last executing test programs: 2m4.205303341s ago: executing program 1 (id=536): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) socket$nl_route(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x84, 0x0, 0x0) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r4, 0x0, 0x0, 0x20080804, &(0x7f0000000140)={0x11, 0x1, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000000180)=@file={0x1}, 0x6e) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000040000000000000000000003000000000300000002000000000000000000000000000001050000000800000002000000000000070000000000002e"], 0x0, 0x50}, 0x28) listen(r6, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) connect$unix(r7, &(0x7f0000000280)=@file={0x1}, 0x6e) connect$unix(r7, &(0x7f0000000440)=@file={0x1}, 0x6e) socket$l2tp6(0xa, 0x2, 0x73) getpeername$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000340)=0x20) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ff9000/0x4000)=nil) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) lseek(0xffffffffffffffff, 0x7fffffffffffffff, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004010) 2m2.896888114s ago: executing program 1 (id=546): setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x4e23, 0x8, @mcast2, 0x8001}, {0xa, 0x4e20, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x5, {[0x4, 0x2, 0x7, 0x1, 0xa, 0xf, 0x7, 0x2]}}, 0x5c) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040)=0x3, &(0x7f0000000140)=0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x0) 2m2.896766376s ago: executing program 1 (id=547): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd0500070088000000060005"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 2m2.817342202s ago: executing program 1 (id=548): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c0000006800010003001000fdffff7f00000000000000000c0002000100000a15000000080010"], 0x2c}, 0x1, 0x0, 0x0, 0x4008018}, 0x4004080) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000"], 0x48) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r1) syz_ublk_setup_io_uring(0x29ff, &(0x7f0000000000)={0x0, 0x105c, 0x4000, 0x0, 0x3d3, 0x0, r1}, &(0x7f0000000100), &(0x7f0000000180), &(0x7f0000000240)) openat$vhost_vsock(0xffffff9c, 0x0, 0x2, 0x0) request_key(0x0, 0x0, 0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_emit_ethernet(0x66, 0x0, 0x0) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0xf000, 0x1f00, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffde, 0x10000, 0x2, 0x15e, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x80, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x4e52ba9def4ca6b0, 0x3, 0x0, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x1, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) 2m1.976787302s ago: executing program 1 (id=555): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001010000000000000700000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7"], 0x0, 0x8fab185, 0x0, 0x0, 0x41000, 0x61, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000002100210107000000000000000a000000000000000000000008001a"], 0x24}}, 0x4004000) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) unshare(0x64000600) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60001, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="080086dd0001280004000003a60c6eec00be004429fffe800000000088fc70738daf7b3200aaff020000000000000000000000000001"], 0xfdef) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9) 2m1.837110724s ago: executing program 1 (id=559): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40140, 0x1) r1 = eventfd(0x2) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x200002, 0x4) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7784642eef3d", @ANYRESHEX=r1, @ANYBLOB=',\x00']) r2 = syz_open_dev$evdev(&(0x7f0000000240), 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f00000000c0)=0x40000003) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r3, &(0x7f0000000080)='7', 0x1) write$char_usb(r3, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = eventfd2(0x80000000, 0x0) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000040)={r6, 0x7, 0x3}) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x40010, r7, 0x61176000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$unix(0x1, 0x1, 0x0) bind$unix(r9, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r9, 0x0) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x25, 0x9, 0x70bd25, 0x25dfdbfd, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4040002}, 0x4000080) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)=@ipv4_newroute={0x38, 0x18, 0x1, 0xfffffffc, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0xff, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8}}}}]}, 0x38}}, 0x0) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)=ANY=[@ANYBLOB="5c00000009060300000000000000000007000000340007800c000180080001407f0000010c001480080001400a01010006000440500000000600054050640000050007000600000005000100060000000900020073797a31"], 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 1m46.872250321s ago: executing program 32 (id=559): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40140, 0x1) r1 = eventfd(0x2) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x200002, 0x4) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7784642eef3d", @ANYRESHEX=r1, @ANYBLOB=',\x00']) r2 = syz_open_dev$evdev(&(0x7f0000000240), 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f00000000c0)=0x40000003) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r3, &(0x7f0000000080)='7', 0x1) write$char_usb(r3, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = eventfd2(0x80000000, 0x0) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000040)={r6, 0x7, 0x3}) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x40010, r7, 0x61176000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$unix(0x1, 0x1, 0x0) bind$unix(r9, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r9, 0x0) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x25, 0x9, 0x70bd25, 0x25dfdbfd, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4040002}, 0x4000080) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)=@ipv4_newroute={0x38, 0x18, 0x1, 0xfffffffc, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0xff, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8}}}}]}, 0x38}}, 0x0) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)=ANY=[@ANYBLOB="5c00000009060300000000000000000007000000340007800c000180080001407f0000010c001480080001400a01010006000440500000000600054050640000050007000600000005000100060000000900020073797a31"], 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 1m14.868635839s ago: executing program 4 (id=841): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 1m14.867638115s ago: executing program 4 (id=842): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0xc88c5) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/devices/system/node/node0/reclaim\x00', 0x1, 0x0) write(r2, &(0x7f0000000800)='100000', 0x6) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {}, {0x8, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x24048001}, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r1, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) recvmmsg(r1, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x8000, 0x0, 0x0, 'queue0\x00'}) syz_emit_ethernet(0x3e, &(0x7f0000000340)=ANY=[@ANYBLOB="0180d2000003aaaaaaaaaa000806450000300065000000e3ffffffffff2affffff010000000000000000000000000000005b998568db5e44318f79c8259b2c7b64ba37db0fd8"], 0x0) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x3b2, @tick=0xe6, 0x9, {0x3}, 0x0, 0x2}) 1m14.681320789s ago: executing program 4 (id=844): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0xe, 0x0, &(0x7f00000000c0)="b994bc444b9893b04bf30981fd1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x1}, 0x50) 1m14.599244339s ago: executing program 4 (id=845): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) sendmmsg$sock(r0, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}}], 0x1, 0x20000000) 1m14.598323117s ago: executing program 4 (id=846): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x37c13, 0x71a2b}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x48}, @IFLA_TXQLEN={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 1m14.467648209s ago: executing program 4 (id=849): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0x95008100, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000000880)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000c80)={r4, 0x100000001, 0xfffffffffffffffd}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) r5 = socket$packet(0x11, 0x2, 0x300) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r9 = fanotify_init(0xf00, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x2000001, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}}) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r8, 0x890c, &(0x7f0000000340)={@loopback, @dev={0xfe, 0x80, '\x00', 0x19}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x0, 0x4, 0x0, 0x2f4c, 0x200000, r10}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000140)=r7, 0x4) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x70bd2a, 0x25dfdbfd, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) 1m10.977209127s ago: executing program 2 (id=886): setns(0xc9, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) read(r0, &(0x7f00000001c0)=""/64, 0xfdef) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, 0x8, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 1m10.873111205s ago: executing program 2 (id=888): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010024bd7000fcdbdf2521000000", @ANYRES32=r2, @ANYBLOB="14002c80080000008009"], 0x30}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3ea35512) 1m10.807854892s ago: executing program 2 (id=889): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x161140, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0x0, 0x13) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r1 = syz_open_dev$dri(&(0x7f00000003c0), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000300)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r2], &(0x7f0000000000), &(0x7f0000000200), &(0x7f0000000000)=[0x2], 0x0, 0x1}) 1m10.80736592s ago: executing program 2 (id=891): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000280)={0x0, @l2tp={0x2, 0x0, @private=0xa010100, 0x3}, @nl=@unspec, @isdn={0x22, 0x2, 0x7, 0xfe, 0x9}, 0xa55c, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000240)='ip6_vti0\x00', 0x7, 0x2000004, 0x3}) fchdir(r1) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) read$FUSE(r0, &(0x7f0000004300)={0x2020}, 0x2020) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0405405, &(0x7f0000000140)={{0x3, 0x0, 0xfffffffb, 0x1, 0xffffb817}, 0xffffffff, 0x5, 0x9}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) ioctl$DRM_IOCTL_PANTHOR_GROUP_CREATE(r0, 0xc0386447, &(0x7f00000001c0)={{0x8, 0x3, &(0x7f0000000180)=[{0x49, 0x0, 0x3ff}, {0xff, 0x0, 0x841}, {0x7, 0x0, 0x9}]}, 0xd, 0x0, 0xef, 0x0, 0x0, 0xe6e, 0x1, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_PANTHOR_GROUP_DESTROY(r0, 0xc0086448, &(0x7f0000000340)={r4}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r5, 0x40046210, &(0x7f0000000000)) r6 = gettid() rt_sigtimedwait(&(0x7f00000000c0)={[0x4000000a]}, 0x0, 0x0, 0x8) tkill(r6, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) shmdt(0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYRES32=r3, @ANYRESDEC=r5, @ANYRES64=r5], 0x58}, 0x1, 0x0, 0x0, 0x24046044}, 0x0) r7 = openat$cdrom(0xffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$CDROMRESUME(r7, 0x5302) syz_open_dev$dri(&(0x7f0000000080), 0xa00, 0x801) r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x8a8008, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r9]) close(0x3) 1m10.076580585s ago: executing program 2 (id=894): setresuid(0xee01, 0x0, 0x0) r0 = getpid() utimensat(0xffffffffffffffff, 0x0, 0x0, 0x100) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x1fc) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)=0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f000000a280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r7 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r6, r6, 0x2f, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r7, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={r7, r6, 0x4, r6}, 0x10) syz_fuse_handle_req(r3, &(0x7f0000002140)="897c6500ff3035465c7acb4e06980b05687c1480c7aafe631c0543db2bf0d6f539506e8782da06c1ca018774d72e9e5a3418ab66ee78dad68457b17ec9d47bf7d8272d607c1c0a4bd906f0cee7f8451828d2458596bdd6a459ba18ebaf61b38f5d66c27fa8a024ad7832a85e58689a4c254c94cbcf7208fce6e61d9566459789d15a6f91dd7db7c54cc3a94da956fb290a8a15f849270bc459d9d9f47801be86dd5c9d18382081a993b7bfde5c28adca4c71329afd6be743b076033b5859891703eb65fa256d6f47450b6edacbd05a9bd8b372e90cfc30f32826566dac6c48e6ef001881cbc30482f9ec469e476a101da496b8c0785eaf875d3608b0c49e9d39baaa1041f903a805f0f24aa63722fa2d87b98595fa5cfaf8b79c458de43ee39904e7cac7540a934b4108957785d58807abff186949f1b94cd21b724aff34ac45c7066dcdbd68ea7b766af9d045cd7fafeafc5c5a0c3400ef4e0c71a6fdd5b8d68a6f317644cda9d2fd2c839a82b97b3d909b54c672227bef573c9de1991d65a63017f724d1f7f1575e69db53318a7fd7065b303e751518c8eef04f642dbd4dfa349040a7b5401050ffc2b4ef62803a7c8eaba99e011dfac24d81b2b61e0b0581e53bf520f623eca17f0545c5e59ff15b527475f970f589894ae589145fa4283f7225088ccfeba1d72e9128f8c223ae1840f2edae3dbcdf7e560d5cdf4f71c9ada1931c0f8312c000101b264aaddb9fab166ba8d8903d6098eca20935ca607ea79e936798b3dfb22a7e159abb234cf21f3733dbf263a8ff116092f251659108892b2e21e1b428fd225096a5040270b2d70347013eaa1fd8e452942200283aab092c4ffc5b8b427b5d691a5a773e09da20539ff0f8214331c5d84107ae8a59aeb58efe22d7a079e446f1dfb07510377799bfdc7ee59cabcd76af0fe8a427ac8258ff33bbad5a8061f1cfdfbf375d73d676cc7916d6658ce46a0b17ad6350150f98e3512b513e25ca73f5f5df0a1fb9582ace7906c493fe1fd2889d9aac0b7c29c2b6c205537627bad64df433336a5ace32ca871e51b4dab0fbb00886a1fa81a98b74de0a26cebf65723515ebb807fc3c161ed42d1a7b6b55717613577ea437f3a2967c66ce45ff85a6a35b7cd40625fc575b107d7394e3d2db51d58347276c33e21f50b5a6b5672bf9fda63139bb75aead1fe4ee9a4064af5a5958466aa39faa6d821489fa415224c8d69d3b5922236832c2b1e4f6b8863b32f9aea83fb522a2de081d674502b48f73ce6db98d84136059b4a6676bc85ac6b7626329afa9bc7d3f9f2caa3c4d872744e0a8e02d72a75c6c545b8ec8e15b6fb0fe4185bd0d154960e6fef05ba40e5fe2968eb1301dcc52a03337179e74ba1522af93d77827845f8941c69ed8bb84567e3c63f1cc378a542f1de7007b688ff0a9c69d5861f0b85402c30a2fd391c52bafbe65f8e82135fd38361d7c0b43c982b2f3e7cb09c40c7e215114f4243d670cd576bcd93c1e959345170c75d6c3cf89cf8c2c70dc792e646e7c649d4c5f36bb016c7acd466ad58473d40dfef36394e581065a8581ab852250403cf372ac0065bf757fa3f445424ac0d82aec1938a2ea116bdfd306baa1cb06c62a4a97d66ab1b9489469cb8ba842da12e310caed02c5ef05c0be1e1e8c9c8b87d6871c94c57d164d08672b205c948086a06a545b266b7ad902a908681eb188bc51b6190b5cb9d8ca59b8c4c6e7369c00d6f6119fd5d437239e3d3c89cb81e09e560fb817590106015f08e7b09f1e1e65bfab3b8489fa058e24081978b9e25463d9945bfbca81c08885d4b6d4c62e217bd9e19460762f36c66bc948fe31cde089626fbb310e3c78a8d3f2eac21d374d9b58d887235d3a95721168e4b9475849071d60ecfe7ea5d6c4bf60da3747612ef59bb651270f326c0af31bc8c71361f851de34ccb3c8071b96f1128d7ee79b41246e566edd0272dbd3ccfe472b38e5e03d3ef83218bd498e6de8b4d92cb6f82716449ede7ba845028eccdb9137be8a622ac88ac53118fbc39637fa7a93cd3abc6f7671c7804420d66e94720acbcac916950f9baca77fef4217155ccc2cd0507339a0486f9f468eb28772986ee768c63eba671bf8c52e48a2a5dc2cc24fe925368706c2d712dd1064692b0fb2a32ddfbd4a0ffcf9c2abcedaae6e527bc1d42637aff2a275b76a7a7f010e42e1cc1d27141f6c3585a2bf58c6c5789ce61551d10118a000e3764631ec0b7f4b1a6f22a678133a30940b79dc76f863dd9f6e0d7776300898c97cef286c731c2050928c492439256e481652bff0d202db3cfdc54c9816ceea7895357bfa0362fad79afd09ed55189294d6ead7e898ac091cddbe7efcedb314bc02a18dd5bbddc42e089124758bb491fd1536aab27c5c124567bc325e7028bced5a179a011d1cb9a5ffb61d7af863e91ec8e60495561188b74d158ba1418228d44e92915a22eb1c166ef7d6179e84381ed950ffd747f13e24172942d922ca3109fb8b1e4e6264fa4a4eec75ad0d0e22579d90f45d6cd157300e38ae665eb56457202e25a8dd5877ba99725de288660badd2704345d9bad208c903ba27ea167dd45a77f77b6502b525b2973270582858183c784c324c1366fbba8d410c38bf75b41e067f6a9a017c56595161db4fc5639393fdafb1f148d3f416c1adc5fe1ab9cebe4689855c9b4bda6dcba5d5fa858a1b87d2ad23cdf54dbdf4d14aa4462da0b6f1107f4afa0091c2643508861a4d9f133ba77751941bb8fb756abf1a104205b80d47a3b4a59724d959c8b5833da4f56fb6613231f230a9378c9af741e94fd2c7213ac1d7625559b3f032f6c8df3ab441929720fe43d7c548cc661eed5b3c62b3c61f538ea3228376e2a18c6da2ad906322f64fb4865cde8e1889a8e5237fd6a39bbd6662f1dedc22fbd74e4376fa610cd710703dbd3924a38beae69783d1d5abf36122cbb87129ba719042748f060f4303a3199c5891c5040fd8cdb9761b006bf64cdcb65e5cc50a29994b8c1c34b83760ece12ed9ed7c392a7f8911cdf23a1afe0d7db1bf342aa0123dd5cd31339f5c8e160c4efef882602b3eccbe76fb690162b8bfb8a31910bcdf9a4a5dde76c2ac2fcd8678add7a000cfdcab398eb2171c026313eb6eb56b4b87bf8ef93f7f8a1c0bcc3775b681d4229ea561cb52281d8ba4315c3694ed08433596884d5a7ce3a8b1f82359846b7136726e2fe37bf4f7b7e2206cdcdb0705ced9f0dcaaa2ed3a78ea70d2cfeab668eb321400fc955e9aeb7bbcf86cd03f02dd443503a1480d9d9f899f53bd747a95293786798fc59fceb09e686a9328da4f929b6201841bbbefaffcf3386abdf69540e3b46a643ec10f0acf21f27c0053dc13f18485dbc898729dfbeaaa4887b58cd442d7ffa941808cd9658595be8650a815b088621278d89f0d8a4252566b923df3a3cd65c0e4af08fad385927251b31d35f75eaf25e6cf13a579aeeb0bcc0a14ca4a20a6831d532be0b2af3821792a2df95131b7fafef245aa19b214053342aa820c35858d13f84e496294529411015c41ed447b5b51dc44a45d52552a2be1abfc157f3ace7bfa32d5b931421d5a152dd66b7bf549311b08325e5a7201f793037b38990bedeca8a647c08d2478670f8fc2b4e8983ea18bcd514daeeeeb9d7a778f783c76edf01bd4beda4b77b612cd2e865c2e4f58ca7ae06147bf66ae6aee221cf9b9505dc07e6fb6cf4f82dc8c406c78e270210c11cf2531011ed678d9dfe1f49c9a69a95a9f3b0e5b624d9c2664d787ab911b75a4a38d63e9d6c353f8aaf433ff961fe5e34d84936ead0d0bc7954caf84e541f5c6f3f20c9eed21eb0316b82c0dc5182540e63a0af25565496792153d6395adc2b8d68b8bcd93dd110ff5685879db4384ec390d44b89663d43a5de3bdc0e103b7c1b355dc5f6fe3518c93628780ba03f156badea65d1d0af8433c9e8a975fdd19453da662a33fa9f0f5fa15fdb216b483fb48370a967246e0b763df8b3bc7924a6c76c4b114f803dbfa3b312e6815b4eb67be167283a9e482d9a5beac250089d069d4c386b7fda5fc228404a0f58b12ca4dc131c381b49b42b570bc1c2745f5f24afaf65a26a21f6d92f52c9f8de36cb76bacbaa0eef98ba6b7dbbc2629a03bb2b6f83fc5adaf20c217bc8d0f0d2421e01472532bcb546aeb2d483c8f95011a3ba1d2fd8086a717cb015dd53064ef4a80b6d6fdc12d9069223fdf2aa9b192a0e0bdb38436f49d9eedfef3665815633fee4344aff11162526362b70b18e1dbedbb5d8c4698860beccf667851878a25a1e766caae2861f2e23404aac859e62fdfeac06a6057554828d7035806e8ab3ee2fa6d711e5811db61231a22f4672f6a11b27641f350bcab78792362e6ebc1c054a643bbbf2746678c14dc567d1f73e37005c8ab6374c4d8d3106384a2d32c5fcf05cb9ba97cb7fa1aff11505a701bead543e555f3901ef3b693d5b9ebf49518c3509af042b7e84b1b867c22b7e08725220e4338fd074edce428212e6a3563a08e2ccd8ab71910256532904542e93d5c7deb5bf5d49beb3202d4da4f643649e55edbb91188cdcf0883a40c6ed6b8a086fb5c50dc08fee00308420121d4c7431b3cfb80f9c1e099423ac451d67b12e930d9e391d0a799c7d4b54a0d56ea0aae00c1d009e21fb5459416b464b227d66ccc1a68da59d64c1583dee54bbcd7d61ffe541fd0fb7452adba91906918966a7d58019ad1f8fdebeceeed7018837b6e4272eefeec8385abe7207fb2d7061fa6cdc478165a98971f9729b818a73edefed976d5c7c0a651c091cfd1174c020e39330a79144271fe4cbc61ea0ffa274d0d87d06dd08c1d5f8a0364d46ef7b54426bc286330c75fa257afeb2715c2ae511ff53b1189cc59ab80b1325fbdcedfdb8f36ed71f70091116e16b52188b794e637755027caac8db8554f8674b844964c710cacd7a9d6b06baf6fef76159a380e639b0d3e66080a7cf7f86baac01dbe47fe687fcef2f3bfbf6f8fba045181dee688360a11ee56e5fc73ed31c0e2924ae57f0cc93c63a30662a65c5d5f17123ae28cc5b74dd13ed81b03dc7fa61dc575668868c0df12d3553269f04ba79084d070abcdbd4745de80e90e4e3e524f27249b5c4a2f2d4c8b331b0cb6d4efe62a298daacc6eacdfe008c1f912795dbdc37098c42db860953120fda709baa6d46f52eaba781505e68561ca0f281e850532ef8e7c779883e312806e1c357bdef8c5c08516e710cfa6eb8686e8bf3bff036b3fcdc4036541d93530ce6f598442c24170b307ef05f23c93aa0ec96831b532d8120402214a940d1fa01ed649061a4a71308be189cffd729a196754fb8a75f23851189589be1b819f0612cad3dc94ccee88f4ab9ef6ac9c7daad8cf94f5ed9496c4c824e5b4f66ce32a80e7a6ef069a32f6812e656aa5f5742bd432afdf026c86e8f28212c1139dad47d7fc07e5c1a83e993daaa4a4bb5f0c9435ccab2a10f867ffe259dba7a1d9168619b1e3048860a5122e4a5d0b00372eaae861a0cc88549852fffa76e6d78739b654d67df15ea97a9a46b7c382d83191a673aa619b4a10ec05bc681379b0d6df824cb6fe158e9d89ae5dd1ef66976f67972b553db52eb6feef836dca6026293f83a61e117754a7424a3da63bd82d017f87f0603e2a9b8fc550aae611681935ae91f7ca2b5341b05a25208bd28f1a202a7f2a213b1d7411ffb557470aec00c4d13c70163f22a038a189710dd19a47e8db4a87c3fd329a63abca172a9810edad2d8e19ef85b57ea4287cfb3d740d7ea3fa9c80d06e1aa84b317f678ddb3c147ba5e0db432125f59ca4944c8e9050281ca82a3ecf67b2a5df678697a52a7297af1ecb03c586af7b91d74e881964ed95f7be12fa07e2a4e71aab8b913a13996fa33e915144bf00e49b8e7adec5b2c4b8165f54ba3155230e241ee023af77a295ab87c40f63f6092ccee05cb08a265abe8f57c9919bf45064b6c2240ba8011db223a283a4e2292d9b59df8c9a4fdc763f0631007db9976f351717db0e6b5f9c6e5f227c2efa1ae5fe0be1af0b22fc164f9f9678a01fe8b059749fe8a2972455732da1989c609d191544ef9fbb3e58da93ec4a582430523f260b776e4d747312747d18a9bae14740f5dcd35fd1072f8a4d81573b5882203be856b62d7e1d87081a9e431872c9d68864197bbc61f15dd8aeae950d34d6ce97182deebd2ad64cabd1c723baf512acfc7e94675b31369bd60e155af79b97bb734312569f736dcd5b5a78223ffaa0f7e93e1a112cb9f6a5b88fe3cf12c30024c16c6b8380fdf086c662665d3751c11617cc4dbd5b8bc7543301a23fbc90ba8d060193cdc2b68c31c734d516707b759f7db009c8f06e69b40154e1cd8ae444afb28134acdf871136b4fd78bd86d7faaaf618afb25e92d1ee37cdff0595278f9565f5eb109e181e9cacec2f22e32e9f34774ee223fdb992febcc5dbc5cceeda16cbcf1434730d859e7e03d36ff17636a7a7e66956b515894da114f3040909f90ce3cfbb2d7d46e37049c0fb124e0683d662eb427cd7b851ada229451e6e3aaee64b9964ced3036bde5d9d80eb062474f96ecfb9b65fcafc719494ac12ab7df245475f2a5e7f85ca4789833ca373e6214d39176c8f51dde87a4cfe5414a20f68bb9f34709979b99533ba3435c4aa56e525195e10ffd00f8e41aee30a909c07b973bbf733d45500b539ebe2206d438216690998d9e256db1b7ac6bef3e810785e1986985c945a2b820323a592721fcfa444934d0faf8aa439d5efca5dcd77b72d1eb91b3790d50d0a7483e354c415f81d99c133d648c1293e795b3c43f9b47e23ef982e10072ea5baafb0df675e69af1807b225afa0cec3eafbde8535d3ecaa0ea6ddbffe4465207425bb003670320324df0aeeb16b38a043f9c0e85673b36def332fd68b2b1e6edda621d0cadebbced8c7fc8f890489115b457249e8d8103676b3207a472804d33e0fe511ac56cd8dc5333b2333892f87b455940ada78fcf5075c358fce990e6f65f095eb416d876ce6f120b8b02cfa6b176ee269c942f881247c3e464cce2aa65c39137607c585aeb4b5f24f5f8e058c9c8b48003c1809da3e8aad1bee7955c3a976d43fe132e2b16f4758a0a9884e51d13b930675a4361ff366b0fed190ad7b2a00385528951e39cd44ea06d8921b9d613d7626221154cf86249a550198fe4e5b05ad3052b474291da0a0a2f701759859bc0392adf243ad5eca89e6d18e28dff99ef95743bcabe75504be8c715cd6360facf3bb06cb97c29989d4f6ff5083573cefe6ef0b39a252a2678112fa88e5b06c9a6bfc9597cc96e5a49710c4fc120fb0da4945b9d94e46de1e9989d0fc3d8d20df23d815b660c799a903f651b0d013f7fe158f1d297f7fcb6a48780ca5525f1d081ada0aafa83552318b848783306549750b6254cf676c7b934cf7fdab992717f0cdc089b34278f3fb151cadde14d0d3250e85a4b0ff2a2778a219aa40563d3ef575285484424b6d0e7cc8392342e4848c6fc8cb20fa1b450cc4c1fea19f3bbdd9e342e6c49cd7ac893b1eda2e93d1d74d20969465946b398fbc733757741ac822c4a118632cd242a439fc37512cf79b7c629504ccc1e7f2f11798955c3262b5e9695625ba74d8050e20f51d4769e1ab938f487f1bc4b55b5abcaa3ec079c2d0972b2ae9bfb7c5423b959119292ea05f1d79d35afe47e49d97c946b193bffc0a8f607f18a6845cecbbdd98cd351db2b2dce05a4848ba84a6a497b4618950130cb7e76c03d0976eb2fb41d3a42a1430063ed8e5b8c67e80fd4fc1148911958babbcbff33a6505de209b0d9320017fd736fd027a16564008ab2e1f48a6dd66c9256730e9fda0a606875d0871b2b9b0bc2ed4e1b696dbf0283c8dc72cf4338e595266f5390bc3a21f988353118f2948fc75d050ea076b73508d9ed89bade0ba305c1f4e5daf9d40d2f5e7ababed8d1b1d919c61a6d3fb149c1a9b44e38585a2fe322f83d73a3aecb44da3f0e82942d75d62ed3f91eb44f3411df014f88839e4cb1e21b9b259d4eb4adaf6b0be433d0ed4c87ec77dde5ee9d566e3dd8d928fc1875c63af26c59daba5ae267d9bd5da72b99a03e6a33cc48ed961ab484ff4a46c2d5fa597e626e00b530d7b9a9705e4e08d03f3a7f2a5a5233ad6340e3b5c89db81ca713b6d7d855c6324955f85109b204566f50178cd88abe3fcba25de905e8ea0b75ad51831761ed9b1af2470f976f05ec73bf74d137c207270cfd614170518cdc449aeeb663e114359c8124eaf2499d8cf5dc84a0872301db2e57b50bd285060ec4390d99d4ae3674ca3bb8679c1b08e566ba4f30daec8684a980055eb43cb5a1306c4b52a154682aa96637e06c869278aa2f74ef7345632c11265ef8ac97e953745302556881ba0cb590fef271c0abb193fb84d18ee3f24d9976ae816b857d6f68d1fdfe10b312c799fe014debf875d04bff8b4f387859e97c6bf13f7083c28a2045a0b5eb09c94e781a165965e8617c0efed1701ea9667aeca26d9577ea7b1242e1d91b25d6a66756cc627648a293b9f4345966bc469fafaeddc1118d0972bd5c7751a1f51e5989fd952f314ae10417c97b41e60ebfbc47e496486fa4a89fd16aea7fa1eabebd26eb2a37a3e2b351e0c9d2f67b2e5be0f921adc9b6045b045948e5103af0e5050b9c0799b513c00865deebda730de538f956ceb6164e08bd6f58655a294b4b44fc65309b30f9c00f92ef5bd5b911a3d830f72c258b19521bb8e80db02129954efb61423f518d2c5f36587303890cad9a93fa4f4bcd0e24c67db679c67ea59c1350b8442577632d5e8735833f3daf5a74bc7bd82659a81beba8c889632efe03cd24187aee856cf659e16e195464f52f2b984fc7a299e7b2aa53979a147ebed35705d5e89691666536f2febacfcef9b32d14952f958b72512869e4f6a0a34176918217888b1eb8b89322ebb6bb1dead2b4744e728479880db70e6147edaff6c3f083f18e0696bdbd78cf0bda14d9f42e5c1077ced00041aadff90470aacec0e48e2a5f2a0ed37818a173b96061e8c5bf24c0bde9e09f9e0ddb8e13306ef1d4eb8043ebadde5d7553e5212ecd4691eb426251f9d6720b8276ac543dde02399a35d974b22c1727d4b6df01957cae47443b706d43165e01d6932b136f561ce837431254cfb2a6e7d8070a2d3805aaa15b3c10ccd0cda2e9b418ce9ef380e5d08217752e12b3b892d03a9495c83d78d674612fde5a67738b2d4649ce44606ecce6bf3bd1293eca246a83643e4f1c7ba362b110e07c8479f216e3d4afc4fcb8d0820c8ab702a66d8183e83174597035e92b9b500dee08c80b927b42c3689c7c9617b4112c9e54cbfa51e989b5fd42b80c595d3edd265f138e8128cfbbb0e4f53aa0aa95a2ecda4518b2e564c42d5de7671560843d08103b9bdceac5fdeb0b1266f72f491265dd2b2b80a225a50955167da1812364ea340d82f61535401bae6f3140a8795d7c318a64cee4676627244930957b2f0b227be21b72d90027e6a5a7af3c59470c74dcdb71d1ef090a0f49c91acd604c792385c8f4e085765292822ee5eca03885fd6bfeaca9b3bbbdeac939f7846a487c5a483ed1e4fbf37c93886ea27bb35c812089b900b77c7c924147e97b6a71533610750bc84921012aa8158b213f7601d934a20bdd1f757b0a33042a683af6b9069f3900059d7f80f9fdcc9f33ece8cf7888dc9e24f1fc6ca0ecccf161c5334c60f440feb3acfc3d115011c176dfa05314c5bcf089e3c82bbe7680a3eefdcdbf3ac27265b779db4f49bade0128eda6e29bc5933ef454601db1b49628fd39ab938794fa46a33937a086ece7050d31a21524e2f0cacb307ed4412a2078636f9cc8e11c5c31cc0f9edd7be6d1e31a1513a58e25215f5a24245cb988589e6d5e5119f4f6557c697fad7d1c3a7e3bae064db4382701e33e48c5b6a52fe9141a385ef2325c6f7781134607e98bfd02c43d6deefaa861700388b40d98e941cfb2ddec209f977e8b9f93d29fdbf85e3010ce7cd622e8c75ce3df535e392052b6d65d5042d2a6e78bbfe5ee146e8b18d4bc7fb024dbba57cbe0402205593766a313950cb719d00c67bb6b3bcaa1015b89e820f11475afce655947113a7c3dcbb52427f090df994fbf076db867e0ab3f6125fb8884c1d13ff3e99fab5fa8b9f0b72cb44db4d0a48d9ec17f9733764e213c40a15ad821ec60e4a88cb2fd9dd9a4f35e6a708f4b74067f4be3f03a95261f6b191df53fa5bb5164e4a164630ad9ce39087aa950ad9e60cd2c44fa2237c49abf858c97737fd21180fd0b9542767150fbed3f39a29e6c3484d9437e15d2439f2a54b2a1ac7e63e6c436658abc3f1dd52d984f6c6901768a8cf2ec98ebf44e90e0fc0c24f8957c62e05d8eacecaf25b178fd710af609a8a1bc4d7955b5f0cb4f48a37685e6304ea5843573a1abff37b5106916c83c8f23f939a0dc43aea8d196191ed6e18dd793990d1f37d7de0bf8fac6f469843724eaab86be8a483be281b8ecf4aa29d9c571951cde8cd8c2aaf4d597ac2cb48f23fad145916920a55d655924940573b64dbd42a280cddc4810434f930183fdbbdc72db1491a4c9d44daf9b1bc2fecd855508648063040faeb125da0e68e6cd2002181118eecff0be1dd8eae726af5d451630cd65119c52abd6dded97f931202f186a18c4ba34bc2c3f6d765e2d8f445e959f26ffb55827cf3ff2cc0289f17b82c8caa5a2d3d54306a300f0ef42bbe4ea9e32c5d4b1173942745cdcfe4f5d1619eefaf8dc600afbc9171d516f7f4b35331d0b9be005132ffad5e9df59710278b842afb626a78b8b8b37fc3a894dc705b2d4e0940cb264e9dc87eaa148e6faf78125462f28a0f1d7b3c65a291b85713fa71ffc478f6601e8716c35489f4a54ed0c70bcfd5502cc91374dc3c982075c5180398bc6b195b36e79dcc4087cb990cc9d964a150e0dcc887d496bdd27c3f298736b9ad8345ba2df46021964cf43c38f9d2e94b77bee2b7bf059e0870ff9f17b9ef1320c0aa88a2fa9781e9017ab64643de9a3df9ed4b8cfd8fa080a2e494409520b795eb1517d224a05e450c4c8ae0e9fd29c0e72d3a592cce55f6dd5107f21214e1a3f9a5448384de06149f959ec0c92790f0ff229ab4971171f1c528ae6d095ec007bf5e7f55d623a68194e9ea8edc3af418075338328f24e7504341c22bef72c2963fc9c3237ba990d29c2c8aa3007395f6d96e95b40ee1b18dbad550bf39d0d98268cb74dde76d987c3169c9067495fb1b88508bbb7e94cbb7dfc15c03b1d5b163132c8a468906f02d422a8cf98d0b432b5779dd962074b72dd27439b2e94312f573435e5aa84664432c1914839cd6e172186ce93eeb1d7cb0659696d9d550eb3b185f8c6ee16e53f78233cbe709f99d2879d63d93f7d0ed133241d2f1ab1eb2c56605ca0f0e01c39ab0ba2370fe5c4e68de0561b517ff9a10023c386236398372c7176e35443e2cf5dd6cbed9f23395f231e6a54f65626cb5860a8b72122c34664119e7c47204ef4a70583a", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x2, {0x3, 0x3, 0x0, 0x400000000000000, 0xfffffffd, 0x4, {0x2, 0x8, 0x0, 0x1, 0x10000, 0x0, 0x5, 0x0, 0x9, 0xc000, 0x0, r4, r5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = add_key(&(0x7f0000002340)='big_key\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r8, &(0x7f00000000c0)=""/4096, 0x1000) keyctl$read(0xb, r8, &(0x7f00000010c0)=""/4096, 0x1000) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000700)={r0, r2, r5}, 0xc) r9 = syz_pidfd_open(r0, 0x0) setns(r9, 0x24020000) syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r10 = accept4$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e, 0x800) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000600)={0x7, &(0x7f0000000580)=[{0x5, 0x5, 0x9, 0x6}, {0x8, 0x8, 0x2, 0x90}, {0x1000, 0x9, 0xe, 0x3}, {0x4, 0x9, 0x2, 0x7}, {0x8, 0x7, 0xc2, 0xf3f4}, {0x5, 0xfd, 0x7, 0xb0}, {0x8000, 0x7a, 0x81, 0x4}]}, 0x8) sendmsg$unix(r10, &(0x7f00000005c0)={&(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000140)="c0831c5a6c01759dc384a4b7d31653b7fc4b3506835347fe95f65ceef837080ee6c60c9e33c21a3aaef841c056396ca469fb1bbed8e777eebd6b8541c2b540a03aca703482ccea0656e783e806c73db93592c3aacf6b0bd2eac826a7e2de2592c3d3129ea927c25b50471520f601b0ab4796c3bb6737820156c83f2d004add02a748f0c31c915259e7539d54fcaa396a94cca6cec0a96441bb202388925ad4cceb2321abc7b6ffded377615f20d1782e992f74722beb458e0fdc90dae08259ace8a76b1b5b10770d23", 0xc9}, {&(0x7f0000000240)="12244ab5b616dfcc47ae55f6935b231aad06e4f92927272d6f4caa1ec655f907c952aeb906505e3ea2949d2b8bbfbf9f78ce35308c5ad5e45ccaf11ef83598492061161c9a02a18a14176390e87fb990cfc77a1228cf0c439bbda8eb20f557de5e7d30f216d92019b038aac2bcdf355540dc1411f4683e93ff49b175c5bda7b7ff7a4cde4288aa4ba54f37956c09a21887dc5244aafa4b60a4442e1deaec8c52ad447a2bcf22a85f31c271a071bafac216725fb0c3e50c", 0xb7}, {&(0x7f0000000300)="e0563b5d579f262aa9626b4597754825eadf2e113cf4a45a78ac9057ef6e793db61d7b0529e0c155a296625fd26143395c4683ff6ae8885ec54d81faf5391f7722a1b13fe148dde5d35df1d687cfb41266860be1023d09a4aa34512a786ca84a3239528f", 0x64}, {&(0x7f0000000380)="5977ce1136c8bad2c64380247516e98aac869b99b6a16021ba1a7d44f83657496c413e0108d08f5a34f0a1e8fab25181a728024c093c959c662ae16528186ec58f4ae2aa5d42a086d67509df3cedb41b1e0682c18196f7641195d74e255b911dc2361886163998b3ea7194341cfcd43baf430d615fe2174d1becfa1910c175", 0x7f}, {&(0x7f00000004c0)="d1a416f786d537ba03db1fcb0d28cd4b67492a5ad5d216d9a2192ae66d242ca0d14114d89ab2c476cb5cde182bd68344f15cbe3c8843c674a9897409d28bb1ec30f43b5fd843b706cad80dd21fc0398b023c21960dc4d46053f2c2735bfb9663a5086ac9cd651c3551cbdd0f03e9f62e", 0x70}], 0x5, &(0x7f0000000580), 0x0, 0x14}, 0x4000040) 1m10.00935305s ago: executing program 2 (id=896): mkdirat(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x911091, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c0000000206010800000000000c000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000000000)={0x18, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}]}, 0x18}}, 0x4000001) socket$kcm(0x10, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x40002019}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x12}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0xffff8000}]}, 0x1c}}, 0x4000080) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000010c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r4, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r4, &(0x7f0000000280)={0x50, 0x0, r6, {0x7, 0x2b, 0xfffffffe, 0x30204004, 0x0, 0xfffe, 0x6, 0xfffffffe, 0x0, 0x0, 0x1, 0x100}}, 0x50) r7 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x22801, 0x0) lseek(r7, 0xfffffffffffffff5, 0x3) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000000)={0xa000000a}) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r1) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0x80, r8, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000094}, 0x24004801) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) chroot(&(0x7f0000000040)='./file0/file0\x00') mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) 59.250099663s ago: executing program 33 (id=849): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0x95008100, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000000880)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000c80)={r4, 0x100000001, 0xfffffffffffffffd}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) r5 = socket$packet(0x11, 0x2, 0x300) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r9 = fanotify_init(0xf00, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x2000001, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}}) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r8, 0x890c, &(0x7f0000000340)={@loopback, @dev={0xfe, 0x80, '\x00', 0x19}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x0, 0x4, 0x0, 0x2f4c, 0x200000, r10}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000140)=r7, 0x4) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x70bd2a, 0x25dfdbfd, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) 55.023473409s ago: executing program 34 (id=896): mkdirat(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x911091, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c0000000206010800000000000c000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000000000)={0x18, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}]}, 0x18}}, 0x4000001) socket$kcm(0x10, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x40002019}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x12}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0xffff8000}]}, 0x1c}}, 0x4000080) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000010c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r4, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r4, &(0x7f0000000280)={0x50, 0x0, r6, {0x7, 0x2b, 0xfffffffe, 0x30204004, 0x0, 0xfffe, 0x6, 0xfffffffe, 0x0, 0x0, 0x1, 0x100}}, 0x50) r7 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x22801, 0x0) lseek(r7, 0xfffffffffffffff5, 0x3) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000000)={0xa000000a}) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r1) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0x80, r8, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000094}, 0x24004801) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) chroot(&(0x7f0000000040)='./file0/file0\x00') mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) 18.366961622s ago: executing program 6 (id=1089): socket$nl_route(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0x0, 0x0}, 0x10) creat(&(0x7f0000000080)='./bus\x00', 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000500)=@xdp={0x2c, 0x7, 0x0, 0x7}, 0x80, 0x0}, 0x4000011) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a320000000008004100"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x40050) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000008580)=[{0x4, 0x0, 0x0}, {0x2, 0x0, 0x0}, {0x2, 0x0, 0x0}, {0x3, 0x0, 0x0}, {0x5, 0x1, 0x0}, {0x2, 0x0, 0x0}, {0x4, 0x0, 0x0}, {0x8, 0x0, 0x0}, {0x9, 0x1, 0x0}], 0x9) sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001400050126bc70006bdbdf2511000d000100c80e4501a254722eaea6d93916f8d66cffe8ef8d00000000"], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x54840) 16.794886164s ago: executing program 6 (id=1094): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0xfffffffffffffffe, {0x43}}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002ac0)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="9070c9fab8ad406f", @ANYRES32=0x0, @ANYBLOB="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"], 0x13a4}, 0x1, 0x0, 0x0, 0x300089c7}, 0x0) sendmsg$nl_route(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001100010026bd7000ffdbdf0500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x34}, 0x1, 0x200000000000000, 0x0, 0x10}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') write$6lowpan_enable(r3, &(0x7f0000000340)='1', 0x1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r4) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/wireless\x00') openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) syz_open_dev$sg(0x0, 0x508d48d4, 0x40902) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xb8, &(0x7f0000000140)=""/184, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) request_key(0x0, &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000001700)="00e8451bcdd61963addf02cd5f9c8514302a989023951428ea707a6b5d541e60fdc10012d7568d6acc72edc5f625765493c9ddc82196af1588c969843267d54007c8114b666ede1f6ba8cb2dcd1876bc09603c911646b2d582b11e86cbda12d74feb0165dbb099c97a4150054b585cce704eca2c40b9d28a1b9c379a135bf4e4b5f859eee1f294b598e74b5862a77282d6b59cb86e88de22897816e64457cb69c5295955", 0xee, 0x4044851, &(0x7f0000000240)={0xa, 0x0, 0x27b6a9b, @loopback, 0x1}, 0x1c) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200), 0x1ac790ff9b2eaadf, &(0x7f00000017c0)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3d6782b07c5b714d890900000000000000995e9c54cf1a32a9b59cb315e21470817b54e878055bd70e57c123", @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',mmap,privport,cache=mmap,cache=readahead,access=', @ANYRESDEC=0x0, @ANYBLOB=',dfltuid=', @ANYRESHEX, @ANYBLOB="d5c890ab582c72772c6d656061737572652c6f6279df765c39b3edb2fcaa2934699a2baeb4ab68d82484eaaee2b9521527e30a1a7a9fb708b4"]) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000006c0)=""/4097, &(0x7f0000000040)=0x1001) 14.91412759s ago: executing program 6 (id=1108): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x31) mount(0x0, 0x0, &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xc4, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x2c}, @in6=@local, 0x4e22, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x60}, {0x0, 0x1000000000000401, 0xfffffffffffffffe, 0x40000000, 0x0, 0x1a, 0x1, 0xfffffffffffffffe}, {0x7a, 0x5, 0x0, 0x7fff}, 0x8, 0x0, 0x1, 0x0, 0x3}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x8044) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000007000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0xfffffffffffffdbd) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)="31301f31203100", 0x7) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/netdevsim/devices/netdevsim10/sriov_numvfs\x00', 0x1, 0x0) write(r3, &(0x7f0000000600)='1\x00', 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000fa9000/0x9000)=nil, 0x4, 0x0, 0x0, 0xbff, 0x1e, 0x0, 0x8, 0x6e}) r6 = socket$inet6(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x53b, 0x70bd29, 0x0, {}, [{0x58, 0x1, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'simple\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x9f}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4060040}, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file2\x00', 0x0) sendto$inet6(r6, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) sendmsg$nl_route(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)=ANY=[@ANYBLOB="3800000012000100010000000000000000000000000000000000000000000000100003006e657464657673696d31300008001d0001000000"], 0x38}}, 0x0) 12.559601906s ago: executing program 6 (id=1104): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x102481, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r2, 0x4068aea3, &(0x7f0000000000)={0x80, 0x0, 0x1}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r3 = syz_open_dev$usbmon(&(0x7f0000000340), 0x401, 0x801) fsetxattr$trusted_overlay_opaque(r3, &(0x7f0000000380), &(0x7f00000003c0), 0x2, 0x3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x88) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r5) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000200)='./file1\x00', 0xc2) getdents64(r4, &(0x7f0000000000)=""/134, 0x86) r6 = openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r7, 0x6, 0x1, &(0x7f0000000000)={0xfffe, 0x402, 0x8, 0x0, 0x8, 0x85, 0xa}, 0x31) bind$bt_l2cap(r7, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfff8}, 0xe) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg(r7, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008010) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000100)=0x14) sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xdc, 0x12, 0x300, 0x70bd29, 0x25dfdbfb, {0x0, 0x6, 0xc1, 0x5, {0x4e20, 0x4e23, [0x0, 0xfffffff3, 0xff, 0xffffff01], [0x1, 0x4ec, 0x8, 0x8], r8, [0x3, 0x9]}, 0x142, 0x10000}, [@INET_DIAG_REQ_BYTECODE={0x8e, 0x1, "54fa57e3dc20588b6fe822d5a349e1d053d7e96443b3cbca8113aeff064fec58c3c8af9977eec801d5605e9d0018e2570a630d380dc948de10cf05414b0e72a6e6d7c8587d8532ddad77ae7203bb8eadf663a2ed57edf883910c572e22ec3a035d1918cf13b9ddd0750219637630074f320060b2d60a1f873fa94ce8a5ef3a1558a911e10e0cf3bb5898"}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="e00500020000000008000400e005000008001b0000000000"], 0x30}}, 0x0) 12.336866243s ago: executing program 6 (id=1110): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, 0x0) socketpair(0x1e, 0x80005, 0x0, 0x0) close(0xffffffffffffffff) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) getsockopt$TIPC_NODE_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x83, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x1}, {}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x4}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xfffffffa, 0x2, 0x10000000, 0x8, 0x3}}]}, {0x4, 0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000180)='syzkaller0\x00', 0xb) sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x2, 0x4e20, @loopback}, 0x10) 11.554451156s ago: executing program 6 (id=1113): socket$nl_route(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0x0, 0x0}, 0x10) creat(&(0x7f0000000080)='./bus\x00', 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000500)=@xdp={0x2c, 0x7, 0x0, 0x7}, 0x80, 0x0}, 0x4000011) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a320000000008004100"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x40050) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000008580)=[{0x4, 0x0, 0x0}, {0x2, 0x0, 0x0}, {0x2, 0x0, 0x0}, {0x3, 0x0, 0x0}, {0x5, 0x1, 0x0}, {0x2, 0x0, 0x0}, {0x4, 0x0, 0x0}, {0x8, 0x0, 0x0}, {0x9, 0x1, 0x0}], 0x9) sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001400050126bc70006bdbdf2511000d000100c80e4501a254722eaea6d93916f8d66cffe8ef8d00000000"], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x54840) 11.024926003s ago: executing program 35 (id=1113): socket$nl_route(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0x0, 0x0}, 0x10) creat(&(0x7f0000000080)='./bus\x00', 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000500)=@xdp={0x2c, 0x7, 0x0, 0x7}, 0x80, 0x0}, 0x4000011) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a320000000008004100"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x40050) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000008580)=[{0x4, 0x0, 0x0}, {0x2, 0x0, 0x0}, {0x2, 0x0, 0x0}, {0x3, 0x0, 0x0}, {0x5, 0x1, 0x0}, {0x2, 0x0, 0x0}, {0x4, 0x0, 0x0}, {0x8, 0x0, 0x0}, {0x9, 0x1, 0x0}], 0x9) sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001400050126bc70006bdbdf2511000d000100c80e4501a254722eaea6d93916f8d66cffe8ef8d00000000"], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x54840) 3.62817325s ago: executing program 3 (id=1186): r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) close_range(r0, r1, 0x0) ioctl$SNDCTL_SYNTH_ID(r1, 0xc08c5114, &(0x7f0000000000)={"3e718f0810ed9060f71643191e0134e9e29abfda1d1b9b758b956dcfebbd", 0x80000000, 0x1, 0x0, 0x8, 0x7, 0x1a3, 0x5, 0x1, [0x100, 0x6, 0x81, 0x8301, 0x3, 0xfff, 0x9, 0x6, 0x9, 0x1, 0x5, 0xfffffffe, 0xe2, 0x0, 0x8, 0x7c, 0x0, 0x7f, 0x85b]}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newtfilter={0x2f4, 0x28, 0xd27, 0x0, 0x0, {}, [@filter_kind_options=@f_bpf={{0x8}, {0x2c8, 0x2, [@TCA_BPF_ACT={0x50, 0x1, [@m_bpf={0x4c, 0x9, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r2}]}, {0x1b, 0x6, "505b04c0a6a0d40f637f109a5cf77003d70c03d46ac2eb"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x8}, @TCA_BPF_ACT={0x26c, 0x1, [@m_gact={0xec, 0x17, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x25e8, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x9, 0x4, 0x1, 0xd1}}]}, {0x9a, 0x6, "39f3f62279771c1107ac25ee8b181debc727706c05ede48c0d350f2aeea9a1d8880c5c3b823c2cad6700be72d4d2cf646b2c38105e291a1b48a1e02493654c083d1ee3927130370876755114c1922a1c5833971b4514b4bc4edce088148f2cc21f52aa4cc9f2aeca93ca9b1f84c70250a39eff0961707835b118a1ca790f1fad6de9c3ab81be6c37bd595e4625a17ffe4647c74db962"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_sample={0xe8, 0x17, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x5}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x7, 0x1ff, 0x10000000, 0x7fff, 0x9}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x4}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x2}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x8}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x800}]}, {0x7b, 0x6, "d0d518bed6db776fc70d634bc4450808756500e26d949cad4b4948e7ae9982969cd05df00493ecbddbc201a968571b18255c3df423d4793744aca509b7d2895b6ba7aaa5f80e551855ae84b204003bf5c68442d4a04551a88adf10113a14c1b16fe81675d69b8fd8e355a0cc9de655e8e1b61f95263056"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ct={0x94, 0x35, 0x0, 0x0, {{0x7}, {0x18, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @dev={0xfe, 0x80, '\x00', 0x2f}}]}, {0x57, 0x6, "041ad0468269a827a4bbe4901a0db385df618d78e1a18d9f3f2222dac732d08a16b44b0af4675a7a472da5c2a5835718ee36db0693ff8e2e29e45561f20bc59a871dbd2d36314313b497eced9184e19fd93ba4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x2f4}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x845c5000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) shmget$private(0x0, 0x2000, 0x40, &(0x7f0000295000/0x2000)=nil) pause() 2.809177753s ago: executing program 0 (id=1195): r0 = syz_open_dev$sndctrl(&(0x7f0000000140), 0x2, 0x20001) r1 = openat$cdrom(0xffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$CDROMREADAUDIO(r1, 0x530e, &(0x7f00000000c0)={@lba=0x5, 0x1, 0xc, &(0x7f0000000080)=""/12}) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0485510, &(0x7f0000000240)={0xd, 0x1, 0xafc, 0xffffff09, &(0x7f00000001c0)=[{}]}) 2.764397662s ago: executing program 3 (id=1196): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8d80, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000005fc0)={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x7, 0x8000, 0x3d, 0x500, 0x5, 0x18c0012}) (fail_nth: 1) socket$key(0xf, 0x3, 0x2) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f0000000280)="e26248", 0x3}], 0x2}, 0x48050) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000340)={0x1d, 0x0, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000380)="ef8a561e07173f1a4d", 0x9}], 0x1}}], 0x4000000000001cc, 0x20040891) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 2.730028597s ago: executing program 0 (id=1197): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fallocate(0xffffffffffffffff, 0x0, 0x40000, 0x5) io_setup(0x2007, &(0x7f0000000980)=0x0) io_destroy(r0) 2.728456456s ago: executing program 7 (id=1198): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8d80, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000005fc0)={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x7, 0x8000, 0x3d, 0x500, 0x5, 0x18c0012}) socket$key(0xf, 0x3, 0x2) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f0000000280)="e26248", 0x3}], 0x2}, 0x48050) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000340)={0x1d, 0x0, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000380)="ef8a561e07173f1a4d", 0x9}], 0x1}}], 0x4000000000001cc, 0x20040891) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 1.642273458s ago: executing program 3 (id=1199): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8d80, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0xffffffff, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000005fc0)={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x7, 0x8000, 0x3d, 0x500, 0x5, 0x18c0012}) socket$key(0xf, 0x3, 0x2) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f0000000280)="e26248", 0x3}], 0x2}, 0x48050) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000001280)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$bt_hci(r4, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000340)={0x1d, 0x0, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000380)="ef8a561e07173f1a4d", 0x9}], 0x1}}], 0x4000000000001cc, 0x20040891) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, &(0x7f0000000080)='size=4G\x00') r7 = getpid() syz_pidfd_open(r7, 0x0) 1.517050294s ago: executing program 7 (id=1201): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, 0x0) socketpair(0x1e, 0x80005, 0x0, 0x0) close(0xffffffffffffffff) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) getsockopt$TIPC_NODE_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x83, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x1}, {}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x4}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xfffffffa, 0x2, 0x10000000, 0x8, 0x3}}]}, {0x4, 0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000180)='syzkaller0\x00', 0xb) sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x2, 0x4e20, @loopback}, 0x10) 1.446490195s ago: executing program 0 (id=1202): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, 0x0, &(0x7f00000002c0), 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000240)='./file0\x00') mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='romfs\x00', 0x208000, 0x0) 1.37885501s ago: executing program 0 (id=1203): mkdir(&(0x7f0000000140)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000280)='./config/usb_gadget/g1/functions/mass_storage.0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/cdrom\x00', 0x2, 0x0) write(r0, &(0x7f00000004c0)='F9', 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r3}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000020000006a0a00fe00000000850000000b000000b70000000000000095000000000000009cc6b3fcd62c7d376238975d43a4505f80fc88943c4f0cf08e467b592f868ee30a0e8c1bf176db2a6b2feb4b6fd3d5707bfd2d84aaa3b1d4e984c46ea7e2a447a36f5662403e1b2be4cc7c2683908a0d411a9872971c7c56f0979bd10b97163c1d6d0e196bf02f46e8953ab1abda45cbe8d0d26b5069f8a98f7dc8f76b74635fc9"], 0x0}, 0x94) r5 = socket$key(0xf, 0x3, 0x2) setuid(0xee01) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000080)=ANY=[@ANYBLOB="16"], 0x0) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="020d000014000000000000010000000005000600000000000a0080ff00000000fc010000000000000000000000000000000000000000000005000500000000000a0000000000000000000000000000000000000000000000000000000000000008001200020002"], 0xa0}}, 0x24004080) 1.089005722s ago: executing program 0 (id=1205): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a72c000) setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='127.0.0.1:file0\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='nfs4\x00', 0x200000, &(0x7f0000000140)='addr=\xb3\xe6\xad\xb8\x95\xd88\xc01,port=2F49,clientaddr=127.0ion=1\x00') madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8, 0x0, 0x0, 0x3}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x42}, 0x28) mlockall(0x1) 928.591503ms ago: executing program 5 (id=1207): socket$nl_route(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0x0, 0x0}, 0x10) creat(&(0x7f0000000080)='./bus\x00', 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000500)=@xdp={0x2c, 0x7, 0x0, 0x7}, 0x80, 0x0}, 0x4000011) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a320000000008004100"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x40050) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000008580)=[{0x4, 0x0, 0x0}, {0x2, 0x0, 0x0}, {0x2, 0x0, 0x0}, {0x3, 0x0, 0x0}, {0x5, 0x1, 0x0}, {0x2, 0x0, 0x0}, {0x4, 0x0, 0x0}, {0x8, 0x0, 0x0}, {0x9, 0x1, 0x0}], 0x9) sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001400050126bc70006bdbdf2511000d000100c80e4501a254722eaea6d93916f8d66cffe8ef8d00000000"], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x54840) 697.94317ms ago: executing program 3 (id=1208): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x8) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r2) sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000700)={0x14, r3, 0x1, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./debug\x00', 0x1ff) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x82, &(0x7f0000000180), &(0x7f0000000200)=0x8) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/kvm/mmu_shadow_zapped\x00', 0xf40, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) read(r6, 0x0, 0xfffffe3a) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000140)=0xc) r9 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000001c0)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r9, 0x24, 0x0, 0xc, &(0x7f0000000140)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) kcmp(r4, r8, 0x2, r2, r9) r10 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r10, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x5, 0x2d}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r10, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x5, 0x54}, 0x2c) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f00000002c0)=0x1) close_range(r0, r0, 0x0) 690.252489ms ago: executing program 5 (id=1209): r0 = io_uring_setup(0x68f7, &(0x7f00000002c0)={0x0, 0x48c7, 0x80, 0x0, 0x8100016b}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010103}]}, &(0x7f0000000380)=0x10) (fail_nth: 1) close_range(r0, 0xffffffffffffffff, 0x0) 551.168822ms ago: executing program 7 (id=1210): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10004881}, 0x4009000) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff, 0x2c, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x18, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x200}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10004881}, 0x4009000) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff, 0x2c, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x40) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x18, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x200}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 494.126857ms ago: executing program 5 (id=1211): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000240)='./file0\x00') mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='romfs\x00', 0x208000, 0x0) 349.071096ms ago: executing program 7 (id=1212): r0 = io_uring_setup(0x68f7, &(0x7f00000002c0)={0x0, 0x48c7, 0x80, 0x0, 0x8100016b}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, &(0x7f0000000080)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x9, @mcast1, 0x3}]}, &(0x7f00000000c0)=0xc) close_range(r0, 0xffffffffffffffff, 0x0) 348.472724ms ago: executing program 5 (id=1213): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, 0x2f, 0x9, 0x70bd27, 0x25dfdbfb, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42014}, 0x0) 241.841052ms ago: executing program 7 (id=1214): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r0, 0x1, 0x10000000000009, &(0x7f0000000100)="0100ddff", 0x507b420f2d51f971) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e1e, 0x4, @dev={0xfe, 0x80, '\x00', 0x37}, 0x401}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f00000000c0)=0xa1, 0x4) ioctl$OCFS2_IOC_GROUP_ADD(r0, 0x40186f02, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x800, 0xd258}) 231.995256ms ago: executing program 3 (id=1215): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, 0x0, 0x2200, 0x0) close(0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) setxattr$trusted_overlay_opaque(&(0x7f0000000040)='./mnt\x00', &(0x7f0000000080), 0x0, 0x0, 0x1) fcntl$dupfd(r1, 0x0, r2) write(r2, &(0x7f0000000700)='\x00'/21, 0x15) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x1, 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(r4, 0x400442c9, &(0x7f0000000080)={0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}) write(r4, &(0x7f00000002c0)='16', 0x2) ioctl$NILFS_IOCTL_GET_SUSTAT(r0, 0x80306e85, &(0x7f00000000c0)) ioctl$KVM_RUN(r4, 0xae80, 0x0) read$FUSE(r3, &(0x7f0000009780)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000840)={0x10, 0xffffffda, 0x3}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, 0x2f, 0x9, 0x70bd27, 0x25dfdbfb, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42014}, 0x0) 226.791973ms ago: executing program 7 (id=1216): socket$nl_route(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x1411, 0x1, 0x70bd29, 0x20003}, 0x10}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0x0, 0x0}, 0x10) creat(&(0x7f0000000080)='./bus\x00', 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000500)=@xdp={0x2c, 0x7, 0x0, 0x7}, 0x80, 0x0}, 0x4000011) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a320000000008004100"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x40050) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000008580)=[{0x4, 0x0, 0x0}, {0x2, 0x0, 0x0}, {0x2, 0x0, 0x0}, {0x3, 0x0, 0x0}, {0x5, 0x1, 0x0}, {0x2, 0x0, 0x0}, {0x4, 0x0, 0x0}, {0x8, 0x0, 0x0}, {0x9, 0x1, 0x0}], 0x9) sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001400050126bc70006bdbdf2511000d000100c80e4501a254722eaea6d93916f8d66cffe8ef8d00000000"], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x54840) 176.223473ms ago: executing program 5 (id=1217): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) process_vm_writev(0x0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/215, 0xd7}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d232101c000000000000000100001c"], 0x4a) 118.889148ms ago: executing program 0 (id=1218): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, 0x0) socketpair(0x1e, 0x80005, 0x0, 0x0) close(0xffffffffffffffff) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) getsockopt$TIPC_NODE_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x83, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x1}, {}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x4}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xfffffffa, 0x2, 0x10000000, 0x8, 0x3}}]}, {0x4, 0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000180)='syzkaller0\x00', 0xb) sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x2, 0x4e20, @loopback}, 0x10) 117.660175ms ago: executing program 3 (id=1219): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000001c0)=0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001100), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000d00)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="ad0d00007000ffdbdf250a0000000c0003800800010000000000"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x12c, r5, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2d, 0x18}}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x30, 0x20}}]}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x80000000}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5f9b}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xbfff}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2e}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x12c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000001c0)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r6, 0x24, 0x0, 0xc, &(0x7f0000000140)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) close_range(r2, 0xffffffffffffffff, 0x0) sched_setscheduler(r1, 0x0, &(0x7f0000000240)=0x2) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x4ca142, 0x0) openat$rtc(0xffffff9c, &(0x7f0000001480), 0x2000, 0x0) r7 = syz_open_dev$rtc(&(0x7f00000002c0), 0x9, 0x0) ioctl$RTC_IRQP_READ(r7, 0x8004700b, &(0x7f0000000280)) process_vm_writev(0x0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/215, 0xd7}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000700000aa0000000060a0b0400000000000000000200000074000480700001800a0001006d617463680000006000028008000240000000000c0001007068797364657600460003007e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470582e00000900010073797a30000000000900020073797a32"], 0xc8}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r9], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x8c}}, 0x44080) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d232101c000000000000000100001c"], 0x4a) 0s ago: executing program 5 (id=1220): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="290e29bd7000fbdbdf0527960000050031000e0000001400300053e0e85290ceb080fb816d3cdadf198b08000200", @ANYRES32=r3, @ANYBLOB='$\x002'], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0) write(r4, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r7 = socket$pppoe(0x18, 0x1, 0x0) sendfile(r7, r6, 0x0, 0x2000fb) write(r5, 0x0, 0xfffffffffffffe79) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000000303010200000000008000000000000008000340000000090c000200fffffffbfffffff708000340000000080c000200fffffffe00000002"], 0x3c}, 0x1, 0x0, 0x0, 0x4000901}, 0x4008000) kernel console output (not intermixed with test programs): x140 [ 149.101153][ T7911] ? __do_fast_syscall_32+0x98/0x970 [ 149.101168][ T7911] ? lockdep_hardirqs_on+0x78/0x100 [ 149.101181][ T7911] __do_fast_syscall_32+0xe7/0x970 [ 149.101194][ T7911] ? lockdep_hardirqs_on+0x78/0x100 [ 149.101208][ T7911] do_fast_syscall_32+0x32/0x70 [ 149.101222][ T7911] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 149.101236][ T7911] RIP: 0023:0xf701efec [ 149.101248][ T7911] Code: Unable to access opcode bytes at 0xf701efc2. [ 149.101253][ T7911] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 00000000000000e3 [ 149.101264][ T7911] RAX: ffffffffffffffda RBX: 0000000080000040 RCX: 0000000080000080 [ 149.101270][ T7911] RDX: 00000000800002c0 RSI: 000000000000002c RDI: 0000000000000002 [ 149.101276][ T7911] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 149.101281][ T7911] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 149.101288][ T7911] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 149.101301][ T7911] [ 149.477219][ T5093] Bluetooth: hci0: command 0x0419 tx timeout [ 150.118092][ T5093] Bluetooth: hci3: command 0x0419 tx timeout [ 150.118134][ T5734] Bluetooth: hci2: command 0x0419 tx timeout [ 150.120263][ T5093] Bluetooth: hci1: command 0x0419 tx timeout [ 150.367496][ T10] usb 7-1: new low-speed USB device number 13 using dummy_hcd [ 150.406174][ T7932] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 150.408835][ T7932] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 150.420504][ T7932] vhci_hcd vhci_hcd.0: Device attached [ 150.527933][ T10] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 150.530391][ T10] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 150.530406][ T10] usb 7-1: config 0 has no interface number 0 [ 150.530424][ T10] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 150.530436][ T10] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 150.530448][ T10] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 150.530461][ T10] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 150.530473][ T10] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 150.530486][ T10] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 150.530505][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.531824][ T10] usb 7-1: config 0 descriptor?? [ 150.533934][ T7926] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 150.534044][ T7926] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 150.536636][ T10] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 150.707232][ T5812] usb 44-1: SetAddress Request (2) to port 0 [ 150.709273][ T5812] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 150.745408][ T10] usb 7-1: USB disconnect, device number 13 [ 150.757818][ T10] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 151.002323][ T7933] vhci_hcd: connection reset by peer [ 151.007938][ T5823] vhci_hcd vhci_hcd.3: stop threads [ 151.010318][ T5823] vhci_hcd vhci_hcd.3: release socket [ 151.014610][ T5823] vhci_hcd vhci_hcd.3: disconnect device [ 151.217586][ T5883] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 151.295165][ T7940] netlink: 4972 bytes leftover after parsing attributes in process `syz.2.597'. [ 151.472457][ T5883] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 151.479143][ T5883] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 151.487895][ T5883] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 151.492754][ T5883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 151.496007][ T5883] usb 5-1: SerialNumber: syz [ 151.710147][ T7938] netlink: 4 bytes leftover after parsing attributes in process `syz.0.596'. [ 151.713010][ T7938] netlink: 12 bytes leftover after parsing attributes in process `syz.0.596'. [ 151.715853][ T7938] netlink: 8 bytes leftover after parsing attributes in process `syz.0.596'. [ 151.720897][ T7938] netlink: 36 bytes leftover after parsing attributes in process `syz.0.596'. [ 151.747594][ T7949] netlink: 20 bytes leftover after parsing attributes in process `syz.3.599'. [ 151.932088][ T7955] loop5: detected capacity change from 0 to 12607 [ 151.948601][ T5739] buffer_io_error: 10 callbacks suppressed [ 151.948614][ T5739] Buffer I/O error on dev loop5, logical block 1575, async page read [ 152.256065][ T5883] usb 5-1: USB disconnect, device number 16 [ 152.975409][ T7966] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 152.986104][ T7966] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 153.224303][ T7978] netlink: 20 bytes leftover after parsing attributes in process `syz.2.608'. [ 154.030518][ T7989] IPVS: set_ctl: invalid protocol: 168 172.20.20.13:20000 [ 154.033035][ T7989] IPVS: set_ctl: invalid protocol: 136 224.0.0.2:20001 [ 154.092193][ T7995] jffs2: notice: (7995) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 154.172090][ T8003] netlink: 4972 bytes leftover after parsing attributes in process `syz.3.617'. [ 154.317573][ T55] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 154.468112][ T55] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 154.473192][ T55] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 154.478280][ T55] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 154.484346][ T55] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 154.489323][ T55] usb 7-1: SerialNumber: syz [ 154.702179][ T7991] netlink: 4 bytes leftover after parsing attributes in process `syz.2.615'. [ 154.706198][ T7991] netlink: 12 bytes leftover after parsing attributes in process `syz.2.615'. [ 155.121681][ T55] usb 7-1: USB disconnect, device number 14 [ 155.501429][ T5734] Bluetooth: hci2: unexpected event for opcode 0x1003 [ 155.797349][ T5812] usb 44-1: device descriptor read/8, error -110 [ 156.187930][ T5812] usb usb44-port1: attempt power cycle [ 156.207208][ T1339] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 156.387777][ T1339] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 156.391696][ T1339] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 156.394568][ T1339] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 156.398331][ T1339] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 156.401298][ T1339] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.406170][ T1339] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 156.409286][ T1339] usb 5-1: Product: syz [ 156.410739][ T1339] usb 5-1: Manufacturer: syz [ 156.421368][ T1339] cdc_wdm 5-1:1.0: skipping garbage [ 156.424166][ T1339] cdc_wdm 5-1:1.0: skipping garbage [ 156.454872][ T1339] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 156.456987][ T1339] cdc_wdm 5-1:1.0: Unknown control protocol [ 156.724355][ T850] usb 5-1: USB disconnect, device number 17 [ 156.768173][ T5812] usb usb44-port1: unable to enumerate USB device [ 156.790919][ T64] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 156.795327][ T64] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 156.799958][ T64] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 156.807567][ T64] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 156.813880][ T64] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 156.928746][ T8056] __nla_validate_parse: 3 callbacks suppressed [ 156.928759][ T8056] netlink: 24 bytes leftover after parsing attributes in process `syz.2.635'. [ 157.187224][ T850] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 157.327290][ T850] usb 5-1: device descriptor read/64, error -71 [ 157.470636][ T8045] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.473029][ T8045] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.475343][ T8045] bridge_slave_0: entered allmulticast mode [ 157.479576][ T8045] bridge_slave_0: entered promiscuous mode [ 157.483548][ T8045] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.486408][ T8045] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.489891][ T8045] bridge_slave_1: entered allmulticast mode [ 157.493334][ T8045] bridge_slave_1: entered promiscuous mode [ 157.520788][ T8045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.526678][ T8045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.556418][ T8045] team0: Port device team_slave_0 added [ 157.561829][ T8045] team0: Port device team_slave_1 added [ 157.577239][ T850] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 157.587757][ T8045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.590663][ T8045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 157.602215][ T8045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.607045][ T8045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.609368][ T8045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 157.617472][ T8045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.643129][ T8045] hsr_slave_0: entered promiscuous mode [ 157.645538][ T8045] hsr_slave_1: entered promiscuous mode [ 157.648186][ T8045] debugfs: 'hsr0' already exists in 'hsr' [ 157.650118][ T8045] Cannot create hsr debugfs directory [ 157.717585][ T850] usb 5-1: device descriptor read/64, error -71 [ 157.851943][ T850] usb usb5-port1: attempt power cycle [ 157.984501][ T8045] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 158.017872][ T8045] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 158.029744][ T8045] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 158.054753][ T8045] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 158.064911][ T8045] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 158.094201][ T8045] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 158.104573][ T8045] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 158.115560][ T8045] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 158.144643][ T8045] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.147983][ T8045] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.151350][ T8045] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.154085][ T8045] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.210471][ T8045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.237274][ T223] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.241082][ T223] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.255662][ T8045] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.276945][ T223] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.279284][ T223] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.300906][ T223] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.303217][ T223] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.655179][ T8097] netlink: 4972 bytes leftover after parsing attributes in process `syz.3.641'. [ 158.837893][ T64] Bluetooth: hci4: command tx timeout [ 158.842383][ T850] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 158.857659][ T850] usb 5-1: device descriptor read/8, error -71 [ 158.882455][ T8109] CIFS: Invalid mount helper version specified [ 158.892997][ T8109] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 158.893733][ T8045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.899901][ T8109] x_tables: ip6_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT [ 159.063414][ T8045] veth0_vlan: entered promiscuous mode [ 159.070029][ T8045] veth1_vlan: entered promiscuous mode [ 159.088776][ T8045] veth0_macvtap: entered promiscuous mode [ 159.093197][ T8045] veth1_macvtap: entered promiscuous mode [ 159.104206][ T8045] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.115939][ T8045] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.178839][ T5823] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.191101][ T1154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.195555][ T1154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.213364][ T1154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.215884][ T1154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.228973][ T5823] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.232621][ T5823] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.235739][ T5823] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.568963][ T64] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 159.573066][ T64] Bluetooth: hci2: Injecting HCI hardware error event [ 159.577331][ T5734] Bluetooth: hci2: hardware error 0x00 [ 159.771482][ T8133] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality. [ 160.207226][ T34] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 160.368176][ T34] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 160.372524][ T34] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 160.378638][ T34] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 160.383380][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 160.386002][ T34] usb 7-1: SerialNumber: syz [ 160.414997][ T8153] netlink: 4972 bytes leftover after parsing attributes in process `syz.4.656'. [ 160.592884][ T8144] netlink: 36 bytes leftover after parsing attributes in process `syz.2.653'. [ 160.859643][ T34] usb 7-1: USB disconnect, device number 15 [ 160.917638][ T64] Bluetooth: hci4: command tx timeout [ 161.639954][ T5734] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 162.276106][ T8178] IPVS: wrr: TCP 127.0.0.1:21 - no destination available [ 162.722832][ T8190] netlink: 8 bytes leftover after parsing attributes in process `syz.0.667'. [ 163.007623][ T5734] Bluetooth: hci4: command tx timeout [ 163.547201][ T8122] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 163.899116][ T8122] usb 5-1: unable to get BOS descriptor or descriptor too short [ 163.902277][ T8122] usb 5-1: not running at top speed; connect to a high speed hub [ 163.904844][ T8122] usb 5-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.40 [ 163.908823][ T8122] usb 5-1: config 1 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 163.912373][ T8122] usb 5-1: config 1 interface 0 has no altsetting 0 [ 163.916991][ T8122] usb 5-1: string descriptor 0 read error: -22 [ 163.919484][ T8122] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.925694][ T8190] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 164.140890][ T8122] usbhid 5-1:1.0: can't add hid device: -71 [ 164.142877][ T8122] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 164.153821][ T8122] usb 5-1: USB disconnect, device number 22 [ 164.339005][ T8218] orangefs_devreq_open: device cannot be opened in blocking mode [ 164.741006][ T8220] IPVS: wrr: TCP 127.0.0.1:21 - no destination available [ 165.077757][ T5734] Bluetooth: hci4: command tx timeout [ 167.369508][ T8261] netlink: 4972 bytes leftover after parsing attributes in process `syz.4.692'. [ 167.416302][ T8263] IPVS: wrr: TCP 127.0.0.1:21 - no destination available [ 168.437259][ C2] IPVS: wrr: TCP 127.0.0.1:21 - no destination available [ 168.738074][ T8282] netlink: 20 bytes leftover after parsing attributes in process `syz.3.698'. [ 168.740081][ T8283] netlink: 4 bytes leftover after parsing attributes in process `syz.0.699'. [ 168.810959][ T8294] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 168.905718][ T8294] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 168.915888][ T8294] overlayfs: failed to look up (tracing) for ino (-66) [ 169.111364][ T8300] netlink: 4972 bytes leftover after parsing attributes in process `syz.3.703'. [ 169.569713][ T8305] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 169.611831][ T8309] IPVS: wrr: TCP 127.0.0.1:21 - no destination available [ 170.143559][ T8320] 9p: Bad value for 'wfdno' [ 170.149874][ T8320] ieee802154 phy0 wpan0: encryption failed: -22 [ 170.401577][ T8323] netlink: 20 bytes leftover after parsing attributes in process `syz.3.710'. [ 170.621313][ T8327] FAULT_INJECTION: forcing a failure. [ 170.621313][ T8327] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 170.625442][ T8327] CPU: 2 UID: 0 PID: 8327 Comm: syz.0.711 Not tainted syzkaller #0 PREEMPT(full) [ 170.625458][ T8327] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 170.625465][ T8327] Call Trace: [ 170.625469][ T8327] [ 170.625474][ T8327] dump_stack_lvl+0x100/0x190 [ 170.625492][ T8327] should_fail_ex.cold+0x5/0xa [ 170.625505][ T8327] _copy_to_user+0x32/0xd0 [ 170.625524][ T8327] compat_x25_subscr_ioctl+0x39b/0x460 [ 170.625548][ T8327] ? __pfx_compat_x25_subscr_ioctl+0x10/0x10 [ 170.625570][ T8327] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 170.625588][ T8327] ? do_vfs_ioctl+0x226/0x13e0 [ 170.625605][ T8327] compat_x25_ioctl+0xcf/0x190 [ 170.625618][ T8327] ? __pfx_compat_x25_ioctl+0x10/0x10 [ 170.625629][ T8327] compat_sock_ioctl+0x179/0x760 [ 170.625656][ T8327] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 170.625668][ T8327] ? hook_file_ioctl_common+0x140/0x440 [ 170.625690][ T8327] ? __fget_files+0x21f/0x3d0 [ 170.625703][ T8327] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 170.625720][ T8327] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 170.625737][ T8327] __do_fast_syscall_32+0xe7/0x970 [ 170.625751][ T8327] ? lockdep_hardirqs_on+0x78/0x100 [ 170.625766][ T8327] do_fast_syscall_32+0x32/0x70 [ 170.625780][ T8327] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 170.625794][ T8327] RIP: 0023:0xf701efec [ 170.625807][ T8327] Code: Unable to access opcode bytes at 0xf701efc2. [ 170.625813][ T8327] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 170.625824][ T8327] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000000089e0 [ 170.625831][ T8327] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 170.625837][ T8327] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 170.625843][ T8327] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 170.625850][ T8327] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 170.625864][ T8327] [ 170.824208][ T8343] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 170.827022][ T8343] ALSA: mixer_oss: invalid index 137438 [ 170.832750][ T8342] FAULT_INJECTION: forcing a failure. [ 170.832750][ T8342] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 170.835099][ T8343] netlink: 12 bytes leftover after parsing attributes in process `syz.0.718'. [ 170.838246][ T8342] CPU: 3 UID: 0 PID: 8342 Comm: syz.2.717 Tainted: G L syzkaller #0 PREEMPT(full) [ 170.838275][ T8342] Tainted: [L]=SOFTLOCKUP [ 170.838281][ T8342] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 170.838290][ T8342] Call Trace: [ 170.838295][ T8342] [ 170.838303][ T8342] dump_stack_lvl+0x100/0x190 [ 170.838329][ T8342] should_fail_ex.cold+0x5/0xa [ 170.838350][ T8342] strncpy_from_user+0x3b/0x2d0 [ 170.838382][ T8342] do_getname+0x78/0x390 [ 170.838409][ T8342] user_path_at+0x26/0x60 [ 170.838428][ T8342] __ia32_sys_umount+0x109/0x190 [ 170.838449][ T8342] ? __pfx___ia32_sys_umount+0x10/0x10 [ 170.838474][ T8342] __do_fast_syscall_32+0xe7/0x970 [ 170.838500][ T8342] ? lockdep_hardirqs_on+0x78/0x100 [ 170.838528][ T8342] do_fast_syscall_32+0x32/0x70 [ 170.838551][ T8342] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 170.838573][ T8342] RIP: 0023:0xf702efec [ 170.838591][ T8342] Code: Unable to access opcode bytes at 0xf702efc2. [ 170.838600][ T8342] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000034 [ 170.838618][ T8342] RAX: ffffffffffffffda RBX: 00000000800002c0 RCX: 0000000000000000 [ 170.838629][ T8342] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 170.838637][ T8342] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 170.838648][ T8342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.838659][ T8342] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 170.838681][ T8342] [ 170.971090][ T8345] IPVS: wrr: TCP 127.0.0.1:21 - no destination available [ 171.847031][ T8354] mac80211_hwsim hwsim12 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 172.043836][ T8356] bridge0: port 3(syz_tun) entered blocking state [ 172.070166][ T8356] bridge0: port 3(syz_tun) entered disabled state [ 172.079813][ T8356] syz_tun: entered allmulticast mode [ 172.089201][ T8356] syz_tun: entered promiscuous mode [ 172.098529][ T8356] bridge0: port 3(syz_tun) entered blocking state [ 172.100775][ T8356] bridge0: port 3(syz_tun) entered forwarding state [ 172.105734][ T8357] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 172.333464][ T8374] netlink: 4972 bytes leftover after parsing attributes in process `syz.2.729'. [ 172.831893][ T8391] ubi0: attaching mtd0 [ 172.839049][ T8391] ubi0: scanning is finished [ 172.840973][ T8391] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 172.954093][ T8391] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 173.683621][ T8420] 9p: Bad value for 'wfdno' [ 173.688427][ T8420] ieee802154 phy0 wpan0: encryption failed: -22 [ 173.766222][ T8425] netlink: 4972 bytes leftover after parsing attributes in process `syz.0.746'. [ 174.367397][ T1153] wlan1: Trigger new scan to find an IBSS to join [ 174.629060][ T8442] bridge0: port 3(syz_tun) entered blocking state [ 174.632187][ T8442] bridge0: port 3(syz_tun) entered disabled state [ 174.635086][ T8442] syz_tun: entered allmulticast mode [ 174.639380][ T8442] syz_tun: entered promiscuous mode [ 174.643952][ T8442] bridge0: port 3(syz_tun) entered blocking state [ 174.646841][ T8442] bridge0: port 3(syz_tun) entered forwarding state [ 174.657847][ T8442] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 174.772712][ T8452] 9p: Bad value for 'wfdno' [ 174.776662][ T8452] ieee802154 phy0 wpan0: encryption failed: -22 [ 175.061245][ T8468] netlink: 4972 bytes leftover after parsing attributes in process `syz.2.760'. [ 175.819279][ T8479] FAULT_INJECTION: forcing a failure. [ 175.819279][ T8479] name failslab, interval 1, probability 0, space 0, times 0 [ 175.833674][ T8479] CPU: 0 UID: 0 PID: 8479 Comm: syz.0.763 Tainted: G L syzkaller #0 PREEMPT(full) [ 175.833705][ T8479] Tainted: [L]=SOFTLOCKUP [ 175.833711][ T8479] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 175.833721][ T8479] Call Trace: [ 175.833727][ T8479] [ 175.833734][ T8479] dump_stack_lvl+0x100/0x190 [ 175.833761][ T8479] should_fail_ex.cold+0x5/0xa [ 175.833783][ T8479] should_failslab+0xc2/0x120 [ 175.833810][ T8479] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 175.833850][ T8479] ? __alloc_skb+0x5b7/0x710 [ 175.833875][ T8479] ? __alloc_skb+0x140/0x710 [ 175.833902][ T8479] __alloc_skb+0x140/0x710 [ 175.833924][ T8479] ? __alloc_skb+0x5b7/0x710 [ 175.833948][ T8479] ? __pfx___alloc_skb+0x10/0x10 [ 175.833978][ T8479] netlink_alloc_large_skb+0x69/0x150 [ 175.834004][ T8479] netlink_sendmsg+0x680/0xda0 [ 175.834029][ T8479] ? __pfx_netlink_sendmsg+0x10/0x10 [ 175.834054][ T8479] ? apparmor_socket_sendmsg+0x15b/0x270 [ 175.834078][ T8479] ____sys_sendmsg+0xa4d/0xbe0 [ 175.834096][ T8479] ? __pfx_netlink_sendmsg+0x10/0x10 [ 175.834119][ T8479] ? __pfx_____sys_sendmsg+0x10/0x10 [ 175.834150][ T8479] ___sys_sendmsg+0x190/0x1e0 [ 175.834169][ T8479] ? __pfx____sys_sendmsg+0x10/0x10 [ 175.834198][ T8479] ? find_held_lock+0x2b/0x80 [ 175.834234][ T8479] __sys_sendmsg+0x160/0x210 [ 175.834259][ T8479] ? __pfx___sys_sendmsg+0x10/0x10 [ 175.834287][ T8479] ? __pfx_ksys_write+0x10/0x10 [ 175.834308][ T8479] __do_fast_syscall_32+0xe7/0x970 [ 175.834330][ T8479] ? lockdep_hardirqs_on+0x78/0x100 [ 175.834351][ T8479] do_fast_syscall_32+0x32/0x70 [ 175.834374][ T8479] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 175.834396][ T8479] RIP: 0023:0xf701efec [ 175.834414][ T8479] Code: Unable to access opcode bytes at 0xf701efc2. [ 175.834422][ T8479] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 175.834440][ T8479] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 175.834450][ T8479] RDX: 0000000020040040 RSI: 0000000000000000 RDI: 0000000000000000 [ 175.834459][ T8479] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 175.834465][ T8479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 175.834471][ T8479] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 175.834491][ T8479] [ 176.032311][ T8485] netlink: 4 bytes leftover after parsing attributes in process `syz.2.765'. [ 176.049774][ T8485] netlink: 4 bytes leftover after parsing attributes in process `syz.2.765'. [ 176.145872][ T8122] hid-generic 0000:0008:4000001.0002: unknown main item tag 0x0 [ 176.158449][ T8122] hid-generic 0000:0008:4000001.0002: unknown main item tag 0x0 [ 176.168647][ T8122] hid-generic 0000:0008:4000001.0002: unknown main item tag 0x0 [ 176.173945][ T8122] hid-generic 0000:0008:4000001.0002: unknown main item tag 0x0 [ 176.177008][ T8122] hid-generic 0000:0008:4000001.0002: unknown main item tag 0x0 [ 176.179902][ T8122] hid-generic 0000:0008:4000001.0002: unknown main item tag 0x0 [ 176.183199][ T8122] hid-generic 0000:0008:4000001.0002: unknown main item tag 0x0 [ 176.186332][ T8122] hid-generic 0000:0008:4000001.0002: unknown main item tag 0x0 [ 176.234214][ T8122] hid-generic 0000:0008:4000001.0002: hidraw1: HID v0.10 Device [syz0] on syz1 [ 176.431022][ T8501] fido_id[8501]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 176.562964][ T8506] netlink: 4972 bytes leftover after parsing attributes in process `syz.0.773'. [ 177.296465][ T8519] netlink: 48 bytes leftover after parsing attributes in process `syz.2.777'. [ 177.305408][ T8519] netlink: 13879 bytes leftover after parsing attributes in process `syz.2.777'. [ 177.625705][ T8539] netlink: 4 bytes leftover after parsing attributes in process `syz.2.784'. [ 177.694823][ T8543] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 177.740517][ T8543] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 177.744706][ T8543] overlayfs: failed to look up (tracing) for ino (-66) [ 178.184618][ T8553] IPVS: wrr: TCP 127.0.0.1:21 - no destination available [ 178.451699][ T223] wlan1: Trigger new scan to find an IBSS to join [ 178.572939][ T42] audit: type=1326 audit(1786826468.292:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8557 comm="syz.0.788" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 178.582210][ T42] audit: type=1326 audit(1786826468.302:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8557 comm="syz.0.788" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 178.594264][ T42] audit: type=1326 audit(1786826468.302:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8557 comm="syz.0.788" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 178.619549][ T42] audit: type=1326 audit(1786826468.302:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8557 comm="syz.0.788" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 178.629210][ T42] audit: type=1326 audit(1786826468.302:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8557 comm="syz.0.788" exe="/syz-executor" sig=0 arch=40000003 syscall=460 compat=1 ip=0xf701efec code=0x7ffc0000 [ 178.636035][ T42] audit: type=1326 audit(1786826468.302:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8557 comm="syz.0.788" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 178.646532][ T42] audit: type=1326 audit(1786826468.302:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8557 comm="syz.0.788" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 178.662723][ T42] audit: type=1326 audit(1786826468.302:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8557 comm="syz.0.788" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 178.683979][ T42] audit: type=1326 audit(1786826468.302:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8557 comm="syz.0.788" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf701efec code=0x7ffc0000 [ 178.702577][ T42] audit: type=1326 audit(1786826468.302:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8557 comm="syz.0.788" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 179.470283][ T8568] netlink: 4972 bytes leftover after parsing attributes in process `syz.4.791'. [ 179.559312][ T223] wlan1: Creating new IBSS network, BSSID 1e:fc:ca:de:3b:23 [ 181.311532][ T40] IPVS: starting estimator thread 0... [ 181.314041][ T8594] IPVS: wrr: TCP 127.0.0.1:21 - no destination available [ 181.427199][ T8595] IPVS: using max 45 ests per chain, 108000 per kthread [ 182.081776][ T8611] binder: 8591:8611 ioctl c0306201 800003c0 returned -14 [ 182.834039][ T8625] ptrace attach of "/syz-executor exec"[8045] was attempted by " [ 182.985113][ T8616] tipc: Started in network mode [ 183.016243][ T8616] tipc: Node identity ac1414aa, cluster identity 4711 [ 183.022610][ T8616] tipc: Enabled bearer , priority 10 [ 183.768276][ T8646] netlink: 8 bytes leftover after parsing attributes in process `syz.3.818'. [ 183.921882][ T8650] netlink: 20 bytes leftover after parsing attributes in process `syz.3.819'. [ 185.332190][ T8653] kAFS: No cell specified [ 185.495609][ T7064] tipc: Node number set to 2886997162 [ 186.248917][ T8667] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 186.377503][ T8677] ptrace attach of "/syz-executor exec"[5737] was attempted by " [ 186.389973][ T8677] tipc: Started in network mode [ 186.422555][ T8677] tipc: Node identity ac1414aa, cluster identity 4711 [ 186.425382][ T8677] tipc: Enabled bearer , priority 10 [ 186.754103][ T8689] netlink: 20 bytes leftover after parsing attributes in process `syz.3.830'. [ 187.467342][ T8694] sch_tbf: burst 1023 is lower than device lo mtu (32783) ! [ 187.470411][ T8694] FAULT_INJECTION: forcing a failure. [ 187.470411][ T8694] name failslab, interval 1, probability 0, space 0, times 0 [ 187.475151][ T8694] CPU: 1 UID: 0 PID: 8694 Comm: syz.0.833 Tainted: G L syzkaller #0 PREEMPT(full) [ 187.475180][ T8694] Tainted: [L]=SOFTLOCKUP [ 187.475184][ T8694] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 187.475190][ T8694] Call Trace: [ 187.475195][ T8694] [ 187.475199][ T8694] dump_stack_lvl+0x100/0x190 [ 187.475217][ T8694] should_fail_ex.cold+0x5/0xa [ 187.475230][ T8694] should_failslab+0xc2/0x120 [ 187.475246][ T8694] __kmalloc_node_noprof+0x101/0x830 [ 187.475273][ T8694] ? preempt_schedule_common+0x42/0xc0 [ 187.475290][ T8694] ? qdisc_alloc+0xbb/0xb30 [ 187.475303][ T8694] qdisc_alloc+0xbb/0xb30 [ 187.475315][ T8694] qdisc_create_dflt+0x93/0x490 [ 187.475326][ T8694] fifo_create_dflt+0x76/0xf0 [ 187.475342][ T8694] tbf_change+0x1090/0x1440 [ 187.475363][ T8694] ? __pfx_tbf_change+0x10/0x10 [ 187.475381][ T8694] ? __lock_acquire+0x49f/0x1a40 [ 187.475392][ T8694] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 187.475413][ T8694] ? ktime_get+0x22c/0x320 [ 187.475422][ T8694] ? lockdep_hardirqs_on+0x78/0x100 [ 187.475435][ T8694] ? ktime_get+0x23e/0x320 [ 187.475445][ T8694] tbf_init+0x94/0xd0 [ 187.475461][ T8694] ? __pfx_tbf_init+0x10/0x10 [ 187.475476][ T8694] qdisc_create+0x47b/0x1060 [ 187.475492][ T8694] tc_modify_qdisc+0xdcf/0x2120 [ 187.475509][ T8694] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 187.475535][ T8694] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 187.475550][ T8694] rtnetlink_rcv_msg+0x3c9/0xe90 [ 187.475569][ T8694] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 187.475585][ T8694] ? __lock_acquire+0x49f/0x1a40 [ 187.475601][ T8694] netlink_rcv_skb+0x159/0x420 [ 187.475614][ T8694] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 187.475632][ T8694] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 187.475649][ T8694] ? rcu_is_watching+0x12/0xc0 [ 187.475666][ T8694] netlink_unicast+0x585/0x850 [ 187.475680][ T8694] ? __pfx_netlink_unicast+0x10/0x10 [ 187.475697][ T8694] netlink_sendmsg+0x8b0/0xda0 [ 187.475712][ T8694] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.475727][ T8694] ? apparmor_socket_sendmsg+0x15b/0x270 [ 187.475742][ T8694] ____sys_sendmsg+0xa4d/0xbe0 [ 187.475753][ T8694] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.475767][ T8694] ? __pfx_____sys_sendmsg+0x10/0x10 [ 187.475782][ T8694] ? __lock_acquire+0x49f/0x1a40 [ 187.475794][ T8694] ___sys_sendmsg+0x190/0x1e0 [ 187.475807][ T8694] ? __pfx____sys_sendmsg+0x10/0x10 [ 187.475819][ T8694] ? find_held_lock+0x2b/0x80 [ 187.475838][ T8694] ? find_held_lock+0x2b/0x80 [ 187.475860][ T8694] __sys_sendmsg+0x160/0x210 [ 187.475877][ T8694] ? __pfx___sys_sendmsg+0x10/0x10 [ 187.475895][ T8694] ? exit_to_user_mode_loop+0x166/0x6f0 [ 187.475906][ T8694] ? rcu_is_watching+0x12/0xc0 [ 187.475922][ T8694] __do_fast_syscall_32+0xe7/0x970 [ 187.475936][ T8694] ? lockdep_hardirqs_on+0x78/0x100 [ 187.475953][ T8694] do_fast_syscall_32+0x32/0x70 [ 187.475967][ T8694] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 187.475981][ T8694] RIP: 0023:0xf701efec [ 187.475994][ T8694] Code: Unable to access opcode bytes at 0xf701efc2. [ 187.475999][ T8694] RSP: 002b:00000000f53cb50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 187.476010][ T8694] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000040 [ 187.476016][ T8694] RDX: 0000000000044080 RSI: 0000000000000000 RDI: 0000000000000000 [ 187.476023][ T8694] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 187.476028][ T8694] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 187.476034][ T8694] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 187.476049][ T8694] [ 187.610356][ T42] kauditd_printk_skb: 396 callbacks suppressed [ 187.610367][ T42] audit: type=1326 audit(1786826477.332:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8690 comm="syz.2.832" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf702efec code=0x0 [ 187.639596][ T61] tipc: Node number set to 2886997162 [ 187.831419][ T8707] NILFS (nbd3): device size too small [ 187.847644][ T8708] sch_tbf: burst 1023 is lower than device lo mtu (32783) ! [ 188.114209][ T5812] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 188.142704][ T8712] netlink: 4972 bytes leftover after parsing attributes in process `syz.0.839'. [ 188.267770][ T5812] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 188.271708][ T5812] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 188.274601][ T5812] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 188.278097][ T5812] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 188.281057][ T5812] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.288391][ T5812] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 188.291700][ T5812] usb 8-1: Product: syz [ 188.293113][ T5812] usb 8-1: Manufacturer: syz [ 188.301250][ T5812] cdc_wdm 8-1:1.0: skipping garbage [ 188.303008][ T5812] cdc_wdm 8-1:1.0: skipping garbage [ 188.305546][ T5812] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 188.307629][ T5812] cdc_wdm 8-1:1.0: Unknown control protocol [ 188.502411][ T5812] usb 8-1: USB disconnect, device number 26 [ 188.937196][ T5884] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 189.051488][ T8730] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 189.097659][ T5884] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 189.105116][ T5884] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 189.110077][ T5884] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 189.113748][ T5884] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 189.116613][ T5884] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.122414][ T5884] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 189.125011][ T5884] usb 8-1: Product: syz [ 189.126324][ T5884] usb 8-1: Manufacturer: syz [ 189.131605][ T5884] cdc_wdm 8-1:1.0: skipping garbage [ 189.133345][ T5884] cdc_wdm 8-1:1.0: skipping garbage [ 189.137398][ T5884] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 189.139415][ T5884] cdc_wdm 8-1:1.0: Unknown control protocol [ 190.118723][ T8744] netlink: 36 bytes leftover after parsing attributes in process `syz.2.851'. [ 190.424996][ T8766] netlink: 14 bytes leftover after parsing attributes in process `syz.0.859'. [ 191.148669][ T34] usb 8-1: USB disconnect, device number 27 [ 191.224263][ T8781] FAULT_INJECTION: forcing a failure. [ 191.224263][ T8781] name failslab, interval 1, probability 0, space 0, times 0 [ 191.228890][ T8781] CPU: 3 UID: 0 PID: 8781 Comm: syz.3.863 Tainted: G L syzkaller #0 PREEMPT(full) [ 191.228909][ T8781] Tainted: [L]=SOFTLOCKUP [ 191.228913][ T8781] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 191.228920][ T8781] Call Trace: [ 191.228924][ T8781] [ 191.228928][ T8781] dump_stack_lvl+0x100/0x190 [ 191.228945][ T8781] should_fail_ex.cold+0x5/0xa [ 191.228958][ T8781] should_failslab+0xc2/0x120 [ 191.228973][ T8781] kmem_cache_alloc_noprof+0x91/0x6a0 [ 191.228988][ T8781] ? do_getname+0x35/0x390 [ 191.229004][ T8781] do_getname+0x35/0x390 [ 191.229019][ T8781] acct_on+0x93/0xa00 [ 191.229033][ T8781] ? __pfx_acct_on+0x10/0x10 [ 191.229047][ T8781] ? bpf_lsm_capable+0x9/0x10 [ 191.229063][ T8781] __ia32_sys_acct+0x80/0x1e0 [ 191.229075][ T8781] ? lockdep_hardirqs_on+0x78/0x100 [ 191.229089][ T8781] __do_fast_syscall_32+0xe7/0x970 [ 191.229107][ T8781] ? lockdep_hardirqs_on+0x78/0x100 [ 191.229121][ T8781] do_fast_syscall_32+0x32/0x70 [ 191.229150][ T8781] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 191.229164][ T8781] RIP: 0023:0xf706efec [ 191.229173][ T8781] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 191.229183][ T8781] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000033 [ 191.229194][ T8781] RAX: ffffffffffffffda RBX: 0000000080000040 RCX: 0000000000000000 [ 191.229201][ T8781] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 191.229207][ T8781] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 191.229213][ T8781] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 191.229219][ T8781] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 191.229233][ T8781] [ 191.327396][ T8785] netlink: 28 bytes leftover after parsing attributes in process `syz.0.865'. [ 191.581012][ T8793] netlink: 56 bytes leftover after parsing attributes in process `syz.0.869'. [ 191.586260][ T8793] netlink: 24 bytes leftover after parsing attributes in process `syz.0.869'. [ 191.787996][ T8805] overlayfs: failed to resolve './file0/file1': -2 [ 191.835029][ T55] libceph: connect (1)[c::]:6789 error -101 [ 191.839943][ T55] libceph: mon0 (1)[c::]:6789 connect error [ 191.852430][ T55] libceph: connect (1)[c::]:6789 error -101 [ 191.858521][ T55] libceph: mon0 (1)[c::]:6789 connect error [ 191.981446][ T8805] ceph: No mds server is up or the cluster is laggy [ 192.019384][ T8816] tipc: Cannot configure node identity twice [ 192.039850][ T8818] netlink: 28 bytes leftover after parsing attributes in process `syz.3.877'. [ 192.638165][ T8840] netlink: 56 bytes leftover after parsing attributes in process `syz.3.882'. [ 192.642119][ T8840] netlink: 24 bytes leftover after parsing attributes in process `syz.3.882'. [ 192.712837][ T8845] netlink: 28 bytes leftover after parsing attributes in process `syz.2.888'. [ 193.117327][ T7064] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 193.277922][ T7064] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 193.281753][ T7064] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 193.284615][ T7064] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 193.288134][ T7064] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 193.291060][ T7064] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.297595][ T7064] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 193.300366][ T7064] usb 8-1: Product: syz [ 193.301690][ T7064] usb 8-1: Manufacturer: syz [ 193.306408][ T7064] cdc_wdm 8-1:1.0: skipping garbage [ 193.310971][ T7064] cdc_wdm 8-1:1.0: skipping garbage [ 193.314950][ T7064] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 193.317410][ T7064] cdc_wdm 8-1:1.0: Unknown control protocol [ 193.515420][ T61] usb 8-1: USB disconnect, device number 28 [ 193.551001][ T8864] netlink: 12 bytes leftover after parsing attributes in process `syz.2.896'. [ 193.729111][ T8867] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.799790][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.801838][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.837605][ T8867] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.925043][ T8867] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.957444][ T7064] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 194.131448][ T7064] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 194.135787][ T7064] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 194.138721][ T7064] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 194.141987][ T7064] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 194.144885][ T7064] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.149445][ T7064] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 194.152073][ T7064] usb 8-1: Product: syz [ 194.153481][ T7064] usb 8-1: Manufacturer: syz [ 194.161735][ T7064] cdc_wdm 8-1:1.0: skipping garbage [ 194.165959][ T7064] cdc_wdm 8-1:1.0: skipping garbage [ 194.171797][ T7064] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 194.173736][ T7064] cdc_wdm 8-1:1.0: Unknown control protocol [ 194.993171][ T8884] IPVS: wrr: TCP 127.0.0.1:21 - no destination available [ 195.939973][ T61] usb 8-1: USB disconnect, device number 29 [ 197.125551][ T8911] netlink: 20 bytes leftover after parsing attributes in process `syz.0.909'. [ 199.864773][ T8931] IPVS: wrr: TCP 127.0.0.1:21 - no destination available [ 199.925893][ T8934] netlink: 20 bytes leftover after parsing attributes in process `syz.0.915'. [ 200.805856][ T8939] netlink: 4972 bytes leftover after parsing attributes in process `syz.0.917'. [ 200.872732][ T8941] netlink: 20 bytes leftover after parsing attributes in process `syz.3.916'. [ 201.743502][ T8945] netlink: 20 bytes leftover after parsing attributes in process `syz.3.919'. [ 203.535151][ T8965] netlink: 12 bytes leftover after parsing attributes in process `syz.0.927'. [ 204.272843][ T5884] kernel read not supported for file /dsp (pid: 5884 comm: kworker/1:5) [ 204.413525][ T64] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 204.419578][ T64] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 204.426254][ T64] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 204.433922][ T64] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 204.436922][ T64] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 204.504083][ T8987] IPVS: wrr: TCP 127.0.0.1:21 - no destination available [ 204.933884][ T9007] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 204.936563][ T9007] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 204.943438][ T8981] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.946183][ T8981] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.948530][ T9007] vhci_hcd vhci_hcd.0: Device attached [ 204.950588][ T8981] bridge_slave_0: entered allmulticast mode [ 204.955228][ T8981] bridge_slave_0: entered promiscuous mode [ 204.961164][ T8981] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.966490][ T8981] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.971099][ T8981] bridge_slave_1: entered allmulticast mode [ 204.976462][ T8981] bridge_slave_1: entered promiscuous mode [ 205.007430][ T8981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.014661][ T8981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.049248][ T8981] team0: Port device team_slave_0 added [ 205.056548][ T8981] team0: Port device team_slave_1 added [ 205.086444][ T8981] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.090149][ T8981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 205.106329][ T8981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.115567][ T8981] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.119466][ T8981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 205.134517][ T8981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.191982][ T8981] hsr_slave_0: entered promiscuous mode [ 205.195665][ T8981] hsr_slave_1: entered promiscuous mode [ 205.198915][ T8981] debugfs: 'hsr0' already exists in 'hsr' [ 205.201481][ T8981] Cannot create hsr debugfs directory [ 205.237228][ T5884] usb 38-1: SetAddress Request (2) to port 0 [ 205.239305][ T5884] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 205.388310][ T8981] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 205.392469][ T9012] netlink: 20 bytes leftover after parsing attributes in process `syz.3.935'. [ 205.402836][ T8981] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 205.408231][ T8981] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 205.429625][ T8981] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 205.433695][ T8981] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 205.442149][ T8981] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 205.446131][ T8981] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 205.453175][ T8981] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 205.507590][ T8981] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.510423][ T8981] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.513382][ T8981] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.516441][ T8981] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.562657][ T9008] vhci_hcd: connection reset by peer [ 205.565339][ T12] vhci_hcd vhci_hcd.0: stop threads [ 205.568560][ T12] vhci_hcd vhci_hcd.0: release socket [ 205.570443][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 205.585060][ T8981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.593606][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.596405][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.604285][ T8981] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.613849][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.616209][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.626056][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.628993][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.724623][ T9028] netlink: 12 bytes leftover after parsing attributes in process `syz.3.939'. [ 205.915321][ T8981] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.084399][ T8981] veth0_vlan: entered promiscuous mode [ 206.098297][ T8981] veth1_vlan: entered promiscuous mode [ 206.125755][ T8981] veth0_macvtap: entered promiscuous mode [ 206.140038][ T8981] veth1_macvtap: entered promiscuous mode [ 206.165341][ T8981] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 206.173197][ T8981] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.233915][ T1153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.240190][ T1153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.259917][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.263564][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.273746][ T1153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.278302][ T1153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.309369][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.325075][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.373360][ T9054] netlink: 4972 bytes leftover after parsing attributes in process `syz.3.950'. [ 206.518130][ T64] Bluetooth: hci5: command tx timeout [ 207.090714][ T9061] IPVS: wrr: TCP 127.0.0.1:21 - no destination available [ 207.321771][ T9067] IPVS: wrr: TCP 127.0.0.1:21 - no destination available [ 207.323539][ T1468] IPVS: starting estimator thread 0... [ 207.418614][ T9068] IPVS: using max 44 ests per chain, 105600 per kthread [ 207.812331][ T9086] CIFS mount error: No usable UNC path provided in device string! [ 207.812331][ T9086] [ 207.815744][ T9086] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 207.925382][ T9089] netlink: 4972 bytes leftover after parsing attributes in process `syz.3.953'. [ 208.227327][ T850] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 208.392902][ T850] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 208.405593][ T850] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 208.413048][ T850] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 208.423314][ T850] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 208.429648][ T850] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.442379][ T850] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 208.444987][ T850] usb 5-1: Product: syz [ 208.446300][ T850] usb 5-1: Manufacturer: syz [ 208.456526][ T850] cdc_wdm 5-1:1.0: skipping garbage [ 208.460305][ T850] cdc_wdm 5-1:1.0: skipping garbage [ 208.464367][ T850] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 208.465586][ T9097] netlink: 40 bytes leftover after parsing attributes in process `syz.5.956'. [ 208.466238][ T850] cdc_wdm 5-1:1.0: Unknown control protocol [ 208.538553][ T9101] netlink: 20 bytes leftover after parsing attributes in process `syz.5.958'. [ 208.598982][ T64] Bluetooth: hci5: command tx timeout [ 208.879843][ T5734] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 208.891810][ T5734] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 208.899540][ T5734] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 208.903765][ T5734] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 208.906816][ T5734] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 209.254731][ T5812] usb 5-1: USB disconnect, device number 23 [ 209.617978][ T48] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 210.119939][ T9138] 9p: Bad value for 'rfdno' [ 210.277693][ T5884] usb 38-1: device descriptor read/8, error -110 [ 210.294344][ T9138] Console: switching to colour dummy device 80x25 [ 210.401953][ T9137] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 210.562772][ T9149] ubi16: attaching mtd0 [ 210.584042][ T9137] batman_adv: batadv0: Adding interface: gretap1 [ 210.590729][ T9137] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.600913][ T9137] batman_adv: batadv0: Interface activated: gretap1 [ 210.637227][ T7064] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 210.677527][ T64] Bluetooth: hci5: command tx timeout [ 210.809460][ T7064] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 210.823623][ T7064] usb 8-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 210.830836][ T7064] usb 8-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 210.837139][ T7064] usb 8-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 210.840931][ T7064] usb 8-1: config 0 interface 0 has no altsetting 0 [ 210.842964][ T9103] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.844599][ T7064] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 210.846022][ T9103] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.850343][ T7064] usb 8-1: Product: syz [ 210.851433][ T9103] bridge_slave_0: entered allmulticast mode [ 210.852646][ T7064] usb 8-1: Manufacturer: syz [ 210.855697][ T9103] bridge_slave_0: entered promiscuous mode [ 210.856239][ T7064] usb 8-1: SerialNumber: syz [ 210.860990][ T9103] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.863959][ T9103] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.864341][ T7064] usb 8-1: config 0 descriptor?? [ 210.866846][ T9103] bridge_slave_1: entered allmulticast mode [ 210.869104][ T9145] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 210.871822][ T9103] bridge_slave_1: entered promiscuous mode [ 210.878648][ T7064] usb 8-1: selecting invalid altsetting 0 [ 210.898653][ T9103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.905331][ T9103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.917610][ T64] Bluetooth: hci6: command tx timeout [ 210.939636][ T9103] team0: Port device team_slave_0 added [ 210.953440][ T9103] team0: Port device team_slave_1 added [ 210.970615][ T5884] usb usb38-port1: attempt power cycle [ 210.990697][ T9103] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.993011][ T9103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.001812][ T9103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.010819][ T9103] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.013201][ T9103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.022004][ T9103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.028114][ T9] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 211.060122][ T9103] hsr_slave_0: entered promiscuous mode [ 211.062556][ T9103] hsr_slave_1: entered promiscuous mode [ 211.064805][ T9103] debugfs: 'hsr0' already exists in 'hsr' [ 211.066838][ T9103] Cannot create hsr debugfs directory [ 211.091110][ T9145] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 211.094835][ T9145] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 211.101475][ T9145] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 211.107642][ T9145] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 211.111066][ T9145] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 211.114017][ T9145] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 211.120495][ T9145] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 211.123647][ T9145] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 211.126737][ T9145] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 211.130593][ T9145] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 211.134304][ T9145] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 211.138637][ T9145] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 211.142934][ T9145] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 211.146282][ T9145] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 211.149767][ T1339] usb 8-1: USB disconnect, device number 30 [ 211.155593][ T9145] usb 8-1: cannot submit urb 0, error -19: no device [ 211.159909][ T9145] usb 8-1: cannot submit urb 0, error -19: no device [ 211.163382][ T9145] usb 8-1: cannot submit urb 0, error -19: no device [ 211.166365][ T9145] usb 8-1: cannot submit urb 0, error -19: no device [ 211.169710][ T9145] usb 8-1: cannot submit urb 0, error -19: no device [ 211.178971][ T9] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 211.183895][ T9] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 211.187006][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 211.192512][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 211.196132][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.210728][ T9] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 211.214095][ T9] usb 5-1: Product: syz [ 211.215767][ T9] usb 5-1: Manufacturer: syz [ 211.237671][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.251929][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 211.255308][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 211.270009][ T9] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 211.278381][ T9] cdc_wdm 5-1:1.0: Unknown control protocol [ 211.341978][ T9176] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 211.370310][ T9176] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 211.372799][ T9176] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 211.375109][ T9176] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 211.379078][ T9176] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 211.381045][ T9103] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 211.391594][ T9103] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 211.394578][ T9103] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 211.395215][ T9176] pci 0000:00:01.0: Adding to iommu group 1 [ 211.413730][ T9176] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 211.415868][ T9176] pci 0000:00:01.0: vgaarb: bridge control possible [ 211.417936][ T9176] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 211.425110][ T9103] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 211.428851][ T9176] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 211.431971][ T9103] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 211.433849][ T9176] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 211.439649][ T9176] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 211.441546][ T9103] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 211.444484][ T9103] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 211.449578][ T9103] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 211.486518][ T9176] [drm] Found bochs VGA, ID 0xb0c5. [ 211.489999][ T9176] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 211.550970][ T9176] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 211.558568][ T5884] usb usb38-port1: unable to enumerate USB device [ 211.657722][ T9103] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.660013][ T9103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.662263][ T9103] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.662320][ T9103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.669947][ T9176] Console: switching to colour frame buffer device 160x50 [ 211.676786][ T9176] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 211.713610][ T9103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.717610][ T223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.721913][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.726267][ T7064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.730774][ T1468] usb 5-1: USB disconnect, device number 24 [ 211.731265][ T7064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.738756][ T223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.744450][ T1156] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.747386][ T223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.749881][ T223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.753266][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.754524][ T1156] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.757356][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.777691][ T9103] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.782977][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.785221][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.792832][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.795332][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.191977][ T9219] netlink: 4656 bytes leftover after parsing attributes in process `syz.5.988'. [ 212.380688][ T9103] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.600634][ T9103] veth0_vlan: entered promiscuous mode [ 212.608236][ T9103] veth1_vlan: entered promiscuous mode [ 212.635685][ T9103] veth0_macvtap: entered promiscuous mode [ 212.647777][ T9103] veth1_macvtap: entered promiscuous mode [ 212.660713][ T9103] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.668779][ T9103] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.748981][ T5823] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.759459][ T64] Bluetooth: hci5: command tx timeout [ 212.763013][ T5823] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.817191][ T5604] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.822268][ T5604] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.848750][ T1156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.854323][ T1156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.874541][ T223] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.878530][ T223] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.998010][ T64] Bluetooth: hci6: command tx timeout [ 213.043775][ T9245] netlink: 8 bytes leftover after parsing attributes in process `syz.5.996'. [ 213.091072][ T9245] mac80211_hwsim hwsim0 wlan0: entered promiscuous mode [ 213.101573][ T9245] macvlan1: entered allmulticast mode [ 213.105795][ T9245] mac80211_hwsim hwsim0 wlan0: entered allmulticast mode [ 213.254491][ T9262] jffs2: notice: (9262) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 213.918984][ T1339] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 214.069066][ T1339] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 214.074876][ T1339] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 214.079355][ T1339] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 214.083589][ T1339] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 214.087312][ T1339] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.094196][ T1339] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 214.098012][ T1339] usb 8-1: Product: syz [ 214.099921][ T1339] usb 8-1: Manufacturer: syz [ 214.108174][ T1339] cdc_wdm 8-1:1.0: skipping garbage [ 214.109891][ T1339] cdc_wdm 8-1:1.0: skipping garbage [ 214.121359][ T1339] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 214.123862][ T1339] cdc_wdm 8-1:1.0: Unknown control protocol [ 214.676103][ T5820] usb 8-1: USB disconnect, device number 31 [ 214.770812][ T9307] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1006'. [ 214.793298][ T9307] ntfs3(nullb0): Primary boot signature is not NTFS. [ 214.796008][ T9307] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 214.860839][ T9308] netlink: 'syz.5.1006': attribute type 1 has an invalid length. [ 214.863285][ T9308] netlink: 756 bytes leftover after parsing attributes in process `syz.5.1006'. [ 215.027752][ T9315] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 215.032431][ T9315] batman_adv: batadv0: Adding interface: gretap1 [ 215.034469][ T9315] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.045270][ T9315] batman_adv: batadv0: Interface activated: gretap1 [ 215.073615][ T9315] ubi16: attaching mtd0 [ 215.077288][ T64] Bluetooth: hci6: command tx timeout [ 215.165622][ T9332] FAULT_INJECTION: forcing a failure. [ 215.165622][ T9332] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 215.171158][ T9332] CPU: 0 UID: 0 PID: 9332 Comm: syz.6.1014 Tainted: G L syzkaller #0 PREEMPT(full) [ 215.171185][ T9332] Tainted: [L]=SOFTLOCKUP [ 215.171190][ T9332] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 215.171208][ T9332] Call Trace: [ 215.171214][ T9332] [ 215.171221][ T9332] dump_stack_lvl+0x100/0x190 [ 215.171257][ T9332] should_fail_ex.cold+0x5/0xa [ 215.171286][ T9332] _copy_to_user+0x32/0xd0 [ 215.171323][ T9332] simple_read_from_buffer+0xcb/0x170 [ 215.171360][ T9332] proc_fail_nth_read+0x1af/0x230 [ 215.171394][ T9332] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 215.171420][ T9332] ? rw_verify_area+0xce/0x6d0 [ 215.171446][ T9332] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 215.171470][ T9332] vfs_read+0x1e4/0xb40 [ 215.171490][ T9332] ? __pfx_vfs_read+0x10/0x10 [ 215.171504][ T9332] ? find_held_lock+0x2b/0x80 [ 215.171524][ T9332] ? __fget_files+0x215/0x3d0 [ 215.171544][ T9332] ? __fget_files+0x21f/0x3d0 [ 215.171567][ T9332] ksys_read+0x12a/0x250 [ 215.171585][ T9332] ? __pfx_ksys_read+0x10/0x10 [ 215.171609][ T9332] do_int80_emulation+0x14b/0x720 [ 215.171658][ T9332] asm_int80_emulation+0x1a/0x20 [ 215.171675][ T9332] RIP: 0023:0xf71b74eb [ 215.171690][ T9332] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 215.171706][ T9332] RSP: 002b:00000000f54764bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 215.171732][ T9332] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f54765d0 [ 215.171743][ T9332] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 215.171752][ T9332] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 215.171762][ T9332] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 215.171771][ T9332] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 215.171794][ T9332] [ 215.687012][ T9353] FAULT_INJECTION: forcing a failure. [ 215.687012][ T9353] name failslab, interval 1, probability 0, space 0, times 0 [ 215.691448][ T9353] CPU: 1 UID: 0 PID: 9353 Comm: syz.5.1023 Tainted: G L syzkaller #0 PREEMPT(full) [ 215.691466][ T9353] Tainted: [L]=SOFTLOCKUP [ 215.691470][ T9353] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 215.691477][ T9353] Call Trace: [ 215.691480][ T9353] [ 215.691485][ T9353] dump_stack_lvl+0x100/0x190 [ 215.691501][ T9353] should_fail_ex.cold+0x5/0xa [ 215.691514][ T9353] should_failslab+0xc2/0x120 [ 215.691530][ T9353] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 215.691544][ T9353] ? __alloc_skb+0x5b7/0x710 [ 215.691568][ T9353] ? __alloc_skb+0x140/0x710 [ 215.691585][ T9353] __alloc_skb+0x140/0x710 [ 215.691598][ T9353] ? __alloc_skb+0x5b7/0x710 [ 215.691612][ T9353] ? __pfx___alloc_skb+0x10/0x10 [ 215.691630][ T9353] netlink_alloc_large_skb+0x69/0x150 [ 215.691645][ T9353] netlink_sendmsg+0x680/0xda0 [ 215.691660][ T9353] ? __pfx_netlink_sendmsg+0x10/0x10 [ 215.691675][ T9353] ? apparmor_socket_sendmsg+0x15b/0x270 [ 215.691696][ T9353] ____sys_sendmsg+0xa4d/0xbe0 [ 215.691706][ T9353] ? __pfx_netlink_sendmsg+0x10/0x10 [ 215.691720][ T9353] ? __pfx_____sys_sendmsg+0x10/0x10 [ 215.691738][ T9353] ___sys_sendmsg+0x190/0x1e0 [ 215.691751][ T9353] ? __pfx____sys_sendmsg+0x10/0x10 [ 215.691769][ T9353] ? find_held_lock+0x2b/0x80 [ 215.691792][ T9353] __sys_sendmsg+0x160/0x210 [ 215.691807][ T9353] ? __pfx___sys_sendmsg+0x10/0x10 [ 215.691826][ T9353] ? __pfx_ksys_write+0x10/0x10 [ 215.691840][ T9353] __do_fast_syscall_32+0xe7/0x970 [ 215.691854][ T9353] ? lockdep_hardirqs_on+0x78/0x100 [ 215.691868][ T9353] do_fast_syscall_32+0x32/0x70 [ 215.691882][ T9353] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 215.691903][ T9353] RIP: 0023:0xf701efec [ 215.691917][ T9353] Code: Unable to access opcode bytes at 0xf701efc2. [ 215.691921][ T9353] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 215.691933][ T9353] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 215.691939][ T9353] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 215.691945][ T9353] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 215.691951][ T9353] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 215.691957][ T9353] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 215.691970][ T9353] [ 215.898601][ T1339] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 216.069423][ T1339] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 216.075819][ T1339] usb 5-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 216.080573][ T1339] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 216.084268][ T1339] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 216.088089][ T1339] usb 5-1: config 0 interface 0 has no altsetting 0 [ 216.092017][ T1339] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 216.094759][ T1339] usb 5-1: Product: syz [ 216.096270][ T1339] usb 5-1: Manufacturer: syz [ 216.103471][ T1339] usb 5-1: SerialNumber: syz [ 216.115314][ T1339] usb 5-1: config 0 descriptor?? [ 216.120039][ T9348] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 216.138416][ T1339] usb 5-1: selecting invalid altsetting 0 [ 216.336276][ T9348] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 216.339733][ T9348] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 216.342510][ T9348] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 216.344988][ T9348] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 216.347771][ T9348] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 216.350440][ T9348] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 216.353182][ T9348] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 216.355837][ T9348] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 216.358608][ T9348] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 216.361396][ T9348] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 216.364140][ T9348] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 216.366966][ T9348] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 216.369801][ T9348] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 216.372477][ T9348] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 216.375209][ T9348] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 216.378400][ T9348] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 216.381133][ T9348] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 216.383758][ T9348] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 216.386604][ T9348] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 216.389316][ T9348] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 216.390362][ T1339] usb 5-1: USB disconnect, device number 25 [ 216.392081][ T9348] usb 5-1: cannot submit urb 0, error -19: no device [ 216.550297][ T9377] 9p: Bad value for 'rfdno' [ 216.579045][ T9377] Console: switching to colour dummy device 80x25 [ 217.072405][ T9387] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1032'. [ 217.157785][ T64] Bluetooth: hci6: command tx timeout [ 217.487823][ T1156] net_ratelimit: 19 callbacks suppressed [ 217.487841][ T1156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.494891][ T1155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.499443][ T7064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.503420][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.508051][ T8122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.127657][ T9431] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1039'. [ 218.136320][ T9431] ntfs3(nullb0): Primary boot signature is not NTFS. [ 218.143224][ T9431] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 218.215183][ T9432] netlink: 'syz.0.1039': attribute type 1 has an invalid length. [ 218.225607][ T9432] netlink: 756 bytes leftover after parsing attributes in process `syz.0.1039'. [ 218.233523][ T9434] netlink: 'syz.6.1040': attribute type 4 has an invalid length. [ 218.236328][ T9434] netlink: 17 bytes leftover after parsing attributes in process `syz.6.1040'. [ 218.512885][ T5883] libceph: connect (1)[c::]:6789 error -101 [ 218.554995][ T5883] libceph: mon0 (1)[c::]:6789 connect error [ 218.605813][ T9437] ceph: No mds server is up or the cluster is laggy [ 218.768367][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.188906][ T9453] 9p: Bad value for 'rfdno' [ 219.397370][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.405928][ T7064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.143095][ T5884] IPVS: starting estimator thread 0... [ 220.216223][ T9472] netlink: 'syz.6.1050': attribute type 1 has an invalid length. [ 220.221283][ T9472] netlink: 'syz.6.1050': attribute type 2 has an invalid length. [ 220.228806][ T9472] netlink: 'syz.6.1050': attribute type 1 has an invalid length. [ 220.231765][ T9472] netlink: 'syz.6.1050': attribute type 2 has an invalid length. [ 220.258930][ T9466] IPVS: using max 29 ests per chain, 69600 per kthread [ 220.356768][ T9479] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 220.359748][ T9478] IPVS: stopping master sync thread 9479 ... [ 220.522369][ T8122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.687936][ T850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.703341][ T9488] nbd: must specify at least one socket [ 220.751527][ T9488] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1056'. [ 221.461023][ T9499] e1000e 0000:00:02.0: Interrupt Throttle Rate off [ 221.464543][ T9503] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1059'. [ 221.468467][ T5883] e1000 0000:00:06.0 eth0: Reset adapter [ 221.506725][ T9500] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1057'. [ 221.510237][ T9500] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1057'. [ 221.590713][ T9499] e1000e 0000:00:02.0: Some CPU C-states have been disabled in order to enable jumbo frames [ 221.741985][ T9514] futex_wake_op: syz.3.1057 tries to shift op by -1; fix this program [ 221.779458][ T9503] macvlan2: entered allmulticast mode [ 222.106921][ T61] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 223.238591][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.242505][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.250706][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.280593][ T5813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.717717][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.813342][ T55] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 226.757352][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.358645][ T174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.396481][ T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.405633][ T850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.409382][ T1339] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.008896][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.489633][ T850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.797779][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.530202][ T850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.570425][ T5813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.608098][ T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.640765][ T850] net_ratelimit: 2 callbacks suppressed [ 233.640778][ T850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.689670][ T5813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.397484][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.720304][ T850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.877455][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.047507][ T7064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.051775][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.760034][ T5813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.809347][ T850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.700350][ T9620] netlink: 'syz.5.1068': attribute type 1 has an invalid length. [ 238.748316][ T9620] bond1: entered promiscuous mode [ 238.755072][ T9620] 8021q: adding VLAN 0 to HW filter on device bond1 [ 238.764898][ T9628] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1068'. [ 238.850018][ T5813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.930348][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.952637][ T9633] CIFS: Attempting to mount //127.0.0.1/share [ 238.962453][ T9633] CIFS: VFS: Error connecting to socket. Aborting operation. [ 238.965693][ T9633] CIFS: VFS: cifs_mount failed w/return code = -111 [ 239.246314][ T9637] netlink: 4972 bytes leftover after parsing attributes in process `syz.5.1072'. [ 240.249265][ T5813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.513411][ T9650] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 240.536519][ T9650] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 240.540152][ T9650] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 240.545219][ T9650] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 240.567143][ T9650] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 240.640593][ T9650] pci 0000:00:01.0: Adding to iommu group 1 [ 240.656218][ T174] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 240.686415][ T9650] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 240.688777][ T9650] pci 0000:00:01.0: vgaarb: bridge control possible [ 240.691390][ T9650] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 240.713834][ T9650] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 240.716890][ T9650] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 240.731651][ T9650] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 240.809064][ T9650] [drm] Found bochs VGA, ID 0xb0c5. [ 240.811417][ T9650] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 240.961623][ T9650] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 241.319090][ T850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.357455][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 241.449365][ T9650] Console: switching to colour frame buffer device 160x50 [ 241.452869][ T9650] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 242.407466][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 242.542364][ T7064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.545666][ T5813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.736409][ T9671] netlink: 'syz.6.1082': attribute type 1 has an invalid length. [ 242.816345][ T9671] bond1: entered promiscuous mode [ 242.821463][ T9671] 8021q: adding VLAN 0 to HW filter on device bond1 [ 242.831135][ T9677] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1080'. [ 242.891685][ T9671] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1082'. [ 243.080221][ T5813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.427587][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 243.558802][ T5813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.712510][ T9689] netlink: 7 bytes leftover after parsing attributes in process `syz.5.1080'. [ 243.967819][ T5823] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.602281][ T5813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.177589][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 245.638214][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.649792][ T850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.997755][ T9722] CIFS: Attempting to mount //127.0.0.1/share [ 246.087220][ T9722] CIFS: VFS: Error connecting to socket. Aborting operation. [ 246.097183][ T9722] CIFS: VFS: cifs_mount failed w/return code = -111 [ 246.107482][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 246.117703][ T8122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.197582][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 246.227503][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 246.279972][ T8122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.404695][ T9721] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1089'. [ 246.763240][ T5813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.893046][ T9732] netlink: 4972 bytes leftover after parsing attributes in process `syz.6.1094'. [ 247.370689][ T9740] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1095'. [ 247.805392][ T5813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.356764][ T9740] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1095'. [ 248.700265][ T9749] netlink: 4972 bytes leftover after parsing attributes in process `syz.0.1107'. [ 248.757718][ T9751] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1108'. [ 248.849989][ T850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.161234][ T7064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.878286][ T5813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.350592][ T9751] netlink: 7 bytes leftover after parsing attributes in process `syz.6.1108'. [ 250.942614][ T5813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.080494][ T9768] jffs2: notice: (9768) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 251.146898][ T9768] lo: entered promiscuous mode [ 251.150561][ T9768] tunl0: entered promiscuous mode [ 251.154350][ T9768] gre0: entered promiscuous mode [ 251.163405][ T9768] gretap0: entered promiscuous mode [ 251.169435][ T9768] erspan0: entered promiscuous mode [ 251.174295][ T9768] ip_vti0: entered promiscuous mode [ 251.178952][ T9768] ip6_vti0: entered promiscuous mode [ 251.182523][ T9768] sit0: entered promiscuous mode [ 251.188003][ T9768] ip6tnl0: entered promiscuous mode [ 251.191289][ T9768] ip6gre0: entered promiscuous mode [ 251.195295][ T9768] syz_tun: entered promiscuous mode [ 251.203078][ T9768] ip6gretap0: entered promiscuous mode [ 251.209283][ T9768] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.213648][ T9768] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.219522][ T9768] bridge0: entered promiscuous mode [ 251.969487][ T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.988291][ T9796] netlink: 4972 bytes leftover after parsing attributes in process `syz.3.1112'. [ 252.203019][ T7064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.514721][ T5823] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.680024][ T5734] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 252.688830][ T5734] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 252.699806][ T5734] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 252.701599][ T5823] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.707077][ T5734] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 252.718630][ T5734] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 252.882484][ T5823] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.996555][ T5823] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.013796][ T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.056302][ T9851] FAULT_INJECTION: forcing a failure. [ 253.056302][ T9851] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 253.062041][ T9851] CPU: 2 UID: 0 PID: 9851 Comm: syz.5.1125 Tainted: G L syzkaller #0 PREEMPT(full) [ 253.062070][ T9851] Tainted: [L]=SOFTLOCKUP [ 253.062076][ T9851] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 253.062093][ T9851] Call Trace: [ 253.062100][ T9851] [ 253.062108][ T9851] dump_stack_lvl+0x100/0x190 [ 253.062236][ T9851] should_fail_ex.cold+0x5/0xa [ 253.062264][ T9851] _copy_from_user+0x2e/0xd0 [ 253.062323][ T9851] kstrtouint_from_user+0xd6/0x1d0 [ 253.062343][ T9851] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 253.062362][ T9851] ? __lock_acquire+0x49f/0x1a40 [ 253.062397][ T9851] proc_fail_nth_write+0x83/0x220 [ 253.062430][ T9851] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 253.062460][ T9851] vfs_write+0x2aa/0x1050 [ 253.062485][ T9851] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 253.062512][ T9851] ? __pfx_vfs_write+0x10/0x10 [ 253.062526][ T9851] ? find_held_lock+0x2b/0x80 [ 253.062548][ T9851] ? __fget_files+0x215/0x3d0 [ 253.062569][ T9851] ? __fget_files+0x21f/0x3d0 [ 253.062593][ T9851] ksys_write+0x12a/0x250 [ 253.062608][ T9851] ? __pfx_ksys_write+0x10/0x10 [ 253.062646][ T9851] do_int80_emulation+0x14b/0x720 [ 253.062718][ T9851] asm_int80_emulation+0x1a/0x20 [ 253.062735][ T9851] RIP: 0023:0xf71574eb [ 253.062749][ T9851] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 253.062765][ T9851] RSP: 002b:00000000f540d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 253.062793][ T9851] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f540d5d0 [ 253.062803][ T9851] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 253.062813][ T9851] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 253.062822][ T9851] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 253.062832][ T9851] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 253.062857][ T9851] [ 253.280363][ T5823] bridge_slave_1: left allmulticast mode [ 253.284522][ T5823] bridge_slave_1: left promiscuous mode [ 253.288149][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.298889][ T5823] bridge_slave_0: left allmulticast mode [ 253.301156][ T5823] bridge_slave_0: left promiscuous mode [ 253.303673][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.322113][ T5823] batman_adv: batadv0: Interface deactivated: gretap1 [ 253.446886][ T5823] batman_adv: batadv0: Removing interface: gretap1 [ 253.485889][ T5823] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.495837][ T5823] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.500923][ T5823] bond0 (unregistering): Released all slaves [ 253.503943][ T9860] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1127'. [ 253.509558][ T5823] bond1 (unregistering): Released all slaves [ 253.545519][ T9860] team0 (unregistering): Port device team_slave_0 removed [ 253.552675][ T9860] team0 (unregistering): Port device team_slave_1 removed [ 253.728900][ T9869] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 253.734811][ T9869] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 253.740964][ T9869] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 253.746322][ T9869] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 253.749767][ T9869] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 253.769463][ T9869] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 253.783040][ T9869] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 253.787702][ T9869] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 253.792150][ T9869] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 253.801927][ T9823] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.805044][ T9823] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.811209][ T9823] bridge_slave_0: entered allmulticast mode [ 253.813314][ T9869] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 253.814933][ T9823] bridge_slave_0: entered promiscuous mode [ 253.815446][ T9869] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 253.820168][ T5447] 8021q: adding VLAN 0 to HW filter on device eth2 [ 253.829844][ T9869] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 253.836395][ T9878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.842211][ T9869] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1128'. [ 253.845977][ T9823] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.850920][ T9823] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.853504][ T9823] bridge_slave_1: entered allmulticast mode [ 253.856638][ T9823] bridge_slave_1: entered promiscuous mode [ 253.863793][ T9878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.886731][ T9878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.894423][ T9878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.898483][ T9878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.935716][ T9823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.941656][ T9823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.958785][ T9823] team0: Port device team_slave_0 added [ 253.962249][ T9823] team0: Port device team_slave_1 added [ 254.015120][ T5823] hsr_slave_0: left promiscuous mode [ 254.020220][ T5823] hsr_slave_1: left promiscuous mode [ 254.022471][ T5823] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.024823][ T5823] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.040115][ T5823] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.042459][ T5823] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.055869][ T5823] veth1_macvtap: left promiscuous mode [ 254.058992][ T5823] veth0_macvtap: left promiscuous mode [ 254.223304][ T5823] team0 (unregistering): Port device team_slave_1 removed [ 254.239664][ T5823] team0 (unregistering): Port device team_slave_0 removed [ 254.339069][ T9823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.344477][ T9823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 254.369909][ T9823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.393234][ T5447] 8021q: adding VLAN 0 to HW filter on device eth3 [ 254.396861][ T9900] X.509: Couldn't decode AuthKeyIdentifier [ 254.444334][ T9883] can0: slcan on ttyS3. [ 254.444778][ T9823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.449334][ T9823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 254.457992][ T9823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.561070][ T9823] hsr_slave_0: entered promiscuous mode [ 254.564346][ T9823] hsr_slave_1: entered promiscuous mode [ 254.567440][ T9823] debugfs: 'hsr0' already exists in 'hsr' [ 254.569783][ T9823] Cannot create hsr debugfs directory [ 254.599917][ T9889] can0 (unregistered): slcan off ttyS3. [ 254.800566][ T9823] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 254.809238][ T9823] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 254.813247][ T9823] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 254.822837][ T9823] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 254.837609][ T9823] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 254.843284][ T9823] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 254.846228][ T9823] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 254.846360][ T9904] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 254.859209][ T9823] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 254.916908][ T5823] IPVS: stop unused estimator thread 0... [ 254.967843][ T5447] 8021q: adding VLAN 0 to HW filter on device eth4 [ 255.021279][ T9823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.036959][ T9823] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.043701][ T223] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.046033][ T223] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.058070][ T223] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.060493][ T223] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.078475][ T850] net_ratelimit: 610 callbacks suppressed [ 255.078491][ T850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.191722][ T5447] 8021q: adding VLAN 0 to HW filter on device eth5 [ 255.238576][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.243223][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.248423][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.252398][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.257937][ T7064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.421672][ T9823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.569701][ T9823] veth0_vlan: entered promiscuous mode [ 255.575204][ T9823] veth1_vlan: entered promiscuous mode [ 255.597372][ T9823] veth0_macvtap: entered promiscuous mode [ 255.602505][ T9823] veth1_macvtap: entered promiscuous mode [ 255.634387][ T9823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.642946][ T9823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.659114][ T9969] IPVS: wrr: TCP 127.0.0.1:21 - no destination available [ 255.662814][ T9969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.702828][ T5823] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.706526][ T5823] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.724204][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.726921][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.728098][ T5811] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.749562][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.752303][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.757925][ T5811] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.799235][ T64] Bluetooth: hci5: command 0x0c1a tx timeout [ 255.799288][ T5734] Bluetooth: hci4: command 0x0c1a tx timeout [ 255.799344][ T5093] Bluetooth: hci3: command 0x0419 tx timeout [ 255.799369][ T5093] Bluetooth: hci1: command 0x0419 tx timeout [ 255.799408][ T5749] Bluetooth: hci0: command 0x0419 tx timeout [ 255.878194][ T223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.881320][ T1339] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.886343][ T5820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.887524][ T5734] Bluetooth: hci6: command 0x041b tx timeout [ 256.382703][ T9986] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3835797286 (7671594572 ns) > initial count (4918772610 ns). Using initial count to start timer. [ 256.388761][ T9986] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=2527804186 (323558935808 ns) > initial count (117850194176 ns). Using initial count to start timer. [ 256.559224][ T9991] comedi comedi0: comedi_config --init_data is deprecated [ 256.582123][ T9994] FAULT_INJECTION: forcing a failure. [ 256.582123][ T9994] name failslab, interval 1, probability 0, space 0, times 0 [ 256.586258][ T9994] CPU: 1 UID: 0 PID: 9994 Comm: syz.0.1145 Tainted: G L syzkaller #0 PREEMPT(full) [ 256.586277][ T9994] Tainted: [L]=SOFTLOCKUP [ 256.586282][ T9994] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 256.586288][ T9994] Call Trace: [ 256.586293][ T9994] [ 256.586298][ T9994] dump_stack_lvl+0x100/0x190 [ 256.586318][ T9994] should_fail_ex.cold+0x5/0xa [ 256.586335][ T9994] should_failslab+0xc2/0x120 [ 256.586354][ T9994] kmem_cache_alloc_noprof+0x91/0x6a0 [ 256.586369][ T9994] ? trace_kmem_cache_alloc+0xdd/0x100 [ 256.586385][ T9994] ? security_file_alloc+0x34/0x2c0 [ 256.586416][ T9994] security_file_alloc+0x34/0x2c0 [ 256.586432][ T9994] init_file+0x95/0x480 [ 256.586446][ T9994] alloc_empty_file+0x79/0x1c0 [ 256.586461][ T9994] alloc_file_pseudo+0x183/0x290 [ 256.586476][ T9994] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 256.586490][ T9994] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 256.586512][ T9994] create_pipe_files+0x360/0x970 [ 256.586526][ T9994] do_pipe2+0xbd/0x1e0 [ 256.586537][ T9994] ? __pfx_do_pipe2+0x10/0x10 [ 256.586549][ T9994] ? fput+0x79/0x100 [ 256.586563][ T9994] ? __pfx_ksys_write+0x10/0x10 [ 256.586576][ T9994] __ia32_sys_pipe+0x32/0x50 [ 256.586588][ T9994] __do_fast_syscall_32+0xe7/0x970 [ 256.586604][ T9994] ? lockdep_hardirqs_on+0x78/0x100 [ 256.586619][ T9994] do_fast_syscall_32+0x32/0x70 [ 256.586634][ T9994] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 256.586648][ T9994] RIP: 0023:0xf701efec [ 256.586662][ T9994] Code: Unable to access opcode bytes at 0xf701efc2. [ 256.586668][ T9994] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 000000000000002a [ 256.586679][ T9994] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 256.586686][ T9994] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 256.586692][ T9994] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 256.586698][ T9994] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 256.586704][ T9994] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 256.586734][ T9994] [ 256.603328][ T850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.702115][ T9999] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1146'. [ 256.800753][T10006] FAULT_INJECTION: forcing a failure. [ 256.800753][T10006] name failslab, interval 1, probability 0, space 0, times 0 [ 256.816540][T10006] CPU: 1 UID: 0 PID: 10006 Comm: syz.5.1148 Tainted: G L syzkaller #0 PREEMPT(full) [ 256.816559][T10006] Tainted: [L]=SOFTLOCKUP [ 256.816563][T10006] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 256.816569][T10006] Call Trace: [ 256.816574][T10006] [ 256.816579][T10006] dump_stack_lvl+0x100/0x190 [ 256.816596][T10006] should_fail_ex.cold+0x5/0xa [ 256.816609][T10006] should_failslab+0xc2/0x120 [ 256.816626][T10006] __kmalloc_noprof+0xfc/0x820 [ 256.816640][T10006] ? tomoyo_encode2+0xfb/0x3c0 [ 256.816659][T10006] tomoyo_encode2+0xfb/0x3c0 [ 256.816677][T10006] tomoyo_encode+0x29/0x50 [ 256.816691][T10006] tomoyo_realpath_from_path+0x18c/0x690 [ 256.816710][T10006] tomoyo_path_number_perm+0x23c/0x580 [ 256.816724][T10006] ? tomoyo_path_number_perm+0x22e/0x580 [ 256.816739][T10006] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 256.816753][T10006] ? get_pid_task+0x106/0x250 [ 256.816781][T10006] ? find_held_lock+0x2b/0x80 [ 256.816795][T10006] ? __fget_files+0x215/0x3d0 [ 256.816806][T10006] ? hook_file_ioctl_common+0x140/0x440 [ 256.816820][T10006] ? __fget_files+0x215/0x3d0 [ 256.816833][T10006] ? __fget_files+0x21f/0x3d0 [ 256.816845][T10006] security_file_ioctl_compat+0xd3/0x230 [ 256.816861][T10006] __ia32_compat_sys_ioctl+0xc2/0x360 [ 256.816879][T10006] __do_fast_syscall_32+0xe7/0x970 [ 256.816894][T10006] ? lockdep_hardirqs_on+0x78/0x100 [ 256.816909][T10006] do_fast_syscall_32+0x32/0x70 [ 256.816923][T10006] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 256.816938][T10006] RIP: 0023:0xf701efec [ 256.816951][T10006] Code: Unable to access opcode bytes at 0xf701efc2. [ 256.816956][T10006] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 256.816968][T10006] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000c0844123 [ 256.816974][T10006] RDX: 00000000800001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 256.816980][T10006] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 256.816986][T10006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 256.816992][T10006] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 256.817006][T10006] [ 256.817057][T10006] ERROR: Out of memory at tomoyo_realpath_from_path. [ 256.899191][T10009] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 256.947194][ T5812] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 257.118120][ T5812] usb 12-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 257.123237][ T5812] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.126813][ T5812] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.130267][ T5812] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 257.134632][ T5812] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.138930][ T5812] usb 12-1: config 0 descriptor?? [ 257.615778][ T5812] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 257.739420][T10037] jffs2: notice: (10037) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 1 orphan) and 2 of xref (0 dead, 1 orphan) found. [ 257.877568][ T5734] Bluetooth: hci4: command 0x0c1a tx timeout [ 257.877580][ T64] Bluetooth: hci5: command 0x0c1a tx timeout [ 257.957309][ T64] Bluetooth: hci6: command 0x041b tx timeout [ 258.398433][T10063] input: syz0 as /devices/virtual/input/input10 [ 258.473021][T10068] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1168'. [ 258.620780][T10082] sctp: [Deprecated]: syz.0.1170 (pid 10082) Use of int in max_burst socket option. [ 258.620780][T10082] Use struct sctp_assoc_value instead [ 258.735914][ T42] audit: type=1800 audit(1786826548.452:409): pid=10090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1171" name="memory_backed" dev="configfs" ino=33875 res=0 errno=0 [ 258.743040][ T42] audit: type=1800 audit(1786826548.452:410): pid=10090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1171" name="zone_nr_conv" dev="configfs" ino=33876 res=0 errno=0 [ 258.749689][ T42] audit: type=1800 audit(1786826548.462:411): pid=10090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1171" name="power" dev="configfs" ino=33877 res=0 errno=0 [ 258.796468][T10090] null_blk: disk nullb1 created [ 258.869273][T10090] netlink: 'syz.0.1171': attribute type 1 has an invalid length. [ 258.900820][T10104] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1175'. [ 258.917488][T10090] 8021q: adding VLAN 0 to HW filter on device bond2 [ 258.956131][T10090] bond2: (slave veth3): Enslaving as an active interface with a down link [ 258.968139][T10090] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1171'. [ 258.982160][T10111] netlink: 4972 bytes leftover after parsing attributes in process `syz.3.1176'. [ 258.983033][T10108] lo speed is unknown, defaulting to 1000 [ 258.989899][T10090] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1171'. [ 258.993232][T10090] 8021q: adding VLAN 0 to HW filter on device bond2 [ 258.997517][T10108] lo speed is unknown, defaulting to 1000 [ 259.005194][T10108] lo speed is unknown, defaulting to 1000 [ 259.007976][T10108] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 259.012506][T10108] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 259.018769][T10108] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 259.024739][T10108] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 259.033029][T10108] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 259.043395][T10115] FAULT_INJECTION: forcing a failure. [ 259.043395][T10115] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 259.048399][T10115] CPU: 3 UID: 0 PID: 10115 Comm: syz.0.1177 Tainted: G L syzkaller #0 PREEMPT(full) [ 259.048416][T10115] Tainted: [L]=SOFTLOCKUP [ 259.048420][T10115] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 259.048427][T10115] Call Trace: [ 259.048431][T10115] [ 259.048436][T10115] dump_stack_lvl+0x100/0x190 [ 259.048452][T10115] should_fail_ex.cold+0x5/0xa [ 259.048465][T10115] _copy_from_user+0x2e/0xd0 [ 259.048482][T10115] get_compat_msghdr+0xb3/0x480 [ 259.048512][T10115] ? __pfx_get_compat_msghdr+0x10/0x10 [ 259.048528][T10115] ___sys_sendmsg+0x1b6/0x1e0 [ 259.048542][T10115] ? __pfx____sys_sendmsg+0x10/0x10 [ 259.048561][T10115] ? find_held_lock+0x2b/0x80 [ 259.048584][T10115] __sys_sendmsg+0x160/0x210 [ 259.048599][T10115] ? __pfx___sys_sendmsg+0x10/0x10 [ 259.048619][T10115] ? __pfx_ksys_write+0x10/0x10 [ 259.048633][T10115] __do_fast_syscall_32+0xe7/0x970 [ 259.048649][T10115] ? lockdep_hardirqs_on+0x78/0x100 [ 259.048675][T10115] do_fast_syscall_32+0x32/0x70 [ 259.048692][T10115] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 259.048706][T10115] RIP: 0023:0xf701efec [ 259.048719][T10115] Code: Unable to access opcode bytes at 0xf701efc2. [ 259.048724][T10115] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 259.048736][T10115] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 259.048742][T10115] RDX: 0000000000000090 RSI: 0000000000000000 RDI: 0000000000000000 [ 259.048748][T10115] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 259.048755][T10115] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 259.048761][T10115] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 259.048775][T10115] [ 259.059703][T10108] lo speed is unknown, defaulting to 1000 [ 259.114350][T10108] lo speed is unknown, defaulting to 1000 [ 259.116968][T10108] lo speed is unknown, defaulting to 1000 [ 259.119678][T10108] lo speed is unknown, defaulting to 1000 [ 259.123474][T10108] lo speed is unknown, defaulting to 1000 [ 259.126246][T10108] lo speed is unknown, defaulting to 1000 [ 259.128952][T10108] lo speed is unknown, defaulting to 1000 [ 259.236967][T10127] overlayfs: conflicting options: userxattr,redirect_dir=on [ 259.237046][T10104] smbdirect: ib_dev[syz2] removed [ 259.408710][T10131] X.509: Couldn't decode AuthKeyIdentifier [ 259.586574][ T42] audit: type=1326 audit(1786826549.302:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10139 comm="syz.5.1184" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x0 [ 259.685991][ T5812] usb 12-1: USB disconnect, device number 2 [ 259.957530][ T64] Bluetooth: hci5: command 0x0c1a tx timeout [ 259.957874][ T5734] Bluetooth: hci4: command 0x0c1a tx timeout [ 260.037327][ T5734] Bluetooth: hci6: command 0x041b tx timeout [ 260.045599][ T850] IPVS: starting estimator thread 0... [ 260.147349][T10160] IPVS: using max 26 ests per chain, 62400 per kthread [ 260.469864][T10172] cgroup2: Unknown parameter '0x0000000000000004' [ 260.473008][T10172] sctp: [Deprecated]: syz.0.1191 (pid 10172) Use of int in max_burst socket option. [ 260.473008][T10172] Use struct sctp_assoc_value instead [ 260.674877][T10181] netlink: 4972 bytes leftover after parsing attributes in process `syz.5.1194'. [ 260.679334][T10181] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1194'. [ 260.779494][ T850] net_ratelimit: 10 callbacks suppressed [ 260.779512][ T850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.944170][T10192] FAULT_INJECTION: forcing a failure. [ 260.944170][T10192] name failslab, interval 1, probability 0, space 0, times 0 [ 260.950015][T10192] CPU: 0 UID: 0 PID: 10192 Comm: syz.3.1196 Tainted: G L syzkaller #0 PREEMPT(full) [ 260.950055][T10192] Tainted: [L]=SOFTLOCKUP [ 260.950063][T10192] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 260.950073][T10192] Call Trace: [ 260.950079][T10192] [ 260.950086][T10192] dump_stack_lvl+0x100/0x190 [ 260.950112][T10192] should_fail_ex.cold+0x5/0xa [ 260.950135][T10192] should_failslab+0xc2/0x120 [ 260.950161][T10192] __kmalloc_noprof+0xfc/0x820 [ 260.950182][T10192] ? rcu_is_watching+0x12/0xc0 [ 260.950207][T10192] ? tomoyo_realpath_from_path+0xb6/0x690 [ 260.950239][T10192] tomoyo_realpath_from_path+0xb6/0x690 [ 260.950270][T10192] tomoyo_path_number_perm+0x23c/0x580 [ 260.950291][T10192] ? tomoyo_path_number_perm+0x22e/0x580 [ 260.950315][T10192] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 260.950337][T10192] ? get_pid_task+0x106/0x250 [ 260.950383][T10192] ? find_held_lock+0x2b/0x80 [ 260.950401][T10192] ? __fget_files+0x215/0x3d0 [ 260.950417][T10192] ? hook_file_ioctl_common+0x140/0x440 [ 260.950438][T10192] ? __fget_files+0x215/0x3d0 [ 260.950459][T10192] ? __fget_files+0x21f/0x3d0 [ 260.950482][T10192] security_file_ioctl_compat+0xd3/0x230 [ 260.950507][T10192] __ia32_compat_sys_ioctl+0xc2/0x360 [ 260.950537][T10192] __do_fast_syscall_32+0xe7/0x970 [ 260.950561][T10192] ? lockdep_hardirqs_on+0x78/0x100 [ 260.950584][T10192] do_fast_syscall_32+0x32/0x70 [ 260.950608][T10192] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 260.950631][T10192] RIP: 0023:0xf706efec [ 260.950651][T10192] Code: Unable to access opcode bytes at 0xf706efc2. [ 260.950659][T10192] RSP: 002b:00000000f543c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 260.950694][T10192] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 000000000000890c [ 260.950705][T10192] RDX: 0000000080005fc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 260.950715][T10192] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 260.950725][T10192] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 260.950737][T10192] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 260.950761][T10192] [ 260.950848][T10192] ERROR: Out of memory at tomoyo_realpath_from_path. [ 261.326466][ T8122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.654235][ T1156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.679885][ T5820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.841237][ T850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.939923][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.981484][T10202] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1200'. [ 261.984797][T10202] netlink: 'syz.5.1200': attribute type 5 has an invalid length. [ 261.988259][T10202] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1200'. [ 262.021007][T10204] can0: slcan on ptm0. [ 262.117317][ T5734] Bluetooth: hci6: command 0x041b tx timeout [ 262.160496][T10201] can0 (unregistered): slcan off ptm0. [ 262.183598][T10216] Mass Storage Function, version: 2009/09/11 [ 262.188132][T10216] LUN: removable file: (no medium) [ 262.192513][ T42] audit: type=1800 audit(1786826551.912:413): pid=10216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1203" name="cdrom" dev="configfs" ino=34154 res=0 errno=0 [ 262.214345][T10216] netlink: 'syz.0.1203': attribute type 1 has an invalid length. [ 262.228748][T10220] FAULT_INJECTION: forcing a failure. [ 262.228748][T10220] name failslab, interval 1, probability 0, space 0, times 0 [ 262.234855][T10216] bond3: entered promiscuous mode [ 262.238158][T10216] 8021q: adding VLAN 0 to HW filter on device bond3 [ 262.239121][T10220] CPU: 3 UID: 0 PID: 10220 Comm: syz.5.1204 Tainted: G L syzkaller #0 PREEMPT(full) [ 262.239148][T10220] Tainted: [L]=SOFTLOCKUP [ 262.239154][T10220] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 262.239165][T10220] Call Trace: [ 262.239171][T10220] [ 262.239178][T10220] dump_stack_lvl+0x100/0x190 [ 262.239205][T10220] should_fail_ex.cold+0x5/0xa [ 262.239227][T10220] should_failslab+0xc2/0x120 [ 262.239252][T10220] __kmalloc_cache_noprof+0x91/0x6c0 [ 262.239273][T10220] ? configfs_write_iter+0x388/0x4e0 [ 262.239297][T10220] configfs_write_iter+0x388/0x4e0 [ 262.239328][T10220] vfs_write+0x6ac/0x1050 [ 262.239347][T10220] ? __pfx_configfs_write_iter+0x10/0x10 [ 262.239368][T10220] ? __pfx_vfs_write+0x10/0x10 [ 262.239383][T10220] ? find_held_lock+0x2b/0x80 [ 262.239423][T10220] ksys_write+0x12a/0x250 [ 262.239441][T10220] ? __pfx_ksys_write+0x10/0x10 [ 262.239457][T10220] ? ksys_write+0x1ac/0x250 [ 262.239473][T10220] ? __pfx_ksys_write+0x10/0x10 [ 262.239496][T10220] __do_fast_syscall_32+0xe7/0x970 [ 262.239520][T10220] ? lockdep_hardirqs_on+0x78/0x100 [ 262.239544][T10220] do_fast_syscall_32+0x32/0x70 [ 262.239567][T10220] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 262.239590][T10220] RIP: 0023:0xf701efec [ 262.239609][T10220] Code: Unable to access opcode bytes at 0xf701efc2. [ 262.239617][T10220] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 262.239649][T10220] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800004c0 [ 262.239661][T10220] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 262.239671][T10220] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 262.239682][T10220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 262.239692][T10220] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 262.239715][T10220] [ 262.242996][T10220] netlink: 'syz.5.1204': attribute type 1 has an invalid length. [ 262.274981][T10216] bond3: (slave bridge2): making interface the new active one [ 262.316637][T10216] bridge2: entered promiscuous mode [ 262.320174][T10216] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 262.358341][T10220] bond2: entered promiscuous mode [ 262.360963][T10220] 8021q: adding VLAN 0 to HW filter on device bond2 [ 262.383621][T10220] bond2: (slave bridge1): making interface the new active one [ 262.386712][T10220] bridge1: entered promiscuous mode [ 262.391861][T10220] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 262.510326][ T42] audit: type=1800 audit(1786826552.232:414): pid=10239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1206" name="cdrom" dev="configfs" ino=35043 res=0 errno=0 [ 262.519935][T10239] netlink: 'syz.5.1206': attribute type 1 has an invalid length. [ 262.540169][T10239] bond3: entered promiscuous mode [ 262.542072][T10239] 8021q: adding VLAN 0 to HW filter on device bond3 [ 262.550888][T10239] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1206'. [ 262.554709][T10239] openvswitch: netlink: Flow key attr not present in new flow. [ 262.930030][ T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.940430][T10247] FAULT_INJECTION: forcing a failure. [ 262.940430][T10247] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 262.945479][T10247] CPU: 2 UID: 0 PID: 10247 Comm: syz.5.1209 Tainted: G L syzkaller #0 PREEMPT(full) [ 262.945504][T10247] Tainted: [L]=SOFTLOCKUP [ 262.945511][T10247] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 262.945521][T10247] Call Trace: [ 262.945528][T10247] [ 262.945534][T10247] dump_stack_lvl+0x100/0x190 [ 262.945560][T10247] should_fail_ex.cold+0x5/0xa [ 262.945581][T10247] _copy_from_user+0x2e/0xd0 [ 262.945624][T10247] sctp_getsockopt+0x48ff/0x7090 [ 262.945665][T10247] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 262.945691][T10247] ? __lock_acquire+0x49f/0x1a40 [ 262.945709][T10247] ? __pfx_sctp_getsockopt+0x10/0x10 [ 262.945729][T10247] ? _parse_integer_limit+0x1ac/0x220 [ 262.945780][T10247] ? __pfx___might_resched+0x10/0x10 [ 262.945812][T10247] ? aa_sk_perm+0x309/0xaa0 [ 262.945836][T10247] ? __pfx_aa_sk_perm+0x10/0x10 [ 262.945864][T10247] ? aa_sock_opt_perm+0xfe/0x1b0 [ 262.945884][T10247] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 262.945904][T10247] do_sock_getsockopt+0x50a/0x6e0 [ 262.945922][T10247] ? __lock_acquire+0x49f/0x1a40 [ 262.945941][T10247] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 262.945966][T10247] ? find_held_lock+0x2b/0x80 [ 262.945993][T10247] ? __fget_files+0x21f/0x3d0 [ 262.946017][T10247] __sys_getsockopt+0x133/0x1d0 [ 262.946047][T10247] ? __ia32_sys_getsockopt+0xbc/0x160 [ 262.946071][T10247] __ia32_sys_getsockopt+0xbc/0x160 [ 262.946092][T10247] ? __do_fast_syscall_32+0x98/0x970 [ 262.946115][T10247] ? lockdep_hardirqs_on+0x78/0x100 [ 262.946135][T10247] __do_fast_syscall_32+0xe7/0x970 [ 262.946155][T10247] ? lockdep_hardirqs_on+0x78/0x100 [ 262.946177][T10247] do_fast_syscall_32+0x32/0x70 [ 262.946200][T10247] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 262.946220][T10247] RIP: 0023:0xf701efec [ 262.946240][T10247] Code: Unable to access opcode bytes at 0xf701efc2. [ 262.946247][T10247] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 000000000000016d [ 262.946265][T10247] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000084 [ 262.946274][T10247] RDX: 000000000000006f RSI: 0000000080000300 RDI: 0000000080000380 [ 262.946283][T10247] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 262.946294][T10247] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 262.946303][T10247] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 262.946326][T10247] [ 263.411196][T10267] jffs2: notice: (10267) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (2 unchecked, 1 orphan) and 3 of xref (0 dead, 1 orphan) found. [ 263.573221][T10273] __nla_validate_parse: 2 callbacks suppressed [ 263.573258][T10273] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1216'. [ 263.639500][T10276] gadgetfs: bound to dummy_udc driver [ 263.664027][T10276] ------------[ cut here ]------------ [ 263.667298][T10276] 1 [ 263.667312][T10276] WARNING: mm/page_alloc.c:5280 at __alloc_frozen_pages_noprof+0x2427/0x2dc0, CPU#3: syz.5.1220/10276 [ 263.672089][T10276] Modules linked in: [ 263.673514][T10276] CPU: 3 UID: 0 PID: 10276 Comm: syz.5.1220 Tainted: G L syzkaller #0 PREEMPT(full) [ 263.678468][T10276] Tainted: [L]=SOFTLOCKUP [ 263.679876][T10276] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 263.684058][T10276] RIP: 0010:__alloc_frozen_pages_noprof+0x2427/0x2dc0 [ 263.686318][T10276] Code: e9 8d fb ff ff 31 d2 be 28 12 00 00 48 c7 c7 a0 54 e1 8b e8 eb a8 69 ff 2e 2e 2e 31 c0 e9 02 ed ff ff c6 05 d4 52 9e 0e 01 90 <0f> 0b 90 e9 6f df ff ff 48 c7 c7 80 ac d3 8e 45 89 f7 44 8b 74 24 [ 263.694286][T10276] RSP: 0018:ffffc90003f2f7f8 EFLAGS: 00010246 [ 263.697295][T10276] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 263.701000][T10276] RDX: 0000000000000000 RSI: 1ffff920007e5f19 RDI: 0000000000040cc0 [ 263.704245][T10276] RBP: 0000000000000013 R08: 0000000000000005 R09: 0000000000000009 [ 263.707643][T10276] R10: 0000000000000013 R11: 0000000000000000 R12: 0000000000040cc0 [ 263.710972][T10276] R13: 1ffff920007e5f57 R14: ffffffff9b753444 R15: 0000000000000001 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 263.714283][T10276] FS: 0000000000000000(0000) GS:ffff888096ee7000(0063) knlGS:00000000f540db40 [ 263.718102][T10276] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 263.720793][T10276] CR2: 00000000f7393cb4 CR3: 000000005628e000 CR4: 0000000000352ef0 [ 263.724042][T10276] Call Trace: [ 263.725380][T10276] [ 263.726664][T10276] ? __pfx_stack_trace_save+0x10/0x10 [ 263.729210][T10276] ? check_noncircular+0x97/0x160 [ 263.731332][T10276] ? add_lock_to_list+0x99/0x110 [ 263.733461][T10276] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 263.736048][T10276] ? trace_sched_exit_tp+0x120/0x160 [ 263.738277][T10276] ? lockdep_unlock+0x5a/0xc0 [ 263.741862][T10276] ? __lock_acquire+0xd5b/0x1a40 [ 263.744638][T10276] ? lock_acquire+0x1b9/0x370 [ 263.746612][T10276] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 263.749761][T10276] ? policy_nodemask+0xed/0x4f0 [ 263.751827][T10276] alloc_pages_mpol+0x1fb/0x540 [ 263.753868][T10276] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 263.756279][T10276] ? __pfx___mutex_lock+0x10/0x10 [ 263.758730][T10276] ___kmalloc_large_node+0xe5/0x120 [ 263.760946][T10276] __kmalloc_large_node_noprof+0x1c/0x70 [ 263.763326][T10276] __kmalloc_noprof+0x5a1/0x820 [ 263.765172][T10276] ? ep_write_iter+0x180/0xbc0 [ 263.766942][T10276] ep_write_iter+0x180/0xbc0 [ 263.768652][T10276] ? __pfx_ep_write_iter+0x10/0x10 [ 263.770311][T10276] vfs_write+0x6ac/0x1050 [ 263.771753][T10276] ? __pfx_ep_write_iter+0x10/0x10 [ 263.773532][T10276] ? __pfx_vfs_write+0x10/0x10 [ 263.775525][T10276] ? find_held_lock+0x2b/0x80 [ 263.777632][T10276] ksys_write+0x12a/0x250 [ 263.779443][T10276] ? __pfx_ksys_write+0x10/0x10 [ 263.781471][T10276] __do_fast_syscall_32+0xe7/0x970 [ 263.783588][T10276] ? lockdep_hardirqs_on+0x78/0x100 [ 263.785783][T10276] do_fast_syscall_32+0x32/0x70 [ 263.787523][T10276] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 263.790022][T10276] RIP: 0023:0xf701efec [ 263.791543][T10276] Code: Unable to access opcode bytes at 0xf701efc2. [ 263.793912][T10276] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 263.797426][T10276] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000000000 [ 263.800754][T10276] RDX: 00000000fffffe79 RSI: 0000000000000000 RDI: 0000000000000000 [ 263.803959][T10276] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 263.807345][T10276] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 263.810624][T10276] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 263.813761][T10276] [ 263.815033][T10276] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 263.818006][T10276] CPU: 3 UID: 0 PID: 10276 Comm: syz.5.1220 Tainted: G L syzkaller #0 PREEMPT(full) [ 263.822457][T10276] Tainted: [L]=SOFTLOCKUP [ 263.824266][T10276] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 263.827755][T10276] Call Trace: [ 263.829154][T10276] [ 263.830322][T10276] dump_stack_lvl+0x100/0x190 [ 263.832019][T10276] vpanic+0x552/0x970 [ 263.833310][T10276] ? __pfx_vpanic+0x10/0x10 [ 263.834817][T10276] panic+0xd1/0xe0 [ 263.836293][T10276] ? __pfx_panic+0x10/0x10 [ 263.837977][T10276] check_panic_on_warn.cold+0x19/0x34 [ 263.839738][T10276] ? __alloc_frozen_pages_noprof+0x2427/0x2dc0 [ 263.841617][T10276] __warn.cold+0x191/0x318 [ 263.843005][T10276] __report_bug+0x30f/0x440 [ 263.844551][T10276] ? __alloc_frozen_pages_noprof+0x2427/0x2dc0 [ 263.846867][T10276] ? __pfx___report_bug+0x10/0x10 [ 263.848994][T10276] ? unwind_next_frame+0x3be/0x2090 [ 263.851147][T10276] ? rcu_is_watching+0x12/0xc0 [ 263.853142][T10276] ? __kasan_check_byte+0x13/0x50 [ 263.855233][T10276] ? is_bpf_text_address+0x8a/0x1a0 [ 263.857389][T10276] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 263.859989][T10276] ? rcu_is_watching+0x12/0xc0 [ 263.861996][T10276] ? __alloc_frozen_pages_noprof+0x2427/0x2dc0 [ 263.864581][T10276] report_bug+0xb2/0x220 [ 263.866386][T10276] ? __alloc_frozen_pages_noprof+0x2427/0x2dc0 [ 263.868498][T10276] handle_bug+0x16a/0x2a0 [ 263.869877][T10276] exc_invalid_op+0x17/0x50 [ 263.871668][T10276] asm_exc_invalid_op+0x1a/0x20 [ 263.873695][T10276] RIP: 0010:__alloc_frozen_pages_noprof+0x2427/0x2dc0 [ 263.876475][T10276] Code: e9 8d fb ff ff 31 d2 be 28 12 00 00 48 c7 c7 a0 54 e1 8b e8 eb a8 69 ff 2e 2e 2e 31 c0 e9 02 ed ff ff c6 05 d4 52 9e 0e 01 90 <0f> 0b 90 e9 6f df ff ff 48 c7 c7 80 ac d3 8e 45 89 f7 44 8b 74 24 [ 263.884300][T10276] RSP: 0018:ffffc90003f2f7f8 EFLAGS: 00010246 [ 263.886826][T10276] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 263.890109][T10276] RDX: 0000000000000000 RSI: 1ffff920007e5f19 RDI: 0000000000040cc0 [ 263.893377][T10276] RBP: 0000000000000013 R08: 0000000000000005 R09: 0000000000000009 [ 263.896619][T10276] R10: 0000000000000013 R11: 0000000000000000 R12: 0000000000040cc0 [ 263.899867][T10276] R13: 1ffff920007e5f57 R14: ffffffff9b753444 R15: 0000000000000001 [ 263.902987][T10276] ? stack_trace_save+0x8e/0xc0 [ 263.904840][T10276] ? __pfx_stack_trace_save+0x10/0x10 [ 263.907041][T10276] ? check_noncircular+0x97/0x160 [ 263.908771][T10276] ? add_lock_to_list+0x99/0x110 [ 263.910320][T10276] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 263.912588][T10276] ? trace_sched_exit_tp+0x120/0x160 [ 263.914694][T10276] ? lockdep_unlock+0x5a/0xc0 [ 263.916491][T10276] ? __lock_acquire+0xd5b/0x1a40 [ 263.918284][T10276] ? lock_acquire+0x1b9/0x370 [ 263.919813][T10276] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 263.921671][T10276] ? policy_nodemask+0xed/0x4f0 [ 263.923135][T10276] alloc_pages_mpol+0x1fb/0x540 [ 263.924726][T10276] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 263.926513][T10276] ? __pfx___mutex_lock+0x10/0x10 [ 263.928143][T10276] ___kmalloc_large_node+0xe5/0x120 [ 263.929861][T10276] __kmalloc_large_node_noprof+0x1c/0x70 [ 263.931679][T10276] __kmalloc_noprof+0x5a1/0x820 [ 263.933160][T10276] ? ep_write_iter+0x180/0xbc0 [ 263.934734][T10276] ep_write_iter+0x180/0xbc0 [ 263.936689][T10276] ? __pfx_ep_write_iter+0x10/0x10 [ 263.938746][T10276] vfs_write+0x6ac/0x1050 [ 263.940488][T10276] ? __pfx_ep_write_iter+0x10/0x10 [ 263.942595][T10276] ? __pfx_vfs_write+0x10/0x10 [ 263.944603][T10276] ? find_held_lock+0x2b/0x80 [ 263.946443][T10276] ksys_write+0x12a/0x250 [ 263.948137][T10276] ? __pfx_ksys_write+0x10/0x10 [ 263.950067][T10276] __do_fast_syscall_32+0xe7/0x970 [ 263.952197][T10276] ? lockdep_hardirqs_on+0x78/0x100 [ 263.954330][T10276] do_fast_syscall_32+0x32/0x70 [ 263.956370][T10276] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 263.958979][T10276] RIP: 0023:0xf701efec [ 263.960412][T10276] Code: Unable to access opcode bytes at 0xf701efc2. [ 263.962973][T10276] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 263.965578][T10276] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000000000 [ 263.968029][T10276] RDX: 00000000fffffe79 RSI: 0000000000000000 RDI: 0000000000000000 [ 263.970459][T10276] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 263.972885][T10276] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 263.975315][T10276] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 263.977788][T10276] [ 263.979495][T10276] Kernel Offset: disabled [ 263.980863][T10276] Rebooting in 86400 seconds..