last executing test programs: 1m4.680882949s ago: executing program 1 (id=2): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x1d, 0x2, 0x6) r3 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000002c0)={'vxcan0\x00', 0x0}) r5 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x0, 0x0) ioprio_set$pid(0x3, r5, 0x2000) bind$can_j1939(r2, &(0x7f0000000380)={0x1d, r4, 0x2, {0x2, 0x0, 0x2}}, 0x18) connect$packet(r1, &(0x7f0000000040)={0x11, 0x10, r4, 0x1, 0x4, 0x6, @local}, 0x14) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000002140)=@filter={'filter\x00', 0x4, 0x4, 0xbd8, 0xffffffff, 0xec, 0xa44, 0x0, 0xfeffffff, 0xffffffff, 0xb10, 0xb10, 0xb10, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa4, 0xec}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0x910, 0x958, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x400, 0x3}, {0x2, 0x2}, {0xb, 0x3}, {0x925e, 0x2}, {0x63f}, {0x7}, {0x2, 0x1}, {0x9, 0x2}, {0x3ff}, {0x2, 0x2}, {0x3, 0x1}], [{0x4, 0x37}, {0x7, 0x8}, {0x7, 0x5}, {0x9, 0xa3a}, {0x800, 0x2}, {0xffffffff, 0x1a}, {0xb}, {0x7, 0x7fffffff}, {0x7, 0x2}, {0x1c000}, {0x4a, 0x3}], 0x8, 0xfd}, {[{0x8000}, {0x1}, {0x10000000, 0x1}, {0x6, 0x3}, {0x3, 0x1}, {0x2, 0x3}, {0x0, 0x3}, {0xcb5f, 0x1}, {0x10, 0x1}, {0x1, 0x2}, {0x3, 0x3}], [{0x4, 0x8}, {0x76a, 0x2}, {0x8, 0x8}, {0x0, 0x80}, {0x36, 0x7}, {0xfffffff8, 0x3}, {0x1, 0x1}, {0x5, 0xc036}, {0x76c1, 0x9}, {0x3, 0x80000001}, {0x81, 0x101}], 0x0, 0x2}, {[{0x1, 0x1}, {0x2}, {0x10}, {0x9}, {0x3, 0x3}, {0xa, 0x2}, {0x3}, {0xb4f, 0x3}, {0x9, 0x3}, {0x9}, {0x2}], [{0xb4, 0x8001}, {0x200, 0x6}, {0x9, 0x2}, {0x4, 0x8}, {0x6a6, 0x9}, {0x3, 0x1}, {0x2, 0xb}, {0x7c, 0xffffffff}, {0x3}, {0x2, 0x7}, {0x3, 0x69}], 0x0, 0x2}, {[{0x8}, {0x3, 0x1}, {0x3}, {0x5089}, {0x9, 0x3}, {0x20004, 0x2}, {0x200, 0x2}, {0x100, 0x3}, {0x4, 0x2}, {0x7, 0x2}, {0x6, 0x1}], [{0x3, 0x9}, {0x7f, 0x6}, {0xd249, 0x3}, {0xffff, 0x4}, {0x6}, {0x4}, {0xffff, 0x2}, {0x5}, {0xfffff801, 0xe7af}, {0x1, 0x6}, {0x4, 0x2}], 0x6, 0x8}, {[{0x10, 0x1}, {0x6, 0x3}, {0x7fff}, {0x0, 0x2}, {0x4, 0x894e7f5467b97080}, {0x2, 0x6ac4b34ff08f9ee8}, {0x85e, 0x2}, {0x2, 0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x7, 0x1}], [{0x6, 0x86}, {0xfffffff6, 0x2}, {0x3b41, 0x3}, {0x10000, 0x1}, {0x4, 0x6}, {0xfffffff8, 0xb3b}, {0xfffffffe, 0x7e98}, {0x3, 0xfffffff8}, {0x6a, 0xc00000}, {0xff, 0x3}, {0xfffffffe, 0x9}], 0x5, 0x8}, {[{0x7, 0x1}, {0x8, 0x1}, {0x2}, {0x8000000, 0x2}, {0x0, 0x3}, {0xc}, {0x14fe, 0x3}, {0xd}, {0x400, 0x3}, {0xd, 0x3}, {0x4, 0x2}], [{0x13c, 0x1}, {0xfffffff7, 0x3}, {0x9c0, 0x81}, {0x7, 0xffff}, {0x1}, {0x360, 0x2}, {0x8, 0x2}, {0x9, 0xffffff7f}, {0x1, 0xffff}, {0x1, 0x51f}, {0x2, 0x59}], 0xa, 0x1}, {[{0x9, 0x3}, {0x6, 0x2}, {0x7, 0x3}, {0x8}, {0x8000}, {0xebe8, 0x1}, {0x4, 0x2}, {0x4, 0x1}, {0x5afa, 0x1}, {0x7, 0x3}, {0x9}], [{0x3, 0x7fff}, {0x2, 0x4}, {0x8000, 0x5}, {0x1, 0xe}, {0x85c, 0x40b9f494}, {0x4, 0x8000}, {0xfffffffb, 0xc}, {0x1, 0x7fffffff}, {0xe0000000, 0x2}, {0x4, 0x9}, {0x6, 0xe94}], 0x1, 0xb}, {[{0x401, 0x1}, {0x6, 0x2}, {0x10000, 0x1}, {0x7, 0x1}, {0x2f, 0x2}, {0xffffffff}, {0x400, 0x3}, {0x6, 0x1}, {0x40, 0x3}, {0x7}, {0x8}], [{0x7, 0x28}, {0xbb3d, 0xfffffffa}, {0x40, 0x4}, {0x6, 0x8e}, {0x8, 0x9}, {0xff, 0x3}, {0x83a, 0x2}, {0x7, 0x6}, {0x8}, {0x6, 0x3}, {0x10000, 0x7fffffff}], 0x5, 0x3}, {[{0x401, 0x1}, {0xfffffffe, 0x2}, {0x6, 0x1}, {0xc3}, {0x7}, {0x400}, {0x5, 0x3}, {0x3, 0x3}, {0xf, 0x3}, {0x0, 0x3}, {0x8, 0x2}], [{0x6}, {0x2, 0x8}, {0x8, 0x8}, {0x7fffffff, 0x9}, {0x101, 0x74243d4b}, {0x8, 0x6}, {0xfffffffd, 0x4d7}, {0x8, 0x800}, {0x2, 0x8}, {0x0, 0x101}, {0x14, 0x5f}], 0x4, 0x6}, {[{0x6, 0x1}, {0x2, 0x1}, {0x498, 0x1}, {0xe}, {0x3}, {0xf, 0x2}, {0xe9, 0x1}, {0x0, 0x2}, {0x80000000, 0x2}, {0x2, 0xb1a7e34e235cc1e2}, {0x8}], [{0x100, 0xfffffff7}, {0x10000, 0xe37e}, {0x8, 0x6}, {0x7, 0x8}, {0x10000, 0x5}, {0xff, 0x1}, {0x1}, {0x5, 0x2}, {0x0, 0x100}, {0x5, 0x4}, {0x8, 0xd17}], 0x8, 0x3}, {[{0x6, 0x2}, {0x4, 0x1}, {0x22cb, 0x3}, {0x7fff}, {0x7, 0x3}, {0xc, 0x1}, {0xc77, 0x2}, {0x5, 0x2}, {0x40, 0x1}, {0xfffffffc, 0x2}, {0xfff, 0x2}], [{0x3, 0x5ff3d9bc}, {0x9, 0xd}, {0x3, 0x2}, {0x4dd3, 0xc9c}, {0x8}, {0x100, 0xd}, {0x3, 0x2}, {0xfffffffb, 0x1}, {0x7454}, {0x0, 0x5}, {0x1, 0x9}], 0x4, 0x2}], 0x1}}, @common=@srh1={{0x8c}, {0x5e, 0x58, 0x9, 0x6, 0x69f, @mcast1, @empty, @private0, [0xffffff00, 0xff0000ff, 0xffffffff], [0x0, 0xffffff00, 0xffffffff, 0xffffff00], [0xffffff00, 0x0, 0xff000000, 0xff000000], 0x200, 0x8}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x14865e40, {0x6}}}}, {{@ipv6={@mcast1, @loopback, [0xffffffff, 0xff000000, 0xffffff00, 0xffffff00], [0xffffff00, 0x0, 0x0, 0xffffffff], 'dvmrp0\x00', 'veth0_vlan\x00', {0xff}, {}, 0x5c, 0x3a, 0x0, 0x5}, 0x0, 0xa4, 0xcc}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x8, 0x1}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0xc34) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000002f00090027bd7000000000000000000004001e090000000000000000fe80edff0000000000000000000000aa"], 0x30}, 0x1, 0x0, 0x0, 0x42804}, 0x10) r7 = open(&(0x7f0000000180)='./file1/file3\x00', 0x0, 0xaa) fcntl$getownex(r7, 0x11, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r8 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r8, 0x2) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r2) sendmsg$DEVLINK_CMD_TRAP_SET(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r1, @ANYRES16=r9, @ANYBLOB="04002abd7000ffdbdf253e000000080001007063690011000200303030303a30303a31302e30000000001c0082007358757263655f6d61635f690900000000000000617374000500830000000000080001007063690011000200303030303a30303a31302e30000000001c0082d37187cbfbb399e61c2423eaed2a8800736f757263655f6d61635f69735f6d756c"], 0x94}, 0x1, 0x0, 0x0, 0x40051}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x132) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f000053f000/0x4000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e) r10 = userfaultfd(0x80001) ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268}) ioctl$UFFDIO_REGISTER(r10, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) ioctl$UFFDIO_COPY(r10, 0xc028aa03, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="15000000da00000030302e4c"], 0x15) 1m4.411049165s ago: executing program 1 (id=5): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./sys/kernel/tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/kernel/tracing/dynamic_events\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='e:my_eprobe sched/sched_switch\n\x00', 0x1f) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/kernel/tracing/instances/A\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/kernel/tracing/instances/B\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/kernel/tracing/instances/A/events/eprobes/my_eprobe/enable\x00', 0x2, 0x0) write(r1, &(0x7f0000000900)='1\n\x00', 0x2) write(r1, &(0x7f0000000c00)='0\n\x00', 0x2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x20, 0x1e, 0x301, 0x20000002, 0x0, {0x1}, [@nested={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x4004000) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000500)=0xd79d, 0x4) write(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0)={0x0, 0x7fff}, &(0x7f0000000200)=0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000940)={0x1c, r4, 0x300, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r6) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r8, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8004) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r7) 1m3.499044778s ago: executing program 1 (id=6): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x97}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1fd) mount(0x0, &(0x7f0000000400)='./dev\x00', &(0x7f0000000450)='devtmpfs\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000401e09030001000102000109022700010100c0320904000003ffffff00070581034000010705020240"], 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/ttyUSB0\x00', 0x2, 0x0) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x7, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000300)={[0x2, 0x9, 0xfffffffffffffffd, 0x8000000000000001, 0x0, 0x70d, 0x4002004c1, 0x1004, 0x3ff, 0xc595, 0x7, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2839d1}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) write(r2, &(0x7f0000000500)="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", 0x12e) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90f24fc60", 0x8c0}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000900)="928e04b416cac951c35f7f4586e6", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 47.833958852s ago: executing program 32 (id=6): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x97}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1fd) mount(0x0, &(0x7f0000000400)='./dev\x00', &(0x7f0000000450)='devtmpfs\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000401e09030001000102000109022700010100c0320904000003ffffff00070581034000010705020240"], 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/ttyUSB0\x00', 0x2, 0x0) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x7, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000300)={[0x2, 0x9, 0xfffffffffffffffd, 0x8000000000000001, 0x0, 0x70d, 0x4002004c1, 0x1004, 0x3ff, 0xc595, 0x7, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2839d1}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) write(r2, &(0x7f0000000500)="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", 0x12e) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90f24fc60", 0x8c0}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000900)="928e04b416cac951c35f7f4586e6", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 41.050441787s ago: executing program 3 (id=116): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fedbdf255e04000008000300", @ANYRES32=r2], 0x24}, 0x1, 0x0, 0x0, 0x4048800}, 0x20004040) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/ipv4/conf/all/route_localnet\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r4 = socket$unix(0x1, 0x1, 0x0) connect$unix(r4, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(0xffffffffffffffff, 0x802) r5 = socket$netlink(0x10, 0x3, 0x4) write(r5, 0x0, 0x0) r6 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000000)={0x2, 0x1bd, @loopback}, 0x10) listen(r7, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='cifs\x00', 0x0, &(0x7f0000000500)='username=guest,password=guest,nodfs,vers=3.0\x00') write(0xffffffffffffffff, &(0x7f0000000600)="00000081fe534d42400000000000000000000100010000000000000000000000000000000000000000000000000000000000000000000000410001000003000000000000000000000000000000000000000000000000010000000100000001000000000000000000000000000008100000000000000000000000000000400000049fe534d4", 0x85) write(r3, &(0x7f0000000140)='1\n', 0x2) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r3, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="80000000", @ANYRES16=r8, @ANYBLOB="00040dbd7000fbdbdf25450000000800010070636900110002003030596b3a6ad3c41bfa333baa4dc935d430303a30303a31302e300000000008008e0003040000080001007063690011000200303030303a30303a31302e300000000008008e00ae145f84080001007063690011000200303038303a2a303a31302e300000000008008e0000"], 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x40018001) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000000)=0x1, 0x4) setsockopt$MRT_ADD_VIF(r9, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x0, @vifc_lcl_ifindex=0x1, @empty}, 0x10) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000006c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1e}, 0xfffffff5, 0x4, 0x6, 0x400, 0x9, 0x200}) r10 = socket$nl_route(0x10, 0x3, 0x0) write(r10, &(0x7f0000000080)="340000001a000100000000000000000002202000000000000000000008000100e0010203080002007f0000010800030001000000", 0x34) 39.949588968s ago: executing program 3 (id=118): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000000206010800000000000000000000003f0500010006000000050005000200000005000400000000000900020073797a310020000013000300686173683a6e65742c6966616365"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005700)=ANY=[@ANYBLOB="580000000906010200000000000000020200fdff300007800c00018008000140e8000001140017006261746164765f736c6176655f3000000c00028008000140640101010900020073797a31000000000500010007"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x40c0080) 38.556978319s ago: executing program 3 (id=126): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="010000000700000004da0000cdb95f5c747e5a05", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc01c5869, &(0x7f0000000140)={r1, &(0x7f0000000980)=')\x00\x12F\xdfR\xc4\xdb\x81\xe3\xc9\xc4\x1a\x7f9a2 \xfe\x9e\xc1W\x02\xce+\xa6\xdf\x91\xe0\x9d\x9dDE23-/\xbd}#\xbeRYE\x87\xbeM\x9b\xa1\xa5\xcf\xa6~\xeb\x13\xdcm\x81\xe7o\x93\xf6\xf8\x86\xcb\xc8N\xa5\xe4\xaba\x00\xe6g\x8er{\b\x8d\a\xfd\x15s\xef\r\x95\x1f\xfe\xf3\xad2\x91\x86\xb2g\xc1uh\x0f\xd8/\aQ\xb9\xdd\xe8\'|\xc4\xfa^\xe9\xf2^(\x92\x14~\x1e\x84\x817\xa2\xae&W\x19v\xeffR\xbe\xfdf\x99\xeeHS|H4N\xb4\x7f\b(\x1c\xee\x17P\x93\xb7\x02\xd5\xba\x8f\x9c\xfaJS\xcd\x02\x1a/\x1a|6\xa9\xc80\x1c\r\x88\x17V\x80\xe3x\xdb\xd4E\xd5\x96\x04_\xfc^\x80\x87J\x1a\x91\x0eZ', 0x402, &(0x7f0000000400)={@align=0x6, {0x161a, 0xf, 0x7, 0x9}}, 0x2, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x1ff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0x0, 0x6}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000780)="b9ff03076003008c9c18ed0f6fd2", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0xd, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r4, 0x4) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x2c, &(0x7f0000000680)=ANY=[@ANYBLOB="18009500"/17], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2}, 0x94) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r6, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x1}], 0x1, 0x8) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688a24c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_usb_connect(0x1, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r8, &(0x7f0000000a80)=""/188, 0xba) write$tun(r8, 0x0, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) r10 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r10, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r11 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r11, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffb}}, 0x2e) r12 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r12, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) r13 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r13, 0x40047438, &(0x7f0000000240)=0x2) write$ppp(r13, &(0x7f00000002c0)="65257aaba4d762037bd8b40be6d1f58dabec21c8fd6403d22bd65a", 0x1b) 35.340618554s ago: executing program 3 (id=143): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000002c80)='./file0\x00', &(0x7f00000004c0), 0x800, &(0x7f0000000140)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) r1 = epoll_create1(0x80000) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000600)={0xa}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}, {0x3, &(0x7f0000000040)=0x3, 0x2}], 0x2, 0x0, 0x0, 0x0) futex(&(0x7f0000000140)=0x2, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x2000004, 0x4001011, r4, 0x34da2000) syslog(0x2, &(0x7f00000001c0)=""/229, 0xe5) syslog(0x9, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mydev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./mydev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./mydev/ttyS0\x00', 0x802, 0x0) write$vga_arbiter(r6, &(0x7f0000000080)=ANY=[], 0xc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) 34.344720788s ago: executing program 3 (id=150): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x8c4}, 0x40984) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001140)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=r0, @ANYRES8=r2, @ANYRESDEC, @ANYRESDEC=r2, @ANYRESDEC=r2, @ANYRES8=r2], 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x40080c0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000340), 0x42101, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r3, 0x80083313, 0x0) writev(r3, &(0x7f0000000500)=[{&(0x7f0000000380)="7e6f949c", 0x4}], 0x1) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$sock_buf(r4, 0x1, 0x1a, &(0x7f0000000100)=""/4096, &(0x7f0000001100)=0x1000) mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x1f, &(0x7f0000000080)='size=4G%') 33.370346217s ago: executing program 3 (id=154): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002e00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000640)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f0000001440)=""/4106, 0x100a}], 0x1, 0x300, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r6, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) unlink(&(0x7f00000001c0)='./file0/file1\x00') r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) getdents64(r8, &(0x7f0000000100)=""/134, 0x86) syz_emit_ethernet(0x4a, &(0x7f0000000540)=ANY=[], 0x0) 33.254531272s ago: executing program 33 (id=154): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002e00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000640)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f0000001440)=""/4106, 0x100a}], 0x1, 0x300, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r6, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) unlink(&(0x7f00000001c0)='./file0/file1\x00') r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) getdents64(r8, &(0x7f0000000100)=""/134, 0x86) syz_emit_ethernet(0x4a, &(0x7f0000000540)=ANY=[], 0x0) 22.896893288s ago: executing program 4 (id=217): mkdirat(0xffffffffffffff9c, 0x0, 0x1c1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1100490, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="34003adc4345cab97d8d19321d1893e55962ed4d21b3c48f4df707c3f9d168b2a039c8fe883ebc"]) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xb, 0x0, 0x0) r2 = openat$binderfs(0xffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1100, 0x3}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f00000002c0)=[@acquire={0x40046305, 0x1}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000240)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001080)=@newtaction={0x180, 0x30, 0x1, 0x0, 0x0, {}, [{0x16c, 0x1, [@m_sample={0x13c, 0xa, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x7ff, 0x1, 0x7, 0x7, 0x8000}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xfffff000}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x37b5a61}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}]}, {0xe0, 0x6, "e304ac8d3cf5d13083cf69aaf30c9f7dd5ff72f2fdfd3fc2d5874dbd3b252346a1528bc33517b2af31283b3cfa51dd6f1af78d6f5332d947cf7dda704b357afedbbf232ab7f366a68e4145d82f3238bd2e1e5eea1d9736bbb348605dddd3647f53d460fa2e2732f75157dea0c72e35646275fb5987dc20d4c5a89791b226a1fa5728c7c19c258400e4c1a22cd4a912c4e1800cc8992ca3818510abc3e8336c0795d6373a13bd217d3eba5e9b595d016737f033cac00fd29a368a72a76a05f7e2d8765a4a0a60073d30082f13b0eed6019328b407f65813a568b03993"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x904}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a3000000000d0000000160a01000000000000000000010000010900010073797a30000000000900020073797a3000000000a40003800800014000000000900003801400010076657468305f746f5f62617461647600140001006d6163766c616e3100000000000000002800010076657468310000000000000000000000140001006772653000000000000000000000000014000100776c616e3100000000000000000000001400010076657468315f766972745f77696669001400010076657468305f746f5f626f6e640000000800024000000006c8000000180a0101000b000000000000010000000900010073797a30000000009c0003800800014000000000900003801400010069703665727370616e300000000000001400010076657468305f6d61637674616ff7000014000100626f6e645f736c61"], 0x1e0}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001c80)={0x0, 0x0, 0x0}, 0x4000) socket$inet6(0xa, 0x80002, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0xa20, 0x0, 0x11, 0x148, 0xb8, 0x0, 0x98c, 0x2a8, 0x2a8, 0x98c, 0x2a8, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010102, @multicast2, 0x0, 0xff000000, 'wg1\x00', 'ip6tnl0\x00', {}, {}, 0x67, 0x3, 0x2}, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x7fffffff, {0x8000}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0xff, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x0, 0x1}, 0x0, 0x874, 0x8d4, 0x0, {}, [@common=@ttl={{0x24}, {0x2, 0x40}}, @common=@unspec=@u32={{0x7e0}, {[{[{0xff}, {0x5a4, 0x1}, {0xa1, 0x3}, {0xfff, 0x1}, {0x40, 0x2}, {0x1ff, 0x3}, {0x6, 0x3}, {0x81, 0x2}, {0x9, 0x2}, {0x7fffffff, 0x2}, {0x23, 0x2}], [{0x1, 0x9}, {0x404, 0x2}, {0x0, 0x7}, {0x1, 0x3ff}, {0x6, 0x9}, {0x7ff, 0x4}, {0x0, 0x5}, {0x800, 0x5}, {0x80, 0x2}, {0xd, 0x7fff0}, {0xe, 0x2}], 0x9}, {[{0xfffffffe, 0x2}, {0xec, 0x2}, {0x0, 0x2}, {0x0, 0x3}, {0x3, 0x1}, {0x0, 0x1}, {0xadc}, {0x200}, {0x9}, {0x10001, 0x2}, {0x3, 0x3}], [{0x3}, {0x0, 0x7bdded9}, {0x1, 0x1}, {0x6, 0x9}, {0xf, 0x5}, {0x7, 0x4}, {0x401, 0x1}, {0x1, 0x400}, {0xfb, 0xfffffffd}, {0xf8e, 0x1}, {0x8, 0xa}], 0x2, 0xa}, {[{0x2, 0x2}, {0x1}, {0x800}, {0x8, 0x3}, {0x6e, 0x2}, {0x2, 0x1}, {0x9, 0x3}, {0xe6, 0x1}, {0x0, 0x2}, {0x3, 0x3}, {0x1}], [{0x65, 0x8}, {0x7, 0x2}, {0x6, 0x8}, {0x3, 0x8}, {0x7, 0xe0}, {0x8, 0x4e}, {0x6, 0xe7d3}, {0x2, 0xef65}, {0x81e}, {0x1, 0x7fff}, {0x6, 0x100}], 0x1, 0x4}, {[{0x4, 0x2}, {0x400, 0x2}, {0x8, 0x2}, {0x260, 0x2}, {0x6}, {0x2, 0x2}, {0x9}, {0x1, 0x2}, {0x7, 0x2}, {0x7fffffff, 0x2}, {0x7}], [{0x1000, 0x4}, {0x6819, 0x3}, {0x80000000, 0xffff}, {0xd, 0x7}, {0x7fff, 0xfffffffc}, {0x101, 0x1000}, {0x1, 0xd0}, {0x29, 0x5}, {0x4, 0x7}, {0x40, 0xc2f1}, {0x7f, 0xebd}], 0xa, 0x6}, {[{0x2, 0x1}, {0x8, 0x1}, {0xe, 0x1}, {0x1, 0x1}, {0x3}, {0x2, 0x2}, {0x5, 0x1}, {0x10001}, {0x8, 0x1}, {0x1, 0x3}, {0xf, 0x3}], [{0x6, 0x4}, {0xd86, 0x9}, {0xa67c, 0x800}, {0x7, 0x8}, {0x1, 0x2}, {0xfffffffb, 0x8d}, {0x7}, {0x6, 0x80}, {0x9, 0x2}, {0x81, 0xb}, {0x8, 0x1}], 0x4, 0x7}, {[{0x6, 0x1}, {0x4}, {0x0, 0x2}, {0x4}, {0x3ff, 0x3}, {0xb135, 0x1}, {0xe4ab, 0x2}, {0x200, 0x2}, {0xa, 0x2}, {0x6}, {0x2, 0x2}], [{0x0, 0xa}, {0xa, 0x400}, {0x4, 0x9}, {0x8, 0x5}, {0x5, 0xb84}, {0x7, 0x9}, {0x300000, 0x1000}, {0x800, 0x4}, {0x5, 0x80}, {0x1, 0x3}, {0xa, 0x5}], 0x9, 0x8}, {[{0x5cae8a2b, 0x2}, {0x6, 0x3}, {0x58d8, 0x2}, {0x9c3, 0x1}, {0x5, 0x1}, {0x8}, {0x7}, {0x401, 0xc0875356c265fb1d}, {0x2, 0x2}, {0x6, 0x2}, {0x3}], [{0x3, 0x2}, {0x400, 0x3}, {0xfffffffd, 0xa}, {0xfffffffd, 0x5}, {0x80000001, 0x1}, {0x4, 0xf3}, {0xb}, {0x80000001, 0x3}, {0xc, 0x7}, {0xbaa6, 0x8}, {0x6ab60000, 0x4}], 0x4, 0xb}, {[{0x81}, {0x3}, {0x99, 0x1}, {0x7, 0x1}, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x2}, {0x4, 0x1}, {0x3}, {0x6c, 0x2}], [{0x8, 0x40}, {0x1, 0xe140}, {0x5, 0x1}, {0x3, 0x2}, {0x6, 0x7}, {0x2, 0x3}, {0x40, 0x80000000}, {0x5, 0x8}, {0x4, 0x2}, {0xffffffff, 0xffffffff}, {0x3, 0x41}], 0x2, 0x8}, {[{0x8}, {0xc}, {0x0, 0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x2, 0x3}, {0x5, 0x1}, {0x4}, {0x7, 0x2}, {0x8, 0x3}, {0x3}], [{0x4ff4, 0xfff}, {0x4, 0x6}, {0x7f4c, 0x9}, {0x8, 0x7fff}, {0x80000001, 0x401}, {0x9}, {0x7f, 0x1}, {0xfa, 0x8}, {0xce, 0x4}, {0xc131, 0x2}, {0x6}], 0x5, 0xa}, {[{0x80, 0x1}, {0x6, 0x1}, {0x101, 0x1}, {0x9, 0x1}, {0x5, 0x1}, {0x7ff, 0x2}, {0x6, 0x1}, {0x7, 0x3}, {0x6}, {0xa, 0x3}, {0x0, 0x2}], [{0xe000000, 0x3f2d}, {0x80000000, 0x1}, {0x7, 0x4}, {0x3, 0x8}, {0xa, 0xfffffffb}, {0x2b, 0xfffffff1}, {0x8, 0x601c}, {0x1, 0x682d69b7}, {0x4, 0x38000000}, {0x9, 0xb}, {0x7, 0x4}], 0x9, 0x8}, {[{0x800, 0x3}, {0xd02b, 0x3}, {0x9, 0x3}, {0x0, 0x2}, {0x2, 0x2}, {0x8c, 0x2}, {0x3, 0x1}, {0x8000, 0x1}, {0xfffffffd}, {0x7, 0x2}], [{0x9, 0x200}, {0x8, 0x10001}, {0x2, 0x401}, {0x6}, {0x2, 0x7ff}, {0x9, 0xfffffffd}, {0x7957, 0x7eed}, {0x7, 0x2}, {0x6}, {0x4, 0x1000}, {0xfffffff7, 0x9}], 0x1, 0x3}], 0x0, 0x8}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x5, 0x3, 0x0, 0x6, 0x1], 0x1, 0x1}, {0x1, [0x1, 0x0, 0x0, 0x4, 0x1, 0x3], 0x0, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0xa7c) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, r0, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="d800000000000000f9fffb7fffffffff00000000000000000200000000000000020000040000000000000000000000000200000008000000060000000000000009000000000000800000000000000000ff00000000000080031000000000000000000000000000e00400000b5a25d60058000000030000", @ANYRES32=r1, @ANYRES8=r8, @ANYBLOB="010000000400000000000000000000000000200037050000000000002b000000f90000003a2d285cc980000009c30000f3397cd86d4d928d14d3a461b60245898556c20600000000002b133b0800000000000000"], 0x0, 0x0, 0x0}) getdents(r9, 0x0, 0xdba75a4e464681ad) 21.858644658s ago: executing program 4 (id=222): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@flat=@weak_binder={0x77622a85, 0xb, 0x3}, @fd={0x66642a85, 0x0, r1}, @flat=@weak_handle={0x77682a85, 0x1115}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x2, 0x100000000000000, &(0x7f0000000880)="4a8e"}) 21.79854787s ago: executing program 4 (id=223): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000880)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000740)={&(0x7f0000000600)={0x50, r1, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0x4f}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x73}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x79}]}, 0x50}, 0x1, 0x0, 0x0, 0x4090}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf090000000000006609010000000000060000000b000000180100002020702500000000002020207b9af8ff00000000ad9100000000000037010000f8ffffffb702000008000000b70300000500000056000000060000002c93000000000000b5030000000000008500000005000000b70000000000000095"], &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x40) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan1\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000500)={'wpan1\x00'}) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r4, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000580)={0x6c, r5, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x9}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20}, 0x8011) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r7, 0x407, 0x100000) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r8, 0x4058534c, &(0x7f00000000c0)={0x80, 0x5, 0x7fff, 0x9, 0xbffff4f1, 0x2}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d00), r9) sendmsg$IEEE802154_LLSEC_ADD_KEY(r9, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r4, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r5, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 21.719562066s ago: executing program 4 (id=224): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, 0x0, 0xffffffffffffff9c, 0x0, 0x45) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./dummy\x00', 0x42, 0x1ff) ftruncate(r1, 0x30000) r2 = openat(r1, &(0x7f0000000200)='./trace\x00', 0x200201, 0xc8) r3 = openat$binfmt(0xffffff9c, 0x0, 0x41, 0x1ff) finit_module(r3, &(0x7f0000000080)='\x1e\x8c,\x94?\x11/k\xec\',\xdd-\x0e[[\xfb\xb4\x00', 0xf130d9180534d55e) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000080)) syz_io_uring_setup(0x50d1, &(0x7f0000000000)={0x0, 0xfffff7fe, 0x10000, 0x2, 0x333, 0x0, r4}, &(0x7f0000000080), &(0x7f0000000180), &(0x7f0000000000)) io_uring_enter(r4, 0x2000, 0xfffffffd, 0x48, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000500), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r5, 0xc0f8565c, &(0x7f0000000000)={0x0, 0x1000, 0x2, {0x2, @sliced={0x0, [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1001]}}}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@ipv6_getrule={0x1c, 0x22, 0x1, 0x70bd29, 0x25dfdbfe, {0xa, 0x10, 0x0, 0x6, 0x9, 0x0, 0x0, 0x5, 0x10}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x6}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000680)='fdinfo/3\x00') read$FUSE(r7, &(0x7f00000006c0)={0x2020}, 0x2020) r8 = accept4$phonet_pipe(r1, 0x0, &(0x7f00000000c0), 0x81000) dup(r8) write(r2, &(0x7f0000000300)='p:mygroup/myevent ./dummy:0x10000\n\x00', 0x22) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f0000002700)={{0x1, 0x7}, 0x100, './trace\x00'}) write(r2, &(0x7f0000000400)='p:mygroup/myevent ./dummy:0x20000\n\x00', 0x22) 21.648544168s ago: executing program 4 (id=225): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x0, 0x4, 0x7, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f00000004c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x800448d4, &(0x7f0000000040)={0x1, 0x3f, "f8ff00", 0xff, 0x3}) getsockopt$sock_timeval(r4, 0x1, 0x15, 0x0, &(0x7f0000000600)) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x380}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r6, 0x0, 0x0) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r7 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe4, 0x2, 0x0, 0x2}) fcntl$getown(r1, 0x9) 21.390544263s ago: executing program 4 (id=226): socket$kcm(0x2b, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x8, 0x8ab5, 0x10001, 0x20000000, 0x100, 0x4, 0x63dd1ea1, 0x1}, 0x0, 0x0, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000e306000000000000000000000085000000200000009500000000000000"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, &(0x7f0000000800)='rp_size=0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000) close(r0) unlinkat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff) sendfile(r2, r1, 0x0, 0x20000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r3, &(0x7f0000000140), 0x0, 0x20008005, 0x0, 0x0) recvfrom(r3, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000080)) sendfile(r2, r1, 0x0, 0x20000) sendfile(r2, r1, 0x0, 0x20000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(r2, 0x5514) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f00000005c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a84d0", 0x20, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x2, 0x98ca}, @sack_perm={0x4, 0x2}]}}}}}}}}, 0x0) sendfile(r2, r1, 0x0, 0x20000) 21.337391398s ago: executing program 34 (id=226): socket$kcm(0x2b, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x8, 0x8ab5, 0x10001, 0x20000000, 0x100, 0x4, 0x63dd1ea1, 0x1}, 0x0, 0x0, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000e306000000000000000000000085000000200000009500000000000000"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, &(0x7f0000000800)='rp_size=0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000) close(r0) unlinkat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff) sendfile(r2, r1, 0x0, 0x20000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r3, &(0x7f0000000140), 0x0, 0x20008005, 0x0, 0x0) recvfrom(r3, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000080)) sendfile(r2, r1, 0x0, 0x20000) sendfile(r2, r1, 0x0, 0x20000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$USBDEVFS_RESET(r2, 0x5514) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f00000005c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a84d0", 0x20, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x2, 0x98ca}, @sack_perm={0x4, 0x2}]}}}}}}}}, 0x0) sendfile(r2, r1, 0x0, 0x20000) 11.859872444s ago: executing program 6 (id=299): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x0, 0x4, 0x7, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f00000004c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x800448d4, &(0x7f0000000040)={0x1, 0x3f, "f8ff00", 0xff, 0x3}) getsockopt$sock_timeval(r4, 0x1, 0x15, 0x0, &(0x7f0000000600)) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x380}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)={0x0}}, 0x0) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r7 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe4, 0x2, 0x0, 0x2}) fcntl$getown(r1, 0x9) 11.426433413s ago: executing program 6 (id=304): mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)="303132333a61bd63643a30106c88588ae5cef5480fa39e940cfc0969e8fb942c441ba1b6e58246c21e14583eb4e82891be97a2e6ea953462b877c71cf5b8d60f586fd76c8f2ba207bd41b082e4d915f4c96186fccf21552491f5aea44dc6c189b0aed40651ef2f1c2cb10e81e37e81ac934969add421d574aa31b2cffe5ed3865103e23a0298ea2f3073aea97b6376cc3015d9058e076be1cb361a365466e30cec806b7330b7b02a9e5bbdeb3cf47a6db775313a723bc914d2c0068375692172adc4b67969b122a77cc15461a3398551a7132972f4280d40e90f831e4b97e67dd97a13471135343e075074f6a7107bb56089908694102cf923f46f2f05d78f3d0e7338d9c560ac30584b5fb9255ce472883610", 0x8) 11.425979114s ago: executing program 6 (id=306): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x16, 0x11, &(0x7f0000000c80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x23ffd, 0x0, 0x0, 0x0, 0x9}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) close(0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x44004000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x70bd26, 0x5dfdbff, {0x0, 0x0, 0x0, 0x0, 0xda23, 0x40000}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_vlan\x00'}]}, 0x34}, 0x1, 0x200000000000000, 0x0, 0x10}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0xe, 0x0, &(0x7f00000000c0)="000000f0000000ce94327fc1a80c", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 11.002744318s ago: executing program 6 (id=311): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) listns(&(0x7f0000000000)={0x20, 0x0, 0xc58}, &(0x7f0000000040)=[0x0], 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000000180)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x4, @private0, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}], 0x1, 0x931766f6319eed40) shutdown(r1, 0x1) syz_open_dev$video(&(0x7f00000000c0), 0x3, 0x404000) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000001c0)={0xb, 0x1c, 0x5, 0x8, 0x6, 0x8, 0xff, 0x6, 0x9, 0x5, 0x38, 0x5, 0xff, 0x6}, 0xe) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) shutdown(r1, 0x0) openat$cgroup(r2, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="5800000002060102000034e40000000000000008050005000a000000050001000600000005000400000000000900000012000300686173683a6e65742c706f72740000000c00078008000640000000010000000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x800) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="55000000080001004f00000008000300", @ANYRES32=r4, @ANYBLOB="0c009900050020005d000000"], 0x30}, 0x1, 0x0, 0x0, 0x20044041}, 0x24008000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010008bd7000fbdbdf2555000000080001006e00000008000300", @ANYRES32=r4, @ANYBLOB='0'], 0x24}, 0x1, 0x0, 0x0, 0x8c4}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00042abd7000fcdbdf250600000008000300", @ANYRES32=r4, @ANYBLOB="0c009900050000000900000008000500080000000a001800030303030303000005005300000000000a0018000303030303030000"], 0x50}, 0x1, 0x0, 0x0, 0x20002044}, 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fc000000000000000000000000000000060004400e1f00000500070088000000060005404e"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000000), 0x8) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000000), 0x8) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="2e0400001c008103e00f80ecdb4cb9f207c804b90f00000088080ffb0a00023e56c7f6c6384eb500c500c50083b84a08f451dc7e0567c9c8b50b6079c4c201f61f4e16a6e47b0eae2a0522bc6cc7e1d30fe617bf812542bf857757578a66bca9d4910855", 0x64}], 0x1, 0x0, 0x0, 0x5865}, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x7, 0x3, 0x5, 0x6, 0x2000}, 0x14) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000580)={0x0, 0x40c2, 0x100080, 0xffff, 0x2, [0x2], [0x80ffff, 0xc1], [0x0, 0xa8, 0xfffffffc], [0x400000000000007, 0xffffffff, 0x8]}) 10.920609246s ago: executing program 6 (id=312): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./tracing/events/s/p/enable\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/dlm/cluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/dlm/cluster/comms/1\x00', 0x1ff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x94, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x5c, 0x11, 0x0, 0x1, @counter={{0xc}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x800}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x300c1502}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x401}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x80}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}]}}}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x11c}}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000300)) write(r2, &(0x7f0000000180)='p:s/p ./file0:0', 0xf) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f0000000240)=@generic={0x1, 0x5, 0x2}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x2c}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000140)="9b7d589f668f4113c16a6297df66", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0) write(r5, &(0x7f0000000240)='1', 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$poke(0x1, r6, &(0x7f0000000000), 0x7) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r7, 0x2, 0x5004) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/dlm/cluster/comms/2\x00', 0x1ff) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8924, &(0x7f0000000000)={'vlan0\x00', 0x1}) 10.706903168s ago: executing program 6 (id=316): fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) ioctl$SOUND_PCM_READ_RATE(0xffffffffffffffff, 0x80045002, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8000002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000003740), &(0x7f0000003780)=0x4) close(r0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) socket$kcm(0x29, 0x0, 0x0) r5 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)}, 0xc851) sendfile(0xffffffffffffffff, r1, 0x0, 0x2) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r4, 0x0, 0x40000) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r6, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048055) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1a, 0x4, &(0x7f00000007c0)=ANY=[@ANYRES32=r6, @ANYRESDEC=r0, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba5"], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x41100, 0xe, '\x00', 0x0, @fallback=0x10}, 0x94) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r8, &(0x7f0000000040)={0x1f, @any, 0x1}, 0xa) ioctl$BTRFS_IOC_WAIT_SYNC(r8, 0x40089416, 0x0) 5.82015316s ago: executing program 2 (id=333): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x27) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) syz_pidfd_open(r1, 0x0) getpgrp(0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz0\x00', 0x200002, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)={0x154, 0x2d, 0x107, 0x70bd2b, 0x25dfdbfe, {0x6, 0x7c}, [@nested={0x3d, 0x1, 0x0, 0x1, [@generic="fc9e800d4c798916e9f27cf4cc1488a52a4919ec69c2c5bdb72ec438b6eb50e52113475ddfc967f508573e455d77fd1e9b2cfa181056f550b1"]}, @nested={0x100, 0x3, 0x0, 0x1, [@nested={0xfa, 0x111, 0x0, 0x1, [@generic="2b0f76b612e31f34b6b31d1561c80229037c0e60e13f3186830a4a86318a907d370568665789ecc57e07e7527108a6f17a1765116ad1a7a15a24eabb8175836877241f4c9574c5604e1578e8d1e4b5620e258279760cf1dfff263ac59de53a5cd38c816efbef573c0fbcdef1c07bb9407b0c4334e5cf40ba30842f572eab724b0916627a16fd42e4691738ebb3a9d77668d194797dfe7c85f12758cedd0c854ba698d42960dfcaccf1cf291a0e8ed49ccca10a6868e757919672daa0ac58edd99f09c6ec0eaacd88faaf994be3174243a9d7e706d7f905977f5523e0a6b0ebf3b406e8a9cc6be207e54c", @nested={0xc, 0x103, 0x0, 0x1, [@nested={0x4, 0x5f}, @nested={0x4, 0x4b}]}]}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x10000004}, 0x4008030) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000e00)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, &(0x7f0000000440)) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000000c0)={0x2, 0x1, 0x238, 0x800b, 0x2, "02e29398581bd13e95ac00fcffff0f5d02000e", 0x800, 0x3}) syz_emit_ethernet(0x52, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x0, [{@empty}, {@broadcast}]}, @ssrr={0x89, 0x3, 0xce}, @generic={0x83, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000001a80)="5a384a217a2d82c5ec7bde148b403544b4bdb579f3e3fbf170a3469a03b7ba2a91da2bb5fefdfb5ee8c9a765bd0aa2e8b8b401f3b58de521f3e6db76caf7b9ea41905fac2631a75e5d2e09e06515ff14b80da52516075f57e7407448ffbd076beeb37ba4a5553141482cafea7fcf5fb2b03efdf1b49c8c8170587ce2a60a85024c7adbc4b334ecb3167e533aa35d2741012c718c73d8650095eed7a7569fa74c352893ad1a22c5a77af8f2e7970aed14104738b5cd78bf4f9227f55d2ffb78093c957d1bff072137969865ccfca5afbe63fe8f1a6684bb1eaecbf9172186d97535ff934b122eb8e8262e97bd6fad21d3a14a3786585270769d87b6477cfe0740555c6da4d5e600ae4d5af479dc1ffef196e1332ad95c1c58bc9d1cdac91ef22c1c8f32008601d4fe42493b4cf49166688aa5ed31c4b0dd072f6e4209d418914c3df34c2bbf7726603ffa60954980a1de421eb16f23729f3d9c822089d1f5ed131be61fae0e87ed82495a55162fef5ec693639d3772513e0e1dd42f674da3c9e7dd19bcacd8c68f39e7c51b3b021b1c88b3044a33b28781c3b945b720000587415401aa2187cf293f6e1f0877262954823a45e40630d06b6bb31d1fabd80fbdbcf9ebc9b8dd416dbc156eae3bd7926994196f9fa280c6642db7906dcfc4f5aacfe58f7798742b134e98faf62d2dddd2503240ed38d50809662fcb3f6086b01aa8fc52d0eaf04d3d2a36beaee875fc3d2cb2b97496ac90ea79d279ab0cc8a442df0859765930d95bd82f8282144d1d8dd8eab0285c7743b776421010d7b74acf7bcc6c6e9d38713de9c99df8ac8469590b23ae358de52a6f2d7e00286675b4e2fc168d3f2b9ca6388cb87b97acc90639a1d1d16013910a795d2590f559ceea19f0a0be189c346eaf27d8c53aed71ef8c819cdf0d7239bde7831fc23be532bc065d1812b070655ae6dff2c3261d35ff1a404ef927c028e726107fe26808352e944335b6e9895c6112b49862089e7b37c16efbf7dd7d5569c2dd14915154465c94b50ff43452d66c797bac0acb102cec36acfc561beb71d92ba83d6fa24ccdd5290779c5ee075b9baf835f21b2d76a74c42af035079e62b09ccf512b1cdde4ed0679c230d4739ecec880123845a8b17762a5dd9873dcdeebf809a42899a49b2693c2d87efb3b8a2f2bdda5dacd8084d91d71c603f2c7f0a9e8db7080e575aa8baaae6791530b74e6d9bd887379058673a579de4ab71988b8fef429d45560cabc32553103d1e7156608bba760dde9ea3452a4958ef0dc4d1176de951ace0e05033cc974e80bcde9601e267d80578565d49a497cc981d4e304978262124cf712231335266ea736481669706bd5f997f793f428a7d3ee5bda9b702f88c8c95541441f9f88b7a3b643e4a3aaa32fcc537063e447ba5928e7da583033c1642acc16b42d8baea677a2ba9a189ac745e6c8762257644c5dcc1ed8c60663a17ecd8be62830bd16b9eee4dfcf6cb13d0067f36f4d811fe961d2553a02fb7f117f07099d5c4747345531e807f13a90049a56c7816d76c503c5b7d04394955ba8e53a54309e811ac396ede3142dd41f9a1f695b72e8b75d68db27ff9c5e5fac36337f41aac853add254a4e8f2e3912d77ace9a27e58951d055a5f492accdd4bccb7379533b9b01f10042c294e8afb407c8dc752785f0e6078aa76f0f8598d9c26a6e6cd3948d1b1d6bcf51d7a1b9050fef9be16fe4bc4e40686813940c1748e00602ec782118395e7c07022ca8ac248f5c3b53a45cec6bb7f962add742b68c36cde15ff0f76c1fc596bca8d42c03722f6e78260cb30f47c84d567a089e1ab987c304e1bf70b668d1a35e72980ea7b9ec5a91c49c2a8962bb5f337434ea2ad80438f55ae50040390141eb4a9c2b47ea88adc9034f6d308449e4f40a2c1339a77ffa6e7239dab74f08bf1cc126bf318f47d5bbca4c9f4c9724fca344f93b0fc264ab7fc4d487861798e3d4fc5ce64de71e47bdb31b90d6e3046463082d3eaed3556115084c9111b6d9b0195ea7856aa83259a37bc6e512b762203cb1cd337666bc0620272de220e76f1cbb6ead7d1161610a0ac6c41dec1affb8ed57dd67910ba24545a89d230a1f6e8d86d979f497d1beede4918fbd4b61923d89dbd3440685863c4d1bb3d81973ba48a63133d9251e643c4647ad4aac03dc6db40ad92da439a3543df9483df651aea2c0bafb7f351166d75c746afeb330d610891c1c4f01a04668eff5e8ee2481ee358aa7b28f14c50b010e2c511354cbdea3c058f01f2e83f0db5a8a6e8235eb6eb15f2fb3dd9cd62bce66e5e46f50fc14e5710a4d97256ba724ae7a3cdfab2df2c3eaf131fff623a26b2aa6c9bca974bdb61938ac8cae4f0f1ec85788d0054a386772e38740d7bf1d0acd9d2f140d71e3353d2d97e0eb153685fef685bf06bee0c10e6df49a757018a29bd745a9680775219cb5248367e4c4990e25735948c94039f76c86168a687660ef7d8e2684ea650472198637c944ad226737dd2abf3c71d4f01eb482f80e5e62a16491a4ce110e51a7b5b6dcb2f788d2a929dc3a55b97f9bbf9bac9232a4193f359dde048c46ca16c654c712b8152779b3c495733801bcdd12b5b4b87380fc71cc9442c549dc7b40d351ea690b4b92ec510f23cd232a528b4ca474f3915df278f1574d6dda0e38c52b67cdce8724a920a026569ac8229f73580908e54111b638f93a94c632667d36381fdb6cc7fa6c97c60fb719e5aab698f0a553f47726ecd81207b4c9545f3f3c719ef6c0e847b97b8d0767d66306210ff653ecc97032eaf2504b85d2562bbb94160799046cda1b8877706ecbc100eb4a1de99b727a863c825c19b64a3c5d2db34224ab34e9efc99b792c0eafdd5eaa8e5319aee0effb9e40ae3e1cefd2216cae96cd423ae9b4048e89cf56c28c2d3dc9b05522d84e13f193a96d37c85545625ce39cf33d9de4f96ed7d2c0e813eac440f030595ef467030c1b3381e0e4ca4f36a8e5f9cb4e09bd398d707c5c38f4252182173b1f877f87e933fe59cfc10f88169625c2293d34a22062399543cf88a1097026d6f2effdfc05a50b1519dbae43289f64580a85978aa63ed218c958209c07ddfa9ee021c30b6ac427230bd5b45e86f1e0c47278680237527099fab4c3009e5c356c93a7041610616166b8c287eba20a43eb02351767996c9d1b20f058ff969547f79f381f45463f412d08407eb6f472ca7639c17994f4d9d4e9cb9464b4a096c96582e406ea972898400c11b083d7abfb0a8a0616819d4723fd23aec2e26b1c8b57c7ab0256a055df78beca014eca7ee4d88acd12bd0fb91cc68081958f69c969a37da61445d8dc65f945c288ff465a7678129391997a33e86e412d56af4f556d68f1c9ac6c6eae2f153a7d4755ccd748f3ee17104221030038bf79309b37a232b804cd5673e7ce403e118a899f776e37499f180777bfca4a8e4d2b987b55de542cdb9b8209473a719762a5d3717f69c8539a3bc4bf5c79e7e45626384f9b2b76e465c06ad0f39eafde6408ed883bf629f3f3c84024c636c7fc3eeb61fb33bb03393c23eb5050d401535d877d8f37a660b4bf9994b71b55e65b02a30717b799d6beed60ae51a70c9eae4e1ac391363f9d9a5dda9d82679e906ea31242b08a2b88b48abcf108d1d8ccf6435f5a66f862a59fb4a1c68ade20b4ab39bfb54b6cb41a675310f99509197f56f2ddbf58c18e749e9d5d7fafcf04db05c6a46d0752500957580e31e247a850c8306299f5360ca7a852a5de2ae63df4f1a167ab010621fa21320218a3eb9e3ad88e04eb9d8ed4a57055e9c6b55bba9f28520c5eca8fa7b7863df61b1382f35c2b63076acf244bc81f6ad558bb96c7b6ddd066caf5039694e7db19b3ade35ac3b7b555ae4ed5c0fd90219a729b433d23f39deca9f70852dd1ce3e1b445c9d14be1d7dd3e8a9aa8031dcec3ae918f22eccabb7e23856d223550d672950f7b3278e230c7019e19a86e59275562e5b427968953011b51fd6bac313151f0adf3d90559312afde4cace169ae9a2148a756ef3fdf69c4ef0fc406a44c7d3f70cca1f5dccfbb876a9ce272a4428dcb5fe7eedf34aeb67925fef9af40782944806d85744d727873844a34d6a836d6e9fcf296ba5747703550501b1546f43650c8e80c5a6a3bba2b6657ffafa84ee54bf186d0854cb6a23844566e87823266a3f9f81b1b3e4fadafb9524f61fda29df9f85577b51ad58c9b6ba2491b4c9e91731b769b5ecf14b17bc87cc4c8a82feeb6be4a0f3837330f5e0e5f11888f26d781e5a69837b457e278c21553fac6c34fb597410045f991d60488468eec4dea940dcf5dc00ba5f608effa2ef3575df8c9b31e1796326df0879169cb9808cc4199236667453f5fa9240995748176f9ff98186b6e4cbd53444a32631afddf752bed4f2755e76c24185742b76976cf519de5c8b0262a07a506002d02e43a4d617b4d72e6cfb0d8c4155aef8d89f8d3541d21026bfa578c5f7e97a47b2603bf1f5405e776197f661e8d3c16a4d77b741191119efdaaf4560d06370fe13199a525da5e7e9b821ec5f5799297c45c3eb8715809619fe945cc78a8967e24df52e5d67e85bc1d73db843921fe2beecb6cc3a076fb73227e55eb78e58f618c2a9c66dcc85079f4772ebcc11781c936fba9698deec242d6a14f8bbcd51cce20bc91cc5ea62400eec677c3fc2a0883f7cd030fe3fb3f20c63bd82de9ab62b73f339741d50f94049153c3d1adc24b6b7fc6db720ae6e9c3d8993a85793e73c4791ba25344381bdd7508830adad11732db0e9a2ebc6266d7681984b318dcfa8f99898dcbddb9c635bf634db92bb277190e9c6b1fe0d7d27ccd2848196ef427100f6343bce66a3c2ce1a88aac1f722e75f128086c6eb9764e8fcd08bf4688512b2669dd1fc18ed0816b9f9fd026c88da2acc4a43ee8b2a5bd6689625273abf3b796be0c7e319a9c89cf255e933ff11b1ac859b5fb1bad6781afb42d33cba9564f7c0ae1b3b7d6c6c45b2ed8c0273310f5b98bda44b5c11341ffc5fc7a72634fc620a5832c9cf491bb3bf2bd8edb6a84d521701e8e6ffb9f1d55657b919988c5732540e84fae746e5a966299a7429a262b3403fb3f70c4c5524ea18cfb04bd2159cb914e6a98e267ce6971d0efdc5bb636d9cd15681693edb21f764e7c9bb0d5a07869fae818506f353428252aaa20cbf4bd8ce1ebc4a76ce54c5595bba9b244e0e4a7a537607afa38e41368a8c293fdbd8490d93dbb7f82a89a2d65def069a49290ee087d985c099da3763a2dd79dcb09959c392ebda65680a895a745d726f59086e61106b90900000016622668ce9a80418e91609c529c088326b1bd12d6959741cc19d44f2095dd9b2f1b4cc007c0fb26f77ff244c875c46f4f85e6c65e43f2275331001e1440afc31d8af2f404fb14235e5ef484a55631a581be353672e8a9b47455f50cf4b8bd9030e9b4b298b4b43e920389c5aae890d9ec4d128dd1fcb256d06ad807c03dbac97d5d4d128687585574fbdc595b253e70b9fc8dc4f92ad7f36a9a730e3b94db7897394ba7a334cd6d7b79dee3577035700c560ed50cd70a2855ceb7fa58abfe381027437df41ec4a7bf19b01d4a3dd2d11e98e1e6365777d826e41e75d75df7b11e383faf089c7fa02b1cc4dffe3371b7282a5209d22d6593226716e784db16e3f54ed2f84e3f042df105f2dd8bb2f2b3d530d01a90deaae4854a78cad97e7eb00ed3d12f414c86bf4938878ec66f24aba4ee61d41133e66503174081144ae0630f1fabae5400f0b6cc9119b3c4d1a7382570fe9de7bc91d32fdc8f8f212f25560414fe27528db1026a6f71a373766771bd63b45d09e730be1f46bb608c6e43bfb1ac74469ec6b63e3114209a1b023d7fc6f7d0b0624ca7fed9a197d0ea1760302d47d8f749cf4b4711f9096fae58e941f428d3d46c17590d55cb275352b207970ab498a9fc380c0e23943e7bbfaafa9fc50b2b019f4ee955f52ab2938518a643a20e753d9d6c3144ed8ffbb2638a7d6dff9ad3f085a815e99b1334144e33679add52d473d4c7eaf1740e2bbd5469286b78b1f8853d2e24abd329666cd8c496051b7df363184d633abdc206f84d8119ab15ecc43bd4d3dc75c7c7d0e49764139be5d1c6ffa01ac8829e32d5e6d795f2760b55f6d2a4e487d6c8d24a4fd84f5ebd9b4cd8cd3868fe20658f79e22c29b34c07c127d4bde9cf7d1c3fbf92395012968c0923bc1e040d283d128a84d651de93459773d28990ee096f313334dacac65b09b8ecd5ab776f065ccd253c261bbce2ef637e4be0f384bf9d0705fe276be81a2aa8db6b882055ec11df91d13be28bf3e51c4269a6af8edc79fc9cffb97a7477fd121eb188f7a35e50d1830db8c388604030d26e67745f9cdf609d36463f0214a74b4277245215916379f78c8584a474f1eb28e14bdfef3fc02c09846952a23993bc2eeda301d6e4c58346b0a9ab96b59dfd6429bb90258a1fdc38de55443237e3559cccd7547307918ba6cf18091b3bc538da982c05adebeab41a59c2ee78e8c5dd4d4411a91179dcbaafd602ca0333ee6c6668abe24c836bdd5a5261aadac11fd8f1682044a819b6a3cd85015efcb685eede35ef046a11407e939fcfb7b4edb3f046c7d27947ba9a89e4f7068103ebcb0855d4923c4b9ee3ec5d476c4b72c1f6ed8ad1d991f6ef2f0eaa78758fdca67ede06e552b9df7532cc3f1d407fa23d9f5962e0305cedbff19a96b801f6f93a6fcec281fd30f57cffe8a26e2419f4b6a819281b3eb3bc7195e8cf4b8f3080f73c7b1fae8e7e606b5c8bcc493f8c1cae298995241957ee13d4fea8c92e63f16744bebdce3b8c57cb0f7716ccc950ef38c3133a0296ecd512191b8e9b68d3b232d2b7462174ed3d0f1bc6a0f5027fa4f88e99abaf6017f722f916726ec3eb59f19abd628b733654e4a24227889a99d01fb1e1cf7fb60f1d0a4671d5a7d47b56efaee313c53bfcb970e0878865e914f9e1884bee7f4fb787084315656b34c22dbf42aac3ebac5a500f8ce5d9bc47653f9e37a4d58e3c905db02e5ccf89701f9879831ec147baa80f122eeea1e3c9872669b0a29a24ea60e21d87bd51156f1e13e7d5132cec711f665df124cf7182c75103f35ba36ef96d36524a2525c88ae1fbe4192664080fc2735a789ae7f7b7774aaa9f18e6a8cfe46b714aed5d082ccb8001ca6bf33bd3a833681071fe6143a2daef7a637046c5dfeaa89d9285cf9052b02f699681a276f688b473b751d4da6be75a7d142e6b74897ea18812532579a7f495e4b77af68f5057b74e039adbc16624ecaec8aa058c491a1968e9f3d133304e6e1c150b8b10db993ce67e502bec06b239454ab0eb19af034afb8756a06e0550be1a63e31a85fda372bc5d6f2759adabf29d90eed494bed32cca3cbcdb874a982e0a9e0d81708814c88d88ae30344ae1b7527486e18c63c1c5b6fc74a241c63eab588ed78a295471229b1b5c20cc230bc6d81cdbff66b8d901e6d61cd5f385b31d0b492f36ab440b193fa86c9114fca2f2d1a4f73d9a05b1a26822135c86941ec989a6fd3962af599d3e8a0b9d87cf08205a2d4c2498c1682402a629ff583cdd4abd3ce46e76bb5cea903f01a9e88408584991b2bf5633671d9c4303e1045a6224d59dc3bdead4f4db2c555c92b296551d1f79db944d7e632bb6f6ccc93fb3cd69ab6b97e592e41529917fb5bc21226912815717a277e5edb3577519b8fe9f3885f08c6b24d957be1e119b7d592012fedf58c51344317c209d882fcc3212b39f45b0001b620ae8a3756ff1c5567557694a10da1ec3918d935a3a632f82ab8a3a909b663ac2de45d4a24c3e625eb73ba7c6f6460e2742b05cb438008691e2fae34e709b078759b7c766e7c093633b3224ebc2e1d76bc708f439760f31ddb1ac76251093ecb2e6a917e0910a06dde3acfdce6c24cae79944cce15a8fa07abc9ab6de33861abd43ff1e5948d217acc7aa3fd1a561abdddbad0ea60fb5088c8be468227fae9ac182c98de0b8833aba584f05023cbc4593a155463fc98a5e895d3297208913b4af3c81e7749db4580f6b19a247cc1cb15dc57d8cb2bc164f450fd252d2a903fa8e99ff99616ba949f323e6f9b69a1ff7e0ae57f9473164c1f60014a8e296d3bca29488346ea0220b8d9937a04d0e5a06a8ac25020c5e63c3f887c3c586601b652f9e2bc97ad88a8f1b895ec380da4b525472e290cf29a3ded06308fac229da619325e5221912a828e03e8ded81df5f709b452ce392a3a39c1aadd4612f8acf6247f4dcd082c1253f65279364c99a97757816a86ecddc05ad48a32158565d44aef33c0a6768fcb7af6c9ec8618efa0e8680761d00052f65a80a327bc74a1ad5975621e6c74e4e7b471c882ed63ac777eb34c6346cf603cbdfc14e76198fa83af5a742fbf385c9d528e6586653f24ed5374d70a4a5ea1ac7b4b04b49635f84b18a281921671df2bdc037ca182b9b645bc250c2001c36a46e8a4e4e850acf535edde1b4a233269d8ef7738d5532c75c71670921f8b4ea656ceb4a4066a04bb8a540988cc14e938b141fe51bf0d647de78bedd148cde21eff2428ebac2e4b40c466f2bac3100a16ba6fcffe361e752873c1e92104582ab48dedb3b93ddd29d81fac27b84e9a2538468f91172171e710aa992f3d488360be5f1a8ebf06223ff30d55953beea4abb0b3f6364834be74e9c6b6cf1a498bea069834892678217d12a0196df373e84e7c5c3c8e33d5666892bf2405f5f16203d5d8058f9c9ff54e7cdb429d2dddd14fd0009a9c36e4c4585b373228eec0fdc4d156950e4810f44867968937b4c8efeeebc32737b5a8a1a09c0308e65d528c877d3fa494b1c323baa49fe1c451a4fe1d4badf29e39d5387478b99f17f37fbe2fcb0fb1855a62476bcda1121a38a086c529fbe7b5764e2ae6c686a02051619740baada5a2fb76dc37f4ad80757dcaded49cb38e56674b4797ed403261d83a57832062c9dfc138c447d2543dfb21b44b423ce536b7472342ae0f788a36ea087f500b6476181d5379d7e8d70d8311e9e020f95750d314ab4e2fd4b8229cb354eba745eea10c66c7d0d1128fdfe91d6c7b1d0489264861f5404f6319a9ddc0b1bd0288b62dd76b79f86f0588e3a353b3098e1629de6808c2dc8ee7e432d3f7a4cabf102ad524ce4c6a3a2c962675e985378d904c4d6efade29e3f95ffe80a984d932e53643da5f622d535de5887b04c9c7616f31a16d279f26c02213532e3798645e4a09aa0785ab6e330818140347a2a80abd1d8e271bbf916c492125e914830f28619536ec7a1c842331ef2921b267e3666c96a122447e30928db0d29c958f9e492b8568734eb7f84ccddb1e5dbc0b6cc16c1fda02a524654a0ef8d4d01aad02f1a8fba9dacdb1380e38637203030ef1a8115d62c7c72ac7f7bf74b4decbefdc0f101d804c7f42e68ee44bbaed6fc36f0251b5ae9f42853d0954e46900fd75972f9af23cdf864f2f285f0f31521c5ad6e549084734f8dd510919aeb820ebd723b7ed30a89d6e2af2df8c4d796eb29c508b7306512d698cc153f0d35540bf757f3e25d4c573e71c4b4c8402bde20481d3459f11b477bfc5dab01281fb8e6c76cdad4974c14e0d2cdd93ab64b0810c18e8346ee495d0fc49f3b97a3a40f2d445777951521bd638000808f2c258daa20461eaeb98ccfc952bcd10364ac586843eef5096113b62e57828e5326f752431839cd9e71e13a248873c61065cf311cd6a3b37c12d952474fc8022fb11031d8091622ced80b12018f8a80e84d883c3749a5fac55c6f05e4ea352bc954fea3299aab478c2ae73e787c6dad3df26bd9317c7569f752b956fd806dd1f6d82df9ac538b7c404d1b97402c8ed3e90e9462b6a8bbae259cf20648872b549e01721da0adc082d0f4e03cd38ac5ad787beea3cc3ae43966a1402c7e54a5dd3d3d0cc62ad3a8283b74c2d3779375bae563de07ea3b1945c0bbce91fe1a824e04906255f4165f4e3d727ecca00e9abc587de38b825c6c7f86f4409642d6684205f90a03a880bd317c5aec106a461f3f158f152f26f7b4747213f631c5eb27f2b05ceb5da505ba05e82478e53021c484b08859dbccca5e1e6e38115995db6ba34891a604ab46574f8455f44a0e40658d944110a27908fc9d3b2147d2b3cad2bd9edae0a463b5800cc32f6f944cc7f35e06d67dc7fb227e3dffe2b11c29f8003a8aefd7469ae7488b2af5f3e4a843d40ec183262fa37d82a50cfbebc77253ac7259212fc492a6c33cc4fbc86e78f506a74be94e5edb9e6eb283a9f8a83101f3b3f13429c4a0032a0954c18b3455d2243a2c84ce1c9e8345a2d75f42ba376985fbabd979ffcd97aa6ed6452f1e1fd42a13e8f01271136652de2148fb54af4f3b93813014cfb5476423b0ec06172e0eeba8503a4e16faff749f8fc9b12a822ffae780416d3678432c0d658d5a712d2397291acf14d12412df8e9c353858b7fefbfe3bfb90699c5a4ea50cb895211e35170247eca1d44803beed64a61357cb0fc1f5babacfbac2c027ab56c7f010246f9bd5214b3349e751ab8a6dd7e69eebcf564684fe29c1e035f01caee11cd6a49dbe11a05920f41d3d9ac59d03483a33714603c0d1b5fe38ba9f517d170ded57fcd394bfe25e660e38a089993301ad58ae20cffb4a8d78f987e5fadc6be770249eae31a65c0d5b40156c225c0e1889b5c3a41b13597d7b6f290086f0f2f682e7c63c6f0a3f3b2fa88846cf0ac84b78a54a29c8155a0db21ed3e823d20284cedf75fdb40f6fd3e1099981cbc5f119846bd4ec29e55d0178e9a227b013519c28bdf8e9e04b5e4957719188ecc9331f598bb0719cb97c2408e884601c011b01d86652ba537c1f8713c608dad4994d4ed7f786771cfc51f0495406353b4850b77e9dea4fd684cfeaf6b2763499be4df9b6fb4c624b320da8d84ea25793aee5bd16bfaf5406cfded9f58c3f535f54c03bb1b20f4106a2465dcc3a758c1f1a924e567b99feda45d0742f073558db72c4eac0b729ba726fa086c21b8f4464b908c84e744c0c27a67911889b77c5e5dd8e87106825d939207da3a74289a197174ff2c1cd89d1659f398821f8f2cf0c81dbba69d6933896913904ced56cc50acbd337c36dacf175b264b9e9518d856ccccaaab6d0d329eee8383474e434a2d68c51256f57900e18adb4799ffc2f45fe0f550cd49242f494b9c45e16ef1c005e31f8523f2eb6c4598ccbed376f3a638264fc6fb128a2e63c8490ee3c5b2b2c8ac19f647de6e22ec7574a67ea49c9a5c404fa7b39ad98d2d017f2056239df839a2719be27d993767c1b46decdea2e31f4c8e73d7514bbae8f026048754fdae46017eae25ae6ca1288f3441aa6d0f962f1c62eea19663c8fb895148b36ef2ee1afa363d50f3053ffdcbda2e96e13c619b13b9fa6b31dca929126cf3bf1be8c9374c6fa652bae273679924172c1e4dd4e3f9a5f892532138d91375438c1dc98434d238ec81166aa28f878ef9f130676f55e3ecc808f718e7cedbf40dcb270368762d8", 0x2000, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) ptrace(0x10, 0x1) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f00000000c0)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000240)=0xfc) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x0, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r3, 0xc0044dff, &(0x7f0000004000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000980)={[{@workdir={'workdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGSERIAL(r5, 0x541e, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=""/194}) openat$fuse(0xffffff9c, &(0x7f00000003c0), 0x2, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, 0x0, 0x4) 5.158777515s ago: executing program 2 (id=337): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newtfilter={0x38, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0x4}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x1000000, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) 5.041720001s ago: executing program 2 (id=339): munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r0 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000480)) add_key$user(&(0x7f0000000000), 0x0, &(0x7f00000002c0), 0x0, r0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) io_uring_setup(0x1b56, &(0x7f0000000100)={0x0, 0x1, 0x400, 0x0, 0x2c1}) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, &(0x7f0000000080)=&(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000180)={'ipvlan0\x00', &(0x7f0000000140)=@ethtool_link_settings={0x1, 0x10000, 0x3, 0x40, 0x0, 0x5, 0x7, 0xc, 0x30, 0xe, [0x2, 0x1, 0x1ff, 0xec96, 0x5, 0xffffff7f, 0x6, 0x1]}}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000240)="98750f50aade73db0f0100008005f4ea", 0x10) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000000)="439e10b5498d94e3c3750f4f4afdc6b3", 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00070013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 4.950702846s ago: executing program 2 (id=340): syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="30000000410007010000000001"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700), 0x0, 0x1000, r0}, 0x38) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) syz_open_pts(0xffffffffffffffff, 0x81) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a7565aba55a87d2a251c295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507a0592c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd106926acb583ad63a4e7e1ca17c1b6aac63fefa9dcbe429d00"}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={&(0x7f00000004c0)=@can_delroute={0x1b4, 0x19, 0xd24, 0x70bd2b, 0x25dfdbfe, {0x1d, 0x1, 0x3}, [@CGW_MOD_SET={0x15, 0x4, {{{0x2, 0x0, 0x0, 0x1}, 0x5, 0x3, 0x0, 0x0, "7bf1310283ac17c1"}, 0x6}}, @CGW_MOD_AND={0x15, 0x1, {{{0x2, 0x0, 0x1, 0x1}, 0x6, 0x5, 0x0, 0x0, "d14635590a0622a7"}, 0x3}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x2, 0x1, 0x0, 0x1}, 0x5, 0x2, 0x0, 0x0, "dadd9b733159e3e2"}, 0x4}}, @CGW_MOD_UID={0x8}, @CGW_CS_CRC8={0x11e, 0x6, {0x1c, 0x7f, 0x7a, 0x0, 0x1, "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", 0x3, "af9ed1d43bdeba59c9efe946635839fee23a1172"}}, @CGW_MOD_AND={0x15, 0x1, {{{0x2, 0x0, 0x0, 0x1}, 0x1, 0x2, 0x0, 0x0, "f91055ceedaeb7c8"}, 0x3}}, @CGW_CS_XOR={0x8, 0x5, {0x6, 0x6, 0xfffffffffffffffe, 0x5}}, @CGW_SRC_IF={0x8}, @CGW_SRC_IF={0x8}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x8}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket(0xa, 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYRES32=r6, @ANYBLOB="4000100a14000100009a"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x20024090) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000a0000000000931710fe00029500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"ff87c89d4e3e6bd4ae7ee3551b880c0ac56cb2a58b7da498a7045278c8043bbe"}) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000280)={'erspan0\x00', &(0x7f0000000000)={'syztnl2\x00', r6, 0x7, 0x7800, 0x67a, 0x7, {{0x6, 0x4, 0x2, 0x29, 0x18, 0x64, 0x0, 0x6, 0x2f, 0x0, @remote, @remote, {[@ra={0x94, 0x4}]}}}}}) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000800)={&(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000740)=[@mask_cswp={0x58, 0x114, 0x9, {{0x1, 0x80200000}, 0x0, 0x0, 0xfffffffffffffff8, 0xff, 0x9, 0xffffffffffffffff, 0x40, 0x4}}], 0x58, 0x4044004}, 0x40) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="9f99d6e3cf36fd30cd5e2b4584eb0100180000000000000028000000280000000200000000a894ded55d19e11d15187bbfffae4d00000000000002000000000200000098a365cbab0e1a4811326fba3408461e0000001302000000020000000000000e03000000000000000000d8a1f3da15b10a31d7dbaf2a141c0b9e1148534e26d404d230f152a787a02b0e5f660f64892bf609870fa35dcbae"], 0x0, 0x42}, 0x28) 4.226075613s ago: executing program 5 (id=343): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x3c, 0x0, 0x401, 0x70bd2e, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004043}, 0x1404c090) 4.217211298s ago: executing program 2 (id=344): openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='status\x00') openat$rtc(0xffffffffffffff9c, 0x0, 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) io_setup(0x6, &(0x7f00000000c0)=0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/freeze_filesystems', 0x1a1081, 0x53) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000001500)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000100)='9', 0x20000108}]) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r4, 0x0, 0x4041) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f0000000400000008000000da"], 0x48) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000100)={r9, 0x58, &(0x7f0000000400)}, 0x10) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) syz_ublk_setup_queues(r12, r10, &(0x7f0000000400)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x11c, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1000, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf930, 0x400, 0x0, 0x1ef, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2867, 0x4000, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x50, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000740)={0x3, 0x0, &(0x7f0000000500)=""/203, &(0x7f0000000600)=""/37, &(0x7f0000000640)=""/240, 0x9000}) 4.167978468s ago: executing program 5 (id=345): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x8280, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{0x1}, &(0x7f0000000980), 0x0}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x8, 0xb, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000740)={0x3, 0x3, 0x23c289a8, 0x8}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x844}, 0x20000040) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r4, {0x0, 0xffe1}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xa0d8, 0xa, 0x1, 0x200, 0x6}, 0x8, 0x0, 0x3, 0x0, 0x0, 0x17, 0x1d, 0x11, 0x1, 0xb, {0x6, 0x59c, 0x6, 0x80006, 0x6, 0x1}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x800c001}, 0x8000) pselect6(0x40, &(0x7f0000000080)={0x200, 0x1, 0x6, 0x5, 0x7, 0x6, 0x0, 0x7783}, &(0x7f00000000c0)={0x1, 0x4, 0x2, 0x7, 0x9, 0x330, 0x4, 0x8000000000000001}, &(0x7f0000000280)={0x5, 0xd, 0x400, 0x15, 0xcde, 0x0, 0x46a4, 0x800}, &(0x7f0000000340)={0x0, 0x3938700}, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0xc4, 0x807) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r5, 0x1, 0x3b, &(0x7f0000000140)=""/240, &(0x7f0000000100)=0xf0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0xa64a, 0x0, 0x8000, 0x4, 0x58}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043e1f0a"], 0x22) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r6 = landlock_create_ruleset(&(0x7f00000002c0)={0x7b36}, 0x30, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) landlock_restrict_self(r6, 0xe) 3.411234627s ago: executing program 5 (id=348): openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x424080, 0x30) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1f, 0x4, 0xfff, 0x5}, 0x50) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) sendmmsg(r3, &(0x7f0000001280)=[{{&(0x7f0000000180)=@can={0x1d, r5}, 0x80, 0x0}}, {{&(0x7f00000022c0)=@can={0x1d, r5}, 0x80, &(0x7f0000001240)=[{&(0x7f0000000280)="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", 0x5a7}, {&(0x7f00000010c0)="3bd8f0ecb5", 0x5}], 0x2}}], 0x2, 0x44) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r6) sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r7, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400070200000200080001000300000005000200030000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wpan4\x00', 0x0}) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r11) sendmsg$NL802154_CMD_DEL_SEC_KEY(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x48, r13, 0x1, 0xffffffff, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_SEC_KEY={0x2c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x28, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000050}, 0x0) sendmsg$NL802154_CMD_GET_SEC_KEY(r2, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x70, r7, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0xc815) r14 = socket$kcm(0x11, 0x200000000000002, 0x300) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000000000)=r15, 0x4) r16 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r16, 0xc0205710, &(0x7f00000000c0)={0x0, 0x4d2, 0x8, 0x1, 0x4}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000040)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x2}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, &(0x7f0000000880)) r17 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0xea}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r18, r19, r20, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r17, 0x7e71, 0xfffffffd, 0x1, 0x0, 0x0) 3.399778143s ago: executing program 5 (id=349): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x80000000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0xca, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x9, r0, 0x0, 0x0, 0x1}]) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x80000001}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x240408a0}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 3.079122348s ago: executing program 5 (id=350): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="14e7000001040100140000000000000002000000"], 0x14}}, 0xc0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd0}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) r3 = timerfd_create(0x8, 0x80000) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) timerfd_settime(r3, 0x2, &(0x7f0000000380)={{}, {r4, r5+10000000}}, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000100001c300000000fcffc75900000400", @ANYBLOB="31200000000000000c002b80080003000200000008001b0000"], 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000240)={0x0, 0x6, 0x6, 0x5, 0xe7}, 0x14) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r7, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'fpu(pcbc(aes-aesni))\x00'}, 0x58) syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 2.678993623s ago: executing program 0 (id=353): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r1, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) sendmmsg$sock(r1, &(0x7f00000029c0)=[{{&(0x7f00000006c0)=@nl=@unspec, 0x80, 0x0}}], 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x101, 0x9, 0x7a8, 0x6, 0x3}, 0x14) 2.595402188s ago: executing program 2 (id=354): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x2ffe, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x1ffffffffffffd6a, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x600, 0x4000000}, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) r2 = openat$pidfd(0xffffff9c, &(0x7f0000000180), 0x101080, 0x0) waitid$P_PIDFD(0x3, r2, &(0x7f0000000200), 0x1, &(0x7f0000000280)) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='ocfs2\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x2, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) write(r3, &(0x7f0000000800)='+ 1 0 0', 0x7) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) mount$cgroup2(0x0, &(0x7f0000000300)='./debug/lru_gen/file0\x00', &(0x7f0000000340), 0x1002001, &(0x7f0000000400)=ANY=[@ANYBLOB="6e7364656c65676174652c706964732c6d656d6f72795f68756765746c625f6163636f756e74696e672c6d656d6f72795f72656375727369766570726f742c6d656d6f72795f68756765746c625f6163636f756e74696e672c646f6e745f6d6561737572652c6673757569643d66303230333236002d623737372d613863392d3234626e2d36346437623932662c636f6e746578743d73746166665f752c6d6518737572652c646f6e745f6d6561737572652c6d61736b3d5e4d41595f415050454e442c6c617a7974696d652c6673636f6e746578743d726f6f742c736d61636b66737472616e736d7574653d2d2c00"]) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='net/psched\x00') bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r4, 0x0, 0x25, 0x3, @void}, 0x10) r5 = syz_usb_connect_ath9k(0x3, 0xb7, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45}}]}}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(r5) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r6, 0x0, 0x0) r7 = request_key(&(0x7f00000005c0)='rxrpc_s\x00', &(0x7f0000000600)={'syz', 0x0}, &(0x7f0000000640)='/dev/video#\x00', 0xfffffffffffffffc) add_key(&(0x7f0000000080)='logon\x00', &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000ac0)="8a", 0x1, r7) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1) 1.769424487s ago: executing program 0 (id=355): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000761fc6f7200f1b690399cf3e65bf58e7e9fce0ca3a43f9225c61196f50f40dab08c960a78614e18881a81f3a91db09b02310e581c05cee6fa60b00de7d28bc337a4bb5ccfa860448656b947fdc782afa7bc4ad7e05b071e0390ea19570448ac9c8075ed8d34d4a9a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) openat$sw_sync_info(0xffffff9c, &(0x7f0000000080), 0x40282, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_user_confirm_reply={{0x9}, {0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}}, 0xd) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="bbaabbbbbbbb00000000000035ec3000080045190014006700000784"], 0x26) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) socket(0x23, 0x5, 0x6) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r7 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r7, &(0x7f0000000040), 0x10) listen(r7, 0x0) r8 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r8, &(0x7f0000000080), 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x58}}, 0x4000) sendmmsg(r8, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x11}}], 0x1, 0x24008094) write$P9_RSTATu(r6, &(0x7f0000000580)={0x237, 0x7d, 0x2, {{0x500, 0xf6, 0x0, 0x5000000, {0x96346fe8a85d2583, 0x0, 0x8}, 0x41400000, 0x0, 0xe5e0, 0x5, 0x1b, '\x04nodev{evoo~\x05E\xc6\x00\x05\b\x007\xd9:\x8b\x92\x00\x00\x00', 0x33, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x37, '\xcf\xc3m\a\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e^\x98\x9c\xd5\xefMQ\xf6\r\xa7X,J\x05\xc8\xf8(\xf6\x8d\xc1wM]\xe2\xe8 \x86#\x81\xf6hm\xd1\xbb\x8f\xd7\x00\x00\x00', 0x3e, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c<;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0w\xdct\x00\x00\x00\x00\x00\x00\x00\x00\a\xec!\xca\xbf\xf2\x0f\x9c\x00\x89\xf9\x06\x00\x00\x00\x00\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x13r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x237) ioctl$FS_IOC_GETFSUUID(r6, 0x80111500, &(0x7f0000000140)) r9 = syz_open_procfs(0x0, &(0x7f0000001380)) getdents(r9, &(0x7f0000002000)=""/4096, 0x1000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="7638300c000000000000e900feff", 0x0, 0x10000, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000300)=0x0) syz_open_procfs(r10, &(0x7f0000000340)='smaps\x00') 1.436951077s ago: executing program 0 (id=356): close(0xffffffffffffffff) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) signalfd(r0, &(0x7f0000000000)={[0x27c, 0x3ff]}, 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000062c0)=@base={0x9, 0x8000, 0x9, 0x8, 0x0, 0xffffffffffffffff, 0xf9}, 0x50) bpf$BPF_GET_MAP_INFO(0x15, &(0x7f0000000080)={r2, 0xfffffe38}, 0x10) sendmsg$NFNL_MSG_ACCT_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x1, 0x7, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0xc010) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x439, 0x70bd23, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xb881}}, 0x20}, 0x1, 0x0, 0x0, 0x4000006}, 0x4040844) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x400000000000007, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="28000000040601030000000000000000050000080500010007"], 0x28}, 0x1, 0x0, 0x0, 0x408c0}, 0x4000000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000380)='task\x00') lseek(r5, 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) getdents64(r5, &(0x7f0000001400)=""/4090, 0xffa) close(0x3) brk(0xb422) 840.373432ms ago: executing program 0 (id=357): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @private=0xa010501, 0x0, 0x0, 'none\x00'}, 0x2c) socket$netlink(0x10, 0x3, 0x0) mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000) mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) r3 = userfaultfd(0x801) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000380)={{&(0x7f0000bee000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mremap(&(0x7f0000a94000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000259000/0x4000)=nil) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@expire={0x104, 0x18, 0x1, 0x70bd26, 0x25dfdbfe, {{{@in6=@local, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e21, 0x9, 0x4e20, 0x0, 0xa, 0x60, 0x80, 0x3c}, {@in=@loopback, 0x4d4, 0x33}, @in=@broadcast, {0xd80c, 0x7f, 0x1, 0xa3d6, 0x9, 0x7f, 0x1, 0x2}, {0xc, 0x401, 0x702, 0xffffffffffffff03}, {0x9a55, 0x6, 0x9}, 0x70bd29, 0x34ff, 0x2, 0x0, 0x3, 0x10}}, [@mark={0xc, 0x15, {0x35075a, 0x1}}]}, 0x104}, 0x1, 0x0, 0x0, 0x84}, 0x4c010) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800120076000d0b"], 0x18}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000888}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@getchain={0x3c, 0x66, 0x2, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xe, 0x4}, {0x2, 0x6}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x40}, {0x8, 0xb, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008084) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/drivers/i8042/unbind\x00', 0x1, 0x0) write(r5, &(0x7f0000000200)='i8042\x00', 0x6) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xb4, 0x2, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x4}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x491}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0xdd}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x16}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x1}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x10000}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8080}, 0x15) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x0, 0x1}}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x138, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104}]}}]}, 0x138}}, 0x0) 258.381724ms ago: executing program 0 (id=358): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000000000)=@phonet={0x23, 0xff, 0xc, 0x4}, 0x80, &(0x7f0000001100)=[{&(0x7f0000000080)="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", 0x1000}, {&(0x7f0000001080)="c148e8012eefa4e36c1c138bec169026f4d0bc1b9b2f8127ce277fa58c8e1ddfa710b2c8dbcfa6f4e0d2bf6f7cffc50cda685f1872fb4550998747cf522990cef32a379e509b6c2e7c75685236bf71a291ce3cf567b4b8f9d60f759f0482c2339822", 0x62}], 0x2}, 0x4040004) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001180)={'geneve1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000001240)={'ip_vti0\x00', &(0x7f00000011c0)={'erspan0\x00', r1, 0x900, 0x20, 0x0, 0xbbcd, {{0x15, 0x4, 0x1, 0x6, 0x54, 0x67, 0x0, 0x14, 0x2f, 0x0, @multicast2, @broadcast, {[@timestamp_prespec={0x44, 0x34, 0xa1, 0x3, 0x0, [{@loopback, 0x80000000}, {@multicast1, 0x100000}, {@rand_addr=0x64010101, 0x6}, {@remote, 0x4}, {@multicast1, 0xb}, {@dev={0xac, 0x14, 0x14, 0x37}, 0x1}]}, @timestamp={0x44, 0x8, 0x59, 0x0, 0x3, [0x0]}, @ra={0x94, 0x4, 0x1}]}}}}}) fstat(r0, &(0x7f0000001280)) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4038587a, &(0x7f0000001500)={{r0, &(0x7f0000001300)='N%{/[,\x00', 0x2400, &(0x7f0000001340)={@align=0xfffffffffffffff9, {0x9, 0x9, 0x34}}, 0x8001, &(0x7f0000001380), &(0x7f00000013c0)=0x6}, {[0x7, 0x1, 0x4, 0x40]}, 0x4, 0xc1, &(0x7f0000001400)=""/193}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000015c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, &(0x7f0000001680)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x30, r3, 0x2, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x8, 0x45}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x8001}, 0x884) execve(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001740)={[&(0x7f0000001700)='-%{\x01-*/$\x00']}, &(0x7f00000017c0)={[&(0x7f0000001780)='wlan1\x00']}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001840), r2) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000001940)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001900)={&(0x7f0000001880)={0x48, r6, 0x20, 0x70bd25, 0x25dfdbff, {{}, {@void, @void, @val={0xc, 0x99, {0x5, 0x4e}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x80}, @NL80211_ATTR_VENDOR_DATA={0x1f, 0xc5, "1d8f2cf86ad223915f9fa49f99b8c556c925205b3e79e7aeb16a0c"}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x80) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r7, 0xc040aed5, &(0x7f0000001980)={0x0, 0x4000}) setsockopt$inet6_tcp_int(r2, 0x6, 0x18, &(0x7f00000019c0)=0x9, 0x4) sendmsg$NL80211_CMD_START_P2P_DEVICE(r5, &(0x7f0000001ac0)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x28, r3, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x9, 0x79}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x400c015}, 0x80) syz_open_dev$dri(&(0x7f0000001b00), 0x7, 0x400001) io_setup(0x4, &(0x7f0000001b40)) r8 = openat$nvram(0xffffff9c, &(0x7f0000001b80), 0x301200, 0x0) setsockopt$sock_void(r5, 0x1, 0x1b, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f0000001c80)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001c40)={&(0x7f0000001c00)={0x38, 0x140e, 0x420, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4040001) bpf$MAP_CREATE(0x0, &(0x7f0000001cc0)=@base={0x4, 0x45070, 0x8001, 0x0, 0x8500, 0x1, 0x4, '\x00', r1, r2, 0x3, 0x2, 0x2, 0x0, @value=r8}, 0x50) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000001d40)={0x638, 0x5, 0xa, 0x5, 0x1}) mount(&(0x7f0000001d80)=@nullb, &(0x7f0000001dc0)='./file0\x00', &(0x7f0000001e00)='cifs\x00', 0xc0, &(0x7f0000001e40)='#&^)\x00') setxattr$security_ima(&(0x7f0000001e80)='./file0/file0\x00', &(0x7f0000001ec0), &(0x7f0000001f00)=@v2={0x5, 0x1, 0x15, 0x3, 0x6d, "b7af01e2d4afb9a6636d572a3c7c1db1807f74d34960fa2aea403c42b106cb6c19d94de6ca84c144db571759217872e6df1406493e17edc6cf486be7b48c8d7abf1bd8b47a99214a9e0fdfef49911d4c81e0a63077f1920613fecb081202102ebfbe7347605188e66ee034368b"}, 0x76, 0x1) syz_genetlink_get_family_id$smc(&(0x7f0000001f80), r2) r9 = openat$sr(0xffffff9c, &(0x7f0000001fc0), 0x1, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r9, &(0x7f00000020c0)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002080)={&(0x7f0000002040)={0x20, r3, 0x4, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x9, 0x60}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8110}, 0x40000) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000002280)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002240)={&(0x7f0000002180)={0x90, r3, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x5be}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xb129}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x8}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x4}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x553}, @NL80211_ATTR_STA_WME={0x4c, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x10}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x4}, @NL80211_STA_WME_UAPSD_QUEUES={0x5}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x7}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x3}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x2}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x6}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x2}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) 79.349237ms ago: executing program 0 (id=359): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0xf, 0x200000) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)=0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000380), 0x105100, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYRESHEX=r1, @ANYRES32=r4, @ANYBLOB="0900340014020202250200000a00060008b71100000000000800350000000000080026006c090000"], 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x7e}, @device_a, @device_a, @from_mac, {0x1, 0xe}, @value=@ver_80211n={0x0, 0x7f, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1}}, 0x17, @val={0x8c, 0x10, {0x909, "36831dc8ca4b", @short="76d50701faca5d99"}}}, 0x30) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="b0000000080211000000100000000200"/30], 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f00000006c0)=@mgmt_frame=@probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x81}, @device_a, @device_b, @random="a495f621e873", {0xc, 0x7}, @value=@ver_80211n={0x0, 0x9, 0x1, 0x0, 0x0, 0x1, 0x1}}, @void, @val={0x1, 0x6, [{0x9, 0x1}, {0xc}, {0x36}, {0x2, 0x1}, {0x60}, {0xc}]}, @val={0x3, 0x1, 0xb7}, @val={0x2d, 0x1a, {0x1, 0x0, 0x7, 0x0, {0x1519, 0x7, 0x0, 0x3, 0x0, 0x1, 0x0, 0x2}, 0x300, 0x10, 0x8c}}, @void, [{0xdd, 0xd, "52f1439b629ee1a116905333ad"}, {0xdd, 0x36, "7c2d38918017a87d6b21c07bd83b06db74c231bd8e524c06f1682bef47d7cb0193c320feada255d767aa2f601c581b7deed44c3d9618"}, {0xdd, 0xcb, "00f5c31d40ea9d6c3a237343578081def69f2aa1257536663fe2c725aba21daa4661ac37a2f48e32f74ebb374ec091c293bc99e4b1b058ff7f41eff40a2b37bd4b298425da2f2d4fba324f2a7723c7493b85fc6086884f1073902dd51e18c577ab22fa594a5dc78c4bcb2b8115d573b8197022d4c921dfc5a1308e8c453785fde3d921ac8707f6742f746d6d27e79099a0428098dcb69a1e3a70c26fd106bf9159e08efe4713460db4ef73d271a98e3fbb337ae1c41bddb1df9354a5cd38eaf4e9f5312a717103952d5e90"}, {0xdd, 0xdf, "1dbec2e72b22b1ffbc7048b49556047c8598e2c292251bbe0fbd08b10599f107837df0ce868f7dff3cb6c64eeb26f90abdf3472966e33a20e5c88b070a930deded05f8cb525dfe364dfb05d5edc7db21f78f380104d7a60e750e3d32d8d44a5355eee21b095c8839cc8327febe6f36173c1746aeed2a24e0ddeb01d68313c2aad8b029a4e8fbf3a7698bc97f65a8e9cc24f693fbf299dee2310131ca4bbc7ad12aea92f12259021bae01eba070c07736bee79c04acedef04a11a22b34b78a539de02c901dd014d2823ab42f7255d387e96f36fb455e84c4e00150ccf1a4da5"}]}, 0x238) mkdir(&(0x7f0000000540)='./trace\x00', 0x1ff) mount(&(0x7f0000000580)=@filename='nodev\x00', &(0x7f00000005c0)='./trace\x00', &(0x7f0000000600)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='sys/bus/pci/devices/0000:00:04.0/config\x00', 0x101041, 0x92) write(r5, &(0x7f0000000680)='1', 0x1) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdir(&(0x7f0000000040)='sys\x00', 0x1ff) r7 = socket$netlink(0x10, 0x3, 0x8) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r7) mount(&(0x7f0000000080)=@filename='sysfs\x00', &(0x7f00000000c0)='sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='sys/bus/pci/devices/0000:00:04.0/config\x00', 0x2, 0x100) pwrite64(r8, &(0x7f0000000180)='\x00\x00', 0x2, 0x4) r9 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='sys/bus/pci/devices/0000:00:04.0/remove\x00', 0x1, 0x0) write(r9, &(0x7f0000000200)='1', 0x1) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000100)={0x4}) syz_io_uring_setup(0x34, &(0x7f00000002c0)={0x0, 0x4000880e, 0x13100, 0x0, 0x4, 0x0, r9}, &(0x7f0000000280), &(0x7f0000000080), &(0x7f0000000000)) 0s ago: executing program 5 (id=360): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x0, 0x4, 0x7, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f00000004c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x800448d4, &(0x7f0000000040)={0x1, 0x3f, "f8ff00", 0xff, 0x3}) getsockopt$sock_timeval(r4, 0x1, 0x15, 0x0, &(0x7f0000000600)) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x380}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000000c0)={0x28, r7, 0x1, 0x10000, 0x25dfdbfd, {{0x8}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x1}}}}}, 0x28}}, 0x0) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r8 = syz_open_procfs$pagemap(0x0, 0x0) ioctl$PAGEMAP_SCAN(r8, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe4, 0x2, 0x0, 0x2}) fcntl$getown(r1, 0x9) kernel console output (not intermixed with test programs): ilter on device netdevsim2 [ 50.165765][ T5732] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 50.171734][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.256401][ T5740] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 50.263558][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.270088][ T5740] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 50.276489][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.281040][ T5740] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 50.285227][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.288803][ T5740] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 50.293229][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.336623][ T5735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.355684][ T5742] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 50.360735][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.367100][ T5742] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 50.372225][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.374946][ T5742] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 50.379539][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.382571][ T5742] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 50.386945][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.396270][ T5735] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.413367][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.415881][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.428789][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.431108][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.450949][ T5732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.484186][ T5732] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.508299][ T5743] Bluetooth: hci1: command tx timeout [ 50.508461][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.512722][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.535446][ T108] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.538397][ T108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.549679][ T5735] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 50.570179][ T5740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.587315][ T5743] Bluetooth: hci2: command tx timeout [ 50.588287][ T5739] Bluetooth: hci0: command tx timeout [ 50.588299][ T5733] Bluetooth: hci3: command tx timeout [ 50.601220][ T5740] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.613624][ T1201] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.616464][ T1201] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.622403][ T5742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.632404][ T1201] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.634757][ T1201] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.644182][ T5742] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.655512][ T220] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.657855][ T220] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.673641][ T220] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.676482][ T220] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.836656][ T5735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.882769][ T5732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.886228][ T5735] veth0_vlan: entered promiscuous mode [ 50.906638][ T5735] veth1_vlan: entered promiscuous mode [ 50.936331][ T5735] veth0_macvtap: entered promiscuous mode [ 50.946411][ T5735] veth1_macvtap: entered promiscuous mode [ 50.960984][ T5732] veth0_vlan: entered promiscuous mode [ 50.968694][ T5740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.979509][ T5732] veth1_vlan: entered promiscuous mode [ 50.986758][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.999030][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.034094][ T5742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.044134][ T5740] veth0_vlan: entered promiscuous mode [ 51.060619][ T5732] veth0_macvtap: entered promiscuous mode [ 51.070152][ T5740] veth1_vlan: entered promiscuous mode [ 51.075328][ T5732] veth1_macvtap: entered promiscuous mode [ 51.104891][ T1201] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.107647][ T1201] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.117982][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.125048][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.144491][ T5740] veth0_macvtap: entered promiscuous mode [ 51.152874][ T220] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.153345][ T5740] veth1_macvtap: entered promiscuous mode [ 51.155338][ T220] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.169802][ T5742] veth0_vlan: entered promiscuous mode [ 51.179259][ T5742] veth1_vlan: entered promiscuous mode [ 51.183654][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.211533][ T5735] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 51.216415][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.221958][ T5735] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 51.227998][ T5735] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 51.228492][ T5784] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.232892][ T5735] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 51.243166][ T5735] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 51.247460][ T1201] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.252863][ T1201] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.274037][ T220] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.280373][ T220] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.303733][ T5742] veth0_macvtap: entered promiscuous mode [ 51.315943][ T5742] veth1_macvtap: entered promiscuous mode [ 51.344310][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.355950][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.371536][ T5784] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.374736][ T5784] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.379571][ T5784] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.380688][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.389710][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.421154][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.426543][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.485464][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.490417][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.504899][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.508715][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.554099][ T1201] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.563395][ T1201] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.567744][ T5784] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.572471][ T5784] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.579818][ T5784] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.586252][ T5784] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.590844][ T5784] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.593820][ T5784] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.597021][ T5784] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.603593][ T5784] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.606456][ T5784] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.611621][ T5784] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.670048][ T5894] netlink: 'syz.1.5': attribute type 3 has an invalid length. [ 51.907706][ T5883] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 52.098790][ T5900] pim6reg: entered allmulticast mode [ 52.108435][ T5883] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 52.117322][ T5883] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 52.132194][ T5883] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 52.139033][ T5887] syz.0.1 (5887): drop_caches: 2 [ 52.144082][ T5883] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 52.154931][ T5883] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 52.165561][ T5883] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 52.170013][ T5883] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 52.175454][ T5883] usb 5-1: config 168 interface 0 has no altsetting 0 [ 52.182434][ T5883] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 52.185351][ T5883] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 52.189814][ T5883] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 52.194014][ T5883] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 52.207456][ T5883] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 52.211803][ T5883] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 52.215953][ T5883] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 52.221310][ T5883] usb 5-1: config 168 interface 0 has no altsetting 0 [ 52.224793][ T5883] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 52.228432][ T5883] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 52.228615][ T5899] pim6reg: left allmulticast mode [ 52.232987][ T5883] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 52.247111][ T5883] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 52.259892][ T5883] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 52.274143][ T5883] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 52.283628][ T5883] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 52.295490][ T5883] usb 5-1: config 168 interface 0 has no altsetting 0 [ 52.304190][ T5883] usb 5-1: string descriptor 0 read error: -22 [ 52.307931][ T5883] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 52.324335][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.349664][ T5883] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 52.577625][ T5739] Bluetooth: hci1: command tx timeout [ 52.668021][ T5739] Bluetooth: hci2: command tx timeout [ 52.670621][ T5739] Bluetooth: hci0: command tx timeout [ 52.672904][ T5739] Bluetooth: hci3: command tx timeout [ 53.149802][ T5910] random: crng reseeded on system resumption [ 53.172180][ T5910] Restarting kernel threads ... [ 53.174979][ T5910] Done restarting kernel threads. [ 53.257303][ T5883] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 53.409888][ T5883] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 53.414207][ T5883] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 53.422120][ T5883] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 53.425869][ T5883] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.429710][ T5883] usb 8-1: Product: syz [ 53.431385][ T5883] usb 8-1: Manufacturer: syz [ 53.433261][ T5883] usb 8-1: SerialNumber: syz [ 53.439638][ T5883] usb 8-1: config 0 descriptor?? [ 53.445777][ T5883] hub 8-1:0.0: bad descriptor, ignoring hub [ 53.448398][ T5883] hub 8-1:0.0: probe with driver hub failed with error -5 [ 53.455454][ T5883] input: syz syz as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input5 [ 53.813435][ T5883] IPVS: starting estimator thread 0... [ 53.897316][ T5913] IPVS: using max 43 ests per chain, 103200 per kthread [ 54.415913][ T5827] usb 5-1: USB disconnect, device number 2 [ 54.448947][ T24] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 54.485604][ T5935] evm: overlay not supported [ 54.628839][ T24] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 54.635626][ T24] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 54.641054][ T24] usb 7-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 54.651098][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.660381][ T5743] Bluetooth: hci1: command tx timeout [ 54.737417][ T5743] Bluetooth: hci3: command tx timeout [ 54.737443][ T5739] Bluetooth: hci0: command tx timeout [ 54.739698][ T5743] Bluetooth: hci2: command tx timeout [ 54.876174][ T24] usb 7-1: USB disconnect, device number 2 [ 55.573927][ T5955] netlink: 116 bytes leftover after parsing attributes in process `syz.0.16'. [ 55.768247][ T5965] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 55.838465][ T5966] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 56.142466][ T5970] lo speed is unknown, defaulting to 1000 [ 56.145819][ T5970] lo speed is unknown, defaulting to 1000 [ 56.151221][ T5970] lo speed is unknown, defaulting to 1000 [ 56.167711][ T3259] usb 8-1: USB disconnect, device number 2 [ 56.319471][ T5970] infiniband syz1: set active [ 56.322132][ T3259] lo speed is unknown, defaulting to 1000 [ 56.324793][ T5970] infiniband syz1: added lo [ 56.342706][ T5970] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 56.347667][ T5970] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 56.353430][ T5970] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 56.377426][ T5970] RDS/IB: syz1: added [ 56.379066][ T5970] smc: adding ib device syz1 with port count 1 [ 56.381193][ T5970] smc: ib device syz1 port 1 has no pnetid [ 56.384536][ T3259] lo speed is unknown, defaulting to 1000 [ 56.390064][ T5970] lo speed is unknown, defaulting to 1000 [ 56.585039][ T5970] lo speed is unknown, defaulting to 1000 [ 56.738392][ T5743] Bluetooth: hci1: command tx timeout [ 56.807645][ T5970] lo speed is unknown, defaulting to 1000 [ 56.819426][ T5743] Bluetooth: hci2: command tx timeout [ 56.827364][ T5743] Bluetooth: hci0: command tx timeout [ 56.827754][ T5739] Bluetooth: hci3: command tx timeout [ 57.111620][ T5970] lo speed is unknown, defaulting to 1000 [ 57.170169][ T5980] netlink: 20 bytes leftover after parsing attributes in process `syz.0.23'. [ 57.576420][ T5995] netlink: 4 bytes leftover after parsing attributes in process `syz.2.29'. [ 57.631495][ T5999] openvswitch: netlink: ct_state flags 0001010a unsupported [ 57.649663][ T6001] MTRR 1 not used [ 57.714477][ T6004] FAULT_INJECTION: forcing a failure. [ 57.714477][ T6004] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 57.719083][ T6004] CPU: 2 UID: 0 PID: 6004 Comm: syz.0.32 Not tainted syzkaller #0 PREEMPT(full) [ 57.719099][ T6004] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.719106][ T6004] Call Trace: [ 57.719110][ T6004] [ 57.719115][ T6004] dump_stack_lvl+0x100/0x190 [ 57.719133][ T6004] should_fail_ex.cold+0x5/0xa [ 57.719146][ T6004] _copy_to_user+0x32/0xd0 [ 57.719165][ T6004] pagemap_read+0x51b/0x830 [ 57.719183][ T6004] ? __pfx_pagemap_read+0x10/0x10 [ 57.719201][ T6004] ? iov_iter_advance+0xac/0x6d0 [ 57.719217][ T6004] ? rw_verify_area+0xce/0x6d0 [ 57.719234][ T6004] ? __pfx_pagemap_read+0x10/0x10 [ 57.719250][ T6004] vfs_readv+0x5d8/0x8d0 [ 57.719269][ T6004] ? __pfx_vfs_readv+0x10/0x10 [ 57.719295][ T6004] ? __fget_files+0x21f/0x3d0 [ 57.719308][ T6004] ? do_preadv+0x1ac/0x270 [ 57.719324][ T6004] do_preadv+0x1ac/0x270 [ 57.719342][ T6004] ? __pfx_do_preadv+0x10/0x10 [ 57.719358][ T6004] ? ksys_write+0x1ac/0x250 [ 57.719368][ T6004] ? __pfx_ksys_write+0x10/0x10 [ 57.719381][ T6004] __do_fast_syscall_32+0xe7/0x970 [ 57.719399][ T6004] ? lockdep_hardirqs_on+0x78/0x100 [ 57.719415][ T6004] do_fast_syscall_32+0x32/0x70 [ 57.719432][ T6004] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 57.719447][ T6004] RIP: 0023:0xf7f46fec [ 57.719460][ T6004] Code: Unable to access opcode bytes at 0xf7f46fc2. [ 57.719465][ T6004] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 000000000000014d [ 57.719476][ T6004] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000640 [ 57.719496][ T6004] RDX: 0000000000000002 RSI: 0000000000300100 RDI: 0000000000000000 [ 57.719503][ T6004] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 57.719508][ T6004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 57.719514][ T6004] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 57.719528][ T6004] [ 57.794575][ T6003] Process accounting resumed [ 57.832236][ T6007] ufs: You didn't specify the type of your ufs filesystem [ 57.832236][ T6007] [ 57.832236][ T6007] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 57.832236][ T6007] [ 57.832236][ T6007] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 57.843469][ T6007] ufs: ufstype=old is supported read-only [ 57.852399][ T6011] loop0: detected capacity change from 0 to 32768 [ 58.060687][ T6011] device-mapper: thin: Data device (loop1) discard unsupported: Disabling discard passdown. [ 58.546642][ T42] audit: type=1800 audit(1786233836.468:2): pid=6028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.38" name="file0" dev="overlay" ino=102 res=0 errno=0 [ 58.933658][ T6037] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 58.962594][ T6037] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 58.965521][ T6037] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 58.979980][ T6037] vhci_hcd vhci_hcd.0: Device attached [ 59.043877][ T6041] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 59.046655][ T6041] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 59.063290][ T6041] vhci_hcd vhci_hcd.0: Device attached [ 59.247463][ T1486] usb 42-1: SetAddress Request (2) to port 0 [ 59.296709][ T1486] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 59.307345][ T29] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 59.459971][ T6042] vhci_hcd: connection reset by peer [ 59.467055][ T5784] vhci_hcd vhci_hcd.3: stop threads [ 59.471839][ T5784] vhci_hcd vhci_hcd.3: release socket [ 59.478757][ T5784] vhci_hcd vhci_hcd.3: disconnect device [ 59.556342][ T6038] vhci_hcd: connection reset by peer [ 59.563625][ T5784] vhci_hcd vhci_hcd.2: stop threads [ 59.565303][ T5784] vhci_hcd vhci_hcd.2: release socket [ 59.577306][ T5784] vhci_hcd vhci_hcd.2: disconnect device [ 59.777290][ T5743] Bluetooth: hci3: command 0x0405 tx timeout [ 61.741110][ T6075] capability: warning: `syz.0.52' uses deprecated v2 capabilities in a way that may be insecure [ 61.820819][ T42] audit: type=1804 audit(1786233839.788:3): pid=6076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.51" name="/newroot/11/file0" dev="tmpfs" ino=76 res=1 errno=0 [ 61.998893][ T34] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 62.178910][ T34] usb 5-1: descriptor type invalid, skip [ 62.185732][ T34] usb 5-1: descriptor type invalid, skip [ 62.191109][ T34] usb 5-1: descriptor type invalid, skip [ 62.194954][ T34] usb 5-1: descriptor type invalid, skip [ 62.197766][ T34] usb 5-1: descriptor type invalid, skip [ 62.201913][ T34] usb 5-1: not running at top speed; connect to a high speed hub [ 62.210965][ T34] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 62.215058][ T34] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.218967][ T34] usb 5-1: Product: syz [ 62.220726][ T34] usb 5-1: Manufacturer: 秮行ヒ䒟肼耲烓蔈䘮ꙏ毘ɏ쬻敘䟏汄贯⣔Ⴊ鵖趔Ћ黷䀢黋ﭗ̱䡡笗ᄾ䬦ᨘ憭裓 [ 62.226225][ T34] usb 5-1: SerialNumber: syz [ 62.455598][ T34] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 62.500007][ T34] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 62.510137][ T34] usb 5-1: USB disconnect, device number 3 [ 62.533924][ T5747] udevd[5747]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 62.759530][ T6087] FAULT_INJECTION: forcing a failure. [ 62.759530][ T6087] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 62.764337][ T6087] CPU: 0 UID: 0 PID: 6087 Comm: syz.3.54 Not tainted syzkaller #0 PREEMPT(full) [ 62.764353][ T6087] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 62.764360][ T6087] Call Trace: [ 62.764365][ T6087] [ 62.764369][ T6087] dump_stack_lvl+0x100/0x190 [ 62.764387][ T6087] should_fail_ex.cold+0x5/0xa [ 62.764398][ T6087] ? prepare_alloc_pages+0x16d/0x5f0 [ 62.764417][ T6087] should_fail_alloc_page+0xeb/0x140 [ 62.764434][ T6087] prepare_alloc_pages+0x1f0/0x5f0 [ 62.764452][ T6087] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 62.764467][ T6087] ? __kernel_text_address+0xd/0x30 [ 62.764485][ T6087] ? unwind_get_return_address+0x59/0xa0 [ 62.764502][ T6087] ? arch_stack_walk+0x88/0xf0 [ 62.764522][ T6087] ? __lock_acquire+0x49f/0x1a40 [ 62.764540][ T6087] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 62.764553][ T6087] ? stack_trace_save+0x8e/0xc0 [ 62.764569][ T6087] ? __update_page_owner_handle+0x390/0x530 [ 62.764608][ T6087] ? stack_depot_save_flags+0x27/0x9d0 [ 62.764630][ T6087] ? find_held_lock+0x2b/0x80 [ 62.764645][ T6087] ? __lock_acquire+0x49f/0x1a40 [ 62.764665][ T6087] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 62.764684][ T6087] ? policy_nodemask+0xed/0x4f0 [ 62.764702][ T6087] alloc_pages_mpol+0x1fb/0x540 [ 62.764719][ T6087] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 62.764739][ T6087] folio_alloc_mpol_noprof+0x36/0x260 [ 62.764751][ T6087] vma_alloc_folio_noprof+0xed/0x1d0 [ 62.764762][ T6087] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 62.764777][ T6087] do_anonymous_page+0xb2b/0x2080 [ 62.764789][ T6087] ? rcu_read_unlock+0x2d/0xb0 [ 62.764804][ T6087] __handle_mm_fault+0x1d2c/0x2a00 [ 62.764818][ T6087] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 62.764832][ T6087] ? __pfx___handle_mm_fault+0x10/0x10 [ 62.764844][ T6087] ? pte_offset_map_lock+0x174/0x320 [ 62.764860][ T6087] ? find_held_lock+0x2b/0x80 [ 62.764878][ T6087] ? follow_page_pte+0x4d0/0x13f0 [ 62.764897][ T6087] handle_mm_fault+0x37b/0xa30 [ 62.764911][ T6087] __get_user_pages+0x1178/0x32a0 [ 62.764930][ T6087] ? down_read_killable+0x35e/0x520 [ 62.764952][ T6087] ? __pfx___get_user_pages+0x10/0x10 [ 62.764968][ T6087] ? __pfx_gup_fast_fallback+0x10/0x10 [ 62.764987][ T6087] get_user_pages_unlocked+0x1cb/0x7d0 [ 62.765006][ T6087] ? __pfx_get_user_pages_unlocked+0x10/0x10 [ 62.765023][ T6087] ? get_user_pages_fast_only+0xae/0xf0 [ 62.765039][ T6087] ? __pfx_get_user_pages_fast_only+0x10/0x10 [ 62.765056][ T6087] ? __pfx___might_resched+0x10/0x10 [ 62.765077][ T6087] hva_to_pfn+0x871/0xd60 [ 62.765092][ T6087] ? trace_kvm_tdp_mmu_spte_changed+0x83/0x240 [ 62.765110][ T6087] ? __lock_acquire+0x49f/0x1a40 [ 62.765128][ T6087] ? __pfx_hva_to_pfn+0x10/0x10 [ 62.765142][ T6087] ? __lock_acquire+0x49f/0x1a40 [ 62.765160][ T6087] ? __kasan_check_byte+0x13/0x50 [ 62.765177][ T6087] ? is_bpf_text_address+0x8a/0x1a0 [ 62.765194][ T6087] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 62.765214][ T6087] kvm_follow_pfn+0x291/0x430 [ 62.765228][ T6087] __kvm_faultin_pfn+0x11c/0x1a0 [ 62.765242][ T6087] ? __pfx___kvm_faultin_pfn+0x10/0x10 [ 62.765256][ T6087] ? __pfx_xa_load+0x10/0x10 [ 62.765269][ T6087] ? vmx_vcpu_pi_load+0x102/0x8d0 [ 62.765289][ T6087] ? stack_trace_save+0x8e/0xc0 [ 62.765306][ T6087] kvm_mmu_faultin_pfn+0xb73/0x2240 [ 62.765327][ T6087] ? __pfx_fast_page_fault+0x10/0x10 [ 62.765344][ T6087] ? __pfx_kvm_mmu_faultin_pfn+0x10/0x10 [ 62.765362][ T6087] ? __kvm_mmu_topup_memory_cache+0x332/0x5f0 [ 62.765374][ T6087] ? vmx_vcpu_load_vmcs+0x21d/0x760 [ 62.765396][ T6087] kvm_tdp_page_fault+0x182/0x3d0 [ 62.765409][ T6087] kvm_mmu_do_page_fault+0x5a4/0x6c0 [ 62.765422][ T6087] ? __pfx_kvm_mmu_do_page_fault+0x10/0x10 [ 62.765434][ T6087] ? lock_acquire+0x1b9/0x370 [ 62.765447][ T6087] ? kvm_sched_in+0x9a/0xf0 [ 62.765464][ T6087] kvm_mmu_page_fault+0x1dd/0x1ab0 [ 62.765479][ T6087] ? __schedule+0x126e/0x6730 [ 62.765492][ T6087] ? __pfx_clockevents_program_event+0x10/0x10 [ 62.765510][ T6087] ? __pfx_kvm_mmu_page_fault+0x10/0x10 [ 62.765524][ T6087] ? __lock_acquire+0x49f/0x1a40 [ 62.765544][ T6087] ? __pfx___schedule+0x10/0x10 [ 62.765560][ T6087] handle_ept_violation+0x3a3/0x860 [ 62.765577][ T6087] ? __pfx_handle_ept_violation+0x10/0x10 [ 62.765593][ T6087] vmx_handle_exit+0x4d6/0x1ef0 [ 62.765610][ T6087] vcpu_run+0x35ab/0x5de0 [ 62.765625][ T6087] ? vmx_vcpu_load_vmcs+0x21d/0x760 [ 62.765647][ T6087] ? __pfx_vcpu_run+0x10/0x10 [ 62.765666][ T6087] ? rcu_is_watching+0x12/0xc0 [ 62.765682][ T6087] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 62.765697][ T6087] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 62.765716][ T6087] kvm_vcpu_ioctl+0x730/0x1700 [ 62.765729][ T6087] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 62.765740][ T6087] ? tomoyo_path_number_perm+0x188/0x580 [ 62.765756][ T6087] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 62.765770][ T6087] ? get_pid_task+0x106/0x250 [ 62.765788][ T6087] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 62.765805][ T6087] ? do_vfs_ioctl+0x226/0x13e0 [ 62.765822][ T6087] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 62.765844][ T6087] kvm_vcpu_compat_ioctl+0x20f/0x3c0 [ 62.765856][ T6087] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 62.765867][ T6087] ? __fget_files+0x21f/0x3d0 [ 62.765881][ T6087] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 62.765892][ T6087] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 62.765911][ T6087] __do_fast_syscall_32+0xe7/0x970 [ 62.765927][ T6087] ? lockdep_hardirqs_on+0x78/0x100 [ 62.765944][ T6087] do_fast_syscall_32+0x32/0x70 [ 62.765961][ T6087] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 62.765976][ T6087] RIP: 0023:0xf7f97fec [ 62.766013][ T6087] Code: Unable to access opcode bytes at 0xf7f97fc2. [ 62.766019][ T6087] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 62.766031][ T6087] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae80 [ 62.766038][ T6087] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 62.766044][ T6087] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 62.766050][ T6087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 62.766056][ T6087] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 62.766069][ T6087] [ 63.378438][ T5827] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 63.430953][ T6105] syz.2.60 uses obsolete (PF_INET,SOCK_PACKET) [ 63.572146][ T5827] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 63.576964][ T5827] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 63.585963][ T5827] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 63.595536][ T5827] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 63.601044][ T5827] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 63.606476][ T5827] usb 5-1: Product: syz [ 63.608133][ T5827] usb 5-1: Manufacturer: syz [ 63.629553][ T6092] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 63.639373][ T5827] garmin_gps 5-1:1.0: Garmin GPS usb/tty converter detected [ 63.668562][ T5827] usb 5-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 64.089394][ T50] usb 5-1: USB disconnect, device number 4 [ 64.178173][ T50] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 64.189678][ T50] garmin_gps 5-1:1.0: device disconnected [ 64.427742][ T1486] usb 42-1: device descriptor read/8, error -110 [ 64.498902][ T29] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 64.829538][ T1486] usb usb42-port1: attempt power cycle [ 65.391871][ T1486] usb usb42-port1: unable to enumerate USB device [ 65.657397][ T6144] syz.3.72 (6144): drop_caches: 2 [ 65.774430][ T6142] ublk0: read batch cmd buffer failed [ 65.786150][ T6142] ublk0: read batch cmd buffer failed [ 65.899376][ T6149] netlink: 'syz.0.75': attribute type 1 has an invalid length. [ 65.907426][ T29] usb 8-1: new low-speed USB device number 3 using dummy_hcd [ 65.995045][ T6149] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 66.058155][ T6154] netlink: 'syz.0.76': attribute type 2 has an invalid length. [ 66.078919][ T29] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 66.082076][ T29] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 66.085888][ T29] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 66.090442][ T29] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 66.094782][ T29] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 66.098635][ T29] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 66.102089][ T29] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 66.106168][ T29] usb 8-1: config 168 interface 0 has no altsetting 0 [ 66.109255][ T29] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 66.111675][ T29] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 66.115132][ T29] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 66.118674][ T29] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 66.122337][ T29] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 66.125840][ T29] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 66.129477][ T29] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 66.133593][ T29] usb 8-1: config 168 interface 0 has no altsetting 0 [ 66.136435][ T29] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 66.138983][ T29] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 66.142438][ T29] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 66.145706][ T29] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 66.149650][ T29] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 66.153193][ T29] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 66.156781][ T29] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 66.161099][ T29] usb 8-1: config 168 interface 0 has no altsetting 0 [ 66.165464][ T29] usb 8-1: string descriptor 0 read error: -22 [ 66.167553][ T29] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 66.170623][ T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.185786][ T29] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 66.533364][ T6156] No control pipe specified [ 66.756765][ T6164] netlink: 4 bytes leftover after parsing attributes in process `syz.2.78'. [ 67.232436][ T6174] usb3503 0-0008: unknown mode is requested [ 67.234788][ T6174] usb3503 0-0008: usb3503_probe: probed in standby mode [ 67.241528][ T6174] i2c i2c-0: new_device: Instantiated device usb3503 at 0x08 [ 67.246098][ T6174] i2c i2c-0: delete_device: Deleting device usb3503 at 0x08 [ 68.233518][ T5743] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 68.237581][ T5743] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 68.241339][ T5743] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 68.245815][ T5743] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 68.249603][ T5743] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 68.596644][ T1341] usb 8-1: USB disconnect, device number 3 [ 68.663817][ T5784] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.713746][ T6180] lo speed is unknown, defaulting to 1000 [ 68.787326][ T5784] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.884927][ T5784] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.972647][ T5784] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.049929][ T6198] Zero length message leads to an empty skb [ 69.129186][ T5784] bridge_slave_1: left allmulticast mode [ 69.131950][ T5784] bridge_slave_1: left promiscuous mode [ 69.135416][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.150210][ T6203] netlink: 4 bytes leftover after parsing attributes in process `syz.3.89'. [ 69.166391][ T5784] bridge_slave_0: left allmulticast mode [ 69.169953][ T5784] bridge_slave_0: left promiscuous mode [ 69.177413][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.380232][ T5784] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 69.390697][ T5784] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 69.411644][ T5784] bond0 (unregistering): Released all slaves [ 69.597617][ T1341] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 69.762621][ T1341] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 69.767736][ T1341] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 69.772352][ T1341] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 69.775813][ T1341] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 69.788821][ T1341] usb 5-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.00 [ 69.800222][ T1341] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.816260][ T6208] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 69.818807][ T6208] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 69.846768][ T5447] 8021q: adding VLAN 0 to HW filter on device eth2 [ 69.853090][ T5739] Bluetooth: hci1: urb ffff888024872200 submission failed (90) [ 69.978044][ T6180] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.988528][ T6180] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.991802][ T6180] bridge_slave_0: entered allmulticast mode [ 69.994900][ T6180] bridge_slave_0: entered promiscuous mode [ 70.098345][ T6180] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.109951][ T6180] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.119019][ T6180] bridge_slave_1: entered allmulticast mode [ 70.131127][ T6180] bridge_slave_1: entered promiscuous mode [ 70.202272][ T6275] Bluetooth: MGMT ver 1.23 [ 70.210637][ T5739] Bluetooth: hci0: unexpected cc 0x2029 length: 100 > 1 [ 70.245133][ T6180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.257412][ T5739] Bluetooth: hci4: command tx timeout [ 70.264178][ T6180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.294285][ T5784] hsr_slave_0: left promiscuous mode [ 70.299780][ T5784] hsr_slave_1: left promiscuous mode [ 70.303551][ T5784] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.306105][ T5784] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.314868][ T5784] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.317661][ T5784] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.340148][ T5784] veth1_macvtap: left promiscuous mode [ 70.343563][ T5784] veth0_macvtap: left promiscuous mode [ 70.346828][ T5784] veth1_vlan: left promiscuous mode [ 70.349564][ T5784] veth0_vlan: left promiscuous mode [ 70.439767][ T6083] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 70.540690][ T5784] team0 (unregistering): Port device team_slave_1 removed [ 70.555234][ T5784] team0 (unregistering): Port device team_slave_0 removed [ 70.617303][ T6083] usb 8-1: Using ep0 maxpacket: 16 [ 70.621032][ T6083] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 70.624521][ T6083] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 70.629148][ T6083] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 70.633998][ T6083] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 70.637411][ T6083] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 70.641759][ T5447] 8021q: adding VLAN 0 to HW filter on device eth4 [ 70.642382][ T6083] usb 8-1: Manufacturer: syz [ 70.647918][ T6083] usb 8-1: config 0 descriptor?? [ 70.648729][ T6180] team0: Port device team_slave_0 added [ 70.657404][ T6180] team0: Port device team_slave_1 added [ 70.685269][ T6180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.687974][ T6180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.696486][ T6180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.705261][ T6180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.707588][ T6180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.715560][ T6180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.750824][ T6180] hsr_slave_0: entered promiscuous mode [ 70.753074][ T6180] hsr_slave_1: entered promiscuous mode [ 70.755116][ T6180] debugfs: 'hsr0' already exists in 'hsr' [ 70.756920][ T6180] Cannot create hsr debugfs directory [ 70.919749][ T6180] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.927103][ T6180] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 70.930256][ T6180] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.934289][ T6180] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 70.937287][ T6180] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 70.942358][ T6180] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 70.945319][ T6180] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.951289][ T6180] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 70.972651][ T41] usb 8-1: USB disconnect, device number 4 [ 70.981417][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.985235][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.006942][ T6180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.050518][ T5447] 8021q: adding VLAN 0 to HW filter on device eth3 [ 71.059774][ T6180] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.079450][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.082304][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.092217][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.095160][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.137581][ T1486] usb 5-1: USB disconnect, device number 5 [ 71.306874][ T5447] 8021q: adding VLAN 0 to HW filter on device eth5 [ 71.494396][ T6180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.675104][ T6180] veth0_vlan: entered promiscuous mode [ 71.687088][ T6180] veth1_vlan: entered promiscuous mode [ 71.716934][ T6180] veth0_macvtap: entered promiscuous mode [ 71.724105][ T6180] veth1_macvtap: entered promiscuous mode [ 71.972669][ T6180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.026113][ T6180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.154531][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.162104][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.193301][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.196016][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.219793][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.223559][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.229627][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.233383][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.248102][ T1341] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 72.338320][ T5739] Bluetooth: hci4: command tx timeout [ 72.357834][ T6358] pim6reg: entered allmulticast mode [ 72.363171][ T6358] pim6reg: left allmulticast mode [ 72.428411][ T1341] usb 5-1: config 0 has no interfaces? [ 72.434341][ T1341] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 72.443194][ T1341] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.570034][ T1341] usb 5-1: config 0 descriptor?? [ 72.642738][ T6361] dlm: no local IP address has been set [ 72.645053][ T6361] dlm: cannot start dlm midcomms -107 [ 72.649425][ T6361] warning: `syz.2.106' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 72.705706][ T6363] netlink: 4 bytes leftover after parsing attributes in process `syz.2.108'. [ 73.202189][ T6369] netlink: 'syz.3.107': attribute type 9 has an invalid length. [ 73.203447][ T1341] usb 5-1: USB disconnect, device number 6 [ 73.208212][ T6369] netlink: 'syz.3.107': attribute type 1 has an invalid length. [ 73.210498][ T6369] netlink: 'syz.3.107': attribute type 8 has an invalid length. qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 73.727327][ T5827] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 73.857920][ T5827] usb 9-1: device descriptor read/64, error -71 [ 74.107394][ T5827] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 74.248592][ T5827] usb 9-1: device descriptor read/64, error -71 [ 74.370515][ T5827] usb usb9-port1: attempt power cycle [ 74.427319][ T5739] Bluetooth: hci4: command tx timeout [ 74.987283][ T5827] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 75.134514][ T6428] netlink: 8 bytes leftover after parsing attributes in process `syz.3.116'. [ 75.164246][ T6428] CIFS: Attempting to mount //127.0.0.1/share [ 75.243808][ T6430] lo: entered allmulticast mode [ 75.257767][ T5827] usb 9-1: device descriptor read/8, error -71 [ 75.441974][ T6432] bridge1: entered promiscuous mode [ 75.444555][ T6432] bridge1: entered allmulticast mode [ 75.493802][ T42] audit: type=1804 audit(1786233853.458:4): pid=6432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.117" name="/newroot/35/file0/file0" dev="9p" ino=76573387 res=1 errno=0 [ 75.497616][ T5827] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 75.527752][ T5827] usb 9-1: device descriptor read/8, error -71 [ 75.589423][ T220] Bluetooth: hci1: Frame reassembly failed (-84) [ 75.639736][ T5827] usb usb9-port1: unable to enumerate USB device [ 75.933552][ T6427] lo: left allmulticast mode [ 75.937816][ T6428] CIFS: VFS: cifs_mount failed w/return code = -112 [ 76.023122][ T6436] IPVS: Scheduler module ip_vs_sip not found [ 76.407986][ T6083] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 76.514257][ T5743] Bluetooth: hci4: command tx timeout [ 76.557672][ T6083] usb 7-1: Using ep0 maxpacket: 16 [ 76.566131][ T6083] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 76.570424][ T6083] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 76.574720][ T6083] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 76.581326][ T6083] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 76.584661][ T6083] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 76.588031][ T6083] usb 7-1: Manufacturer: syz [ 76.593845][ T6083] usb 7-1: config 0 descriptor?? [ 76.813659][ T5883] usb 7-1: USB disconnect, device number 3 [ 77.324070][ T6434] Set syz1 is full, maxelem 65536 reached [ 77.380411][ T42] audit: type=1800 audit(1786233855.348:5): pid=6466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.125" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 77.429047][ T6465] syz.3.126 (6465): drop_caches: 2 [ 77.495098][ T6468] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 77.553840][ T6470] overlayfs: missing 'lowerdir' [ 77.620060][ T5739] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 77.621083][ T5743] Bluetooth: hci1: command 0x1003 tx timeout [ 77.677923][ T6083] usb 8-1: new low-speed USB device number 5 using dummy_hcd [ 77.830328][ T6083] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 77.834435][ T6083] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 77.840071][ T6083] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 77.844846][ T6083] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 77.851952][ T6083] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 77.856874][ T6083] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 77.865160][ T6083] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 77.871711][ T6083] usb 8-1: config 168 interface 0 has no altsetting 0 [ 77.875888][ T6083] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 77.878891][ T6475] bond0: Error: CAN devices cannot be enslaved [ 77.879987][ T6083] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 77.885410][ T6083] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 77.887336][ T1341] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 77.889790][ T6083] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 77.895958][ T6083] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 77.900365][ T6083] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 77.904442][ T6083] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 77.909912][ T6083] usb 8-1: config 168 interface 0 has no altsetting 0 [ 77.913308][ T6083] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 77.915847][ T6083] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 77.919683][ T6083] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 77.923711][ T6083] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 77.928052][ T6083] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 77.932188][ T6083] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 77.935897][ T6083] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 77.940382][ T6083] usb 8-1: config 168 interface 0 has no altsetting 0 [ 77.945031][ T6083] usb 8-1: string descriptor 0 read error: -22 [ 77.948254][ T6083] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 77.951118][ T6083] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.960397][ T6083] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 78.058792][ T1341] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 78.062846][ T1341] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 78.066171][ T1341] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 78.072925][ T1341] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 78.076422][ T1341] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 78.079300][ T1341] usb 7-1: Product: syz [ 78.080965][ T1341] usb 7-1: Manufacturer: syz [ 78.088149][ T6473] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 78.092188][ T1341] garmin_gps 7-1:1.0: Garmin GPS usb/tty converter detected [ 78.100588][ T1341] usb 7-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 78.178233][ T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 78.328347][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 78.332036][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 78.339214][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 78.344183][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 78.350549][ T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 78.355455][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 78.359946][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.540762][ T6083] usb 7-1: USB disconnect, device number 4 [ 78.551651][ T6083] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 78.559428][ T6083] garmin_gps 7-1:1.0: device disconnected [ 78.568758][ T10] usb 5-1: GET_CAPABILITIES returned 0 [ 78.570561][ T10] usbtmc 5-1:16.0: can't read capabilities [ 79.786870][ T6508] ip6gre1: entered allmulticast mode [ 79.790483][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 80.562956][ T29] usb 8-1: USB disconnect, device number 5 [ 80.851531][ T10] usb 5-1: USB disconnect, device number 7 [ 80.868139][ T5827] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 81.029480][ T5827] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 81.033778][ T5827] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 81.038728][ T5827] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 81.045996][ T5827] usb 9-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 81.050105][ T5827] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 81.053148][ T5827] usb 9-1: Product: syz [ 81.054827][ T5827] usb 9-1: Manufacturer: syz [ 81.060033][ T6520] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 81.064427][ T5827] garmin_gps 9-1:1.0: Garmin GPS usb/tty converter detected [ 81.074741][ T5827] usb 9-1: Garmin GPS usb/tty converter now attached to ttyUSB0 cgroup.contr[ 81.234403][ T850] cfg80211: failed to load regulatory.db [ 81.409638][ T41] usb 9-1: USB disconnect, device number 6 [ 81.426605][ T41] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 81.434456][ T41] garmin_gps 9-1:1.0: device disconnected [ 82.648326][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.757803][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.799638][ T5743] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.803528][ T5743] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.806432][ T5743] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.811509][ T5743] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.815570][ T5743] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.873227][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.890889][ T42] audit: type=1326 audit(1786233860.858:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6581 comm="syz.0.155" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f46fec code=0x0 [ 82.989039][ T6588] netlink: 28 bytes leftover after parsing attributes in process `syz.4.156'. [ 83.001945][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.074380][ T6577] lo speed is unknown, defaulting to 1000 [ 83.089692][ T6595] netlink: 116 bytes leftover after parsing attributes in process `syz.4.157'. [ 83.172285][ T12] bridge_slave_1: left allmulticast mode [ 83.174084][ T12] bridge_slave_1: left promiscuous mode [ 83.178768][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.182668][ T12] bridge_slave_0: left allmulticast mode [ 83.183893][ T6600] netlink: 8 bytes leftover after parsing attributes in process `syz.4.159'. [ 83.184514][ T12] bridge_slave_0: left promiscuous mode [ 83.187325][ T6600] netlink: 12 bytes leftover after parsing attributes in process `syz.4.159'. [ 83.191149][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.235132][ T6605] netlink: 8 bytes leftover after parsing attributes in process `syz.4.159'. [ 83.239464][ T6605] netlink: 12 bytes leftover after parsing attributes in process `syz.4.159'. [ 83.333916][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 83.340655][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.344544][ T12] bond0 (unregistering): Released all slaves [ 83.364902][ T6579] sch_fq: defrate 2 ignored. [ 83.381744][ T6608] netlink: 88 bytes leftover after parsing attributes in process `syz.4.159'. [ 83.385616][ T5447] 8021q: adding VLAN 0 to HW filter on device eth6 [ 83.397941][ T6277] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.428184][ T6277] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.500144][ T6615] tmpfs: Unknown parameter 'fd' [ 83.611236][ T5812] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.617987][ T5812] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.637560][ T6593] infiniband syz2: set down [ 83.639214][ T6593] infiniband syz2: added ipvlan0 [ 83.639453][ T6630] netlink: 104 bytes leftover after parsing attributes in process `syz.2.163'. [ 83.643799][ T6630] netlink: 104 bytes leftover after parsing attributes in process `syz.2.163'. [ 83.646951][ T6631] netlink: 104 bytes leftover after parsing attributes in process `syz.2.163'. [ 83.655393][ T6593] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 83.662680][ T6593] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 83.668454][ T6593] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 83.675794][ T5447] 8021q: adding VLAN 0 to HW filter on device eth7 [ 83.685784][ T6593] RDS/IB: syz2: added [ 83.688019][ T6593] smc: adding ib device syz2 with port count 1 [ 83.690092][ T6593] smc: ib device syz2 port 1 has no pnetid [ 83.730909][ T6615] ./file0: Can't open blockdev [ 83.781021][ T6577] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.783441][ T6577] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.786453][ T6577] bridge_slave_0: entered allmulticast mode [ 83.789973][ T6577] bridge_slave_0: entered promiscuous mode [ 83.793586][ T6577] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.796459][ T6577] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.799609][ T6577] bridge_slave_1: entered allmulticast mode [ 83.803800][ T6577] bridge_slave_1: entered promiscuous mode [ 83.835678][ T6577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.836552][ T6645] 9p: Bad value for 'rfdno' [ 83.840239][ T6577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.858531][ T6645] netlink: 'syz.2.164': attribute type 18 has an invalid length. [ 83.867610][ T6577] team0: Port device team_slave_0 added [ 83.873162][ T6577] team0: Port device team_slave_1 added [ 83.893718][ T6577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.895916][ T6577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.904675][ T6577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.912035][ T6577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.914330][ T6577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.922400][ T6577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.947322][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 83.953813][ T6577] hsr_slave_0: entered promiscuous mode [ 83.956093][ T6577] hsr_slave_1: entered promiscuous mode [ 83.958471][ T6577] debugfs: 'hsr0' already exists in 'hsr' [ 83.960390][ T6577] Cannot create hsr debugfs directory [ 83.973873][ T5447] 8021q: adding VLAN 0 to HW filter on device eth8 [ 84.073037][ T6577] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 84.077976][ T6577] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.080803][ T6577] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 84.088403][ T6577] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.091180][ T6577] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 84.095347][ T6577] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.098183][ T6577] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 84.103015][ T6577] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.121679][ T6577] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.124054][ T6577] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.127407][ T6577] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.129639][ T6577] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.163555][ T6577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.172648][ T6577] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.177382][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.181960][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.197094][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.199390][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.205472][ T5447] 8021q: adding VLAN 0 to HW filter on device eth9 [ 84.212237][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.215242][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.562246][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 84.605339][ T12] hsr_slave_0: left promiscuous mode [ 84.612934][ T12] hsr_slave_1: left promiscuous mode [ 84.615045][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.620249][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.672879][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.680506][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.698152][ T12] veth1_macvtap: left promiscuous mode [ 84.703014][ T12] veth0_macvtap: left promiscuous mode [ 84.717439][ T12] veth1_vlan: left promiscuous mode [ 84.719742][ T12] veth0_vlan: left promiscuous mode [ 84.773706][ T6693] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 84.776203][ T6693] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 84.785156][ T6693] vhci_hcd vhci_hcd.0: Device attached [ 84.794937][ T6696] binder: 6689:6696 ioctl c00c6211 0 returned -14 [ 84.897439][ T5739] Bluetooth: hci1: command tx timeout [ 85.047379][ T1486] usb 38-1: SetAddress Request (2) to port 0 [ 85.049408][ T1486] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 85.370411][ T6694] vhci_hcd: connection reset by peer [ 85.373641][ T5812] vhci_hcd vhci_hcd.0: stop threads [ 85.375711][ T5812] vhci_hcd vhci_hcd.0: release socket [ 85.378482][ T5812] vhci_hcd vhci_hcd.0: disconnect device [ 85.452460][ T12] team0 (unregistering): Port device team_slave_1 removed [ 85.460852][ T12] team0 (unregistering): Port device team_slave_0 removed [ 85.542542][ T1158] smc: removing ib device syz1 [ 85.581620][ T1158] smbdirect: ib_dev[syz1] removed [ 85.873358][ T42] audit: type=1326 audit(1786233863.838:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6710 comm="syz.4.173" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 85.908034][ T42] audit: type=1326 audit(1786233863.858:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6710 comm="syz.4.173" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 85.941750][ T42] audit: type=1326 audit(1786233863.878:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6710 comm="syz.4.173" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 85.949569][ T34] lo speed is unknown, defaulting to 1000 [ 85.951560][ T34] syz1: Port: 1 Link DOWN [ 85.960843][ T42] audit: type=1326 audit(1786233863.898:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6710 comm="syz.4.173" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 85.992359][ T42] audit: type=1326 audit(1786233863.898:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6710 comm="syz.4.173" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf705efec code=0x7ffc0000 [ 86.033257][ T42] audit: type=1326 audit(1786233863.898:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6710 comm="syz.4.173" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 86.053718][ T6577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.094885][ T42] audit: type=1326 audit(1786233863.898:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6710 comm="syz.4.173" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 86.094917][ T42] audit: type=1326 audit(1786233863.898:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6710 comm="syz.4.173" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 86.094939][ T42] audit: type=1326 audit(1786233863.898:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6710 comm="syz.4.173" exe="/syz-executor" sig=0 arch=40000003 syscall=394 compat=1 ip=0xf705efec code=0x7ffc0000 [ 86.405325][ T6577] veth0_vlan: entered promiscuous mode [ 86.601813][ T6577] veth1_vlan: entered promiscuous mode [ 86.657605][ T5739] Bluetooth: hci0: command 0x0c1a tx timeout [ 86.659926][ T5743] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 86.695424][ T6577] veth0_macvtap: entered promiscuous mode [ 86.706067][ T6577] veth1_macvtap: entered promiscuous mode [ 86.728530][ T6577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.735834][ T6577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.885853][ T6735] FAULT_INJECTION: forcing a failure. [ 86.885853][ T6735] name failslab, interval 1, probability 0, space 0, times 0 [ 86.890908][ T6735] CPU: 1 UID: 0 PID: 6735 Comm: syz.2.178 Not tainted syzkaller #0 PREEMPT(full) [ 86.890924][ T6735] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.890931][ T6735] Call Trace: [ 86.890935][ T6735] [ 86.890939][ T6735] dump_stack_lvl+0x100/0x190 [ 86.890957][ T6735] should_fail_ex.cold+0x5/0xa [ 86.890971][ T6735] should_failslab+0xc2/0x120 [ 86.890987][ T6735] __kvmalloc_node_noprof+0x116/0x970 [ 86.891004][ T6735] ? bucket_table_alloc.isra.0+0x88/0x460 [ 86.891022][ T6735] bucket_table_alloc.isra.0+0x88/0x460 [ 86.891038][ T6735] __rhashtable_init_noprof+0x43a/0x890 [ 86.891055][ T6735] __rhltable_init_noprof+0x28/0x70 [ 86.891071][ T6735] nf_tables_newtable+0xf70/0x1a90 [ 86.891093][ T6735] ? __pfx_nf_tables_newtable+0x10/0x10 [ 86.891112][ T6735] ? __nla_parse+0x40/0x60 [ 86.891126][ T6735] nfnetlink_rcv_batch+0x1410/0x2880 [ 86.891151][ T6735] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 86.891167][ T6735] ? find_held_lock+0x2b/0x80 [ 86.891188][ T6735] ? __local_bh_enable_ip+0x9e/0x120 [ 86.891201][ T6735] ? lockdep_hardirqs_on+0x78/0x100 [ 86.891220][ T6735] ? __dev_queue_xmit+0xa12/0x4970 [ 86.891254][ T6735] ? __nla_parse+0x40/0x60 [ 86.891268][ T6735] nfnetlink_rcv+0x3bd/0x440 [ 86.891283][ T6735] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 86.891303][ T6735] netlink_unicast+0x585/0x850 [ 86.891318][ T6735] ? __pfx_netlink_unicast+0x10/0x10 [ 86.891334][ T6735] netlink_sendmsg+0x8b0/0xda0 [ 86.891349][ T6735] ? __pfx_netlink_sendmsg+0x10/0x10 [ 86.891363][ T6735] ? apparmor_socket_sendmsg+0x15b/0x270 [ 86.891378][ T6735] ____sys_sendmsg+0xa4d/0xbe0 [ 86.891389][ T6735] ? __pfx_netlink_sendmsg+0x10/0x10 [ 86.891402][ T6735] ? __pfx_____sys_sendmsg+0x10/0x10 [ 86.891420][ T6735] ___sys_sendmsg+0x190/0x1e0 [ 86.891433][ T6735] ? __pfx____sys_sendmsg+0x10/0x10 [ 86.891451][ T6735] ? find_held_lock+0x2b/0x80 [ 86.891474][ T6735] __sys_sendmsg+0x160/0x210 [ 86.891490][ T6735] ? __pfx___sys_sendmsg+0x10/0x10 [ 86.891509][ T6735] ? __pfx_ksys_write+0x10/0x10 [ 86.891523][ T6735] __do_fast_syscall_32+0xe7/0x970 [ 86.891540][ T6735] ? lockdep_hardirqs_on+0x78/0x100 [ 86.891556][ T6735] do_fast_syscall_32+0x32/0x70 [ 86.891573][ T6735] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 86.891588][ T6735] RIP: 0023:0xf7fa3fec [ 86.891601][ T6735] Code: Unable to access opcode bytes at 0xf7fa3fc2. [ 86.891606][ T6735] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 86.891617][ T6735] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 86.891623][ T6735] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 86.891629][ T6735] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 86.891637][ T6735] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 86.891645][ T6735] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 86.891665][ T6735] [ 86.977829][ T5743] Bluetooth: hci1: command tx timeout [ 87.303922][ T1201] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.317648][ T1201] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.342704][ T6741] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 87.349010][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.351751][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.356042][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.360570][ T12] IPVS: stop unused estimator thread 0... [ 87.363535][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.370119][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.383772][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.060793][ T5743] Bluetooth: hci1: command tx timeout [ 89.773700][ T6812] FAULT_INJECTION: forcing a failure. [ 89.773700][ T6812] name failslab, interval 1, probability 0, space 0, times 0 [ 89.779377][ T6812] CPU: 3 UID: 0 PID: 6812 Comm: syz.0.196 Not tainted syzkaller #0 PREEMPT(full) [ 89.779413][ T6812] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 89.779420][ T6812] Call Trace: [ 89.779424][ T6812] [ 89.779429][ T6812] dump_stack_lvl+0x100/0x190 [ 89.779448][ T6812] should_fail_ex.cold+0x5/0xa [ 89.779461][ T6812] should_failslab+0xc2/0x120 [ 89.779479][ T6812] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 89.779494][ T6812] ? __alloc_skb+0x5b7/0x710 [ 89.779510][ T6812] ? __alloc_skb+0x140/0x710 [ 89.779526][ T6812] __alloc_skb+0x140/0x710 [ 89.779540][ T6812] ? __alloc_skb+0x5b7/0x710 [ 89.779554][ T6812] ? __pfx___alloc_skb+0x10/0x10 [ 89.779572][ T6812] netlink_alloc_large_skb+0x69/0x150 [ 89.779587][ T6812] netlink_sendmsg+0x680/0xda0 [ 89.779602][ T6812] ? __pfx_netlink_sendmsg+0x10/0x10 [ 89.779616][ T6812] ? apparmor_socket_sendmsg+0x15b/0x270 [ 89.779631][ T6812] ____sys_sendmsg+0xa4d/0xbe0 [ 89.779642][ T6812] ? __pfx_netlink_sendmsg+0x10/0x10 [ 89.779656][ T6812] ? __pfx_____sys_sendmsg+0x10/0x10 [ 89.779673][ T6812] ___sys_sendmsg+0x190/0x1e0 [ 89.779686][ T6812] ? __pfx____sys_sendmsg+0x10/0x10 [ 89.779710][ T6812] ? __pfx_vfs_write+0x10/0x10 [ 89.779721][ T6812] ? do_sys_openat2+0x159/0x1e0 [ 89.779739][ T6812] __sys_sendmsg+0x160/0x210 [ 89.779760][ T6812] ? __pfx___sys_sendmsg+0x10/0x10 [ 89.779780][ T6812] ? __pfx_ksys_write+0x10/0x10 [ 89.779807][ T6812] __do_fast_syscall_32+0xe7/0x970 [ 89.779825][ T6812] ? lockdep_hardirqs_on+0x78/0x100 [ 89.779842][ T6812] do_fast_syscall_32+0x32/0x70 [ 89.779858][ T6812] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 89.779873][ T6812] RIP: 0023:0xf7f46fec [ 89.779887][ T6812] Code: Unable to access opcode bytes at 0xf7f46fc2. [ 89.779892][ T6812] RSP: 002b:00000000f53e550c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 89.779903][ T6812] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 89.779910][ T6812] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 89.779916][ T6812] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 89.779922][ T6812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.779928][ T6812] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 89.779941][ T6812] [ 90.049779][ T9] usb 9-1: new low-speed USB device number 7 using dummy_hcd [ 90.097294][ T1486] usb 38-1: device descriptor read/8, error -110 [ 90.146131][ T6811] syz.4.195 (6811): drop_caches: 2 [ 90.288174][ T9] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 90.291150][ T9] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 90.298188][ T9] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 90.302186][ T9] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 90.317665][ T9] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 90.322272][ T9] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 90.325764][ T9] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 90.335757][ T9] usb 9-1: config 168 interface 0 has no altsetting 0 [ 90.342029][ T9] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 90.344484][ T9] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 90.357660][ T9] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 90.361020][ T9] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 90.364724][ T9] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 90.373696][ T9] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 90.378714][ T9] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 90.382787][ T9] usb 9-1: config 168 interface 0 has no altsetting 0 [ 90.385730][ T9] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 90.388890][ T9] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 90.392166][ T9] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 90.395490][ T9] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 90.399793][ T9] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 90.403298][ T9] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 90.406718][ T9] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 90.411504][ T9] usb 9-1: config 168 interface 0 has no altsetting 0 [ 90.415938][ T9] usb 9-1: string descriptor 0 read error: -22 [ 90.419421][ T9] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 90.422379][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.436219][ T9] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 90.613039][ T6822] netlink: 'syz.2.197': attribute type 2 has an invalid length. [ 90.615721][ T6822] __nla_validate_parse: 4 callbacks suppressed [ 90.615823][ T6822] netlink: 228 bytes leftover after parsing attributes in process `syz.2.197'. [ 90.670497][ T1486] usb usb38-port1: attempt power cycle [ 90.908111][ T6822] netlink: 12 bytes leftover after parsing attributes in process `syz.2.197'. [ 90.913792][ T6822] netlink: 8 bytes leftover after parsing attributes in process `syz.2.197'. [ 90.925177][ T6822] netlink: 'syz.2.197': attribute type 79 has an invalid length. [ 91.155216][ T5743] Bluetooth: hci1: command tx timeout [ 91.193769][ T6849] FAULT_INJECTION: forcing a failure. [ 91.193769][ T6849] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 91.198977][ T6849] CPU: 0 UID: 0 PID: 6849 Comm: syz.0.204 Not tainted syzkaller #0 PREEMPT(full) [ 91.198994][ T6849] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 91.199000][ T6849] Call Trace: [ 91.199004][ T6849] [ 91.199009][ T6849] dump_stack_lvl+0x100/0x190 [ 91.199027][ T6849] should_fail_ex.cold+0x5/0xa [ 91.199040][ T6849] _copy_from_user+0x2e/0xd0 [ 91.199058][ T6849] get_compat_msghdr+0xb3/0x480 [ 91.199078][ T6849] ? __pfx_get_compat_msghdr+0x10/0x10 [ 91.199101][ T6849] ___sys_sendmsg+0x1b6/0x1e0 [ 91.199115][ T6849] ? __pfx____sys_sendmsg+0x10/0x10 [ 91.199133][ T6849] ? find_held_lock+0x2b/0x80 [ 91.199156][ T6849] __sys_sendmsg+0x160/0x210 [ 91.199172][ T6849] ? __pfx___sys_sendmsg+0x10/0x10 [ 91.199191][ T6849] ? __pfx_ksys_write+0x10/0x10 [ 91.199205][ T6849] __do_fast_syscall_32+0xe7/0x970 [ 91.199222][ T6849] ? lockdep_hardirqs_on+0x78/0x100 [ 91.199239][ T6849] do_fast_syscall_32+0x32/0x70 [ 91.199256][ T6849] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 91.199270][ T6849] RIP: 0023:0xf7f46fec [ 91.199283][ T6849] Code: Unable to access opcode bytes at 0xf7f46fc2. [ 91.199288][ T6849] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 91.199299][ T6849] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 91.199306][ T6849] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 91.199312][ T6849] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 91.199317][ T6849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.199324][ T6849] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 91.199336][ T6849] [ 91.270247][ T1486] usb usb38-port1: unable to enumerate USB device [ 91.589102][ T34] libceph: connect (1)[c::]:6789 error -101 [ 91.593677][ T34] libceph: mon0 (1)[c::]:6789 connect error [ 91.599926][ T34] libceph: connect (1)[c::]:6789 error -101 [ 91.601934][ T34] libceph: mon0 (1)[c::]:6789 connect error [ 91.603475][ T6867] binder: 6866:6867 ioctl c0306201 800001c0 returned -22 [ 91.606737][ T6867] binder: 6866:6867 ioctl ae01 fffefffe returned -22 [ 91.612093][ T6853] ceph: No mds server is up or the cluster is laggy [ 91.777322][ T5883] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 91.929087][ T5883] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.932567][ T5883] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 91.935961][ T5883] usb 10-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 91.941464][ T5883] usb 10-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 91.944542][ T5883] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 91.947108][ T5883] usb 10-1: Product: syz [ 91.948567][ T5883] usb 10-1: Manufacturer: syz [ 91.954466][ T6860] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 91.958313][ T5883] garmin_gps 10-1:1.0: Garmin GPS usb/tty converter detected [ 91.965178][ T5883] usb 10-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 92.260551][ T10] usb 10-1: USB disconnect, device number 2 [ 92.269280][ T10] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 92.272692][ T10] garmin_gps 10-1:1.0: device disconnected [ 92.737375][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 92.739602][ T24] usb 9-1: USB disconnect, device number 7 [ 92.819154][ T6882] syzkaller1: entered promiscuous mode [ 92.821531][ T6882] syzkaller1: entered allmulticast mode [ 92.830156][ T6882] binder: 6881:6882 ioctl 4018620d 0 returned -22 [ 93.179262][ T6898] FAULT_INJECTION: forcing a failure. [ 93.179262][ T6898] name failslab, interval 1, probability 0, space 0, times 0 [ 93.188522][ T6898] CPU: 3 UID: 0 PID: 6898 Comm: syz.5.215 Not tainted syzkaller #0 PREEMPT(full) [ 93.188541][ T6898] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 93.188548][ T6898] Call Trace: [ 93.188552][ T6898] [ 93.188557][ T6898] dump_stack_lvl+0x100/0x190 [ 93.188577][ T6898] should_fail_ex.cold+0x5/0xa [ 93.188591][ T6898] should_failslab+0xc2/0x120 [ 93.188608][ T6898] __kmalloc_noprof+0xfc/0x820 [ 93.188637][ T6898] ? __pfx_dynamic_dname+0x10/0x10 [ 93.188655][ T6898] ? tomoyo_encode2+0xfb/0x3c0 [ 93.188679][ T6898] tomoyo_encode2+0xfb/0x3c0 [ 93.188697][ T6898] tomoyo_encode+0x29/0x50 [ 93.188712][ T6898] tomoyo_realpath_from_path+0x18c/0x690 [ 93.188733][ T6898] tomoyo_path_number_perm+0x23c/0x580 [ 93.188746][ T6898] ? tomoyo_path_number_perm+0x22e/0x580 [ 93.188761][ T6898] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 93.188788][ T6898] ? get_pid_task+0x106/0x250 [ 93.188817][ T6898] ? find_held_lock+0x2b/0x80 [ 93.188831][ T6898] ? __fget_files+0x215/0x3d0 [ 93.188841][ T6898] ? hook_file_ioctl_common+0x140/0x440 [ 93.188855][ T6898] ? __fget_files+0x215/0x3d0 [ 93.188867][ T6898] ? __fget_files+0x21f/0x3d0 [ 93.188880][ T6898] security_file_ioctl_compat+0xd3/0x230 [ 93.188896][ T6898] __ia32_compat_sys_ioctl+0xc2/0x360 [ 93.188916][ T6898] __do_fast_syscall_32+0xe7/0x970 [ 93.188934][ T6898] ? lockdep_hardirqs_on+0x78/0x100 [ 93.188950][ T6898] do_fast_syscall_32+0x32/0x70 [ 93.188967][ T6898] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 93.188982][ T6898] RIP: 0023:0xf707efec [ 93.188997][ T6898] Code: Unable to access opcode bytes at 0xf707efc2. [ 93.189001][ T6898] RSP: 002b:00000000f544c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 93.189013][ T6898] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000004020ae46 [ 93.189020][ T6898] RDX: 0000000080000400 RSI: 0000000000000000 RDI: 0000000000000000 [ 93.189026][ T6898] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 93.189032][ T6898] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 93.189038][ T6898] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 93.189052][ T6898] [ 93.191317][ T6898] ERROR: Out of memory at tomoyo_realpath_from_path. [ 93.313833][ T42] kauditd_printk_skb: 142 callbacks suppressed [ 93.313847][ T42] audit: type=1804 audit(1786233871.278:158): pid=6899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.218" name="/newroot/67/file0/file0" dev="9p" ino=76573387 res=1 errno=0 [ 93.361620][ T6903] netlink: 20 bytes leftover after parsing attributes in process `syz.0.219'. [ 93.493424][ T6897] netlink: 12 bytes leftover after parsing attributes in process `syz.4.217'. [ 93.539512][ T6897] Cannot find add_set index 2 as target [ 93.592593][ T6907] syz.5.221 (6907): drop_caches: 2 [ 93.837980][ T10] usb 10-1: new low-speed USB device number 3 using dummy_hcd [ 93.987750][ T6083] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 93.989671][ T10] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 93.997913][ T10] usb 10-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 94.007450][ T10] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 94.018561][ T10] usb 10-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 94.030777][ T10] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 94.035393][ T10] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 94.041339][ T10] usb 10-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 94.048279][ T10] usb 10-1: config 168 interface 0 has no altsetting 0 [ 94.052217][ T10] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 94.055453][ T10] usb 10-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 94.061006][ T10] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 94.064037][ T6911] binder: 6910:6911 ioctl c0306201 80000640 returned -14 [ 94.065563][ T10] usb 10-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 94.074612][ T10] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 94.080819][ T10] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 94.085628][ T10] usb 10-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 94.091941][ T10] usb 10-1: config 168 interface 0 has no altsetting 0 [ 94.095999][ T10] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 94.100217][ T10] usb 10-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 94.104914][ T10] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 94.110302][ T10] usb 10-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 94.115949][ T10] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 94.121651][ T10] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 94.126378][ T10] usb 10-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 94.132828][ T10] usb 10-1: config 168 interface 0 has no altsetting 0 [ 94.140737][ T10] usb 10-1: string descriptor 0 read error: -22 [ 94.143838][ T10] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 94.144350][ T6083] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.148754][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.152555][ T6083] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 94.160793][ T6083] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 94.169916][ T6083] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 94.173983][ T6083] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 94.177162][ T10] adutux 10-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 94.177863][ T6083] usb 7-1: Product: syz [ 94.182426][ T6083] usb 7-1: Manufacturer: syz [ 94.193516][ T6909] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 94.199398][ T6083] garmin_gps 7-1:1.0: Garmin GPS usb/tty converter detected [ 94.212742][ T6083] usb 7-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 94.585208][ T6083] usb 7-1: USB disconnect, device number 5 [ 94.608504][ T6083] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 94.617001][ T6083] garmin_gps 7-1:1.0: device disconnected [ 94.668858][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 94.672819][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.699868][ T5739] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 94.703262][ T5739] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 94.710410][ T5739] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 94.713317][ T5739] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 94.716485][ T5739] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 94.907824][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 94.911071][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.002491][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 95.006552][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.189694][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 95.193848][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.252579][ T6903] Set syz1 is full, maxelem 65536 reached [ 95.273236][ T6919] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.275578][ T6919] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.278901][ T6919] bridge_slave_0: entered allmulticast mode [ 95.284035][ T6919] bridge_slave_0: entered promiscuous mode [ 95.295394][ T6919] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.301085][ T6919] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.303488][ T6919] bridge_slave_1: entered allmulticast mode [ 95.306149][ T6919] bridge_slave_1: entered promiscuous mode [ 95.325394][ T6919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.332137][ T6919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.366136][ T6919] team0: Port device team_slave_0 added [ 95.370001][ T6919] team0: Port device team_slave_1 added [ 95.410460][ T6949] netlink: 12 bytes leftover after parsing attributes in process `syz.2.230'. [ 95.424860][ T6919] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.430847][ T6919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.441006][ T6919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.455066][ T12] bridge_slave_1: left allmulticast mode [ 95.457152][ T12] bridge_slave_1: left promiscuous mode [ 95.560445][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.592176][ T12] bridge_slave_0: left allmulticast mode [ 95.594313][ T12] bridge_slave_0: left promiscuous mode [ 95.599356][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.704759][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 95.710064][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.714398][ T12] bond0 (unregistering): Released all slaves [ 95.737594][ T6919] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.741136][ T6919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.759987][ T6919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.966842][ T6919] hsr_slave_0: entered promiscuous mode [ 95.972464][ T6919] hsr_slave_1: entered promiscuous mode [ 95.978676][ T6919] debugfs: 'hsr0' already exists in 'hsr' [ 95.986561][ T6919] Cannot create hsr debugfs directory [ 96.546380][ T1341] usb 10-1: USB disconnect, device number 3 [ 96.667669][ T6995] netlink: 12 bytes leftover after parsing attributes in process `syz.0.236'. [ 96.684740][ T12] hsr_slave_0: left promiscuous mode [ 96.690699][ T12] hsr_slave_1: left promiscuous mode [ 96.693866][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.702004][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.707811][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.710628][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.722635][ T12] veth1_macvtap: left promiscuous mode [ 96.724935][ T12] veth0_macvtap: left promiscuous mode [ 96.728321][ T12] veth1_vlan: left promiscuous mode [ 96.730628][ T12] veth0_vlan: left promiscuous mode [ 96.740568][ T5743] Bluetooth: hci3: command tx timeout [ 96.862165][ T12] team0 (unregistering): Port device team_slave_1 removed [ 96.885390][ T12] team0 (unregistering): Port device team_slave_0 removed [ 97.009175][ T5447] 8021q: adding VLAN 0 to HW filter on device eth10 [ 97.032576][ T6919] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 97.042116][ T6919] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.051835][ T6919] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 97.055921][ T6919] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.060546][ T1341] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 97.066233][ T6919] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 97.086796][ T6919] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.097806][ T6919] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 97.104206][ T6919] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.126648][ T7000] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 97.134181][ T7000] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 97.195667][ T7000] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 97.215401][ T1341] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.221299][ T6919] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.224263][ T1341] usb 10-1: config 0 has no interfaces? [ 97.235735][ T1341] usb 10-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 97.243872][ T7000] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 97.246132][ T7000] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 97.250788][ T1341] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.256547][ T1341] usb 10-1: Product: syz [ 97.260129][ T6919] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.262993][ T1341] usb 10-1: Manufacturer: syz [ 97.267012][ T1341] usb 10-1: SerialNumber: syz [ 97.280407][ T1341] usb 10-1: config 0 descriptor?? [ 97.284180][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.287301][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.290577][ T7000] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 97.297827][ T5447] 8021q: adding VLAN 0 to HW filter on device eth11 [ 97.298547][ T7000] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 97.304895][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.307978][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.313839][ T7000] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 97.332219][ T7000] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 97.342073][ T7000] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 97.344084][ T7000] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 97.347900][ T7000] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 97.518592][ T34] usb 10-1: USB disconnect, device number 4 [ 97.641553][ T5447] 8021q: adding VLAN 0 to HW filter on device eth12 [ 97.767754][ T6919] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.881748][ T5447] 8021q: adding VLAN 0 to HW filter on device eth13 [ 97.988695][ T6919] veth0_vlan: entered promiscuous mode [ 98.006925][ T6919] veth1_vlan: entered promiscuous mode [ 98.040279][ T6919] veth0_macvtap: entered promiscuous mode [ 98.044596][ T6919] veth1_macvtap: entered promiscuous mode [ 98.055664][ T6919] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.062134][ T6919] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.136924][ T7062] jffs2: notice: (7062) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 98.155863][ T7062] netlink: 8 bytes leftover after parsing attributes in process `syz.2.243'. [ 98.171830][ T7062] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 98.175187][ T7067] netlink: 'syz.0.244': attribute type 4 has an invalid length. [ 98.175393][ T7062] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 98.187102][ T7062] bridge2: entered promiscuous mode [ 98.207054][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.212272][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.293245][ T1201] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.296286][ T1201] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.300099][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.308080][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.328634][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.336559][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.138469][ T5743] Bluetooth: hci0: command 0x0c1a tx timeout [ 99.299031][ T5743] Bluetooth: hci2: command 0x0c1a tx timeout [ 99.378134][ T5743] Bluetooth: hci3: command 0x040f tx timeout [ 99.380315][ T5743] Bluetooth: hci1: command 0x0c1a tx timeout [ 99.775999][ T5743] Bluetooth: hci2: unexpected event for opcode 0x204e [ 99.793568][ T7076] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 99.806051][ T7076] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 99.824156][ T7076] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 99.826115][ T7076] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 99.951097][ T7097] usb usb5: usbfs: process 7097 (syz.5.251) did not claim interface 0 before use [ 100.084823][ T7076] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 100.084864][ T7076] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 100.093542][ T7110] netlink: 20 bytes leftover after parsing attributes in process `syz.5.253'. [ 100.251518][ T5747] udevd[5747]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 100.467295][ T42] audit: type=1326 audit(1786233878.418:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7125 comm="syz.6.258" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 100.475400][ T42] audit: type=1326 audit(1786233878.418:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7125 comm="syz.6.258" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 100.482592][ T42] audit: type=1326 audit(1786233878.428:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7125 comm="syz.6.258" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf701efec code=0x7ffc0000 [ 100.490041][ T42] audit: type=1326 audit(1786233878.428:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7125 comm="syz.6.258" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 100.497003][ T42] audit: type=1326 audit(1786233878.428:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7125 comm="syz.6.258" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 100.504223][ T42] audit: type=1326 audit(1786233878.428:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7125 comm="syz.6.258" exe="/syz-executor" sig=0 arch=40000003 syscall=395 compat=1 ip=0xf701efec code=0x7ffc0000 [ 100.512845][ T42] audit: type=1326 audit(1786233878.428:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7125 comm="syz.6.258" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 100.520373][ T42] audit: type=1326 audit(1786233878.428:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7125 comm="syz.6.258" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 100.527108][ T42] audit: type=1326 audit(1786233878.428:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7125 comm="syz.6.258" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf701efec code=0x7ffc0000 [ 100.534027][ T42] audit: type=1326 audit(1786233878.428:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7125 comm="syz.6.258" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 100.727936][ T41] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 100.858173][ T7076] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 100.869942][ T7076] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 100.890204][ T41] usb 7-1: config 0 has no interfaces? [ 100.891967][ T41] usb 7-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 100.894885][ T41] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.901741][ T41] usb 7-1: config 0 descriptor?? [ 101.120388][ T34] usb 7-1: USB disconnect, device number 6 [ 101.160027][ T7147] mmap: syz.6.264 (7147) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 101.344762][ T7155] snd_hda_intel 0000:00:00.0: Unknown PCI class/subclass/prog-if information (0x060000) found, selecting HDAudio legacy driver [ 101.384792][ T7159] No control pipe specified [ 101.436361][ T7165] netlink: 4 bytes leftover after parsing attributes in process `syz.2.270'. [ 101.444705][ T7165] netlink: 8 bytes leftover after parsing attributes in process `syz.2.270'. [ 101.490437][ T7176] netlink: 4 bytes leftover after parsing attributes in process `syz.0.273'. [ 101.535271][ T7180] fuse: Unknown parameter 'fd90x0000000000000003' [ 101.725947][ T7180] Cannot find add_set index 2 as target [ 101.814272][ T7195] bond1: Removing last arp target with arp_interval on [ 101.819714][ T7195] bond1: entered promiscuous mode [ 101.821754][ T7195] bond1: entered allmulticast mode [ 101.823805][ T7195] 8021q: adding VLAN 0 to HW filter on device bond1 [ 101.900876][ T7199] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 102.014267][ T7202] Mass Storage Function, version: 2009/09/11 [ 102.023305][ T7202] LUN: removable file: (no medium) [ 102.631902][ T7225] program syz.6.289 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 102.652345][ T7224] Console: switching to colour dummy device 80x25 [ 103.156069][ T7225] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 103.200731][ T7225] pci 0000:00:01.0: BAR 0 [mem 0xfd000000-0xfdffffff pref] [ 103.209636][ T7225] pci 0000:00:01.0: BAR 2 [mem 0xfeaf4000-0xfeaf4fff] [ 103.215049][ T7225] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 103.247954][ T7225] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 103.345298][ T7225] pci 0000:00:01.0: Adding to iommu group 1 [ 103.374493][ T7225] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 103.377189][ T7225] pci 0000:00:01.0: vgaarb: bridge control possible [ 103.379413][ T7225] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 103.438801][ T7225] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 103.491633][ T7225] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 103.513273][ T7225] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 103.570663][ T7225] [drm] Found bochs VGA, ID 0xb0c5. [ 103.580218][ T7225] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 103.591525][ T7225] bochs-drm 0000:00:01.0: probe with driver bochs-drm failed with error -4 [ 103.655956][ T10] snd_hda_intel 0000:00:01.0: Unknown capability 0 [ 103.675994][ T7234] netlink: 68 bytes leftover after parsing attributes in process `syz.5.291'. [ 103.678027][ T10] snd_hda_intel 0000:00:01.0: no codecs found! [ 103.842751][ T7246] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality. [ 104.005609][ T7254] netlink: 8 bytes leftover after parsing attributes in process `syz.0.295'. [ 104.013098][ T7254] netlink: 'syz.0.295': attribute type 30 has an invalid length. [ 104.198643][ T7258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.314812][ T7268] syz.5.302: vmalloc error: size 2147483264, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 104.345891][ T7268] CPU: 2 UID: 0 PID: 7268 Comm: syz.5.302 Tainted: G L syzkaller #0 PREEMPT(full) [ 104.345916][ T7268] Tainted: [L]=SOFTLOCKUP [ 104.345921][ T7268] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 104.345940][ T7268] Call Trace: [ 104.345945][ T7268] [ 104.345950][ T7268] dump_stack_lvl+0x100/0x190 [ 104.346071][ T7268] warn_alloc.cold+0x94/0xa8 [ 104.346097][ T7268] ? __pfx_warn_alloc+0x10/0x10 [ 104.346122][ T7268] ? add_lock_to_list+0x99/0x110 [ 104.346156][ T7268] ? lockdep_unlock+0x5a/0xc0 [ 104.346171][ T7268] ? __lock_acquire+0xd5b/0x1a40 [ 104.346195][ T7268] __vmalloc_node_range_noprof+0x136c/0x1630 [ 104.346221][ T7268] ? find_held_lock+0x2b/0x80 [ 104.346236][ T7268] ? __might_fault+0xc5/0x140 [ 104.346250][ T7268] ? __might_fault+0xc5/0x140 [ 104.346264][ T7268] ? compat_do_replace+0x1b1/0x7a0 [ 104.346338][ T7268] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 104.346359][ T7268] ? compat_copy_ebt_replace_from_user+0x2c8/0x3f0 [ 104.346377][ T7268] ? __pfx_compat_copy_ebt_replace_from_user+0x10/0x10 [ 104.346399][ T7268] ? compat_do_replace+0x1b1/0x7a0 [ 104.346414][ T7268] __vmalloc_node_noprof+0xad/0xf0 [ 104.346433][ T7268] ? compat_do_replace+0x1b1/0x7a0 [ 104.346451][ T7268] compat_do_replace+0x1b1/0x7a0 [ 104.346469][ T7268] ? __pfx_compat_do_replace+0x10/0x10 [ 104.346495][ T7268] ? bpf_lsm_capable+0x9/0x10 [ 104.346518][ T7268] ? security_capable+0x80/0x260 [ 104.346558][ T7268] do_ebt_set_ctl+0x3f4/0x4a0 [ 104.346574][ T7268] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 104.346590][ T7268] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 104.346611][ T7268] ? futex_wake+0x4ea/0x5e0 [ 104.346637][ T7268] ? nf_sockopt_find.isra.0+0x222/0x290 [ 104.346680][ T7268] nf_setsockopt+0x8d/0xf0 [ 104.346698][ T7268] ip_setsockopt+0xcb/0xf0 [ 104.346720][ T7268] tcp_setsockopt+0xa7/0x100 [ 104.346736][ T7268] smc_setsockopt+0x1b6/0xa40 [ 104.346794][ T7268] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 104.346816][ T7268] ? __pfx_smc_setsockopt+0x10/0x10 [ 104.346832][ T7268] ? aa_sock_opt_perm+0xfe/0x1b0 [ 104.346846][ T7268] ? __pfx_smc_setsockopt+0x10/0x10 [ 104.346862][ T7268] do_sock_setsockopt+0xf3/0x1d0 [ 104.346884][ T7268] __sys_setsockopt+0x119/0x190 [ 104.346902][ T7268] __ia32_sys_setsockopt+0xbc/0x160 [ 104.346917][ T7268] ? __do_fast_syscall_32+0x98/0x970 [ 104.346937][ T7268] ? lockdep_hardirqs_on+0x78/0x100 [ 104.346953][ T7268] __do_fast_syscall_32+0xe7/0x970 [ 104.346972][ T7268] do_fast_syscall_32+0x32/0x70 [ 104.346988][ T7268] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 104.347003][ T7268] RIP: 0023:0xf707efec [ 104.347019][ T7268] Code: Unable to access opcode bytes at 0xf707efc2. [ 104.347024][ T7268] RSP: 002b:00000000f546d50c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 104.347037][ T7268] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000000 [ 104.347044][ T7268] RDX: 0000000000000080 RSI: 0000000080000100 RDI: 00000000000000e0 [ 104.347051][ T7268] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 104.347057][ T7268] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 104.347063][ T7268] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 104.347077][ T7268] [ 104.461790][ T7268] Mem-Info: [ 104.463710][ T7268] active_anon:17326 inactive_anon:6172 isolated_anon:0 [ 104.463710][ T7268] active_file:4772 inactive_file:44982 isolated_file:0 [ 104.463710][ T7268] unevictable:0 dirty:71 writeback:0 [ 104.463710][ T7268] slab_reclaimable:6283 slab_unreclaimable:60308 [ 104.463710][ T7268] mapped:24684 shmem:16948 pagetables:1377 [ 104.463710][ T7268] sec_pagetables:297 bounce:0 [ 104.463710][ T7268] kernel_misc_reclaimable:0 [ 104.463710][ T7268] free:23578 free_pcp:6494 free_cma:0 [ 104.478805][ T7268] Node 0 active_anon:1124kB inactive_anon:68kB active_file:112kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:32kB dirty:0kB writeback:0kB shmem:1124kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8832kB pagetables:1392kB sec_pagetables:1104kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 104.490142][ T7268] Node 1 active_anon:68480kB inactive_anon:24620kB active_file:18976kB inactive_file:179876kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:98704kB dirty:284kB writeback:0kB shmem:66668kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5280kB pagetables:4116kB sec_pagetables:84kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 104.501684][ T7268] Node 0 DMA free:2052kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:12kB inactive_file:16kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:540kB local_pcp:24kB free_cma:0kB [ 104.514161][ T7268] lowmem_reserve[]: 0 280 280 280 280 [ 104.515273][ T7278] netlink: 'syz.2.300': attribute type 1 has an invalid length. [ 104.517003][ T7268] Node 0 DMA32 free:15824kB boost:0kB min:12776kB low:15968kB high:19160kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1120kB inactive_anon:68kB active_file:100kB inactive_file:36kB unevictable:0kB writepending:0kB zspages:0kB present:1032196kB managed:287072kB mlocked:0kB bounce:0kB free_pcp:8588kB local_pcp:1776kB free_cma:0kB [ 104.519734][ T7278] netlink: 396 bytes leftover after parsing attributes in process `syz.2.300'. [ 104.529469][ T7268] lowmem_reserve[]: 0 0 0 0 0 [ 104.529519][ T7268] Node 1 DMA32 free:75932kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:68328kB inactive_anon:24620kB active_file:18976kB inactive_file:179796kB unevictable:0kB writepending:300kB zspages:1604kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:17240kB local_pcp:3576kB free_cma:0kB [ 104.547591][ T7268] lowmem_reserve[]: 0 0 0 0 0 [ 104.551020][ T7268] Node 0 DMA: 17*4kB (UE) 2*8kB (UE) 3*16kB (UE) 8*32kB (UE) 10*64kB (UE) 2*128kB (E) 1*256kB (E) 1*512kB (E) 0*1024kB 0*2048kB 0*4096kB = 2052kB [ 104.555581][ T7268] Node 0 DMA32: 58*4kB (UME) 87*8kB (UME) 67*16kB (UME) 42*32kB (UME) 33*64kB (UME) 29*128kB (UME) 10*256kB (UME) 2*512kB (UM) 3*1024kB (UM) 0*2048kB 0*4096kB = 15824kB [ 104.562583][ T7268] Node 1 DMA32: 642*4kB (UME) 545*8kB (UE) 81*16kB (ME) 163*32kB (UME) 84*64kB (UME) 43*128kB (UME) 33*256kB (UME) 20*512kB (UME) 6*1024kB (UME) 5*2048kB (UE) 4*4096kB (UM) = 75776kB [ 104.568958][ T7268] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 104.571934][ T7268] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 104.574994][ T7268] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 104.578808][ T7268] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 104.581852][ T7268] 67022 total pagecache pages [ 104.583353][ T7268] 364 pages in swap cache [ 104.584771][ T7268] Free swap = 121812kB [ 104.586085][ T7268] Total swap = 124996kB [ 104.587491][ T7268] 524155 pages RAM [ 104.588802][ T7268] 0 pages HighMem/MovableOnly [ 104.590299][ T7268] 211494 pages reserved [ 104.591549][ T7268] 0 pages cma reserved [ 104.654620][ T7288] netlink: 48 bytes leftover after parsing attributes in process `syz.2.300'. [ 104.671171][ T7290] FAULT_INJECTION: forcing a failure. [ 104.671171][ T7290] name failslab, interval 1, probability 0, space 0, times 0 [ 104.678683][ T7290] CPU: 2 UID: 0 PID: 7290 Comm: syz.5.309 Tainted: G L syzkaller #0 PREEMPT(full) [ 104.678715][ T7290] Tainted: [L]=SOFTLOCKUP [ 104.678720][ T7290] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 104.678730][ T7290] Call Trace: [ 104.678736][ T7290] [ 104.678743][ T7290] dump_stack_lvl+0x100/0x190 [ 104.678767][ T7290] should_fail_ex.cold+0x5/0xa [ 104.678797][ T7290] should_failslab+0xc2/0x120 [ 104.678829][ T7290] __kvmalloc_node_noprof+0x116/0x970 [ 104.678849][ T7290] ? __pfx___mutex_lock+0x10/0x10 [ 104.678875][ T7290] ? nf_hook_entries_grow+0x255/0x870 [ 104.678900][ T7290] nf_hook_entries_grow+0x255/0x870 [ 104.678919][ T7290] ? __call_rcu_common.constprop.0+0x3f0/0x9b0 [ 104.678952][ T7290] __nf_register_net_hook+0x112/0x780 [ 104.678975][ T7290] nf_register_net_hook+0xdb/0x170 [ 104.678993][ T7290] nf_register_net_hooks+0x5d/0xd0 [ 104.679015][ T7290] nf_ct_netns_do_get+0x56b/0x610 [ 104.679031][ T7290] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 104.679050][ T7290] ? __kasan_kmalloc+0xaa/0xb0 [ 104.679073][ T7290] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 104.679090][ T7290] ? lockdep_init_map_type+0x5c/0x250 [ 104.679109][ T7290] nf_ct_netns_get+0x5f/0x160 [ 104.679122][ T7290] nft_connlimit_do_init+0x238/0x340 [ 104.679138][ T7290] ? __pfx_nft_connlimit_init+0x10/0x10 [ 104.679153][ T7290] nft_expr_init+0x28e/0x3b0 [ 104.679175][ T7290] ? __pfx_nft_expr_init+0x10/0x10 [ 104.679216][ T7290] nft_set_elem_expr_alloc+0x27/0x270 [ 104.679236][ T7290] nft_set_expr_alloc+0x2ac/0x5f0 [ 104.679256][ T7290] nf_tables_newset+0x3103/0x4250 [ 104.679277][ T7290] ? net_generic+0xea/0x2a0 [ 104.679292][ T7290] ? __pfx_nf_tables_newset+0x10/0x10 [ 104.679321][ T7290] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 104.679355][ T7290] ? __nla_validate_parse+0x1e7/0x28b0 [ 104.679389][ T7290] ? __nla_parse+0x40/0x60 [ 104.679403][ T7290] nfnetlink_rcv_batch+0x1410/0x2880 [ 104.679427][ T7290] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 104.679443][ T7290] ? find_held_lock+0x2b/0x80 [ 104.679458][ T7290] ? __local_bh_enable_ip+0x9e/0x120 [ 104.679478][ T7290] ? lockdep_hardirqs_on+0x78/0x100 [ 104.679493][ T7290] ? __dev_queue_xmit+0xa12/0x4970 [ 104.679553][ T7290] ? __nla_parse+0x40/0x60 [ 104.679581][ T7290] nfnetlink_rcv+0x3bd/0x440 [ 104.679600][ T7290] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 104.679620][ T7290] netlink_unicast+0x585/0x850 [ 104.679635][ T7290] ? __pfx_netlink_unicast+0x10/0x10 [ 104.679652][ T7290] netlink_sendmsg+0x8b0/0xda0 [ 104.679667][ T7290] ? __pfx_netlink_sendmsg+0x10/0x10 [ 104.679682][ T7290] ? apparmor_socket_sendmsg+0x15b/0x270 [ 104.679697][ T7290] ____sys_sendmsg+0xa4d/0xbe0 [ 104.679708][ T7290] ? __pfx_netlink_sendmsg+0x10/0x10 [ 104.679722][ T7290] ? __pfx_____sys_sendmsg+0x10/0x10 [ 104.679740][ T7290] ___sys_sendmsg+0x190/0x1e0 [ 104.679753][ T7290] ? __pfx____sys_sendmsg+0x10/0x10 [ 104.679773][ T7290] ? find_held_lock+0x2b/0x80 [ 104.679796][ T7290] __sys_sendmsg+0x160/0x210 [ 104.679812][ T7290] ? __pfx___sys_sendmsg+0x10/0x10 [ 104.679836][ T7290] __do_fast_syscall_32+0xe7/0x970 [ 104.679853][ T7290] ? lockdep_hardirqs_on+0x78/0x100 [ 104.679869][ T7290] do_fast_syscall_32+0x32/0x70 [ 104.679886][ T7290] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 104.679901][ T7290] RIP: 0023:0xf707efec [ 104.679923][ T7290] Code: Unable to access opcode bytes at 0xf707efc2. [ 104.679931][ T7290] RSP: 002b:00000000f546d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 104.679948][ T7290] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000800000c0 [ 104.679958][ T7290] RDX: 0000000020050800 RSI: 0000000000000000 RDI: 0000000000000000 [ 104.679967][ T7290] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 104.679974][ T7290] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 104.679988][ T7290] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 104.680003][ T7290] [ 104.733621][ T7293] netlink: 4 bytes leftover after parsing attributes in process `syz.0.308'. [ 104.739209][ T7294] Unsupported ieee802154 address type: 0 [ 104.944872][ T7300] netlink: 32 bytes leftover after parsing attributes in process `syz.6.311'. [ 105.395166][ T7323] ======================================================= [ 105.395166][ T7323] WARNING: The mand mount option has been deprecated and [ 105.395166][ T7323] and is ignored by this kernel. Remove the mand [ 105.395166][ T7323] option from the mount to silence this warning. [ 105.395166][ T7323] ======================================================= [ 105.412247][ T1486] kernel write not supported for file [eventfd] (pid: 1486 comm: kworker/1:2) [ 105.687440][ T1486] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 105.856826][ T1486] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 105.866656][ T1486] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 105.871883][ T1486] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 105.885172][ T1486] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 105.892413][ T1486] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 105.895462][ T1486] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.903750][ T1486] usb 7-1: config 0 descriptor?? [ 106.334361][ T1486] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 106.337000][ T1486] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 106.340513][ T1486] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 106.344546][ T1486] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 106.348337][ T1486] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 106.351583][ T1486] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 106.351620][ T1486] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 106.351642][ T1486] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 106.351677][ T1486] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 106.351699][ T1486] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 106.398851][ T1486] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 106.521527][ T7323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.532488][ T7323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.037828][ T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 107.167853][ T10] usb 5-1: device descriptor read/64, error -71 [ 107.407801][ T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 107.537954][ T10] usb 5-1: device descriptor read/64, error -71 [ 107.648123][ T10] usb usb5-port1: attempt power cycle [ 107.988009][ T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 108.008150][ T10] usb 5-1: device descriptor read/8, error -71 [ 108.247713][ T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 108.268281][ T10] usb 5-1: device descriptor read/8, error -71 [ 108.378410][ T10] usb usb5-port1: unable to enumerate USB device [ 108.402047][ T10] usb 7-1: USB disconnect, device number 7 [ 108.524615][ T42] kauditd_printk_skb: 173 callbacks suppressed [ 108.524636][ T42] audit: type=1804 audit(1786233886.488:342): pid=7357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.326" name="/newroot/97/file0/file0" dev="9p" ino=76573387 res=1 errno=0 [ 108.534876][ T7359] jffs2: notice: (7359) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 108.892587][ T7363] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 109.221208][ T7368] IPv6: addrconf: prefix option has invalid lifetime [ 109.522982][ T7382] hfsplus: unable to find HFS+ superblock [ 109.910002][ T7387] jffs2: notice: (7387) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 110.211364][ T7391] ptrace attach of "/syz-executor exec"[5740] was attempted by " [ 110.216079][ T7391] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 110.247567][ T7391] overlayfs: missing 'lowerdir' [ 111.172969][ T7421] atomic_op ffff8880271ef998 conn xmit_atomic 0000000000000000 [ 111.624048][ T7427] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.3276800.133495060), cmd(2) [ 111.924895][ T7439] netlink: 'syz.0.346': attribute type 6 has an invalid length. [ 112.420086][ T7445] netlink: 168 bytes leftover after parsing attributes in process `syz.5.348'. [ 112.480411][ T7445] netlink: 4 bytes leftover after parsing attributes in process `syz.5.348'. [ 112.954105][ T7465] netlink: 4 bytes leftover after parsing attributes in process `syz.5.350'. [ 113.617315][ T24] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 113.779597][ T24] usb 7-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 113.783788][ T24] usb 7-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 113.791094][ T24] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 113.794905][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.798233][ T24] usb 7-1: Product: syz [ 113.799815][ T24] usb 7-1: Manufacturer: syz [ 113.801771][ T24] usb 7-1: SerialNumber: syz [ 113.862974][ T5843] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 114.088021][ T24] usb 7-1: USB disconnect, device number 8 [ 114.656845][ T7485] netlink: 12 bytes leftover after parsing attributes in process `syz.0.356'. [ 114.897328][ T5843] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 114.902168][ T5843] ath9k_htc: Failed to initialize the device [ 114.906429][ T24] usb 7-1: ath9k_htc: USB layer deinitialized [ 115.102448][ T1341] IPVS: starting estimator thread 0... [ 115.187322][ T7493] IPVS: using max 43 ests per chain, 103200 per kthread [ 115.237354][ T24] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 115.322736][ T7492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.357'. [ 115.389939][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 115.398377][ T24] usb 7-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 115.401984][ T24] usb 7-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 115.412807][ T24] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 1.08 [ 115.415981][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.420422][ T24] usb 7-1: Product: syz [ 115.423168][ T24] usb 7-1: Manufacturer: syz [ 115.424710][ T24] usb 7-1: SerialNumber: syz [ 115.469127][ T24] ldusb 7-1:1.0: LD USB Device #0 now attached to major 180 minor 0 [ 115.653858][ T34] usb 7-1: USB disconnect, device number 9 [ 115.669255][ T34] ldusb 7-1:1.0: LD USB Device #0 now disconnected [ 115.854820][ T7499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.359'. [ 115.877992][ T7499] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.884361][ T7499] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.943846][ T7502] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium qemu-system-x86_64: vtd_irte_get: detected non-present IRTE (index=15, high=0x0, low=0x0) [ 116.042761][ T7499] ------------[ cut here ]------------ [ 116.045197][ T7499] remove_proc_entry: removing non-empty directory 'irq/20', leaking at least 'comedi_parport' [ 116.049090][ T7499] WARNING: fs/proc/generic.c:747 at remove_proc_entry+0x4e7/0x610, CPU#2: syz.0.359/7499 [ 116.055976][ T7499] Modules linked in: [ 116.057848][ T7499] CPU: 2 UID: 0 PID: 7499 Comm: syz.0.359 Tainted: G L syzkaller #0 PREEMPT(full) [ 116.061723][ T7499] Tainted: [L]=SOFTLOCKUP [ 116.063422][ T7499] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 116.067013][ T7499] RIP: 0010:remove_proc_entry+0x4f5/0x610 [ 116.069401][ T7499] Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 c7 00 00 00 48 8d 3d 69 41 6d 0e 49 8b 95 d0 00 00 00 48 c7 c6 80 fa e9 8b <67> 48 0f b9 3a e9 2a fe ff ff e8 ec c3 4e ff 48 8d 7d 18 48 b8 00 [ 116.075395][ T7499] RSP: 0018:ffffc90006df76a0 EFLAGS: 00010246 [ 116.077569][ T7499] RAX: dffffc0000000000 RBX: dffffc0000000000 RCX: ffff8880495760dc [ 116.080311][ T7499] RDX: ffff88801cfe05dc RSI: ffffffff8be9fa80 RDI: ffffffff91283e60 [ 116.083375][ T7499] RBP: ffff8880495760b8 R08: ffff888025f5835c R09: ffffed10092aec03 [ 116.085978][ T7499] R10: ffff88804957601b R11: 0000000000000000 R12: ffff888049576000 [ 116.089443][ T7499] R13: ffff88801cfe0500 R14: ffff888025f58338 R15: dffffc0000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 116.091985][ T7499] FS: 0000000000000000(0000) GS:ffff888096df3000(0063) knlGS:00000000f5406b40 [ 116.095769][ T7499] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 116.098347][ T7499] CR2: 00000000f7307af8 CR3: 0000000074dae000 CR4: 0000000000352ef0 [ 116.101393][ T7499] Call Trace: [ 116.102704][ T7499] [ 116.103847][ T7499] ? __pfx_remove_proc_entry+0x10/0x10 [ 116.105774][ T7499] ? mtree_load+0x32d/0xa90 [ 116.107637][ T7499] ? __pfx_mtree_load+0x10/0x10 [ 116.109519][ T7499] ? rcu_is_watching+0x12/0xc0 [ 116.110990][ T7499] unregister_irq_proc+0x206/0x2a0 [ 116.112541][ T7499] ? __pfx_unregister_irq_proc+0x10/0x10 [ 116.114175][ T7499] free_desc+0x89/0x330 [ 116.118679][ T7499] ? __pfx_free_desc+0x10/0x10 [ 116.120545][ T7499] ? kasan_quarantine_put+0x104/0x240 [ 116.123602][ T7499] ? lockdep_hardirqs_on+0x78/0x100 [ 116.125515][ T7499] ? irq_domain_free_irqs+0x3e0/0x5c0 [ 116.127737][ T7499] irq_free_descs+0x84/0xc0 [ 116.129423][ T7499] irq_domain_free_irqs+0x46a/0x5c0 [ 116.131245][ T7499] mp_unmap_irq+0xf8/0x130 [ 116.132903][ T7499] ? __pfx_acpi_unregister_gsi_ioapic+0x10/0x10 [ 116.135199][ T7499] acpi_unregister_gsi_ioapic+0x40/0x60 [ 116.137437][ T7499] acpi_unregister_gsi+0x25/0x40 [ 116.139018][ T7499] acpi_pci_irq_disable+0x275/0x360 [ 116.140901][ T7499] ? __pfx_acpi_pci_irq_disable+0x10/0x10 [ 116.143043][ T7499] pcibios_disable_device+0x89/0xb0 [ 116.145099][ T7499] do_pci_disable_device+0x9f/0x100 [ 116.146750][ T7499] ? __pfx_do_pci_disable_device+0x10/0x10 [ 116.149341][ T7499] pci_disable_device+0x130/0x270 [ 116.151283][ T7499] pci_device_remove+0xb2/0x1d0 [ 116.153007][ T7499] ? __pfx_pci_device_remove+0x10/0x10 [ 116.154866][ T7499] device_remove+0xcb/0x180 [ 116.156290][ T7499] device_release_driver_internal+0x44e/0x620 [ 116.158200][ T7499] pci_stop_bus_device+0x120/0x160 [ 116.159870][ T7499] pci_stop_and_remove_bus_device+0x58/0xa0 [ 116.161744][ T7499] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 116.163683][ T7499] remove_store+0x123/0x140 [ 116.165375][ T7499] ? __pfx_remove_store+0x10/0x10 [ 116.166893][ T7499] ? find_held_lock+0x2b/0x80 [ 116.168707][ T7499] ? sysfs_file_kobj+0xe4/0x290 [ 116.170361][ T7499] ? sysfs_file_kobj+0xe4/0x290 [ 116.172059][ T7499] ? __pfx_remove_store+0x10/0x10 [ 116.173975][ T7499] dev_attr_store+0x58/0x80 [ 116.175720][ T7499] ? __pfx_dev_attr_store+0x10/0x10 [ 116.178272][ T7499] sysfs_kf_write+0xf2/0x150 [ 116.180048][ T7499] kernfs_fop_write_iter+0x3e0/0x5f0 [ 116.182044][ T7499] ? __pfx_sysfs_kf_write+0x10/0x10 [ 116.183983][ T7499] vfs_write+0x6ac/0x1050 [ 116.185677][ T7499] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 116.188077][ T7499] ? __pfx_vfs_write+0x10/0x10 [ 116.189864][ T7499] ? find_held_lock+0x2b/0x80 [ 116.191681][ T7499] ksys_write+0x12a/0x250 [ 116.194276][ T7499] ? __pfx_ksys_write+0x10/0x10 [ 116.195765][ T7499] __do_fast_syscall_32+0xe7/0x970 [ 116.197388][ T7499] ? lockdep_hardirqs_on+0x78/0x100 [ 116.199103][ T7499] do_fast_syscall_32+0x32/0x70 [ 116.200750][ T7499] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 116.202632][ T7499] RIP: 0023:0xf7f46fec [ 116.203787][ T7499] Code: Unable to access opcode bytes at 0xf7f46fc2. [ 116.205980][ T7499] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 116.208841][ T7499] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000200 [ 116.211203][ T7499] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 116.213652][ T7499] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 116.216253][ T7499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.218705][ T7499] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 116.221262][ T7499] [ 116.222251][ T7499] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 116.224577][ T7499] CPU: 2 UID: 0 PID: 7499 Comm: syz.0.359 Tainted: G L syzkaller #0 PREEMPT(full) [ 116.227676][ T7499] Tainted: [L]=SOFTLOCKUP [ 116.229075][ T7499] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 116.232075][ T7499] Call Trace: [ 116.233085][ T7499] [ 116.234049][ T7499] dump_stack_lvl+0x100/0x190 [ 116.235603][ T7499] vpanic+0x552/0x970 [ 116.236951][ T7499] ? __pfx_vpanic+0x10/0x10 [ 116.238380][ T7499] panic+0xd1/0xe0 [ 116.239483][ T7499] ? __pfx_panic+0x10/0x10 [ 116.241011][ T7499] check_panic_on_warn.cold+0x19/0x34 [ 116.242677][ T7499] ? remove_proc_entry+0x4e7/0x610 [ 116.244164][ T7499] __warn.cold+0x191/0x318 [ 116.245801][ T7499] __report_bug+0x30f/0x440 [ 116.247230][ T7499] ? remove_proc_entry+0x4e7/0x610 [ 116.248751][ T7499] ? __pfx___report_bug+0x10/0x10 [ 116.250256][ T7499] ? __do_fast_syscall_32+0xe7/0x970 [ 116.251904][ T7499] ? do_fast_syscall_32+0x32/0x70 [ 116.253426][ T7499] ? do_raw_spin_lock+0x128/0x260 [ 116.254893][ T7499] ? find_held_lock+0x2b/0x80 [ 116.256697][ T7499] ? proc_entry_rundown+0x158/0x1e0 [ 116.258683][ T7499] ? proc_entry_rundown+0x158/0x1e0 [ 116.260682][ T7499] report_bug_entry+0xe1/0x290 [ 116.262543][ T7499] ? remove_proc_entry+0x4f5/0x610 [ 116.264531][ T7499] handle_bug+0x1cd/0x2a0 [ 116.266222][ T7499] exc_invalid_op+0x17/0x50 [ 116.267979][ T7499] asm_exc_invalid_op+0x1a/0x20 [ 116.269747][ T7499] RIP: 0010:remove_proc_entry+0x4f5/0x610 [ 116.271655][ T7499] Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 c7 00 00 00 48 8d 3d 69 41 6d 0e 49 8b 95 d0 00 00 00 48 c7 c6 80 fa e9 8b <67> 48 0f b9 3a e9 2a fe ff ff e8 ec c3 4e ff 48 8d 7d 18 48 b8 00 [ 116.277713][ T7499] RSP: 0018:ffffc90006df76a0 EFLAGS: 00010246 [ 116.279524][ T7499] RAX: dffffc0000000000 RBX: dffffc0000000000 RCX: ffff8880495760dc [ 116.281845][ T7499] RDX: ffff88801cfe05dc RSI: ffffffff8be9fa80 RDI: ffffffff91283e60 [ 116.284187][ T7499] RBP: ffff8880495760b8 R08: ffff888025f5835c R09: ffffed10092aec03 [ 116.286509][ T7499] R10: ffff88804957601b R11: 0000000000000000 R12: ffff888049576000 [ 116.288841][ T7499] R13: ffff88801cfe0500 R14: ffff888025f58338 R15: dffffc0000000000 [ 116.291137][ T7499] ? __pfx_remove_proc_entry+0x10/0x10 [ 116.292790][ T7499] ? mtree_load+0x32d/0xa90 [ 116.294168][ T7499] ? __pfx_mtree_load+0x10/0x10 [ 116.295604][ T7499] ? rcu_is_watching+0x12/0xc0 [ 116.297066][ T7499] unregister_irq_proc+0x206/0x2a0 [ 116.298581][ T7499] ? __pfx_unregister_irq_proc+0x10/0x10 [ 116.300215][ T7499] free_desc+0x89/0x330 [ 116.301479][ T7499] ? __pfx_free_desc+0x10/0x10 [ 116.302954][ T7499] ? kasan_quarantine_put+0x104/0x240 [ 116.304587][ T7499] ? lockdep_hardirqs_on+0x78/0x100 [ 116.306131][ T7499] ? irq_domain_free_irqs+0x3e0/0x5c0 [ 116.307730][ T7499] irq_free_descs+0x84/0xc0 [ 116.309088][ T7499] irq_domain_free_irqs+0x46a/0x5c0 [ 116.310565][ T7499] mp_unmap_irq+0xf8/0x130 [ 116.311848][ T7499] ? __pfx_acpi_unregister_gsi_ioapic+0x10/0x10 [ 116.313562][ T7499] acpi_unregister_gsi_ioapic+0x40/0x60 [ 116.315155][ T7499] acpi_unregister_gsi+0x25/0x40 [ 116.316543][ T7499] acpi_pci_irq_disable+0x275/0x360 [ 116.318080][ T7499] ? __pfx_acpi_pci_irq_disable+0x10/0x10 [ 116.319756][ T7499] pcibios_disable_device+0x89/0xb0 [ 116.321303][ T7499] do_pci_disable_device+0x9f/0x100 [ 116.322904][ T7499] ? __pfx_do_pci_disable_device+0x10/0x10 [ 116.324636][ T7499] pci_disable_device+0x130/0x270 [ 116.326175][ T7499] pci_device_remove+0xb2/0x1d0 [ 116.327641][ T7499] ? __pfx_pci_device_remove+0x10/0x10 [ 116.329272][ T7499] device_remove+0xcb/0x180 [ 116.330627][ T7499] device_release_driver_internal+0x44e/0x620 [ 116.332458][ T7499] pci_stop_bus_device+0x120/0x160 [ 116.334000][ T7499] pci_stop_and_remove_bus_device+0x58/0xa0 [ 116.335761][ T7499] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 116.337738][ T7499] remove_store+0x123/0x140 [ 116.339192][ T7499] ? __pfx_remove_store+0x10/0x10 [ 116.340716][ T7499] ? find_held_lock+0x2b/0x80 [ 116.342134][ T7499] ? sysfs_file_kobj+0xe4/0x290 [ 116.343591][ T7499] ? sysfs_file_kobj+0xe4/0x290 [ 116.345149][ T7499] ? __pfx_remove_store+0x10/0x10 [ 116.346565][ T7499] dev_attr_store+0x58/0x80 [ 116.347884][ T7499] ? __pfx_dev_attr_store+0x10/0x10 [ 116.349442][ T7499] sysfs_kf_write+0xf2/0x150 [ 116.350815][ T7499] kernfs_fop_write_iter+0x3e0/0x5f0 [ 116.352431][ T7499] ? __pfx_sysfs_kf_write+0x10/0x10 [ 116.353951][ T7499] vfs_write+0x6ac/0x1050 [ 116.355275][ T7499] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 116.357299][ T7499] ? __pfx_vfs_write+0x10/0x10 [ 116.358797][ T7499] ? find_held_lock+0x2b/0x80 [ 116.360196][ T7499] ksys_write+0x12a/0x250 [ 116.361577][ T7499] ? __pfx_ksys_write+0x10/0x10 [ 116.363046][ T7499] __do_fast_syscall_32+0xe7/0x970 [ 116.364615][ T7499] ? lockdep_hardirqs_on+0x78/0x100 [ 116.366251][ T7499] do_fast_syscall_32+0x32/0x70 [ 116.367733][ T7499] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 116.369623][ T7499] RIP: 0023:0xf7f46fec [ 116.370839][ T7499] Code: Unable to access opcode bytes at 0xf7f46fc2. [ 116.372832][ T7499] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 116.375254][ T7499] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000200 [ 116.377572][ T7499] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 116.379851][ T7499] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 116.382256][ T7499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.384527][ T7499] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 116.386953][ T7499] [ 116.388507][ T7499] Kernel Offset: disabled [ 116.389759][ T7499] Rebooting in 86400 seconds..