last executing test programs: 6m43.027448991s ago: executing program 0 (id=383): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615, 0x5000000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) 6m42.635299354s ago: executing program 0 (id=384): syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x82c02) syz_open_dev$video(&(0x7f0000000040), 0x7, 0x0) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, 0x0, 0x2e) syz_socket_connect_nvme_tcp() bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@fallback, 0x5, 0x1, 0x8b78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0xfffffec4) syz_io_uring_setup(0x23b5, &(0x7f0000000140)={0x0, 0xb0c4, 0x0, 0x2, 0x5a}, &(0x7f0000000000)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r6, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x20000000) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r5, &(0x7f0000000140), 0x4048081) setsockopt$SO_J1939_FILTER(r5, 0x6b, 0x1, &(0x7f0000000380)=[{0x1, 0x3, {0x1, 0x0, 0x1}, {0x0, 0xf0, 0x4}, 0xfd, 0xfe}, {0x0, 0x2, {0x0, 0xff}, {0x1, 0xff, 0x3}, 0x0, 0xfe}, {0x2, 0x2, {0x1, 0x0, 0x1}, {}, 0x1}, {0x3, 0x2, {0x2, 0xff, 0x4}, {0x0, 0x0, 0x3}, 0xff, 0xfd}, {0x3, 0x3, {0x0, 0x0, 0x2}, {0x0, 0x1}, 0x1, 0x2}], 0xa0) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r6, {0xfff3, 0x10}, {0xfff1, 0x9}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x48040}, 0x20000050) 6m41.70412527s ago: executing program 0 (id=389): syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) syz_emit_ethernet(0x62, &(0x7f0000000140)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x23, 0x54, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0xe, 0x4, 0x0, 0x0, 0x6, 0x65, 0x0, 0x0, 0x6, 0x401, @broadcast, @multicast2, {[@timestamp_addr={0x44, 0x1c, 0xac, 0x1, 0x6, [{@multicast2, 0xc}, {@remote, 0x3}, {@loopback, 0x5}]}, @rr={0x7, 0x7, 0x8e, [@multicast2]}]}}}}}}}, 0x0) 6m41.626745626s ago: executing program 0 (id=390): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount$tmpfs(0x27000000, &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1000810, 0x0) 6m41.557556205s ago: executing program 0 (id=391): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000100001000000f5ff000000000000000a58000000060a0b040000000000000000020000002c0004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a30000000000900010073797a30000000000900020073797a32000000007c010000020a01"], 0x250}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) 6m40.496800719s ago: executing program 0 (id=397): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r0, 0x18000000000002a0, 0x42, 0xfffffffffffffec1, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x142, 0x60000000, 0x5c, 0xfb, &(0x7f0000000000), &(0x7f0000000280)="8dc92a8ff39080a675b6565efa3ed46f2a2756e4686c04020000002599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc06003fa40e054d38d49dfbebc2f137fc7110f48727f3ac3d6c83f6fda9222d2acdb0b3b9374206648707f4f5aeabd986d5f491389e9114ba8bd9aeeeed448e227802a455d6ba62aebeebc45885165e2501c30dc33fa47f5627e572e86278239ca2d8aeec7a25c43448bce8000000", 0x0, 0x42}, 0x3d) 6m40.312949093s ago: executing program 32 (id=397): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r0, 0x18000000000002a0, 0x42, 0xfffffffffffffec1, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x142, 0x60000000, 0x5c, 0xfb, &(0x7f0000000000), &(0x7f0000000280)="8dc92a8ff39080a675b6565efa3ed46f2a2756e4686c04020000002599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc06003fa40e054d38d49dfbebc2f137fc7110f48727f3ac3d6c83f6fda9222d2acdb0b3b9374206648707f4f5aeabd986d5f491389e9114ba8bd9aeeeed448e227802a455d6ba62aebeebc45885165e2501c30dc33fa47f5627e572e86278239ca2d8aeec7a25c43448bce8000000", 0x0, 0x42}, 0x3d) 5m22.976518004s ago: executing program 2 (id=768): syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x82c02) syz_open_dev$video(&(0x7f0000000040), 0x7, 0x0) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, 0x0, 0x2e) syz_socket_connect_nvme_tcp() bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@fallback, 0x5, 0x1, 0x8b78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0xfffffec4) syz_io_uring_setup(0x23b5, &(0x7f0000000140)={0x0, 0xb0c4, 0x0, 0x2, 0x5a}, &(0x7f0000000000)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r6, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x20000000) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r5, 0x6b, 0x1, &(0x7f0000000380)=[{0x1, 0x3, {0x1, 0x0, 0x1}, {0x0, 0xf0, 0x4}, 0xfd, 0xfe}, {0x0, 0x2, {0x0, 0xff}, {0x1, 0xff, 0x3}, 0x0, 0xfe}, {0x3, 0x2, {0x2, 0xff, 0x4}, {0x0, 0x0, 0x3}, 0xff, 0xfd}, {0x3, 0x3, {0x0, 0x0, 0x2}, {0x0, 0x1}, 0x1, 0x2}], 0x70) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r6, {0xfff3, 0x10}, {0xfff1, 0x9}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x48040}, 0x20000050) 5m22.112898576s ago: executing program 2 (id=771): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x80, 0xfffffffc, 0xdc67}}) r1 = socket$inet6(0xa, 0x80002, 0x10000000) setsockopt$sock_int(r1, 0x1, 0xa, &(0x7f0000000040)=0x80000001, 0x4) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x4800, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r5, 0x1, 0x0, 0x0, {0x3d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x82}, {0x5, 0x87}}]}, 0x4c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) bind$netlink(r7, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x8002) ioctl$SNDRV_TIMER_IOCTL_GINFO(r9, 0x403c5404, &(0x7f0000000040)={{0xffffffffffffffff, 0x1, 0x400006, 0x3}, 0x0, 0x0, 'id0\x00', 'timer1\x00', 0x0, 0x4, 0x0, 0x4, 0xfffffffc}) r10 = accept4(r6, 0x0, &(0x7f0000000200), 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(r10, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)={0xdc, r5, 0x400, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x40810) socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x11, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r13 = openat$hpet(0xffffff9c, &(0x7f0000000140), 0x40000, 0x0) ioctl$VT_RESIZEX(r13, 0x560a, &(0x7f00000001c0)={0x8, 0x0, 0xa3, 0x8, 0x1, 0x6}) sendmsg$nl_route(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r12}, @IFLA_MASTER={0x8, 0xa, r0}, @IFLA_MASTER={0x8, 0xa, r8}, @IFLA_PROMISCUITY={0x8, 0x1e, 0xfffffff7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x801}, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000100)=0x10001) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x2c, &(0x7f0000000000)={0x0, 0x0}, 0x10) 5m21.055423705s ago: executing program 2 (id=777): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x10c, r0, 0x18, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x60, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x200}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_SOCK={0x70, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6d}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6d252dc}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}]}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4080}, 0x4000040) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000013c0)={&(0x7f0000000240)="3e06117f33de1957069053716aefab09d2f93129920c15469844ef8cd020f9d5198a", &(0x7f0000000280)=""/201, &(0x7f0000000380)="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", &(0x7f0000001380)="530b5181c021c7b20cf70768c8f8640b50e4071a5873ce1d9c2f84cb0641d9a431", 0x1, 0x1, 0x4}, 0x38) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x14, r1, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x50) r2 = openat$fuse(0xffffff9c, &(0x7f0000001540), 0x2, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000003700)=0x0) r4 = getgid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003940)={{{@in=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000003a40)=0xe4) read$FUSE(0xffffffffffffffff, &(0x7f0000003a80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000005c80)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0}}, './file0\x00'}) stat(&(0x7f0000005cc0)='./file0\x00', &(0x7f0000005d00)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000005d80)='./file0\x00', &(0x7f0000005dc0)={0x0, 0x0, 0x0, 0x0, 0x0}) r11 = getegid() r12 = getuid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000005e40)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0x0}}, './file0\x00'}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000005e80)={{{@in6=@private1, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@local}}, &(0x7f0000005f80)=0xe4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005fc0)={0x0, 0x0, 0x0}, &(0x7f0000006000)=0xc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000006040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) getgroups(0x4, &(0x7f0000006080)=[0xffffffffffffffff, 0x0, 0x0, 0x0]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000064c0)={0x0, 0x0}, &(0x7f0000006500)=0xc) statx(0xffffffffffffff9c, &(0x7f0000006540)='./file0\x00', 0x100, 0x400, &(0x7f0000006580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000006780)='./file0\x00', &(0x7f00000067c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r22 = getegid() syz_fuse_handle_req(r2, &(0x7f0000001580)="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", 0x2000, &(0x7f0000006980)={&(0x7f0000003580)={0x50, 0x0, 0x821, {0x7, 0x2b, 0x7, 0x10004000, 0x4, 0xfffc, 0xfffffffa, 0xfbc7, 0x0, 0x0, 0x4, 0x7}}, &(0x7f0000003600)={0x18, 0xfffffffffffffff5, 0x4, {0x3}}, &(0x7f0000003640)={0x18, 0x2f, 0x1, {0xffffffffffffff0e}}, &(0x7f0000003680)={0x18, 0x0, 0x1, {0xffffffff}}, &(0x7f00000036c0)={0x18, 0x0, 0x25, {0x3}}, &(0x7f0000003740)={0x28, 0xffffffffffffffda, 0x0, {{0x8000000000000000, 0x7, 0x1, r3}}}, &(0x7f0000003780)={0x60, 0x0, 0xb, {{0x2, 0x568000, 0x7f, 0xfffffffffffffff6, 0xffffffff80000001, 0xffff, 0xfff80000, 0x3}}}, &(0x7f0000003800)={0x18, 0x8000000000000004, 0x160, {0x7f}}, &(0x7f0000003840)={0x18, 0x0, 0x2, {'nl80211\x00'}}, &(0x7f0000003880)={0x20, 0x0, 0xfffffffffffffd1b, {0x0, 0xf}}, &(0x7f00000038c0)={0x78, 0xfffffffffffffff5, 0x4, {0x3, 0x31c2de1e, 0x0, {0x1, 0x4, 0x4, 0xe, 0x7, 0x8, 0x1, 0xd49, 0x5, 0xa000, 0x6, 0xee00, r4, 0x6, 0x9b}}}, &(0x7f0000005ac0)={0x90, 0x0, 0xed5, {0x0, 0x0, 0x8000, 0x5, 0x0, 0x0, {0x6, 0x0, 0x3, 0x0, 0x8, 0xe, 0xf, 0x4, 0x0, 0xc000, 0x2ff, r5, r6, 0x9, 0x4}}}, &(0x7f0000005b80)={0xd0, 0x0, 0x4, [{0x3, 0x316, 0x3, 0x4, 'ib\x00'}, {0x5, 0x40, 0x7, 0xca8c, ')B!\',*%'}, {0x0, 0x4, 0x2, 0x8, '$%'}, {0x3, 0x7f, 0x2, 0x91e, '/*'}, {0x4, 0x1, 0x3, 0x0, 'ib\x00'}, {0x4, 0x80000000, 0x4, 0x10001, ':{..'}]}, &(0x7f00000060c0)={0x3d0, 0xfffffffffffffffe, 0x0, [{{0x2, 0x0, 0x3c1c, 0x800, 0x5ee1, 0x7, {0x0, 0x4, 0x1, 0x9, 0x1c0000000, 0x4, 0x5, 0x3, 0x5, 0x1000, 0xe84, r8, 0x0, 0x2, 0x4}}, {0x4, 0x6, 0x5, 0x7, 'syz1\x00'}}, {{0x4, 0x2, 0x5, 0x7, 0x0, 0x6, {0x1, 0x101, 0x3, 0x400, 0x9, 0x9, 0xa92, 0x2, 0x0, 0xc000, 0xfffffffb, r9, 0x0, 0xc, 0x3}}, {0x5, 0x10, 0x4, 0x24000, 'udp\x00'}}, {{0x3, 0x3, 0x81, 0x2, 0xffff, 0x80, {0x4, 0x7, 0x77b, 0x5, 0x101, 0x1, 0x0, 0x7, 0xa96, 0xa000, 0xffff, r10, r11, 0x180, 0xd}}, {0x5, 0x2, 0x7, 0x1, 'TIPCv2\x00'}}, {{0x0, 0x3, 0x6, 0x4, 0xffff, 0x7fffffff, {0x2, 0xb1, 0xc08f, 0x4, 0x8, 0x41a7, 0x81, 0xf68, 0xfff, 0xa000, 0x3, r12, r13, 0x5, 0x3}}, {0x8000, 0x0, 0x1, 0x5, '!'}}, {{0x6, 0x2, 0xf, 0x1, 0x92, 0x64f, {0x4, 0x6, 0xffffffffffffffff, 0x40, 0x8000000000000000, 0x5, 0x200, 0xb, 0x1, 0x6000, 0x800, r14, r15, 0x8607, 0xfff}}, {0x0, 0x4, 0x4, 0x3, 'udp\x00'}}, {{0x4, 0x3, 0x2, 0x3, 0x9, 0x9, {0x5, 0xad5a, 0x1, 0x5, 0x9, 0x500, 0x3, 0x5, 0x1, 0x2000, 0x9f, r17, r18, 0x7, 0x401}}, {0x2, 0x4, 0x3, 0x4, '{*!'}}]}, &(0x7f0000006680)={0xa0, 0x0, 0xd, {{0x0, 0x3, 0xde, 0xedc, 0x8000, 0x5, {0x3, 0x1, 0xffffffffffffffff, 0x4, 0xfffffffffffffe00, 0xaa, 0x5, 0x0, 0x5, 0xc000, 0x8, r19, r20, 0x9, 0x9}}, {0x0, 0x1}}}, &(0x7f0000006740)={0x20, 0x0, 0x6, {0x10000, 0x0, 0x8, 0x2}}, &(0x7f0000006840)={0x130, 0x0, 0xffffffff, {0x1, 0x4, 0x0, '\x00', {0x40, 0x9, 0x6, 0x2, r21, r22, 0x4000, '\x00', 0xe, 0x6, 0x8, 0x2000, {0x5, 0x531}, {0x1ff}, {0x5, 0x1}, {0x5, 0x1}, 0x4, 0xa, 0x2, 0x5}}}}) fstat(r7, &(0x7f0000006a00)) socket$inet6_tcp(0xa, 0x1, 0x0) r23 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000006a80), r23) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r16, 0x10e, 0x1, &(0x7f0000006ac0)=0x1d, 0x4) 5m20.76384434s ago: executing program 2 (id=778): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount$tmpfs(0xf6ffffff, &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1000810, 0x0) 5m20.566651688s ago: executing program 2 (id=782): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x5, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffdf}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, 0x0, 0x80) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001600), 0x802, 0x0) ioctl$UI_SET_MSCBIT(r2, 0x40045568, 0x4) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006280)="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", 0x2000, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x119) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = openat$fuse(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = openat$fuse(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r4, 0x8004e500, &(0x7f0000000100)=r5) ioctl$sock_SIOCETHTOOL(r3, 0x8946, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_ifreq(r6, 0x8922, &(0x7f0000000080)={'dummy0\x00', @ifru_ivalue}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000013000100010000000000000807000000", @ANYRES32, @ANYBLOB="000000001132000014001a80100004800c000880"], 0x34}}, 0x0) 5m19.954799892s ago: executing program 2 (id=785): openat$rdma_cm(0xffffff9c, &(0x7f0000000400), 0x2, 0x0) (async) openat$rdma_cm(0xffffff9c, &(0x7f0000000400), 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x3ffa, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee4, 0x10, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) (async) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000400000000000000001000084080000000000000001"], 0x0, 0x42}, 0x28) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}}, 0x0) (async) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=r5], 0x24}}, 0x0) (async) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=r5], 0x24}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x14, r7, 0x9c3fa077fa966179, 0x4, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x141040, 0x42) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000006496634e9e89683c1811000060a4fc4617104128b015e86e10333ef1ad6c1ce71c5e577d62da44735c70f32916e0f79aba6b1e6cda102fa6b4f25a4d597f395ab9922170db26cc2439fca6019074e6627f7a9bdbcab6cf7f56058bb54079e0fdda052b09fb02d648de82f096925c7929f38e13db166d4f2dc7eed40cd89186a18835a36b01d8dedb359af2cdfc3050ee12f15300d794f8edd23cbce7ef3bd724e86e29dd960c71b3311108d096ed7fd5b5e00d40991ab058b7bc9b6f12cdc2d2ae90512c9d4a4e3f685757eb14bc8003f0", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000006496634e9e89683c1811000060a4fc4617104128b015e86e10333ef1ad6c1ce71c5e577d62da44735c70f32916e0f79aba6b1e6cda102fa6b4f25a4d597f395ab9922170db26cc2439fca6019074e6627f7a9bdbcab6cf7f56058bb54079e0fdda052b09fb02d648de82f096925c7929f38e13db166d4f2dc7eed40cd89186a18835a36b01d8dedb359af2cdfc3050ee12f15300d794f8edd23cbce7ef3bd724e86e29dd960c71b3311108d096ed7fd5b5e00d40991ab058b7bc9b6f12cdc2d2ae90512c9d4a4e3f685757eb14bc8003f0", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m19.693654588s ago: executing program 33 (id=785): openat$rdma_cm(0xffffff9c, &(0x7f0000000400), 0x2, 0x0) (async) openat$rdma_cm(0xffffff9c, &(0x7f0000000400), 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x3ffa, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee4, 0x10, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) (async) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000400000000000000001000084080000000000000001"], 0x0, 0x42}, 0x28) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}}, 0x0) (async) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=r5], 0x24}}, 0x0) (async) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=r5], 0x24}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x14, r7, 0x9c3fa077fa966179, 0x4, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x141040, 0x42) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000006496634e9e89683c1811000060a4fc4617104128b015e86e10333ef1ad6c1ce71c5e577d62da44735c70f32916e0f79aba6b1e6cda102fa6b4f25a4d597f395ab9922170db26cc2439fca6019074e6627f7a9bdbcab6cf7f56058bb54079e0fdda052b09fb02d648de82f096925c7929f38e13db166d4f2dc7eed40cd89186a18835a36b01d8dedb359af2cdfc3050ee12f15300d794f8edd23cbce7ef3bd724e86e29dd960c71b3311108d096ed7fd5b5e00d40991ab058b7bc9b6f12cdc2d2ae90512c9d4a4e3f685757eb14bc8003f0", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000006496634e9e89683c1811000060a4fc4617104128b015e86e10333ef1ad6c1ce71c5e577d62da44735c70f32916e0f79aba6b1e6cda102fa6b4f25a4d597f395ab9922170db26cc2439fca6019074e6627f7a9bdbcab6cf7f56058bb54079e0fdda052b09fb02d648de82f096925c7929f38e13db166d4f2dc7eed40cd89186a18835a36b01d8dedb359af2cdfc3050ee12f15300d794f8edd23cbce7ef3bd724e86e29dd960c71b3311108d096ed7fd5b5e00d40991ab058b7bc9b6f12cdc2d2ae90512c9d4a4e3f685757eb14bc8003f0", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4m21.805091952s ago: executing program 5 (id=1109): syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043d89da93d138e10c000000000000e544a284bb9037ec"], 0x11) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0xc, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x19, '\x00', 0x0, @fallback=0x28}, 0x94) r0 = syz_io_uring_setup(0x8dd, &(0x7f0000000440)={0x0, 0x1b7, 0x400, 0x8, 0x2000101}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x29, 0x0, 0x0, 0x204}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x42, 0x4, 0x2a4, 0xffffffff, 0x0, 0x94, 0x94, 0xffffffff, 0xffffffff, 0x210, 0x210, 0x210, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'veth0_to_bridge\x00', 'veth1_to_bond\x00', {}, {}, 0x2}, 0x0, 0x70, 0x94, 0x0, {0x100000000000000}}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0x70, 0x94}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x5}}}, {{@ip={@broadcast, @empty, 0x0, 0xffff00, 'batadv0\x00', 'bond_slave_1\x00', {}, {0xff}, 0x1231e48dc931f0a2}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@inet=@udplite={{0x2c}, {[0x4e20, 0x4e22], [0x4e22, 0x4e20]}}, @common=@ttl={{0x24}, {0x3, 0x5}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x3}, {0x0, 0xfc}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) ioctl$SIOCX25SENDCALLACCPT(r3, 0x89e9) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x1000}, "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"}, 0x1004) 4m21.488928067s ago: executing program 5 (id=1112): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000000980)={0x0, 0x12c, @pic={0x0, 0x0, 0x0, 0x0, 0x1, 0x45, 0x3, 0x0, 0xfd, 0x0, 0x4}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, 0x0) lgetxattr(0x0, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x4, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="a04f0000210001000000000000000000fe8000000000000000000000000000bbac1e0001ea00"/49, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00400000000000005000110000000000000000000000000000000001ac1414bb000000000000000000000000ff010000000000000000000000000001fe8000000000000000000000000000aa3c000000000000000a000200"], 0xa0}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x2, 0x4) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x20004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x2) ioctl$sock_ifreq(0xffffffffffffffff, 0x8920, &(0x7f0000000000)={'ip6gretap0\x00', @ifru_mtu=0x6}) ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000)) sendmsg$NFNL_MSG_ACCT_GET(r2, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6c0000004107030000000000000000000a000008340007800800024000000dd7080001400000000a0800024080000001080002400000e000080002400000000508000240000000000c00034000000000000000090c00024000000000000000080c0002400000000000000006"], 0x6c}, 0x1, 0x0, 0x0, 0x4004}, 0x40) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x2, 0x0) migrate_pages(0x0, 0x7, &(0x7f0000000280)=0x9, &(0x7f0000000300)=0x3) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_mode_change={{0x14, 0x6}, {0x3, 0x0, 0x2, 0x9c00}}}, 0x9) 4m20.485536586s ago: executing program 5 (id=1118): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2002) mmap(&(0x7f0000251000/0x2000)=nil, 0x2000, 0x1000002, 0x11012, r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000010828bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000042004001c002b80080003001900000008000100", @ANYRES32, @ANYBLOB="08000800442d05d426718702fd790da5ccda678ff054c44d3027443c5ee2d4b6112fb06d84fb3bc0633e72ce8b14a83ecf438cd1c6eb101fb5f18f58659412db52b9f9981f8846b059a5add0d6b5dfe20c7c4dd098d75d46c61650312393b500e767d325cf7c9699d2e046d5dec0853c1b67cbd0809fdbd4f63e43a20e397abf16e65a4ddc786f07ab1a9c7d3efa0d0e42434bc6d6efee9be558b3b6384fd6f3fa45bb71db92bd640a6c8131ace89e5b0abe94468657682689c83f19e058b7e532cb", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x44}}, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) r3 = dup(r2) bpf$MAP_CREATE(0x0, 0x0, 0x48) close(0x3) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x0, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x32, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a8440081004a0008004500001c00000000000190780a010101ac1414aa1100907800000900"], 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e23, @loopback}}, 0x0, 0x0, 0x19, 0x0, "58ec87bb53679fd04400889a2da26c4414fab0919616e14e4feb4b5daa18fe922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd000000000200"}, 0xd8) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$inet(r4, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xa2732}], 0x1}, 0x0) recvmsg(r4, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) bpf$MAP_CREATE(0x0, 0x0, 0x0) read(r3, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x12, 0xffffffffffffffff, 0xe1f08000) 4m19.468113743s ago: executing program 5 (id=1121): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount$tmpfs(0xfffff000, &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1000810, 0x0) 4m19.233707345s ago: executing program 5 (id=1122): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', 0x6dcf42, 0x4) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file4\x00', 0xc000, 0x74e) openat$cgroup_ro(r1, &(0x7f0000000900)='net_prio.prioidx\x00', 0x275a, 0xb) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) read$FUSE(r0, &(0x7f0000001fc0)={0x2020}, 0x2020) 4m18.995898546s ago: executing program 5 (id=1123): r0 = socket$alg(0x26, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x48) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_SREGS(r4, 0x8138ae83, &(0x7f0000000180)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x9c}}}, &(0x7f0000000200)='GPL\x00'}, 0x90) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r5 = accept4(r0, 0x0, 0x0, 0x800) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r6, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r7, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r8, r6, 0x4, r6}, 0x10) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000001, 0x10, 0xffffffffffffffff, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x10c, &(0x7f0000000080)=0x7, 0x0, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r5) 4m18.772814829s ago: executing program 34 (id=1123): r0 = socket$alg(0x26, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x48) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_SREGS(r4, 0x8138ae83, &(0x7f0000000180)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x9c}}}, &(0x7f0000000200)='GPL\x00'}, 0x90) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r5 = accept4(r0, 0x0, 0x0, 0x800) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r6, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r7, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r8, r6, 0x4, r6}, 0x10) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000001, 0x10, 0xffffffffffffffff, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x10c, &(0x7f0000000080)=0x7, 0x0, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r5) 1m37.783475932s ago: executing program 4 (id=1835): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f0000000180)=0x1, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f0000000040)={0x80}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r2, 0x400caed0, &(0x7f0000000300)={0x4}) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x6, @loopback, 0x7fff}, 0x1c) socket$inet6(0xa, 0x5, 0x0) (async) setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f0000000180)=0x1, 0x4) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f0000000040)={0x80}) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_HYPERV_EVENTFD(r2, 0x400caed0, &(0x7f0000000300)={0x4}) (async) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x6, @loopback, 0x7fff}, 0x1c) (async) 1m37.57435577s ago: executing program 4 (id=1836): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x3c, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000280), 0x2}, 0x0, 0x22121}) r0 = syz_io_uring_setup(0x487, &(0x7f0000000100)={0x0, 0x59c4, 0x800, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x0, &(0x7f0000000200)}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r0}) io_uring_enter(r0, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 1m37.484713263s ago: executing program 4 (id=1837): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0086401, &(0x7f0000000080)={0xdd, &(0x7f0000000140)=""/221}) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$cgroup2(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(0x0, &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file0\x00', 0x1c1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xfffffffffffffd63, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x2, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x2c}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000340)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r5, 0xc0b45545, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a00000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000e734a5e703f57f050000000000000000000000000000000000bdc77b9a193cc33fcf721d1e3a352b9606b69f860f42107bcfce000000000000"], 0x50) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)={0x44, 0x1, 0x4, 0x3, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFULA_CFG_MODE={0xa, 0x2, {0x7, 0x1}}, @NFULA_CFG_NLBUFSIZ={0x8}, @NFULA_CFG_MODE={0xa, 0x2, {0x7, 0x1}}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xfffffff7}]}, 0x44}, 0x1, 0x0, 0x0, 0x20044004}, 0x4040840) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 1m36.188809488s ago: executing program 4 (id=1843): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount$tmpfs(0xffffffff, &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1000810, 0x0) 1m35.874469458s ago: executing program 4 (id=1845): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') chdir(&(0x7f00000001c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0xfffffff6) 1m34.872464926s ago: executing program 4 (id=1850): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000100), 0x400, 0x0) read$FUSE(r3, &(0x7f0000004d80)={0x2020}, 0x5bb5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) recvmmsg(r0, &(0x7f0000007700), 0x318, 0xfc0, 0x0) 1m34.804939466s ago: executing program 35 (id=1850): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000100), 0x400, 0x0) read$FUSE(r3, &(0x7f0000004d80)={0x2020}, 0x5bb5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) recvmmsg(r0, &(0x7f0000007700), 0x318, 0xfc0, 0x0) 14.913506874s ago: executing program 7 (id=2268): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x4, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x25, 0x18, @val=@tracing={0x0, 0xf3}}, 0x1c) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000040)=0x1) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040100ff580c030322156754413a3bf2f49b9a888bbf3fb967e682e2047c9f5e1a991445"], 0x8) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, &(0x7f0000000140)) r3 = socket(0x40000000015, 0x5, 0x0) r4 = syz_io_uring_setup(0x892, &(0x7f0000000140)={0x0, 0xaef2, 0x0, 0x2, 0x2ee}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xffffbffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x2000, 0x0, {0x2}}) io_uring_enter(r4, 0x47f6, 0xfff5, 0x2, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x10, 0x0, 0x1, 0xfffffffe, 0x25dfdbfd, {{0x8}, {@void, @void}}}, 0x14}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 14.513618633s ago: executing program 7 (id=2269): mmap(&(0x7f00003f7000/0x2000)=nil, 0x2000, 0x800001, 0x4000010, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$nmem0(0xffffff9c, &(0x7f0000000080), 0x44000, 0x0) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r0, 0x4004af77, &(0x7f0000000180)=0x9) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000300)={'ip6tnl0\x00', 0x0, 0x4, 0x1, 0xa0, 0x5, 0x4, @remote, @private2, 0x10, 0x780f, 0x4, 0x37}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r4, 0x4020aed2, &(0x7f0000000000)={0x8000000, 0x101000, 0x8}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000003c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa000800450005dc0000000003f79078ac1e0001ac1414aa0300907800000000450003d7fffe000400010000ac141400ac1414bb23872fbc6c707dc31c666a521e92b4de675845574c0afbc60bcd97395d4f001d87afd268956f5691972c6d2f39dbd8f6bdbc179d"], 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYRESOCT=r2, @ANYRES16=r5, @ANYRES32=r0, @ANYRES64=r3], 0x144}}, 0x1) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) r6 = dup(0xffffffffffffffff) ioctl$EXT4_IOC_GETFSUUID(0xffffffffffffffff, 0x8008662c, 0x0) ioctl$TIOCL_SETSEL(r6, 0x541c, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x30004084) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) bind$ax25(0xffffffffffffffff, 0x0, 0x0) connect$unix(r6, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) 13.652381734s ago: executing program 7 (id=2278): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'macvtap0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) accept4(r1, &(0x7f0000000080)=@generic, &(0x7f0000000140)=0x80, 0x800) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, r3}) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, r3}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000001000010400000000000000000000000017c6139de05019939a5ba42f2fb8fb0b7d96b9337bad1201a6c1b5b076e25a1f5207bc", @ANYRESOCT=r4, @ANYBLOB="c14d0000000000003000128008000100687372002400028008000200", @ANYRES32=r0, @ANYRES8=0x0, @ANYRESHEX=r2, @ANYBLOB="05000600010000000500070001000000"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000001000010400000000000000000000000017c6139de05019939a5ba42f2fb8fb0b7d96b9337bad1201a6c1b5b076e25a1f5207bc", @ANYRESOCT=r4, @ANYBLOB="c14d0000000000003000128008000100687372002400028008000200", @ANYRES32=r0, @ANYRES8=0x0, @ANYRESHEX=r2, @ANYBLOB="05000600010000000500070001000000"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r5, 0x400caed0, &(0x7f0000000300)={0x4}) 13.431637293s ago: executing program 7 (id=2280): openat$mice(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffffffa, 0x0, 0x0, 0x0, 0x239, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x4, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x960, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1010001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xd, 0x0, 0x0, 0x400000, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000340)={'sit0\x00', &(0x7f00000001c0)={@dev={0xfe, 0x80, '\x00', 0x2d}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x14, 0x2}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x3c, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000280), 0x2}, 0x0, 0x22121}) r3 = syz_io_uring_setup(0x487, &(0x7f0000000100)={0x0, 0x59c4, 0x800, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r6 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$PTRACE_GETSIGMASK(0x420a, r6, 0x8, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r3}) io_uring_enter(r3, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 12.468235328s ago: executing program 7 (id=2283): io_cancel(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) r0 = socket$inet6(0xa, 0x5, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x121) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f00000000c0)='./file0\x00') setpgid(r1, r1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setpgid(0x0, r1) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000004c0)=[@in6={0xa, 0x0, 0x0, @local, 0x1}], 0x1c) 12.229315914s ago: executing program 7 (id=2284): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000440), 0x10bc01, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000400)=0x10000002) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x1000}, 0x18) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1800000076000d0b"], 0x18}}, 0x400ffa2) 5.044393589s ago: executing program 6 (id=2311): socket(0x2, 0x2, 0x1) syz_open_dev$video(0x0, 0x7efffffe, 0x101302) r0 = socket(0x2a, 0x2, 0x0) sendto$isdn(r0, 0x0, 0xfffffeb3, 0x0, &(0x7f00000003c0)={0x22, 0xff, 0x4, 0xd, 0x81}, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x1d, 0x2, 0x6) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000080003851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x1e}, 0x94) socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 3.602393605s ago: executing program 1 (id=2316): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x4, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x25, 0x18, @val=@tracing={0x0, 0xf3}}, 0x1c) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r4, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000040)=0x1) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040100ff580c030322156754413a3bf2f49b9a888bbf3fb967e682e2047c9f5e1a991445"], 0x8) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, &(0x7f0000000140)) r5 = socket(0x40000000015, 0x5, 0x0) r6 = syz_io_uring_setup(0x892, &(0x7f0000000140)={0x0, 0xaef2, 0x0, 0x2, 0x2ee}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xffffbffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x2000, 0x0, {0x2}}) io_uring_enter(r6, 0x47f6, 0xfff5, 0x2, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x10, 0x0, 0x1, 0xfffffffe, 0x25dfdbfd, {{0x8}, {@void, @void}}}, 0x14}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 3.600988443s ago: executing program 6 (id=2317): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x80, 0xfffffffc, 0xdc67}}) socket$inet6(0xa, 0x80002, 0x0) socket$caif_stream(0x25, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x88) r0 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x103642, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) socket$unix(0x1, 0x1, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r3 = syz_io_uring_setup(0x114, &(0x7f0000000440)={0x0, 0x4000000, 0x0, 0x4, 0x48}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000300)=0xfffffffc, 0x0, 0x4) unshare(0x20000400) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd_index=0x4, 0x1000, 0x0, 0xd, 0x2, 0x1}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xf, 0x31, 0xffffffffffffffff, 0x34345000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan1\x00'}) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, 0x0, 0x4814) 2.659547589s ago: executing program 6 (id=2318): r0 = openat$apparmor_task_exec(0xffffff9c, &(0x7f0000000500), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x24000845}, 0x20000080) r3 = openat$sr(0xffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$SG_IO(r3, 0x2285, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x4080) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0xb}, r5}}, 0x30) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0xb, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x60}}}}]}]}, 0x70}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r6 = getpid() r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x3c, r8, 0xc2ddb5edb7ba9069, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}]}, 0x3c}, 0x1, 0xfffffffe, 0x0, 0x4040010}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="c400000019000100fcffffff00000000ac14142c000000000000000000000000fe8000000000000000000000000000aa4e2200004e2400000a00006000000000", @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="0000000000000010feffffffffffffff000000400000000000000000000000001a000000000000000100000000000000feffffffffffffffa2d5000000000000afb3f60156b150f500e03df0d4908acce9ba00000000000000ff7f040000000000080000000008000001"], 0xc4}}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x711, @remote, 0xbf}, {0xa, 0x4e20, 0xfffffffe, @mcast2, 0x10001}, r5, 0x403}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, &(0x7f00000002c0)={0x4, 0x8, 0xfa00, {r5, 0x5}}, 0x10) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x100004, 0x10001d, 0x40000}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r4, &(0x7f0000000380)={0x6, 0x118, 0xfa00, {{0x1, 0x8, "4ca4625e00b5aa95a443d782d859cb2df816a3bc9bd3bf1d11d8b4a7ba9fc6dfb72a8a253215874b349abc806123fd11b1d23eb79cf0385a4cd7b494621f0b26b593bbccdfdf13dbc79be9e9f18b5fb46b9d5a74d7a6dd151c0f37b9e89825f2f99217fb0091568ce14c98b5b462555908260a0e7c7c33fc1ba12df6d0d8fc11847c4b29bd4752fa53802767e26e11475a905215a4d1cfb8a8cc88d605e68145d97c3c2836b7935b66b3583d6633efe51a9cb5426092d85d47a8ca52fe5b7c2083596186c5b4e98f1052759d2233c3fb1e62e4333f0898f89b770b6abe57c92ba6f0e1c64a714686c6f22f7c8f6f79ee56c56d09e95001654229a197d0462e6f", 0x0, 0x4, 0x5, 0xf, 0xd, 0x0, 0x6, 0x1}, r5}}, 0x120) socket$nl_generic(0x10, 0x3, 0x10) bind$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @broadcast}}, 0x24) socketpair$unix(0x1, 0x2, 0x0, 0x0) 1.78161604s ago: executing program 1 (id=2321): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f00000008c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0x18}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newtfilter={0x38, 0x2c, 0xd23, 0x70bd22, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x2400}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r1}]}}]}, 0x38}, 0x1, 0xf0ffff, 0x0, 0x4084}, 0x8000) 1.601593856s ago: executing program 1 (id=2322): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffdffd, 0x0, 0x0, 0x0, 0x800}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a600000000f0ffffff", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.601377231s ago: executing program 1 (id=2323): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000100001000000f5ffffff00000000000a58000000060a0b040000000000000000020000002c0004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a30000000000900010073797a30000000000900020073797a32000000007c010000020a01"], 0x250}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) 1.531292908s ago: executing program 1 (id=2324): bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="22000000040000001000000012e05a6308b6a68093c6ba5cd97e39c457ffca1a8954f27e4073d7270838396184b2f00543195e941510452ab3427f2d184abb07f4bd54d78b3e7eb77a5e68b9fbb6c9b0070a2e03dcda6dc703286eb47b9a4870e2a5f81af9d183c0022169c41dd1c2f7c12b7d00ef27a64331a3f4a57965428c97054a36d8b2aaa43881ae370ce12ae33b1086ab5d7e3415d39017b8d7407d6ef4ab5977c3a4d908041187a34bbdf3f39c2715eac473bde599b06824504509dc1e261708bd2af17b08285ca86367"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xcc011) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000280)={'veth0_to_hsr\x00', @remote}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000002080)=""/102400, 0x19000) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000380)={0x2}) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r3) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000ec0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r3, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f00)={0x1c, r4, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20040080}, 0x4000000) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) mkdir(&(0x7f0000000000)='./file0\x00', 0x10) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f00000000c0)={'pcmmio\x00', [0x4f28, 0x4, 0x10000, 0x4, 0x5, 0x5, 0x4, 0x7, 0x54c6cff3, 0xfd, 0xe3d, 0x1, 0x1, 0x1, 0x6, 0x101, 0x0, 0x7f, 0x3, 0x40000003, 0x0, 0x7, 0x0, 0x20001e58, 0x3, 0xe64, 0x3, 0x8, 0x3, 0x0, 0xfffffff8]}) mount(0x0, &(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0xa08408, 0x0) socket$nl_route(0x10, 0x3, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') open(&(0x7f0000000040)='./file0\x00', 0x80242, 0x1df2a23c5997fa7b) 1.431554815s ago: executing program 6 (id=2325): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2000000}, 0x48) 1.051054295s ago: executing program 6 (id=2326): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = userfaultfd(0x80001) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x804a031}, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x7c8}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) readv(r1, &(0x7f0000000040), 0x10000000000000ef) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f0000000000)={0x8000000, 0x101000, 0x8, 0x2000000}) 924.957918ms ago: executing program 1 (id=2327): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 720.575813ms ago: executing program 6 (id=2328): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x40000021, 0x0, 0x1bef}]}) (async) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x40000021, 0x0, 0x1bef}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = socket(0x400000000010, 0x3, 0x0) io_uring_setup(0x2e15, &(0x7f00000002c0)={0x0, 0x1, 0x1, 0x1, 0x1be}) (async) r5 = io_uring_setup(0x2e15, &(0x7f00000002c0)={0x0, 0x1, 0x1, 0x1, 0x1be}) r6 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) (async) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) close_range(r5, 0xffffffffffffffff, 0x0) (async) close_range(r5, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r8, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000fb00", @ANYRES16=0x0, @ANYBLOB="10002dbd7000fbdbdf25050000000400018008000200020000000800040004000000080003000200000008000400080000003800018014000400fc000000000000000000000000000001060001000200000008000300e000000105000200040000000600010002000000"], 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x18}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f0000000900)=r9, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') (async) r11 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') read$FUSE(r11, &(0x7f0000002a80)={0x2020}, 0x2020) ioctl$USBDEVFS_CONTROL(r11, 0xc0105500, &(0x7f0000000280)={0x5, 0x13, 0x0, 0x9, 0x36, 0xd, &(0x7f0000000240)="be4849fdbe60cdf3ea2c704866e3a9097636686bc26a5668fc5ced690702674641d8af9de9e17b458f46f2f4dd0ac8eea98ecab502aa"}) ioctl$NBD_SET_SOCK(r11, 0xab00, r4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r4) 519.986639ms ago: executing program 3 (id=2329): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/xfrm_stat\x00') mmap$binder(&(0x7f00005f0000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x11) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x8c}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xfffffffffffffea7, &(0x7f0000000140)=ANY=[@ANYBLOB="14000000100100000e000000ac254f2fa3000000"], 0x14}, 0x4008004) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x379d758a, 0x0, &(0x7f0000000080)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)=ANY=[@ANYBLOB="56b2a420c73877ea0b32e628e8fbf5cc172f2a73f9a0c6e317d7808c5124651d038ee037d3a780ceecf1d6863fbbfc256b02e0cd2dac637a4a5f566a1764ca52ea0cb6365636d69a3c1a7ab11e3df1dcc1b4e8c53f6b65227fd8f38853be9e4bfd3c6b8991b79ed9fe83e0e6addc588d6e7f6bf69c1df4508fdff888ce45e574563e770140592ade533c8648d35d66635a6b2df67570d71e1b04677fa0d954", @ANYRESHEX=0xee00]) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001004010400eeffffffff00f687000000", @ANYRES32=r7, @ANYBLOB="01000000010000010062726964676536c45b54366b4bd7faf98a07b8e033adc0a68af4d53870a3544bcd955d32f79d8eb6e1e3fb50a4323080bcb4f19a9960103a3ffd6e5c1937d91e7049b756373efd09ae9c3b0746a5a1d1312c4eba01dc833a49142347f608bf390efab1041b0e6c78293ee1d3c827e395e526a867d997d9e8e8d50e1df0680a240a7d8e6aa75374981bdd7e5cb01c95e6861f0448b430a58f4565ce374a31ae8c8794ba005e880fa2d2f0bc547ae05eb69ccc1be42c3e7cce450ced98d4a3b0530e5e9ef958460ba0bd0de74fb1"], 0x3c}}, 0x891) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newqdisc={0x4c, 0x24, 0x20, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xfff3, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x25, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x20842}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}]}}]}, 0x4c}}, 0x4044080) bind$packet(r4, &(0x7f0000000040)={0x11, 0xf6, r7, 0x1, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, 0x14) sendto$inet6(r4, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) r8 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)="ebcca0e9796cfd1647e299f4e37f8220a5a636488a967a8c35fa5c0e76fdba128280b272219d205e81fca7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x5c}, {&(0x7f0000000740)="e8700e44", 0x4}], 0x2, 0x0, 0x0, 0x14}], 0x1, 0x48804) recvmsg(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000540)=""/75, 0x4b}], 0x2}, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') 168.669724ms ago: executing program 3 (id=2330): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000020000000000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) socket$packet(0x11, 0xa, 0x300) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000002000000000000000000001e95"], &(0x7f0000000040)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000000)="fef351f64d23421a5b4e415288ca", 0x0, 0x2, 0x0, 0xf4ff, 0x0, 0x0, 0x0, 0x2}, 0x50) 80.49898ms ago: executing program 3 (id=2331): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f00000002c0)=[{{&(0x7f0000000340)=@l2tp6={0xa, 0x500, 0x80000, @dev, 0x0, 0x1}, 0x1b, 0x0}, 0x5b4}], 0x1, 0x850) 79.587108ms ago: executing program 3 (id=2332): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x10, 0x2, 0x9, 0x0, 0xffffffffffffffff, 0x10000}, 0x48) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x18, 0x2e, 0x1, 0x0, 0x25dfdbfd, "", [@typed={0x5, 0x146, 0x0, 0x0, @str='\x00'}]}, 0x18}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x9d}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x9}, 0x94) 278.885µs ago: executing program 3 (id=2333): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="340000c33e0007012bbd700000000000010100080400fc800c00018008000600", @ANYRES32=0x0, @ANYBLOB="080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 0s ago: executing program 3 (id=2334): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') getdents(r2, &(0x7f0000000380)=""/55, 0x37) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000000)=0x3) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc1105518, &(0x7f0000000c40)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x3000000, 0xfffffffffffffffc, 0x0, 0x80000, 0xf, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, 0x0, 0x7, 0x7ff, 0xfffffffe, 0x0, 0x40, 0x0, 0x0, 0x100000001, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffd, 0x108000000000000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffc, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffa, 0x0, 0x401, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x400000000000, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x80000000000000, 0xfffffffc, 0x1, 0x8, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xde4, 0x7, 0x0, 0x100000000]}) 0s ago: executing program 6 (id=2335): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x4800100b, r0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r0, r2, 0x0, 0x4) r3 = fsopen(&(0x7f00000002c0)='iso9660\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) openat$pfkey(0xffffff9c, &(0x7f0000000000), 0x200000, 0x0) kernel console output (not intermixed with test programs): n+0x144/0x410 [ 408.881989][T12747] ? __fget_files+0x20e/0x3c0 [ 408.882004][T12747] ? __fput_deferred+0x430/0x480 [ 408.882018][T12747] security_file_ioctl_compat+0x9b/0x240 [ 408.882032][T12747] __ia32_compat_sys_ioctl+0xc3/0x370 [ 408.882048][T12747] __do_fast_syscall_32+0xe8/0x680 [ 408.882071][T12747] do_fast_syscall_32+0x32/0x80 [ 408.882080][T12747] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 408.882094][T12747] RIP: 0023:0xf70cd579 [ 408.882104][T12747] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 408.882115][T12747] RSP: 002b:00000000f54bd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 408.882125][T12747] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 000000004040ae79 [ 408.882132][T12747] RDX: 0000000080001340 RSI: 0000000000000000 RDI: 0000000000000000 [ 408.882138][T12747] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 408.882144][T12747] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 408.882151][T12747] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 408.882164][T12747] [ 408.883905][T12747] ERROR: Out of memory at tomoyo_realpath_from_path. [ 408.968295][T12750] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 409.267111][T12761] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 409.270049][T12761] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 409.273798][T12761] vhci_hcd vhci_hcd.0: Device attached [ 409.301966][T12761] netlink: 'syz.1.1694': attribute type 1 has an invalid length. [ 409.327154][T12761] 8021q: adding VLAN 0 to HW filter on device bond2 [ 409.365404][T12761] bond2: (slave geneve3): making interface the new active one [ 409.370789][T12761] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 409.386733][ T1248] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.393645][ T1248] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.400158][ T1248] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.406311][ T1248] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.526285][ T7947] usb 39-1: new low-speed USB device number 11 using vhci_hcd [ 409.589607][T12762] vhci_hcd: connection reset by peer [ 409.592565][T11730] vhci_hcd vhci_hcd.1: stop threads [ 409.594943][T11730] vhci_hcd vhci_hcd.1: release socket [ 409.597680][T11730] vhci_hcd vhci_hcd.1: disconnect device [ 409.642046][T12772] input: syz0 as /devices/virtual/input/input71 [ 409.721175][T12774] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1702'. [ 409.725232][T12774] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1702'. [ 409.740809][T12774] Bluetooth: hci0: invalid len left 7, exp >= 131 [ 409.762351][T12774] use of bytesused == 0 is deprecated and will be removed in the future, [ 409.767243][T12774] use the actual size instead. [ 410.331113][T12790] tipc: Started in network mode [ 410.332981][T12790] tipc: Node identity ca919099c694, cluster identity 4711 [ 410.336298][T12790] tipc: Enabled bearer , priority 0 [ 410.340101][T12790] syzkaller0: entered promiscuous mode [ 410.342730][T12790] syzkaller0: entered allmulticast mode [ 410.382014][T12790] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 410.401554][T12790] tipc: Resetting bearer [ 410.461280][T12789] tipc: Resetting bearer [ 410.475033][T12789] tipc: Disabling bearer [ 410.490847][ T5953] Bluetooth: hci2: link tx timeout [ 410.506700][ T5953] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 410.511280][ T5953] Bluetooth: hci2: link tx timeout [ 410.512989][ T5953] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 412.425544][T12827] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1716'. [ 412.451828][T12829] ip6erspan0: entered allmulticast mode [ 412.606403][T12793] Bluetooth: hci2: command 0x0406 tx timeout [ 414.636753][ T7947] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 414.716300][T12793] Bluetooth: hci2: command 0x0406 tx timeout [ 415.507859][T12872] FAULT_INJECTION: forcing a failure. [ 415.507859][T12872] name failslab, interval 1, probability 0, space 0, times 0 [ 415.512354][T12872] CPU: 0 UID: 0 PID: 12872 Comm: syz.4.1733 Not tainted syzkaller #0 PREEMPT(full) [ 415.512372][T12872] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 415.512379][T12872] Call Trace: [ 415.512383][T12872] [ 415.512388][T12872] dump_stack_lvl+0x16c/0x1f0 [ 415.512409][T12872] should_fail_ex+0x512/0x640 [ 415.512423][T12872] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 415.512438][T12872] should_failslab+0xc2/0x120 [ 415.512456][T12872] kmem_cache_alloc_noprof+0x83/0x770 [ 415.512470][T12872] ? skb_clone+0x190/0x3f0 [ 415.512488][T12872] ? skb_clone+0x190/0x3f0 [ 415.512501][T12872] skb_clone+0x190/0x3f0 [ 415.512516][T12872] netlink_deliver_tap+0xabd/0xd30 [ 415.512535][T12872] netlink_unicast+0x64c/0x870 [ 415.512554][T12872] ? __pfx_netlink_unicast+0x10/0x10 [ 415.512570][T12872] ? __pfx___might_resched+0x10/0x10 [ 415.512592][T12872] netlink_sendmsg+0x8c8/0xdd0 [ 415.512610][T12872] ? __pfx_netlink_sendmsg+0x10/0x10 [ 415.512629][T12872] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 415.512651][T12872] __sys_sendto+0x4a3/0x520 [ 415.512665][T12872] ? __pfx___sys_sendto+0x10/0x10 [ 415.512676][T12872] ? __lock_acquire+0x436/0x2890 [ 415.512703][T12872] __ia32_compat_sys_socketcall+0x62a/0x780 [ 415.512720][T12872] ? __fget_files+0x20e/0x3c0 [ 415.512737][T12872] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 415.512755][T12872] ? fput+0x70/0xf0 [ 415.512772][T12872] __do_fast_syscall_32+0xe8/0x680 [ 415.512792][T12872] do_fast_syscall_32+0x32/0x80 [ 415.512803][T12872] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 415.512817][T12872] RIP: 0023:0xf70dd579 [ 415.512826][T12872] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 415.512837][T12872] RSP: 002b:00000000f54cc430 EFLAGS: 00000293 ORIG_RAX: 0000000000000066 [ 415.512848][T12872] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000f54cc444 [ 415.512855][T12872] RDX: 0000000000000000 RSI: 00000000f54cc560 RDI: 00000000f7476ff4 [ 415.512862][T12872] RBP: 00000000f54cc560 R08: 0000000000000000 R09: 0000000000000000 [ 415.512869][T12872] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 415.512875][T12872] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 415.512889][T12872] [ 415.571828][ T40] kauditd_printk_skb: 393 callbacks suppressed [ 415.571843][ T40] audit: type=1326 audit(1766924096.421:68068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12868 comm="syz.3.1732" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 415.616789][T12866] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1731'. [ 415.623661][T12866] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1731'. [ 415.627696][ T40] audit: type=1326 audit(1766924096.421:68069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12868 comm="syz.3.1732" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 415.627744][ T40] audit: type=1326 audit(1766924096.501:68070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12868 comm="syz.3.1732" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 415.627812][ T40] audit: type=1326 audit(1766924096.501:68071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12868 comm="syz.3.1732" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 415.627852][ T40] audit: type=1326 audit(1766924096.501:68072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12868 comm="syz.3.1732" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 415.676397][ T40] audit: type=1326 audit(1766924096.501:68073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12868 comm="syz.3.1732" exe="/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 415.684165][ T40] audit: type=1326 audit(1766924096.501:68074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12868 comm="syz.3.1732" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 415.704210][ T40] audit: type=1326 audit(1766924096.501:68075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12868 comm="syz.3.1732" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 415.714437][ T40] audit: type=1326 audit(1766924096.501:68076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12868 comm="syz.3.1732" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 415.734850][ T40] audit: type=1326 audit(1766924096.501:68077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12868 comm="syz.3.1732" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 415.797773][T12876] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 415.800068][T12876] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 415.802882][T12876] vhci_hcd vhci_hcd.0: Device attached [ 416.046352][ T6034] usb 45-1: new low-speed USB device number 8 using vhci_hcd [ 416.472738][T12877] vhci_hcd: connection reset by peer [ 416.474901][T11730] vhci_hcd vhci_hcd.4: stop threads [ 416.477507][T11730] vhci_hcd vhci_hcd.4: release socket [ 416.479734][T11730] vhci_hcd vhci_hcd.4: disconnect device [ 416.851271][T12894] netlink: 'syz.6.1736': attribute type 2 has an invalid length. [ 417.082579][T12897] tipc: Started in network mode [ 417.084358][T12897] tipc: Node identity ee748687e386, cluster identity 4711 [ 417.088052][T12897] tipc: Enabled bearer , priority 0 [ 417.091981][T12897] syzkaller0: entered promiscuous mode [ 417.093883][T12897] syzkaller0: entered allmulticast mode [ 417.100561][T12897] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 417.112633][T12897] tipc: Resetting bearer [ 417.123754][T12896] tipc: Resetting bearer [ 417.135219][T12896] tipc: Disabling bearer [ 418.760852][T12925] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 418.763872][T12925] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 418.767611][T12925] vhci_hcd vhci_hcd.0: Device attached [ 418.856784][T12929] syzkaller0: entered promiscuous mode [ 418.858571][T12929] syzkaller0: entered allmulticast mode [ 419.007034][ T6013] usb 43-1: new low-speed USB device number 17 using vhci_hcd [ 419.066963][T12931] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 419.069896][T12931] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 419.073761][T12931] vhci_hcd vhci_hcd.0: Device attached [ 419.216309][ T5985] usb 11-1: new full-speed USB device number 2 using dummy_hcd [ 419.336361][ T34] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 419.337595][ T56] usb 40-1: SetAddress Request (51) to port 0 [ 419.343588][ T56] usb 40-1: new SuperSpeed USB device number 51 using vhci_hcd [ 419.387811][ T5985] usb 11-1: config 0 has an invalid interface number: 1 but max is 0 [ 419.390679][ T5985] usb 11-1: config 0 has no interface number 0 [ 419.392976][ T5985] usb 11-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 419.396837][ T5985] usb 11-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 64 [ 419.401063][ T5985] usb 11-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 419.404150][ T5985] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.408811][ T5985] usb 11-1: config 0 descriptor?? [ 419.411429][T12933] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 419.417252][T12926] vhci_hcd: connection reset by peer [ 419.417356][ T5985] iowarrior 11-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 419.419352][ T8728] vhci_hcd vhci_hcd.3: stop threads [ 419.424527][ T8728] vhci_hcd vhci_hcd.3: release socket [ 419.426572][ T8728] vhci_hcd vhci_hcd.3: disconnect device [ 419.497716][ T34] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 419.501387][ T34] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 419.505701][ T34] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 419.509453][ T34] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 419.515327][ T34] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 419.519066][ T34] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 419.521747][ T34] usb 6-1: Product: syz [ 419.523171][ T34] usb 6-1: Manufacturer: syz [ 419.527468][ T34] cdc_wdm 6-1:1.0: skipping garbage [ 419.529731][ T34] cdc_wdm 6-1:1.0: skipping garbage [ 419.533068][ T34] cdc_wdm 6-1:1.0: cdc-wdm1: USB WDM device [ 419.535577][ T34] cdc_wdm 6-1:1.0: Unknown control protocol [ 419.615967][T11986] usb 11-1: USB disconnect, device number 2 [ 419.729336][ T29] usb 6-1: USB disconnect, device number 5 [ 419.732660][T12936] vhci_hcd: connection reset by peer [ 419.734725][ T1248] vhci_hcd vhci_hcd.1: stop threads [ 419.737065][ T1248] vhci_hcd vhci_hcd.1: release socket [ 419.739196][ T1248] vhci_hcd vhci_hcd.1: disconnect device [ 420.180304][T12948] netlink: 'syz.4.1754': attribute type 27 has an invalid length. [ 420.714804][T12959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1756'. [ 420.718227][T12959] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1756'. [ 420.927897][ T6012] libceph: connect (1)[c::]:6789 error -101 [ 420.930390][ T6012] libceph: mon0 (1)[c::]:6789 connect error [ 420.949044][T12963] ceph: No mds server is up or the cluster is laggy [ 421.010016][T12966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.014052][T12966] team0: left promiscuous mode [ 421.218070][T12966] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 421.225117][ T5998] libceph: connect (1)[c::]:6789 error -101 [ 421.241321][ T5998] libceph: mon0 (1)[c::]:6789 connect error [ 421.279494][ T5953] Bluetooth: hci1: unexpected event 0x01 length: 5 > 1 [ 421.766298][ T6034] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 422.149145][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 422.149161][ T40] audit: type=1326 audit(1766924103.041:68094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12977 comm="syz.6.1760" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ad598 code=0x7ffc0000 [ 422.318722][ T40] audit: type=1326 audit(1766924103.061:68095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12977 comm="syz.6.1760" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ad598 code=0x7ffc0000 [ 422.331994][ T40] audit: type=1326 audit(1766924103.061:68096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12977 comm="syz.6.1760" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ad598 code=0x7ffc0000 [ 422.341623][ T40] audit: type=1326 audit(1766924103.061:68097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12977 comm="syz.6.1760" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ad598 code=0x7ffc0000 [ 422.348954][ T40] audit: type=1326 audit(1766924103.061:68098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12977 comm="syz.6.1760" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ad598 code=0x7ffc0000 [ 422.360354][ T40] audit: type=1326 audit(1766924103.061:68099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12977 comm="syz.6.1760" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ad598 code=0x7ffc0000 [ 422.373194][ T40] audit: type=1326 audit(1766924103.061:68100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12977 comm="syz.6.1760" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ad598 code=0x7ffc0000 [ 422.380653][ T40] audit: type=1326 audit(1766924103.061:68101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12977 comm="syz.6.1760" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ad598 code=0x7ffc0000 [ 422.390066][ T40] audit: type=1326 audit(1766924103.061:68102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12977 comm="syz.6.1760" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ad598 code=0x7ffc0000 [ 422.401478][ T40] audit: type=1326 audit(1766924103.061:68103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12977 comm="syz.6.1760" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ad598 code=0x7ffc0000 [ 423.216121][T12999] FAULT_INJECTION: forcing a failure. [ 423.216121][T12999] name failslab, interval 1, probability 0, space 0, times 0 [ 423.221654][T12999] CPU: 3 UID: 0 PID: 12999 Comm: syz.6.1767 Not tainted syzkaller #0 PREEMPT(full) [ 423.221679][T12999] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 423.221689][T12999] Call Trace: [ 423.221697][T12999] [ 423.221705][T12999] dump_stack_lvl+0x16c/0x1f0 [ 423.221734][T12999] should_fail_ex+0x512/0x640 [ 423.221752][T12999] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 423.221776][T12999] should_failslab+0xc2/0x120 [ 423.221801][T12999] kmem_cache_alloc_node_noprof+0x86/0x800 [ 423.221822][T12999] ? __alloc_skb+0x156/0x410 [ 423.221845][T12999] ? __alloc_skb+0x156/0x410 [ 423.221861][T12999] __alloc_skb+0x156/0x410 [ 423.221877][T12999] ? __alloc_skb+0x35d/0x410 [ 423.221895][T12999] ? __pfx___alloc_skb+0x10/0x10 [ 423.221913][T12999] ? netlink_autobind.isra.0+0x158/0x370 [ 423.221943][T12999] netlink_alloc_large_skb+0x69/0x140 [ 423.221967][T12999] netlink_sendmsg+0x698/0xdd0 [ 423.222000][T12999] ? __pfx_netlink_sendmsg+0x10/0x10 [ 423.222026][T12999] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 423.222058][T12999] ____sys_sendmsg+0xa5d/0xc30 [ 423.222085][T12999] ? __pfx_____sys_sendmsg+0x10/0x10 [ 423.222109][T12999] ? get_compat_msghdr+0x11a/0x170 [ 423.222140][T12999] ___sys_sendmsg+0x134/0x1d0 [ 423.222162][T12999] ? __pfx____sys_sendmsg+0x10/0x10 [ 423.222193][T12999] ? find_held_lock+0x2b/0x80 [ 423.222229][T12999] __sys_sendmsg+0x16d/0x220 [ 423.222249][T12999] ? __pfx___sys_sendmsg+0x10/0x10 [ 423.222283][T12999] __do_fast_syscall_32+0xe8/0x680 [ 423.222312][T12999] do_fast_syscall_32+0x32/0x80 [ 423.222327][T12999] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 423.222348][T12999] RIP: 0023:0xf70ad579 [ 423.222361][T12999] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 423.222376][T12999] RSP: 002b:00000000f547c55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 423.222393][T12999] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000800002c0 [ 423.222403][T12999] RDX: 0000000020000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 423.222413][T12999] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 423.222422][T12999] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 423.222432][T12999] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 423.222453][T12999] [ 423.465351][ C3] vxcan0: j1939_tp_rxtimer: 0xffff888060771000: rx timeout, send abort [ 423.691565][T13000] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1766'. [ 423.965621][ C3] vxcan0: j1939_tp_rxtimer: 0xffff88804a9bb800: rx timeout, send abort [ 423.970460][ C3] vxcan0: j1939_tp_rxtimer: 0xffff888060771000: abort rx timeout. Force session deactivation [ 424.216313][ T6013] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 424.290263][T13015] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1768'. [ 424.437979][ T56] usb 40-1: device descriptor read/8, error -110 [ 424.469612][ C3] vxcan0: j1939_tp_rxtimer: 0xffff88804a9bb800: abort rx timeout. Force session deactivation [ 424.626385][ T5953] Bluetooth: hci3: unexpected event 0x01 length: 5 > 1 [ 425.138188][ T56] usb usb40-port1: attempt power cycle [ 425.696759][ T56] usb usb40-port1: unable to enumerate USB device [ 426.418452][T13053] syzkaller0: entered promiscuous mode [ 426.420486][T13053] syzkaller0: entered allmulticast mode [ 426.442037][T13057] netlink: 'syz.4.1777': attribute type 2 has an invalid length. [ 427.014683][T13063] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 427.016958][T13063] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 427.136360][T13063] vhci_hcd vhci_hcd.0: Device attached [ 427.268247][ T56] libceph: connect (1)[c::]:6789 error -101 [ 427.270496][ T56] libceph: mon0 (1)[c::]:6789 connect error [ 427.278632][T13071] netlink: 'syz.3.1785': attribute type 27 has an invalid length. [ 427.316561][T13072] ceph: No mds server is up or the cluster is laggy [ 427.426392][T11986] usb 40-1: SetAddress Request (55) to port 0 [ 427.428498][T11986] usb 40-1: new SuperSpeed USB device number 55 using vhci_hcd [ 427.496125][T13075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 427.499214][T13075] 8021q: adding VLAN 0 to HW filter on device team0 [ 427.504263][T13075] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 427.639511][T13064] vhci_hcd: connection reset by peer [ 427.647055][T11730] vhci_hcd vhci_hcd.1: stop threads [ 427.649423][T11730] vhci_hcd vhci_hcd.1: release socket [ 427.651539][T11730] vhci_hcd vhci_hcd.1: disconnect device [ 429.256056][T13095] syzkaller0: entered promiscuous mode [ 429.258600][T13095] syzkaller0: entered allmulticast mode [ 429.334803][T13096] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 429.337441][T13096] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 429.352336][T13096] vhci_hcd vhci_hcd.0: Device attached [ 430.027368][T13097] vhci_hcd: connection closed [ 430.037107][ T46] vhci_hcd vhci_hcd.1: stop threads [ 430.041400][ T46] vhci_hcd vhci_hcd.1: release socket [ 430.046692][ T46] vhci_hcd vhci_hcd.1: disconnect device [ 430.074605][T13101] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1791'. [ 430.078256][T13101] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1791'. [ 430.084145][T13101] geneve3: entered promiscuous mode [ 430.085914][T13101] geneve3: entered allmulticast mode [ 430.499109][T13116] openvswitch: netlink: Actions may not be safe on all matching packets [ 430.936385][T13128] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 430.939313][T13128] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 430.964435][T13128] vhci_hcd vhci_hcd.0: Device attached [ 431.206417][ T9] usb 45-1: new low-speed USB device number 9 using vhci_hcd [ 431.476337][T13135] bridge0: port 1(erspan0) entered blocking state [ 431.479050][T13135] bridge0: port 1(erspan0) entered disabled state [ 431.482177][T13135] erspan0: entered allmulticast mode [ 431.495737][T13135] erspan0: entered promiscuous mode [ 431.500321][T13135] bridge0: port 1(erspan0) entered blocking state [ 431.502608][T13135] bridge0: port 1(erspan0) entered forwarding state [ 432.214796][T13129] vhci_hcd: connection reset by peer [ 432.217216][ T1248] vhci_hcd vhci_hcd.4: stop threads [ 432.219252][ T1248] vhci_hcd vhci_hcd.4: release socket [ 432.221256][ T1248] vhci_hcd vhci_hcd.4: disconnect device [ 432.476382][T11986] usb 40-1: device descriptor read/8, error -110 [ 432.827202][T13147] fuse: Unknown parameter '00000000000000000003000000000000000000030000000000000000000000300000000000000000003' [ 432.960065][T11986] usb usb40-port1: attempt power cycle [ 433.026310][ T6013] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 433.166390][T13157] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1803'. [ 433.170536][T13157] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1803'. [ 433.202387][T13157] geneve2: entered promiscuous mode [ 433.204928][T13157] geneve2: entered allmulticast mode [ 433.227151][ T1141] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.232590][ T1141] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.243038][ T1141] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.246948][ T1141] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.307662][T13161] syzkaller0: entered promiscuous mode [ 433.309896][T13161] syzkaller0: entered allmulticast mode [ 433.772767][T13172] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 433.774974][T13172] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 433.777903][T13172] vhci_hcd vhci_hcd.0: Device attached [ 434.066293][ T6013] usb 44-1: SetAddress Request (42) to port 0 [ 434.069366][ T6013] usb 44-1: new SuperSpeed USB device number 42 using vhci_hcd [ 434.086961][T13180] FAULT_INJECTION: forcing a failure. [ 434.086961][T13180] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 434.099362][T13180] CPU: 2 UID: 0 PID: 13180 Comm: syz.4.1812 Not tainted syzkaller #0 PREEMPT(full) [ 434.099380][T13180] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 434.099387][T13180] Call Trace: [ 434.099391][T13180] [ 434.099396][T13180] dump_stack_lvl+0x16c/0x1f0 [ 434.099430][T13180] should_fail_ex+0x512/0x640 [ 434.099445][T13180] _copy_from_user+0x2e/0xd0 [ 434.099457][T13180] get_compat_msghdr+0xa7/0x170 [ 434.099472][T13180] ? __pfx_get_compat_msghdr+0x10/0x10 [ 434.099486][T13180] ? __lock_acquire+0x436/0x2890 [ 434.099499][T13180] ___sys_recvmsg+0x191/0x1a0 [ 434.099514][T13180] ? __pfx____sys_recvmsg+0x10/0x10 [ 434.099529][T13180] ? find_held_lock+0x2b/0x80 [ 434.099548][T13180] ? __pfx___might_resched+0x10/0x10 [ 434.099566][T13180] do_recvmmsg+0x55d/0x750 [ 434.099581][T13180] ? __pfx_do_recvmmsg+0x10/0x10 [ 434.099603][T13180] ? __fget_files+0x20e/0x3c0 [ 434.099621][T13180] __sys_recvmmsg+0x21c/0x280 [ 434.099635][T13180] ? __pfx___sys_recvmmsg+0x10/0x10 [ 434.099650][T13180] ? __pfx_ksys_write+0x10/0x10 [ 434.099668][T13180] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 434.099682][T13180] ? __do_fast_syscall_32+0x9a/0x680 [ 434.099699][T13180] ? lockdep_hardirqs_on+0x7c/0x110 [ 434.099715][T13180] __do_fast_syscall_32+0xe8/0x680 [ 434.099733][T13180] do_fast_syscall_32+0x32/0x80 [ 434.099743][T13180] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 434.099756][T13180] RIP: 0023:0xf70dd579 [ 434.099765][T13180] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 434.099776][T13180] RSP: 002b:00000000f54cd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 434.099787][T13180] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080002440 [ 434.099794][T13180] RDX: 00000000ffffff67 RSI: 0000000000000000 RDI: 0000000000000000 [ 434.099800][T13180] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 434.099806][T13180] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 434.099812][T13180] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 434.099825][T13180] [ 434.210374][T13178] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1811'. [ 434.214886][T13178] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1811'. [ 434.571559][T11986] usb usb40-port1: unable to enumerate USB device [ 434.614368][ T40] kauditd_printk_skb: 360 callbacks suppressed [ 434.614413][ T40] audit: type=1326 audit(1766924115.501:68464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13185 comm="syz.4.1814" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 434.623522][ T40] audit: type=1326 audit(1766924115.501:68465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13185 comm="syz.4.1814" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 434.740211][T13173] vhci_hcd: connection reset by peer [ 434.742920][ T40] audit: type=1326 audit(1766924115.501:68466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13185 comm="syz.4.1814" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 434.751203][ T1140] vhci_hcd vhci_hcd.3: stop threads [ 434.753036][ T1140] vhci_hcd vhci_hcd.3: release socket [ 434.755237][ T1140] vhci_hcd vhci_hcd.3: disconnect device [ 434.789584][ T40] audit: type=1326 audit(1766924115.681:68467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13185 comm="syz.4.1814" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 434.797531][ T40] audit: type=1326 audit(1766924115.681:68468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13185 comm="syz.4.1814" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 435.088578][T13210] syzkaller0: entered promiscuous mode [ 435.091153][T13210] syzkaller0: entered allmulticast mode [ 436.316317][ T9] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 436.467779][ T5953] Bluetooth: hci2: unexpected event 0x01 length: 5 > 1 [ 438.303597][T13265] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1841'. [ 438.476676][ T7947] page_pool_release_retry() stalled pool shutdown: id 47, 50 inflight 183 sec [ 438.749591][T13269] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 438.751845][T13269] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 438.754377][T13269] vhci_hcd vhci_hcd.0: Device attached [ 438.800778][T13274] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 438.802994][T13274] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 438.805826][T13274] vhci_hcd vhci_hcd.0: Device attached [ 438.924166][T13275] vhci_hcd: connection closed [ 438.936378][ T12] vhci_hcd vhci_hcd.3: stop threads [ 438.939801][ T12] vhci_hcd vhci_hcd.3: release socket [ 438.941662][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 438.998079][T13270] vhci_hcd: connection closed [ 438.998477][ T1140] vhci_hcd vhci_hcd.6: stop threads [ 439.002123][ T1140] vhci_hcd vhci_hcd.6: release socket [ 439.004094][ T1140] vhci_hcd vhci_hcd.6: disconnect device [ 439.016337][ T7947] usb 49-1: new low-speed USB device number 8 using vhci_hcd [ 439.018931][ T7947] usb 49-1: enqueue for inactive port 0 [ 439.086520][ T7947] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 439.116364][ T6013] usb 44-1: device descriptor read/8, error -110 [ 439.616988][T13287] macvtap2: entered promiscuous mode [ 439.619477][T13287] macvtap2: entered allmulticast mode [ 439.621873][T13287] veth1_vlan: entered allmulticast mode [ 439.631698][T13287] macvtap3: entered promiscuous mode [ 439.634036][T13287] macvtap3: entered allmulticast mode [ 439.747139][ T6013] usb usb44-port1: attempt power cycle [ 440.928530][ T6013] usb usb44-port1: unable to enumerate USB device [ 440.953568][ T40] audit: type=1326 audit(1766924121.841:68469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13302 comm="syz.6.1844" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 440.964165][ T40] audit: type=1326 audit(1766924121.841:68470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13302 comm="syz.6.1844" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 440.983899][ T40] audit: type=1326 audit(1766924121.841:68471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13302 comm="syz.6.1844" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 440.998406][ T40] audit: type=1326 audit(1766924121.871:68472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13302 comm="syz.6.1844" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 441.015073][ T40] audit: type=1326 audit(1766924121.871:68473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13302 comm="syz.6.1844" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 441.034905][ T40] audit: type=1326 audit(1766924121.871:68474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13302 comm="syz.6.1844" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 441.048442][ T40] audit: type=1326 audit(1766924121.871:68475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13302 comm="syz.6.1844" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 441.063503][ T40] audit: type=1326 audit(1766924121.871:68476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13302 comm="syz.6.1844" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 441.079616][ T40] audit: type=1326 audit(1766924121.871:68477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13302 comm="syz.6.1844" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 441.103566][ T40] audit: type=1326 audit(1766924121.881:68478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13302 comm="syz.6.1844" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 441.913808][T12793] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 441.918970][T12793] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 441.923473][T12793] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 441.927895][T12793] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 441.930842][T12793] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 441.958966][ T1248] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.123701][T13336] bridge0: port 1(erspan0) entered blocking state [ 442.126432][T13336] bridge0: port 1(erspan0) entered disabled state [ 442.128975][T13336] erspan0: entered allmulticast mode [ 442.135813][T13336] erspan0: entered promiscuous mode [ 442.168803][ T1248] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.283699][ T1248] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.417612][ T1248] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.436047][T13331] chnl_net:caif_netlink_parms(): no params data found [ 442.816903][T13346] macvtap2: entered promiscuous mode [ 442.819186][T13346] macvtap2: entered allmulticast mode [ 442.821083][T13346] veth1_vlan: entered allmulticast mode [ 443.034647][ T1248] batman_adv: batadv0: Removing interface: gretap1 [ 443.165286][ T1248] bond0 (unregistering): left promiscuous mode [ 443.169954][ T1248] bond0 (unregistering): Released all slaves [ 443.277862][ T1248] bond1 (unregistering): Released all slaves [ 443.333220][T13331] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.335798][T13331] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.346332][T13331] bridge_slave_0: entered allmulticast mode [ 443.349292][T13331] bridge_slave_0: entered promiscuous mode [ 443.357295][T13331] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.362519][T13331] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.364968][T13331] bridge_slave_1: entered allmulticast mode [ 443.367846][T13331] bridge_slave_1: entered promiscuous mode [ 443.388641][T13331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 443.393172][T13331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 443.414582][ T1248] tipc: Left network mode [ 443.421952][T13331] team0: Port device team_slave_0 added [ 443.425679][T13331] team0: Port device team_slave_1 added [ 443.448039][ T1248] IPVS: stopping backup sync thread 11346 ... [ 443.454624][T13331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 443.466219][T13331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 443.474420][T13331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 443.512289][T13331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 443.514604][T13331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 443.536232][T13331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 443.578073][T13331] hsr_slave_0: entered promiscuous mode [ 443.580518][T13331] hsr_slave_1: entered promiscuous mode [ 443.582823][T13331] debugfs: 'hsr0' already exists in 'hsr' [ 443.584883][T13331] Cannot create hsr debugfs directory [ 443.713814][ T1248] batadv0: left promiscuous mode [ 443.720424][ T1248] hsr_slave_0: left promiscuous mode [ 443.722814][ T1248] 0: left promiscuous mode [ 443.782144][ T1248] pimreg3 (unregistering): left allmulticast mode [ 443.997332][ T5953] Bluetooth: hci1: command tx timeout [ 444.040809][ T5953] Bluetooth: hci3: unexpected event 0x01 length: 5 > 1 [ 444.286684][T13360] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1858'. [ 444.718505][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.034076][T13331] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 445.048567][T13331] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 445.054281][T13331] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 445.065926][T13331] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 445.139357][T13331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 445.153394][T13331] 8021q: adding VLAN 0 to HW filter on device team0 [ 445.161677][ T8728] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.164106][ T8728] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.172181][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.174568][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.303998][T13331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 445.452735][T13331] veth0_vlan: entered promiscuous mode [ 445.461013][T13331] veth1_vlan: entered promiscuous mode [ 445.478922][T13331] veth0_macvtap: entered promiscuous mode [ 445.483567][T13331] veth1_macvtap: entered promiscuous mode [ 445.503081][T13331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 445.515441][T13331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 445.565792][ T46] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.576287][ T46] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.580494][ T46] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.583418][ T46] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.647565][ T1248] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.650256][ T1248] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.669687][ T1248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.672426][ T1248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.880384][T13408] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(9) [ 445.882656][T13408] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 445.885400][T13408] vhci_hcd vhci_hcd.0: Device attached [ 445.907302][T13408] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 446.088552][ T5953] Bluetooth: hci1: command tx timeout [ 446.166373][ T6013] usb 51-1: new low-speed USB device number 2 using vhci_hcd [ 446.636853][T13409] vhci_hcd: connection reset by peer [ 446.641892][ T46] vhci_hcd vhci_hcd.7: stop threads [ 446.646423][ T46] vhci_hcd vhci_hcd.7: release socket [ 446.650826][ T46] vhci_hcd vhci_hcd.7: disconnect device [ 446.655969][T13415] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1870'. [ 447.153157][T13420] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 447.293124][T13424] overlayfs: missing 'lowerdir' [ 447.558569][ T5953] Bluetooth: hci1: unexpected event 0x01 length: 5 > 1 [ 448.094323][T13438] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 448.104150][T13438] netlink: 'syz.1.1876': attribute type 10 has an invalid length. [ 448.107675][T13438] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1876'. [ 448.111635][T13438] team0: entered promiscuous mode [ 448.113853][T13438] batadv1: entered promiscuous mode [ 448.116835][T13438] batadv2: entered promiscuous mode [ 448.119223][T13438] batadv3: entered promiscuous mode [ 448.123566][T13438] 8021q: adding VLAN 0 to HW filter on device team0 [ 448.160200][ T5953] Bluetooth: hci1: command tx timeout [ 449.080734][T13452] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 449.084077][T13452] team0: Port device batadv1 added [ 449.321667][T13464] tunl0: entered promiscuous mode [ 449.323526][T13464] netlink: 'syz.3.1880': attribute type 4 has an invalid length. [ 449.326045][T13464] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1880'. [ 450.564107][ T5953] Bluetooth: hci1: command tx timeout [ 451.420385][T13491] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 451.423309][T13491] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 451.426342][ T6013] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 451.465900][T13491] vhci_hcd vhci_hcd.0: Device attached [ 451.471583][T13495] tipc: Enabled bearer , priority 0 [ 451.475486][T13495] syzkaller0: entered promiscuous mode [ 451.478073][T13495] syzkaller0: entered allmulticast mode [ 451.629391][T13495] sch_tbf: peakrate 9 is lower than or equals to rate 13616744654109174001 ! [ 451.634608][T13495] tipc: Resetting bearer [ 451.669338][T13492] vhci_hcd: connection closed [ 451.669541][ T1191] vhci_hcd vhci_hcd.1: stop threads [ 451.673260][ T1191] vhci_hcd vhci_hcd.1: release socket [ 451.675141][ T1191] vhci_hcd vhci_hcd.1: disconnect device [ 451.687054][T13494] tipc: Resetting bearer [ 451.696928][T13494] tipc: Disabling bearer [ 451.726332][ T34] usb 40-1: enqueue for inactive port 0 [ 452.230252][ T34] usb usb40-port1: attempt power cycle [ 452.467576][T13527] syzkaller1: entered promiscuous mode [ 452.470021][T13527] syzkaller1: entered allmulticast mode [ 452.777825][T13531] block nbd0: server does not support multiple connections per device. [ 452.782477][T13531] block nbd0: shutting down sockets [ 452.858090][ T34] usb usb40-port1: unable to enumerate USB device [ 452.916315][ T5953] Bluetooth: hci2: unexpected event 0x01 length: 5 > 1 [ 454.076241][ T6012] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 454.120019][T13556] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 454.197947][T13557] 9pnet_virtio: no channels available for device syz [ 454.256318][ T6012] usb 12-1: Using ep0 maxpacket: 32 [ 454.260270][ T6012] usb 12-1: config 0 has an invalid interface number: 12 but max is 0 [ 454.263816][ T6012] usb 12-1: config 0 has no interface number 0 [ 454.267218][ T6012] usb 12-1: config 0 interface 12 has no altsetting 0 [ 454.271938][ T6012] usb 12-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 454.275560][ T6012] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.279923][ T6012] usb 12-1: Product: syz [ 454.281454][ T6012] usb 12-1: Manufacturer: syz [ 454.283159][ T6012] usb 12-1: SerialNumber: syz [ 454.289609][ T6012] usb 12-1: config 0 descriptor?? [ 454.715813][ T6012] f81534 12-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 454.721832][ T6012] f81534 12-1:0.12: f81534_find_config_idx: read failed: -71 [ 454.727081][ T6012] f81534 12-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 454.731470][ T6012] f81534 12-1:0.12: probe with driver f81534 failed with error -71 [ 454.740093][ T6012] usb 12-1: USB disconnect, device number 2 [ 455.489647][T13565] 9pnet_virtio: no channels available for device syz [ 456.281829][T13567] syzkaller0: entered promiscuous mode [ 456.283870][T13567] syzkaller0: entered allmulticast mode [ 457.137154][T13580] netlink: 'syz.6.1914': attribute type 10 has an invalid length. [ 458.593370][T13587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 458.599066][T13587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 458.771769][T13591] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.827340][T13596] ubi: mtd0 is already attached to ubi31 [ 458.856550][ T34] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 458.869159][T13591] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.295296][T13601] cgroup: Name too long [ 459.853463][T13591] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.919684][ T34] usb 12-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 459.923715][ T34] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.960965][ T34] usb 12-1: Product: syz [ 459.962653][ T34] usb 12-1: Manufacturer: syz [ 459.964526][ T34] usb 12-1: SerialNumber: syz [ 459.970900][ T34] usb 12-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 460.000382][ T6013] usb 12-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 460.068205][T13591] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.213189][ T5953] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 460.412263][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.430038][ T46] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.436833][ T46] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.454369][ T46] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.796640][ T5985] usb 12-1: USB disconnect, device number 3 [ 461.140561][ T6013] ath9k_htc 12-1:1.0: ath9k_htc: Target is unresponsive [ 461.184924][T13631] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 461.187932][T13631] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 461.193757][T13631] vhci_hcd vhci_hcd.0: Device attached [ 461.198681][T13630] syzkaller0: entered promiscuous mode [ 461.202616][T13630] syzkaller0: entered allmulticast mode [ 461.324409][T13632] vhci_hcd: connection closed [ 461.324633][ T6190] vhci_hcd vhci_hcd.3: stop threads [ 461.328975][ T6190] vhci_hcd vhci_hcd.3: release socket [ 461.330824][ T6190] vhci_hcd vhci_hcd.3: disconnect device [ 461.718962][ T6013] ath9k_htc: Failed to initialize the device [ 461.732830][ T5985] usb 12-1: ath9k_htc: USB layer deinitialized [ 461.974575][T13644] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 461.976844][T13644] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 461.981490][T13644] vhci_hcd vhci_hcd.0: Device attached [ 462.246280][ T6012] usb 44-1: SetAddress Request (46) to port 0 [ 462.251035][ T6012] usb 44-1: new SuperSpeed USB device number 46 using vhci_hcd [ 462.582472][T13639] syzkaller1: entered promiscuous mode [ 462.584508][T13639] syzkaller1: entered allmulticast mode [ 462.617395][T13648] syz.3.1930 (13648): drop_caches: 1 [ 462.662058][T13648] syz.3.1930 (13648): drop_caches: 1 [ 462.741683][T13656] overlayfs: failed to resolve './file0': -2 [ 462.788667][T13653] erspan0: left allmulticast mode [ 462.790671][T13653] erspan0: left promiscuous mode [ 462.793434][T13653] bridge0: port 1(erspan0) entered disabled state [ 462.797556][T13645] vhci_hcd: connection reset by peer [ 462.800901][ T12] vhci_hcd vhci_hcd.3: stop threads [ 462.803776][ T12] vhci_hcd vhci_hcd.3: release socket [ 462.805920][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 462.833734][T13660] input: syz0 as /devices/virtual/input/input78 [ 462.836991][T13660] input: failed to attach handler leds to device input78, error: -6 [ 462.859095][T13662] netlink: 'syz.6.1932': attribute type 10 has an invalid length. [ 463.055769][T13653] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 463.532280][T13672] tipc: Enabled bearer , priority 0 [ 463.815587][T13678] syzkaller0: entered promiscuous mode [ 463.818781][T13678] syzkaller0: entered allmulticast mode [ 463.878980][T13680] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 463.881173][T13680] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 463.884157][T13680] vhci_hcd vhci_hcd.0: Device attached [ 464.035427][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 464.035440][ T40] audit: type=1326 audit(1766924144.921:68493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13671 comm="syz.1.1935" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 464.050177][ T40] audit: type=1326 audit(1766924144.921:68494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13671 comm="syz.1.1935" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 464.074522][ T40] audit: type=1326 audit(1766924144.921:68495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13671 comm="syz.1.1935" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f95598 code=0x7ffc0000 [ 464.218991][ T40] audit: type=1326 audit(1766924144.921:68496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13671 comm="syz.1.1935" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 464.231007][ T40] audit: type=1326 audit(1766924144.921:68497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13671 comm="syz.1.1935" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 464.243221][ T40] audit: type=1326 audit(1766924144.921:68498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13671 comm="syz.1.1935" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f95598 code=0x7ffc0000 [ 464.253801][ T40] audit: type=1326 audit(1766924144.921:68499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13671 comm="syz.1.1935" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 464.262731][ T40] audit: type=1326 audit(1766924144.931:68500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13671 comm="syz.1.1935" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 464.262779][ T40] audit: type=1326 audit(1766924144.931:68501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13671 comm="syz.1.1935" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f95598 code=0x7ffc0000 [ 464.262826][ T40] audit: type=1326 audit(1766924144.931:68502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13671 comm="syz.1.1935" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f95598 code=0x7ffc0000 [ 464.295133][T13681] vhci_hcd: connection closed [ 464.295493][ T1140] vhci_hcd vhci_hcd.3: stop threads [ 464.299589][ T1140] vhci_hcd vhci_hcd.3: release socket [ 464.301557][ T1140] vhci_hcd vhci_hcd.3: disconnect device [ 465.215393][T13672] syzkaller0: entered promiscuous mode [ 465.217661][T13672] syzkaller0: entered allmulticast mode [ 465.220647][ T5985] tipc: Node number set to 201691289 [ 465.317658][T13672] tipc: Resetting bearer [ 465.390527][T13671] tipc: Resetting bearer [ 465.403425][T13671] tipc: Disabling bearer [ 466.628757][T13724] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 466.631274][T13724] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 466.664836][T13724] vhci_hcd vhci_hcd.0: Device attached [ 466.761483][T13730] netlink: 'syz.1.1951': attribute type 2 has an invalid length. [ 466.898917][T13727] vhci_hcd: connection closed [ 466.899166][ T75] vhci_hcd vhci_hcd.6: stop threads [ 466.903908][ T75] vhci_hcd vhci_hcd.6: release socket [ 466.906054][ T75] vhci_hcd vhci_hcd.6: disconnect device [ 467.401863][ T6012] usb 44-1: device descriptor read/8, error -110 [ 467.459676][T13740] FAULT_INJECTION: forcing a failure. [ 467.459676][T13740] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 467.463958][T13740] CPU: 2 UID: 0 PID: 13740 Comm: syz.1.1955 Not tainted syzkaller #0 PREEMPT(full) [ 467.463973][T13740] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 467.463980][T13740] Call Trace: [ 467.463984][T13740] [ 467.463989][T13740] dump_stack_lvl+0x16c/0x1f0 [ 467.464028][T13740] should_fail_ex+0x512/0x640 [ 467.464049][T13740] should_fail_alloc_page+0xe7/0x130 [ 467.464068][T13740] prepare_alloc_pages+0x401/0x670 [ 467.464087][T13740] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 467.464101][T13740] ? __alloc_frozen_pages_noprof+0x292/0x2430 [ 467.464117][T13740] ? do_raw_spin_lock+0x12c/0x2b0 [ 467.464134][T13740] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 467.464147][T13740] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 467.464167][T13740] ? kvm_mmu_notifier_invalidate_range_start+0x75b/0xad0 [ 467.464186][T13740] ? look_up_lock_class+0x59/0x130 [ 467.464212][T13740] ? __lock_acquire+0x436/0x2890 [ 467.464221][T13740] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 467.464240][T13740] ? policy_nodemask+0xea/0x4e0 [ 467.464257][T13740] alloc_pages_mpol+0x1fb/0x550 [ 467.464275][T13740] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 467.464291][T13740] ? do_raw_spin_lock+0x12c/0x2b0 [ 467.464303][T13740] ? find_held_lock+0x2b/0x80 [ 467.464320][T13740] alloc_pages_noprof+0x131/0x390 [ 467.464337][T13740] __pmd_alloc+0x3b/0x9c0 [ 467.464353][T13740] ? __pud_alloc+0x57a/0x760 [ 467.464370][T13740] copy_page_range+0x4620/0x6780 [ 467.464387][T13740] ? __lock_acquire+0x436/0x2890 [ 467.464402][T13740] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 467.464421][T13740] ? __pfx_copy_page_range+0x10/0x10 [ 467.464434][T13740] ? mas_store+0xb4b/0x12f0 [ 467.464446][T13740] ? __vma_enter_locked+0x1dc/0x770 [ 467.464458][T13740] ? __pfx_mas_store+0x10/0x10 [ 467.464476][T13740] dup_mmap+0xbea/0x20e0 [ 467.464491][T13740] ? __pfx_dup_mmap+0x10/0x10 [ 467.464517][T13740] copy_process+0x3b9f/0x7430 [ 467.464546][T13740] ? __pfx_copy_process+0x10/0x10 [ 467.464565][T13740] ? _copy_from_user+0x59/0xd0 [ 467.464579][T13740] kernel_clone+0xfc/0x910 [ 467.464595][T13740] ? get_pid_task+0xfc/0x250 [ 467.464605][T13740] ? __pfx_kernel_clone+0x10/0x10 [ 467.464629][T13740] __do_sys_clone3+0x212/0x290 [ 467.464646][T13740] ? __pfx___do_sys_clone3+0x10/0x10 [ 467.464669][T13740] ? __fget_files+0x20e/0x3c0 [ 467.464692][T13740] ? do_user_addr_fault+0x843/0x1370 [ 467.464708][T13740] __do_fast_syscall_32+0xe8/0x680 [ 467.464727][T13740] do_fast_syscall_32+0x32/0x80 [ 467.464737][T13740] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 467.464751][T13740] RIP: 0023:0xf7f95579 [ 467.464760][T13740] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 467.464770][T13740] RSP: 002b:00000000f548642c EFLAGS: 00000286 ORIG_RAX: 00000000000001b3 [ 467.464781][T13740] RAX: ffffffffffffffda RBX: 00000000f5486460 RCX: 0000000000000058 [ 467.464788][T13740] RDX: 0000000000000000 RSI: 0000000001800000 RDI: 0000000000000002 [ 467.464795][T13740] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 467.464801][T13740] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 467.464807][T13740] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 467.464821][T13740] [ 467.830232][ T6012] usb usb44-port1: attempt power cycle [ 468.151434][T13757] syzkaller0: entered promiscuous mode [ 468.153842][T13757] syzkaller0: entered allmulticast mode [ 468.156701][ T5953] Bluetooth: hci1: command tx timeout [ 468.183416][ T5985] kernel read not supported for file /mdstat (pid: 5985 comm: kworker/3:3) [ 468.389304][ T6012] usb usb44-port1: unable to enumerate USB device [ 468.686449][T13774] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 468.731143][T13779] binder: 13776:13779 ioctl 84009422 80000c40 returned -22 [ 468.798438][T13780] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1967'. [ 468.841493][T13774] bond2 (unregistering): Released all slaves [ 468.852913][T13779] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1967'. [ 468.853104][T13773] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 468.858346][T13773] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 468.861058][T13773] vhci_hcd vhci_hcd.0: Device attached [ 468.866709][T13779] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1967'. [ 468.884295][T13781] vhci_hcd: connection closed [ 468.884787][ T1140] vhci_hcd vhci_hcd.3: stop threads [ 468.889497][ T1140] vhci_hcd vhci_hcd.3: release socket [ 468.891463][ T1140] vhci_hcd vhci_hcd.3: disconnect device [ 469.027261][T13783] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 469.029895][T13783] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 469.058211][T13783] vhci_hcd vhci_hcd.0: Device attached [ 469.251812][T13784] vhci_hcd: connection closed [ 469.252125][ T75] vhci_hcd vhci_hcd.7: stop threads [ 469.257182][ T75] vhci_hcd vhci_hcd.7: release socket [ 469.267029][ T75] vhci_hcd vhci_hcd.7: disconnect device [ 469.316293][T11986] usb 52-1: enqueue for inactive port 0 [ 469.694128][T13799] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1971'. [ 469.698252][T13799] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1971'. [ 469.701656][T13799] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1971'. [ 469.830098][T11986] usb usb52-port1: attempt power cycle [ 469.886681][T13803] netlink: 'syz.1.1972': attribute type 10 has an invalid length. [ 469.898399][T13803] team0: left promiscuous mode [ 469.901661][T13803] batadv1: left promiscuous mode [ 469.916723][T13803] batadv2: left promiscuous mode [ 469.919122][T13803] batadv3: left promiscuous mode [ 469.928425][T13803] batman_adv: batadv0: Adding interface: team0 [ 469.936775][T13803] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 469.950265][T13803] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 469.956719][T13805] netlink: 'syz.1.1972': attribute type 10 has an invalid length. [ 469.961431][T13805] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1972'. [ 469.965314][T13805] team0: entered promiscuous mode [ 469.967970][T13805] batadv1: entered promiscuous mode [ 469.970620][T13805] batadv2: entered promiscuous mode [ 469.973069][T13805] batadv3: entered promiscuous mode [ 469.977034][T13807] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1974'. [ 469.978158][T13805] 8021q: adding VLAN 0 to HW filter on device team0 [ 469.983191][T13805] batman_adv: batadv0: Interface activated: team0 [ 469.985798][T13805] batman_adv: batadv0: Interface deactivated: team0 [ 469.989002][T13805] batman_adv: batadv0: Removing interface: team0 [ 469.994202][T13807] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1974'. [ 470.057017][T13807] hsr_slave_1 (unregistering): left promiscuous mode [ 470.431710][T11986] usb usb52-port1: unable to enumerate USB device [ 470.457044][T13818] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 470.459326][T13818] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 470.508287][T13818] vhci_hcd vhci_hcd.0: Device attached [ 470.705038][T13827] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 470.707999][T13827] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 470.715618][T13827] vhci_hcd vhci_hcd.0: Device attached [ 470.806242][ T5985] usb 39-1: new low-speed USB device number 13 using vhci_hcd [ 471.026658][ T53] usb 50-1: SetAddress Request (31) to port 0 [ 471.029049][ T53] usb 50-1: new SuperSpeed USB device number 31 using vhci_hcd [ 471.213207][T13833] syz.6.1978 (13833): drop_caches: 1 [ 471.601765][T13819] vhci_hcd: connection reset by peer [ 471.603808][ T12] vhci_hcd vhci_hcd.1: stop threads [ 471.605680][ T12] vhci_hcd vhci_hcd.1: release socket [ 471.607768][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 471.740320][T13833] syz.6.1978 (13833): drop_caches: 1 [ 471.816012][T13848] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1983'. [ 471.890047][T13828] vhci_hcd: connection reset by peer [ 471.898109][ T40] kauditd_printk_skb: 2575 callbacks suppressed [ 471.898121][ T40] audit: type=1800 audit(1766924152.791:71078): pid=13850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1984" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 [ 471.937272][T13850] input: syz0 as /devices/virtual/input/input80 [ 471.939625][T11730] vhci_hcd vhci_hcd.6: stop threads [ 471.941371][T11730] vhci_hcd vhci_hcd.6: release socket [ 471.943203][T11730] vhci_hcd vhci_hcd.6: disconnect device [ 472.806399][T13861] JFS: charset not found [ 473.523471][T13886] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 473.525722][T13886] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 473.533308][T13886] vhci_hcd vhci_hcd.0: Device attached [ 473.811164][T13889] vhci_hcd: connection closed [ 473.811322][T13895] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 473.811342][ T1140] vhci_hcd vhci_hcd.6: stop threads [ 473.813144][T13895] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 473.815768][ T1140] vhci_hcd vhci_hcd.6: release socket [ 473.819071][T13895] vhci_hcd vhci_hcd.0: Device attached [ 473.845248][ T1140] vhci_hcd vhci_hcd.6: disconnect device [ 474.560844][T13899] vhci_hcd: connection closed [ 474.569958][T11730] vhci_hcd vhci_hcd.1: stop threads [ 474.574488][T11730] vhci_hcd vhci_hcd.1: release socket [ 474.635865][T11730] vhci_hcd vhci_hcd.1: disconnect device [ 475.062219][ T40] audit: type=1326 audit(1766924155.951:71079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13913 comm="syz.3.2001" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70cd579 code=0x0 [ 475.142188][T13915] wireguard0: entered promiscuous mode [ 475.144133][T13915] wireguard0: entered allmulticast mode [ 475.201385][T13903] syz.1.1996 (13903): drop_caches: 1 [ 475.257171][T13903] syz.1.1996 (13903): drop_caches: 1 [ 475.735430][T13929] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 475.737852][T13929] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 475.842793][T13929] vhci_hcd vhci_hcd.0: Device attached [ 475.857937][T13933] vhci_hcd: connection closed [ 475.862146][ T6190] vhci_hcd vhci_hcd.6: stop threads [ 475.866102][ T6190] vhci_hcd vhci_hcd.6: release socket [ 475.868424][ T6190] vhci_hcd vhci_hcd.6: disconnect device [ 475.926315][ T5985] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 476.076488][ T53] usb 50-1: device descriptor read/8, error -110 [ 476.190799][T13940] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 476.193836][T13940] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 476.200558][T13940] vhci_hcd vhci_hcd.0: Device attached [ 476.437434][ T6034] usb 43-1: new low-speed USB device number 18 using vhci_hcd [ 476.466955][ T53] usb usb50-port1: attempt power cycle [ 476.546319][ T9] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 476.691608][T13955] overlay: ./file0 is not a directory [ 476.853217][T13941] vhci_hcd: connection reset by peer [ 476.857715][ T1141] vhci_hcd vhci_hcd.3: stop threads [ 476.859667][ T1141] vhci_hcd vhci_hcd.3: release socket [ 476.861960][ T1141] vhci_hcd vhci_hcd.3: disconnect device [ 476.949340][ T40] audit: type=1326 audit(1766924157.841:71080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13952 comm="syz.1.2010" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 476.958260][ T40] audit: type=1326 audit(1766924157.841:71081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13952 comm="syz.1.2010" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 476.965902][ T40] audit: type=1326 audit(1766924157.841:71082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13952 comm="syz.1.2010" exe="/syz-executor" sig=0 arch=40000003 syscall=27 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 476.973521][ T40] audit: type=1326 audit(1766924157.851:71083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13952 comm="syz.1.2010" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 476.980943][ T40] audit: type=1326 audit(1766924157.851:71084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13952 comm="syz.1.2010" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 476.988755][ T40] audit: type=1326 audit(1766924157.851:71085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13952 comm="syz.1.2010" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 476.996350][ T40] audit: type=1326 audit(1766924157.851:71086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13952 comm="syz.1.2010" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 477.003401][ T40] audit: type=1326 audit(1766924157.851:71087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13952 comm="syz.1.2010" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 477.010562][ T40] audit: type=1326 audit(1766924157.851:71088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13952 comm="syz.1.2010" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 477.036282][T13961] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 477.181790][T13961] bond3 (unregistering): Released all slaves [ 477.211365][T13964] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 477.213777][T13964] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 477.216632][T13964] vhci_hcd vhci_hcd.0: Device attached [ 477.262859][ T40] audit: type=1326 audit(1766924158.151:71089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13952 comm="syz.1.2010" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 477.454333][T11986] usb usb40-port1: attempt power cycle [ 477.479463][T13965] vhci_hcd: connection closed [ 477.480005][ T6190] vhci_hcd vhci_hcd.6: stop threads [ 477.483829][ T6190] vhci_hcd vhci_hcd.6: release socket [ 477.485978][ T6190] vhci_hcd vhci_hcd.6: disconnect device [ 477.490900][ T9] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 477.992585][T13981] FAULT_INJECTION: forcing a failure. [ 477.992585][T13981] name failslab, interval 1, probability 0, space 0, times 0 [ 477.998912][T13981] CPU: 3 UID: 0 PID: 13981 Comm: syz.3.2017 Not tainted syzkaller #0 PREEMPT(full) [ 477.998939][T13981] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 477.998949][T13981] Call Trace: [ 477.998957][T13981] [ 477.998964][T13981] dump_stack_lvl+0x16c/0x1f0 [ 477.998995][T13981] should_fail_ex+0x512/0x640 [ 477.999015][T13981] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 477.999039][T13981] should_failslab+0xc2/0x120 [ 477.999066][T13981] kmem_cache_alloc_node_noprof+0x86/0x800 [ 477.999086][T13981] ? __alloc_skb+0x156/0x410 [ 477.999111][T13981] ? __alloc_skb+0x156/0x410 [ 477.999129][T13981] __alloc_skb+0x156/0x410 [ 477.999146][T13981] ? __alloc_skb+0x35d/0x410 [ 477.999163][T13981] ? __pfx___alloc_skb+0x10/0x10 [ 477.999182][T13981] ? netlink_autobind.isra.0+0x158/0x370 [ 477.999214][T13981] netlink_alloc_large_skb+0x69/0x140 [ 477.999240][T13981] netlink_sendmsg+0x698/0xdd0 [ 477.999269][T13981] ? __pfx_netlink_sendmsg+0x10/0x10 [ 477.999296][T13981] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 477.999327][T13981] ____sys_sendmsg+0xa5d/0xc30 [ 477.999354][T13981] ? __pfx_____sys_sendmsg+0x10/0x10 [ 477.999379][T13981] ? get_compat_msghdr+0x11a/0x170 [ 477.999411][T13981] ___sys_sendmsg+0x134/0x1d0 [ 477.999441][T13981] ? __pfx____sys_sendmsg+0x10/0x10 [ 477.999473][T13981] ? find_held_lock+0x2b/0x80 [ 477.999511][T13981] __sys_sendmsg+0x16d/0x220 [ 477.999533][T13981] ? __pfx___sys_sendmsg+0x10/0x10 [ 477.999665][T13981] ? do_user_addr_fault+0x843/0x1370 [ 477.999692][T13981] __do_fast_syscall_32+0xe8/0x680 [ 477.999725][T13981] do_fast_syscall_32+0x32/0x80 [ 477.999755][T13981] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 477.999783][T13981] RIP: 0023:0xf70cd579 [ 477.999799][T13981] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 477.999818][T13981] RSP: 002b:00000000f54bd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 477.999838][T13981] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000700 [ 477.999850][T13981] RDX: 0000000024040084 RSI: 0000000000000000 RDI: 0000000000000000 [ 477.999861][T13981] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 477.999872][T13981] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 477.999883][T13981] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 477.999907][T13981] [ 478.106331][T11986] usb usb40-port1: unable to enumerate USB device [ 478.616305][ T5953] Bluetooth: hci3: unexpected event 0x01 length: 5 > 1 [ 478.697196][ T53] usb usb50-port1: unable to enumerate USB device [ 478.831935][T14010] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(15) [ 478.834857][T14010] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 478.838355][T14010] vhci_hcd vhci_hcd.0: Device attached [ 479.076279][ T53] usb 49-1: new low-speed USB device number 10 using vhci_hcd [ 479.213318][T14013] vhci_hcd: connection reset by peer [ 479.219553][ T6190] vhci_hcd vhci_hcd.6: stop threads [ 479.221648][ T6190] vhci_hcd vhci_hcd.6: release socket [ 479.234253][ T6190] vhci_hcd vhci_hcd.6: disconnect device [ 479.413659][T14022] netlink: 'syz.1.2027': attribute type 2 has an invalid length. [ 480.257192][T14037] __nla_validate_parse: 2 callbacks suppressed [ 480.257209][T14037] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2031'. [ 480.264051][T14037] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2031'. [ 480.268003][T14037] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2031'. [ 480.271912][T14037] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2031'. [ 480.275848][T14037] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2031'. [ 480.383683][T14039] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2032'. [ 480.387284][T14039] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2032'. [ 481.470846][T14057] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2038'. [ 481.606386][ T6034] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 481.809907][T14066] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 481.812761][T14066] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 481.816497][T14066] vhci_hcd vhci_hcd.0: Device attached [ 482.219083][T14067] vhci_hcd: connection closed [ 482.219510][ T1141] vhci_hcd vhci_hcd.6: stop threads [ 482.219534][ T1141] vhci_hcd vhci_hcd.6: release socket [ 482.223003][ T1141] vhci_hcd vhci_hcd.6: disconnect device [ 482.983119][T14078] syz_tun: entered allmulticast mode [ 482.991812][T14078] dvmrp8: entered allmulticast mode [ 483.007962][T14077] syz_tun: left allmulticast mode [ 483.080846][T14082] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2045'. [ 483.586980][T14099] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 483.589201][T14099] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 483.592489][T14099] vhci_hcd vhci_hcd.0: Device attached [ 483.642972][ C3] vxcan0: j1939_tp_rxtimer: 0xffff888027f8f800: rx timeout, send abort [ 483.856302][ T6030] usb 40-1: SetAddress Request (67) to port 0 [ 483.859062][ T6030] usb 40-1: new SuperSpeed USB device number 67 using vhci_hcd [ 484.143053][ C3] vxcan0: j1939_tp_rxtimer: 0xffff888027f8c400: rx timeout, send abort [ 484.147155][ C3] vxcan0: j1939_tp_rxtimer: 0xffff888027f8f800: abort rx timeout. Force session deactivation [ 484.226642][ T53] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 484.257090][T14114] netlink: 204 bytes leftover after parsing attributes in process `syz.6.2056'. [ 484.420231][T14100] vhci_hcd: connection reset by peer [ 484.422833][ T75] vhci_hcd vhci_hcd.1: stop threads [ 484.425114][ T75] vhci_hcd vhci_hcd.1: release socket [ 484.427760][ T75] vhci_hcd vhci_hcd.1: disconnect device [ 484.532930][T14118] ubi: mtd0 is already attached to ubi31 [ 484.646688][ C3] vxcan0: j1939_tp_rxtimer: 0xffff888027f8c400: abort rx timeout. Force session deactivation [ 485.536943][ T9] usb usb50-port1: attempt power cycle [ 486.116868][ T9] usb usb50-port1: unable to enumerate USB device [ 486.823839][T14148] netlink: 360 bytes leftover after parsing attributes in process `syz.6.2067'. [ 487.197952][T14158] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 487.200875][T14158] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 487.219942][T14158] vhci_hcd vhci_hcd.0: Device attached [ 487.993505][T14159] vhci_hcd: connection closed [ 487.993956][ T1141] vhci_hcd vhci_hcd.1: stop threads [ 487.998574][ T1141] vhci_hcd vhci_hcd.1: release socket [ 488.000837][ T1141] vhci_hcd vhci_hcd.1: disconnect device [ 488.123160][T14166] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 488.125840][T14166] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 488.142693][T14166] vhci_hcd vhci_hcd.0: Device attached [ 488.199586][T14171] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 488.315356][T14167] vhci_hcd: connection closed [ 488.326522][ T75] vhci_hcd vhci_hcd.7: stop threads [ 488.363960][ T75] vhci_hcd vhci_hcd.7: release socket [ 488.374757][ T75] vhci_hcd vhci_hcd.7: disconnect device [ 488.406853][ T24] usb 52-1: enqueue for inactive port 0 [ 488.467787][T14179] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 4π!FVluc'f`ކ;1 [ 488.896745][ T24] usb usb52-port1: attempt power cycle [ 488.957260][ T6030] usb 40-1: device descriptor read/8, error -110 [ 489.457966][ T24] usb usb52-port1: unable to enumerate USB device [ 489.469805][ T6030] usb usb40-port1: attempt power cycle [ 489.500314][T14185] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 489.502548][T14185] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 489.505975][T14185] vhci_hcd vhci_hcd.0: Device attached [ 489.530413][T14185] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2076'. [ 489.536292][ T53] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 489.672535][T14188] vhci_hcd: connection closed [ 489.673459][ T1141] vhci_hcd vhci_hcd.7: stop threads [ 489.679002][ T1141] vhci_hcd vhci_hcd.7: release socket [ 489.681299][ T1141] vhci_hcd vhci_hcd.7: disconnect device [ 489.781771][T14196] netlink: 372 bytes leftover after parsing attributes in process `syz.1.2078'. [ 489.974797][T14201] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2079'. [ 489.980115][T14201] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2079'. [ 489.983685][T14201] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2079'. [ 490.561317][T14216] [U] [ 490.562455][T14216] [U] [ 490.563381][T14216] [U] [ 490.564307][T14216] [U] [ 490.567492][T14216] [U] [ 490.568453][T14216] [U] [ 490.569405][T14216] [U] [ 490.570369][T14216] [U] [ 490.571707][T14216] [U] [ 490.572647][T14216] [U] [ 490.573592][T14216] [U] [ 490.574535][T14216] [U] [ 490.575490][T14216] [U] [ 490.576424][T14216] [U] [ 490.577367][T14216] [U] [ 490.578281][T14216] [U] r+`bv6= [ 490.579627][T14216] [U] ="~Jbs4$7,nI\\3 [ 490.581636][T14216] [U] W^NhkX:9Kd]lÏ2k9Z' [ 490.593811][T14216] [U] [ 490.594897][T14216] [U] [ 490.595833][T14216] [U] [ 490.596780][T14216] [U] [ 490.600010][T14216] [U] [ 490.601036][T14216] [U] [ 490.601980][T14216] [U] [ 490.602924][T14216] [U] [ 490.603859][T14216] [U] [ 490.604788][T14216] [U] [ 490.605721][T14216] [U] [ 490.606679][T14216] [U] [ 490.608258][T14216] [U] [ 490.609238][T14216] [U] [ 490.610191][T14216] [U] [ 490.611254][T14216] [U] [ 490.612258][T14216] [U] [ 490.613192][T14216] [U] [ 490.614131][T14216] [U] [ 490.615188][T14216] [U] [ 490.616139][T14216] [U] [ 490.617226][T14216] [U] [ 490.618190][T14216] [U] [ 490.619147][T14216] [U] [ 490.620590][T14216] [U] [ 490.621568][T14216] [U] [ 490.622529][T14216] [U] [ 490.623474][T14216] [U] [ 490.624477][T14216] [U] [ 490.625411][T14216] [U] [ 490.626355][T14216] [U] [ 490.627296][T14216] [U] [ 490.628261][T14216] [U] [ 490.629191][T14216] [U] [ 490.630125][T14216] [U] [ 490.631108][T14216] [U] [ 490.632037][T14216] [U] [ 490.632953][T14216] [U] [ 490.633880][T14216] [U] [ 490.634812][T14216] [U] [ 490.635796][T14216] [U] [ 490.636730][T14216] [U] [ 490.637645][T14216] [U] [ 490.638614][T14216] [U] [ 490.639949][T14216] [U] [ 490.640904][T14216] [U] [ 490.641837][T14216] [U] [ 490.642768][T14216] [U] [ 490.643712][T14216] [U] [ 490.644638][T14216] [U] [ 490.645562][T14216] [U] [ 490.646510][T14216] [U] [ 490.647525][T14216] [U] [ 490.648450][T14216] [U] [ 490.649383][T14216] [U] [ 490.650341][T14216] [U] [ 490.652037][T14216] [U] [ 490.652958][T14216] [U] [ 490.653878][T14216] [U] [ 490.654848][T14216] [U] [ 490.655926][T14216] [U] [ 490.656932][T14216] [U] [ 490.657873][T14216] [U] [ 490.658808][T14216] [U] [ 490.660994][T14216] [U] [ 490.662034][T14216] [U] [ 490.663010][T14216] [U] [ 490.663939][T14216] [U] [ 490.664899][T14216] [U] [ 490.665835][T14216] [U] [ 490.666795][T14216] [U] [ 490.667718][T14216] [U] [ 490.668689][T14216] [U] [ 490.669619][T14216] [U] [ 490.670625][T14216] [U] [ 490.671570][T14216] [U] [ 490.672621][T14216] [U] [ 490.673547][T14216] [U] [ 490.674488][T14216] [U] [ 490.675416][T14216] [U] [ 490.676351][T14216] [U] [ 490.677305][T14216] [U] [ 490.678239][T14216] [U] [ 490.679191][T14216] [U] [ 490.680159][T14216] [U] [ 490.681113][T14216] [U] [ 490.682033][T14216] [U] [ 490.682959][T14216] [U] [ 490.683963][T14216] [U] [ 490.684892][T14216] [U] [ 490.685842][T14216] [U] [ 490.686795][T14216] [U] [ 490.687758][T14216] [U] [ 490.688685][T14216] [U] [ 490.689614][T14216] [U] [ 490.690615][T14216] [U] [ 490.691543][T14216] [U] [ 490.692465][T14216] [U] [ 490.693396][T14216] [U] [ 490.694354][T14216] [U] [ 490.695285][T14216] [U] [ 490.696298][T14216] [U] [ 490.697244][T14216] [U] [ 490.698177][T14216] [U] [ 490.699127][T14216] [U] [ 490.700061][T14216] [U] [ 490.701018][T14216] [U] [ 490.701947][T14216] [U] [ 490.702890][T14216] [U] [ 490.703839][T14216] [U] [ 490.704773][T14216] [U] [ 490.705708][T14216] [U] [ 490.730514][T14215] [U] [ 490.887437][ T6030] usb usb40-port1: unable to enumerate USB device [ 490.978592][T14225] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2086'. [ 491.098207][T14228] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 491.100952][T14228] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 491.107458][T14228] vhci_hcd vhci_hcd.0: Device attached [ 491.387524][ T24] usb 40-1: SetAddress Request (71) to port 0 [ 491.389688][ T24] usb 40-1: new SuperSpeed USB device number 71 using vhci_hcd [ 491.496717][T14229] vhci_hcd: connection reset by peer [ 491.501719][ T163] vhci_hcd vhci_hcd.1: stop threads [ 491.503541][ T163] vhci_hcd vhci_hcd.1: release socket [ 491.505390][ T163] vhci_hcd vhci_hcd.1: disconnect device [ 491.600215][T14248] No source specified [ 491.606164][ T5953] Bluetooth: hci2: unexpected event for opcode 0x202f [ 491.610056][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 491.610071][ T40] audit: type=1326 audit(1766924428.501:71091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14246 comm="syz.6.2093" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 491.625747][ T40] audit: type=1326 audit(1766924428.501:71092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14246 comm="syz.6.2093" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 491.639751][ T40] audit: type=1326 audit(1766924428.511:71093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14246 comm="syz.6.2093" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 491.648826][ T40] audit: type=1326 audit(1766924428.511:71094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14246 comm="syz.6.2093" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 491.656951][ T40] audit: type=1326 audit(1766924428.511:71095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14246 comm="syz.6.2093" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 491.666427][ T40] audit: type=1326 audit(1766924428.521:71096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14246 comm="syz.6.2093" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 491.676047][ T40] audit: type=1326 audit(1766924428.531:71097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14246 comm="syz.6.2093" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 492.700247][T14270] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 492.702435][T14270] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 492.705274][T14270] vhci_hcd vhci_hcd.0: Device attached [ 492.712707][T14271] vhci_hcd: connection closed [ 492.712971][ T1141] vhci_hcd vhci_hcd.6: stop threads [ 492.716432][ T1141] vhci_hcd vhci_hcd.6: release socket [ 492.718204][ T1141] vhci_hcd vhci_hcd.6: disconnect device [ 493.119888][T14278] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2101'. [ 493.135152][T14278] 8021q: adding VLAN 0 to HW filter on device bond2 [ 493.144718][T14278] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2101'. [ 493.149034][T14278] bond2: entered promiscuous mode [ 493.152269][T14278] bond2: entered allmulticast mode [ 493.162625][T14278] dummy0: entered promiscuous mode [ 493.165148][T14278] dummy0: entered allmulticast mode [ 493.168108][T14278] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 493.313844][T14291] tunl0: entered promiscuous mode [ 493.316901][T14291] netlink: 'syz.7.2106': attribute type 4 has an invalid length. [ 493.320771][T14291] netlink: 9 bytes leftover after parsing attributes in process `syz.7.2106'. [ 493.367371][T14293] syzkaller1: entered promiscuous mode [ 493.379599][T14293] syzkaller1: entered allmulticast mode [ 493.384082][T14293] FAULT_INJECTION: forcing a failure. [ 493.384082][T14293] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 493.386828][T14297] FAULT_INJECTION: forcing a failure. [ 493.386828][T14297] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 493.393235][T14293] CPU: 1 UID: 0 PID: 14293 Comm: syz.3.2107 Not tainted syzkaller #0 PREEMPT(full) [ 493.393261][T14293] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 493.393273][T14293] Call Trace: [ 493.393279][T14293] [ 493.393285][T14293] dump_stack_lvl+0x16c/0x1f0 [ 493.393317][T14293] should_fail_ex+0x512/0x640 [ 493.393339][T14293] _copy_from_iter+0x2a4/0x16c0 [ 493.393361][T14293] ? _copy_from_iter+0x161/0x16c0 [ 493.393382][T14293] ? __pfx__copy_from_iter+0x10/0x10 [ 493.393404][T14293] ? __pfx__copy_from_iter+0x10/0x10 [ 493.393424][T14293] ? _copy_from_iter+0x161/0x16c0 [ 493.393445][T14293] copy_page_from_iter+0xde/0x180 [ 493.393466][T14293] skb_copy_datagram_from_iter+0x2a0/0x740 [ 493.393493][T14293] tun_get_user+0x1850/0x3cc0 [ 493.393523][T14293] ? __pfx_tun_get_user+0x10/0x10 [ 493.393541][T14293] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 493.393567][T14293] ? find_held_lock+0x2b/0x80 [ 493.393597][T14293] ? tun_get+0x191/0x370 [ 493.393619][T14293] tun_chr_write_iter+0xdc/0x210 [ 493.393640][T14293] vfs_write+0x7d3/0x11d0 [ 493.393667][T14293] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 493.393688][T14293] ? __pfx_vfs_write+0x10/0x10 [ 493.393710][T14293] ? find_held_lock+0x2b/0x80 [ 493.393741][T14293] ksys_write+0x12a/0x250 [ 493.393763][T14293] ? __pfx_ksys_write+0x10/0x10 [ 493.393784][T14293] ? do_user_addr_fault+0x843/0x1370 [ 493.393810][T14293] __do_fast_syscall_32+0xe8/0x680 [ 493.393839][T14293] do_fast_syscall_32+0x32/0x80 [ 493.393855][T14293] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 493.393876][T14293] RIP: 0023:0xf70cd579 [ 493.393891][T14293] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 493.393907][T14293] RSP: 002b:00000000f54bd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 493.393924][T14293] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000240 [ 493.393934][T14293] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000000 [ 493.393944][T14293] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 493.393954][T14293] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 493.393964][T14293] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 493.393986][T14293] [ 493.438907][T14298] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2109'. [ 493.439636][T14297] CPU: 3 UID: 0 PID: 14297 Comm: syz.7.2108 Not tainted syzkaller #0 PREEMPT(full) [ 493.439652][T14297] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 493.439659][T14297] Call Trace: [ 493.439663][T14297] [ 493.439668][T14297] dump_stack_lvl+0x16c/0x1f0 [ 493.439689][T14297] should_fail_ex+0x512/0x640 [ 493.439703][T14297] _copy_from_iter+0x2a4/0x16c0 [ 493.439717][T14297] ? __alloc_skb+0x220/0x410 [ 493.439729][T14297] ? __alloc_skb+0x35d/0x410 [ 493.439740][T14297] ? __pfx__copy_from_iter+0x10/0x10 [ 493.439752][T14297] ? netlink_autobind.isra.0+0x158/0x370 [ 493.439773][T14297] netlink_sendmsg+0x820/0xdd0 [ 493.439791][T14297] ? __pfx_netlink_sendmsg+0x10/0x10 [ 493.439808][T14297] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 493.439829][T14297] ____sys_sendmsg+0xa5d/0xc30 [ 493.439847][T14297] ? __pfx_____sys_sendmsg+0x10/0x10 [ 493.439863][T14297] ? get_compat_msghdr+0x11a/0x170 [ 493.439883][T14297] ___sys_sendmsg+0x134/0x1d0 [ 493.439897][T14297] ? __pfx____sys_sendmsg+0x10/0x10 [ 493.439916][T14297] ? find_held_lock+0x2b/0x80 [ 493.439939][T14297] __sys_sendmsg+0x16d/0x220 [ 493.439953][T14297] ? __pfx___sys_sendmsg+0x10/0x10 [ 493.439974][T14297] __do_fast_syscall_32+0xe8/0x680 [ 493.439993][T14297] do_fast_syscall_32+0x32/0x80 [ 493.440003][T14297] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 493.440017][T14297] RIP: 0023:0xf709d579 [ 493.440026][T14297] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 493.440037][T14297] RSP: 002b:00000000f548d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 493.440047][T14297] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000980 [ 493.440054][T14297] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 493.440060][T14297] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 493.440066][T14297] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 493.440072][T14297] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 493.440085][T14297] [ 493.581313][T14302] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 493.584260][T14302] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 493.603599][T14302] vhci_hcd vhci_hcd.0: Device attached [ 493.800460][T14323] syzkaller0: entered promiscuous mode [ 493.802392][T14323] syzkaller0: entered allmulticast mode [ 493.880155][ T6032] usb 50-1: SetAddress Request (39) to port 0 [ 493.882810][ T6032] usb 50-1: new SuperSpeed USB device number 39 using vhci_hcd [ 494.146674][T14303] vhci_hcd: connection reset by peer [ 494.149195][ T163] vhci_hcd vhci_hcd.6: stop threads [ 494.151233][ T163] vhci_hcd vhci_hcd.6: release socket [ 494.153055][ T163] vhci_hcd vhci_hcd.6: disconnect device [ 494.422547][T14339] syzkaller1: entered promiscuous mode [ 494.424474][T14339] syzkaller1: entered allmulticast mode [ 494.434023][T14340] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 494.436821][T14340] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 494.441534][T14340] vhci_hcd vhci_hcd.0: Device attached [ 494.680765][ T7947] usb 43-1: new low-speed USB device number 19 using vhci_hcd [ 495.055361][T14362] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9) [ 495.057539][T14362] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 495.060442][T14362] vhci_hcd vhci_hcd.0: Device attached [ 495.211511][T14341] vhci_hcd: connection reset by peer [ 495.214125][ T75] vhci_hcd vhci_hcd.3: stop threads [ 495.216216][ T75] vhci_hcd vhci_hcd.3: release socket [ 495.218115][ T75] vhci_hcd vhci_hcd.3: disconnect device [ 495.684187][ T5953] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 495.688305][ T5953] Bluetooth: hci2: Injecting HCI hardware error event [ 495.694405][ T5953] Bluetooth: hci2: hardware error 0x00 [ 495.859521][T14363] vhci_hcd: connection closed [ 495.859729][ T6190] vhci_hcd vhci_hcd.6: stop threads [ 495.863294][ T6190] vhci_hcd vhci_hcd.6: release socket [ 495.865249][ T6190] vhci_hcd vhci_hcd.6: disconnect device [ 495.962157][T14385] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 496.267882][T14397] binder_alloc: binder_alloc_mmap_handler: 14396 80ffd000-80ffe000 already mapped failed -16 [ 496.271896][T14398] binder_alloc: binder_alloc_mmap_handler: 14396 80ffd000-80ffe000 already mapped failed -16 [ 496.482546][ T24] usb 40-1: device descriptor read/8, error -110 [ 496.613692][T14399] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 496.616800][T14399] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 496.621387][T14399] vhci_hcd vhci_hcd.0: Device attached [ 496.781382][T14403] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 496.873748][ T24] usb usb40-port1: attempt power cycle [ 497.312548][T14411] futex_wake_op: syz.6.2142 tries to shift op by -1; fix this program [ 497.319757][ T40] audit: type=1326 audit(1766924434.206:71098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14410 comm="syz.6.2142" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 497.327369][ T40] audit: type=1326 audit(1766924434.206:71099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14410 comm="syz.6.2142" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 497.347624][ T40] audit: type=1326 audit(1766924434.216:71100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14410 comm="syz.6.2142" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 497.363284][ T40] audit: type=1326 audit(1766924434.216:71101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14410 comm="syz.6.2142" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf70ad5a7 code=0x7ffc0000 [ 497.370894][ T40] audit: type=1326 audit(1766924434.216:71102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14410 comm="syz.6.2142" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 497.380284][ T40] audit: type=1326 audit(1766924434.216:71103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14410 comm="syz.6.2142" exe="/syz-executor" sig=0 arch=40000003 syscall=385 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 497.384000][T14412] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 497.389413][ T40] audit: type=1326 audit(1766924434.216:71104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14410 comm="syz.6.2142" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 497.391619][T14412] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 497.400754][ T40] audit: type=1326 audit(1766924434.216:71105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14410 comm="syz.6.2142" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 497.411613][ T40] audit: type=1326 audit(1766924434.236:71106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14410 comm="syz.6.2142" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 497.415519][T14412] vhci_hcd vhci_hcd.0: Device attached [ 497.422236][ T40] audit: type=1326 audit(1766924434.236:71107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14410 comm="syz.6.2142" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf70ad5a7 code=0x7ffc0000 [ 497.432208][T14400] vhci_hcd: connection closed [ 497.432397][T11730] vhci_hcd vhci_hcd.3: stop threads [ 497.437155][T11730] vhci_hcd vhci_hcd.3: release socket [ 497.439482][T11730] vhci_hcd vhci_hcd.3: disconnect device [ 497.464302][ T24] usb usb40-port1: unable to enumerate USB device [ 497.683674][ T24] usb 52-1: SetAddress Request (11) to port 0 [ 497.687426][ T24] usb 52-1: new SuperSpeed USB device number 11 using vhci_hcd [ 497.764942][ T5953] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 498.041058][T14413] vhci_hcd: connection reset by peer [ 498.043121][T11730] vhci_hcd vhci_hcd.7: stop threads [ 498.044989][T11730] vhci_hcd vhci_hcd.7: release socket [ 498.046944][T11730] vhci_hcd vhci_hcd.7: disconnect device [ 498.287446][T14421] FAULT_INJECTION: forcing a failure. [ 498.287446][T14421] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 498.291697][T14421] CPU: 0 UID: 0 PID: 14421 Comm: syz.6.2144 Not tainted syzkaller #0 PREEMPT(full) [ 498.291712][T14421] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 498.291719][T14421] Call Trace: [ 498.291724][T14421] [ 498.291730][T14421] dump_stack_lvl+0x16c/0x1f0 [ 498.291751][T14421] should_fail_ex+0x512/0x640 [ 498.291766][T14421] strncpy_from_user+0x3b/0x2e0 [ 498.291778][T14421] getname_flags.part.0+0x8f/0x550 [ 498.291793][T14421] getname_flags+0x93/0xf0 [ 498.291807][T14421] do_sys_openat2+0xb9/0x290 [ 498.291820][T14421] ? __pfx_do_sys_openat2+0x10/0x10 [ 498.291833][T14421] ? __pfx___seccomp_filter+0x10/0x10 [ 498.291849][T14421] __ia32_compat_sys_openat+0x16d/0x210 [ 498.291863][T14421] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 498.291876][T14421] ? ksys_write+0x1ac/0x250 [ 498.291892][T14421] ? __secure_computing+0x21c/0x320 [ 498.291907][T14421] __do_fast_syscall_32+0xe8/0x680 [ 498.291926][T14421] do_fast_syscall_32+0x32/0x80 [ 498.291936][T14421] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 498.291950][T14421] RIP: 0023:0xf70ad579 [ 498.291959][T14421] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 498.291970][T14421] RSP: 002b:00000000f547c55c EFLAGS: 00000296 ORIG_RAX: 0000000000000127 [ 498.291981][T14421] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000000 [ 498.291988][T14421] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 498.291994][T14421] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 498.292000][T14421] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 498.292006][T14421] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 498.292019][T14421] [ 498.355453][T14420] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2143'. [ 498.359458][T14420] team0: left promiscuous mode [ 498.361082][T14420] batadv1: left promiscuous mode [ 498.363484][T14420] batadv2: left promiscuous mode [ 498.365358][T14420] batadv3: left promiscuous mode [ 498.792221][T14434] tunl0: left promiscuous mode [ 498.865437][T14434] veth1_vlan: left allmulticast mode [ 498.868688][T14434] macvtap2: left promiscuous mode [ 498.871032][T14434] macvtap2: left allmulticast mode [ 498.880548][T14434] wireguard0: left promiscuous mode [ 498.883009][T14434] wireguard0: left allmulticast mode [ 498.891293][T14434] bond2: left promiscuous mode [ 498.892902][T14434] dummy0: left promiscuous mode [ 498.894917][T14434] bond2: left allmulticast mode [ 498.896595][T14434] dummy0: left allmulticast mode [ 498.964942][ T6032] usb 50-1: device descriptor read/8, error -110 [ 499.064002][T14437] usb usb7: usbfs: process 14437 (syz.7.2149) did not claim interface 0 before use [ 499.067726][T14437] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 499.228150][T14440] input: syz0 as /devices/virtual/input/input87 [ 499.365880][ T6032] usb usb50-port1: attempt power cycle [ 499.741367][T14454] cgroup: Name too long [ 499.768491][T14452] netlink: 'syz.7.2153': attribute type 1 has an invalid length. [ 499.771271][T14452] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2153'. [ 500.246154][ T7947] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 500.326760][ T6032] usb usb50-port1: unable to enumerate USB device [ 500.862737][T14470] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 501.016823][ T5985] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 501.153585][T14480] netlink: 27 bytes leftover after parsing attributes in process `syz.3.2163'. [ 501.317942][ T5985] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 501.321836][ T5985] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 501.326785][ T5985] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 501.333372][ T5985] usb 12-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 501.337269][ T5985] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.340569][ T5985] usb 12-1: Product: syz [ 501.342353][ T5985] usb 12-1: Manufacturer: syz [ 501.344297][ T5985] usb 12-1: SerialNumber: syz [ 501.608509][ T5985] usb 12-1: config 0 descriptor?? [ 501.815101][ T5985] adutux 12-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 501.826163][ T5985] usb 12-1: USB disconnect, device number 4 [ 502.151417][T14493] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 502.153720][T14493] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 502.157010][T14493] vhci_hcd vhci_hcd.0: Device attached [ 502.458296][ T56] usb 50-1: SetAddress Request (43) to port 0 [ 502.460392][ T56] usb 50-1: new SuperSpeed USB device number 43 using vhci_hcd [ 502.706276][T14503] netlink: 'syz.3.2169': attribute type 1 has an invalid length. [ 502.714281][T14503] netlink: 'syz.3.2169': attribute type 2 has an invalid length. [ 502.741030][ T24] usb 52-1: device descriptor read/8, error -110 [ 502.787095][T14507] netlink: 'syz.7.2168': attribute type 1 has an invalid length. [ 502.790165][T14507] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2168'. [ 502.801713][T14494] vhci_hcd: connection reset by peer [ 502.804220][ T8728] vhci_hcd vhci_hcd.6: stop threads [ 502.806383][ T8728] vhci_hcd vhci_hcd.6: release socket [ 502.808223][ T8728] vhci_hcd vhci_hcd.6: disconnect device [ 502.813846][T14510] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2171'. [ 503.129979][ T24] usb usb52-port1: attempt power cycle [ 503.694139][ T24] usb usb52-port1: unable to enumerate USB device [ 504.337988][T14536] ip6erspan0: entered allmulticast mode [ 504.486540][T14542] netlink: 'syz.6.2180': attribute type 1 has an invalid length. [ 504.500947][T14542] bond2: entered promiscuous mode [ 504.503477][T14542] bond2: entered allmulticast mode [ 504.505860][T14542] 8021q: adding VLAN 0 to HW filter on device bond2 [ 505.503735][T14554] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.508587][T14554] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.547338][T14554] netlink: 'syz.7.2182': attribute type 16 has an invalid length. [ 505.550072][T14554] netlink: 'syz.7.2182': attribute type 17 has an invalid length. [ 505.559990][T14554] tunl0: left promiscuous mode [ 505.591239][T14554] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 505.940175][T14559] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2184'. [ 506.115580][T14561] binder: 14560:14561 ioctl c0306201 80000080 returned -14 [ 506.150062][T14563] loop6: detected capacity change from 0 to 2640 [ 506.152711][T14563] buffer_io_error: 11 callbacks suppressed [ 506.152721][T14563] Buffer I/O error on dev loop6, logical block 0, async page read [ 506.158793][T14563] Buffer I/O error on dev loop6, logical block 0, async page read [ 506.161390][T14563] Buffer I/O error on dev loop6, logical block 0, async page read [ 506.164897][T14563] Buffer I/O error on dev loop6, logical block 0, async page read [ 506.167445][T14563] Buffer I/O error on dev loop6, logical block 0, async page read [ 506.170119][T14563] Buffer I/O error on dev loop6, logical block 0, async page read [ 506.172844][T14563] Buffer I/O error on dev loop6, logical block 0, async page read [ 506.175635][T14563] Buffer I/O error on dev loop6, logical block 0, async page read [ 506.178160][T14563] ldm_validate_partition_table(): Disk read failed. [ 506.178795][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.180449][T14563] Buffer I/O error on dev loop6, logical block 0, async page read [ 506.185777][T14563] Buffer I/O error on dev loop6, logical block 0, async page read [ 506.188322][T14563] Dev loop6: unable to read RDB block 0 [ 506.190236][T14563] loop6: unable to read partition table [ 506.192315][T14563] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 506.232332][T14563] loop6: detected capacity change from 2640 to 524288000 [ 507.200194][T14585] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 507.202559][T14585] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 507.209068][T14585] vhci_hcd vhci_hcd.0: Device attached [ 507.220820][T14586] vhci_hcd: cannot find the pending unlink 4294967287 [ 507.227786][T14585] netlink: 88 bytes leftover after parsing attributes in process `syz.7.2194'. [ 507.231768][T14586] vhci_hcd: connection closed [ 507.232006][T13482] vhci_hcd vhci_hcd.7: stop threads [ 507.240534][T13482] vhci_hcd vhci_hcd.7: release socket [ 507.248777][T13482] vhci_hcd vhci_hcd.7: disconnect device [ 507.543182][ T56] usb 50-1: device descriptor read/8, error -110 [ 507.716320][T14601] netlink: 'syz.1.2198': attribute type 2 has an invalid length. [ 507.954372][ T56] usb usb50-port1: attempt power cycle [ 508.146126][T14607] FAULT_INJECTION: forcing a failure. [ 508.146126][T14607] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 508.162847][T14607] CPU: 2 UID: 0 PID: 14607 Comm: syz.7.2200 Not tainted syzkaller #0 PREEMPT(full) [ 508.162873][T14607] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 508.162883][T14607] Call Trace: [ 508.162889][T14607] [ 508.162898][T14607] dump_stack_lvl+0x16c/0x1f0 [ 508.162926][T14607] should_fail_ex+0x512/0x640 [ 508.162941][T14607] should_fail_alloc_page+0xe7/0x130 [ 508.162960][T14607] prepare_alloc_pages+0x401/0x670 [ 508.162979][T14607] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 508.162996][T14607] ? do_raw_spin_lock+0x12c/0x2b0 [ 508.163014][T14607] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 508.163027][T14607] ? find_held_lock+0x2b/0x80 [ 508.163041][T14607] ? kvm_mmu_notifier_invalidate_range_start+0x75b/0xad0 [ 508.163058][T14607] ? __lock_acquire+0x436/0x2890 [ 508.163069][T14607] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 508.163087][T14607] ? policy_nodemask+0xea/0x4e0 [ 508.163105][T14607] alloc_pages_mpol+0x1fb/0x550 [ 508.163122][T14607] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 508.163139][T14607] ? __mmu_notifier_invalidate_range_start+0x51c/0x910 [ 508.163158][T14607] alloc_pages_noprof+0x131/0x390 [ 508.163175][T14607] __pud_alloc+0x3b/0x760 [ 508.163193][T14607] copy_page_range+0x40e0/0x6780 [ 508.163210][T14607] ? __lock_acquire+0x436/0x2890 [ 508.163225][T14607] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 508.163242][T14607] ? mas_wr_store_entry+0xa14/0x2550 [ 508.163257][T14607] ? __pfx_copy_page_range+0x10/0x10 [ 508.163269][T14607] ? mas_store+0xb4b/0x12f0 [ 508.163280][T14607] ? __vma_enter_locked+0x1dc/0x770 [ 508.163292][T14607] ? __pfx_mas_store+0x10/0x10 [ 508.163310][T14607] dup_mmap+0xbea/0x20e0 [ 508.163325][T14607] ? __pfx_dup_mmap+0x10/0x10 [ 508.163351][T14607] copy_process+0x3b9f/0x7430 [ 508.163374][T14607] ? __pfx_copy_process+0x10/0x10 [ 508.163394][T14607] ? _copy_from_user+0x59/0xd0 [ 508.163408][T14607] kernel_clone+0xfc/0x910 [ 508.163424][T14607] ? get_pid_task+0xfc/0x250 [ 508.163435][T14607] ? __pfx_kernel_clone+0x10/0x10 [ 508.163459][T14607] __do_sys_clone3+0x212/0x290 [ 508.163475][T14607] ? __pfx___do_sys_clone3+0x10/0x10 [ 508.163527][T14607] ? __fget_files+0x20e/0x3c0 [ 508.163570][T14607] ? do_user_addr_fault+0x843/0x1370 [ 508.163593][T14607] __do_fast_syscall_32+0xe8/0x680 [ 508.163617][T14607] do_fast_syscall_32+0x32/0x80 [ 508.163627][T14607] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 508.163641][T14607] RIP: 0023:0xf709d579 [ 508.163650][T14607] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 508.163661][T14607] RSP: 002b:00000000f548d42c EFLAGS: 00000286 ORIG_RAX: 00000000000001b3 [ 508.163671][T14607] RAX: ffffffffffffffda RBX: 00000000f548d460 RCX: 0000000000000058 [ 508.163678][T14607] RDX: 0000000000000000 RSI: 0000000001800000 RDI: 0000000000000002 [ 508.163684][T14607] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 508.163690][T14607] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 508.163696][T14607] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 508.163710][T14607] [ 508.565627][ T56] usb usb50-port1: unable to enumerate USB device [ 509.335544][T14631] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 509.337815][T14631] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 509.344782][T14631] vhci_hcd vhci_hcd.0: Device attached [ 509.584985][ T56] usb 49-1: new low-speed USB device number 11 using vhci_hcd [ 510.077619][ T6012] libceph: connect (1)[c::]:6789 error -101 [ 510.081295][ T6012] libceph: mon0 (1)[c::]:6789 connect error [ 510.129301][T14642] ceph: No mds server is up or the cluster is laggy [ 510.193955][T14645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 510.201614][T14645] 8021q: adding VLAN 0 to HW filter on device team0 [ 510.213665][T14645] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 510.245991][T11986] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 510.286744][T14632] vhci_hcd: connection reset by peer [ 510.289908][ T61] vhci_hcd vhci_hcd.6: stop threads [ 510.291703][ T61] vhci_hcd vhci_hcd.6: release socket [ 510.294007][ T61] vhci_hcd vhci_hcd.6: disconnect device [ 510.385962][T11986] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 510.740083][T14650] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 4, id = 0 [ 510.893986][T14657] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2215'. [ 510.898313][ T163] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 510.914744][T14657] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2215'. [ 510.918884][T14657] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2215'. [ 511.938518][ T163] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 511.941463][ T163] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 512.319439][ T5953] Bluetooth: hci1: unexpected event 0x01 length: 5 > 1 [ 512.471355][T14680] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2221'. [ 512.535582][T14683] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2221'. [ 512.672447][T14673] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2219'. [ 512.844983][T14693] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 512.848074][T14693] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2223'. [ 512.851027][T14693] netlink: 'syz.1.2223': attribute type 5 has an invalid length. [ 512.853768][T14693] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2223'. [ 512.872259][T14693] geneve4: entered promiscuous mode [ 512.874104][T14693] geneve4: entered allmulticast mode [ 512.878345][ T46] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 512.881155][ T46] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 512.884155][ T46] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 512.886941][ T46] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 512.928127][ T7947] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 512.979399][ T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 513.081174][ T7947] usb 11-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 513.084110][ T7947] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 513.087594][ T7947] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 513.108288][ T7947] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 513.228186][ T7947] usb 11-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 513.231744][ T7947] usb 11-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 513.234826][ T7947] usb 11-1: Product: syz [ 513.236672][ T7947] usb 11-1: Manufacturer: syz [ 513.245245][ T7947] cdc_wdm 11-1:1.0: skipping garbage [ 513.247446][ T7947] cdc_wdm 11-1:1.0: skipping garbage [ 513.251398][ T7947] cdc_wdm 11-1:1.0: cdc-wdm0: USB WDM device [ 513.254228][ T7947] cdc_wdm 11-1:1.0: Unknown control protocol [ 513.741651][T11986] usb 11-1: USB disconnect, device number 4 [ 513.774945][T14706] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2228'. [ 513.778546][T14706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2228'. [ 514.590656][ T7947] kernel write not supported for file [eventfd] (pid: 7947 comm: kworker/2:6) [ 515.180984][ T5953] Bluetooth: hci1: unexpected event 0x01 length: 5 > 1 [ 515.407749][ T56] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 515.700956][ C2] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 518.641955][T14760] FAULT_INJECTION: forcing a failure. [ 518.641955][T14760] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 518.647035][T14760] CPU: 3 UID: 0 PID: 14760 Comm: syz.7.2243 Not tainted syzkaller #0 PREEMPT(full) [ 518.647054][T14760] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 518.647062][T14760] Call Trace: [ 518.647066][T14760] [ 518.647071][T14760] dump_stack_lvl+0x16c/0x1f0 [ 518.647094][T14760] should_fail_ex+0x512/0x640 [ 518.647110][T14760] _copy_from_iter+0x2a4/0x16c0 [ 518.647125][T14760] ? __alloc_skb+0x220/0x410 [ 518.647138][T14760] ? __alloc_skb+0x35d/0x410 [ 518.647150][T14760] ? __pfx__copy_from_iter+0x10/0x10 [ 518.647164][T14760] ? netlink_autobind.isra.0+0x158/0x370 [ 518.647186][T14760] netlink_sendmsg+0x820/0xdd0 [ 518.647203][T14760] ? __pfx_netlink_sendmsg+0x10/0x10 [ 518.647221][T14760] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 518.647243][T14760] ____sys_sendmsg+0xa5d/0xc30 [ 518.647261][T14760] ? __pfx_____sys_sendmsg+0x10/0x10 [ 518.647278][T14760] ? get_compat_msghdr+0x11a/0x170 [ 518.647299][T14760] ___sys_sendmsg+0x134/0x1d0 [ 518.647318][T14760] ? __pfx____sys_sendmsg+0x10/0x10 [ 518.647347][T14760] ? find_held_lock+0x2b/0x80 [ 518.647385][T14760] __sys_sendmsg+0x16d/0x220 [ 518.647407][T14760] ? __pfx___sys_sendmsg+0x10/0x10 [ 518.647445][T14760] __do_fast_syscall_32+0xe8/0x680 [ 518.647472][T14760] do_fast_syscall_32+0x32/0x80 [ 518.647482][T14760] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 518.647497][T14760] RIP: 0023:0xf709d579 [ 518.647506][T14760] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 518.647518][T14760] RSP: 002b:00000000f546c55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 518.647529][T14760] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000800002c0 [ 518.647536][T14760] RDX: 0000000020000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 518.647543][T14760] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 518.647549][T14760] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 518.647555][T14760] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 518.647568][T14760] [ 518.834323][T14769] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 518.837303][T14769] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 518.841282][T14769] vhci_hcd vhci_hcd.0: Device attached [ 518.891546][ C3] vxcan0: j1939_tp_rxtimer: 0xffff88805bc47c00: rx timeout, send abort [ 519.113837][ T24] usb 40-1: SetAddress Request (75) to port 0 [ 519.116296][ T24] usb 40-1: new SuperSpeed USB device number 75 using vhci_hcd [ 519.392100][ C3] vxcan0: j1939_tp_rxtimer: 0xffff88806d73b400: rx timeout, send abort [ 519.395669][ C3] vxcan0: j1939_tp_rxtimer: 0xffff88805bc47c00: abort rx timeout. Force session deactivation [ 519.464197][T14770] vhci_hcd: connection reset by peer [ 519.477520][ T1191] vhci_hcd vhci_hcd.1: stop threads [ 519.479980][ T1191] vhci_hcd vhci_hcd.1: release socket [ 519.482146][ T1191] vhci_hcd vhci_hcd.1: disconnect device [ 519.895989][ C3] vxcan0: j1939_tp_rxtimer: 0xffff88806d73b400: abort rx timeout. Force session deactivation [ 520.020734][T14800] netlink: 'syz.6.2257': attribute type 21 has an invalid length. [ 520.024143][T14800] netlink: 128 bytes leftover after parsing attributes in process `syz.6.2257'. [ 520.030032][T14800] netlink: 'syz.6.2257': attribute type 4 has an invalid length. [ 520.033464][T14800] netlink: 'syz.6.2257': attribute type 3 has an invalid length. [ 520.037118][T14800] netlink: 3 bytes leftover after parsing attributes in process `syz.6.2257'. [ 520.332154][T14808] mac80211_hwsim hwsim17 syzkaller0: entered promiscuous mode [ 520.335011][T14808] mac80211_hwsim hwsim17 syzkaller0: entered allmulticast mode [ 520.600552][T14816] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2264'. [ 521.796449][ T5953] Bluetooth: hci1: unexpected event 0x01 length: 5 > 1 [ 522.611625][ T34] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 522.767434][ T34] usb 11-1: Using ep0 maxpacket: 32 [ 522.771826][ T34] usb 11-1: config 1 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 522.776658][ T34] usb 11-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 522.782484][ T34] usb 11-1: config 1 interface 0 has no altsetting 0 [ 522.787259][ T34] usb 11-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.40 [ 522.791251][ T34] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.794643][ T34] usb 11-1: Product: syz [ 522.796641][ T34] usb 11-1: Manufacturer: ꔾߐ䀮ꕊ踖䲡酕땷ष⸤퀋䘳ᾎ즤讄讂⧗箍Რ府瘜ㄇᤉ밹뿛鍏 [ 522.803609][ T34] usb 11-1: SerialNumber: syz [ 522.923304][T14857] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2278'. [ 522.923304][T14856] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2278'. [ 522.997710][T14858] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 523.000115][T14858] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 523.002770][T14858] vhci_hcd vhci_hcd.0: Device attached [ 523.126374][T14862] syzkaller0: entered promiscuous mode [ 523.129119][T14862] syzkaller0: entered allmulticast mode [ 523.226754][ T34] usbhid 11-1:1.0: can't add hid device: -71 [ 523.228940][ T34] usbhid 11-1:1.0: probe with driver usbhid failed with error -71 [ 523.232860][ T34] usb 11-1: USB disconnect, device number 5 [ 523.470807][ C2] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 523.527674][T14859] vhci_hcd: connection closed [ 523.528720][ T6190] vhci_hcd vhci_hcd.1: stop threads [ 523.533038][ T6190] vhci_hcd vhci_hcd.1: release socket [ 523.535569][ T6190] vhci_hcd vhci_hcd.1: disconnect device [ 523.846297][T14868] netlink: 'syz.6.2281': attribute type 1 has an invalid length. [ 524.188598][ T24] usb 40-1: device descriptor read/8, error -110 [ 524.372871][ T6032] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 525.362523][ T24] usb usb40-port1: attempt power cycle [ 525.696826][T14888] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2287'. [ 525.712293][T14888] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2287'. [ 525.931329][ T24] usb usb40-port1: unable to enumerate USB device [ 526.342999][T14897] tipc: Enabled bearer , priority 0 [ 526.345996][T14898] syzkaller0: entered promiscuous mode [ 526.347911][T14898] syzkaller0: entered allmulticast mode [ 526.353505][T14898] tipc: Resetting bearer [ 526.379123][T14900] tipc: Resetting bearer [ 526.407517][T14900] tipc: Disabling bearer [ 526.651213][T14911] syzkaller0: entered promiscuous mode [ 526.653248][T14911] syzkaller0: entered allmulticast mode [ 528.487925][T14931] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 528.490257][T14931] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 528.515835][T14930] bond1: left promiscuous mode [ 528.517587][T14930] bond1: left allmulticast mode [ 528.520605][T14931] vhci_hcd vhci_hcd.0: Device attached [ 528.540554][T14930] ip6erspan0: left allmulticast mode [ 528.543467][T14930] veth1_vlan: left allmulticast mode [ 528.545972][T14930] macvtap2: left promiscuous mode [ 528.547779][T14930] macvtap2: left allmulticast mode [ 528.554697][T14930] geneve4: left promiscuous mode [ 528.556428][T14930] geneve4: left allmulticast mode [ 528.561587][ T1248] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.584086][ T1248] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 256 - 0 [ 528.594458][ T1248] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.605119][ T1248] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 256 - 0 [ 528.615478][ T1248] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.627897][ T1248] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 256 - 0 [ 528.636502][ T1248] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.641430][ T1248] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 256 - 0 [ 528.762699][T11986] usb 49-1: new low-speed USB device number 12 using vhci_hcd [ 528.860349][T14932] vhci_hcd: connection reset by peer [ 528.863666][ T61] vhci_hcd vhci_hcd.6: stop threads [ 528.865355][ T61] vhci_hcd vhci_hcd.6: release socket [ 528.870189][ T61] vhci_hcd vhci_hcd.6: disconnect device [ 529.243550][T14937] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2299'. [ 529.283318][T14939] syzkaller0: entered promiscuous mode [ 529.285748][T14939] syzkaller0: entered allmulticast mode [ 530.247486][T14961] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 530.249605][T14961] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 530.252572][T14961] vhci_hcd vhci_hcd.0: Device attached [ 530.267424][T14961] binder: Unknown parameter 'stobal.{mzʹ{GdC`#R_A' [ 530.275954][T14961] Invalid option length (1048030) for dns_resolver key [ 530.891013][T14962] vhci_hcd: connection closed [ 530.891324][ T1248] vhci_hcd vhci_hcd.6: stop threads [ 530.895474][ T1248] vhci_hcd vhci_hcd.6: release socket [ 530.897920][ T1248] vhci_hcd vhci_hcd.6: disconnect device [ 530.938671][T14968] @0: renamed from bond_slave_1 [ 531.734460][T14981] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 531.736788][T14981] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 531.745481][T14981] vhci_hcd vhci_hcd.0: Device attached [ 532.353717][T14982] vhci_hcd: connection closed [ 532.355019][ T1142] vhci_hcd vhci_hcd.6: stop threads [ 532.365933][ T1142] vhci_hcd vhci_hcd.6: release socket [ 532.367914][ T1142] vhci_hcd vhci_hcd.6: disconnect device [ 532.530651][T14990] macvtap3: entered promiscuous mode [ 532.533236][T14990] macvtap3: entered allmulticast mode [ 532.535715][T14990] veth1_vlan: entered allmulticast mode [ 532.550016][T14990] macvtap4: entered promiscuous mode [ 532.552515][T14990] macvtap4: entered allmulticast mode [ 532.759753][T14993] syzkaller0: entered promiscuous mode [ 532.761938][T14993] syzkaller0: entered allmulticast mode [ 533.196761][ T5953] Bluetooth: hci3: unexpected event 0x01 length: 5 > 1 [ 533.867396][T11986] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 534.186220][T15006] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.219244][T15005] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2318'. [ 534.293322][T15004] infiniband syz1: set active [ 534.295077][T15004] infiniband syz1: added syz_tun [ 534.302991][T15006] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.323336][T15004] RDS/IB: syz1: added [ 534.324777][T15004] smc: adding ib device syz1 with port count 1 [ 534.326878][T15004] smc: ib device syz1 port 1 has no pnetid [ 534.368892][T15006] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.459911][T15006] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.592999][ T75] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.610769][T15014] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 534.611470][ T75] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.613006][T15014] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 534.618994][T15014] vhci_hcd vhci_hcd.0: Device attached [ 534.630717][ T46] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.648923][ T46] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.898355][T11986] usb 44-1: SetAddress Request (50) to port 0 [ 534.900869][T11986] usb 44-1: new SuperSpeed USB device number 50 using vhci_hcd [ 534.956706][T15022] netlink: 360 bytes leftover after parsing attributes in process `syz.1.2323'. [ 535.148854][ T6013] usb usb50-port1: attempt power cycle [ 535.162439][T15025] genirq: Flags mismatch irq 4. 00200000 (pcmmio) vs. 00200080 (ttyS0) [ 535.188199][T15015] vhci_hcd: connection reset by peer [ 535.195753][ T61] vhci_hcd vhci_hcd.3: stop threads [ 535.198251][ T61] vhci_hcd vhci_hcd.3: release socket [ 535.201169][ T61] vhci_hcd vhci_hcd.3: disconnect device [ 535.726424][T15035] syzkaller0: entered promiscuous mode [ 535.728338][T15035] syzkaller0: entered allmulticast mode [ 535.731759][ T6013] usb usb50-port1: unable to enumerate USB device [ 536.486467][T15049] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2332'. [ 537.127764][T15057] [ 537.128641][T15057] ====================================================== [ 537.131089][T15057] WARNING: possible circular locking dependency detected [ 537.133666][T15057] syzkaller #0 Not tainted [ 537.135837][T15057] ------------------------------------------------------ [ 537.138863][T15057] syz.6.2335/15057 is trying to acquire lock: [ 537.141549][T15057] ffff888075bd9c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_seq_start+0x4f/0x2a0 [ 537.145489][T15057] [ 537.145489][T15057] but task is already holding lock: [ 537.148684][T15057] ffff888012c9a1c8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x12d0 [ 537.152462][T15057] [ 537.152462][T15057] which lock already depends on the new lock. [ 537.152462][T15057] [ 537.156656][T15057] [ 537.156656][T15057] the existing dependency chain (in reverse order) is: [ 537.159720][T15057] [ 537.159720][T15057] -> #3 (&p->lock){+.+.}-{4:4}: [ 537.162781][T15057] __mutex_lock+0x1aa/0x1ca0 [ 537.164787][T15057] seq_read_iter+0xe1/0x12d0 [ 537.166870][T15057] kernfs_fop_read_iter+0x46c/0x610 [ 537.169276][T15057] copy_splice_read+0x618/0xc20 [ 537.171698][T15057] do_splice_read+0x285/0x370 [ 537.174014][T15057] splice_file_to_pipe+0x109/0x120 [ 537.176959][T15057] do_sendfile+0x400/0xe50 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 537.179168][T15057] __ia32_compat_sys_sendfile+0x1e5/0x220 [ 537.182068][T15057] __do_fast_syscall_32+0xe8/0x680 [ 537.184530][T15057] do_fast_syscall_32+0x32/0x80 [ 537.186880][T15057] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 537.189866][T15057] [ 537.189866][T15057] -> #2 (&pipe->mutex){+.+.}-{4:4}: [ 537.193141][T15057] __mutex_lock+0x1aa/0x1ca0 [ 537.195457][T15057] anon_pipe_write+0x15d/0x1bd0 [ 537.197798][T15057] __kernel_write_iter+0x720/0xb10 [ 537.200340][T15057] __kernel_write+0xf5/0x140 [ 537.202604][T15057] autofs_notify_daemon+0x4db/0xd60 [ 537.205246][T15057] autofs_wait+0x10f3/0x1ac0 [ 537.207534][T15057] autofs_mount_wait+0x132/0x3c0 [ 537.209960][T15057] autofs_d_automount+0x4b2/0x960 [ 537.212374][T15057] __traverse_mounts+0x1b9/0x830 [ 537.214774][T15057] step_into_slowpath+0x772/0xf50 [ 537.217332][T15057] path_lookupat+0x627/0xc40 [ 537.219625][T15057] filename_lookup+0x224/0x5f0 [ 537.221985][T15057] kern_path+0x35/0x50 [ 537.224053][T15057] lookup_bdev+0xd8/0x280 [ 537.226223][T15057] resume_store+0x1d6/0x490 [ 537.228452][T15057] kobj_attr_store+0x58/0x80 [ 537.230750][T15057] sysfs_kf_write+0xf2/0x150 [ 537.233012][T15057] kernfs_fop_write_iter+0x3af/0x570 [ 537.235608][T15057] vfs_write+0x7d3/0x11d0 [ 537.237768][T15057] ksys_write+0x12a/0x250 [ 537.239935][T15057] __do_fast_syscall_32+0xe8/0x680 [ 537.243211][T15057] do_fast_syscall_32+0x32/0x80 [ 537.245574][T15057] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 537.248534][T15057] [ 537.248534][T15057] -> #1 (&sbi->pipe_mutex){+.+.}-{4:4}: [ 537.251975][T15057] __mutex_lock+0x1aa/0x1ca0 [ 537.254251][T15057] autofs_notify_daemon+0x4a6/0xd60 [ 537.256813][T15057] autofs_wait+0x10f3/0x1ac0 [ 537.259085][T15057] autofs_mount_wait+0x132/0x3c0 [ 537.261510][T15057] autofs_d_automount+0x4b2/0x960 [ 537.263959][T15057] __traverse_mounts+0x1b9/0x830 [ 537.266370][T15057] step_into_slowpath+0x772/0xf50 [ 537.268792][T15057] path_lookupat+0x627/0xc40 [ 537.271088][T15057] filename_lookup+0x224/0x5f0 [ 537.273426][T15057] kern_path+0x35/0x50 [ 537.275491][T15057] lookup_bdev+0xd8/0x280 [ 537.277643][T15057] resume_store+0x1d6/0x490 [ 537.279877][T15057] kobj_attr_store+0x58/0x80 [ 537.282181][T15057] sysfs_kf_write+0xf2/0x150 [ 537.284435][T15057] kernfs_fop_write_iter+0x3af/0x570 [ 537.287019][T15057] vfs_write+0x7d3/0x11d0 [ 537.289206][T15057] ksys_write+0x12a/0x250 [ 537.291410][T15057] __do_fast_syscall_32+0xe8/0x680 [ 537.293920][T15057] do_fast_syscall_32+0x32/0x80 [ 537.296269][T15057] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 537.299257][T15057] [ 537.299257][T15057] -> #0 (&of->mutex){+.+.}-{4:4}: [ 537.302529][T15057] __lock_acquire+0x1669/0x2890 [ 537.304932][T15057] lock_acquire+0x179/0x330 [ 537.307996][T15057] __mutex_lock+0x1aa/0x1ca0 [ 537.310450][T15057] kernfs_seq_start+0x4f/0x2a0 [ 537.312813][T15057] seq_read_iter+0x2c1/0x12d0 [ 537.314715][T15057] kernfs_fop_read_iter+0x46c/0x610 [ 537.316672][T15057] copy_splice_read+0x618/0xc20 [ 537.318535][T15057] do_splice_read+0x285/0x370 [ 537.320490][T15057] splice_file_to_pipe+0x109/0x120 [ 537.322413][T15057] do_sendfile+0x400/0xe50 [ 537.324068][T15057] __ia32_compat_sys_sendfile+0x1e5/0x220 [ 537.326201][T15057] __do_fast_syscall_32+0xe8/0x680 [ 537.328124][T15057] do_fast_syscall_32+0x32/0x80 [ 537.330313][T15057] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 537.332715][T15057] [ 537.332715][T15057] other info that might help us debug this: [ 537.332715][T15057] [ 537.336149][T15057] Chain exists of: [ 537.336149][T15057] &of->mutex --> &pipe->mutex --> &p->lock [ 537.336149][T15057] [ 537.340089][T15057] Possible unsafe locking scenario: [ 537.340089][T15057] [ 537.342557][T15057] CPU0 CPU1 [ 537.344314][T15057] ---- ---- [ 537.346122][T15057] lock(&p->lock); [ 537.347399][T15057] lock(&pipe->mutex); [ 537.349598][T15057] lock(&p->lock); [ 537.351845][T15057] lock(&of->mutex); [ 537.353174][T15057] [ 537.353174][T15057] *** DEADLOCK *** [ 537.353174][T15057] [ 537.355805][T15057] 2 locks held by syz.6.2335/15057: [ 537.357562][T15057] #0: ffff88802486cc68 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x64/0x80 [ 537.360497][T15057] #1: ffff888012c9a1c8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x12d0 [ 537.363421][T15057] [ 537.363421][T15057] stack backtrace: [ 537.365345][T15057] CPU: 1 UID: 0 PID: 15057 Comm: syz.6.2335 Not tainted syzkaller #0 PREEMPT(full) [ 537.365359][T15057] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 537.365367][T15057] Call Trace: [ 537.365373][T15057] [ 537.365378][T15057] dump_stack_lvl+0x116/0x1f0 [ 537.365398][T15057] print_circular_bug+0x275/0x340 [ 537.365419][T15057] check_noncircular+0x146/0x160 [ 537.365438][T15057] __lock_acquire+0x1669/0x2890 [ 537.365450][T15057] ? __kvmalloc_node_noprof+0x3ac/0xa40 [ 537.365466][T15057] ? kernfs_fop_read_iter+0x46c/0x610 [ 537.365485][T15057] lock_acquire+0x179/0x330 [ 537.365495][T15057] ? kernfs_seq_start+0x4f/0x2a0 [ 537.365512][T15057] ? __pfx___might_resched+0x10/0x10 [ 537.365528][T15057] __mutex_lock+0x1aa/0x1ca0 [ 537.365544][T15057] ? kernfs_seq_start+0x4f/0x2a0 [ 537.365561][T15057] ? kernfs_seq_start+0x4f/0x2a0 [ 537.365577][T15057] ? __pfx___mutex_lock+0x10/0x10 [ 537.365595][T15057] ? rcu_is_watching+0x12/0xc0 [ 537.365610][T15057] ? trace_kmalloc+0x2b/0xb0 [ 537.365625][T15057] ? __kvmalloc_node_noprof+0x3c9/0xa40 [ 537.365640][T15057] ? kernfs_seq_start+0x4f/0x2a0 [ 537.365656][T15057] kernfs_seq_start+0x4f/0x2a0 [ 537.365671][T15057] seq_read_iter+0x2c1/0x12d0 [ 537.365686][T15057] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 537.365701][T15057] kernfs_fop_read_iter+0x46c/0x610 [ 537.365718][T15057] copy_splice_read+0x618/0xc20 [ 537.365734][T15057] ? __pfx_aa_file_perm+0x10/0x10 [ 537.365750][T15057] ? __pfx_copy_splice_read+0x10/0x10 [ 537.365767][T15057] ? __fget_files+0x204/0x3c0 [ 537.365782][T15057] ? __pfx_copy_splice_read+0x10/0x10 [ 537.365797][T15057] do_splice_read+0x285/0x370 [ 537.365812][T15057] splice_file_to_pipe+0x109/0x120 [ 537.365830][T15057] do_sendfile+0x400/0xe50 [ 537.365845][T15057] ? __pfx_do_sendfile+0x10/0x10 [ 537.365860][T15057] ? __pfx___seccomp_filter+0x10/0x10 [ 537.365874][T15057] __ia32_compat_sys_sendfile+0x1e5/0x220 [ 537.365885][T15057] ? __pfx___ia32_compat_sys_sendfile+0x10/0x10 [ 537.365896][T15057] ? __secure_computing+0x21c/0x320 [ 537.365931][T15057] __do_fast_syscall_32+0xe8/0x680 [ 537.365951][T15057] do_fast_syscall_32+0x32/0x80 [ 537.365961][T15057] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 537.365983][T15057] RIP: 0023:0xf70ad579 [ 537.365992][T15057] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 537.366004][T15057] RSP: 002b:00000000f549d55c EFLAGS: 00000296 ORIG_RAX: 00000000000000bb [ 537.366016][T15057] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000004 [ 537.366024][T15057] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000000 [ 537.366031][T15057] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 537.366037][T15057] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 537.366045][T15057] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 537.366056][T15057] [ 538.288914][T10592] smc: removing ib device syz1 [ 538.296939][ T24] syz1: Port: 1 Link DOWN [ 538.686352][ T6190] batman_adv: batadv0: Removing interface: gretap1 [ 538.721455][ T6190] bond2 (unregistering): (slave geneve3): Releasing active interface [ 538.775222][ T6190] bond0 (unregistering): Released all slaves [ 538.853032][ T6190] bond1 (unregistering): Released all slaves [ 538.929413][ T6190] bond2 (unregistering): Released all slaves [ 539.083401][ T6190] tipc: Left network mode [ 539.153042][ T6190] IPVS: stopping backup sync thread 14650 ... [ 539.277256][ T6190] hsr_slave_0: left promiscuous mode [ 539.291235][ T6190] team0 (unregistering): Port device batadv3 removed [ 539.313331][ T6190] pimreg3 (unregistering): left allmulticast mode [ 539.321738][ T6190] team0 (unregistering): Port device batadv2 removed [ 539.330568][ T6190] team0 (unregistering): Port device batadv1 removed [ 539.963099][T11986] usb 44-1: device descriptor read/8, error -110 [ 540.196607][ T6190] IPVS: stop unused estimator thread 0... [ 540.279215][ T6190] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.353313][T11986] usb usb44-port1: attempt power cycle [ 540.356695][ T6190] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.400203][ T6190] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.475961][ T6190] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.572649][ T6190] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.638087][ T6190] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.707836][ T6190] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.776680][ T6190] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.924171][T11986] usb usb44-port1: unable to enumerate USB device [ 541.124929][ T6190] bridge_slave_1: left allmulticast mode [ 541.126975][ T6190] bridge_slave_1: left promiscuous mode [ 541.128962][ T6190] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.131961][ T6190] bridge_slave_0: left allmulticast mode [ 541.134111][ T6190] bridge_slave_0: left promiscuous mode [ 541.136217][ T6190] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.139856][ T6190] erspan0: left allmulticast mode [ 541.141651][ T6190] erspan0: left promiscuous mode [ 541.143442][ T6190] bridge0: port 1(erspan0) entered disabled state [ 541.204028][ T6190] dvmrp8 (unregistering): left allmulticast mode [ 541.208538][ T6190] bond1 (unregistering): (slave geneve2): Releasing active interface [ 541.321095][ T6190] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 541.325059][ T6190] bond0 (unregistering): Released all slaves [ 541.330370][ T6190] bond1 (unregistering): Released all slaves [ 541.410588][ T6190] bond2 (unregistering): Released all slaves [ 541.516183][ T6190] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 541.520190][ T6190] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 541.523633][ T6190] bond0 (unregistering): Released all slaves [ 541.600551][ T6190] batman_adv: batadv0: Removing interface: gretap1 [ 541.765419][ T6190] bond0 (unregistering): Released all slaves [ 541.833590][ T6190] bond1 (unregistering): Released all slaves [ 541.907078][ T6190] bond2 (unregistering): (slave dummy0): Releasing backup interface [ 541.911301][ T6190] bond2 (unregistering): Released all slaves [ 542.032912][ T6190] tipc: Left network mode [ 542.098858][ T6190] IPVS: stopping backup sync thread 9923 ... [ 542.515561][ T6190] hsr_slave_0: left promiscuous mode [ 542.520109][ T6190] hsr_slave_0: left promiscuous mode [ 542.522416][ T6190] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 542.524917][ T6190] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 542.527691][ T6190] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 542.530518][ T6190] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 542.537827][ T6190] hsr_slave_0: left promiscuous mode [ 542.542623][ T6190] veth1_macvtap: left promiscuous mode [ 542.544499][ T6190] veth0_macvtap: left promiscuous mode [ 542.546475][ T6190] veth1_vlan: left promiscuous mode [ 542.548303][ T6190] veth0_vlan: left promiscuous mode [ 542.551442][ T6190] veth1_macvtap: left promiscuous mode [ 542.553881][ T6190] veth0_macvtap: left promiscuous mode [ 542.557061][ T6190] veth1_vlan: left promiscuous mode [ 542.559463][ T6190] veth0_vlan: left promiscuous mode [ 542.562713][ T6190] veth1_vlan: left allmulticast mode [ 542.785282][ T6190] team0 (unregistering): Port device batadv1 removed [ 542.850117][ T6190] team0 (unregistering): Port device team_slave_1 removed [ 542.864710][ T6190] team0 (unregistering): Port device team_slave_0 removed [ 543.010346][ T6190] pimreg3 (unregistering): left allmulticast mode [ 544.769923][ T6190] IPVS: stop unused estimator thread 0...