, 0x26}, {0xcf, 0xfa, 0xb, '\x00', 0x5}, {0xf, 0x3, 0x5, '\x00', 0x10}, {0x39, 0x2, 0x6, '\x00', 0x8}, {0x9, 0x6, 0x0, '\x00', 0x8}, {0x5, 0x7, 0x5, '\x00', 0xc}, {0x7, 0x1, 0x7}, {0x0, 0x80, 0x1, '\x00', 0x81}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x3, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4, '\x00', 0x8}]}}) mq_timedreceive(r10, &(0x7f0000000500)=""/4096, 0x1000, 0x6, &(0x7f0000000240)={0x77359400}) madvise(&(0x7f000049f000/0x2000)=nil, 0x2000, 0x9) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f00000003c0)={0x2e, 0x5, 0x7f00, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x3c1, 0x3, 0x444, 0x0, 0x150, 0x150, 0x0, 0xf8010000, 0x37c, 0x238, 0x238, 0x37c, 0x238, 0x3, 0x0, {[{{@ipv6={@local, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [0xffffff00, 0x0, 0xff000000], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x20c, 0x274, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x4}}, @common=@inet=@sctp={{0x144}, {[], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000001, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffd], 0x6, [{}, {}, {}, {0x0, 0x0, 0x1}], 0x80, 0x1, 0x4}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x8000, 0x0, 0xb6, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0x0, 0xffffffff], [], 'batadv_slave_0\x00', 'gre0\x00', {}, {}, 0x87}, 0x0, 0xc8, 0x108, 0x0, {}, [@common=@mh={{0x24}, {"32cf", 0x1}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x5, 0x14, {0x8}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4a0) 524.019168ms ago: executing program 1 (id=2970): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000001480)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002040)=ANY=[@ANYBLOB='@\r\x00\x00', @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="24000300000000000000000000000000000000000000000000000000000000000000000024000300a05ca84f6c9c8e3853e2fd7a7cae0fb20fa152600cb00845174f08076f8d7843080007"], 0xd40}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000110000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006c617374000000000400028008000340000001"], 0xe4}}, 0x800) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)=0x6100204) syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/160, 0xa0}], 0x1, 0x6, 0x20000000) unshare(0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$evdev(0x0, 0x0, 0x2000) ioctl$EVIOCGVERSION(r6, 0x5452, &(0x7f0000002200)=""/188) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) r8 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_PREPARE_BUF(r8, 0xc04c565d, &(0x7f00000000c0)=@userptr={0x0, 0x4, 0x4, 0x100000, 0x3ff, {}, {0x5, 0x2, 0xa, 0x95, 0x3, 0x5, "953d0753"}, 0x2, 0x2, {0x0}, 0x8000}) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@allocspi={0x104, 0x16, 0x1, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0xa0}, {@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3a}}, 0x0, 0x33}, @in6=@dev={0xfe, 0x80, '\x00', 0xe}, {0x6, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffee, 0x3}, {0x0, 0x0, 0x2, 0xfffbfffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe55286f1921f74be}, 0x0, 0x1a0b1}, [@mark={0xc, 0x15, {0x350759, 0x1}}]}, 0x104}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r10 = socket$can_j1939(0x1d, 0x2, 0x7) r11 = openat$binder_debug(0xffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$can_raw(r11, &(0x7f00000003c0)={&(0x7f0000000140)={0x1d, r7}, 0x10, &(0x7f0000000340)={&(0x7f0000000200)=@can={{0x4, 0x0, 0x1}, 0x2, 0x3, 0x0, 0x0, "817ba97dfcab7b12"}, 0x10}, 0x1, 0x0, 0x0, 0x20008090}, 0x20004800) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0xf0, 0x30, 0x1, 0xe501, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x30, 0x1, {0x0, 0x81000000, 0x800, 0x0, 0x0, {0x0, 0x1}, {}, 0x8001}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x0, 0x0, 0x400000, {0x0, 0x0, 0x0, 0x0, 0xffff}, {0x4}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xf0}}, 0x0) write$FUSE_NOTIFY_STORE(r11, &(0x7f0000000440)=ANY=[@ANYBLOB="290000000000000000020000000000000080000000000000000100"/41], 0x29) getsockopt$CAN_RAW_LOOPBACK(r11, 0x65, 0x3, &(0x7f0000000480), &(0x7f00000004c0)=0x4) bind$can_j1939(r10, &(0x7f0000000080)={0x1d, r7, 0x5, {0x2, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r10, 0x0, 0x4081) ioctl$KVM_CREATE_VM(r11, 0xae01, 0x25) 327.079201ms ago: executing program 1 (id=2971): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73f72dc9f0ba1f8483a0000005e1206021f1f00000e000a0010000000028000fd1294", 0x2e}], 0x1}, 0x4840) 270.284521ms ago: executing program 4 (id=2972): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f00000006c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@flat=@binder={0x73622a85, 0x1, 0x1}, @flat=@binder={0x73622a85, 0x1004}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0xe}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}, 0x40}], 0x0, 0x1000000000000, 0x0}) 198.945866ms ago: executing program 1 (id=2973): socket$nl_generic(0x10, 0x3, 0x10) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (rerun: 32) socket$inet6_tcp(0xa, 0x1, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0xc, 0x7ffe, 0x0, 0x4, 0x6, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) (async) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000000)={{0x77359400}, {0x0, 0x3938700}}, 0x0) (async, rerun: 32) r2 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/144, 0x90, 0x2f) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async, rerun: 64) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 64) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CAP_HALT_POLL(r8, 0x4068aea3, &(0x7f00000005c0)={0xb6, 0x0, 0xba0}) r9 = openat$cgroup_int(r6, &(0x7f0000000700)='notify_on_release\x00', 0x2, 0x0) sendfile(r9, r9, 0x0, 0x7) sendmmsg$sock(r4, &(0x7f00000044c0), 0x4000000000001c0, 0x0) (async) recvfrom(r5, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION2(0xffffffffffffffff, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0xa7000, &(0x7f0000ffc000/0x2000)=nil}) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) 197.677477ms ago: executing program 4 (id=2974): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd00032800e6000003a60c6eec00be122829fffe8000000000000000000000000000aaff020000030000000000"], 0xfdef) 247.865µs ago: executing program 2 (id=2975): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = fsopen(&(0x7f0000001200)='cgroup2\x00', 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffff", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000000000000850000007100000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0x1d) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r1, 0x0, 0x4) r5 = openat$cgroup_ro(r4, &(0x7f00000000c0)='cgroup.controllers\x00', 0x5000000, 0x0) readv(r5, &(0x7f00000012c0)=[{&(0x7f0000000100)=""/4080, 0xff0}], 0x1) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r6, 0x29, 0x37, 0x0, 0x8) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0x4, 0xc52d}}}}]}, 0x44}}, 0x4c850) sendmsg$nl_route_sched(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005880)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0xd, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x10, 0xfff2}}]}}]}, 0x3c}, 0x1, 0x0, 0x608, 0x20041004}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001100)=ANY=[@ANYBLOB="215fec3c000000100001040000022f4c6d010000000000000000", @ANYBLOB="0380000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) syz_open_dev$sndctrl(&(0x7f0000000000), 0x7, 0x343c00) 0s ago: executing program 4 (id=2976): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0x3, 0x1, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000cc0)=@newqdisc={0x6c, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x10, 0xb}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1, 0x9, 0x20000003, 0x2, 0x3, 0x100, 0x6e, 0x5, 0x8, 0x1, 0xa, 0x1a, 0x1d, 0x0, 0xffff8004, 0x9}}]}}]}, 0x6c}}, 0x24040004) kernel console output (not intermixed with test programs): evsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 385.822845][T12508] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.862102][T12514] team0: Device ipvlan0 failed to register rx_handler [ 386.006506][T12508] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.012048][T12508] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.026927][ T5154] loop1: [CUMANA/ADFS] p1 [ADFS] p1 [ 386.029260][ T5154] loop1: partition table partially beyond EOD, truncated [ 386.032457][ T5154] loop1: p1 size 2989602745 extends beyond EOD, truncated [ 386.096669][ T7684] usb 5-1: Error in usbnet_get_endpoints (-71) [ 386.116175][ T7684] usb 5-1: USB disconnect, device number 13 [ 386.210732][ T5821] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 386.214326][ T5821] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.246113][ T5821] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 386.250001][ T5821] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.255949][ T5154] loop1: [CUMANA/ADFS] p1 [ADFS] p1 [ 386.258382][ T5154] loop1: partition table partially beyond EOD, truncated [ 386.262487][ T5154] loop1: p1 size 2989602745 extends beyond EOD, truncated [ 386.274323][T12524] netlink: 'syz.1.1943': attribute type 5 has an invalid length. [ 386.325324][ T5821] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 386.336208][ T5821] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.340757][ T5821] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 386.344300][ T5821] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.384551][ T5154] loop1: [CUMANA/ADFS] p1 [ADFS] p1 [ 386.386355][ T5154] loop1: partition table partially beyond EOD, truncated [ 386.389070][ T5154] loop1: p1 size 2989602745 extends beyond EOD, truncated [ 386.474356][ T6259] udevd[6259]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 386.691234][T12535] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1945'. [ 386.857403][T12533] devpts: Unknown parameter '0x0000000000000000' [ 386.966703][T12533] cdrom: dropping to single frame dma [ 387.002826][T12542] netlink: 'syz.0.1949': attribute type 1 has an invalid length. [ 387.094381][T12544] vlan2: entered allmulticast mode [ 387.096122][T12544] veth0_to_bond: entered allmulticast mode [ 387.285542][T12553] xt_CT: You must specify a L4 protocol and not use inversions on it [ 387.723804][T12558] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1953'. [ 387.757086][T12559] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1952'. [ 387.836340][T12563] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1954'. [ 387.842811][T12563] batadv1: left allmulticast mode [ 387.844988][T12563] batadv1: left promiscuous mode [ 387.847881][T12563] bridge0: port 3(batadv1) entered disabled state [ 387.856108][T12563] bridge_slave_1: left allmulticast mode [ 387.860555][T12563] bridge_slave_1: left promiscuous mode [ 387.863239][T12563] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.870635][T12563] bridge_slave_0: left allmulticast mode [ 387.873189][T12563] bridge_slave_0: left promiscuous mode [ 387.876275][T12563] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.051206][T12566] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1955'. [ 388.356054][T12576] binder: 12575:12576 ioctl 4018620d 0 returned -22 [ 388.417709][T12578] syzkaller0: entered promiscuous mode [ 388.420322][T12578] syzkaller0: entered allmulticast mode [ 388.714760][T12580] xt_CT: You must specify a L4 protocol and not use inversions on it [ 388.722588][T12580] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1958'. [ 388.955271][T12586] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1963'. [ 389.035961][T12590] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 389.042299][T12590] xt_TPROXY: Can be used only with -p tcp or -p udp [ 389.089777][ T845] bridge0: entered promiscuous mode [ 389.683207][T12600] binder: 12599:12600 ioctl 4018620d 0 returned -22 [ 390.227645][T12604] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1970'. [ 390.237331][ T43] audit: type=1804 audit(1784219252.512:105): pid=12607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1969" name="/newroot/537/bus/bus" dev="overlay" ino=2821 res=1 errno=0 [ 390.331616][T12608] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1969'. [ 390.584105][T12624] tmpfs: Unknown parameter '£' [ 390.616096][ T7316] Bluetooth: hci4: Frame reassembly failed (-84) [ 390.631397][ T7316] Bluetooth: hci4: Frame reassembly failed (-84) [ 390.965781][T12629] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1978'. [ 390.984892][T12629] bond11: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 391.327225][T12629] bond11 (unregistering): Released all slaves [ 391.355825][T12632] binder: 12631:12632 ioctl 4018620d 0 returned -22 [ 391.694578][T12636] xt_CT: You must specify a L4 protocol and not use inversions on it [ 391.703374][T12636] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1979'. [ 392.657447][ T5757] Bluetooth: hci4: command 0x1003 tx timeout [ 392.657550][ T5751] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 393.157798][T12658] binder: BINDER_SET_CONTEXT_MGR already set [ 393.160507][T12658] binder: 12657:12658 ioctl 4018620d 800002c0 returned -16 [ 393.221046][T12662] FAULT_INJECTION: forcing a failure. [ 393.221046][T12662] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 393.237800][T12662] CPU: 3 UID: 0 PID: 12662 Comm: syz.0.1989 Tainted: G L syzkaller #0 PREEMPT(full) [ 393.237832][T12662] Tainted: [L]=SOFTLOCKUP [ 393.237838][T12662] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 393.237849][T12662] Call Trace: [ 393.237856][T12662] [ 393.237863][T12662] dump_stack_lvl+0x100/0x190 [ 393.237890][T12662] should_fail_ex.cold+0x5/0xa [ 393.237911][T12662] _copy_from_iter+0x1f4/0x1690 [ 393.237939][T12662] ? __asan_memset+0x23/0x50 [ 393.237989][T12662] ? __pfx__copy_from_iter+0x10/0x10 [ 393.238012][T12662] ? __pfx___alloc_skb+0x10/0x10 [ 393.238042][T12662] netlink_sendmsg+0x808/0xda0 [ 393.238105][T12662] ? __pfx_netlink_sendmsg+0x10/0x10 [ 393.238136][T12662] ? apparmor_socket_sendmsg+0x15b/0x270 [ 393.238212][T12662] ____sys_sendmsg+0xa4d/0xbe0 [ 393.238233][T12662] ? __pfx_netlink_sendmsg+0x10/0x10 [ 393.238255][T12662] ? __pfx_____sys_sendmsg+0x10/0x10 [ 393.238284][T12662] ___sys_sendmsg+0x190/0x1e0 [ 393.238307][T12662] ? __pfx____sys_sendmsg+0x10/0x10 [ 393.238338][T12662] ? find_held_lock+0x2b/0x80 [ 393.238369][T12662] __sys_sendmsg+0x160/0x210 [ 393.238386][T12662] ? __pfx___sys_sendmsg+0x10/0x10 [ 393.238409][T12662] ? __pfx_ksys_write+0x10/0x10 [ 393.238463][T12662] __do_fast_syscall_32+0xe7/0x970 [ 393.238482][T12662] ? lockdep_hardirqs_on+0x78/0x100 [ 393.238506][T12662] do_fast_syscall_32+0x32/0x70 [ 393.238522][T12662] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 393.238542][T12662] RIP: 0023:0xf700efec [ 393.238561][T12662] Code: Unable to access opcode bytes at 0xf700efc2. [ 393.238568][T12662] RSP: 002b:00000000f53fd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 393.238583][T12662] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 393.238593][T12662] RDX: 000000000004a046 RSI: 0000000000000000 RDI: 0000000000000000 [ 393.238602][T12662] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 393.238610][T12662] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 393.238619][T12662] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 393.238638][T12662] [ 393.281038][T12664] netlink: 'syz.2.1990': attribute type 10 has an invalid length. [ 393.373899][T12664] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1990'. [ 393.394477][T12664] team0: Port device geneve1 added [ 393.632634][T12673] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1991'. [ 394.698570][T12685] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1996'. [ 395.754379][T12715] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2004'. [ 395.835614][T12721] netlink: 'syz.0.2006': attribute type 1 has an invalid length. [ 396.044409][T12727] xt_CT: You must specify a L4 protocol and not use inversions on it [ 396.058800][T12729] netlink: 'syz.1.2009': attribute type 1 has an invalid length. [ 396.112595][T12731] netlink: 'syz.0.2017': attribute type 1 has an invalid length. [ 396.179060][ T24] usb 7-1: new full-speed USB device number 20 using dummy_hcd [ 396.342002][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 396.348803][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 396.355297][ T24] usb 7-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 396.360916][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.377549][ T24] usb 7-1: config 0 descriptor?? [ 396.630369][T12744] ubi: mtd0 is already attached to ubi16 [ 396.850249][ T24] usb 7-1: string descriptor 0 read error: -71 [ 396.857654][ T24] usbhid 7-1:0.0: can't add hid device: -71 [ 396.861753][ T24] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 396.866013][ T24] usb 7-1: USB disconnect, device number 20 [ 396.906971][T12755] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2019'. [ 396.911103][T12755] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2019'. [ 396.914250][T12755] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2019'. [ 396.917266][T12755] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2019'. [ 396.920171][T12755] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2019'. [ 396.923031][T12755] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2019'. [ 396.925941][T12755] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2019'. [ 396.929134][T12755] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2019'. [ 396.932004][T12755] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2019'. [ 396.934803][T12755] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2019'. [ 397.508210][T12763] netlink: 'syz.2.2023': attribute type 10 has an invalid length. [ 397.519041][T12763] team0: Device ipvlan0 failed to register rx_handler [ 397.769655][T12771] ntfs3(nullb0): Primary boot signature is not NTFS. [ 397.772877][T12771] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 397.873160][T12781] netlink: 'syz.2.2031': attribute type 5 has an invalid length. [ 397.895780][T12783] binder: 12782:12783 ioctl c0306201 0 returned -14 [ 398.346208][T12798] xt_CT: You must specify a L4 protocol and not use inversions on it [ 399.725271][ T43] audit: type=1326 audit(1784219262.002:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12806 comm="syz.2.2039" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x0 [ 400.174266][T12830] netlink: 'syz.0.2048': attribute type 1 has an invalid length. [ 400.434426][ T5533] usb 7-1: new full-speed USB device number 21 using dummy_hcd [ 400.592596][ T5533] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 400.597080][ T5533] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 400.601878][ T5533] usb 7-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 400.604888][ T5533] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.652903][T12846] netlink: 'syz.1.2052': attribute type 10 has an invalid length. [ 400.683672][T12846] xt_TPROXY: Can be used only with -p tcp or -p udp [ 400.869327][T12848] netlink: 'syz.3.2054': attribute type 10 has an invalid length. [ 401.162853][T12857] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 401.744162][ T5533] usb 7-1: config 0 descriptor?? [ 402.173194][ T5533] elan 0003:04F3:0755.0011: unknown main item tag 0x0 [ 402.177524][ T5533] elan 0003:04F3:0755.0011: unknown main item tag 0x0 [ 402.181163][ T5533] elan 0003:04F3:0755.0011: failed to start in urb: -90 [ 402.190290][ T5533] elan 0003:04F3:0755.0011: hidraw1: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 402.441406][ T7684] usb 7-1: USB disconnect, device number 21 [ 402.483534][T12873] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.486451][T12873] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.562146][T12873] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 402.577617][T12873] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 404.701980][ T43] audit: type=1326 audit(2000000003.540:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12919 comm="syz.1.2079" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54fec code=0x7ffc0000 [ 404.709566][ T43] audit: type=1326 audit(2000000003.540:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12919 comm="syz.1.2079" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54fec code=0x7ffc0000 [ 404.716280][ T43] audit: type=1326 audit(2000000003.550:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12919 comm="syz.1.2079" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f54fec code=0x7ffc0000 [ 404.723284][ T43] audit: type=1326 audit(2000000003.550:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12919 comm="syz.1.2079" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54fec code=0x7ffc0000 [ 404.730525][ T43] audit: type=1326 audit(2000000003.550:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12919 comm="syz.1.2079" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54fec code=0x7ffc0000 [ 404.737261][ T43] audit: type=1326 audit(2000000003.550:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12919 comm="syz.1.2079" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f54fec code=0x7ffc0000 [ 404.743664][ T43] audit: type=1326 audit(2000000003.550:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12919 comm="syz.1.2079" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54fec code=0x7ffc0000 [ 404.750318][ T43] audit: type=1326 audit(2000000003.550:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12919 comm="syz.1.2079" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54fec code=0x7ffc0000 [ 405.222237][T12939] __nla_validate_parse: 13 callbacks suppressed [ 405.222257][T12939] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2086'. [ 405.237160][T12939] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2086'. [ 405.259961][T12937] loop9: detected capacity change from 0 to 2640 [ 405.274405][T12937] Buffer I/O error on dev loop9, logical block 0, async page read [ 405.278940][T12937] Buffer I/O error on dev loop9, logical block 0, async page read [ 405.281858][T12937] Buffer I/O error on dev loop9, logical block 0, async page read [ 405.284797][T12937] Buffer I/O error on dev loop9, logical block 0, async page read [ 405.288941][T12937] Buffer I/O error on dev loop9, logical block 0, async page read [ 405.291669][T12937] Buffer I/O error on dev loop9, logical block 0, async page read [ 405.294544][T12937] Buffer I/O error on dev loop9, logical block 0, async page read [ 405.298297][T12937] Buffer I/O error on dev loop9, logical block 0, async page read [ 405.303364][T12937] ldm_validate_partition_table(): Disk read failed. [ 405.307174][T12937] Buffer I/O error on dev loop9, logical block 0, async page read [ 405.317188][T12937] Buffer I/O error on dev loop9, logical block 0, async page read [ 405.322832][T12937] Dev loop9: unable to read RDB block 0 [ 405.327166][T12937] loop9: unable to read partition table [ 405.332473][T12937] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾‚³˜) failed (rc=-5) [ 405.618716][ T9] usb 7-1: new full-speed USB device number 22 using dummy_hcd [ 405.771104][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 405.792613][ T9] usb 7-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 405.800616][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.806074][ T9] usb 7-1: Product: syz [ 405.810639][ T9] usb 7-1: Manufacturer: syz [ 405.814561][ T9] usb 7-1: SerialNumber: syz [ 405.830827][ T9] usb 7-1: config 0 descriptor?? [ 405.856231][ T9] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 406.445375][ T9] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 406.449405][ T9] gspca_pac7302 7-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 406.466315][ T9] usb 7-1: USB disconnect, device number 22 [ 406.767184][ T43] audit: type=1800 audit(2000000005.610:115): pid=12961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2094" name="file0" dev="overlay" ino=2510 res=0 errno=0 [ 406.985474][T12963] tunl0: entered promiscuous mode [ 406.987819][T12963] netlink: 'syz.2.2095': attribute type 4 has an invalid length. [ 406.990935][T12963] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2095'. [ 408.077211][ T43] audit: type=1326 audit(2000000006.920:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12970 comm="syz.0.2098" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf700efec code=0x0 [ 409.963070][T13015] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2110'. [ 411.877732][T13051] sctp: [Deprecated]: syz.0.2122 (pid 13051) Use of struct sctp_assoc_value in delayed_ack socket option. [ 411.877732][T13051] Use struct sctp_sack_info instead [ 412.263133][T13061] gre1: entered promiscuous mode [ 412.265267][T13061] gre1: entered allmulticast mode [ 412.274133][T13058] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2126'. [ 412.387459][ T24] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 412.547563][ T24] usb 5-1: too many configurations: 13, using maximum allowed: 8 [ 412.551739][ T24] usb 5-1: config 0 has no interfaces? [ 412.554088][ T24] usb 5-1: config 0 has no interfaces? [ 412.557301][ T24] usb 5-1: config 0 has no interfaces? [ 412.561435][ T24] usb 5-1: config 0 has no interfaces? [ 412.563816][ T24] usb 5-1: config 0 has no interfaces? [ 412.566360][ T24] usb 5-1: config 0 has no interfaces? [ 412.569019][ T24] usb 5-1: config 0 has no interfaces? [ 412.571556][ T24] usb 5-1: config 0 has no interfaces? [ 412.574652][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 412.577789][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.580328][ T24] usb 5-1: Product: syz [ 412.581642][ T24] usb 5-1: Manufacturer: syz [ 412.583018][ T24] usb 5-1: SerialNumber: syz [ 412.586297][ T24] usb 5-1: config 0 descriptor?? [ 412.795270][ T9] usb 5-1: USB disconnect, device number 14 [ 413.437076][ T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 413.606529][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 413.611720][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 413.621050][ T9] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 413.627015][ T9] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 413.629479][ T9] usb 5-1: Product: syz [ 413.630792][ T9] usb 5-1: Manufacturer: syz [ 413.643125][ T9] usb 5-1: SerialNumber: syz [ 413.652434][ T9] usb 5-1: config 0 descriptor?? [ 413.654609][T13060] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 415.228436][ T34] usb 5-1: USB disconnect, device number 15 [ 415.507070][T13121] netlink: 'syz.0.2149': attribute type 1 has an invalid length. [ 415.541683][T13121] 8021q: adding VLAN 0 to HW filter on device bond8 [ 415.555377][T13121] bond8: entered promiscuous mode [ 415.558533][T13121] bond8: entered allmulticast mode [ 415.604105][T13126] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 416.526441][ T5839] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 416.686904][ T5839] usb 6-1: Using ep0 maxpacket: 32 [ 416.704107][ T5839] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 416.731418][ T5839] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 416.737505][ T5839] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 416.740813][ T5839] usb 6-1: Product: syz [ 416.742497][ T5839] usb 6-1: Manufacturer: syz [ 416.743900][T13157] binder: 13156:13157 ioctl c0306201 800004c0 returned -14 [ 416.744333][ T5839] usb 6-1: SerialNumber: syz [ 416.747916][ T5839] usb 6-1: config 0 descriptor?? [ 416.751775][T13137] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 417.360886][ T9] usb 6-1: USB disconnect, device number 27 [ 417.446465][ T845] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 417.616319][ T845] usb 5-1: Using ep0 maxpacket: 8 [ 417.619622][ T845] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 417.622993][ T845] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 417.625717][ T845] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 417.629354][ T845] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 417.632633][ T845] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 417.635771][ T845] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 417.638821][ T845] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.652049][ T845] hub 5-1:1.0: bad descriptor, ignoring hub [ 417.654017][ T845] hub 5-1:1.0: probe with driver hub failed with error -5 [ 417.657079][ T845] cdc_wdm 5-1:1.0: skipping garbage [ 417.659290][ T845] cdc_wdm 5-1:1.0: skipping garbage [ 417.667623][ T845] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 417.669948][ T845] cdc_wdm 5-1:1.0: Unknown control protocol [ 417.943732][T13180] cdc_wdm 5-1:1.0: Error submitting int urb - -90 [ 417.980458][ T845] usb 5-1: USB disconnect, device number 16 [ 418.156386][ T5839] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 418.306337][ T5839] usb 7-1: Using ep0 maxpacket: 16 [ 418.335331][ T5839] usb 7-1: unable to get BOS descriptor or descriptor too short [ 418.338812][ T5839] usb 7-1: no configurations [ 418.340510][ T5839] usb 7-1: can't read configurations, error -22 [ 420.320133][ T5757] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 420.332509][ T5757] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 420.336052][ T5757] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 420.339604][ T5757] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 420.343091][ T5757] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 421.329905][T13254] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.341564][T13254] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.350179][T13254] bridge_slave_0: entered allmulticast mode [ 421.357701][T13254] bridge_slave_0: entered promiscuous mode [ 421.365820][T13254] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.376314][T13254] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.385253][T13254] bridge_slave_1: entered allmulticast mode [ 421.392445][T13254] bridge_slave_1: entered promiscuous mode [ 421.429148][T13254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.441624][T13254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.470586][T13254] team0: Port device team_slave_0 added [ 421.475178][T13254] team0: Port device team_slave_1 added [ 421.498780][T13254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.501779][T13254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 421.512758][T13254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 421.518561][T13254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 421.520740][T13254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 421.529341][T13254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 421.564040][T13254] hsr_slave_0: entered promiscuous mode [ 421.567253][T13254] hsr_slave_1: entered promiscuous mode [ 422.060454][T13254] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 422.069123][T13254] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 422.072884][T13254] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 422.085153][T13254] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 422.088844][T13254] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 422.099515][T13254] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 422.108937][T13254] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 422.114000][T13254] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 422.188306][T13254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 422.207493][T13254] 8021q: adding VLAN 0 to HW filter on device team0 [ 422.215526][T12203] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.217820][T12203] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.244813][T12203] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.247123][T12203] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.426407][ T5757] Bluetooth: hci4: command tx timeout [ 422.752425][T13254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 422.815466][T13254] veth0_vlan: entered promiscuous mode [ 422.841956][T13254] veth1_vlan: entered promiscuous mode [ 422.901890][T13254] veth0_macvtap: entered promiscuous mode [ 422.920338][T13254] veth1_macvtap: entered promiscuous mode [ 422.979133][T13254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 423.002876][T13254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 423.033738][ T5821] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.037719][ T5821] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.042095][ T5821] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.045794][ T5821] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.214024][ T7339] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.222031][ T7339] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.286364][ T7317] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.289648][ T7317] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.742284][T13337] overlayfs: overlapping lowerdir path [ 424.496059][ T5757] Bluetooth: hci4: command tx timeout [ 424.496093][ T5533] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 424.646053][ T845] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 424.658132][ T5533] usb 6-1: config 0 has an invalid interface number: 172 but max is 0 [ 424.661831][ T5533] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 424.672915][ T5533] usb 6-1: config 0 has no interface number 0 [ 424.682016][ T5533] usb 6-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 424.686212][ T5533] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.694343][ T5533] usb 6-1: Product: syz [ 424.696226][ T5533] usb 6-1: Manufacturer: syz [ 424.700649][ T5533] usb 6-1: SerialNumber: syz [ 424.710358][ T5533] usb 6-1: config 0 descriptor?? [ 424.715404][ T5533] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 424.799876][ T845] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 424.807646][ T845] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.814161][ T845] usb 5-1: Product: syz [ 424.816358][ T845] usb 5-1: Manufacturer: syz [ 424.818294][ T845] usb 5-1: SerialNumber: syz [ 424.824301][ T845] r8152-cfgselector 5-1: Unknown version 0x0000 [ 424.827366][ T845] r8152-cfgselector 5-1: config 0 descriptor?? [ 425.036628][T13378] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 425.038801][ T845] r8152-cfgselector 5-1: Unknown version 0x0000 [ 425.039373][T13378] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 425.045198][ T845] r8152-cfgselector 5-1: No union descriptors [ 425.046696][T13378] vhci_hcd vhci_hcd.0: Device attached [ 425.056536][T13379] vhci_hcd: cannot find a urb of seqnum 4 max seqnum 3 [ 425.078400][ T13] vhci_hcd vhci_hcd.2: stop threads [ 425.083082][ T13] vhci_hcd vhci_hcd.2: release socket [ 425.087697][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 425.243039][ T5824] r8152-cfgselector 5-1: USB disconnect, device number 17 [ 425.530514][ T5533] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71 [ 425.534683][ T5533] gspca_pac7302 6-1:0.172: probe with driver gspca_pac7302 failed with error -71 [ 425.541063][ T5533] usb 6-1: USB disconnect, device number 28 [ 425.644108][T13387] 9p: Bad value for 'wfdno' [ 425.694495][T13389] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2227'. [ 425.698593][T13389] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2227'. [ 426.023525][T13404] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2233'. [ 426.469208][T13410] sg_write: data in/out 352256/136 bytes for SCSI command 0x0-- guessing data in; [ 426.469208][T13410] program syz.1.2235 not setting count and/or reply_len properly [ 426.576136][ T5757] Bluetooth: hci4: command tx timeout [ 427.954290][T13426] futex_wake_op: syz.0.2239 tries to shift op by 144; fix this program [ 428.074132][T13434] comedi comedi2: comedi_parport: I/O base address not correctly aligned [ 428.265829][ T34] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 428.355744][ T5533] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 428.416299][ T34] usb 6-1: Using ep0 maxpacket: 8 [ 428.419559][ T34] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 428.422889][ T34] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 428.425826][ T34] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 98, changing to 10 [ 428.429237][ T34] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26212, setting to 1024 [ 428.432669][ T34] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 428.435614][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.440492][T13430] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 428.446632][ T34] hub 6-1:1.0: bad descriptor, ignoring hub [ 428.453607][ T34] hub 6-1:1.0: probe with driver hub failed with error -5 [ 428.457523][ T34] cdc_wdm 6-1:1.0: skipping garbage [ 428.459227][ T34] cdc_wdm 6-1:1.0: skipping garbage [ 428.464881][ T34] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 428.467040][ T34] cdc_wdm 6-1:1.0: Unknown control protocol [ 428.505986][ T5533] usb 7-1: Using ep0 maxpacket: 16 [ 428.509015][ T5533] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 428.514860][ T5533] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 428.518885][ T5533] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.521680][ T5533] usb 7-1: Product: syz [ 428.522983][ T5533] usb 7-1: Manufacturer: syz [ 428.524428][ T5533] usb 7-1: SerialNumber: syz [ 428.527868][ T5533] usb 7-1: config 0 descriptor?? [ 428.532644][ T5533] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 428.535574][ T5533] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 428.665745][ T5757] Bluetooth: hci4: command tx timeout [ 428.734186][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 428.737278][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 428.740074][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 428.742837][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 428.748054][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 428.750961][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 428.754057][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 428.756214][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 428.758399][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 428.760476][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 428.762659][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 428.764778][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 428.766984][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 428.769118][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 428.771139][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 428.773063][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 428.775219][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 428.777318][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 428.999513][ C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 429.002356][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 429.170923][ T5533] em28xx 7-1:0.0: chip ID is em2874 [ 429.773768][ T5533] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 429.777232][ T5533] em28xx 7-1:0.0: board has no eeprom [ 429.797896][T13449] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2249'. [ 429.835765][ T5533] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 429.838629][ T5533] em28xx 7-1:0.0: dvb set to bulk mode. [ 429.854837][ T5533] usb 7-1: USB disconnect, device number 25 [ 429.862876][ T5824] em28xx 7-1:0.0: Binding DVB extension [ 429.874567][ T5533] em28xx 7-1:0.0: Disconnecting em28xx [ 429.924338][ T5824] em28xx 7-1:0.0: Registering input extension [ 429.975776][ T5824] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 429.977890][ T5824] Registered IR keymap rc-empty [ 429.983199][ T5824] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 429.990365][ T5824] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input12 [ 430.010238][ T5824] em28xx 7-1:0.0: Input extension successfully initialized [ 430.016106][ T5533] em28xx 7-1:0.0: Closing input extension [ 430.115644][ T5533] em28xx 7-1:0.0: Freeing device [ 430.411693][T13457] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 430.428628][T13457] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 431.027833][T13465] netlink: 'syz.0.2253': attribute type 1 has an invalid length. [ 431.032006][T13465] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2253'. [ 431.036162][T13465] netlink: 'syz.0.2253': attribute type 1 has an invalid length. [ 431.037269][ T5853] usb 6-1: USB disconnect, device number 29 [ 431.212850][ T34] hid-generic 0006:0008:0008.0012: unknown main item tag 0x0 [ 431.217001][ T34] hid-generic 0006:0008:0008.0012: unknown main item tag 0x0 [ 431.220800][ T34] hid-generic 0006:0008:0008.0012: unknown main item tag 0x0 [ 431.223627][ T34] hid-generic 0006:0008:0008.0012: unknown main item tag 0x0 [ 431.228711][ T34] hid-generic 0006:0008:0008.0012: unknown main item tag 0x0 [ 431.231335][ T34] hid-generic 0006:0008:0008.0012: unknown main item tag 0x0 [ 431.233682][ T34] hid-generic 0006:0008:0008.0012: unknown main item tag 0x0 [ 431.236591][ T34] hid-generic 0006:0008:0008.0012: unknown main item tag 0x0 [ 431.239063][ T34] hid-generic 0006:0008:0008.0012: unknown main item tag 0x0 [ 431.241746][ T34] hid-generic 0006:0008:0008.0012: unknown main item tag 0x0 [ 431.259664][ T34] hid-generic 0006:0008:0008.0012: hidraw1: VIRTUAL HID v0.04 Device [syz1] on syz1 [ 431.384786][T13475] fido_id[13475]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 431.520442][T13478] ªªªªªª: renamed from vlan0 [ 432.106384][T13491] netlink: 'syz.1.2262': attribute type 1 has an invalid length. [ 433.513552][T13522] futex_wake_op: syz.3.2273 tries to shift op by 32; fix this program [ 433.766156][T13530] tipc: Enabling of bearer rejected, already enabled [ 433.835619][ T7684] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 433.987432][ T7684] usb 5-1: unable to get BOS descriptor or descriptor too short [ 433.990503][ T7684] usb 5-1: not running at top speed; connect to a high speed hub [ 433.993842][ T7684] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 433.997187][ T7684] usb 5-1: config 2 has 1 interface, different from the descriptor's value: 2 [ 434.002652][ T7684] usb 5-1: string descriptor 0 read error: -22 [ 434.004718][ T7684] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=b2.86 [ 434.007781][ T7684] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.232734][ T7684] snd-usb-6fire 5-1:2.0: unable to receive device firmware state. [ 434.238536][ T7684] snd-usb-6fire 5-1:2.0: probe with driver snd-usb-6fire failed with error -121 [ 434.432073][ T5853] usb 5-1: USB disconnect, device number 18 [ 435.357289][ T5751] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 435.361229][ T5751] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 435.369994][ T5751] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 435.377168][ T5751] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 435.381494][ T5751] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 435.693615][ T9805] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 435.697381][ T9805] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.775569][ T9805] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 435.775699][T13588] netlink: 2256 bytes leftover after parsing attributes in process `syz.1.2293'. [ 435.779665][ T9805] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.892476][ T9805] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 435.934870][ T9805] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.963898][T13594] nvme_fabrics: unknown parameter or missing value 'ÉC[:' in ctrl creation request [ 436.065521][ T9805] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 436.069136][ T9805] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.239662][ T9] hid-generic 0000:0000:0000.0013: hidraw1: HID v0.00 Device [syz0] on syz0 [ 436.391896][T13571] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.395607][T13571] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.398641][T13571] bridge_slave_0: entered allmulticast mode [ 436.401773][T13571] bridge_slave_0: entered promiscuous mode [ 436.406532][T13571] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.409091][T13571] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.411490][T13571] bridge_slave_1: entered allmulticast mode [ 436.414825][T13571] bridge_slave_1: entered promiscuous mode [ 436.474322][T13571] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 436.494326][T13571] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 436.511905][ T9805] pim6reg: left allmulticast mode [ 436.652649][ T9805] bond3 (unregistering): (slave ip6gretap1): Releasing active interface [ 436.821862][ T9805] team0: Port device geneve1 removed [ 436.864536][ T9805] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 436.878488][ T9805] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 436.882570][ T9805] bond0 (unregistering): Released all slaves [ 436.891936][ T9805] bond1 (unregistering): Released all slaves [ 436.911839][ T9805] bond2 (unregistering): Released all slaves [ 436.978466][ T9805] bond3 (unregistering): Released all slaves [ 437.019352][ T9805] bond4 (unregistering): (slave lo): Releasing backup interface [ 437.023651][ T9805] bond4 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 437.031699][ T9805] bond4 (unregistering): Released all slaves [ 437.053206][ T9805] bond5 (unregistering): Released all slaves [ 437.069152][ T9805] bond6 (unregistering): Released all slaves [ 437.098949][ T9805] bond7 (unregistering): Released all slaves [ 437.113800][ T9805] bond8 (unregistering): Released all slaves [ 437.130856][ T9805] bond9 (unregistering): Released all slaves [ 437.158137][ T9805] bond10 (unregistering): Released all slaves [ 437.239084][ T5456] 8021q: adding VLAN 0 to HW filter on device eth2 [ 437.244693][T13571] team0: Port device team_slave_0 added [ 437.250998][T13571] team0: Port device team_slave_1 added [ 437.282312][T13571] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 437.286673][T13571] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.300755][T13571] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 437.305500][T13571] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 437.307604][T13571] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.325349][T13571] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 437.349108][ T9805] tipc: Left network mode [ 437.386459][T13571] hsr_slave_0: entered promiscuous mode [ 437.414247][T13571] hsr_slave_1: entered promiscuous mode [ 437.424167][T13632] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2305'. [ 437.427634][T13632] openvswitch: netlink: Flow key attr not present in new flow. [ 437.428709][T13571] debugfs: 'hsr0' already exists in 'hsr' [ 437.431805][T13632] input input13: cannot allocate more than FF_MAX_EFFECTS effects [ 437.447075][T13571] Cannot create hsr debugfs directory [ 437.466323][ T5757] Bluetooth: hci3: command tx timeout [ 437.510527][T13641] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2308'. [ 437.702238][ T5456] 8021q: adding VLAN 0 to HW filter on device eth3 [ 438.533339][ T9805] hsr_slave_0: left promiscuous mode [ 438.561359][ T9805] hsr_slave_1: left promiscuous mode [ 438.566615][ T9805] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 438.570490][ T9805] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 438.681385][ T9805] veth1_macvtap: left promiscuous mode [ 438.696718][ T9805] veth1_vlan: left promiscuous mode [ 438.698681][ T9805] veth0_vlan: left promiscuous mode [ 438.726901][T13672] input input14: cannot allocate more than FF_MAX_EFFECTS effects [ 438.771036][T13679] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2311'. [ 439.071495][ T9805] team0 (unregistering): Port device team_slave_1 removed [ 439.079659][ T9805] team0 (unregistering): Port device team_slave_0 removed [ 439.107632][ T7684] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 439.116122][T13687] sg_write: data in/out 352256/136 bytes for SCSI command 0x0-- guessing data in; [ 439.116122][T13687] program syz.3.2314 not setting count and/or reply_len properly [ 439.310462][ T7684] usb 6-1: Using ep0 maxpacket: 32 [ 439.319582][ T7684] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 439.322368][ T7684] usb 6-1: config 0 has no interface number 0 [ 439.324268][ T7684] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 439.345759][ T7684] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 439.348826][ T7684] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.355296][ T7684] usb 6-1: Product: syz [ 439.356634][ T7684] usb 6-1: Manufacturer: syz [ 439.361361][ T7684] usb 6-1: SerialNumber: syz [ 439.367361][ T7684] usb 6-1: config 0 descriptor?? [ 439.376071][ T7684] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 439.389063][ T7684] em28xx 6-1:0.132: Video interface 132 found: [ 439.400903][T13571] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 439.472719][T13571] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 439.485184][T13571] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 439.505455][T13571] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 439.509253][T13571] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 439.535292][ T5757] Bluetooth: hci3: command tx timeout [ 439.598952][T13571] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 439.602126][T13571] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 439.607631][T13571] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 439.699004][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.715757][T13571] 8021q: adding VLAN 0 to HW filter on device bond0 [ 439.737183][T13571] 8021q: adding VLAN 0 to HW filter on device team0 [ 439.747707][ T88] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.750078][ T88] bridge0: port 1(bridge_slave_0) entered forwarding state [ 439.797415][ T88] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.799750][ T88] bridge0: port 2(bridge_slave_1) entered forwarding state [ 439.825354][ T9805] IPVS: stop unused estimator thread 0... [ 439.830480][ T7684] em28xx 6-1:0.132: unknown em28xx chip ID (0) [ 440.642558][ T7684] em28xx 6-1:0.132: failed to get i2c transfer status from bridge register (error=-5) [ 440.645780][ T7684] em28xx 6-1:0.132: board has no eeprom [ 440.705100][ T7684] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 440.708083][ T6234] IPVS: starting estimator thread 0... [ 440.716282][ T7684] em28xx 6-1:0.132: analog set to bulk mode. [ 440.720998][ T6234] em28xx 6-1:0.132: Registering V4L2 extension [ 440.730049][ T7684] usb 6-1: USB disconnect, device number 30 [ 440.737974][ T7684] em28xx 6-1:0.132: Disconnecting em28xx [ 440.835084][T13746] IPVS: using max 43 ests per chain, 103200 per kthread [ 440.993897][ T6234] em28xx 6-1:0.132: Config register raw data: 0xffffffed [ 440.996403][ T6234] em28xx 6-1:0.132: AC97 chip type couldn't be determined [ 440.999713][ T6234] em28xx 6-1:0.132: No AC97 audio processor [ 441.014474][ T6234] usb 6-1: Decoder not found [ 441.016095][ T6234] em28xx 6-1:0.132: failed to create media graph [ 441.018085][ T6234] em28xx 6-1:0.132: V4L2 device video103 deregistered [ 441.031614][ T6234] em28xx 6-1:0.132: Remote control support is not available for this card. [ 441.036211][ T7684] em28xx 6-1:0.132: Closing input extension [ 441.055413][ T7684] em28xx 6-1:0.132: Freeing device [ 441.088283][T13571] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 441.139584][T13571] veth0_vlan: entered promiscuous mode [ 441.150585][T13571] veth1_vlan: entered promiscuous mode [ 441.219341][T13571] veth0_macvtap: entered promiscuous mode [ 441.223657][T13571] veth1_macvtap: entered promiscuous mode [ 441.262033][T13571] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 441.276705][T13571] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 441.294335][T11181] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.306912][ T9805] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.310961][ T9805] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.323868][ T9805] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.421060][T12203] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.428428][T12203] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.464728][ T7327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.469295][ T7327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.625038][ T5757] Bluetooth: hci3: command tx timeout [ 442.826288][ T5853] hid_parser_main: 9 callbacks suppressed [ 442.826303][ T5853] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 442.833709][ T5853] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 442.843238][ T5853] hid-generic 0000:0000:0000.0014: hidraw1: HID v0.00 Device [syz0] on syz0 [ 443.704966][ T5757] Bluetooth: hci3: command tx timeout [ 444.455214][ T34] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 444.614883][ T34] usb 7-1: Using ep0 maxpacket: 16 [ 444.618917][ T34] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 444.621584][ T34] usb 7-1: config 0 has no interface number 0 [ 444.625749][ T34] usb 7-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 444.628697][ T34] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.631325][ T34] usb 7-1: Product: syz [ 444.632633][ T34] usb 7-1: Manufacturer: syz [ 444.634138][ T34] usb 7-1: SerialNumber: syz [ 444.637396][ T34] usb 7-1: config 0 descriptor?? [ 444.647032][ T34] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 445.447256][ T34] gspca_spca1528: reg_w err -71 [ 445.474973][ T34] spca1528 7-1:0.1: probe with driver spca1528 failed with error -71 [ 445.483250][ T34] usb 7-1: USB disconnect, device number 26 [ 447.134670][ T5757] Bluetooth: hci3: command tx timeout [ 447.358304][T13881] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2357'. [ 448.797476][T13900] binder: BINDER_SET_CONTEXT_MGR already set [ 448.807633][T13900] binder: 13898:13900 ioctl 4018620d 80000040 returned -16 [ 448.862441][T13906] tmpfs: Bad value for 'mpol' [ 448.910076][T13571] cgroup: fork rejected by pids controller in /syz2 [ 448.924727][T13913] futex_wake_op: syz.3.2366 tries to shift op by 144; fix this program [ 449.078972][T13916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2372'. [ 449.291746][T11180] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.380548][T11180] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.487632][T11180] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.548110][ T5751] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 449.557881][ T5751] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 449.566003][ T5751] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 449.569235][ T5751] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 449.572081][ T5751] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 449.638623][T11180] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.866563][T11180] bridge_slave_1: left allmulticast mode [ 449.868369][T11180] bridge_slave_1: left promiscuous mode [ 449.873782][T11180] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.891367][T11180] bridge_slave_0: left allmulticast mode [ 449.894513][T11180] bridge_slave_0: left promiscuous mode [ 449.896341][T11180] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.989021][T13944] netlink: 'syz.3.2378': attribute type 1 has an invalid length. [ 450.268214][T11180] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 450.273689][T11180] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 450.277698][T11180] bond0 (unregistering): Released all slaves [ 450.289691][ T5456] 8021q: adding VLAN 0 to HW filter on device eth2 [ 450.522484][ T5456] 8021q: adding VLAN 0 to HW filter on device eth3 [ 450.707078][ T5456] 8021q: adding VLAN 0 to HW filter on device eth5 [ 450.940143][T11180] hsr_slave_0: left promiscuous mode [ 450.946450][T11180] hsr_slave_1: left promiscuous mode [ 450.950962][T11180] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 450.966038][T11180] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 450.974104][T11180] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 450.981591][T11180] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 451.005383][T11180] veth1_macvtap: left promiscuous mode [ 451.010229][T11180] veth0_macvtap: left promiscuous mode [ 451.014313][T11180] veth1_vlan: left promiscuous mode [ 451.020286][T11180] veth0_vlan: left promiscuous mode [ 451.173382][T11180] team0 (unregistering): Port device team_slave_1 removed [ 451.186842][T11180] team0 (unregistering): Port device team_slave_0 removed [ 451.335146][ T5456] 8021q: adding VLAN 0 to HW filter on device eth4 [ 451.475640][T13925] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.478055][T13925] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.480380][T13925] bridge_slave_0: entered allmulticast mode [ 451.483098][T13925] bridge_slave_0: entered promiscuous mode [ 451.491822][T13925] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.497671][T13925] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.508940][T13925] bridge_slave_1: entered allmulticast mode [ 451.511477][T13925] bridge_slave_1: entered promiscuous mode [ 451.562267][T13925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 451.566825][T13925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 451.602923][T13925] team0: Port device team_slave_0 added [ 451.612614][T13925] team0: Port device team_slave_1 added [ 451.624740][ T5751] Bluetooth: hci1: command tx timeout [ 451.648914][T13925] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 451.657840][T13925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 451.676870][T13925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 451.701047][T13925] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 451.707941][T13925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 451.726857][T13925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 451.766988][T13925] hsr_slave_0: entered promiscuous mode [ 451.771419][T13925] hsr_slave_1: entered promiscuous mode [ 451.773388][T13925] debugfs: 'hsr0' already exists in 'hsr' [ 451.775489][T13925] Cannot create hsr debugfs directory [ 451.865450][T14013] sg_write: data in/out 1280/136 bytes for SCSI command 0x0-- guessing data in; [ 451.865450][T14013] program syz.3.2386 not setting count and/or reply_len properly [ 452.482873][T13925] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 452.497141][T13925] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 452.497797][T13925] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 452.502563][T13925] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 452.503515][T13925] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 452.512212][T13925] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 452.513047][T13925] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 452.521804][T13925] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 452.691580][T13925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 452.702854][T13925] 8021q: adding VLAN 0 to HW filter on device team0 [ 452.707883][T12229] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.707969][T12229] bridge0: port 1(bridge_slave_0) entered forwarding state [ 452.721869][T12229] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.721917][T12229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 453.207340][T13925] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 453.259740][T13925] veth0_vlan: entered promiscuous mode [ 453.270662][T13925] veth1_vlan: entered promiscuous mode [ 453.324589][T13925] veth0_macvtap: entered promiscuous mode [ 453.363915][T13925] veth1_macvtap: entered promiscuous mode [ 453.388853][T13925] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 453.403692][T13925] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 453.420776][ T9805] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.424482][ T9805] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.431603][ T9805] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.445044][ T9805] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.694864][ T5751] Bluetooth: hci1: command tx timeout [ 453.714387][ T7313] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.719171][ T7313] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.759928][T13785] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.767471][T13785] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.874313][T14116] ALSA: mixer_oss: invalid OSS volume '' [ 455.097059][T14123] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 455.774168][ T5751] Bluetooth: hci1: command tx timeout [ 455.840306][T14129] netlink: 'syz.3.2410': attribute type 1 has an invalid length. [ 456.080193][T14139] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2413'. [ 456.287557][ T1355] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 456.454191][ T1355] usb 6-1: Using ep0 maxpacket: 32 [ 456.457704][ T1355] usb 6-1: unable to get BOS descriptor or descriptor too short [ 456.465196][ T1355] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 456.468474][ T1355] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 456.474012][ T1355] usb 6-1: New USB device found, idVendor=0763, idProduct=0150, bcdDevice= 0.40 [ 456.477271][ T1355] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.479854][ T1355] usb 6-1: Product: syz [ 456.481177][ T1355] usb 6-1: Manufacturer: syz [ 456.482648][ T1355] usb 6-1: SerialNumber: syz [ 456.696511][ T1355] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 456.699222][ T1355] usb 6-1: MIDIStreaming interface descriptor not found [ 456.741770][ T1355] usb 6-1: USB disconnect, device number 31 [ 456.822739][ T6244] udevd[6244]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 457.041173][T14151] input: syz1 as /devices/virtual/input/input15 [ 457.144135][ T6234] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 457.294627][ T6234] usb 7-1: Using ep0 maxpacket: 32 [ 457.299937][ T6234] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 457.302753][ T6234] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 457.307874][ T6234] usb 7-1: config 0 has no interface number 0 [ 457.310558][ T6234] usb 7-1: config 0 interface 184 altsetting 7 endpoint 0x6 has invalid wMaxPacketSize 0 [ 457.315530][ T6234] usb 7-1: config 0 interface 184 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 0 [ 457.320562][ T6234] usb 7-1: config 0 interface 184 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 457.327166][ T6234] usb 7-1: config 0 interface 184 has no altsetting 0 [ 457.333221][ T6234] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 457.336381][ T6234] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.342211][ T6234] usb 7-1: Product: syz [ 457.343611][ T6234] usb 7-1: Manufacturer: syz [ 457.345251][ T6234] usb 7-1: SerialNumber: syz [ 457.349438][ T6234] usb 7-1: config 0 descriptor?? [ 457.353146][ T6234] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 457.357631][ T6234] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -22 [ 457.854487][ T5751] Bluetooth: hci1: command tx timeout [ 459.915732][ T6234] usb 7-1: USB disconnect, device number 27 [ 459.997192][T14204] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2438'. [ 460.393993][ T6234] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 460.563936][ T6234] usb 7-1: Using ep0 maxpacket: 32 [ 460.567511][ T6234] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 460.571227][ T6234] usb 7-1: config 0 has no interface number 0 [ 460.574050][ T6234] usb 7-1: config 0 interface 184 has no altsetting 0 [ 460.579043][ T6234] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 460.582930][ T6234] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.586215][ T6234] usb 7-1: Product: syz [ 460.587770][ T6234] usb 7-1: Manufacturer: syz [ 460.589660][ T6234] usb 7-1: SerialNumber: syz [ 460.595403][ T6234] usb 7-1: config 0 descriptor?? [ 461.215357][ T6234] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 461.227317][ T6234] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 461.240645][ T6234] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 461.254999][ T6234] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 461.270200][ T6234] usb 7-1: USB disconnect, device number 28 [ 461.309415][T14224] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2446'. [ 461.938932][T14242] netlink: 'syz.2.2453': attribute type 1 has an invalid length. [ 462.259659][T14257] netlink: 'syz.0.2466': attribute type 1 has an invalid length. [ 463.100557][T14270] tipc: Started in network mode [ 463.102156][T14270] tipc: Node identity 325739c5f8d5, cluster identity 4711 [ 463.106456][T14270] tipc: Enabled bearer , priority 0 [ 463.184585][T14269] tipc: Disabling bearer [ 463.411648][T14265] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 463.418281][T14265] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 464.976355][ T5757] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 464.987320][ T5757] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 464.993159][ T5757] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 464.999121][ T5757] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 465.015926][ T5757] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 465.361381][T14324] binder: 14323:14324 ioctl 4018620d 0 returned -22 [ 465.748794][T14350] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2486'. [ 465.778168][T14353] binder: 14352:14353 ioctl 4018620d 0 returned -22 [ 466.106605][T14313] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.111419][T14313] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.118528][T14313] bridge_slave_0: entered allmulticast mode [ 466.121431][T14313] bridge_slave_0: entered promiscuous mode [ 466.144243][T14313] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.151910][T14313] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.159678][T14313] bridge_slave_1: entered allmulticast mode [ 466.168408][T14313] bridge_slave_1: entered promiscuous mode [ 466.179667][T14372] syzkaller0: entered promiscuous mode [ 466.189101][T14372] syzkaller0: entered allmulticast mode [ 466.215067][T14313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.234860][T14313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.258071][T14313] team0: Port device team_slave_0 added [ 466.265604][T14313] team0: Port device team_slave_1 added [ 466.281063][T14378] binder: 14377:14378 ioctl 4018620d 0 returned -22 [ 466.294438][T14313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 466.297459][T14313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 466.313298][T14313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 466.321892][T14313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.324898][T14313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 466.335543][T14313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.657276][T14398] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2508'. [ 466.705692][T14313] hsr_slave_0: entered promiscuous mode [ 466.706242][T14401] binder: BINDER_SET_CONTEXT_MGR already set [ 466.708779][T14313] hsr_slave_1: entered promiscuous mode [ 466.709996][T14401] binder: 14400:14401 ioctl 4018620d 800002c0 returned -16 [ 466.712511][T14313] debugfs: 'hsr0' already exists in 'hsr' [ 466.715760][T14313] Cannot create hsr debugfs directory [ 466.751640][T14403] syzkaller0: entered promiscuous mode [ 466.753401][T14403] syzkaller0: entered allmulticast mode [ 466.797887][T14403] tipc: Enabled bearer , priority 0 [ 466.804030][T14402] tipc: Resetting bearer [ 466.826774][T14402] tipc: Disabling bearer [ 467.176080][ T845] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 467.243223][T14418] binder: BINDER_SET_CONTEXT_MGR already set [ 467.252980][T14418] binder: 14417:14418 ioctl 4018620d 800002c0 returned -16 [ 467.272733][T14420] syzkaller0: entered promiscuous mode [ 467.275571][T14420] syzkaller0: entered allmulticast mode [ 467.288628][T14420] tcf_pedit_act: 7 callbacks suppressed [ 467.288640][T14420] tc action pedit 'at' offset -999504316 out of bounds [ 467.293558][T14420] tc action pedit 'at' offset -999504316 out of bounds [ 467.295783][T14420] tc action pedit 'at' offset -999504316 out of bounds [ 467.297879][T14420] tc action pedit 'at' offset -999504316 out of bounds [ 467.300171][T14420] tc action pedit 'at' offset -999504316 out of bounds [ 467.302462][T14420] tc action pedit 'at' offset -999504316 out of bounds [ 467.304603][T14420] tc action pedit 'at' offset -999504316 out of bounds [ 467.306668][T14420] tc action pedit 'at' offset -999504316 out of bounds [ 467.308840][T14420] tc action pedit 'at' offset -999504316 out of bounds [ 467.310943][T14420] tc action pedit 'at' offset -999504316 out of bounds [ 467.312962][T14420] 0: reclassify loop, rule prio 0, protocol 800 [ 467.347529][ T845] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 467.350221][ T845] usb 5-1: config 1 has no interface number 0 [ 467.355537][ T845] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1023 [ 467.364332][ T845] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 467.373047][ T845] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 467.382745][ T845] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 467.388568][ T845] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.392968][ T845] usb 5-1: Product: syz [ 467.398062][ T845] usb 5-1: Manufacturer: syz [ 467.399696][ T845] usb 5-1: SerialNumber: syz [ 467.405338][T14313] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 467.408716][T14407] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 467.411179][T14407] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 467.419877][T14313] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 467.422371][ T845] usb 5-1: Error in usbnet_get_endpoints (-22) [ 467.425018][T14313] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 467.439821][T14313] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 467.442799][T14313] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 467.448777][T14313] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 467.451593][T14313] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 467.462975][T14313] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 467.553258][T14313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 467.581176][T14313] 8021q: adding VLAN 0 to HW filter on device team0 [ 467.587011][T14441] ubi: mtd0 is already attached to ubi16 [ 467.591151][ T105] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.593876][ T105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.601219][T14434] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2519'. [ 467.605716][ T105] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.607955][ T105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.622072][T13384] usb 5-1: USB disconnect, device number 19 [ 467.950042][T14461] binder: BINDER_SET_CONTEXT_MGR already set [ 467.952004][T14461] binder: 14460:14461 ioctl 4018620d 800002c0 returned -16 [ 467.952410][T14313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 467.988457][T14313] veth0_vlan: entered promiscuous mode [ 467.993015][T14464] binder: 14462:14464 ioctl 4018620d 0 returned -22 [ 467.996361][T14313] veth1_vlan: entered promiscuous mode [ 468.015735][T14313] veth0_macvtap: entered promiscuous mode [ 468.020167][T14313] veth1_macvtap: entered promiscuous mode [ 468.031276][T14313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 468.036808][T14467] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 468.041899][T14313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 468.049401][ T5821] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.059018][ T5821] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.070996][ T5821] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.078919][ T5821] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.136480][ T7322] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.141151][ T7322] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.153498][T13384] usb 5-1: new low-speed USB device number 20 using dummy_hcd [ 468.193573][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.197335][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.350786][T14474] xt_CT: You must specify a L4 protocol and not use inversions on it [ 468.356100][T14474] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2528'. [ 468.415084][T14477] netlink: 'syz.3.2479': attribute type 1 has an invalid length. [ 468.443703][T13384] usb 5-1: Invalid ep0 maxpacket: 64 [ 468.467042][T14479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2533'. [ 468.473077][T14479] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2533'. [ 468.481411][T14479] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2533'. [ 468.485567][T14479] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2533'. [ 468.489227][T14479] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2533'. [ 468.492184][T14479] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2533'. [ 468.504062][T14479] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2533'. [ 468.573500][T13384] usb 5-1: new low-speed USB device number 21 using dummy_hcd [ 468.676669][T14489] binder: 14488:14489 ioctl c0306201 0 returned -14 [ 468.723451][T13384] usb 5-1: Invalid ep0 maxpacket: 64 [ 468.728442][T13384] usb usb5-port1: attempt power cycle [ 468.853159][T14491] binder: 14490:14491 ioctl 4018620d 0 returned -22 [ 469.083523][T13384] usb 5-1: new low-speed USB device number 22 using dummy_hcd [ 469.104356][T13384] usb 5-1: Invalid ep0 maxpacket: 64 [ 469.243532][T13384] usb 5-1: new low-speed USB device number 23 using dummy_hcd [ 469.275716][T13384] usb 5-1: Invalid ep0 maxpacket: 64 [ 469.278304][T13384] usb usb5-port1: unable to enumerate USB device [ 469.521727][T14500] netlink: 'syz.3.2542': attribute type 1 has an invalid length. [ 469.573420][ T34] usb 6-1: new full-speed USB device number 32 using dummy_hcd [ 469.615653][T14503] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 469.734878][ T34] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 469.738873][ T34] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 469.742404][ T34] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 469.745692][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.749621][ T34] usb 6-1: config 0 descriptor?? [ 470.006646][T14510] binder: 14509:14510 ioctl c0306201 0 returned -14 [ 470.049866][T14512] binder: 14511:14512 ioctl 4018620d 0 returned -22 [ 470.127990][T14518] netlink: 'syz.0.2550': attribute type 10 has an invalid length. [ 470.131459][T14518] ipvlan0: entered allmulticast mode [ 470.136037][T14518] veth0_vlan: entered allmulticast mode [ 470.141213][T14518] team0: Device ipvlan0 failed to register rx_handler [ 470.214689][ T34] usb 6-1: string descriptor 0 read error: -71 [ 470.220532][ T34] usbhid 6-1:0.0: can't add hid device: -71 [ 470.224930][ T34] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 470.234626][ T34] usb 6-1: USB disconnect, device number 32 [ 470.262845][T14523] netlink: 'syz.2.2552': attribute type 1 has an invalid length. [ 470.415905][T14533] binder: 14532:14533 ioctl c0306201 0 returned -14 [ 470.546627][T14536] sd 0:0:0:0: PR command failed: 1026 [ 470.548507][T14536] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 470.550674][T14536] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 470.566644][T14543] binder: 14542:14543 ioctl c0306201 0 returned -14 [ 470.763397][T14553] netlink: 'syz.1.2563': attribute type 1 has an invalid length. [ 470.951700][T14564] binder: 14563:14564 ioctl c0306201 0 returned -14 [ 471.172814][T14574] netlink: 'syz.2.2572': attribute type 1 has an invalid length. [ 471.216848][T14576] netlink: 'syz.2.2573': attribute type 5 has an invalid length. [ 471.538506][T14587] xt_CT: You must specify a L4 protocol and not use inversions on it [ 471.578585][T14589] binder: 14588:14589 ioctl c0306201 0 returned -14 [ 472.078969][T14601] __nla_validate_parse: 4 callbacks suppressed [ 472.078983][T14601] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2581'. [ 472.136941][ T5757] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 472.148422][ T5757] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 472.155549][ T5757] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 472.159660][ T5757] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 472.162572][ T5757] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 472.750518][T14602] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.752857][T14602] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.755269][T14602] bridge_slave_0: entered allmulticast mode [ 472.758165][T14602] bridge_slave_0: entered promiscuous mode [ 472.762109][T14602] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.764510][T14602] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.766751][T14602] bridge_slave_1: entered allmulticast mode [ 472.769444][T14602] bridge_slave_1: entered promiscuous mode [ 472.786693][T14602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 472.791587][T14602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 472.807938][T14602] team0: Port device team_slave_0 added [ 472.811205][T14602] team0: Port device team_slave_1 added [ 472.825369][T14602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 472.827498][T14602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 472.836182][T14602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 472.841598][T14602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 472.843885][T14602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 472.851729][T14602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 472.901260][T14602] hsr_slave_0: entered promiscuous mode [ 472.904437][T14602] hsr_slave_1: entered promiscuous mode [ 472.909260][T14602] debugfs: 'hsr0' already exists in 'hsr' [ 472.913484][T14602] Cannot create hsr debugfs directory [ 473.071417][T14602] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.216871][T14629] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 473.220659][T14629] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 473.285978][T14602] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.422074][T14602] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.424163][T14635] kernel read not supported for file /cpuacct.usage_percpu (pid: 14635 comm: syz.2.2588) [ 473.431406][ T43] audit: type=1800 audit(2000000072.274:117): pid=14635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2588" name="cpuacct.usage_percpu" dev="mqueue" ino=50664 res=0 errno=0 [ 473.523780][T14602] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.706734][T14602] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 473.711138][T14602] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 473.713932][T14602] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 473.718492][T14602] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 473.722125][T14602] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 473.729968][T14602] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 473.733357][T14602] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 473.737605][T14602] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 473.816935][T14602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 473.829737][T14602] 8021q: adding VLAN 0 to HW filter on device team0 [ 473.836216][ T7332] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.839163][ T7332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 473.848452][ T7332] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.851460][ T7332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 473.924654][T14643] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2589'. [ 473.966257][T14643] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 474.022007][T14643] bond1 (unregistering): Released all slaves [ 474.253662][ T5757] Bluetooth: hci2: command tx timeout [ 474.324135][T14602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 474.354906][T14602] veth0_vlan: entered promiscuous mode [ 474.373588][T14602] veth1_vlan: entered promiscuous mode [ 474.405104][T14602] veth0_macvtap: entered promiscuous mode [ 474.415915][T14602] veth1_macvtap: entered promiscuous mode [ 474.418534][T14673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2598'. [ 474.431533][T14602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 474.446043][T14602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 474.457234][ T5855] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.460001][ T5855] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.471353][ T5855] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.476230][ T5855] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.545122][T14683] FAULT_INJECTION: forcing a failure. [ 474.545122][T14683] name failslab, interval 1, probability 0, space 0, times 0 [ 474.550317][T14683] CPU: 1 UID: 0 PID: 14683 Comm: syz.2.2601 Tainted: G L syzkaller #0 PREEMPT(full) [ 474.550347][T14683] Tainted: [L]=SOFTLOCKUP [ 474.550353][T14683] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 474.550363][T14683] Call Trace: [ 474.550403][T14683] [ 474.550410][T14683] dump_stack_lvl+0x100/0x190 [ 474.550758][T14683] should_fail_ex.cold+0x5/0xa [ 474.550827][T14683] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 474.550952][T14683] should_failslab+0xc2/0x120 [ 474.551025][T14683] kmem_cache_alloc_noprof+0x91/0x6a0 [ 474.551072][T14683] ? skb_clone+0x190/0x400 [ 474.551282][T14683] skb_clone+0x190/0x400 [ 474.551305][T14683] netlink_deliver_tap+0xaed/0xcc0 [ 474.551362][T14683] netlink_unicast+0x62b/0x850 [ 474.551393][T14683] ? __pfx_netlink_unicast+0x10/0x10 [ 474.551427][T14683] netlink_sendmsg+0x8b0/0xda0 [ 474.551458][T14683] ? __pfx_netlink_sendmsg+0x10/0x10 [ 474.551489][T14683] ? apparmor_socket_sendmsg+0x15b/0x270 [ 474.551565][T14683] ____sys_sendmsg+0xa4d/0xbe0 [ 474.551590][T14683] ? __pfx_netlink_sendmsg+0x10/0x10 [ 474.551620][T14683] ? __pfx_____sys_sendmsg+0x10/0x10 [ 474.551657][T14683] ___sys_sendmsg+0x190/0x1e0 [ 474.551686][T14683] ? __pfx____sys_sendmsg+0x10/0x10 [ 474.551725][T14683] ? find_held_lock+0x2b/0x80 [ 474.551808][T14683] __sys_sendmsg+0x160/0x210 [ 474.551830][T14683] ? __pfx___sys_sendmsg+0x10/0x10 [ 474.551858][T14683] ? __pfx_ksys_write+0x10/0x10 [ 474.551914][T14683] __do_fast_syscall_32+0xe7/0x970 [ 474.552109][T14683] ? lockdep_hardirqs_on+0x78/0x100 [ 474.552140][T14683] do_fast_syscall_32+0x32/0x70 [ 474.552160][T14683] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 474.552184][T14683] RIP: 0023:0xf702efec [ 474.552208][T14683] Code: Unable to access opcode bytes at 0xf702efc2. [ 474.552262][T14683] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 474.552280][T14683] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 474.552291][T14683] RDX: 000000000004a046 RSI: 0000000000000000 RDI: 0000000000000000 [ 474.552302][T14683] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 474.552312][T14683] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 474.552322][T14683] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 474.552347][T14683] [ 474.666830][T14685] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2602'. [ 475.109644][T14685] 0·: renamed from hsr0 (while UP) [ 475.118539][T14685] 0·: entered allmulticast mode [ 475.120213][T14685] hsr_slave_0: entered allmulticast mode [ 475.122913][T14685] hsr_slave_1: entered allmulticast mode [ 475.126227][T14685] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 475.246570][ T7321] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.259020][ T7321] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.289114][ T7321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.291628][ T7321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.401900][T14702] bridge0: entered allmulticast mode [ 475.506408][T14710] xt_CT: You must specify a L4 protocol and not use inversions on it [ 475.511353][T14710] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2606'. [ 475.714757][T14715] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2612'. [ 476.343402][ T5757] Bluetooth: hci2: command tx timeout [ 476.534310][T14737] Cannot find set identified by id 0 to match [ 476.676870][T14743] 9p: Bad value for 'wfdno' [ 476.760448][T14752] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2621'. [ 476.765529][T14752] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2621'. [ 477.401565][T14783] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2637'. [ 477.962828][T14799] binder: 14798:14799 ioctl c0306201 0 returned -14 [ 478.247759][ T6259] udevd[6259]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 478.423216][ T5757] Bluetooth: hci2: command tx timeout [ 478.752130][T14814] syzkaller0: entered promiscuous mode [ 478.762966][T14814] syzkaller0: entered allmulticast mode [ 479.015095][ T5853] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 479.184559][ T5853] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 479.197406][ T5853] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 479.201382][ T5853] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 479.215107][ T5853] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.220393][ T5853] usb 5-1: config 0 descriptor?? [ 479.660911][ T5853] elan 0003:04F3:0755.0015: unknown main item tag 0x0 [ 479.663111][ T5853] elan 0003:04F3:0755.0015: unknown main item tag 0x0 [ 479.665619][ T5853] elan 0003:04F3:0755.0015: failed to start in urb: -90 [ 479.668567][ T5853] elan 0003:04F3:0755.0015: hidraw1: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 479.926707][T14471] usb 5-1: USB disconnect, device number 24 [ 480.493004][ T5757] Bluetooth: hci2: command tx timeout [ 480.517738][T14841] binder: 14840:14841 ioctl c0306201 0 returned -14 [ 480.631960][T14829] tipc: Enabling of bearer rejected, failed to enable media [ 480.887144][T14864] binder: 14863:14864 ioctl c0306201 0 returned -14 [ 480.921938][T14868] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2663'. [ 480.991674][T14874] syzkaller0: entered promiscuous mode [ 480.993754][T14874] syzkaller0: entered allmulticast mode [ 481.040025][T14876] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.042622][T14876] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.090803][T14876] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 481.097790][T14876] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 481.169407][T14874] tipc: Started in network mode [ 481.171050][T14874] tipc: Node identity 22493d480669, cluster identity 4711 [ 481.173651][T14874] tipc: Enabled bearer , priority 0 [ 481.176052][ T5855] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.180391][T14873] tipc: Resetting bearer [ 481.192054][T14873] tipc: Disabling bearer [ 481.196600][ T5855] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.199320][ T5855] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.202122][ T5855] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.479224][T14889] FAULT_INJECTION: forcing a failure. [ 481.479224][T14889] name failslab, interval 1, probability 0, space 0, times 0 [ 481.484976][T14889] CPU: 3 UID: 0 PID: 14889 Comm: syz.2.2671 Tainted: G L syzkaller #0 PREEMPT(full) [ 481.485005][T14889] Tainted: [L]=SOFTLOCKUP [ 481.485010][T14889] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 481.485019][T14889] Call Trace: [ 481.485026][T14889] [ 481.485033][T14889] dump_stack_lvl+0x100/0x190 [ 481.485078][T14889] should_fail_ex.cold+0x5/0xa [ 481.485100][T14889] should_failslab+0xc2/0x120 [ 481.485122][T14889] __kmalloc_noprof+0xfc/0x820 [ 481.485140][T14889] ? rcu_is_watching+0x12/0xc0 [ 481.485227][T14889] ? tomoyo_realpath_from_path+0xb6/0x690 [ 481.485256][T14889] tomoyo_realpath_from_path+0xb6/0x690 [ 481.485283][T14889] tomoyo_path_number_perm+0x23c/0x580 [ 481.485301][T14889] ? tomoyo_path_number_perm+0x22e/0x580 [ 481.485321][T14889] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 481.485340][T14889] ? get_pid_task+0x106/0x250 [ 481.485409][T14889] ? find_held_lock+0x2b/0x80 [ 481.485428][T14889] ? __fget_files+0x215/0x3d0 [ 481.485451][T14889] ? hook_file_ioctl_common+0x140/0x440 [ 481.485467][T14889] ? __fget_files+0x215/0x3d0 [ 481.485492][T14889] ? __fget_files+0x21f/0x3d0 [ 481.485517][T14889] security_file_ioctl_compat+0xd3/0x230 [ 481.485565][T14889] __ia32_compat_sys_ioctl+0xc2/0x360 [ 481.485591][T14889] __do_fast_syscall_32+0xe7/0x970 [ 481.485610][T14889] ? lockdep_hardirqs_on+0x78/0x100 [ 481.485635][T14889] do_fast_syscall_32+0x32/0x70 [ 481.485652][T14889] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 481.485673][T14889] RIP: 0023:0xf702efec [ 481.485693][T14889] Code: Unable to access opcode bytes at 0xf702efc2. [ 481.485700][T14889] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 481.485718][T14889] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c040565e [ 481.485728][T14889] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 481.485738][T14889] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 481.485747][T14889] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 481.485757][T14889] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 481.485780][T14889] [ 481.486493][T14889] ERROR: Out of memory at tomoyo_realpath_from_path. [ 481.920265][T14906] syzkaller0: entered promiscuous mode [ 481.922517][T14906] syzkaller0: entered allmulticast mode [ 481.929863][T14906] tcf_pedit_act: 7 callbacks suppressed [ 481.929878][T14906] tc action pedit 'at' offset -999504316 out of bounds [ 481.935766][T14906] tc action pedit 'at' offset -999504316 out of bounds [ 481.938315][T14906] tc action pedit 'at' offset -999504316 out of bounds [ 481.940992][T14906] tc action pedit 'at' offset -999504316 out of bounds [ 481.943763][T14906] tc action pedit 'at' offset -999504316 out of bounds [ 481.946136][T14906] tc action pedit 'at' offset -999504316 out of bounds [ 481.948586][T14906] tc action pedit 'at' offset -999504316 out of bounds [ 481.951186][T14906] tc action pedit 'at' offset -999504316 out of bounds [ 481.953836][T14906] tc action pedit 'at' offset -999504316 out of bounds [ 481.956415][T14906] tc action pedit 'at' offset -999504316 out of bounds [ 481.959016][T14906] 0: reclassify loop, rule prio 0, protocol 800 [ 482.239982][T14914] gretap1: entered promiscuous mode [ 482.243665][T14914] batman_adv: batadv0: Adding interface: gretap1 [ 482.246456][T14914] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 482.254660][T14914] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 482.595431][T14919] ubi: mtd0 is already attached to ubi16 [ 483.212284][T14939] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2693'. [ 483.219644][T14939] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2693'. [ 483.224415][T14939] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2693'. [ 483.228405][T14939] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2693'. [ 483.231375][T14939] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2693'. [ 483.234947][T14939] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2693'. [ 483.237938][T14939] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2693'. [ 483.241710][T14939] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2693'. [ 483.246675][T14939] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2693'. [ 483.249981][T14939] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2693'. [ 484.605760][T14965] xt_CT: You must specify a L4 protocol and not use inversions on it [ 484.640597][T14972] netlink: 'syz.2.2704': attribute type 10 has an invalid length. [ 484.643338][T14972] ipvlan0: entered allmulticast mode [ 484.645471][T14972] veth0_vlan: entered allmulticast mode [ 484.655333][T14972] team0: Device ipvlan0 failed to register rx_handler [ 484.786967][T14977] dvmrp9: entered allmulticast mode [ 484.788869][T14976] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 484.791422][T14976] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 484.822673][T14976] vhci_hcd vhci_hcd.0: Device attached [ 485.043396][T14976] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 485.072650][T13384] usb 38-1: SetAddress Request (6) to port 0 [ 485.075178][T13384] usb 38-1: new SuperSpeed USB device number 6 using vhci_hcd [ 485.416198][T14978] vhci_hcd: connection reset by peer [ 485.420862][T11180] vhci_hcd vhci_hcd.0: stop threads [ 485.422699][T11180] vhci_hcd vhci_hcd.0: release socket [ 485.425598][T11180] vhci_hcd vhci_hcd.0: disconnect device [ 485.460216][ T43] audit: type=1326 audit(2000000084.294:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15016 comm="syz.1.2722" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf709efec code=0x0 [ 485.558278][T15024] netlink: 'syz.2.2724': attribute type 5 has an invalid length. [ 485.757730][T15037] binder: 15036:15037 ioctl 4018620d 0 returned -22 [ 486.446127][T15060] binder: 15059:15060 ioctl 4018620d 0 returned -22 [ 486.477898][T15061] xt_CT: You must specify a L4 protocol and not use inversions on it [ 486.822731][ T24] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 486.975525][ T24] usb 5-1: config 0 has no interfaces? [ 486.981449][ T24] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 486.985463][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.993237][ T24] usb 5-1: config 0 descriptor?? [ 487.201230][ T24] usb 5-1: USB disconnect, device number 25 [ 487.404725][T15073] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 487.408764][T15073] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 488.061752][T15084] binder: 15083:15084 ioctl 4018620d 0 returned -22 [ 488.134735][T15094] tmpfs: Bad value for 'mpol' [ 488.185614][T15098] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 488.211510][T15098] bond1 (unregistering): Released all slaves [ 488.541617][T15116] binder: 15114:15116 ioctl c0306201 0 returned -14 [ 488.920822][T15145] Cannot find set identified by id 0 to match [ 488.926857][T15144] binder: 15140:15144 ioctl c0306201 0 returned -14 [ 489.002446][T15149] ipvlan2: entered allmulticast mode [ 489.006054][T15149] batadv_slave_1: entered allmulticast mode [ 489.010327][T15149] batman_adv: batadv0: Adding interface: ipvlan2 [ 489.013493][T15149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 489.016718][T15149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.019787][T15149] batman_adv: batadv0: Interface activated: ipvlan2 [ 489.079593][T15159] 9pnet_virtio: no channels available for device syz [ 489.162708][T15163] __nla_validate_parse: 5 callbacks suppressed [ 489.162737][T15163] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2776'. [ 489.178140][T15163] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2776'. [ 489.509834][T15170] xt_CT: You must specify a L4 protocol and not use inversions on it [ 489.666008][T15170] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2777'. [ 490.172295][T13384] usb 38-1: device descriptor read/8, error -110 [ 490.563232][T13384] usb usb38-port1: attempt power cycle [ 490.816930][T15192] binder: 15191:15192 ioctl c0306201 0 returned -14 [ 490.876562][T15195] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2787'. [ 491.169998][T13384] usb usb38-port1: unable to enumerate USB device [ 492.433473][ T9] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 492.438344][T15235] syzkaller0: entered promiscuous mode [ 492.440467][T15235] syzkaller0: entered allmulticast mode [ 492.544568][T15242] tipc: Enabled bearer , priority 0 [ 492.559632][T15240] tipc: Disabling bearer [ 492.584094][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 492.592327][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 492.596336][ T9] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 492.599929][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.605693][ T9] usb 6-1: config 0 descriptor?? [ 492.876798][T15260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2808'. [ 493.017917][ T9] elan 0003:04F3:0755.0016: unknown main item tag 0x0 [ 493.020788][ T9] elan 0003:04F3:0755.0016: unknown main item tag 0x0 [ 493.024611][ T9] elan 0003:04F3:0755.0016: failed to start in urb: -90 [ 493.029155][ T9] elan 0003:04F3:0755.0016: hidraw1: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 493.038304][T11180] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.069295][T15267] syzkaller0: entered promiscuous mode [ 493.071110][T15267] syzkaller0: entered allmulticast mode [ 493.100176][T15267] tipc: Enabled bearer , priority 0 [ 493.103936][T15266] tipc: Resetting bearer [ 493.135168][T15266] tipc: Disabling bearer [ 493.144716][ T5751] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 493.153516][T15275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.156003][ T5751] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 493.173038][ T5751] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 493.177071][ T5751] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 493.179687][ T5751] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 493.219715][T11180] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.277464][ T24] usb 6-1: USB disconnect, device number 33 [ 493.310715][T15278] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 493.325076][T15281] syzkaller0: entered promiscuous mode [ 493.327878][T15278] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 493.330235][T15281] syzkaller0: entered allmulticast mode [ 493.333340][ T5533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.350708][T15278] mac80211_hwsim hwsim27 wlan0: entered promiscuous mode [ 493.354501][T15278] mac80211_hwsim hwsim27 wlan0: entered allmulticast mode [ 493.396077][T11180] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.452556][T13322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.462975][T15291] FAULT_INJECTION: forcing a failure. [ 493.462975][T15291] name failslab, interval 1, probability 0, space 0, times 0 [ 493.467114][T15291] CPU: 2 UID: 0 PID: 15291 Comm: syz.2.2819 Tainted: G L syzkaller #0 PREEMPT(full) [ 493.467132][T15291] Tainted: [L]=SOFTLOCKUP [ 493.467136][T15291] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 493.467143][T15291] Call Trace: [ 493.467147][T15291] [ 493.467151][T15291] dump_stack_lvl+0x100/0x190 [ 493.467170][T15291] should_fail_ex.cold+0x5/0xa [ 493.467184][T15291] should_failslab+0xc2/0x120 [ 493.467199][T15291] __kmalloc_noprof+0xfc/0x820 [ 493.467212][T15291] ? tomoyo_encode2+0xfb/0x3c0 [ 493.467230][T15291] tomoyo_encode2+0xfb/0x3c0 [ 493.467246][T15291] tomoyo_encode+0x29/0x50 [ 493.467260][T15291] tomoyo_realpath_from_path+0x18c/0x690 [ 493.467279][T15291] tomoyo_path_number_perm+0x23c/0x580 [ 493.467291][T15291] ? tomoyo_path_number_perm+0x22e/0x580 [ 493.467304][T15291] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 493.467318][T15291] ? get_pid_task+0x106/0x250 [ 493.467344][T15291] ? find_held_lock+0x2b/0x80 [ 493.467357][T15291] ? __fget_files+0x215/0x3d0 [ 493.467373][T15291] ? hook_file_ioctl_common+0x140/0x440 [ 493.467386][T15291] ? __fget_files+0x215/0x3d0 [ 493.467404][T15291] ? __fget_files+0x21f/0x3d0 [ 493.467423][T15291] security_file_ioctl_compat+0xd3/0x230 [ 493.467437][T15291] __ia32_compat_sys_ioctl+0xc2/0x360 [ 493.467455][T15291] __do_fast_syscall_32+0xe7/0x970 [ 493.467467][T15291] ? lockdep_hardirqs_on+0x78/0x100 [ 493.467485][T15291] do_fast_syscall_32+0x32/0x70 [ 493.467496][T15291] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 493.467511][T15291] RIP: 0023:0xf702efec [ 493.467524][T15291] Code: Unable to access opcode bytes at 0xf702efc2. [ 493.467529][T15291] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 493.467541][T15291] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c040565e [ 493.467548][T15291] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 493.467554][T15291] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 493.467560][T15291] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 493.467567][T15291] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 493.467581][T15291] [ 493.467591][T15291] ERROR: Out of memory at tomoyo_realpath_from_path. [ 493.532402][ T5533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.668146][T11180] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.832214][ T5533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.089403][T15313] ubi: mtd0 is already attached to ubi16 [ 494.103626][T14471] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.182384][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.253856][T13322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.458447][T15328] syzkaller0: entered promiscuous mode [ 494.468857][T15333] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.470098][T15328] syzkaller0: entered allmulticast mode [ 494.641232][T11180] bridge_slave_1: left allmulticast mode [ 494.643723][T11180] bridge_slave_1: left promiscuous mode [ 494.649341][T11180] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.662411][T11180] bridge_slave_0: left allmulticast mode [ 494.664173][T11180] bridge_slave_0: left promiscuous mode [ 494.666011][T11180] bridge0: port 1(bridge_slave_0) entered disabled state qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 494.816823][T11180] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 494.822242][T11180] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 494.826348][T11180] bond0 (unregistering): Released all slaves [ 494.830792][T15272] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.833205][T15272] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.835681][T15272] bridge_slave_0: entered allmulticast mode [ 494.838431][T15272] bridge_slave_0: entered promiscuous mode [ 494.856210][T15344] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2835'. [ 494.877526][T15272] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.881823][T15272] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.885283][T15272] bridge_slave_1: entered allmulticast mode [ 494.889389][T15272] bridge_slave_1: entered promiscuous mode [ 494.940822][T15272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 494.973523][T15272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 495.047093][T15272] team0: Port device team_slave_0 added [ 495.086850][T15272] team0: Port device team_slave_1 added [ 495.302640][ T5751] Bluetooth: hci0: command tx timeout [ 495.324869][T15272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 495.335291][T15272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 495.343250][T15272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 495.347795][T15272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 495.350036][T15272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 495.358563][T15272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 495.744201][T11180] hsr_slave_0: left promiscuous mode [ 495.756172][T11180] hsr_slave_1: left promiscuous mode [ 495.762835][T11180] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 495.767352][T11180] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 495.777560][T11180] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 495.780181][T11180] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 495.810979][T11180] veth1_macvtap: left promiscuous mode [ 495.813007][T11180] veth0_macvtap: left promiscuous mode [ 495.814780][T11180] veth1_vlan: left promiscuous mode [ 495.818653][T11180] veth0_vlan: left promiscuous mode [ 496.578954][T15362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2838'. [ 496.934536][T11180] team0 (unregistering): Port device team_slave_1 removed [ 496.947923][T11180] team0 (unregistering): Port device team_slave_0 removed [ 497.036793][T15362] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2838'. [ 497.040032][T15362] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2838'. [ 497.043876][T15362] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2838'. [ 497.047825][T15362] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2838'. [ 497.051981][T15362] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2838'. [ 497.056037][T15362] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2838'. [ 497.059227][T15362] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2838'. [ 497.062212][T15362] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2838'. [ 497.066124][ T5456] 8021q: adding VLAN 0 to HW filter on device eth2 [ 497.128503][T15272] hsr_slave_0: entered promiscuous mode [ 497.139133][T15272] hsr_slave_1: entered promiscuous mode [ 497.154885][T15272] debugfs: 'hsr0' already exists in 'hsr' [ 497.157189][T15272] Cannot create hsr debugfs directory [ 497.187126][T15395] netlink: 'syz.2.2849': attribute type 10 has an invalid length. [ 497.215161][T15395] team0: Device ipvlan0 failed to register rx_handler [ 497.274569][T15399] binder: 15397:15399 ioctl c0306201 0 returned -14 [ 497.371882][ T5751] Bluetooth: hci0: command tx timeout [ 497.414318][ T5456] 8021q: adding VLAN 0 to HW filter on device eth3 [ 497.450346][T15272] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 497.463432][T15272] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 497.472409][T15272] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 497.485733][T15272] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 497.497361][T15272] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 497.507222][T15272] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 497.513755][T15272] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 497.526592][T15272] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 497.593874][T15272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 497.611659][T15272] 8021q: adding VLAN 0 to HW filter on device team0 [ 497.624567][ T105] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.627381][ T105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 497.652825][ T105] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.655534][ T105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 497.662849][ T5456] 8021q: adding VLAN 0 to HW filter on device eth4 [ 497.742186][T15441] binder: 15440:15441 ioctl c0306201 0 returned -14 [ 497.976468][ T5456] 8021q: adding VLAN 0 to HW filter on device eth5 [ 498.093263][T15463] xt_CT: You must specify a L4 protocol and not use inversions on it [ 498.291845][T15272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 498.468032][T15487] netlink: 'syz.0.2867': attribute type 5 has an invalid length. [ 498.481948][ T9] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 498.524239][T15489] binder: 15488:15489 ioctl c0306201 0 returned -14 [ 498.627554][T15272] veth0_vlan: entered promiscuous mode [ 498.633801][T15272] veth1_vlan: entered promiscuous mode [ 498.641867][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 498.648494][ T9] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 498.652378][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.655448][ T9] usb 6-1: Product: syz [ 498.657175][ T9] usb 6-1: Manufacturer: syz [ 498.658972][ T9] usb 6-1: SerialNumber: syz [ 498.663235][ T9] usb 6-1: config 0 descriptor?? [ 498.666180][T15272] veth0_macvtap: entered promiscuous mode [ 498.680950][T15272] veth1_macvtap: entered promiscuous mode [ 498.807598][T15497] vlan2: entered allmulticast mode [ 498.809239][T15497] dummy0: entered allmulticast mode [ 498.832130][T15498] random: crng reseeded on system resumption [ 498.836374][T15497] bridge0: port 3(vlan2) entered blocking state [ 498.841132][T15497] bridge0: port 3(vlan2) entered disabled state [ 498.882684][ T24] net_ratelimit: 23 callbacks suppressed [ 498.882701][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.917459][ T5533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.922806][ T5824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.927741][T15497] vlan2: entered promiscuous mode [ 498.929633][T15497] dummy0: entered promiscuous mode [ 499.139688][ T9] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 499.162770][T15272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 499.174550][T15272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 499.186013][ T5855] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.195777][ T5855] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.203738][ T5855] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.218647][ T5855] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.288432][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 499.307147][T12200] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.307490][ T9] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 499.317124][T12200] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.330174][ T9] usb 6-1: media controller created [ 499.365072][ T105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.368346][ T105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.429454][T15475] dtv5100: wlen = 0, aborting. [ 499.451953][ T5751] Bluetooth: hci0: command tx timeout [ 499.534681][ T5853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.538346][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.565017][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 499.703143][T15513] netlink: 'syz.4.2818': attribute type 27 has an invalid length. [ 499.808538][T15513] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.811583][T15513] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.934096][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.942203][ T5533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.016746][T15513] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 500.035353][T15513] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 500.274202][T15538] __nla_validate_parse: 5 callbacks suppressed [ 500.274237][T15538] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2877'. [ 500.282872][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 500.285756][ T9] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 500.288813][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 500.445208][T15549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.449547][T15549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.452488][T15549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.514485][T15514] can0: slcan on ptm0. [ 500.549656][T15526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 500.553955][T15526] 8021q: adding VLAN 0 to HW filter on device team0 [ 500.558571][T15526] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 500.598991][T15526] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 500.609663][T15526] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 500.615204][T15526] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 500.620106][T15526] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 500.627265][T15526] veth1_vlan: left promiscuous mode [ 500.629710][T15526] veth0_vlan: left promiscuous mode [ 500.632603][T15526] veth0_vlan: entered promiscuous mode [ 500.636112][T15526] veth1_vlan: entered promiscuous mode [ 500.641284][T15526] veth1_macvtap: left promiscuous mode [ 500.645234][T15526] veth0_macvtap: left promiscuous mode [ 500.648600][T15526] veth0_macvtap: entered promiscuous mode [ 500.653005][T15526] veth1_macvtap: entered promiscuous mode [ 500.661215][T15526] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 500.666132][T15526] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 500.670136][T15526] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 500.676437][T15526] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 500.704365][ T7317] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.707467][ T7317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 500.721891][ T5853] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 500.726026][ T7317] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.729035][ T7317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 500.752764][T15512] can0 (unregistered): slcan off ptm0. [ 500.884657][ T5853] usb 5-1: config 0 has no interfaces? [ 500.886488][ T5853] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 500.890824][ T5853] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.899774][ T5853] usb 5-1: config 0 descriptor?? [ 501.047278][ T29] usb 6-1: USB disconnect, device number 34 [ 501.110901][ T5853] usb 5-1: USB disconnect, device number 26 [ 501.133257][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.214980][ T29] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 501.406239][T15580] xt_CT: You must specify a L4 protocol and not use inversions on it [ 501.531907][ T5751] Bluetooth: hci0: command tx timeout [ 501.885054][T15599] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 501.891854][T15599] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 502.809453][T15620] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2893'. [ 503.111653][ T5853] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 503.263557][ T5853] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 503.268045][ T5853] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 503.273237][ T5853] usb 9-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 503.276683][ T5853] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.282281][ T5853] usb 9-1: config 0 descriptor?? [ 503.466343][T15637] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2896'. [ 503.466377][T15629] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2896'. [ 503.508675][T15637] veth1_macvtap: left promiscuous mode [ 503.633807][T15645] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2902'. [ 503.797222][T15645] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 503.820778][ T5853] usb 9-1: string descriptor 0 read error: -71 [ 503.993332][T15645] bond1 (unregistering): Released all slaves [ 504.092980][ T29] net_ratelimit: 22 callbacks suppressed [ 504.093002][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.100744][ T5533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.177310][ T5853] usbhid 9-1:0.0: can't add hid device: -71 [ 504.181271][ T5853] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 504.186919][ T5853] usb 9-1: USB disconnect, device number 2 [ 504.453214][T15660] Cannot find set identified by id 0 to match [ 504.501573][ T6234] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 504.686727][ T6234] usb 7-1: unable to get BOS descriptor or descriptor too short [ 504.692332][ T6234] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 504.695935][ T6234] usb 7-1: can't read configurations, error -71 [ 504.848325][T15674] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2914'. [ 504.852657][T15674] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2914'. [ 504.887254][T15678] ceph: Path missing in source [ 504.891721][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.055139][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.180771][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.184148][ T5824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.313741][T15696] xt_CT: You must specify a L4 protocol and not use inversions on it [ 505.318752][T15696] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2919'. [ 505.786267][ T105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.208195][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.210981][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.254331][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.902936][T15718] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2927'. [ 508.718701][T15753] mac80211_hwsim hwsim27 syzkaller0: entered promiscuous mode [ 508.723477][T15753] mac80211_hwsim hwsim27 syzkaller0: entered allmulticast mode [ 508.879159][T15758] tipc: Enabled bearer , priority 0 [ 508.956699][T15756] tipc: Disabling bearer [ 509.212712][T15779] syzkaller0: entered promiscuous mode [ 509.220567][T15779] syzkaller0: entered allmulticast mode [ 509.245518][T15779] tipc: Started in network mode [ 509.247109][T15779] tipc: Node identity 3a137a4e44be, cluster identity 4711 [ 509.249646][T15779] tipc: Enabled bearer , priority 0 [ 509.278480][T15778] tipc: Resetting bearer [ 509.293895][T15778] tipc: Disabling bearer [ 509.302150][ T6234] net_ratelimit: 23 callbacks suppressed [ 509.302164][ T6234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.455064][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.620843][ T5824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.767846][T15809] ubi: mtd0 is already attached to ubi16 [ 509.773470][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.811266][ T9] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 509.842093][T15813] program syz.2.2955 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 509.976012][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 509.980415][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 509.990762][ T9] usb 9-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 509.993958][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.001515][ T9] usb 9-1: config 0 descriptor?? [ 510.011245][ T5824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.093641][ T5853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.210530][T15827] tipc: Cannot configure node identity twice [ 510.336577][ T6234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.423002][ T9] elan 0003:04F3:0755.0017: unknown main item tag 0x0 [ 510.428462][ T9] elan 0003:04F3:0755.0017: unknown main item tag 0x0 [ 510.442107][ T9] elan 0003:04F3:0755.0017: failed to start in urb: -90 [ 510.456704][ T9] elan 0003:04F3:0755.0017: hidraw1: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 510.654851][ T5824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.686162][ T5824] usb 9-1: USB disconnect, device number 3 [ 510.715732][T15844] binder: BINDER_SET_CONTEXT_MGR already set [ 510.718140][T15844] binder: 15843:15844 ioctl 4018620d 800002c0 returned -16 [ 510.731883][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.735391][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.748640][T15837] fido_id[15837]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb9/report_descriptor': No such file or directory [ 511.091369][ T29] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 511.242775][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 511.246468][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 511.250030][ T29] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 511.254721][ T29] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 511.257714][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.261740][ T29] usb 5-1: config 0 descriptor?? [ 511.288354][T15862] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2970'. [ 511.292724][T15862] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2970'. [ 511.296005][T15862] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2970'. [ 511.299102][T15862] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2970'. [ 511.302193][T15862] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2970'. [ 511.305221][T15862] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2970'. [ 511.308227][T15862] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2970'. [ 511.312482][T15862] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2970'. [ 511.315611][T15862] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2970'. [ 511.318848][T15862] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2970'. [ 511.440411][T15867] netlink: 'syz.1.2971': attribute type 10 has an invalid length. [ 511.446520][T15867] ipvlan0: entered allmulticast mode [ 511.449056][T15867] veth0_vlan: entered allmulticast mode [ 511.467843][T15867] team0: Device ipvlan0 failed to register rx_handler [ 511.718716][ T29] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 511.813219][ T7320] ------------[ cut here ]------------ [ 511.817584][ T7320] time_after(jiffies, timeout) [ 511.817595][ T7320] WARNING: io_uring/io_uring.c:2365 at io_ring_exit_work+0x479/0xd7a, CPU#3: kworker/u33:20/7320 [ 511.822545][ T7320] Modules linked in: [ 511.824257][ T7320] CPU: 3 UID: 0 PID: 7320 Comm: kworker/u33:20 Tainted: G L syzkaller #0 PREEMPT(full) [ 511.827633][ T7320] Tainted: [L]=SOFTLOCKUP [ 511.828985][ T7320] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 511.832233][ T7320] Workqueue: iou_exit io_ring_exit_work [ 511.834001][ T7320] RIP: 0010:io_ring_exit_work+0x479/0xd7a [ 511.835786][ T7320] Code: 8e e8 eb 59 43 01 48 8b 05 04 a4 4b 0d 4c 8b 7c 24 38 31 ff 49 29 c7 4c 89 fe e8 d2 d4 d3 00 4d 85 ff 79 12 e8 28 da d3 00 90 <0f> 0b 90 48 c7 44 24 20 70 17 00 00 e8 16 da d3 00 48 8b 74 24 20 [ 511.842233][ T7320] RSP: 0000:ffffc90004357aa0 EFLAGS: 00010293 [ 511.844152][ T7320] RAX: 0000000000000000 RBX: ffff888027caa710 RCX: ffffffff81354e8e [ 511.846706][ T7320] RDX: ffff8880290c2540 RSI: ffffffff81354e98 RDI: ffff8880290c2540 [ 511.849146][ T7320] RBP: ffffc90004357c38 R08: 0000000000000007 R09: 0000000000000000 [ 511.851699][ T7320] R10: fffffffffffffffe R11: 0000000000000000 R12: ffff888027caa000 [ 511.854224][ T7320] R13: dffffc0000000000 R14: 0000000027caa700 R15: fffffffffffffffe [ 511.857567][ T7320] FS: 0000000000000000(0000) GS:ffff888096ef1000(0000) knlGS:0000000000000000 [ 511.860931][ T7320] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 511.863038][ T7320] CR2: 00000000f7f5a190 CR3: 00000000655e1000 CR4: 0000000000352ef0 [ 511.865535][ T7320] Call Trace: [ 511.866608][ T7320] [ 511.867556][ T7320] ? do_raw_spin_lock+0x128/0x260 [ 511.869170][ T7320] ? __pfx_io_ring_exit_work+0x10/0x10 [ 511.870884][ T7320] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 511.872910][ T7320] ? debug_object_deactivate+0x2e4/0x3b0 [ 511.874720][ T7320] ? rcu_is_watching+0x12/0xc0 [ 511.876241][ T7320] process_one_work+0xa23/0x1940 [ 511.877828][ T7320] ? __pfx_process_one_work+0x10/0x10 [ 511.879553][ T7320] ? __pfx_io_ring_exit_work+0x10/0x10 [ 511.881460][ T7320] worker_thread+0x5ef/0xe50 [ 511.882941][ T7320] ? kthread+0x13a/0x450 [ 511.884328][ T7320] ? __pfx_worker_thread+0x10/0x10 [ 511.885951][ T7320] kthread+0x370/0x450 [ 511.887325][ T7320] ? __pfx_kthread+0x10/0x10 [ 511.888838][ T7320] ret_from_fork+0x72b/0xd50 [ 511.890344][ T7320] ? __pfx_ret_from_fork+0x10/0x10 [ 511.892053][ T7320] ? __switch_to+0x800/0x10f0 [ 511.893598][ T7320] ? __pfx_kthread+0x10/0x10 [ 511.895080][ T7320] ret_from_fork_asm+0x1a/0x30 [ 511.896814][ T7320] [ 511.897807][ T7320] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 511.900110][ T7320] CPU: 3 UID: 0 PID: 7320 Comm: kworker/u33:20 Tainted: G L syzkaller #0 PREEMPT(full) [ 511.903534][ T7320] Tainted: [L]=SOFTLOCKUP [ 511.904866][ T7320] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 511.907949][ T7320] Workqueue: iou_exit io_ring_exit_work [ 511.909676][ T7320] Call Trace: [ 511.910745][ T7320] [ 511.911684][ T7320] dump_stack_lvl+0x100/0x190 [ 511.913176][ T7320] vpanic+0x552/0x970 [ 511.914470][ T7320] ? __pfx_vpanic+0x10/0x10 [ 511.915898][ T7320] panic+0xd1/0xe0 [ 511.917094][ T7320] ? __pfx_panic+0x10/0x10 [ 511.918502][ T7320] ? check_panic_on_warn+0x1f/0x90 [ 511.919990][ T7320] check_panic_on_warn.cold+0x19/0x34 [ 511.921558][ T7320] ? io_ring_exit_work+0x479/0xd7a [ 511.923152][ T7320] __warn.cold+0x191/0x318 [ 511.924546][ T7320] __report_bug+0x30f/0x440 [ 511.925989][ T7320] ? io_ring_exit_work+0x479/0xd7a [ 511.927582][ T7320] ? __pfx___report_bug+0x10/0x10 [ 511.929197][ T7320] ? rcu_is_watching+0x12/0xc0 [ 511.930708][ T7320] ? trace_contention_end+0x126/0x160 [ 511.932383][ T7320] ? __mutex_lock+0x26d/0x1bd0 [ 511.933907][ T7320] ? io_ring_exit_work+0x422/0xd7a [ 511.935510][ T7320] ? find_held_lock+0x2b/0x80 [ 511.937038][ T7320] ? io_ring_exit_work+0x434/0xd7a [ 511.938690][ T7320] ? io_ring_exit_work+0x479/0xd7a [ 511.940318][ T7320] report_bug+0xb2/0x220 [ 511.941649][ T7320] ? io_ring_exit_work+0x479/0xd7a [ 511.943207][ T7320] handle_bug+0x16a/0x2a0 [ 511.944573][ T7320] exc_invalid_op+0x17/0x50 [ 511.946013][ T7320] asm_exc_invalid_op+0x1a/0x20 [ 511.947555][ T7320] RIP: 0010:io_ring_exit_work+0x479/0xd7a [ 511.949371][ T7320] Code: 8e e8 eb 59 43 01 48 8b 05 04 a4 4b 0d 4c 8b 7c 24 38 31 ff 49 29 c7 4c 89 fe e8 d2 d4 d3 00 4d 85 ff 79 12 e8 28 da d3 00 90 <0f> 0b 90 48 c7 44 24 20 70 17 00 00 e8 16 da d3 00 48 8b 74 24 20 [ 511.955180][ T7320] RSP: 0000:ffffc90004357aa0 EFLAGS: 00010293 [ 511.957082][ T7320] RAX: 0000000000000000 RBX: ffff888027caa710 RCX: ffffffff81354e8e [ 511.959543][ T7320] RDX: ffff8880290c2540 RSI: ffffffff81354e98 RDI: ffff8880290c2540 [ 511.962003][ T7320] RBP: ffffc90004357c38 R08: 0000000000000007 R09: 0000000000000000 [ 511.964448][ T7320] R10: fffffffffffffffe R11: 0000000000000000 R12: ffff888027caa000 [ 511.966893][ T7320] R13: dffffc0000000000 R14: 0000000027caa700 R15: fffffffffffffffe [ 511.969361][ T7320] ? io_ring_exit_work+0x46e/0xd7a [ 511.970967][ T7320] ? io_ring_exit_work+0x478/0xd7a [ 511.972566][ T7320] ? do_raw_spin_lock+0x128/0x260 [ 511.974158][ T7320] ? __pfx_io_ring_exit_work+0x10/0x10 [ 511.975857][ T7320] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 511.977602][ T7320] ? debug_object_deactivate+0x2e4/0x3b0 [ 511.979366][ T7320] ? rcu_is_watching+0x12/0xc0 [ 511.980876][ T7320] process_one_work+0xa23/0x1940 [ 511.982433][ T7320] ? __pfx_process_one_work+0x10/0x10 [ 511.984113][ T7320] ? __pfx_io_ring_exit_work+0x10/0x10 [ 511.985816][ T7320] worker_thread+0x5ef/0xe50 [ 511.987313][ T7320] ? kthread+0x13a/0x450 [ 511.988680][ T7320] ? __pfx_worker_thread+0x10/0x10 [ 511.990313][ T7320] kthread+0x370/0x450 [ 511.991595][ T7320] ? __pfx_kthread+0x10/0x10 [ 511.993060][ T7320] ret_from_fork+0x72b/0xd50 [ 511.994488][ T7320] ? __pfx_ret_from_fork+0x10/0x10 [ 511.996080][ T7320] ? __switch_to+0x800/0x10f0 [ 511.997571][ T7320] ? __pfx_kthread+0x10/0x10 [ 511.999024][ T7320] ret_from_fork_asm+0x1a/0x30 [ 512.000575][ T7320] [ 512.002277][ T7320] Kernel Offset: disabled [ 512.003641][ T7320] Rebooting in 86400 seconds..