last executing test programs: 11m20.00404221s ago: executing program 32 (id=1429): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c) socket$inet6(0xa, 0x2, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x80002, 0x4) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x3e00, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wlan0\x00'}}]}, 0x38}}, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000000414010000000000020000000800010000000000080003"], 0x20}}, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 10m13.860774731s ago: executing program 3 (id=2031): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) listen(0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvmmsg(r1, &(0x7f0000001e80), 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000400000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a010800000000000000000100000b0900030073797a32000000000900010073797a300000000060000000060a010400000000000000000100000008000b40000000000900010073797a300000000038000480340001800a0001006d61746368000000240002800c000300b07346e358c219250b0001006367726f75700000080002"], 0xd4}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) io_uring_setup(0x549c, &(0x7f0000000000)={0x0, 0x70e6, 0x2, 0x2, 0xf2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="f572c10000a88c43c226f0a6380778c72739a0", @ANYRESOCT=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs(0xffffffffffffffff, 0x0) mmap(&(0x7f00005f7000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000002500), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r4, 0x6804, 0x0) r5 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) pwrite64(r5, &(0x7f0000000000)="a5", 0xfffffe8c, 0x2) write$binfmt_format(0xffffffffffffffff, &(0x7f0000000040)='1\x00', 0x2) ioctl$BLKRRPART(r5, 0x125f, 0x1f) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x3c4, 0x10, 0x2, 0xa, 0x14000000, 0x1, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x1, 0x723, 0x400, 0x2, 0x3562bc0d, 0x100, 0xffffffa7, 0x5, 0x34d, 0x1, 0x3ff, 0x9, 0x200, 0xe2df, 0x4aa14, 0x1, 0x4, 0x0, 0x6, 0xf58, 0x1]}) ioctl$COMEDI_BUFCONFIG(r0, 0x8020640d, 0x0) 10m12.852962197s ago: executing program 3 (id=2040): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r1, 0x0, 0x80, 0x5, 0x88000000, 0x0, {0x9, 0x1000, 0x101c, 0x10, 0x4, 0x401, 0xfe, 0xa, 0x0, 0x52, 0x43, 0x7e9, 0x401, 0x9aa5, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) (async, rerun: 32) syz_emit_ethernet(0x46, &(0x7f0000000780)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @private2, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0xf8, 0xfffffffc}}}}}}, 0x0) (rerun: 32) 10m12.719804751s ago: executing program 3 (id=2041): mount(&(0x7f00000004c0)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000380)='squashfs\x00', 0x8, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180), 0x706940, 0x0) r1 = socket$inet6(0xa, 0x0, 0x1) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000340)=0xa8, 0x4) r2 = gettid() prctl$PR_SCHED_CORE(0x3e, 0x3, r2, 0x2, &(0x7f00000000c0)) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f00000003c0)=0x6, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x40}}, @in6={0xa, 0x0, 0xffffffff, @mcast1}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f00000002c0)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x16}}], 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = fsopen(&(0x7f0000000140)='msdos\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup(r5, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r7 = openat$cgroup_type(r6, &(0x7f00000001c0), 0x2, 0x0) sendfile(r3, r7, 0x0, 0x4000000000000006) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) chdir(&(0x7f0000000b00)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00') bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x7, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRESOCT=r6, @ANYBLOB="0000000000000000b70300000100000085000000c0000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r8, 0x0, 0xe, 0x0, &(0x7f0000000ac0)="86dd00"/14, 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='streaming/header/h\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='streaming/uncompressed/u\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='streaming/uncompressed/u\x00', 0x1ff) symlink(&(0x7f0000001400)='streaming/uncompressed/u\x00', &(0x7f0000001500)='streaming/header/h/u\x00') symlink(&(0x7f0000001600)='streaming/header/h\x00', 0x0) write$vga_arbiter(r0, &(0x7f0000000080), 0xf) 10m12.110443275s ago: executing program 3 (id=2045): mkdir(&(0x7f00000002c0)='./file0\x00', 0x1e) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000080)='./file0\x00') unlink(&(0x7f00000002c0)='./file0\x00') link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000000)='./file0\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) openat$cdrom(0xffffff9c, &(0x7f0000000000), 0x80000, 0x0) r1 = syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) syz_open_procfs(r1, &(0x7f0000000140)='net/ptype\x00') r2 = syz_open_procfs(r1, &(0x7f0000000080)='net/igmp\x00') ioctl$CDROM_SELECT_DISK(r2, 0x5322, 0x7fffffff) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) lseek(r0, 0x7, 0x4) 10m11.32640099s ago: executing program 3 (id=2048): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280060019"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 10m10.330941307s ago: executing program 3 (id=2055): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x6d}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}, {0x85, 0x0, 0x0, 0x17}}]}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfd, {0x2, 0x0, 0x10, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4090) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 10m10.282539079s ago: executing program 33 (id=2055): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x6d}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}, {0x85, 0x0, 0x0, 0x17}}]}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfd, {0x2, 0x0, 0x10, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4090) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 9m5.990002214s ago: executing program 0 (id=2539): futex(0x0, 0x6, 0x2, 0x0, 0x0, 0x3) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) read(r0, &(0x7f0000000080)=""/193, 0xc1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000400)=0x40) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) syz_open_dev$dvb_dvr(&(0x7f0000000000), 0x0, 0x800) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, &(0x7f0000048000)=0x2, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) 9m5.710277606s ago: executing program 0 (id=2543): syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) syz_open_dev$dri(0x0, 0x40100001, 0x189002) r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x8) socket$inet(0xa, 0x801, 0x84) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x8) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r3, 0x7) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00030000000000", 0x40b}], 0x1) 9m5.681320884s ago: executing program 0 (id=2544): syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000180800000001"], 0x50) 9m5.619711385s ago: executing program 0 (id=2547): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='net/icmp\x00') preadv(r4, &(0x7f0000001400)=[{&(0x7f0000001340)=""/148, 0x94}], 0x1, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r4, 0xc0045540, &(0x7f0000000000)=0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x40, r3, 0x1, 0x1070bd0c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2a8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xffffffffffff5d5b}]}, 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)={0x28, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)={0x30, r7, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x5}, @NL80211_ATTR_MAC={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1414, 0x2021}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r11}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) r12 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r12, 0x12, 0x3, &(0x7f0000000200)=0x60, 0x4) 9m5.527581575s ago: executing program 0 (id=2550): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x40, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002002000ffff000005"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1009, r1}, 0x38) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x17) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x4000, 0x0) mkdirat(r0, &(0x7f00000002c0)='./file1\x00', 0x42) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000200)={0x0, 0x600000, 0x5b02, 0xfffc, 0x0, 0xff2b, 0x7, 0x0, {0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x44}}}, 0x7fffffff, 0xfffffffd, 0x42, 0x6, 0x3}}, &(0x7f0000000300)=0xb0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000380)={r2, 0x96c}, 0x8) mount$bind(&(0x7f0000000540)='./file1\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x5040, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r3, 0x2285, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) write$sndseq(r4, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @time={0x3, 0x5a62}, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r4, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {0xfd}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x20, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @time={0xffff, 0x7f}, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc816080000b4f270be53"}}, {0x0, 0x0, 0x0, 0x0, @time, {0xfd}, {}, @connect}], 0xc4) ioctl$SG_GET_NUM_WAITING(r3, 0x227d, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 9m5.26711088s ago: executing program 0 (id=2555): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) openat$vimc2(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1d, 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x8000) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)={@rand_addr=0x64010100, @local, 0x1, 0x1, [@local]}, 0x14) 8m49.93194884s ago: executing program 34 (id=2555): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) openat$vimc2(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1d, 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x8000) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)={@rand_addr=0x64010100, @local, 0x1, 0x1, [@local]}, 0x14) 8m17.392519898s ago: executing program 5 (id=2919): socket$can_j1939(0x1d, 0x2, 0x7) setns(0xc9, 0x0) r0 = socket(0x8, 0x5, 0x5) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) r5 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) r6 = epoll_create1(0x0) r7 = dup(r5) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000140)={0x40002013}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f00000000c0)={@none, 0x1}) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xf) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x42020054, 0x0, 0x0) 8m17.100473465s ago: executing program 5 (id=2921): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001540)=ANY=[@ANYBLOB="5c000000020601020000000000000000120000090c00078008001240001600000500010006000000050005000a00000005000400000000000900020073797a310000000015000300686173683a6970"], 0x5c}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000b80)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 8m16.483656532s ago: executing program 5 (id=2923): r0 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) openat$fb1(0xffffffffffffff9c, &(0x7f0000000080), 0x101100, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x5, 0x5]}, 0x8, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1000, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0xf5, 0x1f0, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000040)={'\be \x00', 0x0, 0x5, 0x2, 0x0, 0xc, "00000000020000000000002100", '\x00', "0052008f", '\x00', ["fdfeffbf84a438dfc5d5c010", "0000000000000400", "0000efffffffffffbfff00", "000003cefd70f14003556000"]}) r9 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r9, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x1c, {0x2, 0x0, @multicast2}}, 0x24) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffff7, 0xffffffffffffffff, 0x2, 0x9, 0x4, 0x7fff, "16b0bc450cfc47961ed5d8167d4f7865", 0x1, 0x52, 0x1, 0x49, 0x9, 0x9, 0xd}) 8m15.670672277s ago: executing program 5 (id=2927): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000e00)={{0x1, 0x1, 0x18, r3, {0xee00, 0xee00}}, './file0\x00'}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8881}}], 0x1, 0x4000) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000180)={0x1d, r4, 0x1, {0x0, 0xf0, 0x4}, 0xfd}, 0x18) close_range(r1, 0xffffffffffffffff, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x6, 0xa68d7c51dfa06ff5, 0xffbc, 0x6, 0x1d46, 0x1000, 0x0, 0x0, 0x40}}, 0x50) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x5, 0x6, 0x5, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x4000) io_uring_setup(0x2e08, &(0x7f00000001c0)={0x0, 0x5acf, 0x40, 0xffffffff}) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 8m14.729169123s ago: executing program 5 (id=2930): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000005580)=[{{0x0, 0x0, &(0x7f0000003d00)=[{&(0x7f0000000340)=""/108, 0x6c}, {&(0x7f0000000540)=""/79, 0x4f}, {&(0x7f00000005c0)=""/13, 0xd}, {&(0x7f00000007c0)=""/205, 0xcd}, {&(0x7f0000002b80)=""/4084, 0xff4}, {&(0x7f0000003b80)=""/221, 0xdd}, {&(0x7f0000003c80)=""/82, 0x52}], 0x7}, 0x3}], 0x1, 0x10122, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001800)='./sys/devices/platform/usbip-vudc.0/usbip_sockfd\x00', 0x1, 0x0) write(r1, &(0x7f0000001900)='3', 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x4d, &(0x7f0000caaffb), &(0x7f00000002c0)=0xc) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB="01002d"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x810) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x8, 0x3, 0x5e4, 0x0, 0x25, 0x148, 0x438, 0x60, 0x550, 0x2a8, 0x2a8, 0x550, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x3f0, 0x438, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit2={{0x150}, {'\x00', {0x7, 0x5, 0x20, 0x0, 0x6, 0x4, 0x8, 0x20, 0x78}, {0x8}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x67a) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {}, {}, {0xa, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x40850) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="20000000100001070000000000000000030000000c0002"], 0x20}}, 0x4000084) 8m14.480387455s ago: executing program 5 (id=2932): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161680, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000280)={0x9}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0xff, 0x9, 0x3, 0x8, 0xb9, 0x3, 0x8e, 0x5, 0xc50}, {0x804, 0x1, 0x1, 0xc5, 0xff, 0x6, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0xf1c2, 0x3, 0x38, 0xf, 0x84, 0x7, 0x3, 0x50, 0x0, 0x5, 0x4, 0x5, 0x3a}], 0xffffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x0, 0x61, 0x200002000001, 0x0, 0x2004c8, 0x0, 0x0, 0x36ae, 0x3, 0x7fff, 0x3, 0x400000000], 0x80a0000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_emit_vhci(&(0x7f0000000400)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0xf7, 0x8}, {0xfd87, 0x6, 0x7, 0x30}}}}, 0x15) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="100000000e14000427bd705ee8ce9ab200b968257f26f43e762c"], 0x10}}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/168, 0xa8}], 0x1, 0x2004, 0x80) read$midi(r1, 0x0, 0xfffffffffffffca8) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000000c0)=0x2) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r6, 0x8971, &(0x7f0000000080)={'bond0\x00', @ifru_addrs=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80383, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x4180, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) move_mount(r8, 0x0, r8, 0x0, 0x247) 7m59.430224374s ago: executing program 35 (id=2932): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161680, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000280)={0x9}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0xff, 0x9, 0x3, 0x8, 0xb9, 0x3, 0x8e, 0x5, 0xc50}, {0x804, 0x1, 0x1, 0xc5, 0xff, 0x6, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0xf1c2, 0x3, 0x38, 0xf, 0x84, 0x7, 0x3, 0x50, 0x0, 0x5, 0x4, 0x5, 0x3a}], 0xffffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x0, 0x61, 0x200002000001, 0x0, 0x2004c8, 0x0, 0x0, 0x36ae, 0x3, 0x7fff, 0x3, 0x400000000], 0x80a0000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_emit_vhci(&(0x7f0000000400)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0xf7, 0x8}, {0xfd87, 0x6, 0x7, 0x30}}}}, 0x15) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="100000000e14000427bd705ee8ce9ab200b968257f26f43e762c"], 0x10}}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/168, 0xa8}], 0x1, 0x2004, 0x80) read$midi(r1, 0x0, 0xfffffffffffffca8) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000000c0)=0x2) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r6, 0x8971, &(0x7f0000000080)={'bond0\x00', @ifru_addrs=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80383, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x4180, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) move_mount(r8, 0x0, r8, 0x0, 0x247) 6m42.189948054s ago: executing program 6 (id=3508): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x2, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8044) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10a942, 0x9f667fd378a54ed4) write$P9_RREADLINK(r3, &(0x7f0000000040)={0x10, 0x17, 0x2, {0xffffffffffffffc1, './file0'}}, 0xfffffdab) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff0001}]}) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x80000007, 0x1}, 0x1c) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad7, 0x10000, 0x3}, &(0x7f0000000040), &(0x7f0000000280), &(0x7f0000000000)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000040)={0xfffffeff}) close(r6) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r9, @ANYBLOB="dc196c174c0f622e019df2d7fcc0c6e67e55dd353e5b54dbb5c89c1e1f4a22120475c8cdd9a545554eab5c90c9583f399da9afac43bb3186c0baf3fa64ff2c4c70f0c0ea424307be53"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg$unix(r4, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000005c0)=""/227, 0xe3}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/156, 0x9c}], 0x1}}], 0x2, 0x40000000, 0x0) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 6m41.088202223s ago: executing program 6 (id=3523): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000100001fffffff500000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000010900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000002c0004802800018008000100666962001c00028008000140000000110800034000000005080002400000000114000000110001"], 0xdc}}, 0x0) 6m40.90018488s ago: executing program 6 (id=3524): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x600, 0x0, 0x0, 0x6}, [@IFLA_ADDRESS={0xa, 0x3, @random="99fa3a1c872f"}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) 6m39.273617935s ago: executing program 6 (id=3533): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='clear_refs\x00') writev(r0, &(0x7f0000001100)=[{&(0x7f00000010c0)="36fe28d4ff293d98bd1403cbad2aec86ab232af1822dad460baf5aafbf0b3e1fef6dcb8e647d6bf8bd1246c023086705262c623c01b0364a8ad88c4df82159"}], 0x20000000000000b5) syz_open_procfs(0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x10, r1, 0xfffff000) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000180)=""/64, 0x40}], 0x1, 0x9, 0x1) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) write$binfmt_register(r3, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioprio_set$pid(0x1, 0x0, 0x0) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000002680)=[{{&(0x7f0000000540)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000440)="a807540c4895c181b1076a6d765d398b26e25edd32dcb73f23cb705834d9dd720ab4e658c77620a8016e490ef6fb8a460a444dca585b91c5f4ec0b2c4fcb4434821dac1c0557d6bc75d2b2bd2b687858b21d8ca7e72dee130d3c26a705f29da288fb1e39dc8566afb2cd35adca4ddacd003bcfcec43772c1e0e59f78c15b31b36744e570a3562a8f2ff9cd1c567c76077a9c7a0bc347931e2a1660a54392521505ba59c309d3831437bed97733f1b39c8a45ae7eea9e542a7eb72524d92c87ca3123f57ab95a0d", 0xc7}, {&(0x7f00000026c0)="96e7039aca6fe550b51b2711eaaef757f66ab3bee4f35d6163e6de82df7bb6132351bb47afad228ac3d2ebadeb5527a3ae3b0f96c0710d7014d3fee04fecc73c822facf6aa2638c33afa28b92ebda4597ca69a8bfff5f2", 0x57}], 0x2}}], 0x1, 0x40000) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x2002, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffe, 0x6, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000240)="008d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x4043, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000002740)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0x0, 0x11, 0x148, 0x0, 0x0, 0x1b4, 0x2a8, 0x2a8, 0x1b4, 0x2a8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0xff, 0xff, 'ip6erspan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x73, 0x3, 0x2}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1f, 0x9, 0x8, 0x8, '\x00', 'syz1\x00', {0x2}}}}, {{@uncond, 0x0, 0xb8, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x1}}, @common=@icmp={{0x24}, {0x3, "08b1", 0x1}}]}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x2a4) r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r6) lsetxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000240), 0x2, 0x3) r7 = socket$pppoe(0x18, 0x1, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000340)={0x1f, 0x2, 0x3}, 0x6) write$bt_hci(r8, &(0x7f00000002c0)=ANY=[@ANYBLOB="0000023f320104"], 0x138) ioctl$XFS_IOC_SCRUBV_METADATA(r7, 0xc0285840, &(0x7f0000000380)={0x7fffffff, 0xb4, 0xfffffffc, 0x0, 0xda, 0x4, 0x0, &(0x7f0000000300)=[{0x15, 0xfe, 0xac83}, {0x9, 0x101, 0x2}, {0x14, 0xfe, 0x6}, {0x15, 0x0, 0xfffc}]}) 6m39.235100346s ago: executing program 6 (id=3536): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2000004) mkdir(&(0x7f0000000000)='./debugfs\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./debugfs\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./debugfs/dynamic_debug/control\x00', 0x1, 0x10) write(r0, &(0x7f0000000800)='file d*vio.c +', 0xe) syz_clone3(&(0x7f0000000380)={0x20000000, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x20000, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000180)={'veth1\x00', {0x2, 0x4e20, @multicast1}}) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000040)={0xffffffffffffffff, 0x8, 0xba, 0xfffffff7, @vifc_lcl_addr=@loopback, @empty}, 0x10) 6m39.008099488s ago: executing program 6 (id=3537): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000340)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000300), r1, 0x0, 0x1, 0x4}}, 0x20) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) mount(&(0x7f0000000140)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='affs\x00', 0x200001, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x2cc}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x200000000000000) 6m23.983130078s ago: executing program 36 (id=3537): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000340)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000300), r1, 0x0, 0x1, 0x4}}, 0x20) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) mount(&(0x7f0000000140)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='affs\x00', 0x200001, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x2cc}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x200000000000000) 2m15.346343222s ago: executing program 7 (id=5975): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x4001, @multicast, 'batadv0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'dummy0\x00'}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r5}, &(0x7f0000000040), &(0x7f0000000480)='%pi6 \x00'}, 0x20) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x402, 0x6, 0xfffa}, 0x3a, [0x8000, 0x401, 0xf, 0x8, 0x86, 0x2, 0x3, 0x7f, 0xa6, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0xdb, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0x10, 0x80, 0x207, 0x20003, 0x8, 0x4c76, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7fc, 0x17, 0x0, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000004, 0x9, 0x8000012f, 0x8004, 0x8, 0xffffbff3, 0x129432f6, 0xc8, 0xc9, 0xe, 0x2bf, 0x6c7, 0x1, 0xfffffffc, 0x5, 0x0, 0x0, 0x9, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x8, 0x4, 0x7, 0x7ffb, 0x6, 0x500, 0x401, 0x10001, 0x1, 0xff, 0x5, 0xfffff572, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0xd, 0xfffff256, 0x2, 0x1, 0xfdfffffd, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xfffffffc, 0x48c93690, 0xe79, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0xff, 0x4, 0xb, 0x6, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0xfffffffd, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3039, 0xfffffffa, 0xb, 0x5, 0xffffffff, 0x2, 0x400003, 0x6, 0x4, 0x6d01, 0x6, 0x34, 0x800003, 0x200, 0x83, 0x3, 0x5, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x50, 0x3, 0x7ff, 0x12b, 0x8a6, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x2008077f, 0x2006, 0x7, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x2000004, 0xffff, 0x6, 0x80000000, 0xb9, 0xce4, 0x10001fc, 0x10002, 0x4184, 0x5, 0x3, 0x0, 0x10000, 0x4, 0x7fff, 0xfffe, 0xa620, 0x1, 0x5, 0x1, 0x6, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x1622, 0x7, 0x200af, 0x20000008, 0x5, 0x226, 0x3, 0x5, 0x0, 0x30b1d693, 0xfffff4f0, 0x4, 0x7, 0x7, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0x30, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)={0x38, r1, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x101}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x24040000) socket(0x10, 0x803, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1000000, 0x0) r7 = socket$netlink(0x10, 0x3, 0x15) write(r7, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011fe0100f5fe0012ff000000078a151f750800390005", 0x26) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xf32}) syz_open_dev$tty1(0xc, 0x4, 0x1) 2m15.186475476s ago: executing program 7 (id=5979): setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f7", 0x81}], 0x1}], 0x1, 0x44804) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="11000000040000000400000002"], 0x48) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000080)={r0, 0x58, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c5000, 0x80) write$bt_hci(r4, &(0x7f0000000bc0)=ANY=[], 0xa) sendfile(r4, r3, 0x0, 0x40001) sendfile(r4, r3, 0x0, 0xf18c) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e0000000100000005ffffff0880a9331419000082290000", @ANYRES32=r0, @ANYBLOB="0600"/20, @ANYRES32=r1, @ANYRES32=r4, @ANYBLOB="0100000000000000050000000c00"/28], 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x300080c1) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3b81fff400100e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r7, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) read$FUSE(r4, &(0x7f0000001540)={0x2020}, 0x2020) r8 = socket$kcm(0x10, 0x2, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f00000002c0)=r10, 0x4) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000700)="d80000001a0081044e81f782db4cb904021d08004f1e81f8d8150019001105142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aebfb0daa7b0cd39e4edbb57a5025ccca9e020000000000000040fad95667e006dcbd63951f215ce3bb9ad809d5e1cace81017f5b5cef443dc3ed0bffece0b42a9ecbee5de6ccd40dd6e4", 0xd8}], 0x1}, 0x0) r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r8, @ANYRES8=r5, @ANYRES16, @ANYRESDEC=r7, @ANYRES16=r8, @ANYRES64=0x0, @ANYRESHEX=r3, @ANYRES8=r8], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000540)={0x1, &(0x7f0000000580)=[{0x3ff, 0x4, 0x8, 0x4}]}) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r11, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r12, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000680)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000900)=ANY=[@ANYRESDEC], 0xac}, 0x1, 0x0, 0x0, 0xc0}, 0x4884) 2m15.098204472s ago: executing program 7 (id=5982): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x0, 0x20, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x31, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @multicast2}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000240)={'tunl0\x00', 0x0, 0x700, 0x7800, 0xffff, 0x8001, {{0x5, 0x4, 0x0, 0x28, 0x14, 0x68, 0x0, 0x10, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) 2m15.026282394s ago: executing program 7 (id=5989): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0xfffffffffffffef3, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000001cc0), 0x800, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r4, 0x80044d06, &(0x7f0000002180)) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) r6 = gettid() r7 = socket(0x2, 0x3, 0x6) sendmmsg$unix(r7, &(0x7f0000000bc0)=[{{&(0x7f0000002140)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f0000000700)=[@cred={{0x18, 0x1, 0x2, {r6}}}], 0x18}}], 0x1, 0x800) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x76}, "14bffd076773e618d39a90a7ddede0f1cbbfb5400507109f248002f538054f1d79f119c666d26733442cafd720bdb2541415da118792c9c7d05d58719ec0d92263e2739da7bc6b092a07f4122aea955b70195af1efcdf25f4a45cf1e36245c76d420b0a64fd997374c6ac536273d1c80341fe913eb46"}, 0x7a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@can_newroute={0x14c, 0x18, 0x1, 0x170bd29, 0x25dfdbfd, {0x1d, 0x1, 0x4}, [@CGW_CS_CRC8={0x11e, 0x6, {0x1, 0xe, 0x3, 0x1, 0xff, "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", 0x0, "5c8d586b2a88d818b56d2a5e15c8a95d29e5b2ea"}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x1}, 0x8, 0x0, 0x0, 0x0, "a38c26ec238c4259"}, 0x2}}]}, 0x14c}}, 0x4884) tkill(r6, 0xb) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0xc3ff, 0x0, 0x20048054}, 0x0) 2m13.439620111s ago: executing program 7 (id=6016): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) write(r1, &(0x7f0000000440)="21eb916341aacd8e90d1717fd321c7fe6618d72b6fa7a30085137babc3fec64c5a6dbe418878cbd397033541bd21c646159e65531487abfa4440c4bd92a14999718056ea98b9dd9f8879fd7ec9aee40781230e1e8fca1e844debbc7075acab5e6812196825637645ea871bc8e422566cb1728fcf0227daeba679b5902b0512ad31b839d3106b4646406d08ce95818a7b5222a9581df15ddfe874ecacbf805dbd19f2f9f589d00a4f002aa8dd14588e78336805ef5b472cec97171761bc490b3b349b50c5170c61609f47e2e5dd5b216d329eaaf2c65869ab176f347da560d3ca3ec70bf9040f372184691840d81131acc7536c7bd2a58308", 0xf8) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000140)={0x0, 0x879, 0xa1a5}) readv(r0, &(0x7f00000012c0)=[{&(0x7f00000000c0)=""/23, 0x17}, {&(0x7f0000000040)=""/14, 0xe}, {&(0x7f0000000080)=""/58, 0x3a}, {&(0x7f0000001300)=""/4112, 0x1010}], 0x4) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x100) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)=0x20) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) rename(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000100)='./file0\x00') r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e22, @local}}, 0x0, 0x2, 0xfffffff7, 0x9, 0x8}, &(0x7f0000000380)=0x98) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x102, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) ioctl$TIOCGPTPEER(r6, 0x5441, 0x2076) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f00000003c0)={r5, 0x7}, &(0x7f0000000400)=0x8) futex(&(0x7f0000000000), 0x5, 0x0, 0x0, &(0x7f0000000180)=0x8000, 0xc5000004) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) 2m13.305876927s ago: executing program 7 (id=6019): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) syz_emit_ethernet(0x33, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty=0x11}, {0x0, 0x4e20, 0x11, 0x0, @opaque='\x00\x00\x00\x00\x00\x00\x00\x00\x00'}}}}}, 0x0) 1m58.332749376s ago: executing program 37 (id=6019): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) syz_emit_ethernet(0x33, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty=0x11}, {0x0, 0x4e20, 0x11, 0x0, @opaque='\x00\x00\x00\x00\x00\x00\x00\x00\x00'}}}}}, 0x0) 1m28.501561837s ago: executing program 9 (id=6407): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x4001, @multicast, 'batadv0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'dummy0\x00'}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r5}, &(0x7f0000000040), &(0x7f0000000480)='%pi6 \x00'}, 0x20) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x402, 0x6, 0xfffa}, 0x3a, [0x8000, 0x401, 0xf, 0x8, 0x86, 0x2, 0x3, 0x7f, 0xa6, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0xdb, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0x10, 0x80, 0x207, 0x20003, 0x8, 0x4c76, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7fc, 0x17, 0x0, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000004, 0x9, 0x8000012f, 0x8004, 0x8, 0xffffbff3, 0x129432f6, 0xc8, 0xc9, 0xe, 0x2bf, 0x6c7, 0x1, 0xfffffffc, 0x5, 0x0, 0x0, 0x9, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x8, 0x4, 0x7, 0x7ffb, 0x6, 0x500, 0x401, 0x10001, 0x1, 0xff, 0x5, 0xfffff572, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0xd, 0xfffff256, 0x2, 0x1, 0xfdfffffd, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xfffffffc, 0x48c93690, 0xe79, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0xff, 0x4, 0xb, 0x6, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0xfffffffd, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3039, 0xfffffffa, 0xb, 0x5, 0xffffffff, 0x2, 0x400003, 0x6, 0x4, 0x6d01, 0x6, 0x34, 0x800003, 0x200, 0x83, 0x3, 0x5, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x50, 0x3, 0x7ff, 0x12b, 0x8a6, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x2008077f, 0x2006, 0x7, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x2000004, 0xffff, 0x6, 0x80000000, 0xb9, 0xce4, 0x10001fc, 0x10002, 0x4184, 0x5, 0x3, 0x0, 0x10000, 0x4, 0x7fff, 0xfffe, 0xa620, 0x1, 0x5, 0x1, 0x6, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x1622, 0x7, 0x200af, 0x20000008, 0x5, 0x226, 0x3, 0x5, 0x0, 0x30b1d693, 0xfffff4f0, 0x4, 0x7, 0x7, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0x30, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)={0x38, r1, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x101}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x24040000) socket(0x10, 0x803, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1000000, 0x0) r7 = socket$netlink(0x10, 0x3, 0x15) write(r7, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011fe0100f5fe0012ff000000078a151f750800390005", 0x26) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xf32}) syz_open_dev$tty1(0xc, 0x4, 0x1) 1m27.427047763s ago: executing program 9 (id=6412): r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x48) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) ptrace$peeksig(0x4209, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) ptrace$getsig(0x4202, 0x0, 0x8, 0x0) read(r1, &(0x7f0000000540)=""/157, 0x9d) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x80000e, 0x2072, 0xffffffffffffffff, 0xd0fb8000) ioctl$UFFDIO_MOVE(r1, 0xc028aa05, &(0x7f0000000000)={&(0x7f00001cc000/0x2000)=nil, &(0x7f0000c34000/0x3000)=nil, 0x2000, 0x1}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) r3 = userfaultfd(0x80801) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x9, 0x4, 0x4, 0x4, 0x0, 0x1, 0x1000}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x14, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r5, @ANYRES16], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r6, 0x1}, 0xc) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f00000006c0)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000a4c000/0x4000)=nil, 0x800000, 0x2}) write$P9_RVERSION(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="1300000065fcff060000000600395032303030493242b02fe6224953559ec9399647450300000000000000d699bb50850c000000000000002a1b868b46a46b3bee1cc8c0b418481ca2388a54f39bb9fef5fcbef6614902de4300800000d3aad698293f027735ccf18f4c090a2f65d8ae036871db23708658"], 0x13) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000004c0)={&(0x7f000056c000/0x4000)=nil, &(0x7f00006bc000/0x4000)=nil, 0x4000, 0x2}) execve(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000003c0)={[&(0x7f00000000c0)='!,[*(%#-\xff', &(0x7f00000001c0)='9p\x00', &(0x7f0000000200)='9P2000', &(0x7f0000000240)='\x00', &(0x7f00000002c0)='9p\x00', &(0x7f0000000400)='\x87\x00', &(0x7f0000000440)='[)%\x00', &(0x7f0000000100)='\t2\x00', &(0x7f0000000300)='\x00', &(0x7f0000000380)='(^-{(%]\x00']}) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000500), &(0x7f0000000540)=0x4) mount$9p_fd(0x0, &(0x7f0000000280)='./cgroup\x00', &(0x7f0000000340), 0x520c445, &(0x7f0000000480)=ANY=[@ANYBLOB='trahs=fd,rfdn@~', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',\x00']) 1m26.498740022s ago: executing program 9 (id=6414): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newsa={0x180, 0x10, 0x1, 0xfffffffe, 0xfe, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x1ff, 0xa00, 0x0, 0xb0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1}, {0x2, 0x2}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_auth={0x48, 0x1, {{'streebog512-generic\x00'}}}]}, 0x180}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 1m26.397801129s ago: executing program 9 (id=6416): mkdir(&(0x7f0000000100)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000600)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000800)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000540)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x80003, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=@newlink={0x54, 0x10, 0x401, 0x70bd2d, 0xb83, {0x0, 0x0, 0x0, 0x0, 0x18488}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @rand_addr=' \x01\x00'}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x2000c830}, 0x4080) r2 = fsopen(&(0x7f0000000300)='securityfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x1, 0x8b) fsconfig$FSCONFIG_SET_FLAG(r2, 0x5, &(0x7f00000020c0)='ro\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x18, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, r5, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24000050}, 0x80) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r3) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x29, 0x40, 0xbf, 0x4, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x1, 0x700, 0xd, 0xfffffff8}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r6, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x7c, r7, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x440c4) 1m25.916421909s ago: executing program 9 (id=6417): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0x8}, 0x1}}, @TCA_MPLS_PROTO={0x6}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x100000002) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = syz_open_dev$audion(&(0x7f0000000100), 0x100, 0x80001) write$apparmor_current(r5, &(0x7f0000000140)=@hat={'changehat ', 0x1, 0x5e, ['/dev/sequencer\x00', '#\xa2-\\&/\x00', '/dev/sequencer\x00', '/dev/ptmx\x00']}, 0x4c) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @rand_addr=0x3}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f00000008c0)={'syztnl2\x00', r7, 0x7800, 0x22b384db60457e3a, 0x9, 0x6, {{0x5, 0x4, 0x1, 0x36, 0x14, 0x65, 0x0, 0xea, 0x2f, 0x0, @broadcast, @rand_addr=0x64010101}}}}) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) 1m21.814704549s ago: executing program 9 (id=6423): r0 = socket$inet6(0x10, 0x3, 0x0) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r0, 0xc0105866, &(0x7f00000004c0)={&(0x7f0000000000)=0x9, 0x3, &(0x7f0000000300)=[{}, {}], &(0x7f0000000480)}) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7fce1dca24e3ee4c89a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d83104000000fda542e718f94b929ade", 0x55}], 0x1}, 0x20048000) write(r0, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000003100f000ee1000c08000b0000000000", 0x24) 1m21.716219913s ago: executing program 38 (id=6423): r0 = socket$inet6(0x10, 0x3, 0x0) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r0, 0xc0105866, &(0x7f00000004c0)={&(0x7f0000000000)=0x9, 0x3, &(0x7f0000000300)=[{}, {}], &(0x7f0000000480)}) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7fce1dca24e3ee4c89a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d83104000000fda542e718f94b929ade", 0x55}], 0x1}, 0x20048000) write(r0, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000003100f000ee1000c08000b0000000000", 0x24) 2.771389415s ago: executing program 4 (id=6847): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CDROMVOLCTRL(r0, 0x30d, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000006180)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0x9, 0xfffffffffffffffd, 0x6, 0x5, {0x2, 0x0, 0xb, 0xfffc, 0x0, 0x1, 0x0, 0xfffffffc, 0x120, 0x2000, 0xa8, r3, r4, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000000440)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0xffffffff9046dce8, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x3002a8d, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000019680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20004855) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x4, &(0x7f0000000000)=0x7f, 0x4) writev(r5, &(0x7f00000006c0)=[{&(0x7f0000000540)="40261d95e8d796d890262b25d04ee2e4c83b7fdaf48b067602824a540ec89a50ba1613fb05a5533e3f2dc9e6", 0x2c}], 0x1) ioctl$TCSETSF2(r5, 0x402c542d, &(0x7f0000000000)={0x2, 0x2, 0x5fd69280, 0x6, 0x6, "2febb950ea33f268654a9e60dc6fcc71eb3150", 0x1, 0x9600}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, 0x3c, 0x2, 0x70bd2c, 0x25dfdbfc, {0x5}, [@typed={0x4, 0x12b}, @typed={0x14, 0x5f, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4051) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002bbd7000000000000200000008000300", @ANYRES32, @ANYBLOB='\b\x00gA'], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r9 = openat$hpet(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_route(r9, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@getnexthop={0x1c, 0x6a, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NHA_GROUPS={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4040040) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r6, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4) 2.558317613s ago: executing program 4 (id=6848): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0x1000001, 0x5069f481, 0xfffe, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) write$FUSE_STATFS(r2, &(0x7f0000000480)={0x60, 0xfffffffffffffffe, r1, {{0xffffffffffffff6a, 0xb4e1, 0x6, 0x3, 0xb, 0x5, 0x400, 0x8000}}}, 0x60) io_submit(r3, 0x3, &(0x7f0000000980)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r2, &(0x7f00000000c0)='!', 0x1, 0x407f0b00}, &(0x7f0000000400)={0x500, 0x0, 0x0, 0x3, 0x5, 0xffffffffffffffff, &(0x7f0000000340)="8661945a7ab4d8adcb49754bbb608a644c9e", 0x12, 0x8000000000000001, 0x0, 0x1}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0xf, 0xffffffffffffffff, 0x0, 0x0, 0x80000000, 0x0, 0x1}]) dup3(r2, r0, 0x0) 2.396864375s ago: executing program 1 (id=6851): mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x9, 0x3, 0x334, 0x130, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x26c, 0xffffffff, 0xffffffff, 0x26c, 0xffffffff, 0x3, &(0x7f0000000040), {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @local, [0xffffffff, 0xffffffff, 0x0, 0xffffff00], [0x0, 0x0, 0xff, 0xffffffff], 'veth0_to_team\x00', 'geneve1\x00', {0xff}, {0xff}, 0x4, 0x7f, 0x4}, 0x0, 0xc8, 0x130, 0x0, {}, [@common=@hl={{0x24}, {0x1, 0x6}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xc, 0x200, 0x36, 0x0, 'netbios-ns\x00', 'syz1\x00', {0x9}}}}, {{@uncond, 0x0, 0xd4, 0x13c, 0x0, {}, [@common=@frag={{0x30}, {[0x2, 0x4], 0x5, 0x2, 0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x19, 0x5, 0x10000, 0x2, 'snmp\x00', 'syz1\x00', {0x3}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x390) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)="303132333a616263643a30102765", 0xe) 2.396130897s ago: executing program 2 (id=6852): setns(0xc9, 0x0) r0 = socket(0x8, 0x5, 0x5) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x40106183, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 2.395829463s ago: executing program 2 (id=6853): setns(0xc9, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x100) recvmmsg(r0, &(0x7f0000003f00)=[{{0x0, 0x0, 0x0}, 0x10000}], 0x1, 0x12000, 0x0) r1 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x1e) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000080)='./file0\x00') unlink(&(0x7f00000002c0)='./file0\x00') link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000000)='./file0\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c00, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) r6 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) sendto$unix(r6, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0xfffffffffffffeb8, 0x800, 0x0, 0x0) recvfrom(r6, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x1, 0x0, 0xffffffffffffffb5) ioctl$int_in(r2, 0x5452, &(0x7f0000000180)=0x2) fcntl$setsig(r2, 0xa, 0x12) ppoll(&(0x7f0000000140)=[{r3, 0xc002}], 0x1, 0x0, 0x0, 0x0) r7 = dup2(r2, r3) fcntl$setown(r7, 0x8, r1) tkill(r1, 0x13) r8 = socket(0x8, 0x5, 0x5) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r8, 0x8983, &(0x7f0000000240)={0x3, 'bridge_slave_0\x00', {0x5}, 0x1}) ioctl$VFAT_IOCTL_READDIR_BOTH(r8, 0x40106183, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 2.302887002s ago: executing program 1 (id=6854): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3c}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) epoll_create1(0x80000) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0x0, 0x7, 0x41, 0x0, 0x83, "00000000000000000000ffff00"}) umount2(&(0x7f0000000280)='./file0\x00', 0x3) mkdir(&(0x7f0000000100)='my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='my_configfs/usb_gadget/g1/functions/mass_storage.usb0/lun.0/file\x00', 0x1, 0x0) write(r2, &(0x7f0000000f00)='file0', 0x5) 2.198136953s ago: executing program 4 (id=6855): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x90004) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x1, 0x50, 0xffffffffffffffff, 0x0) r1 = socket(0x2c, 0x3, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) syz_io_uring_setup(0x4ad9, 0x0, 0x0, 0x0, &(0x7f0000000000)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000080)={0x2, 0x4e25, @multicast1}, 0x4) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0xffffff8c, 0x200000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="1f0000000000000000000000460000008500000011000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) accept4(r0, &(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x0, 0x800) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="043e1301", @ANYRES8, @ANYRESDEC=0x0, @ANYBLOB="7ff5d798a5e24a1a893e948c6a7c64722274aab33ee53363e580138b12627c3572becfab1ee1a26e6f14c4eb632b3edd6e45c15b80e9eb9e0c5285009885f9c78a4635bba15c7f1b70c199e72b70c5359e13dad806d7e2931503e002b8aa2bae1823d37280af8d078bdd981a824e9b145afbdcb85fc2a5c4838fff47e4fd18ed55f75a6aaade27d3ea08809b67840d83703f92e907ec3fc45f7c0652cd2e71cb6f66e454f0ef5b3c6b", @ANYRES64], 0x16) openat$sysfs(0xffffffffffffff9c, 0x0, 0x42, 0x0) 1.957907403s ago: executing program 2 (id=6856): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CDROMVOLCTRL(r0, 0x30d, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000006180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0x9, 0xfffffffffffffffd, 0x6, 0x5, {0x2, 0x0, 0xb, 0xfffc, 0x0, 0x1, 0x0, 0xfffffffc, 0x120, 0x2000, 0xa8, r3, r4, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000000440)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0xffffffff9046dce8, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x3002a8d, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000019680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20004855) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x4, &(0x7f0000000000)=0x7f, 0x4) writev(r5, &(0x7f00000006c0)=[{&(0x7f0000000540)="40261d95e8d796d890262b25d04ee2e4c83b7fdaf48b067602824a540ec89a50ba1613fb05a5533e3f2dc9e6", 0x2c}], 0x1) ioctl$TCSETSF2(r5, 0x402c542d, &(0x7f0000000000)={0x2, 0x2, 0x5fd69280, 0x6, 0x6, "2febb950ea33f268654a9e60dc6fcc71eb3150", 0x1, 0x9600}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, 0x3c, 0x2, 0x70bd2c, 0x25dfdbfc, {0x5}, [@typed={0x4, 0x12b}, @typed={0x14, 0x5f, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4051) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002bbd7000000000000200000008000300", @ANYRES32, @ANYBLOB='\b\x00gA'], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r9 = openat$hpet(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_route(r9, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@getnexthop={0x1c, 0x6a, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NHA_GROUPS={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4040040) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r6, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4) 1.786225746s ago: executing program 8 (id=6858): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x4044, &(0x7f0000000140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=@mangle={'mangle\x00', 0x10, 0x6, 0x4d0, 0x190, 0xc8, 0xc8, 0x190, 0x190, 0x408, 0x408, 0x408, 0x408, 0x408, 0x6, 0x0, {[{{@ipv6={@local, @ipv4={'\x00', '\xff\xff', @multicast1}, [], [], 'virt_wifi0\x00', 'veth0_to_bond\x00', {}, {}, 0x2c, 0x0, 0x6}, 0x0, 0xa4, 0xc8, 0x0, {0x7a00000000000000}}, @HL={0x24}}, {{@ipv6={@loopback, @mcast2, [0x0, 0x0, 0xffffffff], [], 'pimreg\x00', 'veth1_macvtap\x00', {}, {}, 0x0, 0x25, 0x4}, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x0, 0xffffffff, 0xff], [0xffffff00, 0xffffffff, 0xff, 0xff000002], 'veth0_virt_wifi\x00', 'ip6tnl0\x00', {0xff}, {0xff}, 0x11, 0x8, 0x5, 0x22}, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@private1, @loopback, [0xff, 0x0, 0x0, 0xffffff00], [0xffffff00, 0xff000000, 0xffffff00, 0xff], 'bond_slave_0\x00', 'erspan0\x00', {0xff}, {0xff}, 0x2b, 0x3, 0x0, 0x20}, 0x0, 0xa4, 0xe8}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@local, 0x80, 0x1}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x52c) 1.786074197s ago: executing program 8 (id=6859): setns(0xc9, 0x0) r0 = socket(0x8, 0x5, 0x5) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x400261f2, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 1.657127735s ago: executing program 8 (id=6860): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x2, @loopback, 0x4000004}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmsg$can_bcm(r2, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x10002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) getgid() sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x101400}, 0xa5, 0x5, 0x10000000}}]}}]}, 0x58}}, 0x44080) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x1000000, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xfff}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x1}]}}]}, 0x48}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0x0, 0x11, 0x148, 0xb8, 0x0, 0x98c, 0x2a8, 0x2a8, 0xb8, 0x2a8, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010102, @multicast2, 0x0, 0xff000000, 'wg1\x00', 'ip6tnl0\x00', {}, {}, 0x67, 0x3, 0x2}, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x7fffffff, {0x8000}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0xff, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x0, 0x1}, 0x0, 0x94, 0xf4, 0x0, {}, [@common=@ttl={{0x24}, {0x2, 0x40}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x5, 0x3, 0x0, 0x6, 0x1], 0x1, 0x1}, {0x1, [0x1, 0x0, 0x0, 0x4, 0x1, 0x3], 0x0, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x29c) getsockopt$inet_tcp_buf(r1, 0x6, 0x1f, &(0x7f00000007c0)=""/4096, &(0x7f00000017c0)=0x1000) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) 1.656533416s ago: executing program 2 (id=6861): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) mprotect(&(0x7f00001b2000/0x3000)=nil, 0x3000, 0x8) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r2, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000003c0), 0x0) sendmsg$inet6(r0, 0x0, 0x4048043) r3 = dup(r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e22, 0x4, @remote}}, 0x3, 0xfffc, 0x1, 0x2, 0x1c, 0x8, 0xff}, 0x9c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x1, 0xf06, 0x0, 0xac, 0x81, 0x5}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0x883b, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) 1.548052854s ago: executing program 2 (id=6862): socket$netlink(0x10, 0x3, 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x3200006, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000000), 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') lseek(r2, 0x2000, 0x0) r3 = syz_usbip_server_init(0x5) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x80, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x40}}, 0x0) writev(r3, &(0x7f0000000000), 0x0) r5 = socket(0x8000000010, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001300050027bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000001060400140003007665746830000000000000000089f6001400168053"], 0x48}}, 0x48000) write(r5, &(0x7f00000002c0)="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", 0xfc) r7 = socket(0x840000000002, 0x3, 0x100) connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r7, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r8, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x6, {0x2, 0x4e20, @rand_addr=0x64010101}}) 1.483160412s ago: executing program 1 (id=6863): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000c40)=@mgmt_frame=@reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x27}, @device_a, @device_b, @from_mac=@device_b, {0x9, 0x7}}, 0x4, 0x44, @default, @void, @val={0x2d, 0xfffffffffffffd82, {0x1000, 0x1, 0x4, 0x0, {0x6, 0x84d, 0x0, 0x9, 0x0, 0x1, 0x1, 0x1}, 0x300, 0xc, 0x8}}, [{0xdd, 0x83, "4fd5d9b8b8c692382e53c8aa5a0737794791304c57e09b7e24784e63085e1ec755eccd145d70bdf466f4dc8421c526920848ab63207aaafb9b6acc71bb8b61bcedd78a94bfaeb40e7257936db7d8414f7c63effe4fbc799f957c627c7fd2fa9aa9def9e3a389083b1d432ff3cfaee7f8953f62a9841b366e40a0575ea4fd20996fef70"}, {0xdd, 0x8d, "a89420374b2b167fcd48ef579771d51acfe89068f3cbcc228b67390a035dd5a47d71d1ac42689ec28f39d4f700dc4818318cedd72777f8a6c3a17fc5d6a08185f38ed3a6251a0777d5a023861d895a8c429746947352b5c5212ec2c07ab9402f99a148720b917127abf07514e217db2345b0f0cb3b31ed3599758fc6eb7c5804a3fa7a0444ed328b710c9d8ac7"}, {0xdd, 0xd3, "ab591a932a6c27afd9c21a224d2b59703b062cefe12cf8414f929ae65964b837f54b78789ead0ed5e4039497433556ccbd4b6cf6e5a186750d52e3359711d56e1332897f04a54dc1a412e4eea9523bb7703cf9d82db7f32bd503b162524253b0234d7db0a45db66061609b8649ffcdb96432e39bd92ff6c86b76a5ca7e79dc95b8641fe28c73398455ba8ff865be026b637c1553b4d64790caa2138bf6f09fe49a47e0883aad09111a319151c48dc3d24f151ab24023359dba89223f472563066bc2b173edc378bd5536758d5d163c579e97ea"}, {0xdd, 0xcb, "bdbe9b1e5aa08004a5fa830c96d1ab28e7e1789656b08a6c7370c4cf6176f9a583c9bb2957d130db30e987dd6923909cbd1cb7637c8674264c5a3c5017d067e4f068a41e2d4a592762861b131d2433f812dd215e7966ba775077d6925ecbc564af6cfb5032856801e79ad1fcb7a084bf20f8ff5d28bced50d767a7418651295ead843beca3143b0032d63595b4473b351511f22af07f76b0b210a58a425a35c522dcf36aa846e96a7978b5009caf0c94ba5885584e2f5e3e2791a42abcb34f444b7bd4d21d7ff6b57a7c0a"}, {0xdd, 0xf7, "cf33a8412a74800d6f9a79a81fb78b107b0a5bf109af71f3fa49a9f94090b57211e4205536297893455bb70c9b8cf9fd9f04434506458e0cfe32310b3f2effde9c20a84825d4295dfe55a9236c55b8d93a4aea771b4d8e578dd285a5fcb1a788eef24c476a3bef2d71b26024775a848e3d981393bddaea990fcfb28ef182e48b221da9129666dfa7039956fb28638629b5a420bdcd97735c7e959a9527c75d99fcb39949e18a171d01c0058b954b01fc8db64a92049ce8ef9a1f3b83c0c1d4b0be500e8646550ff14095716edd61859674347765a38d1149e42fe8a85b1e03e007439a07e08702eb7b403637c321f78251920ac8aa688e"}, {0xdd, 0x61, "ad3bc42da9c0599d06f08db8c1c6d1316cebb804d1262fc35e7e45dcd7d39d682f6d316bbd51a436b3f2c8030e2c232b8ea107ad8cccdbf3f70c22f06f71ba6e8670d98899ff953dff00019e94875582b3b5e3b073eb39601f4e9e3a436b4cddf3"}, {0xdd, 0x7f, "04a9ac9e52e550a4d4ba1663e7ac238f06d08d7b3652d5b8cce628ce7152b65569ca326847b04c265025dc543911dfdb4530f1075faca994da08bf3532519d8699542447fec8f2055e65883e573e7f7d5572385c48f832a98d69fe6f91984bd302f580225c16e67977d3d8913c94aeb8b2a573a06819a21c8d82fa86b88f86"}]}, 0x4cd) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 1.248304421s ago: executing program 4 (id=6864): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000006000079b005000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) dup3(r2, r0, 0x80000) pipe(&(0x7f0000000140)) statx(0xffffffffffffffff, 0x0, 0x400, 0x80, &(0x7f00000015c0)) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000300)={0xa, 0x2, 0xfffffffc, @empty, 0x80000001}, 0x1c) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r5, &(0x7f0000000340)="fb", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x2e4ca021, @loopback, 0x1}}, 0x0, 0x0, 0x31, 0x0, "10baa70a93289349d889de25b87376f6622d337642b89005000000000000001b7ef6619dd6b2ca4edb6f7debd38b6d889a8c986b33e249c3157f1f370dfd6700"}, 0xd8) sendto$inet6(r5, &(0x7f00000019c0)='z', 0x1, 0x39165445502e75, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1fd}}, './file0/file0\x00'}) ioctl$PPPIOCGL2TPSTATS(r7, 0x80487436, &(0x7f0000000440)="c0c1d361ad54025b84e109cdf0770f25e8d33368409bfab0d2a557d62ea1c3b04ca0af1e184958ba7a7cadddcd41cd0673de33615532f5ac14271bb8d35c5ca68ce4f9de1be3789557d7620c5e04e8b4d7656d120e6108") r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x9d) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1b0000000000", @ANYRES32=0x0, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r8}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 835.73133ms ago: executing program 4 (id=6865): r0 = getpid() sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) capset(&(0x7f00000000c0)={0x20080522, r0}, &(0x7f0000000280)={0x0, 0x0, 0x7, 0x81, 0xf}) socket$inet6(0xa, 0x3, 0x6) ptrace$peeksig(0x4209, r0, &(0x7f0000000080)={0x7fffffff, 0x0, 0x8}, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}, {}]) mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0203fe020a0000000000b441b630e9c75b3941dc14a45b0000000000000300060000000000020000000000000000000000000000004200010000000000000009007fffffff030005000000000002000000ac1414aa0000000000000000a4ebb8fa5e154559897bbd2303b7dff77035a64b2189b8f9d0b9d7919dfb5dfd"], 0x50}, 0x1, 0x7}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r1, &(0x7f0000000000)="1c0000001a005f0214f9f407000904ff80000000fe01000000000000", 0x1c) openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/time\x00') r3 = inotify_init() r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) r5 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000440)={0x5, @win={{0x735, 0x9, 0xe1, 0xfffffff9}, 0x1, 0xa, 0x0, 0xfffff241, 0x0, 0xcf}}) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000004780)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000170081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r4, @ANYRES32=r6, @ANYBLOB="05"], 0x10) r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) write$char_usb(r8, &(0x7f00000008c0)='-0', 0x2) close_range(r3, 0xffffffffffffffff, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="3103feffffff000000000800000008000300", @ANYRES32=r12, @ANYBLOB="090006"], 0x2c}, 0x1, 0x0, 0x0, 0x22004094}, 0x4080) 762.026769ms ago: executing program 1 (id=6866): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x24040084) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x3c, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x2}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1240000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 687.275508ms ago: executing program 4 (id=6867): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r0, &(0x7f0000000540)="05000000018000b362c7a4f513c2cbe2c2e58c236389b2ec27c2898c15cb0a013d71f8c76015b79625ccbe6c8891e78aacfea1a4863a7bd261841ad37eac90bfd6d1cc8483e9d96eb25cc7051aa8838462d285c67952ae85fc834b90b6e8d17fda4639ffea121ce2e1286e94d6499e8740290c1d702df349ed4e97b10d0895b02a14a0e70115410b72465e3437bfc116b63481fd1b303f8eab92824c3c8f14ea288fea8e2fc55deae3", 0xa9) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) r2 = openat$ttynull(0xffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000380)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0xfffffffffffffeef, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) chroot(&(0x7f0000000200)='./file0\x00') 630.228243ms ago: executing program 1 (id=6868): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x1300, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb8}}, 0x840) 624.430589ms ago: executing program 1 (id=6869): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) timerfd_create(0x8, 0x80000) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r1, 0xc0207511, &(0x7f0000000240)) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000000c0)={@rand_addr, 0x0}, &(0x7f0000000340)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x17, &(0x7f0000001140)={&(0x7f0000000640)=ANY=[@ANYBLOB="a8000000100003052abd70000800000000000000", @ANYRES32=r2, @ANYBLOB="3a000000a801020008000500", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB='\b\x00\b\x00', @ANYRES32=r1, @ANYBLOB="0800030004000000080003000d00000008000800", @ANYRES32=r1, @ANYBLOB='\b\x00\b\x00', @ANYRES32=r1, @ANYBLOB='\b\x00\b\x00', @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB], 0xa8}}, 0x800) r3 = socket$inet_udp(0x2, 0x2, 0x0) fstatfs(r3, &(0x7f0000000540)=""/175) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet(r3, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x810) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000100)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x14) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000180)={0x3, 0x204, 0xe, 0xe, r7}, 0x10) io_uring_setup(0x79c4, &(0x7f00000001c0)={0x0, 0x701e, 0x400, 0x2, 0x64}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) io_setup(0x8, &(0x7f0000000600)) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x2, 0x3b9ac9bf, 0x0, 0x0, 0x0, 0x0, 0x5a6c103, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffd}) 557.579152ms ago: executing program 8 (id=6870): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) mprotect(&(0x7f00001b2000/0x3000)=nil, 0x3000, 0x8) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r2, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000003c0), 0x0) sendmsg$inet6(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r3 = dup(r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e22, 0x4, @remote}}, 0x3, 0xfffc, 0x1, 0x2, 0x1c, 0x8, 0xff}, 0x9c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x1, 0xf06, 0x0, 0xac, 0x81, 0x5}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0x883b, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) 458.486735ms ago: executing program 8 (id=6871): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="1400fff51000010000000000000000000700000a20000000000a01040000000000000000010080000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a312000000098000000060a010400000000000000000100000008000b400000000070000480340001800b000100657874686472000024000280080001400000000c080003400000003b08000440000000220500020007000000380001800c0001006269747769736500280002800800034000000004080001400000001408000240000000120800064000000005040005800900010073797a30"], 0x10c}}, 0x0) 458.136791ms ago: executing program 8 (id=6872): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000001cc0), 0x800, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r4, 0x80044d06, &(0x7f0000002180)) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r6 = gettid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@can_newroute={0x14c, 0x18, 0x1, 0x170bd29, 0x25dfdbfd, {0x1d, 0x1, 0x4}, [@CGW_CS_CRC8={0x11e, 0x6, {0x1, 0xe, 0x3, 0x1, 0xff, "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", 0x0, "5c8d586b2a88d818b56d2a5e15c8a95d29e5b2ea"}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x1}, 0x8, 0x0, 0x0, 0x0, "a38c26ec238c4259"}, 0x2}}]}, 0x14c}}, 0x4884) tkill(r6, 0xb) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031, 0x60}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 0s ago: executing program 2 (id=6873): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3c}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) umount2(&(0x7f0000000280)='./file0\x00', 0x3) mkdir(&(0x7f0000000100)='my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='my_configfs/usb_gadget/g1/functions/mass_storage.usb0/lun.0/file\x00', 0x1, 0x0) write(r1, &(0x7f0000000f00)='file0', 0x5) kernel console output (not intermixed with test programs): usb 54-1: device descriptor read/8, error -110 [ 844.811435][T28783] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6109'. [ 845.128404][T17282] usb usb54-port1: attempt power cycle [ 845.252549][T28822] netlink: 32 bytes leftover after parsing attributes in process `syz.8.6120'. [ 845.312344][T28829] block nbd0: reconnected socket [ 845.322861][ T65] block nbd0: Receive control failed (result -32) [ 845.601539][T28862] FAULT_INJECTION: forcing a failure. [ 845.601539][T28862] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 845.606114][T28862] CPU: 3 UID: 0 PID: 28862 Comm: syz.8.6130 Tainted: G L syzkaller #0 PREEMPT(full) [ 845.606132][T28862] Tainted: [L]=SOFTLOCKUP [ 845.606137][T28862] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 845.606144][T28862] Call Trace: [ 845.606148][T28862] [ 845.606153][T28862] dump_stack_lvl+0x100/0x190 [ 845.606169][T28862] should_fail_ex.cold+0x5/0xa [ 845.606182][T28862] _copy_from_iter+0x1f4/0x1690 [ 845.606202][T28862] ? __lock_acquire+0x49f/0x1a40 [ 845.606226][T28862] ? __pfx__copy_from_iter+0x10/0x10 [ 845.606252][T28862] ? _parse_integer_limit+0x1ac/0x220 [ 845.606276][T28862] tun_get_user+0x265/0x3c20 [ 845.606291][T28862] ? aa_file_perm+0x7f3/0x14d0 [ 845.606312][T28862] ? __pfx_tun_get_user+0x10/0x10 [ 845.606325][T28862] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 845.606342][T28862] ? find_held_lock+0x2b/0x80 [ 845.606356][T28862] ? tun_get+0x191/0x370 [ 845.606366][T28862] ? tun_get+0x191/0x370 [ 845.606380][T28862] tun_chr_write_iter+0xdc/0x200 [ 845.606395][T28862] vfs_write+0x6ac/0x1050 [ 845.606406][T28862] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 845.606420][T28862] ? __pfx_vfs_write+0x10/0x10 [ 845.606429][T28862] ? find_held_lock+0x2b/0x80 [ 845.606451][T28862] ksys_write+0x12a/0x250 [ 845.606461][T28862] ? __pfx_ksys_write+0x10/0x10 [ 845.606470][T28862] ? ksys_write+0x1ac/0x250 [ 845.606480][T28862] ? __pfx_ksys_write+0x10/0x10 [ 845.606493][T28862] __do_fast_syscall_32+0xe7/0x970 [ 845.606508][T28862] ? lockdep_hardirqs_on+0x78/0x100 [ 845.606521][T28862] do_fast_syscall_32+0x32/0x70 [ 845.606536][T28862] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 845.606550][T28862] RIP: 0023:0xf7f98fec [ 845.606564][T28862] Code: Unable to access opcode bytes at 0xf7f98fc2. [ 845.606569][T28862] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 845.606581][T28862] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 845.606588][T28862] RDX: 000000000000007a RSI: 0000000000000000 RDI: 0000000000000000 [ 845.606595][T28862] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 845.606601][T28862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 845.606608][T28862] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 845.606621][T28862] [ 845.701106][ T42] audit: type=1326 audit(1784995791.462:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28864 comm="syz.4.6131" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75fec code=0x7ffc0000 [ 845.711602][ T42] audit: type=1326 audit(1784995791.462:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28864 comm="syz.4.6131" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75fec code=0x7ffc0000 [ 845.732235][T17282] usb usb54-port1: unable to enumerate USB device [ 845.733499][ T42] audit: type=1326 audit(1784995791.472:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28864 comm="syz.4.6131" exe="/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf7f75fec code=0x7ffc0000 [ 845.743182][ T42] audit: type=1326 audit(1784995791.472:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28864 comm="syz.4.6131" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75fec code=0x7ffc0000 [ 845.755094][ T42] audit: type=1326 audit(1784995791.472:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28864 comm="syz.4.6131" exe="/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf7f75fec code=0x7ffc0000 [ 845.764376][ T42] audit: type=1326 audit(1784995791.472:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28864 comm="syz.4.6131" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75fec code=0x7ffc0000 [ 845.773271][ T42] audit: type=1326 audit(1784995791.472:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28864 comm="syz.4.6131" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75fec code=0x7ffc0000 [ 845.782845][ T42] audit: type=1326 audit(1784995791.472:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28864 comm="syz.4.6131" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75fec code=0x7ffc0000 [ 845.790594][ T42] audit: type=1326 audit(1784995791.472:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28864 comm="syz.4.6131" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f75fec code=0x7ffc0000 [ 847.004089][T28923] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 848.084677][T28951] __nla_validate_parse: 3 callbacks suppressed [ 848.084689][T28951] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6152'. [ 848.223772][T28961] fuse: fd is not a fuse device [ 848.518653][T28968] netlink: 'syz.1.6157': attribute type 1 has an invalid length. [ 848.521142][T28967] netlink: 'syz.1.6157': attribute type 1 has an invalid length. [ 848.532468][T28968] bond2: entered promiscuous mode [ 848.534507][T28968] 8021q: adding VLAN 0 to HW filter on device bond2 [ 848.551939][T28967] bond2: (slave bridge0): making interface the new active one [ 848.554353][T28967] bridge0: entered promiscuous mode [ 848.556798][T28967] bond2: (slave bridge0): Enslaving as an active interface with an up link [ 849.598400][T28996] overlayfs: failed to resolve './cgroup': -2 [ 850.337478][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 850.668736][T29018] gtp1: entered promiscuous mode [ 850.680086][T29018] gtp1: entered allmulticast mode [ 850.770103][T29024] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6172'. [ 850.781192][T29024] block nbd0: reconnected socket [ 850.788170][ T65] block nbd0: Receive control failed (result -32) [ 850.866987][T13004] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 850.879396][T13004] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 850.885958][T13004] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 850.896854][T13004] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 850.899794][T13004] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 851.062406][T21663] syz_tun (unregistering): left allmulticast mode [ 851.064923][T21663] syz_tun (unregistering): left promiscuous mode [ 851.067193][T21663] bridge0: port 1(syz_tun) entered disabled state [ 851.252785][T29026] wlan0 speed is unknown, defaulting to 1000 [ 851.499288][T29048] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(10) [ 851.501856][T29048] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 851.504874][T29048] vhci_hcd vhci_hcd.0: Device attached [ 851.616851][T29026] bridge0: port 1(bridge_slave_0) entered blocking state [ 851.621376][T29026] bridge0: port 1(bridge_slave_0) entered disabled state [ 851.625249][T29026] bridge_slave_0: entered allmulticast mode [ 851.628269][T29026] bridge_slave_0: entered promiscuous mode [ 851.634986][T29026] bridge0: port 2(bridge_slave_1) entered blocking state [ 851.638209][T29026] bridge0: port 2(bridge_slave_1) entered disabled state [ 851.643642][T29026] bridge_slave_1: entered allmulticast mode [ 851.648130][T29026] bridge_slave_1: entered promiscuous mode [ 851.684002][T29026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 851.690709][T29026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 851.732317][T29026] team0: Port device team_slave_0 added [ 851.741517][T29026] team0: Port device team_slave_1 added [ 851.756962][T29026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 851.759689][T29026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 851.767543][T29026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 851.771813][T29026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 851.773923][T29026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 851.777509][T17282] usb 54-1: SetAddress Request (10) to port 0 [ 851.782482][T29026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 851.783919][T17282] usb 54-1: new SuperSpeed USB device number 10 using vhci_hcd [ 851.808115][T29026] hsr_slave_0: entered promiscuous mode [ 851.810425][T29026] hsr_slave_1: entered promiscuous mode [ 851.812454][T29026] debugfs: 'hsr0' already exists in 'hsr' [ 851.814222][T29026] Cannot create hsr debugfs directory [ 851.938906][T29064] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6179'. [ 852.130651][T29051] vhci_hcd: connection reset by peer [ 852.134996][ T13] vhci_hcd vhci_hcd.8: stop threads [ 852.136640][ T13] vhci_hcd vhci_hcd.8: release socket [ 852.139623][ T13] vhci_hcd vhci_hcd.8: disconnect device [ 852.208104][T29071] Invalid ELF header magic: != ELF [ 852.659977][T29026] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 852.664030][T29026] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 852.667591][T29026] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 852.672557][T29026] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 852.675738][T29026] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 852.682738][T29026] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 852.686379][T29026] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 852.692813][T29026] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 852.741785][T29026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 852.755612][T29026] 8021q: adding VLAN 0 to HW filter on device team0 [ 852.763608][ T9995] bridge0: port 1(bridge_slave_0) entered blocking state [ 852.766543][ T9995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 852.776925][ T9995] bridge0: port 2(bridge_slave_1) entered blocking state [ 852.779902][ T9995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 852.977445][ T5744] Bluetooth: hci2: command tx timeout [ 853.022650][ T5744] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 853.147834][T29097] gtp1: entered promiscuous mode [ 853.149550][T29097] gtp1: entered allmulticast mode [ 853.165593][T29026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 853.236453][T29097] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6184'. [ 853.239849][T29097] block nbd0: reconnected socket [ 853.242452][ T65] block nbd0: Receive control failed (result -32) [ 853.345434][T29026] veth0_vlan: entered promiscuous mode [ 853.356896][T29026] veth1_vlan: entered promiscuous mode [ 853.380710][T29026] veth0_macvtap: entered promiscuous mode [ 853.385156][T29026] veth1_macvtap: entered promiscuous mode [ 853.395196][T29026] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 853.403664][T29026] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 853.410424][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.414597][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.418428][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.422232][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.511781][ T8638] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 853.514222][ T8638] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 853.553272][ T9995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 853.570165][ T9995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 853.667085][T29115] bond0: (slave bond_slave_0): Releasing backup interface [ 853.673219][T29115] bond0: (slave bond_slave_1): Releasing backup interface [ 853.684097][T29115] team0: Port device team_slave_0 removed [ 853.697250][T29115] team0: Port device team_slave_1 removed [ 853.702047][T29115] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 853.705580][T29115] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 853.715800][T29115] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 853.727571][T29115] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 853.732216][T29115] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 853.838592][T13004] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 853.865937][T13004] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 853.877564][T13004] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 853.882187][T13004] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 853.904419][T13004] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 853.910024][T29115] bond3: (slave ip6gretap1): making interface the new active one [ 853.922587][T29115] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 854.069943][T29130] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6191'. [ 854.125444][T29133] gtp0: entered promiscuous mode [ 854.127877][T29133] gtp0: entered allmulticast mode [ 854.153455][T17471] IPVS: starting estimator thread 0... [ 854.156558][T29136] tipc: Started in network mode [ 854.158263][T29136] tipc: Node identity ac1414aa, cluster identity 4711 [ 854.160646][T29136] tipc: Enabled bearer , priority 10 [ 854.175781][T29141] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6192'. [ 854.183851][T29141] block nbd0: reconnected socket [ 854.214345][ T65] block nbd0: Receive control failed (result -32) [ 854.251515][T29124] wlan0 speed is unknown, defaulting to 1000 [ 854.261396][T29138] IPVS: using max 42 ests per chain, 100800 per kthread [ 854.378314][T29157] ffs_data_put(): freeing [ 854.420466][T29160] overlayfs: failed to resolve './file1': -2 [ 854.507187][ T13] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.703010][ T13] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.732568][T29124] bridge0: port 1(bridge_slave_0) entered blocking state [ 854.735361][T29124] bridge0: port 1(bridge_slave_0) entered disabled state [ 854.738951][T29124] bridge_slave_0: entered allmulticast mode [ 854.742272][T29124] bridge_slave_0: entered promiscuous mode [ 854.747269][T29124] bridge0: port 2(bridge_slave_1) entered blocking state [ 854.750118][T29124] bridge0: port 2(bridge_slave_1) entered disabled state [ 854.752902][T29124] bridge_slave_1: entered allmulticast mode [ 854.755845][T29124] bridge_slave_1: entered promiscuous mode [ 854.825645][ T13] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.860000][T29124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 854.864737][T29124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 854.939024][ T13] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.952705][T29124] team0: Port device team_slave_0 added [ 854.976768][T29124] team0: Port device team_slave_1 added [ 855.003449][T29124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 855.008940][T29124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 855.020958][T29124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 855.037617][T29124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 855.040094][T29124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 855.048767][T29124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 855.057470][ T5744] Bluetooth: hci2: command tx timeout [ 855.065849][T29168] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6200'. [ 855.093360][T29124] hsr_slave_0: entered promiscuous mode [ 855.098251][T29124] hsr_slave_1: entered promiscuous mode [ 855.101168][T29124] debugfs: 'hsr0' already exists in 'hsr' [ 855.106799][T29124] Cannot create hsr debugfs directory [ 855.229700][T16253] tipc: Node number set to 2886997162 [ 855.360530][ T13] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 855.559219][ T13] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 855.565250][ T13] bond0 (unregistering): Released all slaves [ 855.572391][ T13] bond1 (unregistering): Released all slaves [ 855.799721][ T13] tipc: Disabling bearer [ 855.808741][ T13] tipc: Left network mode [ 856.018978][T29124] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 856.042346][T29124] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 856.045054][T29124] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 856.072409][T29124] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 856.081321][T29124] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 856.093135][T29124] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 856.097674][ T5744] Bluetooth: hci3: command tx timeout [ 856.184677][T29124] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 856.206079][T29124] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 856.414666][ T5454] 8021q: adding VLAN 0 to HW filter on device eth21 [ 856.818679][T17282] usb 54-1: device descriptor read/8, error -110 [ 857.147641][ T5744] Bluetooth: hci2: command tx timeout [ 857.228039][T17282] usb usb54-port1: attempt power cycle [ 857.252961][T29124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 857.325366][ T13] hsr_slave_0: left promiscuous mode [ 857.329917][ T13] hsr_slave_1: left promiscuous mode [ 857.356041][ T13] veth0_vlan: left promiscuous mode [ 857.381411][T29202] syz.4.6205 (29202): drop_caches: 2 [ 857.585545][T29212] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6209'. [ 857.677283][T29124] 8021q: adding VLAN 0 to HW filter on device team0 [ 857.685713][ T8606] bridge0: port 1(bridge_slave_0) entered blocking state [ 857.688778][ T8606] bridge0: port 1(bridge_slave_0) entered forwarding state [ 857.714577][ T5454] 8021q: adding VLAN 0 to HW filter on device eth22 [ 857.752153][ T8606] bridge0: port 2(bridge_slave_1) entered blocking state [ 857.754672][ T8606] bridge0: port 2(bridge_slave_1) entered forwarding state [ 857.818233][T17282] usb usb54-port1: unable to enumerate USB device [ 858.159982][T29124] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 858.177621][ T5744] Bluetooth: hci3: command tx timeout [ 858.488750][T29124] veth0_vlan: entered promiscuous mode [ 858.524635][T29124] veth1_vlan: entered promiscuous mode [ 858.584946][T29124] veth0_macvtap: entered promiscuous mode [ 858.603868][T29124] veth1_macvtap: entered promiscuous mode [ 858.647639][T29256] gtp0: entered promiscuous mode [ 858.652064][T29256] gtp0: entered allmulticast mode [ 858.679825][T29124] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 858.690219][T29124] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 858.691476][T29264] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6213'. [ 858.700785][T29264] block nbd0: reconnected socket [ 858.714943][ T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.719942][ T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.726123][ T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.730331][ T12] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.797619][ T65] block nbd0: Receive control failed (result -32) [ 858.829975][ T8606] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 858.844360][ T8606] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 858.870252][ T7950] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 858.873203][ T7950] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 858.908920][T29269] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 859.028342][T29279] overlayfs: overlapping lowerdir path [ 859.076522][T29279] netlink: zone id is out of range [ 859.078764][T29279] netlink: zone id is out of range [ 859.080688][T29279] netlink: zone id is out of range [ 859.082420][T29279] netlink: zone id is out of range [ 859.084282][T29279] netlink: zone id is out of range [ 859.217582][ T5744] Bluetooth: hci2: command tx timeout [ 859.256223][T29279] input: syz0 as /devices/virtual/input/input43 [ 860.267985][ T5744] Bluetooth: hci3: command tx timeout [ 860.313150][T29302] gtp1: entered promiscuous mode [ 860.315548][T29302] gtp1: entered allmulticast mode [ 860.409095][T29302] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6223'. [ 860.416622][T29302] block nbd0: reconnected socket [ 860.427744][ T65] block nbd0: Receive control failed (result -32) [ 860.433317][T29314] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 860.440575][T29314] overlayfs: overlapping lowerdir path [ 860.470235][ T5454] 8021q: adding VLAN 0 to HW filter on device eth23 [ 860.516342][T29324] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6227'. [ 860.594997][T29327] veth0: entered promiscuous mode [ 860.619711][T29327] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6228'. [ 860.703555][T29349] FAULT_INJECTION: forcing a failure. [ 860.703555][T29349] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 860.724358][T29351] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6230'. [ 860.730645][T29349] CPU: 2 UID: 0 PID: 29349 Comm: syz.4.6229 Tainted: G L syzkaller #0 PREEMPT(full) [ 860.730682][T29349] Tainted: [L]=SOFTLOCKUP [ 860.730689][T29349] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 860.730699][T29349] Call Trace: [ 860.730705][T29349] [ 860.730712][T29349] dump_stack_lvl+0x100/0x190 [ 860.730735][T29349] should_fail_ex.cold+0x5/0xa [ 860.730756][T29349] _copy_to_user+0x32/0xd0 [ 860.730785][T29349] simple_read_from_buffer+0xcb/0x170 [ 860.730814][T29349] proc_fail_nth_read+0x1af/0x230 [ 860.730837][T29349] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 860.730862][T29349] ? rw_verify_area+0xce/0x6d0 [ 860.730886][T29349] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 860.730908][T29349] vfs_read+0x1e4/0xb40 [ 860.730938][T29349] ? __pfx_vfs_read+0x10/0x10 [ 860.730962][T29349] ? find_held_lock+0x2b/0x80 [ 860.731002][T29349] ? __fget_files+0x215/0x3d0 [ 860.731025][T29349] ? __fget_files+0x21f/0x3d0 [ 860.731049][T29349] ksys_read+0x12a/0x250 [ 860.731065][T29349] ? __pfx_ksys_read+0x10/0x10 [ 860.731089][T29349] do_int80_emulation+0x14b/0x720 [ 860.731116][T29349] asm_int80_emulation+0x1a/0x20 [ 860.731133][T29349] RIP: 0023:0xf71572eb [ 860.731148][T29349] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 860.731164][T29349] RSP: 002b:00000000f54164bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 860.731181][T29349] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54165d0 [ 860.731192][T29349] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 860.731201][T29349] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 860.731211][T29349] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 860.731221][T29349] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 860.731245][T29349] [ 860.732922][T29351] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 860.777241][T29354] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 860.790935][T29351] netdevsim netdevsim8 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 860.793539][T29354] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 860.834774][T29326] veth0: left promiscuous mode [ 860.859414][ T5454] 8021q: adding VLAN 0 to HW filter on device eth24 [ 860.864326][T17712] hsr0: entered promiscuous mode [ 860.870197][T29354] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6231'. [ 860.925736][ T42] kauditd_printk_skb: 82 callbacks suppressed [ 860.925747][ T42] audit: type=1800 audit(1784995806.682:982): pid=29359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.6231" name="bus" dev="tmpfs" ino=121 res=0 errno=0 [ 860.978619][T29351] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 860.981798][T29351] netdevsim netdevsim8 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 861.100639][T29351] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 861.104105][T29351] netdevsim netdevsim8 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 861.240997][T29351] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 861.244959][T29351] netdevsim netdevsim8 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 861.553134][T15494] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 861.556535][T15494] netdevsim netdevsim8 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 861.694502][T29393] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6236'. [ 861.697076][ T13] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 861.699929][ T13] netdevsim netdevsim8 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 861.729172][ T13] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 861.737964][ T13] netdevsim netdevsim8 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 861.787140][T15494] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 861.795366][T15494] netdevsim netdevsim8 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 862.075110][T29380] 9p: Bad value for 'wfdno' [ 862.213642][T29423] fuse: fd is not a fuse device [ 862.221087][T29426] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6244'. [ 862.338335][ T5744] Bluetooth: hci3: command tx timeout [ 862.480958][T29445] netlink: 'syz.4.6250': attribute type 8 has an invalid length. [ 862.484277][T29445] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6250'. [ 862.529970][T29445] bond0: entered promiscuous mode [ 862.529993][T29445] bond_slave_0: entered promiscuous mode [ 862.530176][T29445] bond_slave_1: entered promiscuous mode [ 862.534987][T29445] gretap0: entered promiscuous mode [ 862.546046][T29445] bond0: left promiscuous mode [ 862.546068][T29445] bond_slave_0: left promiscuous mode [ 862.546293][T29445] bond_slave_1: left promiscuous mode [ 862.552072][T29445] gretap0: left promiscuous mode [ 862.903144][T29467] netlink: 'syz.4.6253': attribute type 10 has an invalid length. [ 863.113996][T29477] netlink: set zone limit has 4 unknown bytes [ 863.237430][T29477] syzkaller0: entered promiscuous mode [ 863.239648][T29477] syzkaller0: entered allmulticast mode [ 863.476682][T29485] overlayfs: upper fs does not support file handles, falling back to index=off. [ 863.654321][T29516] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 863.655675][T29513] IPVS: stopping master sync thread 29516 ... [ 863.727498][ T3266] usb 14-1: new low-speed USB device number 2 using dummy_hcd [ 863.740723][ T42] audit: type=1326 audit(1784995809.502:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29525 comm="syz.4.6266" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f56fec code=0x0 [ 863.962272][T29548] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 864.001727][T29548] team0: Port device xfrm0 added [ 864.011906][T29548] tipc: Enabled bearer , priority 0 [ 864.056945][ T3266] usb 14-1: config 0 has an invalid interface number: 55 but max is 0 [ 864.086767][T29551] bond4 (unregistering): Released all slaves [ 864.535628][ T3266] usb 14-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 864.702839][ T3266] usb 14-1: config 0 has no interface number 0 [ 864.705312][ T3266] usb 14-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 864.711578][ T3266] usb 14-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 864.715865][ T3266] usb 14-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 864.719237][ T3266] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.725497][ T3266] usb 14-1: config 0 descriptor?? [ 864.730235][T29494] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 864.738237][ T3266] ldusb 14-1:0.55: Interrupt in endpoint not found [ 864.814137][T29577] gtp0: entered promiscuous mode [ 864.816169][T29577] gtp0: entered allmulticast mode [ 864.865447][T29579] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6277'. [ 864.869626][T29579] block nbd0: reconnected socket [ 864.874657][ T65] block nbd0: Receive control failed (result -32) [ 864.942043][ T9] usb 14-1: USB disconnect, device number 2 [ 864.971530][T29587] syzkaller0: entered promiscuous mode [ 864.973646][T29587] syzkaller0: entered allmulticast mode [ 864.978961][T29585] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6279'. [ 864.982101][T29587] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6279'. [ 865.267700][T29593] fuse: fd is not a fuse device [ 865.500121][ T42] audit: type=1326 audit(1784995811.252:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29594 comm="syz.1.6282" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35fec code=0x7ffc0000 [ 865.507975][ T42] audit: type=1326 audit(1784995811.252:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29594 comm="syz.1.6282" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35fec code=0x7ffc0000 [ 865.514644][ T42] audit: type=1326 audit(1784995811.272:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29594 comm="syz.1.6282" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35fec code=0x7ffc0000 [ 865.521366][ T42] audit: type=1326 audit(1784995811.272:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29594 comm="syz.1.6282" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35fec code=0x7ffc0000 [ 865.528163][ T42] audit: type=1326 audit(1784995811.272:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29594 comm="syz.1.6282" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35fec code=0x7ffc0000 [ 865.535151][ T42] audit: type=1326 audit(1784995811.272:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29594 comm="syz.1.6282" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f35fec code=0x7ffc0000 [ 865.542146][ T42] audit: type=1326 audit(1784995811.272:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29594 comm="syz.1.6282" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35fec code=0x7ffc0000 [ 865.549193][ T42] audit: type=1326 audit(1784995811.272:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29594 comm="syz.1.6282" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35fec code=0x7ffc0000 [ 865.937870][ T42] kauditd_printk_skb: 263 callbacks suppressed [ 865.937887][ T42] audit: type=1326 audit(1784995811.702:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29594 comm="syz.1.6282" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71372eb code=0x7ffc0000 [ 865.946763][ T42] audit: type=1326 audit(1784995811.702:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29594 comm="syz.1.6282" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71372eb code=0x7ffc0000 [ 865.953417][ T42] audit: type=1326 audit(1784995811.702:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29594 comm="syz.1.6282" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71372eb code=0x7ffc0000 [ 865.962498][ T42] audit: type=1326 audit(1784995811.702:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29594 comm="syz.1.6282" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71372eb code=0x7ffc0000 [ 865.969327][ T42] audit: type=1326 audit(1784995811.702:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29594 comm="syz.1.6282" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71372eb code=0x7ffc0000 [ 865.975903][ T42] audit: type=1326 audit(1784995811.702:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29594 comm="syz.1.6282" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71372eb code=0x7ffc0000 [ 865.982664][ T42] audit: type=1326 audit(1784995811.702:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29594 comm="syz.1.6282" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71372eb code=0x7ffc0000 [ 865.990201][ T42] audit: type=1326 audit(1784995811.732:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29594 comm="syz.1.6282" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71372eb code=0x7ffc0000 [ 865.996783][ T42] audit: type=1326 audit(1784995811.742:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29594 comm="syz.1.6282" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71372eb code=0x7ffc0000 [ 866.003969][ T42] audit: type=1326 audit(1784995811.742:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29594 comm="syz.1.6282" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71372eb code=0x7ffc0000 [ 868.929154][T29626] gtp1: entered promiscuous mode [ 868.937500][T29626] gtp1: entered allmulticast mode [ 868.956270][ T12] netdevsim netdevsim8 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 868.963885][ T12] netdevsim netdevsim8 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 868.967912][ T12] netdevsim netdevsim8 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 868.971130][ T12] netdevsim netdevsim8 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 868.981459][ T12] netdevsim netdevsim8 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 868.986602][ T12] netdevsim netdevsim8 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 868.990385][ T12] netdevsim netdevsim8 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 868.993058][ T12] netdevsim netdevsim8 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 868.997791][T29638] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4 [ 869.003701][T29640] netlink: 'syz.8.6291': attribute type 10 has an invalid length. [ 869.020699][T29638] binder: 29637:29638 ioctl c400941d 80000c80 returned -22 [ 869.540036][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.120525][T29670] netlink: 'syz.1.6298': attribute type 11 has an invalid length. [ 870.173897][T29675] bond0: entered promiscuous mode [ 870.189431][T29675] bond_slave_0: entered promiscuous mode [ 870.202021][T29675] bond_slave_1: entered promiscuous mode [ 870.210447][T29675] batadv0: entered promiscuous mode [ 870.222103][T29675] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 870.241267][T29675] bond0: left promiscuous mode [ 870.243302][T29675] bond_slave_0: left promiscuous mode [ 870.254887][T29670] can: request_module (can-proto-3) failed. [ 870.276096][T29675] bond_slave_1: left promiscuous mode [ 870.284355][T29675] batadv0: left promiscuous mode [ 870.313698][T29678] bridge0: port 2(bridge_slave_1) entered disabled state [ 870.319691][T29678] bridge0: port 1(bridge_slave_0) entered disabled state [ 870.393170][T29681] syzkaller0: entered promiscuous mode [ 870.397419][T29681] syzkaller0: entered allmulticast mode [ 870.473408][T29685] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6301'. [ 870.877029][T29699] gtp1: entered promiscuous mode [ 870.880080][T29699] gtp1: entered allmulticast mode [ 870.982580][T13764] libceph: connect (1)[c::]:6789 error -101 [ 870.985654][T13764] libceph: mon0 (1)[c::]:6789 connect error [ 870.988090][T29709] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6303'. [ 871.005167][T29709] block nbd0: reconnected socket [ 871.013925][T29703] ceph: No mds server is up or the cluster is laggy [ 871.033084][T29712] bridge0: port 2(bridge_slave_1) entered blocking state [ 871.035309][T29712] bridge0: port 2(bridge_slave_1) entered listening state [ 871.037640][T29712] bridge0: port 1(bridge_slave_0) entered blocking state [ 871.039789][T29712] bridge0: port 1(bridge_slave_0) entered listening state [ 871.054317][ T65] block nbd0: Receive control failed (result -32) [ 871.088967][T14502] usb 14-1: new high-speed USB device number 3 using dummy_hcd [ 871.157036][T29715] netlink: 72 bytes leftover after parsing attributes in process `syz.8.6305'. [ 871.270765][T14502] usb 14-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 871.275481][T14502] usb 14-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 871.279925][T14502] usb 14-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 871.283628][T14502] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 871.288322][T14502] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 871.300800][T14502] usb 14-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 871.304623][T14502] usb 14-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 871.308509][T14502] usb 14-1: Product: syz [ 871.310735][T14502] usb 14-1: Manufacturer: syz [ 871.318986][T14502] cdc_wdm 14-1:1.0: skipping garbage [ 871.321298][T14502] cdc_wdm 14-1:1.0: skipping garbage [ 871.324932][T14502] cdc_wdm 14-1:1.0: cdc-wdm0: USB WDM device [ 871.328160][T14502] cdc_wdm 14-1:1.0: Unknown control protocol [ 871.373697][T29732] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6307'. [ 871.472349][T29739] fuse: fd is not a fuse device [ 871.676527][T29751] siw: device registration error -23 [ 871.808856][T29756] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6311'. [ 871.823138][T29756] bond0: entered promiscuous mode [ 871.825199][T29756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 872.024407][T29768] ptrace attach of "/syz-executor exec"[20133] was attempted by "/syz-executor exec"[29768] [ 872.218672][T29784] syzkaller0: entered promiscuous mode [ 872.220493][T29784] syzkaller0: entered allmulticast mode [ 872.234611][T29784] trusted_key: encrypted_key: insufficient parameters specified [ 872.237706][T29785] trusted_key: encrypted_key: master key parameter 'user' is invalid [ 872.414797][T29793] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6318'. [ 872.418719][T29793] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6318'. [ 872.824030][T29806] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6322'. [ 872.858493][T29808] netlink: set zone limit has 4 unknown bytes [ 873.052119][T29815] netlink: 72 bytes leftover after parsing attributes in process `syz.8.6324'. [ 873.345858][T29843] IPv4: Oversized IP packet from 127.202.26.0 [ 873.591539][T29849] gretap1: entered promiscuous mode [ 873.606266][T29853] fuse: fd is not a fuse device [ 873.621884][T29849] batman_adv: batadv0: Adding interface: gretap1 [ 873.625508][T29849] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 873.635456][T29849] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 873.724923][T13764] usb 14-1: USB disconnect, device number 3 [ 873.990544][T29869] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6342'. [ 874.533871][T29891] fuse: fd is not a fuse device [ 875.058462][T29920] Invalid ELF header magic: != ELF [ 875.283781][ T65] block nbd3: Receive control failed (result -32) [ 875.295662][T29919] tipc: Started in network mode [ 875.298086][T29919] tipc: Node identity 7f000001, cluster identity 4711 [ 875.307952][T29919] tipc: Enabled bearer , priority 10 [ 875.791506][ T59] Process accounting resumed [ 875.796834][ T59] Process accounting resumed [ 875.804673][ T59] Process accounting resumed [ 875.806451][ T59] Process accounting resumed [ 875.808502][ T59] Process accounting resumed [ 875.823816][ T59] Process accounting resumed [ 875.828421][ T59] Process accounting resumed [ 875.851890][ T59] Process accounting resumed [ 875.856566][ T59] Process accounting resumed [ 875.862216][ T6027] Process accounting resumed [ 875.864255][ T6027] Process accounting resumed [ 875.866055][ T6027] Process accounting resumed [ 875.869345][ T6027] Process accounting resumed [ 875.871329][ T6027] Process accounting resumed [ 875.873143][ T6027] Process accounting resumed [ 875.874792][ T6027] Process accounting resumed [ 875.877271][ T6027] Process accounting resumed [ 875.884268][ T6027] Process accounting resumed [ 875.896473][ T6027] Process accounting resumed [ 875.898424][ T6027] Process accounting resumed [ 875.903519][ T6027] Process accounting resumed [ 875.905323][ T6027] Process accounting resumed [ 875.907079][ T6027] Process accounting resumed [ 875.913593][ T6027] Process accounting resumed [ 875.915405][ T6027] Process accounting resumed [ 875.917216][ T6027] Process accounting resumed [ 875.919474][ T6027] Process accounting resumed [ 875.921281][ T6027] Process accounting resumed [ 875.922964][ T6027] Process accounting resumed [ 875.924624][ T6027] Process accounting resumed [ 875.926320][ T6027] Process accounting resumed [ 875.928664][ T6027] Process accounting resumed [ 875.930394][ T6027] Process accounting resumed [ 875.934328][ T6027] Process accounting resumed [ 875.936619][ T6027] Process accounting resumed [ 875.941484][ T6027] Process accounting resumed [ 875.944339][ T6027] Process accounting resumed [ 875.948011][ T6027] Process accounting resumed [ 875.951308][T29947] Process accounting resumed [ 875.956577][ T6027] Process accounting resumed [ 875.963904][ T6027] Process accounting resumed [ 875.965755][ T6027] Process accounting resumed [ 875.967753][ T6027] Process accounting resumed [ 875.969628][ T6027] Process accounting resumed [ 875.971436][ T6027] Process accounting resumed [ 875.973222][ T6027] Process accounting resumed [ 875.975026][ T6027] Process accounting resumed [ 875.976828][ T6027] Process accounting resumed [ 875.978707][ T6027] Process accounting resumed [ 875.980502][ T6027] Process accounting resumed [ 875.982444][ T6027] Process accounting resumed [ 875.984363][ T6027] Process accounting resumed [ 875.989630][ T6027] Process accounting resumed [ 875.992568][ T6027] Process accounting resumed [ 875.994417][ T6027] Process accounting resumed [ 875.996238][ T6027] Process accounting resumed [ 875.998966][ T6027] Process accounting resumed [ 876.000790][ T6027] Process accounting resumed [ 876.003403][ T6027] Process accounting resumed [ 876.005148][ T6027] Process accounting resumed [ 876.006925][ T6027] Process accounting resumed [ 876.011115][ T6027] Process accounting resumed [ 876.012879][ T6027] Process accounting resumed [ 876.014704][ T6027] Process accounting resumed [ 876.022617][ T6027] Process accounting resumed [ 876.027930][ T24] Process accounting resumed [ 876.030608][ T6027] Process accounting resumed [ 876.032504][ T6027] Process accounting resumed [ 876.036689][ T24] Process accounting resumed [ 876.039670][ T6027] Process accounting resumed [ 876.041832][ T6027] Process accounting resumed [ 876.043784][T21122] Process accounting resumed [ 876.054487][ T6027] Process accounting resumed [ 876.059626][ T6027] Process accounting resumed [ 876.063223][T21122] Process accounting resumed [ 876.065026][T21122] Process accounting resumed [ 876.066990][T21122] Process accounting resumed [ 876.071467][T21122] Process accounting resumed [ 876.075697][T21122] Process accounting resumed [ 876.083563][T21122] Process accounting resumed [ 876.085320][T21122] Process accounting resumed [ 876.089478][T21122] Process accounting resumed [ 876.094246][T21122] Process accounting resumed [ 876.096062][T21122] Process accounting resumed [ 876.100483][T21122] Process accounting resumed [ 876.102255][T21122] Process accounting resumed [ 876.107282][T21122] Process accounting resumed [ 876.110836][T21122] Process accounting resumed [ 876.114920][T21122] Process accounting resumed [ 876.118849][T21122] Process accounting resumed [ 876.125017][T21122] Process accounting resumed [ 876.126823][T21122] Process accounting resumed [ 876.131481][T21122] Process accounting resumed [ 876.135830][T21122] Process accounting resumed [ 876.137848][T21122] Process accounting resumed [ 876.141954][T21122] Process accounting resumed [ 876.145965][T21122] Process accounting resumed [ 876.148110][T21122] Process accounting resumed [ 876.152118][T21122] Process accounting resumed [ 876.156121][T21122] Process accounting resumed [ 876.164048][T21122] Process accounting resumed [ 876.165867][T21122] Process accounting resumed [ 876.177960][T17282] Process accounting resumed [ 876.180359][ T24] Process accounting resumed [ 876.182331][ T24] Process accounting resumed [ 876.185202][ T24] Process accounting resumed [ 876.187202][ T24] Process accounting resumed [ 876.189118][ T24] Process accounting resumed [ 876.190932][ T24] Process accounting resumed [ 876.192736][ T24] Process accounting resumed [ 876.194665][ T24] Process accounting resumed [ 876.196549][ T24] Process accounting resumed [ 876.201722][ T24] Process accounting resumed [ 876.204103][ T24] Process accounting resumed [ 876.206321][ T24] Process accounting resumed [ 876.209397][ T24] Process accounting resumed [ 876.211797][ T24] Process accounting resumed [ 876.214226][ T24] Process accounting resumed [ 876.216509][ T24] Process accounting resumed [ 876.219222][ T24] Process accounting resumed [ 876.221558][ T24] Process accounting resumed [ 876.223859][ T24] Process accounting resumed [ 876.226486][ T24] Process accounting resumed [ 876.231459][ T24] Process accounting resumed [ 876.236084][ T24] Process accounting resumed [ 876.240094][ T24] Process accounting resumed [ 876.244352][ T24] Process accounting resumed [ 876.247866][ T24] Process accounting resumed [ 876.265450][T29949] Process accounting resumed [ 876.319063][T29979] 9p: Bad value for 'version' [ 876.598509][T17282] tipc: Node number set to 2130706433 [ 877.061436][T30000] trusted_key: encrypted_key: master key parameter 'user:' is invalid [ 877.572401][T30021] netlink: 72 bytes leftover after parsing attributes in process `syz.8.6374'. [ 877.686529][T30034] tipc: Enabled bearer , priority 10 [ 878.184705][T30042] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6379'. [ 878.281667][T30044] fuse: fd is not a fuse device [ 878.526885][T13004] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 878.567645][T13004] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 878.574222][T13004] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 878.578399][T13004] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 878.582038][T13004] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 878.812620][T30056] batman_adv: batadv0: Adding interface: dummy0 [ 878.814637][T30056] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 878.822535][T30056] batman_adv: batadv0: Interface activated: dummy0 [ 879.063320][T30069] overlayfs: failed to resolve 'verity=off': -2 [ 879.075836][T30069] netlink: zone id is out of range [ 879.081552][T30069] netlink: zone id is out of range [ 879.083541][T30069] netlink: zone id is out of range [ 879.095720][T30069] netlink: zone id is out of range [ 879.095740][T30069] netlink: zone id is out of range [ 879.095751][T30069] netlink: zone id is out of range [ 879.095759][T30069] netlink: zone id is out of range [ 879.095774][T30069] netlink: zone id is out of range [ 879.095804][T30069] netlink: zone id is out of range [ 879.095810][T30069] netlink: zone id is out of range [ 879.297077][T30071] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6385'. [ 879.338559][T11238] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 879.342956][T11238] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.361207][T11238] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 879.440301][T30047] wlan0 speed is unknown, defaulting to 1000 [ 879.487186][T30073] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6387'. [ 879.515419][T11238] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 879.518791][T11238] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.522048][T11238] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 880.135357][T11238] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 880.139107][T11238] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.142800][T11238] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 880.260667][T11238] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 880.267736][T11238] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.272113][T11238] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 880.370536][T30047] bridge0: port 1(bridge_slave_0) entered blocking state [ 880.373796][T30047] bridge0: port 1(bridge_slave_0) entered disabled state [ 880.379214][T30047] bridge_slave_0: entered allmulticast mode [ 880.383198][T30047] bridge_slave_0: entered promiscuous mode [ 880.389503][T30047] bridge0: port 2(bridge_slave_1) entered blocking state [ 880.392598][T30047] bridge0: port 2(bridge_slave_1) entered disabled state [ 880.396865][T30047] bridge_slave_1: entered allmulticast mode [ 880.402553][T30047] bridge_slave_1: entered promiscuous mode [ 880.461337][T30047] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 880.472307][T30047] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 880.500389][T30047] team0: Port device team_slave_0 added [ 880.508178][T30047] team0: Port device team_slave_1 added [ 880.964918][ T5744] Bluetooth: hci1: command tx timeout [ 880.986311][T30047] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 880.988671][T30047] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 881.070781][T30047] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 881.222424][T30109] batman_adv: batadv0: Adding interface: dummy0 [ 881.225631][T30109] batman_adv: batadv0: Interface activated: dummy0 [ 882.052313][T11238] bond3 (unregistering): (slave ip6gretap1): Releasing active interface [ 882.128954][T11238] team0: Port device xfrm0 removed [ 882.234065][T11238] bond1 (unregistering): (slave geneve2): Releasing active interface [ 882.254674][T11238] bond2 (unregistering): (slave bridge0): Releasing backup interface [ 882.257284][T11238] bridge0 (unregistering): left promiscuous mode [ 882.270003][T11238] bond0 (unregistering): Released all slaves [ 882.275347][T11238] bond1 (unregistering): Released all slaves [ 882.283188][T11238] bond2 (unregistering): Released all slaves [ 882.290979][T11238] bond3 (unregistering): Released all slaves [ 882.309666][T30047] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 882.317507][T30047] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 882.328587][T30047] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 882.334487][T30126] tipc: Bearer : already 2 bearers with priority 10 [ 882.343794][T30126] tipc: Bearer : trying with adjusted priority [ 882.373797][T30126] tipc: Enabled bearer , priority 9 [ 882.383780][ T7950] tipc: Resetting bearer [ 882.463360][T11238] tipc: Disabling bearer [ 882.480701][T11238] tipc: Disabling bearer [ 882.488525][T11238] tipc: Left network mode [ 882.493901][T30047] hsr_slave_0: entered promiscuous mode [ 882.504456][T30047] hsr_slave_1: entered promiscuous mode [ 882.977598][ T5744] Bluetooth: hci1: command tx timeout [ 883.703246][T30169] FAULT_INJECTION: forcing a failure. [ 883.703246][T30169] name failslab, interval 1, probability 0, space 0, times 0 [ 883.708604][T30169] CPU: 0 UID: 0 PID: 30169 Comm: syz.8.6408 Tainted: G L syzkaller #0 PREEMPT(full) [ 883.708653][T30169] Tainted: [L]=SOFTLOCKUP [ 883.708660][T30169] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 883.708671][T30169] Call Trace: [ 883.708678][T30169] [ 883.708685][T30169] dump_stack_lvl+0x100/0x190 [ 883.708711][T30169] should_fail_ex.cold+0x5/0xa [ 883.708732][T30169] should_failslab+0xc2/0x120 [ 883.708757][T30169] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 883.708782][T30169] ? __alloc_skb+0x5b7/0x710 [ 883.708804][T30169] ? __alloc_skb+0x140/0x710 [ 883.708830][T30169] __alloc_skb+0x140/0x710 [ 883.708851][T30169] ? __alloc_skb+0x5b7/0x710 [ 883.708872][T30169] ? __pfx___alloc_skb+0x10/0x10 [ 883.708900][T30169] netlink_alloc_large_skb+0x69/0x150 [ 883.708922][T30169] netlink_sendmsg+0x680/0xda0 [ 883.708946][T30169] ? __pfx_netlink_sendmsg+0x10/0x10 [ 883.708967][T30169] ? apparmor_socket_sendmsg+0x15b/0x270 [ 883.708992][T30169] ____sys_sendmsg+0xa4d/0xbe0 [ 883.709008][T30169] ? __pfx_netlink_sendmsg+0x10/0x10 [ 883.709030][T30169] ? __pfx_____sys_sendmsg+0x10/0x10 [ 883.709059][T30169] ___sys_sendmsg+0x190/0x1e0 [ 883.709080][T30169] ? __pfx____sys_sendmsg+0x10/0x10 [ 883.709099][T30169] ? lock_acquire+0x1b9/0x370 [ 883.709135][T30169] ? find_held_lock+0x2b/0x80 [ 883.709173][T30169] __sys_sendmsg+0x160/0x210 [ 883.709197][T30169] ? __pfx___sys_sendmsg+0x10/0x10 [ 883.709227][T30169] ? exit_to_user_mode_loop+0x166/0x6f0 [ 883.709246][T30169] ? rcu_is_watching+0x12/0xc0 [ 883.709272][T30169] __do_fast_syscall_32+0xe7/0x970 [ 883.709294][T30169] ? lockdep_hardirqs_on+0x78/0x100 [ 883.709316][T30169] do_fast_syscall_32+0x32/0x70 [ 883.709341][T30169] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 883.709363][T30169] RIP: 0023:0xf7f98fec [ 883.709384][T30169] Code: Unable to access opcode bytes at 0xf7f98fc2. [ 883.709393][T30169] RSP: 002b:00000000f543550c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 883.709412][T30169] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000200 [ 883.709423][T30169] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 883.709433][T30169] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 883.709443][T30169] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 883.709454][T30169] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 883.709478][T30169] [ 884.662882][T11238] hsr_slave_0: left promiscuous mode [ 884.670326][T11238] hsr_slave_1: left promiscuous mode [ 884.859690][T11238] veth1_macvtap: left promiscuous mode [ 884.866488][T11238] veth0_macvtap: left promiscuous mode [ 884.875104][T11238] veth1_vlan: left promiscuous mode [ 884.882936][T11238] veth0_vlan: left promiscuous mode [ 885.057407][ T5744] Bluetooth: hci1: command tx timeout [ 885.419901][T30183] 9p: Bad value for 'wfdno' [ 885.587105][T30196] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6414'. [ 885.645258][ T42] kauditd_printk_skb: 130 callbacks suppressed [ 885.645269][ T42] audit: type=1800 audit(1784995831.402:1395): pid=30200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.6416" name="out_ports" dev="configfs" ino=125417 res=0 errno=0 [ 886.074206][T30201] syzkaller0: entered promiscuous mode [ 886.076327][T30201] syzkaller0: entered allmulticast mode [ 887.137601][ T5744] Bluetooth: hci1: command tx timeout [ 890.116883][T30225] netlink: 'syz.4.6419': attribute type 8 has an invalid length. [ 890.121553][T30225] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6419'. [ 890.174311][T30225] bond0: entered promiscuous mode [ 890.176970][T30225] bond_slave_0: entered promiscuous mode [ 890.181097][T30225] bond_slave_1: entered promiscuous mode [ 890.227756][T30225] gretap0: entered promiscuous mode [ 890.230352][T30225] bond0: left promiscuous mode [ 890.231914][T30225] bond_slave_0: left promiscuous mode [ 890.234121][T30225] bond_slave_1: left promiscuous mode [ 890.240192][T30225] gretap0: left promiscuous mode [ 890.341977][T30047] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 890.348670][T30047] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 890.354468][T30047] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 890.371883][T30047] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 890.391845][T30047] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 890.549669][T13004] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 890.555290][T13004] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 890.568385][T30047] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 890.572176][T13004] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 890.581151][T13004] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 890.582405][T30047] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 890.586286][T13004] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 890.620566][T30047] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 890.645686][T11238] IPVS: stop unused estimator thread 0... [ 890.848113][T30047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 890.915471][T11238] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.936369][T30047] 8021q: adding VLAN 0 to HW filter on device team0 [ 890.940559][T30245] wlan0 speed is unknown, defaulting to 1000 [ 890.943559][ T8625] bridge0: port 1(bridge_slave_0) entered blocking state [ 890.946174][ T8625] bridge0: port 1(bridge_slave_0) entered forwarding state [ 890.972762][ T8625] bridge0: port 2(bridge_slave_1) entered blocking state [ 890.974997][ T8625] bridge0: port 2(bridge_slave_1) entered forwarding state [ 891.026737][T11238] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.498434][T11238] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.600585][T30245] bridge0: port 1(bridge_slave_0) entered blocking state [ 891.603202][T30245] bridge0: port 1(bridge_slave_0) entered disabled state [ 891.605786][T30245] bridge_slave_0: entered allmulticast mode [ 891.613425][T30245] bridge_slave_0: entered promiscuous mode [ 891.656653][T11238] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.693245][T30245] bridge0: port 2(bridge_slave_1) entered blocking state [ 891.696364][T30245] bridge0: port 2(bridge_slave_1) entered disabled state [ 891.699945][T30245] bridge_slave_1: entered allmulticast mode [ 891.704392][T30245] bridge_slave_1: entered promiscuous mode [ 891.770119][T30245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 891.784572][T30245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 891.842669][T30245] team0: Port device team_slave_0 added [ 891.848679][T30245] team0: Port device team_slave_1 added [ 891.878660][T30245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 891.886396][T30245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 891.910323][T30245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 891.925443][T30245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 891.931829][T30245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 891.946225][T30245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 891.964874][T30047] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 892.187722][T11238] bridge_slave_1: left allmulticast mode [ 892.190346][T11238] bridge_slave_1: left promiscuous mode [ 892.192900][T11238] bridge0: port 2(bridge_slave_1) entered disabled state [ 892.202786][T11238] bridge_slave_0: left allmulticast mode [ 892.205211][T11238] bridge_slave_0: left promiscuous mode [ 892.208136][T11238] bridge0: port 1(bridge_slave_0) entered disabled state [ 892.457862][T11238] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 892.462960][T11238] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 892.470330][T11238] bond0 (unregistering): Released all slaves [ 892.480147][T30245] hsr_slave_0: entered promiscuous mode [ 892.483414][T30245] hsr_slave_1: entered promiscuous mode [ 892.486390][T30245] debugfs: 'hsr0' already exists in 'hsr' [ 892.490275][T30245] Cannot create hsr debugfs directory [ 892.668229][T13004] Bluetooth: hci3: command tx timeout [ 892.766142][T30047] veth0_vlan: entered promiscuous mode [ 892.846972][T30047] veth1_vlan: entered promiscuous mode [ 892.982648][T11238] hsr_slave_0: left promiscuous mode [ 892.984890][T11238] hsr_slave_1: left promiscuous mode [ 892.986979][T11238] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 892.989519][T11238] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 892.992317][T11238] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 892.994692][T11238] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 893.005641][T11238] veth1_macvtap: left promiscuous mode [ 893.007559][T11238] veth0_macvtap: left promiscuous mode [ 893.009325][T11238] veth1_vlan: left promiscuous mode [ 893.011024][T11238] veth0_vlan: left promiscuous mode [ 893.219964][T11238] team0 (unregistering): Port device team_slave_1 removed [ 893.231445][T11238] team0 (unregistering): Port device team_slave_0 removed [ 893.348339][T30047] veth0_macvtap: entered promiscuous mode [ 893.357097][T30047] veth1_macvtap: entered promiscuous mode [ 893.371560][T30047] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 893.372529][T30331] net_ratelimit: 13 callbacks suppressed [ 893.372539][T30331] netlink: set zone limit has 4 unknown bytes [ 893.375823][T30047] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 893.392939][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 893.395709][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 893.400326][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 893.403064][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 893.472869][ T7950] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 893.483160][ T7950] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 893.507011][ T7950] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 893.509844][ T7950] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 893.650900][ T9] hid_parser_main: 21 callbacks suppressed [ 893.650921][ T9] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 893.748321][ T5454] 8021q: adding VLAN 0 to HW filter on device eth25 [ 893.854600][ T9] hid-generic 0000:0000:0000.000A: hidraw1: HID v0.00 Device [syz1] on syz0 [ 894.085074][T30360] loop5: detected capacity change from 0 to 7 [ 894.107522][T30360] Dev loop5: unable to read RDB block 7 [ 894.110724][T30353] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6435'. [ 894.114836][T30360] loop5: unable to read partition table [ 894.116979][T30360] loop5: partition table beyond EOD, truncated [ 894.119923][T30360] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 894.262091][T30355] fido_id[30355]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 894.536609][T30349] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6436'. [ 894.546398][ T5454] 8021q: adding VLAN 0 to HW filter on device eth26 [ 894.737680][ T24] usb 6-1: new full-speed USB device number 37 using dummy_hcd [ 894.740074][T13004] Bluetooth: hci3: command tx timeout [ 894.798438][T30388] netlink: set zone limit has 4 unknown bytes [ 894.826058][ T5454] 8021q: adding VLAN 0 to HW filter on device eth27 [ 894.873342][T30388] syzkaller0: entered promiscuous mode [ 894.875241][T30388] syzkaller0: entered allmulticast mode [ 894.899908][ T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 894.903532][ T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 894.907200][ T24] usb 6-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 894.912817][ T24] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 894.918323][ T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 894.922979][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.930976][ T24] usb 6-1: Product: syz [ 894.932286][ T24] usb 6-1: Manufacturer: syz [ 894.933823][ T24] usb 6-1: SerialNumber: syz [ 894.939969][T30367] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 895.068938][ T5454] 8021q: adding VLAN 0 to HW filter on device eth28 [ 895.091621][T30409] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6447'. [ 895.148966][T30404] mass_storage.usb0/lun.0: invalid file type: file0 [ 895.156164][T30365] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 895.958366][T30430] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 895.960443][T30430] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 895.968229][T30430] vhci_hcd vhci_hcd.0: Device attached [ 896.041855][T30447] vhci_hcd: connection closed [ 896.042157][ T12] vhci_hcd vhci_hcd.4: stop threads [ 896.050772][ T12] vhci_hcd vhci_hcd.4: release socket [ 896.052576][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 896.817574][T13004] Bluetooth: hci3: command tx timeout [ 897.185472][T30245] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 897.193306][T30245] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 897.196530][T30245] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 897.220059][T30245] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 897.225374][T30245] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 897.239279][T30478] netlink: set zone limit has 4 unknown bytes [ 897.239333][T30245] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 897.245497][T30245] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 897.249952][T30245] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 897.319212][T30245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 897.335306][T30245] 8021q: adding VLAN 0 to HW filter on device team0 [ 897.346311][ T8632] bridge0: port 1(bridge_slave_0) entered blocking state [ 897.352455][ T8632] bridge0: port 1(bridge_slave_0) entered forwarding state [ 897.371911][ T8632] bridge0: port 2(bridge_slave_1) entered blocking state [ 897.374423][ T8632] bridge0: port 2(bridge_slave_1) entered forwarding state [ 897.414824][ T24] cdc_ncm 6-1:1.0: bind() failure [ 897.454248][ T24] cdc_ncm 6-1:1.1: probe with driver cdc_ncm failed with error -71 [ 897.457822][ T24] cdc_mbim 6-1:1.1: probe with driver cdc_mbim failed with error -71 [ 897.460926][ T24] usbtest 6-1:1.1: probe with driver usbtest failed with error -71 [ 897.465153][ T24] usb 6-1: USB disconnect, device number 37 [ 897.737766][T14502] usb 13-1: new full-speed USB device number 16 using dummy_hcd [ 897.751224][T30245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 897.795363][T30245] veth0_vlan: entered promiscuous mode [ 897.804398][T30245] veth1_vlan: entered promiscuous mode [ 897.835402][T30245] veth0_macvtap: entered promiscuous mode [ 897.845326][T30245] veth1_macvtap: entered promiscuous mode [ 897.859545][T30245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 897.876133][T30528] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6460'. [ 897.894422][T14502] usb 13-1: unable to read config index 0 descriptor/start: -71 [ 897.911419][T14502] usb 13-1: can't read configurations, error -71 [ 898.020357][T30522] bridge0: port 2(bridge_slave_1) entered disabled state [ 898.023455][T30522] bridge0: port 1(bridge_slave_0) entered disabled state [ 898.030688][T30533] ieee802154 phy1 wpan1: encryption failed: -22 [ 898.043676][T30522] batman_adv: batadv0: Interface deactivated: dummy0 [ 898.114384][T30522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 898.128188][T30522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 898.481191][T11238] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 898.484907][T11238] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 898.496288][T30245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 898.510690][T11238] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 898.517118][T11238] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 898.534025][T11238] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.543376][T11238] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.558819][T11238] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.571862][T11238] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.713909][ T8636] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 898.720198][ T8636] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 898.781665][ T8636] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 898.789976][ T8636] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 898.907674][T13004] Bluetooth: hci3: command tx timeout [ 899.594823][ T5744] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 899.609435][ T5744] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 899.614559][ T5744] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 899.632378][ T5744] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 899.644691][ T5744] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 899.974997][T30589] wlan0 speed is unknown, defaulting to 1000 [ 900.023229][ T42] audit: type=1804 audit(1784995845.782:1396): pid=30609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.6470" name="/newroot/9/file0" dev="fuse" ino=1 res=1 errno=0 [ 900.085816][ T59] libceph: connect (1)[c::]:6789 error -99 [ 900.088166][ T59] libceph: mon0 (1)[c::]:6789 connect error [ 900.358355][ T59] libceph: connect (1)[c::]:6789 error -99 [ 900.365253][ T59] libceph: mon0 (1)[c::]:6789 connect error [ 900.740846][T30589] bridge0: port 1(bridge_slave_0) entered blocking state [ 900.743236][T30589] bridge0: port 1(bridge_slave_0) entered disabled state [ 900.748399][T30589] bridge_slave_0: entered allmulticast mode [ 900.753769][T30589] bridge_slave_0: entered promiscuous mode [ 900.760978][T30589] bridge0: port 2(bridge_slave_1) entered blocking state [ 900.767709][T30589] bridge0: port 2(bridge_slave_1) entered disabled state [ 900.770327][T30589] bridge_slave_1: entered allmulticast mode [ 900.773130][T30589] bridge_slave_1: entered promiscuous mode [ 900.785163][T30634] lo speed is unknown, defaulting to 1000 [ 900.825367][T30589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 900.830281][T30634] lo speed is unknown, defaulting to 1000 [ 900.833423][T30589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 900.861604][T30634] lo speed is unknown, defaulting to 1000 [ 900.870254][T30634] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 900.876298][T30634] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 900.877632][T17469] libceph: connect (1)[c::]:6789 error -99 [ 900.885606][T30634] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 900.891313][T30620] ceph: No mds server is up or the cluster is laggy [ 900.893708][T17469] libceph: mon0 (1)[c::]:6789 connect error [ 900.910237][T30634] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 900.983499][T30589] team0: Port device team_slave_0 added [ 900.989270][T17471] lo speed is unknown, defaulting to 1000 [ 900.995845][T30589] team0: Port device team_slave_1 added [ 901.112245][T30646] IPv4: Oversized IP packet from 127.202.26.0 [ 901.113362][T30589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 901.118509][T30589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 901.129284][T30589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 901.146412][T30634] lo speed is unknown, defaulting to 1000 [ 901.146848][T30589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 901.151177][T30589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 901.162538][T30589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 901.184732][T30634] lo speed is unknown, defaulting to 1000 [ 901.205893][T30634] lo speed is unknown, defaulting to 1000 [ 901.211241][T30589] hsr_slave_0: entered promiscuous mode [ 901.216203][T30589] hsr_slave_1: entered promiscuous mode [ 901.221796][T30589] debugfs: 'hsr0' already exists in 'hsr' [ 901.223681][T30589] Cannot create hsr debugfs directory [ 901.226007][T30634] lo speed is unknown, defaulting to 1000 [ 901.405897][T30634] lo speed is unknown, defaulting to 1000 [ 901.415269][T30634] lo speed is unknown, defaulting to 1000 [ 901.422745][T30634] lo speed is unknown, defaulting to 1000 [ 901.658839][T30657] netlink: set zone limit has 4 unknown bytes [ 901.757492][T13004] Bluetooth: hci4: command tx timeout [ 901.816279][T30657] syzkaller0: entered promiscuous mode [ 901.847114][T30657] syzkaller0: entered allmulticast mode [ 902.279305][T30589] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 902.283939][T30589] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 902.287765][T30589] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 902.300468][T30589] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 902.304677][T30589] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 902.312264][T30589] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 902.316254][T30589] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 902.333371][T30589] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 902.435424][T30676] pim6reg: entered allmulticast mode [ 902.455365][T30589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 902.483566][T30589] 8021q: adding VLAN 0 to HW filter on device team0 [ 902.486932][T30676] pim6reg: left allmulticast mode [ 902.592258][ T7950] bridge0: port 1(bridge_slave_0) entered blocking state [ 902.595332][ T7950] bridge0: port 1(bridge_slave_0) entered forwarding state [ 902.607742][ T7950] bridge0: port 2(bridge_slave_1) entered blocking state [ 902.611039][ T7950] bridge0: port 2(bridge_slave_1) entered forwarding state [ 902.642668][T30681] IPv6: addrconf: prefix option has invalid lifetime [ 902.834425][T30692] gtp0: entered promiscuous mode [ 902.836111][T30692] gtp0: entered allmulticast mode [ 902.944139][T30694] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6488'. [ 902.947484][T30694] block nbd0: reconnected socket [ 903.157196][ T65] block nbd0: Receive control failed (result -32) [ 903.596202][T30589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 903.787589][T13004] Bluetooth: hci4: command tx timeout [ 903.891741][T30589] veth0_vlan: entered promiscuous mode [ 903.907282][T30589] veth1_vlan: entered promiscuous mode [ 903.923380][T30722] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6493'. [ 903.928623][T30722] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6493'. [ 903.937183][T30589] veth0_macvtap: entered promiscuous mode [ 903.952235][T30589] veth1_macvtap: entered promiscuous mode [ 903.973698][T30589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 903.982798][T30589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 903.999297][T11238] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.169023][T11238] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.216236][T30727] tipc: Started in network mode [ 904.221215][T30727] tipc: Node identity 7f000001, cluster identity 4711 [ 904.228620][T30727] tipc: Enabled bearer , priority 10 [ 904.233323][T11238] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.236093][T11238] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.424168][ T7950] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 904.433564][ T7950] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 904.473970][ T8625] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 904.476909][ T8625] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 904.741546][T30743] siw: device registration error -23 [ 905.357447][ T10] tipc: Node number set to 2130706433 [ 905.857647][T13004] Bluetooth: hci4: command tx timeout [ 905.865467][T30780] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6503'. [ 905.923068][T30780] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6503'. [ 907.937960][ T5744] Bluetooth: hci4: command tx timeout [ 908.146823][T30820] netlink: 'syz.1.6511': attribute type 1 has an invalid length. [ 908.151150][T30820] netlink: 756 bytes leftover after parsing attributes in process `syz.1.6511'. [ 908.497574][T17282] usb 6-1: new full-speed USB device number 38 using dummy_hcd [ 908.963433][T30834] mass_storage.usb0/lun.0: invalid file type: file0 [ 909.009240][T17282] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 909.012712][T17282] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 909.015491][T17282] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 909.019023][T17282] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.022844][T17282] usb 6-1: config 0 descriptor?? [ 909.028033][T17282] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 909.030118][T17282] dvb-usb: bulk message failed: -22 (3/0) [ 909.035434][T17282] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 909.038882][T17282] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 909.041063][T17282] usb 6-1: media controller created [ 909.043328][T17282] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 909.055506][T17282] dvb-usb: bulk message failed: -22 (6/0) [ 909.057814][T17282] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 909.062059][T17282] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb6/6-1/input/input45 [ 909.074337][T17282] dvb-usb: schedule remote query interval to 150 msecs. [ 909.076723][T17282] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 909.231377][T17282] dvb-usb: bulk message failed: -22 (1/0) [ 909.244459][T17282] dvb-usb: error while querying for an remote control event. [ 909.278232][T17282] usb 6-1: USB disconnect, device number 38 [ 909.310706][T17282] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 909.405252][T30850] overlayfs: overlapping lowerdir path [ 909.449581][T30851] netlink: zone id is out of range [ 909.451962][T30851] netlink: zone id is out of range [ 909.454782][T30851] netlink: zone id is out of range [ 909.457958][T30851] netlink: zone id is out of range [ 909.460708][T30851] netlink: zone id is out of range [ 909.990868][T30855] input: syz0 as /devices/virtual/input/input46 [ 910.017471][ T5744] Bluetooth: hci4: command 0x0405 tx timeout [ 910.601070][T30896] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6531'. [ 910.608556][T30895] ipvlan2: entered allmulticast mode [ 910.610383][T30895] veth1_to_batadv: entered allmulticast mode [ 910.705862][T30906] Invalid ELF header magic: != ELF [ 911.369410][T30930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6536'. [ 911.394722][T30940] FAULT_INJECTION: forcing a failure. [ 911.394722][T30940] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 911.404412][T30940] CPU: 3 UID: 0 PID: 30940 Comm: syz.8.6539 Tainted: G L syzkaller #0 PREEMPT(full) [ 911.404438][T30940] Tainted: [L]=SOFTLOCKUP [ 911.404443][T30940] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 911.404453][T30940] Call Trace: [ 911.404458][T30940] [ 911.404465][T30940] dump_stack_lvl+0x100/0x190 [ 911.404488][T30940] should_fail_ex.cold+0x5/0xa [ 911.404508][T30940] _copy_to_user+0x32/0xd0 [ 911.404534][T30940] simple_read_from_buffer+0xcb/0x170 [ 911.404562][T30940] proc_fail_nth_read+0x1af/0x230 [ 911.404584][T30940] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 911.404609][T30940] ? rw_verify_area+0xce/0x6d0 [ 911.404633][T30940] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 911.404654][T30940] vfs_read+0x1e4/0xb40 [ 911.404683][T30940] ? __pfx_vfs_read+0x10/0x10 [ 911.404708][T30940] ? find_held_lock+0x2b/0x80 [ 911.404731][T30940] ? __fget_files+0x215/0x3d0 [ 911.404750][T30940] ? __fget_files+0x21f/0x3d0 [ 911.404770][T30940] ksys_read+0x12a/0x250 [ 911.404786][T30940] ? __pfx_ksys_read+0x10/0x10 [ 911.404805][T30940] do_int80_emulation+0x14b/0x720 [ 911.404824][T30940] asm_int80_emulation+0x1a/0x20 [ 911.404836][T30940] RIP: 0023:0xf71f72eb [ 911.404846][T30940] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 911.404871][T30940] RSP: 002b:00000000f54954bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 911.404882][T30940] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f54955d0 [ 911.404889][T30940] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 911.404896][T30940] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 911.404902][T30940] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 911.404911][T30940] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 911.404932][T30940] [ 911.855594][T30972] gtp0: entered promiscuous mode [ 911.857221][T30972] gtp0: entered allmulticast mode [ 911.904726][T30974] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6546'. [ 911.908852][T30974] block nbd0: reconnected socket [ 911.935930][ T65] block nbd0: Receive control failed (result -32) [ 911.996964][T30981] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6548'. [ 912.257389][T30992] netlink: 'syz.2.6549': attribute type 1 has an invalid length. [ 912.443085][T30994] vlan1: entered promiscuous mode [ 912.444806][T30994] vlan1: entered allmulticast mode [ 912.452394][T30994] veth0_vlan: entered allmulticast mode [ 912.466401][T30985] wlan0 speed is unknown, defaulting to 1000 [ 912.758926][T30985] lo speed is unknown, defaulting to 1000 [ 913.623780][T31015] wlan0 speed is unknown, defaulting to 1000 [ 913.721901][T31015] lo speed is unknown, defaulting to 1000 [ 914.122239][T31022] bridge0: port 2(bridge_slave_1) entered disabled state [ 914.124962][T31022] bridge0: port 1(bridge_slave_0) entered disabled state [ 914.229564][T31027] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6556'. [ 914.240741][T31027] block nbd0: reconnected socket [ 914.454459][T31022] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 914.460406][T31022] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 914.538729][T17712] lo speed is unknown, defaulting to 1000 [ 914.540586][T17712] syz2: Port: 1 Link DOWN [ 914.565363][T31026] gtp0: entered promiscuous mode [ 914.574886][T31026] gtp0: entered allmulticast mode [ 914.591529][T11238] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 914.596399][T11238] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 914.610497][T11238] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 914.615644][T11238] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 914.669538][ T65] block nbd0: Receive control failed (result -32) [ 914.747381][T31040] netlink: set zone limit has 4 unknown bytes [ 914.806742][T31040] syzkaller0: entered promiscuous mode [ 914.810521][T31040] syzkaller0: entered allmulticast mode [ 915.185332][T31070] comedi comedi1: dt2817: I/O base address not correctly aligned [ 917.011838][T31112] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.103248][T31118] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 917.205071][T31112] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.327622][T31112] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.408868][ C2] sr 2:0:0:0: [sr0] tag#22 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 917.413074][ C2] sr 2:0:0:0: [sr0] tag#22 CDB: Test Unit Ready [ 917.752205][T31139] bond0: entered promiscuous mode [ 917.753999][T31139] bond_slave_0: entered promiscuous mode [ 917.758222][T31139] bond_slave_1: entered promiscuous mode [ 917.763963][T31139] batadv0: entered promiscuous mode [ 917.772059][T31139] debugfs: 'hsr0' already exists in 'hsr' [ 917.774010][T31139] Cannot create hsr debugfs directory [ 917.777028][T31139] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 917.781369][T31139] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 917.790469][T31139] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 917.801703][T31139] bond0: left promiscuous mode [ 917.803515][T31139] bond_slave_0: left promiscuous mode [ 917.806238][T31139] bond_slave_1: left promiscuous mode [ 917.816110][T31139] batadv0: left promiscuous mode [ 917.914289][T31112] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.095259][T15494] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.125007][T11238] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.144830][T15494] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.149921][T15494] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.184754][T31146] syzkaller0: entered promiscuous mode [ 918.186547][T31146] syzkaller0: entered allmulticast mode [ 918.418424][T31155] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6591'. [ 918.421259][T31155] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6591'. [ 918.529898][T31164] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6595'. [ 918.569198][ T65] block nbd4: Receive control failed (result -1) [ 918.588556][T31166] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6595'. [ 918.591475][T31166] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 918.818223][T31167] Set syz1 is full, maxelem 14 reached [ 919.000767][ T42] audit: type=1326 audit(1784995864.752:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31172 comm="syz.2.6598" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 919.009994][ T42] audit: type=1326 audit(1784995864.772:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31172 comm="syz.2.6598" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf701efec code=0x7ffc0000 [ 919.018012][ T42] audit: type=1326 audit(1784995864.772:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31172 comm="syz.2.6598" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 919.036013][ T42] audit: type=1326 audit(1784995864.772:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31172 comm="syz.2.6598" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 919.059551][ T42] audit: type=1326 audit(1784995864.772:1401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31172 comm="syz.2.6598" exe="/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf701efec code=0x7ffc0000 [ 919.069102][ T42] audit: type=1326 audit(1784995864.772:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31172 comm="syz.2.6598" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 919.076008][ T42] audit: type=1326 audit(1784995864.782:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31172 comm="syz.2.6598" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf701efec code=0x7ffc0000 [ 919.122350][ T42] audit: type=1326 audit(1784995864.882:1404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31172 comm="syz.2.6598" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 919.137553][ T42] audit: type=1326 audit(1784995864.882:1405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31172 comm="syz.2.6598" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 919.152317][ T42] audit: type=1326 audit(1784995864.892:1406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31172 comm="syz.2.6598" exe="/syz-executor" sig=0 arch=40000003 syscall=219 compat=1 ip=0xf701efec code=0x7ffc0000 [ 919.329385][T31193] netlink: set zone limit has 4 unknown bytes [ 919.408267][T31193] syzkaller0: entered promiscuous mode [ 919.410687][T31193] syzkaller0: entered allmulticast mode [ 919.501570][T31202] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6606'. [ 919.507847][T31202] netlink: 48 bytes leftover after parsing attributes in process `syz.8.6606'. [ 922.531078][T31251] IPv4: Oversized IP packet from 127.202.26.0 [ 923.023883][T31267] fuse: Unknown parameter 'group_#dEвid' [ 923.528302][T17471] usb 13-1: new high-speed USB device number 18 using dummy_hcd [ 923.688638][T17471] usb 13-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 923.692113][T17471] usb 13-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 923.696059][T17471] usb 13-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 923.699158][T17471] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 923.705373][T31276] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 923.711681][T17471] usb 13-1: Quirk or no altset; falling back to MIDI 1.0 [ 923.756973][T29026] ffs_data_put(): freeing [ 923.794522][T31284] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6631'. [ 923.971850][T21124] usb 13-1: USB disconnect, device number 18 [ 924.070590][T31292] syzkaller0: entered promiscuous mode [ 924.072545][T31292] syzkaller0: entered allmulticast mode [ 924.570250][T31308] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6640'. [ 924.606557][T24470] IPVS: starting estimator thread 0... [ 924.610330][T31313] tipc: Started in network mode [ 924.611927][T31313] tipc: Node identity ac1414aa, cluster identity 4711 [ 924.614463][T31313] tipc: Enabled bearer , priority 10 [ 924.699744][T31314] IPVS: using max 43 ests per chain, 103200 per kthread [ 925.742217][T31354] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6653'. [ 925.885495][T31330] bridge0: port 2(bridge_slave_1) entered disabled state [ 925.888010][T31330] bridge0: port 1(bridge_slave_0) entered disabled state [ 926.060368][T31364] netlink: 'syz.1.6655': attribute type 10 has an invalid length. [ 926.515647][T31330] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 926.578695][T31367] netlink: set zone limit has 4 unknown bytes [ 926.622411][T31330] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 926.876794][T13764] tipc: Node number set to 2886997162 [ 926.933990][T31380] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6657'. [ 926.936128][T31364] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 926.938113][T31380] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6657'. [ 926.987192][T31369] syzkaller0: entered promiscuous mode [ 926.997275][T31369] syzkaller0: entered allmulticast mode [ 927.072727][T31388] overlayfs: overlapping lowerdir path [ 927.127501][T31390] netlink: zone id is out of range [ 927.129083][T31390] netlink: zone id is out of range [ 927.130731][T31390] netlink: zone id is out of range [ 927.132330][T31390] netlink: zone id is out of range [ 927.134421][T31390] netlink: zone id is out of range [ 927.592471][T31388] input: syz0 as /devices/virtual/input/input47 [ 929.414978][T31420] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6667'. [ 930.892177][T31435] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6670'. [ 930.897118][T31435] block nbd0: reconnected socket [ 930.993664][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.611510][T31393] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-:/": -EINTR [ 931.616051][ T65] block nbd0: Receive control failed (result -32) [ 931.679123][T31432] gtp0: entered promiscuous mode [ 931.680764][T31432] gtp0: entered allmulticast mode [ 931.690222][T31420] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 931.759436][T31444] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6672'. [ 931.803822][T31444] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.2.6672:31444 [ 931.818982][T31453] binder: 31441:31453 ioctl 4c0a 0 returned -22 [ 931.937959][T31420] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 932.017062][T31461] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(7) [ 932.019433][T31461] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 932.026505][T31461] vhci_hcd vhci_hcd.0: Device attached [ 932.031079][T31420] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 932.035238][T31467] vhci_hcd: connection closed [ 932.035433][T15494] vhci_hcd vhci_hcd.8: stop threads [ 932.040876][T15494] vhci_hcd vhci_hcd.8: release socket [ 932.050285][T15494] vhci_hcd vhci_hcd.8: disconnect device [ 932.099857][T31420] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 932.122954][T31470] FAULT_INJECTION: forcing a failure. [ 932.122954][T31470] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 932.128089][T31470] CPU: 3 UID: 0 PID: 31470 Comm: syz.2.6673 Tainted: G L syzkaller #0 PREEMPT(full) [ 932.128109][T31470] Tainted: [L]=SOFTLOCKUP [ 932.128113][T31470] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 932.128120][T31470] Call Trace: [ 932.128124][T31470] [ 932.128128][T31470] dump_stack_lvl+0x100/0x190 [ 932.128146][T31470] should_fail_ex.cold+0x5/0xa [ 932.128157][T31470] ? prepare_alloc_pages+0x16d/0x5f0 [ 932.128174][T31470] should_fail_alloc_page+0xeb/0x140 [ 932.128191][T31470] prepare_alloc_pages+0x1f0/0x5f0 [ 932.128210][T31470] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 932.128230][T31470] ? stack_trace_save+0x8e/0xc0 [ 932.128247][T31470] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 932.128264][T31470] ? kasan_save_stack+0x3f/0x50 [ 932.128277][T31470] ? kasan_save_stack+0x30/0x50 [ 932.128290][T31470] ? kasan_save_track+0x14/0x30 [ 932.128304][T31470] ? __kasan_kmalloc+0xaa/0xb0 [ 932.128316][T31470] ? __kmalloc_noprof+0x322/0x820 [ 932.128329][T31470] ? fuse_readdir_uncached+0x215/0x1c30 [ 932.128343][T31470] ? fuse_readdir+0x9bb/0x1f20 [ 932.128362][T31470] ? iterate_dir+0x296/0xae0 [ 932.128377][T31470] ? __ia32_sys_getdents64+0x13a/0x2c0 [ 932.128394][T31470] ? __do_fast_syscall_32+0xe7/0x970 [ 932.128408][T31470] ? do_fast_syscall_32+0x32/0x70 [ 932.128432][T31470] alloc_pages_bulk_noprof+0x5de/0x13c0 [ 932.128450][T31470] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 932.128463][T31470] ? rcu_is_watching+0x12/0xc0 [ 932.128476][T31470] ? trace_kmalloc+0xeb/0x110 [ 932.128491][T31470] ? __kasan_kmalloc+0xaa/0xb0 [ 932.128506][T31470] ? bpf_ksym_find+0x124/0x1c0 [ 932.128517][T31470] ? fuse_readdir_uncached+0x215/0x1c30 [ 932.128535][T31470] fuse_readdir_uncached+0x243/0x1c30 [ 932.128553][T31470] ? __lock_acquire+0x49f/0x1a40 [ 932.128573][T31470] ? __pfx_fuse_readdir_uncached+0x10/0x10 [ 932.128590][T31470] ? _kstrtoull+0x13c/0x1f0 [ 932.128604][T31470] ? __lock_acquire+0x49f/0x1a40 [ 932.128636][T31470] ? find_held_lock+0x2b/0x80 [ 932.128649][T31470] ? fuse_readdir+0x9a7/0x1f20 [ 932.128663][T31470] ? fuse_readdir+0x9a7/0x1f20 [ 932.128680][T31470] fuse_readdir+0x9bb/0x1f20 [ 932.128698][T31470] ? apparmor_file_permission+0x13f/0x1c0 [ 932.128716][T31470] iterate_dir+0x296/0xae0 [ 932.128734][T31470] __ia32_sys_getdents64+0x13a/0x2c0 [ 932.128752][T31470] ? __pfx___ia32_sys_getdents64+0x10/0x10 [ 932.128770][T31470] ? __pfx_filldir64+0x10/0x10 [ 932.128786][T31470] ? ksys_write+0x1ac/0x250 [ 932.128796][T31470] ? __pfx_ksys_write+0x10/0x10 [ 932.128809][T31470] __do_fast_syscall_32+0xe7/0x970 [ 932.128823][T31470] ? lockdep_hardirqs_on+0x78/0x100 [ 932.128837][T31470] do_fast_syscall_32+0x32/0x70 [ 932.128852][T31470] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 932.128866][T31470] RIP: 0023:0xf701efec [ 932.128880][T31470] Code: Unable to access opcode bytes at 0xf701efc2. [ 932.128885][T31470] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 00000000000000dc [ 932.128896][T31470] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000000 [ 932.128903][T31470] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 932.128910][T31470] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 932.128916][T31470] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 932.128923][T31470] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 932.128937][T31470] [ 932.364405][T15494] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 932.481030][T15494] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 932.484607][T15494] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 932.499734][T15494] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 932.510929][T31479] wlan0 speed is unknown, defaulting to 1000 [ 932.514748][T31479] lo speed is unknown, defaulting to 1000 [ 932.904439][T31510] netlink: set zone limit has 4 unknown bytes [ 932.927709][T16253] usb 13-1: new full-speed USB device number 19 using dummy_hcd [ 932.945230][T31513] netlink: 100 bytes leftover after parsing attributes in process `syz.4.6679'. [ 932.948261][T31513] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6679'. [ 932.985284][T31510] syzkaller0: entered promiscuous mode [ 933.004488][T31510] syzkaller0: entered allmulticast mode [ 933.078333][T16253] usb 13-1: not running at top speed; connect to a high speed hub [ 933.083631][T16253] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 933.090503][T16253] usb 13-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 933.093320][T16253] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 933.102711][T16253] usb 13-1: Product: syz [ 933.104055][T16253] usb 13-1: Manufacturer: syz [ 933.108137][T16253] usb 13-1: SerialNumber: syz [ 933.108627][T31516] cgroup: Unknown subsys name 'seclabel' [ 933.117948][T16253] oti6858 13-1:1.0: oti6858 converter detected [ 933.132024][T16253] usb 13-1: oti6858 converter now attached to ttyUSB0 [ 933.689018][T16253] usb 13-1: USB disconnect, device number 19 [ 933.780190][T16253] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 933.786661][T16253] oti6858 13-1:1.0: device disconnected [ 934.404640][T31550] kAFS: unable to lookup cell '/,cL' [ 934.888794][T31557] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6689'. [ 936.833423][T31570] lo: entered promiscuous mode [ 936.835583][T31570] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 937.075762][T31594] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 937.080178][T31594] udc usbip-vudc.0: failed to start g1: -19 [ 937.088690][T31594] UDC core: g1: couldn't find an available UDC or it's busy [ 937.156666][T31603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6705'. [ 937.314205][T31610] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6709'. [ 937.422652][T31610] syzkaller0: entered promiscuous mode [ 937.429247][T31610] syzkaller0: entered allmulticast mode [ 938.478216][T31626] syz.4.6712 (31626): /proc/31626/oom_adj is deprecated, please use /proc/31626/oom_score_adj instead. [ 939.083061][T31645] netlink: set zone limit has 4 unknown bytes [ 941.078902][T31660] wlan0 speed is unknown, defaulting to 1000 [ 941.083530][T31660] lo speed is unknown, defaulting to 1000 [ 941.597471][ T5835] usb 13-1: new full-speed USB device number 20 using dummy_hcd [ 941.797438][ T5835] usb 13-1: not running at top speed; connect to a high speed hub [ 942.261097][T31687] FAULT_INJECTION: forcing a failure. [ 942.261097][T31687] name failslab, interval 1, probability 0, space 0, times 0 [ 942.272188][T31687] CPU: 0 UID: 60929 PID: 31687 Comm: syz.1.6724 Tainted: G L syzkaller #0 PREEMPT(full) [ 942.272220][T31687] Tainted: [L]=SOFTLOCKUP [ 942.272226][T31687] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 942.272236][T31687] Call Trace: [ 942.272243][T31687] [ 942.272251][T31687] dump_stack_lvl+0x100/0x190 [ 942.272276][T31687] should_fail_ex.cold+0x5/0xa [ 942.272296][T31687] should_failslab+0xc2/0x120 [ 942.272321][T31687] __kmalloc_cache_noprof+0x91/0x6c0 [ 942.272340][T31687] ? kasan_save_track+0x14/0x30 [ 942.272362][T31687] ? allocate_cgrp_cset_links+0xca/0x230 [ 942.272392][T31687] allocate_cgrp_cset_links+0xca/0x230 [ 942.272421][T31687] find_css_set+0x949/0x1ec0 [ 942.272448][T31687] ? __pfx_find_css_set+0x10/0x10 [ 942.272485][T31687] cgroup_migrate_prepare_dst+0x10b/0x7f0 [ 942.272528][T31687] cgroup_attach_task+0x3e4/0x770 [ 942.272554][T31687] ? __pfx_cgroup_attach_task+0x10/0x10 [ 942.272591][T31687] ? get_task_cred+0x189/0x360 [ 942.272621][T31687] __cgroup1_procs_write.isra.0+0x2c4/0x420 [ 942.272643][T31687] ? __pfx___cgroup1_procs_write.isra.0+0x10/0x10 [ 942.272664][T31687] ? kernfs_root+0xf8/0x2a0 [ 942.272694][T31687] cgroup_file_write+0x1e6/0x8a0 [ 942.272709][T31687] ? __pfx_cgroup1_tasks_write+0x10/0x10 [ 942.272729][T31687] ? __pfx_cgroup_file_write+0x10/0x10 [ 942.272753][T31687] kernfs_fop_write_iter+0x3e0/0x5f0 [ 942.272773][T31687] ? __pfx_cgroup_file_write+0x10/0x10 [ 942.272799][T31687] vfs_write+0x6ac/0x1050 [ 942.272817][T31687] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 942.272840][T31687] ? __pfx_vfs_write+0x10/0x10 [ 942.272855][T31687] ? find_held_lock+0x2b/0x80 [ 942.272894][T31687] ksys_write+0x12a/0x250 [ 942.272910][T31687] ? __pfx_ksys_write+0x10/0x10 [ 942.272925][T31687] ? ksys_write+0x1ac/0x250 [ 942.272940][T31687] ? __pfx_ksys_write+0x10/0x10 [ 942.272962][T31687] __do_fast_syscall_32+0xe7/0x970 [ 942.272985][T31687] ? lockdep_hardirqs_on+0x78/0x100 [ 942.273008][T31687] do_fast_syscall_32+0x32/0x70 [ 942.273030][T31687] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 942.273053][T31687] RIP: 0023:0xf6ffefec [ 942.273073][T31687] Code: Unable to access opcode bytes at 0xf6ffefc2. [ 942.273081][T31687] RSP: 002b:00000000f53ed50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 942.273098][T31687] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000100 [ 942.273110][T31687] RDX: 0000000000000012 RSI: 0000000000000000 RDI: 0000000000000000 [ 942.273120][T31687] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 942.273130][T31687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 942.273140][T31687] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 942.273165][T31687] [ 942.419050][ T42] kauditd_printk_skb: 16 callbacks suppressed [ 942.419067][ T42] audit: type=1800 audit(1784995888.182:1423): pid=31693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.6726" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 942.446722][ T5835] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 942.478874][T31695] syzkaller0: entered promiscuous mode [ 942.480713][T31695] syzkaller0: entered allmulticast mode [ 942.628891][ T5835] usb 13-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 942.631970][ T5835] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.634750][ T5835] usb 13-1: Product: syz [ 942.636330][ T5835] usb 13-1: Manufacturer: syz [ 942.638369][ T5835] usb 13-1: SerialNumber: syz [ 942.648259][ T5835] oti6858 13-1:1.0: oti6858 converter detected [ 942.655225][ T5835] usb 13-1: oti6858 converter now attached to ttyUSB0 [ 942.799008][T31701] netlink: set zone limit has 4 unknown bytes [ 942.835563][T31701] syzkaller0: entered promiscuous mode [ 942.837959][T31701] syzkaller0: entered allmulticast mode [ 942.913991][T31704] wlan0 speed is unknown, defaulting to 1000 [ 942.921184][T31704] lo speed is unknown, defaulting to 1000 [ 943.008516][ T41] usb 13-1: USB disconnect, device number 20 [ 943.113608][ T41] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 943.118218][ T41] oti6858 13-1:1.0: device disconnected [ 943.349684][T24470] libceph: connect (1)[c::]:6789 error -99 [ 943.352044][T24470] libceph: mon0 (1)[c::]:6789 connect error [ 943.423022][T31713] ceph: No mds server is up or the cluster is laggy [ 946.833539][T31711] lo: left promiscuous mode [ 946.855574][T31711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 946.859230][T31711] 8021q: adding VLAN 0 to HW filter on device team0 [ 946.863731][T31711] batman_adv: batadv0: Interface activated: dummy0 [ 946.868410][T31711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 946.900992][T31711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 946.905439][T31711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 946.914904][T31711] veth1_vlan: left promiscuous mode [ 946.917384][T31711] veth0_vlan: left promiscuous mode [ 946.919720][T31711] veth0_vlan: entered promiscuous mode [ 946.923476][T31711] veth1_vlan: entered promiscuous mode [ 946.928165][T31711] veth1_macvtap: left promiscuous mode [ 946.931199][T31711] veth0_macvtap: left promiscuous mode [ 946.934164][T31711] veth0_macvtap: entered promiscuous mode [ 946.936802][T31711] veth1_macvtap: entered promiscuous mode [ 946.944620][T31711] gretap1: left promiscuous mode [ 946.947213][T31711] batman_adv: batadv0: Interface activated: gretap1 [ 946.952086][T31711] 8021q: adding VLAN 0 to HW filter on device eth0 [ 946.956324][T31711] 8021q: adding VLAN 0 to HW filter on device eth1 [ 946.961259][T31711] 8021q: adding VLAN 0 to HW filter on device eth2 [ 946.965629][T31711] 8021q: adding VLAN 0 to HW filter on device eth3 [ 947.093606][T31723] tipc: Enabling of bearer rejected, failed to enable media [ 947.112435][ T8636] bridge0: port 1(bridge_slave_0) entered blocking state [ 947.114879][ T8636] bridge0: port 1(bridge_slave_0) entered listening state [ 947.132895][ T8636] bridge0: port 2(bridge_slave_1) entered blocking state [ 947.135339][ T8636] bridge0: port 2(bridge_slave_1) entered listening state [ 947.194989][T14347] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.205947][T14347] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.210712][T14347] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.249402][T14347] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.507523][ T29] usb 13-1: new high-speed USB device number 21 using dummy_hcd [ 947.530372][ T41] usb 9-1: new full-speed USB device number 33 using dummy_hcd [ 947.534928][T31759] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6740'. [ 947.584314][T31762] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 947.667914][ T29] usb 13-1: Using ep0 maxpacket: 16 [ 947.686088][ T29] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 947.688635][ T41] usb 9-1: not running at top speed; connect to a high speed hub [ 947.693278][ T29] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 947.700684][ T41] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 947.706105][ T29] usb 13-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 947.706718][ T41] usb 9-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 947.712854][T31759] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.1.6740:31759 [ 947.715961][ T29] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 947.717436][ T41] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 947.722895][ T41] usb 9-1: Product: syz [ 947.724596][ T41] usb 9-1: Manufacturer: syz [ 947.726205][ T41] usb 9-1: SerialNumber: syz [ 947.733550][ T41] oti6858 9-1:1.0: oti6858 converter detected [ 947.742332][ T41] usb 9-1: oti6858 converter now attached to ttyUSB0 [ 947.744630][ T29] usb 13-1: config 0 descriptor?? [ 948.387722][T17471] usb 9-1: USB disconnect, device number 33 [ 949.356941][T17471] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 949.491887][T31797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6745'. [ 949.503028][T31797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6745'. [ 949.506343][T31797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6745'. [ 949.514066][T31797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6745'. [ 949.518953][T17471] oti6858 9-1:1.0: device disconnected [ 950.047450][T31820] xt_SECMARK: invalid mode: 0 [ 950.422999][ T29] usbhid 13-1:0.0: can't add hid device: -71 [ 950.434398][ T29] usbhid 13-1:0.0: probe with driver usbhid failed with error -71 [ 950.460041][ T29] usb 13-1: USB disconnect, device number 21 [ 950.549359][T31828] netlink: 14 bytes leftover after parsing attributes in process `syz.8.6752'. [ 950.573814][T31828] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 950.723706][T31828] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 950.802869][T31828] bond0 (unregistering): Released all slaves [ 951.241759][T31829] wlan0 speed is unknown, defaulting to 1000 [ 951.246783][T31829] lo speed is unknown, defaulting to 1000 [ 951.336125][T31840] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6754'. [ 951.582898][T31840] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 951.792363][T31840] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.052615][T31840] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.237986][T31851] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6755'. [ 952.243370][T31840] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.444542][T15494] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 952.479241][T15494] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 952.555418][T15494] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 952.558309][T15494] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 952.920494][T31872] overlayfs: overlapping lowerdir path [ 952.952353][T31872] netlink: zone id is out of range [ 952.954387][T31872] netlink: zone id is out of range [ 952.956043][T31872] netlink: zone id is out of range [ 952.957896][T31872] netlink: zone id is out of range [ 952.959820][T31872] netlink: zone id is out of range [ 953.100758][T31872] input: syz0 as /devices/virtual/input/input48 [ 953.783361][T31898] mass_storage.usb0/lun.0: invalid file type: file0 [ 954.181640][T31923] gtp0: entered promiscuous mode [ 954.183268][T31923] gtp0: entered allmulticast mode [ 954.286664][T31932] mass_storage.usb0/lun.0: invalid file type: file0 [ 954.562558][T31939] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6777'. [ 954.966145][T31947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 958.157519][ T5835] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 958.328761][ T5835] usb 7-1: not running at top speed; connect to a high speed hub [ 958.333383][ T5835] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 958.340172][ T5835] usb 7-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 958.344101][ T5835] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 958.347497][ T5835] usb 7-1: Product: syz [ 958.349255][ T5835] usb 7-1: Manufacturer: syz [ 958.351196][ T5835] usb 7-1: SerialNumber: syz [ 958.370312][ T5835] oti6858 7-1:1.0: oti6858 converter detected [ 958.377798][ T5835] usb 7-1: oti6858 converter now attached to ttyUSB0 [ 958.528039][T32007] binder: 32003:32007 ioctl 4c0a 0 returned -22 [ 958.552561][T32007] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6789'. [ 958.999315][ T5835] usb 7-1: USB disconnect, device number 11 [ 959.007920][ T5835] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 959.011934][ T5835] oti6858 7-1:1.0: device disconnected [ 959.188892][T32026] usb usb1: usbfs: interface 0 claimed by hub while 'syz.8.6797' sets config #1024 [ 959.259961][T32026] netlink: 'syz.8.6797': attribute type 10 has an invalid length. [ 959.270217][T32026] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6797'. [ 959.287518][T32026] bridge_slave_1: left allmulticast mode [ 959.290393][T32026] bridge_slave_1: left promiscuous mode [ 959.293082][T32026] bridge0: port 2(bridge_slave_1) entered disabled state [ 959.309097][T32026] bridge_slave_0: left allmulticast mode [ 959.311454][T32026] bridge_slave_0: left promiscuous mode [ 959.313344][T32026] bridge0: port 1(bridge_slave_0) entered disabled state [ 959.331889][T32027] usb usb1: usbfs: interface 0 claimed by hub while 'syz.8.6797' sets config #1 [ 959.368622][ T8643] Bluetooth: hci0: Frame reassembly failed (-84) [ 959.444581][T32029] tipc: Started in network mode [ 959.446364][T32029] tipc: Node identity 7e8b9a54ac7, cluster identity 4711 [ 959.449272][T32029] tipc: Enabled bearer , priority 0 [ 959.452738][T32029] syzkaller0: entered promiscuous mode [ 959.454491][T32029] syzkaller0: entered allmulticast mode [ 959.485601][T32029] tipc: Resetting bearer [ 959.550759][T32031] netlink: set zone limit has 4 unknown bytes [ 959.737531][ T5835] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 959.889601][ T5835] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 959.894205][ T5835] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 959.898334][ T5835] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 959.902118][ T5835] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 959.913658][T32029] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 959.922708][ T5835] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 960.057433][ T9] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 960.138501][T32029] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6798'. [ 960.158004][T14502] usb 6-1: USB disconnect, device number 39 [ 960.230142][ T9] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 960.239256][ T9] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 960.249965][ T9] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 960.256046][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 960.269609][T32044] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 960.338853][ T9] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 960.369431][T32028] tipc: Resetting bearer [ 960.411177][T32028] tipc: Disabling bearer [ 961.387486][T13004] Bluetooth: hci0: command 0x1003 tx timeout [ 961.390800][ T5744] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 962.003522][T17471] usb 7-1: USB disconnect, device number 12 [ 962.041006][T32059] input: syz1 as /devices/virtual/input/input49 [ 962.630895][T32074] mass_storage.usb0/lun.0: invalid file type: file0 [ 962.867240][T32079] wlan0 speed is unknown, defaulting to 1000 [ 962.871554][T32079] lo speed is unknown, defaulting to 1000 [ 962.964718][T32070] 9p: Bad value for 'wfdno' [ 963.616311][T32109] gtp0: entered promiscuous mode [ 963.619561][T32109] gtp0: entered allmulticast mode [ 963.644561][T32114] overlayfs: failed to resolve '/҆$@y!': -2 [ 964.088818][ T5744] Bluetooth: hci4: unexpected event for opcode 0x040d [ 964.752999][T32150] netlink: 'syz.4.6826': attribute type 1 has an invalid length. [ 964.775890][T32150] 8021q: adding VLAN 0 to HW filter on device bond1 [ 964.792468][T32154] gtp0: entered promiscuous mode [ 964.794061][T32154] gtp0: entered allmulticast mode [ 964.818952][T32156] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6827'. [ 964.860635][T32150] bond1: (slave veth5): Enslaving as a backup interface with a down link [ 965.663822][T32146] cgroup: fork rejected by pids controller in /syz1 [ 967.355770][T32248] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.1.6835:32248 [ 967.448897][T32254] gtp0: entered promiscuous mode [ 967.451076][T32254] gtp0: entered allmulticast mode [ 967.496300][T32257] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6838'. [ 967.617741][T32259] Invalid ELF header magic: != ELF [ 967.942783][T32266] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6840'. [ 968.067074][T32266] wlan0 speed is unknown, defaulting to 1000 [ 968.078679][T32266] lo speed is unknown, defaulting to 1000 [ 969.092026][T32284] 9p: Bad value for 'rfdno' [ 969.197248][T32290] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6844'. [ 969.268135][T32280] wlan0 speed is unknown, defaulting to 1000 [ 969.273134][T32280] lo speed is unknown, defaulting to 1000 [ 969.513214][T32314] netlink: 'syz.1.6850': attribute type 1 has an invalid length. [ 969.537074][T32314] 8021q: adding VLAN 0 to HW filter on device bond1 [ 969.559381][T32314] bond1: (slave veth0_to_bond): making interface the new active one [ 969.562927][T32314] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 969.624514][T32321] x_tables: duplicate underflow at hook 3 [ 969.749670][T32328] mass_storage.usb0/lun.0: invalid file type: file0 [ 969.935383][ T42] audit: type=1326 audit(1784995915.692:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32330 comm="syz.4.6855" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56fec code=0x7ffc0000 [ 969.945704][ T42] audit: type=1326 audit(1784995915.692:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32330 comm="syz.4.6855" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56fec code=0x7ffc0000 [ 969.957222][ T42] audit: type=1326 audit(1784995915.702:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32330 comm="syz.4.6855" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f56fec code=0x7ffc0000 [ 969.970120][ T42] audit: type=1326 audit(1784995915.702:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32330 comm="syz.4.6855" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56fec code=0x7ffc0000 [ 969.985064][ T42] audit: type=1326 audit(1784995915.702:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32330 comm="syz.4.6855" exe="/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7f56fec code=0x7ffc0000 [ 969.999176][ T42] audit: type=1326 audit(1784995915.702:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32330 comm="syz.4.6855" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56fec code=0x7ffc0000 [ 970.013672][ T42] audit: type=1326 audit(1784995915.702:1430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32330 comm="syz.4.6855" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf7f56fec code=0x7ffc0000 [ 970.024330][ T42] audit: type=1326 audit(1784995915.722:1431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32330 comm="syz.4.6855" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56fec code=0x7ffc0000 [ 970.050550][ T42] audit: type=1326 audit(1784995915.732:1432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32330 comm="syz.4.6855" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf7f56fec code=0x7ffc0000 [ 970.062521][ T42] audit: type=1326 audit(1784995915.732:1433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32330 comm="syz.4.6855" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56fec code=0x7ffc0000 [ 970.376282][T32352] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 970.574581][T32358] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 970.577340][T32358] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 970.581481][T32358] vhci_hcd vhci_hcd.0: Device attached [ 970.598503][T32358] netlink: 'syz.2.6862': attribute type 12 has an invalid length. [ 970.612300][T32361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 970.629128][T32361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 970.867994][ T41] usb 42-1: SetAddress Request (6) to port 0 [ 970.874975][ T41] usb 42-1: new SuperSpeed USB device number 6 using vhci_hcd [ 971.254740][T32371] syzkaller0: entered promiscuous mode [ 971.256843][T32371] syzkaller0: entered allmulticast mode [ 971.472134][T32360] vhci_hcd: connection reset by peer [ 971.477712][ T12] vhci_hcd vhci_hcd.2: stop threads [ 971.479993][ T12] vhci_hcd vhci_hcd.2: release socket [ 971.485345][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 972.088360][T32390] [ 972.089453][T32390] ====================================================== [ 972.092306][T32390] WARNING: possible circular locking dependency detected [ 972.095161][T32390] syzkaller #0 Tainted: G L [ 972.098104][T32390] ------------------------------------------------------ [ 972.100943][T32390] syz.2.6873/32390 is trying to acquire lock: [ 972.103580][T32390] ffff888063888450 (sb_writers#5){.+.+}-{0:0}, at: path_openat+0xad9/0x4280 [ 972.107057][T32390] [ 972.107057][T32390] but task is already holding lock: [ 972.109796][T32390] ffff888013d64920 (&common->filesem){+.+.}-{4:4}, at: fsg_store_file+0x193/0x450 [ 972.112881][T32390] [ 972.112881][T32390] which lock already depends on the new lock. [ 972.112881][T32390] [ 972.116387][T32390] [ 972.116387][T32390] the existing dependency chain (in reverse order) is: [ 972.119154][T32390] [ 972.119154][T32390] -> #5 (&common->filesem){+.+.}-{4:4}: [ 972.121539][T32390] lock_acquire+0x1b9/0x370 [ 972.123092][T32390] down_write+0x8b/0x1f0 [ 972.124773][T32390] fsg_store_file+0x193/0x450 [ 972.126922][T32390] configfs_write_iter+0x302/0x4e0 [ 972.129183][T32390] vfs_write+0x6ac/0x1050 [ 972.131186][T32390] ksys_write+0x12a/0x250 [ 972.133071][T32390] __do_fast_syscall_32+0xe7/0x970 [ 972.134895][T32390] do_fast_syscall_32+0x32/0x70 [ 972.136607][T32390] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 972.138808][T32390] [ 972.138808][T32390] -> #4 (&p->frag_sem){.+.+}-{4:4}: [ 972.141115][T32390] lock_acquire+0x1b9/0x370 [ 972.142750][T32390] down_read+0x99/0x4c0 [ 972.144348][T32390] __configfs_open_file+0xe8/0x9c0 [ 972.146187][T32390] do_dentry_open+0x6ab/0x14d0 [ 972.147958][T32390] vfs_open+0x82/0x3f0 [ 972.149440][T32390] dentry_open+0x71/0xd0 [ 972.150946][T32390] ima_calc_file_hash+0xe1/0x380 [ 972.152699][T32390] ima_collect_measurement+0x94f/0xb30 [ 972.154656][T32390] process_measurement+0xdfe/0x2350 [ 972.156444][T32390] ima_file_check+0xcc/0x120 [ 972.158172][T32390] security_file_post_open+0xc4/0x210 [ 972.160029][T32390] path_openat+0x985/0x4280 [ 972.161618][T32390] do_file_open+0x20e/0x430 [ 972.163236][T32390] do_sys_openat2+0x10f/0x1e0 [ 972.164981][T32390] __ia32_compat_sys_openat+0x12d/0x210 [ 972.166999][T32390] __do_fast_syscall_32+0xe7/0x970 [ 972.168786][T32390] do_fast_syscall_32+0x32/0x70 [ 972.170553][T32390] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 972.172684][T32390] [ 972.172684][T32390] -> #3 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 972.175460][T32390] lock_acquire+0x1b9/0x370 [ 972.177125][T32390] __mutex_lock+0x1a4/0x1bd0 [ 972.178770][T32390] process_measurement+0x5ab/0x2350 [ 972.180533][T32390] ima_file_check+0xcc/0x120 [ 972.182231][T32390] security_file_post_open+0xc4/0x210 [ 972.184424][T32390] path_openat+0x985/0x4280 [ 972.186084][T32390] do_file_open_root+0x2f6/0x5a0 [ 972.187785][T32390] file_open_root+0x1c6/0x3f0 [ 972.189406][T32390] kernel_read_file_from_path_initns+0x189/0x260 [ 972.191481][T32390] _request_firmware+0x733/0x13c0 [ 972.193178][T32390] request_firmware+0x35/0x50 [ 972.194800][T32390] reg_reload_regdb+0x85/0x460 [ 972.196433][T32390] genl_family_rcv_msg_doit+0x214/0x300 [ 972.198344][T32390] genl_rcv_msg+0x560/0x800 [ 972.199883][T32390] netlink_rcv_skb+0x159/0x420 [ 972.201503][T32390] genl_rcv+0x28/0x40 [ 972.202921][T32390] netlink_unicast+0x585/0x850 [ 972.204617][T32390] netlink_sendmsg+0x8b0/0xda0 [ 972.206333][T32390] ____sys_sendmsg+0xa4d/0xbe0 [ 972.208347][T32390] ___sys_sendmsg+0x190/0x1e0 [ 972.210396][T32390] __sys_sendmsg+0x160/0x210 [ 972.212054][T32390] __do_fast_syscall_32+0xe7/0x970 [ 972.213843][T32390] do_fast_syscall_32+0x32/0x70 [ 972.215575][T32390] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 972.217902][T32390] [ 972.217902][T32390] -> #2 (cb_lock){++++}-{4:4}: [ 972.220222][T32390] lock_acquire+0x1b9/0x370 [ 972.221926][T32390] down_read+0x99/0x4c0 [ 972.223425][T32390] genl_rcv+0x19/0x40 [ 972.224907][T32390] netlink_unicast+0x585/0x850 [ 972.226599][T32390] netlink_sendmsg+0x8b0/0xda0 [ 972.228318][T32390] sock_sendmsg+0x394/0x410 [ 972.229941][T32390] splice_to_socket+0xb3c/0x11a0 [ 972.231702][T32390] do_splice+0x109c/0x1f90 [ 972.233330][T32390] __do_splice+0x33b/0x370 [ 972.234930][T32390] __ia32_sys_splice+0x189/0x250 [ 972.236700][T32390] __do_fast_syscall_32+0xe7/0x970 [ 972.238540][T32390] do_fast_syscall_32+0x32/0x70 [ 972.240242][T32390] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 972.242464][T32390] [ 972.242464][T32390] -> #1 (&pipe->mutex){+.+.}-{4:4}: [ 972.244785][T32390] lock_acquire+0x1b9/0x370 [ 972.246403][T32390] __mutex_lock+0x1a4/0x1bd0 [ 972.248057][T32390] pipe_lock+0x69/0x80 [ 972.249559][T32390] iter_file_splice_write+0x1fd/0x10b0 [ 972.251421][T32390] do_splice+0x109c/0x1f90 [ 972.253074][T32390] __do_splice+0x33b/0x370 [ 972.254606][T32390] __ia32_sys_splice+0x189/0x250 [ 972.256284][T32390] __do_fast_syscall_32+0xe7/0x970 [ 972.258011][T32390] do_fast_syscall_32+0x32/0x70 [ 972.259652][T32390] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 972.261751][T32390] [ 972.261751][T32390] -> #0 (sb_writers#5){.+.+}-{0:0}: [ 972.263949][T32390] check_prev_add+0xeb/0xe60 [ 972.265529][T32390] __lock_acquire+0x136c/0x1a40 [ 972.267179][T32390] lock_acquire+0x1b9/0x370 [ 972.268726][T32390] mnt_want_write+0x6f/0x410 [ 972.270311][T32390] path_openat+0xad9/0x4280 [ 972.271856][T32390] do_file_open+0x20e/0x430 [ 972.273413][T32390] file_open_name+0x1c3/0x3e0 [ 972.275030][T32390] filp_open+0x2e/0x50 [ 972.276468][T32390] fsg_lun_open+0x6b/0x7b0 [ 972.277980][T32390] fsg_store_file+0x1e7/0x450 [ 972.279562][T32390] configfs_write_iter+0x302/0x4e0 [ 972.281362][T32390] vfs_write+0x6ac/0x1050 [ 972.282878][T32390] ksys_write+0x12a/0x250 [ 972.284383][T32390] __do_fast_syscall_32+0xe7/0x970 [ 972.286134][T32390] do_fast_syscall_32+0x32/0x70 [ 972.287790][T32390] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 972.289976][T32390] [ 972.289976][T32390] other info that might help us debug this: [ 972.289976][T32390] [ 972.293426][T32390] Chain exists of: [ 972.293426][T32390] sb_writers#5 --> &p->frag_sem --> &common->filesem [ 972.293426][T32390] [ 972.297238][T32390] Possible unsafe locking scenario: [ 972.297238][T32390] [ 972.299938][T32390] CPU0 CPU1 [ 972.301630][T32390] ---- ---- [ 972.303267][T32390] lock(&common->filesem); [ 972.304748][T32390] lock(&p->frag_sem); [ 972.306771][T32390] lock(&common->filesem); [ 972.308943][T32390] rlock(sb_writers#5); [ 972.310314][T32390] [ 972.310314][T32390] *** DEADLOCK *** [ 972.310314][T32390] [ 972.312822][T32390] 5 locks held by syz.2.6873/32390: [ 972.314573][T32390] #0: ffff8880247509b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 972.317733][T32390] #1: ffff88801e2c2450 (sb_writers#16){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 972.321311][T32390] #2: ffff8880560a0080 (&buffer->mutex){+.+.}-{4:4}, at: configfs_write_iter+0x76/0x4e0 [ 972.325046][T32390] #3: ffff88802957da70 (&p->frag_sem){.+.+}-{4:4}, at: configfs_write_iter+0x218/0x4e0 [ 972.328848][T32390] #4: ffff888013d64920 (&common->filesem){+.+.}-{4:4}, at: fsg_store_file+0x193/0x450 [ 972.332479][T32390] [ 972.332479][T32390] stack backtrace: SYZFAIL: failed to recv rpc [ 972.334884][T32390] CPU: 1 UID: 0 PID: 32390 Comm: syz.2.6873 Tainted: G L syzkaller #0 PREEMPT(full) [ 972.334916][T32390] Tainted: [L]=SOFTLOCKUP fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 972.334923][T32390] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 972.334935][T32390] Call Trace: [ 972.334943][T32390] [ 972.334951][T32390] dump_stack_lvl+0x100/0x190 [ 972.334974][T32390] print_circular_bug.cold+0x178/0x1c7 [ 972.335006][T32390] check_noncircular+0x146/0x160 [ 972.335038][T32390] check_prev_add+0xeb/0xe60 [ 972.335069][T32390] __lock_acquire+0x136c/0x1a40 [ 972.335101][T32390] lock_acquire+0x1b9/0x370 [ 972.335128][T32390] ? path_openat+0xad9/0x4280 [ 972.335148][T32390] ? __pfx___might_resched+0x10/0x10 [ 972.335179][T32390] mnt_want_write+0x6f/0x410 [ 972.335205][T32390] ? path_openat+0xad9/0x4280 [ 972.335224][T32390] path_openat+0xad9/0x4280 [ 972.335247][T32390] ? __pfx_path_openat+0x10/0x10 [ 972.335264][T32390] ? kasan_save_stack+0x3f/0x50 [ 972.335303][T32390] ? kasan_save_stack+0x30/0x50 [ 972.335325][T32390] ? kasan_save_track+0x14/0x30 [ 972.335344][T32390] ? __kasan_slab_alloc+0x89/0x90 [ 972.335366][T32390] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 972.335388][T32390] ? do_getname_kernel+0x5d/0x250 [ 972.335408][T32390] ? filp_open+0x1d/0x50 [ 972.335430][T32390] ? fsg_lun_open+0x6b/0x7b0 [ 972.335454][T32390] do_file_open+0x20e/0x430 [ 972.335473][T32390] ? __pfx_do_file_open+0x10/0x10 [ 972.335502][T32390] ? rcu_is_watching+0x12/0xc0 [ 972.335525][T32390] file_open_name+0x1c3/0x3e0 [ 972.335549][T32390] ? __pfx_file_open_name+0x10/0x10 [ 972.335572][T32390] ? do_getname_kernel+0x5d/0x250 [ 972.335593][T32390] ? __asan_memcpy+0x3c/0x60 [ 972.335612][T32390] ? do_getname_kernel+0x1be/0x250 [ 972.335634][T32390] filp_open+0x2e/0x50 [ 972.335657][T32390] fsg_lun_open+0x6b/0x7b0 [ 972.335682][T32390] fsg_store_file+0x1e7/0x450 [ 972.335707][T32390] configfs_write_iter+0x302/0x4e0 [ 972.335726][T32390] vfs_write+0x6ac/0x1050 [ 972.335743][T32390] ? __pfx_configfs_write_iter+0x10/0x10 [ 972.335767][T32390] ? __pfx_vfs_write+0x10/0x10 [ 972.335783][T32390] ? find_held_lock+0x2b/0x80 [ 972.335812][T32390] ksys_write+0x12a/0x250 [ 972.335829][T32390] ? __pfx_ksys_write+0x10/0x10 [ 972.335849][T32390] __do_fast_syscall_32+0xe7/0x970 [ 972.335875][T32390] do_fast_syscall_32+0x32/0x70 [ 972.335898][T32390] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 972.335921][T32390] RIP: 0023:0xf701efec [ 972.335943][T32390] Code: Unable to access opcode bytes at 0xf701efc2. [ 972.335951][T32390] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 972.335969][T32390] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000f00 [ 972.335982][T32390] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000000 [ 972.335993][T32390] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 972.336004][T32390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 972.336015][T32390] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 972.336032][T32390] [ 972.449421][T32390] mass_storage.usb0/lun.0: unable to open backing file: file0 [ 973.313393][T15494] bridge_slave_1: left allmulticast mode [ 973.315768][T15494] bridge_slave_1: left promiscuous mode [ 973.318302][T15494] bridge0: port 2(bridge_slave_1) entered disabled state [ 973.322107][T15494] bridge_slave_0: left allmulticast mode [ 973.324437][T15494] bridge_slave_0: left promiscuous mode [ 973.326837][T15494] bridge0: port 1(bridge_slave_0) entered disabled state [ 973.419196][T15494] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 973.422738][T15494] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 973.425851][T15494] bond0 (unregistering): Released all slaves [ 973.472083][T15494] tipc: Disabling bearer [ 973.473983][T15494] tipc: Left network mode [ 973.619794][ T5454] 8021q: adding VLAN 0 to HW filter on device eth9 [ 973.703143][T15494] hsr_slave_0: left promiscuous mode [ 973.705637][T15494] hsr_slave_1: left promiscuous mode [ 973.708422][T15494] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 973.711518][T15494] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 973.774900][T15494] team0 (unregistering): Port device team_slave_1 removed [ 973.781276][T15494] team0 (unregistering): Port device team_slave_0 removed [ 973.833796][ T8638] smbdirect: ib_dev[syz2] removed [ 973.836874][ T5454] 8021q: adding VLAN 0 to HW filter on device eth10 [ 974.016440][ T5454] 8021q: adding VLAN 0 to HW filter on device eth11 [ 974.254324][ T5454] 8021q: adding VLAN 0 to HW filter on device eth12 [ 974.350168][T15494] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 974.472143][T15494] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 974.540432][T15494] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 974.591678][T15494] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 974.655913][T15494] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 974.730410][T15494] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 974.792685][T15494] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 974.826513][ T5454] 8021q: adding VLAN 0 to HW filter on device eth29 [ 974.869156][T15494] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 974.970016][T15494] bridge_slave_1: left allmulticast mode [ 974.971845][T15494] bridge_slave_1: left promiscuous mode [ 974.973683][T15494] bridge0: port 2(bridge_slave_1) entered disabled state [ 974.976733][T15494] bridge_slave_0: left allmulticast mode [ 974.979826][T15494] bridge_slave_0: left promiscuous mode [ 974.981699][T15494] bridge0: port 1(bridge_slave_0) entered disabled state [ 974.986841][T15494] bridge_slave_1: left allmulticast mode [ 974.990196][T15494] bridge_slave_1: left promiscuous mode [ 974.992720][T15494] bridge0: port 2(bridge_slave_1) entered disabled state [ 974.996990][T15494] bridge_slave_0: left allmulticast mode [ 975.000023][T15494] bridge_slave_0: left promiscuous mode [ 975.002534][T15494] bridge0: port 1(bridge_slave_0) entered disabled state [ 975.009107][T15494] batman_adv: batadv0: Interface deactivated: gretap1 [ 975.106704][T15494] batman_adv: batadv0: Removing interface: gretap1 [ 975.123067][T15494] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 975.128203][T15494] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 975.131675][T15494] bond0 (unregistering): Released all slaves [ 975.136125][T15494] bond1 (unregistering): (slave veth5): Releasing backup interface [ 975.140182][T15494] bond1 (unregistering): Released all slaves [ 975.176460][T15494] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 975.180860][T15494] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 975.184874][T15494] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 975.188420][T15494] bond0 (unregistering): Released all slaves [ 975.192207][T15494] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface [ 975.196127][T15494] bond1 (unregistering): Released all slaves [ 975.202671][ T5454] 8021q: adding VLAN 0 to HW filter on device eth30 [ 975.275495][T15494] tipc: Disabling bearer [ 975.277252][T15494] tipc: Disabling bearer [ 975.280412][T15494] tipc: Left network mode [ 975.309899][T15494] tipc: Left network mode [ 975.382265][ T5454] 8021q: adding VLAN 0 to HW filter on device eth31 [ 975.606844][ T5454] 8021q: adding VLAN 0 to HW filter on device eth32 [ 975.725385][T15494] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 975.730016][T15494] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 975.733720][T15494] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 975.736536][T15494] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 975.740094][T15494] batman_adv: batadv0: Interface deactivated: dummy0 [ 975.742712][T15494] batman_adv: batadv0: Removing interface: dummy0 [ 975.749130][T15494] hsr_slave_0: left promiscuous mode [ 975.751860][T15494] hsr_slave_1: left promiscuous mode [ 975.754513][T15494] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 975.760089][T15494] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 975.763708][T15494] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 975.766786][T15494] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 975.775118][T15494] veth1_macvtap: left promiscuous mode [ 975.778033][T15494] veth0_macvtap: left promiscuous mode [ 975.780399][T15494] veth1_vlan: left promiscuous mode [ 975.782568][T15494] veth0_vlan: left promiscuous mode [ 975.785034][T15494] veth1_macvtap: left promiscuous mode [ 975.787419][T15494] veth0_macvtap: left promiscuous mode [ 975.789744][T15494] veth1_vlan: left promiscuous mode [ 975.791855][T15494] veth0_vlan: left promiscuous mode [ 975.937495][ T41] usb 42-1: device descriptor read/8, error -110 [ 975.983681][T15494] team0 (unregistering): Port device team_slave_1 removed [ 975.988900][T15494] team0 (unregistering): Port device team_slave_0 removed [ 976.114932][T15494] team0 (unregistering): Port device team_slave_1 removed [ 976.119701][T15494] team0 (unregistering): Port device team_slave_0 removed [ 976.151325][ T5454] 8021q: adding VLAN 0 to HW filter on device eth33 [ 976.330172][ T5454] 8021q: adding VLAN 0 to HW filter on device eth34 [ 976.367743][ T41] usb usb42-port1: attempt power cycle [ 976.468786][ T5454] 8021q: adding VLAN 0 to HW filter on device eth35 [ 976.606884][ T5454] 8021q: adding VLAN 0 to HW filter on device eth36 [ 976.939316][ T41] usb usb42-port1: unable to enumerate USB device