last executing test programs: 4m20.951647817s ago: executing program 1 (id=166): socket$inet_udp(0x2, 0x2, 0x0) open$dir(&(0x7f0000000100)='.\x00', 0x18100, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/devices/usb1/1-0:1.0/usb1-port1/disable\x00', 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x25, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000000)={0xffffffffffffffff, 0x58, &(0x7f00000001c0)}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0xffffffffffffff00, 0xa, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') write$cgroup_subtree(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB='-net -freezer -io -hugetlb -hugetlb +free'], 0x36) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r5, 0xfffffffffffffffe, r5, 0x0) r6 = creat(&(0x7f00000002c0)='./file0\x00', 0xecf86c37d53049c4) close(r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000180100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000008740000000c0a95c900000000000000000100000008000440000000000900010073797a300000000038000380340000800400018004000680140007800c000100636f756e7465720004000280140001800c0001"], 0xe4}}, 0x0) read$FUSE(r4, &(0x7f0000000640)={0x2020}, 0x2020) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) sendmsg$unix(r9, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) 4m19.720828836s ago: executing program 1 (id=178): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r1, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f0000000080)=""/175) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x2) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_CAP_HYPERV_SYNIC2(r6, 0x4068aea3, &(0x7f0000000140)) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x80489439, &(0x7f00000004c0)) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000600)={0x1, 0x0, [{0x40000096, 0x0, 0xffffffff}]}) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x60, 0xb, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7f}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010102}}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0xffffffff00000000}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xbd}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200000300000000000000000000008500000027000000850000000800000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000640)="61ee1a8f06f017636e6a6d2a6cc9", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000180)=0x2cf7) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r8, 0x4001af84, &(0x7f00000021c0)) ioctl$VHOST_SET_OWNER(r8, 0xaf01, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) read$FUSE(r9, &(0x7f00000057c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$cgroup_devices(r0, &(0x7f0000000200)=ANY=[@ANYRESOCT=r10, @ANYRES32=r9], 0xffdd) 4m19.364028696s ago: executing program 1 (id=182): socket(0x2b, 0x80801, 0x1) socket(0x2b, 0x80801, 0x1) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)={0x14, 0x14, 0x601, 0x0, 0x0, {0x2b, 0xfa}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000002c0)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="0000000000000020851000000300000018000000000000000000000000000001950000000000000018010000202078250000000000201c007b1af8ff00000000bfa100000000000017010000f8ffffffb702000008000000b50afdffffffeffe850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xd}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r3, &(0x7f0000000140)={0x8}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1000003) ioctl$KVM_RUN(r6, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x1, &(0x7f00000000c0)=[{0x3, 0x0, 0x0, 0x7ffc1ffb}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f08c40f009b27000000f2e10a8e690f3271008000c90f30b80e0000000f23d80f215035800000a0c9b9490300000f60b932c00a00b9730200000f32328fe8587db660602fb92dbf0002e6e6006880000000000000000f30", 0x64}], 0x4dd17ed7c0be0334, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000002000/0x2000)=nil) ioctl$KVM_RUN(r6, 0xae80, 0x0) 4m18.753386984s ago: executing program 1 (id=187): futex(0x0, 0x6, 0x2, 0x0, 0x0, 0x3) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40005}, 0x8010) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000040)='./dev/mtdblock0\x00', &(0x7f0000000400)='msdos\x00', 0xfe00, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x0) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 4m18.213552192s ago: executing program 1 (id=190): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000640), 0x44040, 0x0) capset(&(0x7f0000000580)={0x19980330}, &(0x7f00000005c0)={0xc, 0xf, 0xdb, 0x2, 0x101, 0x3}) statx(r0, &(0x7f0000000100)='./file0\x00', 0x6000, 0x800, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x20, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './file0'}}, {@redirect_dir_follow}, {@xino_on}], [{@uid_eq={'uid', 0x3d, r1}}, {@appraise}]}) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x183240, 0x0) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x4903, 0x0) ioctl$CDROMVOLCTRL(r3, 0x31f, &(0x7f0000000040)={0xb0, 0x7, 0x7, 0x3}) ioctl$CDROM_LOCKDOOR(r2, 0x5329, 0x0) 4m18.029486464s ago: executing program 1 (id=194): r0 = socket(0x400000000010, 0x3, 0x0) (async) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000230002, 0x0) (async) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f787e272b122ebbff6884b3de82f8a3df9a2d0b67e46c349917110300b94240185146e52ac1540130161b6534e99e466173af4c775f238fae344b198915446b576be455f251e79f7ec703f937cd8530410f3700000000000000", 0x90, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r3) sendmsg$NL80211_CMD_AUTHENTICATE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000b00)={0x54, r5, 0x1, 0x70bd2a, 0x21dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8}, @key_params=[@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x4000050) (async) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0xffffffffffffffff}, {0xffff, 0xffff}, {0xffe0, 0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x8, 0x7, 0x7fffffff}}}}]}, 0x44}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000940)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x3c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @multicast2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x8040) (async) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x1e, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xb, 0x3}, {0x9, 0x1}, {0x7, 0x300}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r7 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$restrict_keyring(0x1d, r7, &(0x7f0000000200)='pkcs7_test\x00', &(0x7f0000000240)='hfsc\x00') r8 = openat$sysfs(0xffffff9c, &(0x7f0000000280)='/sys/kernel/address_bits', 0x400, 0xc) ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, &(0x7f00000007c0)={0x6, 0x0, [{0x70000, 0x3e, &(0x7f0000000380)=""/62}, {0x2, 0x65, &(0x7f0000000540)=""/101}, {0xe000, 0x5d, &(0x7f00000005c0)=""/93}, {0x30002, 0x67, &(0x7f0000000640)=""/103}, {0x60000, 0x33, &(0x7f00000006c0)=""/51}, {0x54000, 0x95, &(0x7f0000000700)=""/149}]}) 4m17.91590428s ago: executing program 32 (id=194): r0 = socket(0x400000000010, 0x3, 0x0) (async) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000230002, 0x0) (async) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f787e272b122ebbff6884b3de82f8a3df9a2d0b67e46c349917110300b94240185146e52ac1540130161b6534e99e466173af4c775f238fae344b198915446b576be455f251e79f7ec703f937cd8530410f3700000000000000", 0x90, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r3) sendmsg$NL80211_CMD_AUTHENTICATE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000b00)={0x54, r5, 0x1, 0x70bd2a, 0x21dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8}, @key_params=[@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x4000050) (async) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0xffffffffffffffff}, {0xffff, 0xffff}, {0xffe0, 0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x8, 0x7, 0x7fffffff}}}}]}, 0x44}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000940)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x3c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @multicast2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x8040) (async) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x1e, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xb, 0x3}, {0x9, 0x1}, {0x7, 0x300}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r7 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$restrict_keyring(0x1d, r7, &(0x7f0000000200)='pkcs7_test\x00', &(0x7f0000000240)='hfsc\x00') r8 = openat$sysfs(0xffffff9c, &(0x7f0000000280)='/sys/kernel/address_bits', 0x400, 0xc) ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, &(0x7f00000007c0)={0x6, 0x0, [{0x70000, 0x3e, &(0x7f0000000380)=""/62}, {0x2, 0x65, &(0x7f0000000540)=""/101}, {0xe000, 0x5d, &(0x7f00000005c0)=""/93}, {0x30002, 0x67, &(0x7f0000000640)=""/103}, {0x60000, 0x33, &(0x7f00000006c0)=""/51}, {0x54000, 0x95, &(0x7f0000000700)=""/149}]}) 3m52.244441564s ago: executing program 4 (id=315): r0 = socket$inet6(0xa, 0x3, 0x7) sendto$inet6(r0, &(0x7f0000000080)="800009e92208a1ce", 0xfdef, 0x3f050000, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x18) 3m52.243926507s ago: executing program 4 (id=316): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r4, &(0x7f0000000000), 0x10) bind$can_raw(r4, &(0x7f0000000a00), 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='fdinfo/4\x00') read$FUSE(r5, &(0x7f0000001f40)={0x2020}, 0x2020) r6 = socket$kcm(0x10, 0x5, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x28, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$kcm(r1, &(0x7f0000001b00)={&(0x7f0000000240)=@generic={0x2a, "f19d356a90efc0b27e5755bbe4072b6810e66431eab115800633ec67422196ed5887d3d22bd5ca1173d79d2e83c79d7ea152ccb3f1e97e259574d3e304dd04864645a73c8b35fdc7c163abc5d2ac81f2c87bac1a6b8d6a4d980d18e2447d21659d90836719d0f8375b692aa3488ec0f362897e4228b028f70476eba00edb"}, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000000380)="3aab6b3faa828dcb143d34fe1b06ea498d00a7f599701b122cff3f0e72eb3e57e107f619e682494b34ecc92eaeab5a898c48e4d333413b4c02d55450", 0x3c}, {&(0x7f0000000480)="961c1c143a3ca84f2dc8c2409e5d8ad8e206912cd360fca90ffb376188f94204065831a32d1ca3f9315bc9deee9fd53169b1ff2c23c2fc69ac6d0f1727943c3450bcfa2b9bd3ff325b9bca7d61c2ebd3108430006f2f55ed4a2d0c1fd41998ee6389ca", 0x63}, {&(0x7f0000000500)="55cfaf07b3f466f07abf88ff7943f30d3412f6b5b08eb48b690313270aa4ddd1647040a4f51cfc2c396b00d8c835850fd0cffe0c029c44334ad141e8ccca3daa5c31f289aba316bc4d3aec1032a6585ebcd636f66f90b37c444bcbbfc0cd4d12784681f9494a71d8de0b46b334d38e197d6ddfe8f652425a90f48b4e69adb2422288d0e312347a48d53bb5d327a4cf97439779bb807acf5128f2c876f510264273a101d74d7749cdb9009ba864647fd486817ac558c7b3d7c7f08d41b6", 0xbd}, {&(0x7f0000000640)="7e5e01e35701b2efcdaeed6a8931121debd58f13483d2e55a91a9dc60fe5b41e5bf6a4aaf751b9685ced3aeff19bf117a908214b2c2a5b1c24820a8c22e70b99cc396ea38314ef33768d3ad08900b07703c077cb3c9340fa6a05d2e73d2ac2f402f5a57db61ab5769518c11bd1a214aa9f1ff25e2d91", 0x76}, {&(0x7f00000006c0)="6ed690c789e80367258be2142d045419ae032c9ae24b44de489935ab42906f43210c17e5fdb7cb355a05babd0d0e55ce10febca93ef2e2864c2a85d74ed0b71d8648d1e8319b4f7c2933b29578450bd63d0ef6dcd4fa4b4f3a6b1461339917d959a3cfa420dc2b016e3ac14a406d32daa635f1271e072ab95f4110b33c1b68b5f53a4714a40e01625195b7fa56e2bac1107d8de9ab2c4e91918a012365739e2e258ff460a317946737097bdd77ecd9af32a7e6aae318f659a8f97afe48d87dcbf30957032bd89a66d7", 0xc9}, {&(0x7f0000000a40)="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", 0x1000}, {&(0x7f0000001a40)="d2717a31f645efe01d3809f7a7b36c71d96e1e68634e0be4843df89689fe74966962ce97e7d5f39fdbf981a04b00f33e2af3cd8876bf1be9c496324f8411b7338ac49750d4f2b9e60e5553723e50764d7f1265094decad0e012052391abb2d61c91c8ce0a5ec9b", 0x67}], 0x7}, 0x40) ioctl$SIOCSIFMTU(r9, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848130000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r10, 0x42013, 0x2020e}}, 0x20}, 0x1, 0x0, 0x0, 0x20000886}, 0x0) 3m51.397502256s ago: executing program 4 (id=319): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000240)="119b030e7deba3ec69da3c0cce0764c6baa1660000000000000000000000b8000000000000000000", 0x28) r1 = accept4(r0, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r1) sendmmsg$alg(r1, &(0x7f0000003f40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000040}], 0x1, 0x0) sendto$packet(r1, &(0x7f0000000480)="ab75691683558e5361318d201a121626", 0x10, 0x404c854, 0x0, 0x0) 3m49.932832579s ago: executing program 4 (id=325): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001100)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'virt_wifi0\x00', &(0x7f0000000480)=@ethtool_drvinfo={0x3, "ba0af2b137d4b6f46b2c52c5bd15b547105d63f3e426f5cf097000", "895eb838028245e487746279afd4afc52f36c36a1e383cfbed8f861d06b0ce28", "3b1b766ddf1fdbb70900000000000000ee5036170a0000e000", "accc686cd42187452797772042aacd5211fd7dcd6b0400", "03d8e0d7148f792fa0702f56da64523ed98ff6d64a94891f409cfae6f5ebbbdb", "0096b900", 0xfd, 0xe0, 0x40002, 0x2, 0x5}}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000500)={0x298, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x271, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x2}, @device_a, @device_a, @initial, {0xc, 0xc45}, @value=@ver_80211n={0x0, 0x8, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0xf7d6, @default, 0x1040, @val={0x0, 0x11, @random="f8d9c3537204b0b478308bf7aa17d3cb35"}, @val={0x1, 0x3, [{0x3}, {0x1, 0x1}, {0x3}]}, @void, @val={0x4, 0x6, {0x8, 0x6, 0xec6, 0x4}}, @val={0x6, 0x2, 0x3}, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x0, 0x6, 0x8}}, @void, @void, @val={0x71, 0x7, {0x0, 0x1, 0x0, 0x0, 0x2, 0xf3, 0x20}}, @void, [{0xdd, 0x6a, "ccff396922e15cae25aef7da02fcbfdfdcbfdb1ff313dae170d604445f1aa40580eb457c61f5ff5a6a0bc277b68baa4c9420a4621fd39d72837be063f927610c4e1b1bc20271c35aa02cdfcf53398a468e407d653243c60d2b68860d62aed527c8ada6bd87dc42f85438"}, {0xdd, 0x53, "12afa0c19f87a0279bd0de26be87d147bede4c85aff63beb5f60aa299323961d8db4aace7501eb0330f5201fafc3c35dd56fa22c22d7c0039fb3c421a9f2d41cf5db01ea14b1a88919c12696cfae6244b567a5"}, {0xdd, 0x76, "6b6f3c17950396eb8c709cd3d676c6300a0c381a951fd45bc3f65f0cc9298dbc972a0de3f29325d320c61fb8db027485430d8dfe931407edbcc4c9eacbe8288c6d51bf48b5a9625eac8ea03993dc0a592fd764360483ab4dc98d4e07bdb0484866c6b6b41d70191142ed091ca9626c5ec9e4549889e9"}, {0xdd, 0x6, "9f5f0f2c6222"}, {0xdd, 0x80, "0c8f613c6e46c88b8595b2cc97d1c524601d51fbdabfbbd9ad6862aac5450011800d535c32253756aa149cde7dca16d7991e300171e1ba1755f1c44c022d29e0f668956a6178d5298fb495af7e7cffed2c6f28b47ff8807db0c4673b7dd7a3a9d1d7ca849c26671e5bbd1fee5ff36180152627ee3566165701f8319fce104668"}, {0xdd, 0x6, 'K@AD T'}, {0xdd, 0x25, "ae91fad7e0599960d08aa5c296595ea80142e940d48658b5e4af5631b87b91c3fe3915f5e4"}, {0xdd, 0x1e, "059d8cb3b1122c12ddecd25f84b3ee6bd2d013ca76a47d77f5c89e2f33fa"}]}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x298}, 0x1, 0x0, 0x0, 0x20000081}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = eventfd2(0x8, 0x0) write$eventfd(r2, 0x0, 0x0) read(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)={0x3c, r7, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x77c}, @NL80211_ATTR_SCAN_SSIDS={0x4}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x648d8}, 0x1a) sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5c0000001f47762d0f7a3ef5739be0fb1be84f387ad223a3b0da556d8279490bc0b6a1078bdfcc83dbc60626fb4b3a14fbdaf49c547db9bb52b72a7a5db831a6eb", @ANYRES16=r7, @ANYBLOB="100028bd7000fddbdf250c00000004000b0011000700b9ea660f2f16954e273fd513b500000008003700000000000a00060008021100000100000a000600ffffffffffff000004000b000a0006000802110000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r9 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0xa02, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r11, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r10, 0x0}]) setns(0xc9, 0x0) ioctl$KVM_TDX_CAPABILITIES(r9, 0xc004aeba, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/2000, {0x3, 0x0, [{}, {}, {}]}}}) r12 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/unix\x00') pread64(r12, &(0x7f0000001c00)=""/4108, 0x100c, 0x3) 3m49.782702435s ago: executing program 4 (id=327): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x40000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0xc, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", r3}) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/mem_sleep', 0x20001, 0x18b) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000080)={r5, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4010000000000ffd, 0x0, 0x0, 0x19, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0x6]}}) ioctl$LOOP_GET_STATUS(r4, 0x4c03, &(0x7f0000000280)) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r6, 0xc01064bd, &(0x7f00000004c0)={&(0x7f00000003c0)='l', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r7, 0xc01064bd, &(0x7f00000001c0)={&(0x7f00000000c0)="1a13", 0x2}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r7, 0xc00464be, &(0x7f0000000340)={r8}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000340)={0x2}, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00004c"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x84) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r10 = accept4$inet6(r5, &(0x7f0000000200), &(0x7f0000000480)=0x1c, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000004c0)={@initdev, 0x0}, &(0x7f0000000540)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r10, 0x8916, &(0x7f0000000580)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x37, r11}) r12 = fsopen(&(0x7f0000000140)='debugfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r12, 0x6, 0x0, 0x0, 0x0) r13 = fsmount(r12, 0x0, 0xd) fchdir(r13) r14 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./tracing/events/kvm/kvm_hv_stimer_cleanup/trigger\x00', 0x0, 0x82) preadv2(r14, &(0x7f00000018c0)=[{&(0x7f00000005c0)=""/217, 0xd9}], 0x1, 0x800, 0x40, 0x0) 3m49.183028487s ago: executing program 4 (id=333): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x32, 0xffffffffffffffff, 0x6931b000) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 3m49.073411806s ago: executing program 33 (id=333): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x32, 0xffffffffffffffff, 0x6931b000) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 3m14.172694664s ago: executing program 2 (id=541): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x100}}, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x8) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'bond_slave_1\x00'}) socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000040), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x80) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="1b90000081510c00f93055e500a66ad995f5da433a86bc9c64de91658a3a104c109868856003de0594ac6e6058aee6a717689d2b39b5e6782df71b34d24f6477708c93f99f0730b07e62ecae62638a4baab5e59cf1e1b7c7e346642e257f80c3e9e0c1f7f37f9f33403b6e8d42c6e5a7f0150461baa98ae99fe7777d35ca3a00eef441bbff7e9019e55f7e36262819bdaeecdfda"], 0x48}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) r4 = openat$fb0(0xffffff9c, &(0x7f0000000300), 0x40002, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0xc}, {0x5, 0xffff}, {0x7, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x20000050) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000001c0)={0x114, 0x30, 0x1, 0x0, 0x0, "", [@nested={0x104, 0x0, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767fc734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0) write(r9, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0) close(0x3) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x4c840) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x6000, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xffe0, 0xb}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20045010}, 0x0) ioctl$FBIOGET_VSCREENINFO(r4, 0x4600, &(0x7f00000004c0)) 3m13.931312459s ago: executing program 2 (id=546): r0 = fsopen(&(0x7f00000001c0)='btrfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000180)={'wlan0\x00', &(0x7f0000000100)=@ethtool_channels={0x3d, 0x101, 0x0, 0xfffffffb, 0x2, 0x1000000, 0xb33, 0xfd, 0x6}}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000200)={0x8, "e2f06487b14a4767c1bc0565958c4af043a57786be27fdd97fc698c6cc0340a7"}) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x2) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000280)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r7, 0x2) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) flock(r8, 0x2) r9 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a) flock(r9, 0x2) r10 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8) flock(r10, 0x1) landlock_restrict_self(r4, 0xe) 3m12.825340523s ago: executing program 2 (id=555): request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x187) lsetxattr$security_capability(&(0x7f0000000000)='./file1/file2\x00', &(0x7f0000000140), 0x0, 0x0, 0x1) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x84, 0x4, 0x4038a0b, 0x11, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2={0xff, 0x5}, 0x20, 0x0, 0x0, 0x4}}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x80) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000080601080000000000000000010000010500010007000076"], 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x48040) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x972, 0x1f480, 0x2, 0x325}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080045000028fffe00009506907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8c020008907810050000000000000040005600002d226905531de156c8ecefbaecbc06add46e8a3d97a47e75e224d3858e1494d970d9e00fd3e79c9939f75883aee0a185a4e2b4950e2c1a0b5b052ae7609b"], 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) io_uring_enter(r3, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x20, 0x2d, 0x107, 0xfffffffe, 0x1, {0x5, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x16, 0x0, 0x0, @uid}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x488d1}, 0x400c000) 3m11.794174061s ago: executing program 2 (id=557): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011238b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 3m11.703043343s ago: executing program 2 (id=559): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(0xffffffffffffffff, &(0x7f00000002c0)={@void, @void, @eth={@local, @remote, @val={@val={0x88a8, 0x0, 0x0, 0x1}, {0x88a8, 0x0, 0x0, 0xfff}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x26, 0x18, 0x67, 0x0, 0x9, 0x32, 0x0, @loopback, @initdev={0xac, 0x1e, 0x3, 0x0}}, "0f453e47"}}}}}, 0x2e) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x4000002d) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) read(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000009b40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) r3 = socket$inet_sctp(0x2, 0x1, 0x84) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000002c0)={0x84, @empty, 0x4e1c, 0x3, 'wlc\x00', 0x39, 0x80, 0x2}, 0x2c) r4 = socket$kcm(0xa, 0x2, 0x0) r5 = openat$sndseq(0xffffff9c, &(0x7f0000000180), 0x80801) write$sndseq(r5, &(0x7f0000000500)=[{0xfe, 0x3, 0x17, 0xb, @tick=0x1, {0x9, 0x8}, {0x7, 0x2}, @ext={0x84, &(0x7f0000000300)="4894b13a0b4c2d86080a992bdb9803f054d43aed75a723cf7a56c2cced44c8c132c189b53b5b537c14f9a0790173520e2de83eb98e45467e8b96d36fba122ba6293adf477d474c50f402dd8e835d8075293048198eda35828310cf1b1e90e3ddb8c95b1155695f6da581cd0ce4d7f3521aba4bb499c0f60dba939ad84081e27b0d8b9c28"}}, {0xfa, 0x9, 0x10, 0xc, @time={0xffffffff}, {0x5}, {0x1, 0x7}, @addr={0x0, 0x5}}], 0x38) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e24, 0x3, 'fo\x00', 0x8, 0x323b, 0x56}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x2}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}, 0x40004) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8001, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000061c0)={0x2020, 0x0, 0x0}, 0x2020) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r8, 0x404c4701, &(0x7f0000000100)={0x1, 0x2, 0x0, 0x400000, 0x5, "3eccd800ff00000000000010000000040100"}) write$FUSE_INIT(r0, &(0x7f0000000b80)={0x50, 0x0, r7, {0x7, 0x2b, 0x2, 0xffffffff96008450, 0x4, 0xfffd, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0xffffffff}}, 0x50) 3m11.633684336s ago: executing program 2 (id=560): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYRESHEX=0x0], 0x10}}, 0x0) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000000140), &(0x7f00000001c0)) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x28, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0xc) r3 = openat$dlm_plock(0xffffff9c, &(0x7f0000000080), 0x41, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$NILFS_IOCTL_GET_CPSTAT(r2, 0x80186e83, &(0x7f00000000c0)) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000300)={'aio_iiro_16\x00', [0x100, 0x4, 0x4, 0x2, 0x5, 0x100, 0x3, 0x20000010, 0x800, 0xb, 0x0, 0x7, 0x1, 0x401, 0x10001, 0xfffffffe, 0x0, 0x8, 0xfe9, 0x401, 0x3, 0x2, 0x7, 0x9, 0x48, 0xe9c6, 0x7, 0x6a7a, 0x8000005, 0x7, 0x8, 0x200]}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'veth0_vlan\x00', 0x0}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) fcntl$getownex(r6, 0x10, &(0x7f0000000200)) r7 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1ea1e2) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000000080)={r8, 0x0, {0x0, 0x0, 0x0, 0x1, 0x4000000000000ffd, 0x0, 0x0, 0xa, 0x9, "faf98357e5a1149989fc8dbec3bd07b82a128bbad0099cebdc25f5abb534464c516bdd8a0f3500", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237641a8ccf162e43ac61f700000000009b4100", [0x9, 0xa]}}) ioctl$LOOP_CLR_FD(r3, 0x4c01) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000040)={@private2, r5}, 0x18) 2m55.889746479s ago: executing program 34 (id=560): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYRESHEX=0x0], 0x10}}, 0x0) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000000140), &(0x7f00000001c0)) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x28, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0xc) r3 = openat$dlm_plock(0xffffff9c, &(0x7f0000000080), 0x41, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$NILFS_IOCTL_GET_CPSTAT(r2, 0x80186e83, &(0x7f00000000c0)) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000300)={'aio_iiro_16\x00', [0x100, 0x4, 0x4, 0x2, 0x5, 0x100, 0x3, 0x20000010, 0x800, 0xb, 0x0, 0x7, 0x1, 0x401, 0x10001, 0xfffffffe, 0x0, 0x8, 0xfe9, 0x401, 0x3, 0x2, 0x7, 0x9, 0x48, 0xe9c6, 0x7, 0x6a7a, 0x8000005, 0x7, 0x8, 0x200]}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'veth0_vlan\x00', 0x0}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) fcntl$getownex(r6, 0x10, &(0x7f0000000200)) r7 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1ea1e2) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000000080)={r8, 0x0, {0x0, 0x0, 0x0, 0x1, 0x4000000000000ffd, 0x0, 0x0, 0xa, 0x9, "faf98357e5a1149989fc8dbec3bd07b82a128bbad0099cebdc25f5abb534464c516bdd8a0f3500", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237641a8ccf162e43ac61f700000000009b4100", [0x9, 0xa]}}) ioctl$LOOP_CLR_FD(r3, 0x4c01) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000040)={@private2, r5}, 0x18) 2m13.602682324s ago: executing program 3 (id=897): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x5, 0x1800087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x40000000e, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x44, 0x2, 0x200, "4649f6441214bdf0c12f00007f9d0000310fa145d5dbff7fff00", 0x32314d56}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r3, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r4 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r4, 0x0) ftruncate(r4, 0x2) clock_gettime(0x0, &(0x7f0000000180)) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) rename(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='./file0\x00') close_range(r2, 0xffffffffffffffff, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) 2m11.896291567s ago: executing program 3 (id=906): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_ep_write(r0, 0x81, 0x4, &(0x7f0000000080)="00012c61") syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x26) fcntl$notify(r2, 0x402, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000380)='.pending_reads\x00', 0x842b1ca101c92493, 0xc0) getsockopt$inet6_mreq(r4, 0x29, 0x9e467cc2b5dc478c, &(0x7f00000003c0)={@rand_addr, 0x0}, &(0x7f0000000400)=0x14) setsockopt$MRT_DEL_VIF(r4, 0x0, 0xcb, &(0x7f0000000440)={0x0, 0x0, 0x7, 0xed, @vifc_lcl_ifindex=r5, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000340)={@local}) syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x240, 0x310) ioctl(r6, 0xc138fd02, &(0x7f0000000000)="0400000000000000") 2m0.241512288s ago: executing program 3 (id=916): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001800010000000000000000000a0020000000000000000000050014000000000008000400", @ANYRES32, @ANYBLOB="0c000e"], 0x38}, 0x1, 0x0, 0x0, 0x20008080}, 0x4000) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) (async) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) write(r0, &(0x7f0000000680)="240000001a005f0400f9f40700090401802020000001000000e3eafca61c140ef9560800e632bd6032105f4d2637aefc9e01a443fd9cac9ec549dba51e30da1b20e973247133c26f885c5ec4082429cccbe55eb12d96a075bd512b1f77dbdcdcc50978b5b846d75702905c89ce413bb351bb2b58dde91614450184803cad111d6b5dd1294e9ce9f6184066165efdc2eb74e2a5e7d64311fbb095bcb62c125de8b22592182f0a00"/178, 0xb2) (async) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="040f0400011620d3d4efcfd572c147637ba244ffda82bab0143c42f736241cbb59073f4235b0777ff9be48292768a8e24deb24da85bce5569d55f85b546c7b7c8dc20b7f003fd72e0b6b9f1c075f4badbc1b03960f2b6ab7c7f3490aa653742b74bdb857ac3e967fc3e4e66cd026b53fc5e9"], 0x7) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8200, 0x0) ioctl$COMEDI_INSN(r2, 0x8028640c, &(0x7f0000000040)={0xc000003, 0xf, &(0x7f0000000080)=[0x1e, 0x9, 0x2, 0x4, 0x4, 0xffffdffa, 0x2d7b, 0x40000003, 0x5d, 0x10001, 0xfffffffa, 0x8, 0x6, 0x880e, 0x5], 0x2, 0x4000007}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x2, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x1e, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, 0x30}, 0x94) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) (async) mkdir(&(0x7f0000000000)='proc\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000200)='proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc/kallsyms\x00', 0x0, 0x0) (async) read$FUSE(0xffffffffffffffff, &(0x7f00000034c0)={0x2020}, 0x2020) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_REAPURBNDELAY(r6, 0x4008550d, 0x0) (async) bind$alg(r4, &(0x7f0000001240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4abf3", 0x10) (async) r7 = accept4$alg(r4, 0x0, 0x0, 0x800) sendmmsg(r7, &(0x7f00000001c0), 0x39, 0x20004010) (async) io_setup(0xff, &(0x7f0000000380)) (async) io_submit(0x0, 0x1, &(0x7f0000001440)=[&(0x7f00000003c0)={0x1000000, 0x0, 0x700000000000000, 0x8, 0x1, r7, &(0x7f00000002c0)="00000100396b60", 0x7, 0x0, 0x0, 0x3, r5}]) (async) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) (async) ioctl$sock_ifreq(r3, 0x89b0, &(0x7f0000000280)={'vcan0\x00', @ifru_data=&(0x7f0000000140)="c0d1f1b2ac0b2019d9299b9a4d03bc3daa3e8d7d5d106e33c7c9306f87396ae7"}) (async) connect$inet(r8, &(0x7f0000000480)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2m0.241107282s ago: executing program 3 (id=917): request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x187) lsetxattr$security_capability(&(0x7f0000000000)='./file1/file2\x00', &(0x7f0000000140), 0x0, 0x0, 0x1) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x84, 0x4, 0x4038a0b, 0x11, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2={0xff, 0x5}, 0x20, 0x0, 0x0, 0x4}}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x80) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000080601080000000000000000010000010500010007000076"], 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x48040) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x972, 0x1f480, 0x2, 0x325}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080045000028fffe00009506907864010101ac1414aa0000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8c020008907810050000000000000040005600002d226905531de156c8ecefbaecbc06add46e8a3d97a47e75e224d3858e1494d970d9e00fd3e79c9939f75883aee0a185a4e2b4950e2c1a0b5b052ae7609ba5aecca6e20beb023dcb1c"], 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) io_uring_enter(r3, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x20, 0x2d, 0x107, 0xfffffffe, 0x1, {0x5, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x16, 0x0, 0x0, @uid}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x488d1}, 0x400c000) 2m0.217449298s ago: executing program 3 (id=921): r0 = userfaultfd(0x80001) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x80) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) statx(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0xffff4a9c0080ffff, &(0x7f0000000240)) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x200) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys_mnt\x00', 0x0) mount(0x0, &(0x7f00000000c0)='sys_mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='sys_mnt/block/zram0/reset\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)="f3fc", 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000b8000000b800000002000000000000000a000006040000000000000000000000000000000000000000000000000000000000000000003bf9a7546a3228f1fb07a4000000000000000000000000000000000000000000000000000000000000000000000400000d0000000000000000000000000000000000000000000000000000000000000000000000000000000003000004000000000000000000000000000000000000000000000000000000000000000001000000000000000000"], 0x0, 0xd2}, 0x20) r2 = syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0x810c5701, &(0x7f0000000180)) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r4, 0x0, &(0x7f00004fa000/0x3000)=nil, 0x3000, 0x800}) ioctl$IOMMU_IOAS_COPY(r3, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r4, r4, 0x3, 0xfffffffffffffffa, 0x3fff}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000001c0)={0x28, 0x6, r4, 0x0, &(0x7f0000ff0000/0xf000)=nil, 0xf000, 0x9}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000380)={0x28, 0x95e55aaae4a0d69a, r4, 0x0, &(0x7f0000648000/0x3000)=nil, 0x3000, 0x6}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) close(0x3) 2m0.216280264s ago: executing program 3 (id=926): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x9, &(0x7f00000006c0)={@flat=@handle, @ptr={0x70742a85, 0x0, &(0x7f0000000600)=""/1, 0x0, 0x2, 0x1e}, @flat=@weak_binder={0x77622a85, 0x110a, 0x1}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 1m51.903840896s ago: executing program 5 (id=965): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r0 = socket$nl_generic(0x10, 0x3, 0x10) getpgid(0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r1) syz_ublk_setup_queues(r3, r2, &(0x7f0000000180)={0x0, 0x20000, 0x0, 0x1, 0x154, 0x0, r3}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x4, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x300, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x42, 0x0, 0x0}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) select(0x56, 0x0, 0x0, &(0x7f0000000400)={0xfefdffffffffffff, 0x8000000001, 0x5, 0x300}, &(0x7f0000000440)) r6 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000340), r0) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000e00)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1400200}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000e40)=ANY=[@ANYBLOB="04060000", @ANYRES16=r10, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB], 0x604}, 0x1, 0x0, 0x0, 0x4000004}, 0x40000) read$FUSE(r9, 0x0, 0x0) epoll_create1(0x0) r11 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r11, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r8, &(0x7f0000000100)={0x20000014}) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x8084) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/12, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) 1m50.949030953s ago: executing program 5 (id=968): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000300)={@void, @void, @eth={@broadcast, @broadcast, @val={@void}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x15, 0x2c, 0x65, 0x1400, 0x82, 0x11, 0x0, @empty, @multicast1}, {0x4e22, 0x4e23, 0x18, 0x0, @wg=@data={0x4, 0x8, 0x1}}}}}}}, 0x3e) 1m50.550837807s ago: executing program 5 (id=971): connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r1, &(0x7f0000002c40)=[{&(0x7f00000003c0)=""/196, 0xc4}, {&(0x7f0000002d00)=""/4112, 0x1010}], 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000100)=0x730) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0xf, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000050}, 0x24000890) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000140)={0x10004, 0x3, 0x80a0000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f08c40f009b27000000f2e10a8e690f3271008000c90f30b80e0000000f23d80f215035800000a0c9b9490300000f60b932c00a00b9730200000f32328fe8587db660602fb92dbf0002e6e6006880000000000000000f30", 0x64}], 0x4dd17ed7c0be0334, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r4, 0x40786e88, &(0x7f0000000380)={{&(0x7f00000000c0)=[{0x1df, 0x4, 0xd8c, {0x8, 0xac}, 0x8000, 0x8000000000000001, 0xb}, {0x3, 0x5, 0x7, {0x81, 0x401}, 0x7fe0000, 0x7fffffffffffffff, 0x8}], 0x2, 0x40, 0x0, 0x6}, {&(0x7f0000000240), 0x0, 0x10, 0x9, 0x100000001}, {&(0x7f0000000280)=[0x0, 0x3d], 0x2, 0x8, 0x2, 0x5}, {&(0x7f00000002c0)=[{0x4, 0x4a17, 0x9, 0x5, 0x5}, {0x10001, 0x322, 0x8, 0x7, 0x4}], 0x2, 0x28, 0x7, 0x660}, {&(0x7f0000000340)=[0x6, 0x1, 0x6, 0xdb7, 0x3, 0x2, 0x81], 0x7, 0x8, 0x0, 0x9}}) 1m50.192417962s ago: executing program 5 (id=978): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioprio_set$pid(0x2, 0x0, 0x2000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83) readv(r1, &(0x7f00000017c0)=[{&(0x7f0000000140)=""/69, 0x45}], 0x1) openat$binder_debug(0xffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x64) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r2 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x1, 0x3, 0x4, {0x1, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x40000002, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r2, r2, &(0x7f0000000080), 0x7f03) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000540)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:1d.0/remove\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='1', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r4, &(0x7f0000000800)='1', 0x1) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r6, &(0x7f00000000c0)={0x1d, r7, 0x0, {0x2, 0x0, 0x4}, 0x2}, 0x18) connect$can_j1939(r6, &(0x7f0000000ec0)={0x1d, r7, 0x3, {0x1, 0xff, 0x3}}, 0x18) 1m47.733225323s ago: executing program 5 (id=986): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet(0x2, 0x3, 0x101) shutdown(r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000080), 0x84880) r2 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r3) r4 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d81201000001010203010902200001010080320904000002ff00000007058102"], 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r4, 0x81, 0x1, &(0x7f0000000700)='\x00') read$char_usb(r5, &(0x7f0000000600)=""/64, 0x40) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1400000004000000040000000400010014000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t'], 0x50) recvmmsg(r1, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x31) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys_mnt\x00', 0x1ff) 1m47.403776864s ago: executing program 5 (id=990): prlimit64(0x0, 0xc, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, &(0x7f0000000000)={0x8, [0x6, 0x7fffffff, 0x5], [{0x0, 0x6e, 0x0, 0x1}, {0xb, 0x35}, {0xfff, 0x100000c}, {0xffffffff}, {0x0, 0x3}, {0x3, 0x11fd}, {0x0, 0xfffffffd}, {0xc, 0x2010000}, {0x3, 0x82}, {0x1010000, 0x6, 0x0, 0x0, 0x0, 0x1}, {0xec41, 0xffffffff}, {0x2, 0x8}], 0x5}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r0, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f00000069c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000006ac0)={0x0, 0x0, &(0x7f0000006a80)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000c15e8bf32e0e5225dd376c8daad8d49696c6d7ca898742f40dec483c101d1aec1ccf04594b628e2ac10a562d1b9f79f02b5951c4641ca4b9b2655dcf4207", @ANYRES16=r5, @ANYBLOB="01002abd7000fbdbdf250100000006000a004e20000008000800ac14142e"], 0x24}, 0x1, 0x0, 0x0, 0x4048050}, 0x48804) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="bf"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r6 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_SETINFO(r6, 0xffffffff80000601, 0x0, &(0x7f0000000300)={0xfffffffffffffff8, 0xfffffffffffffffd, 0x2000000, 0x7}) 1m47.337725433s ago: executing program 35 (id=990): prlimit64(0x0, 0xc, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, &(0x7f0000000000)={0x8, [0x6, 0x7fffffff, 0x5], [{0x0, 0x6e, 0x0, 0x1}, {0xb, 0x35}, {0xfff, 0x100000c}, {0xffffffff}, {0x0, 0x3}, {0x3, 0x11fd}, {0x0, 0xfffffffd}, {0xc, 0x2010000}, {0x3, 0x82}, {0x1010000, 0x6, 0x0, 0x0, 0x0, 0x1}, {0xec41, 0xffffffff}, {0x2, 0x8}], 0x5}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r0, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f00000069c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000006ac0)={0x0, 0x0, &(0x7f0000006a80)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000c15e8bf32e0e5225dd376c8daad8d49696c6d7ca898742f40dec483c101d1aec1ccf04594b628e2ac10a562d1b9f79f02b5951c4641ca4b9b2655dcf4207", @ANYRES16=r5, @ANYBLOB="01002abd7000fbdbdf250100000006000a004e20000008000800ac14142e"], 0x24}, 0x1, 0x0, 0x0, 0x4048050}, 0x48804) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="bf"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r6 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_SETINFO(r6, 0xffffffff80000601, 0x0, &(0x7f0000000300)={0xfffffffffffffff8, 0xfffffffffffffffd, 0x2000000, 0x7}) 1m44.037542696s ago: executing program 36 (id=926): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x9, &(0x7f00000006c0)={@flat=@handle, @ptr={0x70742a85, 0x0, &(0x7f0000000600)=""/1, 0x0, 0x2, 0x1e}, @flat=@weak_binder={0x77622a85, 0x110a, 0x1}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 11.94550271s ago: executing program 0 (id=1423): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)={0x38, 0x44, 0x107, 0xfffffffe, 0x25dfdbfc, {0x3, 0x7c}, [@nested={0x4, 0x145}, @nested={0x20, 0x1, 0x0, 0x1, [@nested={0x1c, 0x464, 0x0, 0x1, [@nested={0x18, 0xcd, 0x0, 0x1, [@nested={0x14, 0xd6, 0x0, 0x1, [@nested={0x10, 0x18, 0x0, 0x1, [@nested={0x4, 0xf4}, @nested={0x4, 0x8d}, @nested={0x4, 0x16a}]}]}]}]}]}]}, 0x38}}, 0xc000) r1 = socket$nl_generic(0x10, 0x3, 0x10) listen(0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) recvmmsg(r2, &(0x7f0000001e80), 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a010800000000000000000100000b0900030073797a32000000000900010073797a300000000060000000060a010400000000000000000100000008000b40000000000900010073797a300000000038000480340001800a0001006d61746368000000240002800c000300b07346e358c219250b0001006367726f75700000080002"], 0xd4}}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) io_uring_setup(0x549c, &(0x7f0000000000)={0x0, 0x70e6, 0x2, 0x2, 0xf2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="f572c10000a88c43c226f0a6380778c72739a0", @ANYRESOCT=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0x6804, 0x0) r5 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) pwrite64(r5, &(0x7f0000000000)="a5", 0xfffffe8c, 0x2) write$binfmt_format(0xffffffffffffffff, &(0x7f0000000040)='1\x00', 0x2) ioctl$BLKRRPART(r5, 0x125f, 0x1f) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/target/dbroot\x00', 0x1, 0x0) write(r6, &(0x7f0000000040)='\x00J', 0x2) 3.128238877s ago: executing program 6 (id=1429): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/cgroup.procs\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x10000, 0xcf) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f00000002c0)={0x2, 0x1, 0xfff7fffd, 0x2, 0x0, 0x0, 0x7}) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r1 = socket(0x28, 0x5, 0x0) setns(0xc9, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) socket(0x8, 0x5, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x9, 0x10, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x3, 0xffffffffffffffff, 0x1, 0x0, 0xfffffffd, 0x7, 0x0, 0x0, 0x2000000003, 0x2, 0x1000, 0x0, 0x81, 0x7, 0x3}) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0xc048aec8, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, 0x0, 0x0) 3.098251475s ago: executing program 0 (id=1430): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xc0000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0xf9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000001880), 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x8041, 0x0) r4 = syz_open_dev$sndctrl(0x0, 0x0, 0x133a00) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x55b4f97f65bc5eb4) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r3, 0x4004510d, &(0x7f00000000c0)=0x5) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) sendto$inet(r6, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCINQ(r7, 0x541b, 0x0) ioctl$sock_TIOCINQ(r6, 0x541b, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x9361, 0x6) mkdirat(r4, 0x0, 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000380)={0x22140000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x58) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) eventfd2(0x3, 0x1) 3.096689455s ago: executing program 0 (id=1432): request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x187) lsetxattr$security_capability(&(0x7f0000000000)='./file1/file2\x00', &(0x7f0000000140), 0x0, 0x0, 0x1) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x84, 0x4, 0x4038a0b, 0x11, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2={0xff, 0x5}, 0x20, 0x0, 0x0, 0x4}}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x80) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000080601080000000000000000010000010500010007000076"], 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x48040) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x972, 0x1f480, 0x2, 0x325}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8c020008907810050000000000000040005600002d226905531de156c8ecefbaecbc06add46e8a3d97a47e75e224d3858e1494d970d9e00fd3e79c9939f75883aee0a185a4e2b4950e2c1a0b5b052ae7609ba5aecca6e20beb023dcb1c"], 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) io_uring_enter(r3, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 3.09605288s ago: executing program 6 (id=1433): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1c000000000a010200000f000100000001000000080002400000000314000000160a0100000000000000000001000000140000001000010000000000000000000000000a"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x2b1e, 0x0, 0x8080}, 0x4) mkdirat(r1, 0x0, 0xf8) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r3 = openat$cuse(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) read$FUSE(r3, 0x0, 0x0) write$FUSE_INIT(r2, 0x0, 0x0) syz_fuse_handle_req(r2, 0x0, 0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semget$private(0x0, 0x1, 0x2) syz_open_dev$admmidi(0x0, 0x20, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000900000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000048000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140002"], 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000170a0101"], 0x5c}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000040), 0x4) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000200)={{0x2000, 0x100000, 0x0, 0x0, 0x8, 0xf, 0x1, 0xea, 0x45, 0x2, 0x6, 0x1}, {0xf000, 0xb000, 0x3, 0x9, 0x9, 0x6, 0xbf, 0x5, 0x2, 0x4, 0x4, 0x8}, {0x70000, 0x58000, 0x9, 0x9, 0xb9, 0xc, 0xdd, 0x8c, 0x80, 0xe, 0x2f, 0x7f}, {0x60000, 0x4, 0x4, 0x1, 0x6, 0xf8, 0xa3, 0x6d, 0xc7, 0x0, 0x9b, 0x4}, {0x80a0000, 0x0, 0x3, 0x5, 0xff, 0x3, 0x3, 0x8, 0xdf, 0x3}, {0xeeee0000, 0x10000, 0x9, 0x4, 0x9, 0x1, 0x7f, 0xe, 0xe, 0x0, 0x4b, 0x1}, {0x4, 0x100000, 0x1e729c9cb542bfe1, 0x8, 0x4, 0x3, 0x3, 0x2, 0x80, 0x3, 0x10, 0x6}, {0x100000, 0x0, 0x3, 0xa, 0x6, 0x2, 0x3, 0x4, 0x8, 0x40, 0x7, 0x9}, {0xeeee0000, 0x5}, {0xeeee8000, 0x9}, 0x3a, 0x0, 0xe000, 0x0, 0x3, 0x7700, 0x1000, [0x3, 0x6, 0x55d4d94c, 0x3]}) connect$unix(r1, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r6 = accept4$nfc_llcp(r1, &(0x7f00000003c0), &(0x7f0000000440)=0x58, 0x80800) sendmmsg(r6, &(0x7f0000006700)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000001480)="e20277134317298089724a349374cffb457b183544a9256f15b211381064217088bb50a00af6c041da4f36f9101f714427d3dd9f87b7b160ca7f66509cce721ae3bd72e5d2dfa0e858c99fefd6054bd848bd7bd05b12438d57f0b5f3550d3c3f621b470e1594e9100596f26709b3788c0c8a80ff4b8b67944c57a8623a71033ad9635991f01011abf092dc907b95e35ffe87e691dd398f8bdae3d4d694202ed8482739170b51761230b00508bf2c355c9e87f62ee709ea242eee46441272e8c5ffd334f89a70f7acc27a4416741ef17f0311028facb6164a888e26a66ec242b33206f5e2ef6d12dba3f07789f86a420791", 0xf1}, {&(0x7f0000001580)="2e9d376ef46d6cfe4d8d391229e7b429c772f459ac12a1e38a2d2c4d5f50d6e49aa3c125eec6ad2c46e914f06477e680173836b1240ba07085d751acab3bf6d658c3b0e6ec1e8a634f9374c704fc8b8949b432923571a70c131036d438b3bc0e4b5b64e3d57e810bfc4eaf8c4ca6d2b495e9421a437ddec91047c3d1358a2fb51990", 0x82}, {&(0x7f0000001640)="caf12a61d5ae3031d2c3bf6df2a2c2274a59bbdcd6f06b7c6a765638a73a8e84e0e3203f1975284421bf3a1686205ecdc8047e5b5d1ba30d33c521c87fe6fdf75ebb1a4351986204b940adf96236f12e2f14979059c100d7aa15b2b00d867818998fe361a52ca5c497952c69e8569b07a9b7145e492ebe5856ec", 0x7a}, {&(0x7f00000016c0)="9d15e8e2f2adaacdc43a209109911fadf15cc4a24668cd6f36a6831636b99d42f7fc2de9deaed0a659a4f0eddbd2270c53a51e862e57aee517af6b3497f5e8cbd21ba8424070758a710891eb9709423e057dbc3690b0ac2a9d5d3d9b1cabe59a15d9b51db0605d200119d7b0c7ff2674dced561fb3147fcc4af40764dc165dba5958cd55b5ef2d31b84c8c862b39abdad28ca0b0c3014ad3", 0x98}, {&(0x7f0000001780)="0e724a76", 0x4}, {&(0x7f00000017c0)="428e9bf6894ff0d429ee4f4936d890935724cfb9268bf1bee5c0f11a4d5913784e83bb598c989d7dbe5442dbb6b190ec94e9c6c4cebcdea4ed84b98b3861f68249d6914f0994949a64303c05c3c2b9770af5290a7844042a2cab287366f874307fdc7f4c348c2176e6926ef828", 0x6d}], 0x7, &(0x7f0000001880)=[{0x24, 0x3a, 0x5, "c0f19a0ad11f4a0ae759dbb5343679b70ed02995efb977"}, {0x64, 0x1, 0xccbb499, "db34452d9d19f19849b561168663faa7750c20cb39dbb8910252966dc5a779adfaea2835dd3ee53cc645f1c5e31edaf3c2eb57003a8e8a6d6069ae9461a2e79acbb4034bf9fd94bcae6ceee5f34e936b7e636ec53bc67f"}, {0x38, 0x109, 0x6e, "131394be9a1ed29097bbffa9b188deea9aae06bf242987e5fd9ba59bbc6511d92fcc08d6183d64b87486"}, {0x5c, 0x10e, 0x3, "69d308ee0a5c6b68020ab68514279a7ced0f77b143277edb231ecca3916e26faff1005da8774adfe503d57ed166923ee6d494cece53ef9865641f8835bdbaa4f2f2eaaacb436780f08a22c82082e0372"}], 0x11c}}, {{&(0x7f00000019c0)=@qipcrtr={0x2a, 0x2, 0x3fff}, 0x80, &(0x7f0000002c40)=[{&(0x7f0000001a40)="b60be18e69bedeb00d0853075560f8fa67eaf44c1fe66fded95f85eb598be648aff1a0a238ab1f00108f57fece7507a0f2b2945c278d7298d6719d3091024c758cbfdc7caa622615d621abca06d1e1e72f5e4e4480bb6df68db952e35bfadf154328e303e4cdbf21af14c0a3de3bc537886f501f8c9fc202d97cf53adbc03d311cd7baef3b7d55158267a58e4af7cf08d9fbd94ee5231082891285c5", 0x9c}, {&(0x7f0000001b00)="52ca1fa241cfd1415de841acab1c7afd599cf6593327b6363ef4a2bb7a865efbb453f11ee9fcba46d14866ad67991bbe16ce29fe5424be4d3d91a76127a73df415ad52093d0733980dffa5c4b4dce77347cdee83ec876ae808fb9c8cf247d6ebe1172fb4d68efd1b4a5244d6e1afac0b46371a3b1d942c81972718fd7c11cea5fd2594951cbf85dee30e583b05388e1808be96830e9a61b6cacdd77c42b0a8553103b4c9554ec29743b7207c848a6cb880ac0677eb4cd4f815cf4e93ab1dd4930744e551cacc08f9c5d2c1fe7f8074eb775ff889fa8a47c86697bb358cdcbaf3563ada06bde533196ffcc3a42a181aa67af762c97fd25a5749d76dbea6c9d8813d6942a96eb0880baa4d3d15d1beeb435501360e87341e65acdc4baf72e6e3fadcbe257ab6b72412f6fc9fcdcf8d1a1d95d32681b5a5fc63f75a27504716a0dbe240550efcf0c95909a2a38091f3af130c53120b7dc40bc30c64f5d311807e37dd1ad6dc8e49f3d3ea13b221a019e153d8f08fe1f8fd0cd93e691fe86750d5a60b563cf5c392422ad1d57e0514e535bd124771807b5bb90b352506db96e0e2de4737694237441370bf6df95a8571b31b986020b78e0ea292934307801efb3c096e8c8d95e1aa2a84061d2355e80c16cefbf2383270b13be6d22457ad580b67bc9b68ff9ac2a5aa47d9f6efba0301e45ae609cf372e4b57cbefe19af4362c658f333ad4de73e2f86f2e6a8337c578abc0b09cb7862a2a1e7e98649f2171cb9e01867de43af255f33f15c19cef8eaeac1a824c0e4407557927eb72f1daa990cb4c3a6d8e15bd32fb11e55fffb69a3fe6a9b4de1aa4f41f004be31b28686e408c02de2cf553da4f0569ab4e11a1f08b7ed8d4d4740a03447f31c88dcf2da8ff1496a6ca0e78ddb243de22a5168782830eec743455911981df7fbc7837a5ad51da4a6a6551af87aef4c60bdbe9bbb87e542aac35bb56c9a22d1c6c5bf9eba15c5d9532c814f7458c29ede5d819e82fca07834189c7ab2a0e2bc2ac1e1b9f67b7b214f48f8855f1f58f1ff52a605de5e6236f7b31ec0d35235b7515b073326bab57155e9bd22485f0e39b830f5d1e7ea3e5e63b39b1bf2b48db0e3f7cfd2f55990cb20496ed82523223e35159631ea2e5b715607e07dec43a1d5ad7d1f628cc49a203545d52cc293b6ee923ae171cf2c33745439c360ee7178a44e9531ea68073c12313f68888547c2bab982031f9275a84e104153a7d87f8b4b245f6fe8388d3865a96f94e2ac22856752e675b9ebac21caa6acc4bc41ed9153b3849f55e9e235ef12cca435181e2dbe9225ff9c8995d65e79d7c70ce739371012b01aefb3b36b631458212499fbd75182f1e7d990583af3686c2a90cf45165685604c08138047113da7d7e8b3d6c39fc972b2430859c75c45b651003b1ab01c544fc06f73dc8c56ba7e573235248941ae20e0af8a41fc7f0767e526132278376de8a907c1abbac5372c9ce936955cde12c62d2e63b6b6707a53cc85d338e19f608a906bb2909a2537e5f19c9846f82f650c68bf92ab0a3880c2394801781075dcbbea24e4858536a7f187baaf0e087b8af6d8be31e2b3372bfcb7cb2b272fbc30f3842a2c5c55b0b5fe84f2dd27b38c973e2e68d3234ee08a6a53e56803c4f41e82042042f850f5717f8e208f719ebfb9a3800909e84cc12cf466e3771822ebe044ac76809265f431393cf4b1d79fc1d503ca29f86b90e8b06b98d168d1eee3da5fe4b25981a195600943a86bf382f880e6d8b420446f0e547300f970d1debf575ced1d1825fe6e02aac1498b2a5710ca02eb7be7592f271a0623b3dc67f640076dbfaac5401b4f9b88b7697ed5c15684ef873bf46223eeedd3a75f9a1951779ff4702399eed7f5b962d92ba53c3ae0f206806eca24d791d846b6d4eece0e497a7c4f8f7a582c50223de471a70fa1c8b6d29dc20f12d3e8fa431d7a6f2cbefc635ac9ce07c2add3709ad4ecfe5d5564c1d7256e4887cdbbc8966c71468efd60f9a6a0bb2d6d4374265f8716791ee2573f0003c34c766cb52f44e06ca1f815dd44eb8de80035fa8e00958cec3b39d2dc7df3643efc28d0764584e105743d22c42144fc02b730d14a58455e44f3ee3941da5009d06e8b5c583234c59595fd57367d203cc2a6662381db08b82917ae8060d556e966a2ee746845c9a7b882b24a79d0d4f29f2f52cc437f4b2acdafb3b97941ff475002f04383abb61976ae953c56b6d0f79abc4b835196b5bc5b265da91afa4237787d513b2dbc1a63143665489f30b276044b467b82103f88fbf9780fbc6a6b2bc9d166c723c81763f7a42f471fb15fea5f7db9e81b05872c441fcc0ac1b290793d84be4328274d20a825effcb5ef5242e80ee2acf5a1ca32f4c83eae627d5266335627a5d4466fa7989e8984cf131924e858c1ad04a6b6ff8f7aba73a0c41d99cfdab37d267ab860b8136af603dff21d808b41e98664da87ce2d37b9b9f24fadcf2606115ba4ac2ab648b8e257d3de704cc8cf70cdc7c055451724ad00ea0d2936aae337507631ec2f313a8a70b581dd7a0908e2a5a172ce599022841f7d9b0efb0ac03b7caf081c939f9ea793d936a1a0e1b495b39cff6e757a318dbd3d9f9527df2b59d7c497bf3d2d051d0067d75f4f9e7bcf3dc88d63fe3e9d7612921c2e5d6d6a6d858833e36553ffc8171a2a15e119ecb662ac7f70d2dd7575cc0f388bdec191a8c5eeacd6c65d6143aab622c4031c6cb40c8b0078c5e460c0eecc7fb10d0cd684854c589f21c2c67818debce1d09b8287c8122ae15ea840523ba1a0eb340b2cba9747b4216ebc29a6e6fb9deb91928896fdb15fa55f0568cfb7eb0560661858fda22cd15bde4d2a98b360a2facb3c798a47bb3bc2a3c53b101157d7a1ccc32574a002a82d074d3d01f1fc77f5297c956137e6032e27691407086419b0c992e98f283a82784296b2e6a554699db62bdc0a93c1fd5d0071d8e071e3e317102c4e0cd7e852950472c1780aed7a523b8e02ad24e07cb0c6dbad65f257514e023e02e405077035f6a0890746f794bb4da029adecc0b2f193191d791a06617a18e15d706228c5f62f6809dc3cacf6d3481a44e34f8baaf80d14067c3dfcfdab3154578a6026fe14af2b2cfff19142840c53785894b4d5449899d272e273fa76c34762b64fdf7622957def50039b8bf068fde347b02e7408412ab6fb597764cb605fd5a0ce3ad1f7cb4ef22ebf1a2ded6f58b55eaf6c6fd6140ceb9d0615c6e650e2e25dc0b762d4513d5a0a233a8ccffa9e703a2b57023797b1b0ddd61f9637cfece9cbebf046bb31825f27e6fa81aa4c0b8c6ff402b250a57a407ce8e50238c3cc4d37bf3feca3a5c95420b440543fefefad0bc4984d97ac292fd2521806b0fd2eb5632366ccabf1f1662e2b7424cb471b20b88577d5c9d61924a884e2068fc61deb965cf4ed569121b0a14250b8025bcd77110d51973b6050f5c719cc321eb263642cb7d73ae815122106e4055c4d49bd138542ed8aec533ca14f921dbfafe166c10de0d8a84a988861e99d0c99eb90bffdc562bf4048f01af3bb5f4c276ac20aa6a9365d053a55b26e61b18c4b77d7cd03e23bcea3a7ec2c0fe0fb3edb3aea45dd4aaaf80b8198ea85046bb2f7a771d36aaa6ffb98b17c919f95bbd425c0cb27491771ef8860e3c15897c963fb37da5873d77d3b95a5b0aa421702ec5af7b2a5093e9cc55e909dd01303dd8bdfcd654d4694e2faf29078e0d975889bf220f315545d1e7cb544e4d93b11ceda0d302d929ffd592684e40506086e823534ee6e209a58f317f0185098ffca0cee8fbcbb92287f584a41edc87a0232952567c82e99ca5f095ff69bbe21c900a4842e7dacc500990d3497f1c3c288135e35535e7b5c91289cc323719cdc43f83726d90d401b14addea3ca3b63b6018beffe76a2dcfe206ffe28a57fb109e72058561f6f8506fde634e145124e6c3eac5eaf377cdc2f57740939d352c3091c01723db2d79e629e61ff703c942b7b5d77886639baeed499aa89d61e3e2f6bf1933137d48ebebe6ef945f5e7c99baabcb21f3e3f5b87a00932124f3350e4b2d9012130c9ca4077f3a8ab0c9b62ad796d1919a46230a0479b074c45df43ddc2eb0ca0055becbf734f8fa420a45cf6a5a701316511cd1d075e7bedafd1c676642def6913ef70f9ea909e5bb5689592a105d8bf0f275388f8d9d7bf44fde7a72caac682f96547a7dba59ee746f792c4de042b18bb352b9c522823ffd9e099f329e0a3878300aa79ac151690728cf99ab184c8ea3db69f2b3ba16192bbfa6b6d245753dc97f0d270440f2db1855405c0a6c0f0fc9a74d1c2e923a5cd6fc96a247f6312b1aaec7139ffb4aa618426369f7448ae2f31dda44e5f708f3aa7bad52c9d54fa741251da6aeca9fc69da2f1e49231750ef58a296896567a5464b204d7bfa0c6e4e5aa617289b8244f0c5e71f7cf493c43ffc7bb4001db29ea0a68e344d227dd8dc114bd4041af1faf2e5074be56d6896d0c5d62703f88ac16f2c91982e5f3d70752c9cec2590eedbb773559260b87b30cbb40b9225f3293d53aa460675a5a4e3548ecc8c90cf9dccd2b1e566c880922352751a585d0c28c41bac9bdc7bffffd2f515eb62ce2c4f815a84cdf59ffb9872e8cc616ecb03f5083e808aed828a8b81a769fa623143bb09bbe4a9c2d56f56ec8934602f7c4a93088db821123799b765852b081196d38230ea55618d3cac92c158050967ddcb18516d8505b302d37c8fd4f83f2dbf530d5f2304d31e8b3e1944f8fac52ec89b4c98150f49d01820537fa70eb8279d774b9c869b5d7ea9aaa66b1d75d77246701f9b7ed418ba2898f61601f2d40a26ae8fb21eed4ab9afaa9a064f15dc2ab8adc58bd1111336b7d70099dea55494d572f1c0b756f62d32db015cbea488249c2ec2f11afad44a5549c9ac61957e5c1a19abc439ff1ce37fe2cece97c6cf7cd43bc6da02a1f5b339b38d4238be51c9dbac8bdcf4b00992822301213816e3086a2ca83d212c4b3459cdeaf196c84d6b596b9250bd97262d9e98633a80cebd736b0b2b6a5ea9dc50ef7025d9e5ee8c180b21d98a5f754af5f03bb4c010ba46a473bf07720acaef54b71d502a4458af7303e2e1b8c3ea8e9074979c56bd8b875a6960c4a00b2d703032e281e5ecf9cd3572c7c90e2d79150a86d921501a1bd08b10c12d090c500581fe1ccd5805f9f701620b1a711fa50aa82e71372547df971269972dca59c9b2774704a51e1890e04717529a2f55f02f5c59df27efe2713bddfa4d18481be79472274f494fb754cbb0c01e63c3b7021a413ef90df9a8dd497e79ccb84c6ac8235a15fdbbaadfd3aad387d626b9cf19fdeb20925a5e080ed555c2566dfb09865827e1cf93865dd4f3089958f85fa076cebbfcd50ea6b5a26a635e72a8f60b039dabc3437bb7c95d5b5e32f8c7fe1c3400a4e171a3884ef036d92423f5e526eb51b6e5e01eb9d60c1d04c0b33051f6d8c08f505f9038e6a5c77a8708eb10395ed8012af01943b0b7edb8ae146a7084b4e045af99df0b1a5d29497005d046b64e8b4ca43e4ea67b122d676e92f2076e6ded323e80de155d1f51c4cc8a5c77f625681d8b9af10c1d870d567566e650df3ce84da550599e08ddbfa8d253faaf2e9fc0478cad5ecefeaa98d94545d9aee379664e2ccdaa56c58ed70220dfa9e297dfbc32ea350f0ffc7ce7702cf98ec729b571d304bff40ac0ac0e53715d51f7cad240b5b2213c29035c93bac8b4272541f", 0x1000}, {&(0x7f0000002b00)="2f31c523ae5f98f375c4a135a74b113f5b681704c33fe747d0a36d2f517e71d8e9202038e88ca3f8a09d2daa011f74a586ec3dc36a0ca0275aff0eaa5208de3d9f71146d0c904873168e0618e420d2a5d3b5126f1240110e62959a8b76f7c76a98e3aaa127e2b48c3c98ec91a6115dfc5d563b4e9a665246b59902fcbf1447b8858fe6f60c1c6912666050cd24dc2945f8eab127e0c8265b7ae33106274b5dca517f1be8794e166b73a06f17e4f6d2", 0xaf}, {&(0x7f0000002bc0)="63687d60322709b52181833aa5710bdfd68eacf35a99a724ed5fee8fb645aea15b050bc90490d4b40c987a277eaa4115a56ef838f41074ac3e890ec2cb8d7a9ce1c9ba0e315b60b7cb7f7fa3e9a84ea112eaa4f3a8df7e10c331cd671cada4c42d3b6f696b9adab20012564c5f01d03b02a4d8", 0x73}], 0x4, &(0x7f0000002c80)=[{0x18, 0x129, 0x7f, "391e4adfd17dca2cccbeb1"}, {0x94, 0x101, 0x8, "fa37d7d7f1bc3d1add029c890e84cfdf9ff5be206c96b876f938f1f54bc450b4fba1535f3f77ddc6e418bc79b0d2b05f751695db2b5207f8948614ec70b2db82a6b9712d46b8dd6875466c80bd592dd12e3ffb791c84577196ea2ce7c7f4a85d0dcce6bb266755d8f7b21ba9ba66e950cb50f225083a11f833840e20866a3804e856f54788b1"}, {0x60, 0x84, 0xd, "90f72cfa2816cc369b336eeffbff385a52d67edfcd9f4a7fd9b93157939d2092147c6ea5b59b569a0aaab57c831cb47d3b90fc943188fc3d18fefbc83149e9884a308628e08c789578db7d0d197b0251c13a"}, {0x100c, 0x0, 0x9, "cfb76ad1f44fd7df57ccdbf77b88e642553bf3918dbc0287ed6cf509008ecfa04884b62bfcfa855155308fa2a4d1315a960f3b080cc2e4ac7d00479da52047c936299e1cc28b47cc1bd5668146677bd04655e56154594537f32f539494be3e7990192217cede3ad700507f044c8465dd2bd2a5e4526b8b5d9665d32b84b75dbebb12f5f07688e2091ce1158f9ead4fccc3e6ae218c41bf6f8d58aecc860be09ab1f08a783ceb53a41b95d0a41995bfb06708aa8903b8d7f5208391af68a25bba4cc651b7753b50ccf53913ebeff19d2829469f94f67df9cfd7dda50cbc8c2ef021f5279353c93df0efcb2f212a78ed8a7e77f88ae44f3c4f2c70602da21155a58cc4bc18f73033026760d1a25b88d6c83c5d3207b2bd0ae510b32c93c2fa088a2cfe8a95a37860f630cdeb05cd325c36bdf6297a58376aefbdf00a42a3b6277eb997e0760ab19b3fd202139c07bfd2cee908dd41eae1fedc923c3172ba64b15ba1c420112e120a06a1b9be8d443ace13008a51faefbf9b77f1de521b8e5b0935bdcbc76305be0244d38f9dc521cf7cae73b7b4494fb6ffc0cf00fad1094f7fff2b38fd43fdb793c76721dec2b8f7bdbb1d57aafba683a4300c91dc3c25d7efec829647a6021f3c2f66b76dbd962f9603185a9238729ca3a6a5eceb2e95aa588779f59792baffb70bc80b61b32c43f667f4094b1cdadc7bc0593394f7bcffb6af3d1cc98882114a6466f9a7fc60110151a5c51f0fef750f01a2b2e0ab5b8ddf69665df046832163c081674d373d77768ba6e07bc525a00c927e2d0a0303c8fa8e80a67f73abdf604a7b3686831d20c441f9bce9a1b1d424eb9dc91f12640d30a28654d9d191c1c055a86d33acfaa1a707979555aece319af87296c2bf1b13da1798b6b64ef47411f1a78181f7edbfb5a044f9d3d426e96a80441b2c43e66899b2d811d477d597831a9535824039841fc655109a519d43ef86f7bbb67281f7704ed5406f78dae05aa4808c9528c18ab51bbf277a99128d7cd2953ae3f274f4ee52150e4a09c055a5bf88ba7c89dbe4761c6d271623d3796e446476d8e8be0cdea8577f8288082e8096562ad8ae8d7caf1db8e8a6cd415a076be7f7a80f9fbccc4d18f77d954b3f42043ab59ecf9df9b509b005f1e6c37df03a9d26730ac36c679881cd74cf8f6290fc5dae4f357cf0537805793063c2e72e8dbadc63289573c65005b6d4e1d1e5d68c4b6f6b7b9a3ad66dffb85b8c8f9ca7d108d500f5a6032bd305212af8272f27cbc55e9b90f1774a980dc1310f855e63cee2b2c324ad143e6e382570de85c1293d8258b73403b83783bab553be58d3731557c7a73ca5ebe0c18a7622c864a849903fb548faad4f0b70d9263a5e3875574b83d3a82483cbbf73e7878b7f5814d2506233ff04c2f1a2610aca589abfc01574c0828c86d85be4a1556a6a14da6641d566423890e07cc8fc00027b280bac5e8d273266fd857d6931b3ff8fa8ec7d896d2255b53f3e35bfe4a7aa2ff031eee6e7f125e4337af6812efe4798abe57b89b946ffd9a04ebad35ca1cdea4eac0b23ea2ff2a60c3432a09095ce02b3750c4b948662d8c33a96c56c1624c6c356e1e6793f2c1ac7097aa43ccaf0ffdfaef25c2939560c3e6d1d8fd1b381e7509834c2a6f8cf619f58ec05cb3e8d35dceee6a8df046836e1457156382b22c621b3aaacc606a26b1b42345bbdd79487e48019291c838a73a2dd4cf27756e025f1f9fea0bc270274640e8866a3278f742fd34967fecc05ca95e4396b046cbb5bb169c394176b8e76e56d5ba37b73de412e3142daaba942c3c50af8213ab2efbc0757caed38901db5b98851ca9e3c6f7a55086551de19bd5b28883a9929592e99a13669501ea805472a332c88d5f3f2b3f045d6ae6ea26eafc018f012ee55156b6c2553c0ed2f1ee898ad2c622bdc2455f37d2ca17a1407a03389e45058793b9c430d7c78338c2f71778006e4dd6393ba110399e5212eddfcb8c1be845542bcd6c25d9f2dfa4fad61d0aad5b5109f275177b329301f544804de90ab640b446ff1f7c41d7363bb6791cc540bc25bee000498068936f835721e065619a15b763321178128eb32f184801aa50920f89881d84c2121ca651ac39366db58207465589ffa8d371849b1902977aa22a8a429dc9ae0729201166f23c37a9ea4de5e30c69c9901a4583272517f68b1eab9acb0d4b820afa15b2deed917620993c2a3c477ceb3cb5fb1d5b2c2e1dff348ad80b0e4aef2b508bab251a70a091bd68e929f4b8c73b05b4b6ff02ff4881cfd926759c02a45d36729273068afc8147528632d574c619fdbbac9ac7b0526b1f316035808e488c196ea9a88416eafad3feb8c889383ebffe980d747131176ae42ed839ddb67bc3de65873f9294daf8b7e3257dd8a76fd82d7135f11fb543910303cfada4622660410b2fac5932bcb621a77d880b4c35a79ed02762450392781fb566b4b7512cf0add512489fec3ee3734dad47a80d27180e3c8c2357c62eb52e1235e019a358ee036161cb2e7716ee8005ad3c6f0fe4d8b1f5808b9da3e05aef962b6f3b8ab1cb32bc1dcbce6f35cb5a362108cd6c6b21f505d8230633d25ea7037e93339a6a1fd325e7eda7c57c5185f4d1a3c0b9517b6491f2541c88c7765bf510170e079bdb58b07f5b1b3f5ff803d37445715c88110c0a0ba44e621371ade1365d2a8ad54c7f1bad48608a38e604a1c6f32f2a91af211b592a0d06ca1dc3515de7e3b83c9c2ae582245f6d32966c030439908478d10fed48791e2c1fadceea90e7b337df32a24512867b22fde1d6089b53676892fe27c433e2a370babd247f7db6b3ac5c7f45f0e31532008fae5055098282137706e37d7a1d1eacf6ec3ed457afccbf7869ab1021d0b3a5af397b7ec68cdf292f9ab549ad18443b3c67aaa5c49d3ca8905d6c2178d7ad7e1951e5054d8ea14cf2c459e5db3613d009865d59cfa916522e7d3e9b57745c3ca197e0be49d42d33333d8157b0f0e03f302e8c00376f6d6ec08a9b7608f4804432a1c441d81c70d7a7b620ebd7a46311ca6e93aeae8190f3678236bed8e935b492bcbdc82d8dca15b78b478c66c9668e796d60ecbcc53e0e45e23acc40739aad987786ac8b42a0bae33250d1d4851397ff027f8288a03c34d1af43a2504ef40abd6700551d666c8951ccfe4edfea36dd8e0d13364e1be1afe4ac5cd17cc8098e7b9ebbdd3806eef26c5b1743755446597b73dd389ed748fde7556c6abd1ca1e9a5aecf644230472c9795dae1114185f736b24d3b2c6aeef5997095d4f6065b00f16e0f283ddfd972503f2d9383cdeb4fe629074bc9f4dfde4d90996c2e6b1242b38cd40a9167a64d6a3ca9bacebf4a8ae1cfba269e6377761146aef322df77f72dc024294ca67f523772701bf196a870af1247ffb1039722a2ea723ea7a603a8dd1494b4a76bedfc156c880ed1df2d181349b03c6b612824358aa12f7a0e8ee2efff6232807d7e9f79ba842d205d0c6223f46c96c3895a4c864be2c03cffc4638002d5e3d7fa0cc455eda94f46aeb1178c5b5846b247e131d5d0e89b9740646fb382beda296d36735f15b7b5fb79cec3ac3ee009b52bbf1b9e87409977c4c188ffd786d1622f6bb1dee742a4e3db38c1976499604c0568166f49daed678c6473d90cbad89e83c371e3b134d9c7997715be15dd8cdee18c35f1963000b8c5de6aee467e10de4c1856d5211e13794d18193ef2512bba5e271ea7154cdb8b7254e9b45d4e70a36d9ca710d6904c0b771aa45ed875f8b6895f0fafa3a3e8f3af04b1d28427857e525099e6fcc04d64cb761d3f3a6e546dcdbe1c794407ef833e0bceaff3f80a0088946b61c6e262205a4dcf016c0f99a1fdec3f1a05208d21a0a13f03f83644b3346101f2b727ca6490018ec223a1847568ed64468c9c82388c6343d44a1375c47c5da8cd1d6d4f54fddedddd247f6b9f677b8c6589d208299627673b22eb6b4c65d6a25def69152e9b6cb08b6f6a0f81ae543d61228992f3e7d5e62897c9a6c6b88ec9e36d98aad79e59e270fc4308e47033b82e4082b191c127f2a479f31583cde3e89108e9a5650f1f49eebb7f0cf8174a0fac319bcb202b36bdc80e56a35c018abeb471f66e2d01799babf1986aeb82632617a6bb965266780c026df0a3c8900bbf3ecd3727b6deeefadae9dfe18a5e209e2a8058feb8871e399a03450fcc140b2849230ec69ecdb8fd9e5a2a867d880eb5a210ba154198516b9f25955c30114013b19a212223ca2140514be7e7485a6703ec74f5df607838dea366e858e0536502d0ce8b6e515594768d94768ee6fca093336e4cd74de3d0bedd3f570fe90e06e536f9b6f25535f84b5ba7c9aef4a6a26cfe30bf9604e30efcc3615332098e62aa1b0a71d031b4ff624170de7bfeb7ea649acbf92ffb3c0e0d752fc67c762af382cde5f68e3b6084d4318473a83142d9727fd1a2516a26980f21659cd13c53d918f6eee68f9668ecce22516ea2b8c427fa088f6f5dea818552a856ca36eebf0446e75c80732fd97c3621efeadf9554d5fd556eddffed8549dd3158faae2da2a4f5cf3893d23bc0a04d2bfb3eff5de332b23d95fe9a48f3b77d4adcdacdf41a3f1f8c426cb58c5c3cb034152e5bd59f20ffb7558314c1388bf3d478d16649a8e45df0acb26aaad685681911cb4616ae6fde56d8ae1e9c6d24447a75ae87077b58125a15d06d319bb2d21aecd908fdc54d20fa6776d8a30664fc4391ec7ce355a8a51425fb14360671d11074e5c8aaf6f2a926b78caa5c94f8c3ac64f6a2f85c60b771f81b5e2dca19eb21e49b55e3e1a7690cafee201452d7cff71cffc01e07e52761d8f6c0fcd6e7136e9b652e8f80913a4b8081ea677c5f1565fc08255b479e0b57913a46fc4463f64eeb5fbeb7227722977a0e223457cc10a014f56e9d893d67063f0442ff0cdf2898b065f2c567a251376b03c3fd728e684b72ae8b00e891e72423f41babc29f537ee337c650573046c637d8bf1bf4684f1e34b8e6ebe14e6fbcfe8d39f3b02366eda45a5bc46a371ede59ab7ae1b9002f7b6e11876a11c6b8f155af4cec555ab29e950c1c1f06310a23042b11f582f75207b049192a4dd90ebb1b99aaa2d446b6483b8934c74a69851a0a055b9c6ee5153808cdd61c0ff9c367b215ee0ff11b866822e3dd9f98ef9425cecf6941fe78f72a88f48463ead6ee52c3a243560cae3377c0cbf466b074d368117efbb3fbc3ba84b1cd7eace23abc44bd50c3af66ee9096446806ed45ac28d750b13572fa51e9260567c5e9aaa545189df84982c92bfda523cd36a176fbbd38b8907e69870bf09e259192569e8099402deaaa3cea40b0c9ba15575f28d2aa769381eead211537ba492a2685549e179346bb0888983a9a3ef9045e3bc1ee93ce9afe6abf4d8d64bfd852880e79600657723be74b92063c2aaa6d7f6a9cd3f45effefe84093c2a58f7952f0264e25bd4c8fb9a77e32333b67260c1ea84b3d90543e306ad33ed82b3f1991c2edbb986a31dc64a03221d70e27035ed4748bde409c15c0b24b3435960c06b9eb58e7ab39a9f62bf0f504d093e3f391f249b10bc145d99c4549cb08f1c5643daf5a1f6588f96325a50235cce42f7a8a78659f8b6163c167bd68983a8b059cf750534dfd2e20f2bedeff9ce583cdc16b4bb78113b1f4f6be0cac6a99230aa4f3db4e96ae5d962f798d4550aa7a8c03541122e7c8cc19d21852169c0fa6acd1ef709eed243a3bb0da7e231127542319f7d148f"}, {0x100c, 0x113, 0x6, "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"}, {0x7c, 0x109, 0x8, "a172588437944658c806dc81e6a1a614e4ca613662fd50e666a84b130f658288304de9a910114c0b913e797fb8328d6fee9846a50acbe778e9036be92854069f445868c9861f22ecd154be38a30517a43e57dbfa48239df8c30a803648da39ab8877602a962ee28293c4f2df7c2f"}, {0xc4, 0x115, 0x3d3, "8905b6594c9c91cd16c9ec64dae562d6794ca822c257d06dbdd7b4aa4cb55183b35f447cb7b694aa3dba73979b29e58f92316879e65ed4d920c171badedbea0c6fbb06ae9f6490aec9b31be941efbfa4536d8197891258f7ef8070780a4582c1c443601077586e3e53d30102571b916c6e69f8910f2af55cd2dd46912dff5d00b48ec3b73b317f6993b01ed620da8c239cc729f7acc9bb15582d0e8c912ed71ce81283ee2d12aec495d2faa88442066a128e29f3b84eb910"}], 0x2264}}, {{0x0, 0x0, &(0x7f0000006140)=[{&(0x7f0000004f00)="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", 0x1000}, {&(0x7f0000005f00)="97616838c4366a41867804e723212ee9ef93d1c5d8ba37f6aaa7822438a31e6af95df2a74ac8dc554017138aca65fec182441b970db028b4bdea95b84b801d05519632e5ef3b5445a410d50edea0d22b5ed8923ff7a355267845efe340a4358f814a904ea58f53662e1d707bf4f14d091b8568af8e9489fed447972f5396be966d04cd261135f0a09ee28e1f88a1bcf5fa73f581a44d5a35f624695bbfee", 0x9e}, {&(0x7f0000005fc0)="c6db58040748459c4cc17a99a6c8c59fa70087377adc64479b4f4b41ab66cfd8611890fd2150d48dd13016bb2487aacf55938c3c5fa390ae4a02eb5bd7a6a74c0b765480785dd34ca5d419a58811ce4e9ba58fe590d11d0ea949db13bf578956c7d00ba4e45ce6daa34148d3700bf43dc3eea32bae2dac31e14069aede687e788881d1eb827b12e833bafad4c22d94b0b477c0d463b369b0abc4", 0x9a}, {&(0x7f0000006080)="e86f849359502a269274ee92bdf40b9569e3d40923a7f3576fb7b99e79850e1ac248c13d6139a2f0fea7effc73546f2f8621e54aea348c2f5dab778237d51897b904940a1b136c50f263b5b857fb1dcf469e7343c94cb76b310b8a982f29c6cf24dcbf29b932eb7a2b88a5b17233b762d8e740fa4f236d59e1910eaf32bd0947bc22ace93ac4db33e6de2007802aedffe4badaf7b8c27e81f6b064531599454976015875e1ae534532", 0xa9}], 0x4, &(0x7f0000006180)}}, {{&(0x7f00000061c0)=@tipc=@name={0x1e, 0x2, 0x1, {{0x0, 0x1}, 0x2}}, 0x80, &(0x7f00000066c0)=[{&(0x7f0000006240)="7f47b82f6971c0c97697ed4497e1fb288f195464e3d205677aa4d8d92a9faacb8064a469c667bfa9f764b87e3864b65d8984b5c5f091751afc569877e99a8fbe2b98264684e0807bdd1c41d29a7ee1009a6b773301453d41e8dd5d99f530be859ca73d03b1db9202", 0x68}, {&(0x7f00000062c0)="e7a94e7221acf88e9a807ed7f135fc68849ec28a0c013a17583b49b0a129c39404af4e4a71a27c3ad49734a628b8880bb0d51b60a60ec999fb83b55269b0d540a1a4cd9495b3d7ecf15a32d148f4b2c1c010af7e2b26ae5750d8a71599c9586531bb25b736d4c1ab9551bfa71dc9f86e219592f2729e3b023f70744ef686fcad7b28dada4ec0fda59547b278de7611a179a745350214423a04d1f60f5a4f877934c3be1b0caa2aad8808ca8a51c798e8c2d2681111e4b4a1fe34396591a4da47688875a29526570b4cb6d2de142970c18ccbde38cf02119684", 0xd9}, {&(0x7f00000063c0)="04ff8c27b68593e46ad1eaf0b09c4cb18c1fc17828ac3ec02ad30a776b70c533e16d970b09cbd67027347b0fbc7c3a5d64eebb6febcfdc", 0x37}, {&(0x7f0000006400)="6e25234a34f697c699b0d235498755e1ab2387ddcea200cb4f5609f3410c3f7d37e61ea9a0584d1b10f7c36a7395e6b5288be1bcc0168c0ba1d3e891a141e905e35e0dd6a41d06d524106c3792e65444be675ce5e2c22905194bc9e6737cb354a4074a099488f4d535297aac2dc21b386e5fdefe9a2e81e100283520da4d0e0522d58dd642029b4bd0f233875777f20b5cff5db0bb31d435836d5754ca3f46f9a90f6862ff824dcf498f9826257eab572d2aa357a91a14e4ea0cfed97a76b13db104f8e93b44e86c5d7cba005359d4414144e593e7a344a1cf094a8247fb63b18a1a59215d1627230d051009a8664f44276f5a3e76", 0xf5}, {&(0x7f0000006500)="457036a975a2f08cd8e4d6233ce354c8a63aa850853992f2aa3416b5bf4ff3ee5e109a6dc407b2ed08f1a7675d4a7f1d0d21f088d542a6abf46be763e7e2412b79aaedf428f9328df22c3dbc4fc34f80e5887d3704c2ede1947ddf8cae9652033ea9ae2ec29fe88f5b17a3a59584ebec9a1efb1831e51f2f8f799e7fafbd417ce1e6ff950d", 0x85}, {&(0x7f00000065c0)="d169e2935003de5622a2cd02b47000e6f1142fc0a78bf74e0d9103e206829ea163acd704c654fa2d9bb4297d0c011407a53f60270a1d4c463d6a242b19971de65a6c9b18a69fa011926535d8b4c937aee3464bab621abaf90dd624ff35556d167c4515dba242f3cb1b04cd099e53a68e5f122224acaeddbf0cd0d8781bba4a03e526a393a307d188cdaef8ab4b0bc84897259aa801500dc58a32058789553ca3882f49a2ecc34f801515962d512ed99cdeb88ef318ea6a419536ce2e480015b12260dcac97c94fd8368275c465502dad9daea9781ab3b10bf0d157594071b75c07b7c71482", 0xe5}], 0x6}}], 0x4, 0x4) 3.09411118s ago: executing program 6 (id=1434): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r1, &(0x7f00000003c0)='\\x01000000 2000000000 0 0 0 krb5 \\x01000000ffffff7f00000000000000', 0x41) r2 = openat2$dir(0xffffff9c, &(0x7f0000000080)='./proc/net/rpc/auth.rpcsec.context/channel\x00', &(0x7f0000000140)={0x10080, 0x11, 0x2}, 0x18) r3 = openat(r2, &(0x7f0000000180)='./file0\x00', 0x105103, 0x100) write(r3, &(0x7f0000000200)='1', 0x1) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x3}) openat$incfs(r3, &(0x7f0000000040)='.log\x00', 0x40000, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x10, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbf21, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ldst={0x3, 0x3, 0x3, 0x0, 0xa, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x4}, 0x94) open_by_handle_at(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0800984e99cca8dea42800000000000036d833732a6760e45292a641d9dbd48d97e2da86cf3e066c3d97a72097401e0bbc940976d7fae3b722d7b824292e4e21de0947c0984f8249b8fff9c3247f2ef2d1760af876de0528a64b48d6aafab69918325efdfb9b746176904bcb200152813225b72ef0579d860975eb853eaaec4fd76d20cb8c50266fae0274e72ba7348f03765b8228b6378da504114c6204f755651cf865e35858c68f46fdbb38f1a0039dc5cc5a8786a9ec882cf28301c7cde86f3f9735d7b3def9cd40ee5fbebbfbf28b1f7d631f82aa63a95b1d28b71dc4513f594219272f18d67488a08a1983f8b584a8b3648d815162"], 0x2102) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x182000, 0x0) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x200000f) 3.070598353s ago: executing program 0 (id=1435): openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'gretap0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000600"], 0x50) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x23, r2, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) 3.070120539s ago: executing program 6 (id=1437): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100882, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x31) chdir(0x0) socket(0x5, 0xa, 0x7afd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0xc, 0x7, 0x0, 0x40000005, 0x1, 0x4, 0x2, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x16, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) fanotify_mark(0xffffffffffffffff, 0x8, 0x1000, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x2400, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f00000000c0)={0x2, 0x0, @ioapic={0x5000, 0x5, 0xfffffa1b, 0x3ff, 0x0, [{0x3, 0xff, 0xff, '\x00', 0x5}, {0x2, 0x7, 0x41, '\x00', 0x8}, {0x81, 0x28, 0x5, '\x00', 0x7}, {0xcd, 0x5, 0x4, '\x00', 0x8}, {0x61, 0x9, 0xff, '\x00', 0x40}, {0x1, 0xff, 0xfb, '\x00', 0x8}, {0x5, 0x3, 0x40, '\x00', 0x6}, {0x97, 0x6, 0x4, '\x00', 0x62}, {0x4, 0x9e, 0x9, '\x00', 0x9}, {0x2, 0x4, 0x10, '\x00', 0x5}, {0x6, 0x6, 0x1, '\x00', 0x6e}, {0xff, 0x9, 0x5, '\x00', 0x8}, {0xf, 0x3, 0xe, '\x00', 0x3}, {0x6, 0x1, 0xb, '\x00', 0xf}, {0x0, 0x1, 0x1, '\x00', 0x7}, {0x8, 0x5, 0x3, '\x00', 0x6}, {0x0, 0x8, 0x7f, '\x00', 0x9}, {0x6, 0x5, 0x7, '\x00', 0x9}, {0x1, 0x6, 0xe6, '\x00', 0x9}, {0x80, 0x0, 0x1, '\x00', 0x5d}, {0x5, 0xfe, 0x5, '\x00', 0x7f}, {0x6, 0x4, 0xec, '\x00', 0x2}, {0x8, 0xd, 0xc7, '\x00', 0x5}, {0x0, 0xc3, 0x3, '\x00', 0x80}]}}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 3.069900808s ago: executing program 8 (id=1438): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) r1 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') write$binfmt_misc(r2, &(0x7f0000000280)="ed3a814fc50d071cf6fcb2fd4e42f30c2c191937289dd0509f87293d04e3173bab2ac3c846bbfb079bcaf27f1b567b1587f60c00d1a2f971f5d456281130f541aaea5e5585eb163da14b1908766ef1688ca85b712233f7f9e1eabbb448eb072546259cd860c13b92f3d4e4be93ae3b2d1a0a8b866b67bb13cc4af9c82b8508b1f5beb680f87c3ee982d2dca51e23aec115d7044347067b53d884807eeb7d12d136c38dae6609408a73647f5036f3c0309dd6a0e4e83407c8bdb5ecd411e2e40c682d3610a85e5e411fdb", 0xca) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) copy_file_range(r0, &(0x7f0000000080)=0x6, r2, &(0x7f0000000140)=0x7, 0x5, 0x0) r3 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r3, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x6}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000380)="e6", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[], 0x18, 0x4855}, 0x24000052) write$binfmt_misc(r0, &(0x7f0000000340), 0x2000011a) fsetxattr$security_ima(r0, 0x0, 0x0, 0x0, 0x3) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e22, @empty}}}, 0x84) write(r0, &(0x7f0000000180)="b4", 0x1) 3.020756788s ago: executing program 7 (id=1439): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = add_key$user(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x2}, &(0x7f00000003c0)="dbfca852b7bd68e6aa2f60e33412e71906031881fd96c8629c09cc8cf0843784239817a144d029258ada6cb7c784c14aed6e1d6100cfb76b62654ccc120bfb8758db08e8f02da1f02f17f220b10a1fa24529384d289b82f340341f45c74df5db9eeb05b69f31d38e6385c65574f9d3cde26cc265b4527712b3aa29418a3a", 0x7e, 0xfffffffffffffffb) r2 = add_key$user(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x1}, &(0x7f00000004c0)="a08237d03762b14f28817fe52f98a3d301a8293ac7", 0x15, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000500)={r1, r2}, &(0x7f0000000540)=""/217, 0xd9, &(0x7f0000000700)={&(0x7f0000000640)={'crct10dif-arm64-neon\x00'}, &(0x7f0000000680)="451362a0d9443f6bcacc776cd3557870eb516c5bf51e4d841f0462e77ec79497701ad8a53d4faa27285f4d9a3ae19d546f9d4b9c9d3411478443566b4583c33c09a1f00fa144974934255de7bb8ab55eb17182b7085f096e", 0x58}) r3 = openat$cdrom(0xffffff9c, &(0x7f0000000140), 0x100, 0x0) ioctl$DVD_WRITE_STRUCT(r3, 0x2284, &(0x7f0000000f80)=@bca={0x3, 0xbc, "cc82940ece7111df3b4def9e3e4841b9a8bbdd0004c79df4cb98449cd18cb2b19ed4affef3659d3dbf24a38a52235be4bcbe6df84fb8413769e18392b5272e60badcc806ef3e8f20aab3a52256bcd457c31511b9550e376600e8c8d75ac9bc78476f7946b82ad13cadbe87017aecb912dc6b49dfe0decbf2e82fdf02fe19ea8a1b9b7bbb204fa8773a85f75383b67c4611434f4a0375f92d6d16b5361744fa00da98ef1762dab577a6593c44a0914a5e1191353228fffe12e0296c0d"}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close(0x3) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000080)={0x204801600, &(0x7f00000001c0), 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58) setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004500003000000020fc0290780000001ce00003000306907800fa000c45f4fff600650005010400030a0101020a010101dd92ecf54f41af8537c77420a8e4abddc139881239c9289eee050c5a4f957bfb34bdbeaec6f4724dfd79c635e0c53288d559359a10afea28ec96742c230fca81976a428ea4ac9eb068b3486da9565dcc2ae2069f656b7b5081f7355de42adf2a7a622880e081daa186acd4a502dcd3f365ca603672e23b784b79ae"], 0x0) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x1f, "fc79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) 2.914894748s ago: executing program 0 (id=1440): request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x187) lsetxattr$security_capability(&(0x7f0000000000)='./file1/file2\x00', &(0x7f0000000140), 0x0, 0x0, 0x1) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x84, 0x4, 0x4038a0b, 0x11, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2={0xff, 0x5}, 0x20, 0x0, 0x0, 0x4}}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x80) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000080601080000000000000000010000010500010007000076"], 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x48040) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x972, 0x1f480, 0x2, 0x325}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080045000028ff", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8c020008907810050000000000000040005600002d226905531de156c8ecefbaecbc06add46e8a3d97a47e75e224d3858e1494d970d9e00fd3e79c9939f75883aee0a185a4e2b4950e2c1a0b5b052ae7609ba5aecca6e20beb023dcb1c"], 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) io_uring_enter(r3, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 2.879584488s ago: executing program 7 (id=1441): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(r2, 0x0) setreuid(0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r3, 0x40045612, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r4, &(0x7f0000007700), 0x318, 0xfc0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x136) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000400000000000000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0xb6df4c32c1d5c814}, 0x94) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e23, @multicast2}}, [0x9e8, 0x7, 0x0, 0x7, 0x0, 0x5a305173, 0x10ff, 0xfffffffffffffff9, 0x8, 0x0, 0x4, 0x100, 0x6, 0x7, 0x7]}, &(0x7f0000000600)=0xfc) sendfile(r5, r5, 0x0, 0x23) syz_emit_ethernet(0x32, &(0x7f0000000000)={@random="93fc85ff30d2", @random="2ecafcc67af2", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @multicast1}, {0x3200, 0x88be, 0x10, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x100, @void}, "f439992d"}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000bc0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004b0000400064000000059078ac1414026401010044140503e000000200000000ac1e000100000000830301004e200000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5cf0ff0390780000"], 0x0) 2.039105426s ago: executing program 8 (id=1442): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) r1 = dup(r0) read$msr(r1, &(0x7f0000000080)=""/150, 0x96) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x2}, 0x8) 1.850855531s ago: executing program 6 (id=1443): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000940)={0x14, 0x1, 0x3, 0x5, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x4004840) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x304}, "bd88818314ff7d84", "877dab43c700", '\x00', "0100"}, 0x28) setsockopt$inet6_tcp_TLS_RX(r1, 0x11a, 0x2, &(0x7f0000000140)=@gcm_128={{0x304}, "ff1a0636d779eea4", "5e7067dcb7e2ffa7aa84b0566d971cfd", "2d1197d8", "fa8042b72c9ae9ff"}, 0x28) 1.779287892s ago: executing program 6 (id=1444): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet(0x2, 0x3, 0x101) shutdown(r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000080), 0x84880) r2 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r3) r4 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d81201000001010203010902200001010080320904000002ff00000007058102"], 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r4, 0x81, 0x1, &(0x7f0000000700)='\x00') read$char_usb(r5, &(0x7f0000000600)=""/64, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x31) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys_mnt\x00', 0x1ff) 1.771412018s ago: executing program 7 (id=1445): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 1.560781309s ago: executing program 0 (id=1446): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) arch_prctl$ARCH_GET_XCOMP_SUPP(0x1021, &(0x7f0000000280)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000058000/0x4000)=nil, 0x4000, 0xb635773f06ebbeef, 0x80010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000006b40)=[{{&(0x7f0000000300)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private0}}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000480)=""/99, 0x63}, {&(0x7f0000000500)=""/48, 0x30}], 0x2, &(0x7f0000000580)=""/231, 0xe7}, 0x8}, {{&(0x7f0000000680)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000700)=""/26, 0x1a}, {&(0x7f0000000780)=""/234, 0xea}, {&(0x7f0000000880)=""/84, 0x54}], 0x3, &(0x7f0000000940)=""/36, 0x24}, 0x3}, {{&(0x7f0000000980)=@l2, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000a00)=""/87, 0x57}, {&(0x7f0000000a80)=""/155, 0x9b}], 0x2}, 0x8}, {{&(0x7f0000004a00)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, &(0x7f0000002080)=[{&(0x7f0000000c00)=""/128, 0x80}, {&(0x7f0000000c80)=""/12, 0xc}, {&(0x7f0000000cc0)=""/187, 0xbb}, {&(0x7f0000000d80)=""/85, 0x55}, {&(0x7f0000000e00)=""/156, 0x9c}, {&(0x7f0000000ec0)=""/157, 0x9d}, {&(0x7f0000000f80)=""/4096, 0x1000}, {&(0x7f0000001f80)=""/228, 0xe4}], 0x8, &(0x7f00000020c0)=""/59, 0x3b}, 0x4}, {{&(0x7f0000002100)=@caif=@rfm, 0x80, &(0x7f0000003700)=[{&(0x7f0000002180)=""/213, 0xd5}, {&(0x7f0000002280)=""/120, 0x78}, {&(0x7f0000002300)=""/87, 0x57}, {&(0x7f0000002380)=""/52, 0x34}, {&(0x7f00000023c0)=""/4096, 0x1000}, {&(0x7f00000033c0)=""/177, 0xb1}, {&(0x7f0000003480)=""/167, 0xa7}, {&(0x7f0000003540)=""/3, 0x3}, {&(0x7f0000003580)=""/222, 0xde}, {&(0x7f0000003680)=""/68, 0x44}], 0xa, &(0x7f0000003780)=""/4082, 0xff2}, 0x8}, {{&(0x7f0000004780)=@nl, 0x80, &(0x7f0000004840)=[{&(0x7f0000004800)=""/48, 0x30}], 0x1, &(0x7f0000004880)=""/253, 0xfd}, 0x81d8}, {{0x0, 0x0, &(0x7f0000004f00)=[{&(0x7f0000004980)=""/77, 0x4d}, {&(0x7f0000006c80)=""/249, 0xf9}, {&(0x7f0000004b00)=""/91, 0x5b}, {&(0x7f0000004b80)=""/129, 0x81}, {&(0x7f0000004c40)=""/253, 0xfd}, {&(0x7f0000004d40)=""/3, 0x3}, {&(0x7f0000004d80)=""/154, 0x9a}, {&(0x7f0000004e40)=""/151, 0x97}], 0x8}, 0x9}, {{&(0x7f0000004f40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f00000061c0)=[{&(0x7f0000004fc0)=""/120, 0x78}, {&(0x7f0000005040)=""/192, 0xc0}, {&(0x7f0000005100)=""/163, 0xa3}, {&(0x7f00000051c0)=""/4096, 0x1000}], 0x4, &(0x7f0000006200)=""/18, 0x12}, 0x3}, {{&(0x7f0000006240)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x80, &(0x7f0000006a40)=[{&(0x7f00000062c0)=""/49, 0x31}, {&(0x7f0000006300)=""/193, 0xc1}, {&(0x7f0000006400)=""/193, 0xc1}, {&(0x7f0000006500)=""/185, 0xb9}, {&(0x7f00000065c0)=""/172, 0xac}, {&(0x7f0000006680)=""/150, 0x96}, {&(0x7f0000006740)=""/252, 0xfc}, {&(0x7f0000006840)=""/202, 0xca}, {&(0x7f0000006940)=""/203, 0xcb}], 0x9, &(0x7f0000006ac0)=""/99, 0x63}, 0x1000}], 0x9, 0x2, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0xfffffffd, 0x7, 0x0, 0x0, 0x2000000003, 0x0, 0x82a, 0x0, 0x81, 0x7}) io_setup(0x2, 0x0) connect(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) ioctl$KVM_CREATE_VM(r3, 0x40086806, 0x21) r4 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x15) ioctl$TCFLSH(r4, 0x80044704, 0x20000000) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800, 0x2}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f00000000c0)={0x0, 0x4b, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="580000000102010200a1a200000000010a00000006000740000000003c0001802c000180140003002001000000000000000000000000000214000400fe800000000000000000edffffffffba0c0002800500010088000000745a3cb07675c1b31aea2b98066e7e2d9f6119de187afe68b3661faca13580a72e457348a41bd46ebece1708f9f30bbc3bda2ca121e7eea6589a3d9e4b142e44ec569fe6f966f247f5b312133ce4d4be4f5436c365614f0884ba2168c5c8e0458553818fabb5ce0b70ea4f5367810e47ba95b6c9923b62b657bf94a7264e31f267e38b91cfd9e2d6d813051c0e072af171e981dc50988e3d7aa08a32a76e3a45c48858ea6eebc2"], 0x58}}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000000)={@my=0x0}) 1.220931154s ago: executing program 7 (id=1447): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e22, @loopback}, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000100)='ip6erspan0\x00', 0x8, 0x8, 0x959}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000001c0)=0x0) r3 = syz_open_procfs(r2, &(0x7f0000000240)='net/netstat\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r12, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r14, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r11, @ANYBLOB="05005b"], 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000200)={0x0, 0x100000, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r8, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$cgroup(r3, &(0x7f0000000380)='syz0\x00', 0x200002, 0x0) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x1c4, r5, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_PEERS={0x178, 0x8, 0x0, 0x1, [{0x174, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x14c, 0x9, 0x0, 0x1, [{0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}]}, {0x4}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}]}, {0x4}, {0x4}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x4004840}, 0x2000000) writev(r3, &(0x7f0000000480)=[{0x0}], 0x1) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4d0d2972d57c", @ANYRES16=r5, @ANYBLOB="00022dbd7000fbdbdf2500000000"], 0x14}, 0x1, 0x0, 0x0, 0x80d0}, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) 1.171295919s ago: executing program 8 (id=1448): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x503, 0x70bd27, 0x702, {0x0, 0x0, 0x600, 0x0, 0x6000, 0x1806}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}, 0x1, 0x0, 0x0, 0xc005}, 0x440b0) 1.023113103s ago: executing program 8 (id=1449): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x3, &(0x7f0000000040)=0xfffe, 0x9) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) socket$key(0xf, 0x3, 0x2) (async) r4 = socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sched_setscheduler(0x0, 0x1, 0x0) (async) sched_setscheduler(0x0, 0x1, 0x0) close(r3) (async) close(r3) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r6, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0, 0x0, 0x0, 0x21}, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0xfd96) (async) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0xfd96) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000001e0001002bbd7000fedbdf2500000000000000000000000000000001000004d20a68874d0d00ff00fe880000000000000000000000000101060000000000000024000900010000000000000009000000000000000900000000000000a205000000000000"], 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x8040) write$cgroup_devices(r4, &(0x7f0000000040)=ANY=[@ANYRES16=r1, @ANYRES64=r5], 0xfffffeff) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) (async) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r8, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r0}, 0x38) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r0}, 0x38) 939.173471ms ago: executing program 7 (id=1450): request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x187) lsetxattr$security_capability(&(0x7f0000000000)='./file1/file2\x00', &(0x7f0000000140), 0x0, 0x0, 0x1) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x84, 0x4, 0x4038a0b, 0x11, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2={0xff, 0x5}, 0x20, 0x0, 0x0, 0x4}}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x80) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000080601080000000000000000010000010500010007000076"], 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x48040) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x972, 0x1f480, 0x2, 0x325}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080045000028fffe00009506907864010101ac1414aa", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8c020008907810050000000000000040005600002d226905531de156c8ecefbaecbc06add46e8a3d97a47e75e224d3858e1494d970d9e00fd3e79c9939f75883aee0a185a4e2b4950e2c1a0b5b052ae7609ba5aecca6e20beb023dcb1c"], 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) io_uring_enter(r3, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 645.479893ms ago: executing program 8 (id=1451): openat$hpet(0xffffff9c, &(0x7f0000000100), 0x901000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r0, 0x12a, 0xffffffb6, 0x17, 0x0, 0x0) 626.873µs ago: executing program 7 (id=1452): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000540)=ANY=[@ANYRESDEC=0x0, @ANYRES32, @ANYRESOCT=0x0, @ANYRES32], &(0x7f0000000000)='GPL\x00', 0x1002, 0xc7, &(0x7f0000000640)=""/199, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f00000001c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mount$9p_rdma(0x0, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x200024, &(0x7f0000000280)=ANY=[@ANYBLOB="d2ff616e733d72646d612c706f72745830147bb45956ca783030303030303030303030303465322ce8"]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x40004e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r3) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRES8=r0, @ANYRES16=r3], 0x20}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmsg$TIPC_NL_KEY_SET(r3, 0x0, 0x0) init_module(&(0x7f0000000d40)=ANY=[], 0xa99, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0xffffffff, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setitimer(0x2, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1, 0x0, 0x0, 0xff000000}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, 0x0}}], 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) syz_emit_ethernet(0x3f, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x31, 0x2000, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, {0x0, 0x4e20, 0x1d, 0x0, @opaque="043363e8167e675a7b4957478df830e8a1119af97f"}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x264) mount(0x0, 0x0, &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) 0s ago: executing program 8 (id=1453): r0 = msgget$private(0x0, 0x193) msgsnd(r0, &(0x7f0000000640)=ANY=[@ANYRES8], 0x401, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='0000:00:03.0\x00', 0xd) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='i801_smbus\x00', 0xb) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/i801_smbus/bind\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='0000:00:03.0\x00', 0xd) r4 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setrlimit(0x0, &(0x7f0000000280)={0xc800, 0xfffffffe}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x86022, &(0x7f0000000040)={[{@nr_inodes={'nr_inodes', 0x3d, [0x35]}}, {@nr_blocks={'nr_blocks', 0x3d, [0x32]}}]}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000002000100fffe0900010073797a300000000040000000030a01020000000000000000010000000900030073797a310000000014000480080002400000000008000140000000040900010073797a300000000064000000060a010400000000000000000100000008000b40000000000900010073797a30000000003c00048010000180080001006c6f6700040002802800018008000100666962001c00028008000140000000110800034000000005080002"], 0xec}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) mount(0x0, 0x0, 0x0, 0x44021, 0x0) madvise(&(0x7f00002d9000/0x2000)=nil, 0x2000, 0x70) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES16], 0x48) kernel console output (not intermixed with test programs): 018][ T9130] No source specified [ 178.907248][ T5741] Bluetooth: hci4: command 0x0c1a tx timeout [ 178.981621][ T9139] autofs4:pid:9139:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.768), cmd(0xc0189375) [ 178.987514][ T9139] autofs4:pid:9139:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) [ 179.290310][ T9145] pim6reg: entered allmulticast mode [ 179.340858][ T9143] pim6reg: left allmulticast mode [ 179.533508][ T9148] netlink: 84 bytes leftover after parsing attributes in process `syz.0.727'. [ 179.754159][ T9154] netlink: 8 bytes leftover after parsing attributes in process `syz.6.729'. [ 179.827861][ T5834] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 179.999639][ T5834] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.005150][ T5834] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.012705][ T5834] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 180.017111][ T5834] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 180.021226][ T5834] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.038147][ T5834] usb 5-1: config 0 descriptor?? [ 180.621389][ T9178] netlink: 20 bytes leftover after parsing attributes in process `syz.5.734'. [ 180.630270][ T9178] ip6gre1: entered promiscuous mode [ 180.633660][ T9178] ip6gre1: entered allmulticast mode [ 180.646093][ T9178] netlink: 'syz.5.734': attribute type 6 has an invalid length. [ 180.650965][ T9178] netlink: 72 bytes leftover after parsing attributes in process `syz.5.734'. [ 180.695389][ T5834] usbhid 5-1:0.0: can't add hid device: -71 [ 180.700233][ T5834] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 180.704672][ T5834] usb 5-1: USB disconnect, device number 5 [ 180.740282][ T9183] A link change request failed with some changes committed already. Interface geneve3 may have been left with an inconsistent configuration, please check. [ 180.757047][ T5807] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 180.759752][ T5807] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 180.762342][ T5807] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 180.764864][ T5807] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 180.884504][ T9192] e1000e 0000:00:02.0 eth1: removed PHC [ 180.987248][ T5741] Bluetooth: hci4: command 0x0c1a tx timeout [ 181.077018][ C3] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 181.195785][ T9192] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 182.206216][ T9216] netlink: 'syz.5.741': attribute type 1 has an invalid length. [ 182.759392][ T9244] afs: Unknown parameter 'smackfstransmute' [ 182.860590][ T9250] affs: No valid root block on device sr0 [ 182.916933][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 183.230036][ T9267] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 183.266960][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 183.270917][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 183.272304][ T9267] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 183.274506][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 183.277525][ T9267] overlayfs: failed to look up (tracing) for ino (-66) [ 183.299395][ T9] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 183.303995][ T9] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 183.309186][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 183.316051][ T9] usb 5-1: string descriptor 0 read error: -22 [ 183.318175][ T9] usb 5-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 183.321620][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.336654][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 183.340624][ T9] usb 5-1: MIDIStreaming interface descriptor not found [ 185.683386][ T5926] usb 5-1: USB disconnect, device number 6 [ 185.686896][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 186.436673][ T9319] netlink: 'syz.3.759': attribute type 1 has an invalid length. [ 187.108764][ T9343] i2c i2c-0: new_device: Instantiated device ptn36502 at 0x1a [ 187.121491][ T42] audit: type=1800 audit(1786236616.089:137): pid=9345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.765" name="product" dev="configfs" ino=25968 res=0 errno=0 [ 187.430603][ T9378] binder: BINDER_SET_CONTEXT_MGR already set [ 187.436975][ T9378] binder: 9377:9378 ioctl 4018620d 80004a80 returned -16 [ 187.566304][ T9381] netlink: 8 bytes leftover after parsing attributes in process `syz.5.775'. [ 187.713557][ T9386] openvswitch: netlink: IP tunnel dst address not specified [ 188.295442][ T9399] random: crng reseeded on system resumption [ 188.303821][ T9399] Restarting kernel threads ... [ 188.309121][ T9399] Done restarting kernel threads. [ 188.411270][ T9405] pim6reg: entered allmulticast mode [ 188.432013][ T9400] xt_hashlimit: size too large, truncated to 1048576 [ 188.434233][ T9400] xt_hashlimit: max too large, truncated to 1048576 [ 188.508355][ T9409] netlink: 8 bytes leftover after parsing attributes in process `syz.6.783'. [ 188.592673][ T9411] binder: BINDER_SET_CONTEXT_MGR already set [ 188.604356][ T9411] binder: 9410:9411 ioctl 4018620d 80004a80 returned -16 [ 188.787227][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 189.121778][ T9426] netlink: 16 bytes leftover after parsing attributes in process `syz.5.790'. [ 189.131761][ T9427] netlink: 16 bytes leftover after parsing attributes in process `syz.5.790'. [ 189.135683][ T9426] netlink: 'syz.5.790': attribute type 10 has an invalid length. [ 189.141110][ T9426] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.144564][ T9426] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.152809][ T9426] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.155645][ T9426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.158733][ T9426] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.161552][ T9426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.169005][ T9426] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 189.173028][ T9426] netlink: 'syz.5.790': attribute type 10 has an invalid length. [ 189.179394][ T9426] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.182580][ T9426] bond0: (slave team0): Enslaving as an active interface with an up link [ 189.246423][ T9431] netlink: 4 bytes leftover after parsing attributes in process `syz.0.792'. [ 189.307112][ C3] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 189.365538][ T9438] binder: BINDER_SET_CONTEXT_MGR already set [ 189.367738][ T9438] binder: 9437:9438 ioctl 4018620d 80004a80 returned -16 [ 189.715986][ T9444] jffs2: notice: (9444) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 190.670608][ T5736] Bluetooth: hci0: command 0x0c1a tx timeout [ 190.671651][ T5741] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 191.277935][ T9501] overlay: Unknown parameter '/' [ 191.294508][ T9501] netlink: zone id is out of range [ 191.296246][ T9501] netlink: zone id is out of range [ 191.299366][ T9501] netlink: zone id is out of range [ 191.303483][ T9501] netlink: zone id is out of range [ 191.315429][ T9498] input: syz0 as /devices/virtual/input/input12 [ 191.337014][ T42] audit: type=1800 audit(1786236620.309:138): pid=9471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.807" name="file0" dev="fuse" ino=18446744073709551613 res=0 errno=0 [ 192.445203][ T9533] netlink: 48 bytes leftover after parsing attributes in process `syz.6.823'. [ 192.668666][ T9535] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 193.094668][ T9205] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 193.117103][ T34] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 193.253947][ T9556] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 193.304987][ T9556] CPU: 2 UID: 0 PID: 9556 Comm: syz.6.828 Tainted: G L syzkaller #0 PREEMPT(full) [ 193.305011][ T9556] Tainted: [L]=SOFTLOCKUP [ 193.305016][ T9556] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 193.305025][ T9556] Call Trace: [ 193.305031][ T9556] [ 193.305039][ T9556] dump_stack_lvl+0x100/0x190 [ 193.305067][ T9556] sysfs_warn_dup.cold+0x1c/0x28 [ 193.305098][ T9556] sysfs_create_dir_ns+0x24b/0x2b0 [ 193.305129][ T9556] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 193.305158][ T9556] ? find_held_lock+0x2b/0x80 [ 193.305192][ T9556] ? kobject_add_internal+0x25f/0x930 [ 193.305213][ T9556] ? kobject_add_internal+0x25f/0x930 [ 193.305234][ T9556] ? class_dir_child_ns_type+0xd/0x60 [ 193.305267][ T9556] kobject_add_internal+0x2c8/0x930 [ 193.305307][ T9556] kobject_add+0x16a/0x1e0 [ 193.305325][ T9556] ? __pfx_kobject_add+0x10/0x10 [ 193.305351][ T9556] ? get_device_parent+0x1b3/0x4c0 [ 193.305376][ T9556] ? kobject_put+0xb9/0x640 [ 193.305398][ T9556] device_add+0x294/0x1970 [ 193.305415][ T9556] ? lockdep_init_map_type+0x5c/0x250 [ 193.305432][ T9556] ? __pfx_device_add+0x10/0x10 [ 193.305446][ T9556] ? lockdep_init_map_type+0x5c/0x250 [ 193.305462][ T9556] ? __init_waitqueue_head+0xca/0x150 [ 193.305486][ T9556] tty_register_device_attr+0x388/0x7f0 [ 193.305515][ T9556] ? lockdep_init_map_type+0x5c/0x250 [ 193.305531][ T9556] ? __pfx_tty_register_device_attr+0x10/0x10 [ 193.305559][ T9556] ? tty_port_init+0x156/0x1c0 [ 193.305583][ T9556] gsm_activate_mux+0x155/0x2a0 [ 193.305607][ T9556] gsmld_ioctl+0xbbc/0x15c0 [ 193.305628][ T9556] ? __pfx_gsmld_ioctl+0x10/0x10 [ 193.305662][ T9556] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 193.305693][ T9556] ? __pfx_gsmld_ioctl+0x10/0x10 [ 193.305709][ T9556] tty_compat_ioctl+0x396/0x420 [ 193.305732][ T9556] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 193.305757][ T9556] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 193.305787][ T9556] __do_fast_syscall_32+0xe7/0x970 [ 193.305820][ T9556] do_fast_syscall_32+0x32/0x70 [ 193.305845][ T9556] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 193.305865][ T9556] RIP: 0023:0xf70aefec [ 193.305886][ T9556] Code: Unable to access opcode bytes at 0xf70aefc2. [ 193.305895][ T9556] RSP: 002b:00000000f545b50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 193.305913][ T9556] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000404c4701 [ 193.305924][ T9556] RDX: 00000000800001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 193.305935][ T9556] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 193.305945][ T9556] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 193.305955][ T9556] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 193.305991][ T9556] [ 193.337699][ T9556] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 193.488878][ T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.496279][ T34] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 193.507926][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.515187][ T34] usb 5-1: config 0 descriptor?? [ 193.681143][ T9205] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.711577][ T9205] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 193.722595][ T9205] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.798251][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.004416][ T9205] usb 10-1: config 0 descriptor?? [ 194.277319][ T5585] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.350903][ T9205] usbhid 10-1:0.0: can't add hid device: -71 [ 194.384164][ T9205] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 194.711486][ T9205] usb 10-1: USB disconnect, device number 4 [ 195.556977][ T9579] netlink: 'syz.3.831': attribute type 10 has an invalid length. [ 195.667478][ T9205] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 195.726776][ T9589] netlink: 24 bytes leftover after parsing attributes in process `syz.3.831'. [ 196.037022][ T9205] usb 10-1: device not accepting address 5, error -71 [ 196.493376][ T34] usbhid 5-1:0.0: can't add hid device: -71 [ 196.495427][ T34] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 196.513753][ T34] usb 5-1: USB disconnect, device number 7 [ 197.517154][ T60] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 197.696153][ T60] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.705131][ T60] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 197.721643][ T60] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.782457][ T60] usb 10-1: config 0 descriptor?? [ 198.016773][ T60] usbhid 10-1:0.0: can't add hid device: -71 [ 198.051945][ T60] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 198.129627][ T60] usb 10-1: USB disconnect, device number 7 [ 198.245922][ T9643] jffs2: notice: (9643) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 198.461163][ T9654] input: syz0 as /devices/virtual/input/input13 [ 198.577416][ T60] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 198.745100][ T60] usb 10-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 198.774423][ T60] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 256 [ 198.814149][ T60] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 198.899550][ T60] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 198.957414][ T60] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.980229][ T60] usb 10-1: Product: syz [ 198.992319][ T60] usb 10-1: Manufacturer: syz [ 199.003334][ T60] usb 10-1: SerialNumber: syz [ 199.654122][ T60] usb 10-1: USB disconnect, device number 8 [ 200.218868][ T9678] netlink: 4 bytes leftover after parsing attributes in process `syz.3.852'. [ 200.518776][ T9684] netlink: 'syz.3.853': attribute type 1 has an invalid length. [ 200.977204][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 201.125731][ T9694] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 201.364883][ T9702] jffs2: notice: (9702) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 201.431859][ T5808] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 202.197010][ T5808] usb 10-1: Using ep0 maxpacket: 16 [ 202.201083][ T5808] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 202.205443][ T5808] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 202.211514][ T5808] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 202.214923][ T9716] netlink: 'syz.6.862': attribute type 1 has an invalid length. [ 202.215376][ T5808] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.221045][ T5808] usb 10-1: Product: syz [ 202.222833][ T5808] usb 10-1: Manufacturer: syz [ 202.224826][ T5808] usb 10-1: SerialNumber: syz [ 202.233916][ T9716] 8021q: adding VLAN 0 to HW filter on device bond1 [ 202.236819][ T5808] usb 10-1: 0:2 : does not exist [ 202.242386][ T5808] usb 10-1: unit 9 not found! [ 202.301969][ T9716] bond1: (slave geneve2): making interface the new active one [ 202.310071][ T9716] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 202.627522][ T5821] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 202.794234][ T5821] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.799478][ T5821] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 202.803322][ T5821] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.835767][ T5821] usb 5-1: config 0 descriptor?? [ 202.953251][ T9730] atomic_op ffff88804fc0a198 conn xmit_atomic 0000000000000000 [ 203.091752][ T5821] usbhid 5-1:0.0: can't add hid device: -71 [ 203.110388][ T5821] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 203.162230][ T9731] netlink: 'syz.6.865': attribute type 1 has an invalid length. [ 203.308990][ T5821] usb 5-1: USB disconnect, device number 8 [ 203.837832][ T5821] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 204.088164][ T5821] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 204.096878][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 204.113388][ T5821] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 256 [ 204.144940][ T5821] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 204.225770][ T9734] i2c i2c-2: new_device: Instantiated device isp1301 at 0x2c [ 204.230100][ T5821] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 204.248487][ T5821] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.263700][ T5821] usb 5-1: Product: syz [ 204.272837][ T5821] usb 5-1: Manufacturer: syz [ 204.293922][ T5821] usb 5-1: SerialNumber: syz [ 204.909904][ T5808] usb 10-1: USB disconnect, device number 9 [ 204.924247][ T5821] usb 5-1: USB disconnect, device number 9 [ 204.993706][ T9748] netlink: 12 bytes leftover after parsing attributes in process `syz.6.871'. [ 205.317073][ C3] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 205.367218][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 205.507230][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 205.596904][ T42] audit: type=1807 audit(1786236634.559:139): action=measure func=F res=0 [ 205.603207][ T42] audit: type=1802 audit(1786236634.569:140): pid=9760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.875" res=0 errno=0 [ 205.686394][ T9759] ima: policy update failed [ 205.697147][ T42] audit: type=1802 audit(1786236634.669:141): pid=9759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.875" res=0 errno=0 [ 205.831678][ T9766] binder: 9765:9766 ioctl 4018620d 0 returned -22 [ 206.177553][ T9776] netlink: 12 bytes leftover after parsing attributes in process `syz.6.880'. [ 206.539073][ T9787] binder: 9786:9787 ioctl 4018620d 0 returned -22 [ 206.829238][ T9799] netlink: 12 bytes leftover after parsing attributes in process `syz.3.887'. [ 206.978861][ T9801] netlink: 12 bytes leftover after parsing attributes in process `syz.0.889'. [ 207.197394][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 207.530834][ T9823] binder: BINDER_SET_CONTEXT_MGR already set [ 207.533573][ T9823] binder: 9822:9823 ioctl 4018620d 80004a80 returned -16 [ 208.289147][ T9835] netlink: 12 bytes leftover after parsing attributes in process `syz.6.899'. [ 208.957391][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 209.217372][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 209.317368][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 209.438749][ T9855] jffs2: notice: (9855) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 209.598114][ T9851] netlink: 'syz.0.903': attribute type 1 has an invalid length. [ 210.185051][ T9867] netlink: 12 bytes leftover after parsing attributes in process `syz.5.908'. [ 211.117012][ T9205] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 211.270380][ T9205] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.280650][ T9205] usb 11-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 211.291237][ T9205] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.313613][ T9205] usb 11-1: config 0 descriptor?? [ 211.527627][ T9205] usbhid 11-1:0.0: can't add hid device: -71 [ 211.533083][ T9205] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 211.559185][ T9205] usb 11-1: USB disconnect, device number 2 [ 211.687684][ T60] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 211.826153][ T9890] netlink: 20 bytes leftover after parsing attributes in process `syz.0.912'. [ 212.067222][ T9205] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 212.247616][ T9205] usb 11-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 212.268046][ T9205] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 256 [ 212.278904][ T9205] usb 11-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 212.297911][ T9205] usb 11-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 212.310876][ T9205] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.321204][ T9205] usb 11-1: Product: syz [ 212.325015][ T9205] usb 11-1: Manufacturer: syz [ 212.332907][ T9205] usb 11-1: SerialNumber: syz [ 212.624583][ T5741] Bluetooth: hci2: unexpected event for opcode 0x2016 [ 213.347587][ T9926] netlink: 'syz.3.917': attribute type 1 has an invalid length. [ 213.784412][ T9933] netlink: 12 bytes leftover after parsing attributes in process `syz.5.918'. [ 214.088491][ T9205] usb 11-1: USB disconnect, device number 3 [ 214.172718][ T9944] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 214.247733][ T9947] FAULT_INJECTION: forcing a failure. [ 214.247733][ T9947] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 214.253377][ T9947] CPU: 0 UID: 0 PID: 9947 Comm: syz.5.922 Tainted: G L syzkaller #0 PREEMPT(full) [ 214.253403][ T9947] Tainted: [L]=SOFTLOCKUP [ 214.253408][ T9947] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 214.253418][ T9947] Call Trace: [ 214.253425][ T9947] [ 214.253447][ T9947] dump_stack_lvl+0x100/0x190 [ 214.253477][ T9947] should_fail_ex.cold+0x5/0xa [ 214.253500][ T9947] _copy_from_user+0x2e/0xd0 [ 214.253528][ T9947] video_usercopy+0x9e0/0x14c0 [ 214.253580][ T9947] ? __pfx_subdev_do_ioctl_lock+0x10/0x10 [ 214.253606][ T9947] ? __pfx_video_usercopy+0x10/0x10 [ 214.253638][ T9947] ? __fget_files+0x215/0x3d0 [ 214.253655][ T9947] ? hook_file_ioctl_common+0x140/0x440 [ 214.253684][ T9947] v4l2_ioctl+0x1bd/0x250 [ 214.253714][ T9947] v4l2_compat_ioctl32+0x20f/0x2d0 [ 214.253735][ T9947] ? __pfx_v4l2_compat_ioctl32+0x10/0x10 [ 214.253757][ T9947] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 214.253788][ T9947] __do_fast_syscall_32+0xe7/0x970 [ 214.253815][ T9947] ? lockdep_hardirqs_on+0x78/0x100 [ 214.253840][ T9947] do_fast_syscall_32+0x32/0x70 [ 214.253865][ T9947] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 214.253885][ T9947] RIP: 0023:0xf7f23fec [ 214.253904][ T9947] Code: Unable to access opcode bytes at 0xf7f23fc2. [ 214.253912][ T9947] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 214.253929][ T9947] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c008561b [ 214.253947][ T9947] RDX: 0000000080004440 RSI: 0000000000000000 RDI: 0000000000000000 [ 214.253957][ T9947] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 214.253967][ T9947] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 214.253976][ T9947] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 214.253999][ T9947] [ 222.199687][ T9982] netlink: 24 bytes leftover after parsing attributes in process `syz.0.927'. [ 222.414098][ T9988] netlink: 4 bytes leftover after parsing attributes in process `syz.0.927'. [ 222.494774][ T9992] netlink: 8 bytes leftover after parsing attributes in process `syz.6.929'. [ 223.311645][T10011] netlink: 'syz.0.932': attribute type 1 has an invalid length. [ 223.907052][ T34] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 224.054035][T10017] jffs2: notice: (10017) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 224.071456][T10017] netlink: 24 bytes leftover after parsing attributes in process `syz.0.936'. [ 224.122186][ T34] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.151681][ T34] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 224.163359][ T34] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.200202][ T34] usb 10-1: config 0 descriptor?? [ 224.395460][T10027] netlink: 8 bytes leftover after parsing attributes in process `syz.6.938'. [ 224.445464][ T34] usbhid 10-1:0.0: can't add hid device: -71 [ 224.460231][ T34] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 224.553306][ T34] usb 10-1: USB disconnect, device number 10 [ 225.307034][ T34] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 225.464961][ T34] usb 10-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 225.478761][ T34] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 256 [ 225.488987][ T34] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 225.502090][ T34] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 225.506561][ T34] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.511132][ T34] usb 10-1: Product: syz [ 225.513027][ T34] usb 10-1: Manufacturer: syz [ 225.514906][ T34] usb 10-1: SerialNumber: syz [ 225.702858][T10048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.707231][T10048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.746168][T10051] netlink: 'syz.6.944': attribute type 1 has an invalid length. [ 226.700406][T10071] bond2: Removing last arp target with arp_interval on [ 226.706015][T10071] bond2: entered promiscuous mode [ 226.708443][T10071] bond2: entered allmulticast mode [ 226.714171][T10071] 8021q: adding VLAN 0 to HW filter on device bond2 [ 227.389500][ T1481] usb 10-1: USB disconnect, device number 11 [ 227.578482][T10082] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.583381][T10082] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.612457][T10084] netlink: 'syz.5.951': attribute type 1 has an invalid length. [ 227.624135][T10084] netlink: 24 bytes leftover after parsing attributes in process `syz.5.951'. [ 227.872074][T10088] netlink: 'syz.6.955': attribute type 1 has an invalid length. [ 229.482031][T10118] raw_sendmsg: syz.5.964 forgot to set AF_INET. Fix it! [ 230.729141][T10132] netlink: 72 bytes leftover after parsing attributes in process `syz.0.969'. [ 230.916033][T10134] Unsupported ieee802154 address type: 0 [ 231.079806][T10146] binder: BINDER_SET_CONTEXT_MGR already set [ 231.081657][T10146] binder: 10145:10146 ioctl 4018620d 80004a80 returned -16 [ 231.310869][T10158] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 231.334574][T10158] overlayfs: failed lookup in lower (newroot/169, name='file0', err=-40): overlapping layers [ 231.424485][T10158] uhci_hcd 0000:00:1d.0: remove, state 4 [ 231.429543][T10158] usb usb2: USB disconnect, device number 1 [ 231.505626][T10158] uhci_hcd 0000:00:1d.0: USB bus 2 deregistered [ 231.630327][T10168] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 231.660346][T10168] pci 0000:00:01.0: BAR 0 [mem 0xfd000000-0xfdffffff pref] [ 231.662724][T10168] pci 0000:00:01.0: BAR 2 [mem 0xfeaf4000-0xfeaf4fff] [ 231.665223][T10168] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 231.669505][T10168] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 231.695447][T10168] pci 0000:00:01.0: Adding to iommu group 1 [ 231.705386][T10168] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 231.707826][T10168] pci 0000:00:01.0: vgaarb: bridge control possible [ 231.709965][T10168] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 231.730677][T10168] pci 0000:00:1d.0: [8086:2934] type 00 class 0x0c0300 conventional PCI endpoint [ 231.739242][T10168] pci 0000:00:1d.0: BAR 4 [io 0xc0e0-0xc0ff] [ 231.754741][T10168] pci 0000:00:1d.0: Adding to iommu group 7 [ 231.765069][T10168] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 231.777535][T10168] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 231.781980][T10168] pci 0000:00:1d.0: BAR 4 [io 0x2000-0x201f]: assigned [ 231.794251][T10168] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 231.819597][T10168] [drm] Found bochs VGA, ID 0xb0c5. [ 231.821792][T10168] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 231.881012][T10168] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 232.042116][T10168] Console: switching to colour frame buffer device 160x50 [ 232.253530][T10168] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 232.454498][T10168] pci 0000:00:1d.0: quirk_usb_early_handoff+0x0/0x1360 took 171630 usecs [ 232.525488][T10168] uhci_hcd 0000:00:1d.0: UHCI Host Controller [ 232.587806][T10168] uhci_hcd 0000:00:1d.0: new USB bus registered, assigned bus number 2 [ 232.607882][T10168] uhci_hcd 0000:00:1d.0: detected 2 ports [ 232.614410][T10168] uhci_hcd 0000:00:1d.0: irq 16, io port 0x00002000 [ 232.655447][T10168] usb usb2: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 7.02 [ 232.666938][T10168] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 232.677154][T10168] usb usb2: Product: UHCI Host Controller [ 232.679339][T10168] usb usb2: Manufacturer: Linux syzkaller uhci_hcd [ 232.686959][T10168] usb usb2: SerialNumber: 0000:00:1d.0 [ 232.744207][T10168] hub 2-0:1.0: USB hub found [ 232.750452][T10168] hub 2-0:1.0: 2 ports detected [ 233.702595][ T7442] overlayfs: failed lookup in lower (newroot/169, name='file2', err=-40): overlapping layers [ 233.708191][ T7442] overlayfs: failed lookup in lower (newroot/169, name='file2', err=-40): overlapping layers [ 234.149223][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.153957][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 234.223994][ T5736] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 234.227231][ T5736] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 234.233977][ T5736] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 234.241187][ T5736] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 234.248738][ T5736] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 234.273218][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.276471][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 234.356313][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.360781][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 234.439532][ T34] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 234.481744][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.485913][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 234.591274][ T34] usb 11-1: Using ep0 maxpacket: 32 [ 234.604831][ T34] usb 11-1: config 0 has an invalid interface number: 1 but max is 0 [ 234.613673][ T34] usb 11-1: config 0 has no interface number 0 [ 234.619365][ T34] usb 11-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 234.623325][ T34] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.626740][ T34] usb 11-1: Product: syz [ 234.629166][ T34] usb 11-1: Manufacturer: syz [ 234.631147][ T34] usb 11-1: SerialNumber: syz [ 234.640359][ T34] usb 11-1: config 0 descriptor?? [ 234.653741][ T34] usb 11-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 234.657621][ T34] usb 11-1: selecting invalid altsetting 1 [ 234.660125][ T34] usb 11-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 234.680102][ T34] usb 11-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 234.683715][ T34] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 234.706326][ T34] usb 11-1: media controller created [ 234.744879][ T34] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 235.321594][T10203] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.328900][T10203] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.339637][T10203] bridge_slave_0: entered allmulticast mode [ 235.350263][T10203] bridge_slave_0: entered promiscuous mode [ 235.357933][ T5443] 8021q: adding VLAN 0 to HW filter on device eth1 [ 235.361142][T10203] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.369606][T10203] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.372929][T10203] bridge_slave_1: entered allmulticast mode [ 235.380785][T10203] bridge_slave_1: entered promiscuous mode [ 235.419552][T10203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.427135][T10203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.460388][T10203] team0: Port device team_slave_0 added [ 235.467090][T10203] team0: Port device team_slave_1 added [ 235.505965][T10203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.509199][T10203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 235.519913][T10203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.526538][T10203] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.533827][T10203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 235.592444][T10203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.608686][ T12] bridge_slave_1: left allmulticast mode [ 235.611009][ T12] bridge_slave_1: left promiscuous mode [ 235.614531][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.622304][ T12] bridge_slave_0: left allmulticast mode [ 235.624713][ T12] bridge_slave_0: left promiscuous mode [ 235.627459][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.649008][ T12] pim6reg: left allmulticast mode [ 236.267936][ T5736] Bluetooth: hci1: command tx timeout [ 237.452182][ T34] usb 11-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 237.455419][ T34] zl10353_read_register: readreg error (reg=127, ret==-71) [ 237.460350][ T34] usb 11-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 237.502132][ T34] usb 11-1: USB disconnect, device number 4 [ 237.502580][ T12] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 237.578995][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 237.609026][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 237.619660][ T12] bond0 (unregistering): (slave team0): Releasing backup interface [ 237.626423][ T12] bond0 (unregistering): Released all slaves [ 237.627181][ T5741] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 237.632389][ T5741] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 237.633194][ T12] bond1 (unregistering): Released all slaves [ 237.635441][ T5741] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 237.647158][ T5741] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 237.651832][ T5741] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 237.660634][T10239] netlink: 12 bytes leftover after parsing attributes in process `syz.6.997'. [ 237.845612][T10203] hsr_slave_0: entered promiscuous mode [ 237.848268][T10203] hsr_slave_1: entered promiscuous mode [ 237.850547][T10203] debugfs: 'hsr0' already exists in 'hsr' [ 237.852397][T10203] Cannot create hsr debugfs directory [ 238.301445][ T12] hsr_slave_0: left promiscuous mode [ 238.311357][ T12] hsr_slave_1: left promiscuous mode [ 238.321189][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 238.330136][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 238.345180][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 238.349370][ T5741] Bluetooth: hci1: command tx timeout [ 238.353499][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 238.403020][T10267] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1000'. [ 238.413186][ T12] veth1_macvtap: left promiscuous mode [ 238.415560][ T12] veth0_macvtap: left promiscuous mode [ 238.419243][ T12] veth1_vlan: left promiscuous mode [ 238.421954][ T12] veth0_vlan: left promiscuous mode [ 238.586996][ C3] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 239.206363][ T12] team0 (unregistering): Port device team_slave_1 removed [ 239.245369][ T12] team0 (unregistering): Port device team_slave_0 removed [ 239.612048][ T5443] 8021q: adding VLAN 0 to HW filter on device eth14 [ 239.707411][T10266] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 239.710047][ T5741] Bluetooth: hci2: command tx timeout [ 239.710051][T10266] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 239.710221][T10266] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 239.717830][T10266] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 239.726006][T10266] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 239.748910][T10266] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 239.751217][T10266] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 239.824245][T10203] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 239.884755][T10203] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 239.887531][T10266] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 239.901933][T10203] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 239.927106][T10203] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 239.952355][T10203] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 239.974311][T10203] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 239.978255][T10203] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 239.986702][T10203] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 240.001396][ T5443] 8021q: adding VLAN 0 to HW filter on device eth15 [ 240.187207][T10285] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 240.551154][ T5443] 8021q: adding VLAN 0 to HW filter on device eth16 [ 240.556147][T10203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.593271][T10203] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.606194][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.608530][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.612110][T10240] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.614394][T10240] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.616638][T10240] bridge_slave_0: entered allmulticast mode [ 240.620062][T10240] bridge_slave_0: entered promiscuous mode [ 240.627175][T10240] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.629812][T10240] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.632108][T10240] bridge_slave_1: entered allmulticast mode [ 240.635037][T10240] bridge_slave_1: entered promiscuous mode [ 240.640307][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.642544][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.681375][T10240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.698687][T10240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.846648][T10240] team0: Port device team_slave_0 added [ 240.849928][T10240] team0: Port device team_slave_1 added [ 240.868304][T10240] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.870561][T10240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 240.878255][T10240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.882490][T10240] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.884678][T10240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 240.892278][T10240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.914445][T10240] hsr_slave_0: entered promiscuous mode [ 240.916974][T10240] hsr_slave_1: entered promiscuous mode [ 240.919136][T10240] debugfs: 'hsr0' already exists in 'hsr' [ 240.920879][T10240] Cannot create hsr debugfs directory [ 241.002524][ T13] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.186143][ T13] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.298572][T10240] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 241.306118][T10240] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 241.310998][T10240] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 241.320078][T10240] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 241.324480][T10240] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 241.332488][T10240] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 241.384378][ T13] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.396370][T10240] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 241.404443][T10240] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 241.543513][ T13] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.562795][T10240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.578964][T10240] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.588608][ T228] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.591539][ T228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.600814][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.603799][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.797177][ T5741] Bluetooth: hci2: command 0x040f tx timeout [ 241.797745][ T64] Bluetooth: hci1: command 0x0419 tx timeout [ 241.801157][ T5734] Bluetooth: hci0: command 0x0c1a tx timeout [ 241.803002][ T5736] Bluetooth: hci4: command 0x0c1a tx timeout [ 241.821098][ T13] bridge_slave_1: left allmulticast mode [ 241.822920][ T13] bridge_slave_1: left promiscuous mode [ 241.824823][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.832623][ T13] bridge_slave_0: left allmulticast mode [ 241.835078][ T13] bridge_slave_0: left promiscuous mode [ 241.838658][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.964361][T10349] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 241.966563][T10349] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 241.969375][T10349] vhci_hcd vhci_hcd.0: Device attached [ 242.081661][ T13] pim6reg: left allmulticast mode [ 242.085796][ T13] batman_adv: batadv0: Interface deactivated: gretap1 [ 242.171131][ T13] batman_adv: batadv0: Removing interface: gretap1 [ 242.230572][ T851] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 242.238606][ T13] team0: Port device bond0 removed [ 242.242022][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 242.246372][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 242.256157][ T13] bond0 (unregistering): Released all slaves [ 242.274480][ T5443] 8021q: adding VLAN 0 to HW filter on device eth17 [ 242.282677][T10203] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.391417][ T13] tipc: Left network mode [ 242.598627][ T5443] 8021q: adding VLAN 0 to HW filter on device eth18 [ 242.765616][T10203] veth0_vlan: entered promiscuous mode [ 242.801135][ T13] hsr_slave_0: left promiscuous mode [ 242.808073][ T13] hsr_slave_1: left promiscuous mode [ 242.808891][T10350] vhci_hcd: connection reset by peer [ 242.817574][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.821044][ T5807] vhci_hcd vhci_hcd.0: stop threads [ 242.823335][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 242.826359][ T5807] vhci_hcd vhci_hcd.0: release socket [ 242.835010][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.842649][ T5807] vhci_hcd vhci_hcd.0: disconnect device [ 242.847017][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.861646][ T13] veth1_macvtap: left promiscuous mode [ 242.863982][ T13] veth0_macvtap: left promiscuous mode [ 242.866567][ T13] veth1_vlan: left promiscuous mode [ 242.897015][ T13] veth0_vlan: left promiscuous mode [ 243.073456][ T13] team0 (unregistering): Port device team_slave_1 removed [ 243.082763][ T13] team0 (unregistering): Port device team_slave_0 removed [ 243.181605][ T13] team0 (unregistering): Port device dummy0 removed [ 243.211355][ T5443] 8021q: adding VLAN 0 to HW filter on device eth19 [ 243.224956][T10240] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.233482][T10203] veth1_vlan: entered promiscuous mode [ 243.260859][T10203] veth0_macvtap: entered promiscuous mode [ 243.265213][T10203] veth1_macvtap: entered promiscuous mode [ 243.292506][T10203] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.324115][T10203] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.377768][ T5585] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.382987][ T5585] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.431095][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.434905][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.465213][ T5443] 8021q: adding VLAN 0 to HW filter on device eth20 [ 243.504134][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.507492][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.555005][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.555786][T10240] veth0_vlan: entered promiscuous mode [ 243.563735][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.571577][T10240] veth1_vlan: entered promiscuous mode [ 243.589491][T10240] veth0_macvtap: entered promiscuous mode [ 243.596189][T10240] veth1_macvtap: entered promiscuous mode [ 243.606562][T10240] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.613048][T10240] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.789588][T10413] Invalid ELF header magic: != ELF [ 243.811430][ T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.838939][ T7302] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.854773][ T7302] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.883387][ T7302] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.043465][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.045899][ T228] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.048717][ T5734] Bluetooth: hci2: command 0x040f tx timeout [ 244.050612][ T64] Bluetooth: hci1: command 0x0419 tx timeout [ 244.055522][ T228] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.114840][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.195426][T10407] overlayfs: overlapping lowerdir path [ 244.623272][T10426] netlink: 24 bytes leftover after parsing attributes in process `syz.8.995'. [ 244.702745][T10426] netlink: 12 bytes leftover after parsing attributes in process `syz.8.995'. [ 244.705463][T10426] netlink: 16 bytes leftover after parsing attributes in process `syz.8.995'. [ 245.147436][ T64] Bluetooth: hci4: command 0x0c1a tx timeout [ 245.776999][ T5925] usb 11-1: new low-speed USB device number 5 using dummy_hcd [ 245.957774][ T5925] usb 11-1: config 0 has an invalid interface number: 1 but max is 0 [ 245.974298][ T5925] usb 11-1: config 0 has no interface number 0 [ 245.978930][ T5925] usb 11-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 245.991148][ T5925] usb 11-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 246.001776][ T5925] usb 11-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 246.010158][ T5925] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.034793][ T5925] usb 11-1: config 0 descriptor?? [ 246.037722][T10445] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 246.048174][ T5925] iowarrior 11-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 246.104331][T10455] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 246.109116][ T5734] Bluetooth: hci2: command 0x040f tx timeout [ 246.113328][ T64] Bluetooth: hci1: command 0x0419 tx timeout [ 246.381178][ T6067] usb 11-1: USB disconnect, device number 5 [ 246.950260][T10473] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 247.247081][ T64] Bluetooth: hci4: command 0x0c1a tx timeout [ 247.388558][ T851] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 247.567841][T10484] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.766145][T10484] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.880313][T10484] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.964136][T10484] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.988769][T10492] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 247.994886][T10492] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 248.197077][ T64] Bluetooth: hci2: command 0x040f tx timeout [ 248.202235][ T5736] Bluetooth: hci1: command 0x0419 tx timeout [ 248.389087][ T5443] 8021q: adding VLAN 0 to HW filter on device eth22 [ 248.588919][T10507] pci 0000:00:05.0: [1af4:1009] type 00 class 0x000200 conventional PCI endpoint [ 248.602077][T10507] pci 0000:00:05.0: BAR 0 [io 0xc0c0-0xc0df] [ 248.611353][T10507] pci 0000:00:05.0: BAR 1 [mem 0xfeaf6000-0xfeaf6fff] [ 248.618258][T10507] pci 0000:00:05.0: BAR 4 [mem 0xfe204000-0xfe207fff 64bit pref] [ 248.640399][T10507] pci 0000:00:05.0: Adding to iommu group 5 [ 248.653197][T10507] pci 0000:00:05.0: BAR 4 [mem 0x580000000-0x580003fff 64bit pref]: assigned [ 248.670874][T10507] pci 0000:00:05.0: BAR 1 [mem 0x81001000-0x81001fff]: assigned [ 248.683681][T10507] pci 0000:00:05.0: BAR 0 [io 0x2020-0x203f]: assigned [ 248.906964][ T5736] Bluetooth: hci0: command 0x0c1a tx timeout [ 249.039789][ T5443] 8021q: adding VLAN 0 to HW filter on device eth23 [ 249.280546][ T5443] 8021q: adding VLAN 0 to HW filter on device eth24 [ 249.431533][ T5443] 8021q: adding VLAN 0 to HW filter on device eth21 [ 250.045113][T10565] pim6reg: entered allmulticast mode [ 250.267259][ T5736] Bluetooth: hci2: command 0x040f tx timeout [ 250.384293][T10571] syz_tun: entered allmulticast mode [ 250.439670][T10560] pim6reg: left allmulticast mode [ 250.827137][T10585] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1040'. [ 250.945447][T10585] can0: slcan on ttyS3. [ 251.165613][T10585] can0 (unregistered): slcan off ttyS3. [ 251.654919][T10593] nvme nvme0: rdma connection establishment failed (-104) [ 253.429319][T10664] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1055'. [ 253.432869][T10664] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1055'. [ 253.759997][T10673] netlink: 'syz.8.1057': attribute type 1 has an invalid length. [ 253.885817][T10676] netlink: 'syz.8.1057': attribute type 10 has an invalid length. [ 253.932855][T10676] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1057'. [ 255.068426][T10676] dummy0: entered promiscuous mode [ 255.069878][T10686] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1059'. [ 255.250365][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.265092][T10691] use of bytesused == 0 is deprecated and will be removed in the future, [ 255.269986][T10691] use the actual size instead. [ 255.276624][T10691] lo speed is unknown, defaulting to 1000 [ 255.280538][T10691] lo speed is unknown, defaulting to 1000 [ 255.286059][T10691] lo speed is unknown, defaulting to 1000 [ 255.293236][T10691] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 255.298754][T10691] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 255.304947][T10691] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 255.312594][T10691] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 255.321816][T10691] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 255.406161][T10691] lo speed is unknown, defaulting to 1000 [ 255.450141][T10691] lo speed is unknown, defaulting to 1000 [ 255.471260][T10691] lo speed is unknown, defaulting to 1000 [ 255.523655][T10691] lo speed is unknown, defaulting to 1000 [ 256.049210][T10694] syzkaller1: entered promiscuous mode [ 256.051023][T10694] syzkaller1: entered allmulticast mode [ 256.550318][T10719] pim6reg: entered allmulticast mode [ 256.697378][T10723] pim6reg: left allmulticast mode [ 257.419626][T10725] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1067'. [ 257.503505][ T5736] Bluetooth: hci4: unexpected event for opcode 0x0c12 [ 257.503703][T10745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.518949][T10745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.777095][ T1034] usb 11-1: new low-speed USB device number 6 using dummy_hcd [ 257.940676][ T1034] usb 11-1: unable to get BOS descriptor or descriptor too short [ 257.947230][ T1034] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x6 is Bulk; changing to Interrupt [ 257.962421][ T1034] usb 11-1: string descriptor 0 read error: -22 [ 257.966937][ T1034] usb 11-1: New USB device found, idVendor=041e, idProduct=3042, bcdDevice= 0.40 [ 257.970799][ T1034] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.011025][T10744] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 258.036744][ T1034] usb 11-1: Quirk or no altset; falling back to MIDI 1.0 [ 258.040145][ T1034] usb 11-1: MIDIStreaming interface descriptor not found [ 258.450926][ T1034] usb 11-1: USB disconnect, device number 6 [ 258.535217][T10771] lo speed is unknown, defaulting to 1000 [ 258.560310][T10772] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1074'. [ 258.564045][T10772] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1074'. [ 258.706964][ T41] usb 13-1: new full-speed USB device number 2 using dummy_hcd [ 258.762507][T10778] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1075'. [ 258.766270][T10778] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1075'. [ 258.772059][T10779] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1075'. [ 258.816965][ T9] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 258.860699][ T41] usb 13-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 258.865412][ T41] usb 13-1: config 1 has an invalid descriptor of length 64, skipping remainder of the config [ 258.867501][T10782] jffs2: notice: (10782) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 258.874331][ T41] usb 13-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1951, setting to 1023 [ 258.881159][ T41] usb 13-1: New USB device found, idVendor=0499, idProduct=2001, bcdDevice= 0.40 [ 258.884387][ T41] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.887216][ T41] usb 13-1: Product: syz [ 258.893072][ T41] usb 13-1: Manufacturer: syz [ 258.897239][ T41] usb 13-1: SerialNumber: syz [ 258.979449][ T9] usb 12-1: Using ep0 maxpacket: 8 [ 258.983080][ T9] usb 12-1: config 0 has no interfaces? [ 258.985645][ T9] usb 12-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 258.989665][ T9] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.996426][ T9] usb 12-1: config 0 descriptor?? [ 259.072824][T10790] can0: slcan on ttyS3. [ 259.137241][T10769] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 259.137656][T10790] can0 (unregistered): slcan off ttyS3. [ 259.142572][T10769] qnx6: wrong signature (magic) in superblock #1. [ 259.145817][T10769] qnx6: unable to read the first superblock [ 259.236756][ T34] usb 12-1: USB disconnect, device number 2 [ 260.388584][T10819] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1085'. [ 260.482151][T10826] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1086'. [ 260.681604][ T41] usb 13-1: Quirk or no altset; falling back to MIDI 1.0 [ 260.686552][ T41] snd-usb-audio 13-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 260.693800][ T41] usb 13-1: Quirk or no altset; falling back to MIDI 1.0 [ 260.696983][ T41] snd-usb-audio 13-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 260.703067][ T41] usb 13-1: Quirk or no altset; falling back to MIDI 1.0 [ 260.746087][ T41] snd-usb-audio 13-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 260.751662][ T41] usb 13-1: USB disconnect, device number 2 [ 260.796147][ T9972] udevd[9972]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb13/13-1/13-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 260.824666][T10836] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1088'. [ 260.873735][T10840] FAULT_INJECTION: forcing a failure. [ 260.873735][T10840] name failslab, interval 1, probability 0, space 0, times 0 [ 260.878486][T10840] CPU: 1 UID: 0 PID: 10840 Comm: syz.7.1090 Tainted: G L syzkaller #0 PREEMPT(full) [ 260.878505][T10840] Tainted: [L]=SOFTLOCKUP [ 260.878509][T10840] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 260.878516][T10840] Call Trace: [ 260.878531][T10840] [ 260.878535][T10840] dump_stack_lvl+0x100/0x190 [ 260.878572][T10840] should_fail_ex.cold+0x5/0xa [ 260.878592][T10840] should_failslab+0xc2/0x120 [ 260.878614][T10840] __kmalloc_noprof+0xfc/0x820 [ 260.878629][T10840] ? tomoyo_encode2+0xfb/0x3c0 [ 260.878692][T10840] tomoyo_encode2+0xfb/0x3c0 [ 260.878710][T10840] tomoyo_encode+0x29/0x50 [ 260.878726][T10840] tomoyo_realpath_from_path+0x18c/0x690 [ 260.878746][T10840] tomoyo_path_number_perm+0x23c/0x580 [ 260.878764][T10840] ? tomoyo_path_number_perm+0x22e/0x580 [ 260.878779][T10840] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 260.878794][T10840] ? get_pid_task+0x106/0x250 [ 260.878828][T10840] ? find_held_lock+0x2b/0x80 [ 260.878842][T10840] ? __fget_files+0x215/0x3d0 [ 260.878853][T10840] ? hook_file_ioctl_common+0x140/0x440 [ 260.878868][T10840] ? __fget_files+0x215/0x3d0 [ 260.878881][T10840] ? __fget_files+0x21f/0x3d0 [ 260.878896][T10840] security_file_ioctl_compat+0xd3/0x230 [ 260.878913][T10840] __ia32_compat_sys_ioctl+0xc2/0x360 [ 260.878932][T10840] __do_fast_syscall_32+0xe7/0x970 [ 260.878978][T10840] ? lockdep_hardirqs_on+0x78/0x100 [ 260.878994][T10840] do_fast_syscall_32+0x32/0x70 [ 260.879027][T10840] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 260.879054][T10840] RIP: 0023:0xf7f06fec [ 260.879069][T10840] Code: Unable to access opcode bytes at 0xf7f06fc2. [ 260.879082][T10840] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 260.879093][T10840] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005393 [ 260.879100][T10840] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 260.879107][T10840] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 260.879113][T10840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 260.879119][T10840] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 260.879133][T10840] [ 260.879189][T10840] ERROR: Out of memory at tomoyo_realpath_from_path. [ 261.534281][T10869] FAULT_INJECTION: forcing a failure. [ 261.534281][T10869] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 261.540056][T10869] CPU: 2 UID: 0 PID: 10869 Comm: syz.0.1097 Tainted: G L syzkaller #0 PREEMPT(full) [ 261.540086][T10869] Tainted: [L]=SOFTLOCKUP [ 261.540093][T10869] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 261.540103][T10869] Call Trace: [ 261.540110][T10869] [ 261.540116][T10869] dump_stack_lvl+0x100/0x190 [ 261.540141][T10869] should_fail_ex.cold+0x5/0xa [ 261.540161][T10869] _copy_from_user+0x2e/0xd0 [ 261.540198][T10869] get_compat_msghdr+0xb3/0x480 [ 261.540249][T10869] ? __pfx_get_compat_msghdr+0x10/0x10 [ 261.540277][T10869] ? rcu_is_watching+0x12/0xc0 [ 261.540316][T10869] ? ___sys_recvmsg+0x177/0x1a0 [ 261.540343][T10869] ? kfree+0x1e5/0x6c0 [ 261.540358][T10869] ? __lock_acquire+0x49f/0x1a40 [ 261.540389][T10869] ___sys_recvmsg+0x193/0x1a0 [ 261.540409][T10869] ? __pfx____sys_recvmsg+0x10/0x10 [ 261.540443][T10869] ? __pfx___might_resched+0x10/0x10 [ 261.540498][T10869] do_recvmmsg+0x54d/0x740 [ 261.540521][T10869] ? __pfx_do_recvmmsg+0x10/0x10 [ 261.540542][T10869] ? find_held_lock+0x2b/0x80 [ 261.540563][T10869] ? ksys_write+0x190/0x250 [ 261.540579][T10869] ? ksys_write+0x190/0x250 [ 261.540604][T10869] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 261.540634][T10869] __sys_recvmmsg+0x21f/0x270 [ 261.540660][T10869] ? __pfx___sys_recvmmsg+0x10/0x10 [ 261.540687][T10869] ? ksys_write+0x1ac/0x250 [ 261.540706][T10869] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 261.540724][T10869] ? __do_fast_syscall_32+0x98/0x970 [ 261.540749][T10869] ? lockdep_hardirqs_on+0x78/0x100 [ 261.540773][T10869] __do_fast_syscall_32+0xe7/0x970 [ 261.540797][T10869] ? lockdep_hardirqs_on+0x78/0x100 [ 261.540823][T10869] do_fast_syscall_32+0x32/0x70 [ 261.540849][T10869] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 261.540872][T10869] RIP: 0023:0xf6feefec [ 261.540896][T10869] Code: Unable to access opcode bytes at 0xf6feefc2. [ 261.540904][T10869] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000151 [ 261.540922][T10869] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000400 [ 261.540935][T10869] RDX: 0000000000000f00 RSI: 0000000000000000 RDI: 0000000000000000 [ 261.540944][T10869] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 261.540954][T10869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 261.540963][T10869] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 261.540983][T10869] [ 262.022300][T10876] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(5) [ 262.024891][T10876] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 262.028171][T10876] vhci_hcd vhci_hcd.0: Device attached [ 262.297055][T10701] usb 54-1: SetAddress Request (2) to port 0 [ 262.299819][T10701] usb 54-1: new SuperSpeed USB device number 2 using vhci_hcd [ 262.340237][T10881] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1099'. [ 262.490299][T10888] kvm: emulating exchange as write [ 262.576278][T10877] vhci_hcd: connection reset by peer [ 262.578329][ T5585] vhci_hcd vhci_hcd.8: stop threads [ 262.580029][ T5585] vhci_hcd vhci_hcd.8: release socket [ 262.582137][ T5585] vhci_hcd vhci_hcd.8: disconnect device [ 262.702062][T10894] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1102'. [ 263.997266][ T5821] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 264.198765][ T5821] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.219771][ T5821] usb 11-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 264.229452][T10909] netlink: Conntrack attr has 12 unknown bytes [ 264.231485][T10909] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 264.247359][ T5821] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.331749][ T5821] usb 11-1: config 0 descriptor?? [ 264.676055][ T5821] usbhid 11-1:0.0: can't add hid device: -71 [ 264.719145][ T5821] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 265.319664][ T5821] usb 11-1: USB disconnect, device number 7 [ 265.807481][T10917] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 265.809680][T10917] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 265.817407][T10917] vhci_hcd vhci_hcd.0: Device attached [ 265.930175][T10920] wg2 speed is unknown, defaulting to 1000 [ 265.984492][T10920] wg2 speed is unknown, defaulting to 1000 [ 265.991907][T10920] wg2 speed is unknown, defaulting to 1000 [ 266.087099][ T6099] usb 52-1: SetAddress Request (2) to port 0 [ 266.093236][ T6099] usb 52-1: new SuperSpeed USB device number 2 using vhci_hcd [ 266.136993][ T5821] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 266.298447][ T5821] usb 11-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 266.301906][ T5821] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 256 [ 266.305447][ T5821] usb 11-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 266.311193][ T5821] usb 11-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 266.314241][ T5821] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.316778][ T5821] usb 11-1: Product: syz [ 266.318332][ T5821] usb 11-1: Manufacturer: syz [ 266.319858][ T5821] usb 11-1: SerialNumber: syz [ 266.606271][ T5520] wg2 speed is unknown, defaulting to 1000 [ 266.611628][T10920] infiniband syz2: set active [ 266.625110][T10920] infiniband syz2: added wg2 [ 267.006783][T10920] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 267.014214][T10938] lo speed is unknown, defaulting to 1000 [ 267.020863][T10920] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 267.022859][T10938] wg2 speed is unknown, defaulting to 1000 [ 267.036915][T10920] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 267.126640][T10920] RDS/IB: syz2: added [ 267.160281][T10920] smc: adding ib device syz2 with port count 1 [ 267.167096][T10920] smc: ib device syz2 port 1 has no pnetid [ 267.195046][ T5520] wg2 speed is unknown, defaulting to 1000 [ 267.216597][T10940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1112'. [ 267.382627][T10920] wg2 speed is unknown, defaulting to 1000 [ 267.398528][T10701] usb 54-1: device descriptor read/8, error -110 [ 267.707193][T10918] vhci_hcd: connection reset by peer [ 267.709964][ T5585] vhci_hcd vhci_hcd.7: stop threads [ 267.711730][ T5585] vhci_hcd vhci_hcd.7: release socket [ 267.714116][ T5585] vhci_hcd vhci_hcd.7: disconnect device [ 267.716551][T10920] wg2 speed is unknown, defaulting to 1000 [ 267.807597][T10701] usb usb54-port1: attempt power cycle [ 267.841498][T10920] wg2 speed is unknown, defaulting to 1000 [ 267.913587][T10957] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1118'. [ 267.930685][T10957] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1118'. [ 267.953048][ T34] usb 11-1: USB disconnect, device number 8 [ 267.994055][T10959] ubi16: attaching mtd0 [ 268.001886][T10959] ubi16: scanning is finished [ 268.003578][T10959] ubi16 error: ubi_read_volume_table: the layout volume was not found [ 268.093546][T10920] wg2 speed is unknown, defaulting to 1000 [ 268.390100][T10701] usb usb54-port1: unable to enumerate USB device [ 268.462368][T10959] ubi16 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 269.497285][T11001] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1127'. [ 269.514614][T10998] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 270.181905][ T1159] Bluetooth: (null): Too short H5 packet [ 270.184049][ T1159] Bluetooth: (null): Invalid header checksum [ 270.785954][T11046] IPv6: Can't replace route, no match found [ 271.215539][ T6099] usb 52-1: device descriptor read/8, error -110 [ 271.463488][T11049] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 271.487092][ T9] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 271.628625][ T6099] usb usb52-port1: attempt power cycle [ 271.649548][ T9] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.657078][ T9] usb 12-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 271.666992][ T9] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.676996][ T9] usb 12-1: config 0 descriptor?? [ 271.888982][ T9] usbhid 12-1:0.0: can't add hid device: -71 [ 271.891148][ T9] usbhid 12-1:0.0: probe with driver usbhid failed with error -71 [ 271.897754][ T9] usb 12-1: USB disconnect, device number 3 [ 272.231704][ T6099] usb usb52-port1: unable to enumerate USB device [ 272.357365][ T9] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 272.541112][ T9] usb 12-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 272.546966][ T9] usb 12-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 256 [ 272.550821][ T9] usb 12-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 272.559326][ T9] usb 12-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 272.562542][ T9] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.565153][ T9] usb 12-1: Product: syz [ 272.566621][ T9] usb 12-1: Manufacturer: syz [ 272.569519][ T9] usb 12-1: SerialNumber: syz [ 273.637450][T11079] ftl_cs: FTL header not found. [ 273.674295][T11082] jffs2: notice: (11082) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 273.679937][T11079] block2mtd: mtd1: [/dev/loop0] erase_size = 64KiB [65536] [ 273.767771][T11088] netlink: NAT attribute has 1 unknown bytes [ 273.769923][T11088] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 274.109061][ T24] usb 12-1: USB disconnect, device number 4 [ 274.782137][T11098] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 274.784245][T11098] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 274.790451][T11098] vhci_hcd vhci_hcd.0: Device attached [ 274.967063][ T5843] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 275.027005][ T5843] usb 51-1: new full-speed USB device number 2 using vhci_hcd [ 275.606562][T11107] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1155'. [ 275.612338][T11108] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(9) [ 275.612684][T11107] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 275.614437][T11108] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 275.617085][T11108] vhci_hcd vhci_hcd.0: Device attached [ 275.649423][ T5736] Bluetooth: hci2: Unable to find connection for big 0x00 [ 275.781283][T11109] vhci_hcd: connection closed [ 275.783175][T11101] vhci_hcd: connection reset by peer [ 275.783717][ T5807] vhci_hcd vhci_hcd.7: stop threads [ 275.790578][ T5807] vhci_hcd vhci_hcd.7: release socket [ 275.792344][ T5807] vhci_hcd vhci_hcd.7: disconnect device [ 275.796976][ T5807] vhci_hcd vhci_hcd.7: stop threads [ 275.798762][ T5807] vhci_hcd vhci_hcd.7: release socket [ 275.801274][T11112] device-mapper: ioctl: Invalid ioctl structure: name my, dev f800 [ 275.804184][ T5807] vhci_hcd vhci_hcd.7: disconnect device [ 275.854720][T11115] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1157'. [ 275.854920][T11116] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1157'. [ 275.882140][T11115] team0 (unregistering): Port device team_slave_0 removed [ 275.901610][T11115] team0 (unregistering): Port device team_slave_1 removed [ 276.054486][T11115] netlink: 'syz.8.1157': attribute type 1 has an invalid length. [ 276.061765][T11115] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1157'. [ 276.065412][T11117] netlink: 'syz.8.1157': attribute type 1 has an invalid length. [ 276.069549][T11117] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1157'. [ 276.827724][ T6099] usb 11-1: new high-speed USB device number 9 using dummy_hcd [ 277.244354][T11145] netlink: 'syz.0.1162': attribute type 1 has an invalid length. [ 277.449206][ T6099] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.465619][ T6099] usb 11-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 277.479934][ T6099] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.554387][ T6099] usb 11-1: config 0 descriptor?? [ 277.795171][ T6099] usbhid 11-1:0.0: can't add hid device: -71 [ 277.798482][ T6099] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 277.802208][ T6099] usb 11-1: USB disconnect, device number 9 [ 277.846552][T11147] binder_alloc: 11146: binder_alloc_buf, no vma [ 278.756956][ T6099] usb 11-1: new high-speed USB device number 10 using dummy_hcd [ 278.981415][ T6099] usb 11-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 278.984757][ T6099] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 256 [ 278.988110][ T6099] usb 11-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 278.994734][ T6099] usb 11-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 278.997759][ T6099] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.000417][ T6099] usb 11-1: Product: syz [ 279.001823][ T6099] usb 11-1: Manufacturer: syz [ 279.003375][ T6099] usb 11-1: SerialNumber: syz [ 279.373116][T11172] netlink: 'syz.7.1170': attribute type 1 has an invalid length. [ 279.574229][T11182] dlm: no local IP address has been set [ 279.576719][T11182] dlm: cannot start dlm midcomms -107 [ 280.171890][T11185] overlay: Unknown parameter '/' [ 280.177288][ T5843] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 280.411014][ T42] audit: type=1800 audit(1786236709.379:142): pid=11192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1174" name="power" dev="configfs" ino=32652 res=0 errno=0 [ 281.213371][T11202] syzkaller0: entered promiscuous mode [ 281.215677][T11202] syzkaller0: entered allmulticast mode [ 281.267349][ T41] usb 11-1: USB disconnect, device number 10 [ 281.739997][T10701] usb usb52-port1: attempt power cycle [ 281.792569][T11223] xt_hashlimit: invalid interval [ 281.821290][T11208] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 281.826595][T11208] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 281.829984][T11208] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 281.833987][T11208] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 281.863154][T11228] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1184'. [ 281.988064][T11237] IPVS: set_ctl: invalid protocol: 255 10.1.1.1:20001 [ 281.994075][T11237] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 282.003046][T11236] geneve3: entered promiscuous mode [ 282.011187][ T24] IPVS: starting estimator thread 0... [ 282.012153][T11236] geneve3: entered allmulticast mode [ 282.106991][T11238] IPVS: using max 42 ests per chain, 100800 per kthread [ 282.994540][T11251] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1193'. [ 283.102173][T10701] usb usb52-port1: unable to enumerate USB device [ 283.156251][T11260] binder: 11259:11260 ioctl c0306201 80000080 returned -14 [ 283.161247][T11260] binder: 11259:11260 ioctl c0306201 800003c0 returned -14 [ 283.458304][T10852] usb 12-1: new high-speed USB device number 5 using dummy_hcd [ 283.617841][T10852] usb 12-1: too many configurations: 9, using maximum allowed: 8 [ 283.623270][T10852] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 283.629318][T10852] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 283.639965][T10852] usb 12-1: config 0 interface 0 has no altsetting 0 [ 283.646196][T10852] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 283.652020][T10852] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 283.655858][T10852] usb 12-1: config 0 interface 0 has no altsetting 0 [ 283.707714][T10852] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 283.846443][T10852] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 283.859198][T10852] usb 12-1: config 0 interface 0 has no altsetting 0 [ 283.867951][ T64] Bluetooth: hci1: command 0x0419 tx timeout [ 283.868777][T10852] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 283.870747][ T64] Bluetooth: hci4: command 0x0c1a tx timeout [ 283.877914][ T5734] Bluetooth: hci0: command 0x0c1a tx timeout [ 283.884763][ T5736] Bluetooth: hci2: command 0x040f tx timeout [ 283.886547][T10852] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 283.897465][T10852] usb 12-1: config 0 interface 0 has no altsetting 0 [ 283.902195][T10852] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 283.906053][T10852] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 283.910851][T10852] usb 12-1: config 0 interface 0 has no altsetting 0 [ 283.914447][T10852] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 283.918333][T10852] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 283.922401][T10852] usb 12-1: config 0 interface 0 has no altsetting 0 [ 283.926578][T10852] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 283.929921][T10852] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 283.933395][T10852] usb 12-1: config 0 interface 0 has no altsetting 0 [ 283.937980][T10852] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 283.944781][T10852] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 283.949714][T10852] usb 12-1: config 0 interface 0 has no altsetting 0 [ 283.958454][T10852] usb 12-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 283.962559][T10852] usb 12-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 283.967508][T10852] usb 12-1: Product: syz [ 283.969301][T10852] usb 12-1: Manufacturer: syz [ 283.971173][T10852] usb 12-1: SerialNumber: syz [ 283.974974][T10852] usb 12-1: config 0 descriptor?? [ 283.989325][T10852] yurex 12-1:0.0: USB YUREX device now attached to Yurex #0 [ 284.294775][ C1] usb 12-1: yurex_control_callback - control failed: -71 [ 284.309163][ C1] usb 12-1: yurex_control_callback - control failed: -71 [ 284.314532][T10852] usb 12-1: USB disconnect, device number 5 [ 284.344306][T10852] yurex 12-1:0.0: USB YUREX #0 now disconnected [ 284.559795][T11309] ip6gretap0: entered promiscuous mode [ 285.419401][T11323] FAULT_INJECTION: forcing a failure. [ 285.419401][T11323] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 285.425098][T11323] CPU: 0 UID: 0 PID: 11323 Comm: syz.6.1212 Tainted: G L syzkaller #0 PREEMPT(full) [ 285.425143][T11323] Tainted: [L]=SOFTLOCKUP [ 285.425150][T11323] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 285.425160][T11323] Call Trace: [ 285.425167][T11323] [ 285.425174][T11323] dump_stack_lvl+0x100/0x190 [ 285.425201][T11323] should_fail_ex.cold+0x5/0xa [ 285.425223][T11323] _copy_from_user+0x2e/0xd0 [ 285.425250][T11323] snd_pcm_oss_write2+0x1c2/0x400 [ 285.425277][T11323] ? __pfx_snd_pcm_oss_write2+0x10/0x10 [ 285.425289][T11323] ? snd_pcm_kernel_ioctl+0x12e/0x280 [ 285.425315][T11323] ? snd_pcm_oss_prepare+0x11e/0x240 [ 285.425328][T11323] snd_pcm_oss_write+0x729/0xa30 [ 285.425341][T11323] ? security_file_permission+0x76/0x210 [ 285.425360][T11323] vfs_write+0x2aa/0x1050 [ 285.425373][T11323] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 285.425387][T11323] ? __pfx_vfs_write+0x10/0x10 [ 285.425396][T11323] ? find_held_lock+0x2b/0x80 [ 285.425410][T11323] ? __fget_files+0x215/0x3d0 [ 285.425421][T11323] ? __fget_files+0x215/0x3d0 [ 285.425433][T11323] ? __fget_files+0x21f/0x3d0 [ 285.425447][T11323] ksys_write+0x12a/0x250 [ 285.425458][T11323] ? __pfx_ksys_write+0x10/0x10 [ 285.425468][T11323] ? ksys_write+0x1ac/0x250 [ 285.425478][T11323] ? __pfx_ksys_write+0x10/0x10 [ 285.425491][T11323] __do_fast_syscall_32+0xe7/0x970 [ 285.425513][T11323] ? lockdep_hardirqs_on+0x78/0x100 [ 285.425544][T11323] do_fast_syscall_32+0x32/0x70 [ 285.425568][T11323] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 285.425603][T11323] RIP: 0023:0xf70aefec [ 285.425628][T11323] Code: Unable to access opcode bytes at 0xf70aefc2. [ 285.425636][T11323] RSP: 002b:00000000f547c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 285.425652][T11323] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000800012c0 [ 285.425662][T11323] RDX: 0000000000004000 RSI: 0000000000000000 RDI: 0000000000000000 [ 285.425671][T11323] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 285.425681][T11323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 285.425691][T11323] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 285.425716][T11323] [ 286.247007][T11342] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 286.325979][T11348] FAULT_INJECTION: forcing a failure. [ 286.325979][T11348] name failslab, interval 1, probability 0, space 0, times 0 [ 286.331316][T11348] CPU: 1 UID: 0 PID: 11348 Comm: syz.7.1216 Tainted: G L syzkaller #0 PREEMPT(full) [ 286.331347][T11348] Tainted: [L]=SOFTLOCKUP [ 286.331353][T11348] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 286.331364][T11348] Call Trace: [ 286.331370][T11348] [ 286.331378][T11348] dump_stack_lvl+0x100/0x190 [ 286.331405][T11348] should_fail_ex.cold+0x5/0xa [ 286.331426][T11348] should_failslab+0xc2/0x120 [ 286.331451][T11348] __kmalloc_noprof+0xfc/0x820 [ 286.331480][T11348] ? tomoyo_encode2+0xfb/0x3c0 [ 286.331510][T11348] tomoyo_encode2+0xfb/0x3c0 [ 286.331539][T11348] tomoyo_encode+0x29/0x50 [ 286.331562][T11348] tomoyo_realpath_from_path+0x18c/0x690 [ 286.331593][T11348] tomoyo_path_number_perm+0x23c/0x580 [ 286.331613][T11348] ? tomoyo_path_number_perm+0x22e/0x580 [ 286.331637][T11348] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 286.331659][T11348] ? get_pid_task+0x106/0x250 [ 286.331705][T11348] ? find_held_lock+0x2b/0x80 [ 286.331727][T11348] ? __fget_files+0x215/0x3d0 [ 286.331742][T11348] ? hook_file_ioctl_common+0x140/0x440 [ 286.331764][T11348] ? __fget_files+0x215/0x3d0 [ 286.331785][T11348] ? __fget_files+0x21f/0x3d0 [ 286.331806][T11348] security_file_ioctl_compat+0xd3/0x230 [ 286.331831][T11348] __ia32_compat_sys_ioctl+0xc2/0x360 [ 286.331861][T11348] __do_fast_syscall_32+0xe7/0x970 [ 286.331897][T11348] ? lockdep_hardirqs_on+0x78/0x100 [ 286.331923][T11348] do_fast_syscall_32+0x32/0x70 [ 286.331949][T11348] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 286.331972][T11348] RIP: 0023:0xf7f06fec [ 286.332003][T11348] Code: Unable to access opcode bytes at 0xf7f06fc2. [ 286.332011][T11348] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 286.332029][T11348] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000c0306201 [ 286.332040][T11348] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 286.332050][T11348] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 286.332060][T11348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 286.332070][T11348] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 286.332094][T11348] [ 286.332111][T11348] ERROR: Out of memory at tomoyo_realpath_from_path. [ 286.420398][ T24] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 286.492973][T11356] tipc: Failed to obtain node identity [ 286.495424][T11356] tipc: Enabling of bearer rejected, failed to enable media [ 286.922152][T11387] jffs2: notice: (11387) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 293.924376][T11426] syzkaller0: entered promiscuous mode [ 293.926204][T11426] syzkaller0: entered allmulticast mode [ 294.047026][T10701] usb 13-1: new high-speed USB device number 3 using dummy_hcd [ 294.215580][T11448] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1240'. [ 294.267426][T10701] usb 13-1: Using ep0 maxpacket: 16 [ 294.270668][T10701] usb 13-1: config 0 has an invalid interface number: 8 but max is 0 [ 294.273374][T10701] usb 13-1: config 0 has no interface number 0 [ 294.275331][T10701] usb 13-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 294.278950][T10701] usb 13-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 294.283215][T10701] usb 13-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 294.286148][T10701] usb 13-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 294.288814][T10701] usb 13-1: Product: syz [ 294.290250][T10701] usb 13-1: SerialNumber: syz [ 294.293617][T10701] usb 13-1: config 0 descriptor?? [ 294.297704][T10701] cm109 13-1:0.8: invalid payload size 0, expected 4 [ 294.301092][T10701] input: CM109 USB driver as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.8/input/input15 [ 294.506280][ C1] cm109 13-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 294.705017][T11461] syzkaller0: entered promiscuous mode [ 294.706989][T11461] syzkaller0: entered allmulticast mode [ 294.714212][T11415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.718115][T11415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.748380][ C1] cm109 13-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 294.753150][ C1] cm109 13-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 294.755634][ C1] cm109 13-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 294.758189][ C1] cm109 13-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 294.761462][ C1] cm109 13-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 294.764017][ C1] cm109 13-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 294.766243][ C1] cm109 13-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 294.769183][T10852] usb 13-1: USB disconnect, device number 3 [ 294.784244][T10852] cm109 13-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 294.867072][ T5807] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.870449][ T5807] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.873615][ T5807] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.877454][ T5807] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.880282][ T5807] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.063933][T11465] program syz.7.1245 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 295.067534][T11465] program syz.7.1245 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 295.070552][T11465] program syz.7.1245 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 295.073677][T11465] program syz.7.1245 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 295.076730][T11465] program syz.7.1245 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 295.079752][T11465] program syz.7.1245 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 295.083004][T11465] program syz.7.1245 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 295.086311][T11465] program syz.7.1245 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 295.089484][T11465] program syz.7.1245 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 295.092899][T11465] program syz.7.1245 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 295.096157][T11465] program syz.7.1245 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 295.099547][T11465] program syz.7.1245 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 295.102530][T11465] program syz.7.1245 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 295.105686][T11465] program syz.7.1245 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 295.109011][T11465] program syz.7.1245 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 295.112397][T11465] program syz.7.1245 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 295.115418][T11465] program syz.7.1245 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 295.118615][T11465] program syz.7.1245 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 295.122238][T11465] program syz.7.1245 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 295.125592][T11465] program syz.7.1245 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 295.129107][T11465] program syz.7.1245 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 295.132313][T11465] program syz.7.1245 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 295.136379][T11465] program syz.7.1245 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 295.139533][T11465] program syz.7.1245 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 295.142703][T11465] program syz.7.1245 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 295.145795][T11465] program syz.7.1245 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 295.149250][T11465] program syz.7.1245 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 295.152356][T11465] program syz.7.1245 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 295.155273][T11465] program syz.7.1245 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 295.158398][T11465] program syz.7.1245 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 295.161466][T11465] program syz.7.1245 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 295.164501][T11465] program syz.7.1245 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 295.167770][T11465] program syz.7.1245 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 295.170712][T11465] program syz.7.1245 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 295.173633][T11465] program syz.7.1245 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 295.176563][T11465] program syz.7.1245 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 295.179640][T11465] program syz.7.1245 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 295.182717][T11465] program syz.7.1245 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 295.822168][T11486] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 295.827355][T11486] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 295.883041][T11486] ip6gre1: left allmulticast mode [ 295.893738][T11486] bond2: left promiscuous mode [ 295.895354][T11486] bond2: left allmulticast mode [ 295.906973][ T7492] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 295.907380][ T5821] lo speed is unknown, defaulting to 1000 [ 295.909661][ T7492] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.909691][ T7492] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 295.909706][ T7492] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.909725][ T7492] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 295.909750][ T7492] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.909768][ T7492] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 295.909783][ T7492] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.909801][ T7492] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 295.909815][ T7492] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.961614][ T5821] syz0: Port: 1 Link DOWN [ 296.259715][T11493] ntfs3(nullb0): Primary boot signature is not NTFS. [ 296.262664][T11493] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 296.308577][T11496] ALSA: mixer_oss: invalid OSS volume 'PHl' [ 296.311717][T11496] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1257'. [ 296.486896][T11503] ntfs3(nullb0): Primary boot signature is not NTFS. [ 296.490632][T11503] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 296.864139][T11506] FAULT_INJECTION: forcing a failure. [ 296.864139][T11506] name failslab, interval 1, probability 0, space 0, times 0 [ 296.873930][T11517] siw: device registration error -23 [ 296.876982][T11506] CPU: 0 UID: 0 PID: 11506 Comm: syz.6.1258 Tainted: G L syzkaller #0 PREEMPT(full) [ 296.877002][T11506] Tainted: [L]=SOFTLOCKUP [ 296.877006][T11506] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 296.877013][T11506] Call Trace: [ 296.877017][T11506] [ 296.877021][T11506] dump_stack_lvl+0x100/0x190 [ 296.877039][T11506] should_fail_ex.cold+0x5/0xa [ 296.877053][T11506] should_failslab+0xc2/0x120 [ 296.877069][T11506] kmem_cache_alloc_noprof+0x91/0x6a0 [ 296.877084][T11506] ? anon_vma_clone+0x2ba/0xcd0 [ 296.877105][T11506] anon_vma_clone+0x2ba/0xcd0 [ 296.877130][T11506] __split_vma+0x51f/0xda0 [ 296.877145][T11506] ? __pfx___split_vma+0x10/0x10 [ 296.877165][T11506] ? __pfx_mas_prev+0x10/0x10 [ 296.877186][T11506] vms_gather_munmap_vmas+0x3a5/0x1720 [ 296.877206][T11506] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 296.877230][T11506] ? mas_walk+0x6ef/0x9b0 [ 296.877264][T11506] __mmap_region+0x4a7/0x2db0 [ 296.877279][T11506] ? __pfx___mmap_region+0x10/0x10 [ 296.877298][T11506] ? __pfx_native_flush_tlb_one_user+0x10/0x10 [ 296.877314][T11506] ? __alloc_frozen_pages_noprof+0x2d1/0x2dc0 [ 296.877344][T11506] ? __lock_acquire+0x49f/0x1a40 [ 296.877383][T11506] mmap_region+0x35d/0x620 [ 296.877398][T11506] ? __pfx_mmap_region+0x10/0x10 [ 296.877410][T11506] ? shmem_get_unmapped_area+0x141/0x960 [ 296.877422][T11506] ? cap_mmap_addr+0x4b/0x120 [ 296.877434][T11506] ? bpf_lsm_mmap_addr+0x9/0x30 [ 296.877445][T11506] ? security_mmap_addr+0x71/0x1e0 [ 296.877460][T11506] ? __get_unmapped_area+0x255/0x3e0 [ 296.877478][T11506] do_mmap+0xc63/0x12f0 [ 296.877497][T11506] ? __pfx_do_mmap+0x10/0x10 [ 296.877513][T11506] ? __pfx_down_write_killable+0x10/0x10 [ 296.877533][T11506] vm_mmap_pgoff+0x29e/0x470 [ 296.877552][T11506] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 296.877569][T11506] ? __mutex_unlock_slowpath+0x35d/0x930 [ 296.877587][T11506] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 296.877605][T11506] ksys_mmap_pgoff+0xe4/0x610 [ 296.877638][T11506] ? fput+0x79/0x100 [ 296.877651][T11506] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 296.877666][T11506] ? ksys_write+0x1ac/0x250 [ 296.877676][T11506] ? __pfx_ksys_write+0x10/0x10 [ 296.877690][T11506] __do_fast_syscall_32+0xe7/0x970 [ 296.877707][T11506] ? lockdep_hardirqs_on+0x78/0x100 [ 296.877723][T11506] do_fast_syscall_32+0x32/0x70 [ 296.877740][T11506] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 296.877755][T11506] RIP: 0023:0xf70aefec [ 296.877769][T11506] Code: Unable to access opcode bytes at 0xf70aefc2. [ 296.877774][T11506] RSP: 002b:00000000f547c50c EFLAGS: 00000292 ORIG_RAX: 00000000000000c0 [ 296.877786][T11506] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000200000 [ 296.877792][T11506] RDX: 000000000300000b RSI: 0000000000204031 RDI: 00000000ffffffff [ 296.877799][T11506] RBP: 00000000ec776000 R08: 0000000000000000 R09: 0000000000000000 [ 296.877805][T11506] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 296.877811][T11506] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 296.877825][T11506] [ 296.886749][T11517] nvmet: adding nsid 1 to subsystem testnqn [ 296.907062][ T42] audit: type=1800 audit(1786236725.849:143): pid=11517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1261" name="attr_allow_any_host" dev="configfs" ino=36006 res=0 errno=0 [ 296.920053][T11517] nvmet_rdma: binding CM ID to 172.20.20.20:4421 failed (-99) [ 296.929119][ T42] audit: type=1800 audit(1786236725.889:144): pid=11517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1261" name="addr_trtype" dev="configfs" ino=36008 res=0 errno=0 [ 296.929414][ T42] audit: type=1800 audit(1786236725.889:145): pid=11517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1261" name="addr_adrfam" dev="configfs" ino=36009 res=0 errno=0 [ 296.929439][ T42] audit: type=1800 audit(1786236725.889:146): pid=11517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1261" name="addr_traddr" dev="configfs" ino=36010 res=0 errno=0 [ 296.929536][ T42] audit: type=1800 audit(1786236725.889:147): pid=11517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1261" name="addr_trsvcid" dev="configfs" ino=36011 res=0 errno=0 [ 297.112852][T11517] nvme nvme0: rdma connection establishment failed (-104) [ 297.218780][T11525] No source specified [ 297.698536][T11545] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 297.701352][T11545] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 297.714892][T11545] vhci_hcd vhci_hcd.0: Device attached [ 297.735634][T11556] vhci_hcd: connection closed [ 297.746683][ T5585] vhci_hcd vhci_hcd.6: stop threads [ 297.752031][ T5585] vhci_hcd vhci_hcd.6: release socket [ 297.755115][ T5585] vhci_hcd vhci_hcd.6: disconnect device [ 297.895679][T11561] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 300.041344][T11582] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1273'. [ 300.137676][T11592] netlink: 88 bytes leftover after parsing attributes in process `syz.7.1276'. [ 300.400788][T11608] loop9: detected capacity change from 0 to 255852544 [ 301.366599][T11636] dlm: plock device version mismatch: kernel (1.2.0), user (2227959591.3024829116.1683162433) [ 301.557045][T11646] loop5: detected capacity change from 0 to 7 [ 301.564171][T11649] pimreg: tun_chr_ioctl cmd 1074025675 [ 301.566538][T11649] pimreg: persist disabled [ 301.603674][T11646] Dev loop5: unable to read RDB block 7 [ 301.607823][T11646] loop5: unable to read partition table [ 301.608948][T11640] ceph: No mds server is up or the cluster is laggy [ 301.609756][T11646] loop5: partition table beyond EOD, truncated [ 301.613879][ T5808] libceph: connect (1)[c::]:6789 error -101 [ 301.615933][ T5808] libceph: mon0 (1)[c::]:6789 connect error [ 301.615985][T11646] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 301.798058][T11666] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1294'. [ 301.801514][T11666] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1294'. [ 301.804587][T11666] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1294'. [ 301.815488][T11666] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1294'. [ 301.991402][T11678] netlink: 116 bytes leftover after parsing attributes in process `syz.6.1298'. [ 301.995562][T11676] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1297'. [ 302.000529][T11676] ip6gre1: entered promiscuous mode [ 302.002564][T11676] ip6gre1: entered allmulticast mode [ 302.009097][T11676] netlink: 'syz.8.1297': attribute type 6 has an invalid length. [ 302.011597][T11676] netlink: 72 bytes leftover after parsing attributes in process `syz.8.1297'. [ 302.079543][T11682] ip6gre1: entered allmulticast mode [ 302.082529][ T5585] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 302.904957][T11697] bridge0: port 3(syz_tun) entered blocking state [ 302.911877][T11697] bridge0: port 3(syz_tun) entered disabled state [ 302.914377][T11697] syz_tun: entered allmulticast mode [ 302.923422][T11697] syz_tun: entered promiscuous mode [ 302.925611][T11697] bridge0: port 3(syz_tun) entered blocking state [ 302.927825][T11697] bridge0: port 3(syz_tun) entered forwarding state [ 303.030559][T11702] o2cb: This node has not been configured. [ 303.042669][T11706] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1306'. [ 303.043037][T11702] o2cb: Cluster check failed. Fix errors before retrying. [ 303.057154][T11704] binder: 11703:11704 ioctl 400c620e 80000100 returned -22 [ 303.057182][T11702] (syz.7.1305,11702,1):user_dlm_register:674 ERROR: status = -22 [ 303.076915][T11702] (syz.7.1305,11702,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 303.082007][T11708] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 303.134915][T11715] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 303.940980][T10701] wg2 speed is unknown, defaulting to 1000 [ 306.057002][ T5834] usb 13-1: new full-speed USB device number 4 using dummy_hcd [ 306.208432][ T5834] usb 13-1: not running at top speed; connect to a high speed hub [ 306.213000][ T5834] usb 13-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 306.217873][ T5834] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 306.222420][ T5834] usb 13-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 306.228150][ T5834] usb 13-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 306.231948][ T5834] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.243366][ T5834] keyspan 13-1:1.0: Keyspan 2 port adapter converter detected [ 306.250347][ T5834] keyspan 13-1:1.0: found no endpoint descriptor for endpoint 2 [ 306.262153][ T5834] usb 13-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 306.272191][ T5834] keyspan 13-1:1.0: found no endpoint descriptor for endpoint 88 [ 306.275722][ T5834] keyspan 13-1:1.0: found no endpoint descriptor for endpoint 6 [ 306.288899][ T5834] usb 13-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 306.347161][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 306.552510][T11751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.560309][T11751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.722640][T11755] __nla_validate_parse: 1 callbacks suppressed [ 306.722655][T11755] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1319'. [ 306.990532][T11764] tmpfs: Unknown parameter '' [ 307.033565][T11767] kAFS: unable to lookup cell '' [ 307.180869][ T9] usb 13-1: USB disconnect, device number 4 [ 307.187504][ T9] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 307.194124][ T9] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 307.197855][ T9] keyspan 13-1:1.0: device disconnected [ 308.227201][ T5808] usb 11-1: new high-speed USB device number 11 using dummy_hcd [ 308.406364][ T5808] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.413878][ T5808] usb 11-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 308.419878][ T5808] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.457675][ T5808] usb 11-1: config 0 descriptor?? [ 308.657032][ T42] audit: type=1800 audit(1786236737.619:148): pid=11787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1327" name="zoned" dev="configfs" ino=37181 res=0 errno=0 [ 308.665570][ T42] audit: type=1800 audit(1786236737.629:149): pid=11787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1327" name="memory_backed" dev="configfs" ino=37182 res=0 errno=0 [ 308.672748][T11787] null_blk: nullb1: using native zone append [ 308.676493][ T42] audit: type=1800 audit(1786236737.629:150): pid=11787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1327" name="zone_nr_conv" dev="configfs" ino=37184 res=0 errno=0 [ 308.676542][ T42] audit: type=1800 audit(1786236737.629:151): pid=11787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1327" name="power" dev="configfs" ino=37185 res=0 errno=0 [ 308.758825][ T5808] usbhid 11-1:0.0: can't add hid device: -71 [ 308.770079][T11787] null_blk: disk nullb1 created [ 308.790670][ T5808] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 308.921313][ T5808] usb 11-1: USB disconnect, device number 11 [ 309.397389][ T5808] usb 11-1: new high-speed USB device number 12 using dummy_hcd [ 309.557957][ T5808] usb 11-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 309.562134][ T5808] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 256 [ 309.566044][ T5808] usb 11-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 309.579464][ T5808] usb 11-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 309.582420][ T5808] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.584918][ T5808] usb 11-1: Product: syz [ 309.586395][ T5808] usb 11-1: Manufacturer: syz [ 309.588417][ T5808] usb 11-1: SerialNumber: syz [ 310.954481][T11819] lo speed is unknown, defaulting to 1000 [ 310.967086][T11819] wg2 speed is unknown, defaulting to 1000 [ 311.533643][ T9] usb 11-1: USB disconnect, device number 12 [ 311.709390][T11835] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 312.690904][T11853] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 313.390221][T11851] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 313.513819][ T5808] usb 13-1: new high-speed USB device number 5 using dummy_hcd [ 313.721940][ T5808] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.782873][ T5808] usb 13-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 313.830320][ T5808] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.875468][ T5808] usb 13-1: config 0 descriptor?? [ 314.129438][ T5808] usbhid 13-1:0.0: can't add hid device: -71 [ 314.152592][ T5808] usbhid 13-1:0.0: probe with driver usbhid failed with error -71 [ 314.263263][ T5808] usb 13-1: USB disconnect, device number 5 [ 314.340193][T11883] pim6reg: entered allmulticast mode [ 314.349413][T11883] pim6reg: left allmulticast mode [ 314.496531][T11887] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 314.538712][T10701] usb 12-1: new high-speed USB device number 6 using dummy_hcd [ 314.664061][T11893] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 314.687201][T10701] usb 12-1: Using ep0 maxpacket: 16 [ 314.697942][T10701] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.702928][T10701] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.707406][T10701] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 314.718959][T10701] usb 12-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 314.728131][T10701] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.740386][T10701] usb 12-1: config 0 descriptor?? [ 314.747076][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 314.757494][ T5808] usb 13-1: new high-speed USB device number 6 using dummy_hcd [ 314.930286][ T5808] usb 13-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 314.934878][ T5808] usb 13-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 256 [ 314.939362][ T5808] usb 13-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 314.949240][ T5808] usb 13-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 314.953284][ T5808] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.956715][ T5808] usb 13-1: Product: syz [ 314.958715][ T5808] usb 13-1: Manufacturer: syz [ 314.960825][ T5808] usb 13-1: SerialNumber: syz [ 314.997443][T10852] usb 11-1: new high-speed USB device number 13 using dummy_hcd [ 315.149783][T10852] usb 11-1: config 1 has an invalid descriptor of length 118, skipping remainder of the config [ 315.154920][T10852] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 315.159687][T10852] usb 11-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 315.168555][T10701] usbhid 12-1:0.0: can't add hid device: -71 [ 315.173235][T10701] usbhid 12-1:0.0: probe with driver usbhid failed with error -71 [ 315.178854][T10852] usb 11-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 315.183018][T10852] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.189006][T10852] usb 11-1: Product: syz [ 315.193127][T10701] usb 12-1: USB disconnect, device number 6 [ 315.196797][T10852] usb 11-1: Manufacturer: syz [ 315.201752][T10852] usb 11-1: SerialNumber: syz [ 315.216191][T11893] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 315.224018][T10852] usbserial_generic 11-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 315.229634][T10852] usbserial_generic 11-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 315.234406][T10852] usbserial_generic 11-1:1.0: generic converter detected [ 315.248162][T10852] usb 11-1: generic converter now attached to ttyUSB0 [ 315.429805][T10701] usb 11-1: USB disconnect, device number 13 [ 315.445831][T10701] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 315.452396][T10701] usbserial_generic 11-1:1.0: device disconnected [ 315.710979][T11902] i2c i2c-0: delete_device: Can't parse I2C address [ 316.370522][T11920] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 316.510968][T10701] usb 13-1: USB disconnect, device number 6 [ 316.686079][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.242824][T11947] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 318.006192][T11961] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 319.564288][T11971] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 319.774972][T11972] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 319.852792][T11980] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 321.890376][T11999] jffs2: notice: (11999) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 322.971452][T12017] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1389'. [ 323.267971][T12020] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 323.641968][T12029] syzkaller1: entered allmulticast mode [ 324.610379][T12044] syzkaller1: entered promiscuous mode [ 324.611972][T10701] usb 11-1: new high-speed USB device number 14 using dummy_hcd [ 324.612943][T12044] syzkaller1: entered allmulticast mode [ 324.777245][ T5834] usb 13-1: new full-speed USB device number 7 using dummy_hcd [ 324.811267][T10701] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 324.826138][T10701] usb 11-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 324.841082][T10701] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.928259][ T5834] usb 13-1: config 4 has an invalid interface number: 201 but max is 0 [ 324.928511][T10701] usb 11-1: config 0 descriptor?? [ 324.931050][ T5834] usb 13-1: config 4 has no interface number 0 [ 324.934775][ T5834] usb 13-1: config 4 interface 201 has no altsetting 0 [ 324.938744][ T5834] usb 13-1: New USB device found, idVendor=0781, idProduct=55e8, bcdDevice=71.2b [ 324.941754][ T5834] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.944332][ T5834] usb 13-1: Product: syz [ 324.945668][ T5834] usb 13-1: Manufacturer: syz [ 324.947275][ T5834] usb 13-1: SerialNumber: syz [ 325.150266][T10701] usbhid 11-1:0.0: can't add hid device: -71 [ 325.155723][T10701] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 325.179631][T10701] usb 11-1: USB disconnect, device number 14 [ 325.324621][ T5834] usb-storage 13-1:4.201: USB Mass Storage device detected [ 325.341768][ T5834] usb-storage 13-1:4.201: Quirks match for vid 0781 pid 55e8: 800000 [ 325.424512][ T5834] usb 13-1: USB disconnect, device number 7 [ 325.737537][T10701] usb 11-1: new high-speed USB device number 15 using dummy_hcd [ 325.888804][T12055] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 325.922139][T10701] usb 11-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 325.933455][T10701] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 256 [ 325.948026][T10701] usb 11-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 325.973241][T10701] usb 11-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 325.983528][T10701] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.994902][T10701] usb 11-1: Product: syz [ 325.998560][T10701] usb 11-1: Manufacturer: syz [ 326.003766][T10701] usb 11-1: SerialNumber: syz [ 326.135660][T12065] FAT-fs (mtdblock0): bogus logical sector size 65508 [ 326.139047][T12065] FAT-fs (mtdblock0): Can't find a valid FAT filesystem [ 326.184430][ T42] audit: type=1326 audit(1786236755.149:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12067 comm="syz.8.1408" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 326.207972][ T42] audit: type=1326 audit(1786236755.149:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12067 comm="syz.8.1408" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 326.233897][ T42] audit: type=1326 audit(1786236755.149:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12067 comm="syz.8.1408" exe="/syz-executor" sig=0 arch=40000003 syscall=186 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 326.255032][ T42] audit: type=1326 audit(1786236755.149:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12067 comm="syz.8.1408" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 326.266949][ T42] audit: type=1326 audit(1786236755.149:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12067 comm="syz.8.1408" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 326.273622][ T42] audit: type=1326 audit(1786236755.149:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12067 comm="syz.8.1408" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 326.280493][ T42] audit: type=1326 audit(1786236755.149:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12067 comm="syz.8.1408" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf72074eb code=0x7ffc0000 [ 326.287337][ T42] audit: type=1326 audit(1786236755.149:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12067 comm="syz.8.1408" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 326.294326][ T42] audit: type=1326 audit(1786236755.149:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12067 comm="syz.8.1408" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 326.301029][ T42] audit: type=1326 audit(1786236755.149:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12067 comm="syz.8.1408" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 326.416235][T12074] Invalid ELF header magic: != ELF [ 326.699433][T12078] overlayfs: overlapping lowerdir path [ 326.934175][T12081] syz_tun: entered allmulticast mode [ 326.944991][T12080] syz_tun: left allmulticast mode [ 327.156113][T12086] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 327.208106][T12088] jffs2: notice: (12088) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 327.222547][T12088] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 327.228853][T12088] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1413'. [ 327.232335][T12090] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1413'. [ 327.560188][ T9] usb 11-1: USB disconnect, device number 15 [ 327.808902][T12097] block2mtd: error: cannot open device Ta4Gg)_դEvr!4>=Z{By<0\i= [ 327.808902][T12097] \!ug[ [ 328.144077][T12106] xt_l2tp: missing protocol rule (udp|l2tpip) [ 328.558864][T12117] lo speed is unknown, defaulting to 1000 [ 328.574975][T12117] wg2 speed is unknown, defaulting to 1000 [ 329.550202][T12129] netlink: zone id is out of range [ 329.552542][T12129] netlink: zone id is out of range [ 329.554777][T12129] netlink: get zone limit has 4 unknown bytes [ 330.148267][ T60] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 330.237084][ T5834] usb 13-1: new low-speed USB device number 8 using dummy_hcd [ 330.253173][T12140] tipc: Enabling of bearer rejected, failed to enable media [ 330.410880][ T5834] usb 13-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 330.419727][ T5834] usb 13-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 330.431050][ T5834] usb 13-1: string descriptor 0 read error: -22 [ 330.433116][ T5834] usb 13-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 330.439981][ T5834] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.655598][ T5834] cdc_ncm 13-1:1.0: bind() failure [ 330.660758][ T5834] cdc_ncm 13-1:1.1: CDC Union missing and no IAD found [ 330.663191][ T5834] cdc_ncm 13-1:1.1: bind() failure [ 330.666769][ T5834] usb 13-1: USB disconnect, device number 8 [ 330.687219][ T9] usb 12-1: new high-speed USB device number 7 using dummy_hcd [ 330.757061][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 330.881941][ T9] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.886383][ T9] usb 12-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 330.891920][ T9] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.913458][ T9] usb 12-1: config 0 descriptor?? [ 331.255448][ T9] usbhid 12-1:0.0: can't add hid device: -71 [ 331.281394][ T9] usbhid 12-1:0.0: probe with driver usbhid failed with error -71 [ 331.364382][ T9] usb 12-1: USB disconnect, device number 7 [ 331.374397][T12180] binder: 12179:12180 ioctl 9361 6 returned -22 [ 331.698928][ T5104] IPVS: starting estimator thread 0... [ 331.818379][T12192] IPVS: using max 43 ests per chain, 103200 per kthread [ 331.867714][ T9] usb 12-1: new high-speed USB device number 8 using dummy_hcd [ 332.004653][T12195] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1433'. [ 332.090409][ T9] usb 12-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 332.093706][ T9] usb 12-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 256 [ 332.096818][ T9] usb 12-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 332.105423][ T9] usb 12-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 332.109223][ T9] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.111890][ T9] usb 12-1: Product: syz [ 332.113313][ T9] usb 12-1: Manufacturer: syz [ 332.114831][ T9] usb 12-1: SerialNumber: syz [ 332.465988][T12183] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1431'. [ 332.673320][ T9] usb 12-1: USB disconnect, device number 8 [ 338.390520][T12219] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1435'. [ 338.413622][T12219] team_slave_0 (unregistering): left promiscuous mode [ 338.416348][T12219] team_slave_0 (unregistering): left allmulticast mode [ 338.420905][T12219] team0: Port device team_slave_0 removed [ 338.433504][T12222] 9p: Bad value for 'wfdno' [ 338.453592][ T7302] tipc: Subscription rejected, illegal request [ 338.492063][T12225] syz_tun: entered allmulticast mode [ 338.505049][T12225] syz_tun: left allmulticast mode [ 338.681815][T12232] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1441'. [ 338.695052][T12232] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1441'. [ 338.700744][T12232] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1441'. [ 338.714392][T12232] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1441'. [ 338.718350][T12232] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1441'. [ 340.007655][ T9] usb 11-1: new high-speed USB device number 16 using dummy_hcd [ 340.192910][ T9] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.211711][ T9] usb 11-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 340.225539][ T9] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.266123][ T9] usb 11-1: config 0 descriptor?? [ 340.416179][T12265] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1449'. [ 340.420402][T12265] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1449'. [ 340.425129][T12265] usb usb8: usbfs: process 12265 (syz.8.1449) did not claim interface 0 before use [ 340.483811][ T9] usbhid 11-1:0.0: can't add hid device: -71 [ 340.493378][ T9] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 340.533093][ T9] usb 11-1: USB disconnect, device number 16 [ 341.037010][ T9] usb 11-1: new high-speed USB device number 17 using dummy_hcd [ 341.219115][ T9] usb 11-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 341.222962][ T9] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 256 [ 341.226361][ T9] usb 11-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 341.236676][ T9] usb 11-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 341.241950][ T9] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.245489][ T9] usb 11-1: Product: syz [ 341.250479][ T9] usb 11-1: Manufacturer: syz [ 341.252722][ T9] usb 11-1: SerialNumber: syz [ 341.756666][T12287] ------------[ cut here ]------------ [ 341.758785][T12287] Device '2-002c' does not have a release() function, it is broken and must be fixed. See Documentation/core-api/kobject.rst. [ 341.764173][T12287] WARNING: drivers/base/core.c:2638 at device_release+0x1da/0x270, CPU#3: syz.8.1453/12287 [ 341.767641][T12287] Modules linked in: [ 341.769341][T12287] CPU: 3 UID: 0 PID: 12287 Comm: syz.8.1453 Tainted: G L syzkaller #0 PREEMPT(full) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 341.772960][T12287] Tainted: [L]=SOFTLOCKUP [ 341.774571][T12287] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 341.778007][T12287] RIP: 0010:device_release+0x1dd/0x270 [ 341.779926][T12287] Code: df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 93 00 00 00 48 8b 6b 50 48 85 ed 74 19 e8 4d 4c b1 fb 48 8d 3d 46 bf d5 0a 48 89 ee <67> 48 0f b9 3a e9 eb fe ff ff e8 34 4c b1 fb 48 89 da 48 b8 00 00 [ 341.787883][T12287] RSP: 0018:ffffc900068c7a20 EFLAGS: 00010287 [ 341.790284][T12287] RAX: 0000000000003da6 RBX: ffff88806c4dc020 RCX: ffffc90031bd9000 [ 341.792899][T12287] RDX: 0000000000080000 RSI: ffff88806c685800 RDI: ffffffff912e3400 [ 341.795542][T12287] RBP: ffff88806c685800 R08: 0000000000000001 R09: 0000000000000000 [ 341.798220][T12287] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88805fc00800 [ 341.800952][T12287] R13: dffffc0000000000 R14: ffff88806c685800 R15: 0000000000000000 [ 341.804012][T12287] FS: 0000000000000000(0000) GS:ffff888096ef3000(0063) knlGS:00000000f549cb40 [ 341.806980][T12287] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 341.809663][T12287] CR2: 00000000f549bff4 CR3: 000000005fc95000 CR4: 0000000000352ef0 [ 341.812291][T12287] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 341.814879][T12287] DR3: 00000000000f010e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 341.817629][T12287] Call Trace: [ 341.818692][T12287] [ 341.820303][T12287] kobject_put+0x1f7/0x640 [ 341.822263][T12287] device_unregister+0x2f/0xe0 [ 341.823924][T12287] i2c_unregister_device+0xf5/0x270 [ 341.825684][T12287] i2c_deregister_clients+0x255/0x460 [ 341.827564][T12287] i2c_del_adapter+0x124/0x2d0 [ 341.829174][T12287] i801_remove+0xa4/0x3d0 [ 341.830619][T12287] pci_device_remove+0xb2/0x1d0 [ 341.832233][T12287] ? __pfx_pci_device_remove+0x10/0x10 [ 341.834019][T12287] device_remove+0xcb/0x180 [ 341.835497][T12287] device_release_driver_internal+0x44e/0x620 [ 341.837664][T12287] unbind_store+0xf8/0x110 [ 341.839163][T12287] ? __pfx_unbind_store+0x10/0x10 [ 341.840770][T12287] drv_attr_store+0x74/0xb0 [ 341.842272][T12287] ? __pfx_drv_attr_store+0x10/0x10 [ 341.844162][T12287] sysfs_kf_write+0xf2/0x150 [ 341.845737][T12287] kernfs_fop_write_iter+0x3e0/0x5f0 [ 341.847538][T12287] ? __pfx_sysfs_kf_write+0x10/0x10 [ 341.849263][T12287] vfs_write+0x6ac/0x1050 [ 341.850691][T12287] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 341.852661][T12287] ? __pfx_vfs_write+0x10/0x10 [ 341.854230][T12287] ? find_held_lock+0x2b/0x80 [ 341.855800][T12287] ksys_write+0x12a/0x250 [ 341.857293][T12287] ? __pfx_ksys_write+0x10/0x10 [ 341.858910][T12287] __do_fast_syscall_32+0xe7/0x970 [ 341.860682][T12287] do_fast_syscall_32+0x32/0x70 [ 341.862303][T12287] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 341.864371][T12287] RIP: 0023:0xf70cefec [ 341.865740][T12287] Code: Unable to access opcode bytes at 0xf70cefc2. [ 341.868074][T12287] RSP: 002b:00000000f549c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 341.870830][T12287] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 341.873414][T12287] RDX: 000000000000000d RSI: 0000000000000000 RDI: 0000000000000000 [ 341.876005][T12287] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 341.878603][T12287] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 341.881220][T12287] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 341.883819][T12287] [ 341.884895][T12287] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 341.887329][T12287] CPU: 3 UID: 0 PID: 12287 Comm: syz.8.1453 Tainted: G L syzkaller #0 PREEMPT(full) [ 341.890822][T12287] Tainted: [L]=SOFTLOCKUP [ 341.892260][T12287] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 341.895612][T12287] Call Trace: [ 341.896699][T12287] [ 341.897725][T12287] dump_stack_lvl+0x100/0x190 [ 341.899281][T12287] vpanic+0x552/0x970 [ 341.900626][T12287] ? __pfx_vpanic+0x10/0x10 [ 341.902195][T12287] panic+0xd1/0xe0 [ 341.903486][T12287] ? __pfx_panic+0x10/0x10 [ 341.904969][T12287] check_panic_on_warn.cold+0x19/0x34 [ 341.906790][T12287] ? device_release+0x1da/0x270 [ 341.908403][T12287] __warn.cold+0x191/0x318 [ 341.909887][T12287] __report_bug+0x30f/0x440 [ 341.911395][T12287] ? device_release+0x1da/0x270 [ 341.913053][T12287] ? __pfx___report_bug+0x10/0x10 [ 341.914736][T12287] ? do_raw_spin_lock+0x128/0x260 [ 341.916482][T12287] ? find_held_lock+0x2b/0x80 [ 341.918039][T12287] ? kobj_kset_leave+0x160/0x210 [ 341.919670][T12287] report_bug_entry+0xe1/0x290 [ 341.921257][T12287] ? device_release+0x1dd/0x270 [ 341.922884][T12287] handle_bug+0x1cd/0x2a0 [ 341.924337][T12287] exc_invalid_op+0x17/0x50 [ 341.925846][T12287] asm_exc_invalid_op+0x1a/0x20 [ 341.927522][T12287] RIP: 0010:device_release+0x1dd/0x270 [ 341.929299][T12287] Code: df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 93 00 00 00 48 8b 6b 50 48 85 ed 74 19 e8 4d 4c b1 fb 48 8d 3d 46 bf d5 0a 48 89 ee <67> 48 0f b9 3a e9 eb fe ff ff e8 34 4c b1 fb 48 89 da 48 b8 00 00 [ 341.935508][T12287] RSP: 0018:ffffc900068c7a20 EFLAGS: 00010287 [ 341.937560][T12287] RAX: 0000000000003da6 RBX: ffff88806c4dc020 RCX: ffffc90031bd9000 [ 341.940164][T12287] RDX: 0000000000080000 RSI: ffff88806c685800 RDI: ffffffff912e3400 [ 341.942754][T12287] RBP: ffff88806c685800 R08: 0000000000000001 R09: 0000000000000000 [ 341.945303][T12287] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88805fc00800 [ 341.947929][T12287] R13: dffffc0000000000 R14: ffff88806c685800 R15: 0000000000000000 [ 341.950540][T12287] kobject_put+0x1f7/0x640 [ 341.952024][T12287] device_unregister+0x2f/0xe0 [ 341.953612][T12287] i2c_unregister_device+0xf5/0x270 [ 341.955380][T12287] i2c_deregister_clients+0x255/0x460 [ 341.957152][T12287] i2c_del_adapter+0x124/0x2d0 [ 341.958731][T12287] i801_remove+0xa4/0x3d0 [ 341.960174][T12287] pci_device_remove+0xb2/0x1d0 [ 341.961781][T12287] ? __pfx_pci_device_remove+0x10/0x10 [ 341.963606][T12287] device_remove+0xcb/0x180 [ 341.965112][T12287] device_release_driver_internal+0x44e/0x620 [ 341.967107][T12287] unbind_store+0xf8/0x110 [ 341.968593][T12287] ? __pfx_unbind_store+0x10/0x10 [ 341.970229][T12287] drv_attr_store+0x74/0xb0 [ 341.971885][T12287] ? __pfx_drv_attr_store+0x10/0x10 [ 341.973699][T12287] sysfs_kf_write+0xf2/0x150 [ 341.975231][T12287] kernfs_fop_write_iter+0x3e0/0x5f0 [ 341.976945][T12287] ? __pfx_sysfs_kf_write+0x10/0x10 [ 341.978712][T12287] vfs_write+0x6ac/0x1050 [ 341.980160][T12287] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 341.982052][T12287] ? __pfx_vfs_write+0x10/0x10 [ 341.983623][T12287] ? find_held_lock+0x2b/0x80 [ 341.985187][T12287] ksys_write+0x12a/0x250 [ 341.986635][T12287] ? __pfx_ksys_write+0x10/0x10 [ 341.988236][T12287] __do_fast_syscall_32+0xe7/0x970 [ 341.989977][T12287] do_fast_syscall_32+0x32/0x70 [ 341.991583][T12287] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 341.993627][T12287] RIP: 0023:0xf70cefec [ 341.994989][T12287] Code: Unable to access opcode bytes at 0xf70cefc2. [ 341.997185][T12287] RSP: 002b:00000000f549c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 341.999902][T12287] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 342.002498][T12287] RDX: 000000000000000d RSI: 0000000000000000 RDI: 0000000000000000 [ 342.005025][T12287] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 342.007634][T12287] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 342.010230][T12287] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 342.012834][T12287] [ 342.014546][T12287] Kernel Offset: disabled [ 342.015975][T12287] Rebooting in 86400 seconds..