last executing test programs: 1m10.834123954s ago: executing program 1 (id=20): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(0xffffffffffffffff, 0x7b1, &(0x7f0000002cc0)={&(0x7f0000001cc0)=[0x5, 0x5, 0x1, 0xc, 0x1, 0x2, 0x10001, 0x8, 0x5, 0x1, 0x7, 0x851d, 0x3, 0x3, 0x5, 0xd, 0x101, 0x2, 0xfffffff9, 0xd54, 0xfffffffc, 0x6, 0x5, 0x6, 0x8, 0xd885, 0x3ff, 0xfffffffd, 0x9, 0xfff, 0x3, 0xf0, 0x1, 0xc92, 0x6, 0x6, 0xe4, 0xfffffff9, 0x8, 0x3, 0x6, 0x8001, 0x0, 0x54, 0x4, 0x0, 0x4, 0x1, 0x0, 0x2, 0x5d46, 0x2, 0x80, 0xff, 0x4, 0x26, 0x8, 0x5, 0x4, 0xffff, 0x3, 0x6, 0xc, 0x7fffffff, 0x6, 0x2, 0xffffffff, 0x2, 0xa, 0x9, 0x80000000, 0x8, 0x9, 0xf, 0x5, 0x0, 0x6, 0x401, 0x5, 0x3, 0x8, 0x85, 0x200000, 0x8, 0x9, 0x1, 0x98, 0x1, 0xfffffffc, 0x0, 0x8, 0x0, 0x7, 0x10001, 0x3, 0x1, 0xfffffff9, 0x4, 0x6, 0x80000001, 0xd, 0x9, 0x3, 0x8, 0x9, 0x9, 0x3, 0x8, 0x100, 0x8, 0x9, 0x0, 0x7, 0xa6, 0x3, 0xeac5, 0x6, 0x6, 0x6, 0x4, 0xc, 0x71, 0x4, 0x10000, 0x3524, 0x4, 0x2, 0x1000, 0x200, 0x4, 0x1ff, 0x5, 0x3, 0x8, 0x4, 0x0, 0xc54, 0x9, 0x3, 0x80000000, 0x8da6, 0x3, 0xa6, 0x6, 0x1, 0xa, 0x86, 0x18, 0xfff, 0x5, 0xa2, 0x6, 0xbf, 0x5, 0x2, 0x7fff, 0x7, 0xf5, 0x1, 0x9, 0x2, 0x0, 0x5, 0x5, 0x7, 0x0, 0xc, 0x0, 0x5, 0x0, 0xffffffff, 0x800, 0x4f83, 0xb330, 0x3, 0x3, 0x9, 0xffff, 0x8, 0xffffffff, 0x165, 0x2, 0x4, 0x7, 0x4, 0x1, 0x7, 0x4, 0x4, 0x0, 0x9, 0x6, 0x401, 0x81, 0x2f3, 0x81, 0x4, 0x10000, 0x6, 0x203, 0x6, 0x18, 0xa46, 0x89, 0xfffffffd, 0x5, 0x7, 0x7, 0x8, 0x3, 0x7fff, 0x8, 0x5, 0x5, 0x6, 0x4, 0x80000001, 0xa, 0x8, 0x80, 0x6, 0x5, 0x10, 0x5cf, 0x7, 0x3, 0x8, 0x40, 0x6, 0x4, 0x8, 0x200, 0x7, 0xfffffffd, 0x2, 0x6a, 0x8001, 0x9, 0xffffff7f, 0x5, 0x1, 0xfff, 0x620, 0x0, 0x7f, 0x4, 0x2, 0xde, 0xb1e6, 0x6fcc, 0x4, 0x7, 0x80, 0x5, 0x200, 0x9f, 0x1, 0x7ff, 0x5, 0x5, 0x5, 0x3d6, 0x4, 0x7, 0x5, 0x7, 0x8000, 0x6, 0x3c, 0x6, 0x5, 0x7f, 0x0, 0x5, 0x36e, 0x101, 0x0, 0x10001, 0xfffff53f, 0x5, 0x7fffffff, 0x2, 0x5, 0x7f, 0x7, 0x5, 0x75f, 0x6, 0x1, 0x54c, 0x0, 0x800, 0x93dc, 0x81, 0x5, 0x7, 0xb77, 0x6e, 0x1, 0x3, 0x6, 0x7, 0x1, 0x3, 0xef, 0x0, 0x3, 0x9, 0xceed, 0x81b5, 0x1, 0x2, 0x3, 0x5, 0x2, 0x6, 0x3fe00, 0x6, 0x3, 0x6, 0xa2, 0x0, 0x9, 0x4, 0x0, 0xe, 0x7, 0x7, 0x3, 0x2530, 0x10001, 0xfff, 0xfffffff9, 0x0, 0x3000000, 0x7ff, 0x3, 0x7, 0x0, 0x7f, 0x3, 0xfffffff9, 0x8, 0xfffffff9, 0x9, 0x7fff, 0x1, 0x1, 0xfd94, 0x9, 0x6, 0x8001, 0x3, 0x7, 0x5, 0x7, 0x8, 0xa, 0xffff, 0xa, 0xe17f, 0x1ff, 0x0, 0xa7f, 0x4, 0x9, 0xffff, 0x5, 0x8, 0x8, 0x5, 0x0, 0x2, 0xaa8f, 0xc9, 0x6abc, 0x5, 0x8001, 0xfff, 0xcb, 0x7, 0xf, 0x81, 0x8, 0x4, 0x2308, 0x2, 0x6, 0x6, 0x4, 0x8, 0x5, 0x8, 0x12d, 0xa9b, 0x9, 0x1, 0x9, 0x8, 0x8, 0x7, 0x13af2340, 0xf34d06cc, 0x8, 0x3, 0x400, 0x8, 0x9, 0x8001, 0x2, 0xe, 0x10000, 0x5, 0x3ff, 0x80000001, 0xfffffff7, 0x401, 0x7, 0x2, 0x80000001, 0x8, 0xff, 0x1, 0x9, 0x800, 0x7f, 0x9, 0x5, 0xffffff91, 0x3ff, 0x7ff, 0x80000000, 0x6, 0x10001, 0x80000000, 0x9, 0xd, 0xfffffffb, 0xfffffffb, 0x7, 0xff, 0x4, 0x8, 0x6, 0x8, 0x4, 0x800, 0xfe, 0xc, 0x8, 0x721, 0x8, 0x3000000, 0x3, 0xffffff7f, 0x3ff, 0x6, 0x2, 0x6, 0x4, 0x80, 0x0, 0x38ac, 0x6, 0x4, 0xffff, 0xffff, 0xf, 0x1, 0x3, 0x7, 0x2, 0x1, 0xe8a, 0x3, 0x9, 0x8001, 0x1000, 0x8, 0x41, 0x4, 0x8, 0x7, 0x2521d01e, 0x7fff, 0x3ff, 0x9, 0x2, 0x2, 0xfff, 0x7fff, 0x878, 0x0, 0x9d, 0x3, 0x6, 0x8, 0xff, 0x93, 0x9, 0x2, 0x9a67, 0xfffffffa, 0xe16b, 0xddde, 0x8, 0x4, 0x8, 0x40, 0x3, 0x3, 0x0, 0x4, 0xb, 0x2, 0x1ff, 0x0, 0xb, 0x8, 0x7, 0x80, 0x8000, 0x6, 0x1, 0x6, 0x7, 0x34, 0x4, 0xe9, 0x6, 0x6, 0x73, 0xc00000, 0x2, 0x11f0, 0x4, 0x400, 0x0, 0xe28, 0x1, 0xfffff6bd, 0x8b6, 0xffffffff, 0x8, 0x4, 0x0, 0x1000, 0x3, 0x1, 0xe9, 0x3, 0x0, 0xfffffffc, 0xfffffc01, 0x5, 0x7, 0xf6, 0x3, 0x43cc0b06, 0x0, 0x8, 0x6, 0x0, 0x6, 0x6, 0x0, 0x2, 0xffffffff, 0x5, 0x6, 0x1000, 0x4, 0x9, 0x1ff, 0x7f, 0x7, 0x2, 0x77, 0x1, 0x7, 0x8, 0xf57, 0xf9400, 0x1ff, 0xffff9f7b, 0xa678, 0x9, 0x1, 0xffffffff, 0x8001, 0x101, 0xaa0e, 0x57e8, 0xc3, 0x2, 0x46, 0xfff, 0x7, 0xef5, 0x1, 0x7927, 0xffff, 0x1, 0x35, 0x0, 0x3, 0x9, 0x5, 0xd, 0x3, 0x0, 0x80000001, 0x3ff, 0xe3, 0x8, 0x0, 0x6, 0xc46, 0xf4b, 0xf474, 0x1, 0x3, 0x0, 0x401, 0x2, 0x10, 0x3, 0x4, 0x2, 0x80, 0x5, 0x1, 0x1, 0x8, 0xfff, 0x5, 0xce0, 0x9, 0x9, 0x0, 0x54, 0x97e, 0x2, 0x31, 0x6, 0x9, 0x8, 0x20000, 0x22, 0x1, 0x7, 0x6, 0x5, 0xb, 0x3, 0x511, 0x3ff, 0x1, 0xd9, 0x8000, 0x7f, 0xff, 0x0, 0x6, 0x0, 0x4, 0x2, 0x1ff, 0x8, 0x7fff, 0x4, 0x0, 0x4, 0x0, 0xc4c, 0x4, 0x1, 0xffffff80, 0x3, 0x7, 0xff, 0x8, 0x5, 0x0, 0x3, 0x3, 0x2, 0xffff, 0xff, 0x1, 0xfb, 0x4, 0x2, 0xc, 0x8, 0x81, 0x80, 0xf51, 0x401, 0x10001, 0x2, 0xf8, 0x1ff, 0x8001, 0x6, 0xfffffffc, 0x5, 0x38, 0x7, 0x8, 0x5, 0x5, 0xbcd, 0x2, 0x401, 0x3978, 0x0, 0x5, 0x3, 0x6, 0x4, 0x9, 0x5, 0x0, 0x98, 0xb9, 0x7, 0x2, 0x80, 0x6, 0x8, 0x4, 0x2, 0x42f, 0x0, 0x5, 0xfffffff8, 0x7, 0x28, 0x6, 0x8, 0x2, 0x10001, 0x80, 0x3, 0x125, 0xdf, 0x2, 0x81, 0x6, 0x3ff, 0x5674, 0x8, 0xa, 0x401, 0xe6d, 0x8, 0x4, 0x6, 0x1, 0x4c, 0x2, 0xd0e1, 0x3, 0x6, 0x5, 0x52, 0x7, 0x40, 0x3, 0xfffffc01, 0xd, 0x9, 0xffff3b5f, 0x7, 0x5, 0x3, 0x566f, 0x5, 0x9, 0x0, 0x1, 0x2, 0x8, 0x8001, 0x7fff, 0x101, 0xe, 0x8, 0x8000, 0x0, 0x2, 0xfff, 0xfffffff7, 0x2, 0xc91, 0x7, 0x1, 0x1, 0x1d5e, 0x8, 0x24, 0x9, 0xffffffff, 0x0, 0x2, 0x9, 0xf8ca, 0x1, 0x7645, 0x8000, 0x6, 0x580, 0x5, 0x1, 0x1, 0x4, 0x2, 0x4, 0xe, 0x1, 0x1020000, 0xffffffff, 0x0, 0x4, 0xe, 0x9, 0x10000, 0x9, 0x7, 0x3ff, 0x3c, 0x6, 0x3, 0x2, 0x7, 0xfffffffe, 0xa1a2, 0x6, 0x9, 0x3, 0x2, 0x9, 0x8, 0x1, 0x720, 0x7, 0xd, 0x0, 0x9, 0x9, 0x499, 0x7, 0x4, 0x2, 0x0, 0x409, 0x7, 0xf8e, 0x3, 0x2, 0x5, 0x8, 0x4, 0x2, 0x80000001, 0xb, 0xc, 0x8, 0x7, 0x4, 0x8b77, 0x1, 0x6, 0xfffffffd, 0xfffffffb, 0x81, 0x4, 0x7fffffff, 0x73, 0x5, 0x401, 0x6, 0xe49, 0x2, 0x7ff, 0xfffffc8f, 0x1, 0xffff63b1, 0x4, 0xffffffff, 0x5, 0x7, 0x2d28, 0x0, 0x5, 0xffff, 0x3b665305, 0x6, 0x7f, 0x5, 0x5, 0x1000, 0x0, 0xc6, 0xd, 0x4, 0xb, 0x5, 0x4, 0x7, 0x1, 0xfff, 0x280000, 0x80000000, 0x800, 0x1ff, 0x2, 0x0, 0x4, 0x8, 0xfff, 0x8, 0xd57, 0x4, 0x40, 0x10000, 0x671, 0x9a0, 0x6, 0x7299, 0x8, 0x40, 0x58b, 0x5, 0x4, 0x5, 0x2, 0x645f, 0x5, 0x5, 0x5, 0xff, 0x430, 0x5, 0x6, 0x28da261a, 0x6, 0x200, 0x1, 0x3, 0x13, 0x7f, 0x3, 0xe, 0x7, 0xc9fb, 0x2, 0x100, 0x5, 0xf4, 0x3, 0x3, 0x1, 0x8, 0x1000, 0x32, 0x5, 0x1, 0x3, 0x1, 0x4, 0x7, 0x7fffffff, 0x9, 0x0, 0xac, 0xffff, 0x80000001, 0x9, 0x200, 0x0, 0x7, 0x2, 0xffffff22, 0x3, 0x8000, 0x4d08, 0x77, 0x3, 0x9, 0x9, 0x0, 0x4, 0x7, 0x7, 0xffff, 0x468f, 0x9, 0xffffffff, 0x800, 0x7f, 0x9, 0x1, 0x6, 0x10000, 0x0, 0xd, 0x7, 0x4, 0x0, 0x3, 0x5, 0x6, 0x7ff, 0x0, 0x5, 0x6, 0x3, 0x8, 0x3, 0x9, 0x1, 0x80], 0x3, 0x400, 0x6}) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000100)=0x5b, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000740)=""/4112, 0x1010}], 0x1}, 0x7f}], 0x1, 0x4000830b, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x2}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000300)={'syzkaller0\x00', @multicast}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000017c0)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {0x10}, {0x0, 0xfff1}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0xfffeffff, 0x3, 0x9, 0x5, 0xa8e, 0x5, 0x407c, 0x80, 0x9, 0x3, 0x8000, 0x8, 0x3, 0x8, 0x5, 0xbc0, 0x7, 0x9c09, 0xffff, 0x3, 0x0, 0xc, 0xcfa, 0x5, 0xa, 0x6407, 0x80, 0x849, 0x8b, 0xffffffff, 0x4, 0x2, 0xa4c, 0x0, 0x9, 0x5, 0x200, 0x1ff, 0x4d76, 0x4, 0xb32, 0x3ff, 0x8, 0x0, 0x71, 0x5, 0x1, 0x8, 0x0, 0x7, 0xeb, 0x6, 0x87, 0x8, 0x0, 0x9, 0x3ff, 0xb, 0xfffffff8, 0xb6d, 0x81, 0x1, 0x8, 0xa, 0x0, 0x9, 0x81, 0x8, 0x26b, 0x8, 0x85b4, 0x9, 0x7, 0xfffffffe, 0x6, 0x8, 0xffffffc0, 0x3, 0x3, 0x4, 0x4, 0x80000001, 0xc8ee, 0xbacb161, 0x3ff, 0xffff12d0, 0x2, 0xffff8000, 0x10, 0x1ff, 0x2, 0x5, 0x2, 0x8, 0x7, 0x4, 0x2, 0x0, 0x1, 0x5, 0xfffffffd, 0x6, 0x0, 0x9, 0x8, 0x5, 0x6, 0xfffffffe, 0x2, 0x834f, 0x9, 0x1ff, 0x2, 0x62cd, 0xf98, 0xd8, 0x6, 0x6, 0x9, 0x3, 0xfffff000, 0x40000000, 0x7, 0x81, 0x0, 0x5, 0x10, 0x100, 0x3e, 0xc, 0x400, 0x4, 0x6, 0x7, 0x2, 0xb, 0x7, 0x4, 0x4, 0xfffffffe, 0xc, 0x400, 0x2, 0x6, 0x7, 0x971, 0x0, 0x6, 0x3, 0xa46a, 0x8, 0x23, 0x2, 0x8, 0x7fff, 0x8, 0x1, 0x557, 0x2, 0x3ff, 0x3ff, 0x2, 0x1, 0x400001, 0x5c, 0x6, 0x1ff, 0x9, 0xb, 0x6, 0x0, 0x7ff, 0x868f, 0x9, 0xffffffff, 0x0, 0xfffffffe, 0x100, 0x40, 0x6c8, 0x8, 0x4, 0x4, 0x4, 0x81, 0xdf, 0x8, 0x4, 0x6, 0x4, 0xc59e, 0x9, 0x891a, 0x4, 0x1, 0x67a, 0x5, 0xaa, 0x2, 0x9, 0x4, 0x5, 0x2, 0xfff, 0x9, 0x4533afbb, 0xd, 0x0, 0x593c, 0x1, 0x1, 0x55aa77c9, 0x56a, 0xa, 0x8, 0x200, 0x3e, 0x5, 0x6, 0x1000, 0xa, 0x5, 0x6, 0x4, 0x1ff, 0x40, 0x2, 0x5dff, 0xfffffffe, 0x8, 0x1, 0x4, 0x7, 0x1ff, 0x101, 0xffff, 0x12, 0x9, 0xfffffffc, 0x7e94, 0x6, 0xca55, 0x2, 0x5, 0x3ff, 0x8, 0x4, 0x80000000, 0x3, 0x1, 0x7, 0x4, 0x2, 0x8, 0x16, 0x1]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0xb3538085985bb3d6}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001c80)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x4098884, &(0x7f0000001780)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r2, &(0x7f00000017c0), 0x3000, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2000) r13 = socket$inet(0xa, 0x801, 0x84) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r13, 0x84, 0x13, 0x0, &(0x7f0000000700)) 1m9.106119675s ago: executing program 0 (id=25): r0 = socket$inet_sctp(0x2, 0x5, 0x84) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000340)=0x9, 0x8, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000680)='./proc\x00', &(0x7f00000006c0)='proc\x00', 0x4000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) msync(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x0, 0x0, 0x0, 0x5, 0x1}]}}, &(0x7f0000000800)=""/4089, 0x26, 0xff9, 0x1}, 0x28) r1 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) process_vm_writev(r1, &(0x7f0000000380)=[{&(0x7f00000003c0)=""/156, 0x9c}], 0x1, &(0x7f0000000480)=[{&(0x7f00000004c0)=""/116, 0x20001c34}], 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001840)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000001880)='./proc\x00', &(0x7f00000018c0)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000001900)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000001940)='27', 0x2) umount2(0x0, 0x1) r3 = shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000007, 0x20031, 0xffffffffffffffff, 0xffffe000) mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x8, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) listen(r0, 0x8) shutdown(r0, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r4, &(0x7f00000001c0)={0x24, @short={0x2, 0xffff, 0x1}}, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000054000104000000000000000007000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="010000c6fe80000000000000000000000000002b86dd"], 0x38}}, 0x0) syz_ublk_setup_io_uring(0x60b6, &(0x7f0000000000)={0x0, 0xf77a, 0x1000, 0x5, 0x52}, &(0x7f0000000080), &(0x7f0000000140), &(0x7f0000000180)) syz_open_dev$usbmon(&(0x7f0000000540), 0x0, 0x0) 1m8.65629908s ago: executing program 1 (id=27): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffe}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x24}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x4}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x12}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x3f42, 0xa000, 0x0, 0x51, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}}}}) 1m8.486536332s ago: executing program 0 (id=28): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') read$FUSE(r1, &(0x7f0000003380)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) setpgid(0x0, r3) r4 = openat$btrfs_control(0xffffff9c, &(0x7f0000000040), 0x125400, 0x0) r5 = openat$hwrng(0xffffff9c, &(0x7f0000000080), 0x4183, 0x0) kcmp$KCMP_EPOLL_TFD(r3, r2, 0x7, r4, &(0x7f00000000c0)={r1, r5, 0x3}) 1m8.411350165s ago: executing program 1 (id=30): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x3000) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x40020) r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000000200), 0x6f5, 0x2000000022, &(0x7f0000000240)={0x77359400}) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) syz_usb_connect$uac1(0x0, 0x72, &(0x7f0000000340)=ANY=[@ANYBLOB="1201100300000020050b391740000102030109026000030102d0090904000000010100000a240101000a0002010209040100000102000009040101010102000009050109ff030908040725010001070009040200000102000009040201010102000015f835b9000207000707250104080800"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x8, &(0x7f0000000300)=ANY=[@ANYRESDEC=r0]}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x446}}]}) write(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x4f, 0x4e) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/partitions\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000580)={0x2020}, 0x202d) syz_open_procfs(0x0, &(0x7f00000025c0)='net/ip6_tables_matches\x00') mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000003, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000002600)={0xaa, 0x6e7}) munmap(&(0x7f0000c75000/0x4000)=nil, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x28f41000) creat(&(0x7f0000002680)='./file0\x00', 0x12c) syz_open_dev$vcsu(&(0x7f00000026c0), 0x1, 0x2242) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002880)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000eac12b115519040000000daa164027d6e553a94efe7c040a5f880d0f7682e082bb5d0f441a5d4d062c1f525a42a55dc0788d4fb7737634065facbb67ae91585d293f95e7a855cf13849de461781b664a426927f728d2c91a51faccfc10348b47b2513c136eca6c1bb356bd6abac8408a3c65511aa857777a39abcf61", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="feffffff00000000000400"/28], 0x50) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1m6.419980979s ago: executing program 1 (id=41): setns(0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x7, 0x4, 0x18, 0x1, 0x80800}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000ff070000ade25600ae00000018010000596c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ff7ade82e642ea5c740000b70300000000000085000000720000009500000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x9, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f00000005c0)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000640)={r1}, 0xc) r2 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1a1}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) syz_clone(0x62000000, 0x0, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4c840) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000005c0)='net/ipv6_route\x00') pread64(r4, &(0x7f0000002100)=""/4096, 0x1000, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x22f}) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, 0x0, 0x4011) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) 1m3.847022318s ago: executing program 1 (id=45): r0 = socket$inet_sctp(0x2, 0x5, 0x84) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000340)=0x9, 0x8, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000680)='./proc\x00', &(0x7f00000006c0)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000740)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x0, 0x0, 0x0, 0x5, 0x1}]}}, &(0x7f0000000800)=""/4089, 0x26, 0xff9, 0x1}, 0x28) r2 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) process_vm_writev(r2, &(0x7f0000000380)=[{&(0x7f00000003c0)=""/156, 0x9c}], 0x1, &(0x7f0000000480)=[{&(0x7f00000004c0)=""/116, 0x20001c34}], 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001840)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000001880)='./proc\x00', &(0x7f00000018c0)='proc\x00', 0x4000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000001900)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000001940)='27', 0x2) umount2(0x0, 0x1) r4 = shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000007, 0x20031, 0xffffffffffffffff, 0xffffe000) mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x8, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) listen(r0, 0x8) shutdown(r0, 0x0) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r5, &(0x7f00000001c0)={0x24, @short={0x2, 0xffff, 0x1}}, 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000054000104000000000000000007000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="010000c6fe80000000000000000000000000002b86dd"], 0x38}}, 0x0) syz_ublk_setup_io_uring(0x60b6, &(0x7f0000000000)={0x0, 0xf77a, 0x1000, 0x5, 0x52}, &(0x7f0000000080), &(0x7f0000000140), &(0x7f0000000180)) syz_open_dev$usbmon(&(0x7f0000000540), 0x0, 0x0) 1m3.483026019s ago: executing program 1 (id=46): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x3000) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x40020) r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000000200), 0x6f5, 0x2000000022, &(0x7f0000000240)={0x77359400}) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) syz_usb_connect$uac1(0x0, 0x72, &(0x7f0000000340)=ANY=[@ANYBLOB="1201100300000020050b391740000102030109026000030102d0090904000000010100000a240101000a0002010209040100000102000009040101010102000009050109ff030908040725010001070009040200000102000009040201010102000015f835b9000207000707250104080800"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x8, &(0x7f0000000300)=ANY=[@ANYRESDEC=r0]}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x446}}]}) write(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x4f, 0x4e) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/partitions\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000580)={0x2020}, 0x202d) syz_open_procfs(0x0, &(0x7f00000025c0)='net/ip6_tables_matches\x00') mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000003, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000002600)={0xaa, 0x6e7}) munmap(&(0x7f0000c75000/0x4000)=nil, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x28f41000) creat(&(0x7f0000002680)='./file0\x00', 0x12c) r2 = syz_open_dev$vcsu(&(0x7f00000026c0), 0x1, 0x2242) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002880)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000eac12b115519040000000daa164027d6e553a94efe7c040a5f880d0f7682e082bb5d0f441a5d4d062c1f525a42a55dc0788d4fb7737634065facbb67ae91585d293f95e7a855cf13849de461781b664a426927f728d2c91a51faccfc10348b47b2513c136eca6c1bb356bd6abac8408a3c65511aa857777a39abcf61", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="feffffff00000000000400"/28], 0x50) mbind(&(0x7f0000d5b000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x0, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(r3, r3) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f00000000c0)={0x3, 0xb}, 0x2) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES32=r2], 0x14}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000080) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1m1.228033076s ago: executing program 3 (id=50): r0 = openat2$dir(0xffffff9c, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)={0x12000, 0x6, 0x4}, 0x18) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x178) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800040, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1a7) setxattr$incfs_metadata(&(0x7f0000000200)='./mnt\x00', &(0x7f0000000240), &(0x7f0000001240)="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", 0xf7d, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000340)={0xb, 0x77, 0x2, 0xa874}, 0xb) r1 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x104085280, 0x0, 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = openat$nvme_fabrics(0xffffff9c, 0x0, 0x80081, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r3 = socket$inet6(0xa, 0x800, 0x0) listen(r3, 0x50) socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000380)="5782db1355c922572494350621b3af6cef992290a492b7106abf463bd69554f04fb981b0a2127a74da21d8b88a00a9dd19f8ea603e58cbaa24aac3a2e47be127efe927b43b277c487e4841841c6d6398d1399959679fb2f12b057227d9eca4776ac07bae850958c775f90b60d928579722a6cfd637a139a499009c3d16dad9d93612bbdd68b73b987a57b7447719c4ed5c433b578e1686c868d875ac3ea987b7d87b08b4afc70e47fd45291e6553744756db0e675b33ef89"}], 0x33) faccessat2(r2, &(0x7f0000000280)='./file0\x00', 0x100, 0x280) readlinkat(r0, &(0x7f00000001c0)='./dev/mapper/control\x00', &(0x7f0000000200)=""/90, 0x5a) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141902) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r5, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000074") ioctl(r5, 0xc138fd09, &(0x7f0000000000)="040000000000000000000000a00100003801000001") 1m0.731680901s ago: executing program 3 (id=52): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$dm_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x400, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x6020400) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000300)) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1d0000000400000008000000000000000100"/48, @ANYRES32=r2, @ANYBLOB="0100000002"], 0x40) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000400)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) ioctl$KVM_RUN(r6, 0xae80, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, 0x0, 0x0}, 0x20) ioctl$DM_DEV_CREATE(r1, 0xc138fd03, &(0x7f00000005c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x8da10, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}}}) ioctl$DM_TABLE_LOAD(r1, 0xc138fd09, &(0x7f0000000000)={0x4, 0x0, 0x0, 0x1c8, 0x138, 0x1, 0x0, 0x1e00, 0x0, 0x0, @by_dev={r7}, [@mirror={0x0, 0x800, 0x0, 0x90, 'mirror\x00', {'core 2 64 nosync', 0x20, 0x3, [{0x20, {@ram_num={'1:', 0x1}, 0x20, '1024'}}, {0x20, {@rnull={'/dev/syzrnull', 0x0}, 0x20, '8'}}, {0x20, {@rnull={'/dev/syzrnull', 0x0}, 0x20, '16'}}]}}]}) 1m0.453279512s ago: executing program 3 (id=53): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x169802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = landlock_create_ruleset(&(0x7f00000000c0)={0x4000, 0x3}, 0x18, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r3, &(0x7f0000000200)='7', 0x1) landlock_restrict_self(r2, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000040)=0x1000000010) ioctl$BLKRRPART(r1, 0x125f, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$sock(r4, &(0x7f00000044c0), 0x4000000000001c0, 0x0) 1m0.352177926s ago: executing program 3 (id=54): r0 = socket(0x2, 0x3, 0x66) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='bridge0\x00', 0x52c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000b00)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000b80)={0xffffffffffffffff, 0x58, &(0x7f0000000bc0)}, 0x10) r1 = io_uring_setup(0x1b7b, &(0x7f0000000c40)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0x0, 0x0, &(0x7f0000000d80)='syzkaller\x00', 0x0, 0xfffffffffffffee9, 0x0, 0x0, 0x4d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r1, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) sendto$unix(r0, 0x0, 0x0, 0x40, &(0x7f0000000800)=@abs={0x0, 0x7, 0x6a0010de}, 0x6e) r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x4066f, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f00000000c0)={0x0, 0x1000000a, 0x3010}) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="20000000111409002cbd7000fddbdf2508000100000000000800030001000000afe19b6a58b645b3cc2882d64c63f434d0647d92e243b662559f133f0539189043bb052bacafad815cb3165252abe3cfa76b5df47c33dd311abeb2816b71768856726a0288bd6d51e3dd2477151df81dced17ff3d57365c4e1fdfdc5c213fae0b4ddd16b13808eb86a4708dc3e60e67711a1f036a4d1b000000000000000000000aed28470ffc449bd8b43c4df845dad2c15bf"], 0x20}}, 0x4000004) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e00000900000000040000000008000000000000b27ffa5ac16599b0c9334ff86f88489de72f702d6f3671c8", @ANYRES32, @ANYBLOB="00008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1800009ec0750000000000400000000018110000e96f268a6bd30443", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000000085000000330000009500000000000000"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) copy_file_range(r5, &(0x7f0000000680)=0x1, r2, &(0x7f00000006c0)=0x6, 0x6, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000700)=ANY=[@ANYBLOB="5800000010000104000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb6f31a24001280110001006272696467655f736c61d81085a000000c0005800500080001000000140003006272696467655f736c6176655f300000"], 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r7, &(0x7f0000000880)={0x0, 0xffa6, &(0x7f00000008c0)={&(0x7f0000000900)={0x30, r8, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {0xa1ffffff, 0x3}, {0x14, 0x19, {0x5, 0x1000, 0x0, 0x7000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4004018}, 0x44040) setns(0xc9, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r9, 0x0, 0x32, &(0x7f0000000940)=""/2, &(0x7f0000000980)=0x2) r10 = socket$rds(0x15, 0x5, 0x0) bind$rds(r10, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$RDS_GET_MR_FOR_DEST(r10, 0x114, 0x7, &(0x7f0000000140)={@nfc={0x27, 0x0, 0x1, 0x3}, {0x0, 0x3d}, 0x0, 0x2c}, 0xa0) 1m0.013064713s ago: executing program 3 (id=55): r0 = socket$inet_sctp(0x2, 0x5, 0x84) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000340)=0x9, 0x8, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000680)='./proc\x00', &(0x7f00000006c0)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000740)='27', 0x2) msync(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x0, 0x0, 0x0, 0x5, 0x1}]}}, &(0x7f0000000800)=""/4089, 0x26, 0xff9, 0x1}, 0x28) r2 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) process_vm_writev(r2, &(0x7f0000000380)=[{&(0x7f00000003c0)=""/156, 0x9c}], 0x1, &(0x7f0000000480)=[{&(0x7f00000004c0)=""/116, 0x20001c34}], 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001840)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000001880)='./proc\x00', &(0x7f00000018c0)='proc\x00', 0x4000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000001900)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000001940)='27', 0x2) umount2(0x0, 0x1) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000007, 0x20031, 0xffffffffffffffff, 0xffffe000) mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x8, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) listen(r0, 0x8) shutdown(r0, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r4, &(0x7f00000001c0)={0x24, @short={0x2, 0xffff, 0x1}}, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000054000104000000000000000007000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="010000c6fe80000000000000000000000000002b86dd"], 0x38}}, 0x0) syz_ublk_setup_io_uring(0x60b6, &(0x7f0000000000)={0x0, 0xf77a, 0x1000, 0x5, 0x52}, &(0x7f0000000080), &(0x7f0000000140), &(0x7f0000000180)) syz_open_dev$usbmon(&(0x7f0000000540), 0x0, 0x0) 59.640901299s ago: executing program 3 (id=58): socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4000000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000020000140012800b0001006272696467650000040030800a000100aaaaaaaaaa100000a21f0eedcbf5c61065146487714d0adeec3d00cab262298c265c85856855641d5b8d9f9a33ad7d4696b7ca2f5f886bc82245c0ebe87a2e2d5b87aecdab3854fdede7bc69002b0159e6f0ae6257b89cc6032d392e3453a6733a7faf4b5c7874016b135f2c1afb8b3a5b89fc3a265dd183d8cbf88f27db5aed1b4c608b12f55a80c85509b43e9abcb882ac89e79fd41c974a108ff3dc591396c727b7786e8f3d"], 0x40}}, 0x8004) mq_timedsend(0xffffffffffffffff, &(0x7f00000000c0)="a957edb40ad2e72cc155bafd26502c62d53e7ac060707875b500a367b4eec37b8b832d9e4b1b86fead40c0948f2af8e4290a3bfb317a2c00a55e42ed037b11c3d85252b4cf33bd125013f8f0fa714df2d838dfc2de82425ea7df617f8ae801f0fb10c6431f90ab5c12e42b56f7f3cd7ea0ab471526db3c16513508b298fe873e", 0x80, 0xed5, &(0x7f0000000140)={0x77359400}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/packet\x00') ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x28) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000080)=r1, 0x4) r2 = socket$l2tp6(0xa, 0x2, 0x73) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mount(&(0x7f0000000300)=@nullb, &(0x7f0000000340)='.\x00', &(0x7f0000000380)='ntfs3\x00', 0x1000080, 0x0) sendmmsg$unix(r4, &(0x7f0000000440), 0x318, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x10106, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500), 0x0, 0x3c, 0x9) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc04c565d, &(0x7f0000000540)=@multiplanar_userptr={0x1ff, 0xa, 0x4, 0x10000, 0x40, {0x77359400}, {0x1, 0x2, 0x96, 0xa, 0x3, 0x3, "b90d5ac7"}, 0x1ff, 0x2, {0x0}, 0x9ad9}) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x200000, 0x2) bind$l2tp6(r2, &(0x7f00000005c0)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) mkdir(0x0, 0x1ff) mount(0x0, &(0x7f0000000600)='dir0\x00', 0x0, 0x0, 0x0) r7 = openat$mice(0xffffff9c, &(0x7f0000000640), 0x800) getsockopt$inet_mreqn(r5, 0x0, 0x24, &(0x7f0000000680)={@multicast1, @multicast1, 0x0}, &(0x7f00000006c0)=0xc) r9 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000700)='bpf_lsm_inode_unlink\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000004000000000000007f5bc57fa29694ab", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000a506e0ff04000000950000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f00000008c0)='GPL\x00', 0x8, 0xc2, &(0x7f0000000900)=""/194, 0x41100, 0x4, '\x00', r8, @fallback=0x33, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000a40)={0x4, 0xc, 0x7, 0x3}, 0x10, r9, 0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000a80)=[{0x1, 0x2, 0x1, 0x2}, {0x2, 0x4, 0x10, 0x2}, {0x4, 0x3, 0xb, 0x2}, {0x3, 0x5, 0xe, 0xa}], 0x10, 0x5}, 0x94) ioctl$SNDRV_PCM_IOCTL_XRUN(r7, 0x4148, 0x0) write$binfmt_format(0xffffffffffffffff, &(0x7f0000000ac0)='1\x00', 0x2) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) 52.848576136s ago: executing program 32 (id=28): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') read$FUSE(r1, &(0x7f0000003380)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) setpgid(0x0, r3) r4 = openat$btrfs_control(0xffffff9c, &(0x7f0000000040), 0x125400, 0x0) r5 = openat$hwrng(0xffffff9c, &(0x7f0000000080), 0x4183, 0x0) kcmp$KCMP_EPOLL_TFD(r3, r2, 0x7, r4, &(0x7f00000000c0)={r1, r5, 0x3}) 48.292294018s ago: executing program 33 (id=46): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x3000) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x40020) r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000000200), 0x6f5, 0x2000000022, &(0x7f0000000240)={0x77359400}) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) syz_usb_connect$uac1(0x0, 0x72, &(0x7f0000000340)=ANY=[@ANYBLOB="1201100300000020050b391740000102030109026000030102d0090904000000010100000a240101000a0002010209040100000102000009040101010102000009050109ff030908040725010001070009040200000102000009040201010102000015f835b9000207000707250104080800"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x8, &(0x7f0000000300)=ANY=[@ANYRESDEC=r0]}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x446}}]}) write(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x4f, 0x4e) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/partitions\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000580)={0x2020}, 0x202d) syz_open_procfs(0x0, &(0x7f00000025c0)='net/ip6_tables_matches\x00') mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000003, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000002600)={0xaa, 0x6e7}) munmap(&(0x7f0000c75000/0x4000)=nil, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x28f41000) creat(&(0x7f0000002680)='./file0\x00', 0x12c) r2 = syz_open_dev$vcsu(&(0x7f00000026c0), 0x1, 0x2242) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002880)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000eac12b115519040000000daa164027d6e553a94efe7c040a5f880d0f7682e082bb5d0f441a5d4d062c1f525a42a55dc0788d4fb7737634065facbb67ae91585d293f95e7a855cf13849de461781b664a426927f728d2c91a51faccfc10348b47b2513c136eca6c1bb356bd6abac8408a3c65511aa857777a39abcf61", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="feffffff00000000000400"/28], 0x50) mbind(&(0x7f0000d5b000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x0, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(r3, r3) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f00000000c0)={0x3, 0xb}, 0x2) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES32=r2], 0x14}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000080) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 44.570462371s ago: executing program 34 (id=58): socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4000000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000020000140012800b0001006272696467650000040030800a000100aaaaaaaaaa100000a21f0eedcbf5c61065146487714d0adeec3d00cab262298c265c85856855641d5b8d9f9a33ad7d4696b7ca2f5f886bc82245c0ebe87a2e2d5b87aecdab3854fdede7bc69002b0159e6f0ae6257b89cc6032d392e3453a6733a7faf4b5c7874016b135f2c1afb8b3a5b89fc3a265dd183d8cbf88f27db5aed1b4c608b12f55a80c85509b43e9abcb882ac89e79fd41c974a108ff3dc591396c727b7786e8f3d"], 0x40}}, 0x8004) mq_timedsend(0xffffffffffffffff, &(0x7f00000000c0)="a957edb40ad2e72cc155bafd26502c62d53e7ac060707875b500a367b4eec37b8b832d9e4b1b86fead40c0948f2af8e4290a3bfb317a2c00a55e42ed037b11c3d85252b4cf33bd125013f8f0fa714df2d838dfc2de82425ea7df617f8ae801f0fb10c6431f90ab5c12e42b56f7f3cd7ea0ab471526db3c16513508b298fe873e", 0x80, 0xed5, &(0x7f0000000140)={0x77359400}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/packet\x00') ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x28) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000080)=r1, 0x4) r2 = socket$l2tp6(0xa, 0x2, 0x73) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mount(&(0x7f0000000300)=@nullb, &(0x7f0000000340)='.\x00', &(0x7f0000000380)='ntfs3\x00', 0x1000080, 0x0) sendmmsg$unix(r4, &(0x7f0000000440), 0x318, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x10106, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500), 0x0, 0x3c, 0x9) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc04c565d, &(0x7f0000000540)=@multiplanar_userptr={0x1ff, 0xa, 0x4, 0x10000, 0x40, {0x77359400}, {0x1, 0x2, 0x96, 0xa, 0x3, 0x3, "b90d5ac7"}, 0x1ff, 0x2, {0x0}, 0x9ad9}) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x200000, 0x2) bind$l2tp6(r2, &(0x7f00000005c0)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) mkdir(0x0, 0x1ff) mount(0x0, &(0x7f0000000600)='dir0\x00', 0x0, 0x0, 0x0) r7 = openat$mice(0xffffff9c, &(0x7f0000000640), 0x800) getsockopt$inet_mreqn(r5, 0x0, 0x24, &(0x7f0000000680)={@multicast1, @multicast1, 0x0}, &(0x7f00000006c0)=0xc) r9 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000700)='bpf_lsm_inode_unlink\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000004000000000000007f5bc57fa29694ab", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000a506e0ff04000000950000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f00000008c0)='GPL\x00', 0x8, 0xc2, &(0x7f0000000900)=""/194, 0x41100, 0x4, '\x00', r8, @fallback=0x33, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000a40)={0x4, 0xc, 0x7, 0x3}, 0x10, r9, 0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000a80)=[{0x1, 0x2, 0x1, 0x2}, {0x2, 0x4, 0x10, 0x2}, {0x4, 0x3, 0xb, 0x2}, {0x3, 0x5, 0xe, 0xa}], 0x10, 0x5}, 0x94) ioctl$SNDRV_PCM_IOCTL_XRUN(r7, 0x4148, 0x0) write$binfmt_format(0xffffffffffffffff, &(0x7f0000000ac0)='1\x00', 0x2) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) 40.552594792s ago: executing program 5 (id=134): openat2$dir(0xffffff9c, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)={0x12000, 0x6, 0x4}, 0x18) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x178) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800040, 0x0) setxattr$incfs_metadata(&(0x7f0000000200)='./mnt\x00', &(0x7f0000000240), &(0x7f0000001240)="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", 0xf7d, 0x0) 40.4830549s ago: executing program 5 (id=135): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000540)="b9ff03076804268c989e14f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 40.482892878s ago: executing program 5 (id=136): socketpair$unix(0x1, 0x2, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000280)=""/194, 0xc2, 0xfffffff8) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x801c0, 0x189) fcntl$setsig(r0, 0xa, 0x21) r1 = syz_open_dev$dvb_demux(&(0x7f0000000000), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000040)={0x2, 0x1, 0x3, 0x14, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r1, 0x40026f33, &(0x7f0000000080)=0x312) ioctl$SNDCTL_SEQ_CTRLRATE(r0, 0xc0045103, &(0x7f00000000c0)=0x8) fcntl$setlease(r0, 0x400, 0x0) r2 = creat(&(0x7f0000000400)='./file0\x00', 0x8) close_range(r0, r2, 0x0) 40.312650053s ago: executing program 5 (id=139): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYRESHEX], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$RTC_WKALM_RD(r0, 0x80287010, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f00000003c0)=@ethtool_flash={0x33, 0x7, './file0\x00'}}) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xc, 0xe, 0x0, &(0x7f0000001280)='syzkaller\x00'}, 0x94) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@getnexthop={0x28, 0x6a, 0x501, 0xfffffdfe, 0x25dfdbff, {}, [@NHA_OIF={0x8}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000300)='/dev/comedi2\x00', 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001400038010"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000500), 0x8000, &(0x7f0000000900)=ANY=[@ANYBLOB='quota']) r4 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./file1\x00', 0x250942, 0x50) quotactl_fd$Q_GETNEXTQUOTA(r4, 0xffffffff80000900, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000600)={'pcl816\x00', [0x140, 0x2, 0x3, 0x2, 0x2, 0x10000, 0x7ffd, 0x6, 0x1007, 0xc72d, 0x4, 0x10, 0xadd2, 0x8, 0x4ce, 0x9e9b, 0x101, 0x3, 0x6, 0x8, 0x4, 0x0, 0xa, 0x9, 0xffd, 0x200000, 0xaf, 0x0, 0x9, 0x0, 0x4]}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'vxcan0\x00'}) 39.430955231s ago: executing program 5 (id=145): r0 = socket$inet_sctp(0x2, 0x5, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000680)='./proc\x00', &(0x7f00000006c0)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000740)='27', 0x2) msync(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x0, 0x0, 0x0, 0x5, 0x1}]}}, &(0x7f0000000800)=""/4089, 0x26, 0xff9, 0x1}, 0x28) r2 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) process_vm_writev(r2, &(0x7f0000000380)=[{&(0x7f00000003c0)=""/156, 0x9c}], 0x1, &(0x7f0000000480)=[{&(0x7f00000004c0)=""/116, 0x20001c34}], 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001840)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000001880)='./proc\x00', &(0x7f00000018c0)='proc\x00', 0x4000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000001900)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000001940)='27', 0x2) umount2(0x0, 0x1) r4 = shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000007, 0x20031, 0xffffffffffffffff, 0xffffe000) mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x8, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) listen(r0, 0x8) shutdown(r0, 0x0) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r5, &(0x7f00000001c0)={0x24, @short={0x2, 0xffff, 0x1}}, 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000054000104000000000000000007000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="010000c6fe80000000000000000000000000002b86dd"], 0x38}}, 0x0) syz_ublk_setup_io_uring(0x60b6, &(0x7f0000000000)={0x0, 0xf77a, 0x1000, 0x5, 0x52}, &(0x7f0000000080), &(0x7f0000000140), &(0x7f0000000180)) syz_open_dev$usbmon(&(0x7f0000000540), 0x0, 0x0) 39.154530978s ago: executing program 5 (id=150): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000540)="b9ff03076804268c989e14f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 34.520672396s ago: executing program 4 (id=190): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000100ffff0000000000000000850000000e0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000700000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x14, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 34.412759699s ago: executing program 4 (id=191): r0 = syz_open_dev$dvb_demux(&(0x7f0000000000), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000040)={0x2, 0x1, 0x3, 0x14, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r0, 0x40026f33, &(0x7f0000000080)=0x312) 34.361362108s ago: executing program 4 (id=192): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140), 0x7, 0x448000) openat$sndseq(0xffffffffffffff9c, 0x0, 0x109400) bind$alg(0xffffffffffffffff, 0x0, 0x0) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x8, @remote, 0x4e, 0x4}, 0x20) ioctl$FE_DISEQC_RECV_SLAVE_REPLY(0xffffffffffffffff, 0x800c6f40, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x107002, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x101800, 0x0) syz_open_procfs(0x0, &(0x7f0000000300)='fd/3\x00') r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f00000001c0)=0x8b, 0x100000500) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000440)={r0, &(0x7f0000000500)=']\x00', 0x202000, &(0x7f0000000680)={@align=0x5, {0x1f4, 0x8, 0x2, 0x5}}, 0x1, &(0x7f00000006c0)={@_ha_fsid}, &(0x7f0000000700)=0x9}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000740)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x5}, {0xffff, 0xffff}, {0x4, 0x4}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xfffffd70, 0x2, {0x0, 0x1003}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80d1}, 0x10000000) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000840)={0x2, 0x4e21, @local}, 0x10) connect$inet(r4, &(0x7f0000000880)={0x2, 0x4e21, @local}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000008c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x800, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x800) r7 = syz_open_dev$vim2m(0x0, 0x3ff, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r7, 0xc0d05640, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r8 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r8, 0x9) 33.667731034s ago: executing program 4 (id=196): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001700)={'macvlan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001740)={'batadv0\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28eeff00000a0101000000005e1affd5020000000900010073797a300000000008000240000400032c000000020000000900010073797a30000000000900030073797a320000000014000000110001d75dd5f54408f426b2a9fe64555d8fd0abaccbfedbf0f020ce58014ef724f95b00de9b57ff83382f424f158b6771e0110d2a898764be4f254501c73a23215656b8a0a0222d24937725114fec000000000000000000000000c07526e4f416b5a285a68200db40a23fde0b3c5c", @ANYBLOB="6eae17a94825348510d312b663f1f2b4346e4c7368e57cc19216f8197cb4485cc61265a17f0b7779084b9ff7660a3f8de7ac2af7faa14e8aa5bc3d4bf90567c9fe2bc74f0808e83e5bd48c5f24a76bd314d8cd255a92cb6a81b3aa23e8295cee6c786e87c1f4d7cf95d4f85d763483820d2f24e4d6322b7eadff94167dac68f98a6b449f9518c76dfd50ed40d19e6dd7af1dfd544997d014b40236d3dc0076410691869a7a922f7eb2633f86b71c7eef87e2e390e21c0085ac6277bbddfc2c3ccc8c2ecaa8df013369e71bf4ff9ea65e7ef46b00a984e5824fdc97d48d7d0de2c65b5676ce27c5dc57a4495b", @ANYBLOB="f6d06f7bc8309d82c86568f1980b7319610f3f341f614bf073ea4abecb448baf95d166bd9144", @ANYRES16=0x0, @ANYBLOB="454742a719bedc15dd32845ce644c75b7381fb8bf35c4083ac2e203a51793ae95da464d7d00061ca42898804129b7baa8d737f180c41288017b99ab2b4dd817037fd13fe21f6be547e50efbbb06f9db0b0e3f00357e5ae733014ccede4af5346fc30d7d2148dd00960977aa34d47a68eb077659b3e84114b1dc25bc652b1f0d821545e9a50a4e5f0dc", @ANYRES8=r0], 0x7c}, 0x1, 0x0, 0x0, 0x20044801}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001800)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 33.572436532s ago: executing program 4 (id=197): mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000340)=0x9, 0x8, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000680)='./proc\x00', &(0x7f00000006c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000740)='27', 0x2) msync(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x0, 0x0, 0x0, 0x5, 0x1}]}}, &(0x7f0000000800)=""/4089, 0x26, 0xff9, 0x1}, 0x28) r1 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) process_vm_writev(r1, &(0x7f0000000380)=[{&(0x7f00000003c0)=""/156, 0x9c}], 0x1, &(0x7f0000000480)=[{&(0x7f00000004c0)=""/116, 0x20001c34}], 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001840)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000001880)='./proc\x00', &(0x7f00000018c0)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000001900)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000001940)='27', 0x2) umount2(0x0, 0x1) r3 = shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000007, 0x20031, 0xffffffffffffffff, 0xffffe000) mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x8, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x8) shutdown(0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r4, &(0x7f00000001c0)={0x24, @short={0x2, 0xffff, 0x1}}, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000054000104000000000000000007000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="010000c6fe80000000000000000000000000002b86dd"], 0x38}}, 0x0) syz_ublk_setup_io_uring(0x60b6, &(0x7f0000000000)={0x0, 0xf77a, 0x1000, 0x5, 0x52}, &(0x7f0000000080), &(0x7f0000000140), &(0x7f0000000180)) syz_open_dev$usbmon(&(0x7f0000000540), 0x0, 0x0) 33.353601143s ago: executing program 4 (id=198): r0 = socket(0x2, 0x3, 0x66) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='bridge0\x00', 0x52c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000b00)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000b80)={0xffffffffffffffff, 0x58, &(0x7f0000000bc0)}, 0x10) r1 = io_uring_setup(0x1b7b, &(0x7f0000000c40)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0x0, 0x0, &(0x7f0000000d80)='syzkaller\x00', 0x0, 0xfffffffffffffee9, 0x0, 0x0, 0x4d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r1, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) sendto$unix(r0, 0x0, 0x0, 0x40, &(0x7f0000000800)=@abs={0x0, 0x7, 0x6a0010de}, 0x6e) r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x4066f, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f00000000c0)={0x0, 0x1000000a, 0x3010}) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="20000000111409002cbd7000fddbdf2508000100000000000800030001000000afe19b6a58b645b3cc2882d64c63f434d0647d92e243b662559f133f0539189043bb052bacafad815cb3165252abe3cfa76b5df47c33dd311abeb2816b71768856726a0288bd6d51e3dd2477151df81dced17ff3d57365c4e1fdfdc5c213fae0b4ddd16b13808eb86a4708dc3e60e67711a1f036a4d1b000000000000000000000aed28470ffc449bd8b43c4df845dad2c15bf"], 0x20}}, 0x4000004) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e00000900000000040000000008000000000000b27ffa5ac16599b0c9334ff86f88489de72f702d6f3671c8", @ANYRES32, @ANYBLOB="00008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1800009ec0750000000000400000000018110000e96f268a6bd30443", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000000085000000330000009500000000000000"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) copy_file_range(r5, &(0x7f0000000680)=0x1, r2, &(0x7f00000006c0)=0x6, 0x6, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000700)=ANY=[@ANYBLOB="5800000010000104000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb6f31a24001280110001006272696467655f736c61d81085a000000c0005800500080001000000140003006272696467655f736c6176655f300000"], 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r7, &(0x7f0000000880)={0x0, 0xffa6, &(0x7f00000008c0)={&(0x7f0000000900)={0x30, r8, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {0xa1ffffff, 0x3}, {0x14, 0x19, {0x5, 0x1000, 0x0, 0x7000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4004018}, 0x44040) r9 = socket$rds(0x15, 0x5, 0x0) bind$rds(r9, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$RDS_GET_MR_FOR_DEST(r9, 0x114, 0x7, &(0x7f0000000140)={@nfc={0x27, 0x0, 0x1, 0x3}, {0x0, 0x3d}, 0x0, 0x2c}, 0xa0) 28.682757815s ago: executing program 2 (id=223): syz_open_dev$dri(&(0x7f0000000140), 0xabd7, 0x0) 28.622808972s ago: executing program 2 (id=225): mount$tmpfs(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000500), 0x8000, &(0x7f0000000900)=ANY=[@ANYBLOB='quota']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./file1\x00', 0x250942, 0x50) quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000900, 0x0, 0x0) 28.571261747s ago: executing program 2 (id=226): getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, &(0x7f0000000700)) 28.512318067s ago: executing program 2 (id=227): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x400, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, 0x0) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000000)={0x4, 0x0, 0x0, 0x1c8, 0x138, 0x1, 0x0, 0x1e00, 0x0, 0x0, @by_dev, [@mirror={0x0, 0x800, 0x0, 0x90, 'mirror\x00', {'core 2 64 nosync', 0x20, 0x3, [{0x20, {@ram_num={'1:', 0x1}, 0x20, '1024'}}, {0x20, {@rnull={'/dev/syzrnull', 0x0}, 0x20, '8'}}, {0x20, {@rnull={'/dev/syzrnull', 0x0}, 0x20, '16'}}]}}]}) 28.511817011s ago: executing program 2 (id=228): r0 = socket$inet_sctp(0x2, 0x5, 0x84) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000680)='./proc\x00', &(0x7f00000006c0)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000740)='27', 0x2) msync(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x0, 0x0, 0x0, 0x5, 0x1}]}}, &(0x7f0000000800)=""/4089, 0x26, 0xff9, 0x1}, 0x28) r2 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) process_vm_writev(r2, &(0x7f0000000380)=[{&(0x7f00000003c0)=""/156, 0x9c}], 0x1, &(0x7f0000000480)=[{&(0x7f00000004c0)=""/116, 0x20001c34}], 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001840)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000001880)='./proc\x00', &(0x7f00000018c0)='proc\x00', 0x4000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000001900)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000001940)='27', 0x2) umount2(0x0, 0x1) r4 = shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000007, 0x20031, 0xffffffffffffffff, 0xffffe000) mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x8, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) listen(r0, 0x8) shutdown(r0, 0x0) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r5, &(0x7f00000001c0)={0x24, @short={0x2, 0xffff, 0x1}}, 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000054000104000000000000000007000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="010000c6fe80000000000000000000000000002b86dd"], 0x38}}, 0x0) syz_ublk_setup_io_uring(0x60b6, &(0x7f0000000000)={0x0, 0xf77a, 0x1000, 0x5, 0x52}, &(0x7f0000000080), &(0x7f0000000140), &(0x7f0000000180)) syz_open_dev$usbmon(&(0x7f0000000540), 0x0, 0x0) 28.132525418s ago: executing program 2 (id=229): r0 = syz_open_dev$mouse(&(0x7f0000000080), 0x0, 0x2) write$uinput_user_dev(r0, 0x0, 0x0) read$dsp(r0, 0x0, 0x600) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x12d8) 24.701986114s ago: executing program 6 (id=233): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000840)='status\x00') read$FUSE(r0, &(0x7f0000001880)={0x2020}, 0x2020) 24.59010888s ago: executing program 6 (id=234): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140), 0x7, 0x448000) openat$sndseq(0xffffffffffffff9c, 0x0, 0x109400) bind$alg(0xffffffffffffffff, 0x0, 0x0) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x8, @remote, 0x4e, 0x4}, 0x20) ioctl$FE_DISEQC_RECV_SLAVE_REPLY(0xffffffffffffffff, 0x800c6f40, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x107002, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x101800, 0x0) syz_open_procfs(0x0, &(0x7f0000000300)='fd/3\x00') r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f00000001c0)=0x8b, 0x100000500) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000440)={r0, &(0x7f0000000500)=']\x00', 0x202000, &(0x7f0000000680)={@align=0x5, {0x1f4, 0x8, 0x2, 0x5}}, 0x1, &(0x7f00000006c0)={@_ha_fsid}, &(0x7f0000000700)=0x9}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000740)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x5}, {0xffff, 0xffff}, {0x4, 0x4}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xfffffd70, 0x2, {0x0, 0x1003}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80d1}, 0x10000000) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000840)={0x2, 0x4e21, @local}, 0x10) connect$inet(r4, &(0x7f0000000880)={0x2, 0x4e21, @local}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000008c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x800, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x800) r7 = syz_open_dev$vim2m(0x0, 0x3ff, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r7, 0xc0d05640, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000a00)={0x2, 0x4e22, @empty}, 0x10) listen(0xffffffffffffffff, 0x9) 23.833685826s ago: executing program 35 (id=150): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000540)="b9ff03076804268c989e14f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 23.818684783s ago: executing program 6 (id=236): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x400, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, 0x0) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000000)={0x4, 0x0, 0x0, 0x1c8, 0x138, 0x1, 0x0, 0x1e00, 0x0, 0x0, @by_dev, [@mirror={0x0, 0x800, 0x0, 0x90, 'mirror\x00', {'core 2 64 nosync', 0x20, 0x3, [{0x20, {@ram_num={'1:', 0x1}, 0x20, '1024'}}, {0x20, {@rnull={'/dev/syzrnull', 0x0}, 0x20, '8'}}, {0x20, {@rnull={'/dev/syzrnull', 0x0}, 0x20, '16'}}]}}]}) 23.710197842s ago: executing program 6 (id=237): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x3f42, 0xa000, 0x0, 0x51, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}}}}) 23.622890596s ago: executing program 6 (id=238): r0 = socket$inet_sctp(0x2, 0x5, 0x84) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000680)='./proc\x00', &(0x7f00000006c0)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000740)='27', 0x2) msync(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x0, 0x0, 0x0, 0x5, 0x1}]}}, &(0x7f0000000800)=""/4089, 0x26, 0xff9, 0x1}, 0x28) r2 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) process_vm_writev(r2, &(0x7f0000000380)=[{&(0x7f00000003c0)=""/156, 0x9c}], 0x1, &(0x7f0000000480)=[{&(0x7f00000004c0)=""/116, 0x20001c34}], 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001840)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000001880)='./proc\x00', &(0x7f00000018c0)='proc\x00', 0x4000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000001900)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000001940)='27', 0x2) umount2(0x0, 0x1) r4 = shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000007, 0x20031, 0xffffffffffffffff, 0xffffe000) mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x8, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) listen(r0, 0x8) shutdown(r0, 0x0) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r5, &(0x7f00000001c0)={0x24, @short={0x2, 0xffff, 0x1}}, 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000054000104000000000000000007000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="010000c6fe80000000000000000000000000002b86dd"], 0x38}}, 0x0) syz_ublk_setup_io_uring(0x60b6, &(0x7f0000000000)={0x0, 0xf77a, 0x1000, 0x5, 0x52}, &(0x7f0000000080), &(0x7f0000000140), &(0x7f0000000180)) syz_open_dev$usbmon(&(0x7f0000000540), 0x0, 0x0) 23.353964868s ago: executing program 6 (id=239): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001700)={'macvlan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001740)={'batadv0\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28eeff00000a0101000000005e1affd5020000000900010073797a300000000008000240000400032c000000020000000900010073797a30000000000900030073797a320000000014000000110001d75dd5f54408f426b2a9fe64555d8fd0abaccbfedbf0f020ce58014ef724f95b00de9b57ff83382f424f158b6771e0110d2a898764be4f254501c73a23215656b8a0a0222d24937725114fec000000000000000000000000c07526e4f416b5a285a68200db40a23fde0b3c5c", @ANYBLOB="6eae17a94825348510d312b663f1f2b4346e4c7368e57cc19216f8197cb4485cc61265a17f0b7779084b9ff7660a3f8de7ac2af7faa14e8aa5bc3d4bf90567c9fe2bc74f0808e83e5bd48c5f24a76bd314d8cd255a92cb6a81b3aa23e8295cee6c786e87c1f4d7cf95d4f85d763483820d2f24e4d6322b7eadff94167dac68f98a6b449f9518c76dfd50ed40d19e6dd7af1dfd544997d014b40236d3dc0076410691869a7a922f7eb2633f86b71c7eef87e2e390e21c0085ac6277bbddfc2c3ccc8c2ecaa8df013369e71bf4ff9ea65e7ef46b00a984e5824fdc97d48d7d0de2c65b5676ce27c5dc57a4495b", @ANYBLOB="f6d06f7bc8309d82c86568f1980b7319610f3f341f614bf073ea4abecb448baf95d166bd9144", @ANYRES16=0x0, @ANYBLOB="454742a719bedc15dd32845ce644c75b7381fb8bf35c4083ac2e203a51793ae95da464d7d00061ca42898804129b7baa8d737f180c41288017b99ab2b4dd817037fd13fe21f6be547e50efbbb06f9db0b0e3f00357e5ae733014ccede4af5346fc30d7d2148dd00960977aa34d47a68eb077659b3e84114b1dc25bc652b1f0d821545e9a50a4e5f0dc", @ANYRES8=r0], 0x7c}, 0x1, 0x0, 0x0, 0x20044801}, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x3, &(0x7f00000001c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x2, 0xba, &(0x7f0000000240)=""/186, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) syz_emit_ethernet(0x22, &(0x7f0000000380)={@broadcast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @empty, @broadcast}}}}}, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000400)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000480)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000500), 0x400000000000041, 0x0) munmap(&(0x7f0000583000/0x4000)=nil, 0x4000) sched_setaffinity(r4, 0x8, &(0x7f0000000540)=0x2) recvmmsg(r5, &(0x7f0000000580), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f00000005c0)={0x0, 'erspan0\x00', {0x1}, 0x26}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.net/syz1\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0xa, &(0x7f0000000700)=ANY=[@ANYBLOB="18080000d00000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000007608000000c00000180000000000000000000000000000009500000000000000"], &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0xc}, 0x94) mknodat(0xffffffffffffff9c, &(0x7f00000007c0)='./file2\x00', 0x81c0, 0x0) symlink(0x0, &(0x7f0000000800)='./file0/file0\x00') r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000840)='status\x00') read$FUSE(r7, &(0x7f0000001880)={0x2020}, 0x2020) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000038c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000003900)={0xc, 0xd, &(0x7f00000039c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e000000850000000700000095"], &(0x7f0000003a40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001800)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 18.071703432s ago: executing program 36 (id=198): r0 = socket(0x2, 0x3, 0x66) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='bridge0\x00', 0x52c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000b00)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000b80)={0xffffffffffffffff, 0x58, &(0x7f0000000bc0)}, 0x10) r1 = io_uring_setup(0x1b7b, &(0x7f0000000c40)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0x0, 0x0, &(0x7f0000000d80)='syzkaller\x00', 0x0, 0xfffffffffffffee9, 0x0, 0x0, 0x4d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r1, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) sendto$unix(r0, 0x0, 0x0, 0x40, &(0x7f0000000800)=@abs={0x0, 0x7, 0x6a0010de}, 0x6e) r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x4066f, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f00000000c0)={0x0, 0x1000000a, 0x3010}) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="20000000111409002cbd7000fddbdf2508000100000000000800030001000000afe19b6a58b645b3cc2882d64c63f434d0647d92e243b662559f133f0539189043bb052bacafad815cb3165252abe3cfa76b5df47c33dd311abeb2816b71768856726a0288bd6d51e3dd2477151df81dced17ff3d57365c4e1fdfdc5c213fae0b4ddd16b13808eb86a4708dc3e60e67711a1f036a4d1b000000000000000000000aed28470ffc449bd8b43c4df845dad2c15bf"], 0x20}}, 0x4000004) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e00000900000000040000000008000000000000b27ffa5ac16599b0c9334ff86f88489de72f702d6f3671c8", @ANYRES32, @ANYBLOB="00008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1800009ec0750000000000400000000018110000e96f268a6bd30443", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000000085000000330000009500000000000000"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) copy_file_range(r5, &(0x7f0000000680)=0x1, r2, &(0x7f00000006c0)=0x6, 0x6, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000700)=ANY=[@ANYBLOB="5800000010000104000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb6f31a24001280110001006272696467655f736c61d81085a000000c0005800500080001000000140003006272696467655f736c6176655f300000"], 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r7, &(0x7f0000000880)={0x0, 0xffa6, &(0x7f00000008c0)={&(0x7f0000000900)={0x30, r8, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {0xa1ffffff, 0x3}, {0x14, 0x19, {0x5, 0x1000, 0x0, 0x7000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4004018}, 0x44040) r9 = socket$rds(0x15, 0x5, 0x0) bind$rds(r9, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$RDS_GET_MR_FOR_DEST(r9, 0x114, 0x7, &(0x7f0000000140)={@nfc={0x27, 0x0, 0x1, 0x3}, {0x0, 0x3d}, 0x0, 0x2c}, 0xa0) 12.874241425s ago: executing program 37 (id=229): r0 = syz_open_dev$mouse(&(0x7f0000000080), 0x0, 0x2) write$uinput_user_dev(r0, 0x0, 0x0) read$dsp(r0, 0x0, 0x600) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x12d8) 7.037554237s ago: executing program 9 (id=274): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x3000) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x40020) r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000000200), 0x6f5, 0x2000000022, &(0x7f0000000240)={0x77359400}) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) syz_usb_connect$uac1(0x0, 0x72, &(0x7f0000000340)=ANY=[@ANYBLOB="1201100300000020050b391740000102030109026000030102d0090904000000010100000a240101000a0002010209040100000102000009040101010102000009050109ff030908040725010001070009040200000102000009040201010102000015f835b9000207000707250104080800"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x8, &(0x7f0000000300)=ANY=[@ANYRESDEC=r0]}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x446}}]}) write(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x4f, 0x4e) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/partitions\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000580)={0x2020}, 0x202d) syz_open_procfs(0x0, &(0x7f00000025c0)='net/ip6_tables_matches\x00') mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000003, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000002600)={0xaa, 0x6e7}) munmap(&(0x7f0000c75000/0x4000)=nil, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x28f41000) creat(&(0x7f0000002680)='./file0\x00', 0x12c) syz_open_dev$vcsu(&(0x7f00000026c0), 0x1, 0x2242) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002880)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000eac12b115519040000000daa164027d6e553a94efe7c040a5f880d0f7682e082bb5d0f441a5d4d062c1f525a42a55dc0788d4fb7737634065facbb67ae91585d293f95e7a855cf13849de461781b664a426927f728d2c91a51faccfc10348b47b2513c136eca6c1bb356bd6abac8408a3c65511aa857777a39abcf61", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="feffffff00000000000400"/28], 0x50) mbind(&(0x7f0000d5b000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x0, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup2(r2, r2) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f00000000c0)={0x3, 0xb}, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 7.006229448s ago: executing program 38 (id=239): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001700)={'macvlan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001740)={'batadv0\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28eeff00000a0101000000005e1affd5020000000900010073797a300000000008000240000400032c000000020000000900010073797a30000000000900030073797a320000000014000000110001d75dd5f54408f426b2a9fe64555d8fd0abaccbfedbf0f020ce58014ef724f95b00de9b57ff83382f424f158b6771e0110d2a898764be4f254501c73a23215656b8a0a0222d24937725114fec000000000000000000000000c07526e4f416b5a285a68200db40a23fde0b3c5c", @ANYBLOB="6eae17a94825348510d312b663f1f2b4346e4c7368e57cc19216f8197cb4485cc61265a17f0b7779084b9ff7660a3f8de7ac2af7faa14e8aa5bc3d4bf90567c9fe2bc74f0808e83e5bd48c5f24a76bd314d8cd255a92cb6a81b3aa23e8295cee6c786e87c1f4d7cf95d4f85d763483820d2f24e4d6322b7eadff94167dac68f98a6b449f9518c76dfd50ed40d19e6dd7af1dfd544997d014b40236d3dc0076410691869a7a922f7eb2633f86b71c7eef87e2e390e21c0085ac6277bbddfc2c3ccc8c2ecaa8df013369e71bf4ff9ea65e7ef46b00a984e5824fdc97d48d7d0de2c65b5676ce27c5dc57a4495b", @ANYBLOB="f6d06f7bc8309d82c86568f1980b7319610f3f341f614bf073ea4abecb448baf95d166bd9144", @ANYRES16=0x0, @ANYBLOB="454742a719bedc15dd32845ce644c75b7381fb8bf35c4083ac2e203a51793ae95da464d7d00061ca42898804129b7baa8d737f180c41288017b99ab2b4dd817037fd13fe21f6be547e50efbbb06f9db0b0e3f00357e5ae733014ccede4af5346fc30d7d2148dd00960977aa34d47a68eb077659b3e84114b1dc25bc652b1f0d821545e9a50a4e5f0dc", @ANYRES8=r0], 0x7c}, 0x1, 0x0, 0x0, 0x20044801}, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x3, &(0x7f00000001c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x2, 0xba, &(0x7f0000000240)=""/186, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) syz_emit_ethernet(0x22, &(0x7f0000000380)={@broadcast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @empty, @broadcast}}}}}, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000400)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000480)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000500), 0x400000000000041, 0x0) munmap(&(0x7f0000583000/0x4000)=nil, 0x4000) sched_setaffinity(r4, 0x8, &(0x7f0000000540)=0x2) recvmmsg(r5, &(0x7f0000000580), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f00000005c0)={0x0, 'erspan0\x00', {0x1}, 0x26}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.net/syz1\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0xa, &(0x7f0000000700)=ANY=[@ANYBLOB="18080000d00000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000007608000000c00000180000000000000000000000000000009500000000000000"], &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0xc}, 0x94) mknodat(0xffffffffffffff9c, &(0x7f00000007c0)='./file2\x00', 0x81c0, 0x0) symlink(0x0, &(0x7f0000000800)='./file0/file0\x00') r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000840)='status\x00') read$FUSE(r7, &(0x7f0000001880)={0x2020}, 0x2020) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000038c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000003900)={0xc, 0xd, &(0x7f00000039c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e000000850000000700000095"], &(0x7f0000003a40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001800)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 6.762433826s ago: executing program 8 (id=279): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x109200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000066c0)=@filter={'filter\x00', 0x42, 0x4, 0x270, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x1dc, 0x1dc, 0x1dc, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'veth0_to_bridge\x00', 'veth1_to_bond\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x1, {0x2}}}}, {{@uncond, 0x0, 0x70, 0x94}, @REJECT={0x24}}, {{@ip={@broadcast, @remote, 0x0, 0xffff00, 'batadv0\x00', 'bond_slave_1\x00', {}, {0xff}, 0x1231e48dc931f0a2}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x25, 0x1}, {0x0, 0xfc}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x2cc) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000180)=@vmx={0x4, 0x0, 0x2080, {0xffffffffffffffff, 0xffffffffffffffff, {}, 0x0, 0x20000b}}) r4 = dup2(r0, r0) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000000100)=0x7c851034) r5 = socket$nl_generic(0x10, 0x3, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000002200)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000004240)={0x90, 0xffffffffffffffda, r6, {0xfffffffffffffffc, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x100000, {0x2, 0x1, 0x0, 0x0, 0x20000000000007f, 0x5, 0x0, 0xa, 0x0, 0x0, 0x0, r7, r8, 0x3, 0x3}}}, 0x90) fcntl$getown(r3, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000006400)='./sys\x00', 0x1ff) mount(&(0x7f0000006440)=@filename='none\x00', &(0x7f0000006480)='./sys\x00', &(0x7f00000064c0)='sysfs\x00', 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000006500)='./sys/bus/pnp/devices/00:02/driver\x00', 0x0, 0x0) r11 = openat(r10, &(0x7f0000006540)='unbind\x00', 0x1, 0x0) write(r11, &(0x7f0000006580)='00:02\x00', 0x6) r12 = openat(0xffffffffffffff9c, &(0x7f00000065c0)='./sys/bus/pnp/devices/00:02/resources\x00', 0x2, 0x0) write(r12, &(0x7f0000006600)='fill\n\x00', 0x5) write(r12, &(0x7f0000006640)='auto\n\x00', 0x5) write(r12, &(0x7f0000006680)='activate\n\x00', 0x9) pipe2(&(0x7f0000004300)={0xffffffffffffffff}, 0x80000) read$FUSE(r13, &(0x7f0000004340)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) wait4(r15, 0x0, 0x20000000, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000006380)={0x0, 0x0}, &(0x7f00000063c0)=0xc) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f000000a080)=ANY=[@ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="d30000bc24e0f089df991574c6c7252476da2946981bd40632e82b", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="0800ae00060000000400c38000bbd017eee819d03794a8fa26a2ec8f0c5e434e0e0aa0103d65dfcee58a9d7f666e144983e8059062b837aff2b271dea5d3a79e7f216355d0ce5765013f8906c02f2c3ea53727b42eada5d67828b92939c88a6ce302c4b50cb439dc8ba61749654341d6eaf2cfa7be0c490f3b7b0a07f77b4b6334be2651baffe9a0ad087495287c9bf955f48fbd9ce2e051890198295f2ba4513a9fb121ca6f518415d8f7a935a88baa6e759d22f149be639679a80a44ce1da8aa0b0c19d94bd394b56e105f08754f2e30f89cb87869f429be0131802dcc1d9ca79c729cd3c6f0efca137fe21be4f2d70f59b8f4f60bf4ab6c38aa3e6edc2d1659729f960f5bec5c4719281445935313a11b5dbd6b6578b7631ee97f1e43d3a4e321c33c2f42cfec4b00151015053d2182f9461521236df7c3f9baeb0e88826ffcb8497d8ab1580ecf4964e34be88f27221e194c995d83039225ef2c9436ced4c51f6387f9a86d8467ce10bb04f02587695adcc09f5c92fb3051ad9d9a35f16a36b12b323570817a6ea375ba5e73b5504f2233d0fac9ed44d856811bf5326ebfde09f647571f1200f8f3a12f08001100", @ANYRES32=r15, @ANYBLOB="0400b68017fff69a97536b08e0b9daceac7ab49e7564f62a51731f0bf87dc28054fb980e30a0a17fb464604e63b3af5f91cc80c7ba6a35cb44414560448bf14626a0db283fdee617115a4c633aea42ce08797ea62b589237cbabdb5b390ce390ef05656a9292f35f211147de7d84b003d35cdb95e2301f01b9d9b103c11c897a092d525cffcc862851da7654b44d46740470de7d7a93518a28063c82b0c321b9d90b037a56ee22c2e7f300f1a7afa3371e459607134afbbdb8963108328b20bf61364c7efdcfd29b4d822828012083c0da834f6d54e308003f00", @ANYRES32=0xee00, @ANYBLOB="040091800000004402b680170020006d656d6f72792e737761702e6576656e747300000c001b8008000300", @ANYRES32=r14, @ANYBLOB="280070800400048004000800397fd51cf16713f28441cabcb17454bd6873189f960a5f90e1763b0f08003700", @ANYRES32=r7, @ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="08004000000000000400ab00000800508004001900a8020b8020004e800400fe800d003e002f6465762f6b766d000000000400ed800400c08004005b0068022a8008001000", @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=r16, @ANYBLOB="180029800400528004005d800c00c80008000000000000000600c700270000000e2fe42610d0687eb39d64d6bdb3dff91dd112370fef637d6fe67f9a1102eebdb23107065d0bfaab250b68cb9e6b1f7da35d770c2ce367b8feec6e48c900a3458b31cab72f74f0fda5a76e3f4558cfede14f58333483ecc29be7d2f37984bc0f872daed219b3ed4397a20eb457c2ffa10f9ce4dc7ab1c21b310377e405d33917fa48c06cb6c78b95aea2bf61a7afc33be6e3398fb3d2d8f0cb55d5b8f45d6d5001d980fd002e009545d0b8f4c5744bae71968f81d6d36ac8ac9a77f0afa4ef0a5d9b2f208b2111f2cd4b8ca63dbf15f0294bd9c40632d9c3e9ebbd72eefae5dfc6083b95ad9d8bcdf36dec66d000943080e0f329089686b85d3681e6b66d72b79a1c6fd5515907e74d7b086052575518f116da74f498d0ebc4831a8e2c2b6b044f33f703ddf19e8d8f34e7a52716dea2e7ba986e21079a264090aaed98875ec218b37b3edd61f71cad4695bd8d72a17cce8e8045ed7e4b4f6255a60c59934ec9679dfed001290a54e4726b362f88daa1cd67ebd81ba206c42cc38199371022f3a9cde578834c8386b2e11c14e3fcfedc33c4830a17e24de8d4fefc11a15fcf070000003e00158012ad602fecc9658808db76f3a9964485144cd4037fa71049b33e1c0d5587bf0ae26298807cfea51b3ce177c700abd668980e839c4c80e155f75300000c00b9800800e7000000000000"], 0x1e04}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r17 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r17) socket$kcm(0x29, 0x2, 0x0) 6.302245351s ago: executing program 7 (id=280): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000040)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x6, 0xc, 0x3, 0x0, 0x9, 0x5, 0xfffffe0000000001, 0xfa11, 0x9}, 0x0) unshare(0x8040480) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000140)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x7, 0x20, &(0x7f0000000180), 0x0, 0x7ff, 0x2, 0x0, 0xffffffff, 0x1000005, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000200)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000240)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = syz_open_dev$dvb_demux(&(0x7f00000002c0), 0x0, 0x2000) preadv(r3, 0x0, 0x0, 0x1, 0xd) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000300), 0x8100, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r4, &(0x7f00000003c0), 0x0}, 0x20) socketpair(0x29, 0x100000005, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000004c0)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r0, &(0x7f00000005c0)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x12d, 0xb29, 0x14}, @mpls={[{0x8}], @llc={@llc={0x2, 0xfe, "f6", "cf4f985c1f67bfa05eba909889e8e3f09cc426d8c62d06df4434ee9aa77ef9a5e638eec7a8ee38183279a2d40e317810286bed56e907d7e8bd7ae2d63c0cde4e6c631f7946c68f7f476fcb1b9ee25d7b5b50a86c803919bbddfcf8f0c7c7db78e5b72d374434ca84487914ff0a04e5ffea161b8cd92b348182860353d27e50ca6bdd16a7f9038d437f73626a874b384457e7aecc20729bf9e944963b47e2ea459379bebe6f73aa2e12eb1153b2d7e80594c458e5196d46552c98bd470f7b2781f94cdbedc14aef99778ce07020b50c150ebd981360554882fcebbb13fa24ad938369b969f2beaa1719a39f2aa43522d822efde844e2fe43763"}}}}, 0x10e) 5.780239304s ago: executing program 8 (id=281): pipe(&(0x7f0000000500)) r0 = syz_open_dev$I2C(&(0x7f0000000180), 0x1, 0x181082) ioctl$I2C_RETRIES(r0, 0x701, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x114}}, 0x0) 5.775564008s ago: executing program 8 (id=282): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYRESHEX], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$RTC_WKALM_RD(r0, 0x80287010, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f00000003c0)=@ethtool_flash={0x33, 0x7, './file0\x00'}}) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xc, 0xe, 0x0, &(0x7f0000001280)='syzkaller\x00'}, 0x94) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@getnexthop={0x28, 0x6a, 0x501, 0xfffffdfe, 0x25dfdbff, {}, [@NHA_OIF={0x8}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000300)='/dev/comedi2\x00', 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001400038010"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000500), 0x8000, &(0x7f0000000900)=ANY=[@ANYBLOB='quota']) r4 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./file1\x00', 0x250942, 0x50) quotactl_fd$Q_GETNEXTQUOTA(r4, 0xffffffff80000900, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000600)={'pcl816\x00', [0x140, 0x2, 0x3, 0x2, 0x2, 0x10000, 0x7ffd, 0x6, 0x1007, 0xc72d, 0x4, 0x10, 0xadd2, 0x8, 0x4ce, 0x9e9b, 0x101, 0x3, 0x6, 0x8, 0x4, 0x0, 0xa, 0x9, 0xffd, 0x200000, 0xaf, 0x0, 0x9, 0x0, 0x4]}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'vxcan0\x00'}) 5.238221898s ago: executing program 7 (id=283): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYRESHEX], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$RTC_WKALM_RD(r0, 0x80287010, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f00000003c0)=@ethtool_flash={0x33, 0x7, './file0\x00'}}) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xc, 0xe, 0x0, &(0x7f0000001280)='syzkaller\x00'}, 0x94) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@getnexthop={0x28, 0x6a, 0x501, 0xfffffdfe, 0x25dfdbff, {}, [@NHA_OIF={0x8}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000300)='/dev/comedi2\x00', 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001400038010"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000500), 0x8000, &(0x7f0000000900)=ANY=[@ANYBLOB='quota']) r4 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./file1\x00', 0x250942, 0x50) quotactl_fd$Q_GETNEXTQUOTA(r4, 0xffffffff80000900, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000600)={'pcl816\x00', [0x140, 0x2, 0x3, 0x2, 0x2, 0x10000, 0x7ffd, 0x6, 0x1007, 0xc72d, 0x4, 0x10, 0xadd2, 0x8, 0x4ce, 0x9e9b, 0x101, 0x3, 0x6, 0x8, 0x4, 0x0, 0xa, 0x9, 0xffd, 0x200000, 0xaf, 0x0, 0x9, 0x0, 0x4]}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'vxcan0\x00'}) 4.501270923s ago: executing program 9 (id=284): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000040)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x6, 0xc, 0x3, 0x0, 0x9, 0x5, 0xfffffe0000000001, 0xfa11, 0x9}, 0x0) unshare(0x8040480) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000140)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x7, 0x20, &(0x7f0000000180), 0x0, 0x7ff, 0x2, 0x0, 0xffffffff, 0x1000005, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000200)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000240)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = syz_open_dev$dvb_demux(&(0x7f00000002c0), 0x0, 0x2000) preadv(r2, 0x0, 0x0, 0x1, 0xd) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000300), 0x8100, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r3, &(0x7f00000003c0), 0x0}, 0x20) ioctl$DVB_DEMUX_DMX_STOP(r2, 0x6f2a) socketpair(0x29, 0x100000005, 0x0, 0x0) write$tun(r0, &(0x7f00000005c0)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x12d, 0xb29, 0x14}, @mpls={[{0x8}], @llc={@llc={0x2, 0xfe, "f6", "cf4f985c1f67bfa05eba909889e8e3f09cc426d8c62d06df4434ee9aa77ef9a5e638eec7a8ee38183279a2d40e317810286bed56e907d7e8bd7ae2d63c0cde4e6c631f7946c68f7f476fcb1b9ee25d7b5b50a86c803919bbddfcf8f0c7c7db78e5b72d374434ca84487914ff0a04e5ffea161b8cd92b348182860353d27e50ca6bdd16a7f9038d437f73626a874b384457e7aecc20729bf9e944963b47e2ea459379bebe6f73aa2e12eb1153b2d7e80594c458e5196d46552c98bd470f7b2781f94cdbedc14aef99778ce07020b50c150ebd981360554882fcebbb13fa24ad938369b969f2beaa1719a39f2aa43522d822efde844e2fe43763"}}}}, 0x10e) 4.451750906s ago: executing program 8 (id=285): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000840)={0x24, &(0x7f0000000240)={0x40, 0x17, 0xd3, "00e34cde09b98ef44110e2d3219b2c67fb526867c64fe9ff9b15b2db8e590d91cedd522e93b8533cb0bb6cb583d5ef90db5fc518e1c965fc46d6f9758e8a5c591c19571db64ed882fa31411e43d526a652f96e6724928fa9dcb6f51f1c592606790c8a1cf918af891eae98d1dbca20a5bd7494c992c45af4efd5ecac2bae00ebfa108f21a685d65ccf5ca7e37b5a79fd71038cc38d7a1fbcc8e411c984956efb18f54d7cb7fc8f95c4e6f645a566ac0e035ec5214b87207f30db12ba177e740fa5c21d02a3e0b6bbf7f9300f6b8b7e3a1d567f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.12480197s ago: executing program 7 (id=286): r0 = socket$inet_sctp(0x2, 0x5, 0x84) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000340)=0x9, 0x8, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./proc\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000006c0)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000740)='27', 0x2) msync(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x0, 0x0, 0x0, 0x5, 0x1}]}}, &(0x7f0000000800)=""/4089, 0x26, 0xff9, 0x1}, 0x28) r2 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) process_vm_writev(r2, &(0x7f0000000380)=[{&(0x7f00000003c0)=""/156, 0x9c}], 0x1, &(0x7f0000000480)=[{&(0x7f00000004c0)=""/116, 0x20001c34}], 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001840)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000001880)='./proc\x00', &(0x7f00000018c0)='proc\x00', 0x4000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000001900)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000001940)='27', 0x2) umount2(0x0, 0x1) r4 = shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000007, 0x20031, 0xffffffffffffffff, 0xffffe000) mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x8, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) listen(r0, 0x8) shutdown(r0, 0x0) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r5, &(0x7f00000001c0)={0x24, @short={0x2, 0xffff, 0x1}}, 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000054000104000000000000000007000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="010000c6fe80000000000000000000000000002b86dd"], 0x38}}, 0x0) syz_ublk_setup_io_uring(0x60b6, &(0x7f0000000000)={0x0, 0xf77a, 0x1000, 0x5, 0x52}, &(0x7f0000000080), &(0x7f0000000140), &(0x7f0000000180)) syz_open_dev$usbmon(&(0x7f0000000540), 0x0, 0x0) 3.85931812s ago: executing program 7 (id=287): syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 3.494907628s ago: executing program 9 (id=288): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x109200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000066c0)=@filter={'filter\x00', 0x42, 0x4, 0x270, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x1dc, 0x1dc, 0x1dc, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'veth0_to_bridge\x00', 'veth1_to_bond\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x1, {0x2}}}}, {{@uncond, 0x0, 0x70, 0x94}, @REJECT={0x24}}, {{@ip={@broadcast, @remote, 0x0, 0xffff00, 'batadv0\x00', 'bond_slave_1\x00', {}, {0xff}, 0x1231e48dc931f0a2}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x25, 0x1}, {0x0, 0xfc}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x2cc) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000180)=@vmx={0x4, 0x0, 0x2080, {0xffffffffffffffff, 0xffffffffffffffff, {}, 0x0, 0x20000b}}) r4 = dup2(r0, r0) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000000100)=0x7c851034) r5 = socket$nl_generic(0x10, 0x3, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000002200)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000004240)={0x90, 0xffffffffffffffda, r6, {0xfffffffffffffffc, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x100000, {0x2, 0x1, 0x0, 0x0, 0x20000000000007f, 0x5, 0x0, 0xa, 0x0, 0x0, 0x0, r7, r8, 0x3, 0x3}}}, 0x90) fcntl$getown(r3, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000006400)='./sys\x00', 0x1ff) mount(&(0x7f0000006440)=@filename='none\x00', &(0x7f0000006480)='./sys\x00', &(0x7f00000064c0)='sysfs\x00', 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000006500)='./sys/bus/pnp/devices/00:02/driver\x00', 0x0, 0x0) r11 = openat(r10, &(0x7f0000006540)='unbind\x00', 0x1, 0x0) write(r11, &(0x7f0000006580)='00:02\x00', 0x6) r12 = openat(0xffffffffffffff9c, &(0x7f00000065c0)='./sys/bus/pnp/devices/00:02/resources\x00', 0x2, 0x0) write(r12, &(0x7f0000006600)='fill\n\x00', 0x5) write(r12, &(0x7f0000006640)='auto\n\x00', 0x5) write(r12, &(0x7f0000006680)='activate\n\x00', 0x9) pipe2(&(0x7f0000004300)={0xffffffffffffffff}, 0x80000) read$FUSE(r13, &(0x7f0000004340)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) wait4(r15, 0x0, 0x20000000, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000006380)={0x0, 0x0}, &(0x7f00000063c0)=0xc) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f000000a080)=ANY=[@ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="d30000bc24e0f089df991574c6c7252476da2946981bd40632e82b", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=r15, @ANYBLOB="0400b68017fff69a97536b08e0b9daceac7ab49e7564f62a51731f0bf87dc28054fb980e30a0a17fb464604e63b3af5f91cc80c7ba6a35cb44414560448bf14626a0db283fdee617115a4c633aea42ce08797ea62b589237cbabdb5b390ce390ef05656a9292f35f211147de7d84b003d35cdb95e2301f01b9d9b103c11c897a092d525cffcc862851da7654b44d46740470de7d7a93518a28063c82b0c321b9d90b037a56ee22c2e7f300f1a7afa3371e459607134afbbdb8963108328b20bf61364c7efdcfd29b4d822828012083c0da834f6d54e308003f00", @ANYRES32=0xee00, @ANYBLOB="040091800000004402b680170020006d656d6f72792e737761702e6576656e747300000c001b8008000300", @ANYRES32=r14, @ANYBLOB="280070800400048004000800397fd51cf16713f28441cabcb17454bd6873189f960a5f90e1763b0f08003700", @ANYRES32=r7, @ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="08004000000000000400ab00000800508004001900a8020b8020004e800400fe800d003e002f6465762f6b766d000000000400ed800400c08004005b0068022a8008001000", @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="8586d5d4ba1a43b5cd8e8b0827038c94be12c5efb6bcb3998e26b33f74a781dcb80f28e08c461dd892d8e2fa7d8f9b55c42deb5e68d91d97e14f82eed76453b104b740b8d7cef271e27f3dc7ee9569b45df1da03e1da5e2de1481b1b327ddc51cdcfb6e81c83e3199ec0b520a6c42b443374dcbeb1917c7cdd8e1982a3d7271f410094ae5e6d13fc72d7d5a68c2d7fcb0b577c6dfbccb6c4981c7c9b96092a58378158a265b48fdea51e854e06c2a5560172af136c8b6a20af5d1c70692e9005216204004780d4ecd4533ee72294cb7118f7ebbbed0752e97ae1e1add9de4fc0a0002591e8188e73e0d45461ba0fcf5a3e738d22e0cf848f1bcf85fab51e302ad9f9927201a61c4fc47afd08241aad068408009100", @ANYRES32=r16, @ANYBLOB="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"], 0x1e04}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r17 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) socket$kcm(0x29, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r17, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) 3.212004032s ago: executing program 7 (id=289): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x3000) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x40020) r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000000200), 0x6f5, 0x2000000022, &(0x7f0000000240)={0x77359400}) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) syz_usb_connect$uac1(0x0, 0x72, &(0x7f0000000340)=ANY=[@ANYBLOB="1201100300000020050b391740000102030109026000030102d0090904000000010100000a240101000a0002010209040100000102000009040101010102000009050109ff030908040725010001070009040200000102000009040201010102000015f835b9000207000707250104080800"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x8, &(0x7f0000000300)=ANY=[@ANYRESDEC=r0]}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x446}}]}) write(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x4f, 0x4e) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/partitions\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000580)={0x2020}, 0x202d) syz_open_procfs(0x0, &(0x7f00000025c0)='net/ip6_tables_matches\x00') mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000003, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000002600)={0xaa, 0x6e7}) munmap(&(0x7f0000c75000/0x4000)=nil, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x28f41000) creat(&(0x7f0000002680)='./file0\x00', 0x12c) syz_open_dev$vcsu(&(0x7f00000026c0), 0x1, 0x2242) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002880)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000eac12b115519040000000daa164027d6e553a94efe7c040a5f880d0f7682e082bb5d0f441a5d4d062c1f525a42a55dc0788d4fb7737634065facbb67ae91585d293f95e7a855cf13849de461781b664a426927f728d2c91a51faccfc10348b47b2513c136eca6c1bb356bd6abac8408a3c65511aa857777a39abcf61", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="feffffff00000000000400"/28], 0x50) mbind(&(0x7f0000d5b000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x0, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup2(r2, r2) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f00000000c0)={0x3, 0xb}, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.442532649s ago: executing program 9 (id=290): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x5001}) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}]}]}, 0x28}}, 0x44000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0x601, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0x6, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtfilter={0x44, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0xfff2, 0xffff}, {0x300}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x5b7b}]}}]}, 0x44}}, 0x4044004) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000540)={'syzkaller1\x00', 0x1}) write$tun(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="03031b0030003200060063"], 0x76) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RESULT={0x8, 0x5, 0x10000000}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8c}}, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'dvmrp1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000010000500"/20, @ANYRES32=0x0, @ANYBLOB="0100000001000000140003007665746830000000000000000000000008000a00", @ANYRES32=r9, @ANYBLOB="7a37943c4d6dae9a652091f7a61201f710416445bd2824da7d96f8ff94a4f32e3f1726ec2c2766a75a847b922b65"], 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000940)={'veth1\x00'}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000980)={0x3, 'batadv0\x00', {0x7f}, 0x2}) sendmmsg$inet(r7, 0x0, 0x0, 0x40880d1) sendmsg$nl_route(r2, &(0x7f0000000a40)={0x0, 0xfffffc72, &(0x7f0000000a80)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="3400000011000500"/20, @ANYRES32=r7, @ANYBLOB="00000000000000001400030062617461647630000000"], 0x34}, 0x1, 0x0, 0x0, 0x8830}, 0x0) 2.423161018s ago: executing program 0 (id=277): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r0, &(0x7f0000001880)={0x2020}, 0x2020) 2.352553664s ago: executing program 0 (id=291): r0 = socket$inet_sctp(0x2, 0x5, 0x84) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000340)=0x9, 0x8, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000680)='./proc\x00', &(0x7f00000006c0)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000740)='27', 0x2) msync(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x0, 0x0, 0x0, 0x5, 0x1}]}}, &(0x7f0000000800)=""/4089, 0x26, 0xff9, 0x1}, 0x28) r2 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) process_vm_writev(r2, &(0x7f0000000380)=[{&(0x7f00000003c0)=""/156, 0x9c}], 0x1, &(0x7f0000000480)=[{&(0x7f00000004c0)=""/116, 0x20001c34}], 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001840)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000001880)='./proc\x00', &(0x7f00000018c0)='proc\x00', 0x4000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000001900)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000001940)='27', 0x2) umount2(0x0, 0x1) r4 = shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000007, 0x20031, 0xffffffffffffffff, 0xffffe000) mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x8, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) listen(r0, 0x8) shutdown(r0, 0x0) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r5, &(0x7f00000001c0)={0x24, @short={0x2, 0xffff, 0x1}}, 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000054000104000000000000000007000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="010000c6fe80000000000000000000000000002b86dd"], 0x38}}, 0x0) syz_ublk_setup_io_uring(0x60b6, &(0x7f0000000000)={0x0, 0xf77a, 0x1000, 0x5, 0x52}, &(0x7f0000000080), &(0x7f0000000140), &(0x7f0000000180)) syz_open_dev$usbmon(&(0x7f0000000540), 0x0, 0x0) 2.314029543s ago: executing program 9 (id=292): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYRESHEX], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$RTC_WKALM_RD(r0, 0x80287010, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f00000003c0)=@ethtool_flash={0x33, 0x7, './file0\x00'}}) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xc, 0xe, 0x0, &(0x7f0000001280)='syzkaller\x00'}, 0x94) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@getnexthop={0x28, 0x6a, 0x501, 0xfffffdfe, 0x25dfdbff, {}, [@NHA_OIF={0x8}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000300)='/dev/comedi2\x00', 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001400038010"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000500), 0x8000, &(0x7f0000000900)=ANY=[@ANYBLOB='quota']) r4 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./file1\x00', 0x250942, 0x50) quotactl_fd$Q_GETNEXTQUOTA(r4, 0xffffffff80000900, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000600)={'pcl816\x00', [0x140, 0x2, 0x3, 0x2, 0x2, 0x10000, 0x7ffd, 0x6, 0x1007, 0xc72d, 0x4, 0x10, 0xadd2, 0x8, 0x4ce, 0x9e9b, 0x101, 0x3, 0x6, 0x8, 0x4, 0x0, 0xa, 0x9, 0xffd, 0x200000, 0xaf, 0x0, 0x9, 0x0, 0x4]}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1.358471492s ago: executing program 8 (id=293): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x48}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x3f42, 0xa000, 0x0, 0x51, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}}}}) 1.336409283s ago: executing program 0 (id=294): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(0xffffffffffffffff, 0x7b1, &(0x7f0000002cc0)={&(0x7f0000001cc0)=[0x5, 0x5, 0x1, 0xc, 0x1, 0x2, 0x10001, 0x8, 0x5, 0x1, 0x7, 0x851d, 0x3, 0x3, 0x5, 0xd, 0x101, 0x2, 0xfffffff9, 0xd54, 0xfffffffc, 0x6, 0x5, 0x6, 0x8, 0xd885, 0x3ff, 0xfffffffd, 0x9, 0xfff, 0x3, 0xf0, 0x1, 0xc92, 0x6, 0x6, 0xe4, 0xfffffff9, 0x8, 0x3, 0x6, 0x8001, 0x0, 0x54, 0x4, 0x0, 0x4, 0x1, 0x0, 0x2, 0x5d46, 0x2, 0x80, 0xff, 0x4, 0x26, 0x8, 0x5, 0x4, 0xffff, 0x3, 0x6, 0xc, 0x7fffffff, 0x6, 0x2, 0xffffffff, 0x2, 0xa, 0x9, 0x80000000, 0x8, 0x9, 0xf, 0x5, 0x0, 0x6, 0x401, 0x5, 0x3, 0x8, 0x85, 0x200000, 0x8, 0x9, 0x1, 0x98, 0x1, 0xfffffffc, 0x0, 0x8, 0x0, 0x7, 0x10001, 0x3, 0x1, 0xfffffff9, 0x4, 0x6, 0x80000001, 0xd, 0x9, 0x3, 0x8, 0x9, 0x9, 0x3, 0x8, 0x100, 0x8, 0x9, 0x0, 0x7, 0xa6, 0x3, 0xeac5, 0x6, 0x6, 0x6, 0x4, 0xc, 0x71, 0x4, 0x10000, 0x3524, 0x4, 0x2, 0x1000, 0x200, 0x4, 0x1ff, 0x5, 0x3, 0x8, 0x4, 0x0, 0xc54, 0x9, 0x3, 0x80000000, 0x8da6, 0x3, 0xa6, 0x6, 0x1, 0xa, 0x86, 0x18, 0xfff, 0x5, 0xa2, 0x6, 0xbf, 0x5, 0x2, 0x7fff, 0x7, 0xf5, 0x1, 0x9, 0x2, 0x0, 0x5, 0x5, 0x7, 0x0, 0xc, 0x0, 0x5, 0x0, 0xffffffff, 0x800, 0x4f83, 0xb330, 0x3, 0x3, 0x9, 0xffff, 0x8, 0xffffffff, 0x165, 0x2, 0x4, 0x7, 0x4, 0x1, 0x7, 0x4, 0x4, 0x0, 0x9, 0x6, 0x401, 0x81, 0x2f3, 0x81, 0x4, 0x10000, 0x6, 0x203, 0x6, 0x18, 0xa46, 0x89, 0xfffffffd, 0x5, 0x7, 0x7, 0x8, 0x3, 0x7fff, 0x8, 0x5, 0x5, 0x6, 0x4, 0x80000001, 0xa, 0x8, 0x80, 0x6, 0x5, 0x10, 0x5cf, 0x7, 0x3, 0x8, 0x40, 0x6, 0x4, 0x8, 0x200, 0x7, 0xfffffffd, 0x2, 0x6a, 0x8001, 0x9, 0xffffff7f, 0x5, 0x1, 0xfff, 0x620, 0x0, 0x7f, 0x4, 0x2, 0xde, 0xb1e6, 0x6fcc, 0x4, 0x7, 0x80, 0x5, 0x200, 0x9f, 0x1, 0x7ff, 0x5, 0x5, 0x5, 0x3d6, 0x4, 0x7, 0x5, 0x7, 0x8000, 0x6, 0x3c, 0x6, 0x5, 0x7f, 0x0, 0x5, 0x36e, 0x101, 0x0, 0x10001, 0xfffff53f, 0x5, 0x7fffffff, 0x2, 0x5, 0x7f, 0x7, 0x5, 0x75f, 0x6, 0x1, 0x54c, 0x0, 0x800, 0x93dc, 0x81, 0x5, 0x7, 0xb77, 0x6e, 0x1, 0x3, 0x6, 0x7, 0x1, 0x3, 0xef, 0x0, 0x3, 0x9, 0xceed, 0x81b5, 0x1, 0x2, 0x3, 0x5, 0x2, 0x6, 0x3fe00, 0x6, 0x3, 0x6, 0xa2, 0x0, 0x9, 0x4, 0x0, 0xe, 0x7, 0x7, 0x3, 0x2530, 0x10001, 0xfff, 0xfffffff9, 0x0, 0x3000000, 0x7ff, 0x3, 0x7, 0x0, 0x7f, 0x3, 0xfffffff9, 0x8, 0xfffffff9, 0x9, 0x7fff, 0x1, 0x1, 0xfd94, 0x9, 0x6, 0x8001, 0x3, 0x7, 0x5, 0x7, 0x8, 0xa, 0xffff, 0xa, 0xe17f, 0x1ff, 0x0, 0xa7f, 0x4, 0x9, 0xffff, 0x5, 0x8, 0x8, 0x5, 0x0, 0x2, 0xaa8f, 0xc9, 0x6abc, 0x5, 0x8001, 0xfff, 0xcb, 0x7, 0xf, 0x81, 0x8, 0x4, 0x2308, 0x2, 0x6, 0x6, 0x4, 0x8, 0x5, 0x8, 0x12d, 0xa9b, 0x9, 0x1, 0x9, 0x8, 0x8, 0x7, 0x13af2340, 0xf34d06cc, 0x8, 0x3, 0x400, 0x8, 0x9, 0x8001, 0x2, 0xe, 0x10000, 0x5, 0x3ff, 0x80000001, 0xfffffff7, 0x401, 0x7, 0x2, 0x80000001, 0x8, 0xff, 0x1, 0x9, 0x800, 0x7f, 0x9, 0x5, 0xffffff91, 0x3ff, 0x7ff, 0x80000000, 0x6, 0x10001, 0x80000000, 0x9, 0xd, 0xfffffffb, 0xfffffffb, 0x7, 0xff, 0x4, 0x8, 0x6, 0x8, 0x4, 0x800, 0xfe, 0xc, 0x8, 0x721, 0x8, 0x3000000, 0x3, 0xffffff7f, 0x3ff, 0x6, 0x2, 0x6, 0x4, 0x80, 0x0, 0x38ac, 0x6, 0x4, 0xffff, 0xffff, 0xf, 0x1, 0x3, 0x7, 0x2, 0x1, 0xe8a, 0x3, 0x9, 0x8001, 0x1000, 0x8, 0x41, 0x4, 0x8, 0x7, 0x2521d01e, 0x7fff, 0x3ff, 0x9, 0x2, 0x2, 0xfff, 0x7fff, 0x878, 0x0, 0x9d, 0x3, 0x6, 0x8, 0xff, 0x93, 0x9, 0x2, 0x9a67, 0xfffffffa, 0xe16b, 0xddde, 0x8, 0x4, 0x8, 0x40, 0x3, 0x3, 0x0, 0x4, 0xb, 0x2, 0x1ff, 0x0, 0xb, 0x8, 0x7, 0x80, 0x8000, 0x6, 0x1, 0x6, 0x7, 0x34, 0x4, 0xe9, 0x6, 0x6, 0x73, 0xc00000, 0x2, 0x11f0, 0x4, 0x400, 0x0, 0xe28, 0x1, 0xfffff6bd, 0x8b6, 0xffffffff, 0x8, 0x4, 0x0, 0x1000, 0x3, 0x1, 0xe9, 0x3, 0x0, 0xfffffffc, 0xfffffc01, 0x5, 0x7, 0xf6, 0x3, 0x43cc0b06, 0x0, 0x8, 0x6, 0x0, 0x6, 0x6, 0x0, 0x2, 0xffffffff, 0x5, 0x6, 0x1000, 0x4, 0x9, 0x1ff, 0x7f, 0x7, 0x2, 0x77, 0x1, 0x7, 0x8, 0xf57, 0xf9400, 0x1ff, 0xffff9f7b, 0xa678, 0x9, 0x1, 0xffffffff, 0x8001, 0x101, 0xaa0e, 0x57e8, 0xc3, 0x2, 0x46, 0xfff, 0x7, 0xef5, 0x1, 0x7927, 0xffff, 0x1, 0x35, 0x0, 0x3, 0x9, 0x5, 0xd, 0x3, 0x0, 0x80000001, 0x3ff, 0xe3, 0x8, 0x0, 0x6, 0xc46, 0xf4b, 0xf474, 0x1, 0x3, 0x0, 0x401, 0x2, 0x10, 0x3, 0x4, 0x2, 0x80, 0x5, 0x1, 0x1, 0x8, 0xfff, 0x5, 0xce0, 0x9, 0x9, 0x0, 0x54, 0x97e, 0x2, 0x31, 0x6, 0x9, 0x8, 0x20000, 0x22, 0x1, 0x7, 0x6, 0x5, 0xb, 0x3, 0x511, 0x3ff, 0x1, 0xd9, 0x8000, 0x7f, 0xff, 0x0, 0x6, 0x0, 0x4, 0x2, 0x1ff, 0x8, 0x7fff, 0x4, 0x0, 0x4, 0x0, 0xc4c, 0x4, 0x1, 0xffffff80, 0x3, 0x7, 0xff, 0x8, 0x5, 0x0, 0x3, 0x3, 0x2, 0xffff, 0xff, 0x1, 0xfb, 0x4, 0x2, 0xc, 0x8, 0x81, 0x80, 0xf51, 0x401, 0x10001, 0x2, 0xf8, 0x1ff, 0x8001, 0x6, 0xfffffffc, 0x5, 0x38, 0x7, 0x8, 0x5, 0x5, 0xbcd, 0x2, 0x401, 0x3978, 0x0, 0x5, 0x3, 0x6, 0x4, 0x9, 0x5, 0x0, 0x98, 0xb9, 0x7, 0x2, 0x80, 0x6, 0x8, 0x4, 0x2, 0x42f, 0x0, 0x5, 0xfffffff8, 0x7, 0x28, 0x6, 0x8, 0x2, 0x10001, 0x80, 0x3, 0x125, 0xdf, 0x2, 0x81, 0x6, 0x3ff, 0x5674, 0x8, 0xa, 0x401, 0xe6d, 0x8, 0x4, 0x6, 0x1, 0x4c, 0x2, 0xd0e1, 0x3, 0x6, 0x5, 0x52, 0x7, 0x40, 0x3, 0xfffffc01, 0xd, 0x9, 0xffff3b5f, 0x7, 0x5, 0x3, 0x566f, 0x5, 0x9, 0x0, 0x1, 0x2, 0x8, 0x8001, 0x7fff, 0x101, 0xe, 0x8, 0x8000, 0x0, 0x2, 0xfff, 0xfffffff7, 0x2, 0xc91, 0x7, 0x1, 0x1, 0x1d5e, 0x8, 0x24, 0x9, 0xffffffff, 0x0, 0x2, 0x9, 0xf8ca, 0x1, 0x7645, 0x8000, 0x6, 0x580, 0x5, 0x1, 0x1, 0x4, 0x2, 0x4, 0xe, 0x1, 0x1020000, 0xffffffff, 0x0, 0x4, 0xe, 0x9, 0x10000, 0x9, 0x7, 0x3ff, 0x3c, 0x6, 0x3, 0x2, 0x7, 0xfffffffe, 0xa1a2, 0x6, 0x9, 0x3, 0x2, 0x9, 0x8, 0x1, 0x720, 0x7, 0xd, 0x0, 0x9, 0x9, 0x499, 0x7, 0x4, 0x2, 0x0, 0x409, 0x7, 0xf8e, 0x3, 0x2, 0x5, 0x8, 0x4, 0x2, 0x80000001, 0xb, 0xc, 0x8, 0x7, 0x4, 0x8b77, 0x1, 0x6, 0xfffffffd, 0xfffffffb, 0x81, 0x4, 0x7fffffff, 0x73, 0x5, 0x401, 0x6, 0xe49, 0x2, 0x7ff, 0xfffffc8f, 0x1, 0xffff63b1, 0x4, 0xffffffff, 0x5, 0x7, 0x2d28, 0x0, 0x5, 0xffff, 0x3b665305, 0x6, 0x7f, 0x5, 0x5, 0x1000, 0x0, 0xc6, 0xd, 0x4, 0xb, 0x5, 0x4, 0x7, 0x1, 0xfff, 0x280000, 0x80000000, 0x800, 0x1ff, 0x2, 0x0, 0x4, 0x8, 0xfff, 0x8, 0xd57, 0x4, 0x40, 0x10000, 0x671, 0x9a0, 0x6, 0x7299, 0x8, 0x40, 0x58b, 0x5, 0x4, 0x5, 0x2, 0x645f, 0x5, 0x5, 0x5, 0xff, 0x430, 0x5, 0x6, 0x28da261a, 0x6, 0x200, 0x1, 0x3, 0x13, 0x7f, 0x3, 0xe, 0x7, 0xc9fb, 0x2, 0x100, 0x5, 0xf4, 0x3, 0x3, 0x1, 0x8, 0x1000, 0x32, 0x5, 0x1, 0x3, 0x1, 0x4, 0x7, 0x7fffffff, 0x9, 0x0, 0xac, 0xffff, 0x80000001, 0x9, 0x200, 0x0, 0x7, 0x2, 0xffffff22, 0x3, 0x8000, 0x4d08, 0x77, 0x3, 0x9, 0x9, 0x0, 0x4, 0x7, 0x7, 0xffff, 0x468f, 0x9, 0xffffffff, 0x800, 0x7f, 0x9, 0x1, 0x6, 0x10000, 0x0, 0xd, 0x7, 0x4, 0x0, 0x3, 0x5, 0x6, 0x7ff, 0x0, 0x5, 0x6, 0x3, 0x8, 0x3, 0x9, 0x1, 0x80], 0x3, 0x400, 0x6}) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000100)=0x5b, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000740)=""/4112, 0x1010}], 0x1}, 0x7f}], 0x1, 0x4000830b, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x2}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000300)={'syzkaller0\x00', @multicast}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000017c0)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {0x10}, {0x0, 0xfff1}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0xfffeffff, 0x3, 0x9, 0x5, 0xa8e, 0x5, 0x407c, 0x80, 0x9, 0x3, 0x8000, 0x8, 0x3, 0x8, 0x5, 0xbc0, 0x7, 0x9c09, 0xffff, 0x3, 0x0, 0xc, 0xcfa, 0x5, 0xa, 0x6407, 0x80, 0x849, 0x8b, 0xffffffff, 0x4, 0x2, 0xa4c, 0x0, 0x9, 0x5, 0x200, 0x1ff, 0x4d76, 0x4, 0xb32, 0x3ff, 0x8, 0x0, 0x71, 0x5, 0x1, 0x8, 0x0, 0x7, 0xeb, 0x6, 0x87, 0x8, 0x0, 0x9, 0x3ff, 0xb, 0xfffffff8, 0xb6d, 0x81, 0x1, 0x8, 0xa, 0x0, 0x9, 0x81, 0x8, 0x26b, 0x8, 0x85b4, 0x9, 0x7, 0xfffffffe, 0x6, 0x8, 0xffffffc0, 0x3, 0x3, 0x4, 0x4, 0x80000001, 0xc8ee, 0xbacb161, 0x3ff, 0xffff12d0, 0x2, 0xffff8000, 0x10, 0x1ff, 0x2, 0x5, 0x2, 0x8, 0x7, 0x4, 0x2, 0x0, 0x1, 0x5, 0xfffffffd, 0x6, 0x0, 0x9, 0x8, 0x5, 0x6, 0xfffffffe, 0x2, 0x834f, 0x9, 0x1ff, 0x2, 0x62cd, 0xf98, 0xd8, 0x6, 0x6, 0x9, 0x3, 0xfffff000, 0x40000000, 0x7, 0x81, 0x0, 0x5, 0x10, 0x100, 0x3e, 0xc, 0x400, 0x4, 0x6, 0x7, 0x2, 0xb, 0x7, 0x4, 0x4, 0xfffffffe, 0xc, 0x400, 0x2, 0x6, 0x7, 0x971, 0x0, 0x6, 0x3, 0xa46a, 0x8, 0x23, 0x2, 0x8, 0x7fff, 0x8, 0x1, 0x557, 0x2, 0x3ff, 0x3ff, 0x2, 0x1, 0x400001, 0x5c, 0x6, 0x1ff, 0x9, 0xb, 0x6, 0x0, 0x7ff, 0x868f, 0x9, 0xffffffff, 0x0, 0xfffffffe, 0x100, 0x40, 0x6c8, 0x8, 0x4, 0x4, 0x4, 0x81, 0xdf, 0x8, 0x4, 0x6, 0x4, 0xc59e, 0x9, 0x891a, 0x4, 0x1, 0x67a, 0x5, 0xaa, 0x2, 0x9, 0x4, 0x5, 0x2, 0xfff, 0x9, 0x4533afbb, 0xd, 0x0, 0x593c, 0x1, 0x1, 0x55aa77c9, 0x56a, 0xa, 0x8, 0x200, 0x3e, 0x5, 0x6, 0x1000, 0xa, 0x5, 0x6, 0x4, 0x1ff, 0x40, 0x2, 0x5dff, 0xfffffffe, 0x8, 0x1, 0x4, 0x7, 0x1ff, 0x101, 0xffff, 0x12, 0x9, 0xfffffffc, 0x7e94, 0x6, 0xca55, 0x2, 0x5, 0x3ff, 0x8, 0x4, 0x80000000, 0x3, 0x1, 0x7, 0x4, 0x2, 0x8, 0x16, 0x1]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0xb3538085985bb3d6}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001c80)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x4098884, &(0x7f0000001780)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r2, &(0x7f00000017c0), 0x3000, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2000) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, &(0x7f0000000700)) 1.242460412s ago: executing program 8 (id=295): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x3000) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x40020) r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000000200), 0x6f5, 0x2000000022, &(0x7f0000000240)={0x77359400}) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) syz_usb_connect$uac1(0x0, 0x72, &(0x7f0000000340)=ANY=[@ANYBLOB="1201100300000020050b391740000102030109026000030102d0090904000000010100000a240101000a0002010209040100000102000009040101010102000009050109ff030908040725010001070009040200000102000009040201010102000015f835b9000207000707250104080800"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x8, &(0x7f0000000300)=ANY=[@ANYRESDEC=r0]}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x446}}]}) write(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x4f, 0x4e) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/partitions\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000580)={0x2020}, 0x202d) syz_open_procfs(0x0, &(0x7f00000025c0)='net/ip6_tables_matches\x00') mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000003, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000002600)={0xaa, 0x6e7}) munmap(&(0x7f0000c75000/0x4000)=nil, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x28f41000) syz_open_dev$vcsu(&(0x7f00000026c0), 0x1, 0x2242) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002880)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000eac12b115519040000000daa164027d6e553a94efe7c040a5f880d0f7682e082bb5d0f441a5d4d062c1f525a42a55dc0788d4fb7737634065facbb67ae91585d293f95e7a855cf13849de461781b664a426927f728d2c91a51faccfc10348b47b2513c136eca6c1bb356bd6abac8408a3c65511aa857777a39abcf61", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="feffffff00000000000400"/28], 0x50) mbind(&(0x7f0000d5b000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x0, 0x2) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.198545203s ago: executing program 9 (id=296): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f00000000c0)=ANY=[], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 1.254095ms ago: executing program 7 (id=297): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYRESHEX], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$RTC_WKALM_RD(r0, 0x80287010, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f00000003c0)=@ethtool_flash={0x33, 0x7, './file0\x00'}}) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xc, 0xe, 0x0, &(0x7f0000001280)='syzkaller\x00'}, 0x94) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@getnexthop={0x28, 0x6a, 0x501, 0xfffffdfe, 0x25dfdbff, {}, [@NHA_OIF={0x8}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000300)='/dev/comedi2\x00', 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001400038010"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000500), 0x8000, &(0x7f0000000900)=ANY=[@ANYBLOB='quota']) r4 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./file1\x00', 0x250942, 0x50) quotactl_fd$Q_GETNEXTQUOTA(r4, 0xffffffff80000900, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'vxcan0\x00'}) 0s ago: executing program 0 (id=298): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYRESHEX], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$RTC_WKALM_RD(r0, 0x80287010, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f00000003c0)=@ethtool_flash={0x33, 0x7, './file0\x00'}}) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xc, 0xe, 0x0, &(0x7f0000001280)='syzkaller\x00'}, 0x94) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@getnexthop={0x28, 0x6a, 0x501, 0xfffffdfe, 0x25dfdbff, {}, [@NHA_OIF={0x8}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000300)='/dev/comedi2\x00', 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001400038010"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000500), 0x8000, &(0x7f0000000900)=ANY=[@ANYBLOB='quota']) r4 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./file1\x00', 0x250942, 0x50) quotactl_fd$Q_GETNEXTQUOTA(r4, 0xffffffff80000900, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000600)={'pcl816\x00', [0x140, 0x2, 0x3, 0x2, 0x2, 0x10000, 0x7ffd, 0x6, 0x1007, 0xc72d, 0x4, 0x10, 0xadd2, 0x8, 0x4ce, 0x9e9b, 0x101, 0x3, 0x6, 0x8, 0x4, 0x0, 0xa, 0x9, 0xffd, 0x200000, 0xaf, 0x0, 0x9, 0x0, 0x4]}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): active_anon:0kB inactive_anon:80kB active_file:480kB inactive_file:24kB unevictable:1988kB isolated(anon):12kB isolated(file):0kB mapped:84kB dirty:4kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8640kB pagetables:1168kB sec_pagetables:1168kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 61.918205][ T6148] Node 0 DMA free:2504kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 61.918232][ T6148] lowmem_reserve[]: 0 256 256 256 256 [ 61.918249][ T6148] Node 0 DMA: 62*4kB (UM) 23*8kB (UM) 10*16kB (UM) 18*32kB (UM) 9*64kB (UM) 2*128kB (M) 0*256kB 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 2512kB [ 61.918369][ T6148] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 61.918377][ T6148] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 61.918384][ T6148] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 61.918391][ T6148] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 61.918398][ T6148] 54881 total pagecache pages [ 61.918402][ T6148] 177 pages in swap cache [ 61.918406][ T6148] Free swap = 119568kB [ 61.918409][ T6148] Total swap = 124996kB [ 61.918413][ T6148] 524155 pages RAM [ 61.918416][ T6148] 0 pages HighMem/MovableOnly [ 61.918419][ T6148] 217670 pages reserved [ 61.918422][ T6148] 0 pages cma reserved [ 61.932087][ T6151] device-mapper: table: 248:2: mirror: Device lookup failure (-ENOENT) [ 61.932102][ T6151] device-mapper: ioctl: error adding target to table [ 62.399624][ T6161] FAULT_INJECTION: forcing a failure. [ 62.399624][ T6161] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 62.399641][ T6161] CPU: 0 UID: 0 PID: 6161 Comm: syz.3.55 Not tainted syzkaller #0 PREEMPT(full) [ 62.399653][ T6161] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 62.399659][ T6161] Call Trace: [ 62.399663][ T6161] [ 62.399667][ T6161] dump_stack_lvl+0x100/0x190 [ 62.399686][ T6161] should_fail_ex.cold+0x5/0xa [ 62.399702][ T6161] _copy_to_user+0x32/0xd0 [ 62.399718][ T6161] bpf_verifier_vlog+0x333/0x6d0 [ 62.399735][ T6161] __btf_verifier_log+0xc3/0x100 [ 62.399749][ T6161] ? __pfx___btf_verifier_log+0x10/0x10 [ 62.399764][ T6161] ? __lock_acquire+0x5c0/0x1f40 [ 62.399779][ T6161] btf_parse_hdr+0x4b0/0xec0 [ 62.399793][ T6161] ? lock_acquire+0x1d1/0x380 [ 62.399803][ T6161] ? __might_fault+0xc5/0x140 [ 62.399815][ T6161] ? find_held_lock+0x2b/0x80 [ 62.399829][ T6161] ? __might_fault+0xc5/0x140 [ 62.399840][ T6161] ? __pfx_btf_parse_hdr+0x10/0x10 [ 62.399859][ T6161] btf_new_fd+0x60d/0x39d0 [ 62.399874][ T6161] ? __lock_acquire+0x5c0/0x1f40 [ 62.399887][ T6161] ? lock_acquire+0x1d1/0x380 [ 62.399899][ T6161] ? __pfx_btf_new_fd+0x10/0x10 [ 62.399921][ T6161] ? rcu_is_watching+0x13/0xc0 [ 62.399936][ T6161] ? apparmor_capable+0x1d7/0x4d0 [ 62.399949][ T6161] ? bpf_lsm_capable+0x9/0x10 [ 62.399961][ T6161] ? security_capable+0x80/0x260 [ 62.399974][ T6161] ? ns_capable+0xcd/0xf0 [ 62.399992][ T6161] __sys_bpf+0x2400/0x4b60 [ 62.400007][ T6161] ? __pfx___sys_bpf+0x10/0x10 [ 62.400016][ T6161] ? __raw_callee_save_pv_queued_spin_unlock_traced+0x15/0x40 [ 62.400039][ T6161] ? up_write+0x2dc/0x5b0 [ 62.400061][ T6161] ? lock_acquire+0x1d1/0x380 [ 62.400071][ T6161] ? __might_fault+0xc5/0x140 [ 62.400083][ T6161] ? find_held_lock+0x2b/0x80 [ 62.400098][ T6161] ? __ia32_sys_bpf+0xcc/0x170 [ 62.400108][ T6161] __ia32_sys_bpf+0xcc/0x170 [ 62.400119][ T6161] ? __might_fault+0x111/0x140 [ 62.400132][ T6161] __do_fast_syscall_32+0x14b/0x8c0 [ 62.400148][ T6161] do_fast_syscall_32+0x32/0x70 [ 62.400162][ T6161] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 62.400175][ T6161] RIP: 0023:0xf7f52fbc [ 62.400184][ T6161] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 62.400193][ T6161] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 62.400203][ T6161] RAX: ffffffffffffffda RBX: 0000000000000012 RCX: 0000000080000780 [ 62.400210][ T6161] RDX: 0000000000000028 RSI: 0000000000000000 RDI: 0000000000000000 [ 62.400217][ T6161] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 62.400223][ T6161] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 62.400229][ T6161] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 62.400243][ T6161] [ 62.646067][ T6165] FAULT_INJECTION: forcing a failure. [ 62.646067][ T6165] name failslab, interval 1, probability 0, space 0, times 0 [ 62.646085][ T6165] CPU: 0 UID: 0 PID: 6165 Comm: syz.3.55 Not tainted syzkaller #0 PREEMPT(full) [ 62.646098][ T6165] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 62.646104][ T6165] Call Trace: [ 62.646108][ T6165] [ 62.646113][ T6165] dump_stack_lvl+0x100/0x190 [ 62.646133][ T6165] should_fail_ex.cold+0x5/0xa [ 62.646159][ T6165] should_failslab+0xc2/0x120 [ 62.646172][ T6165] kmem_cache_alloc_noprof+0x92/0x6a0 [ 62.646189][ T6165] ? current_cpuset_is_being_rebound+0xf6/0x370 [ 62.646207][ T6165] ? sp_alloc+0x27/0x160 [ 62.646224][ T6165] sp_alloc+0x27/0x160 [ 62.646239][ T6165] ? __pfx_shmem_set_policy+0x10/0x10 [ 62.646253][ T6165] mpol_set_shared_policy+0xa5/0x850 [ 62.646270][ T6165] ? __pfx_shmem_set_policy+0x10/0x10 [ 62.646283][ T6165] mbind_range+0x339/0x550 [ 62.646299][ T6165] do_mbind+0x81a/0x1030 [ 62.646340][ T6165] ? __pfx_do_mbind+0x10/0x10 [ 62.646363][ T6165] ? __pfx_get_nodes+0x10/0x10 [ 62.646378][ T6165] kernel_mbind+0x1b7/0x200 [ 62.646395][ T6165] ? __pfx_kernel_mbind+0x10/0x10 [ 62.646413][ T6165] __do_fast_syscall_32+0x14b/0x8c0 [ 62.646430][ T6165] do_fast_syscall_32+0x32/0x70 [ 62.646444][ T6165] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 62.646458][ T6165] RIP: 0023:0xf7f52fbc [ 62.646468][ T6165] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 62.646477][ T6165] RSP: 002b:00000000f53e550c EFLAGS: 00000292 ORIG_RAX: 0000000000000112 [ 62.646488][ T6165] RAX: ffffffffffffffda RBX: 0000000080ffb000 RCX: 0000000000002000 [ 62.646494][ T6165] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000008 [ 62.646501][ T6165] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 62.646507][ T6165] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 62.646516][ T6165] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 62.646529][ T6165] [ 62.691599][ T6164] rxe_eth0 speed is unknown, defaulting to 1000 [ 69.674154][ T6174] jffs2: notice: (6174) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 1 orphan) and 1 of xref (0 dead, 1 orphan) found. [ 69.753159][ T5794] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.755297][ T5794] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.755848][ T5794] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.756598][ T5794] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.757115][ T5794] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 69.969345][ T6176] rxe_eth0 speed is unknown, defaulting to 1000 [ 70.028419][ T6174] device-mapper: table: 248:1: : unknown target type [ 70.028430][ T6174] device-mapper: ioctl: error adding target to table [ 70.085523][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.155873][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.200208][ T6196] device-mapper: table: 248:3: mirror: Device lookup failure (-ENOENT) [ 70.200230][ T6196] device-mapper: ioctl: error adding target to table [ 70.267004][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.278666][ T6176] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.278741][ T6176] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.278818][ T6176] bridge_slave_0: entered allmulticast mode [ 70.280752][ T6176] bridge_slave_0: entered promiscuous mode [ 70.283286][ T6176] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.283402][ T6176] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.283489][ T6176] bridge_slave_1: entered allmulticast mode [ 70.284386][ T6176] bridge_slave_1: entered promiscuous mode [ 70.309716][ T6176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.311064][ T6176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.326961][ T6176] team0: Port device team_slave_0 added [ 70.328242][ T6176] team0: Port device team_slave_1 added [ 70.342879][ T6176] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.342888][ T6176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.342899][ T6176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.344498][ T6176] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.344506][ T6176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.344517][ T6176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.386674][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.404244][ T6176] hsr_slave_0: entered promiscuous mode [ 70.404695][ T6176] hsr_slave_1: entered promiscuous mode [ 70.405515][ T6176] debugfs: 'hsr0' already exists in 'hsr' [ 70.405528][ T6176] Cannot create hsr debugfs directory [ 70.592207][ T12] bridge_slave_1: left allmulticast mode [ 70.592238][ T12] bridge_slave_1: left promiscuous mode [ 70.592988][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.603750][ T12] bridge_slave_0: left allmulticast mode [ 70.603765][ T12] bridge_slave_0: left promiscuous mode [ 70.603868][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.698908][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 70.700810][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 70.702502][ T12] bond0 (unregistering): Released all slaves [ 70.732174][ T6176] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.734128][ T6176] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 70.734701][ T6176] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.738765][ T6176] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 70.739160][ T6176] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 70.748171][ T6176] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 70.750063][ T6176] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.754780][ T6176] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 70.777956][ T6214] rxe_eth0 speed is unknown, defaulting to 1000 [ 70.869724][ T5506] 8021q: adding VLAN 0 to HW filter on device eth2 [ 70.914984][ T6176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.926960][ T6176] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.930914][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.930960][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.934513][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.934556][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.937912][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.938018][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.046627][ T5506] 8021q: adding VLAN 0 to HW filter on device eth3 [ 71.246713][ T12] hsr_slave_0: left promiscuous mode [ 71.255756][ T12] hsr_slave_1: left promiscuous mode [ 71.261562][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.261584][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.263988][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.264002][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.284587][ T12] veth1_macvtap: left promiscuous mode [ 71.284642][ T12] veth0_macvtap: left promiscuous mode [ 71.284719][ T12] veth1_vlan: left promiscuous mode [ 71.285372][ T12] veth0_vlan: left promiscuous mode [ 71.456580][ T12] team0 (unregistering): Port device team_slave_1 removed [ 71.461300][ T12] team0 (unregistering): Port device team_slave_0 removed [ 71.524202][ T5506] 8021q: adding VLAN 0 to HW filter on device eth4 [ 71.655270][ T58] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 71.678164][ T6176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.758567][ T5506] 8021q: adding VLAN 0 to HW filter on device eth5 [ 71.805117][ T5797] Bluetooth: hci4: command tx timeout [ 71.805363][ T58] usb 7-1: Using ep0 maxpacket: 32 [ 71.807125][ T58] usb 7-1: unable to get BOS descriptor or descriptor too short [ 71.807157][ T58] usb 7-1: New USB device found: idVendor=0b05, idProduct=1739, bcdDevice=0.40 [ 71.807996][ T58] usb 7-1: config 1 has an invalid descriptor of length 21, skipping remainder of the config [ 71.808030][ T58] usb 7-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 71.810416][ T58] usb 7-1: language id specifier not provided by device, defaulting to English [ 71.811638][ T58] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.811649][ T58] usb 7-1: Product: syz [ 71.811656][ T58] usb 7-1: Manufacturer: ц [ 71.811663][ T58] usb 7-1: SerialNumber: syz [ 71.911381][ T6176] veth0_vlan: entered promiscuous mode [ 71.916805][ T6176] veth1_vlan: entered promiscuous mode [ 71.931966][ T6176] veth0_macvtap: entered promiscuous mode [ 71.934362][ T6176] veth1_macvtap: entered promiscuous mode [ 71.970632][ T6176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.974125][ T6176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.995919][ T5870] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.018763][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.018978][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.018998][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.057844][ T1181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.057857][ T1181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.088954][ T1181] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.088968][ T1181] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.178981][ T58] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 72.222670][ T58] usb 7-1: USB disconnect, device number 3 [ 72.254741][ T6177] udevd[6177]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 73.214141][ T6282] jffs2: notice: (6282) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 2 orphan) and 2 of xref (0 dead, 2 orphan) found. [ 73.244985][ T9] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 73.255722][ T6285] device-mapper: table: 248:4: mirror: Device lookup failure (-ENOENT) [ 73.255735][ T6285] device-mapper: ioctl: error adding target to table [ 73.367018][ T6292] rxe_eth0 speed is unknown, defaulting to 1000 [ 73.396713][ T9] usb 7-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 73.397538][ T9] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 73.397550][ T9] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 73.397559][ T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 73.397578][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 73.397589][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 73.398800][ T9] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 73.398812][ T9] usb 7-1: Product: syz [ 73.398818][ T9] usb 7-1: Manufacturer: syz [ 73.404715][ T9] cdc_wdm 7-1:1.0: skipping garbage [ 73.404724][ T9] cdc_wdm 7-1:1.0: skipping garbage [ 73.411446][ T9] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 73.411457][ T9] cdc_wdm 7-1:1.0: Unknown control protocol [ 73.530863][ T6209] syz.2.65 (6209) used greatest stack depth: 18392 bytes left [ 73.582063][ T6296] rxe_eth0 speed is unknown, defaulting to 1000 [ 73.885998][ T5797] Bluetooth: hci4: command tx timeout [ 74.226685][ T50] usb 7-1: USB disconnect, device number 4 [ 74.336879][ T5794] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 74.337730][ T5794] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 74.338942][ T5794] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 74.340180][ T5794] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 74.340875][ T5794] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 74.636923][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.655787][ T6306] rxe_eth0 speed is unknown, defaulting to 1000 [ 74.701367][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.935953][ T6306] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.936038][ T6306] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.936092][ T6306] bridge_slave_0: entered allmulticast mode [ 74.936777][ T6306] bridge_slave_0: entered promiscuous mode [ 74.938464][ T6306] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.938535][ T6306] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.938709][ T6306] bridge_slave_1: entered allmulticast mode [ 74.939324][ T6306] bridge_slave_1: entered promiscuous mode [ 75.028613][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.109489][ T6306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.156438][ T6306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.267505][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.371943][ T6306] team0: Port device team_slave_0 added [ 75.377765][ T6306] team0: Port device team_slave_1 added [ 75.401836][ T6306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.401850][ T6306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.401869][ T6306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.403510][ T6306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.403522][ T6306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.403542][ T6306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.488494][ T6306] hsr_slave_0: entered promiscuous mode [ 75.489358][ T6306] hsr_slave_1: entered promiscuous mode [ 75.694409][ T13] bridge_slave_1: left allmulticast mode [ 75.694424][ T13] bridge_slave_1: left promiscuous mode [ 75.694550][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.702308][ T13] bridge_slave_0: left allmulticast mode [ 75.702327][ T13] bridge_slave_0: left promiscuous mode [ 75.702930][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.788288][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 75.789832][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 75.790732][ T13] bond0 (unregistering): Released all slaves [ 75.806075][ T6340] rxe_eth0 speed is unknown, defaulting to 1000 [ 75.857022][ T6306] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 75.860416][ T6306] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 75.860839][ T6306] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 75.872275][ T6306] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 75.873233][ T13] tipc: Left network mode [ 75.874982][ T6306] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 75.888917][ T6306] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 75.946513][ T6306] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 75.948655][ T6306] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 75.965086][ T5797] Bluetooth: hci4: command tx timeout [ 76.064604][ T857] cfg80211: failed to load regulatory.db [ 76.198265][ T5506] 8021q: adding VLAN 0 to HW filter on device eth6 [ 76.365605][ T5797] Bluetooth: hci3: command tx timeout [ 76.410149][ T6306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.498111][ T6306] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.501280][ T114] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.501327][ T114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.512229][ T114] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.512275][ T114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.559179][ T5506] 8021q: adding VLAN 0 to HW filter on device eth7 [ 76.721056][ T13] hsr_slave_0: left promiscuous mode [ 76.727779][ T13] hsr_slave_1: left promiscuous mode [ 76.731348][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.731359][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.741532][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.741543][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.768090][ T13] veth1_macvtap: left promiscuous mode [ 76.768129][ T13] veth0_macvtap: left promiscuous mode [ 76.768575][ T13] veth1_vlan: left promiscuous mode [ 76.768637][ T13] veth0_vlan: left promiscuous mode [ 76.958663][ T13] team0 (unregistering): Port device team_slave_1 removed [ 76.963444][ T13] team0 (unregistering): Port device team_slave_0 removed [ 77.893899][ T5506] 8021q: adding VLAN 0 to HW filter on device eth8 [ 78.004151][ T5797] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.006431][ T5797] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.010718][ T5797] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.014473][ T5797] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.014813][ T5797] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.045083][ T5797] Bluetooth: hci4: command tx timeout [ 78.098974][ T6306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.102674][ T6407] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.141959][ T5506] 8021q: adding VLAN 0 to HW filter on device eth9 [ 78.224153][ T6417] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.321585][ T6306] veth0_vlan: entered promiscuous mode [ 78.326481][ T6306] veth1_vlan: entered promiscuous mode [ 78.357770][ T6306] veth0_macvtap: entered promiscuous mode [ 78.364013][ T6306] veth1_macvtap: entered promiscuous mode [ 78.377978][ T6306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.383223][ T6306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.444957][ T5797] Bluetooth: hci3: command tx timeout [ 78.445599][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.445637][ T6350] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.446184][ T6350] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.446267][ T6350] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.525934][ T6404] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.698831][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.698888][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.309340][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.309352][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.556838][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.644342][ T6404] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.644431][ T6404] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.644493][ T6404] bridge_slave_0: entered allmulticast mode [ 79.645930][ T6404] bridge_slave_0: entered promiscuous mode [ 79.648201][ T6404] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.648267][ T6404] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.648325][ T6404] bridge_slave_1: entered allmulticast mode [ 79.649055][ T6404] bridge_slave_1: entered promiscuous mode [ 79.686616][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.696983][ T6404] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.700751][ T6404] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.721241][ T6478] netlink: 12 bytes leftover after parsing attributes in process `syz.5.103'. [ 79.731507][ T6477] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.736634][ T6404] team0: Port device team_slave_0 added [ 79.738187][ T6404] team0: Port device team_slave_1 added [ 79.762163][ T6404] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.762179][ T6404] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.762197][ T6404] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.763293][ T6404] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.763300][ T6404] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.763311][ T6404] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.820427][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.938034][ T6404] hsr_slave_0: entered promiscuous mode [ 79.938544][ T6404] hsr_slave_1: entered promiscuous mode [ 79.938861][ T6404] debugfs: 'hsr0' already exists in 'hsr' [ 79.938874][ T6404] Cannot create hsr debugfs directory [ 79.961202][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.045337][ T5797] Bluetooth: hci0: command tx timeout [ 80.119898][ T13] bridge_slave_1: left allmulticast mode [ 80.119922][ T13] bridge_slave_1: left promiscuous mode [ 80.120080][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.122907][ T13] bridge_slave_0: left allmulticast mode [ 80.122921][ T13] bridge_slave_0: left promiscuous mode [ 80.123015][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.123074][ T6486] jffs2: notice: (6486) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (1 unchecked, 2 orphan) and 3 of xref (0 dead, 2 orphan) found. [ 80.272199][ T13] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 80.273509][ T13] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 80.274241][ T13] .` (unregistering): Released all slaves [ 80.374830][ T6404] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 80.391426][ T6404] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.391906][ T6404] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 80.398277][ T6404] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.423359][ T6404] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 80.428028][ T6404] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.428740][ T6404] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 80.430697][ T6404] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.510664][ T6519] jffs2: notice: (6519) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (1 unchecked, 2 orphan) and 3 of xref (0 dead, 2 orphan) found. [ 80.516567][ T6404] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.524663][ T6404] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.526108][ T5794] Bluetooth: hci3: command tx timeout [ 80.532086][ T1175] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.532164][ T1175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.550863][ T114] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.550910][ T114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.560952][ T5506] 8021q: adding VLAN 0 to HW filter on device eth11 [ 80.834584][ T5506] 8021q: adding VLAN 0 to HW filter on device eth10 [ 81.070194][ T13] hsr_slave_0: left promiscuous mode [ 81.075298][ T13] hsr_slave_1: left promiscuous mode [ 81.075696][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.075706][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.077904][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.077915][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.086311][ T13] veth1_macvtap: left promiscuous mode [ 81.086343][ T13] veth0_macvtap: left promiscuous mode [ 81.086420][ T13] veth1_vlan: left promiscuous mode [ 81.086472][ T13] veth0_vlan: left promiscuous mode [ 81.322819][ T13] team0 (unregistering): Port device team_slave_1 removed [ 81.335947][ T13] team0 (unregistering): Port device team_slave_0 removed [ 81.435528][ T5506] 8021q: adding VLAN 0 to HW filter on device eth12 [ 81.470866][ T6571] jffs2: notice: (6571) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (1 unchecked, 2 orphan) and 3 of xref (0 dead, 2 orphan) found. [ 81.523591][ T6404] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.535838][ T6576] rxe_eth0 speed is unknown, defaulting to 1000 [ 81.592973][ T6585] netlink: 12 bytes leftover after parsing attributes in process `syz.2.125'. [ 81.650739][ T5506] 8021q: adding VLAN 0 to HW filter on device eth13 [ 81.792467][ T6404] veth0_vlan: entered promiscuous mode [ 81.806873][ T6404] veth1_vlan: entered promiscuous mode [ 81.833598][ T6404] veth0_macvtap: entered promiscuous mode [ 81.839524][ T6404] veth1_macvtap: entered promiscuous mode [ 81.892470][ T6404] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.903304][ T6404] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.937717][ T6350] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.937743][ T6350] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.937760][ T6350] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.937776][ T6350] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.947997][ T6613] jffs2: notice: (6613) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (1 unchecked, 2 orphan) and 3 of xref (0 dead, 2 orphan) found. [ 81.986893][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.986907][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.020424][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.020449][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.135140][ T5794] Bluetooth: hci0: command tx timeout [ 82.605676][ T5794] Bluetooth: hci3: command tx timeout [ 82.986545][ T5874] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 83.061289][ T6654] FAULT_INJECTION: forcing a failure. [ 83.061289][ T6654] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 83.061368][ T6654] CPU: 0 UID: 0 PID: 6654 Comm: syz.5.145 Not tainted syzkaller #0 PREEMPT(full) [ 83.061389][ T6654] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 83.061400][ T6654] Call Trace: [ 83.061406][ T6654] [ 83.061414][ T6654] dump_stack_lvl+0x100/0x190 [ 83.061445][ T6654] should_fail_ex.cold+0x5/0xa [ 83.061478][ T6654] _copy_to_user+0x32/0xd0 [ 83.061508][ T6654] bpf_verifier_vlog+0x333/0x6d0 [ 83.061537][ T6654] __btf_verifier_log+0xc3/0x100 [ 83.061563][ T6654] ? __pfx___btf_verifier_log+0x10/0x10 [ 83.061589][ T6654] ? __lock_acquire+0x5c0/0x1f40 [ 83.061620][ T6654] btf_parse_hdr+0x4b0/0xec0 [ 83.061645][ T6654] ? lock_acquire+0x1d1/0x380 [ 83.061663][ T6654] ? __might_fault+0xc5/0x140 [ 83.061686][ T6654] ? find_held_lock+0x2b/0x80 [ 83.061710][ T6654] ? __might_fault+0xc5/0x140 [ 83.061746][ T6654] ? __pfx_btf_parse_hdr+0x10/0x10 [ 83.061782][ T6654] btf_new_fd+0x60d/0x39d0 [ 83.061810][ T6654] ? __lock_acquire+0x5c0/0x1f40 [ 83.061834][ T6654] ? lock_acquire+0x1d1/0x380 [ 83.061858][ T6654] ? __pfx_btf_new_fd+0x10/0x10 [ 83.061884][ T6654] ? rcu_is_watching+0x13/0xc0 [ 83.061910][ T6654] ? apparmor_capable+0x1d7/0x4d0 [ 83.061936][ T6654] ? bpf_lsm_capable+0x9/0x10 [ 83.061954][ T6654] ? security_capable+0x80/0x260 [ 83.061974][ T6654] ? ns_capable+0xcd/0xf0 [ 83.062005][ T6654] __sys_bpf+0x2400/0x4b60 [ 83.062030][ T6654] ? __pfx___sys_bpf+0x10/0x10 [ 83.062046][ T6654] ? __pfx_futex_hash+0x10/0x10 [ 83.062068][ T6654] ? __pfx_get_futex_key+0x10/0x10 [ 83.062093][ T6654] ? lock_acquire+0x1d1/0x380 [ 83.062127][ T6654] ? up_write+0x2dc/0x5b0 [ 83.062170][ T6654] ? lock_acquire+0x1d1/0x380 [ 83.062187][ T6654] ? __might_fault+0xc5/0x140 [ 83.062210][ T6654] ? find_held_lock+0x2b/0x80 [ 83.062279][ T6654] ? __ia32_sys_bpf+0xcc/0x170 [ 83.062297][ T6654] __ia32_sys_bpf+0xcc/0x170 [ 83.062317][ T6654] ? __might_fault+0x111/0x140 [ 83.062338][ T6654] __do_fast_syscall_32+0x14b/0x8c0 [ 83.062364][ T6654] do_fast_syscall_32+0x32/0x70 [ 83.062390][ T6654] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 83.062413][ T6654] RIP: 0023:0xf7fd7fbc [ 83.062428][ T6654] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 83.062464][ T6654] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 83.062484][ T6654] RAX: ffffffffffffffda RBX: 0000000000000012 RCX: 0000000080000780 [ 83.062496][ T6654] RDX: 0000000000000028 RSI: 0000000000000000 RDI: 0000000000000000 [ 83.062508][ T6654] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 83.062519][ T6654] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 83.062530][ T6654] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 83.062556][ T6654] [ 83.198005][ T6662] FAULT_INJECTION: forcing a failure. [ 83.198005][ T6662] name failslab, interval 1, probability 0, space 0, times 0 [ 83.198024][ T6662] CPU: 2 UID: 0 PID: 6662 Comm: syz.5.145 Not tainted syzkaller #0 PREEMPT(full) [ 83.198036][ T6662] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 83.198042][ T6662] Call Trace: [ 83.198046][ T6662] [ 83.198051][ T6662] dump_stack_lvl+0x100/0x190 [ 83.198071][ T6662] should_fail_ex.cold+0x5/0xa [ 83.198087][ T6662] should_failslab+0xc2/0x120 [ 83.198101][ T6662] __kmalloc_flags_noprof+0x122/0x8e0 [ 83.198118][ T6662] ? alloc_slab_obj_exts+0x6a/0x170 [ 83.198135][ T6662] alloc_slab_obj_exts+0x6a/0x170 [ 83.198151][ T6662] __memcg_slab_post_alloc_hook+0x3f3/0x10b0 [ 83.198170][ T6662] ? kasan_save_track+0x14/0x30 [ 83.198183][ T6662] kmem_cache_alloc_noprof+0x4f5/0x6a0 [ 83.198200][ T6662] ? anon_vma_clone+0x4b8/0x2080 [ 83.198244][ T6662] anon_vma_clone+0x4b8/0x2080 [ 83.198261][ T6662] __split_vma+0x76c/0x22c0 [ 83.198277][ T6662] ? __pfx___split_vma+0x10/0x10 [ 83.198291][ T6662] ? mas_next_slot+0xc05/0x13a0 [ 83.198323][ T6662] vms_gather_munmap_vmas+0x3a5/0x1720 [ 83.198348][ T6662] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 83.198365][ T6662] ? mtree_range_walk+0x72b/0xb70 [ 83.198395][ T6662] ? mas_walk+0x260/0x310 [ 83.198419][ T6662] __mmap_region+0x4d4/0x3940 [ 83.198435][ T6662] ? bpf_ksym_find+0x124/0x1c0 [ 83.198446][ T6662] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 83.198459][ T6662] ? __pfx___mmap_region+0x10/0x10 [ 83.198472][ T6662] ? kernel_text_address+0x8d/0x100 [ 83.198487][ T6662] ? __kernel_text_address+0xd/0x30 [ 83.198502][ T6662] ? unwind_get_return_address+0x59/0xa0 [ 83.198517][ T6662] ? arch_stack_walk+0xa6/0xf0 [ 83.198538][ T6662] ? __lock_acquire+0x5c0/0x1f40 [ 83.198551][ T6662] ? stack_depot_save_flags+0x27/0xa10 [ 83.198563][ T6662] ? find_held_lock+0x2b/0x80 [ 83.198577][ T6662] ? is_bpf_text_address+0x8a/0x1a0 [ 83.198598][ T6662] ? __lock_acquire+0x5c0/0x1f40 [ 83.198610][ T6662] ? lock_acquire+0x1d1/0x380 [ 83.198620][ T6662] ? unwind_next_frame+0xbd/0x2090 [ 83.198636][ T6662] ? lock_acquire+0x1d1/0x380 [ 83.198646][ T6662] ? is_bpf_text_address+0x25/0x1a0 [ 83.198660][ T6662] ? find_held_lock+0x2b/0x80 [ 83.198673][ T6662] ? is_bpf_text_address+0x8a/0x1a0 [ 83.198686][ T6662] ? is_bpf_text_address+0x8a/0x1a0 [ 83.198699][ T6662] ? bpf_ksym_find+0x124/0x1c0 [ 83.198709][ T6662] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 83.198721][ T6662] ? is_bpf_text_address+0x94/0x1a0 [ 83.198735][ T6662] ? kernel_text_address+0x8d/0x100 [ 83.198768][ T6662] ? do_shmat+0x630/0x14d0 [ 83.198788][ T6662] mmap_region+0x3db/0x6d0 [ 83.198804][ T6662] ? __pfx_mmap_region+0x10/0x10 [ 83.198818][ T6662] ? shmem_mapping+0xd/0x50 [ 83.198837][ T6662] ? __pfx_memfd_check_seals_mmap+0x10/0x10 [ 83.198854][ T6662] ? bpf_lsm_mmap_addr+0x9/0x30 [ 83.198886][ T6662] ? security_mmap_addr+0x71/0x1e0 [ 83.198903][ T6662] ? __get_unmapped_area+0x255/0x3e0 [ 83.198916][ T6662] do_mmap+0x12c7/0x1c30 [ 83.198931][ T6662] ? lock_acquire+0x1d1/0x380 [ 83.198942][ T6662] ? __pfx_do_mmap+0x10/0x10 [ 83.198954][ T6662] ? bpf_lsm_current_getlsmprop_subj+0x9/0x10 [ 83.198966][ T6662] ? security_current_getlsmprop_subj+0x6e/0x130 [ 83.198983][ T6662] ? __pfx_down_write_killable+0x10/0x10 [ 83.199001][ T6662] do_shmat+0x113e/0x14d0 [ 83.199020][ T6662] ? __pfx_do_shmat+0x10/0x10 [ 83.199036][ T6662] ? lock_acquire+0x1d1/0x380 [ 83.199048][ T6662] __ia32_compat_sys_shmat+0xd9/0x170 [ 83.199063][ T6662] ? __might_fault+0xc5/0x140 [ 83.199076][ T6662] ? __pfx___ia32_compat_sys_shmat+0x10/0x10 [ 83.199093][ T6662] ? __might_fault+0x111/0x140 [ 83.199106][ T6662] __do_fast_syscall_32+0x14b/0x8c0 [ 83.199122][ T6662] do_fast_syscall_32+0x32/0x70 [ 83.199137][ T6662] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 83.199150][ T6662] RIP: 0023:0xf7fd7fbc [ 83.199159][ T6662] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 83.199169][ T6662] RSP: 002b:00000000f546550c EFLAGS: 00000292 ORIG_RAX: 000000000000018d [ 83.199180][ T6662] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000000 [ 83.199187][ T6662] RDX: 00000000532b703b RSI: 0000000000000000 RDI: 0000000000000000 [ 83.199193][ T6662] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 83.199198][ T6662] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 83.199204][ T6662] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 83.199217][ T6662] [ 83.217146][ T5874] usb 7-1: New USB device found: idVendor=05f9, idProduct=ffff, bcdDevice=1.00 [ 83.218254][ T5874] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 83.218294][ T5874] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 83.224368][ T5874] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.224391][ T5874] usb 7-1: Product: syz [ 83.224404][ T5874] usb 7-1: Manufacturer: syz [ 83.224417][ T5874] usb 7-1: SerialNumber: syz [ 83.235265][ T6640] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 83.235407][ T6640] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 83.249930][ T5874] usbserial_generic 7-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 83.249951][ T5874] usbserial_generic 7-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 83.249984][ T5874] usbserial_generic 7-1:1.0: generic converter detected [ 83.258991][ T5874] usb 7-1: generic converter now attached to ttyUSB0 [ 83.468449][ T5898] usb 7-1: USB disconnect, device number 5 [ 83.478695][ T5898] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 83.479303][ T5898] usbserial_generic 7-1:1.0: device disconnected [ 83.504110][ T6674] rxe_eth0 speed is unknown, defaulting to 1000 [ 83.542366][ T6677] netlink: 12 bytes leftover after parsing attributes in process `syz.4.152'. [ 83.545683][ T24] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 83.705347][ T24] usb 11-1: Using ep0 maxpacket: 32 [ 83.707006][ T24] usb 11-1: unable to get BOS descriptor or descriptor too short [ 83.707030][ T24] usb 11-1: New USB device found: idVendor=0b05, idProduct=1739, bcdDevice=0.40 [ 83.707802][ T24] usb 11-1: config 1 has an invalid descriptor of length 21, skipping remainder of the config [ 83.707835][ T24] usb 11-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 83.710643][ T24] usb 11-1: language id specifier not provided by device, defaulting to English [ 83.712034][ T24] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.712050][ T24] usb 11-1: Product: syz [ 83.712059][ T24] usb 11-1: Manufacturer: ц [ 83.712068][ T24] usb 11-1: SerialNumber: syz [ 84.098360][ T24] usb 11-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 84.116966][ T24] usb 11-1: USB disconnect, device number 2 [ 84.134641][ T6274] udevd[6274]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb11/11-1/11-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 84.204987][ T5794] Bluetooth: hci0: command tx timeout [ 84.535768][ T5214] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 84.718012][ T5214] usb 7-1: New USB device found: idVendor=05f9, idProduct=ffff, bcdDevice=1.00 [ 84.718968][ T5214] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 84.718985][ T5214] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 84.728100][ T5214] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.728114][ T5214] usb 7-1: Product: syz [ 84.728121][ T5214] usb 7-1: Manufacturer: syz [ 84.728128][ T5214] usb 7-1: SerialNumber: syz [ 84.730483][ T6708] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 84.730531][ T6708] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 84.733574][ T5214] usbserial_generic 7-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 84.733585][ T5214] usbserial_generic 7-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 84.733602][ T5214] usbserial_generic 7-1:1.0: generic converter detected [ 84.741295][ T5214] usb 7-1: generic converter now attached to ttyUSB0 [ 84.963329][ T5898] usb 7-1: USB disconnect, device number 6 [ 84.979452][ T5898] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 84.979761][ T5898] usbserial_generic 7-1:1.0: device disconnected [ 85.014682][ T6725] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 85.020336][ T6725] netlink: 4 bytes leftover after parsing attributes in process `syz.6.164'. [ 85.344186][ T6747] FAULT_INJECTION: forcing a failure. [ 85.344186][ T6747] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 85.344211][ T6747] CPU: 3 UID: 0 PID: 6747 Comm: syz.6.173 Not tainted syzkaller #0 PREEMPT(full) [ 85.344224][ T6747] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.344235][ T6747] Call Trace: [ 85.344241][ T6747] [ 85.344248][ T6747] dump_stack_lvl+0x100/0x190 [ 85.344277][ T6747] should_fail_ex.cold+0x5/0xa [ 85.344299][ T6747] _copy_from_iter+0x1f4/0x16c0 [ 85.344324][ T6747] ? __asan_memset+0x23/0x50 [ 85.344350][ T6747] ? __pfx__copy_from_iter+0x10/0x10 [ 85.344374][ T6747] ? __pfx___alloc_skb+0x10/0x10 [ 85.344402][ T6747] netlink_sendmsg+0x8f5/0x10c0 [ 85.344428][ T6747] ? __pfx_netlink_sendmsg+0x10/0x10 [ 85.344458][ T6747] ? apparmor_socket_sendmsg+0x165/0x280 [ 85.344482][ T6747] ? __sys_sendto+0x492/0x4e0 [ 85.344500][ T6747] __sys_sendto+0x492/0x4e0 [ 85.344514][ T6747] ? __pfx_netlink_sendmsg+0x10/0x10 [ 85.344538][ T6747] ? __pfx___sys_sendto+0x10/0x10 [ 85.344565][ T6747] ? fd_install+0x223/0x580 [ 85.344593][ T6747] ? find_held_lock+0x2b/0x80 [ 85.344609][ T6747] ? __might_fault+0xc5/0x140 [ 85.344629][ T6747] ? __might_fault+0xc5/0x140 [ 85.344651][ T6747] __ia32_sys_sendto+0xdd/0x1b0 [ 85.344672][ T6747] ? __might_fault+0x111/0x140 [ 85.344693][ T6747] __do_fast_syscall_32+0x14b/0x8c0 [ 85.344715][ T6747] do_fast_syscall_32+0x32/0x70 [ 85.344737][ T6747] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 85.344759][ T6747] RIP: 0023:0xf73befbc [ 85.344773][ T6747] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 85.344787][ T6747] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000171 [ 85.344801][ T6747] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000ac0 [ 85.344812][ T6747] RDX: 0000000000000078 RSI: 0000000085d76a80 RDI: 0000000000000000 [ 85.344821][ T6747] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 85.344830][ T6747] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 85.344839][ T6747] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 85.344861][ T6747] [ 85.351473][ T6747] netlink: 4 bytes leftover after parsing attributes in process `syz.6.173'. [ 85.522382][ T6751] syzkaller0: entered promiscuous mode [ 85.522396][ T6751] syzkaller0: entered allmulticast mode [ 85.562470][ T6751] tipc: Started in network mode [ 85.562486][ T6751] tipc: Node identity 02311ae930bb, cluster identity 4711 [ 85.562594][ T6751] tipc: Enabled bearer , priority 0 [ 85.571042][ T6749] tipc: Resetting bearer [ 85.593711][ T6749] tipc: Disabling bearer [ 85.775056][ T24] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 85.785699][ T5898] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 85.925431][ T24] usb 7-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 85.926275][ T24] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 85.926289][ T24] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 85.926299][ T24] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 85.926318][ T24] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 85.926331][ T24] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 85.927576][ T24] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 85.927588][ T24] usb 7-1: Product: syz [ 85.927595][ T24] usb 7-1: Manufacturer: syz [ 85.931372][ T24] cdc_wdm 7-1:1.0: skipping garbage [ 85.931382][ T24] cdc_wdm 7-1:1.0: skipping garbage [ 85.935339][ T24] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 85.935349][ T24] cdc_wdm 7-1:1.0: Unknown control protocol [ 85.936418][ T5898] usb 9-1: Using ep0 maxpacket: 32 [ 85.951309][ T5898] usb 9-1: unable to get BOS descriptor or descriptor too short [ 85.951336][ T5898] usb 9-1: New USB device found: idVendor=0b05, idProduct=1739, bcdDevice=0.40 [ 85.953715][ T5898] usb 9-1: config 1 has an invalid descriptor of length 21, skipping remainder of the config [ 85.953750][ T5898] usb 9-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 85.956972][ T5898] usb 9-1: language id specifier not provided by device, defaulting to English [ 85.958283][ T5898] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.958295][ T5898] usb 9-1: Product: syz [ 85.958302][ T5898] usb 9-1: Manufacturer: ц [ 85.958309][ T5898] usb 9-1: SerialNumber: syz [ 86.142994][ T5866] usb 7-1: USB disconnect, device number 7 [ 86.286901][ T5794] Bluetooth: hci0: command tx timeout [ 86.376041][ T5898] usb 9-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 86.405948][ T5898] usb 9-1: USB disconnect, device number 2 [ 86.421092][ T6274] udevd[6274]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 86.848188][ T6774] netlink: 4 bytes leftover after parsing attributes in process `syz.2.183'. [ 86.933716][ T6777] syzkaller0: entered promiscuous mode [ 86.933730][ T6777] syzkaller0: entered allmulticast mode [ 86.954501][ T6777] tipc: Started in network mode [ 86.954618][ T6777] tipc: Node identity 46ccd07b4d3, cluster identity 4711 [ 86.954728][ T6777] tipc: Enabled bearer , priority 0 [ 86.959882][ T6775] tipc: Resetting bearer [ 86.973289][ T6775] tipc: Disabling bearer [ 87.035045][ T9] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 87.205945][ T9] usb 11-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 87.207256][ T9] usb 11-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 87.207277][ T9] usb 11-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 87.207292][ T9] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 87.207324][ T9] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 87.207343][ T9] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 87.209037][ T9] usb 11-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 87.209053][ T9] usb 11-1: Product: syz [ 87.209065][ T9] usb 11-1: Manufacturer: syz [ 87.217725][ T9] cdc_wdm 11-1:1.0: skipping garbage [ 87.217739][ T9] cdc_wdm 11-1:1.0: skipping garbage [ 87.219883][ T9] cdc_wdm 11-1:1.0: cdc-wdm0: USB WDM device [ 87.219898][ T9] cdc_wdm 11-1:1.0: Unknown control protocol [ 87.345132][ T50] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 87.497291][ T50] usb 7-1: New USB device found: idVendor=05f9, idProduct=ffff, bcdDevice=1.00 [ 87.498304][ T50] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 87.498329][ T50] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 87.500434][ T50] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.500454][ T50] usb 7-1: Product: syz [ 87.500467][ T50] usb 7-1: Manufacturer: syz [ 87.500479][ T50] usb 7-1: SerialNumber: syz [ 87.505110][ T6783] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 87.505264][ T6783] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 87.507473][ T50] usbserial_generic 7-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 87.507491][ T50] usbserial_generic 7-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 87.507521][ T50] usbserial_generic 7-1:1.0: generic converter detected [ 87.510633][ T50] usb 7-1: generic converter now attached to ttyUSB0 [ 87.780867][ T9] usb 7-1: USB disconnect, device number 8 [ 87.792155][ T9] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 87.792949][ T9] usbserial_generic 7-1:1.0: device disconnected [ 88.144014][ T6798] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.178266][ T6799] netlink: 12 bytes leftover after parsing attributes in process `syz.4.192'. [ 88.857620][ T6810] batman_adv: batadv0: Adding interface: macsec1 [ 88.857631][ T6810] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.857646][ T6810] batman_adv: batadv0: Interface activated: macsec1 [ 88.897923][ T6812] FAULT_INJECTION: forcing a failure. [ 88.897923][ T6812] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 88.897941][ T6812] CPU: 0 UID: 0 PID: 6812 Comm: syz.4.197 Not tainted syzkaller #0 PREEMPT(full) [ 88.897953][ T6812] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 88.897959][ T6812] Call Trace: [ 88.897963][ T6812] [ 88.897967][ T6812] dump_stack_lvl+0x100/0x190 [ 88.897988][ T6812] should_fail_ex.cold+0x5/0xa [ 88.898002][ T6812] _copy_to_user+0x32/0xd0 [ 88.898032][ T6812] bpf_verifier_vlog+0x333/0x6d0 [ 88.898049][ T6812] __btf_verifier_log+0xc3/0x100 [ 88.898064][ T6812] ? __pfx___btf_verifier_log+0x10/0x10 [ 88.898078][ T6812] ? __lock_acquire+0x5c0/0x1f40 [ 88.898095][ T6812] btf_parse_hdr+0x4b0/0xec0 [ 88.898110][ T6812] ? lock_acquire+0x1d1/0x380 [ 88.898120][ T6812] ? __might_fault+0xc5/0x140 [ 88.898134][ T6812] ? find_held_lock+0x2b/0x80 [ 88.898147][ T6812] ? __might_fault+0xc5/0x140 [ 88.898159][ T6812] ? __pfx_btf_parse_hdr+0x10/0x10 [ 88.898179][ T6812] btf_new_fd+0x60d/0x39d0 [ 88.898214][ T6812] ? __lock_acquire+0x5c0/0x1f40 [ 88.898228][ T6812] ? lock_acquire+0x1d1/0x380 [ 88.898241][ T6812] ? __pfx_btf_new_fd+0x10/0x10 [ 88.898255][ T6812] ? rcu_is_watching+0x13/0xc0 [ 88.898269][ T6812] ? apparmor_capable+0x1d7/0x4d0 [ 88.898285][ T6812] ? bpf_lsm_capable+0x9/0x10 [ 88.898297][ T6812] ? security_capable+0x80/0x260 [ 88.898309][ T6812] ? ns_capable+0xcd/0xf0 [ 88.898327][ T6812] __sys_bpf+0x2400/0x4b60 [ 88.898341][ T6812] ? __pfx___sys_bpf+0x10/0x10 [ 88.898351][ T6812] ? __raw_callee_save_pv_queued_spin_unlock_traced+0x15/0x40 [ 88.898375][ T6812] ? up_write+0x2dc/0x5b0 [ 88.898389][ T6812] ? irqentry_exit+0x202/0xab0 [ 88.898402][ T6812] ? lockdep_hardirqs_on+0x7d/0x110 [ 88.898423][ T6812] ? lock_acquire+0x5e/0x380 [ 88.898433][ T6812] ? find_held_lock+0x2b/0x80 [ 88.898449][ T6812] ? __ia32_sys_bpf+0xcc/0x170 [ 88.898459][ T6812] __ia32_sys_bpf+0xcc/0x170 [ 88.898469][ T6812] ? __might_fault+0x111/0x140 [ 88.898482][ T6812] __do_fast_syscall_32+0x14b/0x8c0 [ 88.898498][ T6812] do_fast_syscall_32+0x32/0x70 [ 88.898513][ T6812] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 88.898526][ T6812] RIP: 0023:0xf746efbc [ 88.898535][ T6812] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 88.898545][ T6812] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 88.898556][ T6812] RAX: ffffffffffffffda RBX: 0000000000000012 RCX: 0000000080000780 [ 88.898563][ T6812] RDX: 0000000000000028 RSI: 0000000000000000 RDI: 0000000000000000 [ 88.898569][ T6812] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 88.898574][ T6812] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 88.898580][ T6812] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 88.898593][ T6812] [ 89.027371][ T6814] FAULT_INJECTION: forcing a failure. [ 89.027371][ T6814] name failslab, interval 1, probability 0, space 0, times 0 [ 89.027399][ T6814] CPU: 1 UID: 0 PID: 6814 Comm: syz.4.197 Not tainted syzkaller #0 PREEMPT(full) [ 89.027420][ T6814] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 89.027431][ T6814] Call Trace: [ 89.027437][ T6814] [ 89.027444][ T6814] dump_stack_lvl+0x100/0x190 [ 89.027494][ T6814] should_fail_ex.cold+0x5/0xa [ 89.027518][ T6814] should_failslab+0xc2/0x120 [ 89.027539][ T6814] __kmalloc_cache_noprof+0x91/0x6d0 [ 89.027563][ T6814] ? reacquire_held_locks+0xdd/0x1f0 [ 89.027581][ T6814] ? hugetlb_vma_lock_alloc.part.0+0x3f/0x130 [ 89.027628][ T6814] hugetlb_vma_lock_alloc.part.0+0x3f/0x130 [ 89.027657][ T6814] hugetlb_reserve_pages+0x6c5/0x1660 [ 89.027683][ T6814] ? do_raw_spin_unlock+0x53/0x1e0 [ 89.027703][ T6814] ? find_held_lock+0x2b/0x80 [ 89.027725][ T6814] ? __pfx_hugetlb_reserve_pages+0x10/0x10 [ 89.027752][ T6814] ? touch_atime+0xa5/0x770 [ 89.027781][ T6814] hugetlbfs_file_mmap+0x51a/0x780 [ 89.027810][ T6814] ? __pfx_hugetlbfs_file_mmap+0x10/0x10 [ 89.027843][ T6814] shm_mmap+0x115/0x270 [ 89.027868][ T6814] __mmap_region+0x1891/0x3940 [ 89.027898][ T6814] ? __pfx___mmap_region+0x10/0x10 [ 89.027940][ T6814] ? lock_acquire+0x1d1/0x380 [ 89.027958][ T6814] ? find_held_lock+0x2b/0x80 [ 89.027980][ T6814] ? clockevents_program_event+0x1bf/0x820 [ 89.028005][ T6814] ? clockevents_program_event+0x1bf/0x820 [ 89.028041][ T6814] ? __lock_acquire+0x5c0/0x1f40 [ 89.028060][ T6814] ? lock_acquire+0x1d1/0x380 [ 89.028076][ T6814] ? unwind_next_frame+0xbd/0x2090 [ 89.028114][ T6814] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 89.028134][ T6814] ? is_bpf_text_address+0x94/0x1a0 [ 89.028156][ T6814] ? kernel_text_address+0x8d/0x100 [ 89.028208][ T6814] ? do_shmat+0x630/0x14d0 [ 89.028240][ T6814] mmap_region+0x3db/0x6d0 [ 89.028265][ T6814] ? __pfx_mmap_region+0x10/0x10 [ 89.028288][ T6814] ? shmem_mapping+0xd/0x50 [ 89.028308][ T6814] ? __pfx_memfd_check_seals_mmap+0x10/0x10 [ 89.028338][ T6814] ? bpf_lsm_mmap_addr+0x9/0x30 [ 89.028365][ T6814] ? security_mmap_addr+0x71/0x1e0 [ 89.028388][ T6814] ? __get_unmapped_area+0x255/0x3e0 [ 89.028407][ T6814] do_mmap+0x12c7/0x1c30 [ 89.028429][ T6814] ? lock_acquire+0x1d1/0x380 [ 89.028447][ T6814] ? __pfx_do_mmap+0x10/0x10 [ 89.028464][ T6814] ? bpf_lsm_current_getlsmprop_subj+0x9/0x10 [ 89.028482][ T6814] ? security_current_getlsmprop_subj+0x6e/0x130 [ 89.028507][ T6814] ? __pfx_down_write_killable+0x10/0x10 [ 89.028536][ T6814] do_shmat+0x113e/0x14d0 [ 89.028568][ T6814] ? __pfx_do_shmat+0x10/0x10 [ 89.028594][ T6814] ? lock_acquire+0x1d1/0x380 [ 89.028613][ T6814] __ia32_compat_sys_shmat+0xd9/0x170 [ 89.028638][ T6814] ? __might_fault+0xc5/0x140 [ 89.028658][ T6814] ? __pfx___ia32_compat_sys_shmat+0x10/0x10 [ 89.028686][ T6814] ? __might_fault+0x111/0x140 [ 89.028707][ T6814] __do_fast_syscall_32+0x14b/0x8c0 [ 89.028733][ T6814] do_fast_syscall_32+0x32/0x70 [ 89.028755][ T6814] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 89.028775][ T6814] RIP: 0023:0xf746efbc [ 89.028789][ T6814] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 89.028804][ T6814] RSP: 002b:00000000f546550c EFLAGS: 00000292 ORIG_RAX: 000000000000018d [ 89.028822][ T6814] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000000 [ 89.028832][ T6814] RDX: 00000000532b703b RSI: 0000000000000000 RDI: 0000000000000000 [ 89.028842][ T6814] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 89.028851][ T6814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.028861][ T6814] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 89.028883][ T6814] [ 89.029616][ T6814] HugeTLB: unable to allocate vma specific lock [ 89.792667][ T5874] usb 11-1: USB disconnect, device number 3 [ 90.265018][ T5874] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 90.425810][ T5874] usb 11-1: New USB device found: idVendor=05f9, idProduct=ffff, bcdDevice=1.00 [ 90.427021][ T5874] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 90.427045][ T5874] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 90.433492][ T5874] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.433510][ T5874] usb 11-1: Product: syz [ 90.433520][ T5874] usb 11-1: Manufacturer: syz [ 90.433530][ T5874] usb 11-1: SerialNumber: syz [ 90.445464][ T6830] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 90.445608][ T6830] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 90.473114][ T5874] usbserial_generic 11-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 90.473134][ T5874] usbserial_generic 11-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 90.473166][ T5874] usbserial_generic 11-1:1.0: generic converter detected [ 90.495753][ T5874] usb 11-1: generic converter now attached to ttyUSB0 [ 90.698744][ T24] usb 11-1: USB disconnect, device number 4 [ 90.707358][ T24] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 90.707953][ T24] usbserial_generic 11-1:1.0: device disconnected [ 91.493688][ T6865] Cannot find add_set index 0 as target [ 91.540107][ T6867] syzkaller0: entered promiscuous mode [ 91.540121][ T6867] syzkaller0: entered allmulticast mode [ 91.552474][ T6867] tipc: Enabled bearer , priority 0 [ 91.560225][ T6864] tipc: Resetting bearer [ 91.580479][ T6864] tipc: Disabling bearer [ 92.825051][ T5214] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 92.986019][ T5214] usb 11-1: New USB device found: idVendor=05f9, idProduct=ffff, bcdDevice=1.00 [ 92.987021][ T5214] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 92.987045][ T5214] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 92.989359][ T5214] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.989378][ T5214] usb 11-1: Product: syz [ 92.989390][ T5214] usb 11-1: Manufacturer: syz [ 92.989401][ T5214] usb 11-1: SerialNumber: syz [ 92.993904][ T6898] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 92.994037][ T6898] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 92.995872][ T5214] usbserial_generic 11-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 92.995885][ T5214] usbserial_generic 11-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 92.995909][ T5214] usbserial_generic 11-1:1.0: generic converter detected [ 93.005856][ T5214] usb 11-1: generic converter now attached to ttyUSB0 [ 93.214456][ T5214] usb 11-1: USB disconnect, device number 5 [ 93.228334][ T5214] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 93.231442][ T5214] usbserial_generic 11-1:1.0: device disconnected [ 94.009300][ T6929] FAULT_INJECTION: forcing a failure. [ 94.009300][ T6929] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 94.009327][ T6929] CPU: 1 UID: 0 PID: 6929 Comm: syz.2.228 Not tainted syzkaller #0 PREEMPT(full) [ 94.009348][ T6929] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 94.009358][ T6929] Call Trace: [ 94.009365][ T6929] [ 94.009372][ T6929] dump_stack_lvl+0x100/0x190 [ 94.009406][ T6929] should_fail_ex.cold+0x5/0xa [ 94.009433][ T6929] _copy_to_user+0x32/0xd0 [ 94.009464][ T6929] bpf_verifier_vlog+0x333/0x6d0 [ 94.009492][ T6929] __btf_verifier_log+0xc3/0x100 [ 94.009516][ T6929] ? __pfx___btf_verifier_log+0x10/0x10 [ 94.009540][ T6929] ? __lock_acquire+0x5c0/0x1f40 [ 94.009569][ T6929] btf_parse_hdr+0x4b0/0xec0 [ 94.009595][ T6929] ? lock_acquire+0x1d1/0x380 [ 94.009611][ T6929] ? __might_fault+0xc5/0x140 [ 94.009634][ T6929] ? find_held_lock+0x2b/0x80 [ 94.009658][ T6929] ? __might_fault+0xc5/0x140 [ 94.009679][ T6929] ? __pfx_btf_parse_hdr+0x10/0x10 [ 94.009715][ T6929] btf_new_fd+0x60d/0x39d0 [ 94.009743][ T6929] ? __lock_acquire+0x5c0/0x1f40 [ 94.009765][ T6929] ? __raw_callee_save_pv_queued_spin_unlock_traced+0x15/0x40 [ 94.009797][ T6929] ? __pfx_btf_new_fd+0x10/0x10 [ 94.009823][ T6929] ? rcu_is_watching+0x13/0xc0 [ 94.009848][ T6929] ? apparmor_capable+0x1d7/0x4d0 [ 94.009880][ T6929] ? bpf_lsm_capable+0x9/0x10 [ 94.009900][ T6929] ? security_capable+0x80/0x260 [ 94.009923][ T6929] ? ns_capable+0xcd/0xf0 [ 94.009956][ T6929] __sys_bpf+0x2400/0x4b60 [ 94.009985][ T6929] ? __pfx___sys_bpf+0x10/0x10 [ 94.010003][ T6929] ? rcu_is_watching+0x13/0xc0 [ 94.010031][ T6929] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 94.010052][ T6929] ? lockdep_hardirqs_on+0x7d/0x110 [ 94.010076][ T6929] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 94.010132][ T6929] ? lock_acquire+0x1d1/0x380 [ 94.010150][ T6929] ? __might_fault+0xc5/0x140 [ 94.010202][ T6929] ? find_held_lock+0x2b/0x80 [ 94.010233][ T6929] ? __ia32_sys_bpf+0xcc/0x170 [ 94.010250][ T6929] __ia32_sys_bpf+0xcc/0x170 [ 94.010270][ T6929] ? __might_fault+0x111/0x140 [ 94.010290][ T6929] __do_fast_syscall_32+0x14b/0x8c0 [ 94.010334][ T6929] do_fast_syscall_32+0x32/0x70 [ 94.010361][ T6929] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 94.010383][ T6929] RIP: 0023:0xf744efbc [ 94.010399][ T6929] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 94.010417][ T6929] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 94.010437][ T6929] RAX: ffffffffffffffda RBX: 0000000000000012 RCX: 0000000080000780 [ 94.010448][ T6929] RDX: 0000000000000028 RSI: 0000000000000000 RDI: 0000000000000000 [ 94.010458][ T6929] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 94.010467][ T6929] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 94.010478][ T6929] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 94.010499][ T6929] [ 94.232233][ T6931] FAULT_INJECTION: forcing a failure. [ 94.232233][ T6931] name fail_futex, interval 1, probability 0, space 0, times 1 [ 94.232260][ T6931] CPU: 0 UID: 0 PID: 6931 Comm: syz.2.228 Not tainted syzkaller #0 PREEMPT(full) [ 94.232282][ T6931] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 94.232294][ T6931] Call Trace: [ 94.232299][ T6931] [ 94.232305][ T6931] dump_stack_lvl+0x100/0x190 [ 94.232338][ T6931] should_fail_ex.cold+0x5/0xa [ 94.232364][ T6931] get_futex_key+0x1c9/0x13e0 [ 94.232390][ T6931] ? __pfx_get_futex_key+0x10/0x10 [ 94.232414][ T6931] ? do_mmap+0xd65/0x1c30 [ 94.232432][ T6931] futex_wake+0xf4/0x5e0 [ 94.232448][ T6931] ? lock_acquire+0x1d1/0x380 [ 94.232469][ T6931] ? __pfx_futex_wake+0x10/0x10 [ 94.232489][ T6931] ? do_shmat+0xad6/0x14d0 [ 94.232521][ T6931] do_futex+0x2b2/0x440 [ 94.232545][ T6931] ? __pfx_do_futex+0x10/0x10 [ 94.232575][ T6931] __ia32_sys_futex_time32+0x2f4/0x470 [ 94.232606][ T6931] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 94.232634][ T6931] ? __might_fault+0xc5/0x140 [ 94.232661][ T6931] __do_fast_syscall_32+0x14b/0x8c0 [ 94.232690][ T6931] do_fast_syscall_32+0x32/0x70 [ 94.232714][ T6931] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 94.232737][ T6931] RIP: 0023:0xf744efbc [ 94.232752][ T6931] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 94.232767][ T6931] RSP: 002b:00000000f54455cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 94.232784][ T6931] RAX: ffffffffffffffda RBX: 00000000f7475024 RCX: 0000000000000081 [ 94.232795][ T6931] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 94.232805][ T6931] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 94.232815][ T6931] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 94.232825][ T6931] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 94.232849][ T6931] [ 95.445039][ T58] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 95.624990][ T58] usb 11-1: Using ep0 maxpacket: 32 [ 95.628597][ T58] usb 11-1: unable to get BOS descriptor or descriptor too short [ 95.628632][ T58] usb 11-1: New USB device found: idVendor=0b05, idProduct=1739, bcdDevice=0.40 [ 95.629641][ T58] usb 11-1: config 1 has an invalid descriptor of length 21, skipping remainder of the config [ 95.629694][ T58] usb 11-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 95.632395][ T58] usb 11-1: language id specifier not provided by device, defaulting to English [ 95.633863][ T58] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.633880][ T58] usb 11-1: Product: syz [ 95.633890][ T58] usb 11-1: Manufacturer: ц [ 95.633907][ T58] usb 11-1: SerialNumber: syz [ 96.095073][ T58] usb 11-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 96.132470][ T58] usb 11-1: USB disconnect, device number 6 [ 96.151914][ T6274] udevd[6274]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb11/11-1/11-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 97.903224][ T6944] rxe_eth0 speed is unknown, defaulting to 1000 [ 97.958859][ T6945] netlink: 12 bytes leftover after parsing attributes in process `syz.6.234'. [ 98.792934][ T5797] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 98.794684][ T5797] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 98.795706][ T5797] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 98.796188][ T5797] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 98.796477][ T5797] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 98.849712][ T6956] FAULT_INJECTION: forcing a failure. [ 98.849712][ T6956] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 98.849729][ T6956] CPU: 0 UID: 0 PID: 6956 Comm: syz.6.238 Not tainted syzkaller #0 PREEMPT(full) [ 98.849741][ T6956] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 98.849747][ T6956] Call Trace: [ 98.849751][ T6956] [ 98.849755][ T6956] dump_stack_lvl+0x100/0x190 [ 98.849775][ T6956] should_fail_ex.cold+0x5/0xa [ 98.849790][ T6956] _copy_to_user+0x32/0xd0 [ 98.849815][ T6956] bpf_verifier_vlog+0x333/0x6d0 [ 98.849831][ T6956] __btf_verifier_log+0xc3/0x100 [ 98.849846][ T6956] ? __pfx___btf_verifier_log+0x10/0x10 [ 98.849861][ T6956] ? __lock_acquire+0x5c0/0x1f40 [ 98.849877][ T6956] btf_parse_hdr+0x4b0/0xec0 [ 98.849891][ T6956] ? lock_acquire+0x1d1/0x380 [ 98.849901][ T6956] ? __might_fault+0xc5/0x140 [ 98.849914][ T6956] ? find_held_lock+0x2b/0x80 [ 98.849928][ T6956] ? __might_fault+0xc5/0x140 [ 98.849940][ T6956] ? __pfx_btf_parse_hdr+0x10/0x10 [ 98.849959][ T6956] btf_new_fd+0x60d/0x39d0 [ 98.849975][ T6956] ? __lock_acquire+0x5c0/0x1f40 [ 98.849987][ T6956] ? lock_acquire+0x1d1/0x380 [ 98.850000][ T6956] ? __pfx_btf_new_fd+0x10/0x10 [ 98.850014][ T6956] ? rcu_is_watching+0x13/0xc0 [ 98.850029][ T6956] ? apparmor_capable+0x1d7/0x4d0 [ 98.850043][ T6956] ? bpf_lsm_capable+0x9/0x10 [ 98.850053][ T6956] ? security_capable+0x80/0x260 [ 98.850066][ T6956] ? ns_capable+0xcd/0xf0 [ 98.850083][ T6956] __sys_bpf+0x2400/0x4b60 [ 98.850098][ T6956] ? __pfx___sys_bpf+0x10/0x10 [ 98.850108][ T6956] ? __raw_callee_save_pv_queued_spin_unlock_traced+0x15/0x40 [ 98.850130][ T6956] ? up_write+0x2dc/0x5b0 [ 98.850183][ T6956] ? lock_acquire+0x1d1/0x380 [ 98.850194][ T6956] ? __might_fault+0xc5/0x140 [ 98.850208][ T6956] ? find_held_lock+0x2b/0x80 [ 98.850225][ T6956] ? __ia32_sys_bpf+0xcc/0x170 [ 98.850236][ T6956] __ia32_sys_bpf+0xcc/0x170 [ 98.850248][ T6956] ? __might_fault+0x111/0x140 [ 98.850263][ T6956] __do_fast_syscall_32+0x14b/0x8c0 [ 98.850279][ T6956] do_fast_syscall_32+0x32/0x70 [ 98.850293][ T6956] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 98.850307][ T6956] RIP: 0023:0xf73befbc [ 98.850317][ T6956] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 98.850327][ T6956] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 98.850337][ T6956] RAX: ffffffffffffffda RBX: 0000000000000012 RCX: 0000000080000780 [ 98.850344][ T6956] RDX: 0000000000000028 RSI: 0000000000000000 RDI: 0000000000000000 [ 98.850350][ T6956] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 98.850355][ T6956] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 98.850362][ T6956] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 98.850376][ T6956] [ 98.898435][ T6956] FAULT_INJECTION: forcing a failure. [ 98.898435][ T6956] name failslab, interval 1, probability 0, space 0, times 0 [ 98.898453][ T6956] CPU: 0 UID: 0 PID: 6956 Comm: syz.6.238 Not tainted syzkaller #0 PREEMPT(full) [ 98.898467][ T6956] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 98.898474][ T6956] Call Trace: [ 98.898478][ T6956] [ 98.898483][ T6956] dump_stack_lvl+0x100/0x190 [ 98.898502][ T6956] should_fail_ex.cold+0x5/0xa [ 98.898520][ T6956] should_failslab+0xc2/0x120 [ 98.898535][ T6956] __kmalloc_cache_noprof+0x91/0x6d0 [ 98.898552][ T6956] ? hugetlb_vma_lock_alloc.part.0+0x3f/0x130 [ 98.898572][ T6956] hugetlb_vma_lock_alloc.part.0+0x3f/0x130 [ 98.898588][ T6956] hugetlb_reserve_pages+0x6c5/0x1660 [ 98.898605][ T6956] ? __pfx_hugetlb_reserve_pages+0x10/0x10 [ 98.898623][ T6956] ? touch_atime+0xa5/0x770 [ 98.898641][ T6956] hugetlbfs_file_mmap+0x51a/0x780 [ 98.898659][ T6956] ? __pfx_hugetlbfs_file_mmap+0x10/0x10 [ 98.898680][ T6956] shm_mmap+0x115/0x270 [ 98.898696][ T6956] __mmap_region+0x1891/0x3940 [ 98.898715][ T6956] ? __pfx___mmap_region+0x10/0x10 [ 98.898729][ T6956] ? kernel_text_address+0x8d/0x100 [ 98.898755][ T6956] ? __lock_acquire+0x5c0/0x1f40 [ 98.898767][ T6956] ? find_held_lock+0x2b/0x80 [ 98.898791][ T6956] ? __lock_acquire+0x5c0/0x1f40 [ 98.898812][ T6956] ? lock_acquire+0x1d1/0x380 [ 98.898823][ T6956] ? unwind_next_frame+0xbd/0x2090 [ 98.898847][ T6956] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 98.898861][ T6956] ? is_bpf_text_address+0x94/0x1a0 [ 98.898876][ T6956] ? kernel_text_address+0x8d/0x100 [ 98.898910][ T6956] ? do_shmat+0x630/0x14d0 [ 98.898930][ T6956] mmap_region+0x3db/0x6d0 [ 98.898947][ T6956] ? __pfx_mmap_region+0x10/0x10 [ 98.898962][ T6956] ? shmem_mapping+0xd/0x50 [ 98.898974][ T6956] ? __pfx_memfd_check_seals_mmap+0x10/0x10 [ 98.898989][ T6956] ? bpf_lsm_mmap_addr+0x9/0x30 [ 98.899003][ T6956] ? security_mmap_addr+0x71/0x1e0 [ 98.899018][ T6956] ? __get_unmapped_area+0x255/0x3e0 [ 98.899030][ T6956] do_mmap+0x12c7/0x1c30 [ 98.899043][ T6956] ? lock_acquire+0x1d1/0x380 [ 98.899053][ T6956] ? __pfx_do_mmap+0x10/0x10 [ 98.899064][ T6956] ? bpf_lsm_current_getlsmprop_subj+0x9/0x10 [ 98.899076][ T6956] ? security_current_getlsmprop_subj+0x6e/0x130 [ 98.899091][ T6956] ? __pfx_down_write_killable+0x10/0x10 [ 98.899108][ T6956] do_shmat+0x113e/0x14d0 [ 98.899127][ T6956] ? __pfx_do_shmat+0x10/0x10 [ 98.899162][ T6956] ? lock_acquire+0x1d1/0x380 [ 98.899176][ T6956] __ia32_compat_sys_shmat+0xd9/0x170 [ 98.899194][ T6956] ? __might_fault+0xc5/0x140 [ 98.899206][ T6956] ? __pfx___ia32_compat_sys_shmat+0x10/0x10 [ 98.899225][ T6956] ? __might_fault+0x111/0x140 [ 98.899238][ T6956] __do_fast_syscall_32+0x14b/0x8c0 [ 98.899256][ T6956] do_fast_syscall_32+0x32/0x70 [ 98.899271][ T6956] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 98.899284][ T6956] RIP: 0023:0xf73befbc [ 98.899294][ T6956] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 98.899308][ T6956] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 000000000000018d [ 98.899324][ T6956] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000000 [ 98.899333][ T6956] RDX: 00000000532b703b RSI: 0000000000000000 RDI: 0000000000000000 [ 98.899342][ T6956] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 98.899350][ T6956] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 98.899359][ T6956] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 98.899379][ T6956] [ 99.233044][ T5870] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.257523][ T6950] rxe_eth0 speed is unknown, defaulting to 1000 [ 99.352376][ T5870] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.454676][ T5870] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.548574][ T5870] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.782826][ T5870] bridge_slave_1: left allmulticast mode [ 99.782843][ T5870] bridge_slave_1: left promiscuous mode [ 99.783001][ T5870] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.793243][ T5870] bridge_slave_0: left allmulticast mode [ 99.793266][ T5870] bridge_slave_0: left promiscuous mode [ 99.793377][ T5870] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.932817][ T5870] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.940533][ T5870] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.950031][ T5870] bond0 (unregistering): Released all slaves [ 99.957458][ T6950] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.957500][ T6950] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.957625][ T6950] bridge_slave_0: entered allmulticast mode [ 99.958409][ T6950] bridge_slave_0: entered promiscuous mode [ 99.973896][ T6950] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.974029][ T6950] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.974162][ T6950] bridge_slave_1: entered allmulticast mode [ 99.977834][ T6950] bridge_slave_1: entered promiscuous mode [ 100.095892][ T6950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.098457][ T6950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.115781][ T6950] team0: Port device team_slave_0 added [ 100.119217][ T6950] team0: Port device team_slave_1 added [ 100.135930][ T6950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.135940][ T6950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.135952][ T6950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.138959][ T6950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.138969][ T6950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.138981][ T6950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.196811][ T6950] hsr_slave_0: entered promiscuous mode [ 100.197239][ T6950] hsr_slave_1: entered promiscuous mode [ 100.197515][ T6950] debugfs: 'hsr0' already exists in 'hsr' [ 100.197524][ T6950] Cannot create hsr debugfs directory [ 100.253949][ T5506] 8021q: adding VLAN 0 to HW filter on device eth14 [ 100.526393][ T5506] 8021q: adding VLAN 0 to HW filter on device eth15 [ 100.533804][ T5870] hsr_slave_0: left promiscuous mode [ 100.534324][ T5870] hsr_slave_1: left promiscuous mode [ 100.534719][ T5870] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.534735][ T5870] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.543116][ T5870] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.543128][ T5870] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.565533][ T5870] veth1_macvtap: left promiscuous mode [ 100.565567][ T5870] veth0_macvtap: left promiscuous mode [ 100.565645][ T5870] veth1_vlan: left promiscuous mode [ 100.565691][ T5870] veth0_vlan: left promiscuous mode [ 100.748613][ T5870] team0 (unregistering): Port device team_slave_1 removed [ 100.758893][ T5870] team0 (unregistering): Port device team_slave_0 removed [ 100.848774][ T5794] Bluetooth: hci1: command tx timeout [ 100.892051][ T6950] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 100.907438][ T6950] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 100.910543][ T6950] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 100.927872][ T6950] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 100.928413][ T6950] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 100.947297][ T6950] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 100.950013][ T6950] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 100.959002][ T6950] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 101.118964][ T6950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.131796][ T6950] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.137875][ T1175] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.137921][ T1175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.142495][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.142541][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.207470][ T5506] 8021q: adding VLAN 0 to HW filter on device eth16 [ 101.444298][ T5506] 8021q: adding VLAN 0 to HW filter on device eth17 [ 101.700750][ T6950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.970889][ T6950] veth0_vlan: entered promiscuous mode [ 101.977580][ T6950] veth1_vlan: entered promiscuous mode [ 102.004146][ T6950] veth0_macvtap: entered promiscuous mode [ 102.008747][ T6950] veth1_macvtap: entered promiscuous mode [ 102.022549][ T6950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.027145][ T6950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.090367][ T1175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.090388][ T1175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.104803][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.104821][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.105864][ T6350] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.106203][ T6350] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.106234][ T6350] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.106262][ T6350] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.926532][ T5794] Bluetooth: hci1: command tx timeout [ 103.415069][ T5874] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 103.568691][ T5874] usb 12-1: New USB device found: idVendor=05f9, idProduct=ffff, bcdDevice=1.00 [ 103.569976][ T5874] usb 12-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 103.570002][ T5874] usb 12-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 103.572134][ T5874] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.572154][ T5874] usb 12-1: Product: syz [ 103.572166][ T5874] usb 12-1: Manufacturer: syz [ 103.572177][ T5874] usb 12-1: SerialNumber: syz [ 103.584531][ T7031] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 103.584688][ T7031] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 103.586079][ T5874] usbserial_generic 12-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 103.586095][ T5874] usbserial_generic 12-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 103.586149][ T5874] usbserial_generic 12-1:1.0: generic converter detected [ 103.594687][ T5874] usb 12-1: generic converter now attached to ttyUSB0 [ 103.865054][ T5874] usb 12-1: USB disconnect, device number 2 [ 103.872693][ T5874] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 103.873020][ T5874] usbserial_generic 12-1:1.0: device disconnected [ 104.512073][ T5797] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 104.533136][ T5797] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 104.533859][ T5797] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 104.537853][ T5797] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 104.538439][ T5797] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 104.598008][ T7044] rxe_eth0 speed is unknown, defaulting to 1000 [ 104.658367][ T7046] netlink: 12 bytes leftover after parsing attributes in process `syz.7.244'. [ 104.823802][ T7036] rxe_eth0 speed is unknown, defaulting to 1000 [ 105.006148][ T5797] Bluetooth: hci1: command tx timeout [ 105.102610][ T7036] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.102654][ T7036] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.102709][ T7036] bridge_slave_0: entered allmulticast mode [ 105.103447][ T7036] bridge_slave_0: entered promiscuous mode [ 105.114863][ T7036] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.114992][ T7036] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.115054][ T7036] bridge_slave_1: entered allmulticast mode [ 105.116114][ T7036] bridge_slave_1: entered promiscuous mode [ 105.142852][ T7036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.160569][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.171930][ T7036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.196298][ T7036] team0: Port device team_slave_0 added [ 105.198687][ T7036] team0: Port device team_slave_1 added [ 105.218784][ T7036] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.218800][ T7036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.218820][ T7036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.220314][ T7036] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.220325][ T7036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.220346][ T7036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.273874][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.282738][ T7036] hsr_slave_0: entered promiscuous mode [ 105.283184][ T7036] hsr_slave_1: entered promiscuous mode [ 105.353712][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.390654][ T7036] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 105.394143][ T7036] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.395753][ T7036] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 105.407842][ T7036] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.408610][ T7036] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 105.412706][ T7036] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.413477][ T7036] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 105.418138][ T7036] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.442529][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.480051][ T7036] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.480134][ T7036] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.480328][ T7036] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.480449][ T7036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.559470][ T7036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.571135][ T7036] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.589710][ T1181] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.590375][ T1181] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.601150][ T1181] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.601226][ T1181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.606746][ T1181] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.606825][ T1181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.929823][ T13] bridge_slave_1: left allmulticast mode [ 105.929847][ T13] bridge_slave_1: left promiscuous mode [ 105.930029][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.959421][ T13] bridge_slave_0: left allmulticast mode [ 105.959446][ T13] bridge_slave_0: left promiscuous mode [ 105.960432][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.091964][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.097377][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.100136][ T13] bond0 (unregistering): Released all slaves [ 106.274984][ T7036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.611346][ T5797] Bluetooth: hci3: command tx timeout [ 106.663672][ T7036] veth0_vlan: entered promiscuous mode [ 106.669174][ T7036] veth1_vlan: entered promiscuous mode [ 106.675708][ T5506] 8021q: adding VLAN 0 to HW filter on device eth18 [ 106.694267][ T7036] veth0_macvtap: entered promiscuous mode [ 106.702979][ T7036] veth1_macvtap: entered promiscuous mode [ 106.711594][ T13] hsr_slave_0: left promiscuous mode [ 106.712018][ T13] hsr_slave_1: left promiscuous mode [ 106.712407][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.712418][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.712897][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.712906][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.713332][ T13] batman_adv: batadv0: Interface deactivated: macsec1 [ 106.713340][ T13] batman_adv: batadv0: Removing interface: macsec1 [ 106.721778][ T13] veth1_macvtap: left promiscuous mode [ 106.721805][ T13] veth0_macvtap: left promiscuous mode [ 106.721879][ T13] veth1_vlan: left promiscuous mode [ 106.721960][ T13] veth0_vlan: left promiscuous mode [ 106.898735][ T13] team0 (unregistering): Port device team_slave_1 removed [ 106.903468][ T13] team0 (unregistering): Port device team_slave_0 removed [ 106.944983][ T5874] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 106.988647][ T5506] 8021q: adding VLAN 0 to HW filter on device eth20 [ 106.994862][ T7036] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.009113][ T7036] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.029784][ T5870] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.029976][ T5870] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.030021][ T5870] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.030049][ T5870] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.096292][ T5797] Bluetooth: hci1: command tx timeout [ 107.115156][ T4528] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.115174][ T4528] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.128336][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.128355][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.139448][ T5874] usb 12-1: New USB device found: idVendor=05f9, idProduct=ffff, bcdDevice=1.00 [ 107.147496][ T5874] usb 12-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 107.147521][ T5874] usb 12-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 107.166595][ T5874] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.166620][ T5874] usb 12-1: Product: syz [ 107.166632][ T5874] usb 12-1: Manufacturer: syz [ 107.166644][ T5874] usb 12-1: SerialNumber: syz [ 107.169577][ T7101] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 107.169644][ T7101] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 107.170930][ T5874] usbserial_generic 12-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 107.170946][ T5874] usbserial_generic 12-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 107.170978][ T5874] usbserial_generic 12-1:1.0: generic converter detected [ 107.185659][ T5874] usb 12-1: generic converter now attached to ttyUSB0 [ 107.373311][ T5506] 8021q: adding VLAN 0 to HW filter on device eth21 [ 107.385412][ T5874] usb 12-1: USB disconnect, device number 3 [ 107.389517][ T5874] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 107.389958][ T5874] usbserial_generic 12-1:1.0: device disconnected [ 107.568708][ T5506] 8021q: adding VLAN 0 to HW filter on device eth19 [ 107.588058][ T857] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 107.735749][ T857] usb 13-1: New USB device found: idVendor=05f9, idProduct=ffff, bcdDevice=1.00 [ 107.736744][ T857] usb 13-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 107.736768][ T857] usb 13-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 107.738686][ T857] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.738705][ T857] usb 13-1: Product: syz [ 107.738717][ T857] usb 13-1: Manufacturer: syz [ 107.738729][ T857] usb 13-1: SerialNumber: syz [ 107.742252][ T7117] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 107.742343][ T7117] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 107.743548][ T857] usbserial_generic 13-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 107.743564][ T857] usbserial_generic 13-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 107.743595][ T857] usbserial_generic 13-1:1.0: generic converter detected [ 107.747709][ T857] usb 13-1: generic converter now attached to ttyUSB0 [ 108.006784][ T5874] usb 13-1: USB disconnect, device number 2 [ 108.011169][ T5874] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 108.011640][ T5874] usbserial_generic 13-1:1.0: device disconnected [ 108.029787][ T7138] rxe_eth0 speed is unknown, defaulting to 1000 [ 108.062663][ T7139] netlink: 12 bytes leftover after parsing attributes in process `syz.7.253'. [ 108.644306][ T7147] Cannot find add_set index 0 as target [ 108.685403][ T5797] Bluetooth: hci3: command tx timeout [ 108.705957][ T7148] netlink: 5936 bytes leftover after parsing attributes in process `syz.8.256'. [ 109.708355][ T7158] Cannot find add_set index 0 as target [ 109.751281][ T5794] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 109.752978][ T5794] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 109.753957][ T5794] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 109.754664][ T5794] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 109.755746][ T5794] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 109.823255][ T7168] syzkaller0: entered promiscuous mode [ 109.823269][ T7168] syzkaller0: entered allmulticast mode [ 109.841153][ T7168] tipc: Started in network mode [ 109.841178][ T7168] tipc: Node identity 6a4d9847dec4, cluster identity 4711 [ 109.841325][ T7168] tipc: Enabled bearer , priority 0 [ 109.939735][ T7161] rxe_eth0 speed is unknown, defaulting to 1000 [ 109.986892][ T5214] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 110.005357][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.096988][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.157864][ T5214] usb 12-1: New USB device found: idVendor=05f9, idProduct=ffff, bcdDevice=1.00 [ 110.158893][ T5214] usb 12-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 110.158908][ T5214] usb 12-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 110.160496][ T7161] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.160613][ T7161] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.160732][ T7161] bridge_slave_0: entered allmulticast mode [ 110.162029][ T7161] bridge_slave_0: entered promiscuous mode [ 110.164395][ T7161] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.164494][ T7161] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.164583][ T7161] bridge_slave_1: entered allmulticast mode [ 110.165851][ T7161] bridge_slave_1: entered promiscuous mode [ 110.189380][ T5214] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.189394][ T5214] usb 12-1: Product: syz [ 110.189401][ T5214] usb 12-1: Manufacturer: syz [ 110.189408][ T5214] usb 12-1: SerialNumber: syz [ 110.191369][ T7160] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 110.191805][ T7160] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 110.192611][ T5214] usbserial_generic 12-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 110.192622][ T5214] usbserial_generic 12-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 110.192645][ T5214] usbserial_generic 12-1:1.0: generic converter detected [ 110.195119][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.196108][ T5214] usb 12-1: generic converter now attached to ttyUSB0 [ 110.205766][ T7161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.207910][ T7161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.220049][ T7161] team0: Port device team_slave_0 added [ 110.221336][ T7161] team0: Port device team_slave_1 added [ 110.232675][ T7161] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.232684][ T7161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.232696][ T7161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.233723][ T7161] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.233731][ T7161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.233743][ T7161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.273330][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.291597][ T7161] hsr_slave_0: entered promiscuous mode [ 110.292065][ T7161] hsr_slave_1: entered promiscuous mode [ 110.292358][ T7161] debugfs: 'hsr0' already exists in 'hsr' [ 110.292366][ T7161] Cannot create hsr debugfs directory [ 110.399201][ T5214] usb 12-1: USB disconnect, device number 4 [ 110.417187][ T5214] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 110.417496][ T5214] usbserial_generic 12-1:1.0: device disconnected [ 110.431795][ T12] bridge_slave_1: left allmulticast mode [ 110.431810][ T12] bridge_slave_1: left promiscuous mode [ 110.431912][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.433553][ T12] bridge_slave_0: left allmulticast mode [ 110.433565][ T12] bridge_slave_0: left promiscuous mode [ 110.433665][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.549748][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.552283][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.553765][ T12] bond0 (unregistering): Released all slaves [ 110.567352][ T7161] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 110.570015][ T7161] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 110.571389][ T7161] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 110.574579][ T7161] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 110.577597][ T7161] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 110.581716][ T7161] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 110.584846][ T7161] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 110.595794][ T7161] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 110.610686][ T7164] tipc: Resetting bearer [ 110.618572][ T7164] tipc: Disabling bearer [ 110.627482][ T12] tipc: Left network mode [ 110.704545][ T7161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.710786][ T7161] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.714080][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.714149][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.722120][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.722165][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.765263][ T5794] Bluetooth: hci3: command tx timeout [ 110.772464][ T5506] 8021q: adding VLAN 0 to HW filter on device eth22 [ 110.933667][ T12] hsr_slave_0: left promiscuous mode [ 110.946047][ T12] hsr_slave_1: left promiscuous mode [ 110.946526][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.946539][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.947129][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.947138][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.955337][ T5214] usb 13-1: new high-speed USB device number 3 using dummy_hcd [ 110.958833][ T12] batman_adv: batadv0: Interface deactivated: macsec1 [ 110.958844][ T12] batman_adv: batadv0: Removing interface: macsec1 [ 110.983469][ T12] veth1_macvtap: left promiscuous mode [ 110.983495][ T12] veth0_macvtap: left promiscuous mode [ 110.983577][ T12] veth1_vlan: left promiscuous mode [ 110.983646][ T12] veth0_vlan: left promiscuous mode [ 111.107264][ T5214] usb 13-1: New USB device found: idVendor=05f9, idProduct=ffff, bcdDevice=1.00 [ 111.111703][ T5214] usb 13-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 111.111730][ T5214] usb 13-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 111.114123][ T5214] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.114144][ T5214] usb 13-1: Product: syz [ 111.114156][ T5214] usb 13-1: Manufacturer: syz [ 111.114167][ T5214] usb 13-1: SerialNumber: syz [ 111.121717][ T7196] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 111.121861][ T7196] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 111.126013][ T5214] usbserial_generic 13-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 111.126029][ T5214] usbserial_generic 13-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 111.126060][ T5214] usbserial_generic 13-1:1.0: generic converter detected [ 111.132728][ T5214] usb 13-1: generic converter now attached to ttyUSB0 [ 111.159133][ T12] team0 (unregistering): Port device team_slave_1 removed [ 111.164236][ T12] team0 (unregistering): Port device team_slave_0 removed [ 111.223825][ T5506] 8021q: adding VLAN 0 to HW filter on device eth23 [ 111.301348][ T7161] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.350351][ T5214] usb 13-1: USB disconnect, device number 3 [ 111.357637][ T5214] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 111.357938][ T5214] usbserial_generic 13-1:1.0: device disconnected [ 111.375310][ T6995] usb 12-1: new high-speed USB device number 5 using dummy_hcd [ 111.434044][ T5506] 8021q: adding VLAN 0 to HW filter on device eth24 [ 111.451853][ T7161] veth0_vlan: entered promiscuous mode [ 111.458448][ T7161] veth1_vlan: entered promiscuous mode [ 111.471927][ T7161] veth0_macvtap: entered promiscuous mode [ 111.479408][ T7161] veth1_macvtap: entered promiscuous mode [ 111.488990][ T7161] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.493883][ T7161] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.525303][ T6995] usb 12-1: Using ep0 maxpacket: 32 [ 111.532482][ T1181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.532495][ T1181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.533597][ T6995] usb 12-1: unable to get BOS descriptor or descriptor too short [ 111.533634][ T6995] usb 12-1: New USB device found: idVendor=0b05, idProduct=1739, bcdDevice=0.40 [ 111.535240][ T6995] usb 12-1: config 1 has an invalid descriptor of length 21, skipping remainder of the config [ 111.535293][ T6995] usb 12-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 111.543181][ T6995] usb 12-1: language id specifier not provided by device, defaulting to English [ 111.544663][ T6995] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.544682][ T6995] usb 12-1: Product: syz [ 111.544694][ T6995] usb 12-1: Manufacturer: ц [ 111.544704][ T6995] usb 12-1: SerialNumber: syz [ 111.562792][ T1181] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.562805][ T1181] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.605153][ T13] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.620769][ T5506] 8021q: adding VLAN 0 to HW filter on device eth25 [ 111.625137][ T13] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.685398][ T13] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.685425][ T13] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.805181][ T5794] Bluetooth: hci2: command tx timeout [ 111.848859][ T7248] Cannot find add_set index 0 as target [ 111.912010][ T7251] netlink: 5936 bytes leftover after parsing attributes in process `syz.9.266'. [ 111.957549][ T6995] usb 12-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 111.989284][ T6995] usb 12-1: USB disconnect, device number 5 [ 112.022415][ T6274] udevd[6274]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb12/12-1/12-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 112.023526][ T7254] rxe_eth0 speed is unknown, defaulting to 1000 [ 112.058931][ T7256] netlink: 12 bytes leftover after parsing attributes in process `syz.8.268'. [ 112.822510][ T7274] syzkaller0: entered promiscuous mode [ 112.822525][ T7274] syzkaller0: entered allmulticast mode [ 112.843921][ T7274] tipc: Enabled bearer , priority 0 [ 112.855013][ T5794] Bluetooth: hci3: command tx timeout [ 113.590872][ T7270] tipc: Resetting bearer [ 113.647806][ T7270] tipc: Disabling bearer [ 113.896052][ T5794] Bluetooth: hci2: command tx timeout [ 115.556852][ T5797] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 115.558556][ T5797] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 115.559127][ T5797] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 115.560654][ T5797] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 115.561071][ T5797] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 115.748687][ T7332] Cannot find add_set index 0 as target [ 115.765547][ T7317] rxe_eth0 speed is unknown, defaulting to 1000 [ 115.806408][ T7334] netlink: 5936 bytes leftover after parsing attributes in process `syz.8.279'. [ 115.935003][ T6995] usb 14-1: new high-speed USB device number 2 using dummy_hcd [ 115.965461][ T5797] Bluetooth: hci2: command tx timeout [ 115.969134][ T7317] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.969213][ T7317] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.969270][ T7317] bridge_slave_0: entered allmulticast mode [ 115.970159][ T7317] bridge_slave_0: entered promiscuous mode [ 115.971475][ T7317] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.971541][ T7317] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.971594][ T7317] bridge_slave_1: entered allmulticast mode [ 115.972254][ T7317] bridge_slave_1: entered promiscuous mode [ 115.984746][ T7317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.986361][ T7317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.014163][ T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.021405][ T7317] team0: Port device team_slave_0 added [ 116.024288][ T7317] team0: Port device team_slave_1 added [ 116.035624][ T7317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.035646][ T7317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.035663][ T7317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.036733][ T7317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.036741][ T7317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.036753][ T7317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.056066][ T7317] hsr_slave_0: entered promiscuous mode [ 116.056518][ T7317] hsr_slave_1: entered promiscuous mode [ 116.056878][ T7317] debugfs: 'hsr0' already exists in 'hsr' [ 116.056886][ T7317] Cannot create hsr debugfs directory [ 116.092401][ T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.095051][ T6995] usb 14-1: Using ep0 maxpacket: 32 [ 116.096981][ T6995] usb 14-1: unable to get BOS descriptor or descriptor too short [ 116.097004][ T6995] usb 14-1: New USB device found: idVendor=0b05, idProduct=1739, bcdDevice=0.40 [ 116.097778][ T6995] usb 14-1: config 1 has an invalid descriptor of length 21, skipping remainder of the config [ 116.097811][ T6995] usb 14-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 116.113945][ T6995] usb 14-1: language id specifier not provided by device, defaulting to English [ 116.117883][ T6995] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.117896][ T6995] usb 14-1: Product: syz [ 116.117902][ T6995] usb 14-1: Manufacturer: ц [ 116.117909][ T6995] usb 14-1: SerialNumber: syz [ 116.209345][ T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.266354][ T13] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.504795][ T6995] usb 14-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 116.526557][ T6995] usb 14-1: USB disconnect, device number 2 [ 117.667546][ T5797] Bluetooth: hci4: command tx timeout [ 118.045837][ T5797] Bluetooth: hci2: command tx timeout [ 118.305035][ T5866] usb 13-1: new high-speed USB device number 4 using dummy_hcd [ 118.419101][ T13] bridge_slave_1: left allmulticast mode [ 118.419118][ T13] bridge_slave_1: left promiscuous mode [ 118.419233][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.432578][ T13] bridge_slave_0: left allmulticast mode [ 118.432594][ T13] bridge_slave_0: left promiscuous mode [ 118.432725][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.466237][ T5866] usb 13-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 118.467048][ T5866] usb 13-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 118.467061][ T5866] usb 13-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 118.467070][ T5866] usb 13-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 118.467088][ T5866] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 118.467101][ T5866] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 118.468419][ T5866] usb 13-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 118.468430][ T5866] usb 13-1: Product: syz [ 118.468437][ T5866] usb 13-1: Manufacturer: syz [ 118.470842][ T5866] cdc_wdm 13-1:1.0: skipping garbage [ 118.470851][ T5866] cdc_wdm 13-1:1.0: skipping garbage [ 118.478188][ T5866] cdc_wdm 13-1:1.0: cdc-wdm0: USB WDM device [ 118.478198][ T5866] cdc_wdm 13-1:1.0: Unknown control protocol [ 118.647895][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.652367][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.656351][ T13] bond0 (unregistering): Released all slaves [ 118.680213][ T7317] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 118.688632][ T7317] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 118.692231][ T7317] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 118.713502][ T7317] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 118.713776][ T13] tipc: Left network mode [ 118.715179][ T7317] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 118.730599][ T7317] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 118.734029][ T7317] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 118.750319][ T7317] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 119.036084][ T7317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.053500][ T7317] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.059137][ T1175] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.059216][ T1175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.063083][ T7432] Cannot find add_set index 0 as target [ 119.070715][ T1175] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.070788][ T1175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.150979][ T7435] netlink: 5936 bytes leftover after parsing attributes in process `syz.9.288'. [ 119.275665][ T13] hsr_slave_0: left promiscuous mode [ 119.289517][ T13] hsr_slave_1: left promiscuous mode [ 119.291366][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.291415][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.293994][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.294004][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.319019][ T13] veth1_macvtap: left promiscuous mode [ 119.319061][ T13] veth0_macvtap: left promiscuous mode [ 119.319158][ T13] veth1_vlan: left promiscuous mode [ 119.319197][ T13] veth0_vlan: left promiscuous mode [ 119.521013][ T13] team0 (unregistering): Port device team_slave_1 removed [ 119.530283][ T13] team0 (unregistering): Port device team_slave_0 removed [ 119.725464][ T5797] Bluetooth: hci4: command tx timeout [ 119.772467][ T7317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.796005][ T58] usb 12-1: new high-speed USB device number 6 using dummy_hcd [ 119.827738][ T7317] veth0_vlan: entered promiscuous mode [ 119.831654][ T7317] veth1_vlan: entered promiscuous mode [ 119.843220][ T7317] veth0_macvtap: entered promiscuous mode [ 119.853729][ T7317] veth1_macvtap: entered promiscuous mode [ 119.861171][ T7317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.867609][ T7317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.906365][ T6350] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.906390][ T6350] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.906407][ T6350] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.906464][ T6350] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.933709][ T114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.933723][ T114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.945354][ T58] usb 12-1: Using ep0 maxpacket: 32 [ 119.947269][ T58] usb 12-1: unable to get BOS descriptor or descriptor too short [ 119.947292][ T58] usb 12-1: New USB device found: idVendor=0b05, idProduct=1739, bcdDevice=0.40 [ 119.948175][ T58] usb 12-1: config 1 has an invalid descriptor of length 21, skipping remainder of the config [ 119.948209][ T58] usb 12-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 119.956771][ T58] usb 12-1: language id specifier not provided by device, defaulting to English [ 119.958228][ T58] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.958241][ T58] usb 12-1: Product: syz [ 119.958285][ T58] usb 12-1: Manufacturer: ц [ 119.958293][ T58] usb 12-1: SerialNumber: syz [ 119.980187][ T114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.980199][ T114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.498772][ T7477] FAULT_INJECTION: forcing a failure. [ 120.498772][ T7477] name failslab, interval 1, probability 0, space 0, times 0 [ 120.498791][ T7477] CPU: 2 UID: 0 PID: 7477 Comm: syz.0.291 Not tainted syzkaller #0 PREEMPT(full) [ 120.498804][ T7477] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 120.498811][ T7477] Call Trace: [ 120.498815][ T7477] [ 120.498820][ T7477] dump_stack_lvl+0x100/0x190 [ 120.498840][ T7477] should_fail_ex.cold+0x5/0xa [ 120.498857][ T7477] should_failslab+0xc2/0x120 [ 120.498884][ T7477] kmem_cache_alloc_noprof+0x92/0x6a0 [ 120.498901][ T7477] ? mas_preallocate+0xc22/0xee0 [ 120.498920][ T7477] mas_preallocate+0xc22/0xee0 [ 120.498939][ T7477] ? __pfx_mas_preallocate+0x10/0x10 [ 120.498953][ T7477] ? rcu_is_watching+0x13/0xc0 [ 120.498971][ T7477] ? vm_area_alloc+0x1f/0x160 [ 120.498984][ T7477] ? lockdep_init_map_type+0x5c/0x250 [ 120.498998][ T7477] __mmap_region+0x15ae/0x3940 [ 120.499016][ T7477] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 120.499029][ T7477] ? __pfx___mmap_region+0x10/0x10 [ 120.499042][ T7477] ? kernel_text_address+0x8d/0x100 [ 120.499067][ T7477] ? __lock_acquire+0x5c0/0x1f40 [ 120.499079][ T7477] ? stack_depot_save_flags+0x27/0xa10 [ 120.499091][ T7477] ? find_held_lock+0x2b/0x80 [ 120.499105][ T7477] ? is_bpf_text_address+0x8a/0x1a0 [ 120.499127][ T7477] ? __lock_acquire+0x5c0/0x1f40 [ 120.499139][ T7477] ? lock_acquire+0x1d1/0x380 [ 120.499150][ T7477] ? unwind_next_frame+0xbd/0x2090 [ 120.499173][ T7477] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 120.499185][ T7477] ? is_bpf_text_address+0x94/0x1a0 [ 120.499198][ T7477] ? kernel_text_address+0x8d/0x100 [ 120.499231][ T7477] ? do_shmat+0x630/0x14d0 [ 120.499252][ T7477] mmap_region+0x3db/0x6d0 [ 120.499268][ T7477] ? __pfx_mmap_region+0x10/0x10 [ 120.499283][ T7477] ? shmem_mapping+0xd/0x50 [ 120.499296][ T7477] ? __pfx_memfd_check_seals_mmap+0x10/0x10 [ 120.499311][ T7477] ? bpf_lsm_mmap_addr+0x9/0x30 [ 120.499326][ T7477] ? security_mmap_addr+0x71/0x1e0 [ 120.499341][ T7477] ? __get_unmapped_area+0x255/0x3e0 [ 120.499353][ T7477] do_mmap+0x12c7/0x1c30 [ 120.499366][ T7477] ? lock_acquire+0x1d1/0x380 [ 120.499377][ T7477] ? __pfx_do_mmap+0x10/0x10 [ 120.499388][ T7477] ? bpf_lsm_current_getlsmprop_subj+0x9/0x10 [ 120.499400][ T7477] ? security_current_getlsmprop_subj+0x6e/0x130 [ 120.499414][ T7477] ? __pfx_down_write_killable+0x10/0x10 [ 120.499432][ T7477] do_shmat+0x113e/0x14d0 [ 120.499451][ T7477] ? __pfx_do_shmat+0x10/0x10 [ 120.499467][ T7477] ? lock_acquire+0x1d1/0x380 [ 120.499479][ T7477] __ia32_compat_sys_shmat+0xd9/0x170 [ 120.499495][ T7477] ? __might_fault+0xc5/0x140 [ 120.499507][ T7477] ? __pfx___ia32_compat_sys_shmat+0x10/0x10 [ 120.499525][ T7477] ? __might_fault+0x111/0x140 [ 120.499538][ T7477] __do_fast_syscall_32+0x14b/0x8c0 [ 120.499554][ T7477] do_fast_syscall_32+0x32/0x70 [ 120.499568][ T7477] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 120.499582][ T7477] RIP: 0023:0xf742efbc [ 120.499591][ T7477] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 120.499601][ T7477] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 000000000000018d [ 120.499612][ T7477] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000000 [ 120.499618][ T7477] RDX: 00000000532b703b RSI: 0000000000000000 RDI: 0000000000000000 [ 120.499624][ T7477] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 120.499629][ T7477] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 120.499635][ T7477] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 120.499649][ T7477] [ 120.966592][ T5506] 8021q: adding VLAN 0 to HW filter on device eth3 [ 121.087142][ T5874] usb 13-1: USB disconnect, device number 4 [ 121.111779][ T5506] 8021q: adding VLAN 0 to HW filter on device eth2 [ 121.335614][ T5506] 8021q: adding VLAN 0 to HW filter on device eth4 [ 121.394147][ T58] usb 12-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 121.412918][ T58] usb 12-1: USB disconnect, device number 6 [ 121.450172][ T6274] udevd[6274]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb12/12-1/12-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 121.523297][ T7523] syzkaller0: entered promiscuous mode [ 121.523313][ T7523] syzkaller0: entered allmulticast mode [ 121.548457][ T7523] tipc: Started in network mode [ 121.548475][ T7523] tipc: Node identity 767405474a8, cluster identity 4711 [ 121.548568][ T7523] tipc: Enabled bearer , priority 0 [ 121.625118][ T5874] usb 14-1: new high-speed USB device number 3 using dummy_hcd [ 121.744975][ T24] usb 13-1: new high-speed USB device number 5 using dummy_hcd [ 121.766620][ T5874] usb 14-1: device descriptor read/64, error -71 [ 121.774689][ T5506] 8021q: adding VLAN 0 to HW filter on device eth5 [ 121.805176][ T5797] Bluetooth: hci4: command tx timeout [ 121.895382][ T24] usb 13-1: Using ep0 maxpacket: 32 [ 121.897083][ T24] usb 13-1: unable to get BOS descriptor or descriptor too short [ 121.897105][ T24] usb 13-1: New USB device found: idVendor=0b05, idProduct=1739, bcdDevice=0.40 [ 121.897925][ T24] usb 13-1: config 1 has an invalid descriptor of length 21, skipping remainder of the config [ 121.897996][ T24] usb 13-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 121.900617][ T24] usb 13-1: language id specifier not provided by device, defaulting to English [ 121.902314][ T24] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.902325][ T24] usb 13-1: Product: syz [ 121.902332][ T24] usb 13-1: Manufacturer: ц [ 121.902339][ T24] usb 13-1: SerialNumber: syz [ 122.016910][ T5874] usb 14-1: new high-speed USB device number 4 using dummy_hcd [ 122.155024][ T5874] usb 14-1: device descriptor read/64, error -71 [ 122.242465][ T7519] tipc: Resetting bearer [ 122.265482][ T5874] usb usb14-port1: attempt power cycle [ 122.302724][ T7519] tipc: Disabling bearer [ 122.619594][ T5874] usb 14-1: new high-speed USB device number 5 using dummy_hcd [ 122.642168][ T5874] usb 14-1: device descriptor read/8, error -71 [ 122.750676][ T24] usb 13-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 122.796278][ T24] usb 13-1: USB disconnect, device number 5 [ 122.822950][ T6274] udevd[6274]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb13/13-1/13-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 122.915363][ T5874] usb 14-1: new high-speed USB device number 6 using dummy_hcd [ 122.951916][ T5874] usb 14-1: device descriptor read/8, error -71 [ 123.066205][ T5874] usb usb14-port1: unable to enumerate USB device [ 123.512478][ T7535] ------------[ cut here ]------------ [ 123.512488][ T7535] current->flags & PF_MEMALLOC [ 123.512494][ T7535] WARNING: mm/page_alloc.c:4800 at __alloc_frozen_pages_noprof+0x1d63/0x3280, CPU#0: syz.7.297/7535 [ 123.519495][ T7535] Modules linked in: [ 123.521291][ T7535] CPU: 0 UID: 0 PID: 7535 Comm: syz.7.297 Not tainted syzkaller #0 PREEMPT(full) [ 123.525176][ T7535] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 123.529502][ T7535] RIP: 0010:__alloc_frozen_pages_noprof+0x1d63/0x3280 [ 123.532304][ T7535] Code: 38 d0 7c 08 84 d2 0f 85 ae 12 00 00 65 48 8b 05 eb 3d 41 13 c7 84 24 94 00 00 00 00 80 00 00 f6 40 2d 08 0f 84 6b e7 ff ff 90 <0f> 0b 90 e9 62 e7 ff ff 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 [ 123.540388][ T7535] RSP: 0000:ffffc90004d0e668 EFLAGS: 00010202 [ 123.542934][ T7535] RAX: ffff888028af0000 RBX: 0000000000000000 RCX: 1ffff1100fffad69 [ 123.546322][ T7535] RDX: 0000000000000000 RSI: 0000000000000002 RDI: ffff88803fffd938 [ 123.549492][ T7535] RBP: 0000000000008000 R08: 0000000000000001 R09: 0000000000003339 [ 123.552238][ T7535] R10: 0000000000000000 R11: 0000000000048c40 R12: ffff888028af002c [ 123.555033][ T7535] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffff920009a1ce7 [ 123.557568][ T7535] FS: 0000000000000000(0000) GS:ffff88809527e000(0063) knlGS:00000000566f1480 [ 123.560551][ T7535] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 123.562764][ T7535] CR2: 000000000c2d3924 CR3: 0000000073c0e000 CR4: 0000000000352ef0 [ 123.565295][ T7535] Call Trace: [ 123.566440][ T7535] [ 123.567399][ T7535] ? __lock_acquire+0x5c0/0x1f40 [ 123.568950][ T7535] ? __lock_acquire+0x5c0/0x1f40 [ 123.570649][ T7535] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 123.572916][ T7535] ? __lock_acquire+0x5c0/0x1f40 [ 123.574501][ T7535] ? do_raw_spin_unlock+0x53/0x1e0 [ 123.576230][ T7535] ? do_raw_spin_unlock+0x145/0x1e0 [ 123.577879][ T7535] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 123.579615][ T7535] ? rcu_is_watching+0x13/0xc0 [ 123.581332][ T7535] ? trace_hrtimer_start+0x77/0x220 [ 123.583055][ T7535] ? __lock_acquire+0x5c0/0x1f40 [ 123.584682][ T7535] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 123.586615][ T7535] ? policy_nodemask+0xed/0x5e0 [ 123.588243][ T7535] alloc_pages_mpol+0x201/0x560 [ 123.589797][ T7535] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 123.591582][ T7535] ? filemap_get_entry+0x22d/0x450 [ 123.593255][ T7535] ? filemap_get_entry+0x22d/0x450 [ 123.594950][ T7535] folio_alloc_noprof+0x22/0x250 [ 123.596627][ T7535] filemap_alloc_folio_noprof.part.0+0x3db/0x440 [ 123.598640][ T7535] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 123.600989][ T7535] ? lock_acquire+0x1d1/0x380 [ 123.602682][ T7535] ? ext4_get_group_info+0x177/0x4b0 [ 123.604383][ T7535] ? find_held_lock+0x2b/0x80 [ 123.605971][ T7535] __filemap_get_folio_mpol+0x64e/0x1230 [ 123.607749][ T7535] ext4_mb_load_buddy_gfp+0x708/0x1b20 [ 123.609883][ T7535] ext4_discard_preallocations+0x584/0x10c0 [ 123.611809][ T7535] ? __pfx_ext4_discard_preallocations+0x10/0x10 [ 123.613784][ T7535] ? __pfx_xa_destroy+0x10/0x10 [ 123.615449][ T7535] ext4_clear_inode+0x6e/0x280 [ 123.616964][ T7535] ext4_evict_inode+0x1de/0x1890 [ 123.618526][ T7535] ? do_raw_spin_unlock+0x53/0x1e0 [ 123.620137][ T7535] ? __pfx_ext4_evict_inode+0x10/0x10 [ 123.621864][ T7535] evict+0x3c2/0xad0 [ 123.623169][ T7535] ? _raw_spin_unlock+0x28/0x50 [ 123.624765][ T7535] ? __list_lru_walk_one+0x26d/0x550 [ 123.626554][ T7535] ? __pfx_evict+0x10/0x10 [ 123.628039][ T7535] ? xa_load+0x149/0x2c0 [ 123.629384][ T7535] ? xa_load+0x149/0x2c0 [ 123.630742][ T7535] dispose_list+0x117/0x1e0 [ 123.632185][ T7535] prune_icache_sb+0xea/0x150 [ 123.633682][ T7535] ? list_lru_count_one+0x147/0x320 [ 123.635393][ T7535] ? __pfx_prune_icache_sb+0x10/0x10 [ 123.637062][ T7535] super_cache_scan+0x37c/0x560 [ 123.638613][ T7535] do_shrink_slab+0x411/0x1200 [ 123.640147][ T7535] shrink_slab+0xa78/0x12d0 [ 123.641700][ T7535] ? shrink_slab+0x68b/0x12d0 [ 123.643297][ T7535] ? __pfx_shrink_slab+0x10/0x10 [ 123.644939][ T7535] ? page_counter_calculate_protection+0x348/0x730 [ 123.646990][ T7535] ? rcu_read_unlock+0x17/0x60 [ 123.648505][ T7535] ? rcu_read_unlock+0x17/0x60 [ 123.650040][ T7535] shrink_one+0x3d3/0x870 [ 123.651412][ T7535] ? shrink_node+0x2a41/0x4410 [ 123.652937][ T7535] shrink_node+0x2a61/0x4410 [ 123.654411][ T7535] ? shrink_node+0x276d/0x4410 [ 123.656030][ T7535] ? lock_acquire+0x1d1/0x380 [ 123.657585][ T7535] ? __pfx_shrink_node+0x10/0x10 [ 123.659237][ T7535] ? queue_work_on+0x141/0x1e0 [ 123.660757][ T7535] ? do_try_to_free_pages+0x2da/0x1500 [ 123.662510][ T7535] do_try_to_free_pages+0x2da/0x1500 [ 123.664201][ T7535] try_to_free_pages+0x2a0/0x740 [ 123.665844][ T7535] ? __pfx_try_to_free_pages+0x10/0x10 [ 123.667702][ T7535] ? find_held_lock+0x2b/0x80 [ 123.669640][ T7535] ? fs_reclaim_acquire+0x70/0x100 [ 123.671766][ T7535] ? fs_reclaim_acquire+0x70/0x100 [ 123.673931][ T7535] __alloc_frozen_pages_noprof+0x1119/0x3280 [ 123.676587][ T7535] ? blk_mq_flush_plug_list+0x145/0x600 [ 123.678963][ T7535] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 123.681635][ T7535] ? __blk_flush_plug+0x2f3/0x4b0 [ 123.683807][ T7535] ? __pfx_ext4_mpage_readpages.isra.0+0x10/0x10 [ 123.686557][ T7535] ? __pfx___blk_flush_plug+0x10/0x10 [ 123.688853][ T7535] ? __lock_acquire+0x5c0/0x1f40 [ 123.690961][ T7535] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 123.693454][ T7535] ? policy_nodemask+0xed/0x5e0 [ 123.695609][ T7535] alloc_pages_mpol+0x201/0x560 [ 123.697678][ T7535] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 123.699987][ T7535] ? filemap_get_entry+0x22d/0x450 [ 123.702425][ T7535] ? filemap_get_entry+0x22d/0x450 [ 123.704624][ T7535] folio_alloc_noprof+0x22/0x250 [ 123.706860][ T7535] filemap_alloc_folio_noprof.part.0+0x3db/0x440 [ 123.709491][ T7535] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 123.712594][ T7535] __filemap_get_folio_mpol+0x64e/0x1230 [ 123.715205][ T7535] filemap_fault+0x871/0x3140 [ 123.716982][ T7535] ? __pfx_filemap_fault+0x10/0x10 [ 123.718898][ T7535] ? __pte_offset_map+0x9a/0x470 [ 123.720979][ T7535] ? find_held_lock+0x2b/0x80 [ 123.722889][ T7535] ? __pfx_filemap_map_pages+0x10/0x10 [ 123.724738][ T7535] __do_fault+0x10b/0x440 [ 123.726293][ T7535] do_fault+0xb3f/0x1890 [ 123.727881][ T7535] ? __pfx_do_fault+0x10/0x10 [ 123.729378][ T7535] ? rcu_read_unlock+0x2d/0xb0 [ 123.730894][ T7535] ? rcu_read_unlock+0x2d/0xb0 [ 123.732590][ T7535] __handle_mm_fault+0x150b/0x2f60 [ 123.734528][ T7535] ? lock_vma_under_rcu+0x11d/0x590 [ 123.736248][ T7535] ? __pfx___handle_mm_fault+0x10/0x10 [ 123.737969][ T7535] ? lock_vma_under_rcu+0x17c/0x590 [ 123.739610][ T7535] handle_mm_fault+0x363/0xa20 [ 123.741124][ T7535] do_user_addr_fault+0x59c/0x12f0 [ 123.742784][ T7535] exc_page_fault+0x6f/0xd0 [ 123.744223][ T7535] asm_exc_page_fault+0x26/0x30 [ 123.745855][ T7535] RIP: 0023:0xf70bfd16 [ 123.747299][ T7535] Code: Unable to access opcode bytes at 0xf70bfcec. [ 123.749360][ T7535] RSP: 002b:00000000ff927870 EFLAGS: 00010202 [ 123.751267][ T7535] RAX: 00000000f150c925 RBX: 00000000f7fb5610 RCX: 0000000000000005 [ 123.753784][ T7535] RDX: 0000000000000020 RSI: 000000000000067e RDI: 000000000c2c9924 [ 123.756307][ T7535] RBP: 000000000c230000 R08: 0000000000000000 R09: 0000000000000000 [ 123.758777][ T7535] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 123.761236][ T7535] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 123.763737][ T7535] [ 123.764720][ T7535] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 123.767157][ T7535] CPU: 0 UID: 0 PID: 7535 Comm: syz.7.297 Not tainted syzkaller #0 PREEMPT(full) [ 123.770387][ T7535] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 123.773610][ T7535] Call Trace: [ 123.774783][ T7535] [ 123.775862][ T7535] dump_stack_lvl+0x100/0x190 [ 123.777403][ T7535] vpanic+0x2dc/0x6f8 [ 123.778765][ T7535] panic+0xd1/0xe0 [ 123.780006][ T7535] ? __pfx_panic+0x10/0x10 [ 123.781421][ T7535] check_panic_on_warn.cold+0x19/0x34 [ 123.783131][ T7535] ? __alloc_frozen_pages_noprof+0x1d63/0x3280 [ 123.785129][ T7535] __warn.cold+0x191/0x321 [ 123.786545][ T7535] __report_bug+0x30f/0x440 [ 123.787980][ T7535] ? __alloc_frozen_pages_noprof+0x1d63/0x3280 [ 123.789903][ T7535] ? __pfx___report_bug+0x10/0x10 [ 123.791484][ T7535] ? __zone_watermark_ok+0x281/0x500 [ 123.793150][ T7535] ? get_page_from_freelist+0x344/0x35e0 [ 123.794910][ T7535] ? __alloc_frozen_pages_noprof+0x1d63/0x3280 [ 123.797090][ T7535] report_bug+0xb3/0x220 [ 123.798432][ T7535] ? __alloc_frozen_pages_noprof+0x1d63/0x3280 [ 123.800359][ T7535] handle_bug+0x16a/0x2a0 [ 123.801924][ T7535] exc_invalid_op+0x17/0x50 [ 123.803395][ T7535] asm_exc_invalid_op+0x1a/0x20 [ 123.804929][ T7535] RIP: 0010:__alloc_frozen_pages_noprof+0x1d63/0x3280 [ 123.807038][ T7535] Code: 38 d0 7c 08 84 d2 0f 85 ae 12 00 00 65 48 8b 05 eb 3d 41 13 c7 84 24 94 00 00 00 00 80 00 00 f6 40 2d 08 0f 84 6b e7 ff ff 90 <0f> 0b 90 e9 62 e7 ff ff 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 [ 123.812981][ T7535] RSP: 0000:ffffc90004d0e668 EFLAGS: 00010202 [ 123.814891][ T7535] RAX: ffff888028af0000 RBX: 0000000000000000 RCX: 1ffff1100fffad69 [ 123.817401][ T7535] RDX: 0000000000000000 RSI: 0000000000000002 RDI: ffff88803fffd938 [ 123.819857][ T7535] RBP: 0000000000008000 R08: 0000000000000001 R09: 0000000000003339 [ 123.822319][ T7535] R10: 0000000000000000 R11: 0000000000048c40 R12: ffff888028af002c [ 123.824793][ T7535] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffff920009a1ce7 [ 123.827302][ T7535] ? __alloc_frozen_pages_noprof+0x2bd/0x3280 [ 123.829209][ T7535] ? __lock_acquire+0x5c0/0x1f40 [ 123.830787][ T7535] ? __lock_acquire+0x5c0/0x1f40 [ 123.832347][ T7535] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 123.834345][ T7535] ? __lock_acquire+0x5c0/0x1f40 [ 123.835904][ T7535] ? do_raw_spin_unlock+0x53/0x1e0 [ 123.837509][ T7535] ? do_raw_spin_unlock+0x145/0x1e0 [ 123.839144][ T7535] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 123.840967][ T7535] ? rcu_is_watching+0x13/0xc0 [ 123.842488][ T7535] ? trace_hrtimer_start+0x77/0x220 [ 123.844100][ T7535] ? __lock_acquire+0x5c0/0x1f40 [ 123.845644][ T7535] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 123.847469][ T7535] ? policy_nodemask+0xed/0x5e0 [ 123.848989][ T7535] alloc_pages_mpol+0x201/0x560 [ 123.850508][ T7535] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 123.852174][ T7535] ? filemap_get_entry+0x22d/0x450 [ 123.853799][ T7535] ? filemap_get_entry+0x22d/0x450 [ 123.855424][ T7535] folio_alloc_noprof+0x22/0x250 [ 123.856996][ T7535] filemap_alloc_folio_noprof.part.0+0x3db/0x440 [ 123.858983][ T7535] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 123.861111][ T7535] ? lock_acquire+0x1d1/0x380 [ 123.862648][ T7535] ? ext4_get_group_info+0x177/0x4b0 [ 123.864320][ T7535] ? find_held_lock+0x2b/0x80 [ 123.865815][ T7535] __filemap_get_folio_mpol+0x64e/0x1230 [ 123.867579][ T7535] ext4_mb_load_buddy_gfp+0x708/0x1b20 [ 123.869296][ T7535] ext4_discard_preallocations+0x584/0x10c0 [ 123.871163][ T7535] ? __pfx_ext4_discard_preallocations+0x10/0x10 [ 123.873139][ T7535] ? __pfx_xa_destroy+0x10/0x10 [ 123.874582][ T7535] ext4_clear_inode+0x6e/0x280 [ 123.876087][ T7535] ext4_evict_inode+0x1de/0x1890 [ 123.877637][ T7535] ? do_raw_spin_unlock+0x53/0x1e0 [ 123.879247][ T7535] ? __pfx_ext4_evict_inode+0x10/0x10 [ 123.880926][ T7535] evict+0x3c2/0xad0 [ 123.882184][ T7535] ? _raw_spin_unlock+0x28/0x50 [ 123.883758][ T7535] ? __list_lru_walk_one+0x26d/0x550 [ 123.885416][ T7535] ? __pfx_evict+0x10/0x10 [ 123.886839][ T7535] ? xa_load+0x149/0x2c0 [ 123.888182][ T7535] ? xa_load+0x149/0x2c0 [ 123.889526][ T7535] dispose_list+0x117/0x1e0 [ 123.890990][ T7535] prune_icache_sb+0xea/0x150 [ 123.892498][ T7535] ? list_lru_count_one+0x147/0x320 [ 123.894217][ T7535] ? __pfx_prune_icache_sb+0x10/0x10 [ 123.895891][ T7535] super_cache_scan+0x37c/0x560 [ 123.897466][ T7535] do_shrink_slab+0x411/0x1200 [ 123.898998][ T7535] shrink_slab+0xa78/0x12d0 [ 123.900430][ T7535] ? shrink_slab+0x68b/0x12d0 [ 123.901926][ T7535] ? __pfx_shrink_slab+0x10/0x10 [ 123.903490][ T7535] ? page_counter_calculate_protection+0x348/0x730 [ 123.905580][ T7535] ? rcu_read_unlock+0x17/0x60 [ 123.907106][ T7535] ? rcu_read_unlock+0x17/0x60 [ 123.908619][ T7535] shrink_one+0x3d3/0x870 [ 123.910058][ T7535] ? shrink_node+0x2a41/0x4410 [ 123.911598][ T7535] shrink_node+0x2a61/0x4410 [ 123.913079][ T7535] ? shrink_node+0x276d/0x4410 [ 123.914597][ T7535] ? lock_acquire+0x1d1/0x380 [ 123.916092][ T7535] ? __pfx_shrink_node+0x10/0x10 [ 123.917686][ T7535] ? queue_work_on+0x141/0x1e0 [ 123.919163][ T7535] ? do_try_to_free_pages+0x2da/0x1500 [ 123.920867][ T7535] do_try_to_free_pages+0x2da/0x1500 [ 123.922563][ T7535] try_to_free_pages+0x2a0/0x740 [ 123.924130][ T7535] ? __pfx_try_to_free_pages+0x10/0x10 [ 123.925848][ T7535] ? find_held_lock+0x2b/0x80 [ 123.927358][ T7535] ? fs_reclaim_acquire+0x70/0x100 [ 123.928960][ T7535] ? fs_reclaim_acquire+0x70/0x100 [ 123.930569][ T7535] __alloc_frozen_pages_noprof+0x1119/0x3280 [ 123.932448][ T7535] ? blk_mq_flush_plug_list+0x145/0x600 [ 123.934211][ T7535] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 123.936204][ T7535] ? __blk_flush_plug+0x2f3/0x4b0 [ 123.937790][ T7535] ? __pfx_ext4_mpage_readpages.isra.0+0x10/0x10 [ 123.939777][ T7535] ? __pfx___blk_flush_plug+0x10/0x10 [ 123.941461][ T7535] ? __lock_acquire+0x5c0/0x1f40 [ 123.943044][ T7535] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 123.944893][ T7535] ? policy_nodemask+0xed/0x5e0 [ 123.946439][ T7535] alloc_pages_mpol+0x201/0x560 [ 123.947978][ T7535] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 123.949605][ T7535] ? filemap_get_entry+0x22d/0x450 [ 123.951216][ T7535] ? filemap_get_entry+0x22d/0x450 [ 123.952843][ T7535] folio_alloc_noprof+0x22/0x250 [ 123.954416][ T7535] filemap_alloc_folio_noprof.part.0+0x3db/0x440 [ 123.956399][ T7535] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 123.958527][ T7535] __filemap_get_folio_mpol+0x64e/0x1230 [ 123.960282][ T7535] filemap_fault+0x871/0x3140 [ 123.961767][ T7535] ? __pfx_filemap_fault+0x10/0x10 [ 123.963384][ T7535] ? __pte_offset_map+0x9a/0x470 [ 123.964945][ T7535] ? find_held_lock+0x2b/0x80 [ 123.966439][ T7535] ? __pfx_filemap_map_pages+0x10/0x10 [ 123.968149][ T7535] __do_fault+0x10b/0x440 [ 123.969519][ T7535] do_fault+0xb3f/0x1890 [ 123.970780][ T7535] ? __pfx_do_fault+0x10/0x10 [ 123.972086][ T7535] ? rcu_read_unlock+0x2d/0xb0 [ 123.973540][ T7535] ? rcu_read_unlock+0x2d/0xb0 [ 123.975087][ T7535] __handle_mm_fault+0x150b/0x2f60 [ 123.976690][ T7535] ? lock_vma_under_rcu+0x11d/0x590 [ 123.978326][ T7535] ? __pfx___handle_mm_fault+0x10/0x10 [ 123.980029][ T7535] ? lock_vma_under_rcu+0x17c/0x590 [ 123.981670][ T7535] handle_mm_fault+0x363/0xa20 [ 123.983215][ T7535] do_user_addr_fault+0x59c/0x12f0 [ 123.984828][ T7535] exc_page_fault+0x6f/0xd0 [ 123.986271][ T7535] asm_exc_page_fault+0x26/0x30 [ 123.987819][ T7535] RIP: 0023:0xf70bfd16 [ 123.989107][ T7535] Code: Unable to access opcode bytes at 0xf70bfcec. [ 123.991175][ T7535] RSP: 002b:00000000ff927870 EFLAGS: 00010202 [ 123.993073][ T7535] RAX: 00000000f150c925 RBX: 00000000f7fb5610 RCX: 0000000000000005 [ 123.995535][ T7535] RDX: 0000000000000020 RSI: 000000000000067e RDI: 000000000c2c9924 [ 123.997987][ T7535] RBP: 000000000c230000 R08: 0000000000000000 R09: 0000000000000000 [ 124.000453][ T7535] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 124.002945][ T7535] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 124.005399][ T7535] [ 124.006925][ T7535] Kernel Offset: disabled [ 124.008282][ T7535] Rebooting in 86400 seconds..