last executing test programs: 1m26.377288586s ago: executing program 3 (id=57): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x800040, &(0x7f0000000200)=ANY=[@ANYBLOB="7472616e733d76697274696f2c6e6f78617474722c756e616d653d5e2c6e6f657874656e642c64656275671d3078303030303030303030303030303030362c6163636573733d757365722c63616368653d6c6f6f7365"]) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, 0x0, 0x800) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xfff1, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@delchain={0x2c, 0x64, 0xf31, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xfff3, 0xffff}, {0x8, 0x1b}}, [@TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r4, {0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x0, &(0x7f00000001c0)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\xe4\n\xdc[\x03\x97\xcd\xf1\xa6b\x9a\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|') r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000580)={'rose0\x00'}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) accept4(r6, 0x0, 0x0, 0x800) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config\x00', 0x1ff) clock_adjtime(0xffffffd3, 0x0) r7 = openat$cdrom(0xffffff9c, 0x0, 0x801, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYRES8=r7], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) 1m25.595811861s ago: executing program 3 (id=61): r0 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) dup(r0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x48) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000440)={0x0, 0x57b7, 0x400, 0xffdffffd, 0x2ce}, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2) syz_open_dev$tty1(0xc, 0x4, 0x3) socket$igmp6(0xa, 0x3, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) keyctl$clear(0x11, 0xfffffffffffffffd) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xb, &(0x7f0000000500)=""/187, &(0x7f0000000600)=0xbb) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$9p_virtio(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYRES64=r1]) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x16, 0x0, @void}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x3}, 0x4) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080)={0x1, 0x1}, 0x8) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x7fff, @empty, 0x19f4d29}], 0x1c) r7 = memfd_create(&(0x7f0000000240)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1fb;(\xb5\xe1jS\xd6\x91B\xb4\xe5=\xc1+\xb9\x12\xde0\x02\xcc\x18\xae%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa7^\xff\xf5\x95\xd2q#\xc6\xca\x97\b\x00\x00\x00\x00\x00\x00\x00&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdlC\xec\xe4\x9a\xc2\fX\x0e\xbc\xa4$\x9dU\xab\xbf\xbb\x12\xe6\x9f\x1d\xe4\x8a\x00\x00\x00\x00\x00\x00\x00\xa0W\xf1H\xb4~$\x05bIp+\x81Y\x9d\xd2!\"\x9d]zs\xb7\xfc,\b\xdd9\xc6\xe03t9\tT\n\xe8\x1f\x84\x1f\xf5\xc5\xf6}\xd7\xa3SL\xfa\xda\x97\x84\xa5Oj\x9by\xd3\x03 u(\x19\xd1\xc0\x8dG\xd8a\xad\x90jz\x12\xbc\xc3\xd7\x04~\xbe\xba\xccTO\xc1\xb2:\xdd\xc1M$\xbb\xe1{\x04\xb3\x13>\xf2n\xee\xab\x83%k\x92\x16\t\xe0\xe1\xa0\xa62\xef\x12\x96\x8b\x1es:\xfe&\x00'/318, 0x0) ftruncate(r7, 0x2022ad) fsetxattr$security_ima(r7, &(0x7f0000000080), &(0x7f0000000380)=ANY=[@ANYBLOB="0416"], 0x2, 0x0) 1m24.522310626s ago: executing program 3 (id=66): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0xc) r1 = syz_open_procfs(r0, &(0x7f00000000c0)='net/udplite6\x00') r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/power/pm_debug_messages', 0x84b00, 0x109) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000003c0)={0x8, {"7a5b5d6c155dd40f67f6e40e4c2043d6ebfa548066a78df5054686213134b2f911fde484070110a78d55e6e6fa22e4c07958f78947b9d1bc259503b65cd4f28b19bba6fa1c5e6902b8abe6249a4e57066ee847657f4b7a9a30c743eeda14a3b0cdbd31995204888c221fccf43b825c8b44afcaa64247d2834abc893d6ca25109af93cd11f5355dfb4033a758cace7bb821ff043446a5e2a300c57d4d889ab88af249a72f8f9e5528eca68bb2976217bdf2c432b12c8485846ac88dcd1f35e2ffa9e6a1e0d460e0561bddcb76ab9168e6701b2bff1f295e408d7218fbbe1afda48e030880627d8844fd0d07947ecbfe8e3728d3de36be29b28890f4987f4a6e9502dc8f509b5e68b035cf787ed371c3432af0783f30b7ea5feecb76f2875004e7f6b41d1eacebb8c3e4b23728ea3cfb9bc067d6ab0d8dffae6a72c0afb25195cf0c4da2cd6d9817447e3e2ba786d2212b84a7c84d1d1357aa8a3f311579295d71edc6443abde74a5e726b0056c736c2e848d05060142e98dc30e7edd8edb746e06c53578a18388474d5f55b6ab412a39cd6953e999e03e48dc6bbcdb6db9cd2e73ea23931aa7bdadd127c0659b7cf83ec2c05f26b9e819b017e07809c987295042f9ebefad5c58083763711564e99dfee17522ff54e79b47551d49cc9c484e7670d17c2910763960adcd40d0937055fd470adfbb6fc09f384421eb986ec75c2775aa8c77aac65b01a3ec60e6c727413d0957e9ab974c3f99222f1be2d40dffc21d5c4f959bd5f837a3e09b4ed71b8af85902c37161fb48c261bf349ff812b3ec861140212d901299a84a1e9ec1f8fced1e96329033472575c73409cc98016fa9b86e113ddaaf122bea16f4d7d36bd00486c4146abe24bdc50a4f88d328a7a2fd4e52d54576224d5253117cde7fad278bf3963dd9e43eaf4aa09d8acb73fa79ebc577c8f5af708059d39ade0670532a241d08607b97d25150aa5566be06d5a8051a95e9f4470260dbd214afcbb1ef5fddab3fa450041a748ca4000747ef8a0a38f82e464252bac74f5a9f92c6697403c0966114c0837e90696cf5a2195a3ef8f511e18dd8a555231df2aced051e90332b43b8c59f3ff32ea1ae2cb932ea25473bcb7375f6f1a541a1470ed676abea8c66d3c01c419821c9f11ed570472076e5c3e8999ac9993a8f88a332387c8ca7fb975f135f339d003b4b22a783969368e25d0ae79b3c4619c228d2becbf703b435a248cfe2143949551108a1762d5ce3aa4f7fd8960f3969a0ec002dc21776f8615f03bbcd862e561d34097f2c67f398fa1840ddb314a375b2e73e83580338a60d222631fcaad6e4fb390dc6ac25a9162a4900814c0c5a0c7838875a5ad32163042c922fabeb47309023ea50e22e97365d6692e0a845e38c51b1dc09b6a28919b3c7a25c07e03280f3a3bb176b008036a287baca043f78311c61913d5b3d86527dcbc5710847b0cf053afe7ab6a69c47e086253f9862eb97fb66051f322e2c882438a0fe62daee8cfca6ce90cb72cefa610d485ff92cb7c18277be5fa603c776743cdec854fa8a3872c3ba8edaa743e8cf6141db9afa09f811df27838e5abdd495ebb4f483327885a2f457eea19ff50386430e88557dea317108f1a3e05d38d7dc0342334a080a723c12ab44cdba3a3ad4f77043eceb2630ffc58e181dee60f08618be736de66bc8eb7a1b385ff004984fb580476fd749f900d54ff2ae8f81792ab10d24fbfa2107d17288102d737ad460428f7765120d9492e345572f61cbceb250fcd0ba9c8482d6f25f66d53a9cf2f5894f7b51b760b2dac73e892deb53aa5acf801b35ac01c991b6b707eb62133e579861af655f4a21aae74f9e367895ec159bb5c98f9c8d5014af660c5721a826b11c56e730b585b5dc4746516734f6d2cb076e5d108c9b483aff6d50790042c07b961e5c910a4fbd5665709793f9377714132a076adaed2899bffbe0c678800500615f2afb84d7ca26fa032e654d8a716a5a131ac9fdafb4229fde61fb00c42e9bc4acecfce3328a0aef44e3c15a5235d2240acf8789fb517c126d11bea157434d90f059bfb3f02df1ce38d72f53a43a4a8885725ba910af0a1976b61ffb633bc89a89a3242563d1f3e1a05a37a46bec23640e4cfd93782ac89c5271cf230ac5d6f32ebff55e02377a0585a76a0dd09a252bbb3c16289c5bebd89deabec6f17de36b50dc279fb88a02291111db1cd5175af9b80d9aac8fea55853831ccddaef342b87c6e0f6328df11f0b92cbee03b6bfe53786ed763467959976ea151e77b995a75c1728c88bda7b9dc3cc89e0f52c09c4107269451c954e844d0274e203127fd3942b27a5662e88eaedf3e0ef2f0a43da15fc205da11d470e59adea13447fb7ea2aa0c4781cf222be0ef8475b287485b6a8cf1d7872ba55db56e2f8b0533219713ff95c981720d20a3a5fb6c6c75fd3f0285838c3839a32249bcea7724572a7d5910dae045da91a80bbd670358c34f3f1acdd3ab3ea7afe4af266e0461ef40d3a3b7eb3823c467e046b47060201380de95769ca65126edb1954dd5977ea6205fa5731b036021ad312bdb4c6a40401c2ef0804cd658a78a0c8a394e9555e14569ea611d2f983122cd9aec67a3889c51443f9926fa83f5ffd171678e674be320e53dceca163816114098108c9ca591c668ea91071e9e425f6e60d4183aa13dba58fde06c75ee73644c37e3169fd40c56b3b2f2d25ef7b68797f4bb365fb729a1c0949880778b8ffe1bb746f213980702f2ed0fca88d2c9fa2199316884c882f2de79c72e0c2734721ace4d0228b28c4744c12b6a60b6aa1bcd2c847c63ec71866e8e3d8108640250ad35781237f195c1849063ead8800a0d21867da867d7776f03ebf7bab6edc8a28f3982e7b86697b164de633f752375408a5d586311b7736121ceef3650968f18abfa6c7d394ba8e0b8d517dec4240f2bc6a7e1fb37cd7c08a6a8a3b4623a3a9b6bacd460e3014214a968276eb097c309bf201cab9aae4e735472ff8e84fccb6ff55718d18c47e6085ca079e4f2b283f1f9de72df438e237531b9c6c896c71844787f82bf350fb898a4110b7b1905c8c8f98479afe43ec75f1f2021024587d6c87841116a169b23180538f36fe3bdf4e9858a68a8e98f316188c45f9c53468a73c65e61df67d7991f43d5905b7fc58c2cb6faf58b2269da89809773a5b0d3af38caac6a836f6490bf37be40335b2a387346380419467fed14743e9cab6c97b235ee110af36aff1fc2d990eddf31d2931667fd691dfcfb983ed564742cc0e720a5f42058c4df97b4a273a7426b7e8a49b16258d4e39180762639c9b008149eb5b737841ef5440b0cbb23747c5ee319ea1f4a821ae8d2d24215b861535f82750fb35073907cdbae3f2d08db1f95efbbea7cf5433cb040226835bdcfcb7d45146fb51dd52add1f93aa4275b1f69d214e4114dea1be181516452273153e2b134a288663d5ec1d2880900b9ea8572b963b77b839efdf78b609cc1855d40319a809df4571a606f54e7b559a4c29cb7e2a95a5e8e4aa769c70a581f21d24321639f339d854aa11956f3eb09e4c7369d2ad675b372d75d2ca4a89065143d04ec7beeb18543a9d2a17b14d72e00173f9258e2691d3cf2f798fbbedf1ee3c90bee9f67644bde4a4ff81d07942dcf000cee4d37b02fdd2789cccb1412e1320a1285acf70eae6e6ea7b0cd53751fab6adb488982eabe73da52c76ccbb7a00971b2f333cabcc6948dd79d35f6a93a6f41b90c87307c58a10b8d6a2344f1f50ebf801602c6ed4966761b065fbe913111ad5ae8fa15440266d0fc0529a8b9c50fb196668d75bd9bcc1b312a119572afe8aaa73eec2e643e7a6708176bb76f3f48e8e36ec28519b7d1f52b15bc09c0218b8cfb8f5cc2bfbd913e4755a8371e0875412e2623542ea1e586759ab9c393e360318af4b1bf2cc235cce4a05d4268ddfbe6d85af5a743fd3883eeff9556da11b8a47403285b3d49ddea33603a6e2befba461004c7c08aa582230fee167450d35c3dcec3ebf82930bb8ea3011ebab02c36473a67fb882a3cd9a3d0c0c21420055d170d4837507f4311eeb03c18cb25bc629535911204a548a0838a89775ec8e439174ea6115dfc22466a1eb76cee7a9790b684861bfa3adc9ba697da649e8e183083e537ffa761036ff4c4541f6621f5ceacaddc32e670b77aa7bf5046da736cfc577685982b16b244edc9be5735b6ce35fedf9f663c299945b46fd5d24ea940ccf9e14269812de90b04c02f18e28d1cfe8744d0e1a2be119ae3ec184ee3db466495aa013a08657c8c0168f6ec1e15bb15b3143c2954489200948eb728664321c7815991bdad22c79b357b7a5f32175f6ff8d50e83c54f94633e5a8847efc8d0b157fdf2ae211f19f0298cd7f96f9371a59f5e32621e95af7b5ca7f9f50ac494f46ce4643e703b9c1436d07469537a344261038837e8d5c3ece4902b51effa25d3a2278e747b21e23a981c8647567d1c49979da4d2bdcb2a1804257263ef7680c0234308922f0d56cf7117a592a79486cc60aaf5365e1ca4e392cd6f2c1cfd7a7dddaf4baa5054f2ab3f1c8affb50170250fef0b67cfe295caa4d21f9219c444b8ff4d10e40856ca9360260b20eeaa149ec958703ee525a525e196e915c008a8ebf8fafb3776f8a33298be2b7a8c5ecdfe65bcf1006a8e92c3fa08acf96f98a68c09abef1b16d764f3bcc64b37842053a2eb6a8832d04283e1d3aa9303bf66f83e11e07e2147ddc204a066c4469a8c53f4a2309410f28fe1ca7b5ffc043c5de7c07bccc7da0c816e7320023665ca436432d8b7652be37432b2ad2045ca9a7cdfb46ce4a7ee4fff21a4054a8632fa9829d9e97c08f1e636a76468109781f66f2d5290d205a05ae80803bbd4e534780f7cddd7308b40e2ae5168be2253bd5ecc50e861963b073b046545671d56e68ae4e1b4952c555c084c7638165dd3f7ed2f9801dc947526620abf30713cad8331a7dd743be5850f8b6a5a3a88247b2a860f9fe34b7734a22455dd1fcda0e730ef3474a5426e8094638dabe81f627d83b0422d03fd455c573d9427d77769de7e4819d87285eaed599c43c170f87df6641a113c522a2f3b69d58f541dc4bfc3e2e69bad5cd3bbe1b92aac5a4f05085db065b04768a7b66dbe643a21e15e0917256b7f7faf41d45d85872f4909a99c7d9697e2a3d32baec5e8f1330995f008a88dba634c910c6ad7560f6e1811ce922180a28e09ce7947ae6b107be522c110098c8cba0321bf7537431196841c3a8c494e87f244bf3fdbb9c328b8713d4c4f4da4ad58f2248b8924b0835ce69fdd83a39e3c08908ffa9b1a63d2b127e3ce7a9992f80979309f816633f28c22c356e4a09dfab16800b74477b41de13acc512eb622be0cdb008d41ad93bfc93970ec3ccc032d6ab252548d19d0e85638ea04aa61328420683cf208ad2c3ad35fccaa96fcf7438cd1d8bf95cff6af67d72197039de40e2fb006ab9a6e208f7ab435b4aed584eb8f86a557cff358b2cedef20d3182e90f32afad2498b7d84cf6fd1cea0b0387bd110c885b31ef745dec2305d0f4d401b7eb848e3eb3e0962b7514dd40840b68f4b2a15d728a8b1e33d273b97892d8bc0cf583abff0e58a0faf1466182bd1445e9737a7eee874f44c57f0aa51f70f21492ec251d76a4079d375a6a1f5e9119e8208d0c5e08337773b0a401ecea64b69e3665e2790b038d00997a1690f365fb8f01255c0902a42100", 0x1000}}, 0xfffffffffffffe29) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064d1, &(0x7f0000000040)={0x1e, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r7, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x1, 0x70bd2d, 0xffffffea, {0x0, 0x0, 0xe403, r7, 0x40083, 0xa800}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x6}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4840) write(r4, &(0x7f00000000c0)='transport=fc,traddr=nn333333333333333:pn-0x4444444444444444,host_traddr=nn-0x1111111111111111:pn-0x2232222222222222,nqn=n', 0x79) mount(&(0x7f0000000080)=@filename='mtd0\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='jffs2\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/fillfile\x00', 0x42, 0x1ff) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x18, 0x69, 0x503}, 0x18}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fe475d42ffff3f000000000000000085100000060000008510000004000000c408000000"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) write(r8, &(0x7f00000005c0)="000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f", 0x8000) sendfile(r2, r2, 0x0, 0xb) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) ioctl$DVD_WRITE_STRUCT(r1, 0x5391, &(0x7f0000001400)=@copyright={0x1, 0x1, 0xf8, 0x44}) ioctl$CDROM_GET_MCN(0xffffffffffffffff, 0x5311, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000001200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="fbff26bd7000ffdbdf251500000008000300", @ANYRES32=r12, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x20044800) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000001c40)={0x14, r10, 0x1, 0x70bd29, 0x25dfdbfb}, 0x14}}, 0x4000) 1m24.237330477s ago: executing program 3 (id=69): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x400, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001c00)=@newtfilter={0x24c8, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x2498, 0x2, [@TCA_BASIC_ACT={0x2494, 0x3, [@m_xt={0x160, 0x15, 0x0, 0x0, {{0x7}, {0xe4, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TARG={0xa7, 0x6, {0x2, 'nat\x00', 0x3, 0x8000, "5be4a161f363ee67c6fb589ec301762e184c91856c5f8f9cf4a600a77f2a0b8fdaf9d3a187a4fda2437751806e58b9922d6424f21809107c48ee2ed47e10bbfea294400dfc294d2b493991786dad2a532b63b78e1501c30a318a2dcbe80127793c397ee09083bf0947a99db360314dd2628eeb2500b47fbccec86b3f5b"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x8}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0x1}, @TCA_IPT_INDEX={0x8, 0x3, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0xfffff011}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}]}, {0x55, 0x6, "0d162b82903d43eeec39e1761fe78676e88ba6c07e07c3d622360f5a58b3b286622a5235351faaa7cfd0be4f029da58e73727311fb34dbdb7a4a25ae1beb550123de0fd472e0c697ccc48f3d553f8ace8a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_pedit={0x1dec, 0x1b, 0x0, 0x0, {{0xa}, {0x1d7c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xf10, 0x2, {{{0x7, 0x7, 0x0, 0x7, 0xa8}, 0x6, 0x2, [{0x9ac, 0x21a3, 0xaf08, 0x3, 0xec7, 0xffffffff}, {0x81, 0x2, 0x1, 0x20000, 0x9, 0x9}, {0xc, 0x8, 0x4, 0x4, 0x1, 0x51bb58cd}, {0x5, 0x6, 0x3, 0x7, 0x3, 0x9}, {0x8, 0xb, 0x4, 0x4, 0x4, 0xc9d}, {0x400, 0x8, 0x8001, 0xf, 0x3, 0x3}, {0xd, 0x10, 0x5, 0xd, 0xcb9, 0x7ff}, {0xfffffff1, 0xfffffffd, 0xffffffff, 0x7f, 0xffffffff, 0x1}, {0x1af8325, 0x3ff, 0x4, 0xf, 0xe89, 0x1}, {0x1, 0x3ff, 0x6, 0xffffffff, 0x80000000, 0x4}]}, [{0x3ff, 0xff, 0x2, 0x2, 0x1ff, 0x4b2}, {0xd, 0xffff, 0x3, 0xc1c, 0x7, 0x80}, {0xd5c, 0x0, 0x4, 0x4, 0xa, 0xfffffff7}, {0x9, 0x8, 0x2, 0x81, 0x0, 0x7}, {0xfffffffa, 0x3, 0x5, 0xffffffff, 0x8, 0x9}, {0x23fe, 0x4, 0x0, 0x3ff, 0x7, 0x9}, {0xfffffffe, 0x2, 0x5, 0x3, 0x7, 0x4f1}, {0x0, 0xffff, 0x55c9, 0x641600, 0x4, 0x3}, {0x2, 0xd, 0x1, 0x2, 0x3, 0x5}, {0xf, 0x7, 0x7fffffff, 0x9, 0x5, 0x24}, {0x9, 0x7, 0xdd1, 0x4, 0x8}, {0x8041, 0x8, 0x7, 0x800, 0x9, 0x913}, {0x1b5, 0x239d, 0xb, 0x1, 0xfff, 0x402}, {0x8c2e, 0xa, 0x0, 0x5, 0xbe, 0x2}, {0x33, 0x2, 0x5, 0xf8000000, 0x1, 0x9}, {0x10, 0x2f, 0x34b, 0x7, 0xffff, 0x2}, {0x1, 0x800, 0x0, 0x2, 0x600, 0x3}, {0x800, 0x0, 0x3a4, 0xfff, 0x2, 0x5}, {0x401, 0x4, 0x6b47000, 0x5, 0x83c, 0x1}, {0x5, 0x0, 0x7f, 0xc0000000, 0x67b60bdf, 0x3b00}, {0x8, 0x80000000, 0x753, 0x10000, 0x800, 0x1}, {0x566d7f5a, 0x1, 0x9, 0x3, 0x7, 0x7}, {0x10000, 0x4, 0x5, 0x80000000, 0x0, 0x101}, {0x3, 0xfffffffe, 0x5, 0x3, 0x76}, {0x909, 0x9, 0x87, 0x1, 0x0, 0x1000}, {0x5, 0x9, 0x88, 0x7, 0x81, 0x8}, {0x1, 0xe, 0x3, 0x10000, 0x80000001, 0x43}, {0xff, 0x7aea, 0x7, 0x6, 0x2, 0x6}, {0x8, 0x3f, 0xff, 0x6, 0x7, 0x5}, {0x7a, 0x101, 0xfffffffc, 0x4, 0x401, 0xc9da}, {0x9, 0x80000000, 0x3, 0xa, 0x3ff, 0x100}, {0x9cb0, 0x8, 0x9a2, 0x2, 0x6, 0x7}, {0x2, 0x9, 0x8, 0x800, 0x1, 0x915}, {0x0, 0x7, 0x8, 0x4, 0xe22, 0x80}, {0x80000000, 0x1, 0x1000, 0x8, 0x5, 0x8}, {0x4, 0x10000, 0x69, 0xfffffffe, 0xfffffffb, 0x7}, {0x0, 0xb8, 0xaf, 0x1, 0x8, 0x80}, {0x5, 0xb, 0x0, 0x6, 0x0, 0x7}, {0x4, 0x7, 0x9, 0xf86, 0x2, 0x7}, {0x8, 0x1ff, 0x1, 0x0, 0x127, 0xa01}, {0x7, 0x0, 0x2, 0x1ff, 0x3, 0x10001}, {0x3, 0x5157024f, 0xf, 0xb45, 0xfffff0d4, 0x5}, {0x7, 0x7, 0x4, 0xb60b, 0x0, 0x9}, {0x6, 0xd004, 0x4, 0x2, 0x5, 0x6}, {0x3, 0x7f, 0x2, 0x3f, 0x3, 0x20c5}, {0xce05, 0xd, 0x8, 0x101, 0x3, 0x7}, {0xfffffffc, 0x356e, 0x6, 0x3, 0x2, 0x9c}, {0x3, 0xa, 0xffff, 0x6, 0x8, 0x1}, {0x3, 0x583b2ea1, 0x0, 0x2, 0x9, 0x5}, {0xfffffff7, 0x6065, 0x6, 0x8, 0xffffffff, 0x6}, {0x0, 0x3, 0x3, 0x8, 0x3feb, 0x2}, {0x8, 0x38000, 0x8, 0x8, 0x7, 0x4}, {0xffffffff, 0x10, 0xd, 0x1, 0x1, 0x6}, {0x7, 0x6, 0x1, 0x1000, 0x8, 0x200}, {0x8, 0x3, 0x0, 0xa, 0xd, 0x927d}, {0xffff8000, 0x4, 0x0, 0x2, 0x8, 0x5}, {0x9, 0x800, 0x1, 0x6, 0x961, 0xc491}, {0x9, 0xb, 0xa3, 0x7, 0x4, 0x4}, {0x7, 0x10001, 0x2, 0x1, 0x4, 0xff}, {0x2, 0x7, 0x7, 0x4, 0x1, 0x81}, {0x9, 0x2, 0x1ff, 0xc, 0x7, 0xff}, {0x80000001, 0x2, 0x6, 0x1ff, 0x3, 0x3}, {0x2, 0x1, 0x0, 0x7, 0x2, 0x4}, {0x80000000, 0x5758efec, 0x4, 0x8, 0x5, 0xbc6c}, {0x100, 0x7, 0x8, 0x4, 0x10000, 0x3d}, {0x2, 0x1, 0x9, 0x7fff, 0x5, 0x1}, {0xffff, 0x4, 0x6, 0xb6b0, 0x9, 0x7}, {0x1, 0x40, 0xf6dd, 0x4, 0x81, 0x7fffffff}, {0x4, 0x2, 0x2, 0x4, 0x8}, {0xfffffffb, 0xfffffffc, 0x2, 0xfc9, 0x6, 0x100}, {0x3, 0x3, 0xd, 0x6, 0xfff, 0x3}, {0x6, 0x8, 0x3, 0x7, 0x0, 0x7}, {0x8, 0x3f, 0x8, 0x0, 0x10, 0xffffffff}, {0x85b, 0x4, 0x81, 0x4, 0x1, 0xff}, {0x8001, 0x5, 0x9, 0x2, 0x47f, 0xf2b3}, {0x1000, 0x7, 0xb, 0x7, 0x1, 0x9}, {0x3d2cc, 0x1ff, 0x80, 0x4, 0x9, 0x8}, {0x7, 0x2, 0x3, 0x0, 0x6}, {0x9, 0x9, 0xeea7, 0x0, 0xffffffff, 0xffffffff}, {0x2, 0x80000000, 0x9, 0x80000000, 0x95, 0x400}, {0x9, 0x5, 0x1, 0x7, 0x7, 0x2}, {0x2, 0x3, 0xc, 0x7fff, 0x5, 0x8}, {0x58d, 0x5, 0x800, 0x3, 0x7, 0x7}, {0x26495527, 0x3, 0x7, 0x8, 0x4, 0x2}, {0x97, 0x8b50, 0x40, 0xfffffffd, 0x0, 0x10000}, {0x9, 0x4, 0xc, 0x82, 0x1, 0x20}, {0xfffffffc, 0x7, 0x5, 0x6, 0xb, 0x5}, {0x80000000, 0x166c0000, 0x7, 0x5, 0x0, 0x4}, {0xba4, 0x2, 0x5, 0x80, 0x9, 0x7}, {0x3ff7, 0x100, 0xc00000, 0x1, 0x5, 0x80}, {0x7, 0x7, 0x0, 0x0, 0x7c, 0xffffffff}, {0x2, 0xfffff001, 0x6, 0xfc, 0x1, 0x9}, {0x8, 0x0, 0x4, 0x8, 0x2, 0x9}, {0x54, 0x5, 0x4, 0x40, 0x13d4, 0x3}, {0x9, 0x9, 0x40000, 0xa, 0x6, 0x2}, {0x2, 0x8, 0x80, 0x4, 0x18b7, 0x2}, {0x5, 0x9, 0x5, 0x3, 0x2, 0x8}, {0x3, 0x9, 0x9, 0x4, 0x0, 0x5}, {0x4, 0x1, 0x8, 0x80000001, 0x80000001, 0x6}, {0x3, 0x1, 0x0, 0xc, 0x7b528143, 0x7f000000}, {0xd, 0x0, 0x5, 0x1, 0x10001, 0xcdb}, {0x10001, 0x3, 0x140000, 0x1d, 0x1, 0x6f}, {0x4, 0x4, 0x1, 0xffffffff, 0xfffffffc, 0x80000000}, {0x6, 0x8a, 0x7, 0x4, 0xa, 0xf00}, {0x3, 0x4, 0x5, 0x1, 0x9, 0x2}, {0xd6, 0x2, 0x1000, 0xffff, 0x772, 0x9}, {0x101, 0x32b8, 0x10001, 0x6, 0x2, 0x8}, {0x5, 0xffff, 0x7ff, 0x7, 0x8, 0x9}, {0x9, 0x7f0, 0x4, 0x7, 0x400, 0x4}, {0x4, 0x14000000, 0x8, 0x4, 0xffffffff, 0x7}, {0x1, 0x7, 0x4, 0xfffff800, 0x100, 0x1}, {0x81, 0x4, 0x0, 0x3, 0x4, 0x2}, {0xe0, 0x6, 0xffffa1bc, 0xe, 0xffffa0aa, 0xa}, {0x1, 0xf10, 0xffff0000, 0xb13, 0xcd69, 0x4}, {0x1, 0x52e7, 0x1, 0x6, 0xfffffffa, 0x6}, {0xb, 0x6, 0x80000000, 0x4, 0x3, 0xffff}, {0x2, 0x7fff, 0x5421, 0x8000, 0x0, 0x1}, {0x9, 0x8, 0x0, 0x2, 0x0, 0x7}, {0x3, 0x1000, 0x3, 0x9, 0x1, 0x1ff}, {0x2, 0xb, 0x6, 0x7fff, 0x8, 0x5}, {0x5, 0x5, 0x4, 0x7fffffff, 0x5, 0x8000}, {0x2, 0xfffffffa, 0x9, 0x7, 0x7}, {0x2, 0xa1f, 0x4, 0x9, 0x1ff, 0x80000000}, {0x9, 0x9, 0x2, 0xd, 0x1, 0x1}, {0x1000, 0x3, 0x1d41bdd3, 0x624, 0x9, 0x13e8afb3}, {0x5, 0x80, 0xc73, 0x2, 0x28a, 0x6}, {0x6, 0x8, 0xe, 0xfffffffd, 0x5, 0x6}, {0x4, 0x8, 0x7, 0x800, 0x80000000, 0x7}], [{0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x3}, {0x4}, {0x3}, {0x2, 0x1}, {}, {0x4}, {0x1}, {0x3, 0x1}, {0x3}, {}, {0x3}, {}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x3}, {0x7}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x4, 0xe1f89ab9a9a0ef5f}, {0x3}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x1}, {0x5}, {0x5}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x0, 0x42db6b1dc90b8b89}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x7, 0x1}, {0x3}, {0x5}, {0x1}, {0x3}, {0x6}, {0x5, 0x1}, {0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x1}, {0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x4}, {0x3, 0x1}, {0x4}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x2, 0x1}, {0x6}, {0x3}, {0x1, 0x1}, {0x4}, {0x5}, {0x2}, {}, {0x4, 0x1}, {0x2}, {0x5}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x4}]}}, @TCA_PEDIT_PARMS_EX={0xe68, 0x4, {{{0x8, 0x10, 0x20000000, 0x10, 0x4}, 0x8, 0x6a, [{0x2, 0x5791, 0x6, 0x5d, 0xfffffffc, 0xfbd59a86}, {0x0, 0x7, 0x2, 0x0, 0x0, 0x5}, {0xb3, 0x6, 0x3, 0x6, 0x9d, 0x2}]}, [{0xbc7, 0x3, 0x8, 0x7fff, 0x9, 0x7ff}, {0xf61, 0x7, 0x9, 0x2, 0xfffffffd, 0x5}, {0x1, 0xfff, 0x5, 0x3e3, 0x9, 0x10}, {0x7, 0x2, 0x7, 0x10000, 0x6, 0x7}, {0x3, 0x8, 0x10001, 0x7, 0x7f, 0x9}, {0x7, 0x1, 0xd836000, 0xd, 0xd69, 0x2a}, {0x4, 0xf73a, 0x8, 0x4, 0x1, 0xe36}, {0x2, 0x6, 0x200, 0x3, 0x2, 0x5}, {0x7, 0x101, 0x0, 0x8, 0x1, 0x3}, {0xfffffffe, 0xc, 0x7, 0x1ff, 0x1ff, 0xfffffffa}, {0x3, 0x40, 0x3437, 0x2, 0x80, 0x10000}, {0x1, 0x6, 0xc, 0x1, 0x80000001, 0x1}, {0x7, 0x67aa, 0x9, 0x401, 0x7ff, 0x1}, {0x2, 0xd1, 0x1, 0xee66, 0x7f, 0x2}, {0x5, 0x0, 0x5, 0x1, 0x2, 0x4}, {0x5, 0xce8bfc00, 0x9, 0x7, 0x347, 0x800}, {0x7, 0x0, 0x8, 0x970d, 0x5, 0x4}, {0x7ff, 0x3, 0x8, 0x5, 0x200000, 0x9}, {0x1ff, 0x9, 0xff, 0x100, 0x1, 0x9}, {0x4, 0x10000, 0x3, 0xa950, 0x8}, {0xffff, 0x3, 0x3, 0x200, 0x3}, {0x9, 0x7, 0x7fffffff, 0x3, 0x0, 0x4}, {0x6, 0xfffffff0, 0xffff, 0x1, 0x1ff, 0x5}, {0x8, 0xb, 0x80, 0x9, 0x2, 0xfff}, {0x7fbf, 0xc8ae, 0x568a, 0x4, 0xdf, 0x6}, {0x100, 0xff, 0x8001, 0x2af037fd, 0x0, 0x8}, {0x1, 0xcc91, 0x3247, 0xbff, 0xdced, 0x3}, {0x1c1f, 0x7, 0x1c30, 0x2d8c, 0x31, 0x3ff}, {0x9585, 0x56ed89ab, 0x6, 0x6, 0x2, 0x9}, {0x3, 0x7c51ff16, 0x8, 0x5, 0x6f7b, 0x5}, {0x6, 0x9, 0x800, 0xaaaf, 0xc0}, {0x4, 0xd, 0x2, 0x5, 0x80, 0x3}, {0x4, 0xfffffff7, 0x7ff, 0x3, 0x6d1, 0x7869}, {0x7, 0xffff, 0x401, 0x9057, 0x6, 0x2}, {0x5, 0x6, 0x6, 0x7, 0x8001, 0x2}, {0x5, 0x1, 0x7, 0x10000, 0x2, 0x10000}, {0x4, 0x2, 0x7fffffff, 0xc, 0x2, 0xc}, {0x1, 0x475, 0x3, 0x7ff, 0x1, 0x8000}, {0x5, 0x401, 0x9, 0x9, 0x7, 0x5}, {0xfff, 0x6, 0x1, 0x0, 0x5, 0xa41}, {0x3ff, 0xb, 0x8fc, 0x2, 0x401, 0x7}, {0x5, 0xc, 0x168, 0x7, 0x3, 0xffffffff}, {0x3, 0xfffffff7, 0xd5, 0xa, 0xdf5, 0x7}, {0x0, 0x1, 0x0, 0x8, 0x24, 0xfff}, {0xe9, 0x1, 0x8, 0x5, 0xe17, 0x6}, {0x5, 0x3, 0x6, 0x8, 0x4, 0x1}, {0x6, 0xa, 0x0, 0x80000000, 0x4, 0x400}, {0x35b3, 0xfff, 0x7, 0x6, 0x8, 0x4}, {0x3, 0x7, 0x8, 0xffff0000, 0xb, 0x8}, {0x2c8, 0x0, 0x0, 0x8, 0xb83f, 0x33067f87}, {0x9, 0x0, 0x6, 0x9, 0x40, 0x5}, {0x1, 0x2, 0x2, 0x2, 0x2, 0x10000}, {0xffffff80, 0x0, 0x5, 0x9, 0x8001, 0x2}, {0x2, 0xe1a, 0x7fff, 0x7, 0x9, 0x60}, {0x7ff, 0xf, 0xee8, 0x7, 0x3, 0x98}, {0x2, 0x0, 0x6, 0x683, 0x5c4e, 0x6}, {0xfffffff7, 0x7f, 0x79, 0x5, 0x8, 0x3dbd}, {0xe0, 0x3, 0x6, 0x1000, 0x7, 0xfc}, {0xfffffffe, 0x3, 0x1c, 0x2, 0x0, 0x2}, {0x3, 0x8, 0x401, 0x6, 0x4, 0x4}, {0x9, 0x29d2, 0x4, 0x7, 0x10000, 0x2}, {0xea, 0xd, 0x9, 0x510d, 0x9, 0x1}, {0xfffffffd, 0x0, 0x1, 0x4, 0x2, 0x10000}, {0x48000000, 0x7, 0xc, 0xb, 0x5, 0x10001}, {0x6, 0x9, 0x20, 0x1, 0x4, 0xff}, {0x3, 0x0, 0x913, 0x8001, 0xfff, 0x78}, {0xf, 0x2ce, 0x5, 0x1000000, 0x800}, {0xe2, 0x3, 0xb7c, 0x8a2, 0x203, 0x8c}, {0xe, 0x2, 0x1, 0x1, 0x1, 0x1}, {0x1, 0x7fffffff, 0x10, 0x0, 0x8, 0x80a}, {0x0, 0x5, 0x0, 0x9, 0x2, 0x1}, {0x0, 0x3, 0x993, 0x100, 0x8001, 0x7}, {0x6, 0x80, 0x592, 0x1ff, 0x7, 0x3}, {0x1, 0x8, 0x9, 0x5, 0x1000, 0x400}, {0xc38, 0x6, 0x200, 0x6, 0xe, 0x7ff}, {0x0, 0x1, 0x5, 0x1, 0x90, 0x80000000}, {0x7, 0xfffffff7, 0xffff, 0x8, 0x8, 0x8}, {0x2, 0x1, 0x3, 0x3, 0x7ff, 0x28}, {0x5, 0xffffff95, 0x6, 0x80, 0x2, 0x7ff}, {0x7, 0x400, 0xfffffffc, 0x3, 0x7fffffff, 0x10001}, {0x7fffffff, 0x7, 0x6, 0x81, 0x3, 0x6}, {0x3, 0x8, 0xb9df, 0x8, 0x81}, {0x8, 0xffff, 0xd6, 0x3, 0x0, 0x2}, {0x5, 0x200, 0x2, 0x9, 0x1, 0x61b}, {0x9, 0x7, 0x200, 0xffff, 0x6, 0x101}, {0x2, 0x315aac48, 0x4, 0x7fffffff, 0x5, 0x2}, {0x9ff, 0x101, 0x2, 0x120, 0x8, 0xffff0575}, {0x34c, 0x7, 0xfffffffe, 0x765, 0x8000, 0x80000000}, {0x77, 0x4, 0xfffc0000, 0x62, 0x6}, {0x8, 0x0, 0x1, 0x0, 0x9, 0x7}, {0xa83f, 0x6, 0x3, 0x400, 0x9, 0x38000000}, {0x5, 0x101, 0x0, 0xe, 0x9, 0x2}, {0x10, 0x5, 0x3, 0x912, 0xfffffff7, 0x10000}, {0x4, 0x7, 0x2, 0x6, 0xfffffff7, 0x3}, {0x6, 0x1000, 0x4, 0x548, 0xe6968a7, 0x3}, {0x0, 0x5, 0x7, 0x8, 0x5, 0x7fff}, {0x8000, 0x7, 0x5, 0x8, 0x9, 0xf}, {0xc, 0xb9, 0x4, 0x10000, 0x1000, 0x1}, {0x5, 0xffffffff, 0xf, 0x5, 0x1, 0xa}, {0x321, 0x6, 0x9b, 0x800, 0x4, 0x401}, {0xffffffff, 0xe0000000, 0x62, 0x10, 0x8, 0x6}, {0x1, 0xa, 0x4, 0x4, 0x9, 0xfffffff1}, {0x2, 0x6, 0x9, 0x3, 0x4, 0x5}, {0x7, 0x0, 0xfffffff7, 0x6, 0x7, 0xfffffffd}, {0x0, 0x1000, 0x6, 0x7, 0xc, 0x4}, {0x4, 0x68000000, 0x4, 0xff, 0xfffffffd, 0x8000}, {0xd, 0x4, 0x1, 0xff, 0x9, 0x5}, {0x1, 0x8, 0x0, 0x5337c096, 0x177e, 0xffff}, {0x80000000, 0x9, 0x688, 0x6, 0x2, 0x2}, {0xba72, 0xa7, 0x3ff, 0x4, 0x4, 0x5a}, {0x7, 0xffffffff, 0x1, 0x4, 0x0, 0x2}, {0x6, 0xfbf, 0x5a, 0x1000, 0x7ff, 0x1}, {0x1, 0x2, 0x800, 0xffffffff, 0x4be8, 0xe79}, {0x400, 0xb, 0xd, 0x0, 0x10000, 0x7}, {0x3, 0xc, 0x9, 0xf, 0x9, 0x4d7}, {0xb, 0x3, 0xb, 0x9, 0x0, 0x6}, {0x9, 0x26b, 0x2, 0xfffffffb, 0x2, 0x7}, {0x0, 0x8, 0x4, 0x6, 0x0, 0x6}, {0x200, 0x8, 0x5ae, 0x3, 0x94, 0x7}, {0x7, 0xfffffffa, 0x7, 0xffff8001, 0xfffeffff, 0x9}, {0x8, 0x4, 0xffff, 0x10000, 0x2}, {0x800, 0x3, 0x9, 0x3, 0x4, 0x7}, {0x44, 0x21, 0x1562, 0x8, 0xa, 0x5}, {0x8001, 0x8, 0x7, 0x1, 0x7, 0x5}, {0x7b, 0x4, 0x100, 0x2, 0x1, 0x83}, {0x5, 0x7, 0x4, 0x6, 0x200, 0x7}, {0x7, 0x30b, 0x7ff, 0x6, 0x6, 0x3}, {0x7fff, 0x0, 0x80000000, 0x0, 0x1, 0x9}], [{0x1, 0x1}, {0x5, 0x1}, {0x2, 0xec7637425917dfb2}, {0x4}, {0x4}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x5}, {0x1, 0x91ea26144417ce8e}, {0x5, 0x1}, {}, {}, {0x6}, {0x3}, {}, {0x1}, {0x5}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x2}, {0x2, 0x1}, {0x2}, {0x1, 0x1}, {0x1, 0x1}, {0xa, 0x1}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x4, 0x1}, {}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x1}, {0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x5}, {0x3}, {0x1, 0xbca6b930aee6867b}, {0x2}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x4}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x1}, {0x3}, {}, {0x2, 0x1}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {0x1}, {0x3}, {0x5}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x5}, {}, {0x2, 0x1}, {0x7, 0x1}, {0x2, 0x1}, {0x2}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x4}, {0x3, 0xb71581a8bab67836}, {0x2}, {0x3}, {0x549edb75a63bbabf, 0x2}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x1}, {0x1}, {0x5}, {0x5}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x2}, {0x4, 0x1}, {0x2}, {0x3}, {0x2}, {0x4}, {0x2, 0x1}, {0x2, 0x1}], 0x1}}]}, {0x47, 0x6, "648c3edd97b1d447acaa78c36318ba7c69f2100fd1cdeb54f1ef84a2e68b65528b8a0ca89d30cf965ddf15035920807d003fd5534dd6f0078e4728a08465bec119fa7c"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_police={0x544, 0x1a, 0x0, 0x0, {{0xb}, {0x464, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9f}], [@TCA_POLICE_RESULT={0x8, 0x5, 0xc}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x1212, 0x3, 0x10, 0x3560c8c3, 0x7ff, {0x9, 0x1, 0x0, 0x2, 0xb, 0x75}, {0x4, 0x1, 0x7, 0x6, 0x0, 0xfffffffe}, 0x7fff, 0x400, 0x6852}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x60000000, 0x8, 0x9, 0x9, 0x7fff, 0x8000, 0x6, 0x81, 0x81, 0x10001, 0x1, 0x2, 0x1f, 0x6, 0x1ff, 0x5, 0x9, 0x100, 0x67, 0x7, 0x7, 0x4, 0x6, 0x2, 0x7, 0x8, 0x2, 0x0, 0x5, 0x9, 0x9, 0x0, 0xfdd, 0x7, 0x7, 0x63, 0x4, 0x8, 0x1, 0x6, 0x800, 0x9, 0x6, 0x6, 0x7, 0x5, 0x258, 0x2, 0x81, 0x6, 0x5, 0x1, 0x80000001, 0xffffff6b, 0xfffffc00, 0xfffffffe, 0x1, 0x4, 0xe, 0xfffffffd, 0x5, 0x3, 0x2, 0x5, 0x380, 0x0, 0x48, 0x2f4, 0x8, 0x4, 0x9, 0x4, 0x8, 0x97, 0x10, 0x400, 0x3, 0xc39, 0xf, 0x6, 0xfff, 0x81, 0x67, 0x2, 0x2, 0xe, 0xfffffff0, 0x3, 0x2, 0x1, 0x5, 0x2a312510, 0x7, 0x5, 0x9, 0xffffffff, 0x6be9f00c, 0x4c1f, 0x4, 0x401, 0x1ff, 0x1b14cef7, 0x8001, 0x3, 0x5, 0x0, 0x7, 0x2, 0xeaf2, 0x6, 0x8001, 0x0, 0x1, 0xfff, 0x101, 0x620, 0x4, 0x6e, 0xffff, 0x2, 0xbdc5, 0x8, 0x9, 0x2, 0x9, 0x2, 0x401, 0x9e0, 0x5, 0x7, 0x7a6, 0x8, 0x7c44, 0x10000, 0x6ea, 0xa7, 0x40, 0x8e, 0x7fffffff, 0x200, 0x1c, 0x10, 0x9, 0xfffffffd, 0xffff, 0x7, 0x3, 0xfffffffe, 0x4, 0x2, 0x400, 0x2, 0x70f, 0xfffffff8, 0x6, 0xfffffffa, 0x4, 0x8, 0x5, 0x2, 0x8, 0x0, 0xffff, 0x9, 0x2, 0x1, 0xe, 0x6, 0xffffffad, 0x10, 0x401, 0x1, 0x3, 0x4000000, 0x7, 0xa, 0x9, 0xbf, 0x2, 0x6, 0x7, 0x8, 0xffffff85, 0x7d, 0x5, 0x717, 0x4, 0x2, 0xf, 0x74e, 0xfffffff4, 0x4, 0x3, 0x38000000, 0x5, 0x40, 0x5, 0x7, 0xe, 0x2, 0x6, 0x1, 0x200, 0xa, 0x6, 0x2, 0x5, 0xf1, 0x8, 0x7c2f, 0x4, 0x10001, 0x2, 0x1000, 0xff, 0x7f, 0x101, 0x9, 0x0, 0x7f, 0x7fff, 0xfffffffb, 0x1, 0x6, 0xffffffff, 0x5, 0x6, 0x7, 0x1, 0x8, 0x6, 0xfffff5e7, 0xfff, 0x3, 0x3fe00, 0xa, 0x200, 0x4, 0xc8, 0x5, 0x2, 0xfffffff4, 0x3, 0x40, 0x8, 0x2, 0x9, 0x3, 0x3ab4, 0xfffffff0, 0x7deb711b, 0x1, 0x4, 0x2, 0xfffffffd]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}], []]}, {0xb6, 0x6, "bf4b61305fd92473841dab7398cd9b575611ca47dd275ffa6a3b1473a20cf4eddc5b4cb08b17052606b82f289b48828d3fa868087bd0080594c0f94a14dd0ab4819e9cf99666f6bf6ade009b5806734e328e3ea59594e64315ea88c6ebb99e487a9617501a80988bd32e503f32dd0e1bb9675623e5548fe26627f034dfd9b1cd91c2083af0b2ac3841347f2036bd9bcd050e7ef5586801e29949b18baab58b1ad23b2b27a2123036899b58f29fe036e3d2a9"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5, 0x2}}}}]}]}}]}, 0x24c8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000f143c7a92b1cecd700140900000020006596f604f247257677397c486257"], &(0x7f0000000500)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', r3, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00'}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="3437a2194d8cc236543f4a916de34959a7b39768f370019f1483bffb4c6cf31ccb7b73787b10dd5fad39ee86a6145cc582ab06a55faf94211eb0", @ANYRES16=r6, @ANYBLOB="01002ebd7000fddbdf251e00000008000300", @ANYRES32=r8, @ANYBLOB="04002f80"], 0x20}, 0x1, 0x0, 0x0, 0x4004000}, 0x20008004) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x20, &(0x7f0000000180)={&(0x7f0000000000)=""/189, 0xbd, 0x0, &(0x7f00000000c0)=""/168, 0xa8}}, 0x10) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r9 = socket(0x40000000015, 0x5, 0x0) connect$inet(r9, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r9, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r9, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4090}, 0x0) sendmsg$alg(r9, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r10 = socket(0x15, 0x5, 0x0) getsockopt(r10, 0x200000000114, 0x271e, 0x0, &(0x7f0000000040)) r11 = socket$unix(0x1, 0x1, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfdfffdfc, {0x0, 0x0, 0x0, r13, {0x4}, {0xffff, 0xffff}, {0xfff1, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 1m24.108611546s ago: executing program 3 (id=70): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc\x00', 0x1f7) (async) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/udp_port\x00', 0x1, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b0000000000000000000000fdffffff00000000", @ANYRES32=r0, @ANYBLOB="0ce500"/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="03000000ffffffff0200deffffffffffffff00"/28], 0x50) (async, rerun: 32) write(r0, &(0x7f0000000140)='9', 0x1) (async, rerun: 32) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x80087601, 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020200008500000070000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0xe, 0x0, &(0x7f0000000a80)="b8000005000000000152912e5763", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) (async) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000000080), 0x1) (async) ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f0000000280)={0x7, 0x0, 0xd9, 0x9, 0x401}) semctl$SEM_INFO(0x0, 0x4, 0x13, 0x0) (async, rerun: 64) sendto$inet6(r3, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (rerun: 64) ioctl$VIDIOC_TRY_FMT(r0, 0xc0cc5640, &(0x7f0000000380)={0x3, @pix_mp={0x5, 0x3ff, 0x35315258, 0x7, 0xb, [{0x1, 0x2}, {0xd, 0x72}, {0xfffffff7, 0x1b9e}, {0x0, 0x4}, {0x3, 0x6e59}, {0x0, 0x200}, {0x7, 0x2ef}, {0x6, 0x400}], 0x5, 0x5, 0x3, 0x1, 0x1}}) (async) write$tun(r0, &(0x7f0000000180)={@void, @void, @llc={@llc={0xfe, 0xf4, "0154", "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"}}}, 0xfe) (async) write(r0, 0x0, 0x0) 1m23.55482281s ago: executing program 3 (id=72): mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x8000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "399421fe8a4c9563", "00b147fbbfc100", "d6dc09ff", "16de86d67a8426bd"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) mount(&(0x7f0000000580)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000002280)='f2fs\x00', 0x10000, &(0x7f0000002240)='norecovery') 1m15.219128119s ago: executing program 1 (id=113): connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={0x0, @generic={0x10, "8cb45dfae7fea749181202cbe0c5"}, @ax25={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1}, @l2tp={0x2, 0x0, @multicast2}, 0x5, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000000)='veth1_to_hsr\x00', 0x8000000000000000, 0xc6a, 0x8}) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, 0x0) (async) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000100)={{@my=0x0}, 0x0, 0x1}) (async) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x2c, r4, 0x5, 0x70bd2b, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) sendfile(r2, r0, &(0x7f0000002080)=0x58, 0x12) (async) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) ioctl$UFFDIO_REGISTER(r6, 0x4010aa0a, &(0x7f0000000080)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x2}) (async) unshare(0x2049800) 1m14.528443874s ago: executing program 1 (id=115): r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000002a80)={&(0x7f0000000180)=@llc={0x1a, 0x100, 0x1, 0x3, 0xf1, 0x1, @multicast}, 0x80, &(0x7f0000001880)=[{&(0x7f00000002c0)="28f65a70a033d7fe031c62cb234e086dc1db9a80556733babe233e6bb8b2457f3bca090ff1e847a2305d5ac8e162d6e2479b688354", 0x35}, {&(0x7f0000000540)="2b2d03fd367b384dde5b540d64f8288905856228fc91019d4e5f673dbb10cb7da2b8de5b6057d5778c41312099c9d9d3d9212304b9bc2d45c3d5e94ef221a7121cb94ded7799caaeb619833499b9c350ba1db55bdbea1a49b68103f308a33e882e3c2cabb0d727c7933a50ad51bfb4d836db11d7769e3ba67cf52e046c01e050db0bcc9f3974be80d7e35a2153f4cfe12bb9f0106f1c8a21", 0x98}, {&(0x7f0000000600)="91ab2266c5da2cc3723dd20e68160e5bfd229569cb3013c9b9d683a5cb", 0x1d}, {&(0x7f0000000740)="aa4a607b0529055fa0c1fed05da62cf05c6bcd8908702672915565015f49a24bc5815cd8159931faf79ff36e0af26e184fcfb4dc4b5ef8d87236a8f4c2792cfd7f760ea12bf6ceaebde69c8b17d722fa99a42ff002aa14d9e8f7143275cbea4db67fe81e29c95175f6805fa1f1f541c7e9388bd5", 0x74}, {&(0x7f0000000880)="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", 0x1000}], 0x5, &(0x7f00000018c0)=[{0xc0, 0x116, 0x9, "b0b45859cc80129d375544305f669e36a851bc8aa06a18562ca95c23076f0f526295463076c9ede0ec7955e2f149448f4eafecca0ade45815a32c6379dde6aa6b9ccb7a53232096a40836f8538e94f9bdcc28db1cf872087a74b713644a407e251e07f1917077440f9cffbcac9877cf279090b240e8f819621b8201a1119754c372aa551f25687b3974856e4ab26d5aead8b90cae30841b8a94132c0e03ea68fc15b34c84017abf771b08b485d7d9369fb396a"}, {0x100c, 0x11, 0x7ff, "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"}, {0x1c, 0x110, 0x5, "4efb4571f8a4116132e5fda114"}, {0xd0, 0x10f, 0xc, "ca6860c8e1e1a2f9226743fa8ebd30c647c1db83ef667a72d103b6cdef5c3ff1e0a787c4bc6064c913b53fb3a58384383eff89a283cc3fc650bfb3a7a990d3f79202f61141e520de3822f2dc47a1ab6e90d37495c0918bb2351499733e613086407cb19faa9b520ebc73b4aa3ced75f741523497832bc51f0ece8b4d726e5c1f512d73abcac737162de480946698cafa40d3c2e4af630d71a26835f3a1108fb3176bcf6346bd56779d7500e441b56e24d7a91dfddfeb12a64ab4614ae5cca81eea59d5"}], 0x11b8}, 0x40000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a0103"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f62726964676500140001007767320000000000000000000000000014000100"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x30, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x58}, 0x1, 0x0, 0x0, 0x20040050}, 0x20008000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r2, &(0x7f0000000380)='100000', 0x6) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0xff0000, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r3, 0xc0046686, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='gid_map\x00') write$P9_RVERSION(r4, 0x0, 0x500) r5 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r5, &(0x7f0000000200)='1', 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r6, &(0x7f0000000280)='0', 0x1) prctl$PR_CAPBSET_DROP(0x18, 0x26) capset(&(0x7f00000003c0)={0x20071026}, &(0x7f0000000400)={0x6a2, 0x5, 0x7fff, 0x7d6756fe, 0x4, 0x40}) socket$netlink(0x10, 0x3, 0x0) shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa1000000000000070100"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2a}]}, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r8}, 0xc) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000d, 0x8008}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 1m14.240080914s ago: executing program 1 (id=116): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) (async) symlinkat(&(0x7f0000000600)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000740)='dummy_udc.0', 0xb) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000900)='./dev\x00', &(0x7f0000000940)='devtmpfs\x00', 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./dev/ttyGS0\x00', 0x2, 0x0) write(r1, &(0x7f0000000a00)='t', 0x1) (async) close(r1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r2) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000780)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, r3, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) r5 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) (async) r6 = landlock_create_ruleset(&(0x7f0000000080)={0xf4da, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) (async) landlock_restrict_self(r5, 0x0) r7 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xc58) (async) tkill(r7, 0x34) (async) futex(&(0x7f0000000080), 0x5, 0x0, 0x0, &(0x7f0000000200), 0x14fffffd) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r8, &(0x7f0000002fc0)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, 0x0}}], 0x1, 0x20080058) (async) writev(r8, &(0x7f0000000480)=[{&(0x7f0000000000)='d', 0x1}], 0x1) 1m14.090258446s ago: executing program 1 (id=117): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) close_range(r1, 0xffffffffffffffff, 0x0) r3 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0xc3) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r5, 0xe2) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r2, 0xffffffffffffffff) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="280000001200970200000000000000000700", @ANYRES32=0x0, @ANYBLOB="00000000000017"], 0x28}}, 0x0) 1m14.02971014s ago: executing program 1 (id=118): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dbg\x00', 0x1de) (async) mount(0x0, &(0x7f0000000000)='./dbg\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./dbg/split_huge_pages\x00', 0x2, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/kernel/ns_last_pid\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='10000\x00', 0x5) mmap(&(0x7f0000200000/0x200000)=nil, 0x200000, 0x3, 0x32, 0xffffffffffffffff, 0x0) (async) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000100), 0x10) sendmsg$can_bcm(r2, &(0x7f00000001c0)={&(0x7f0000000000), 0x2, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRES8, @ANYRESDEC, @ANYRESHEX, @ANYRES16, @ANYRESHEX=0x0, @ANYRESDEC=r2, @ANYBLOB="795299533d25ca07e2a38a22565b987015f9f40646d960aafa049072d9af4e614d2a47b3b0ea310c370b3b5fb957413b2156e3979cb26937"], 0x48}}, 0x40850) (async) madvise(&(0x7f0000200000/0x200000)=nil, 0x200000, 0xe) (async) madvise(&(0x7f0000200000/0x200000)=nil, 0x200000, 0x17) (async) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) (async) syz_clone(0x11, &(0x7f0000001000), 0x2000, 0x0, 0x0, 0x0) (async) ptrace(0x10, 0x2711) (async) write(r0, &(0x7f0000000300)='10001,0x7f0000200000,0x7f0000400000\x00', 0x24) 1m13.854516025s ago: executing program 1 (id=120): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b000000000000000000000029c1000000000000", @ANYRES32=0x1, @ANYBLOB="07000000000000000000000000000000000000005641a620b1fa72ba7951e69fc86305e45f971c8a1c8eb72525be94306d2a14ca235c74117d005213d0e3a29bf08a022d73328bbaa6dc062ad5d1670781afee9a75736644d958", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000050000000200"/28], 0x50) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f00000000c0)={0x1, {{0xa, 0x4e20, 0x5, @mcast2, 0x6}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000500)={0x1, {{0xa, 0x4e20, 0x0, @mcast1}}}, 0x8c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={@map=r3, 0x5, 0x0, 0xffffff8f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r1, &(0x7f0000000440)={0xa, 0x4e23, 0x380000, @empty, 0x3}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0xa, 0x2c, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x8}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @map_fd={0x18, 0x5}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffff0001, 0x0, 0x0, 0x0, 0x400}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x50}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000005c0)='syzkaller\x00', 0xa, 0x0, 0x0, 0x61900, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) 1m7.672151366s ago: executing program 32 (id=72): mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x8000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "399421fe8a4c9563", "00b147fbbfc100", "d6dc09ff", "16de86d67a8426bd"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) mount(&(0x7f0000000580)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000002280)='f2fs\x00', 0x10000, &(0x7f0000002240)='norecovery') 58.837997269s ago: executing program 33 (id=120): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b000000000000000000000029c1000000000000", @ANYRES32=0x1, @ANYBLOB="07000000000000000000000000000000000000005641a620b1fa72ba7951e69fc86305e45f971c8a1c8eb72525be94306d2a14ca235c74117d005213d0e3a29bf08a022d73328bbaa6dc062ad5d1670781afee9a75736644d958", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000050000000200"/28], 0x50) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f00000000c0)={0x1, {{0xa, 0x4e20, 0x5, @mcast2, 0x6}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000500)={0x1, {{0xa, 0x4e20, 0x0, @mcast1}}}, 0x8c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={@map=r3, 0x5, 0x0, 0xffffff8f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r1, &(0x7f0000000440)={0xa, 0x4e23, 0x380000, @empty, 0x3}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0xa, 0x2c, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x8}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @map_fd={0x18, 0x5}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffff0001, 0x0, 0x0, 0x0, 0x400}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x50}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000005c0)='syzkaller\x00', 0xa, 0x0, 0x0, 0x61900, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) 4.250090352s ago: executing program 0 (id=485): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x8000, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}, 0x1c) mkdirat(0xffffffffffffff9c, 0x0, 0x1d2) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x700, 0x80, 0x4, 0xc3d, {{0x22, 0x4, 0x1, 0x2e, 0x88, 0x66, 0x0, 0x1, 0x2f, 0x0, @private=0xa010100, @local, {[@ra={0x94, 0x4}, @generic={0x86, 0x5, "b22a9f"}, @generic={0x94, 0x6, "eefc53fb"}, @cipso={0x86, 0x2e, 0x1, [{0x7, 0x10, "0875ef9a0361a1c862496d512ca3"}, {0x6, 0x2}, {0x0, 0x2}, {0x5, 0x11, "7dc026a79e9f9a147cf769d5296c57"}, {0x6, 0x3, 'a'}]}, @end, @lsrr={0x83, 0xb, 0xd9, [@broadcast, @private=0xa010102]}, @lsrr={0x83, 0x27, 0x3b, [@loopback, @multicast1, @multicast1, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x2, @loopback, @multicast2, @remote]}, @end]}}}}}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000280)={@remote, 0x5d, r1}) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc01c5869, &(0x7f0000000480)={r0, &(0x7f0000000340)='![*^\x1c$\'\x00', 0x4000, &(0x7f00000003c0)={@_ha_fsid={[0x5, 0x80000000]}, {0x3ff, 0x3, 0xec, 0x6}}, 0x7, &(0x7f0000000400)={@_ha_fsid}, &(0x7f0000000540)=0x4}) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000a80)=ANY=[@ANYRESHEX, @ANYBLOB="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"], 0xe) io_setup(0x8, &(0x7f0000000600)=0x0) r4 = socket$rds(0x15, 0x5, 0x0) io_submit(r3, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r4, 0x0}]) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x10480001, 0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) write(r6, &(0x7f00000002c0)="64a4a8fc05ee", 0x6) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x40) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r5, 0x40109441, &(0x7f0000000240)={0x4, 0x4, 0xa}) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$can_j1939(0x1d, 0x2, 0x7) setsockopt(r0, 0x6e, 0xffff, 0x0, 0x0) writev(r7, &(0x7f0000000840)=[{&(0x7f0000000500)="94", 0x1}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r8, &(0x7f0000000580)='1\x00', 0x2) write$sysctl(r8, &(0x7f00000000c0)='2\x00', 0x2) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a31000000002c010000060a01020000000000000000f4ffff0208000b400000000004010480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007090000cc0001800c0001006269747769736500bc0002800800034000000004a800078055000100a9366bcf811e0d1fb2ea8b60e2cc1e102c565b30080aa0fab7ef298b35386a493cf5876393768023a17da304031dacefb1188aeb8fa36620869abf16beb2d21dac3888aca66ececcd201eb431a6d67ec250000003c000280080003400000000208000180ffffffff08000180fffffffb08000180fffffffc08000180fffffffb08000180ffffffff0800034000000004040002800c00028008000180fffffffd08000240000000080900010073797a3000000000140000001100010000000000000000000700000aed9ad917b66b71ea83eecccbf6cd1e23fde2999fae26a0cb0484d2b4c82b417f939af824041700968c05cea8afdfd4f82895281bea1bccbfe9860ffb561816f6449470bb2b9d3899a6485e68"], 0x1a0}}, 0x0) 4.100296515s ago: executing program 0 (id=486): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x8020) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x400, @private2={0xfc, 0x2, '\x00', 0xfe}, 0xca}, 0x1c) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x1, 0x2, [0x2, 0x6]}, 0xc) 3.419257132s ago: executing program 5 (id=491): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x20, 0x2f, 0x9, 0x70bd2c, 0x25dfdbfb, {0x4}, [@typed={0xc, 0x17, 0x0, 0x0, @u64=0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x42914}, 0x20044014) ioctl(r2, 0x8916, &(0x7f0000000200)="76657468303a30000000000000000000020000000a") r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) r5 = socket(0x22, 0x2, 0x0) ioctl$SIOCSIFMTU(r5, 0x8931, &(0x7f0000000080)={'dummy0\x00'}) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYRES32=r0, @ANYRES8=r0, @ANYRESDEC=r5, @ANYRES64=r3, @ANYRES64=r5, @ANYRESOCT=0x0, @ANYRES16, @ANYRESOCT=r1], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a580000070000000100000000000000000a0000060900020073797a31000000000900010073797a31000000002c000380280000800c00018006000100d103000018000b80140001800c000100636f756e7465720004000280140000001100010000000000000000000100000a"], 0x80}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="0307fafff8fffddbdf253d"], 0x14}}, 0x40040) sendfile(r7, r6, 0x0, 0x0) ioctl$NBD_DISCONNECT(r7, 0xab08) ioctl(r2, 0x8914, &(0x7f0000000240)='veth0:0') 3.340191935s ago: executing program 5 (id=492): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_usbip_server_init(0x5) write$usbip_server(r0, &(0x7f0000000040)=@ret_unlink={{0x4, 0x3, 0x0, 0x1, 0xffffffff}, {0x7}}, 0x30) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x1100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000840)={r4, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r6, &(0x7f0000000000)='7', 0x1) r7 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000500)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r8, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r8, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000001c0)=@keyring) bpf$MAP_CREATE(0x0, 0x0, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000000c0)={0x2, &(0x7f0000000240)=[{0x8, 0x3, 0x4, 0x7ffc0001}, {0x8, 0x8, 0x8, 0x8}]}) bind$inet(r2, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044190}, 0x40000) 3.205707932s ago: executing program 0 (id=493): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0x78) (async) sendfile(r0, r1, &(0x7f00000001c0), 0x8) (async) fcntl$addseals(r1, 0x409, 0x8) (async) timerfd_create(0x9, 0x0) (async) pwritev2(r1, &(0x7f0000000380)=[{&(0x7f0000000080)="ea", 0x1}], 0x1, 0xb, 0x40, 0x4) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 3.202953342s ago: executing program 0 (id=494): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) io_setup(0x3, &(0x7f0000000040)) (async) io_setup(0x3, &(0x7f0000000040)=0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001740)={0x2020}, 0x2020) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000001740)={0x2020}, 0x2020) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) io_submit(r1, 0x1, &(0x7f0000001700)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x6, r2, 0x0, 0xb01f, 0x5601}]) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x11) io_setup(0x1, &(0x7f00000000c0)) (async) io_setup(0x1, &(0x7f00000000c0)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) (async) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) (async) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket(0x2d, 0x2, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') preadv(0xffffffffffffffff, &(0x7f0000000a00)=[{&(0x7f0000000100)=""/34, 0x22}, {&(0x7f0000000580)=""/161, 0xa1}, {&(0x7f0000000640)=""/118, 0xfffffe70}, {&(0x7f00000006c0)=""/30, 0x1e}, {&(0x7f0000000a40)=""/137, 0x7b}, {&(0x7f0000000780)=""/176, 0xb0}, {&(0x7f0000000880)=""/215, 0xd7}, {&(0x7f0000000980)=""/99, 0x63}], 0x8, 0x6, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) (async) r4 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x10000, 0x5, 0x7, 0x800003, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x10009, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0xd, 0x7}}, {0x0, 0x13}}}, 0xa0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r5, @ANYBLOB="0100000002"], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) sendfile(r4, r4, &(0x7f0000000080), 0x7f03) 3.011506237s ago: executing program 4 (id=495): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtaction={0x78, 0x30, 0x53b, 0x0, 0x25dfdbfc, {0x9}, [{0x64, 0x1, [@m_sample={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x0, 0x6, 0xfffffffc, 0x3ff}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x9c}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000810}, 0x4) syz_emit_ethernet(0x6a, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff00000000000008004500005c0000000000119078000000000000000000001b590048907803000000000000004b3f7633015aff9fa5e73369ed3ed4f938752184f1af202914ef0f501fd4f4fc0d232b48a86ef0222fb6364766977f816acb8f51148dba1a9c9269a294aed2403c24fd3feead268e55ed1266c8461de051484b0e3293788609bccf716d41f853002ebe03c2db5fbc218f53c103118b3cbe333e654c0c83bddedd6988f0edc728d0ea17b4a573e35f42f18569128af695df220be4b929e5249e6d822008c7b2112caa4372880d8cd7c7b68a51d920326bdda2dbaeb7dbe077fbf8116314368d9be5118a82"], 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@gettaction={0xf0, 0x32, 0xe72c5f922f23cad9, 0x70bd2a, 0x25dfdbf7, {0x0, 0x0, 0x3f}}, 0xf0}, 0x1, 0x0, 0x0, 0x8080}, 0x10000084) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) unlink(&(0x7f0000000140)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/video4linux/video0/dev_debug\x00', 0x1, 0x0) write(r2, &(0x7f0000000100)='3', 0x1) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f00000001c0)={0x9, @win={{0x2, 0x1, 0x0, 0xe5}, 0x3, 0x9, 0x0, 0x0, 0x0, 0x2}}) 2.749818408s ago: executing program 4 (id=496): socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$vim2m(0x0, 0x1, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) (async) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x188) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x16d) openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.usb0/control/processing/default/bmControls\x00', 0x1, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.usb0/control/processing/default/bmControls\x00', 0x1, 0x0) mkdirat(r1, &(0x7f0000000040)='./config/usb_gadget/g1/file0\x00', 0x110) (async) mkdirat(r1, &(0x7f0000000040)='./config/usb_gadget/g1/file0\x00', 0x110) write(r1, &(0x7f00000000c0)="ad120deb6342b63e26222fc6fc8cafcc7e84aaf74888dc5bd970c2df4e6c6535d813844e6b18f801d8edf11843cfb426", 0x30) write(r1, &(0x7f0000000280)="d6", 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x4c) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x10800, &(0x7f0000000240)=ANY=[]) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='3', 0x3e) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, 0xffffffffffffffff) (async) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657930820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, 0xffffffffffffffff) ioperm(0xffffffffffffffff, 0x7, 0x7) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000440)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x2, 0x3a, '\xf7d\xbc<\x8d\xcf', 0x3a, '/dev/ppp\x00\x8aw\xec\xabr3\x17\x9a\xac\x9bQ\xe0\x85\xccgLE(m\a\xf6a\xfa\xb2\xb3\xd1\xc6\xd1\xdf\xa2\x86TC\xf5\xe4\xa4\x10\xab\xdc\xfd`:~\xf7\xc9\xef\xc0G\xc5\x16\xc3 [l\xa9{\xb4lH\xfe\xce4{w\xe9d\xa4<{', 0x3a, './file0', 0x3a, [0x4f, 0x46, 0x4f]}, 0x7e) (async) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000440)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x2, 0x3a, '\xf7d\xbc<\x8d\xcf', 0x3a, '/dev/ppp\x00\x8aw\xec\xabr3\x17\x9a\xac\x9bQ\xe0\x85\xccgLE(m\a\xf6a\xfa\xb2\xb3\xd1\xc6\xd1\xdf\xa2\x86TC\xf5\xe4\xa4\x10\xab\xdc\xfd`:~\xf7\xc9\xef\xc0G\xc5\x16\xc3 [l\xa9{\xb4lH\xfe\xce4{w\xe9d\xa4<{', 0x3a, './file0', 0x3a, [0x4f, 0x46, 0x4f]}, 0x7e) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x20, 0x14, 0x9, 0x70bd27, 0x25dfdbfb, {0x4}, [@nested={0xc, 0x1a, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @fd}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x42805}, 0x84) socket(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x10003, 0x0, 0xd7c4, 0x3}, 0x10) 2.329414586s ago: executing program 4 (id=497): clock_gettime(0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_batadv\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffab}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0xfff9, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc, 0x0, 0x7], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6, 0x5, {0xfa, 0x3}}]}, 0x90}, 0x1, 0x0, 0x0, 0x2004c084}, 0x20000080) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f00000000c0)="17000000", 0x4) r4 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000300)="34300b5081b883f682c1277983f6f51e530f8240f62360ef2ee376a873a9835dbbf97682774971977bdc2c3edb44801c3b57750cae4b7bb2eda9c57985c2b49ad093c004cc61521c791fee7b38928a37d5c3d275efd6a68b86795d82fa1aef7d86fd9435c959bc9a0c5851b6ae252e69bf248aec4d491f27cfe93e0ad623f348b8542d8c702d06f5e75997f23afaacff0b56945efd54488a9b4bc824a558e53776620eb2fd999420e08dc15b9138cf0a727e82f355dae12f7570a9502c43687335c267951f681365100d1a690e4460bbbc91e2dabac43fecd6cb", 0xda}, {&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000001400)="8101071b9474d0e15619878cd403ae5fa00cc7357969a82d04daae6f516397aed133f81cfe0626d40ba80705326da1c3024afc0d16189b1f592f281c9c59fbfb12d899e35e1f14e0313888bb34ca93fc59e546735afc7ef24b18654395e0a44a99d017cd1e7b803bd8e6a577af9660e583506f7ba07ff163d5671b71463c3f7653d4a8e91dbf4e74feb88ee616", 0x8d}], 0x3, &(0x7f0000001500)=[{0x20, 0xff, 0xb2ab, "f634d6aedf631e1ce04cde0ccc9246fa460061"}, {0x80, 0x103, 0xffffffff, "2ae0d1af991beb8df55bf36eb4fba16d1c0ecd56d778fa74119ad0d691c35eef7692da020d4eaa8ead18ec8acc69746fb0b7d1ada18e2b03f90dbb3a05d9294fdc0d24be2066e015a00ea878501ecff444fe47add0b8a348ffe3bfb6056eff5b8bcc1d85332ac6fba4b44af37c61991ce57708"}, {0xf0, 0x1, 0x5, "fdab5facc65843edd5c43424a61c380066d8de1db5f0c20d948453a15b22896c6d14629d85537e1e096f5966e9c00c007eee90485328b8dfba73c1a21ba7a9eaa8f67fd64282a20a35e536b3d3ac4f295fdbabeb81638f3d9acb1d3053730f80350d8c929aafed000f5102054bbf837bb3790d128c8ec01594681d76d8abb6dbb16675c148b0c495c3d269893653720a2c3b015550286f38d4c4a721b69c9e9b5c72e2c4ef61674acca1c03528597afa5c2cb7d2ae3b213d52025cfffa24ad05b0cb3488723938ff29cfc6cb66fe15eae3680ef86d2d88ea668bc69f1406eec439f337fd"}, {0xc4, 0x108, 0x32d5, "8b7d049bfcbc75e4aed00e472b901cde6942811b9a822fc9ad25059198f778f0829bc20a90958973d6f2e5970514773e66601fbd0b56826465aabbe3af5d701c7402a94c88f887b29d5e4098305e63169d627c4c45b6e5e148cd4b23addb574aba81203f8fb822d0048fe3fbc9ec835ad7bec41b46ee5daeab4f68dc2f444ac809e578e12247fc8d444e1db103195b57c3a6e3a45bdf9015a4f55d7d226671114bf811b72b6414b4353ef051c5b8466cb2542af912"}, {0x24, 0xb9346bf7ab63a514, 0x5b, "142974ef1569227f68f3b68626810d53618d818e9e3f59"}, {0xd8, 0x10f, 0x7, "967c3d256ea97b303b51190d8815c439bd92881916dfc17e34530fa85ce147c08ed4a52150aac475c6b53f8d200006908e8a53468a698ed0399c78bb9a40d3af17e310479d7b3c85e82adebbe7d4851540bb29eba636971b4e420467f95875851330d861545665231bb029e20ae83c39fa35d413839c3cfc90daa2314c43db1efea4a35e21f7a4ebf8816707aa87b7f680da632c647d57f4abac1cfb30c561788dae8628db72b1500771f1499d59ad668f38f6ff2cb656f42e0f2ab18107eca017cf9b83165352b7c09d0668"}, {0x58, 0x0, 0x30d, "6808eb3f7b2494f25734b7b937ac5814528c19eac4b8c290a9afd861ef25bb2584b4b33902dafb1a65ed1b42a333a876a927e5c2a2685a74b8144641d2e8401204668fc42339c4161a8ae5"}, {0x100c, 0x119, 0x8, "04cfc30baff03cefeef16bf99e203039ea4cb7d93ec9ac91998dc68dcb5d4a7d6b66755c21501b0f716c4208ebe740c99f4fe27e826e44135131fc372f5530c8a0ec9073b23b0c718af947899f4be1b356c074ba3e95329088674b0c0bd705324d2bad1da01a3e268deba4c9f08a1a5f7f9a0a52b98b6af9b5d85349da42b131736e2bc2984abaddaa3fd75c0bea214fb9b9cdaf10dbc1ef87de54b434c63f881597a44e1d63145269f89c1f02e44ae1bf15177307cd0a6ce5314eda4c04b52cfe7f6cb01b4ffea8945b0464bb68482e0f81cc762191faa9ecb3ff73a265b6525d31bfc14892772234484c6c06a50828147aa66dc9cb72a6e79d7551f4b8547d6aa6776a4483f78eb90f132cbd7954a6ae1be3ec7f9f05a5116d595fb02446b2463dae455acc68eceaccdc019891153e7d61320bd95f7689b9ec9d7e5a05f4c9de63899f100b875af313af318a3ffd8caae7ad1f48585d5c1b4f6f0d3eded801b35d50034592dbbdfa173884a98392a07321dac401b061dba2ca708df3cf45013405af4b0ee276102f4cf4a28cdeaaab8ae9f43ff270ab0e341063f30c35cd2b38f5f3c7e5e4ef458bc4dbe48ed7f88cccf1b6a3f2c0c236490de395a16aebf469760c974d6bf96fea3c26fa866800e5f160f8f95ea278d91b45ac0bd5adb1e688bce75baf1891266042a72e82cc17385a4ad2d790e4158e7687000d090c0dd384056134e87e8dd3f032067e3d343378115cfeab22febaa4e6cd629f46a73d0d693fc593c4e18e2b6037f20d12e92620ad61a29b619d709c94617504e75a347d99f21947521a315fc9ccf1040d1e292e8ef57d138412cc74357af6e4027cea025c6df35c0f84484b4e87480d2e6f17c34e6b368fccf123744ac0a403e2f401fe07e87dfc151dc0d248e5d35c743498e451168332b952f6c8412c8424f8bda74a981a5da77affe236087b99023feee824ecadb0315d187578add7d1e7bc940a45b77a0f56bd30e64f21eed6d41fbbca6b8f73c9c522b864ae473e86013d379a73541c229043197f2219f3a2b7f6f7fd6a9f566cf73771071904b4f6dcf4c1552dd0ff98ef3ba5367e8612a703f153eecce89b786901f2ea72053e0c5282f26032f77e0d1afa21a64effea321e088fd64d8e35b6e624bf8a7bde60aa9473c93c84526d22eb2dd9bfa4e5e1cd7ca9ef8248f73f5fe312c5c019fc3f1de6bd619c94d5055fc1967ba0858449a7b45d5723991e3f5a72fb142a5ab9a8e6f93175215e00fcb0915b35dd0d4127c13d95f7337e603af4565b8ba67abfe6632d6169fd7648dbb6933d40adeadbf15d0e63f64a51324539a5ffd85cfe857789d8e018ef9c813cb1f5c339d56f8fe55b7b6b4e347d66923e10071e0c881a927bcaa364bdfe713fbed7a899c894fb3be013dfe7e2245d485c1501ef28b4337ce7afedc3233660921e51dc26b693dde09985b3ed4e211e87a28ab0fddb808c6aa7486edd485843f533c6d5fb61d5af2b3893bb83d85193ef776cbc72fbc194abf507cbb9755e09769066ffb5e6ebbd858e2c618a0296ce2544b3d04367352be5eed689b6c2074e59744861a098b14b02bd5b1bf0daaef1d3b182bf511f8653e7e8ee5c9b658cd8e3d21f548a3f8b91abb6f9e25895cebfa398112ecbd1726fb62ba998ca75cc707a8147708cea7046b1ea704c8b988b6cc6ee3aa50ab5e264d2d5608b4df8a6bf25a2482a4723aa85ce84b747f8db3d07b8cb7de7e6ae203034e93d6f6c4d3c66e48e542dc8f1556dedeef0fe3c490f15f47178299f610ac07f60d9d087317a3ebaf0d614e325302fcc7f269dd5e70fe410c47b69519e636aafc75519bd32069b2dde5fbb974dfd6e623ec7043848d8cb0cba567e3aaaa913362c76cb55f72d6eb680bb853c9514b43763ecffc92415b4756ec7d706ceea9fb46183eeb6b7d39567157f5807c2ee48d3e9df2a7883aba3c6c3763a4c139df05854404e7b23d22cfeedaca466a01f708505f17d32e8f4c18fcaf7dedf061eeb3b4029c31fdde83ce18fc5ebee70b6543c33d4981b126c0cd05d940c31a6e7af6497a7d2e81f6d91cb8885b646903a2b0c8733b7afe617e619989d5d55a2dc526cc7b62c6856db3ab74927b3c5f4ef47f2717f35a3ebad765a3ae9e0d442b13bd11b4f5afcb392eacb88afb9d7893dfb1e8ec3cf1ad963c07860f0af70e2aba8b9a45f3e8c72684c950687b53fc12d49c62a32a34e3b9998da3ee67ec81f678fea2de22bc137ba178ae363ef47cea6e5f4490c5dae795476cacb82aaadf0c8909be650af22ff84a8d3c74aed8e99accb383915703dd8d55a38f2c57c34874e58f01b58bc73d0c7a0d68d98719c22c3c929ec10c327cdb6c2a36aa91f9f2835cb668dd1aaf391f16a52f6caacc4cac3a37a68a2b3c5b6ab0e80945f0953239c9c4212bc8b5b2260c68118bf34a5e2f2e96dbfb298ac971040434e48d6d6cce32214fae3ce1d3cbffbb838ec289de033880866aa0fc237157fd2c978f3843763a6729b0949aa705c27f7a2ab76cb458862264268dbf2881f58d9052eb96ebaed10d17e1a11c7c1988862c18b37d21b687a2d70ec5819ca79211812ed6e635ff16132049a9ff08aa17d262e6cae6f1d8d557ddb2b1f75d14cae89020d0251518f2645cd19938e29b80f66a1e066d0de20950fc283269631e3956c4e319b8cf1045c928d53d3a34374033897ad5cc931f6b197b71f91054c9cd35b2d0cd21c4636f9f69fb765ba543c6c425ef0e5b5b3dc6c2e528c9ace084667d819cdd07baf6a7805fe57586a984c132300ed66cc416c6f86223d340f06c52789f7530c4843d34a3ead0d2ebc7fc30e2deff2ae77f63d6927057715b611fe4fc6af16cb2ebbcc6ec83129c9ecab73f70e98b566633b8ba0d94733245b177d2d858baedd1cb2f5ecf9cd1451fa5f1aebe15ebc7449a9e6fa970436caf8dfa7b120001fe0daaf6dd442e49d55aff504316b3fc6b26353a6e4d3b2393d8a9e01fbb8100e40f020595f70cd3528d207bb173738bbe58b8e4daeb4099d346df2e9316f565051487c87d93a6f001098ff7d789bf403705cb93bca86c431a20e3ddb4e411e15767c31c0e1de7ae2e1c8bf6326b7be1c53a1c22b2a4202fc65de0ecb0738c5099ed67e4478527f02ae9953b1192f22075c6a287aa3b11b6f943140f28405e97d21ee1a9a5c8bdedeb104d7a69cb42269f02f0b0dfc374e7035fc72416779d60f91d7acc1a3f7f8b06ba6a87b5045905cdb96f25f46d76ae5ef7f98baf48c6ea1088a00d8ceb295d38e47bcddfe4644c054c00e9c62acac66c1e80a9f5d39293593402dcbfaf47ad25306b8da60e90d29bdc00d37763becf3608cc575d6fbe3334aeac7f9197fddfbe3ade6c5f89e6386d98679827fa1d9a827b0f160941d65f22a9f799f1e2ccf1a65f6057a4bf2fa8e236cb0f6b44a27c81adb1221968b896367cf4e1b6ece2163222dafba027daecd85930a873ebd0a9a58b2156eed29c5c06ea531e871f85c968a8e971d31a9182bd97df613543bd6a598e07de81e6760be934e6e840c3105ee12d7a5442b1bb3464752e5cc3213aa6fe4fda0ab01c9c1f585376504039beeb42b8938df83c56abcc445b419f0f684937f74ed0f546a1360d88a016a64452ec35087cbabdef579d56d49f6705ef0f0cae2950de367f5995108989359db10bada2241ab19cd4d2cd8ac897d97f3006c9088640407a01000d957788c7c00a865b6df0c00bc836fb04a97867667d360b30257fa2a134a844c40a28c7b667c4db62aa387cadd41f3d9d93cd485733622639913449db69b4b12da68d2da853898e87c770fdf438cd6513cc6ba7632ef20085feec02eab73128ceebea6ed6af70bf2326c5f6e2ca526e5aa4bfcf2df9c7a9691037c77c88d88fa6a735504cf4ec43be73e985ef584126bd11b4d89380bd163a8fd4fb3f4864a3129c37913c6aaadf68c38a461c762c0e6149647629047059753933954401848ce089342892c6c6ff8332dd225063f777270ca0005a51c80b4c2f5917a50b0c7729ac388e453fb3ccfa1cfb93baa988a5f8a8014a58f902a81efd795821293a45cbeaf594a218eecb1d83731e0544d306cdc704ad7d3536b8d543677c6f449f210b8d4975e451a6934424913d829598f44a101b128de1328b37812ae2627176b286c1a69a08068b1f4b79fcb1efda0a974cf9b760951c0258b48083d84b63f6f099c278db490b2cc1beb0dd5852749d698667437286c0bd1b41ae35ec0024a0a19104ac59b100c6c95fb8708f7c3bb88171dd6244cb819758c55c250b9f4800d75d3a16a69f7072c3586d5ad0ab5723417b7bdce005183b5474e3e4d124ef0288054b9c72fd489a39c22e12a5786e93074a8858956de6742159113aaba436e9f3506be398512d6226ec79a9bd5a66b640ebaeda9551666a5acb39e6f643d74597fe4c1e619a82a7edeac79107506d8fd60200363723b18137f304c244035bf6191456771b43c18822fdddb0223a4eac2c77e02cb07bd350a3316d757f6401ff3e04d39940b03eecd03d6b9bec8f3744343d5f698019381d5417d1ca4d3bf0ea182cc4727f209f925db6b5408fa0825efbaa0229df587f165ce73e637e9d0ab96173bf2f09ea5bac2fb57a1ad3b02f624e455e4cf39d2326f05a93f24bf930ecd627ff0b1a9845101f10465a29446cad1493c8d179c5817108b244604597dc7fe23d55daa38f85c76e7b4aead7ab875d6d2cc51aba7cc4f1f34a09f59f2e50fe49ae7fe8a59a4a2a329532a719f3e56d9705153477290e43aca6c174d905cf09d8dd133006f00c45d32e457ff37c7fe5a6d162c247660aec2d271e6ce508d4fa706f4628d90deaa1146ac03712a7fac31d15c456c16d1bccd44246f5652d46c5c5d8b07e71e02fa04ac02d013018fca7e7e6161df239b2d70bdda6c3bd15b98d001f32f41ba907f32ad79aefcf821f07a7ef2171ffb4675877a11e31bfd43fa36a88f3881e30ff025a71886bf61435fef3818ed1bceb1ce6d3a0d06c8d5526d1f91ffbf844fa1832726a5745e22603c839cfef6fa026aa9dc4afa41ea59d3b6d36e70ca41a84f2433fb98f9cc2ba3546064980d861644c91190cb126fb0c4c38ee61c92edbbb339e41abba9961cae6d2602710c4a42721a2ef9eba3e466204cccac11bbbd3f79bd19c09f1a2202029108544a9f3351f3b50bab70316a4e28ef7faf27dd5cf8ff034be4b49c3e553abec3508c7db96bf821c0a35a56beb5981fe2379095ca7eedf32b95dfbf45fcbe387a174a345cfe85a8a6b84a72355175e84a633f477a884e1a0c1c37ebe141a959f9f10556a27cd2a3ff63f99eef32b78381c0e564cb5c14c8a465561306bfe806c2b5ab5a403f1819243c7e707d008036403c72acf81fbd7fd244f4cbcebb4a96b1f58797c018d176c5a54249481e3002bf50e426e804fb9085479f033bf37fc37074910ebfc999b4f3a7e2d0e29dd63a6c9b5788ac2bd006c46931784e71a6e8a7e3cbeccbbfee233f8d5ae068292b7bd0a6f222b5cf93740b335f8e382a30f295083a2958155789493d07a373a0ca00b4deb1f4d72bae6a9dbf5a1eab22c3fec24b00d38529481e38eb830d8f23641e58ab4e16d65d0e9b4a13cdcbf6fd0b7290348bd8075b6227bd98ac2c4fa1ed5bc54b4a4aa45dc2e2da8a104aa9fd4fd056609064bedb3710ec7e02053b6e905160ed5493e78027e4e9ac666bc96fdfe955dd05517b9d19e20dc8d4ac66da2b45634dbc927943391dc6270c91710ccb"}, {0xbc, 0x1, 0x9, "2f9d29541b98a424c852509703233f543f426a0eab80b26703212f79830a972aba017feeb56cffac12f1cfbabe5b0c2da23125fcc572848973575dfa3e41d26ff94ea0dec579a7a24f3c6c43164ae402b903c966af17ce9cec25207870bf057449e70be0046006d37cd1a73a8a85e137d4cf16f42a654dec380b1bf4bffa68d2c9ce70e651e4dfdeee8f38622c39f3941a2a3d918a21cab7985949773d9436b7b2321649d71fa2ef481781187ce85db2"}], 0x1470}, 0x8000) r5 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x2c, r7, 0x1, 0x0, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_I_TEI={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="5800000042000194000000000000000003010000000000002600010000112233445566778899aabb88a84500894f0000000001170000010203040506070800000c00020006002000080000000c0003"], 0x58}}, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xfffffffffffffef8, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRESHEX, @ANYRESOCT], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24004c80) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) syz_emit_ethernet(0x26, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @local}, 'N!N '}}}}, 0x0) write(r8, &(0x7f0000000000)='3', 0x4e) mknodat$loop(r8, &(0x7f0000000040)='./proc\x00', 0x100, 0x0) unshare(0x40000000) 1.99357837s ago: executing program 0 (id=498): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000180), &(0x7f00000001c0)=0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) setns(0xc9, 0x40000000) r1 = socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000005c0)="3504000041000511d25a35400c2037153e370c04018006041000450000002a560000e7ff0040000000000000", 0x2c}, {&(0x7f00000009c0)="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", 0x3b0}, {&(0x7f0000000040)="9d493c13b6b02affcc19cb904ec2bd74085b0bd225277e5a44d681809b6d764ecab211ef0c90ba361a4378457b19705b18406f35071130b4e06c4a3b1a6e9a9d7cf1453aeb21e4c30a85207027af69f536ec61a4a59614b3f5", 0x59}], 0x3}, 0x10049014) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000417000/0x2000)=nil, 0x2000, 0x0, 0x0) socket$kcm(0x2b, 0x1, 0x0) pselect6(0x40, &(0x7f00000002c0)={0x8, 0x8ab5, 0x10001, 0x40000020000000, 0xdf, 0x4, 0x63dd1ea1, 0x1}, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x30, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) socket$inet6_sctp(0xa, 0x801, 0x84) syz_emit_vhci(&(0x7f0000000a40)=ANY=[@ANYBLOB="040e05f62a20"], 0x8) 1.935696449s ago: executing program 5 (id=499): r0 = socket$inet6_tcp(0xa, 0x1, 0x6) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty, 0xb}, 0x1c) (async) listen(r0, 0x10) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x6) r2 = syz_open_dev$video4linux(&(0x7f0000000100), 0x5, 0x20000) ioctl$VIDIOC_SUBDEV_S_SELECTION(r2, 0xc040563e, &(0x7f0000000040)={0x1, 0x0, 0x100, 0x2, {0x4, 0xac0, 0xdaeb, 0xf912}}) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @local, 0xb}, 0x1c) (async) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x101040, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000040)=0x5) (async) epoll_create1(0x0) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000080)={0x5, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x68, 0x1056}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) (async) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r5, 0x4188aec6, &(0x7f0000000040)={0x0, 0xa, 0x0, 0x20000000000003, 0x1004}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) openat$nvram(0xffffffffffffff9c, &(0x7f0000001ec0), 0x781, 0x0) (async) close(0x3) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed) (async) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) (async) syz_open_dev$vbi(&(0x7f0000000140), 0x2, 0x2) (async) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000000)=0xa7ab) 1.738564016s ago: executing program 5 (id=500): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x20, 0x2f, 0x9, 0x70bd2c, 0x25dfdbfb, {0x4}, [@typed={0xc, 0x17, 0x0, 0x0, @u64=0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x42914}, 0x20044014) ioctl(r2, 0x8916, &(0x7f0000000200)="76657468303a30000000000000000000020000000a") r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) r5 = socket(0x22, 0x2, 0x0) ioctl$SIOCSIFMTU(r5, 0x8931, &(0x7f0000000080)={'dummy0\x00'}) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYRES32=r0, @ANYRES8=r0, @ANYRESDEC=r5, @ANYRES64=r3, @ANYRES64=r5, @ANYRESOCT=0x0, @ANYRES16, @ANYRESOCT=r1], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a580000070000000100000000000000000a0000060900020073797a31000000000900010073797a31000000002c000380280000800c00018006000100d103000018000b80140001800c000100636f756e7465720004000280140000001100010000000000000000000100000a"], 0x80}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="0307fafff8fffddbdf253d"], 0x14}}, 0x40040) sendfile(r7, r6, 0x0, 0x0) ioctl(r2, 0x8914, &(0x7f0000000240)='veth0:0') 1.670221766s ago: executing program 4 (id=501): r0 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x46, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x2, 0xe26, 0x0, 0x0, 0x1000, 0x10000}}}, &(0x7f0000000480)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) landlock_create_ruleset(0xfffffffffffffffe, 0x5c, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) timer_create(0x3, &(0x7f0000000280)={0x0, 0x20}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r7 = socket$kcm(0x23, 0x5, 0x0) listen(r7, 0x800) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r9 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r9, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) sendto$phonet(r9, 0x0, 0x0, 0x80, 0x0, 0x0) accept4(r7, 0x0, 0x0, 0x80000) r10 = timerfd_create(0x1, 0x0) read(r10, &(0x7f0000002180)=""/262, 0x106) timerfd_settime(r10, 0x2, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000340)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58) r11 = openat(0xffffffffffffff9c, 0x0, 0x20842, 0x63) ptrace(0x10, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000800)='./loop0\x00', 0x6180, 0x700) mkdirat(r11, &(0x7f0000000300)='./file0\x00', 0x1dc) mount(&(0x7f0000000140)=@loop={'/dev/loop', 0x0}, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='xfs\x00', 0x0, &(0x7f0000000500)='rtdev=./loop0\x00\xa1#jv\x15\xbe\xc56\x9e\xdd,e~\x82d!5/\x8fL\x02\xe5\x81\xae)\x1d\x1d|\xd8\xe9\xbaq@\xf0}\xde\xea\xb0\x03\a\x94\x90\x9c\xd4gO\xd0eB\xfd\xafq\xf7\x0e\x80*\xe3\x9c\x8e(\xc8\x024\xce\xb3)\x89\x81Z\x1a\x8bt\xfb\x13H;\xae#M\x14\xf5\xe4\x10tn\xde\xaf\xdf\xfd\xcb\x8d\xf8\xa8\xb5l`\xdb\x0e\x12\xf4\xb3Z\xbf8\xdf\xcf\xed\x81\xcf\xa8n\x87\x80I!\xd5\x97\xd7\xe2\xe1\xa3/]\x19\xc9\xc1G\x9a\x0f\xe1Z0>f\x7f\x86\x16\x15\xbd\x12o\xfb\xf9\x9e\x17T^\xbeN\xec\x9awo\v\"\xbe{\xb6\xf9n\xb0\x9c\x8e6\x19\xe1\x11\xf9\xbb\xb6\x99\x16\xf1@\xf8&\xb44ep\x91?&w\xbd\xa5T\xae\x8d\xbf\x15N\x06%\xac\xc5\x03\xd1\xc3\t(1\xd0\x92\xd7\xca\xf3\xe1b\x98\xb1\xcc\x13\xdbc\xf1\xfc\xcf\x9epl\x0f\\\x864` \xf8\xd9\x9f\xe1&U\x00e\xad\x83,c\xea+\t+\x17\xa4\x91\x85\x1a\xd6\xa8\ao\x06\xd7') dup(r4) 1.476788887s ago: executing program 2 (id=502): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0) mkdir(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r2 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) fchdir(r3) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./file0\x00', r4}, 0x18) unlink(&(0x7f0000000280)='./file0\x00') r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r6 = open(&(0x7f0000000000)='.\x00', 0x7c2, 0x0) mkdirat(r6, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x18) move_mount(r5, &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r5, &(0x7f0000000800)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r6, &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r5, &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}]}]}, 0x4c}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) io_setup(0x6, &(0x7f0000001380)=0x0) io_submit(r7, 0x1, &(0x7f0000000340)=[&(0x7f0000000300)={0x1000000, 0x0, 0x0, 0x5, 0x8081, r0, 0x0}]) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r8, 0x29, 0x39, &(0x7f0000000cc0)="0022040000ffffebfffffffeffffff0700000000ff000207835eeb1317b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000000001000000", 0x80) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x100) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) openat$loop_ctrl(0xffffff9c, &(0x7f0000000140), 0x200, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x111) getsockopt$IPT_SO_GET_INFO(r9, 0x0, 0x40, &(0x7f00000004c0)={'mangle\x00', 0x0, [0x0, 0x5, 0xd03, 0x200, 0xf7]}, &(0x7f0000000540)=0x54) r10 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r10, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r9, {0x3}}, './file1\x00'}) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001480)={0x64, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0xff}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4806}, 0x0) 1.474766098s ago: executing program 5 (id=503): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x16, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18040000000000000000000000000000180000002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f00000005c0)='GPL\x00'}, 0x90) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000140), 0x4) syz_open_dev$sndctrl(0x0, 0xce5, 0x2400) sched_setscheduler(0x0, 0x6, &(0x7f0000000080)=0xb) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f000000ac40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f000000ab80)=[@cred={{0x18, 0x1, 0x2, {r0, 0xffffffffffffffff}}}], 0x18, 0x8000}}], 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000100)={@val, @void, @eth={@multicast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x9, 0x14, 0x65, 0x0, 0x1, 0x32, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @empty}}}}}}, 0x26) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000044) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, 0x0) add_key(&(0x7f0000000b00)='cifs.spnego\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657930820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e1241", 0x35d, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2842, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) fsopen(&(0x7f00000001c0)='bdev\x00', 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b70600001fffffff8500000005000000bf09000000000000260901000000000095000000000000003c60010000000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.279600128s ago: executing program 2 (id=504): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x25, &(0x7f00000000c0)={0x1, r1, 0x3, {0x100000001, 0x407}}, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x1c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r5 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) r10 = add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f00000021c0)='b', 0x1, 0xfffffffffffffffe) r11 = add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705a", 0xc0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000400)={r10, r11, r11}, &(0x7f0000000540)=""/204, 0xcc, &(0x7f00000003c0)={&(0x7f0000000340)={'streebog512\x00'}}) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r12 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) close(r8) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_OPEN_BY_HANDLE(r6, 0xc01c586b, &(0x7f0000000300)={r2, &(0x7f0000000180)='\x00', 0x301200, &(0x7f00000001c0)={@_ha_fsid={[0xff, 0xffffffff]}, {0x1000, 0x8, 0x79, 0x2}}, 0x6, &(0x7f0000000280), &(0x7f00000002c0)=0x8}) sendmsg$L2TP_CMD_SESSION_DELETE(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYRES64=r4, @ANYRES16=r12, @ANYRES8], 0x3c}, 0x1, 0x0, 0x0, 0x41}, 0x20000034) unshare(0x68040000) r14 = socket$netlink(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000800)={0x0, 0x0, 0x3, 0x0, '\x00', [{0x3, 0x6, 0x2, 0xc, 0x9, 0x52e1}, {0x2, 0x6, 0x3ff, 0xe19, 0x5, 0xfff}], ['\x00', '\x00', '\x00']}) writev(r14, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) connect$pppl2tp(r7, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e21, @multicast1}, 0x2, 0x0, 0x2, 0x1}}, 0xfffffffffffffd8b) fsync(r5) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) 900.228904ms ago: executing program 2 (id=505): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1}], 0x1, 0x8044) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000180)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r3, &(0x7f0000000000)='7', 0x1) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xa1, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000600030001a12c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c090) 789.84824ms ago: executing program 2 (id=506): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000080) socket$inet6_tcp(0xa, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000100)={{0x80000000, 0x0, 0x4, [0x3, 0x5]}, {0x80000000, 0x0, 0x2, [0xffff, 0xffff93d2]}, 0x10000000, [0x800003, 0xffffb4b5]}) r2 = syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f00000005c0)=[{0x0, 0x80000000}, {}, {0x0, 0x80000000, 0x0, {0x0}}, {0x0, 0x80000000}], 0x0, 0x0, 0x0}) ioctl$MEDIA_IOC_SETUP_LINK(r2, 0xc0347c03, &(0x7f0000000d40)={{r3, r4, 0x5, [0x2002, 0x9]}, {r5, 0x0, 0x2, [0x100, 0x7]}, 0x1, [0x5, 0x100]}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000140)={{0x80000000, 0x0, 0x0, [0x4ded97fb, 0x7]}, {0x80000000, r4, 0x3, [0x98, 0x9]}, 0x1, [0x9, 0x668d]}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, 0x0, 0x20000080) munmap(&(0x7f00002d2000/0x4000)=nil, 0x4000) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x4d, &(0x7f0000000100)}) close_range(r8, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000000040)={0x1, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x5, 0x6d}, 0x2c) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, 0x0, 0x0) accept4(r10, 0x0, 0x0, 0x80800) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000002f00090027bd7000fddbdf250400000007000b00050000006a965e43c97d2242c3ea8c51aa03af6ab596b1d7786a47ebe5664a7c174736f9a8e364d2e835"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x20040004) 704.70623ms ago: executing program 5 (id=507): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) socket(0x40000000015, 0x5, 0x8001) syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x200) set_thread_area(&(0x7f0000000000)={0xffffffff, 0x0, 0x0, 0x1}) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) r8 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x8, 0x2, 0x20, 0x4, 0x5, 0xff}, {0x9, 0x5, 0xb, 0x2, 0x10, 0xf7, 0x5, 0x7}, {0x9, 0x5, 0x80, 0x3, 0x40, 0xfd, 0x4, 0x3}}}}}}]}}, 0x0) syz_usb_control_io(r8, &(0x7f0000000a80)={0x18, &(0x7f00000005c0)={0x40, 0xd, 0xd5, {0xd5, 0x4, "fdcffa7215ffe1c3ab503701174ea2ff284c4f32f2fb6f690aa57410fd726275234bffdd53851232df1138f31fc88540d788accdba31e4c339b6182cbe0c8712ef0892d39b12de2a5777bd98e25eca700e0c8778346c8242ae7d53dee6b8329c51d6bde5a393f75e6140a90b83ce541aa29baff61436f42f2ef7700d276404488a1033261e54e131911ac4e4f4dd6318bf067980f3a0e5007214ffebf78654f19a3c6e0ecf86c0ec03ac104929d526b460740682e4f951267429618e32ce78e902a9d827040ff0eae54daec075360a248f217c"}}, &(0x7f00000006c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2009}}, &(0x7f0000000700)={0x0, 0xf, 0x4f, {0x5, 0xf, 0x4f, 0x1, [@generic={0x4a, 0x10, 0x3, "4f874c34b01b5b40a32e0edf9aa70e4f5ea0e587d5098ea692cf4bba3ab00e5a8b266237bc07353dbb65bfc99511c4e12812c064c72de11f0a1674305dfbe32f8973da46d4a85d"}]}}, &(0x7f0000000780)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x60, 0xe, 0x8, "f32c88b4", "9b8e4157"}}, &(0x7f00000007c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x22, 0x0, 0x2, 0xc, 0x8, 0x5, 0x1}}}, &(0x7f0000000f40)={0x44, &(0x7f0000000ac0)={0x40, 0xe, 0x7d, "0d5170314110049854b147fa83030794fe18b92873d004ee43ed19003cef9157c749a365e280da0a31a86c19de4291a303d265312ec82f005caac3098ea01905f496fbc3c6495089ed93ea1066970ea5716b7d6283acd8847c31ed5dd8c21bb188ebfc6775ad2ae5a9a7eab777a8e73ef5aeb6842c125d2b2dda98d2cc"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0xe9}, &(0x7f0000000c00)={0x20, 0x0, 0x4, {0x4, 0x3}}, &(0x7f0000000c40)={0x20, 0x0, 0x8, {0x10, 0x20b7fa8cd05d1a16, [0xf]}}, &(0x7f0000000c80)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000cc0)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000d00)={0x40, 0xb, 0x2, "56b1"}, &(0x7f0000000d40)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000d80)={0x40, 0x13, 0x6}, &(0x7f0000000dc0)={0x40, 0x17, 0x6, @random="2f9e9a02ae7e"}, &(0x7f0000000e00)={0x40, 0x19, 0x2, 'fx'}, &(0x7f0000000e40)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000e80)={0x40, 0x1c, 0x1, 0x10}, &(0x7f0000000ec0)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000f00)={0x40, 0x21, 0x1, 0x1}}) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x612d, 0x0, 0x3, 0xbd}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x20, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x24c}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x4e23, 0xfffffffe, @mcast1, 0x87}}, 0x0, 0x0, 0x3a, 0x0, "276148cd1259e41d8f0ffd4be8b6d180a19ecb3e60c92e9fe908c95534a69b91fe9e2770ba387440609895d7fbb1c08bdfd96493f4fc1810d150cc3f2bbd548044dcec63bc8b2168c59e27175814071e"}, 0xd8) write(r0, &(0x7f0000000000)='7', 0x1) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_MCAST_JOIN_GROUP(r9, 0x29, 0x2a, &(0x7f0000000500)={0x1, {{0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x7}}}, 0x84) unshare(0x28000600) 587.698851ms ago: executing program 0 (id=508): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newtaction={0x70, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a31000000000800054000000002090002"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x2cd7}}, './file0\x00'}) r3 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) pread64(r3, 0x0, 0x3, 0x0) close(r3) openat$cgroup_type(r2, &(0x7f00000000c0), 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r1, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}}, 0x4084) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/12/smp_affinity\x00', 0x1, 0x6) write$cgroup_netprio_ifpriomap(r4, 0x0, 0xfffffffffffffceb) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842c", @ANYRES32=0x0], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) write$P9_RREADDIR(r2, &(0x7f0000000340)={0x103, 0x29, 0x2, {0x6, [{{0x20, 0x1, 0x8}, 0x8, 0x3, 0x7, './file0'}, {{0x20, 0x1, 0x2}, 0xffffffffffffffff, 0x45, 0x7, './file0'}, {{0x4, 0x3, 0x6}, 0xa3, 0x2, 0x7, './file0'}, {{0x10, 0x3}, 0x7, 0x0, 0x7, './file0'}, {{0x12, 0x0, 0x8}, 0x2, 0x1, 0x7, './file0'}, {{0x0, 0x4, 0x8}, 0x8000000000000001, 0xb8, 0x7, './file0'}, {{0x40, 0x3, 0x6}, 0x5, 0xd2, 0x7, './file0'}, {{0x2, 0x3, 0x8}, 0x6, 0x2, 0x7, './file0'}]}}, 0x103) 500.297397ms ago: executing program 4 (id=509): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x49, 0x0, &(0x7f0000000100)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x1c) r2 = openat$vcsu(0xffffff9c, &(0x7f0000000140), 0x109a40, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x1c) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0xfc000000, 0x0, r3, 0x0, '\x00', 0x0, r2, 0x0, 0x0, 0x5}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x36, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @generic={0x5, 0xa, 0xb, 0x0, 0x9}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20}, 0x94) 498.566606ms ago: executing program 4 (id=510): request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x187) lsetxattr$security_capability(&(0x7f0000000000)='./file1/file2\x00', 0x0, 0x0, 0x0, 0x1) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x84, 0x4, 0x4038a0b, 0x11, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2={0xff, 0x5}, 0x20, 0x0, 0x0, 0x4}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, 0x9, 0x6, 0x201, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x80) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000806010800000000000000010007000000480fba62457022bb3700adeb1ca4c4e63a996c62a53a4248bf3f086bb1cf6d267864e50acb083feb05cb5eaf8b0d6ab0bc4828cecb3fd1d07f6638057cc2d884ed29714cf10287748cf63a6c1eacc3cd89fcbb00ee0b31a359d44855c00c7c2c3c36c55a06c864933c5c65ef0a37a6b256a55f85a5a335ca4e22eb903187ad4e21e4116a"], 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000002d0007090000000000000000057c00000c00018008001600ae58b62b1a569aa0e51b21bae26c97ce", @ANYRES32=0x0, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x488d1}, 0x400c000) 249.850491ms ago: executing program 2 (id=511): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x8a000) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc25c4111, &(0x7f00000005c0)={0x8000, [[0x0, 0x3, 0x0, 0x10f, 0x437, 0x8000, 0xd, 0xfffff276], [0x2, 0x0, 0xa4, 0x5, 0x532, 0x6, 0xfffffffb, 0xd], [0x97f6, 0x10001, 0x9, 0x3, 0x101, 0x8, 0x4, 0x10]], '\x00', [{0xd, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x7ff, 0x1c, 0x1, 0x0, 0x1, 0x1}, {0x3, 0x5, 0x0, 0x1}, {0x5, 0x81, 0x1, 0x1, 0x0, 0x1}, {0x7ff, 0x40, 0x1, 0x0, 0x0, 0x1}, {0x7, 0x9, 0x0, 0x1, 0x1, 0x1}, {0x400, 0x7, 0x1, 0x1, 0x1, 0x1}, {0x401, 0x3, 0x0, 0x1}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x5, 0xfd89, 0x0, 0x1, 0x1}, {0x4000009, 0x4, 0x1, 0x1, 0x1, 0x1}, {0x7ff, 0xfffffff0, 0x1, 0x1, 0x1, 0x1}], '\x00', 0x2}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x4044094) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mount(&(0x7f0000000180)=@sr0, &(0x7f00000001c0)='./my_configfs/target/usb_gadget/file0\x00', &(0x7f0000000240)='vxfs\x00', 0x812409, &(0x7f0000000280)='configfs\x00') mkdir(&(0x7f0000000200)='./my_configfs/usb_gadget/g1\x00', 0x1ff) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xb) ioctl$KDMKTONE(r1, 0x4b30, 0x1000) mkdir(&(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdir(&(0x7f0000000500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) socket$nl_route(0x10, 0x3, 0x0) landlock_create_ruleset(&(0x7f0000000180)={0x100, 0x0, 0x1}, 0x30, 0x0) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000019000910001d0cf70400020000"], 0x1c}, 0x1, 0x0, 0x0, 0x4040880}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042cbd7000ffdbdf25010000004c0002803c00018008000100040000000800010002000000080001000600000008000100070000000800010006000000080001000000000008000100080000000c00018008000100050000002d0002800c0001"], 0x70}, 0x1, 0x0, 0x0, 0x40005}, 0x40) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x1) ioctl$TCSETS(r4, 0x89f2, &(0x7f00000011c0)={0x6, 0xffff, 0x0, 0xd, 0x0, "5dee000000594000"}) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="1801000030"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x4, &(0x7f0000000300)=@framed={{0x18, 0x8, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000d00)=r5, 0x4) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$TIPC_CONN_TIMEOUT(r6, 0x10f, 0x82, &(0x7f0000000100)=0x8, 0x4) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r7) 0s ago: executing program 2 (id=512): r0 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r2 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x240c8044, &(0x7f0000000080)={0xa, 0xe20, 0x0, @empty, 0x401}, 0x1c) sendto$inet6(r2, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) (async) sendto$inet6(r2, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) r3 = socket$alg(0x26, 0x5, 0x0) close(0x3) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) (async) bind$alg(r4, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) r5 = accept4(r3, 0x0, 0x0, 0x800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x4010, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fbffff8100000000000000008500000041000000850000001100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fbffff8100000000000000008500000041000000850000001100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) (async) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000000200)) (async) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r7, 0x4008af00, &(0x7f0000000080)=0x200000000) (async) ioctl$VHOST_SET_FEATURES(r7, 0x4008af00, &(0x7f0000000080)=0x200000000) r8 = syz_io_uring_setup(0x6358, &(0x7f0000000400)={0x0, 0xffffffff, 0x40000, 0x2, 0x2039c}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r9, r10, r11, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000280)={0x9, 0x0, 'client0\x00', 0xaa8ac9eecdcecdf2, "cb7cb96ff0dc8cfc", "dfd49d6f857b62f6ad403bd702340f8c39e0841623196d5271984a18e11e0943", 0x7, 0x1ff}) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000280)={0x9, 0x0, 'client0\x00', 0xaa8ac9eecdcecdf2, "cb7cb96ff0dc8cfc", "dfd49d6f857b62f6ad403bd702340f8c39e0841623196d5271984a18e11e0943", 0x7, 0x1ff}) io_uring_enter(r8, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f0000000040)=0x1) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@md0, 0xffffffffffffffff, &(0x7f0000000040)={0x8e8, 0x8, 0x9, 0x0, 0x8, 0x0, 0x9, 0x3, 0x1c0a}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r6, r1, 0x25, 0x0, @void}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x8}, 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r6, r1, 0x25, 0xa, @val=@netkit}, 0x1c) kernel console output (not intermixed with test programs): 0] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 72.944834][ T70] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 72.944845][ T70] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 72.944863][ T70] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.165281][ T6384] netlink: 16 bytes leftover after parsing attributes in process `syz.2.123'. [ 73.167005][ T70] usb 7-1: GET_CAPABILITIES returned 0 [ 73.167026][ T70] usbtmc 7-1:16.0: can't read capabilities [ 73.193321][ T42] audit: type=1326 audit(1789912364.692:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6394 comm="syz.0.125" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf704efec code=0x0 [ 73.370695][ C2] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 73.373928][ T70] usb 7-1: USB disconnect, device number 11 [ 74.055088][ T6405] FAULT_INJECTION: forcing a failure. [ 74.055088][ T6405] name failslab, interval 1, probability 0, space 0, times 1 [ 74.055108][ T6405] CPU: 0 UID: 0 PID: 6405 Comm: syz.2.127 Not tainted syzkaller #0 PREEMPT(full) [ 74.055120][ T6405] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.055126][ T6405] Call Trace: [ 74.055130][ T6405] [ 74.055134][ T6405] dump_stack_lvl+0x100/0x190 [ 74.055168][ T6405] should_fail_ex.cold+0x5/0xa [ 74.055185][ T6405] should_failslab+0xc2/0x120 [ 74.055200][ T6405] __kmalloc_cache_noprof+0x91/0x6d0 [ 74.055217][ T6405] ? assoc_array_insert+0x262/0x32c0 [ 74.055234][ T6405] assoc_array_insert+0x262/0x32c0 [ 74.055252][ T6405] ? __key_link_lock+0x4a/0xb0 [ 74.055265][ T6405] ? __pfx_assoc_array_insert+0x10/0x10 [ 74.055281][ T6405] ? down_write+0x146/0x1f0 [ 74.055292][ T6405] ? __pfx_down_write+0x10/0x10 [ 74.055304][ T6405] __key_link_begin+0xf5/0x260 [ 74.055317][ T6405] __key_create_or_update+0x4ee/0xe30 [ 74.055336][ T6405] ? __pfx___key_create_or_update+0x10/0x10 [ 74.055354][ T6405] ? lookup_user_key+0x3f3/0x1300 [ 74.055375][ T6405] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 74.055394][ T6405] key_create_or_update+0x42/0x60 [ 74.055413][ T6405] __do_sys_add_key+0x2e8/0x460 [ 74.055426][ T6405] ? __pfx___do_sys_add_key+0x10/0x10 [ 74.055448][ T6405] __do_fast_syscall_32+0x13a/0x8b0 [ 74.055467][ T6405] do_fast_syscall_32+0x32/0x70 [ 74.055484][ T6405] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 74.055498][ T6405] RIP: 0023:0xf6fdefec [ 74.055510][ T6405] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 74.055515][ T6405] RSP: 002b:00000000f53ac50c EFLAGS: 00000292 ORIG_RAX: 000000000000011e [ 74.055526][ T6405] RAX: ffffffffffffffda RBX: 00000000800003c0 RCX: 0000000080000440 [ 74.055533][ T6405] RDX: 00000000800000c0 RSI: 00000000000000d3 RDI: 00000000fffffffd [ 74.055539][ T6405] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 74.055545][ T6405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.055551][ T6405] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 74.055564][ T6405] [ 74.401984][ T6411] openvswitch: netlink: IP tunnel dst address not specified [ 75.349170][ T6418] FAULT_INJECTION: forcing a failure. [ 75.349170][ T6418] name failslab, interval 1, probability 0, space 0, times 0 [ 75.349192][ T6418] CPU: 3 UID: 0 PID: 6418 Comm: syz.0.131 Not tainted syzkaller #0 PREEMPT(full) [ 75.349205][ T6418] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 75.349211][ T6418] Call Trace: [ 75.349216][ T6418] [ 75.349221][ T6418] dump_stack_lvl+0x100/0x190 [ 75.349239][ T6418] should_fail_ex.cold+0x5/0xa [ 75.349255][ T6418] should_failslab+0xc2/0x120 [ 75.349270][ T6418] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 75.349283][ T6418] ? __d_alloc+0x35/0xa50 [ 75.349306][ T6418] __d_alloc+0x35/0xa50 [ 75.349321][ T6418] d_alloc_parallel+0x105/0x14c0 [ 75.349334][ T6418] ? lock_acquire+0x1d1/0x380 [ 75.349350][ T6418] ? __d_lookup+0x73/0x4a0 [ 75.349360][ T6418] ? __pfx_d_alloc_parallel+0x10/0x10 [ 75.349371][ T6418] ? __d_lookup+0x25c/0x4a0 [ 75.349383][ T6418] ? __d_lookup+0x266/0x4a0 [ 75.349397][ T6418] lookup_open+0x6bb/0x1990 [ 75.349420][ T6418] path_openat+0xa2c/0x2440 [ 75.349435][ T6418] ? __pfx_path_openat+0x10/0x10 [ 75.349453][ T6418] do_file_open+0x20e/0x430 [ 75.349467][ T6418] ? __pfx_do_file_open+0x10/0x10 [ 75.349489][ T6418] ? _raw_spin_unlock+0x28/0x50 [ 75.349502][ T6418] ? alloc_fd+0x471/0x7a0 [ 75.349519][ T6418] do_sys_openat2+0x10f/0x1e0 [ 75.349534][ T6418] ? __pfx_do_sys_openat2+0x10/0x10 [ 75.349555][ T6418] __ia32_compat_sys_openat+0x12d/0x210 [ 75.349571][ T6418] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 75.349593][ T6418] __do_fast_syscall_32+0x13a/0x8b0 [ 75.349610][ T6418] ? lockdep_hardirqs_on+0x7d/0x110 [ 75.349627][ T6418] do_fast_syscall_32+0x32/0x70 [ 75.349644][ T6418] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 75.349658][ T6418] RIP: 0023:0xf704efec [ 75.349671][ T6418] Code: Unable to access opcode bytes at 0xf704efc2. [ 75.349675][ T6418] RSP: 002b:00000000f543d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 75.349686][ T6418] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000140 [ 75.349693][ T6418] RDX: 0000000000080d83 RSI: 0000000000000000 RDI: 0000000000000000 [ 75.349699][ T6418] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 75.349705][ T6418] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 75.349710][ T6418] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 75.349724][ T6418] [ 75.358156][ T6418] netlink: 16 bytes leftover after parsing attributes in process `syz.0.131'. ޣPTHJTRڞ@zRgQr싓B8_ԪI/F@e}D?G甑 (n$l`KGeJ >qSfeF;tCMz,j2Q#= QEo=I^`aY?9٦T;><6CJ?:H6;U HC7QF?5'э\KEFyӾQ{ Y3q؞eίI3ϏCZW!|8'X+_L2dU0)&iA0=L$!>wdmr+3(B%{Vq%J%3'E7ȌkVuɦcF\hSơ;rJc^toI/45o`;!?'0 GKqI]h3 >?LNUrϷγޱߡXjtp2hp?$0r{$턒vFDlx.=fA) [MZSNii'D@jUHeGMIxzV1˝y[$7x/4$ jgոŨ@( s֢7>~BfCU2k^ Х#f! cSr|*Q@tr'>zFM_lTo2ix&Gp>8O ]g[ 76.678178][ T6443] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.678977][ T6440] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 77.205594][ T6458] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 77.205635][ T6458] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 77.212808][ T6458] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 77.215759][ T6458] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 77.215808][ T6458] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 77.225310][ T6458] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 77.227847][ T6458] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 77.228651][ T6458] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 77.230537][ T6458] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 77.232326][ T6458] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 77.232401][ T6458] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 77.235361][ T6458] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 77.499210][ T6469] Invalid source name [ 78.763393][ T5740] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.768281][ T5740] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.770407][ T5740] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.776380][ T5740] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.776817][ T5740] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.059460][ T5814] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.243423][ T5740] Bluetooth: hci2: command 0x0c1a tx timeout [ 79.243470][ T64] Bluetooth: hci1: command 0x0c1a tx timeout [ 79.243646][ T5740] Bluetooth: hci0: command 0x0c1a tx timeout [ 79.601339][ T5814] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.631709][ T6490] capability: warning: `syz.0.151' uses 32-bit capabilities (legacy support in use) [ 79.667556][ T5814] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.729169][ T6500] loop7: detected capacity change from 0 to 7 [ 79.751686][ T5814] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.779171][ T6500] Dev loop7: unable to read RDB block 7 [ 79.779192][ T6500] loop7: unable to read partition table [ 79.779283][ T6500] loop7: partition table beyond EOD, truncated [ 79.781254][ T6474] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.781330][ T6474] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.781389][ T6474] bridge_slave_0: entered allmulticast mode [ 79.782041][ T6500] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 79.782113][ T6474] bridge_slave_0: entered promiscuous mode [ 79.783748][ T6474] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.784014][ T6474] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.784089][ T6474] bridge_slave_1: entered allmulticast mode [ 79.785369][ T6474] bridge_slave_1: entered promiscuous mode [ 79.788876][ T6497] netlink: zone id is out of range [ 79.789005][ T6497] netlink: zone id is out of range [ 79.789729][ T6497] netlink: zone id is out of range [ 79.789806][ T6497] netlink: zone id is out of range [ 79.789868][ T6497] netlink: zone id is out of range [ 79.790062][ T6497] netlink: zone id is out of range [ 79.790172][ T6497] netlink: zone id is out of range [ 79.790193][ T6497] netlink: zone id is out of range [ 79.790370][ T6497] netlink: zone id is out of range [ 79.820107][ T6474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.821653][ T6474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.838914][ T6474] team0: Port device team_slave_0 added [ 79.841206][ T6474] team0: Port device team_slave_1 added [ 79.871071][ T6474] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.871082][ T6474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.871094][ T6474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.876779][ T5150] Buffer I/O error on dev loop7, logical block 0, async page read [ 79.876808][ T5150] Buffer I/O error on dev loop7, logical block 0, async page read [ 79.876823][ T5150] Buffer I/O error on dev loop7, logical block 0, async page read [ 79.876836][ T5150] Buffer I/O error on dev loop7, logical block 0, async page read [ 79.876858][ T5150] Buffer I/O error on dev loop7, logical block 0, async page read [ 79.876878][ T5150] Buffer I/O error on dev loop7, logical block 0, async page read [ 79.876892][ T5150] Buffer I/O error on dev loop7, logical block 0, async page read [ 79.876900][ T5150] ldm_validate_partition_table(): Disk read failed. [ 79.876912][ T5150] Buffer I/O error on dev loop7, logical block 0, async page read [ 79.876926][ T5150] Buffer I/O error on dev loop7, logical block 0, async page read [ 79.876939][ T5150] Buffer I/O error on dev loop7, logical block 0, async page read [ 79.876954][ T5150] Dev loop7: unable to read RDB block 0 [ 79.876981][ T5150] loop7: unable to read partition table [ 79.877071][ T5150] loop7: partition table beyond EOD, truncated [ 79.889376][ T6474] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.889386][ T6474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.889399][ T6474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.994624][ T6474] hsr_slave_0: entered promiscuous mode [ 79.995074][ T6474] hsr_slave_1: entered promiscuous mode [ 79.995386][ T6474] debugfs: 'hsr0' already exists in 'hsr' [ 79.995397][ T6474] Cannot create hsr debugfs directory [ 80.079375][ T5814] bridge_slave_1: left allmulticast mode [ 80.079399][ T5814] bridge_slave_1: left promiscuous mode [ 80.080445][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.090425][ T5814] bridge_slave_0: left allmulticast mode [ 80.090440][ T5814] bridge_slave_0: left promiscuous mode [ 80.091997][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.226661][ T5814] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 80.232123][ T5814] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 80.238734][ T5814] bond0 (unregistering): Released all slaves [ 80.532973][ T6474] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 80.539057][ T6474] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.540047][ T6474] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 80.542782][ T6474] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.568216][ T6474] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 80.605407][ T6474] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.626095][ T6474] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 80.644290][ T6474] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.832020][ T5814] hsr_slave_0: left promiscuous mode [ 80.832765][ T5814] hsr_slave_1: left promiscuous mode [ 80.833480][ T5753] Bluetooth: hci3: command tx timeout [ 80.834801][ T5814] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.834826][ T5814] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.836474][ T5814] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.836490][ T5814] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.856047][ T5814] veth1_macvtap: left promiscuous mode [ 80.856139][ T5814] veth0_macvtap: left promiscuous mode [ 80.856276][ T5814] veth1_vlan: left promiscuous mode [ 80.856394][ T5814] veth0_vlan: left promiscuous mode [ 81.053413][ T50] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 81.073740][ T5814] team0 (unregistering): Port device team_slave_1 removed [ 81.080404][ T5814] team0 (unregistering): Port device team_slave_0 removed [ 81.159648][ T5452] 8021q: adding VLAN 0 to HW filter on device eth2 [ 81.183490][ T6474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.189511][ T6474] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.192772][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.192817][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.202473][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.202517][ T1157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.208523][ T50] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 81.209501][ T50] usb 7-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 81.209523][ T50] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65344, setting to 1024 [ 81.209578][ T50] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 81.209591][ T50] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 81.210937][ T50] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 81.210948][ T50] usb 7-1: Product: syz [ 81.210955][ T50] usb 7-1: Manufacturer: syz [ 81.214732][ T6529] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 81.216790][ T50] garmin_gps 7-1:1.0: Garmin GPS usb/tty converter detected [ 81.236889][ T50] usb 7-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 81.313693][ T5753] Bluetooth: hci1: command 0x0c1a tx timeout [ 81.324945][ T5753] Bluetooth: hci0: command 0x0c1a tx timeout [ 81.324966][ T5753] Bluetooth: hci2: command 0x0c1a tx timeout [ 81.370794][ T5452] 8021q: adding VLAN 0 to HW filter on device eth3 [ 81.423689][ T6529] uhci_hcd 0000:00:1d.0: remove, state 4 [ 81.423838][ T6529] usb usb1: USB disconnect, device number 1 [ 81.466090][ T6529] uhci_hcd 0000:00:1d.0: USB bus 1 deregistered [ 81.559944][ T5452] 8021q: adding VLAN 0 to HW filter on device eth4 [ 81.617108][ T6474] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.692537][ T5816] usb 7-1: USB disconnect, device number 12 [ 81.699994][ T5816] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 81.700375][ T5816] garmin_gps 7-1:1.0: device disconnected [ 81.736678][ T5452] 8021q: adding VLAN 0 to HW filter on device eth5 [ 81.776239][ T6474] veth0_vlan: entered promiscuous mode [ 81.780233][ T6474] veth1_vlan: entered promiscuous mode [ 81.794511][ T6474] veth0_macvtap: entered promiscuous mode [ 81.798000][ T6474] veth1_macvtap: entered promiscuous mode [ 81.810141][ T6474] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.814039][ T6474] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.863431][ T5590] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.863457][ T5590] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.863473][ T5590] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.863490][ T5590] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.885998][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.886012][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.910759][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.910779][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.249532][ T6590] netlink: 8 bytes leftover after parsing attributes in process `syz.2.161'. [ 82.927437][ T5740] Bluetooth: hci3: command tx timeout [ 83.210284][ T6610] e1000e 0000:00:02.0 eth1: removed PHC [ 83.393458][ T5740] Bluetooth: hci2: command 0x0c1a tx timeout [ 83.393482][ T5740] Bluetooth: hci0: command 0x0c1a tx timeout [ 83.393496][ T5740] Bluetooth: hci1: command 0x0c1a tx timeout [ 83.395762][ T6610] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 83.446666][ T5753] Bluetooth: hci2: unexpected event for opcode 0x2006 [ 83.590101][ T6611] ccp 0000:00:02.0: missing driver data [ 83.590114][ T6611] ccp 0000:00:02.0: initialization failed [ 83.760923][ T6628] netlink: 'syz.4.166': attribute type 1 has an invalid length. [ 83.760938][ T6628] netlink: 'syz.4.166': attribute type 1 has an invalid length. [ 84.227813][ T6662] veth0: entered promiscuous mode [ 84.827676][ T6640] veth0: left promiscuous mode [ 84.967218][ T6711] netlink: 'syz.2.171': attribute type 1 has an invalid length. [ 84.967237][ T6711] netlink: 224 bytes leftover after parsing attributes in process `syz.2.171'. [ 85.100243][ T6723] Invalid logical block size (33771) [ 85.104085][ T6713] netlink: 'syz.2.171': attribute type 1 has an invalid length. [ 85.104098][ T6713] netlink: 224 bytes leftover after parsing attributes in process `syz.2.171'. [ 85.160758][ T6727] mmap: syz.0.173 (6727) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 85.267377][ T6728] netlink: 8 bytes leftover after parsing attributes in process `syz.0.173'. [ 85.359070][ T6718] netlink: 4 bytes leftover after parsing attributes in process `syz.2.171'. [ 85.359190][ T6718] netlink: 4 bytes leftover after parsing attributes in process `syz.2.171'. [ 85.793501][ T5753] Bluetooth: hci3: command tx timeout [ 86.098379][ T6730] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 86.098396][ T6730] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 86.105063][ T6730] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 86.105083][ T6730] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 86.110374][ T6730] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 86.110392][ T6730] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 86.193469][ T35] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 86.217865][ T6730] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 86.217879][ T6730] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 86.373808][ T35] usb 7-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 86.374606][ T35] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 86.374627][ T35] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.557790][ T6777] qrtr: Invalid version 115 [ 86.558727][ T6777] netlink: 20 bytes leftover after parsing attributes in process `syz.4.179'. [ 86.584918][ T35] qmi_wwan 7-1:1.0: cdc-wdm0: USB WDM device [ 86.596242][ T35] wwan wwan0: port wwan0qmi0 attached [ 87.030484][ T35] qmi_wwan 7-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.2-1, WWAN/QMI device, 66:5a:11:12:23:cb [ 87.034140][ T35] usb 7-1: USB disconnect, device number 13 [ 87.035338][ T35] qmi_wwan 7-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.2-1, WWAN/QMI device [ 87.096015][ T35] wwan wwan0: port wwan0qmi0 disconnected [ 87.373414][ T5816] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 87.454070][ T6791] faux_driver vgem: [drm] Unknown color mode 11176; guessing buffer size. [ 87.483714][ T6791] netlink: 'syz.4.182': attribute type 10 has an invalid length. [ 87.484192][ T6791] syz_tun: entered promiscuous mode [ 87.486985][ T6791] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 87.487068][ T6791] netlink: 'syz.4.182': attribute type 10 has an invalid length. [ 87.487973][ T6791] netlink: 'syz.4.182': attribute type 10 has an invalid length. [ 87.488035][ T6791] netlink: 'syz.4.182': attribute type 10 has an invalid length. [ 87.488090][ T6791] netlink: 'syz.4.182': attribute type 10 has an invalid length. [ 87.488146][ T6791] netlink: 'syz.4.182': attribute type 10 has an invalid length. [ 87.495160][ T5740] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.502256][ T5740] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.503426][ T5816] usb 5-1: device descriptor read/64, error -71 [ 87.503792][ T5740] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.504458][ T5740] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.504962][ T5740] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.524904][ T6791] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 87.534489][ T5753] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.543973][ T5753] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.544297][ T5753] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.548437][ T5753] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.553154][ T5753] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.611189][ T6804] tracefs: Unknown parameter 'fd' [ 87.700795][ T6820] netlink: 4 bytes leftover after parsing attributes in process `syz.4.186'. [ 87.715116][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.729562][ T6820] bond0: (slave syz_tun): Releasing backup interface [ 87.746219][ T5816] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 87.818404][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.884963][ T5816] usb 5-1: device descriptor read/64, error -71 [ 87.913844][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.943385][ T25] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 87.964919][ T6795] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.964966][ T6795] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.965021][ T6795] bridge_slave_0: entered allmulticast mode [ 87.965825][ T6795] bridge_slave_0: entered promiscuous mode [ 87.967537][ T6795] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.967611][ T6795] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.967665][ T6795] bridge_slave_1: entered allmulticast mode [ 87.968461][ T6795] bridge_slave_1: entered promiscuous mode [ 87.993923][ T5816] usb usb5-port1: attempt power cycle [ 87.995660][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.001219][ T6795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.003507][ T6795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.024272][ T6795] team0: Port device team_slave_0 added [ 88.025640][ T6795] team0: Port device team_slave_1 added [ 88.038834][ T6795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.038844][ T6795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.038858][ T6795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.039797][ T6795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.039804][ T6795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.039816][ T6795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.072662][ T6795] hsr_slave_0: entered promiscuous mode [ 88.073568][ T6795] hsr_slave_1: entered promiscuous mode [ 88.075927][ T6795] debugfs: 'hsr0' already exists in 'hsr' [ 88.075946][ T6795] Cannot create hsr debugfs directory [ 88.187766][ T12] bridge_slave_1: left allmulticast mode [ 88.187786][ T12] bridge_slave_1: left promiscuous mode [ 88.187934][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.189286][ T12] bridge_slave_0: left allmulticast mode [ 88.189299][ T12] bridge_slave_0: left promiscuous mode [ 88.189407][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.293473][ T25] usb 9-1: device descriptor read/64, error -71 [ 88.303870][ T12] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 88.317968][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 88.319655][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 88.320545][ T12] bond0 (unregistering): Released all slaves [ 88.356098][ T5816] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 88.377322][ T5816] usb 5-1: device descriptor read/8, error -71 [ 88.470393][ T6795] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 88.479168][ T6795] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.480093][ T6795] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 88.488227][ T6795] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.488972][ T6795] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 88.499300][ T6795] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.512243][ T6795] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 88.520896][ T6795] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.550185][ T5452] 8021q: adding VLAN 0 to HW filter on device eth1 [ 88.602546][ T12] hsr_slave_0: left promiscuous mode [ 88.602998][ T12] hsr_slave_1: left promiscuous mode [ 88.607937][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.607950][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.608481][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.608490][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.623363][ T5816] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 88.624258][ T12] veth1_macvtap: left promiscuous mode [ 88.624296][ T12] veth0_macvtap: left promiscuous mode [ 88.624423][ T12] veth1_vlan: left promiscuous mode [ 88.624486][ T12] veth0_vlan: left promiscuous mode [ 88.655783][ T5816] usb 5-1: device descriptor read/8, error -71 [ 88.753746][ T25] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 88.763531][ T5816] usb usb5-port1: unable to enumerate USB device [ 88.769210][ T12] team0 (unregistering): Port device team_slave_1 removed [ 88.777122][ T12] team0 (unregistering): Port device team_slave_0 removed [ 88.828166][ T5452] 8021q: adding VLAN 0 to HW filter on device eth6 [ 88.855258][ T6795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.861351][ T6795] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.864763][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.864827][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.870437][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.870481][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.019020][ T5452] 8021q: adding VLAN 0 to HW filter on device eth7 [ 89.104123][ T25] usb 9-1: device descriptor read/64, error -71 [ 89.127739][ T6795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.191924][ T5452] 8021q: adding VLAN 0 to HW filter on device eth8 [ 89.213994][ T25] usb usb9-port1: attempt power cycle [ 89.259714][ T6795] veth0_vlan: entered promiscuous mode [ 89.266672][ T6795] veth1_vlan: entered promiscuous mode [ 89.282518][ T6795] veth0_macvtap: entered promiscuous mode [ 89.286695][ T6795] veth1_macvtap: entered promiscuous mode [ 89.296630][ T6795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.300498][ T6795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.347329][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.347342][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.361454][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.361466][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.374607][ T5814] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.396198][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.396239][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.396261][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.552021][ T6901] binder: 6900:6901 ioctl c0306201 80000480 returned -14 [ 89.576828][ T6902] netlink: 12 bytes leftover after parsing attributes in process `syz.5.189'. [ 89.634811][ T5753] Bluetooth: hci4: command tx timeout [ 90.241035][ T6911] validate_nla: 27 callbacks suppressed [ 90.241048][ T6911] netlink: 'syz.0.193': attribute type 1 has an invalid length. [ 90.241056][ T6911] netlink: 'syz.0.193': attribute type 1 has an invalid length. [ 90.726493][ T6922] netlink: 4 bytes leftover after parsing attributes in process `syz.2.196'. [ 91.026789][ T6926] nvme_rdma: malformed src address passed: 1270.0.1 [ 91.721462][ T5753] Bluetooth: hci4: command tx timeout [ 92.026211][ T6948] netlink: 4 bytes leftover after parsing attributes in process `syz.2.203'. [ 92.183362][ T5887] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 92.333767][ T57] usb 7-1: new low-speed USB device number 14 using dummy_hcd [ 92.364380][ T5887] usb 10-1: New USB device found, idVendor=0a99, idProduct=0001, bcdDevice= 0.00 [ 92.365975][ T5887] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 92.367437][ T5887] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 92.367449][ T5887] usb 10-1: Product: syz [ 92.367456][ T5887] usb 10-1: Manufacturer: syz [ 92.376345][ T5887] navman 10-1:1.0: navman converter detected [ 92.379319][ T5887] usb 10-1: navman converter now attached to ttyUSB0 [ 92.485841][ T57] usb 7-1: unable to get BOS descriptor or descriptor too short [ 92.485868][ T57] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 92.486659][ T57] usb 7-1: config 1 interface 0 altsetting 135 endpoint 0x82 is Bulk; changing to Interrupt [ 92.486673][ T57] usb 7-1: config 1 interface 0 altsetting 135 endpoint 0x3 is Bulk; changing to Interrupt [ 92.486683][ T57] usb 7-1: config 1 interface 0 altsetting 135 endpoint 0x3 has invalid wMaxPacketSize 0 [ 92.486694][ T57] usb 7-1: config 1 interface 0 has no altsetting 0 [ 92.488848][ T57] usb 7-1: language id specifier not provided by device, defaulting to English [ 92.572660][ T6946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.573098][ T6946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.575068][ T6946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.575254][ T6946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.576014][ T6946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.576334][ T6946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.576772][ T6946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.577382][ T6946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.577812][ T6946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.579597][ T6946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.368308][ T6980] netlink: 'syz.0.209': attribute type 1 has an invalid length. [ 93.368357][ T6980] netlink: 224 bytes leftover after parsing attributes in process `syz.0.209'. [ 93.368390][ T6981] netlink: 'syz.0.209': attribute type 1 has an invalid length. [ 93.368407][ T6981] netlink: 224 bytes leftover after parsing attributes in process `syz.0.209'. [ 93.471271][ T6981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.209'. [ 93.678790][ T6983] 9p: Could not find request transport: f [ 93.698000][ T6990] 9p: Could not find request transport: f [ 93.780905][ T6999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.214'. [ 93.803686][ T5753] Bluetooth: hci4: command tx timeout [ 94.163402][ T969] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 94.323396][ T969] usb 9-1: Using ep0 maxpacket: 8 [ 94.328136][ T969] usb 9-1: unable to get BOS descriptor or descriptor too short [ 94.328173][ T969] usb 9-1: New USB device found, idVendor=1235, idProduct=8012, bcdDevice= 0.40 [ 94.332247][ T969] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.332267][ T969] usb 9-1: Product: syz [ 94.332279][ T969] usb 9-1: Manufacturer: syz [ 94.332290][ T969] usb 9-1: SerialNumber: syz [ 94.541804][ T7004] netlink: 4 bytes leftover after parsing attributes in process `syz.4.216'. [ 94.917208][ T3266] usb 10-1: USB disconnect, device number 2 [ 94.918484][ T969] usb 9-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 94.924234][ T3266] navman ttyUSB0: navman converter now disconnected from ttyUSB0 [ 94.924468][ T3266] navman 10-1:1.0: device disconnected [ 94.930322][ T969] usb 9-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 94.961627][ T57] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.969194][ T57] usb 7-1: can't set config #1, error -71 [ 94.981844][ T57] usb 7-1: USB disconnect, device number 14 [ 94.999977][ T7030] input: syz1 as /devices/virtual/input/input7 [ 95.018285][ T7033] nbd: must specify at least one socket [ 95.042880][ T969] usb 9-1: USB disconnect, device number 5 [ 95.105148][ T5915] udevd[5915]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 95.343448][ T3266] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 95.375891][ T57] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 95.523408][ T3266] usb 10-1: Using ep0 maxpacket: 8 [ 95.523419][ T57] usb 7-1: Using ep0 maxpacket: 16 [ 95.524134][ T57] usb 7-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 95.524359][ T3266] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 95.525264][ T57] usb 7-1: config 0 has an invalid interface number: 132 but max is 0 [ 95.525283][ T57] usb 7-1: config 0 has no interface number 0 [ 95.525530][ T3266] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 95.525553][ T3266] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 95.525756][ T3266] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 95.525773][ T3266] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 95.525802][ T3266] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.531070][ T57] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.531089][ T57] usb 7-1: Product: syz [ 95.531100][ T57] usb 7-1: Manufacturer: syz [ 95.531111][ T57] usb 7-1: SerialNumber: syz [ 95.538435][ T57] usb 7-1: config 0 descriptor?? [ 95.541679][ T57] hub 7-1:0.132: bad descriptor, ignoring hub [ 95.541692][ T57] hub 7-1:0.132: probe with driver hub failed with error -5 [ 95.547278][ T57] input: bcm5974 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.132/input/input8 [ 95.614000][ T7057] nbd: must specify a size in bytes for the device [ 95.734691][ T7030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.734889][ T7030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.752716][ T3266] usb 10-1: usb_control_msg returned -71 [ 95.752751][ T3266] usbtmc 10-1:16.0: can't read capabilities [ 95.767695][ T3266] usb 10-1: USB disconnect, device number 3 [ 95.831564][ T7073] netlink: 'syz.0.228': attribute type 1 has an invalid length. [ 95.857898][ T7073] 8021q: adding VLAN 0 to HW filter on device bond1 [ 95.858684][ T7066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.228'. [ 95.869911][ T7066] bond1: (slave geneve3): making interface the new active one [ 95.871264][ T7066] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 95.873528][ T5753] Bluetooth: hci4: command tx timeout [ 96.003719][ T969] usb 7-1: USB disconnect, device number 15 [ 96.432327][ T7089] 9p: Bad value for 'rfdno' [ 96.523248][ T7086] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1668310176 (3336620352 ns) > initial count (471493250 ns). Using initial count to start timer. [ 96.706115][ T7117] FAULT_INJECTION: forcing a failure. [ 96.706115][ T7117] name failslab, interval 1, probability 0, space 0, times 0 [ 96.706135][ T7117] CPU: 0 UID: 0 PID: 7117 Comm: syz.5.236 Tainted: G L syzkaller #0 PREEMPT(full) [ 96.706150][ T7117] Tainted: [L]=SOFTLOCKUP [ 96.706154][ T7117] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.706160][ T7117] Call Trace: [ 96.706164][ T7117] [ 96.706169][ T7117] dump_stack_lvl+0x100/0x190 [ 96.706188][ T7117] should_fail_ex.cold+0x5/0xa [ 96.706205][ T7117] should_failslab+0xc2/0x120 [ 96.706221][ T7117] __kmalloc_noprof+0xfc/0x840 [ 96.706234][ T7117] ? down_read+0x13b/0x4c0 [ 96.706245][ T7117] ? user_preparse+0x9b/0x1c0 [ 96.706264][ T7117] user_preparse+0x9b/0x1c0 [ 96.706279][ T7117] ? __pfx_user_preparse+0x10/0x10 [ 96.706296][ T7117] __key_create_or_update+0x463/0xe30 [ 96.706315][ T7117] ? __pfx___key_create_or_update+0x10/0x10 [ 96.706333][ T7117] ? lookup_user_key+0x3f3/0x1300 [ 96.706356][ T7117] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 96.706375][ T7117] key_create_or_update+0x42/0x60 [ 96.706394][ T7117] __do_sys_add_key+0x2e8/0x460 [ 96.706407][ T7117] ? __pfx___do_sys_add_key+0x10/0x10 [ 96.706424][ T7117] __do_fast_syscall_32+0x13a/0x8b0 [ 96.706444][ T7117] do_fast_syscall_32+0x32/0x70 [ 96.706461][ T7117] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 96.706475][ T7117] RIP: 0023:0xf708efec [ 96.706488][ T7117] Code: Unable to access opcode bytes at 0xf708efc2. [ 96.706492][ T7117] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 000000000000011e [ 96.706503][ T7117] RAX: ffffffffffffffda RBX: 00000000800003c0 RCX: 0000000080000440 [ 96.706510][ T7117] RDX: 00000000800000c0 RSI: 00000000000000c9 RDI: 00000000fffffffd [ 96.706516][ T7117] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 96.706612][ T7117] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 96.706619][ T7117] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 96.706634][ T7117] [ 96.891884][ T7124] futex_wake_op: syz.2.239 tries to shift op by 144; fix this program [ 96.954127][ T3266] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 97.039953][ T7132] netlink: 'syz.0.240': attribute type 1 has an invalid length. [ 97.039981][ T7132] netlink: 'syz.0.240': attribute type 1 has an invalid length. [ 97.304035][ T3266] usb 9-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00 [ 97.306166][ T3266] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.306190][ T3266] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.308233][ T3266] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.308252][ T3266] usb 9-1: Product: syz [ 97.308264][ T3266] usb 9-1: Manufacturer: syz [ 97.308275][ T3266] usb 9-1: SerialNumber: syz [ 97.325916][ T3266] symbolserial 9-1:1.0: symbol converter detected [ 97.337184][ T3266] usb 9-1: symbol converter now attached to ttyUSB0 [ 97.531948][ T7108] symbol ttyUSB0: symbol_open - failed resubmitting read urb, error -90 [ 97.592246][ T57] usb 9-1: USB disconnect, device number 6 [ 97.612005][ T57] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 97.612416][ T57] symbolserial 9-1:1.0: device disconnected [ 98.420343][ T7154] netlink: 28 bytes leftover after parsing attributes in process `syz.0.246'. [ 99.198626][ T7168] netlink: 'syz.5.252': attribute type 1 has an invalid length. [ 99.198641][ T7168] netlink: 384 bytes leftover after parsing attributes in process `syz.5.252'. [ 99.375843][ T7172] netlink: 'syz.5.254': attribute type 1 has an invalid length. [ 99.375857][ T7172] netlink: 'syz.5.254': attribute type 1 has an invalid length. [ 99.519657][ T7181] netlink: 8 bytes leftover after parsing attributes in process `syz.4.253'. [ 99.564438][ T7184] netlink: 52 bytes leftover after parsing attributes in process `syz.2.250'. [ 99.566489][ T7184] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 99.567188][ T7184] netlink: 20 bytes leftover after parsing attributes in process `syz.2.250'. [ 99.795005][ T7194] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.795130][ T7194] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.447764][ T7194] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.461481][ T7194] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.883551][ T5590] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.883663][ T5590] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.883712][ T5590] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.883738][ T5590] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.886141][ T7203] batman_adv: batadv0: Adding interface: veth0 [ 100.886154][ T7203] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.886178][ T7203] batman_adv: batadv0: Interface activated: veth0 [ 100.887682][ T7204] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.887702][ T7204] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.900499][ T7204] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.900521][ T7204] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.934683][ T7204] batman_adv: batadv0: Interface deactivated: veth0 [ 100.934702][ T7204] batman_adv: batadv0: Removing interface: veth0 [ 101.016080][ T7208] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 101.016097][ T7208] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 101.020614][ T7208] vhci_hcd vhci_hcd.0: Device attached [ 101.043532][ T7208] gre1: entered promiscuous mode [ 101.137104][ T7230] netlink: 4 bytes leftover after parsing attributes in process `syz.2.263'. [ 101.263528][ T57] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 101.567324][ T7211] vhci_hcd: connection reset by peer [ 101.571184][ T5590] vhci_hcd vhci_hcd.4: stop threads [ 101.571528][ T5590] vhci_hcd vhci_hcd.4: release socket [ 101.572190][ T5590] vhci_hcd vhci_hcd.4: disconnect device [ 103.027560][ T7279] netlink: 12 bytes leftover after parsing attributes in process `syz.2.270'. [ 103.092933][ T7282] netlink: 4 bytes leftover after parsing attributes in process `syz.5.271'. [ 103.103552][ T7282] hsr_slave_0: left promiscuous mode [ 103.105236][ T7282] hsr_slave_1: left promiscuous mode [ 103.345792][ T7282] binder: 7281:7282 ioctl 8953 80000600 returned -22 [ 103.365285][ T42] audit: type=1326 audit(1789912394.862:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7281 comm="syz.5.271" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 103.365331][ T42] audit: type=1326 audit(1789912394.862:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7281 comm="syz.5.271" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 103.375532][ T42] audit: type=1326 audit(1789912394.882:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7281 comm="syz.5.271" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf708efec code=0x7ffc0000 [ 103.375574][ T42] audit: type=1326 audit(1789912394.882:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7281 comm="syz.5.271" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 103.375651][ T42] audit: type=1326 audit(1789912394.882:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7281 comm="syz.5.271" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 103.381187][ T42] audit: type=1326 audit(1789912394.882:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7281 comm="syz.5.271" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf708efec code=0x7ffc0000 [ 103.381219][ T42] audit: type=1326 audit(1789912394.882:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7281 comm="syz.5.271" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 103.381251][ T42] audit: type=1326 audit(1789912394.882:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7281 comm="syz.5.271" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf708efec code=0x7ffc0000 [ 103.381286][ T42] audit: type=1326 audit(1789912394.882:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7281 comm="syz.5.271" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 103.381313][ T42] audit: type=1326 audit(1789912394.882:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7281 comm="syz.5.271" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 104.013532][ T35] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 104.153363][ T35] usb 7-1: device descriptor read/64, error -71 [ 104.273050][ T7274] syz.4.267 (7274) used greatest stack depth: 18320 bytes left [ 104.403414][ T35] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 104.533453][ T35] usb 7-1: device descriptor read/64, error -71 [ 104.630968][ T7294] netlink: 'syz.4.275': attribute type 1 has an invalid length. [ 104.630984][ T7294] netlink: 'syz.4.275': attribute type 1 has an invalid length. [ 104.643733][ T35] usb usb7-port1: attempt power cycle [ 104.983388][ T35] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 105.004477][ T35] usb 7-1: device descriptor read/8, error -71 [ 105.190246][ T7299] netlink: 24 bytes leftover after parsing attributes in process `syz.5.276'. [ 105.253419][ T35] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 105.273823][ T35] usb 7-1: device descriptor read/8, error -71 [ 105.384022][ T35] usb usb7-port1: unable to enumerate USB device [ 105.909133][ T7301] netlink: 'syz.5.277': attribute type 1 has an invalid length. [ 105.926413][ T7301] 8021q: adding VLAN 0 to HW filter on device bond1 [ 105.942375][ T7301] 8021q: adding VLAN 0 to HW filter on device bond2 [ 105.947620][ T7301] bond1: (slave bond2): Enslaving as an active interface with a down link [ 106.031711][ T7301] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.032134][ T7301] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.183530][ T12] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.183556][ T12] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.183575][ T12] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.183598][ T12] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.353868][ T57] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 106.563455][ T50] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 106.723495][ T50] usb 10-1: Using ep0 maxpacket: 8 [ 106.725770][ T50] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 106.726757][ T50] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 106.726782][ T50] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 106.726801][ T50] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 106.726819][ T50] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 106.726849][ T50] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.932218][ T50] usb 10-1: GET_CAPABILITIES returned 0 [ 106.932245][ T50] usbtmc 10-1:16.0: can't read capabilities [ 107.139240][ T70] usb 10-1: USB disconnect, device number 4 [ 107.213534][ T9] libceph: connect (1)[c::]:6789 error -101 [ 107.213845][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 107.221380][ T9] libceph: connect (1)[c::]:6789 error -101 [ 107.221521][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 107.248091][ T7330] ceph: No mds server is up or the cluster is laggy [ 107.495320][ T7339] netlink: 'syz.0.287': attribute type 1 has an invalid length. [ 107.495340][ T7339] netlink: 'syz.0.287': attribute type 1 has an invalid length. [ 107.576099][ T7344] netlink: 72 bytes leftover after parsing attributes in process `syz.4.288'. [ 107.776568][ T7349] ptrace attach of "/syz-executor exec"[7353] was attempted by "/syz-executor exec"[7349] [ 108.823408][ T7385] loop5: detected capacity change from 0 to 10935 [ 108.826872][ T7385] loop5: [POWERTEC] [ 108.835197][ T5915] buffer_io_error: 4 callbacks suppressed [ 108.835208][ T5915] Buffer I/O error on dev loop5, logical block 1366, async page read [ 108.844185][ T5915] Buffer I/O error on dev loop5, logical block 1366, async page read [ 108.845222][ T7385] tipc: Started in network mode [ 108.845252][ T7385] tipc: Node identity 02ab11f5734e, cluster identity 4711 [ 108.845465][ T7385] tipc: Enabled bearer , priority 10 [ 108.882680][ T5150] loop5: [POWERTEC] [ 108.903204][ T5915] Buffer I/O error on dev loop5, logical block 1366, async page read [ 108.915487][ T5915] Buffer I/O error on dev loop5, logical block 1366, async page read [ 108.990273][ T5150] loop5: [POWERTEC] [ 109.005851][ T5915] Buffer I/O error on dev loop5, logical block 1366, async page read [ 109.012059][ T5915] Buffer I/O error on dev loop5, logical block 1366, async page read [ 109.349943][ T7383] tipc: Resetting bearer [ 109.361738][ T7383] tipc: Disabling bearer [ 109.403733][ T57] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 109.553708][ T57] usb 10-1: Using ep0 maxpacket: 8 [ 109.554513][ T57] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 109.555574][ T57] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 109.555598][ T57] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 109.555617][ T57] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 109.555635][ T57] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 109.555666][ T57] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.765777][ T57] usb 10-1: GET_CAPABILITIES returned 0 [ 109.765816][ T57] usbtmc 10-1:16.0: can't read capabilities [ 109.967060][ T57] usb 10-1: USB disconnect, device number 5 [ 110.433708][ T7417] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 110.442168][ T42] kauditd_printk_skb: 3 callbacks suppressed [ 110.442181][ T42] audit: type=1800 audit(1789912401.942:16): pid=7418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.304" name="file1" dev="overlay" ino=522 res=0 errno=0 [ 110.515979][ T7423] Need at least one configuration in g1. [ 110.517847][ T7423] udc dummy_udc.0: failed to start g1: -22 [ 110.517863][ T7423] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 110.519075][ T7423] UDC core: g1: couldn't find an available UDC or it's busy [ 110.719135][ T7439] netlink: 4 bytes leftover after parsing attributes in process `syz.0.310'. [ 110.724406][ T7439] netlink: 12 bytes leftover after parsing attributes in process `syz.0.310'. [ 111.291573][ T7464] netlink: 48 bytes leftover after parsing attributes in process `syz.5.314'. [ 111.294207][ T7464] netlink: 91 bytes leftover after parsing attributes in process `syz.5.314'. [ 111.493751][ T7472] netlink: 'syz.5.315': attribute type 1 has an invalid length. [ 111.512917][ T7472] bond3: entered promiscuous mode [ 111.513445][ T7472] 8021q: adding VLAN 0 to HW filter on device bond3 [ 111.519330][ T7472] netlink: 12 bytes leftover after parsing attributes in process `syz.5.315'. [ 111.519353][ T7472] netlink: 12 bytes leftover after parsing attributes in process `syz.5.315'. [ 111.534993][ T7472] bond3: (slave bridge1): making interface the new active one [ 111.535015][ T7472] bridge1: entered promiscuous mode [ 111.537843][ T7472] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 111.933401][ T25] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 112.083842][ T25] usb 9-1: Using ep0 maxpacket: 8 [ 112.084681][ T25] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 112.086195][ T25] usb 9-1: config 201 has too many interfaces: 37, using maximum allowed: 32 [ 112.086209][ T25] usb 9-1: config 201 has an invalid descriptor of length 143, skipping remainder of the config [ 112.086218][ T25] usb 9-1: config 201 has 0 interfaces, different from the descriptor's value: 37 [ 112.086235][ T25] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.308841][ T25] usb 9-1: string descriptor 0 read error: -71 [ 112.318582][ T25] usb 9-1: USB disconnect, device number 7 [ 113.043541][ T5816] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 113.194458][ T5816] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 113.195633][ T5816] usb 7-1: config 0 has an invalid interface number: 50 but max is 0 [ 113.195655][ T5816] usb 7-1: config 0 has no interface number 0 [ 113.195688][ T5816] usb 7-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 113.197832][ T5816] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.197852][ T5816] usb 7-1: Product: syz [ 113.197866][ T5816] usb 7-1: Manufacturer: syz [ 113.197879][ T5816] usb 7-1: SerialNumber: syz [ 113.200884][ T5816] usb 7-1: config 0 descriptor?? [ 113.210514][ T5816] yurex 7-1:0.50: USB YUREX device now attached to Yurex #0 [ 113.406386][ T7495] netlink: 65027 bytes leftover after parsing attributes in process `syz.2.321'. [ 113.409095][ T7495] vivid-000: disconnect [ 113.414857][ T7494] vivid-000: reconnect [ 113.416595][ T5816] usb 7-1: USB disconnect, device number 20 [ 113.422583][ T5816] yurex 7-1:0.50: USB YUREX #0 now disconnected [ 113.977256][ T7509] pcieport 0000:00:04.0: PCI bridge to [bus 01] [ 113.977343][ T7509] pcieport 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 113.980667][ T7509] pcieport 0000:00:04.0: bridge window [mem 0xfe800000-0xfe9fffff] [ 113.982173][ T7509] pcieport 0000:00:04.0: bridge window [mem 0xfe000000-0xfe1fffff 64bit pref] [ 114.333443][ T25] usb 7-1: new low-speed USB device number 21 using dummy_hcd [ 114.365717][ T70] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 114.473424][ T25] usb 7-1: device descriptor read/64, error -71 [ 114.504599][ T7522] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 114.544855][ T70] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 114.546010][ T70] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 114.546026][ T70] usb 5-1: config 0 has no interface number 0 [ 114.546044][ T70] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 114.547910][ T70] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.547933][ T70] usb 5-1: Product: syz [ 114.547946][ T70] usb 5-1: Manufacturer: syz [ 114.547959][ T70] usb 5-1: SerialNumber: syz [ 114.557289][ T70] usb 5-1: config 0 descriptor?? [ 114.570897][ T70] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 114.585473][ T7522] kAFS: No cell specified [ 114.723427][ T25] usb 7-1: new low-speed USB device number 22 using dummy_hcd [ 114.767587][ T70] usb 5-1: USB disconnect, device number 11 [ 114.770990][ T70] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 114.853796][ T25] usb 7-1: device descriptor read/64, error -71 [ 114.963834][ T25] usb usb7-port1: attempt power cycle [ 115.253357][ T969] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 115.313406][ T25] usb 7-1: new low-speed USB device number 23 using dummy_hcd [ 115.344108][ T25] usb 7-1: device descriptor read/8, error -71 [ 115.389248][ T7529] netlink: 12 bytes leftover after parsing attributes in process `syz.4.332'. [ 115.413423][ T969] usb 10-1: Using ep0 maxpacket: 8 [ 115.414159][ T969] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 115.415101][ T969] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 115.415124][ T969] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 115.415143][ T969] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 115.415161][ T969] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 115.415191][ T969] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.632602][ T969] usb 10-1: usb_control_msg returned -71 [ 115.632627][ T969] usbtmc 10-1:16.0: can't read capabilities [ 115.638822][ T25] usb 7-1: new low-speed USB device number 24 using dummy_hcd [ 115.640358][ T969] usb 10-1: USB disconnect, device number 6 [ 115.665189][ T25] usb 7-1: device descriptor read/8, error -71 [ 115.753522][ T35] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 115.773674][ T25] usb usb7-port1: unable to enumerate USB device [ 115.904161][ T35] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 115.905329][ T35] usb 9-1: config 0 interface 0 altsetting 255 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 115.905357][ T35] usb 9-1: config 0 interface 0 has no altsetting 0 [ 115.907240][ T35] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 115.907260][ T35] usb 9-1: Product: syz [ 115.907273][ T35] usb 9-1: Manufacturer: syz [ 115.907285][ T35] usb 9-1: SerialNumber: syz [ 115.909776][ T35] usb 9-1: config 0 descriptor?? [ 115.924721][ T35] usb 9-1: selecting invalid altsetting 0 [ 116.035239][ T5740] Bluetooth: hci0: command 0x1003 tx timeout [ 116.035367][ T5753] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 116.168601][ T5816] usb 9-1: USB disconnect, device number 8 [ 117.138198][ T7547] netlink: 16 bytes leftover after parsing attributes in process `syz.0.337'. [ 117.631934][ T7557] kAFS: No cell specified [ 117.748393][ T7556] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 118.537387][ T7571] netlink: 4 bytes leftover after parsing attributes in process `syz.0.342'. [ 118.891129][ T7585] netlink: 8 bytes leftover after parsing attributes in process `syz.5.345'. [ 118.891143][ T7585] netlink: 12 bytes leftover after parsing attributes in process `syz.5.345'. [ 118.913468][ T5814] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.913497][ T5814] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.913514][ T5814] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.913531][ T5814] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.140533][ T3266] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 119.203931][ T9] usb 10-1: new low-speed USB device number 7 using dummy_hcd [ 119.293395][ T3266] usb 7-1: Using ep0 maxpacket: 8 [ 119.293907][ T3266] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 119.294904][ T3266] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 119.294929][ T3266] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 119.294949][ T3266] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 119.294967][ T3266] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 119.294998][ T3266] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.363435][ T9] usb 10-1: Invalid ep0 maxpacket: 16 [ 119.500582][ T3266] usb 7-1: GET_CAPABILITIES returned 0 [ 119.500621][ T3266] usbtmc 7-1:16.0: can't read capabilities [ 119.510332][ T9] usb 10-1: new low-speed USB device number 8 using dummy_hcd [ 119.624311][ T7595] netlink: 27 bytes leftover after parsing attributes in process `syz.4.347'. [ 119.663796][ T9] usb 10-1: Invalid ep0 maxpacket: 16 [ 119.666630][ T9] usb usb10-port1: attempt power cycle [ 119.706580][ T5091] usb 7-1: USB disconnect, device number 25 [ 120.014516][ T9] usb 10-1: new low-speed USB device number 9 using dummy_hcd [ 120.033749][ T9] usb 10-1: Invalid ep0 maxpacket: 16 [ 120.173428][ T9] usb 10-1: new low-speed USB device number 10 using dummy_hcd [ 120.194810][ T9] usb 10-1: Invalid ep0 maxpacket: 16 [ 120.195042][ T9] usb usb10-port1: unable to enumerate USB device [ 120.391463][ T42] audit: type=1326 audit(1789912411.892:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7612 comm="syz.2.350" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x0 [ 121.306147][ T7632] netlink: 244 bytes leftover after parsing attributes in process `syz.2.356'. [ 122.057297][ T7648] netlink: 56 bytes leftover after parsing attributes in process `syz.4.361'. [ 122.061032][ T7651] netlink: 8 bytes leftover after parsing attributes in process `syz.4.361'. [ 122.293419][ T5816] usb 9-1: new low-speed USB device number 9 using dummy_hcd [ 122.455853][ T5816] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 122.456666][ T5816] usb 9-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 122.456679][ T5816] usb 9-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 122.457502][ T5816] usb 9-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 122.457514][ T5816] usb 9-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 122.458294][ T5816] usb 9-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 122.458305][ T5816] usb 9-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 122.460770][ T5816] usb 9-1: string descriptor 0 read error: -22 [ 122.460828][ T5816] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.866802][ T7677] netlink: 20 bytes leftover after parsing attributes in process `syz.0.368'. [ 123.313441][ T5091] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 123.485642][ T5091] usb 7-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 123.488433][ T5091] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 3999, setting to 1024 [ 123.488461][ T5091] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 123.488491][ T5091] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.494321][ T7679] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 123.502018][ T5091] spcp8x5 7-1:1.0: SPCP8x5 converter detected [ 123.506783][ T5091] usb 7-1: SPCP8x5 converter now attached to ttyUSB0 [ 123.550359][ T7693] input: syz0 as /devices/virtual/input/input10 [ 123.614867][ T7700] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 123.614890][ T7700] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 123.614947][ T7700] vhci_hcd vhci_hcd.0: Device attached [ 123.621367][ T7700] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(8) [ 123.621387][ T7700] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 123.621450][ T7700] vhci_hcd vhci_hcd.0: Device attached [ 123.622796][ T7700] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(11) [ 123.622814][ T7700] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 123.622874][ T7700] vhci_hcd vhci_hcd.0: Device attached [ 123.634930][ T7700] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(13) [ 123.634950][ T7700] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 123.634994][ T7700] vhci_hcd vhci_hcd.0: Device attached [ 123.638278][ T7700] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(15) [ 123.638297][ T7700] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 123.638357][ T7700] vhci_hcd vhci_hcd.0: Device attached [ 123.641603][ T7700] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(17) [ 123.641622][ T7700] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 123.641671][ T7700] vhci_hcd vhci_hcd.0: Device attached [ 123.645457][ T7700] vhci_hcd vhci_hcd.0: pdev(0) rhport(6) sockfd(19) [ 123.645475][ T7700] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 123.645533][ T7700] vhci_hcd vhci_hcd.0: Device attached [ 123.647179][ T7700] vhci_hcd vhci_hcd.0: pdev(0) rhport(7) sockfd(21) [ 123.647195][ T7700] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 123.647248][ T7700] vhci_hcd vhci_hcd.0: Device attached [ 123.650616][ T7700] vhci_hcd vhci_hcd.0: port 0 already used [ 123.759460][ T7703] wg2 speed is unknown, defaulting to 1000 [ 123.762412][ T7703] wg2 speed is unknown, defaulting to 1000 [ 123.774436][ T7703] wg2 speed is unknown, defaulting to 1000 [ 123.864427][ T7679] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 123.867611][ T7679] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 123.873431][ T7679] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 123.893440][ T5091] usb 38-1: SetAddress Request (2) to port 0 [ 123.893487][ T5091] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 123.956565][ T7679] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 124.000826][ T35] wg2 speed is unknown, defaulting to 1000 [ 124.000937][ T7703] infiniband syz2: set active [ 124.000950][ T7703] infiniband syz2: added wg2 [ 124.020737][ T7703] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 124.020770][ T7703] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 124.020801][ T7703] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 124.057255][ T7703] RDS/IB: syz2: added [ 124.057596][ T7703] smc: adding ib device syz2 with port count 1 [ 124.057688][ T7703] smc: ib device syz2 port 1 has no pnetid [ 124.061741][ T35] wg2 speed is unknown, defaulting to 1000 [ 124.065105][ T7703] wg2 speed is unknown, defaulting to 1000 [ 124.066900][ T7678] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 124.077802][ T70] usb 7-1: USB disconnect, device number 26 [ 124.082580][ T70] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 124.082859][ T70] spcp8x5 7-1:1.0: device disconnected [ 124.189687][ T7703] wg2 speed is unknown, defaulting to 1000 [ 124.325444][ T7703] wg2 speed is unknown, defaulting to 1000 [ 124.416416][ T7703] wg2 speed is unknown, defaulting to 1000 [ 124.443577][ T7714] vhci_hcd: connection closed [ 124.443731][ T7718] vhci_hcd: connection closed [ 124.443846][ T7716] vhci_hcd: connection closed [ 124.443981][ T7712] vhci_hcd: connection closed [ 124.444940][ T7708] vhci_hcd: connection closed [ 124.444978][ T7710] vhci_hcd: connection closed [ 124.445046][ T7706] vhci_hcd: connection closed [ 124.445209][ T7704] vhci_hcd: connection reset by peer [ 124.447376][ T5814] vhci_hcd vhci_hcd.0: stop threads [ 124.447394][ T5814] vhci_hcd vhci_hcd.0: release socket [ 124.447466][ T5814] vhci_hcd vhci_hcd.0: disconnect device [ 124.448977][ T5814] vhci_hcd vhci_hcd.0: stop threads [ 124.448990][ T5814] vhci_hcd vhci_hcd.0: release socket [ 124.451343][ T5814] vhci_hcd vhci_hcd.0: disconnect device [ 124.452228][ T5814] vhci_hcd vhci_hcd.0: stop threads [ 124.452240][ T5814] vhci_hcd vhci_hcd.0: release socket [ 124.452729][ T5814] vhci_hcd vhci_hcd.0: disconnect device [ 124.452933][ T5814] vhci_hcd vhci_hcd.0: stop threads [ 124.452949][ T5814] vhci_hcd vhci_hcd.0: release socket [ 124.455293][ T5814] vhci_hcd vhci_hcd.0: disconnect device [ 124.456346][ T5814] vhci_hcd vhci_hcd.0: stop threads [ 124.456355][ T5814] vhci_hcd vhci_hcd.0: release socket [ 124.456379][ T5814] vhci_hcd vhci_hcd.0: disconnect device [ 124.456473][ T5814] vhci_hcd vhci_hcd.0: stop threads [ 124.456481][ T5814] vhci_hcd vhci_hcd.0: release socket [ 124.456500][ T5814] vhci_hcd vhci_hcd.0: disconnect device [ 124.458558][ T5814] vhci_hcd vhci_hcd.0: stop threads [ 124.458568][ T5814] vhci_hcd vhci_hcd.0: release socket [ 124.458606][ T5814] vhci_hcd vhci_hcd.0: disconnect device [ 124.458690][ T5814] vhci_hcd vhci_hcd.0: stop threads [ 124.458701][ T5814] vhci_hcd vhci_hcd.0: release socket [ 124.458726][ T5814] vhci_hcd vhci_hcd.0: disconnect device [ 124.851104][ T7736] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 125.038244][ T57] usb 9-1: USB disconnect, device number 9 [ 125.184214][ T7740] bond2: option lacp_rate: invalid value (2) [ 125.196881][ T7740] bond2 (unregistering): Released all slaves [ 125.401800][ T7747] netlink: 'syz.0.381': attribute type 4 has an invalid length. [ 125.401814][ T7747] netlink: 152 bytes leftover after parsing attributes in process `syz.0.381'. [ 125.410847][ T7747] net_ratelimit: 10 callbacks suppressed [ 125.410858][ T7747] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 125.945403][ T7756] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 125.945432][ T7756] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 125.945876][ T7756] vhci_hcd vhci_hcd.0: Device attached [ 126.084870][ T7760] 9p: Bad value for 'wfdno' [ 126.213375][ T57] usb 42-1: SetAddress Request (2) to port 0 [ 126.213410][ T57] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 126.306002][ T7776] netlink: 56 bytes leftover after parsing attributes in process `syz.5.384'. [ 126.466982][ T7779] netlink: 12 bytes leftover after parsing attributes in process `syz.0.385'. [ 126.509126][ T7757] vhci_hcd: connection reset by peer [ 126.511743][ T5814] vhci_hcd vhci_hcd.2: stop threads [ 126.511762][ T5814] vhci_hcd vhci_hcd.2: release socket [ 126.511820][ T5814] vhci_hcd vhci_hcd.2: disconnect device [ 127.111066][ T42] audit: type=1326 audit(1789912418.612:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7790 comm="syz.2.389" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 127.111244][ T42] audit: type=1326 audit(1789912418.612:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7790 comm="syz.2.389" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 127.112803][ T42] audit: type=1326 audit(1789912418.612:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7790 comm="syz.2.389" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 127.113212][ T42] audit: type=1326 audit(1789912418.612:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7790 comm="syz.2.389" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 127.113473][ T42] audit: type=1326 audit(1789912418.612:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7790 comm="syz.2.389" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 127.160775][ T42] audit: type=1326 audit(1789912418.662:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7790 comm="syz.2.389" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 127.162106][ T42] audit: type=1326 audit(1789912418.662:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7790 comm="syz.2.389" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 127.162966][ T42] audit: type=1326 audit(1789912418.662:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7790 comm="syz.2.389" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 127.164673][ T42] audit: type=1326 audit(1789912418.662:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7790 comm="syz.2.389" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71175ab code=0x7ffc0000 [ 127.164699][ T42] audit: type=1326 audit(1789912418.672:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7790 comm="syz.2.389" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 127.403396][ T5887] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 127.554255][ T5887] usb 7-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 127.557528][ T5887] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.557544][ T5887] usb 7-1: Product: syz [ 127.557552][ T5887] usb 7-1: Manufacturer: syz [ 127.557559][ T5887] usb 7-1: SerialNumber: syz [ 127.562404][ T5887] usb 7-1: USB2VGA dongle found at address 27 [ 127.563541][ T5887] usb 7-1: Allocated 8 output buffers [ 127.844671][ T7791] netlink: 'syz.2.389': attribute type 30 has an invalid length. [ 127.866803][ T5887] usb 7-1: Failed to early initialize device [ 127.871771][ T5887] usb 7-1: USB disconnect, device number 27 [ 128.653386][ T70] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 128.653447][ T969] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 128.773397][ T5887] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 128.803861][ T969] usb 9-1: New USB device found, idVendor=046d, idProduct=c09b, bcdDevice= 0.00 [ 128.804664][ T969] usb 9-1: config 0 interface 0 has no altsetting 0 [ 128.804682][ T969] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.805903][ T969] usb 9-1: config 0 descriptor?? [ 128.814079][ T70] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 128.815086][ T70] usb 7-1: config 0 has an invalid interface number: 50 but max is 0 [ 128.815108][ T70] usb 7-1: config 0 has no interface number 0 [ 128.815144][ T70] usb 7-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 128.817023][ T70] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.817043][ T70] usb 7-1: Product: syz [ 128.817056][ T70] usb 7-1: Manufacturer: syz [ 128.817067][ T70] usb 7-1: SerialNumber: syz [ 128.820637][ T70] usb 7-1: config 0 descriptor?? [ 128.831751][ T70] yurex 7-1:0.50: USB YUREX device now attached to Yurex #0 [ 128.933902][ T5887] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 128.934864][ T5887] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 128.934903][ T5887] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65344, setting to 1024 [ 128.934927][ T5887] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 128.934951][ T5887] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 128.936307][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 128.936327][ T5887] usb 5-1: Product: syz [ 128.936342][ T5887] usb 5-1: Manufacturer: syz [ 128.939225][ T7807] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 128.941214][ T5887] garmin_gps 5-1:1.0: Garmin GPS usb/tty converter detected [ 128.945950][ T5887] usb 5-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 128.993660][ T5091] usb 38-1: device descriptor read/8, error -110 [ 129.039228][ T5887] usb 7-1: USB disconnect, device number 28 [ 129.042701][ T5887] yurex 7-1:0.50: USB YUREX #0 now disconnected [ 129.225420][ T969] input: HID 046d:c09b as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/0003:046D:C09B.0003/input/input12 [ 129.247084][ T35] usb 5-1: USB disconnect, device number 12 [ 129.257539][ T35] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 129.257942][ T35] garmin_gps 5-1:1.0: device disconnected [ 129.312973][ T969] logitech-hidpp-device 0003:046D:C09B.0003: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 046d:c09b] on usb-dummy_hcd.4-1/input0 [ 129.406706][ T5091] usb usb38-port1: attempt power cycle [ 129.851414][ T5887] usb 9-1: USB disconnect, device number 10 [ 129.964597][ T5091] usb usb38-port1: unable to enumerate USB device [ 130.205729][ T7829] FAULT_INJECTION: forcing a failure. [ 130.205729][ T7829] name failslab, interval 1, probability 0, space 0, times 0 [ 130.205752][ T7829] CPU: 2 UID: 0 PID: 7829 Comm: syz.0.398 Tainted: G L syzkaller #0 PREEMPT(full) [ 130.205767][ T7829] Tainted: [L]=SOFTLOCKUP [ 130.205771][ T7829] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 130.205778][ T7829] Call Trace: [ 130.205782][ T7829] [ 130.205787][ T7829] dump_stack_lvl+0x100/0x190 [ 130.205820][ T7829] should_fail_ex.cold+0x5/0xa [ 130.205835][ T7829] should_failslab+0xc2/0x120 [ 130.205854][ T7829] __kmalloc_cache_noprof+0x91/0x6d0 [ 130.205871][ T7829] ? bpf_int_jit_compile+0x1304/0x1820 [ 130.205886][ T7829] bpf_int_jit_compile+0x1304/0x1820 [ 130.205902][ T7829] ? __pfx_bpf_int_jit_compile+0x10/0x10 [ 130.205924][ T7829] __bpf_prog_select_runtime+0x3dc/0x970 [ 130.205935][ T7829] ? __asan_memcpy+0x3c/0x60 [ 130.205947][ T7829] bpf_prepare_filter+0xd32/0x11e0 [ 130.205967][ T7829] ? __pfx_seccomp_check_filter+0x10/0x10 [ 130.205980][ T7829] ? __pfx_bpf_prepare_filter+0x10/0x10 [ 130.205997][ T7829] ? __asan_memcpy+0x3c/0x60 [ 130.206007][ T7829] ? kmemdup_noprof+0x49/0x60 [ 130.206026][ T7829] bpf_prog_create_from_user+0x1df/0x2e0 [ 130.206044][ T7829] ? __pfx_seccomp_check_filter+0x10/0x10 [ 130.206056][ T7829] do_seccomp+0x7f7/0x2730 [ 130.206071][ T7829] ? __pfx_do_seccomp+0x10/0x10 [ 130.206084][ T7829] ? xfd_validate_state+0x129/0x190 [ 130.206106][ T7829] __do_fast_syscall_32+0x13a/0x8b0 [ 130.206129][ T7829] do_fast_syscall_32+0x32/0x70 [ 130.206146][ T7829] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 130.206159][ T7829] RIP: 0023:0xf704efec [ 130.206172][ T7829] Code: Unable to access opcode bytes at 0xf704efc2. [ 130.206177][ T7829] RSP: 002b:00000000f543d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000162 [ 130.206207][ T7829] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000000008 [ 130.206215][ T7829] RDX: 0000000080000240 RSI: 0000000000000000 RDI: 0000000000000000 [ 130.206222][ T7829] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 130.206229][ T7829] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 130.206236][ T7829] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 130.206250][ T7829] [ 131.017904][ T7844] netlink: 4 bytes leftover after parsing attributes in process `syz.2.402'. [ 131.152659][ T7848] bond2 (unregistering): Released all slaves [ 131.313756][ T57] usb 42-1: device descriptor read/8, error -110 [ 131.335441][ T7854] netlink: 12 bytes leftover after parsing attributes in process `syz.0.405'. [ 131.493463][ T3266] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 131.653837][ T3266] usb 10-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 131.654778][ T3266] usb 10-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 131.654802][ T3266] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65344, setting to 1024 [ 131.654815][ T3266] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 131.654827][ T3266] usb 10-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 131.656170][ T3266] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 131.656182][ T3266] usb 10-1: Product: syz [ 131.656189][ T3266] usb 10-1: Manufacturer: syz [ 131.659940][ T7852] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 131.661731][ T3266] garmin_gps 10-1:1.0: Garmin GPS usb/tty converter detected [ 131.666035][ T3266] usb 10-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 131.711791][ T57] usb usb42-port1: attempt power cycle [ 131.775243][ T7858] loop0: detected capacity change from 0 to 32768 [ 131.786924][ T7858] loop1: detected capacity change from 0 to 65536 [ 131.867817][ T7860] netlink: 'syz.2.408': attribute type 23 has an invalid length. [ 132.068117][ T3266] usb 10-1: USB disconnect, device number 11 [ 132.079764][ T3266] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 132.080024][ T3266] garmin_gps 10-1:1.0: device disconnected [ 132.204941][ T7872] jffs2: notice: (7872) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 132.221876][ T7872] evm: overlay not supported [ 132.264309][ T57] usb usb42-port1: unable to enumerate USB device [ 132.519414][ T1436] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.720857][ T7915] pim6reg: entered allmulticast mode [ 133.185280][ T7924] raw_sendmsg: syz.0.422 forgot to set AF_INET. Fix it! [ 133.671187][ T7939] netlink: 4 bytes leftover after parsing attributes in process `syz.5.427'. [ 133.736259][ T7943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.738665][ T7943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.748076][ T7943] netlink: 128 bytes leftover after parsing attributes in process `syz.0.428'. [ 133.749671][ T7943] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 133.771228][ T7947] bridge0: port 3(netdevsim0) entered blocking state [ 133.771923][ T7947] bridge0: port 3(netdevsim0) entered disabled state [ 133.772943][ T7947] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 133.786498][ T7947] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 133.792875][ T7949] netlink: 'syz.2.430': attribute type 10 has an invalid length. [ 133.794161][ T7949] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 133.795038][ T7949] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 133.796458][ T7949] netlink: 14 bytes leftover after parsing attributes in process `syz.2.430'. [ 133.809042][ T7949] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 133.812103][ T7949] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 133.813252][ T7949] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 133.832325][ T7949] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 133.841202][ T7949] bond0 (unregistering): Released all slaves [ 133.986588][ T3266] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 134.027247][ T7962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.432'. [ 134.027270][ T7962] netlink: 'syz.2.432': attribute type 10 has an invalid length. [ 134.027279][ T7962] netlink: 12 bytes leftover after parsing attributes in process `syz.2.432'. [ 134.133375][ T3266] usb 5-1: Using ep0 maxpacket: 8 [ 134.134126][ T3266] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 134.135104][ T3266] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.135132][ T3266] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.135159][ T3266] usb 5-1: config 0 interface 0 has no altsetting 0 [ 134.135188][ T3266] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.137527][ T3266] usb 5-1: config 0 descriptor?? [ 134.177394][ T7967] xt_recent: Unsupported userspace flags (000000fe) [ 134.341488][ T3266] usbhid 5-1:0.0: can't add hid device: -71 [ 134.344224][ T3266] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 134.346201][ T3266] usb 5-1: USB disconnect, device number 13 [ 134.363483][ T969] usb 7-1: new full-speed USB device number 29 using dummy_hcd [ 134.514662][ T969] usb 7-1: not running at top speed; connect to a high speed hub [ 134.514682][ T969] usb 7-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.40 [ 134.515510][ T969] usb 7-1: config 1 interface 0 altsetting 157 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 134.515527][ T969] usb 7-1: config 1 interface 0 altsetting 157 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 134.515540][ T969] usb 7-1: config 1 interface 0 has no altsetting 0 [ 134.517407][ T969] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.517420][ T969] usb 7-1: Product: 娮壮頠Ⱗ䚌㿥冃ᾛ性闱㋀䏟삞齔ꐴ羴뛅䗕宰榬␻Գ嶟ٺ⇊튧쨫⽃⭐늈뭻躌縀첸ჟ늺쪅扪隆ﱹ輩疈諸瘵㷏 [ 134.517432][ T969] usb 7-1: Manufacturer: ퟞｂঢ়믮识ڜ㤞쥡쇆ﲇꄠⶫ謵숍䆙潢⾯쥻槢ᳺﹾ慀譹㤘촊檂읅슲 [ 134.517442][ T969] usb 7-1: SerialNumber: Ї [ 134.519176][ T7965] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 134.519357][ T7965] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 134.754010][ T7983] netlink: 'syz.5.439': attribute type 3 has an invalid length. [ 134.754028][ T7983] netlink: 3 bytes leftover after parsing attributes in process `syz.5.439'. [ 134.842821][ T5590] nvme nvme0: rdma_resolve_route failed (-110). [ 134.847701][ T7986] nvme nvme0: rdma connection establishment failed (-19) [ 134.873436][ T5590] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 134.873464][ T5590] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 134.873580][ T5590] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 134.873599][ T5590] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 134.929914][ T969] usbhid 7-1:1.0: can't add hid device: -71 [ 134.929991][ T969] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 134.931378][ T969] usb 7-1: USB disconnect, device number 29 [ 135.580647][ T8022] nfs: Unknown parameter 'nolom(0' [ 135.888780][ T8031] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 135.898881][ T1163] rtrs_client L2018: : CM error (CM event: address error, err: -ENODEV) [ 135.899229][ T8031] rtrs_client L2636: : init_conns() failed: err=-EHOSTUNREACH path=@ip:27.0.0.1 [:0] [ 137.374606][ T8051] FAULT_INJECTION: forcing a failure. [ 137.374606][ T8051] name failslab, interval 1, probability 0, space 0, times 0 [ 137.374633][ T8051] CPU: 3 UID: 0 PID: 8051 Comm: syz.0.455 Tainted: G L syzkaller #0 PREEMPT(full) [ 137.374655][ T8051] Tainted: [L]=SOFTLOCKUP [ 137.374661][ T8051] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 137.374673][ T8051] Call Trace: [ 137.374680][ T8051] [ 137.374689][ T8051] dump_stack_lvl+0x100/0x190 [ 137.374714][ T8051] should_fail_ex.cold+0x5/0xa [ 137.374729][ T8051] should_failslab+0xc2/0x120 [ 137.374744][ T8051] kmem_cache_alloc_noprof+0x92/0x6a0 [ 137.374756][ T8051] ? d_instantiate+0x8a/0xb0 [ 137.374770][ T8051] ? alloc_empty_file+0x5b/0x1c0 [ 137.374787][ T8051] alloc_empty_file+0x5b/0x1c0 [ 137.374802][ T8051] alloc_file_pseudo+0x183/0x290 [ 137.374817][ T8051] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 137.374833][ T8051] ? alloc_fd+0x471/0x7a0 [ 137.374848][ T8051] sock_alloc_file+0x50/0x210 [ 137.374864][ T8051] __sys_socket+0x1c0/0x260 [ 137.374875][ T8051] ? xfd_validate_state+0x129/0x190 [ 137.374890][ T8051] ? __pfx___sys_socket+0x10/0x10 [ 137.374905][ T8051] __ia32_sys_socket+0x72/0xb0 [ 137.374916][ T8051] ? lockdep_hardirqs_on+0x7d/0x110 [ 137.374932][ T8051] __do_fast_syscall_32+0x13a/0x8b0 [ 137.374951][ T8051] do_fast_syscall_32+0x32/0x70 [ 137.374967][ T8051] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 137.374981][ T8051] RIP: 0023:0xf704efec [ 137.375009][ T8051] Code: Unable to access opcode bytes at 0xf704efc2. [ 137.375015][ T8051] RSP: 002b:00000000f541c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 137.375027][ T8051] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000000003 [ 137.375034][ T8051] RDX: 0000000000000014 RSI: 0000000000000000 RDI: 0000000000000000 [ 137.375040][ T8051] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 137.375047][ T8051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 137.375054][ T8051] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 137.375070][ T8051] [ 137.525902][ T42] kauditd_printk_skb: 100 callbacks suppressed [ 137.525916][ T42] audit: type=1800 audit(1789912429.032:128): pid=8054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.457" name="file1" dev="9p" ino=77070399 res=0 errno=0 [ 137.547531][ T8056] tipc: Enabling of bearer rejected, failed to enable media [ 137.549951][ T8056] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 137.550010][ T8056] i2c i2c-0: Failed to register i2c client wusb3801 at 0x04 (-16) [ 137.582616][ T8058] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 137.582631][ T8058] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 137.582768][ T8058] vhci_hcd vhci_hcd.0: Device attached [ 137.586335][ T8059] vhci_hcd: cannot find the pending unlink 3 [ 137.792492][ T8063] FAULT_INJECTION: forcing a failure. [ 137.792492][ T8063] name failslab, interval 1, probability 0, space 0, times 0 [ 137.792564][ T8063] CPU: 3 UID: 0 PID: 8063 Comm: syz.2.459 Tainted: G L syzkaller #0 PREEMPT(full) [ 137.792605][ T8063] Tainted: [L]=SOFTLOCKUP [ 137.792612][ T8063] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 137.792625][ T8063] Call Trace: [ 137.792632][ T8063] [ 137.792641][ T8063] dump_stack_lvl+0x100/0x190 [ 137.792678][ T8063] should_fail_ex.cold+0x5/0xa [ 137.792705][ T8063] should_failslab+0xc2/0x120 [ 137.792733][ T8063] kmem_cache_alloc_noprof+0x92/0x6a0 [ 137.792755][ T8063] ? key_alloc+0x3c5/0x1310 [ 137.792790][ T8063] key_alloc+0x3c5/0x1310 [ 137.792828][ T8063] ? __pfx_key_alloc+0x10/0x10 [ 137.792857][ T8063] ? bpf_lsm_key_permission+0x9/0x10 [ 137.792884][ T8063] ? security_key_permission+0x7b/0x230 [ 137.792917][ T8063] __key_create_or_update+0x720/0xe30 [ 137.792952][ T8063] ? __pfx___key_create_or_update+0x10/0x10 [ 137.792984][ T8063] ? lookup_user_key+0x3f3/0x1300 [ 137.793022][ T8063] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 137.793056][ T8063] key_create_or_update+0x42/0x60 [ 137.793088][ T8063] __do_sys_add_key+0x2e8/0x460 [ 137.793129][ T8063] ? __pfx___do_sys_add_key+0x10/0x10 [ 137.793161][ T8063] __do_fast_syscall_32+0x13a/0x8b0 [ 137.793195][ T8063] do_fast_syscall_32+0x32/0x70 [ 137.793225][ T8063] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 137.793249][ T8063] RIP: 0023:0xf6fdefec [ 137.793271][ T8063] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 137.793280][ T8063] RSP: 002b:00000000f538b50c EFLAGS: 00000292 ORIG_RAX: 000000000000011e [ 137.793300][ T8063] RAX: ffffffffffffffda RBX: 0000000080000340 RCX: 0000000080000500 [ 137.793313][ T8063] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000fffffffb [ 137.793324][ T8063] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 137.793335][ T8063] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 137.793346][ T8063] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 137.793372][ T8063] [ 137.884517][ T8066] futex_wake_op: syz.5.460 tries to shift op by 144; fix this program [ 138.103811][ T70] usb 42-1: SetAddress Request (6) to port 0 [ 138.104076][ T70] usb 42-1: new SuperSpeed USB device number 6 using vhci_hcd [ 138.429753][ T8059] vhci_hcd: connection reset by peer [ 138.433071][ T5590] vhci_hcd vhci_hcd.2: stop threads [ 138.433096][ T5590] vhci_hcd vhci_hcd.2: release socket [ 138.433178][ T5590] vhci_hcd vhci_hcd.2: disconnect device [ 138.683606][ T8078] FAULT_INJECTION: forcing a failure. [ 138.683606][ T8078] name fail_futex, interval 1, probability 0, space 0, times 1 [ 138.683636][ T8078] CPU: 2 UID: 0 PID: 8078 Comm: syz.4.462 Tainted: G L syzkaller #0 PREEMPT(full) [ 138.683680][ T8078] Tainted: [L]=SOFTLOCKUP [ 138.683687][ T8078] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 138.683698][ T8078] Call Trace: [ 138.683705][ T8078] [ 138.683712][ T8078] dump_stack_lvl+0x100/0x190 [ 138.683764][ T8078] should_fail_ex.cold+0x5/0xa [ 138.683810][ T8078] get_futex_key+0x1d0/0x14f0 [ 138.683842][ T8078] ? __pfx_get_futex_key+0x10/0x10 [ 138.683875][ T8078] futex_wait_setup+0x91/0x540 [ 138.683901][ T8078] __futex_wait+0x19f/0x300 [ 138.683923][ T8078] ? __pfx___futex_wait+0x10/0x10 [ 138.683940][ T8078] ? __pfx_try_to_wake_up+0x10/0x10 [ 138.683964][ T8078] ? futex_hash+0x311/0x400 [ 138.684044][ T8078] ? __pfx_futex_wake_mark+0x10/0x10 [ 138.684074][ T8078] ? find_held_lock+0x2b/0x80 [ 138.684093][ T8078] ? futex_wake+0x4ea/0x5e0 [ 138.684120][ T8078] futex_wait+0xe6/0x370 [ 138.684141][ T8078] ? __pfx_futex_wait+0x10/0x10 [ 138.684166][ T8078] ? errseq_sample+0x51/0x70 [ 138.684191][ T8078] do_futex+0x265/0x440 [ 138.684209][ T8078] ? __pfx_do_futex+0x10/0x10 [ 138.684225][ T8078] ? rcu_is_watching+0x13/0xc0 [ 138.684242][ T8078] ? do_sock_setsockopt+0x101/0x1d0 [ 138.684266][ T8078] ? kfree+0x1e5/0x6d0 [ 138.684292][ T8078] __ia32_sys_futex_time32+0x2f4/0x470 [ 138.684315][ T8078] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 138.684340][ T8078] ? __sys_setsockopt+0x139/0x190 [ 138.684374][ T8078] __do_fast_syscall_32+0x13a/0x8b0 [ 138.684403][ T8078] do_fast_syscall_32+0x32/0x70 [ 138.684428][ T8078] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 138.684449][ T8078] RIP: 0023:0xf7fc3fec [ 138.684493][ T8078] Code: Unable to access opcode bytes at 0xf7fc3fc2. [ 138.684502][ T8078] RSP: 002b:00000000f54655bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 138.684521][ T8078] RAX: ffffffffffffffda RBX: 00000000f7485020 RCX: 0000000000000080 [ 138.684534][ T8078] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f7485024 [ 138.684545][ T8078] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 138.684557][ T8078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 138.684568][ T8078] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 138.684592][ T8078] [ 138.865800][ T8081] FAULT_INJECTION: forcing a failure. [ 138.865800][ T8081] name failslab, interval 1, probability 0, space 0, times 0 [ 138.865822][ T8081] CPU: 1 UID: 0 PID: 8081 Comm: syz.0.465 Tainted: G L syzkaller #0 PREEMPT(full) [ 138.865837][ T8081] Tainted: [L]=SOFTLOCKUP [ 138.865841][ T8081] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 138.865848][ T8081] Call Trace: [ 138.865852][ T8081] [ 138.865857][ T8081] dump_stack_lvl+0x100/0x190 [ 138.865876][ T8081] should_fail_ex.cold+0x5/0xa [ 138.865892][ T8081] should_failslab+0xc2/0x120 [ 138.865910][ T8081] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 138.865924][ T8081] ? __kasan_kmalloc+0xaa/0xb0 [ 138.865938][ T8081] ? __request_module+0x2d5/0x6a0 [ 138.865951][ T8081] kstrdup+0x51/0xe0 [ 138.865962][ T8081] __request_module+0x2d5/0x6a0 [ 138.865973][ T8081] ? __pfx___request_module+0x10/0x10 [ 138.865983][ T8081] ? rcu_is_watching+0x13/0xc0 [ 138.866000][ T8081] ? __wake_up+0x3f/0x60 [ 138.866015][ T8081] ? rcu_is_watching+0x13/0xc0 [ 138.866027][ T8081] ? lockdep_hardirqs_on+0x7d/0x110 [ 138.866046][ T8081] netlink_create+0x458/0x610 [ 138.866061][ T8081] __sock_create+0x339/0x860 [ 138.866078][ T8081] __sys_socket+0x14d/0x260 [ 138.866090][ T8081] ? xfd_validate_state+0x129/0x190 [ 138.866106][ T8081] ? __pfx___sys_socket+0x10/0x10 [ 138.866122][ T8081] __ia32_sys_socket+0x72/0xb0 [ 138.866134][ T8081] ? lockdep_hardirqs_on+0x7d/0x110 [ 138.866149][ T8081] __do_fast_syscall_32+0x13a/0x8b0 [ 138.866168][ T8081] do_fast_syscall_32+0x32/0x70 [ 138.866185][ T8081] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 138.866200][ T8081] RIP: 0023:0xf704efec [ 138.866213][ T8081] Code: Unable to access opcode bytes at 0xf704efc2. [ 138.866218][ T8081] RSP: 002b:00000000f543d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 138.866229][ T8081] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000000003 [ 138.866237][ T8081] RDX: 000000000000001f RSI: 0000000000000000 RDI: 0000000000000000 [ 138.866243][ T8081] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 138.866249][ T8081] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 138.866256][ T8081] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 138.866270][ T8081] [ 138.867925][ T8081] netlink: 4 bytes leftover after parsing attributes in process `syz.0.465'. [ 138.867954][ T8081] netlink: 5 bytes leftover after parsing attributes in process `syz.0.465'. [ 138.887210][ T8089] binder: 8082:8089 ioctl c0306201 80000440 returned -14 [ 138.904757][ T8088] netlink: 12 bytes leftover after parsing attributes in process `syz.5.464'. [ 138.926128][ T8088] netlink: 'syz.5.464': attribute type 5 has an invalid length. [ 138.926140][ T8088] netlink: 4 bytes leftover after parsing attributes in process `syz.5.464'. [ 138.931443][ T8088] FAULT_INJECTION: forcing a failure. [ 138.931443][ T8088] name failslab, interval 1, probability 0, space 0, times 0 [ 138.931464][ T8088] CPU: 2 UID: 0 PID: 8088 Comm: syz.5.464 Tainted: G L syzkaller #0 PREEMPT(full) [ 138.931481][ T8088] Tainted: [L]=SOFTLOCKUP [ 138.931485][ T8088] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 138.931492][ T8088] Call Trace: [ 138.931496][ T8088] [ 138.931501][ T8088] dump_stack_lvl+0x100/0x190 [ 138.931519][ T8088] should_fail_ex.cold+0x5/0xa [ 138.931534][ T8088] should_failslab+0xc2/0x120 [ 138.931549][ T8088] kmem_cache_alloc_noprof+0x92/0x6a0 [ 138.931562][ T8088] ? ioctx_alloc+0x1b9/0x21a0 [ 138.931579][ T8088] ioctx_alloc+0x1b9/0x21a0 [ 138.931595][ T8088] ? lock_acquire+0x1d1/0x380 [ 138.931609][ T8088] ? __might_fault+0xc5/0x140 [ 138.931625][ T8088] ? find_held_lock+0x2b/0x80 [ 138.931637][ T8088] ? __pfx_ioctx_alloc+0x10/0x10 [ 138.931654][ T8088] __ia32_compat_sys_io_setup+0xc8/0x220 [ 138.931670][ T8088] __do_fast_syscall_32+0x13a/0x8b0 [ 138.931686][ T8088] ? lockdep_hardirqs_on+0x7d/0x110 [ 138.931702][ T8088] do_fast_syscall_32+0x32/0x70 [ 138.931719][ T8088] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 138.931733][ T8088] RIP: 0023:0xf708efec [ 138.931745][ T8088] Code: Unable to access opcode bytes at 0xf708efc2. [ 138.931750][ T8088] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 00000000000000f5 [ 138.931762][ T8088] RAX: ffffffffffffffda RBX: 000000000000007f RCX: 0000000080001440 [ 138.931769][ T8088] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 138.931775][ T8088] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 138.931781][ T8088] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 138.931788][ T8088] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 138.931800][ T8088] [ 139.005182][ T8092] netlink: 4 bytes leftover after parsing attributes in process `syz.5.466'. [ 139.097445][ T8104] netlink: 'syz.4.469': attribute type 1 has an invalid length. [ 139.106900][ T8104] 8021q: adding VLAN 0 to HW filter on device bond1 [ 139.132049][ T8104] 8021q: adding VLAN 0 to HW filter on device bond1 [ 139.132338][ T8104] bond1: (slave xfrm1): The slave device specified does not support setting the MAC address [ 139.132688][ T8104] bond1: (slave xfrm1): Error -95 calling set_mac_address [ 139.249232][ T8113] netlink: 12 bytes leftover after parsing attributes in process `syz.4.471'. [ 139.282710][ T8113] /dev/sg0: Can't lookup blockdev [ 139.413410][ T3376] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 139.541970][ T8119] fuse: Invalid rootmode [ 139.545623][ T8119] No source specified [ 139.564702][ T3376] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 139.565632][ T3376] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.570125][ T3376] usb 7-1: config 0 descriptor?? [ 139.587055][ T8123] FAULT_INJECTION: forcing a failure. [ 139.587055][ T8123] name failslab, interval 1, probability 0, space 0, times 0 [ 139.587075][ T8123] CPU: 1 UID: 0 PID: 8123 Comm: syz.4.474 Tainted: G L syzkaller #0 PREEMPT(full) [ 139.587090][ T8123] Tainted: [L]=SOFTLOCKUP [ 139.587094][ T8123] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 139.587100][ T8123] Call Trace: [ 139.587104][ T8123] [ 139.587108][ T8123] dump_stack_lvl+0x100/0x190 [ 139.587127][ T8123] should_fail_ex.cold+0x5/0xa [ 139.587141][ T8123] should_failslab+0xc2/0x120 [ 139.587156][ T8123] __kmalloc_cache_noprof+0x91/0x6d0 [ 139.587174][ T8123] ? snd_seq_queue_alloc+0x56/0x540 [ 139.587188][ T8123] snd_seq_queue_alloc+0x56/0x540 [ 139.587201][ T8123] snd_seq_ioctl_create_queue+0xa9/0x370 [ 139.587218][ T8123] call_seq_client_ctl+0xa3/0x130 [ 139.587233][ T8123] snd_seq_kernel_client_ctl+0x35/0x50 [ 139.587248][ T8123] alloc_seq_queue+0xdb/0x180 [ 139.587263][ T8123] ? __pfx_alloc_seq_queue+0x10/0x10 [ 139.587284][ T8123] ? find_held_lock+0x2b/0x80 [ 139.587298][ T8123] ? mark_held_locks+0x40/0x70 [ 139.587316][ T8123] snd_seq_oss_open+0x2b2/0xa10 [ 139.587334][ T8123] odev_open+0x6f/0x90 [ 139.587347][ T8123] ? __pfx_odev_open+0x10/0x10 [ 139.587361][ T8123] soundcore_open+0x2e3/0x5a0 [ 139.587378][ T8123] ? __pfx_soundcore_open+0x10/0x10 [ 139.587392][ T8123] chrdev_open+0x234/0x6a0 [ 139.587405][ T8123] ? __pfx_apparmor_file_open+0x10/0x10 [ 139.587443][ T8123] ? __pfx_chrdev_open+0x10/0x10 [ 139.587458][ T8123] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 139.587477][ T8123] do_dentry_open+0x6ab/0x14d0 [ 139.587491][ T8123] ? __pfx_chrdev_open+0x10/0x10 [ 139.587507][ T8123] vfs_open+0x82/0x3f0 [ 139.587524][ T8123] path_openat+0x19fa/0x2440 [ 139.587540][ T8123] ? __pfx_path_openat+0x10/0x10 [ 139.587559][ T8123] do_file_open+0x20e/0x430 [ 139.587574][ T8123] ? __pfx_do_file_open+0x10/0x10 [ 139.587599][ T8123] ? _raw_spin_unlock+0x28/0x50 [ 139.587612][ T8123] ? alloc_fd+0x471/0x7a0 [ 139.587628][ T8123] do_sys_openat2+0x10f/0x1e0 [ 139.587644][ T8123] ? __pfx_do_sys_openat2+0x10/0x10 [ 139.587664][ T8123] __ia32_compat_sys_openat+0x12d/0x210 [ 139.587681][ T8123] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 139.587702][ T8123] __do_fast_syscall_32+0x13a/0x8b0 [ 139.587721][ T8123] do_fast_syscall_32+0x32/0x70 [ 139.587738][ T8123] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 139.587751][ T8123] RIP: 0023:0xf7fc3fec [ 139.587764][ T8123] Code: Unable to access opcode bytes at 0xf7fc3fc2. [ 139.587769][ T8123] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 139.587780][ T8123] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000800001c0 [ 139.587791][ T8123] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 139.587797][ T8123] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 139.587803][ T8123] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 139.587810][ T8123] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 139.587823][ T8123] [ 139.781191][ T8108] batman_adv: batadv0: Adding interface: macvtap1 [ 139.781203][ T8108] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 139.781217][ T8108] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 139.835521][ T3376] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 139.836307][ T3376] [drm:udl_init] *ERROR* Selecting channel failed [ 139.855682][ T3376] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2 [ 139.855696][ T3376] [drm] Initialized udl on minor 2 [ 139.860562][ T3376] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 139.861401][ T3376] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 139.865305][ T25] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 139.867662][ T3376] usb 7-1: USB disconnect, device number 30 [ 139.873510][ T25] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 140.117039][ T8129] netlink: 24 bytes leftover after parsing attributes in process `syz.5.475'. [ 140.451577][ T8151] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 141.526029][ T8175] can0: slcan on ptm0. [ 141.717015][ T42] audit: type=1326 audit(1789912432.223:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8183 comm="syz.2.484" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 141.717127][ T42] audit: type=1326 audit(1789912432.223:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8183 comm="syz.2.484" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 141.717636][ T42] audit: type=1326 audit(1789912432.223:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8183 comm="syz.2.484" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 141.717658][ T42] audit: type=1326 audit(1789912432.223:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8183 comm="syz.2.484" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 141.717677][ T42] audit: type=1326 audit(1789912432.223:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8183 comm="syz.2.484" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 141.717833][ T42] audit: type=1326 audit(1789912432.223:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8183 comm="syz.2.484" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 141.718600][ T42] audit: type=1326 audit(1789912432.223:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8183 comm="syz.2.484" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 141.718699][ T42] audit: type=1326 audit(1789912432.223:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8183 comm="syz.2.484" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 141.720845][ T42] audit: type=1326 audit(1789912432.223:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8183 comm="syz.2.484" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71175ab code=0x7ffc0000 [ 141.965379][ T35] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 142.103379][ T35] usb 7-1: device descriptor read/64, error -71 [ 142.131090][ T8168] can0 (unregistered): slcan off ptm0. [ 142.363383][ T35] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 142.503688][ T35] usb 7-1: device descriptor read/64, error -71 [ 142.613857][ T35] usb usb7-port1: attempt power cycle [ 142.613973][ T42] kauditd_printk_skb: 17 callbacks suppressed [ 142.613984][ T42] audit: type=1326 audit(1789912433.123:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8183 comm="syz.2.484" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 142.614371][ T42] audit: type=1326 audit(1789912433.123:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8183 comm="syz.2.484" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 142.614894][ T42] audit: type=1326 audit(1789912433.123:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8183 comm="syz.2.484" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 142.645381][ T8213] wg2 speed is unknown, defaulting to 1000 [ 142.683764][ T42] audit: type=1326 audit(1789912433.193:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8183 comm="syz.2.484" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 142.684183][ T42] audit: type=1326 audit(1789912433.193:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8183 comm="syz.2.484" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 142.825102][ T8218] netlink: 'syz.5.491': attribute type 23 has an invalid length. [ 142.893829][ T42] audit: type=1326 audit(1789912433.403:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8183 comm="syz.2.484" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 142.928867][ T8221] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 142.928884][ T8221] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 142.930437][ T8221] vhci_hcd vhci_hcd.0: Device attached [ 142.940358][ T8222] vhci_hcd: cannot find the pending unlink 3 [ 142.953434][ T35] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 142.973827][ T42] audit: type=1326 audit(1789912433.483:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8183 comm="syz.2.484" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 142.974283][ T35] usb 7-1: device descriptor read/8, error -71 [ 142.974304][ T42] audit: type=1326 audit(1789912433.483:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8183 comm="syz.2.484" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 143.091862][ T42] audit: type=1326 audit(1789912433.593:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8183 comm="syz.2.484" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 143.091890][ T42] audit: type=1326 audit(1789912433.593:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8183 comm="syz.2.484" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 143.095192][ T8229] can0: slcan on ttyprintk. [ 143.139837][ T8231] FAULT_INJECTION: forcing a failure. [ 143.139837][ T8231] name failslab, interval 1, probability 0, space 0, times 0 [ 143.139887][ T8231] CPU: 1 UID: 0 PID: 8231 Comm: syz.5.492 Tainted: G L syzkaller #0 PREEMPT(full) [ 143.139916][ T8231] Tainted: [L]=SOFTLOCKUP [ 143.139920][ T8231] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 143.139927][ T8231] Call Trace: [ 143.139932][ T8231] [ 143.139937][ T8231] dump_stack_lvl+0x100/0x190 [ 143.139955][ T8231] should_fail_ex.cold+0x5/0xa [ 143.139971][ T8231] should_failslab+0xc2/0x120 [ 143.139994][ T8231] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 143.140011][ T8231] ? key_alloc+0x423/0x1310 [ 143.140031][ T8231] kmemdup_noprof+0x29/0x60 [ 143.140050][ T8231] key_alloc+0x423/0x1310 [ 143.140072][ T8231] ? __pfx_key_alloc+0x10/0x10 [ 143.140087][ T8231] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 143.140102][ T8231] ? bpf_lsm_key_permission+0x9/0x10 [ 143.140117][ T8231] ? security_key_permission+0x7b/0x230 [ 143.140135][ T8231] __key_create_or_update+0x720/0xe30 [ 143.140154][ T8231] ? __pfx___key_create_or_update+0x10/0x10 [ 143.140172][ T8231] ? lookup_user_key+0x3f3/0x1300 [ 143.140194][ T8231] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 143.140213][ T8231] key_create_or_update+0x42/0x60 [ 143.140233][ T8231] __do_sys_add_key+0x2e8/0x460 [ 143.140248][ T8231] ? __pfx___do_sys_add_key+0x10/0x10 [ 143.140265][ T8231] __do_fast_syscall_32+0x13a/0x8b0 [ 143.140296][ T8231] do_fast_syscall_32+0x32/0x70 [ 143.140315][ T8231] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 143.140328][ T8231] RIP: 0023:0xf708efec [ 143.140342][ T8231] Code: Unable to access opcode bytes at 0xf708efc2. [ 143.140347][ T8231] RSP: 002b:00000000f543b50c EFLAGS: 00000292 ORIG_RAX: 000000000000011e [ 143.140358][ T8231] RAX: ffffffffffffffda RBX: 0000000080000340 RCX: 0000000080000500 [ 143.140364][ T8231] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000fffffffb [ 143.140371][ T8231] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 143.140377][ T8231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.140384][ T8231] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 143.140398][ T8231] [ 143.169340][ T70] usb 42-1: device descriptor read/8, error -110 [ 143.223363][ T57] usb 48-1: SetAddress Request (2) to port 0 [ 143.223396][ T57] usb 48-1: new SuperSpeed USB device number 2 using vhci_hcd [ 143.257118][ T8234] netlink: 120 bytes leftover after parsing attributes in process `syz.4.495'. [ 143.423405][ T35] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 143.445508][ T35] usb 7-1: device descriptor read/8, error -71 [ 143.577228][ T70] usb usb42-port1: attempt power cycle [ 143.744922][ T8222] vhci_hcd: connection reset by peer [ 143.745186][ T5590] vhci_hcd vhci_hcd.5: stop threads [ 143.745208][ T5590] vhci_hcd vhci_hcd.5: release socket [ 143.745249][ T5590] vhci_hcd vhci_hcd.5: disconnect device [ 143.821283][ T35] usb usb7-port1: unable to enumerate USB device [ 144.109042][ T8228] can0 (unregistered): slcan off ttyprintk. [ 144.135944][ T8255] FAULT_INJECTION: forcing a failure. [ 144.135944][ T8255] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 144.135977][ T8255] CPU: 0 UID: 0 PID: 8255 Comm: syz.4.497 Tainted: G L syzkaller #0 PREEMPT(full) [ 144.136002][ T8255] Tainted: [L]=SOFTLOCKUP [ 144.136008][ T8255] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 144.136020][ T8255] Call Trace: [ 144.136026][ T8255] [ 144.136034][ T8255] dump_stack_lvl+0x100/0x190 [ 144.136060][ T8255] should_fail_ex.cold+0x5/0xa [ 144.136085][ T8255] strncpy_from_user+0x3b/0x2d0 [ 144.136113][ T8255] do_getname+0x78/0x390 [ 144.136144][ T8255] __ia32_sys_mknodat+0xa0/0xf0 [ 144.136169][ T8255] __do_fast_syscall_32+0x13a/0x8b0 [ 144.136198][ T8255] ? lockdep_hardirqs_on+0x7d/0x110 [ 144.136227][ T8255] do_fast_syscall_32+0x32/0x70 [ 144.136255][ T8255] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 144.136280][ T8255] RIP: 0023:0xf7fc3fec [ 144.136299][ T8255] Code: Unable to access opcode bytes at 0xf7fc3fc2. [ 144.136308][ T8255] RSP: 002b:00000000f546550c EFLAGS: 00000292 ORIG_RAX: 0000000000000129 [ 144.136326][ T8255] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000040 [ 144.136337][ T8255] RDX: 0000000000000100 RSI: 0000000000000708 RDI: 0000000000000000 [ 144.136349][ T8255] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 144.136359][ T8255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.136369][ T8255] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 144.136393][ T8255] [ 144.156835][ T70] usb usb42-port1: unable to enumerate USB device [ 144.227397][ T8255] wg2 speed is unknown, defaulting to 1000 [ 144.582979][ T8274] netlink: 'syz.5.500': attribute type 23 has an invalid length. [ 144.669853][ T8276] netlink: 'syz.4.501': attribute type 2 has an invalid length. [ 144.861599][ T234] IPVS: starting estimator thread 0... [ 144.974232][ T8289] IPVS: using max 44 ests per chain, 105600 per kthread [ 145.051947][ T8292] wg2 speed is unknown, defaulting to 1000 [ 145.092663][ T8293] netlink: 'syz.2.504': attribute type 4 has an invalid length. [ 145.144306][ T8287] FAULT_INJECTION: forcing a failure. [ 145.144306][ T8287] name failslab, interval 1, probability 0, space 0, times 0 [ 145.144329][ T8287] CPU: 1 UID: 0 PID: 8287 Comm: syz.5.503 Tainted: G L syzkaller #0 PREEMPT(full) [ 145.144346][ T8287] Tainted: [L]=SOFTLOCKUP [ 145.144350][ T8287] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 145.144357][ T8287] Call Trace: [ 145.144361][ T8287] [ 145.144366][ T8287] dump_stack_lvl+0x100/0x190 [ 145.144384][ T8287] should_fail_ex.cold+0x5/0xa [ 145.144399][ T8287] should_failslab+0xc2/0x120 [ 145.144414][ T8287] __kmalloc_cache_noprof+0x91/0x6d0 [ 145.144460][ T8287] ? fuse_dev_alloc_no_pq+0x3c/0x180 [ 145.144479][ T8287] fuse_dev_alloc_no_pq+0x3c/0x180 [ 145.144494][ T8287] fuse_dev_alloc_install+0x15/0xb0 [ 145.144512][ T8287] cuse_channel_open+0x133/0x8f0 [ 145.144526][ T8287] ? __pfx_cuse_channel_open+0x10/0x10 [ 145.144540][ T8287] misc_open+0x26d/0x450 [ 145.144552][ T8287] ? __pfx_misc_open+0x10/0x10 [ 145.144564][ T8287] chrdev_open+0x234/0x6a0 [ 145.144577][ T8287] ? __pfx_apparmor_file_open+0x10/0x10 [ 145.144600][ T8287] ? __pfx_chrdev_open+0x10/0x10 [ 145.144620][ T8287] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 145.144646][ T8287] do_dentry_open+0x6ab/0x14d0 [ 145.144667][ T8287] ? __pfx_chrdev_open+0x10/0x10 [ 145.144691][ T8287] vfs_open+0x82/0x3f0 [ 145.144717][ T8287] path_openat+0x19fa/0x2440 [ 145.144739][ T8287] ? __pfx_path_openat+0x10/0x10 [ 145.144766][ T8287] do_file_open+0x20e/0x430 [ 145.144790][ T8287] ? __pfx_do_file_open+0x10/0x10 [ 145.144828][ T8287] ? _raw_spin_unlock+0x28/0x50 [ 145.144848][ T8287] ? alloc_fd+0x471/0x7a0 [ 145.144876][ T8287] do_sys_openat2+0x10f/0x1e0 [ 145.144902][ T8287] ? __pfx_do_sys_openat2+0x10/0x10 [ 145.144926][ T8287] __ia32_compat_sys_openat+0x12d/0x210 [ 145.144943][ T8287] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 145.144965][ T8287] __do_fast_syscall_32+0x13a/0x8b0 [ 145.144983][ T8287] do_fast_syscall_32+0x32/0x70 [ 145.145000][ T8287] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 145.145014][ T8287] RIP: 0023:0xf708efec [ 145.145026][ T8287] Code: Unable to access opcode bytes at 0xf708efc2. [ 145.145032][ T8287] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 145.145043][ T8287] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000080 [ 145.145051][ T8287] RDX: 0000000000002842 RSI: 0000000000000000 RDI: 0000000000000000 [ 145.145058][ T8287] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 145.145066][ T8287] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 145.145072][ T8287] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 145.145085][ T8287] [ 145.406998][ T8298] FAULT_INJECTION: forcing a failure. [ 145.406998][ T8298] name failslab, interval 1, probability 0, space 0, times 0 [ 145.407031][ T8298] CPU: 2 UID: 0 PID: 8298 Comm: syz.2.505 Tainted: G L syzkaller #0 PREEMPT(full) [ 145.407057][ T8298] Tainted: [L]=SOFTLOCKUP [ 145.407064][ T8298] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 145.407075][ T8298] Call Trace: [ 145.407081][ T8298] [ 145.407089][ T8298] dump_stack_lvl+0x100/0x190 [ 145.407120][ T8298] should_fail_ex.cold+0x5/0xa [ 145.407145][ T8298] should_failslab+0xc2/0x120 [ 145.407170][ T8298] __kmalloc_noprof+0xfc/0x840 [ 145.407192][ T8298] ? sock_kmalloc+0x111/0x170 [ 145.407225][ T8298] sock_kmalloc+0x111/0x170 [ 145.407254][ T8298] af_alg_alloc_areq+0x9e/0x250 [ 145.407282][ T8298] skcipher_recvmsg+0x75d/0xec0 [ 145.407312][ T8298] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 145.407336][ T8298] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 145.407356][ T8298] sock_recvmsg+0x1d5/0x220 [ 145.407386][ T8298] ____sys_recvmsg+0x21e/0x670 [ 145.407408][ T8298] ? __pfx_____sys_recvmsg+0x10/0x10 [ 145.407435][ T8298] ? __lock_acquire+0x5c0/0x1f40 [ 145.407474][ T8298] ___sys_recvmsg+0x16a/0x1a0 [ 145.407495][ T8298] ? __pfx____sys_recvmsg+0x10/0x10 [ 145.407515][ T8298] ? lock_acquire+0x1d1/0x380 [ 145.407541][ T8298] ? __fget_files+0x34/0x3d0 [ 145.407562][ T8298] ? find_held_lock+0x2b/0x80 [ 145.407599][ T8298] __sys_recvmsg+0x15d/0x210 [ 145.407625][ T8298] ? __pfx___sys_recvmsg+0x10/0x10 [ 145.407665][ T8298] __do_fast_syscall_32+0x13a/0x8b0 [ 145.407699][ T8298] do_fast_syscall_32+0x32/0x70 [ 145.407728][ T8298] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 145.407752][ T8298] RIP: 0023:0xf6fdefec [ 145.407772][ T8298] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 145.407779][ T8298] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000174 [ 145.407798][ T8298] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800005c0 [ 145.407810][ T8298] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 145.407821][ T8298] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 145.407832][ T8298] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 145.407845][ T8298] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 145.407871][ T8298] [ 145.580301][ T8304] IPVS: set_ctl: invalid protocol: 1 224.0.0.2:21 [ 145.741766][ T8307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.508'. [ 145.741786][ T8307] netlink: 'syz.0.508': attribute type 2 has an invalid length. [ 145.793882][ T8310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.508'. [ 145.793902][ T8310] netlink: 'syz.0.508': attribute type 2 has an invalid length. [ 145.931879][ T8318] netlink: 8 bytes leftover after parsing attributes in process `syz.4.510'. [ 145.953537][ T5091] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 145.999142][ T8314] netlink: 'syz.4.510': attribute type 1 has an invalid length. [ 146.121530][ T5091] usb 10-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 146.122360][ T5091] usb 10-1: config 1 has an invalid interface number: 7 but max is 0 [ 146.122373][ T5091] usb 10-1: config 1 has no interface number 0 [ 146.122391][ T5091] usb 10-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 32 [ 146.122403][ T5091] usb 10-1: config 1 interface 7 altsetting 0 bulk endpoint 0xB has invalid maxpacket 16 [ 146.122414][ T5091] usb 10-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 146.124561][ T5091] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.124579][ T5091] usb 10-1: Product: syz [ 146.124590][ T5091] usb 10-1: Manufacturer: syz [ 146.124601][ T5091] usb 10-1: SerialNumber: syz [ 146.129169][ T8302] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 146.129303][ T8302] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 146.131434][ T5091] usb 10-1: Expected 3 endpoints, found: 2 [ 146.313112][ T8338] ------------[ cut here ]------------ [ 146.313121][ T8338] len >= 65536u [ 146.313126][ T8338] WARNING: ./include/linux/udp.h:49 at udp_v6_send_skb+0xf0f/0x13c0, CPU#1: syz.2.512/8338 [ 146.320215][ T8338] Modules linked in: [ 146.321840][ T8338] CPU: 1 UID: 0 PID: 8338 Comm: syz.2.512 Tainted: G L syzkaller #0 PREEMPT(full) [ 146.326201][ T8338] Tainted: [L]=SOFTLOCKUP [ 146.327880][ T8338] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 146.331607][ T8338] RIP: 0010:udp_v6_send_skb+0xf0f/0x13c0 [ 146.333651][ T8338] Code: 0b 90 49 8d af ff ff 00 00 48 89 e8 4c 29 f0 41 29 c5 44 89 6c 24 1c 45 8d 7d f8 90 0f 0b 90 e9 4a f2 ff ff e8 f2 b2 89 f7 90 <0f> 0b 90 e9 29 f3 ff ff e8 e4 b2 89 f7 89 de bf 97 ff ff ff e8 48 [ 146.340523][ T8338] RSP: 0018:ffffc90003977910 EFLAGS: 00010293 [ 146.342908][ T8338] RAX: 0000000000000000 RBX: 000000000001ffb4 RCX: 0000000000000000 [ 146.346285][ T8338] RDX: ffff888028e94b00 RSI: ffffffff8a81aede RDI: ffff888028e94b00 [ 146.349389][ T8338] RBP: ffff888023f3f780 R08: 0000000000000005 R09: 000000000000ffff [ 146.352684][ T8338] R10: 000000000001ffb4 R11: 0000000000000000 R12: ffff88802429f208 [ 146.356048][ T8338] R13: 000000000000200e R14: ffff888023f3f758 R15: 000000000001ffac [ 146.359148][ T8338] FS: 0000000000000000(0000) GS:ffff888096a60000(0063) knlGS:00000000f538bb40 [ 146.362880][ T8338] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 146.365750][ T8338] CR2: 00007fc2665ea6b0 CR3: 000000002911b000 CR4: 0000000000352ef0 [ 146.368209][ T8338] Call Trace: [ 146.369262][ T8338] [ 146.370215][ T8338] udp_v6_push_pending_frames+0x96/0x160 [ 146.371979][ T8338] udpv6_sendmsg+0x1d17/0x2c20 [ 146.373708][ T8338] ? __pfx_aa_inet_msg_perm+0x10/0x10 [ 146.376035][ T8338] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 146.377865][ T8338] ? __futex_wait+0x256/0x300 [ 146.379364][ T8338] ? __lock_acquire+0x5c0/0x1f40 [ 146.380952][ T8338] ? aa_sock_msg_perm+0x11e/0x200 [ 146.382713][ T8338] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 146.384597][ T8338] ? inet6_sendmsg+0x105/0x140 [ 146.386322][ T8338] inet6_sendmsg+0x105/0x140 [ 146.387791][ T8338] __sys_sendto+0x36d/0x4e0 [ 146.389557][ T8338] ? __pfx___sys_sendto+0x10/0x10 [ 146.391163][ T8338] __ia32_sys_sendto+0xdd/0x1b0 [ 146.392709][ T8338] ? __do_fast_syscall_32+0xb3/0x8b0 [ 146.394597][ T8338] ? lockdep_hardirqs_on+0x7d/0x110 [ 146.396265][ T8338] __do_fast_syscall_32+0x13a/0x8b0 [ 146.397918][ T8338] do_fast_syscall_32+0x32/0x70 [ 146.399476][ T8338] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 146.401486][ T8338] RIP: 0023:0xf6fdefec [ 146.402802][ T8338] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 146.405145][ T8338] RSP: 002b:00000000f538b50c EFLAGS: 00000292 ORIG_RAX: 0000000000000171 [ 146.407713][ T8338] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000000 [ 146.410139][ T8338] RDX: 0000000000000000 RSI: 0000000000004010 RDI: 0000000000000000 [ 146.412628][ T8338] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 146.415369][ T8338] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 146.417846][ T8338] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 146.420310][ T8338] [ 146.421300][ T8338] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 146.423581][ T8338] CPU: 1 UID: 0 PID: 8338 Comm: syz.2.512 Tainted: G L syzkaller #0 PREEMPT(full) [ 146.426925][ T8338] Tainted: [L]=SOFTLOCKUP [ 146.428278][ T8338] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 146.431409][ T8338] Call Trace: [ 146.432478][ T8338] [ 146.433418][ T8338] dump_stack_lvl+0x100/0x190 [ 146.434905][ T8338] vpanic+0x553/0x970 [ 146.436179][ T8338] ? __pfx_vpanic+0x10/0x10 [ 146.437620][ T8338] panic+0xd1/0xe0 [ 146.438811][ T8338] ? __pfx_panic+0x10/0x10 [ 146.440223][ T8338] check_panic_on_warn.cold+0x19/0x34 [ 146.442044][ T8338] ? udp_v6_send_skb+0xf0f/0x13c0 [ 146.444178][ T8338] __warn.cold+0x191/0x318 [ 146.446088][ T8338] __report_bug+0x30f/0x440 [ 146.447960][ T8338] ? udp_v6_send_skb+0xf0f/0x13c0 [ 146.450026][ T8338] ? __pfx___report_bug+0x10/0x10 [ 146.451895][ T8338] ? __flow_hash_from_keys+0xa2/0x4f0 [ 146.453604][ T8338] ? flow_hash_from_keys+0x76/0x120 [ 146.455339][ T8338] ? __pfx_flow_hash_from_keys+0x10/0x10 [ 146.457402][ T8338] ? __asan_memcpy+0x3c/0x60 [ 146.458897][ T8338] ? udp_v6_send_skb+0xf0f/0x13c0 [ 146.460484][ T8338] report_bug+0xb3/0x220 [ 146.461827][ T8338] ? udp_v6_send_skb+0xf0f/0x13c0 [ 146.463403][ T8338] handle_bug+0x16a/0x2a0 [ 146.464797][ T8338] exc_invalid_op+0x17/0x50 [ 146.466260][ T8338] asm_exc_invalid_op+0x1a/0x20 [ 146.467792][ T8338] RIP: 0010:udp_v6_send_skb+0xf0f/0x13c0 [ 146.469561][ T8338] Code: 0b 90 49 8d af ff ff 00 00 48 89 e8 4c 29 f0 41 29 c5 44 89 6c 24 1c 45 8d 7d f8 90 0f 0b 90 e9 4a f2 ff ff e8 f2 b2 89 f7 90 <0f> 0b 90 e9 29 f3 ff ff e8 e4 b2 89 f7 89 de bf 97 ff ff ff e8 48 [ 146.475721][ T8338] RSP: 0018:ffffc90003977910 EFLAGS: 00010293 [ 146.477668][ T8338] RAX: 0000000000000000 RBX: 000000000001ffb4 RCX: 0000000000000000 [ 146.480133][ T8338] RDX: ffff888028e94b00 RSI: ffffffff8a81aede RDI: ffff888028e94b00 [ 146.482599][ T8338] RBP: ffff888023f3f780 R08: 0000000000000005 R09: 000000000000ffff [ 146.485127][ T8338] R10: 000000000001ffb4 R11: 0000000000000000 R12: ffff88802429f208 [ 146.487890][ T8338] R13: 000000000000200e R14: ffff888023f3f758 R15: 000000000001ffac [ 146.490365][ T8338] ? udp_v6_send_skb+0xf0e/0x13c0 [ 146.491949][ T8338] udp_v6_push_pending_frames+0x96/0x160 [ 146.493703][ T8338] udpv6_sendmsg+0x1d17/0x2c20 [ 146.495326][ T8338] ? __pfx_aa_inet_msg_perm+0x10/0x10 [ 146.497351][ T8338] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 146.498975][ T8338] ? __futex_wait+0x256/0x300 [ 146.500476][ T8338] ? __lock_acquire+0x5c0/0x1f40 [ 146.502053][ T8338] ? aa_sock_msg_perm+0x11e/0x200 [ 146.503647][ T8338] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 146.505331][ T8338] ? inet6_sendmsg+0x105/0x140 [ 146.506835][ T8338] inet6_sendmsg+0x105/0x140 [ 146.508238][ T8338] __sys_sendto+0x36d/0x4e0 [ 146.509684][ T8338] ? __pfx___sys_sendto+0x10/0x10 [ 146.511262][ T8338] __ia32_sys_sendto+0xdd/0x1b0 [ 146.512820][ T8338] ? __do_fast_syscall_32+0xb3/0x8b0 [ 146.514492][ T8338] ? lockdep_hardirqs_on+0x7d/0x110 [ 146.516133][ T8338] __do_fast_syscall_32+0x13a/0x8b0 [ 146.517802][ T8338] do_fast_syscall_32+0x32/0x70 [ 146.519339][ T8338] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 146.521337][ T8338] RIP: 0023:0xf6fdefec [ 146.522637][ T8338] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 146.524743][ T8338] RSP: 002b:00000000f538b50c EFLAGS: 00000292 ORIG_RAX: 0000000000000171 [ 146.527342][ T8338] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000000 [ 146.529832][ T8338] RDX: 0000000000000000 RSI: 0000000000004010 RDI: 0000000000000000 [ 146.532304][ T8338] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 146.534817][ T8338] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 146.537287][ T8338] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 146.539760][ T8338] [ 146.541281][ T8338] Kernel Offset: disabled [ 146.542649][ T8338] Rebooting in 86400 seconds..