last executing test programs: 1m15.130167906s ago: executing program 2 (id=669): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x20400, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file0\x00', 0x300400d, 0x1) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x3, &(0x7f00000004c0)=ANY=[@ANYRES8=r0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000640)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ff}, 0x94) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x3) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) unshare(0x22040000) (async, rerun: 64) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async, rerun: 64) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) (async, rerun: 64) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (rerun: 64) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x1800, 0x10, 0x0, 0xf}]}) (async, rerun: 32) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB, @ANYRESHEX=r7]) (async, rerun: 32) openat(0xffffffffffffffff, &(0x7f00000003c0)='./file0/file0\x00', 0x8000, 0x0) (async, rerun: 64) mount(&(0x7f0000000440)=@nullb, 0x0, &(0x7f0000000340)='exofs\x00', 0x0, &(0x7f0000000400)='usrquota') (rerun: 64) 1m14.51829168s ago: executing program 2 (id=670): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a", 0xb) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfc, 0x7fff0026}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'veth1_virt_wifi\x00'}) openat$nvram(0xffffff9c, &(0x7f0000000000), 0x400000, 0x0) 1m14.260225853s ago: executing program 2 (id=672): syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$dlm_monitor(0xffffff9c, &(0x7f00000001c0), 0x40000, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000080), 0x8000, r1}, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x10) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x16, 0x10, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@call={0x85, 0x0, 0x0, 0xa0}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1m13.271282308s ago: executing program 2 (id=677): recvmmsg(0xffffffffffffffff, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001340)=""/152, 0x98}], 0x1}, 0x7}], 0x1, 0xa874d1150d5f925c, 0x0) r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x4, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x4000006, 0x1, 0x4}) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0x1080a0, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x2b5b093, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e005", 0x26}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a0", 0xca}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) connect$l2tp6(r1, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa9, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="181d000000000000000001000000000095"], &(0x7f00000004c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', r5, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) sendfile(r7, 0xffffffffffffffff, 0x0, 0x106f) r8 = syz_open_dev$video(&(0x7f0000000280), 0x3, 0xc2a25) ioctl$VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f0000000180)={0x36c2, 0x9, 0x1, 0x0, 0x1}) ioctl$EVIOCSREP(r7, 0x40084503, &(0x7f0000000080)=[0x9, 0x42]) r9 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0xc00}, 0x20000000) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x100, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, 0x0, 0x4408}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}]}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004000}, 0x10) 1m13.020366213s ago: executing program 2 (id=678): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r1 = dup(r0) get_mempolicy(0x0, 0x0, 0xb3ad, &(0x7f0000ffd000/0x1000)=nil, 0x1) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000040), 0x4) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4}, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000080)={0xa, 0x4}, 0x34000) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000000100000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020}, 0xfffffe14) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r4 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xe}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r6, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0x40025b0c, &(0x7f0000000040)) 1m11.628385835s ago: executing program 2 (id=680): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x8c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f0000004180)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x6, {0x6, 0x2, 0x9, 0x6, 0x0, 0x0, {0x40, 0x0, 0x7, 0xfffc, 0x0, 0x1, 0x0, 0xffffffff, 0x120, 0x2000, 0xa8, r5, 0x0, 0xc, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(r3, &(0x7f0000000440)={0x50, 0x0, r4, {0x7, 0x29, 0x0, 0x1086cce0, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r6 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) ioctl$BLKPG(r6, 0xc00c4d04, &(0x7f00000000c0)={0x1, 0x300, 0x0, 0x0}) r7 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x80002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f0000000080)=0x40000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x4004000) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) lseek(r8, 0x9, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, 0x0, &(0x7f0000000040)="a23a3a4fc02b15c0fec5f137f92aa591e43facb265ed67a1de995cbbed4ce5a07df29ab667", 0x2}, 0x38) 1m11.549147059s ago: executing program 32 (id=680): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x8c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f0000004180)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x6, {0x6, 0x2, 0x9, 0x6, 0x0, 0x0, {0x40, 0x0, 0x7, 0xfffc, 0x0, 0x1, 0x0, 0xffffffff, 0x120, 0x2000, 0xa8, r5, 0x0, 0xc, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(r3, &(0x7f0000000440)={0x50, 0x0, r4, {0x7, 0x29, 0x0, 0x1086cce0, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r6 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) ioctl$BLKPG(r6, 0xc00c4d04, &(0x7f00000000c0)={0x1, 0x300, 0x0, 0x0}) r7 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x80002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f0000000080)=0x40000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x4004000) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) lseek(r8, 0x9, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, 0x0, &(0x7f0000000040)="a23a3a4fc02b15c0fec5f137f92aa591e43facb265ed67a1de995cbbed4ce5a07df29ab667", 0x2}, 0x38) 24.558486131s ago: executing program 0 (id=882): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(wp512-generic,cbc-camellia-aesni-avx2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000003c0)="37828caa", 0x4) (async, rerun: 32) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) (async, rerun: 32) openat$apparmor_thread_current(0xffffff9c, &(0x7f00000004c0), 0x2, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000180001000000005955ee0e662d"], 0x24}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) (async) write$apparmor_current(r3, &(0x7f0000000500)=@hat={'permhat '}, 0x1b) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={{0xf, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x2c, 0x2, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x5}}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x5}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x94}}, 0x24000810) (async, rerun: 32) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) (rerun: 32) r4 = openat$procfs(0xffffff9c, &(0x7f0000000080)='/proc/slabinfo\x00', 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="38010000", @ANYRES16=r6, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r7, @ANYBLOB="0c009900000000003e000000140004006e69637666300000000000000000000008000500060000000c001780040005000400040014000400766c616e30000000000000000000000005005300000000000a00180003030303030300000a00e80008021100000000001c00178004000100040003000400020004000200040004000400060008001780040003001c0017800400050004000400040001000400020004000200040002000a00e800ffffffffffff0000040017801c00e7"], 0x138}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r6, 0x4, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x4, 0x36}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000000}, 0x4000000) (async, rerun: 32) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x16f, @tick=0x7}) (rerun: 32) 24.379999271s ago: executing program 0 (id=884): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r1, 0x107, 0x17, 0x0, &(0x7f0000000280)) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0x1a, r2, 0xc, &(0x7f0000000000)) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) r3 = socket(0x10, 0x80003, 0x0) mlockall(0x5) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x10, 0x700, 0x0, 0x1, {{0x5, 0x4, 0x3, 0x7, 0x14, 0x64, 0x0, 0x6, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}}}}) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000005c000900090101000004001f00"], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000400000000000000fcffff0185000000bc0000001801000020646c2400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f000000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="0200000001000500000000000400020000000000100006000000000020"], 0x24, 0x3) close(r6) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000700)=0x1, r7, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @mcast2, 0x3}, r7, 0x7}}, 0x48) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740), 0x2, 0x5}}, 0x20) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000000000010000000a000000090002008d001f106f194eb3050001"], 0x30}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d0001000000000004086aa42d"], 0x30}}, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) ioctl$FIDEDUPERANGE(r10, 0xc0189436, &(0x7f0000000340)=ANY=[@ANYBLOB="16c985da110b6de35efaf67793e63a79ce"]) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r7, 0x10, 0x0, @in={0x2, 0x4e24, @loopback}}}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0xffffffffffffffd8, &(0x7f0000000440)="7af1e98375837baa45a6055d1bae", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 24.114046611s ago: executing program 0 (id=887): syz_emit_ethernet(0x7a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6002173600442b00fc0206000000000000000000000000010420880b0000000000000800000086dd"], 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32=r0, @ANYBLOB="200001"], 0x38}}, 0x6404481c) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x123200, 0x0) read$FUSE(r1, &(0x7f0000002a80)={0x2020}, 0xfffffffe) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0xd7, 0x1f, &(0x7f0000000380)="ace18bb90f5128cc1c52a83fa160a912de3b23e3c41d235844bdef4323416097815e2b078c1ecc5938a8261b339156a88759b7075adbcf25521fec872d05917f7d04963f1d5592330cf64f7356482c92b15594a3fe182fa7fca703dd61070f37a6af959bc289e37631f574316c94c85e210b3a225564a440da5337e69a9be974b798801a5551d16215dfbae2a7eb744028ff810ed94c221290a00d2ba7dbb586c89b9c4ca6ec95dcf3798a658c789b729f7d929c1aee20fb9a4298e89bc6fb1413e885ad7febd68c5210ecd13d1d7e52b4356ba5190d22", &(0x7f0000000480)=""/31, 0x8, 0x0, 0xbf, 0x2d, &(0x7f00000004c0)="1dce62ef9d11836b8b387fc597c72d444808bf0bbe8fc1fd3457b7d9880de2967e7fecf82ff22a4aefb48137f2aea158f9fb9528cd42bf708904e7812e2a57711c8bb730fe7ae16035aeb4bf2ba3cb2d73bf7053dbef829929745ea34b58b8e9b78a5654f891d7998c9e36f166ba5354d1bb06317ba2bc830669ea8f881c169bd9fe789134ca8f8c4775750856e0fde599755849e820d0cee4536ba38a2942aedb8db724af9cfcdbecca18a11dc165353a03eabddbec641cc68c3354b9c960", &(0x7f0000000580)="74fb1086388ae84b786fd985f3aca37f4db45eab6734bfb7920e56af6b460afa4a9d5f54737c1e22e46d96f029", 0x3, 0x0, 0x8}, 0x4c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x3, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x3}]}}}]}, 0x3c}}, 0x54) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0xe0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) ioctl$FICLONE(r0, 0x40049409, r2) 23.789330127s ago: executing program 0 (id=889): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) futex(&(0x7f0000000000), 0x5, 0x0, 0x0, &(0x7f0000000140), 0xc6fffffd) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) pwritev2(r1, &(0x7f0000000980)=[{&(0x7f0000000500)="be", 0x20013}], 0x1, 0x5, 0xa, 0x14) chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01) r2 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$HIDIOCGRDESC(r2, 0x90044802, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000006800e9780000000000000000000000000000000008000500", @ANYRES32=r5, @ANYBLOB], 0x20}}, 0x0) sendto$inet6(r0, &(0x7f0000000180)=':', 0x1, 0x5ad1f84ea78fc92, &(0x7f0000000200)={0xa, 0x4e23, 0x100, @loopback}, 0x1d) shutdown(r0, 0x1) writev(r0, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0xfdef}], 0x1) 23.546226879s ago: executing program 0 (id=891): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, r1, 0x407, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20080c0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x28011, r2, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000b40)=ANY=[@ANYRESDEC=r2, @ANYRES8=r2, @ANYRES64, @ANYRES8=r2, @ANYBLOB="f795422f606481efbee1b62eedb575a55d0301bc3937ebc5d089989c07bd82b42cd2e5947054a9c1d4f2365133aecb9d724d4f68258e063fee186f76bf31", @ANYBLOB="b45f057805234413343f5c8bd04372f11f6bba7fb6cd379e1b1fb6c5814100fc9284c3631df3096cacf58cbbbe0ea8fb2ead8d8876b615f6a20a97207a12f81e4707729d277df408ad06bcf7d46a35b139d57b9ada418d92501a2833249ee8e0f97e44628ddb9abe71aa0ad9dbecb3c3f28b373ada0db60862093ff4ae7ee242a64ae699dfa7d7d469a68ec70b495925d93c92490271b74ccca389e12f6d52a45502a51fbec8a848c745d7f5539ed73984e530334730632554ef578c74941a80715af7ff909b0f250ac06381c7fecc1b03bbcf5583e61717f5903c9b9312115eef47f9109742d41764a9fc362da960cb35cde19d0728f3ad497daaa4d2f0a304318b2977958c9922eae3e066cd4e45145c691ef33cec0a07fe9aad1caa32e3cbe36a40eb565561b828f9a305b5fcfa0a8c41119a5a7cf26be7fc788997536d9d86993c3184552beb8e6c26ffdccb66e4136e2efabc7aa4776d233a7a371f76e8557309b3371b2b5dc7085fb3f8de585359505b23105a21fbb29fcfe5e92db1282768c9f2c6b1a7b1ff00d96a1576fe3dffe223d9586e860f7e5a337ddca852af2d709d1c814c4747673c0bedf451d19a16325b261a27d83212eb557c271e8910d294f7aca04423fc231f6c31d7094b2df15384fd2d7fd685f43aa659b6b31f2fe9f2ff873a1eeebe3798781c53edf769ff2bba4debe1a0e88fce76651a31909d324c247d81cc9de4e4238f0848324b2e756f83beb9c5ecfea4d9a1c21cfc3cfa8901c621f5f82541f2c36b36b54739a14e979712d0ebc6b562eacd963c072fa8d529b35feac2a2807227ea91f90d139e17b0c00b44c520172e6f7d5eec4b081b4319e6341d008dd8b6caaf0abdaa1196530ff3c0816fba477d7ecee0f5f9daebd71db4791719c6cdf03e5b8df49129dfd5b5f13fa9dca74abb9620547d0e954644727f4a564d7633163b5107e712598b84a80a785e0ede97628f702f8bdc32ca185b95e901b4e549dd1dc53068dbe17b9b0acfd2ba574d850563141aafb94bf177d8ec64a504533f2c8201b2a210d9f86c7c3b02f8f26bba61c079a889a6924d6ba44a79169329682e66c3ca03f16a148262806baee5f1f1d43caf039d62b2bc886c6e135ac9eaf7bf075a69c1e91840b659564a080c101ad12f5eff49c6a529e847a72e54a5022a5e5e20fb409dd26576b6c6bb87de70ecfe1ccbbd819c12442a40285698dee80bfb0fd54bad31606484620d222027088b7363e6593ca175f40093fb4a16e228e241218484dcef03662ce9b80ff60985aec969c8f2e1612faf7911e77595d5c735b6e196fd1fe3f2a8b4736c3cc5fbc4e35751b589275efaafff8e5c4293896ca6a0c142680ee4308b1b737ea64323b097e8ad02ae5e190308e364fd958361084c86dfce2991aef64bd49ab145d22b14d2995f00de5af4bf06680999bd4f3f39d2f66cae6ef95a40a97fc7cb64a0eec63c5483e2ebe88c013da97a0f20b0d1e11511406d860de88fa4100c6a9b92304edf316561111de1190132b6e19168f6cb47b3494bb2ed412fa454a395930ff58e91f9d5c33a2dd03a04b19a34488725c3540f8e2514efccca87b4adfee11b85dc8ce49cd2f247ea2cea654b83031b4668fa4fdf9a9ca17642c38b97a6cb35dc988acc0fb8c18b0c98d890e049a3d1998af7d5b4fac100f4ff4660391d2b3bb6ecf6a43440824828ff36c29aa7893d53d37bae075b733438f44ebef24fddb14dd1e9246ea13761e8cf08a9cfec96bf0af1a0d6433af74087f9d9bed4a4a6712aacc3e3a7344b3826f43bbd53e50893495f2b0deb67e8f1b38043ae7381f7cc2dd79b62669c3a4a2b24590415b0cc188637a35a19b44bc6c9079d48784cc977fd57e778265a1d4058da077dfc700fa0e66f7a6233170322f6da857e6eb9d983d3b02d082df2d5597f8e9b499e1cab26395ebcf7bc9fc72c98e5bd673206e22d79169790bf91c376a28953f322c058aa057c9b943f0694db5f2ae343bc968c102b61392aaedee462469f2b0b33c6fb713707f6e9ed0bf85e5d710e8f579bd18141858814a1717c5e12382986888fb50923c1e7067a7fedb4a98c8498d0bdc8b145df47df95619814aa2cf4e2b93d65c0da30130ba8f27e27654ffbf261dfe39f45b8bb099e361c586f3773eba54a3a7b396062a579a4542f2acfa9af2990aa03582db77cc3748e46eb6380d20bb5158138d4775ca5cfaa1e7bb73fcd83bbf4f0c91e1f505dc81365c9d2eb02450dd02b8049ddc74650ebcb37a4aea12e42433bb5b909da621272f8e1fc438e172b0819bca6a799b79beb2f9a280e631402bd99ed76b240daa787542ed68e377652b6b30f8e28d7fe469fac05479a605dbe5389f9e4ae01f5512376f4615c99244dfe82db7314837661cc2592ebf4cea0c7d6f1ffc901ccad2838c9996223a9c39f23f6459695163ab561492899ecd7856aab3ae6afa684d96cc6d7e093f1d01cd3d90e19402f267a31020e566eb88c888572425865fd22c3697d8abf3ddfdc3b04b07c293c8d6f045f361058b597ac08d085f068300597e5fced7c2e61924457b3cdfed7d3dbbed836a8c73b3a227321e967635222f8e5fedd3193ed84600fba197bfee169f4638b54089a5fa390c0a7eb7ffbd7432d84fc928812c07261028737d58c9be0c6f5414a03267925abb6100ef736f057090e36f1e61754f42d2313e01b43d091d0cbf4266e515ccb1e068340cab30af7074e321b86f7860cc596d16d5f3af97446e219f8731a5079dfca52fed1d232087b42754bbb4bb32e3493eb4bed0f4fbcc1bd6b7455d1ae56c955afa6cd9c0cdc2755a8fd2b04d37c8d0f98de14b0b78244e68b6d482601c3d7ae66a8e3046f536bdd055e9449ae8279ec5284f6aa4a4f4eeb2ebbc8dbfbcecd37770c86f201b2512fe180bd4949813c203cbddaa8b150367f16d2b09608b3f962011f6413dd1eb3701f704a52f42f1cdbb087a94293652da1d77c0496e2e976c1ee9db9c0b69c73929aa7ac77d1d28e350be167b95b3ae8a62950c1b2e169228b93323a2db9535d8a69cf91ef89f9f7b76c2590300a67b4aedde01062cf94c1b0de08d1e462f0e22d94078b382347ce6314536b4afde8be4e9f1ee7be9b35aef3d914a914f3034ea9f48bf155179308f7f65b178e79daa233dd617b5574c1914896a8e4db8601fc9c65f3c883a73d8e40a76559dc2b35b4269b47aa314c6ddcebceeb670e9565843937afe33c875e5dfcfc652abf7884d6e13fd1842734a2501ab32875f6734b1bfc146684623d1e7791d69a02cb8997c98ce443cae6e33658c28ae8f8c15858d40fecddaa902afa831635da2e7e540c452da1217fa1c1acbca56122c902a79188f00a5506c4d4c2c5b2c69f19e3fd440c77f2d0b8052d697f960691d2d0e961d1cda317cdf01473ad793f60301101941136c01297cc29ab6c19a0d388e253024db28b0e73fee630a47bca5a07b24e56536d819ca2ebdbb408754f944e428e2b6cbbe02730a830fd38362aaea145f5baf88ff3f8b26a7bc34a1806ee9108e582e8d825c479cf49a2e5a529b1ecb56c56cdf1c2d444254fc6441180721964d33284e642223f303e1104ad592d266183dc489e32abc934b66729b0facd385dc7f4c64c2cfa1d385569363b65a138c4b235098671693833b907742737a3360fa7b0ec728910489d627045f0a09f99af449c3e607d3404ac5401a9e9be18df9dd2bfea4a8c356b2e233a990f2958cc1452f67cb6acd2300293a1f93cbf4c921b954e73eef8b01a01866989bc54e13984201fe1e8a053aed6a30dd5af99a4740d30b50531a70a658bfc45871ca04a151c4880a3252e90a556e75df29319831abe4ec1e9ee152e1474bd69ea1356b74eaa7d77d2960ba2da12125388cb6865dc5a985344625f85e73b63737ab63d961f9b709a30c5b8352648640b52c4aefa964ea54e8361f94e0c686c1d295965ecbd174c9281230429e0db66ed05ddc103421a64d1853c2a2300e0c7be5e1f0b125bb1376a27a4ada85092f9e7b2cce44a7cbec5aed16f7a3aecdf7147471b8c918061455bd788ba3341940a3e5c14dc08ad2e15c9d6750f60718b0ab1fda54fe9d75721a9a1291c105d9fd173544c379e4e40606df2901d31356e210b32d0d7c2171bb25fda5831c297fd37df2b14a44ca292dcf52fcdc64be4d8d126230b8ac723c81a75e2a65327ac2638b8eae93f6a4cbdadd171ae7b35547918ad0fb832326617025b39dcbecd3341de3d00f0a42887370b4e4575add992ee86c0ccc82c9876deefaa890474f65110e7d08c1a8ac579729dbe4cbcd42c330d7908871d1eb5ade5a5f9bc05fe9c39e71c759279edb32e4b42b94d624b35d211d89f23308b624838d45c617934dc8d7ba311d6650e9c1b413320424c6827789a34df8ddc7ed000e81593a09343be5f3ca5b558c88ea6f65394c94119aaf96480a50eebb6410369310b5d670820d89427f23462f87387479f4be8f6ce233948b30907afbaee7062017569f463fa5564ee7595326a730ed2bfcc9ed164687960fa6e7dd0ccb33dfce72f1a55ac02caf738d97a10e2246965f58804c06fdcbe55cf61d1c713410c7e9fb32a881d81ab37e71b12eacf04c44dfc667649328dd9cfbaab67f954d1deaca857ec37e5c85bb035fc5c6f656ca0a6a793f4db310fda824d556eed2c649fe1c2f341e37b4c79821b6a6b9ba0a03973fca78fe7d1331310f7510688e9303b5eabc3145059042547e465616a8c9568bde08b19bec1fe1b18f1ef1dc813fb2d378bdc64e5fb828f70dca587a33bd7141fa53698f599e24f26cc59cf0ebeb44bbd42e616ed46428bd5cb6daaebadb9841dcd02909a922b21b95ce651546d0acf387f0a738ca37674cb429abbd393056a2f28b047d96e9ee635d535bcb1befbf370171aa3278b98aa0e6a38ca91add4616c12b00590650c735502ead6205fccfcc1879f292ddc7f3a5e2643b61effb1904cde0ca6bba54eb61959f24ee2c1911ce0005b41ce7af524d6069ad77b9da17471899d86bafd30ac34815c2067fa2d8f69c11c769b2f58bc01ba063f572c96b15d8f9464ef5eb0a0f39bc97a23ced307507657e16ba69f6754ee3551f72d12b8736afa0889fe339714cda5312996250c46ad8b151e33b7502cffc17b3852d9759fd5492820ba28b59ce9e52ca4c2f084fac49ff39df3351b374341ec48fc72e297fffc3378387b159dae6a91da771001bcf22a640acf6eb99d5c6ebcb6620925106c9f4cbff5cbee0e002127975164055344bb50da1c2dfd23db8b8e844065f14704e15cbcd185fd2ab3792480d3b03e927770170db13da19b48364ccf93e7139b0d6f95f75115c8ed672df3700c701491c248010ab5fbb3a48fee24b856cf63dbac9f2da536f4551e44846ba32fdb9e5ba0a3f332bdc728e50dfc6d028b639284f2c5dce578edad8c628bcd539838155011b91c82700ae8880eadb34928932104b7eca113f87f6e2100562ea6c90cbe60ca5631ee515ae3cc102a14979637cbb3daa266472e0d399d816daea89cf2bb3892162da46c33aad1065480cd45fb6380a15387c4d1074613884acad57938d08e5a134d8d7d5dc3fa020fd41d70e0cde2480ce92508eb86aa8c7a36d0b28f41b1ecd1854842843bcbb387c5626f6683ab8addb1e9bc6c54c97cab9a4c388b22342d1bcea3ff5d5bc9975e65d23958ce0c95080aa939d2f6fe819a8abad9621f93a580fc396ec5e10a8723018676779f3c410a2170a89c3089da4ba0e3"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x40040) ioctl$HIDIOCGUSAGE(r4, 0x501c4814, &(0x7f0000000000)={0x2, 0xffffffff, 0x0, 0xfffff800}) 23.308313662s ago: executing program 0 (id=892): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) syz_open_dev$MSR(&(0x7f0000000240), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp6\x00') socket$netlink(0x10, 0x3, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0706000000000000000027000000050031000400000008000200", @ANYRES32=r0], 0x24}, 0x1, 0x0, 0x0, 0x20004080}, 0x24060884) (fail_nth: 3) 23.12108383s ago: executing program 33 (id=892): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) syz_open_dev$MSR(&(0x7f0000000240), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp6\x00') socket$netlink(0x10, 0x3, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0706000000000000000027000000050031000400000008000200", @ANYRES32=r0], 0x24}, 0x1, 0x0, 0x0, 0x20004080}, 0x24060884) (fail_nth: 3) 9.289955444s ago: executing program 5 (id=961): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000a50000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x4001, 0x3, 0x1fc, 0x0, 0xb, 0x148, 0x0, 0x148, 0x168, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x70, 0xd8, 0x0, {0xff0f000000000000}}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x258) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = openat$cachefiles(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r3, 0x2) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x7) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="5d4705006ffd0000140012800c0001006d616376746170000400028008000500", @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8000002) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_pressure(r5, &(0x7f0000000000)={'full', 0x20, 0xffffffff, 0x20, 0xff}, 0x2f) pwritev2(r5, &(0x7f0000000980)=[{&(0x7f0000000500)="be", 0x20013}], 0x1, 0x5, 0xa, 0x14) 9.059697939s ago: executing program 4 (id=963): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) listen(r0, 0x5) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000500), 0x8) (fail_nth: 1) 8.629968934s ago: executing program 4 (id=964): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = mq_open(0x0, 0x42, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket(0x10, 0x80002, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440), 0x0}) close(r1) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="180500000800000000000000000000008500000075000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0xf) futex(0x0, 0xc, 0x1, &(0x7f0000000040), 0x0, 0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x8c40, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) writev(r7, &(0x7f00000004c0)=[{&(0x7f0000000000)="26eba9fdb4cbab48929e1af151000000000000000500000000000100", 0x1c}], 0x1) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x3}]}, 0x8) bind$bt_hci(r8, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) flock(r6, 0xa) ioctl$TCFLSH(r0, 0x400455c8, 0x9) r9 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xc0443) fcntl$lock(r9, 0x26, &(0x7f0000000140)={0x1, 0x0, 0x81, 0xff, r2}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x2) 8.375647067s ago: executing program 5 (id=966): syz_init_net_socket$llc(0x1a, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mq_open(0x0, 0x8c2, 0x30, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x50, 0x9, "", [{{0x9, 0x4, 0x0, 0x80, 0x3, 0x2, 0x6, 0x0, 0x9, {{0x5}, {0x5, 0x24, 0x0, 0x9d}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x141, 0x8001, 0x1}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x8, 0x44, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0xf7, 0x5, 0x4}}}}}]}}]}}, &(0x7f00000005c0)={0x0, 0x0, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x9, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd, 0x1000001000, 0x46}, 0x0, &(0x7f0000000000)={0x3ff, 0x7, 0xff00, 0x9, 0x0, 0xf, 0x7ffffffe}, 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) mbind(&(0x7f000098c000/0x3000)=nil, 0x3000, 0x1, &(0x7f00000003c0)=0x4, 0x6, 0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r6, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x8000) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0x1e}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000000680)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xab, @loopback, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x20000014) shutdown(r7, 0x1) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x73}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x21}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88b5}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x89}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}}, 0x0) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) mbind(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x6, 0x1) ioctl$KVM_SET_CPUID2(r3, 0x4048aecb, &(0x7f0000000280)={0x6, 0x0, [{0x4000000d, 0xffffffff, 0x1, 0x8, 0x6, 0x4, 0x2}, {0x1, 0x3, 0x6, 0x8000, 0x27, 0x7, 0x2}, {0xb, 0x8, 0x3, 0x3ff, 0x7ffffdff, 0x8003, 0xffff}, {0x80000019, 0xe5f, 0x0, 0x7, 0xdf3, 0x6, 0x80000001}, {0x7, 0x2bb, 0x0, 0x9, 0xa, 0x7fd, 0x400}, {0x80000000, 0x100, 0x4, 0x6, 0x3, 0x2, 0x3}]}) 5.743462914s ago: executing program 4 (id=973): connect$inet6(0xffffffffffffffff, &(0x7f00000005c0)={0xa, 0x4e22, 0x8, @empty, 0x9}, 0x1c) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0x4, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x5) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) fsopen(0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x0) ioctl$FE_SET_PROPERTY(r4, 0x40086f52, &(0x7f0000000180)={0x31, &(0x7f00000003c0)=[{0x14, '\x00', @st={0x4, [{0x2, @svalue=0x3}, {0x3, @svalue=0x5}, {0x1be501394dacf6d, @svalue=0x381}, {0x1, @svalue=0x5}]}, 0x80000004}]}) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0900003a8b5f490400010000a388000000a79300", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000340)='illinois', 0x8) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000640), 0x4000, 0x0) ioctl$CDROMREADAUDIO(r5, 0x309, &(0x7f0000000140)={@lba=0xc, 0x3, 0x0, 0x0}) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) unshare(0x6a040000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000680)="800037bbfa9ba1ce7f5a22ea52cb182bb081fa35890471500fb65612b0fa9c2ea157c185743334e2767705494bd24a345305f95174e238fe3a00bf0000000000000042388d27531c158740779a63c4170be52c18855d6c765502c6e9455f421414998522b7c622e3975b0f0d1628eefa4e86f39b909f2fb50ab1ca5495df0e17bc475c3464e44023501b728747539d7f8ac4e7debf070bea797b049569ea07231c46a2930a062f171d7a339035a889b0b3be082b6f8b5a1ef15c182bac3170c25b7429d7730c014efa3e2f26e114be097b816f655fe0e45538e23c152385b2361c0d2440187b7dabcf3f83", 0xeb, 0x4000014, 0x0, 0x0) 5.328019898s ago: executing program 3 (id=976): rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffed]}, 0x0, 0x8) r0 = gettid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0xb, &(0x7f0000000000)={0x2a, 0x0, 0x3}) 5.239906337s ago: executing program 3 (id=977): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000a50000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7f}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x1001}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x4001, 0x3, 0x1fc, 0x0, 0xb, 0x148, 0x0, 0x148, 0x168, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x70, 0xd8, 0x0, {0xff0f000000000000}}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x258) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = openat$cachefiles(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r3, 0x2) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x7) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="5d4705006ffd0000140012800c0001006d616376746170000400028008000500", @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8000002) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_pressure(r5, &(0x7f0000000000)={'full', 0x20, 0xffffffff, 0x20, 0xff}, 0x2f) pwritev2(r5, &(0x7f0000000980)=[{&(0x7f0000000500)="be", 0x20013}], 0x1, 0x5, 0xa, 0x14) 4.428292599s ago: executing program 5 (id=978): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x20, 0x0, 0x6, 0x4, 0x0, 0x1}, 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r1 = epoll_create(0x101) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x0, 0x1, 0x4}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5758661d46}, 0x4) (fail_nth: 2) 4.256672826s ago: executing program 5 (id=979): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800a0001006c696d69740000002c0002800c0001400000000000000002080003400000000608000440000000000c00024000000002000000350900010073797a30000000000900020073797a32"], 0x94}}, 0x0) r2 = fanotify_init(0xf00, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000080)=[{0x101, 0x0, 0x0, 0xd866}]}) close_range(r3, r3, 0x2) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x505cc1, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0x800}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fanotify_mark(r2, 0x1, 0x800002b, r4, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) r7 = openat$dlm_control(0xffffff9c, &(0x7f0000000200), 0x400, 0x0) ioctl$BLKFRASET(r7, 0x1264, &(0x7f0000000240)=0xd) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = openat$dir(0xffffff9c, &(0x7f0000000140)='./file0\x00', 0xa2002, 0x18) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000004800030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="000000000800020000000000140001"], 0x38}}, 0x0) ioctl$TIOCVHANGUP(r8, 0x5453, 0x2) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) symlinkat(&(0x7f0000000400)='./file0\x00', r9, &(0x7f0000000440)='./file0/file0\x00') sendmsg$NFT_BATCH(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}]}}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 4.237133881s ago: executing program 3 (id=980): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000000850000000700000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000000000000000000000000085000000500000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0xfffffffffffffff2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000001640)={@broadcast, @random="5e0e00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty=0xac1414aa, @broadcast, {[@timestamp_addr={0x44, 0x2c, 0x7b, 0x1, 0x5, [{@loopback, 0x1ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@multicast2, 0x48}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x8}, {@loopback, 0x1}]}, @generic={0x89, 0x2}]}}}}}}}, 0x0) 4.164690931s ago: executing program 1 (id=981): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x3c, r1, 0x905, 0x0, 0x0, {0x24}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x3c}, 0x1, 0x60}, 0x0) 4.119090935s ago: executing program 1 (id=982): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x7a) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f00000004c0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20048001}], 0x1, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)=""/8, 0x8}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0xffff, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x4, 0xffe0}}]}}]}, 0x40}}, 0x800) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}}) r11 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r11, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r12, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="0dfb", 0x2}], 0x1}, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2d, 0x2000, {0x60, 0x0, 0x0, r13, {0x0, 0x8}, {0xffff, 0xffff}, {0xfff1, 0xc}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xe1e, 0x9d7, 0x3b09, 0x1, 0x7}, 0x7ff, 0x1, 0x2, 0xc2059a21, 0x3, 0x10, 0x1d, 0x1c, 0x2, 0x4, {0x5, 0x4, 0xfffff7e1, 0x3, 0x3, 0x20b7b2e9}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x80d1}, 0x3000001c) 4.104085258s ago: executing program 5 (id=983): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)={0x10000014}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x7f, 0x584e4f53, 0x3, 0x2, 0x7, 0x7, 0x5, 0x1, 0x4, 0x2, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000003480), 0x8) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000400100000000000000000000000000200000002805dd39895a4111"], 0x50) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x50) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r2, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r3, r2, 0x0, 0x578410eb) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000080)={0x4, 0x1, 0x19, 0x6, 0x100, 0x0}) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000f000/0x2000)=nil, &(0x7f000001f000/0x1000)=nil, &(0x7f0000015000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000c000/0x4000)=nil, &(0x7f000001d000/0x3000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) io_setup(0x206, 0x0) io_submit(0x0, 0x0, 0x0) 4.009908131s ago: executing program 4 (id=984): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@typedef={0x3, 0x0, 0x0, 0xf, 0x2}]}, {0x0, [0x0, 0x5f, 0x5f]}}, 0x0, 0x29}, 0x28) 3.96552145s ago: executing program 1 (id=985): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fe, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x2, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback, 0x300}}, 0x100, 0x916d, 0x300, 0x0, 0x54}, 0x9c) 3.963719458s ago: executing program 4 (id=986): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000000850000000700000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000000000000000000000000085000000500000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0xfffffffffffffff2) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180), 0x4) syz_emit_ethernet(0x6e, &(0x7f0000001640)={@broadcast, @random="5e0e00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty=0xac1414aa, @broadcast, {[@timestamp_addr={0x44, 0x2c, 0x7b, 0x1, 0x5, [{@loopback, 0x1ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@multicast2, 0x48}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x8}, {@loopback, 0x1}]}, @generic={0x89, 0x2}]}}}}}}}, 0x0) 3.086700368s ago: executing program 1 (id=987): syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$dlm_monitor(0xffffff9c, &(0x7f00000001c0), 0x40000, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000080), 0x8000, r1}, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x10) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x16, 0x10, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@call={0x85, 0x0, 0x0, 0xa0}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2.831266738s ago: executing program 5 (id=988): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_emit_ethernet(0x46, &(0x7f0000000280)=ANY=[@ANYRES64=r0, @ANYRES32=r0, @ANYRES16=r0], 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_vhci(&(0x7f0000000740)=ANY=[@ANYRES64=r1], 0xd) ptrace$ARCH_GET_UNTAG_MASK(0x1e, 0x0, &(0x7f0000000000), 0x4001) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r3 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$apparmor_exec(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB='stack :'], 0xe4) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40000d0) write$rfkill(r2, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r5 = syz_open_dev$dvb_demux(&(0x7f0000000440), 0x0, 0x40) ioctl$DVB_DEMUX_DMX_SET_FILTER(r5, 0x403c6f2b, &(0x7f0000000480)={0xcfe5, {"4a21cbfdc27bb227798ef2a885da3cc7", "4a4dc099f22614fee775210e6170bf8b", "dd32be9ce93516763ba2d35a3edb8294"}, 0x8, 0x2}) close(0x3) r6 = landlock_create_ruleset(&(0x7f0000000040)={0x2002, 0x3, 0x3}, 0x18, 0x3) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) landlock_restrict_self(r6, 0x9) r7 = syz_open_dev$media(&(0x7f0000000240), 0x100000000, 0x802) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x44800) ioctl$MEDIA_IOC_ENUM_ENTITIES(r7, 0xc1007c01, &(0x7f0000000480)) sendto$inet6(0xffffffffffffffff, &(0x7f0000000400)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c200a0003000d0085a168d0bf46d32345653600648d0a08000000000a0000005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160012000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r3, 0x5000940a, &(0x7f0000000a80)={{r0}, "5ebb06af31346e818a9e1fba9c7b8013236bb53cb461734bbfcf58a96ff2253a89fd832e0ce36fd5bd853f4f7d9c2304cc7b5a8e7ba7b460aa782c8a1625d8f49cb994c44f518c2e3c1924020dd65953613621a6b03b7a10ebe561caabfd774e8004281effbe43437611192e39bc536dcf61de284d66a1d34803e37b025405daedadff71fcbe4e040434880160188e467d178f5e18a18b33968239598faff8e2551dbc95159a7c3f7eafbeed4e6d5153210eaedf1f75ce17e8b8078931b5469f6239e72310c1b4c764eb901fb9567014213035cb7cef506b4b6c41c2b824c36ea86976fcb3c2d531c833dd622be9b58496713098bd751a494c2456bcdf69d161319f4871ed8b44582484bff205f2191c9ea934e3584f6102e088fc48b70f474195d7101b6904ca5d0503cd91019a6de992c5a7b0b1fd82e5f247ff98eae17dc439b05e678468fbe937cb3671ff03039813705d0a87bf81773697101f9657bbc752d73e85712237160c987633df947b442cbc359bc148c2a390f82a79fdbeffac036e1df49bac6d1753ae0c9d38f607a7fa111af5de7e36ca73fd3a6bc4a014638a9d6f0c547c4374b28c46ea27b72c9d5144d5eee600ba2e05b754ec13770b43767a7a7e6cbd531b513d9871142555bb53ee8ab82a179335e2677a80154d0c9b8f8972ec1f58ac4214d813111aa6fb083b511cfa0e108a2032d001cdf52c799efe127a5d32c6fd3d2c19525ef0820e07d86e89e7a9dce199ced8ae1a646e6c617ebf3af78cb4d0b3696c1c324896e59017e52562f9d4578dee7b734674b73757ee073c538fbb2022c05e7dc3fba6d7055c32dfa205ad07c0baf99b3265619261531a1f8e3ff5410c155652ac9b176bde330813f3e7e56ef7e66442e62605cf0542b0eb427e301d8029cf48a71521c2cb285dfd999b4f0d18907f3923c210eba4608fd66a466aad73e498ff47421df37599ab441f47cf8c2e591456f2e89e05aca27a62d5ac2a43313f1fe58ea866e4dba555a2c8e40e919c1e34b99bc51aff4268535f8776781c97696b69da99a4948ab31ee78b8eab8c43c44d31a3c013895126f7e631958b4f08cff0bd4f3a467f9badadf19ad301dde6f534a2841437227141bf9299a85ea346855ef76771d4828e92b38bb6e7dc1f1b1fab2ed4570b048dfa8de2d825cf051fc0cbde9e302a3bcec81e9ff9c8a9056d47161b5d2dcc0709a5a5a4cd2e4a052c4479eba1257e7e310b88fd78dea1f72195129e0abce25800b544237df8b24374fbb4f6448193ee61caea609c3f001510c82867328893e5fc7b86c48102973944e3c6f13826c6a8ff14be9a5d29c8e2e40af4b7969ffde5464dd831b5427ee698c7d048368763e33269d715231d6fced3296998e34ca713e74ac2493e755225e44a2bd1f192cdc1fa5483483e05ad439094a3d62d7bad071e27222a3b07d21f3fcf0b38585aedb0db95fce6cd324fb955c023ddd1c74689f615272b5e57261c2e238ea6b7a96af27560cb78bcb13b9386ae00df0db47d70121704a0ab0f941e33f333bc497b53143fdf1688f1e9b0f038f0c199d3caa9c83ae0427cd1bfc6e6318699750cdf3cd4df772f8c4da90fe4d404f2944f1091e0fdf0457f892cae54618db244e7a0a1736fe6daa61d514f3f31f06efa6afbb8eadd68063def576023d66f45ec63d95f99422f5a28c92e0a58f43e7ff9569ab928fc19344dd9536ad5f83a5da152ad0adb184e61cb199ab076ccfd09b66e3b566825e2541993533bf0f7a37110ae050f723b45475ce58e826ab564834f94027d7122892aed8fa8b320272894eb184a6e23a1c96b41710b9301785425fe20f75f9a5355f8d293f77580f874a6b18538ab212e4bb7f00f6ce9c23b62dd2a6bd2a9ac5bc8c052ef35ced3fcf117db78b148072330ff902f569bd7e38125d67d5c04a43a37c5481d7c38b9bf29ae11d41a4a4575e7d1dc4fd29caddc66291e8a4301ad159f0ac935ab4d556933fb5a0524932072b17cfb67664cca740cbc879bf3a52e6dfdc9b3cced576ffffdce0c2a953787b2fc080005995ccd6aec8aa31930e0683fe7d328561334369c6e2a211ed519ea338417ac2b7b4b8b6a0ad9685d35050b915c72dec3cbdd257180f34d37012ab8320f43f15894694bb81f0ba49942ea0beec109c95f7dc8c74d7c55bc765bab7c86e0238816588a972b1be02b8a162fb47079fb2183f0f12cc8489c5b8584da92042a6b1cf003c549aa620d8afe2d4b936cf195f6656191ce0d6734cebc3993a301de11fe589c795e67a0c8445626b8662f455a3b970175dba6eeb97d306a0ddf39371e937a6d368e79e3067fd81aa3405a9d132f3476efcbd16b0ce0c7f436770ee118c77a713fd3036a12080e8395a5387752270afb8580bea7c90502ee07e50d8386ba9c7cdd8f5fc197a2d7d45e7168f578dac0cc808e53046297825504c0e06e7321d166f7083a8f027a31b0b617db7904a0d9dacfac191c4fc009fea875f26c03902f130a0f15e07b5e48f0ec0720394c3348b9b740bbfe0b6e7df9db2c3b48ead2f869d5bc06cc76ac572f83a795ba2dfddb802d83d289bc33d895f14803d24514bb3467bd2ad1ff0a97dcec00755943ff702bf3bdec1c73bb8f0ea087d8b34e7a84e8cc473291b6c9d139aab62d2bcba1a70bbda086fc8be18fc44a59309a87cc462b02ee2fccecda75900560353209b28bf0ee2f021f958cb8843cd28b128e239b1d392b2dae9678b371a19140ce3307fd48443cc51b458bb9578ab9d63708817da6d26801e37e46620793421dd3cca336d5369db80dd26bbc2119d45939d2c8ad5d7a5df47c22ecda84031a60eb37a9cd1fbc613b36e9089fc5d128c857746b0726a444b9d5a3eab4af2d1572bb1fd07d86820a0ce4eda6f380789f03293a52cda586212d45a1259e5e621b130e7041e62ca0722b30ed9581701ab72cac675878260c978dabf21968dea083a575b009df9959d83e1e1e370cc1941f10b84a9c93d977acddf7c10cfd791a8e49e27cadf74cb019c4874e2c247cb6309650b3e2f932a3e9bb672716f7bf79bad32cbb0bbd3758cb37cb28725e5023098aa14ef9b5513999910fa994b90318a8c42008f3852deb4792627d52b14714a27052cd8ca476a7acdc8d609bb272bebaff30729f83f3817957bb60aeb16fe7cd793c6647116c63af81bf8cab86606274726d69073e9c284bc8015de9e111fc11fb78b2b21a0cf2c0cb4e3ef78b346a09a01b7e7f678da662eb82dba6d9bb943b99f875bc4d5a16e1cba386c47a51f1e0957c03fa1f4d34d9258fdd247aa31e4289873042a8de34db012daa1f463788f530304d413348d325b4dc6cfb18105393efa805e01ce9a86fb9b97c6727f9c9b5595dec93554a1a32abe9653e05d9a655d633b47417cd09b6e53a34a55ca8244bebc34e8e6327b57573779a00abe8077c8d1940774024f5829c36d6c04e4b509862cea0be24a90e26b504cb38a2598bf15c139b8cdb51751ed8482b4e8c5cfd41cd3cf3759861162ea9686eef60fcccee5487fdb8cb86e2b1464395d63fb6cf1cff82eef137009b66ce164c4430c333ed860090052578c756f95f79105b82a33de02f7faffb5f49b7db11d9f84f16ee4041a89dfc2639f5a84569c83dad6cfeb10e659cac9283f7cfee9e0f42e694254b1a6744b05799aa2856477cb7a97dbd7f2dc131fe6164407011ea364ae41760514ca59c5467d78c8dfa57c720aa4526c64e0e7983679ff3b553a65f70e89f98ccdf93afb938dc6c47784c0e049c67f4ba6447759ba1b73f34e7d3d0b516765f50f8521cc6b56fbf4320659103de4c6badf23d2320119afc33a0bb6de281e36b6151ac6b33989c56eb1d7610c8b2bce8d4d3d9c093d98b6a39a6277550cb428d9392801eeda73b4bd295d07e65afd9b7a01b1092baf02351197d6eb6f42662bf5abd4d7ca44271992d7677aa0648486bf70e8ef3153311bf59b877b12b577024138fadbb2326a20c25443bac8b6b0dd0ee71b44820f0a8b34d63a61879ac943977ee75adae18f532788f7b4a95a2480898b8846e824d7fe5732ab3315dc9a58fb9f7e0734b0b54240bbe50e2c17f4f21016ccb2403e20d3a780fd6fea1db3f80bfbfc4cbc6dd7d80bf58d96adac2da802e48e28ecf066db591d6557189a8bbaa7e42948a1d79d593406292f216ed9f6c8f814593500f8995731f8c61a91432df5b55f81e4009ba09b5ed1d2395db4a99c4be3d40c17eb2cf01d483b516a25812bf08884dd860e2425074dacdd1f8ef8e7857e00f82155db1bf4930d1294eb75644b95b88d2dee5a5ee4f532e053f77fb22285d0ca04e51974e3141b04d5fd33ac80aa91bcf67a82f98a2e4c53e8754b2f250832353853cd0b58eb32b0d8737fc25756e6c13a7d259f991f87d57307cb039fadc67e4aeb45c008fdbc07a58d5358e98498993fa15d6dfd2a4c48cdf6ce26fe877906fab540cff1c984932d76d9063aa09c74a3dd8b580e1d813ab0edaf18f255c705d49d54d6f5d671b506fe8259a958d92e569b1950cd9520d1a06663bd83f7392eb82b946a42b98dcd62e4ef0b8341d9afa279c1690cbe7ac0cef3af92e69ce7b85dffd6f5c5c4d8d0b35741778586ef6799deaf9474ee288527e971376067d23ee909f162923448fe448574086cb74a7c5f2d4a0d225db33b075ba644881dc7b9a6cdb1846a9bd36b0e9aad84ccf9491a43da43cb4c5420a620a48a80da1cb3cf45ad1e1d5bf1734918014e844736f70cb8fd10e66860c18dbe73ed7173607295c36f8ebd66747eda3baefd66e867681aa5647e1d2783ae108c3c4cd441d8b5fbda5ba6e8e5684cf1cfc047f721da49ab611b87a503bc924b43fa85b0117f32ab7f2f0251927fa52bf3f4851df05d20b89537b4edceaa8fdbe987780de1e0410df654e25c0bf0bafd7c0961f32b9b3bf9d40a6c504f50e5a5b26504f5c8459217d0862142666c988884b6ffab9f23594580360bdc835c62750e5b5a3605be63dfde6537bcf9dbf6b300d2815550a909b9dc423e078bb165a7d83b4e6c1cc5fc4b64f8748c05e868447e35515ba40a01d855476910664cc5212fb836f968a0f550f560ca611387a58acbb1c07b096efa49dd69c2256af8de82c800f8d3f2582f1862840905896583566923d839173beda0742dce63b2a964c2c1bb512ffcc9217cffced961313288741dcfd8cd8ee385ac665d45211721cc25770aef6d0f541f820f3e26d080467d6acec3ccdd1708406d18a4ceab612a452823bf0814cbc6db7ba3daf7cdeb7aa225694ce061827a8980af43b2df86484988f43a30608aa49226af14ca6e29d3e4031c8b6b3fa654ca35e55bee2f6fe797496623dff20166392de2e50cf1b30511697380b5038ededcca7af7c5f5522abda7296490155c99d7c1d570bc80b1097ed88cb736d1bdf675aec52661813a70b937382dd837f88bb25fc83c4d2ed53f2d8878713fbc8048088f3f94f54f4f3c0ccd743ce920d2eb9de343cecc6469a3f713083c19559b3cd48e35ac912b634ca08ab21f686056eee5847e35a2390f8614635d7f302e1935d37547438a25c551d8a9189840b2ea42b2cb59847aa1228a6ad436c59f3693f660c87f10248f4141c42beeac45303d89ae13dca752351feff470c72125e08c23d180e021f82f51898b3e51a621223a487653dc563ca837d34a09593c31524ac44ff34236b9de2acc1f37fd924b8caed8f04964f7ad709f05139b4dfb41c05f321ece65a7d2cb9c3"}) 1.824289709s ago: executing program 3 (id=989): syz_clone3(&(0x7f0000000080)={0x30904c00, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a90000000060a010400000000000000000a0004050900010073797a310000000064000480600001800a000100696e6e657200000050000280080004400000001a2c0005800c0001007061796c6f6164001c00028008000340000000920800024000000001080004400010002c0800034000000002080002400000008408000140000000000900020073797a32"], 0xb8}, 0x1, 0x0, 0x0, 0x8890}, 0x24008080) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000200)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}}, {{&(0x7f0000000280)=@abs={0x1, 0x30, 0x4e30}, 0x6e, 0x0}}], 0x2, 0x40008004) sendmsg$nl_route_sched(r3, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x180, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x16c, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0xfffffdd6}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xd4, 0x3, 0x0, 0x0, {{0x9}, {0xfffffe23, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x2, 0xea3, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0x1, 0x8, {0x2, 0x2}}}}]}]}, 0x180}}, 0x0) syz_emit_ethernet(0x12c, &(0x7f0000000240)={@local, @link_local, @void, {@ipv6={0x86dd, @udp={0xb, 0x6, "bcbf12", 0xf6, 0x11, 0x1, @dev={0xfe, 0x80, '\x00', 0x31}, @private2, {[@routing={0x11, 0x6, 0x2, 0x5, 0x0, [@dev={0xfe, 0x80, '\x00', 0x2b}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local]}, @hopopts={0x6c, 0x5, '\x00', [@pad1, @pad1, @generic={0x0, 0x1e, "cc34a9506027bf6df43a84cad1dd694be63da5da126be6bb552137a5cf0b"}, @pad1]}, @fragment={0x3c, 0x0, 0x12, 0x0, 0x0, 0x18, 0x68}], {0x4e23, 0x4e24, 0x7e, 0x0, @opaque="3f054c8f744d0afb94edb408b312200d8af8c4fbe7485ad1e7c4e879a442334d4dee70dfd4d7c903524e194e1f18297bacd433edec92b86bda3d31320d54b9eaaa5908b0251bb2fd5dbab47821ce8eb4d7ee4ba42c165e4e68a6273776287faec1066ff0c0f2dc3b64fe14850daefcc3851c3b071df8"}}}}}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r9, 0x541b, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000006c0), 0x2, 0x0) connect$l2tp(r9, &(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10) write$usbip_server(r9, &(0x7f0000000800)=@ret_submit={{0x3, 0x7, 0x0, 0x1, 0x131}, 0x9, 0x8b, 0x995, 0xed, 0x0, 0x0, "cd36b3ad4506d3bf7266f9f8d32d93bbce8580fd0910fb26a73af61f4d59b07171f70a16b305f18c34612ba01272a9e8bf6a802742574c255e245b9fdbd88e730d4aa9494b7cb01fe7880594c7a750caf694c0f6dea5b82f3a3e70efd40018e8c4c79c17a02693160fb7b9f23975cb6a10962c0087d1312982c1089a764f9641b1acaf8f5b9b058e9a6831", [{0x4, 0x6, 0x4, 0x2}, {0x254, 0x0, 0x1, 0xd3}, {0x925, 0x9f2, 0x2, 0x8}, {0xed5, 0x0, 0x5, 0xd7}, {0x1, 0x8001, 0x1}, {0xfffffff9, 0x4813, 0x4, 0x5}, {0x3ff, 0x5765, 0x8000, 0x5}, {0x89, 0x4, 0xf6d2, 0x34f}, {0x10001, 0x6a, 0x2a0, 0x93}, {0x5, 0x4, 0x9, 0xfffff001}, {0x3, 0x400, 0x800, 0x3}, {0x401, 0x7, 0x2, 0x101}, {0x8, 0x5, 0x40, 0x101}, {0x4, 0x4, 0x80, 0x3}, {0x4, 0x5, 0x0, 0x10}, {0x9, 0x7, 0xa70}, {0x9, 0xe000, 0xc3b9, 0x8}, {0xd72, 0x2, 0x0, 0x7}, {0x79e, 0x2e, 0x6, 0x1a0}, {0x400, 0xdd7, 0x5, 0x10000}, {0x100, 0x4, 0x80000001, 0x8a}, {0x7f, 0x6, 0x0, 0x417}, {0x7, 0x2d, 0x6, 0x101}, {0xed, 0x7, 0x101}, {0x8, 0x6cc, 0x10001, 0xfe}, {0x7, 0x6, 0x401}, {0xb, 0x4, 0xffff0000, 0x8}, {0x0, 0x0, 0x0, 0x1}, {0x5f1, 0x8, 0x9, 0x7}, {0x6, 0xfffffff8, 0x7, 0x7}, {0x847, 0x1, 0xffff, 0x5}, {0xd7, 0x0, 0x9, 0x4}, {0x81, 0x4423, 0x0, 0x5}, {0x80000000, 0x10000, 0x2, 0x8000}, {0x8, 0x1, 0xe9c, 0x5}, {0x30, 0x800, 0x9}, {0x6, 0x2, 0x8000, 0x2}, {0x7, 0x7, 0x8000, 0x9}, {0xa0, 0xff, 0x1, 0x4}, {0x4, 0xfffffffc, 0x1, 0x5}, {0x5, 0x5, 0xf78e, 0x100}, {0x3, 0xfffffd0c, 0x4, 0x800}, {0x5, 0x6, 0x893c, 0x2}, {0x9e, 0x2, 0x1}, {0x5, 0x8, 0xc, 0x4}, {0x3, 0x6, 0x7ff, 0x6}, {0x2, 0x4, 0x401, 0x8}, {0x3, 0x100020, 0xb6b1, 0xf}, {0x80000001, 0xfff, 0xffffffff, 0x5}, {0x3, 0x2, 0x7, 0x4}, {0x1, 0x1, 0x5, 0x401}, {0xa5ea, 0x80000000, 0x4f0, 0x5}, {0x800, 0x7, 0xfe8, 0x4}, {0x9, 0x1, 0x1ff, 0x9}, {0x6, 0x5, 0x800, 0x1}, {0x0, 0x1, 0x4, 0x4}, {0x5, 0x2, 0x8f, 0x7}, {0x7fff, 0x842c, 0xf, 0xc5}, {0x8, 0x3, 0x2}, {0x0, 0x7, 0xa5e4, 0x7ff}, {0x6, 0x4, 0x4, 0x69}, {0x6, 0x4, 0x1, 0x7}, {0xffff0000, 0x7, 0x1, 0x4}, {0x8d, 0x7, 0x1, 0x9}, {0x7, 0x5, 0x0, 0x4}, {0x9, 0x100, 0xfe86, 0x3}, {0x3, 0x2951, 0x3, 0x6}, {0x4, 0x6e5, 0xfffffffe, 0xacc}, {0x1, 0x97ac, 0x80000000, 0x800}, {0x7, 0x1, 0xd33e, 0xffffffc0}, {0x7434f6b1, 0x0, 0x270, 0x5}, {0xa, 0x7, 0x9, 0x1}, {0x6, 0x1, 0xd07, 0xed}, {0x3, 0xeb, 0x0, 0x1cc5}, {0x5, 0x9, 0x7, 0x7fff}, {0x1, 0x2, 0x6, 0x8}, {0x7fffffff, 0xc, 0xe, 0x2}, {0xffffff6c, 0x7fffffff, 0x4, 0x80000000}, {0x3, 0x7ff, 0xac2, 0x5}, {0x7, 0x8000, 0x80, 0x9}, {0xffffffff, 0x8, 0xfffffffb, 0x4}, {0x80000001, 0x21ebe247, 0x7, 0xebc}, {0x80000000, 0x80, 0x4, 0x2}, {0x3, 0x80000000, 0x9, 0x5}, {0x1ff, 0x3, 0x200, 0x80000001}, {0x9, 0x1db, 0x7, 0x6}, {0x5, 0x8b, 0x0, 0x8}, {0x7, 0x3, 0x5, 0x7}, {0x7f, 0x9, 0x6, 0xf}, {0x9, 0xc4, 0x3, 0x8}, {0x7f, 0xfff, 0x100, 0x10000}, {0x6, 0x2, 0x20d88f3d, 0x8}, {0x8, 0x6, 0x3, 0x2}, {0x100, 0x7e, 0x0, 0x3}, {0xffff, 0xfffffff9, 0x3}, {0x5, 0x1, 0x8, 0xbb}, {0x6, 0x1b, 0x0, 0x1000}, {0xfffffffa, 0x6, 0x0, 0x8}, {0x2, 0xcf, 0xb81, 0x8}, {0x20080, 0x5, 0x81, 0x5}, {0x9, 0x7, 0x9, 0x10000}, {0x1, 0xe7b, 0x8, 0x1000}, {0x401, 0x8, 0xe1, 0x2}, {0x9, 0x6e4, 0xff, 0x5}, {0x1ece7ace, 0xe, 0x9, 0x1}, {0x3, 0xd573, 0x7, 0x5}, {0xf, 0x8, 0x401, 0xc8cc}, {0x7fffffff, 0x400, 0xe55, 0xffffff86}, {0x1b37, 0x5, 0xb, 0xffff}, {0x3, 0x1, 0x5b, 0xfffffffd}, {0x5, 0x800, 0x1, 0x1}, {0x7fffffff, 0xe077231, 0x8, 0x10001}, {0x7, 0x8b9, 0x1, 0x7}, {0x1, 0x6, 0x7, 0x1000}, {0x1, 0x6, 0x800, 0x9}, {0x5, 0x23, 0x3, 0x2}, {0x6, 0x4, 0x3, 0x6}, {0x7fff, 0x6, 0xd, 0x7ff}, {0x5, 0xd, 0x7f, 0x7ff}, {0xc, 0x3ff, 0x10000, 0x2}, {0x96ed, 0x8, 0x80000000, 0x2ff2}, {0x76, 0x1ff, 0x6, 0x2}, {0x1000, 0x3, 0x52, 0x1}, {0x2, 0x0, 0xffff49d9}, {0x9f, 0x8, 0x4, 0x5}, {0x1, 0xb317, 0x4, 0x1}, {0xc, 0x3, 0x6, 0x1}, {0x3, 0x1ff, 0x7}, {0x6, 0xff5, 0x8, 0x10}, {0x0, 0x4, 0x2, 0x7}, {0x2, 0x2, 0x1, 0x6}, {0xa, 0x8, 0x2, 0x2}, {0x0, 0x33, 0x9, 0x9d6}, {0x5, 0x69e1, 0x9}, {0x1, 0x2, 0x6, 0x5}, {0x1, 0x1, 0x99da, 0x9}, {0x325, 0x210, 0x1, 0x9}, {0xfffffffd, 0xff3, 0x6, 0x1}, {0x7f, 0x1ff, 0x501, 0x1}, {0x100, 0x8, 0xffffffff}, {0x7e9, 0x7, 0x4, 0x1}, {0x4ab, 0x2, 0xfffffffc, 0x5}, {0x3ff, 0x3, 0x7, 0x3}, {0x0, 0x4, 0x6, 0x10001}, {0x5, 0x2, 0xdc, 0x4}, {0x1000, 0xf, 0x1, 0x3}, {0xff, 0x5, 0x8, 0xe}, {0x800, 0x7, 0xfffffdf5, 0x9}, {0x4, 0xac, 0x0, 0x8}, {0x1, 0x730, 0xfffffff0, 0x7}, {0x8d, 0x6, 0x200, 0x7}, {0x2, 0xe, 0x8, 0x7}, {0x0, 0x42, 0x9, 0x9}, {0x8, 0x101, 0xf, 0xa000}, {0x7c, 0x7fff, 0xdf, 0x8}, {0x2, 0x3775298, 0xff, 0x9}, {0x1, 0x10, 0x2, 0x1}, {0x1, 0x73c97436, 0x3ff, 0xb}, {0x5, 0x1, 0x1, 0xffffffff}, {0x96, 0x764, 0xef, 0x5}, {0x7fff, 0xd12, 0x10, 0x5}, {0x5, 0x8, 0xfffff4f8}, {0x7, 0xffc0, 0x8, 0x5}, {0x7, 0x4, 0x0, 0x8000}, {0x5, 0x8, 0xffffffff, 0xc4}, {0x4, 0xb2c3, 0x0, 0xffffffff}, {0x3, 0x7, 0x53a5, 0x3}, {0x3, 0x7, 0x636dd026, 0x9}, {0x200, 0x5, 0x401, 0x20}, {0x1071, 0xe, 0xf8b, 0x9}, {0x5, 0x17, 0x6, 0xeac00000}, {0x1, 0x2, 0x401, 0x80}, {0x4, 0x3, 0x8, 0xfffffe00}, {0x51, 0x2e9, 0x46f87a27, 0x2}, {0xe256, 0x6a86, 0x7, 0x6}, {0x6, 0x2, 0x10000, 0xfffffffd}, {0x7ff, 0x4, 0xa}, {0x16d, 0x9, 0x7f24, 0x1}, {0x8a4, 0x9, 0x1, 0x8}, {0x33e8, 0xfffffffc, 0x9, 0xc0}, {0xfffffffa, 0x1, 0x3, 0x73}, {0x6, 0x6, 0xfffffffe, 0x8819}, {0x3, 0x3ff, 0x7ff, 0x6}, {0x3ff, 0x7ff, 0xdd4, 0x5}, {0x1, 0x3ff, 0x25d0, 0x2}, {0x6, 0x0, 0x8, 0x800}, {0x4, 0x0, 0x7, 0x6}, {0x4, 0x1, 0x8, 0x8000}, {0xa1, 0x1, 0x6450}, {0x5, 0x81, 0x1, 0x7f}, {0x5a2, 0x8, 0x5, 0x40}, {0x4, 0x1, 0x101, 0x9}, {0x2, 0x4dd, 0x2, 0x5}, {0x8, 0x5, 0x38, 0x3}, {0x7, 0x9cd, 0x56, 0x6}, {0x5, 0x63, 0x2, 0xe1}, {0x0, 0x100, 0x7, 0x3}, {0x74, 0xfffffff8, 0xfff}, {0x5, 0x0, 0x8001, 0x8}, {0x9, 0x10000, 0x1, 0x3fffc0}, {0x80000001, 0xf, 0x3, 0x63}, {0x3000000, 0x7ff, 0x5, 0xa8}, {0x9, 0x1ff, 0x9, 0x991}, {0xd, 0xd67, 0x98cb, 0x6}, {0x5, 0x7, 0xdcf, 0x2}, {0xffff8dbc, 0x0, 0x10001, 0xa}, {0x0, 0x3, 0x8, 0x7}, {0x0, 0x1, 0x7, 0x10}, {0x2, 0x358, 0x401, 0x9}, {0x7, 0x0, 0x2, 0x8f3}, {0x8001, 0x1516a214, 0x5}, {0x9, 0xfffffff8, 0x2, 0x8}, {0x10000, 0xb, 0x7, 0x4}, {0x6, 0x101, 0x0, 0x10001}, {0x7, 0x8, 0x6, 0x8}, {0xffff, 0x9, 0xfffffffc, 0x4}, {0x9, 0x401, 0xc84, 0x9}, {0x5f92, 0x40, 0x9, 0x2}, {0x9, 0x3, 0x80000000, 0x4}, {0x5, 0x8, 0x43, 0x5}, {0x35, 0x7, 0x2, 0x55}, {0x3, 0x80000000, 0x8, 0x40}, {0x400, 0x2, 0xfff, 0x1}, {0x9, 0x0, 0x3b, 0x42}, {0x401, 0x733, 0x7, 0x4}, {0x5, 0x1ff, 0x6, 0x8}, {0x8, 0xeb08, 0x4, 0x2}, {0x0, 0x100, 0x0, 0x8}, {0x5980, 0x3000000, 0x2, 0x100}, {0x4, 0xffff37b0, 0x3, 0x7fff}, {0x80000000, 0x7, 0xa9, 0x1}, {0x7, 0x37330187, 0x2, 0x4}, {0xff, 0x40, 0x8, 0x8}, {0x80000000, 0x6d27, 0x3}, {0x6, 0xfc36, 0x3, 0x9}, {0x8, 0x0, 0x2, 0x1}, {0x918, 0x8, 0x0, 0x1}]}, 0xf8b) syz_fuse_handle_req(r6, &(0x7f0000004180)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x5, 0xb, 0xfffc, 0x34e0, 0x1, 0x0, 0xffffffff, 0x120, 0x2000, 0xa8, r7, r8, 0x6, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, 0xffffffffffffffff, r8) 1.77953381s ago: executing program 1 (id=990): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNAPSHOT_S2RAM(r0, 0x330b) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = socket(0x28, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180), 0x1, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r3, &(0x7f0000000400)=""/4096, 0xc00) lseek(r3, 0x8, 0x0) r4 = socket(0x28, 0x5, 0x0) listen(r4, 0x4) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x100000c) r5 = accept4$unix(r4, 0x0, 0x0, 0x800) recvfrom(r5, 0x0, 0x0, 0x40000000, 0x0, 0x0) dup3(0xffffffffffffffff, r1, 0x80000) 626.815041ms ago: executing program 1 (id=991): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNAPSHOT_S2RAM(r0, 0x330b) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = socket(0x28, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180), 0x1, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r3, &(0x7f0000000400)=""/4096, 0xc00) lseek(r3, 0x8, 0x0) r4 = socket(0x28, 0x5, 0x0) listen(r4, 0x4) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x100000c) r5 = accept4$unix(r4, 0x0, 0x0, 0x800) recvfrom(r5, 0x0, 0x0, 0x40000000, 0x0, 0x0) dup3(0xffffffffffffffff, r1, 0x80000) 115.252702ms ago: executing program 4 (id=992): syz_emit_vhci(0x0, 0x16) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x8}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x81}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x4c}}, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x800000, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_HASH_MAX={0x8, 0x1b, 0xd}]}}}]}, 0x3c}}, 0x0) unshare(0x6a040000) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) 86.270244ms ago: executing program 3 (id=993): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='cpu.weight\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x5, 0x12) openat$nvram(0xffffff9c, &(0x7f0000000080), 0x84340, 0x0) 0s ago: executing program 3 (id=994): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x15, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents64(r1, &(0x7f0000000100)=""/83, 0x53) getdents(r1, &(0x7f00000001c0)=""/81, 0x51) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x8000002) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000040)=0x8f, 0x4) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001, 0x4}, 0x8) connect$inet6(r2, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000011c0)="d3f04bb4604aed32226e529c8812223fc4797c733f8176720c3ad91b943b1ad6f8027b3cc582e5502433b313659a57fa991300b16a4529482443b67e8a41483837b5f9f422cb9d69b64f69b4bb9d3fdc2907e8201322498ed0448ce67f43a68a92938a420012241f6712e9dc52e38a6aed925779287435d8441c3f33760552e488dc42bcadd66a5e1643c45095a0aaae", 0x90}], 0x1}, 0x7101}], 0x1, 0x4001c00) prctl$PR_SCHED_CORE(0x3e, 0x80000000000001, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001f100)=""/102400, 0x19000) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100)='\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c40)={0x3c, r6, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "d2efbb95043e135a2ff5dac3de2233df"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="993fdb1539f3"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40044010}, 0x4000080) r8 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000240)={'\x00', 0xffff, 0x1, 0xaf25, 0x1000}) kernel console output (not intermixed with test programs): uid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7129 comm="syz.3.312" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff3fe8 code=0x7ffc0000 [ 137.923376][ T40] audit: type=1326 audit(1777796876.976:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7129 comm="syz.3.312" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff3fe8 code=0x7ffc0000 [ 137.932248][ T40] audit: type=1326 audit(1777796876.976:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7129 comm="syz.3.312" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff3fe8 code=0x7ffc0000 [ 137.941362][ T40] audit: type=1326 audit(1777796876.976:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7129 comm="syz.3.312" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff3fe8 code=0x7ffc0000 [ 137.948729][ T40] audit: type=1326 audit(1777796876.976:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7129 comm="syz.3.312" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff3fe8 code=0x7ffc0000 [ 137.958215][ T40] audit: type=1326 audit(1777796876.976:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7129 comm="syz.3.312" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff3fe8 code=0x7ffc0000 [ 138.216932][ T7133] netlink: 12 bytes leftover after parsing attributes in process `syz.0.313'. [ 138.403970][ T7147] overlayfs: overlapping lowerdir path [ 138.475560][ T7151] loop6: detected capacity change from 0 to 2640 [ 138.484139][ T7151] Buffer I/O error on dev loop6, logical block 0, async page read [ 138.488426][ T7151] Buffer I/O error on dev loop6, logical block 0, async page read [ 138.495401][ T7151] Buffer I/O error on dev loop6, logical block 0, async page read [ 138.499099][ T7151] Buffer I/O error on dev loop6, logical block 0, async page read [ 138.503235][ T7151] Buffer I/O error on dev loop6, logical block 0, async page read [ 138.506889][ T7151] Buffer I/O error on dev loop6, logical block 0, async page read [ 138.510882][ T7151] Buffer I/O error on dev loop6, logical block 0, async page read [ 138.514526][ T7151] Buffer I/O error on dev loop6, logical block 0, async page read [ 138.518085][ T7151] ldm_validate_partition_table(): Disk read failed. [ 138.521754][ T7151] Buffer I/O error on dev loop6, logical block 0, async page read [ 138.524807][ T7151] Buffer I/O error on dev loop6, logical block 0, async page read [ 138.528024][ T7151] Dev loop6: unable to read RDB block 0 [ 138.531104][ T7151] loop6: unable to read partition table [ 138.534513][ T7151] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 138.607916][ T5144] ldm_validate_partition_table(): Disk read failed. [ 138.612040][ T5144] Dev loop6: unable to read RDB block 0 [ 138.615241][ T5144] loop6: unable to read partition table [ 138.666235][ T7157] No such timeout policy "syz1" [ 138.732200][ T7159] netlink: 8 bytes leftover after parsing attributes in process `syz.1.321'. [ 139.835851][ T7172] netlink: 8 bytes leftover after parsing attributes in process `syz.1.323'. [ 139.849751][ T7172] netlink: 8 bytes leftover after parsing attributes in process `syz.1.323'. [ 139.883774][ T7172] Process accounting resumed [ 140.167422][ T7178] netlink: 28 bytes leftover after parsing attributes in process `syz.1.327'. [ 140.295921][ T7182] netlink: 20 bytes leftover after parsing attributes in process `syz.2.329'. [ 141.623767][ T7200] tipc: Started in network mode [ 141.625576][ T7200] tipc: Node identity 4a344ab7a664, cluster identity 4711 [ 141.636556][ T7200] tipc: Enabled bearer , priority 0 [ 141.650756][ T7200] syzkaller0: entered promiscuous mode [ 141.655019][ T7200] syzkaller0: entered allmulticast mode [ 141.673257][ T7200] tipc: Resetting bearer [ 141.740985][ T7198] tipc: Resetting bearer [ 141.757040][ T7198] tipc: Disabling bearer [ 142.137513][ T7211] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.336'. [ 142.409626][ T5824] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 142.569612][ T5824] usb 8-1: Using ep0 maxpacket: 32 [ 142.574199][ T5824] usb 8-1: config 0 has an invalid interface number: 119 but max is 0 [ 142.580078][ T5824] usb 8-1: config 0 has no interface number 0 [ 142.582162][ T5824] usb 8-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 142.591967][ T5824] usb 8-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 142.599701][ T5824] usb 8-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 5659, setting to 1024 [ 142.607787][ T5824] usb 8-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 142.614386][ T5824] usb 8-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 142.624651][ T5824] usb 8-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 142.628851][ T5824] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.633845][ T5824] usb 8-1: Product: syz [ 142.637505][ T5824] usb 8-1: Manufacturer: syz [ 142.640035][ T5824] usb 8-1: SerialNumber: syz [ 142.655558][ T5824] usb 8-1: config 0 descriptor?? [ 142.660517][ T7211] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 142.669005][ T5824] input: bcm5974 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.119/input/input12 [ 142.835354][ T7227] cgroup: subsys name conflicts with all [ 142.841368][ T7227] netlink: 4 bytes leftover after parsing attributes in process `syz.0.340'. [ 143.391991][ T10] usb 8-1: USB disconnect, device number 6 [ 143.573149][ T7236] warning: `syz.2.343' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 143.957476][ T7251] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 144.226384][ T7259] netlink: 12 bytes leftover after parsing attributes in process `syz.3.347'. [ 144.764149][ T7270] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 144.767080][ T7270] : renamed from bond_slave_1 (while UP) [ 145.018845][ T7283] No such timeout policy "syz1" [ 145.160312][ T7288] netlink: 8 bytes leftover after parsing attributes in process `syz.1.355'. [ 145.501064][ T7291] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.357'. [ 145.952613][ T7296] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 145.955160][ T7296] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 145.966503][ T7296] vhci_hcd vhci_hcd.0: Device attached [ 146.284330][ T7306] sd 0:0:0:0: PR command failed: 1026 [ 146.286276][ T7306] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 146.288634][ T7306] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 146.294120][ T7300] binder: 7299:7300 ioctl c0306201 80000480 returned -14 [ 146.299634][ T5824] usb 38-1: SetAddress Request (6) to port 0 [ 146.301963][ T5824] usb 38-1: new SuperSpeed USB device number 6 using vhci_hcd [ 146.574582][ T7297] vhci_hcd: connection reset by peer [ 146.578234][ T13] vhci_hcd vhci_hcd.0: stop threads [ 146.580785][ T13] vhci_hcd vhci_hcd.0: release socket [ 146.583850][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 146.834486][ T7319] syzkaller0: entered promiscuous mode [ 146.837042][ T7319] syzkaller0: entered allmulticast mode [ 146.841512][ T7319] TC_ACT_REPEAT abuse ? [ 147.072450][ T40] kauditd_printk_skb: 1236 callbacks suppressed [ 147.072461][ T40] audit: type=1326 audit(1777796886.226:1478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7320 comm="syz.1.365" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2fcc code=0x7ffc0000 [ 147.085374][ T40] audit: type=1326 audit(1777796886.226:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7320 comm="syz.1.365" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2fcc code=0x7ffc0000 [ 147.093433][ T40] audit: type=1326 audit(1777796886.236:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7320 comm="syz.1.365" exe="/syz-executor" sig=0 arch=40000003 syscall=348 compat=1 ip=0xf7fb2fcc code=0x7ffc0000 [ 147.101343][ T40] audit: type=1326 audit(1777796886.236:1481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7320 comm="syz.1.365" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2fcc code=0x7ffc0000 [ 147.109496][ T40] audit: type=1326 audit(1777796886.236:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7320 comm="syz.1.365" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2fcc code=0x7ffc0000 [ 147.126291][ T40] audit: type=1326 audit(1777796886.236:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7320 comm="syz.1.365" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7fb2fcc code=0x7ffc0000 [ 147.135928][ T40] audit: type=1326 audit(1777796886.236:1484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7320 comm="syz.1.365" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf71b616b code=0x7ffc0000 [ 147.145990][ T40] audit: type=1326 audit(1777796886.246:1485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7320 comm="syz.1.365" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf71b616b code=0x7ffc0000 [ 147.155477][ T40] audit: type=1326 audit(1777796886.246:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7320 comm="syz.1.365" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf71b616b code=0x7ffc0000 [ 147.165238][ T40] audit: type=1326 audit(1777796886.246:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7320 comm="syz.1.365" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf71b616b code=0x7ffc0000 [ 147.619652][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 147.770251][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 147.774240][ T10] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.778397][ T10] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.782452][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 147.784796][ T10] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 147.788011][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.800309][ T10] usb 5-1: config 0 descriptor?? [ 148.154367][ T7335] x_tables: duplicate underflow at hook 1 [ 148.939616][ T10] hid_parser_main: 33 callbacks suppressed [ 148.939630][ T10] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 148.944767][ T10] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 148.947199][ T10] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 148.949843][ T10] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 148.952443][ T10] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 148.956891][ T10] mcp2221 0003:04D8:00DD.0003: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 149.374493][ T7348] netlink: 12 bytes leftover after parsing attributes in process `syz.3.372'. [ 149.859264][ T7350] FAULT_INJECTION: forcing a failure. [ 149.859264][ T7350] name failslab, interval 1, probability 0, space 0, times 0 [ 149.865812][ T7350] CPU: 3 UID: 0 PID: 7350 Comm: syz.0.373 Not tainted syzkaller #0 PREEMPT(full) [ 149.865834][ T7350] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 149.865843][ T7350] Call Trace: [ 149.865849][ T7350] [ 149.865856][ T7350] dump_stack_lvl+0x100/0x190 [ 149.865901][ T7350] should_fail_ex.cold+0x5/0xa [ 149.865923][ T7350] ? tomoyo_encode2+0xfb/0x3c0 [ 149.865941][ T7350] should_failslab+0xc2/0x120 [ 149.865960][ T7350] __kmalloc_noprof+0xe0/0x850 [ 149.865991][ T7350] tomoyo_encode2+0xfb/0x3c0 [ 149.866014][ T7350] tomoyo_encode+0x29/0x50 [ 149.866031][ T7350] tomoyo_mount_acl+0x14c/0x8b0 [ 149.866048][ T7350] ? is_bpf_text_address+0x8a/0x1a0 [ 149.866070][ T7350] ? is_bpf_text_address+0x8a/0x1a0 [ 149.866093][ T7350] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 149.866118][ T7350] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 149.866135][ T7350] ? kernel_text_address+0x8d/0x100 [ 149.866151][ T7350] ? __lock_acquire+0x4a5/0x2630 [ 149.866167][ T7350] ? unwind_get_return_address+0x59/0xa0 [ 149.866188][ T7350] ? arch_stack_walk+0xa6/0xf0 [ 149.866236][ T7350] ? tomoyo_domain+0xb2/0x150 [ 149.866257][ T7350] ? tomoyo_profile+0x47/0x60 [ 149.866282][ T7350] tomoyo_mount_permission+0x214/0x460 [ 149.866299][ T7350] ? tomoyo_mount_permission+0x1f6/0x460 [ 149.866319][ T7350] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 149.866352][ T7350] security_sb_mount+0xdd/0x270 [ 149.866379][ T7350] path_mount+0x158/0x23d0 [ 149.866406][ T7350] ? __pfx_path_mount+0x10/0x10 [ 149.866427][ T7350] ? lockdep_hardirqs_on+0x78/0x100 [ 149.866451][ T7350] ? putname+0xb1/0x110 [ 149.866470][ T7350] ? kmem_cache_free+0x127/0x6c0 [ 149.866501][ T7350] ? __ia32_sys_mount+0x292/0x310 [ 149.866522][ T7350] __ia32_sys_mount+0x292/0x310 [ 149.866545][ T7350] ? __pfx___ia32_sys_mount+0x10/0x10 [ 149.866566][ T7350] ? ksys_write+0x1ac/0x250 [ 149.866586][ T7350] ? rcu_is_watching+0x12/0xc0 [ 149.866609][ T7350] __do_fast_syscall_32+0xe7/0x950 [ 149.866630][ T7350] ? lockdep_hardirqs_on+0x78/0x100 [ 149.866653][ T7350] do_fast_syscall_32+0x32/0x70 [ 149.866675][ T7350] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 149.866711][ T7350] RIP: 0023:0xf70befcc [ 149.866725][ T7350] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 149.866740][ T7350] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 149.866755][ T7350] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000800020c0 [ 149.866765][ T7350] RDX: 0000000080002100 RSI: 0000000000000000 RDI: 0000000080002140 [ 149.866774][ T7350] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 149.866783][ T7350] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 149.866793][ T7350] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 149.866816][ T7350] [ 149.995727][ T10] usb 5-1: USB disconnect, device number 3 [ 150.869984][ T7374] netlink: 8 bytes leftover after parsing attributes in process `syz.3.379'. [ 151.010164][ T7378] kAFS: unable to lookup cell '' [ 151.369816][ T5824] usb 38-1: device descriptor read/8, error -110 [ 151.396188][ T7390] netlink: 12 bytes leftover after parsing attributes in process `syz.0.384'. [ 151.573535][ T7399] netlink: 8 bytes leftover after parsing attributes in process `syz.1.388'. [ 151.648358][ T7402] evm: overlay not supported [ 151.769509][ T7403] netlink: 12 bytes leftover after parsing attributes in process `syz.0.387'. [ 151.940738][ T5824] usb usb38-port1: attempt power cycle [ 152.566977][ T5824] usb usb38-port1: unable to enumerate USB device [ 153.256465][ T7430] netlink: 'syz.1.398': attribute type 1 has an invalid length. [ 155.005364][ T7477] netlink: 12 bytes leftover after parsing attributes in process `syz.2.411'. [ 155.933202][ T7490] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 158.563464][ T7510] [U] V3Fپ"S/4:XTZWTLW= [ 158.566245][ T7510] [U] J"E:" [ 158.938331][ T7517] netlink: 28 bytes leftover after parsing attributes in process `syz.3.422'. [ 159.359929][ T1338] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 159.499782][ T1338] usb 8-1: device descriptor read/64, error -71 [ 159.690560][ T7532] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input13 [ 159.749698][ T1338] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 159.793487][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 159.793497][ T40] audit: type=1326 audit(1777796898.946:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7535 comm="syz.0.427" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70befcc code=0x0 [ 159.919730][ T1338] usb 8-1: device descriptor read/64, error -71 [ 159.958847][ T7532] can0: slcan on ttyS3. [ 160.039814][ T1338] usb usb8-port1: attempt power cycle [ 160.051745][ T7538] can0 (unregistered): slcan off ttyS3. [ 160.389749][ T1338] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 160.411372][ T1338] usb 8-1: device descriptor read/8, error -71 [ 160.659642][ T1338] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 160.680669][ T1338] usb 8-1: device descriptor read/8, error -71 [ 160.799919][ T1338] usb usb8-port1: unable to enumerate USB device [ 160.843327][ T7556] wg2 speed is unknown, defaulting to 1000 [ 161.147256][ T7564] kAFS: unable to lookup cell '' [ 161.497040][ T7570] overlay: Unknown parameter '/' [ 161.988060][ T7572] overlayfs: overlapping lowerdir path [ 162.096274][ T7576] ieee802154 phy0 wpan0: encryption failed: -90 [ 162.538331][ T40] audit: type=1326 audit(1777796901.686:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7597 comm="syz.2.440" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf704efcc code=0x0 [ 162.592494][ T7600] genirq: Flags mismatch irq 8. 00200001 (pcmmio) vs. 00200001 (rtc0) [ 163.004426][ T7607] wg2 speed is unknown, defaulting to 1000 [ 163.523042][ T7622] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 163.525344][ T7622] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 163.528217][ T7622] vhci_hcd vhci_hcd.0: Device attached [ 163.681553][ T7629] netlink: 4 bytes leftover after parsing attributes in process `syz.2.447'. [ 163.705279][ T7629] netlink: 72 bytes leftover after parsing attributes in process `syz.2.447'. [ 163.799642][ T5879] usb 44-1: SetAddress Request (2) to port 0 [ 163.801971][ T5879] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 165.758263][ T7623] vhci_hcd: connection reset by peer [ 165.771881][ T7061] vhci_hcd vhci_hcd.3: stop threads [ 165.950238][ T7061] vhci_hcd vhci_hcd.3: release socket [ 165.952239][ T7061] vhci_hcd vhci_hcd.3: disconnect device [ 166.410921][ T7645] bond1 (unregistering): Released all slaves [ 166.424473][ T7647] netlink: 28 bytes leftover after parsing attributes in process `syz.1.452'. [ 166.622545][ T7651] FAULT_INJECTION: forcing a failure. [ 166.622545][ T7651] name failslab, interval 1, probability 0, space 0, times 0 [ 166.630559][ T7651] CPU: 0 UID: 0 PID: 7651 Comm: syz.3.453 Not tainted syzkaller #0 PREEMPT(full) [ 166.630586][ T7651] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 166.630593][ T7651] Call Trace: [ 166.630598][ T7651] [ 166.630602][ T7651] dump_stack_lvl+0x100/0x190 [ 166.630618][ T7651] should_fail_ex.cold+0x5/0xa [ 166.630632][ T7651] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 166.630651][ T7651] should_failslab+0xc2/0x120 [ 166.630664][ T7651] __kmalloc_noprof+0xe0/0x850 [ 166.630680][ T7651] ? lockdep_hardirqs_on+0x78/0x100 [ 166.630698][ T7651] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 166.630719][ T7651] genl_family_rcv_msg_doit+0xc7/0x300 [ 166.630737][ T7651] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 166.630753][ T7651] ? genl_get_cmd+0x3e7/0x760 [ 166.630771][ T7651] ? bpf_lsm_capable+0x9/0x10 [ 166.630784][ T7651] ? security_capable+0x80/0x260 [ 166.630800][ T7651] ? ns_capable+0xd2/0xf0 [ 166.630815][ T7651] genl_rcv_msg+0x560/0x800 [ 166.630833][ T7651] ? __pfx_genl_rcv_msg+0x10/0x10 [ 166.630849][ T7651] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 166.630865][ T7651] ? __pfx_nl80211_register_beacons+0x10/0x10 [ 166.630881][ T7651] ? __pfx_nl80211_post_doit+0x10/0x10 [ 166.630902][ T7651] netlink_rcv_skb+0x159/0x420 [ 166.630916][ T7651] ? __pfx_genl_rcv_msg+0x10/0x10 [ 166.630933][ T7651] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 166.630953][ T7651] ? netlink_deliver_tap+0x1ae/0xcc0 [ 166.630969][ T7651] genl_rcv+0x28/0x40 [ 166.630983][ T7651] netlink_unicast+0x585/0x850 [ 166.631015][ T7651] ? __pfx_netlink_unicast+0x10/0x10 [ 166.631034][ T7651] netlink_sendmsg+0x8b0/0xda0 [ 166.631050][ T7651] ? __pfx_netlink_sendmsg+0x10/0x10 [ 166.631067][ T7651] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 166.631085][ T7651] ____sys_sendmsg+0x9e1/0xb70 [ 166.631100][ T7651] ? __pfx_netlink_sendmsg+0x10/0x10 [ 166.631115][ T7651] ? __pfx_____sys_sendmsg+0x10/0x10 [ 166.631136][ T7651] ___sys_sendmsg+0x190/0x1e0 [ 166.631152][ T7651] ? __pfx____sys_sendmsg+0x10/0x10 [ 166.631173][ T7651] ? find_held_lock+0x2b/0x80 [ 166.631196][ T7651] __sys_sendmsg+0x170/0x220 [ 166.631208][ T7651] ? __pfx___sys_sendmsg+0x10/0x10 [ 166.631218][ T7651] ? __pfx___seccomp_filter+0x10/0x10 [ 166.631235][ T7651] ? ksys_write+0x1ac/0x250 [ 166.631251][ T7651] __do_fast_syscall_32+0xe7/0x950 [ 166.631266][ T7651] ? lockdep_hardirqs_on+0x78/0x100 [ 166.631281][ T7651] do_fast_syscall_32+0x32/0x70 [ 166.631296][ T7651] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 166.631310][ T7651] RIP: 0023:0xf7ff3fcc [ 166.631318][ T7651] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 166.631328][ T7651] RSP: 002b:00000000f54b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 166.631339][ T7651] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000080003900 [ 166.631346][ T7651] RDX: 0000000000000810 RSI: 0000000000000000 RDI: 0000000000000000 [ 166.631352][ T7651] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 166.631358][ T7651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 166.631364][ T7651] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 166.631377][ T7651] [ 166.981981][ T40] audit: type=1326 audit(1777796906.136:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7655 comm="syz.2.455" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf704efcc code=0x0 [ 167.114710][ T7654] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.454'. [ 167.392250][ T5824] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 167.559643][ T5824] usb 6-1: Using ep0 maxpacket: 32 [ 167.568571][ T5824] usb 6-1: config 0 has an invalid interface number: 119 but max is 0 [ 167.572111][ T5824] usb 6-1: config 0 has no interface number 0 [ 167.575472][ T5824] usb 6-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 167.582799][ T5824] usb 6-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 167.590678][ T5824] usb 6-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 5659, setting to 1024 [ 167.599299][ T5824] usb 6-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 167.605182][ T5824] usb 6-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 167.618961][ T5824] usb 6-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 167.629740][ T5824] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.632466][ T5824] usb 6-1: Product: syz [ 167.634109][ T5824] usb 6-1: Manufacturer: syz [ 167.635949][ T5824] usb 6-1: SerialNumber: syz [ 167.661263][ T5824] usb 6-1: config 0 descriptor?? [ 167.667498][ T7654] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 167.723397][ T5824] input: bcm5974 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.119/input/input14 [ 167.846104][ T7665] gfs2: Unknown parameter 'disrж/Ard' [ 167.877179][ T5823] usb 6-1: USB disconnect, device number 5 [ 169.062005][ T5879] usb 44-1: device descriptor read/8, error -110 [ 169.226078][ T7683] wg2 speed is unknown, defaulting to 1000 [ 169.288314][ T7678] jfs: Unknown parameter 'disrArd' [ 169.911256][ T5823] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 169.912698][ T7692] ip6erspan0: entered allmulticast mode [ 169.926990][ T5879] usb usb44-port1: attempt power cycle [ 170.067674][ T5823] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 170.076922][ T5823] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 170.082180][ T5823] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 170.086746][ T5823] usb 8-1: config 0 interface 0 has no altsetting 0 [ 170.090704][ T5823] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 170.093737][ T5823] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 170.097267][ T5823] usb 8-1: config 0 interface 0 has no altsetting 0 [ 170.103645][ T5823] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 170.112501][ T5823] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 170.117820][ T5823] usb 8-1: config 0 interface 0 has no altsetting 0 [ 170.121237][ T5823] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 170.124545][ T5823] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 170.128114][ T5823] usb 8-1: config 0 interface 0 has no altsetting 0 [ 170.133552][ T5823] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 170.136882][ T5823] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 170.141421][ T5823] usb 8-1: config 0 interface 0 has no altsetting 0 [ 170.144335][ T5823] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 170.147403][ T5823] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 170.151065][ T5823] usb 8-1: config 0 interface 0 has no altsetting 0 [ 170.153980][ T5823] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 170.157022][ T5823] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 170.160781][ T5823] usb 8-1: config 0 interface 0 has no altsetting 0 [ 170.163730][ T5823] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 170.166710][ T5823] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 170.171856][ T5823] usb 8-1: config 0 interface 0 has no altsetting 0 [ 170.175787][ T5823] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 170.179219][ T5823] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 170.182089][ T5823] usb 8-1: Product: syz [ 170.183476][ T5823] usb 8-1: Manufacturer: syz [ 170.185047][ T5823] usb 8-1: SerialNumber: syz [ 170.187743][ T5823] usb 8-1: config 0 descriptor?? [ 170.196020][ T5823] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 170.504772][ T5823] usb 8-1: USB disconnect, device number 11 [ 170.509439][ T5823] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 170.542807][ T5879] usb usb44-port1: unable to enumerate USB device [ 170.760001][ T7697] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.466'. [ 170.822057][ T7700] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 170.824139][ T7700] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 170.827373][ T7700] vhci_hcd vhci_hcd.0: Device attached [ 170.999748][ T58] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 171.099645][ T5879] usb 38-1: SetAddress Request (10) to port 0 [ 171.103939][ T5879] usb 38-1: new SuperSpeed USB device number 10 using vhci_hcd [ 171.149707][ T58] usb 6-1: Using ep0 maxpacket: 32 [ 171.159466][ T58] usb 6-1: config 0 has an invalid interface number: 119 but max is 0 [ 171.169662][ T58] usb 6-1: config 0 has no interface number 0 [ 171.172342][ T58] usb 6-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 171.187295][ T58] usb 6-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 171.192474][ T58] usb 6-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 5659, setting to 1024 [ 171.196300][ T58] usb 6-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 171.199832][ T58] usb 6-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 171.211545][ T58] usb 6-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 171.214701][ T58] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.217331][ T58] usb 6-1: Product: syz [ 171.218809][ T58] usb 6-1: Manufacturer: syz [ 171.220492][ T58] usb 6-1: SerialNumber: syz [ 171.225076][ T58] usb 6-1: config 0 descriptor?? [ 171.229570][ T7697] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 171.236341][ T58] input: bcm5974 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.119/input/input15 [ 171.438388][ T5823] usb 6-1: USB disconnect, device number 6 [ 171.467055][ T7701] vhci_hcd: connection reset by peer [ 171.469691][ T12] vhci_hcd vhci_hcd.0: stop threads [ 171.471591][ T12] vhci_hcd vhci_hcd.0: release socket [ 171.473783][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 171.972819][ T7710] kvm: emulating exchange as write [ 172.272258][ T7725] wg2 speed is unknown, defaulting to 1000 [ 172.377254][ T7724] could not allocate digest TFM handle md5 [ 172.791915][ T7742] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.480'. [ 172.809857][ T7743] netlink: 'syz.0.478': attribute type 4 has an invalid length. [ 173.040497][ T5823] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 173.189892][ T5823] usb 8-1: Using ep0 maxpacket: 32 [ 173.197838][ T5823] usb 8-1: config 0 has an invalid interface number: 119 but max is 0 [ 173.201932][ T5823] usb 8-1: config 0 has no interface number 0 [ 173.205930][ T5823] usb 8-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 173.210842][ T5823] usb 8-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 173.216060][ T5823] usb 8-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 5659, setting to 1024 [ 173.221070][ T5823] usb 8-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 173.225899][ T5823] usb 8-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 173.233455][ T5823] usb 8-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 173.237791][ T5823] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.241471][ T5823] usb 8-1: Product: syz [ 173.243500][ T5823] usb 8-1: Manufacturer: syz [ 173.245644][ T5823] usb 8-1: SerialNumber: syz [ 173.252290][ T5823] usb 8-1: config 0 descriptor?? [ 173.255524][ T7742] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 173.263766][ T5823] input: bcm5974 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.119/input/input16 [ 173.293159][ T7755] kAFS: unable to lookup cell '' [ 173.438276][ T7757] netlink: 4 bytes leftover after parsing attributes in process `syz.1.485'. [ 173.463673][ C3] bcm5974 8-1:0.119: trackpad urb failed: -1 [ 173.467593][ T5880] usb 8-1: USB disconnect, device number 12 [ 173.759478][ T7762] wg2 speed is unknown, defaulting to 1000 [ 174.339929][ T7770] wg2 speed is unknown, defaulting to 1000 [ 174.398083][ T7759] FAULT_INJECTION: forcing a failure. [ 174.398083][ T7759] name failslab, interval 1, probability 0, space 0, times 0 [ 174.409328][ T7759] CPU: 1 UID: 0 PID: 7759 Comm: syz.0.486 Not tainted syzkaller #0 PREEMPT(full) [ 174.409353][ T7759] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 174.409377][ T7759] Call Trace: [ 174.409383][ T7759] [ 174.409390][ T7759] dump_stack_lvl+0x100/0x190 [ 174.409414][ T7759] should_fail_ex.cold+0x5/0xa [ 174.409436][ T7759] should_failslab+0xc2/0x120 [ 174.409457][ T7759] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 174.409483][ T7759] ? taskstats_exit+0x67b/0xc10 [ 174.409526][ T7759] ? lockdep_hardirqs_on+0x78/0x100 [ 174.409556][ T7759] taskstats_exit+0x67b/0xc10 [ 174.409581][ T7759] ? __pfx_taskstats_exit+0x10/0x10 [ 174.409606][ T7759] ? do_exit+0x3c0/0x2a60 [ 174.409635][ T7759] do_exit+0x65c/0x2a60 [ 174.409662][ T7759] ? __pfx_do_exit+0x10/0x10 [ 174.409693][ T7759] ? do_raw_spin_lock+0x128/0x260 [ 174.409713][ T7759] ? find_held_lock+0x2b/0x80 [ 174.409734][ T7759] ? get_signal+0x7e0/0x21e0 [ 174.409758][ T7759] do_group_exit+0xd5/0x2a0 [ 174.409786][ T7759] get_signal+0x1ec7/0x21e0 [ 174.409806][ T7759] ? finish_task_switch.isra.0+0x2cb/0x1010 [ 174.409829][ T7759] ? lockdep_hardirqs_on+0x78/0x100 [ 174.409853][ T7759] ? rcu_is_watching+0x12/0xc0 [ 174.409874][ T7759] ? trace_sched_exit_tp+0x11c/0x160 [ 174.409901][ T7759] ? __pfx_get_signal+0x10/0x10 [ 174.409921][ T7759] ? __pfx_set_compat_user_sigmask+0x10/0x10 [ 174.409947][ T7759] arch_do_signal_or_restart+0x91/0x770 [ 174.409973][ T7759] ? do_compat_pselect+0x1cf/0x2b0 [ 174.409993][ T7759] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 174.410032][ T7759] exit_to_user_mode_loop+0x86/0x4a0 [ 174.410049][ T7759] ? __do_fast_syscall_32+0x373/0x950 [ 174.410074][ T7759] __do_fast_syscall_32+0x608/0x950 [ 174.410096][ T7759] ? lockdep_hardirqs_on+0x78/0x100 [ 174.410119][ T7759] do_fast_syscall_32+0x32/0x70 [ 174.410142][ T7759] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 174.410164][ T7759] RIP: 0023:0xf70befcc [ 174.410178][ T7759] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 174.410195][ T7759] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000134 [ 174.410212][ T7759] RAX: fffffffffffffdfe RBX: 0000000000000040 RCX: 0000000080000000 [ 174.410222][ T7759] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 174.410232][ T7759] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 174.410256][ T7759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 174.410267][ T7759] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 174.410290][ T7759] [ 175.976412][ T7801] overlayfs: overlapping lowerdir path [ 176.181245][ T5879] usb 38-1: device descriptor read/8, error -110 [ 176.408897][ T7817] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0 [ 176.581332][ T5879] usb usb38-port1: attempt power cycle [ 177.180134][ T5879] usb usb38-port1: unable to enumerate USB device [ 177.855911][ T7839] netlink: 12 bytes leftover after parsing attributes in process `syz.3.506'. [ 178.392166][ T7842] netlink: 12 bytes leftover after parsing attributes in process `syz.1.507'. [ 178.729236][ T7848] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 179.249210][ T7856] netlink: 'syz.1.511': attribute type 1 has an invalid length. [ 179.272783][ T7856] 8021q: adding VLAN 0 to HW filter on device bond1 [ 179.289000][ T7856] program syz.1.511 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 179.300927][ T7856] fuse: Bad value for 'user_id' [ 179.302676][ T7856] fuse: Bad value for 'user_id' [ 179.406905][ T7860] FAULT_INJECTION: forcing a failure. [ 179.406905][ T7860] name failslab, interval 1, probability 0, space 0, times 0 [ 179.411921][ T7860] CPU: 0 UID: 0 PID: 7860 Comm: syz.2.513 Not tainted syzkaller #0 PREEMPT(full) [ 179.411936][ T7860] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 179.411943][ T7860] Call Trace: [ 179.411966][ T7860] [ 179.411972][ T7860] dump_stack_lvl+0x100/0x190 [ 179.411994][ T7860] should_fail_ex.cold+0x5/0xa [ 179.412009][ T7860] should_failslab+0xc2/0x120 [ 179.412028][ T7860] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 179.412052][ T7860] ? do_getname+0x35/0x390 [ 179.412074][ T7860] ? strncpy_from_user+0x19d/0x2d0 [ 179.412113][ T7860] do_getname+0x35/0x390 [ 179.412142][ T7860] __ia32_sys_rename+0x65/0xb0 [ 179.412166][ T7860] __do_fast_syscall_32+0xe7/0x950 [ 179.412203][ T7860] do_fast_syscall_32+0x32/0x70 [ 179.412227][ T7860] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 179.412247][ T7860] RIP: 0023:0xf704efcc [ 179.412261][ T7860] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 179.412278][ T7860] RSP: 002b:00000000f543d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000026 [ 179.412293][ T7860] RAX: ffffffffffffffda RBX: 0000000080000100 RCX: 00000000800000c0 [ 179.412303][ T7860] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 179.412312][ T7860] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 179.412321][ T7860] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 179.412331][ T7860] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 179.412353][ T7860] [ 179.787034][ T7872] No such timeout policy "syz1" [ 180.489808][ T5739] Bluetooth: hci0: command 0x0c1a tx timeout [ 180.496105][ T5739] Bluetooth: hci2: command 0x0406 tx timeout [ 180.908637][ T7885] netlink: 20 bytes leftover after parsing attributes in process `syz.2.518'. [ 180.963383][ T7884] wg2 speed is unknown, defaulting to 1000 [ 181.810064][ T7888] wg2 speed is unknown, defaulting to 1000 [ 182.564737][ T7899] kAFS: unable to lookup cell '' [ 184.386731][ T7927] netlink: 12 bytes leftover after parsing attributes in process `syz.2.528'. [ 184.469033][ T40] audit: type=1326 audit(1777796923.616:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7928 comm="syz.3.530" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7ff3fcc code=0x0 [ 184.533286][ T7932] Unsupported ieee802154 address type: 0 [ 185.324756][ T7950] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1477628369 (23642053904 ns) > initial count (5524191008 ns). Using initial count to start timer. [ 186.348236][ T7969] veth0_vlan: entered allmulticast mode [ 186.355187][ T7969] netlink: 4 bytes leftover after parsing attributes in process `syz.2.541'. [ 186.405026][ T7969] veth0_vlan (unregistering): left allmulticast mode [ 187.606857][ T8006] wg2 speed is unknown, defaulting to 1000 [ 188.046770][ T8010] overlayfs: missing 'lowerdir' [ 189.235398][ T8043] netlink: 'syz.0.561': attribute type 1 has an invalid length. [ 189.238721][ T8043] netlink: 224 bytes leftover after parsing attributes in process `syz.0.561'. [ 189.989690][ T840] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 190.121171][ T840] usb 5-1: device descriptor read/64, error -71 [ 190.331109][ T8062] netlink: 'syz.2.567': attribute type 1 has an invalid length. [ 190.334448][ T8062] netlink: 4 bytes leftover after parsing attributes in process `syz.2.567'. [ 190.343167][ T8062] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 190.360504][ T840] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 190.506169][ T840] usb 5-1: device descriptor read/64, error -71 [ 191.055077][ T840] usb usb5-port1: attempt power cycle [ 191.219200][ T8053] rdma_rxe: rxe_newlink: failed to add wg2 [ 191.464422][ T8079] No such timeout policy "syz1" [ 191.560589][ T8084] netlink: 8 bytes leftover after parsing attributes in process `syz.3.571'. [ 191.608279][ T840] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 191.630419][ T840] usb 5-1: device descriptor read/8, error -71 [ 191.939705][ T840] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 191.942812][ T8083] syzkaller1: entered promiscuous mode [ 191.949793][ T8083] syzkaller1: entered allmulticast mode [ 191.970051][ T840] usb 5-1: device descriptor read/8, error -71 [ 192.091462][ T840] usb usb5-port1: unable to enumerate USB device [ 192.767657][ T8110] No such timeout policy "syz1" [ 192.834274][ T8112] netlink: 8 bytes leftover after parsing attributes in process `syz.2.580'. [ 193.711823][ T8111] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 196.254034][ T8148] netlink: 8 bytes leftover after parsing attributes in process `syz.2.591'. [ 196.257452][ T8148] netlink: 12 bytes leftover after parsing attributes in process `syz.2.591'. [ 196.909677][ T8162] kAFS: unable to lookup cell '' [ 197.240922][ T8175] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.597'. [ 197.367748][ T8182] mmap: syz.0.595 (8182) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 197.489667][ T5880] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 197.659622][ T5880] usb 6-1: Using ep0 maxpacket: 32 [ 197.664969][ T5880] usb 6-1: config 0 has an invalid interface number: 119 but max is 0 [ 197.667708][ T5880] usb 6-1: config 0 has no interface number 0 [ 197.671243][ T5880] usb 6-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 197.675644][ T5880] usb 6-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 197.680287][ T5880] usb 6-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 27 [ 197.684401][ T5880] usb 6-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 197.691740][ T5880] usb 6-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 197.694966][ T5880] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.698077][ T5880] usb 6-1: Product: syz [ 197.699494][ T5880] usb 6-1: Manufacturer: syz [ 197.701682][ T5880] usb 6-1: SerialNumber: syz [ 197.705263][ T5880] usb 6-1: config 0 descriptor?? [ 197.707905][ T8175] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 197.714869][ T5880] input: bcm5974 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.119/input/input17 [ 197.756404][ T8184] No such timeout policy "syz1" [ 197.796048][ C0] bcm5974 6-1:0.119: trackpad urb failed: -1 [ 197.818309][ T8185] netlink: 8 bytes leftover after parsing attributes in process `syz.2.598'. [ 197.984719][ T5880] usb 6-1: USB disconnect, device number 7 [ 198.424455][ T8189] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 198.490455][ T8189] netlink: 'syz.3.600': attribute type 1 has an invalid length. [ 198.682132][ T8194] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 198.684607][ T8194] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 198.688856][ T8194] vhci_hcd vhci_hcd.0: Device attached [ 198.691621][ T8195] vhci_hcd: connection closed [ 198.692717][ T7063] vhci_hcd vhci_hcd.3: stop threads [ 198.696693][ T7063] vhci_hcd vhci_hcd.3: release socket [ 198.698615][ T7063] vhci_hcd vhci_hcd.3: disconnect device [ 198.891753][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.072713][ T8209] kAFS: unable to lookup cell '' [ 199.911072][ T8222] overlay: Unknown parameter '/' [ 200.981025][ T8243] ntfs3(nbd1): try to read out of volume at offset 0x0 [ 201.242839][ T5880] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 201.489651][ T8243] /dev/sr0: Can't open blockdev [ 201.880888][ T5880] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 201.883801][ T5880] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 201.889171][ T5880] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 201.894698][ T5880] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 201.900679][ T5880] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 201.906052][ T5880] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 201.911995][ T5880] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 201.917085][ T5880] usb 8-1: Product: syz [ 201.918619][ T5880] usb 8-1: Manufacturer: syz [ 201.954557][ T5880] cdc_wdm 8-1:1.0: skipping garbage [ 201.956336][ T5880] cdc_wdm 8-1:1.0: skipping garbage [ 201.980802][ T5880] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 201.983619][ T5880] cdc_wdm 8-1:1.0: Unknown control protocol [ 202.397194][ C0] cdc_wdm 8-1:1.0: Unexpected error -71 [ 202.400237][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 202.402614][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 202.404854][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 202.407151][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 202.409856][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 202.412342][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 202.415077][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 202.417299][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 202.419624][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 202.421892][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 202.424093][ T5880] usb 8-1: USB disconnect, device number 13 [ 202.424156][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 202.424177][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 202.424186][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 202.754393][ T8271] kAFS: unable to lookup cell '' [ 202.821953][ T8272] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.626'. [ 202.883975][ T8274] tipc: Enabling of bearer rejected, failed to enable media [ 202.917237][ T40] audit: type=1326 audit(1777796942.066:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8269 comm="syz.0.626" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befcc code=0x7ffc0000 [ 202.949166][ T40] audit: type=1326 audit(1777796942.076:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8269 comm="syz.0.626" exe="/syz-executor" sig=0 arch=40000003 syscall=430 compat=1 ip=0xf70befcc code=0x7ffc0000 [ 202.993986][ T40] audit: type=1326 audit(1777796942.076:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8269 comm="syz.0.626" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befcc code=0x7ffc0000 [ 203.030157][ T40] audit: type=1326 audit(1777796942.076:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8269 comm="syz.0.626" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befcc code=0x7ffc0000 [ 203.620911][ T8288] wg2 speed is unknown, defaulting to 1000 [ 203.767533][ T8293] No such timeout policy "syz1" [ 203.831224][ T8294] netlink: 8 bytes leftover after parsing attributes in process `syz.3.634'. [ 204.168453][ T8297] No such timeout policy "syz1" [ 204.234802][ T8298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.635'. [ 204.266228][ T8298] 9pnet_virtio: no channels available for device syz [ 205.196083][ T8309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.639'. [ 205.351811][ T8313] kAFS: unable to lookup cell '' [ 205.484975][ T40] audit: type=1326 audit(1777796944.636:1501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8316 comm="syz.0.641" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70befcc code=0x0 [ 205.847469][ T8326] tmpfs: Bad value for 'mpol' [ 205.852528][ T8326] netlink: 83 bytes leftover after parsing attributes in process `syz.3.643'. [ 206.009958][ T5837] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 206.126497][ T8339] netlink: 12 bytes leftover after parsing attributes in process `syz.3.646'. [ 206.211824][ T5837] usb 6-1: Using ep0 maxpacket: 32 [ 206.518701][ T5837] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 206.525485][ T5837] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 206.530327][ T5837] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 206.534811][ T5837] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 206.542404][ T5837] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 206.549924][ T5837] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.553230][ T5837] usb 6-1: Product: syz [ 206.555002][ T5837] usb 6-1: Manufacturer: syz [ 206.556964][ T5837] usb 6-1: SerialNumber: syz [ 206.581933][ C0] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 206.604616][ T5837] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/input/input18 [ 206.691622][ T8346] No such timeout policy "syz1" [ 206.749763][ T8347] bridge0: port 3(erspan0) entered blocking state [ 206.755530][ T8347] bridge0: port 3(erspan0) entered disabled state [ 206.760072][ T8348] netlink: 8 bytes leftover after parsing attributes in process `syz.0.648'. [ 206.775227][ T8347] erspan0: entered allmulticast mode [ 206.800489][ T5837] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 206.810616][ T5837] (id 0x00) [ 206.917215][ T8347] erspan0: entered promiscuous mode [ 206.919649][ T5837] rc_core: IR keymap rc-imon-pad not found [ 206.922127][ T5837] Registered IR keymap rc-empty [ 206.924125][ T5837] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 206.936894][ T5837] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 206.942217][ T8347] bridge0: port 3(erspan0) entered blocking state [ 206.947319][ T8347] bridge0: port 3(erspan0) entered forwarding state [ 206.989073][ T8351] erspan0: left allmulticast mode [ 207.003066][ T5837] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0 [ 207.011606][ T5837] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0/input19 [ 207.028624][ T5837] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:8> initialized [ 207.030801][ T8351] erspan0: left promiscuous mode [ 207.038057][ T8351] bridge0: port 3(erspan0) entered disabled state [ 207.180442][ T5824] usb 6-1: USB disconnect, device number 8 [ 207.433776][ T8355] netlink: 4 bytes leftover after parsing attributes in process `syz.1.644'. [ 207.522696][ T8357] 9pnet_virtio: no channels available for device syz [ 207.762853][ T8364] netlink: 12 bytes leftover after parsing attributes in process `syz.2.652'. [ 208.152881][ T8370] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 208.657375][ T8384] QAT: Invalid ioctl 21531 [ 208.779642][ T40] audit: type=1326 audit(1777796947.926:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8388 comm="syz.2.657" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf704efcc code=0x0 [ 209.416710][ T8373] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 209.420857][ T8373] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 209.424423][ T8373] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 209.434385][ T8373] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 209.438022][ T8373] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 209.444436][ T8373] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 209.642885][ T8403] No such timeout policy "syz1" [ 209.705431][ T8406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.661'. qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x18e000) [ 211.438646][ T8427] netlink: 28 bytes leftover after parsing attributes in process `syz.1.666'. [ 211.449700][ T5095] Bluetooth: hci2: command 0x0406 tx timeout [ 211.459759][ T5095] Bluetooth: hci3: command 0x0c1a tx timeout [ 211.844443][ T8434] sysfs: cannot create duplicate filename '/class/ieee80211/1^!l1*$pOcɔr$G' [ 211.848696][ T8434] CPU: 2 UID: 0 PID: 8434 Comm: syz.3.668 Tainted: G L syzkaller #0 PREEMPT(full) [ 211.848728][ T8434] Tainted: [L]=SOFTLOCKUP [ 211.848732][ T8434] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 211.848739][ T8434] Call Trace: [ 211.848744][ T8434] [ 211.848749][ T8434] dump_stack_lvl+0x100/0x190 [ 211.848765][ T8434] sysfs_warn_dup.cold+0x1c/0x28 [ 211.848783][ T8434] sysfs_do_create_link_sd+0x113/0x140 [ 211.848797][ T8434] sysfs_create_link+0x61/0xc0 [ 211.848809][ T8434] device_add+0x675/0x1950 [ 211.848825][ T8434] ? __pfx_device_add+0x10/0x10 [ 211.848838][ T8434] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 211.848857][ T8434] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 211.848878][ T8434] wiphy_register+0x1edd/0x2d90 [ 211.848890][ T8434] ? __rtnl_unlock+0xb9/0xf0 [ 211.848908][ T8434] ? __pfx_wiphy_register+0x10/0x10 [ 211.848921][ T8434] ? __asan_memset+0x23/0x50 [ 211.848937][ T8434] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 211.848983][ T8434] ieee80211_register_hw+0x3055/0x4570 [ 211.849013][ T8434] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 211.849034][ T8434] ? __pfx___debug_object_init+0x10/0x10 [ 211.849054][ T8434] ? find_held_lock+0x2b/0x80 [ 211.849069][ T8434] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 211.849086][ T8434] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 211.849102][ T8434] ? __hrtimer_setup+0x208/0x330 [ 211.849116][ T8434] mac80211_hwsim_new_radio+0x2a01/0x5aa0 [ 211.849138][ T8434] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 211.849151][ T8434] ? __asan_memcpy+0x3c/0x60 [ 211.849169][ T8434] hwsim_new_radio_nl+0xc5f/0x1370 [ 211.849180][ T8434] ? rcu_is_watching+0x12/0xc0 [ 211.849194][ T8434] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 211.849210][ T8434] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 211.849227][ T8434] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 211.849247][ T8434] genl_family_rcv_msg_doit+0x214/0x300 [ 211.849265][ T8434] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 211.849288][ T8434] ? bpf_lsm_capable+0x9/0x10 [ 211.849301][ T8434] ? security_capable+0x80/0x260 [ 211.849317][ T8434] ? ns_capable+0xd2/0xf0 [ 211.849332][ T8434] genl_rcv_msg+0x560/0x800 [ 211.849350][ T8434] ? __pfx_genl_rcv_msg+0x10/0x10 [ 211.849366][ T8434] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 211.849383][ T8434] netlink_rcv_skb+0x159/0x420 [ 211.849397][ T8434] ? __pfx_genl_rcv_msg+0x10/0x10 [ 211.849414][ T8434] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 211.849434][ T8434] ? rcu_is_watching+0x12/0xc0 [ 211.849450][ T8434] genl_rcv+0x28/0x40 [ 211.849464][ T8434] netlink_unicast+0x585/0x850 [ 211.849481][ T8434] ? __pfx_netlink_unicast+0x10/0x10 [ 211.849499][ T8434] netlink_sendmsg+0x8b0/0xda0 [ 211.849516][ T8434] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.849533][ T8434] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 211.849567][ T8434] ____sys_sendmsg+0x9e1/0xb70 [ 211.849582][ T8434] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.849598][ T8434] ? __pfx_____sys_sendmsg+0x10/0x10 [ 211.849611][ T8434] ? __pfx___futex_wait+0x10/0x10 [ 211.849630][ T8434] ? __pfx_futex_wake_mark+0x10/0x10 [ 211.849647][ T8434] ___sys_sendmsg+0x190/0x1e0 [ 211.849664][ T8434] ? __pfx____sys_sendmsg+0x10/0x10 [ 211.849688][ T8434] ? find_held_lock+0x2b/0x80 [ 211.849711][ T8434] __sys_sendmsg+0x170/0x220 [ 211.849723][ T8434] ? __pfx___sys_sendmsg+0x10/0x10 [ 211.849741][ T8434] ? rcu_is_watching+0x12/0xc0 [ 211.849756][ T8434] __do_fast_syscall_32+0xe7/0x950 [ 211.849773][ T8434] do_fast_syscall_32+0x32/0x70 [ 211.849788][ T8434] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 211.849802][ T8434] RIP: 0023:0xf7ff3fcc [ 211.849812][ T8434] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 211.849823][ T8434] RSP: 002b:00000000f547450c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 211.849834][ T8434] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000100 [ 211.849841][ T8434] RDX: 0000000004000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 211.849847][ T8434] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 211.849853][ T8434] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 211.849859][ T8434] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 211.849873][ T8434] [ 212.165825][ T8444] wg2 speed is unknown, defaulting to 1000 [ 212.808182][ T8454] netlink: 24 bytes leftover after parsing attributes in process `syz.0.674'. [ 212.953740][ T8460] No such timeout policy "syz1" [ 213.145643][ T8464] netlink: 20 bytes leftover after parsing attributes in process `syz.0.676'. [ 213.216663][ T8464] wg2 speed is unknown, defaulting to 1000 [ 213.318677][ T8463] netlink: 8 bytes leftover after parsing attributes in process `syz.1.675'. [ 213.611291][ T5743] Bluetooth: hci3: command 0x0c1a tx timeout [ 213.614952][ T5743] Bluetooth: hci2: command 0x0406 tx timeout [ 214.755762][ T1126] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 214.782477][ T1126] ata1: failed to read log page 10h (errno=-5) [ 214.794505][ T1126] ata1.00: NCQ disabled due to excessive errors [ 214.801483][ T1126] ata1.00: exception Emask 0x1 SAct 0x18000000 SErr 0x0 action 0x0 [ 214.814976][ T1126] ata1.00: irq_stat 0x41000000 [ 214.823989][ T1126] ata1.00: failed command: READ FPDMA QUEUED [ 214.835331][ T1126] ata1.00: cmd 60/70:d8:d6:26:08/0c:00:00:00:00/40 tag 27 ncq dma 1630208 in [ 214.835331][ T1126] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 214.857982][ T1126] ata1.00: status: { DRDY } [ 214.864778][ T1126] ata1.00: error: { ABRT } [ 214.870228][ T1126] ata1.00: failed command: WRITE FPDMA QUEUED [ 214.881432][ T1126] ata1.00: cmd 61/38:e0:7e:0a:10/00:00:00:00:00/40 tag 28 ncq dma 28672 out [ 214.881432][ T1126] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 214.901601][ T1126] ata1.00: status: { DRDY } [ 214.905828][ T1126] ata1.00: error: { ABRT } [ 214.915766][ T1126] ata1.00: configured for UDMA/100 [ 214.923409][ T1126] sd 0:0:0:0: [sda] tag#27 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=3s [ 214.933645][ T1126] sd 0:0:0:0: [sda] tag#27 Sense Key : Aborted Command [current] [ 214.941312][ T1126] sd 0:0:0:0: [sda] tag#27 Add. Sense: No additional sense information [ 214.951200][ T1126] sd 0:0:0:0: [sda] tag#27 CDB: Read(10) 28 00 00 08 26 d6 00 0c 70 00 [ 214.964971][ T1126] I/O error, dev sda, sector 534230 op 0x0:(READ) flags 0x80700 phys_seg 26 prio class 2 [ 214.983127][ T1126] ata1: EH complete [ 215.038585][ T161] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.195604][ T8474] FAULT_INJECTION: forcing a failure. [ 215.195604][ T8474] name failslab, interval 1, probability 0, space 0, times 0 [ 215.202490][ T8474] CPU: 0 UID: 0 PID: 8474 Comm: syz.3.683 Tainted: G L syzkaller #0 PREEMPT(full) [ 215.202509][ T8474] Tainted: [L]=SOFTLOCKUP [ 215.202513][ T8474] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 215.202519][ T8474] Call Trace: [ 215.202523][ T8474] [ 215.202527][ T8474] dump_stack_lvl+0x100/0x190 [ 215.202556][ T8474] should_fail_ex.cold+0x5/0xa [ 215.202571][ T8474] should_failslab+0xc2/0x120 [ 215.202585][ T8474] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 215.202603][ T8474] ? __alloc_skb+0x140/0x710 [ 215.202613][ T8474] ? __alloc_skb+0x5b7/0x710 [ 215.202625][ T8474] __alloc_skb+0x140/0x710 [ 215.202634][ T8474] ? __alloc_skb+0x5b7/0x710 [ 215.202644][ T8474] ? __pfx___alloc_skb+0x10/0x10 [ 215.202658][ T8474] netlink_alloc_large_skb+0x69/0x150 [ 215.202675][ T8474] netlink_sendmsg+0x680/0xda0 [ 215.202692][ T8474] ? __pfx_netlink_sendmsg+0x10/0x10 [ 215.202708][ T8474] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 215.202727][ T8474] ____sys_sendmsg+0x9e1/0xb70 [ 215.202742][ T8474] ? __pfx_netlink_sendmsg+0x10/0x10 [ 215.202757][ T8474] ? __pfx_____sys_sendmsg+0x10/0x10 [ 215.202778][ T8474] ___sys_sendmsg+0x190/0x1e0 [ 215.202794][ T8474] ? __pfx____sys_sendmsg+0x10/0x10 [ 215.202815][ T8474] ? find_held_lock+0x2b/0x80 [ 215.202838][ T8474] __sys_sendmsg+0x170/0x220 [ 215.202850][ T8474] ? __pfx___sys_sendmsg+0x10/0x10 [ 215.202861][ T8474] ? __fget_files+0x21f/0x3d0 [ 215.202877][ T8474] ? ksys_write+0x1ac/0x250 [ 215.202891][ T8474] ? rcu_is_watching+0x12/0xc0 [ 215.202906][ T8474] __do_fast_syscall_32+0xe7/0x950 [ 215.202922][ T8474] ? lockdep_hardirqs_on+0x78/0x100 [ 215.202937][ T8474] do_fast_syscall_32+0x32/0x70 [ 215.202952][ T8474] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 215.202966][ T8474] RIP: 0023:0xf7ff3fcc [ 215.202976][ T8474] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 215.202987][ T8474] RSP: 002b:00000000f54b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 215.202998][ T8474] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000200 [ 215.203005][ T8474] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 215.203011][ T8474] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 215.203017][ T8474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 215.203024][ T8474] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 215.203037][ T8474] [ 215.320236][ T5095] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 215.329805][ T5095] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 215.332496][ T161] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.337032][ T5095] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 215.341401][ T5095] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 215.344248][ T5095] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 215.445783][ T161] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.518436][ T8490] dlm: Unknown command passed to DLM device : 3 [ 215.518436][ T8490] [ 215.538385][ T161] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.589276][ T8493] random: crng reseeded on system resumption [ 215.660816][ T8493] batman_adv: batadv0: Adding interface: macsec1 [ 215.662804][ T8493] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.672691][ T8493] batman_adv: batadv0: Interface activated: macsec1 [ 215.700785][ T5739] Bluetooth: hci3: command 0x0c1a tx timeout [ 215.705267][ T8493] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.709142][ T8493] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.724050][ T8493] bridge0: entered promiscuous mode [ 215.746762][ T8475] wg2 speed is unknown, defaulting to 1000 [ 215.918039][ T161] bridge_slave_1: left allmulticast mode [ 215.920784][ T161] bridge_slave_1: left promiscuous mode [ 215.939769][ T161] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.946449][ T161] bridge_slave_0: left allmulticast mode [ 215.948572][ T161] bridge_slave_0: left promiscuous mode [ 215.952738][ T161] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.416980][ T161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.429230][ T161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.433953][ T161] bond0 (unregistering): Released all slaves [ 216.561582][ T8500] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.686'. [ 216.819375][ T5446] 8021q: adding VLAN 0 to HW filter on device eth2 [ 216.820089][ T5837] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 216.912697][ T8475] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.912740][ T8475] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.912804][ T8475] bridge_slave_0: entered allmulticast mode [ 216.913524][ T8475] bridge_slave_0: entered promiscuous mode [ 216.914802][ T8475] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.914868][ T8475] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.914928][ T8475] bridge_slave_1: entered allmulticast mode [ 216.915617][ T8475] bridge_slave_1: entered promiscuous mode [ 216.932199][ T8475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.942803][ T8475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.975045][ T8475] team0: Port device team_slave_0 added [ 216.979013][ T8475] team0: Port device team_slave_1 added [ 216.989655][ T5837] usb 8-1: Using ep0 maxpacket: 32 [ 216.992272][ T5837] usb 8-1: config 0 has an invalid interface number: 119 but max is 0 [ 216.992286][ T5837] usb 8-1: config 0 has no interface number 0 [ 216.992304][ T5837] usb 8-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 216.992445][ T5837] usb 8-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 216.992460][ T5837] usb 8-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 27 [ 216.992473][ T5837] usb 8-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 216.997395][ T5837] usb 8-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 217.013745][ T8475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.025589][ T5837] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.025611][ T5837] usb 8-1: Product: syz [ 217.025623][ T5837] usb 8-1: Manufacturer: syz [ 217.025635][ T5837] usb 8-1: SerialNumber: syz [ 217.031176][ T8475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.031202][ T8475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.034240][ T8475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.054014][ T8475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.054033][ T8475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.076395][ T5837] usb 8-1: config 0 descriptor?? [ 217.078565][ T8500] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 217.095296][ T5837] input: bcm5974 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.119/input/input20 [ 217.124341][ T8475] hsr_slave_0: entered promiscuous mode [ 217.125421][ T8475] hsr_slave_1: entered promiscuous mode [ 217.125803][ T8475] debugfs: 'hsr0' already exists in 'hsr' [ 217.125815][ T8475] Cannot create hsr debugfs directory [ 217.138569][ T161] hsr_slave_0: left promiscuous mode [ 217.139097][ T161] hsr_slave_1: left promiscuous mode [ 217.140431][ T161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.140449][ T161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.142734][ T161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.142746][ T161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.155089][ T161] veth1_macvtap: left promiscuous mode [ 217.235672][ T161] pim6reg (unregistering): left allmulticast mode [ 217.285913][ T5837] usb 8-1: USB disconnect, device number 14 [ 217.296540][ T161] team0 (unregistering): Port device team_slave_1 removed [ 217.317088][ T161] team0 (unregistering): Port device team_slave_0 removed [ 217.335757][ T40] audit: type=1326 audit(1777796956.486:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8529 comm="syz.1.689" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb2fcc code=0x0 [ 217.369689][ T5739] Bluetooth: hci0: command tx timeout [ 217.407372][ T5446] 8021q: adding VLAN 0 to HW filter on device eth3 [ 217.560448][ T8475] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 217.565873][ T8475] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 217.568811][ T8475] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 217.574569][ T8475] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 217.577590][ T8475] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 217.595369][ T8475] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 217.598881][ T8475] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 217.616826][ T8475] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 217.665666][ T5446] 8021q: adding VLAN 0 to HW filter on device eth4 [ 217.671399][ T8475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.686125][ T8475] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.702358][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.705047][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.719954][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.723130][ T1157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.769886][ T5739] Bluetooth: hci3: command 0x0c1a tx timeout [ 217.840514][ T8563] kAFS: unable to lookup cell '' [ 217.907343][ T40] audit: type=1800 audit(1777796957.056:1504): pid=8567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.693" name="SYSV00000000" dev="tmpfs" ino=5 res=0 errno=0 [ 217.963659][ T5446] 8021q: adding VLAN 0 to HW filter on device eth5 [ 218.097081][ T8475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.227174][ T8475] veth0_vlan: entered promiscuous mode [ 218.232216][ T8475] veth1_vlan: entered promiscuous mode [ 218.246993][ T8475] veth0_macvtap: entered promiscuous mode [ 218.251230][ T8475] veth1_macvtap: entered promiscuous mode [ 218.269421][ T8475] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.280968][ T8475] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.287599][ T1157] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.291141][ T1157] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.295273][ T1157] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.298986][ T1157] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.372381][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.377476][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.396836][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.402001][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.450355][ T5739] Bluetooth: hci0: command tx timeout [ 219.481185][ T8599] netlink: 'syz.3.696': attribute type 5 has an invalid length. [ 219.537459][ T8600] netlink: 'syz.3.696': attribute type 5 has an invalid length. [ 219.993676][ T8602] kAFS: unable to lookup cell '' [ 220.166696][ T8609] FAULT_INJECTION: forcing a failure. [ 220.166696][ T8609] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 220.172577][ T8609] CPU: 3 UID: 0 PID: 8609 Comm: syz.1.698 Tainted: G L syzkaller #0 PREEMPT(full) [ 220.172605][ T8609] Tainted: [L]=SOFTLOCKUP [ 220.172611][ T8609] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 220.172621][ T8609] Call Trace: [ 220.172627][ T8609] [ 220.172633][ T8609] dump_stack_lvl+0x100/0x190 [ 220.172657][ T8609] should_fail_ex.cold+0x5/0xa [ 220.172681][ T8609] _copy_from_user+0x2e/0xd0 [ 220.172710][ T8609] do_sys_poll+0x345/0xe90 [ 220.172730][ T8609] ? find_held_lock+0x2b/0x80 [ 220.172753][ T8609] ? is_bpf_text_address+0x8a/0x1a0 [ 220.172776][ T8609] ? is_bpf_text_address+0x8a/0x1a0 [ 220.172803][ T8609] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 220.172831][ T8609] ? __pfx_do_sys_poll+0x10/0x10 [ 220.172874][ T8609] ? __kernel_text_address+0xd/0x30 [ 220.172892][ T8609] ? unwind_get_return_address+0x59/0xa0 [ 220.172983][ T8609] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 220.173008][ T8609] ? set_compat_user_sigmask+0x1d9/0x260 [ 220.173030][ T8609] ? __pfx_set_compat_user_sigmask+0x10/0x10 [ 220.173050][ T8609] ? __fget_files+0x215/0x3d0 [ 220.173069][ T8609] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 220.173099][ T8609] __ia32_compat_sys_ppoll_time32+0x2b6/0x350 [ 220.173127][ T8609] ? __pfx___ia32_compat_sys_ppoll_time32+0x10/0x10 [ 220.173156][ T8609] ? fput+0x79/0x100 [ 220.173180][ T8609] ? ksys_write+0x1ac/0x250 [ 220.173201][ T8609] ? rcu_is_watching+0x12/0xc0 [ 220.173226][ T8609] __do_fast_syscall_32+0xe7/0x950 [ 220.173249][ T8609] ? lockdep_hardirqs_on+0x78/0x100 [ 220.173274][ T8609] do_fast_syscall_32+0x32/0x70 [ 220.173297][ T8609] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 220.173319][ T8609] RIP: 0023:0xf7fb2fcc [ 220.173334][ T8609] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 220.173350][ T8609] RSP: 002b:00000000f545550c EFLAGS: 00000292 ORIG_RAX: 0000000000000135 [ 220.173367][ T8609] RAX: ffffffffffffffda RBX: 00000000800000c0 RCX: 00000000000000dc [ 220.173378][ T8609] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 220.173388][ T8609] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 220.173398][ T8609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 220.173408][ T8609] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 220.173430][ T8609] [ 220.515308][ T40] audit: type=1326 audit(1777796959.666:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8618 comm="syz.4.702" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f04fcc code=0x0 [ 220.662004][ T8622] 8021q: adding VLAN 0 to HW filter on device bond1 [ 220.726628][ T8622] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached [ 221.338607][ T8625] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 221.523146][ T8628] bridge_slave_0: left allmulticast mode [ 221.525718][ T8628] bridge_slave_0: left promiscuous mode [ 221.528559][ T8628] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.533976][ T5739] Bluetooth: hci0: command tx timeout [ 221.601155][ T8628] bridge_slave_1: left allmulticast mode [ 221.606306][ T8628] bridge_slave_1: left promiscuous mode [ 221.614211][ T8628] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.746467][ T8628] bond0: (slave bond_slave_0): Releasing backup interface [ 222.840562][ T8628] bond0: (slave ): Releasing backup interface [ 223.287068][ T8628] team0: Port device team_slave_0 removed [ 223.298468][ T8652] netlink: 12 bytes leftover after parsing attributes in process `syz.4.706'. [ 223.331904][ T8628] team0: Port device team_slave_1 removed [ 223.336275][ T8628] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.338776][ T8628] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.358532][ T8628] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.362350][ T8628] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.387947][ T8628] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 223.613475][ T5739] Bluetooth: hci0: command tx timeout [ 223.721327][ T8661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.709'. [ 224.105681][ T8668] No such timeout policy "syz1" [ 224.118305][ T8668] netlink: 8 bytes leftover after parsing attributes in process `syz.1.711'. [ 224.368948][ T8672] netlink: 'syz.4.712': attribute type 11 has an invalid length. [ 224.609764][ T5823] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 224.759842][ T5823] usb 9-1: Using ep0 maxpacket: 32 [ 224.762899][ T5823] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 224.765838][ T5823] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 224.768691][ T5823] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 224.772408][ T5823] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 224.775567][ T5823] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 224.778972][ T5823] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 224.783300][ T5823] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 224.786281][ T5823] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.790660][ T5823] usb 9-1: config 0 descriptor?? [ 225.012333][ T5823] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 225.022695][ T5823] usb 9-1: USB disconnect, device number 2 [ 225.031328][ T5823] usblp0: removed [ 225.480274][ T10] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 225.760329][ T10] usb 9-1: Using ep0 maxpacket: 32 [ 225.785707][ T10] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 225.798862][ T10] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 225.805572][ T10] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 225.809994][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 225.814132][ T10] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 225.818709][ T10] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 225.825482][ T10] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 225.830712][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.868724][ T10] usb 9-1: config 0 descriptor?? [ 226.381437][ T10] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 226.714943][ T8672] netlink: 24 bytes leftover after parsing attributes in process `syz.4.712'. [ 226.733182][ T10] usb 9-1: USB disconnect, device number 3 [ 226.743196][ T10] usblp0: removed [ 226.867936][ T8693] kAFS: unable to lookup cell '' [ 227.601073][ T8703] netlink: 12 bytes leftover after parsing attributes in process `syz.4.720'. [ 227.755919][ T8703] veth3: entered allmulticast mode [ 228.189044][ T8716] No such timeout policy "syz1" [ 228.191060][ T8718] overlayfs: failed to resolve './bus': -2 [ 228.195550][ T8716] netlink: 8 bytes leftover after parsing attributes in process `syz.0.722'. [ 228.238400][ T8721] wg2 speed is unknown, defaulting to 1000 [ 228.614108][ T8733] kAFS: unable to lookup cell '' [ 228.762736][ T8738] 9pnet_virtio: no channels available for device syz [ 229.299927][ T8748] netlink: 8 bytes leftover after parsing attributes in process `syz.0.727'. [ 229.345914][ T7061] Bluetooth: hci4: Frame reassembly failed (-84) [ 229.850018][ T8769] wg2 speed is unknown, defaulting to 1000 [ 230.995860][ T8782] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 231.145431][ T8782] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 231.149432][ T8782] overlayfs: failed to look up (tracing) for ino (-66) [ 231.369691][ T5095] Bluetooth: hci4: command 0x1003 tx timeout [ 231.379665][ T5739] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 231.524997][ T8793] trusted_key: encrypted_key: insufficient parameters specified [ 231.937599][ T8802] wg2 speed is unknown, defaulting to 1000 [ 232.255233][ T8806] netlink: 4 bytes leftover after parsing attributes in process `syz.4.739'. [ 232.261366][ T8806] netlink: 4 bytes leftover after parsing attributes in process `syz.4.739'. [ 232.571687][ T8814] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 232.884349][ T8814] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.887150][ T8814] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.935397][ T8823] kAFS: unable to lookup cell '' [ 233.132031][ T8814] bridge_slave_0: left allmulticast mode [ 233.135083][ T8814] bridge_slave_0: left promiscuous mode [ 233.143208][ T8814] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.171030][ T8814] bridge_slave_1: left allmulticast mode [ 233.175239][ T8814] bridge_slave_1: left promiscuous mode [ 233.180680][ T8814] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.206575][ T8814] bond0: (slave bond_slave_0): Releasing backup interface [ 233.246608][ T8814] bond0: (slave bond_slave_1): Releasing backup interface [ 234.271394][ T8814] team0: Port device team_slave_0 removed [ 234.375424][ T8814] team0: Port device team_slave_1 removed [ 234.382424][ T8814] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.165822][ T8814] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.186724][ T8814] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.210278][ T8814] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.238408][ T8814] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 235.972124][ T8846] netlink: 12 bytes leftover after parsing attributes in process `syz.4.750'. [ 236.337522][ T40] audit: type=1326 audit(1777796975.486:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8847 comm="syz.3.752" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7ff3fcc code=0x0 [ 236.434149][ T8851] netlink: 12 bytes leftover after parsing attributes in process `syz.0.751'. [ 236.902541][ T8856] netlink: 12 bytes leftover after parsing attributes in process `syz.0.753'. [ 236.931897][ T8860] batadv_slave_1: entered promiscuous mode [ 237.737774][ T8859] batadv_slave_1: left promiscuous mode [ 237.756938][ T8874] 9p: Bad value for 'rfdno' [ 237.889743][ T8879] block nbd0: server does not support multiple connections per device. [ 237.896148][ T8879] block nbd0: shutting down sockets [ 238.853754][ T40] audit: type=1800 audit(1777796978.006:1507): pid=8896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.767" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 238.987390][ T8900] kvm: kvm [8895]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0xeb7 [ 239.360250][ T5816] usb 8-1: new full-speed USB device number 15 using dummy_hcd [ 239.566669][ T5816] usb 8-1: config 0 has no interfaces? [ 239.569342][ T5816] usb 8-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 239.574368][ T5816] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.579724][ T5816] usb 8-1: config 0 descriptor?? [ 240.655373][ T8910] netlink: 12 bytes leftover after parsing attributes in process `syz.0.771'. [ 240.706595][ T8914] wg2 speed is unknown, defaulting to 1000 [ 240.760921][ T8916] comedi comedi3: pcmmio: I/O base address not correctly aligned [ 241.967549][ T5805] usb 8-1: USB disconnect, device number 15 [ 242.934978][ T8957] netlink: 12 bytes leftover after parsing attributes in process `syz.1.782'. [ 243.036990][ T8960] overlayfs: failed lookup in lower (newroot/24, name='bus', err=-40): overlapping layers [ 243.209295][ T8963] netlink: 'syz.1.785': attribute type 3 has an invalid length. [ 243.232461][ T8963] netlink: 60 bytes leftover after parsing attributes in process `syz.1.785'. [ 243.613852][ T8969] netlink: 12 bytes leftover after parsing attributes in process `syz.0.786'. [ 243.741829][ T40] audit: type=1326 audit(1777796982.896:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8970 comm="syz.1.789" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb2fcc code=0x0 [ 243.874895][ T8977] FAULT_INJECTION: forcing a failure. [ 243.874895][ T8977] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.877409][ T8978] netlink: 52 bytes leftover after parsing attributes in process `syz.1.789'. [ 243.898321][ T8977] CPU: 3 UID: 0 PID: 8977 Comm: syz.3.790 Tainted: G L syzkaller #0 PREEMPT(full) [ 243.898350][ T8977] Tainted: [L]=SOFTLOCKUP [ 243.898356][ T8977] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 243.898367][ T8977] Call Trace: [ 243.898373][ T8977] [ 243.898380][ T8977] dump_stack_lvl+0x100/0x190 [ 243.898405][ T8977] should_fail_ex.cold+0x5/0xa [ 243.898428][ T8977] _copy_from_user+0x2e/0xd0 [ 243.898459][ T8977] get_compat_msghdr+0xb3/0x4b0 [ 243.898482][ T8977] ? __pfx_get_compat_msghdr+0x10/0x10 [ 243.898504][ T8977] ? rcu_is_watching+0x12/0xc0 [ 243.898525][ T8977] ? ___sys_recvmsg+0x177/0x1a0 [ 243.898553][ T8977] ? kfree+0x1dd/0x6c0 [ 243.898582][ T8977] ___sys_recvmsg+0x193/0x1a0 [ 243.898607][ T8977] ? __pfx____sys_recvmsg+0x10/0x10 [ 243.898645][ T8977] ? __pfx___might_resched+0x10/0x10 [ 243.898671][ T8977] do_recvmmsg+0x563/0x760 [ 243.898699][ T8977] ? __pfx_do_recvmmsg+0x10/0x10 [ 243.898727][ T8977] ? ksys_write+0x190/0x250 [ 243.898746][ T8977] ? ksys_write+0x190/0x250 [ 243.898773][ T8977] ? __fget_files+0x215/0x3d0 [ 243.898794][ T8977] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 243.898825][ T8977] __sys_recvmmsg+0x21f/0x270 [ 243.898846][ T8977] ? __pfx___sys_recvmmsg+0x10/0x10 [ 243.898867][ T8977] ? ksys_write+0x1ac/0x250 [ 243.898889][ T8977] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 243.898912][ T8977] ? __do_fast_syscall_32+0x98/0x950 [ 243.898936][ T8977] ? lockdep_hardirqs_on+0x78/0x100 [ 243.898957][ T8977] __do_fast_syscall_32+0xe7/0x950 [ 243.898980][ T8977] ? lockdep_hardirqs_on+0x78/0x100 [ 243.899004][ T8977] do_fast_syscall_32+0x32/0x70 [ 243.899028][ T8977] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 243.899050][ T8977] RIP: 0023:0xf7ff3fcc [ 243.899065][ T8977] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 243.899081][ T8977] RSP: 002b:00000000f54b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000151 [ 243.899097][ T8977] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080003b80 [ 243.899107][ T8977] RDX: 0000000000000002 RSI: 0000000000002020 RDI: 0000000000000000 [ 243.899119][ T8977] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 243.899128][ T8977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 243.899137][ T8977] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 243.899161][ T8977] [ 244.059725][ T8984] mac80211_hwsim hwsim7 .: renamed from wlan1 (while UP) [ 244.213276][ T8994] netlink: 12 bytes leftover after parsing attributes in process `syz.3.793'. [ 244.304396][ T8998] FAULT_INJECTION: forcing a failure. [ 244.304396][ T8998] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.308726][ T8998] CPU: 3 UID: 0 PID: 8998 Comm: syz.3.795 Tainted: G L syzkaller #0 PREEMPT(full) [ 244.308743][ T8998] Tainted: [L]=SOFTLOCKUP [ 244.308747][ T8998] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 244.308754][ T8998] Call Trace: [ 244.308758][ T8998] [ 244.308763][ T8998] dump_stack_lvl+0x100/0x190 [ 244.308779][ T8998] should_fail_ex.cold+0x5/0xa [ 244.308794][ T8998] _copy_from_user+0x2e/0xd0 [ 244.308816][ T8998] video_usercopy+0x9e0/0x1490 [ 244.308834][ T8998] ? __pfx___video_do_ioctl+0x10/0x10 [ 244.308852][ T8998] ? __pfx_video_usercopy+0x10/0x10 [ 244.308872][ T8998] ? __fget_files+0x215/0x3d0 [ 244.308884][ T8998] ? hook_file_ioctl_common+0x149/0x410 [ 244.308899][ T8998] v4l2_ioctl+0x1bd/0x250 [ 244.308911][ T8998] v4l2_compat_ioctl32+0x20f/0x2d0 [ 244.308926][ T8998] ? __pfx_v4l2_compat_ioctl32+0x10/0x10 [ 244.308940][ T8998] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 244.308954][ T8998] __do_fast_syscall_32+0xe7/0x950 [ 244.308969][ T8998] ? lockdep_hardirqs_on+0x78/0x100 [ 244.308984][ T8998] do_fast_syscall_32+0x32/0x70 [ 244.308999][ T8998] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 244.309014][ T8998] RIP: 0023:0xf7ff3fcc [ 244.309023][ T8998] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 244.309034][ T8998] RSP: 002b:00000000f54b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 244.309045][ T8998] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c040565f [ 244.309052][ T8998] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 244.309058][ T8998] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 244.309064][ T8998] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 244.309071][ T8998] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 244.309084][ T8998] [ 244.524554][ T9004] kAFS: unable to lookup cell '' [ 245.590826][ T39] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 245.614674][ T9009] wg2 speed is unknown, defaulting to 1000 [ 245.861418][ T9017] fuse: Bad value for 'fd' [ 245.881939][ T39] usb 8-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 245.891882][ T39] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.904075][ T39] usb 8-1: Product: syz [ 245.908605][ T39] usb 8-1: Manufacturer: syz [ 245.910719][ T39] usb 8-1: SerialNumber: syz [ 245.961087][ T9019] No such timeout policy "syz1" [ 246.060728][ T9022] netlink: 8 bytes leftover after parsing attributes in process `syz.4.801'. [ 246.232090][ T9024] netlink: 8 bytes leftover after parsing attributes in process `syz.0.802'. [ 246.290246][ T9024] 9pnet_virtio: no channels available for device syz [ 247.068008][ T9029] netlink: 168 bytes leftover after parsing attributes in process `syz.1.804'. [ 247.276442][ T39] rtl8150 8-1:1.0: couldn't reset the device [ 247.283530][ T39] rtl8150 8-1:1.0: probe with driver rtl8150 failed with error -5 [ 247.292266][ T9036] netlink: 140 bytes leftover after parsing attributes in process `syz.4.803'. [ 247.292924][ T39] usb 8-1: USB disconnect, device number 16 [ 248.088842][ T40] audit: type=1326 audit(1777796987.236:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9051 comm="syz.3.811" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7ff3fcc code=0x0 [ 248.217780][ T40] audit: type=1326 audit(1777796987.366:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9055 comm="syz.1.812" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb2fcc code=0x0 [ 249.637562][ T9081] tun0: tun_chr_ioctl cmd 1074025676 [ 249.639415][ T9081] tun0: owner set to 0 [ 250.129436][ T9095] could not allocate digest TFM handle md5 syzkaller syzkaller login: [ 250.657469][ T9104] netlink: 12 bytes leftover after parsing attributes in process `syz.0.822'. [ 251.577641][ T9109] binder: 9107:9109 unknown command 1077961712 [ 251.579939][ T9109] binder: 9107:9109 ioctl c0306201 80004a40 returned -22 [ 253.180213][ T9133] kAFS: No cell specified [ 253.379419][ T9141] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 253.384904][ T9141] qnx6: wrong signature (magic) in superblock #1. [ 253.387064][ T9141] qnx6: unable to read the first superblock [ 253.896473][ T9139] siw: device registration error -23 [ 256.170081][ T9141] tipc: Started in network mode [ 256.172097][ T9141] tipc: Node identity ff000000000000000000000000000001, cluster identity 4711 [ 256.175570][ T9141] tipc: Enabling of bearer rejected, failed to enable media [ 256.348268][ T9184] netlink: 260 bytes leftover after parsing attributes in process `syz.0.842'. [ 256.405189][ T9186] No such timeout policy "syz1" [ 256.408376][ T9182] netlink: 8 bytes leftover after parsing attributes in process `syz.4.841'. [ 256.429669][ T9188] random: crng reseeded on system resumption [ 256.481875][ T9189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.844'. [ 256.798727][ T9197] input: syz1 as /devices/virtual/input/input22 [ 257.467468][ T9203] fuseblk: Bad value for 'fd' [ 258.114415][ T9228] xt_recent: Unsupported userspace flags (000000fe) [ 258.190636][ T9230] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.856'. [ 258.273002][ T9230] netlink: 'syz.0.856': attribute type 1 has an invalid length. [ 258.276546][ T9230] netlink: 'syz.0.856': attribute type 2 has an invalid length. [ 258.452453][ T9244] FAULT_INJECTION: forcing a failure. [ 258.452453][ T9244] name failslab, interval 1, probability 0, space 0, times 0 [ 258.457332][ T9244] CPU: 1 UID: 0 PID: 9244 Comm: syz.0.859 Tainted: G L syzkaller #0 PREEMPT(full) [ 258.457370][ T9244] Tainted: [L]=SOFTLOCKUP [ 258.457376][ T9244] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 258.457385][ T9244] Call Trace: [ 258.457391][ T9244] [ 258.457398][ T9244] dump_stack_lvl+0x100/0x190 [ 258.457421][ T9244] should_fail_ex.cold+0x5/0xa [ 258.457442][ T9244] should_failslab+0xc2/0x120 [ 258.457462][ T9244] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 258.457489][ T9244] ? __alloc_skb+0x140/0x710 [ 258.457504][ T9244] ? __alloc_skb+0x5b7/0x710 [ 258.457523][ T9244] __alloc_skb+0x140/0x710 [ 258.457538][ T9244] ? __alloc_skb+0x5b7/0x710 [ 258.457553][ T9244] ? __pfx___alloc_skb+0x10/0x10 [ 258.457575][ T9244] netlink_alloc_large_skb+0x69/0x150 [ 258.457600][ T9244] netlink_sendmsg+0x680/0xda0 [ 258.457631][ T9244] ? __pfx_netlink_sendmsg+0x10/0x10 [ 258.457656][ T9244] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 258.457688][ T9244] ____sys_sendmsg+0x9e1/0xb70 [ 258.457711][ T9244] ? __pfx_netlink_sendmsg+0x10/0x10 [ 258.457734][ T9244] ? __pfx_____sys_sendmsg+0x10/0x10 [ 258.457767][ T9244] ___sys_sendmsg+0x190/0x1e0 [ 258.457791][ T9244] ? __pfx____sys_sendmsg+0x10/0x10 [ 258.457823][ T9244] ? find_held_lock+0x2b/0x80 [ 258.457859][ T9244] __sys_sendmsg+0x170/0x220 [ 258.457878][ T9244] ? __pfx___sys_sendmsg+0x10/0x10 [ 258.457894][ T9244] ? __fget_files+0x21f/0x3d0 [ 258.457920][ T9244] ? ksys_write+0x1ac/0x250 [ 258.457940][ T9244] ? rcu_is_watching+0x12/0xc0 [ 258.457963][ T9244] __do_fast_syscall_32+0xe7/0x950 [ 258.457987][ T9244] ? lockdep_hardirqs_on+0x78/0x100 [ 258.458011][ T9244] do_fast_syscall_32+0x32/0x70 [ 258.458035][ T9244] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 258.458057][ T9244] RIP: 0023:0xf70befcc [ 258.458071][ T9244] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 258.458088][ T9244] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 258.458104][ T9244] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000800000c0 [ 258.458115][ T9244] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 258.458124][ T9244] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 258.458134][ T9244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 258.458144][ T9244] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 258.458166][ T9244] [ 258.714061][ T9260] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 258.718250][ T9260] overlayfs: conflicting options: userxattr,redirect_dir=on [ 259.434913][ T9302] Bluetooth: MGMT ver 1.23 [ 259.530297][ T39] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 259.679839][ T39] usb 9-1: Using ep0 maxpacket: 32 [ 259.683917][ T39] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 259.696304][ T39] usb 9-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 259.711668][ T39] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.715418][ T39] usb 9-1: Product: syz [ 259.717297][ T39] usb 9-1: Manufacturer: syz [ 259.719367][ T39] usb 9-1: SerialNumber: syz [ 259.731930][ T39] usb 9-1: config 0 descriptor?? [ 259.734934][ T9287] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 259.740871][ T39] hub 9-1:0.0: bad descriptor, ignoring hub [ 259.742696][ T39] hub 9-1:0.0: probe with driver hub failed with error -5 [ 259.746638][ T39] input: syz syz as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input23 [ 259.782863][ T9321] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 259.805644][ T9322] bridge10: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 259.983956][ T9287] netlink: 8 bytes leftover after parsing attributes in process `syz.4.865'. [ 260.134841][ T5805] usb 9-1: USB disconnect, device number 4 [ 260.134936][ C2] usbtouchscreen 9-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 260.148064][ T9334] No such timeout policy "syz1" [ 260.212519][ T9337] netlink: 8 bytes leftover after parsing attributes in process `syz.3.874'. [ 260.372865][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.680201][ T5739] Bluetooth: hci0: link tx timeout [ 260.683616][ T5739] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 261.106296][ T9344] netlink: 8 bytes leftover after parsing attributes in process `syz.4.876'. [ 261.157920][ T5739] Bluetooth: hci0: link tx timeout [ 261.160238][ T5739] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 261.505264][ T5739] Bluetooth: hci0: link tx timeout [ 261.507888][ T5739] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 261.566895][ T9363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.880'. [ 261.702234][ T5739] Bluetooth: hci0: link tx timeout [ 261.704221][ T5739] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 262.241722][ T9374] netlink: 188 bytes leftover after parsing attributes in process `syz.4.883'. [ 262.631292][ T9388] bond2: entered promiscuous mode [ 262.650229][ T9386] netlink: 8 bytes leftover after parsing attributes in process `syz.0.887'. [ 262.657908][ T9386] netlink: 12 bytes leftover after parsing attributes in process `syz.0.887'. [ 262.729778][ T5739] Bluetooth: hci0: command 0x0406 tx timeout [ 262.814450][ T9396] futex_wake_op: syz.0.889 tries to shift op by -1; fix this program [ 262.843761][ T9393] block nbd0: server does not support multiple connections per device. [ 262.851688][ T9393] block nbd0: shutting down sockets [ 263.365310][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.449310][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.574309][ T5739] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 263.587987][ T5739] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 263.591680][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.593088][ T5739] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 263.601361][ T5739] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 263.605681][ T5739] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 263.678826][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.877794][ T12] bridge_slave_1: left allmulticast mode [ 263.882949][ T12] bridge_slave_1: left promiscuous mode [ 263.885824][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.892403][ T12] bridge_slave_0: left allmulticast mode [ 263.894820][ T12] bridge_slave_0: left promiscuous mode [ 263.897116][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.188981][ T12] bond1 (unregistering): (slave geneve2): Releasing backup interface [ 265.088505][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 265.095929][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 265.102314][ T12] bond0 (unregistering): Released all slaves [ 265.113688][ T12] bond1 (unregistering): Released all slaves [ 265.125576][ T12] bond2 (unregistering): Released all slaves [ 265.160629][ T9404] wg2 speed is unknown, defaulting to 1000 [ 265.254066][ T12] IPVS: stopping master sync thread 7817 ... [ 265.333777][ T840] wg2 speed is unknown, defaulting to 1000 [ 265.335853][ T840] syz2: Port: 1 Link DOWN [ 265.371484][ T840] wg2 speed is unknown, defaulting to 1000 [ 265.597553][ T5446] 8021q: adding VLAN 0 to HW filter on device eth6 [ 265.700544][ T5095] Bluetooth: hci3: command tx timeout [ 267.259312][ T12] hsr_slave_0: left promiscuous mode [ 267.263756][ T12] hsr_slave_1: left promiscuous mode [ 267.267662][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.270324][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.275100][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.277656][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.289100][ T12] veth1_macvtap: left promiscuous mode [ 267.299825][ T12] veth0_macvtap: left promiscuous mode [ 267.302563][ T12] veth1_vlan: left promiscuous mode [ 267.307416][ T12] veth0_vlan: left promiscuous mode [ 267.576645][ T9463] netlink: 'syz.3.906': attribute type 1 has an invalid length. [ 267.580872][ T9463] netlink: 96 bytes leftover after parsing attributes in process `syz.3.906'. [ 267.583878][ T9463] netlink: 'syz.3.906': attribute type 1 has an invalid length. [ 267.586535][ T9463] netlink: 'syz.3.906': attribute type 8 has an invalid length. [ 267.589252][ T9463] netlink: 582 bytes leftover after parsing attributes in process `syz.3.906'. [ 267.594353][ T9463] netlink: 1 bytes leftover after parsing attributes in process `syz.3.906'. [ 267.668002][ T9463] syz.3.906 (9463): drop_caches: 2 [ 267.714678][ T7061] smc: removing ib device syz2 [ 267.779700][ T5095] Bluetooth: hci3: command tx timeout [ 267.976140][ T7061] smbdirect: ib_dev[syz2] removed [ 268.275762][ T5446] 8021q: adding VLAN 0 to HW filter on device eth7 [ 268.472590][ T9404] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.479431][ T9404] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.484348][ T9404] bridge_slave_0: entered allmulticast mode [ 268.488088][ T9404] bridge_slave_0: entered promiscuous mode [ 268.499832][ T9404] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.504736][ T9404] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.509335][ T9404] bridge_slave_1: entered allmulticast mode [ 268.520783][ T9404] bridge_slave_1: entered promiscuous mode [ 268.566422][ T9404] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.592415][ T9404] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.614593][ T5446] 8021q: adding VLAN 0 to HW filter on device eth8 [ 269.849720][ T5095] Bluetooth: hci3: command tx timeout [ 270.622429][ T9404] team0: Port device team_slave_0 added [ 270.633015][ T9404] team0: Port device team_slave_1 added [ 270.681636][ T9404] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.684161][ T9404] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 270.693796][ T9404] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.709265][ T9404] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.718470][ T9404] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 270.742279][ T9404] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.793320][ T9404] hsr_slave_0: entered promiscuous mode [ 270.795687][ T9404] hsr_slave_1: entered promiscuous mode [ 270.974788][ T9404] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 271.030520][ T9404] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 271.033720][ T5446] 8021q: adding VLAN 0 to HW filter on device eth9 [ 271.036297][ T9404] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 271.045112][ T9404] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 271.048302][ T9404] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 271.088068][ T9404] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 271.091585][ T9404] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 271.097961][ T9404] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 271.219155][ T9404] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.263374][ T9404] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.271023][ T7063] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.273436][ T7063] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.285769][ T7063] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.288191][ T7063] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.364628][ T9404] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 271.369374][ T9404] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 271.721062][ T9561] netlink: 'syz.1.921': attribute type 1 has an invalid length. [ 271.727127][ T9558] No such timeout policy "syz1" [ 271.738893][ T9404] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.754320][ T9561] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 271.757844][ T9561] bond2: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 271.767786][ T9561] bond2: (slave vxcan3): making interface the new active one [ 271.771264][ T9561] bond2: (slave vxcan3): Enslaving as an active interface with an up link [ 271.793119][ T9561] bond2: (slave vxcan5): The slave device specified does not support setting the MAC address [ 271.798898][ T9561] bond2: (slave vxcan5): Enslaving as a backup interface with an up link [ 271.858357][ T9569] netlink: 8 bytes leftover after parsing attributes in process `syz.4.920'. [ 271.939745][ T5095] Bluetooth: hci3: command tx timeout [ 271.972187][ T9404] veth0_vlan: entered promiscuous mode [ 272.002520][ T9404] veth1_vlan: entered promiscuous mode [ 272.035701][ T9404] veth0_macvtap: entered promiscuous mode [ 272.045040][ T9404] veth1_macvtap: entered promiscuous mode [ 272.049374][ T9578] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 272.052271][ T9578] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 272.075091][ T9578] vhci_hcd vhci_hcd.0: Device attached [ 272.084175][ T9404] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.098689][ T9404] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.104352][ T9579] vhci_hcd: connection closed [ 272.106411][ T1161] vhci_hcd vhci_hcd.3: stop threads [ 272.119093][ T1161] vhci_hcd vhci_hcd.3: release socket [ 272.125505][ T1161] vhci_hcd vhci_hcd.3: disconnect device [ 272.128370][ T1157] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.138108][ T1157] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.161092][ T1161] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.164957][ T1161] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.220908][ T1157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.223590][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.245974][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.248611][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.470766][ T9594] No such timeout policy "syz1" [ 272.579832][ T9600] netlink: 8 bytes leftover after parsing attributes in process `syz.4.929'. [ 272.758716][ T9612] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 272.762126][ T9613] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 273.729693][ T5823] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 273.766378][ T9636] comedi comedi2: pcm3724: I/O base address not correctly aligned [ 273.773676][ T9636] comedi comedi3: aio_aio12_8: I/O base address or length out of range [ 273.881888][ T5823] usb 6-1: config 0 has no interfaces? [ 273.883969][ T5823] usb 6-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 273.887315][ T5823] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.895545][ T5823] usb 6-1: config 0 descriptor?? [ 274.128896][ T58] usb 6-1: USB disconnect, device number 9 [ 274.751825][ T5823] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 274.973109][ T5823] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 274.982331][ T5823] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 274.994582][ T5823] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 275.006228][ T5823] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.046312][ T9646] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 275.233705][ T5823] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 275.324017][ T9646] tipc: Started in network mode [ 275.333777][ T9646] tipc: Node identity 128edee8fd07, cluster identity 4711 [ 275.333909][ T9646] tipc: Enabled bearer , priority 0 [ 275.372403][ T9667] 8021q: adding VLAN 0 to HW filter on device bond2 [ 275.376738][ T9646] syzkaller0: entered promiscuous mode [ 275.391140][ T9646] syzkaller0: entered allmulticast mode [ 275.434257][ T9646] tipc: Resetting bearer [ 275.480170][ T9645] tipc: Resetting bearer [ 275.503389][ T9645] tipc: Disabling bearer [ 275.516679][ T9673] netlink: 32 bytes leftover after parsing attributes in process `syz.3.951'. [ 275.525196][ T9673] netlink: 4 bytes leftover after parsing attributes in process `syz.3.951'. [ 275.551766][ T9673] bridge_slave_1: left allmulticast mode [ 275.554310][ T9673] bridge_slave_1: left promiscuous mode [ 275.558960][ T9673] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.574742][ T9673] bridge_slave_0: left allmulticast mode [ 275.577218][ T9673] bridge_slave_0: left promiscuous mode [ 275.579225][ T9673] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.625437][ T840] usb 9-1: USB disconnect, device number 5 [ 276.025919][ T9682] faux_driver vkms: [drm] Unknown color mode 2054; guessing buffer size. [ 276.432556][ T9699] 9pnet_fd: p9_fd_create_tcp (9699): problem connecting socket to 127.0.0.1 [ 276.957776][ T5095] block nbd0: Receive control failed (result -32) [ 277.390308][ T9714] No such timeout policy "syz1" [ 277.634093][ T9718] netlink: 24 bytes leftover after parsing attributes in process `syz.3.962'. [ 277.643220][ T9718] [U]  [ 277.644656][ T9718] [U] K{ [ 277.646280][ T9718] [U] T 1ŠFFˊ`GJǘGO/MC [ 277.650767][ T9718] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 277.657868][ T9718] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 277.663878][ T9718] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 277.682778][ T9718] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 277.696957][ T9718] [U] ܾ4B`˗HT_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 277.702917][ T9718] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 277.708759][ T9718] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`Ʀ\ [ 277.751332][ T9718] [U] MX"{; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 277.756154][ T9718] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 277.762634][ T9718] [U] 22Ʃ۩X?0;3U [ 277.765274][ T9718] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 277.777505][ T9718] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 277.781710][ T9718] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 277.786729][ T9718] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 277.795858][ T9718] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 277.806984][ T9718] [U] EC [ 277.809052][ T9718] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 277.831544][ T9715] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 278.179430][ T9728] No such timeout policy "syz1" [ 278.281109][ T9730] netlink: 8 bytes leftover after parsing attributes in process `syz.3.965'. [ 278.296424][ T9730] Cache volume key already in use (9p,syz,) [ 278.578732][ T12] Bluetooth: hci4: Frame reassembly failed (-84) [ 279.021880][ T5816] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 279.219706][ T5816] usb 10-1: Using ep0 maxpacket: 32 [ 279.261085][ T5816] usb 10-1: config 1 interface 0 altsetting 128 endpoint 0x82 has invalid wMaxPacketSize 0 [ 279.279142][ T5816] usb 10-1: config 1 interface 0 altsetting 128 bulk endpoint 0x82 has invalid maxpacket 0 [ 279.289628][ T5816] usb 10-1: config 1 interface 0 altsetting 128 bulk endpoint 0x3 has invalid maxpacket 64 [ 279.292977][ T5816] usb 10-1: config 1 interface 0 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 279.297297][ T5816] usb 10-1: config 1 interface 0 has no altsetting 0 [ 279.350092][ T5816] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 279.353889][ T5816] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.357057][ T5816] usb 10-1: Product: syz [ 279.360057][ T5816] usb 10-1: Manufacturer: syz [ 279.363138][ T5816] usb 10-1: SerialNumber: syz [ 279.491827][ T9735] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 279.512410][ T58] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 279.679860][ T58] usb 8-1: Using ep0 maxpacket: 16 [ 279.696985][ T58] usb 8-1: too many configurations: 123, using maximum allowed: 8 [ 279.712622][ T58] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 279.724532][ T58] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 279.735193][ T58] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 279.748809][ T58] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 279.765326][ T58] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 279.779418][ T58] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 279.789089][ T58] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 279.798586][ T58] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 279.806922][ T58] usb 8-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 279.810952][ T58] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 279.814600][ T58] usb 8-1: SerialNumber: syz [ 279.845750][ T58] usb 8-1: config 0 descriptor?? [ 279.910997][ T58] input: bcm5974 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input24 [ 280.133779][ T5129] bcm5974 8-1:0.0: could not read from device [ 280.163803][ T5129] bcm5974 8-1:0.0: could not read from device [ 280.168819][ T58] usb 8-1: USB disconnect, device number 17 [ 280.188651][ T5129] bcm5974 8-1:0.0: could not read from device [ 280.342823][ T9762] netlink: 12 bytes leftover after parsing attributes in process `syz.3.971'. [ 280.648787][ T9766] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.972'. [ 280.649700][ T5095] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 280.655405][ T5739] Bluetooth: hci4: command 0xfc11 tx timeout [ 280.655591][ T9766] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 281.168090][ T9774] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 281.229691][ T5824] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 281.257433][ T9777] IPv6: syztnl0: Disabled Multicast RS [ 281.394855][ T5824] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 281.399639][ T5824] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 281.405821][ T5824] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 281.413634][ T5824] usb 6-1: config 0 interface 0 has no altsetting 0 [ 281.420458][ T5824] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 281.425768][ T5824] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 281.427873][ T9788] No such timeout policy "syz1" [ 281.434200][ T5824] usb 6-1: config 0 interface 0 has no altsetting 0 [ 281.440699][ T5824] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 281.443764][ T5824] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 281.447397][ T5824] usb 6-1: config 0 interface 0 has no altsetting 0 [ 281.450689][ T5824] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 281.453758][ T5824] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 281.457421][ T5824] usb 6-1: config 0 interface 0 has no altsetting 0 [ 281.460762][ T5824] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 281.463936][ T5824] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 281.467566][ T5824] usb 6-1: config 0 interface 0 has no altsetting 0 [ 281.472007][ T5824] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 281.475079][ T5824] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 281.478700][ T5824] usb 6-1: config 0 interface 0 has no altsetting 0 [ 281.482987][ T5824] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 281.486076][ T5824] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 281.489844][ T5824] usb 6-1: config 0 interface 0 has no altsetting 0 [ 281.492821][ T5824] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 281.495896][ T5824] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 281.499746][ T5824] usb 6-1: config 0 interface 0 has no altsetting 0 [ 281.501273][ T9790] netlink: 8 bytes leftover after parsing attributes in process `syz.3.977'. [ 281.503540][ T5824] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 281.508162][ T5824] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 281.511150][ T5824] usb 6-1: Product: syz [ 281.512730][ T5824] usb 6-1: Manufacturer: syz [ 281.514356][ T5824] usb 6-1: SerialNumber: syz [ 281.519816][ T5824] usb 6-1: config 0 descriptor?? [ 281.527043][ T5824] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 281.766884][ T840] usb 6-1: USB disconnect, device number 10 [ 281.785092][ T840] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 282.232538][ T9793] FAULT_INJECTION: forcing a failure. [ 282.232538][ T9793] name failslab, interval 1, probability 0, space 0, times 0 [ 282.238051][ T9793] CPU: 0 UID: 0 PID: 9793 Comm: syz.5.978 Tainted: G L syzkaller #0 PREEMPT(full) [ 282.238084][ T9793] Tainted: [L]=SOFTLOCKUP [ 282.238090][ T9793] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 282.238100][ T9793] Call Trace: [ 282.238107][ T9793] [ 282.238114][ T9793] dump_stack_lvl+0x100/0x190 [ 282.238138][ T9793] should_fail_ex.cold+0x5/0xa [ 282.238161][ T9793] should_failslab+0xc2/0x120 [ 282.238181][ T9793] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 282.238209][ T9793] ? __alloc_skb+0x140/0x710 [ 282.238223][ T9793] ? __alloc_skb+0x5b7/0x710 [ 282.238243][ T9793] __alloc_skb+0x140/0x710 [ 282.238258][ T9793] ? __alloc_skb+0x5b7/0x710 [ 282.238273][ T9793] ? __pfx___alloc_skb+0x10/0x10 [ 282.238297][ T9793] netlink_alloc_large_skb+0x69/0x150 [ 282.238322][ T9793] netlink_sendmsg+0x680/0xda0 [ 282.238349][ T9793] ? __pfx_netlink_sendmsg+0x10/0x10 [ 282.238375][ T9793] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 282.238405][ T9793] ____sys_sendmsg+0x9e1/0xb70 [ 282.238427][ T9793] ? __pfx_netlink_sendmsg+0x10/0x10 [ 282.238452][ T9793] ? __pfx_____sys_sendmsg+0x10/0x10 [ 282.238485][ T9793] ___sys_sendmsg+0x190/0x1e0 [ 282.238511][ T9793] ? __pfx____sys_sendmsg+0x10/0x10 [ 282.238546][ T9793] ? find_held_lock+0x2b/0x80 [ 282.238585][ T9793] __sys_sendmsg+0x170/0x220 [ 282.238604][ T9793] ? __pfx___sys_sendmsg+0x10/0x10 [ 282.238620][ T9793] ? __fget_files+0x21f/0x3d0 [ 282.238648][ T9793] ? ksys_write+0x1ac/0x250 [ 282.238669][ T9793] ? rcu_is_watching+0x12/0xc0 [ 282.238694][ T9793] __do_fast_syscall_32+0xe7/0x950 [ 282.238717][ T9793] ? lockdep_hardirqs_on+0x78/0x100 [ 282.238742][ T9793] do_fast_syscall_32+0x32/0x70 [ 282.238765][ T9793] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 282.238787][ T9793] RIP: 0023:0xf7f03fcc [ 282.238801][ T9793] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 282.238817][ T9793] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 282.238834][ T9793] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000800000c0 [ 282.238845][ T9793] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 282.238855][ T9793] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 282.238865][ T9793] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 282.238875][ T9793] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 282.238898][ T9793] [ 282.298945][ T5816] cdc_ether 10-1:1.0: probe with driver cdc_ether failed with error -22 [ 282.361030][ T5816] usb 10-1: USB disconnect, device number 2 [ 282.476815][ T9795] capability: warning: `syz.5.979' uses 32-bit capabilities (legacy support in use) [ 283.819908][ T5095] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 286.447390][ T9832] netlink: 28 bytes leftover after parsing attributes in process `syz.3.989'. [ 286.454206][ T9832] netlink: 196 bytes leftover after parsing attributes in process `syz.3.989'. [ 286.472461][ T9832] netlink: 28 bytes leftover after parsing attributes in process `syz.3.989'. [ 286.478856][ T9832] netlink: 196 bytes leftover after parsing attributes in process `syz.3.989'. [ 286.668209][ T9826] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 286.672416][ T9826] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 287.858372][ T9826] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 287.878830][ T9826] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 288.007668][ T9826] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] SMP KASAN NOPTI [ 288.012902][ T9826] KASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037] [ 288.016961][ T9826] CPU: 1 UID: 0 PID: 9826 Comm: syz.5.988 Tainted: G L syzkaller #0 PREEMPT(full) [ 288.021286][ T9826] Tainted: [L]=SOFTLOCKUP [ 288.023076][ T9826] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 288.027206][ T9826] RIP: 0010:kernfs_rename_ns+0x3b/0xb30 [ 288.029508][ T9826] Code: 48 89 fb 4c 8d 73 30 48 83 ec 30 48 89 14 24 48 89 4c 24 08 e8 f6 24 50 ff 4c 89 f2 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 c8 09 00 00 48 8b 43 30 48 85 c0 0f 84 7c 09 00 [ 288.036260][ T9826] RSP: 0018:ffffc900072af8d8 EFLAGS: 00010206 [ 288.038251][ T9826] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc9002a373000 [ 288.040854][ T9826] RDX: 0000000000000006 RSI: ffffffff82b7b10a RDI: 0000000000000000 [ 288.043409][ T9826] RBP: ffff8880200eac30 R08: 0000000000000007 R09: 0000000000000000 [ 288.046022][ T9826] R10: 000000007fffffff R11: 0000000000000000 R12: ffff888027867f40 [ 288.048614][ T9826] R13: ffff8880764f52c0 R14: 0000000000000030 R15: 1ffff92000e55f28 [ 288.051250][ T9826] FS: 0000000000000000(0000) GS:ffff88809727d000(0063) knlGS:00000000f53c6b40 [ 288.054157][ T9826] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 288.056422][ T9826] CR2: 00007ffec79212a0 CR3: 0000000075af1000 CR4: 0000000000352ef0 [ 288.059140][ T9826] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 288.061805][ T9826] DR3: 0000000000000001 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 288.064486][ T9826] Call Trace: [ 288.065632][ T9826] [ 288.066656][ T9826] kobject_move+0x127/0x260 [ 288.068176][ T9826] ? __pfx_kobject_move+0x10/0x10 [ 288.069862][ T9826] ? kobject_put+0xb9/0x640 [ 288.071369][ T9826] device_move+0xa9/0x1140 [ 288.072899][ T9826] hci_conn_del_sysfs+0x86/0x1a0 [ 288.074528][ T9826] hci_conn_del+0x506/0x1180 [ 288.076079][ T9826] hci_conn_hash_flush+0x186/0x280 [ 288.077777][ T9826] hci_dev_close_sync+0x5a7/0x1240 [ 288.079535][ T9826] ? __pfx_bt_err+0x10/0x10 [ 288.081045][ T9826] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 288.082830][ T9826] ? do_raw_spin_lock+0x128/0x260 [ 288.084520][ T9826] hci_dev_do_close+0x2e/0xb0 [ 288.086131][ T9826] hci_rfkill_set_block+0x225/0x3a0 [ 288.087922][ T9826] ? lockdep_hardirqs_on+0x78/0x100 [ 288.089688][ T9826] ? __pfx_hci_rfkill_set_block+0x10/0x10 [ 288.091566][ T9826] rfkill_set_block+0x205/0x510 [ 288.093245][ T9826] rfkill_fop_write+0x2c0/0x580 [ 288.094939][ T9826] ? __pfx_rfkill_fop_write+0x10/0x10 [ 288.096758][ T9826] ? __pfx_bpf_lsm_kernfs_init_security+0x10/0x10 [ 288.098903][ T9826] ? security_file_permission+0x76/0x210 [ 288.100806][ T9826] ? rw_verify_area+0xce/0x6d0 [ 288.102447][ T9826] vfs_write+0x2aa/0x1070 [ 288.103952][ T9826] ? __pfx_rfkill_fop_write+0x10/0x10 [ 288.105795][ T9826] ? __pfx_vfs_write+0x10/0x10 [ 288.107391][ T9826] ? find_held_lock+0x2b/0x80 [ 288.109052][ T9826] ? __fget_files+0x215/0x3d0 [ 288.110675][ T9826] ? __fget_files+0x215/0x3d0 [ 288.112290][ T9826] ? __fget_files+0x21f/0x3d0 [ 288.113882][ T9826] ksys_write+0x1f8/0x250 [ 288.115373][ T9826] ? __pfx_ksys_write+0x10/0x10 [ 288.117216][ T9826] ? rcu_is_watching+0x12/0xc0 [ 288.119264][ T9826] __do_fast_syscall_32+0xe7/0x950 [ 288.121260][ T9826] ? lockdep_hardirqs_on+0x78/0x100 [ 288.122962][ T9826] do_fast_syscall_32+0x32/0x70 [ 288.124606][ T9826] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 288.126668][ T9826] RIP: 0023:0xf7f03fcc [ 288.128048][ T9826] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 288.134180][ T9826] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 288.136882][ T9826] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000080 [ 288.139430][ T9826] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000000 [ 288.142015][ T9826] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 288.144597][ T9826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 288.147133][ T9826] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 288.149752][ T9826] [ 288.150789][ T9826] Modules linked in: [ 288.152284][ T9826] ---[ end trace 0000000000000000 ]--- [ 288.155883][ T9826] RIP: 0010:kernfs_rename_ns+0x3b/0xb30 [ 288.188392][ T9826] Code: 48 89 fb 4c 8d 73 30 48 83 ec 30 48 89 14 24 48 89 4c 24 08 e8 f6 24 50 ff 4c 89 f2 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 c8 09 00 00 48 8b 43 30 48 85 c0 0f 84 7c 09 00 [ 288.194929][ T9826] RSP: 0018:ffffc900072af8d8 EFLAGS: 00010206 [ 288.197017][ T9826] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc9002a373000 [ 288.199740][ T9826] RDX: 0000000000000006 RSI: ffffffff82b7b10a RDI: 0000000000000000 [ 288.202448][ T9826] RBP: ffff8880200eac30 R08: 0000000000000007 R09: 0000000000000000 [ 288.205109][ T9826] R10: 000000007fffffff R11: 0000000000000000 R12: ffff888027867f40 [ 288.207873][ T9826] R13: ffff8880764f52c0 R14: 0000000000000030 R15: 1ffff92000e55f28 [ 288.210473][ T9826] FS: 0000000000000000(0000) GS:ffff88809727d000(0063) knlGS:00000000f53c6b40 [ 288.213530][ T9826] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 288.215811][ T9826] CR2: 000000008002f000 CR3: 0000000075af1000 CR4: 0000000000352ef0 [ 288.218519][ T9826] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 288.221205][ T9826] DR3: 0000000000000001 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 288.223819][ T9826] Kernel panic - not syncing: Fatal exception [ 288.226512][ T9826] Kernel Offset: disabled [ 288.227946][ T9826] Rebooting in 86400 seconds..