last executing test programs: 2m49.807096835s ago: executing program 1 (id=239): syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106b1d0101890f0000030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c24020000000300000000000924060006010000000924030000000005000b2406050001"], 0x0) 2m48.500174359s ago: executing program 1 (id=247): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 2m48.338921901s ago: executing program 1 (id=248): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000100)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x3) ftruncate(r1, 0x1000006) shutdown(0xffffffffffffffff, 0x0) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x1000000}) syz_usb_connect(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120100004106cd40cd060f011bd5000000010902"], 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000580)=0x1) 2m46.432615594s ago: executing program 1 (id=253): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000006c0)={0x34, &(0x7f0000000000)={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m43.152915817s ago: executing program 1 (id=262): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f0000000640)='.\x00', 0x0, 0xdd) mkdir(&(0x7f0000000340)='./file0\x00', 0x9b) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 2m43.094128951s ago: executing program 1 (id=264): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) 2m26.859499002s ago: executing program 32 (id=264): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) 1m14.081413396s ago: executing program 0 (id=781): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r4) sendmsg$IEEE802154_LLSEC_ADD_KEY(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0706000000000000000027000000050031000400000008000200", @ANYRES32=r4], 0x24}, 0x1, 0x0, 0x0, 0x20004080}, 0x24060884) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00012cbd7000fcdbdf250100000008000c0001000000080008ddab1414aa080002000700f50008000400ffffffff08000800ac1414bbdbb08f3fc6b39f51a5f23da86902c6eded6ca973ae6bb2bd4fac0c8cf9d22723283fb500cf0e68afd27528c62d29dd1c786fd80b3ea4b4aa57d7646cd5f9c55627f0407c03478861157f25bcb73974359cf544ace34d839555973f5c5e83bc4776ac90efac366d7a673f171ae7832248b7e4f3a4c18653308035b515e5fd8efb6f6efe7684ddca2c7cae67f7eeea2af302a87c9b1d5839d60927277f03000000000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48005) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f0000000180)={'pcl711\x00', [0x5c25, 0x0, 0x3, 0x0, 0x2, 0x8, 0xc, 0x9, 0x7ffd, 0xfa, 0x2, 0x1, 0x200004, 0x403, 0x6, 0x9, 0x4, 0x2, 0x3, 0x3, 0x5, 0x100, 0xb27, 0x0, 0x800b, 0xa1cf, 0x7, 0x8, 0x800007, 0x10004, 0xfffdfff3]}) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0) timer_create(0x2, &(0x7f0000000180)={0x0, 0x2b, 0x6}, &(0x7f0000000200)=0x0) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) ioctl$UI_SET_LEDBIT(r9, 0x40045569, 0x7) ioctl$UI_SET_EVBIT(r9, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r9, 0x405c5503, &(0x7f0000000100)={{0x100, 0xfffc}, 'syz0\x00', 0x39}) ioctl$UI_DEV_CREATE(r9, 0x5501) timer_settime(r8, 0x0, &(0x7f0000000240)={{0x0, 0x3938700}}, &(0x7f0000000280)) 1m13.778328373s ago: executing program 0 (id=784): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) syz_io_uring_setup(0x32d9, &(0x7f0000000200)={0x0, 0x6273, 0x8, 0xffffffff, 0x400000, 0x0, 0x0}, &(0x7f0000000300)=0x0, &(0x7f0000000140)=0x0, &(0x7f00000000c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r5 = socket$netlink(0x10, 0x3, 0x8000000004) r6 = socket$unix(0x1, 0x2, 0x0) bind$unix(r6, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) writev(r5, &(0x7f0000000280)=[{&(0x7f0000000080)="580000001400add4050000000000000001117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ffff0100f5c71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x4000, @fd_index=0x3, 0x8, 0x0}) readv(r0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/175, 0xaf}], 0x1) r7 = fsopen(&(0x7f0000000100)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000002c0)=0x1) 1m13.242162194s ago: executing program 0 (id=785): r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/pids.max\x00', 0xc8442, 0x11) write$P9_RWSTAT(r0, 0x0, 0x0) syz_io_uring_setup(0x315b, &(0x7f0000000140)={0x0, 0xc7ca, 0x42, 0x0, 0x7a}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000000)) 1m13.131083878s ago: executing program 0 (id=788): syz_usb_disconnect(0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x5, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) sendmsg$nl_route_sched(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800) sendmsg$alg(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000500)="4c8a4dd798", 0x5}], 0x1, 0x0, 0x0, 0x1}, 0x4005) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1m12.153964969s ago: executing program 0 (id=793): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(0x0, 0x0, 0xdd) mkdir(&(0x7f0000000340)='./file0\x00', 0x9b) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 1m12.058594975s ago: executing program 0 (id=794): timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)=""/238, 0xee}], 0x1}, 0xffffffff}], 0x1, 0x10002, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 1m0.843876347s ago: executing program 4 (id=860): memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x404c03, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000002340)=@IORING_OP_RECVMSG={0xa, 0x1, 0x3, 0xffffffffffffffff, 0x0, &(0x7f0000002300)={&(0x7f00000009c0)=@tipc=@name, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000a40)=""/89, 0x59}, {&(0x7f0000000ac0)=""/211, 0xd3}], 0x2, &(0x7f0000001300)=""/4096, 0x1000}, 0x0, 0x40002100, 0x0, {0x2}}) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f0000000180)=0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x9}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x20004, r4, 0x2}) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f62726964676500140001007767"], 0xa8}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c69700014000780080006400000020008000840"], 0x60}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) socket$nl_netfilter(0x10, 0x3, 0xc) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f0000000140)=0x5) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0205710, 0x0) munlockall() mount(&(0x7f00000000c0)=@filename='./bus\x00', &(0x7f0000000040)='./bus\x00', &(0x7f0000000280)='ramfs\x00', 0x400080, &(0x7f00000001c0)='disrArd') 59.730636882s ago: executing program 4 (id=863): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x200000000000, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="8c9b49db53749280d5352875e97fade72440de0fc35fce039a1be9302c6eb5052a4e32b0438e8c0f1a9bd00114a688c239d0200110e49ce1f3a6769a70fbe73c95efa4f84d1698aff19d572eb7dbc3a938d770686ed244c144d692df21fc638781db8137cda2dff2fce5bcd932cb242684065f03a5975e9680e25c455c55668929f8e3e3e36d6121c0487cb166"], &(0x7f0000000000)='GPL\x00', 0x2, 0xb5, &(0x7f0000000140)=""/181, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(0xffffffffffffffff, 0x17, &(0x7f0000002580)={&(0x7f0000003000)={[{&(0x7f0000000480)="26c49972944925aa5d4dc59ef160935198f22c370e3988bcd495090beae9ac0e778806315d67441edf4ce89590315cb851eddfae27a332540d90f66703a91c8adf32ea655c7c2114c117236a53376d73ae0125a567a9856cc5cfbd5f15691c8b5e47909a5cfa0a12cd98b8e77634966710e1227a36f32a313dd3791dec48634f5b7db1aea3a505047ff14299e56d82c0abcce0962913e20353dc255dae23ccceacaec2beb4e6fdbb77b11c4f15b11bc0fc8d26fc64a686474ceaaf257e225b35432396c3182b97dcac494c76bfef1085b46515677b2f7b9e9565aed1ab51b79b1a62eba4f33e368f3344f33a13a466ac1d", 0xf1, 0x1}, {&(0x7f0000000580)="403c42795e93f868da8602cb531e477e2914357f4b20e8ec4e71ffcfb7579a36ba8ef04d9ed893ef45be02df5def8c0ce6c40a13fe8b5b0cf1cdeb23164cf5dfecac36e33de5da6778d079664ccd7f274f1a2a772e12fc9bf3a9766ae5799a00a126435dd2b05e57a60d8ede5cecd955c8b29b9b13d3ca1651d56017457b7a0e79ccc4bdcc7facfcaba92bb554cbdd2a71896074851e6bea87bd8d2379aa16ae9c41bef452c42418945f25b6ae2bdea651b8dd8459f444962e70a5d826dcca3b10eb52b0cc05f128fbdbf98ff5b8f88f783b3598be2c37", 0xd7, 0x1}, {&(0x7f0000001540)="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", 0x1000, 0x1}, {&(0x7f0000002540)="6077eae47481bb0fba0dd0c92fc90a918f6ee1a27cd14b53e25a60adba408ca92b061fe820966dcaf647e7fb9d6fb5d0d4b34a5b405337", 0x37}]}, 0x4, 0x3}, 0x1) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000ac0)={0x5, 0x7, 0xb, 0x8, 0x7f}) setsockopt(r2, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYBLOB="02000100fa7dba2c329f01c84b8e3352cbb57ccdbc0d09acee6bfa140d6fba4297f187f7c68ad78c3b6d32f0d96dc8525c3e4541565291cbd02366cf3750baff290c8821168af1cb3fa89b2b19be24c37485f572bcc0bf110e6857863f8a02d9099b42eaa8a4e7e876b3666c90f9f43c85a9b63fb70944c6bb4b716840e114dd4798e844ecca87b07e60a1abec9e1043873dba1b8f0a"], 0x9) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000150001030ec00000fcdbdf2505"], 0x14}}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x2}, 0x8) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="208000000010010014002b8008000100", @ANYRES32, @ANYBLOB="080003000800000808001b"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000000000)={0xffffff0d, 0x11e, 0x9, 0x9, 0x9}) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000240)={'xfrm0\x00', &(0x7f00000009c0)=@ethtool_flash={0x26, 0x7c, './file0\x00'}}) syz_usb_disconnect(r0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x5a200, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0xb) 58.181268609s ago: executing program 4 (id=866): socket$kcm(0x2, 0x200000000000001, 0x106) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000280)={0x2, 0x5, 0x0, 0x2, 0x15, 0x0, 0x0, 0x7, [@sadb_spirange={0x2, 0x10, 0x4d2, 0x4d3}, @sadb_x_filter={0x5, 0x1a, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xb, 0x10, 0x10}, @sadb_sa={0x2, 0x1, 0x4d2, 0x4, 0x4, 0x45, 0x3, 0xc0000000}, @sadb_x_policy={0x8, 0x12, 0x0, 0x4, 0x0, 0x6e6bbb, 0x8, {0x6, 0x32, 0xf6, 0x7, 0x0, 0x401, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x17}}}, @sadb_sa={0x2, 0x1, 0x4d3, 0x7, 0x6, 0x3c, 0x4, 0x40000000}]}, 0xa8}, 0x1, 0x400000000000000}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000100)="f257a8ea7bc273dfaeab96854305", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @random="b8667c152066"}, 0x14) connect$inet6(r2, 0x0, 0x0) r6 = dup2(r2, r2) socket(0x2b, 0x1, 0x1) sendmmsg$unix(r6, &(0x7f0000008380), 0x400000000000174, 0x4008890) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r7, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4) sendmmsg$inet(r7, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) 57.12301632s ago: executing program 4 (id=867): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x0, 0x3, r1, 0x230d}, 0xc) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) r2 = add_key$user(&(0x7f00000036c0), &(0x7f0000003700)={'syz', 0x0}, &(0x7f00000004c0)="c2", 0xf, 0xfffffffffffffffb) keyctl$setperm(0x5, r2, 0x1010) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000000)=0x3) r4 = getpid() r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="84000000180010002abd7000fedbdf251c10206e0002ff9e00200000", @ANYRES32=r1, @ANYBLOB="140012000100af5bd5e76a000000000000000000080001000000000008000400", @ANYBLOB="0800010000000000080001000000000014eb11001a00f847adef71c350214322e0b0e062"], 0x84}, 0x1, 0x0, 0x0, 0x20004085}, 0x4044) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r6 = syz_create_resource$binfmt(&(0x7f0000000100)='./file1\x00') r7 = openat$binfmt(0xffffffffffffff9c, r6, 0x42, 0x1ff) close(r7) execveat$binfmt(0xffffffffffffff9c, r6, 0x0, &(0x7f0000004780)={[], 0xf000}, 0x1000) truncate(&(0x7f0000001580)='./file1\x00', 0xd4) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r10 = socket$kcm(0x29, 0x5, 0x0) sendmsg$rds(r10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x4000080) syz_emit_ethernet(0x32, &(0x7f0000000000)={@random="e90c630faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x2, 0x0, @val=0x80}}}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0xffff, 0x8}}}}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, r4, 0x0, 0x0, 'syz1\x00', 0x0}) close(r3) 56.050156524s ago: executing program 4 (id=871): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(0x0, 0x0, 0xdd) mkdir(&(0x7f0000000340)='./file0\x00', 0x9b) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 55.973995377s ago: executing program 33 (id=794): timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)=""/238, 0xee}], 0x1}, 0xffffffff}], 0x1, 0x10002, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 55.959597995s ago: executing program 4 (id=873): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_io_uring_setup(0x111, 0x0, 0x0, 0x0, &(0x7f0000000000)) socket$pppoe(0x18, 0x1, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="fc0000001900e1f6ddedabc4ac5c000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000100000006000000000000000000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c000000020000000a01010200000000000000000000000006000000040300"], 0xfc}}, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x121001) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000300), 0xffffffffffffffff) 39.638136827s ago: executing program 34 (id=873): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_io_uring_setup(0x111, 0x0, 0x0, 0x0, &(0x7f0000000000)) socket$pppoe(0x18, 0x1, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="fc0000001900e1f6ddedabc4ac5c000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000100000006000000000000000000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c000000020000000a01010200000000000000000000000006000000040300"], 0xfc}}, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x121001) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000300), 0xffffffffffffffff) 6.443211876s ago: executing program 5 (id=1113): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x200000000000, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="8c9b49db53749280d5352875e97fade72440de0fc35fce039a1be9302c6eb5052a4e32b0438e8c0f1a9bd00114a688c239d0200110e49ce1f3a6769a70fbe73c95efa4f84d1698aff19d572eb7dbc3a938d770686ed244c144d692df21fc638781db8137cda2dff2fce5bcd932cb242684065f03a5975e9680e25c455c55668929f8e3e3e36d6121c0487cb166"], &(0x7f0000000000)='GPL\x00', 0x2, 0xb5, &(0x7f0000000140)=""/181, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(0xffffffffffffffff, 0x17, &(0x7f0000002580)={&(0x7f0000003000)={[{&(0x7f0000000480)="26c49972944925aa5d4dc59ef160935198f22c370e3988bcd495090beae9ac0e778806315d67441edf4ce89590315cb851eddfae27a332540d90f66703a91c8adf32ea655c7c2114c117236a53376d73ae0125a567a9856cc5cfbd5f15691c8b5e47909a5cfa0a12cd98b8e77634966710e1227a36f32a313dd3791dec48634f5b7db1aea3a505047ff14299e56d82c0abcce0962913e20353dc255dae23ccceacaec2beb4e6fdbb77b11c4f15b11bc0fc8d26fc64a686474ceaaf257e225b35432396c3182b97dcac494c76bfef1085b46515677b2f7b9e9565aed1ab51b79b1a62eba4f33e368f3344f33a13a466ac1d", 0xf1, 0x1}, {&(0x7f0000000580)="403c42795e93f868da8602cb531e477e2914357f4b20e8ec4e71ffcfb7579a36ba8ef04d9ed893ef45be02df5def8c0ce6c40a13fe8b5b0cf1cdeb23164cf5dfecac36e33de5da6778d079664ccd7f274f1a2a772e12fc9bf3a9766ae5799a00a126435dd2b05e57a60d8ede5cecd955c8b29b9b13d3ca1651d56017457b7a0e79ccc4bdcc7facfcaba92bb554cbdd2a71896074851e6bea87bd8d2379aa16ae9c41bef452c42418945f25b6ae2bdea651b8dd8459f444962e70a5d826dcca3b10eb52b0cc05f128fbdbf98ff5b8f88f783b3598be2c37", 0xd7, 0x1}, {&(0x7f0000001540)="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", 0x1000, 0x1}, {&(0x7f0000002540)="6077eae47481bb0fba0dd0c92fc90a918f6ee1a27cd14b53e25a60adba408ca92b061fe820966dcaf647e7fb9d6fb5d0d4b34a5b405337", 0x37}]}, 0x4, 0x3}, 0x1) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000ac0)={0x5, 0x7, 0xb, 0x8, 0x7f}) setsockopt(r2, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYBLOB="02000100fa7dba2c329f01c84b8e3352cbb57ccdbc0d09acee6bfa140d6fba4297f187f7c68ad78c3b6d32f0d96dc8525c3e4541565291cbd02366cf3750baff290c8821168af1cb3fa89b2b19be24c37485f572bcc0bf110e6857863f8a02d9099b42eaa8a4e7e876b3666c90f9f43c85a9b63fb70944c6bb4b716840e114dd4798e844ecca87b07e60a1abec9e1043873dba1b8f0a"], 0x9) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000150001030ec00000fcdbdf2505"], 0x14}}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x2}, 0x8) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000010800000000fcdbdf2500000000", @ANYBLOB="208000000010010014002b8008000100", @ANYRES32, @ANYBLOB="080003000800000808001b"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000000000)={0xffffff0d, 0x11e, 0x9, 0x9, 0x9}) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000240)={'xfrm0\x00', &(0x7f00000009c0)=@ethtool_flash={0x26, 0x7c, './file0\x00'}}) syz_usb_disconnect(r0) r8 = openat$kvm(0xffffffffffffff9c, 0x0, 0x5a200, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0xb) 6.442872192s ago: executing program 3 (id=1114): memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x404c03, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000002340)=@IORING_OP_RECVMSG={0xa, 0x1, 0x3, 0xffffffffffffffff, 0x0, &(0x7f0000002300)={&(0x7f00000009c0)=@tipc=@name, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000a40)=""/89, 0x59}, {&(0x7f0000000ac0)=""/211, 0xd3}], 0x2, &(0x7f0000001300)=""/4096, 0x1000}, 0x0, 0x40002100, 0x0, {0x2}}) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f0000000180)=0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x9}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x810}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f62726964676500140001007767"], 0xa8}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c69700014000780080006400000020008000840"], 0x60}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) socket$nl_netfilter(0x10, 0x3, 0xc) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f0000000140)=0x5) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0205710, 0x0) munlockall() mknod(&(0x7f0000000080)='./bus\x00', 0x8000, 0x6) mount(&(0x7f00000000c0)=@filename='./bus\x00', &(0x7f0000000040)='./bus\x00', &(0x7f0000000280)='ramfs\x00', 0x400080, &(0x7f00000001c0)='disrArd') 5.388208728s ago: executing program 3 (id=1118): socket$kcm(0x2, 0x200000000000001, 0x106) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000280)={0x2, 0x5, 0x0, 0x2, 0x15, 0x0, 0x0, 0x7, [@sadb_spirange={0x2, 0x10, 0x4d2, 0x4d3}, @sadb_x_filter={0x5, 0x1a, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xb, 0x10, 0x10}, @sadb_sa={0x2, 0x1, 0x4d2, 0x4, 0x4, 0x45, 0x3, 0xc0000000}, @sadb_x_policy={0x8, 0x12, 0x0, 0x4, 0x0, 0x6e6bbb, 0x8, {0x6, 0x32, 0xf6, 0x7, 0x0, 0x401, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x17}}}, @sadb_sa={0x2, 0x1, 0x4d3, 0x7, 0x6, 0x3c, 0x4, 0x40000000}]}, 0xa8}, 0x1, 0x400000000000000}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000080)) connect$inet6(r2, 0x0, 0x0) r5 = dup2(r2, r2) socket(0x2b, 0x1, 0x1) sendmmsg$unix(r5, &(0x7f0000008380), 0x400000000000174, 0x4008890) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) fsopen(&(0x7f0000000180)='nfsd\x00', 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4) sendmmsg$inet(r6, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) 4.820878335s ago: executing program 5 (id=1125): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r4) sendmsg$IEEE802154_LLSEC_ADD_KEY(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0706000000000000000027000000050031000400000008000200", @ANYRES32=r4], 0x24}, 0x1, 0x0, 0x0, 0x20004080}, 0x24060884) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000180)={'pcl711\x00', [0x5c25, 0x0, 0x3, 0x0, 0x2, 0x8, 0xc, 0x9, 0x7ffd, 0xfa, 0x2, 0x1, 0x200004, 0x403, 0x6, 0x9, 0x4, 0x2, 0x3, 0x3, 0x5, 0x100, 0xb27, 0x0, 0x800b, 0xa1cf, 0x7, 0x8, 0x800007, 0x10004, 0xfffdfff3]}) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) ioctl$UI_SET_LEDBIT(r7, 0x40045569, 0x7) ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r7, 0x405c5503, &(0x7f0000000100)={{0x100, 0xfffc}, 'syz0\x00', 0x39}) ioctl$UI_DEV_CREATE(r7, 0x5501) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x3938700}}, &(0x7f0000000280)) 4.679889133s ago: executing program 5 (id=1127): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x346f, 0x40000060, 0x100007f, 0x1a, "9f940b3491d052d172e0e573229ac6de50806c"}) r1 = syz_io_uring_setup(0xa91, &(0x7f0000000180)={0x0, 0x3c60, 0x2, 0x2, 0x352}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000340), 0x8401, &(0x7f00000001c0)=ANY=[@ANYBLOB="7472616e7323118ce5d0acc15afa0fb3493d66642c7266646e6f3dc54495331111bff411f92f221003374f2591b9a692d18890683fedd14eb9ad9bb374b0ba79856a010aa70cb64cd06fc76e9fb5458a03792a40dce7a86d8a617f7142a2c57d34d8ad5ae411f69dfd62052e769160c944c664c0586409e3bdea25d5e9e736492e87f8019395c6f90bdfad6d3a0a7c2e32b27eeee3d02ad3f007c228c0a9cc6e01ea29dd2509ad1b2d36e078134afaf926e861c53e330ff7d67b3846eb53fdd0b2f269c4792a395e2503", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c616e616d653d9e01680acdf183336791ab5099f456ba50a939a84e092ef50b97c5c4f47ee2a65e5c1a2084c72ae3f259c6b8a0a4602607912f9d71b5c253efcf12962be8d0ffff1dc684cfcbab71ca4621332c00"]) 4.647350662s ago: executing program 5 (id=1128): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000340)=0x100000001, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000"], 0x0) r1 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) ioctl$SNAPSHOT_S2RAM(r1, 0x330b) keyctl$dh_compute(0x17, &(0x7f0000000800)={r3, r3, r3}, 0x0, 0xffffffffffffff92, &(0x7f0000000080)={&(0x7f0000000200)={'crc32-pclmul\x00'}}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000002c0)={0xa, 0x4e20, 0x80000, @loopback, 0x7}, 0x1c, 0x0}, 0xc044) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r7, &(0x7f0000000040)={0x23, 0x2, 0xb, 0x5}, 0x10) ioctl$KVM_RUN(r6, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e24, 0x2, @loopback, 0x5}, 0x1c) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000000)={'pcl724\x00', [0xfffffffb, 0x2, 0x40000002, 0x6, 0x1, 0x2, 0x7f, 0x7, 0x5, 0x54, 0x5, 0xfff, 0xfffffff7, 0x5, 0x79, 0x8, 0x2, 0x6, 0x7, 0x100, 0x9, 0x8, 0x0, 0x80000000, 0xc4, 0x9, 0x4, 0x7a0, 0x7, 0x10, 0x0, 0x2]}) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303, 0x3a}, "56db7a2700f81000", "a8ef1a3a33071799b7bbebfa6dc371290d0e3808802000", "336819df", "4008000000008700"}, 0x38) sendto$inet6(r0, &(0x7f00000000c0)="ff71e4ca0c558de7a90b5876f7", 0xfffffffffffffdfc, 0x80, 0x0, 0x0) 4.179397165s ago: executing program 3 (id=1129): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x14}, 0x1, 0x2, 0x2, 0x6, 0xfffe, 0x4}, 0x20) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r0, 0x8b32, &(0x7f0000000040)) (fail_nth: 3) 3.985003229s ago: executing program 6 (id=1132): memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x404c03, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000002340)=@IORING_OP_RECVMSG={0xa, 0x1, 0x3, 0xffffffffffffffff, 0x0, &(0x7f0000002300)={&(0x7f00000009c0)=@tipc=@name, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000a40)=""/89, 0x59}, {&(0x7f0000000ac0)=""/211, 0xd3}], 0x2, &(0x7f0000001300)=""/4096, 0x1000}, 0x0, 0x40002100, 0x0, {0x2}}) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f0000000180)=0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x9}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x810}, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x20004, 0xffffffffffffffff, 0x2}) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f62726964676500140001007767"], 0xa8}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c69700014000780080006400000020008000840"], 0x60}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) socket$nl_netfilter(0x10, 0x3, 0xc) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f0000000140)=0x5) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0205710, 0x0) munlockall() mknod(&(0x7f0000000080)='./bus\x00', 0x8000, 0x6) mount(&(0x7f00000000c0)=@filename='./bus\x00', &(0x7f0000000040)='./bus\x00', &(0x7f0000000280)='ramfs\x00', 0x400080, &(0x7f00000001c0)='disrArd') 3.537285405s ago: executing program 2 (id=1133): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r4) sendmsg$IEEE802154_LLSEC_ADD_KEY(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0706000000000000000027000000050031000400000008000200", @ANYRES32=r4], 0x24}, 0x1, 0x0, 0x0, 0x20004080}, 0x24060884) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="00012cbd7000fcdbdf250100000008000c0001000000080008ddab1414aa080002000700f50008000400ffffffff08000800ac1414bbdbb08f3fc6b39f51a5f23da86902c6eded6ca973ae6bb2bd4fac0c8cf9d22723283fb500cf0e68afd27528c62d29dd1c786fd80b3ea4b4aa57d7646cd5f9c55627f0407c03478861157f25bcb73974359cf544ace34d839555973f5c5e83bc4776ac90efac366d7a673f171ae7832248b7e4f3a4c18653308035b515e5fd8efb6f6efe7684ddca2c7cae67f7eeea2af302a87c9b1d5839d60927277f03000000000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48005) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000180)={'pcl711\x00', [0x5c25, 0x0, 0x3, 0x0, 0x2, 0x8, 0xc, 0x9, 0x7ffd, 0xfa, 0x2, 0x1, 0x200004, 0x403, 0x6, 0x9, 0x4, 0x2, 0x3, 0x3, 0x5, 0x100, 0xb27, 0x0, 0x800b, 0xa1cf, 0x7, 0x8, 0x800007, 0x10004, 0xfffdfff3]}) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) ioctl$UI_SET_LEDBIT(r7, 0x40045569, 0x7) ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r7, 0x405c5503, &(0x7f0000000100)={{0x100, 0xfffc}, 'syz0\x00', 0x39}) ioctl$UI_DEV_CREATE(r7, 0x5501) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x3938700}}, &(0x7f0000000280)) 3.430807579s ago: executing program 3 (id=1134): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cuse(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000280)={0x2020}, 0x2020) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r2, &(0x7f0000000240)=r3, 0x12) 2.84954379s ago: executing program 5 (id=1135): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000007000)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000050}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}], 0x2, 0x20040010) 2.833222593s ago: executing program 5 (id=1136): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0105b08, &(0x7f0000000040)) 2.692324702s ago: executing program 6 (id=1137): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000001214010028bd7000fcdbdf2508000300010008000800010000000000080015000200000008004b001300000008004f"], 0x38}, 0x1, 0x0, 0x0, 0x10004002}, 0xc0) 2.686019069s ago: executing program 3 (id=1138): socket$kcm(0x2, 0x200000000000001, 0x106) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000280)={0x2, 0x5, 0x0, 0x2, 0x15, 0x0, 0x0, 0x7, [@sadb_spirange={0x2, 0x10, 0x4d2, 0x4d3}, @sadb_x_filter={0x5, 0x1a, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xb, 0x10, 0x10}, @sadb_sa={0x2, 0x1, 0x4d2, 0x4, 0x4, 0x45, 0x3, 0xc0000000}, @sadb_x_policy={0x8, 0x12, 0x0, 0x4, 0x0, 0x6e6bbb, 0x8, {0x6, 0x32, 0xf6, 0x7, 0x0, 0x401, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x17}}}, @sadb_sa={0x2, 0x1, 0x4d3, 0x7, 0x6, 0x3c, 0x4, 0x40000000}]}, 0xa8}, 0x1, 0x400000000000000}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000100)="f257a8ea7bc273dfaeab96854305", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="b8667c152066"}, 0x14) connect$inet6(r2, 0x0, 0x0) r5 = dup2(r2, r2) socket(0x2b, 0x1, 0x1) sendmmsg$unix(r5, &(0x7f0000008380), 0x400000000000174, 0x4008890) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) fsopen(&(0x7f0000000180)='nfsd\x00', 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4) sendmmsg$inet(r6, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) 2.638667984s ago: executing program 2 (id=1139): socket$kcm(0x2, 0x200000000000001, 0x106) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000280)={0x2, 0x5, 0x0, 0x2, 0x15, 0x0, 0x0, 0x7, [@sadb_spirange={0x2, 0x10, 0x4d2, 0x4d3}, @sadb_x_filter={0x5, 0x1a, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xb, 0x10, 0x10}, @sadb_sa={0x2, 0x1, 0x4d2, 0x4, 0x4, 0x45, 0x3, 0xc0000000}, @sadb_x_policy={0x8, 0x12, 0x0, 0x4, 0x0, 0x6e6bbb, 0x8, {0x6, 0x32, 0xf6, 0x7, 0x0, 0x401, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x17}}}, @sadb_sa={0x2, 0x1, 0x4d3, 0x7, 0x6, 0x3c, 0x4, 0x40000000}]}, 0xa8}, 0x1, 0x400000000000000}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000080)) connect$inet6(r2, 0x0, 0x0) r5 = dup2(r2, r2) socket(0x2b, 0x1, 0x1) sendmmsg$unix(r5, &(0x7f0000008380), 0x400000000000174, 0x4008890) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) fsopen(&(0x7f0000000180)='nfsd\x00', 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4) sendmmsg$inet(r6, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) 2.63823049s ago: executing program 6 (id=1140): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x1f, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x101, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@private2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fc7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be8200", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x8000) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @random="926c81c53d8c"}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000780)={r2, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f0000000040)={0x1, 'vlan0\x00', {}, 0x7f}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, 0x0, 0x0) connect$inet(r4, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', r2, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r6 = socket$kcm(0x29, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, &(0x7f00000001c0)=ANY=[], 0x48) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303, 0x36}, "f1ff5ef2fe010017", "9e8ecc7bb5352776725e1047711330ff2bb17b5508000000000000009bc400", "c60437b0", "46b0dc72b7b1d30e"}, 0x38) openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x80001) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/freeze_filesystems', 0x20881, 0x0) write$cgroup_int(r8, &(0x7f0000000040)=0xcb46, 0x12) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default trusted:syz -9223372036854779533'], 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000180)={r4, r5}) ftruncate(r5, 0xfffffffffffffffb) sendmmsg$inet(r6, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x1}], 0x1, &(0x7f0000000e40)=ANY=[], 0xd0}}], 0x1, 0x40) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14) 2.468343537s ago: executing program 6 (id=1141): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000000100)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, &(0x7f0000004780)={[], 0xf000}, 0x1000) socket$vsock_stream(0x28, 0x1, 0x28) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000002850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000480)={r3}, 0xc) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffe000/0x1000)=nil) 1.625922964s ago: executing program 3 (id=1142): bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0x14) socket$inet(0x10, 0x3, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000b80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace$ARCH_SHSTK_STATUS(0x1e, r1, 0x0, 0x5005) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0) socket$key(0xf, 0x3, 0x2) timer_delete(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) link(&(0x7f0000000940)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x162341, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f00000000c0), r6, 0x0, 0x0, 0x1}}, 0x20) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="160000001f0137f73199aee6fdb9291b3091ec1a2d41d227975ad8ec030f5919f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a141c3f5ab6db772f87c787817a9b699dd60732d952716b103bc1e91ac5b1ed92f35389580994bb0df9bce07e7a80921888f984139f488d256a67fec0cbb5c4e93d5c151d97f676ab93b1efbd46f600dc964231e3257bf358448fddf894c0cdfa9115adbe5b19bc912fcbc8aac7719b649b1ff1267491da", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 1.602902783s ago: executing program 2 (id=1143): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x3c, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0xfffffffc}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x7}]}, 0x3c}}, 0x0) 1.455679721s ago: executing program 6 (id=1144): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000340)=0x100000001, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000"], 0x0) r1 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) ioctl$SNAPSHOT_S2RAM(r1, 0x330b) keyctl$dh_compute(0x17, &(0x7f0000000800)={r3, r3, r3}, 0x0, 0xffffffffffffff92, &(0x7f0000000080)={&(0x7f0000000200)={'crc32-pclmul\x00'}}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000002c0)={0xa, 0x4e20, 0x80000, @loopback, 0x7}, 0x1c, 0x0}, 0xc044) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r7, &(0x7f0000000040)={0x23, 0x2, 0xb, 0x5}, 0x10) ioctl$KVM_RUN(r6, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e24, 0x2, @loopback, 0x5}, 0x1c) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000000)={'pcl724\x00', [0xfffffffb, 0x2, 0x40000002, 0x6, 0x1, 0x2, 0x7f, 0x7, 0x5, 0x54, 0x5, 0xfff, 0xfffffff7, 0x5, 0x79, 0x8, 0x2, 0x6, 0x7, 0x100, 0x9, 0x8, 0x0, 0x80000000, 0xc4, 0x9, 0x4, 0x7a0, 0x7, 0x10, 0x0, 0x2]}) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303, 0x3a}, "56db7a2700f81000", "a8ef1a3a33071799b7bbebfa6dc371290d0e3808802000", "336819df", "4008000000008700"}, 0x38) sendto$inet6(r0, &(0x7f00000000c0)="ff71e4ca0c558de7a90b5876f7", 0xfffffffffffffdfc, 0x80, 0x0, 0x0) 1.455436585s ago: executing program 2 (id=1145): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x8, 0x3, 0x2a4, 0x0, 0x11, 0x148, 0x140, 0x0, 0x210, 0x2a8, 0x2a8, 0x210, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast1, @empty, 0xffffffff, 0x0, 'vxcan1\x00', 'ipvlan0\x00', {0xff}, {}, 0x88, 0x0, 0x52}, 0x0, 0xe4, 0x140, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x2, 0x0, [0x4e24, 0x4e20, 0x4e22, 0x4e24, 0x4e24, 0x4e20, 0x4e23, 0x4e20, 0x4e20, 0x4e20, 0x4e24, 0x4e21, 0x4e21, 0x4e21, 0x4e22], [0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0xf, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1]}}, @inet=@rpfilter={{0x24}, {0x2}}]}, @common=@inet=@HMARK={0x5c, 'HMARK\x00', 0x0, {@ipv4=@loopback, [0xffffffff, 0xffffffff, 0xffffffff, 0xffffff00], 0x4e23, 0x4e22, 0x4e22, 0x4e23, 0x1, 0x1ff, 0x9, 0x3, 0x7fffffff}}}, {{@ip={@multicast1, @broadcast, 0x0, 0xff, 'nicvf0\x00', 'dummy0\x00', {}, {}, 0x2e, 0x1}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x5, 0x3, 0x6, 0x6, 0x1, 0x2], 0x1, 0x1}, {0xffffffffffffffff, [0x1, 0x0, 0x0, 0x5, 0x1, 0x3], 0x0, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x300) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x800004, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x25, 0x34]}}]}) 1.369706879s ago: executing program 2 (id=1146): memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x404c03, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000002340)=@IORING_OP_RECVMSG={0xa, 0x1, 0x3, 0xffffffffffffffff, 0x0, &(0x7f0000002300)={&(0x7f00000009c0)=@tipc=@name, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000a40)=""/89, 0x59}, {&(0x7f0000000ac0)=""/211, 0xd3}], 0x2, &(0x7f0000001300)=""/4096, 0x1000}, 0x0, 0x40002100, 0x0, {0x2}}) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f0000000180)=0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x9}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x810}, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x20004, 0xffffffffffffffff, 0x2}) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f62726964676500140001007767"], 0xa8}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c69700014000780080006400000020008000840"], 0x60}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) socket$nl_netfilter(0x10, 0x3, 0xc) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f0000000140)=0x5) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0205710, 0x0) munlockall() mknod(&(0x7f0000000080)='./bus\x00', 0x8000, 0x6) mount(&(0x7f00000000c0)=@filename='./bus\x00', &(0x7f0000000040)='./bus\x00', &(0x7f0000000280)='ramfs\x00', 0x400080, &(0x7f00000001c0)='disrArd') 386.862643ms ago: executing program 2 (id=1147): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000200)={0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_RENAMEAT={0x23, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) (fail_nth: 3) 0s ago: executing program 6 (id=1148): r0 = socket$alg(0x26, 0x5, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000080), 0x200000, 0x0) r1 = socket(0x2, 0x80805, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000680)={0x9, {{0xa, 0x4e23, 0x4a5, @empty, 0xff}}}, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000015c0), 0x1, 0x0) write$binfmt_register(r4, &(0x7f0000000940)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x800, 0x3a, '{.{*%\\^-]\\', 0x3a, '\x00', 0x3a, './file0', 0x3a, [0x46]}, 0x33) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000001c0)=@assoc_value={r3, 0xe1d1}, 0x8) ioctl$KVM_TDX_GET_CPUID(0xffffffffffffffff, 0xc004aeba, &(0x7f0000000780)={0x5, 0x0, &(0x7f0000000740)={0x1, 0x0, [{0xb, 0xfc, 0x0, 0x80000000, 0xc, 0x4068, 0x4}]}}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000540)={&(0x7f00000007c0)=[0x0, 0x0], &(0x7f0000000380)=[{}, {}, {}, {}], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x5, 0x2}) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000104000000185526d48acf743029", @ANYRES64=0x0, @ANYRESHEX=r2, @ANYRES16=r6], 0x48}}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000300)={0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r9, 0x0}) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) getpid() ioctl$DRM_IOCTL_MODE_DIRTYFB(r7, 0xc01864b1, &(0x7f0000000080)={r10, 0x3, 0x6, 0x3, &(0x7f0000000380)=[{0xbc3, 0x8d, 0x10d3, 0x776}, {0x4, 0x200, 0x2}, {0x3, 0x80, 0x10, 0x52be}]}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r7, 0xc01464ba, &(0x7f00000005c0)={0x4, r5, r10}) bind$alg(r0, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) close(r0) r12 = syz_io_uring_setup(0xf01, &(0x7f0000000200)={0x0, 0x0, 0x2d10, 0x1, 0x34f, 0x0, 0x0}, &(0x7f0000000340)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000180)=0x0) r16 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r16, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001100010027bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="b81ec993699fe9a4cfddcdf9c6be28b8f6"], 0x28}}, 0x0) syz_io_uring_submit(r13, r14, r15, &(0x7f00000001c0)=@IORING_OP_RENAMEAT={0x23, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) io_uring_enter(r12, 0x1, 0x5, 0x1, 0x0, 0x0) read(r1, &(0x7f0000000280)=""/25, 0x19) kernel console output (not intermixed with test programs): parameter '0x0000000000000000' [ 222.454807][ T8110] fuse: Bad value for 'fd' [ 222.730971][ T8132] autofs: Unknown parameter '0x0000000000000000' [ 222.923525][ T8140] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 223.195772][ T8147] netlink: 12 bytes leftover after parsing attributes in process `syz.2.662'. [ 223.436713][ T8159] autofs: Unknown parameter '0x0000000000000000' [ 223.670299][ T8169] netlink: 84 bytes leftover after parsing attributes in process `syz.4.670'. [ 224.461662][ T8179] netlink: 4 bytes leftover after parsing attributes in process `syz.3.674'. [ 224.522759][ T8179] ceph: No mds server is up or the cluster is laggy [ 225.748496][ T8191] autofs: Unknown parameter '0x0000000000000000' [ 226.177892][ T6034] IPVS: starting estimator thread 0... [ 226.205838][ T8203] netlink: 4 bytes leftover after parsing attributes in process `syz.3.681'. [ 226.272295][ T8201] IPVS: using max 42 ests per chain, 100800 per kthread [ 226.393934][ T8204] ceph: No mds server is up or the cluster is laggy [ 226.810878][ T8214] netlink: 4 bytes leftover after parsing attributes in process `syz.3.684'. [ 226.936621][ T8214] ceph: No mds server is up or the cluster is laggy [ 226.967390][ T8199] nbd0: detected capacity change from 0 to 128 [ 227.090473][ T5974] block nbd0: Receive control failed (result -104) [ 227.124156][ T5964] block nbd0: Receive control failed (result -32) [ 227.214271][ T8223] netlink: 12 bytes leftover after parsing attributes in process `syz.2.686'. [ 227.386960][ T8223] input: syz0 as /devices/virtual/input/input10 [ 227.424321][ T8223] netlink: 92 bytes leftover after parsing attributes in process `syz.2.686'. [ 227.495572][ T8228] autofs: Unknown parameter '0x0000000000000000' [ 227.501243][ T8228] fuse: Bad value for 'fd' [ 227.613683][ T8232] trusted_key: encrypted_key: insufficient parameters specified [ 229.603030][ T8226] netlink: 12 bytes leftover after parsing attributes in process `syz.0.687'. [ 230.811879][ T8256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.696'. [ 230.881145][ T855] libceph: connect (1)[c::]:6789 error -13 [ 230.885212][ T855] libceph: mon0 (1)[c::]:6789 connect error [ 230.925750][ T8257] ceph: No mds server is up or the cluster is laggy [ 231.180409][ T8263] fuse: Bad value for 'fd' [ 231.239281][ T8268] netlink: 8 bytes leftover after parsing attributes in process `syz.3.697'. [ 231.244006][ T8268] netlink: 8 bytes leftover after parsing attributes in process `syz.3.697'. [ 231.348073][ T8278] overlayfs: missing 'lowerdir' [ 231.358867][ T40] audit: type=1326 audit(1776995416.136:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8273 comm="syz.0.702" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70aefcc code=0x0 [ 232.439928][ T8290] netlink: 4 bytes leftover after parsing attributes in process `syz.0.705'. [ 232.465811][ T6129] libceph: connect (1)[c::]:6789 error -13 [ 232.471062][ T6129] libceph: mon0 (1)[c::]:6789 connect error [ 232.513005][ T8290] ceph: No mds server is up or the cluster is laggy [ 233.272902][ T40] audit: type=1326 audit(1776995417.914:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8298 comm="syz.2.706" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98fcc code=0x7ffc0000 [ 233.291357][ T40] audit: type=1326 audit(1776995417.914:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8298 comm="syz.2.706" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98fcc code=0x7ffc0000 [ 233.451917][ T40] audit: type=1326 audit(1776995417.914:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8298 comm="syz.2.706" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f98fcc code=0x7ffc0000 [ 233.459371][ T40] audit: type=1326 audit(1776995417.914:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8298 comm="syz.2.706" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98fcc code=0x7ffc0000 [ 233.469885][ T40] audit: type=1326 audit(1776995417.914:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8298 comm="syz.2.706" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98fcc code=0x7ffc0000 [ 233.477516][ T40] audit: type=1326 audit(1776995417.914:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8298 comm="syz.2.706" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f98fcc code=0x7ffc0000 [ 233.486352][ T40] audit: type=1326 audit(1776995417.914:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8298 comm="syz.2.706" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98fcc code=0x7ffc0000 [ 233.496586][ T40] audit: type=1326 audit(1776995417.914:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8298 comm="syz.2.706" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98fcc code=0x7ffc0000 [ 233.511675][ T40] audit: type=1326 audit(1776995417.914:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8298 comm="syz.2.706" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7f98fcc code=0x7ffc0000 [ 234.350652][ T8324] netlink: 24 bytes leftover after parsing attributes in process `syz.2.709'. [ 234.410815][ T8324] capability: warning: `syz.2.709' uses 32-bit capabilities (legacy support in use) [ 235.482788][ T6054] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 235.557880][ T8338] netlink: 12 bytes leftover after parsing attributes in process `syz.3.716'. [ 235.646364][ T6054] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 235.650226][ T6054] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 235.656428][ T6054] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 235.660638][ T6054] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.747206][ T10] libceph: connect (1)[c::]:6789 error -101 [ 235.754800][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 235.780577][ T8347] ceph: No mds server is up or the cluster is laggy [ 235.919089][ T6054] usb 5-1: GET_CAPABILITIES returned 0 [ 235.928706][ T6054] usbtmc 5-1:16.0: can't read capabilities [ 236.149163][ T855] usb 5-1: USB disconnect, device number 13 [ 237.115214][ T8374] pim6reg: entered allmulticast mode [ 237.122976][ T8374] team0: entered allmulticast mode [ 237.124857][ T8374] team_slave_0: entered allmulticast mode [ 237.127072][ T8374] team_slave_1: entered allmulticast mode [ 237.130348][ T8374] team0: left allmulticast mode [ 237.132177][ T8374] team_slave_0: left allmulticast mode [ 237.134112][ T8374] team_slave_1: left allmulticast mode [ 237.136147][ T8374] pim6reg: left allmulticast mode [ 238.194423][ T8388] bridge_slave_0: left allmulticast mode [ 238.196567][ T8388] bridge_slave_0: left promiscuous mode [ 238.200109][ T8388] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.354459][ T8388] bridge_slave_1: left allmulticast mode [ 238.356260][ T8388] bridge_slave_1: left promiscuous mode [ 238.358413][ T8388] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.374708][ T8388] bond0: (slave bond_slave_0): Releasing backup interface [ 238.387800][ T8388] bond0: (slave bond_slave_1): Releasing backup interface [ 238.398316][ T8388] team0: Port device team_slave_0 removed [ 238.404083][ T8388] team0: Port device team_slave_1 removed [ 238.407557][ T8388] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 238.410506][ T8388] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 238.414152][ T8388] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 238.416515][ T8388] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 238.420137][ T8388] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 238.500852][ T8390] random: crng reseeded on system resumption [ 240.131813][ T8411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.739'. [ 240.136309][ T8411] openvswitch: netlink: Missing key (keys=40, expected=80) [ 240.148722][ T8411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.739'. [ 240.222148][ T8413] netlink: 24 bytes leftover after parsing attributes in process `syz.3.738'. [ 241.140557][ T8428] netlink: 28 bytes leftover after parsing attributes in process `syz.0.741'. [ 241.190724][ T8430] [U]  [ 241.192087][ T8430] [U] K{ [ 241.193899][ T8430] [U] T 1ŠFFˊ`GJǘGO/MC [ 241.196652][ T8430] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 241.202409][ T8430] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 241.206803][ T8430] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 241.219599][ T8430] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 241.228129][ T8430] [U] ܾ4B`˗HT_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 241.232922][ T8430] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 241.237367][ T8430] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`Ʀ\ [ 241.268929][ T8430] [U] MX"{; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 241.272199][ T8430] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 241.277580][ T8430] [U] 22Ʃ۩X?0;3U [ 241.279951][ T8430] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 241.288804][ T8430] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 241.292131][ T8430] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 241.295243][ T8430] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 241.297791][ T8430] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 241.301977][ T8430] [U] EC [ 241.303432][ T8430] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 241.318268][ T8429] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 242.463616][ T8444] pim6reg: entered allmulticast mode [ 242.471634][ T8444] team0: entered allmulticast mode [ 242.473405][ T8444] team_slave_0: entered allmulticast mode [ 242.475464][ T8444] team_slave_1: entered allmulticast mode [ 242.478241][ T8444] team0: left allmulticast mode [ 242.479975][ T8444] team_slave_0: left allmulticast mode [ 242.482781][ T8444] team_slave_1: left allmulticast mode [ 242.485695][ T8444] pim6reg: left allmulticast mode [ 243.144938][ T8451] netlink: 4 bytes leftover after parsing attributes in process `syz.0.751'. [ 243.158954][ T6166] libceph: connect (1)[c::]:6789 error -13 [ 243.161151][ T6166] libceph: mon0 (1)[c::]:6789 connect error [ 243.207627][ T8451] ceph: No mds server is up or the cluster is laggy [ 243.489365][ T8456] netlink: 'syz.0.752': attribute type 10 has an invalid length. [ 243.556599][ T8464] netlink: 20 bytes leftover after parsing attributes in process `syz.3.754'. [ 244.164002][ T8483] netlink: 72 bytes leftover after parsing attributes in process `syz.4.759'. [ 245.169511][ T8506] netlink: 4 bytes leftover after parsing attributes in process `syz.4.770'. [ 245.185745][ T10] libceph: connect (1)[c::]:6789 error -101 [ 245.187867][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 245.234729][ T8506] ceph: No mds server is up or the cluster is laggy [ 245.694152][ T8519] netlink: 20 bytes leftover after parsing attributes in process `syz.4.774'. [ 246.681921][ T8530] netlink: 72 bytes leftover after parsing attributes in process `syz.0.777'. [ 246.912513][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 246.912526][ T40] audit: type=1800 audit(1776995430.687:38): pid=8537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.779" name=6E73BF12E10BC845E0807291376B6A9C4CCE5A99F85125232DD3D213E8DCE1FDDEEFF2A7D2AB97C26527FC108503 dev="overlay" ino=18847 res=0 errno=0 [ 246.970173][ T8533] bridge_slave_0: left allmulticast mode [ 246.972754][ T8533] bridge_slave_0: left promiscuous mode [ 246.979208][ T8533] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.014901][ T8533] bridge_slave_1: left allmulticast mode [ 247.017014][ T8533] bridge_slave_1: left promiscuous mode [ 247.019904][ T8533] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.083110][ T8533] bond0: (slave bond_slave_0): Releasing backup interface [ 247.096927][ T8533] bond0: (slave bond_slave_1): Releasing backup interface [ 247.123167][ T8533] team0: Port device team_slave_0 removed [ 247.135937][ T8533] team0: Port device team_slave_1 removed [ 247.139768][ T8533] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.147378][ T8533] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.158768][ T8533] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.165098][ T8533] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.175694][ T8533] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 247.236707][ T53] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 247.407681][ T53] usb 9-1: Using ep0 maxpacket: 8 [ 247.412304][ T53] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 247.415454][ T53] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 247.421080][ T53] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 247.426903][ T53] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 247.432560][ T53] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 247.437350][ T53] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 247.443163][ T53] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 247.449010][ T53] usb 9-1: config 168 interface 0 has no altsetting 0 [ 247.453648][ T53] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 247.457223][ T53] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 247.462927][ T53] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 247.467752][ T53] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 247.473304][ T53] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 247.478783][ T53] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 247.484231][ T53] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 247.490530][ T53] usb 9-1: config 168 interface 0 has no altsetting 0 [ 247.496677][ T53] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 247.502535][ T53] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 247.508665][ T53] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 247.514101][ T53] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 247.521361][ T53] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 247.527444][ T53] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 247.535154][ T53] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 247.545235][ T53] usb 9-1: config 168 interface 0 has no altsetting 0 [ 247.562275][ T53] usb 9-1: string descriptor 0 read error: -22 [ 247.574585][ T8544] netlink: 12 bytes leftover after parsing attributes in process `syz.0.781'. [ 247.575326][ T53] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 247.583564][ T53] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.606385][ T53] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 247.691347][ T46] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.711671][ T8544] input: syz0 as /devices/virtual/input/input11 [ 248.166673][ T10] usb 9-1: USB disconnect, device number 4 [ 248.315578][ T46] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.490763][ T8567] No such timeout policy "syz0" [ 248.491091][ T8563] netlink: 4 bytes leftover after parsing attributes in process `syz.3.786'. [ 248.503931][ T46] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.635655][ T8572] [U]  [ 248.637115][ T8572] [U] K{ [ 248.638457][ T8572] [U] T 1ŠFFˊ`GJǘGO/MC [ 248.643453][ T8572] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 248.644964][ T46] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.651355][ T8572] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 248.665957][ T8572] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 248.685438][ T8563] ceph: No mds server is up or the cluster is laggy [ 248.694152][ T8572] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 248.703955][ T8572] [U] ܾ4B`˗HT_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 248.711926][ T8572] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 248.725666][ T8572] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`Ʀ\ [ 248.771075][ T8572] [U] MX"{; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 248.779470][ T8572] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 248.784713][ T8572] [U] 22Ʃ۩X?0;3U [ 248.789685][ T8572] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 248.799794][ T8572] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 248.803562][ T8572] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 248.806561][ T8572] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 248.810628][ T8572] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 248.816154][ T8572] [U] EC [ 248.827346][ T8572] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 248.897189][ T46] bridge_slave_1: left allmulticast mode [ 248.899101][ T46] bridge_slave_1: left promiscuous mode [ 248.902939][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.910080][ T46] bridge_slave_0: left allmulticast mode [ 248.911637][ T46] bridge_slave_0: left promiscuous mode [ 248.913429][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.927586][ T46] batman_adv: batadv0: Interface deactivated: gretap1 [ 249.107942][ T46] batman_adv: batadv0: Removing interface: gretap1 [ 249.224958][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 249.253113][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 249.263745][ T46] bond0 (unregistering): Released all slaves [ 249.603168][ T5668] 8021q: adding VLAN 0 to HW filter on device eth2 [ 249.877448][ T8566] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 249.953567][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 249.989265][ T46] hsr_slave_0: left promiscuous mode [ 249.991988][ T46] hsr_slave_1: left promiscuous mode [ 249.997254][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.999888][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.003102][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.011216][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.018331][ T46] batman_adv: batadv0: Interface deactivated: dummy0 [ 250.023658][ T46] batman_adv: batadv0: Removing interface: dummy0 [ 250.041399][ T46] veth1_macvtap: left promiscuous mode [ 250.043764][ T46] veth0_macvtap: left promiscuous mode [ 250.045294][ T5960] cgroup: fork rejected by pids controller in [ 250.046052][ T46] veth1_vlan: left promiscuous mode [ 250.048099][ T5960] /syz2 [ 250.049852][ T46] veth0_vlan: left promiscuous mode [ 250.055175][ T5960] [ 250.217532][ T8605] netlink: 4 bytes leftover after parsing attributes in process `syz.3.798'. [ 250.331981][ T46] team0 (unregistering): Port device team_slave_1 removed [ 250.342266][ T46] team0 (unregistering): Port device team_slave_0 removed [ 250.462916][ T5668] 8021q: adding VLAN 0 to HW filter on device eth3 [ 250.558639][ T8603] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 250.949878][ T5668] 8021q: adding VLAN 0 to HW filter on device eth4 [ 250.954267][ T5964] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 250.971746][ T5964] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 250.974092][ T8627] pim6reg: entered allmulticast mode [ 250.981524][ T5964] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 250.989978][ T5964] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 250.992991][ T8627] team0: entered allmulticast mode [ 250.993252][ T8627] team0: left allmulticast mode [ 250.997499][ T8627] pim6reg: left allmulticast mode [ 250.999283][ T5964] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 251.041569][ T8623] vxcan1 speed is unknown, defaulting to 1000 [ 251.130245][ T8623] virt_wifi0 speed is unknown, defaulting to 1000 [ 251.212660][ T5668] 8021q: adding VLAN 0 to HW filter on device eth5 [ 251.251156][ T8623] chnl_net:caif_netlink_parms(): no params data found [ 251.374208][ T46] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.497057][ T46] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.511271][ T8623] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.514471][ T8623] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.517599][ T8623] bridge_slave_0: entered allmulticast mode [ 251.522939][ T8623] bridge_slave_0: entered promiscuous mode [ 251.528319][ T8623] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.531511][ T8623] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.535581][ T8623] bridge_slave_1: entered allmulticast mode [ 251.539736][ T8623] bridge_slave_1: entered promiscuous mode [ 251.581255][ T8623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.592320][ T8623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.635813][ T46] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.655727][ T8623] team0: Port device team_slave_0 added [ 251.659299][ T8623] team0: Port device team_slave_1 added [ 251.678916][ T8623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.681151][ T8623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 251.689855][ T8623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.694503][ T8623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.696679][ T8623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 251.705777][ T8623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.731243][ T8623] hsr_slave_0: entered promiscuous mode [ 251.733627][ T8623] hsr_slave_1: entered promiscuous mode [ 251.735921][ T8623] debugfs: 'hsr0' already exists in 'hsr' [ 251.738228][ T8623] Cannot create hsr debugfs directory [ 251.792164][ T46] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.028730][ T8652] netlink: 4 bytes leftover after parsing attributes in process `syz.3.808'. [ 252.316906][ T8660] netlink: 'syz.4.807': attribute type 2 has an invalid length. [ 252.351634][ T46] bond0 (unregistering): Released all slaves [ 252.578539][ T5668] 8021q: adding VLAN 0 to HW filter on device eth6 [ 252.924090][ T46] hsr_slave_0: left promiscuous mode [ 252.986597][ T46] hsr_slave_1: left promiscuous mode [ 252.999363][ T46] veth1_macvtap: left promiscuous mode [ 253.001166][ T46] veth0_macvtap: left promiscuous mode [ 253.019273][ T46] veth1_vlan: left promiscuous mode [ 253.021023][ T46] veth0_vlan: left promiscuous mode [ 253.166756][ T12] smbdirect: ib_dev[syz1] removed [ 253.231634][ T5974] Bluetooth: hci0: command tx timeout [ 253.468500][ T8623] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 253.479512][ T8623] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 253.482415][ T8623] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 253.507767][ T8623] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 253.518937][ T8623] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 253.537901][ T8623] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 253.542629][ T8623] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 253.546997][ T8698] No such timeout policy "syz0" [ 253.655441][ T8623] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 253.751254][ T8707] [U]  [ 253.752351][ T8707] [U] K{ [ 253.754027][ T8707] [U] T 1ŠFFˊ`GJǘGO/MC [ 253.759506][ T8707] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 253.766462][ T8707] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 253.775616][ T8707] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 253.796554][ T8707] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 253.807779][ T8707] [U] ܾ4B`˗HT_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 253.812893][ T8707] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 253.821813][ T8707] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`Ʀ\ [ 253.858262][ T8707] [U] MX"{; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 253.862702][ T8707] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 253.867487][ T8707] [U] 22Ʃ۩X?0;3U [ 253.872115][ T8707] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 253.881774][ T8707] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 253.887453][ T8707] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 253.891098][ T8707] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 253.894955][ T8707] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 253.899069][ T8707] [U] EC [ 253.901558][ T8707] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 254.036636][ T46] IPVS: stop unused estimator thread 0... [ 254.053650][ T8623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.080161][ T8623] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.090575][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.093147][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.154727][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.157089][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.177275][ T8623] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 254.181755][ T8623] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 254.281134][ T8697] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 254.337275][ T8623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.349676][ T8722] netlink: 4 bytes leftover after parsing attributes in process `syz.4.816'. [ 254.363500][ T53] libceph: connect (1)[c::]:6789 error -101 [ 254.367101][ T53] libceph: mon0 (1)[c::]:6789 connect error [ 254.383703][ T8623] veth0_vlan: entered promiscuous mode [ 254.395519][ T8623] veth1_vlan: entered promiscuous mode [ 254.413551][ T8722] ceph: No mds server is up or the cluster is laggy [ 254.421914][ T8623] veth0_macvtap: entered promiscuous mode [ 254.442192][ T8623] veth1_macvtap: entered promiscuous mode [ 254.464322][ T8623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.491631][ T8623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.510255][ T3728] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.513306][ T3728] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.521066][ T3728] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.526429][ T3728] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.539048][ T8727] netlink: 4 bytes leftover after parsing attributes in process `syz.4.817'. [ 254.638071][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.640675][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.659049][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.661548][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.787924][ T8734] pim6reg: entered allmulticast mode [ 254.805000][ T8734] team0: entered allmulticast mode [ 254.807259][ T8734] team_slave_0: entered allmulticast mode [ 254.809710][ T8734] team_slave_1: entered allmulticast mode [ 254.812421][ T8734] team0: left allmulticast mode [ 254.814170][ T8734] team_slave_0: left allmulticast mode [ 254.816257][ T8734] team_slave_1: left allmulticast mode [ 254.818462][ T8734] pim6reg: left allmulticast mode [ 255.454218][ T5974] Bluetooth: hci0: command tx timeout [ 256.364867][ T8773] netlink: 72 bytes leftover after parsing attributes in process `syz.3.839'. [ 256.976869][ T8780] pim6reg: entered allmulticast mode [ 256.980606][ T8780] team0: entered allmulticast mode [ 256.983590][ T8780] team_slave_0: entered allmulticast mode [ 256.986229][ T8780] team_slave_1: entered allmulticast mode [ 256.989397][ T8780] team0: left allmulticast mode [ 256.991178][ T8780] team_slave_0: left allmulticast mode [ 256.993693][ T8780] team_slave_1: left allmulticast mode [ 256.995856][ T8780] pim6reg: left allmulticast mode [ 257.483190][ T8793] No such timeout policy "syz0" [ 257.678482][ T5974] Bluetooth: hci0: command tx timeout [ 258.335115][ T8813] netlink: 72 bytes leftover after parsing attributes in process `syz.3.843'. [ 258.475946][ T8816] pim6reg: entered allmulticast mode [ 258.485151][ T8816] team0: entered allmulticast mode [ 258.488798][ T8816] team0: left allmulticast mode [ 258.491480][ T8816] pim6reg: left allmulticast mode [ 259.309549][ T6141] block nbd0: Connection timed out, retrying (0/2 alive) [ 259.315399][ T6141] block nbd0: Dead connection, failed to find a fallback [ 259.332827][ T6141] block nbd0: shutting down sockets [ 259.352289][ T6141] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 259.374484][ T6141] Buffer I/O error on dev nbd0, logical block 0, async page read [ 259.386647][ T6160] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 259.420704][ T6160] Buffer I/O error on dev nbd0, logical block 0, async page read [ 259.427965][ T6160] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 259.431252][ T6160] Buffer I/O error on dev nbd0, logical block 0, async page read [ 259.435077][ T6160] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 259.439616][ T6160] Buffer I/O error on dev nbd0, logical block 0, async page read [ 259.443101][ T6160] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 259.446304][ T6160] Buffer I/O error on dev nbd0, logical block 0, async page read [ 259.450291][ T6160] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 259.456365][ T6160] Buffer I/O error on dev nbd0, logical block 0, async page read [ 259.463175][ T6160] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 259.466720][ T6160] Buffer I/O error on dev nbd0, logical block 0, async page read [ 259.473269][ T6160] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 259.478931][ T6160] Buffer I/O error on dev nbd0, logical block 0, async page read [ 259.483989][ T6160] ldm_validate_partition_table(): Disk read failed. [ 259.487968][ T6160] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 259.491055][ T6160] Buffer I/O error on dev nbd0, logical block 0, async page read [ 259.496119][ T6160] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 259.499667][ T6160] Buffer I/O error on dev nbd0, logical block 0, async page read [ 259.506466][ T8833] No such timeout policy "syz0" [ 259.507013][ T6160] Dev nbd0: unable to read RDB block 0 [ 259.511489][ T6160] nbd0: unable to read partition table [ 259.666519][ T6160] ldm_validate_partition_table(): Disk read failed. [ 259.670187][ T6160] Dev nbd0: unable to read RDB block 0 [ 259.674515][ T6160] nbd0: unable to read partition table [ 259.745792][ T6160] ldm_validate_partition_table(): Disk read failed. [ 259.748395][ T6160] Dev nbd0: unable to read RDB block 0 [ 259.757503][ T8836] pim6reg: entered allmulticast mode [ 259.757631][ T6160] nbd0: unable to read partition table [ 259.778276][ T8836] team0: entered allmulticast mode [ 259.780739][ T8836] team_slave_0: entered allmulticast mode [ 259.782932][ T8836] team_slave_1: entered allmulticast mode [ 259.789587][ T8836] team0: left allmulticast mode [ 259.791483][ T8836] team_slave_0: left allmulticast mode [ 259.794319][ T8836] team_slave_1: left allmulticast mode [ 259.798626][ T8836] pim6reg: left allmulticast mode [ 259.826591][ T6160] ldm_validate_partition_table(): Disk read failed. [ 259.833841][ T6160] Dev nbd0: unable to read RDB block 0 [ 259.847980][ T6160] nbd0: unable to read partition table [ 259.910490][ T5974] Bluetooth: hci0: command tx timeout [ 260.000028][ T8839] netlink: 12 bytes leftover after parsing attributes in process `syz.2.852'. [ 260.450185][ T3728] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.590356][ T3728] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.696921][ T5964] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 260.704276][ T3728] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.710522][ T5964] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 260.716550][ T5964] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 260.720667][ T5964] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 260.723802][ T5964] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 260.754384][ T8850] vxcan1 speed is unknown, defaulting to 1000 [ 260.845566][ T3728] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.154421][ T8858] netlink: 72 bytes leftover after parsing attributes in process `syz.3.859'. [ 261.302767][ T8850] chnl_net:caif_netlink_parms(): no params data found [ 261.350460][ T3728] bridge_slave_1: left allmulticast mode [ 261.352253][ T3728] bridge_slave_1: left promiscuous mode [ 261.354633][ T3728] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.361251][ T3728] bridge_slave_0: left allmulticast mode [ 261.363184][ T3728] bridge_slave_0: left promiscuous mode [ 261.365608][ T3728] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.590684][ T3728] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 261.597381][ T3728] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 261.603021][ T3728] bond0 (unregistering): Released all slaves [ 261.713202][ T8850] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.717444][ T8850] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.719879][ T8850] bridge_slave_0: entered allmulticast mode [ 261.722565][ T8850] bridge_slave_0: entered promiscuous mode [ 261.726183][ T8850] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.728680][ T8850] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.731352][ T8850] bridge_slave_1: entered allmulticast mode [ 261.734387][ T8850] bridge_slave_1: entered promiscuous mode [ 261.749937][ T8850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.754899][ T8850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.787923][ T8850] team0: Port device team_slave_0 added [ 261.791670][ T8850] team0: Port device team_slave_1 added [ 261.815321][ T8850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.816210][ T8873] fuse: Bad value for 'fd' [ 261.817899][ T8850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 261.817934][ T8850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.834585][ T8850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.837585][ T8850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 261.848165][ T8850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.899228][ T8879] cgroup: fork rejected by pids controller in /syz3 [ 261.915923][ T8850] hsr_slave_0: entered promiscuous mode [ 261.921396][ T8850] hsr_slave_1: entered promiscuous mode [ 261.954970][ T5668] 8021q: adding VLAN 0 to HW filter on device eth9 [ 262.253848][ T5668] 8021q: adding VLAN 0 to HW filter on device eth6 [ 262.388758][ T3728] hsr_slave_0: left promiscuous mode [ 262.398770][ T3728] hsr_slave_1: left promiscuous mode [ 262.401638][ T3728] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.404683][ T3728] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.407933][ T3728] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 262.410575][ T3728] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.419793][ T3728] veth1_macvtap: left promiscuous mode [ 262.423406][ T3728] veth0_macvtap: left promiscuous mode [ 262.425753][ T3728] veth1_vlan: left promiscuous mode [ 262.427458][ T3728] veth0_vlan: left promiscuous mode [ 262.547447][ T5964] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 262.554831][ T5964] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 262.558806][ T5964] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 262.566979][ T5964] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 262.570579][ T5964] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 262.601888][ T3728] team0 (unregistering): Port device team_slave_1 removed [ 262.617204][ T3728] team0 (unregistering): Port device team_slave_0 removed [ 262.780080][ T8899] vxcan1 speed is unknown, defaulting to 1000 [ 262.893956][ T5974] Bluetooth: hci0: command tx timeout [ 263.032481][ T8899] chnl_net:caif_netlink_parms(): no params data found [ 263.161532][ T8850] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 263.167425][ T8850] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 263.171653][ T8850] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 263.182549][ T8850] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 263.201081][ T8850] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 263.207799][ T8850] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 263.210947][ T8850] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 263.216100][ T8850] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 263.219337][ T8899] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.222980][ T8899] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.226603][ T8899] bridge_slave_0: entered allmulticast mode [ 263.229698][ T8899] bridge_slave_0: entered promiscuous mode [ 263.236913][ T8899] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.241680][ T8899] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.246700][ T8899] bridge_slave_1: entered allmulticast mode [ 263.250604][ T8899] bridge_slave_1: entered promiscuous mode [ 263.286356][ T8899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.293103][ T8899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.324590][ T8899] team0: Port device team_slave_0 added [ 263.335524][ T8899] team0: Port device team_slave_1 added [ 263.364674][ T8899] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.367235][ T8899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 263.376298][ T8899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.381548][ T8899] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.384499][ T8899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 263.394931][ T8899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.505537][ T3728] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.527550][ T8899] hsr_slave_0: entered promiscuous mode [ 263.531342][ T8899] hsr_slave_1: entered promiscuous mode [ 263.534966][ T8899] debugfs: 'hsr0' already exists in 'hsr' [ 263.537475][ T8899] Cannot create hsr debugfs directory [ 263.647881][ T3728] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.682062][ T8850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.745286][ T3728] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.756473][ T8850] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.769987][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.773021][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.785490][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.788686][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.808468][ T3728] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.944066][ T3728] bridge_slave_1: left allmulticast mode [ 263.946207][ T3728] bridge_slave_1: left promiscuous mode [ 263.948538][ T3728] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.957988][ T3728] bridge_slave_0: left allmulticast mode [ 263.959856][ T3728] bridge_slave_0: left promiscuous mode [ 263.962520][ T3728] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.224851][ T3728] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 264.231740][ T3728] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 264.238295][ T3728] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 264.242847][ T3728] bond0 (unregistering): Released all slaves [ 264.297840][ T8850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.357538][ T8850] veth0_vlan: entered promiscuous mode [ 264.368901][ T8850] veth1_vlan: entered promiscuous mode [ 264.434759][ T8850] veth0_macvtap: entered promiscuous mode [ 264.443053][ T8850] veth1_macvtap: entered promiscuous mode [ 264.457655][ T8850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.475317][ T8850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.504917][ T116] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.509146][ T116] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.512020][ T116] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.515439][ T116] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.541461][ T8952] pim6reg: entered allmulticast mode [ 264.561325][ T8952] team0: entered allmulticast mode [ 264.563495][ T8952] team0: left allmulticast mode [ 264.565397][ T8952] pim6reg: left allmulticast mode [ 264.664147][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.668407][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.692762][ T116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.695784][ T116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.774400][ T5974] Bluetooth: hci1: command tx timeout [ 264.780274][ T8962] netlink: 12 bytes leftover after parsing attributes in process `syz.2.855'. [ 264.942003][ T8969] fuse: Bad value for 'fd' [ 265.006013][ T8972] netlink: 4 bytes leftover after parsing attributes in process `syz.2.870'. [ 265.024644][ T3728] hsr_slave_0: left promiscuous mode [ 265.026948][ T3728] hsr_slave_1: left promiscuous mode [ 265.040732][ T3728] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.044093][ T3728] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 265.048044][ T3728] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.050978][ T3728] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.058373][ T3728] veth1_macvtap: left promiscuous mode [ 265.060523][ T3728] veth0_macvtap: left promiscuous mode [ 265.074600][ T39] libceph: connect (1)[c::]:6789 error -101 [ 265.076810][ T39] libceph: mon0 (1)[c::]:6789 connect error [ 265.121917][ T8975] ceph: No mds server is up or the cluster is laggy [ 265.125122][ T5974] Bluetooth: hci0: command tx timeout [ 265.303190][ T3728] team0 (unregistering): Port device team_slave_1 removed [ 265.324552][ T3728] team0 (unregistering): Port device team_slave_0 removed [ 265.391800][ T12] smc: removing ib device syz2 [ 265.427503][ T12] smbdirect: ib_dev[syz2] removed [ 265.612760][ T841] vxcan1 speed is unknown, defaulting to 1000 [ 265.630997][ T841] syz2: Port: 1 Link DOWN [ 265.892189][ T5964] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 265.898153][ T5964] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 265.911592][ T5964] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 265.917985][ T5964] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 265.924262][ T5964] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 265.956180][ T8899] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 266.000631][ T8899] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 266.010324][ T8899] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 266.040115][ T8899] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 266.058051][ T8899] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 266.124775][ T8899] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 266.127897][ T8899] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 266.136812][ T8899] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 266.277245][ T9003] No such timeout policy "syz0" [ 266.371684][ T9004] [U]  [ 266.372827][ T9004] [U] K{ [ 266.374069][ T9004] [U] t 1ŠFfˊ`GJgo/mC [ 266.377210][ T9004] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 266.382957][ T9004] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 266.387231][ T9004] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 266.400412][ T9004] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 266.409890][ T9004] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 266.413369][ T9004] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 266.417383][ T9004] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 266.454227][ T9004] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 266.457578][ T9004] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 266.462256][ T9004] [U] 22Ʃx?0;3u [ 266.464204][ T9004] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 266.480506][ T9004] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 266.591246][ T9004] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 266.594143][ T9004] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 266.685658][ T9004] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 266.692468][ T9004] [U] ec [ 266.693562][ T9004] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 266.932689][ T8899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.996120][ T5974] Bluetooth: hci1: command tx timeout [ 267.015958][ T8986] chnl_net:caif_netlink_parms(): no params data found [ 267.030516][ T8899] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.190529][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.193500][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.211596][ T9001] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 267.224660][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.227742][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.252405][ T9018] random: crng reseeded on system resumption [ 267.276835][ T8986] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.279578][ T8986] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.282065][ T8986] bridge_slave_0: entered allmulticast mode [ 267.289146][ T8986] bridge_slave_0: entered promiscuous mode [ 267.297610][ T8986] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.300138][ T8986] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.303292][ T8986] bridge_slave_1: entered allmulticast mode [ 267.306914][ T8986] bridge_slave_1: entered promiscuous mode [ 267.314933][ T9020] netlink: 12 bytes leftover after parsing attributes in process `syz.2.876'. [ 267.327452][ T8986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.336917][ T8986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.337274][ T5974] Bluetooth: hci0: command tx timeout [ 267.371074][ T8986] team0: Port device team_slave_0 added [ 267.376328][ T8986] team0: Port device team_slave_1 added [ 267.396916][ T9022] No such timeout policy "syz0" [ 267.414071][ T8986] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.417173][ T8986] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 267.427168][ T8986] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.437867][ T8986] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.441088][ T8986] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 267.450222][ T8986] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.478147][ T8986] hsr_slave_0: entered promiscuous mode [ 267.480811][ T8986] hsr_slave_1: entered promiscuous mode [ 267.483367][ T8986] debugfs: 'hsr0' already exists in 'hsr' [ 267.485321][ T8986] Cannot create hsr debugfs directory [ 267.507869][ T9024] [U]  [ 267.509044][ T9024] [U] K{ [ 267.510329][ T9024] [U] T 1ŠFFˊ`GJǘGO/MC [ 267.515666][ T9024] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 267.522180][ T9024] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 267.528425][ T9024] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 267.544028][ T9024] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 267.553221][ T9024] [U] ܾ4B`˗HT_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 267.557830][ T9024] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 267.564358][ T9024] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`Ʀ\ [ 267.603579][ T9024] [U] MX"{; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 267.608022][ T9024] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 267.612913][ T9024] [U] 22Ʃ۩X?0;3U [ 267.615928][ T9024] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 267.647575][ T9024] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 267.650677][ T9024] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 267.656713][ T8986] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 267.662812][ T8986] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 267.666171][ T8986] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 267.670547][ T8986] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 267.671297][ T9024] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 267.673312][ T8986] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 267.681172][ T8986] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 267.686669][ T8986] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 267.693232][ T8986] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 267.706289][ T9024] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 267.716383][ T9024] [U] EC [ 267.719984][ T9024] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 267.810261][ T8899] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.928757][ T8899] veth0_vlan: entered promiscuous mode [ 267.946274][ T8899] veth1_vlan: entered promiscuous mode [ 267.978836][ T8986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.012376][ T8986] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.028081][ T3728] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.031512][ T3728] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.038136][ T8899] veth0_macvtap: entered promiscuous mode [ 268.062206][ T3728] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.064603][ T3728] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.072308][ T8899] veth1_macvtap: entered promiscuous mode [ 268.106617][ T5974] Bluetooth: hci4: command tx timeout [ 268.127072][ T8899] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.139041][ T8899] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.163571][ T3728] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.184048][ T3728] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.187865][ T3728] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.206409][ T3728] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.376152][ T9021] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 268.432179][ T86] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.441088][ T86] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.471655][ T3728] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.474252][ T3728] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.496715][ T8986] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.526916][ T9045] pim6reg: entered allmulticast mode [ 268.534268][ T9045] team0: entered allmulticast mode [ 268.535988][ T9045] team_slave_0: entered allmulticast mode [ 268.539505][ T9045] team_slave_1: entered allmulticast mode [ 268.541705][ T9045] team0: left allmulticast mode [ 268.543425][ T9045] team_slave_0: left allmulticast mode [ 268.547792][ T9045] team_slave_1: left allmulticast mode [ 268.550877][ T9045] pim6reg: left allmulticast mode [ 268.689247][ T8986] veth0_vlan: entered promiscuous mode [ 268.703473][ T8986] veth1_vlan: entered promiscuous mode [ 268.734519][ T8986] veth0_macvtap: entered promiscuous mode [ 268.739237][ T8986] veth1_macvtap: entered promiscuous mode [ 268.750586][ T8986] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.758873][ T8986] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.766823][ T1186] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.772730][ T1186] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.778846][ T1186] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.784779][ T1186] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.855736][ T86] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.858423][ T86] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.880154][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.883715][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.217902][ T5974] Bluetooth: hci1: command tx timeout [ 269.488781][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 269.529781][ T9072] pim6reg: entered allmulticast mode [ 269.536380][ T9072] team0: entered allmulticast mode [ 269.538234][ T9072] team_slave_0: entered allmulticast mode [ 269.541123][ T9072] team_slave_1: entered allmulticast mode [ 269.543860][ T9072] team0: left allmulticast mode [ 269.545559][ T9072] team_slave_0: left allmulticast mode [ 269.547317][ T9072] team_slave_1: left allmulticast mode [ 269.549228][ T9072] pim6reg: left allmulticast mode [ 269.570605][ T5974] Bluetooth: hci0: command tx timeout [ 269.851186][ T9078] random: crng reseeded on system resumption [ 269.901420][ T9080] netlink: 12 bytes leftover after parsing attributes in process `syz.5.884'. [ 269.946971][ T9085] No such timeout policy "syz0" [ 270.062468][ T9087] [U]  [ 270.063413][ T9087] [U] K{ [ 270.065129][ T9087] [U] T 1ŠFFˊ`GJǘGO/MC [ 270.068755][ T9087] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 270.077411][ T9087] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 270.084772][ T9087] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 270.105884][ T9087] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 270.114562][ T9087] [U] ܾ4B`˗HT_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 270.131486][ T9087] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 270.136832][ T9087] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`Ʀ\ [ 270.176000][ T9087] [U] MX"{; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 270.182975][ T9087] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 270.187650][ T9087] [U] 22Ʃ۩X?0;3U [ 270.194476][ T9087] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 270.203708][ T9087] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 270.207758][ T9087] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 270.214849][ T9087] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 270.217504][ T9087] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 270.221725][ T9087] [U] EC [ 270.223984][ T9087] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 270.329857][ T5974] Bluetooth: hci4: command tx timeout [ 270.625553][ T9091] input: syz1 as /devices/virtual/input/input15 [ 270.668084][ T9094] pim6reg: entered allmulticast mode [ 270.671806][ T9094] team0: entered allmulticast mode [ 270.673643][ T9094] team_slave_0: entered allmulticast mode [ 270.675604][ T9094] team_slave_1: entered allmulticast mode [ 270.678099][ T9094] team0: left allmulticast mode [ 270.679728][ T9094] team_slave_0: left allmulticast mode [ 270.681587][ T9094] team_slave_1: left allmulticast mode [ 270.683686][ T9094] pim6reg: left allmulticast mode [ 271.003487][ T9084] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 271.067738][ T9099] netlink: 20 bytes leftover after parsing attributes in process `syz.2.890'. [ 271.440574][ T5974] Bluetooth: hci1: command tx timeout [ 271.525667][ T86] Bluetooth: hci3: Frame reassembly failed (-84) [ 271.530072][ T86] Bluetooth: hci3: Frame reassembly failed (-84) [ 271.648517][ T9112] random: crng reseeded on system resumption [ 272.552314][ T5964] Bluetooth: hci4: command tx timeout [ 272.605402][ T6054] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 272.778223][ T6054] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 272.781524][ T6054] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 272.786266][ T6054] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 272.789379][ T6054] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.979739][ T1035] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 273.013788][ T6054] usb 10-1: GET_CAPABILITIES returned 0 [ 273.015695][ T6054] usbtmc 10-1:16.0: can't read capabilities [ 273.139763][ T1035] usb 8-1: Using ep0 maxpacket: 16 [ 273.142421][ T1035] usb 8-1: no configurations [ 273.144156][ T1035] usb 8-1: can't read configurations, error -22 [ 273.289370][ T1035] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 273.449545][ T1035] usb 8-1: Using ep0 maxpacket: 16 [ 273.452666][ T1035] usb 8-1: no configurations [ 273.454736][ T1035] usb 8-1: can't read configurations, error -22 [ 273.458055][ T1035] usb usb8-port1: attempt power cycle [ 273.665472][ T5964] Bluetooth: hci3: command 0x1003 tx timeout [ 273.668751][ T5974] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 273.823837][ T1035] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 273.856342][ T1035] usb 8-1: Using ep0 maxpacket: 16 [ 273.860160][ T1035] usb 8-1: no configurations [ 273.862421][ T1035] usb 8-1: can't read configurations, error -22 [ 273.873650][ T9128] netlink: 20 bytes leftover after parsing attributes in process `syz.2.902'. [ 274.005218][ T1035] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 274.037946][ T1035] usb 8-1: Using ep0 maxpacket: 16 [ 274.047962][ T1035] usb 8-1: no configurations [ 274.049503][ T1035] usb 8-1: can't read configurations, error -22 [ 274.052408][ T1035] usb usb8-port1: unable to enumerate USB device [ 274.190134][ T9130] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 274.251284][ T9132] random: crng reseeded on system resumption [ 274.412070][ T9136] netlink: 72 bytes leftover after parsing attributes in process `syz.2.905'. [ 274.775214][ T5974] Bluetooth: hci4: command tx timeout [ 275.416106][ T9144] netlink: 72 bytes leftover after parsing attributes in process `syz.2.906'. [ 275.964784][ T9150] syzkaller0: entered promiscuous mode [ 275.967226][ T9150] syzkaller0: entered allmulticast mode [ 276.676466][ T9158] netlink: 28 bytes leftover after parsing attributes in process `syz.2.909'. [ 277.216553][ T9163] netlink: 20 bytes leftover after parsing attributes in process `syz.3.911'. [ 277.807768][ T9167] delete_channel: no stack [ 278.121303][ T9169] random: crng reseeded on system resumption [ 278.594669][ T9175] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3780442281 (7560884562 ns) > initial count (4669583980 ns). Using initial count to start timer. [ 278.632206][ T9119] usbtmc 10-1:16.0: usbtmc_ioctl_request failed -110 [ 278.652076][ T6129] usb 10-1: USB disconnect, device number 2 [ 278.696121][ T9178] FAULT_INJECTION: forcing a failure. [ 278.696121][ T9178] name failslab, interval 1, probability 0, space 0, times 0 [ 278.700306][ T9178] CPU: 3 UID: 0 PID: 9178 Comm: syz.5.917 Tainted: G L syzkaller #0 PREEMPT(full) [ 278.700325][ T9178] Tainted: [L]=SOFTLOCKUP [ 278.700329][ T9178] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 278.700336][ T9178] Call Trace: [ 278.700342][ T9178] [ 278.700347][ T9178] dump_stack_lvl+0x100/0x190 [ 278.700364][ T9178] should_fail_ex.cold+0x5/0xa [ 278.700379][ T9178] should_failslab+0xc2/0x120 [ 278.700392][ T9178] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 278.700410][ T9178] ? skb_clone+0x190/0x400 [ 278.700425][ T9178] skb_clone+0x190/0x400 [ 278.700436][ T9178] netlink_deliver_tap+0xaed/0xcc0 [ 278.700455][ T9178] netlink_unicast+0x6a5/0x850 [ 278.700470][ T9178] ? __pfx_netlink_unicast+0x10/0x10 [ 278.700488][ T9178] netlink_ack+0x655/0xb80 [ 278.700505][ T9178] netlink_rcv_skb+0x333/0x420 [ 278.700518][ T9178] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 278.700532][ T9178] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 278.700551][ T9178] ? netlink_deliver_tap+0x1ae/0xcc0 [ 278.700566][ T9178] netlink_unicast+0x585/0x850 [ 278.700581][ T9178] ? __pfx_netlink_unicast+0x10/0x10 [ 278.700598][ T9178] netlink_sendmsg+0x8b0/0xda0 [ 278.700613][ T9178] ? __pfx_netlink_sendmsg+0x10/0x10 [ 278.700629][ T9178] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 278.700647][ T9178] ____sys_sendmsg+0x9e1/0xb70 [ 278.700662][ T9178] ? __pfx_netlink_sendmsg+0x10/0x10 [ 278.700676][ T9178] ? __pfx_____sys_sendmsg+0x10/0x10 [ 278.700700][ T9178] ___sys_sendmsg+0x190/0x1e0 [ 278.700716][ T9178] ? __pfx____sys_sendmsg+0x10/0x10 [ 278.700736][ T9178] ? find_held_lock+0x2b/0x80 [ 278.700759][ T9178] __sys_sendmsg+0x170/0x220 [ 278.700771][ T9178] ? __pfx___sys_sendmsg+0x10/0x10 [ 278.700780][ T9178] ? __fget_files+0x21f/0x3d0 [ 278.700797][ T9178] ? ksys_write+0x1ac/0x250 [ 278.700811][ T9178] ? rcu_is_watching+0x12/0xc0 [ 278.700827][ T9178] __do_fast_syscall_32+0xe7/0x950 [ 278.700839][ T9178] ? lockdep_hardirqs_on+0x78/0x100 [ 278.700857][ T9178] do_fast_syscall_32+0x32/0x70 [ 278.700867][ T9178] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 278.700882][ T9178] RIP: 0023:0xf705efcc [ 278.700892][ T9178] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 278.700903][ T9178] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 278.700915][ T9178] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800012c0 [ 278.700922][ T9178] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 278.700928][ T9178] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 278.700934][ T9178] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 278.700940][ T9178] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 278.700953][ T9178] [ 282.131646][ T5964] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 282.147390][ T5964] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 282.151997][ T5964] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 282.156561][ T5964] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 282.162785][ T5964] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 282.412779][ T46] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.544157][ T9210] chnl_net:caif_netlink_parms(): no params data found [ 282.604125][ T9229] netlink: 12 bytes leftover after parsing attributes in process `syz.5.933'. [ 282.637907][ T46] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.693233][ T9229] input: syz0 as /devices/virtual/input/input16 [ 282.761333][ T46] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.900256][ T46] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.168891][ T9210] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.172925][ T9210] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.176476][ T9210] bridge_slave_0: entered allmulticast mode [ 283.180600][ T9210] bridge_slave_0: entered promiscuous mode [ 283.187758][ T9210] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.191738][ T9210] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.195798][ T9210] bridge_slave_1: entered allmulticast mode [ 283.199770][ T9210] bridge_slave_1: entered promiscuous mode [ 283.258217][ T9210] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 283.291646][ T9210] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 283.383631][ T9210] team0: Port device team_slave_0 added [ 283.389725][ T9210] team0: Port device team_slave_1 added [ 283.891714][ T46] bond0 (unregistering): Released all slaves [ 283.899234][ T9210] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 283.902479][ T9210] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 283.920151][ T40] audit: type=1326 audit(1776995465.312:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9250 comm="syz.3.935" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefcc code=0x7ffc0000 [ 283.925940][ T9210] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 283.927725][ T40] audit: type=1326 audit(1776995465.331:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9250 comm="syz.3.935" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefcc code=0x7ffc0000 [ 283.942824][ T9210] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 283.946699][ T9210] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 283.957958][ T9210] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 283.966238][ T5668] 8021q: adding VLAN 0 to HW filter on device eth6 [ 284.004618][ T40] audit: type=1326 audit(1776995465.396:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9250 comm="syz.3.935" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf6ffefcc code=0x7ffc0000 [ 284.004783][ T9210] hsr_slave_0: entered promiscuous mode [ 284.018323][ T9210] hsr_slave_1: entered promiscuous mode [ 284.021814][ T9210] debugfs: 'hsr0' already exists in 'hsr' [ 284.024263][ T9210] Cannot create hsr debugfs directory [ 284.088951][ T40] audit: type=1326 audit(1776995465.462:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9250 comm="syz.3.935" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefcc code=0x7ffc0000 [ 284.113989][ T40] audit: type=1326 audit(1776995465.481:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9250 comm="syz.3.935" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf6ffefcc code=0x7ffc0000 [ 284.139827][ T40] audit: type=1326 audit(1776995465.481:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9250 comm="syz.3.935" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefcc code=0x7ffc0000 [ 284.170209][ T40] audit: type=1326 audit(1776995465.490:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9250 comm="syz.3.935" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefcc code=0x7ffc0000 [ 284.191274][ T40] audit: type=1326 audit(1776995465.555:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9250 comm="syz.3.935" exe="/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf6ffefcc code=0x7ffc0000 [ 284.201669][ T40] audit: type=1326 audit(1776995465.583:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9250 comm="syz.3.935" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefcc code=0x7ffc0000 [ 284.238292][ T40] audit: type=1326 audit(1776995465.612:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9250 comm="syz.3.935" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf6ffefcc code=0x7ffc0000 [ 284.347210][ T9210] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 284.366377][ T5974] Bluetooth: hci3: command tx timeout [ 284.375932][ T9210] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 284.432006][ T9210] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 284.437543][ T9210] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 284.449064][ T5668] 8021q: adding VLAN 0 to HW filter on device eth7 [ 284.452264][ T9210] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 284.458277][ T9210] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 284.463461][ T9210] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 284.480169][ T9210] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 284.572136][ T46] hsr_slave_0: left promiscuous mode [ 284.575342][ T46] hsr_slave_1: left promiscuous mode [ 284.590963][ T46] veth1_macvtap: left promiscuous mode [ 284.593454][ T46] veth0_macvtap: left promiscuous mode [ 284.898243][ T9288] netlink: 12 bytes leftover after parsing attributes in process `syz.3.941'. [ 285.017333][ T9294] input: syz0 as /devices/virtual/input/input17 [ 285.020500][ T9294] input: failed to attach handler leds to device input17, error: -6 [ 285.055847][ T5668] 8021q: adding VLAN 0 to HW filter on device eth8 [ 285.124856][ T9210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.145895][ T9210] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.158106][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.161434][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.179438][ T3728] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.182562][ T3728] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.374693][ T9210] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.418496][ T5668] 8021q: adding VLAN 0 to HW filter on device eth9 [ 285.832244][ T9210] veth0_vlan: entered promiscuous mode [ 285.841224][ T9210] veth1_vlan: entered promiscuous mode [ 285.862875][ T9210] veth0_macvtap: entered promiscuous mode [ 285.870163][ T9210] veth1_macvtap: entered promiscuous mode [ 285.889935][ T9210] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 285.901985][ T9210] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 285.911550][ T3728] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.915359][ T3728] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.919246][ T3728] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.925543][ T3728] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.510214][ T1186] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.514313][ T1186] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.549415][ T193] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.554078][ T193] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.584031][ T5974] Bluetooth: hci3: command tx timeout [ 286.662996][ T9336] netlink: 12 bytes leftover after parsing attributes in process `syz.6.927'. [ 286.810169][ T9343] netlink: 20 bytes leftover after parsing attributes in process `syz.5.947'. [ 287.579099][ T9346] pim6reg: entered allmulticast mode [ 287.593023][ T9346] team0: entered allmulticast mode [ 287.595394][ T9346] team_slave_0: entered allmulticast mode [ 287.598185][ T9346] team_slave_1: entered allmulticast mode [ 287.601947][ T9346] team0: left allmulticast mode [ 287.603966][ T9346] team_slave_0: left allmulticast mode [ 287.606672][ T9346] team_slave_1: left allmulticast mode [ 287.611137][ T9346] pim6reg: left allmulticast mode [ 288.579606][ T9369] tipc: Started in network mode [ 288.582438][ T9369] tipc: Node identity ea7aabf6c7a9, cluster identity 4711 [ 288.585059][ T9369] tipc: Enabled bearer , priority 0 [ 288.588235][ T9369] syzkaller0: entered promiscuous mode [ 288.590198][ T9369] syzkaller0: entered allmulticast mode [ 288.610689][ T9369] tipc: Resetting bearer [ 288.634633][ T9368] tipc: Resetting bearer [ 288.641390][ T9371] netlink: 12 bytes leftover after parsing attributes in process `syz.3.957'. [ 288.648593][ T9368] tipc: Disabling bearer [ 288.679242][ T9371] input: syz0 as /devices/virtual/input/input19 [ 288.684217][ T9371] input: failed to attach handler leds to device input19, error: -6 [ 288.794996][ T5974] Bluetooth: hci3: command tx timeout [ 289.141061][ T9378] netlink: 12 bytes leftover after parsing attributes in process `syz.5.960'. [ 289.163913][ T9380] netlink: 12 bytes leftover after parsing attributes in process `syz.6.961'. [ 289.339808][ T9392] netlink: 12 bytes leftover after parsing attributes in process `syz.6.966'. [ 289.369549][ T9395] netlink: 189928 bytes leftover after parsing attributes in process `syz.5.967'. [ 289.428954][ T9400] input: syz0 as /devices/virtual/input/input20 [ 289.527458][ T9406] input: syz0 as /devices/virtual/input/input21 [ 289.555371][ T9406] FAULT_INJECTION: forcing a failure. [ 289.555371][ T9406] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 289.568143][ T9406] CPU: 2 UID: 0 PID: 9406 Comm: syz.6.973 Tainted: G L syzkaller #0 PREEMPT(full) [ 289.568172][ T9406] Tainted: [L]=SOFTLOCKUP [ 289.568178][ T9406] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 289.568188][ T9406] Call Trace: [ 289.568195][ T9406] [ 289.568201][ T9406] dump_stack_lvl+0x100/0x190 [ 289.568227][ T9406] should_fail_ex.cold+0x5/0xa [ 289.568248][ T9406] _copy_from_user+0x2e/0xd0 [ 289.568275][ T9406] input_event_from_user+0x137/0x290 [ 289.568298][ T9406] ? __pfx_input_event_from_user+0x10/0x10 [ 289.568320][ T9406] ? lockdep_hardirqs_on+0x78/0x100 [ 289.568349][ T9406] ? input_event+0x9d/0xb0 [ 289.568369][ T9406] uinput_write+0xb9f/0xf60 [ 289.568399][ T9406] ? __pfx_uinput_write+0x10/0x10 [ 289.568426][ T9406] ? bpf_lsm_file_permission+0x9/0x10 [ 289.568441][ T9406] ? security_file_permission+0x76/0x210 [ 289.568459][ T9406] ? rw_verify_area+0xce/0x6d0 [ 289.568477][ T9406] vfs_write+0x2aa/0x1070 [ 289.568496][ T9406] ? __pfx_uinput_write+0x10/0x10 [ 289.568521][ T9406] ? __pfx_vfs_write+0x10/0x10 [ 289.568536][ T9406] ? find_held_lock+0x2b/0x80 [ 289.568554][ T9406] ? __fget_files+0x215/0x3d0 [ 289.568573][ T9406] ? __fget_files+0x215/0x3d0 [ 289.568595][ T9406] ? __fget_files+0x21f/0x3d0 [ 289.568626][ T9406] ksys_write+0x1f8/0x250 [ 289.568643][ T9406] ? __pfx_ksys_write+0x10/0x10 [ 289.568659][ T9406] ? ksys_write+0x1ac/0x250 [ 289.568677][ T9406] ? rcu_is_watching+0x12/0xc0 [ 289.568703][ T9406] __do_fast_syscall_32+0xe7/0x950 [ 289.568718][ T9406] ? lockdep_hardirqs_on+0x78/0x100 [ 289.568742][ T9406] do_fast_syscall_32+0x32/0x70 [ 289.568758][ T9406] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 289.568779][ T9406] RIP: 0023:0xf7fe3fcc [ 289.568793][ T9406] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 289.568809][ T9406] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 289.568825][ T9406] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000500 [ 289.568835][ T9406] RDX: 000000000000045c RSI: 0000000000000000 RDI: 0000000000000000 [ 289.568845][ T9406] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 289.568854][ T9406] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 289.568863][ T9406] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 289.568885][ T9406] [ 289.745884][ T6129] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 289.907945][ T6129] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 289.918494][ T6129] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 289.922930][ T6129] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 289.928854][ T6129] usb 10-1: Product: syz [ 289.930797][ T6129] usb 10-1: Manufacturer: syz [ 289.936796][ T6129] usb 10-1: SerialNumber: syz [ 290.137490][ T9423] netlink: 12 bytes leftover after parsing attributes in process `syz.2.977'. [ 290.164025][ T6129] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 290.279798][ T9429] FAULT_INJECTION: forcing a failure. [ 290.279798][ T9429] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 290.286038][ T9429] CPU: 1 UID: 0 PID: 9429 Comm: syz.2.980 Tainted: G L syzkaller #0 PREEMPT(full) [ 290.286067][ T9429] Tainted: [L]=SOFTLOCKUP [ 290.286074][ T9429] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 290.286084][ T9429] Call Trace: [ 290.286092][ T9429] [ 290.286099][ T9429] dump_stack_lvl+0x100/0x190 [ 290.286124][ T9429] should_fail_ex.cold+0x5/0xa [ 290.286149][ T9429] _copy_to_user+0x32/0xd0 [ 290.286176][ T9429] simple_read_from_buffer+0xcb/0x170 [ 290.286197][ T9429] proc_fail_nth_read+0x1af/0x230 [ 290.286221][ T9429] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 290.286248][ T9429] ? rw_verify_area+0xce/0x6d0 [ 290.286265][ T9429] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 290.286289][ T9429] vfs_read+0x1e4/0xb30 [ 290.286311][ T9429] ? __pfx_vfs_read+0x10/0x10 [ 290.286326][ T9429] ? find_held_lock+0x2b/0x80 [ 290.286345][ T9429] ? __fget_files+0x215/0x3d0 [ 290.286364][ T9429] ? __fget_files+0x21f/0x3d0 [ 290.286384][ T9429] ksys_read+0x12a/0x250 [ 290.286399][ T9429] ? __pfx_ksys_read+0x10/0x10 [ 290.286416][ T9429] ? rcu_is_watching+0x12/0xc0 [ 290.286437][ T9429] ? rcu_is_watching+0x12/0xc0 [ 290.286460][ T9429] do_int80_emulation+0x141/0x700 [ 290.286478][ T9429] asm_int80_emulation+0x1a/0x20 [ 290.286493][ T9429] RIP: 0023:0xf7115cab [ 290.286506][ T9429] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 290.286520][ T9429] RSP: 002b:00000000f53cd4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 290.286537][ T9429] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000f53cd5d0 [ 290.286548][ T9429] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 290.286557][ T9429] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 290.286566][ T9429] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 290.286583][ T9429] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 290.286607][ T9429] [ 290.442011][ C1] usblp0: nonzero write bulk status received: -71 [ 290.442397][ T6166] usb 10-1: USB disconnect, device number 3 [ 290.468155][ T6166] usblp0: removed [ 291.017430][ T5974] Bluetooth: hci3: command tx timeout [ 291.018506][ T9449] program syz.3.986 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 291.139616][ T9456] netlink: 12 bytes leftover after parsing attributes in process `syz.3.989'. [ 291.616887][ T5974] Bluetooth: hci0: command 0x0c1a tx timeout [ 291.621984][ T53] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 291.642003][ T53] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 292.487922][ T9480] binder: 9477:9480 ioctl 89e4 80000380 returned -22 [ 293.195814][ T9485] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 293.198411][ T9485] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 293.203182][ T9485] vhci_hcd vhci_hcd.0: Device attached [ 293.336090][ T9493] syzkaller0: entered promiscuous mode [ 293.346514][ T9493] syzkaller0: entered allmulticast mode [ 293.497252][ T6034] usb 42-1: SetAddress Request (2) to port 0 [ 293.500595][ T6034] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 293.924164][ T5974] Bluetooth: hci1: command 0x0c1a tx timeout [ 293.924412][ T53] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 293.931022][ T53] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 294.028594][ T9490] vhci_hcd: connection reset by peer [ 294.037860][ T1186] vhci_hcd vhci_hcd.2: stop threads [ 294.044061][ T1186] vhci_hcd vhci_hcd.2: release socket [ 294.052005][ T1186] vhci_hcd vhci_hcd.2: disconnect device [ 294.184561][ T9489] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 294.212873][ T9489] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 294.227141][ T9489] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 294.672295][ T9515] FAULT_INJECTION: forcing a failure. [ 294.672295][ T9515] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 294.676554][ T9515] CPU: 2 UID: 0 PID: 9515 Comm: syz.3.1004 Tainted: G L syzkaller #0 PREEMPT(full) [ 294.676572][ T9515] Tainted: [L]=SOFTLOCKUP [ 294.676576][ T9515] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 294.676583][ T9515] Call Trace: [ 294.676588][ T9515] [ 294.676593][ T9515] dump_stack_lvl+0x100/0x190 [ 294.676611][ T9515] should_fail_ex.cold+0x5/0xa [ 294.676627][ T9515] _copy_from_user+0x2e/0xd0 [ 294.676645][ T9515] kstrtouint_from_user+0xd6/0x1d0 [ 294.676657][ T9515] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 294.676668][ T9515] ? __lock_acquire+0x4a5/0x2630 [ 294.676684][ T9515] proc_fail_nth_write+0x83/0x220 [ 294.676702][ T9515] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 294.676722][ T9515] vfs_write+0x2aa/0x1070 [ 294.676735][ T9515] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 294.676752][ T9515] ? __pfx_vfs_write+0x10/0x10 [ 294.676763][ T9515] ? find_held_lock+0x2b/0x80 [ 294.676776][ T9515] ? __fget_files+0x215/0x3d0 [ 294.676791][ T9515] ? __fget_files+0x21f/0x3d0 [ 294.676807][ T9515] ksys_write+0x12a/0x250 [ 294.676818][ T9515] ? __pfx_ksys_write+0x10/0x10 [ 294.676845][ T9515] ? rcu_is_watching+0x12/0xc0 [ 294.676861][ T9515] do_int80_emulation+0x141/0x700 [ 294.676875][ T9515] asm_int80_emulation+0x1a/0x20 [ 294.676886][ T9515] RIP: 0023:0xf7135cab [ 294.676896][ T9515] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 294.676906][ T9515] RSP: 002b:00000000f53ed4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 294.676919][ T9515] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f53ed5d0 [ 294.676926][ T9515] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 294.676932][ T9515] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 294.676938][ T9515] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 294.676944][ T9515] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 294.676958][ T9515] [ 295.411306][ T9531] syzkaller0: entered promiscuous mode [ 295.414625][ T9531] syzkaller0: entered allmulticast mode [ 295.961975][ T9541] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.1012'. [ 296.233590][ T5974] Bluetooth: hci4: command 0x0c1a tx timeout [ 296.270856][ T53] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 296.724184][ T53] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 297.270245][ T6166] usb 8-1: new full-speed USB device number 13 using dummy_hcd [ 297.419132][ T6166] usb 8-1: device descriptor read/64, error -71 [ 297.686626][ T6166] usb 8-1: new full-speed USB device number 14 using dummy_hcd [ 297.835518][ T6166] usb 8-1: device descriptor read/64, error -71 [ 297.965025][ T6166] usb usb8-port1: attempt power cycle [ 298.338095][ T6166] usb 8-1: new full-speed USB device number 15 using dummy_hcd [ 298.370106][ T6166] usb 8-1: device descriptor read/8, error -71 [ 298.477799][ T9596] pim6reg: entered allmulticast mode [ 298.482793][ T9596] team0: entered allmulticast mode [ 298.484598][ T9596] team_slave_0: entered allmulticast mode [ 298.486580][ T9596] team_slave_1: entered allmulticast mode [ 298.489003][ T9596] team0: left allmulticast mode [ 298.490691][ T9596] team_slave_0: left allmulticast mode [ 298.492625][ T9596] team_slave_1: left allmulticast mode [ 298.494808][ T9596] pim6reg: left allmulticast mode [ 298.636940][ T6166] usb 8-1: new full-speed USB device number 16 using dummy_hcd [ 298.649588][ T9601] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.1022'. [ 298.658567][ T6166] usb 8-1: device descriptor read/8, error -71 [ 298.786767][ T6166] usb usb8-port1: unable to enumerate USB device [ 299.055443][ T6034] usb 42-1: device descriptor read/8, error -110 [ 299.226240][ T53] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 299.228406][ T53] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 300.018977][ T6034] usb usb42-port1: attempt power cycle [ 300.047232][ T6166] usb 10-1: new low-speed USB device number 4 using dummy_hcd [ 300.209192][ T6166] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 300.211880][ T6166] usb 10-1: config 0 has no interface number 0 [ 300.213974][ T6166] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 300.218738][ T6166] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 300.228222][ T6166] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 300.232564][ T6166] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 300.236316][ T6166] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 300.241984][ T6166] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 300.246898][ T6166] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 300.251334][ T6166] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.266747][ T6166] usb 10-1: config 0 descriptor?? [ 300.269912][ T9618] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 300.273830][ T9618] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 300.290793][ T6166] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 300.471895][ T9625] pim6reg: entered allmulticast mode [ 300.480339][ T9625] team0: entered allmulticast mode [ 300.482837][ T9625] team_slave_0: entered allmulticast mode [ 300.484882][ T9625] team_slave_1: entered allmulticast mode [ 300.488234][ T9625] team0: left allmulticast mode [ 300.490163][ T9625] team_slave_0: left allmulticast mode [ 300.492140][ T9625] team_slave_1: left allmulticast mode [ 300.494052][ T9625] pim6reg: left allmulticast mode [ 300.617966][ T6034] usb usb42-port1: unable to enumerate USB device [ 300.637801][ T6034] usb 10-1: USB disconnect, device number 4 [ 300.647810][ T6034] ldusb 10-1:0.55: LD USB Device #0 now disconnected [ 300.881812][ T53] usb 8-1: new low-speed USB device number 17 using dummy_hcd [ 301.053728][ T53] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 301.056595][ T53] usb 8-1: config 0 has no interface number 0 [ 301.058926][ T53] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 301.062985][ T53] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 301.066387][ T53] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 301.070025][ T53] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 301.073886][ T53] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 301.077963][ T53] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 301.082475][ T53] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 301.086102][ T53] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.090131][ T53] usb 8-1: config 0 descriptor?? [ 301.095924][ T9629] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 301.098970][ T9629] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 301.105790][ T53] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 301.290413][ T9650] ADFS-fs (loop6): error: unable to read block 3, try 0 [ 301.326891][ T9629] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1032'. [ 301.340891][ T9652] pim6reg: entered allmulticast mode [ 301.346420][ T9652] team0: entered allmulticast mode [ 301.348686][ T9652] team_slave_0: entered allmulticast mode [ 301.351972][ T9652] team_slave_1: entered allmulticast mode [ 301.355598][ T9652] team0: left allmulticast mode [ 301.357831][ T9652] team_slave_0: left allmulticast mode [ 301.360144][ T9652] team_slave_1: left allmulticast mode [ 301.366670][ T9652] pim6reg: left allmulticast mode [ 301.906537][ T9661] ubi: mtd0 is already attached to ubi31 [ 303.087306][ T9682] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1045'. [ 303.109121][ T9682] input: syz0 as /devices/virtual/input/input22 [ 303.182294][ T9684] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1047'. [ 303.212201][ T9684] input: syz0 as /devices/virtual/input/input23 [ 303.356487][ T9690] pim6reg: entered allmulticast mode [ 303.360585][ T9690] team0: entered allmulticast mode [ 303.363131][ T9690] team_slave_0: entered allmulticast mode [ 303.365646][ T9690] team_slave_1: entered allmulticast mode [ 303.367714][ T9690] team0: left allmulticast mode [ 303.369464][ T9690] team_slave_0: left allmulticast mode [ 303.371616][ T9690] team_slave_1: left allmulticast mode [ 303.373568][ T9690] pim6reg: left allmulticast mode [ 303.839590][ C3] ldusb 8-1:0.55: usb_submit_urb failed (-1) [ 303.846683][ T841] usb 8-1: USB disconnect, device number 17 [ 303.862967][ T841] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 303.955347][ T9701] ADFS-fs (loop5): error: unable to read block 3, try 0 [ 304.836330][ T9711] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1055'. [ 304.884501][ T9711] input: syz0 as /devices/virtual/input/input24 [ 305.380070][ T6129] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 305.540142][ T6129] usb 8-1: Using ep0 maxpacket: 32 [ 305.550066][ T6129] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 305.560753][ T6129] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 305.566245][ T6129] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 305.573026][ T6129] usb 8-1: Product: syz [ 305.576677][ T6129] usb 8-1: Manufacturer: syz [ 305.580132][ T6129] usb 8-1: SerialNumber: syz [ 305.596923][ T6129] usb 8-1: config 0 descriptor?? [ 305.606598][ T9717] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 305.627989][ T6129] hub 8-1:0.0: bad descriptor, ignoring hub [ 305.638038][ T9724] pim6reg: entered allmulticast mode [ 305.642048][ T6129] hub 8-1:0.0: probe with driver hub failed with error -5 [ 305.649913][ T9724] team0: entered allmulticast mode [ 305.652337][ T9724] team_slave_0: entered allmulticast mode [ 305.654382][ T9724] team_slave_1: entered allmulticast mode [ 305.657964][ T9724] team0: left allmulticast mode [ 305.660609][ T9724] team_slave_0: left allmulticast mode [ 305.662525][ T9724] team_slave_1: left allmulticast mode [ 305.669104][ T9724] pim6reg: left allmulticast mode [ 306.126439][ T9739] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1064'. [ 306.163523][ T9739] input: syz0 as /devices/virtual/input/input25 [ 306.305608][ T9717] usb 8-1: reset high-speed USB device number 18 using dummy_hcd [ 306.510642][ T9717] usb 8-1: device firmware changed [ 306.520651][ T53] usb 8-1: USB disconnect, device number 18 [ 306.683329][ T53] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 306.843493][ T53] usb 8-1: Using ep0 maxpacket: 32 [ 306.847820][ T53] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 306.853962][ T53] usb 8-1: string descriptor 0 read error: -22 [ 306.856718][ T53] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 306.859733][ T53] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 306.863774][ T53] usb 8-1: config 0 descriptor?? [ 306.866322][ T9733] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 306.870229][ T53] hub 8-1:0.0: bad descriptor, ignoring hub [ 306.872245][ T53] hub 8-1:0.0: probe with driver hub failed with error -5 [ 307.087771][ T9717] netlink: 'syz.3.1057': attribute type 3 has an invalid length. [ 307.207207][ T53] usb 8-1: USB disconnect, device number 19 [ 308.523954][ T9764] pim6reg: entered allmulticast mode [ 308.537569][ T9764] team0: entered allmulticast mode [ 308.542577][ T9764] team_slave_0: entered allmulticast mode [ 308.552045][ T9764] team_slave_1: entered allmulticast mode [ 308.552200][ T9766] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1073'. [ 308.557069][ T9764] team0: left allmulticast mode [ 308.564819][ T9764] team_slave_0: left allmulticast mode [ 308.572860][ T9764] team_slave_1: left allmulticast mode [ 308.575199][ T9764] pim6reg: left allmulticast mode [ 308.619163][ T9766] input: syz0 as /devices/virtual/input/input26 [ 310.378227][ T9806] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1083'. [ 311.157242][ T9815] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1087'. [ 311.205743][ T9815] input: syz0 as /devices/virtual/input/input27 [ 311.517733][ T9819] pim6reg: entered allmulticast mode [ 311.521150][ T9819] team0: entered allmulticast mode [ 311.522830][ T9819] team_slave_0: entered allmulticast mode [ 311.525102][ T9819] team_slave_1: entered allmulticast mode [ 311.527225][ T9819] team0: left allmulticast mode [ 311.528867][ T9819] team_slave_0: left allmulticast mode [ 311.530855][ T9819] team_slave_1: left allmulticast mode [ 311.533008][ T9819] pim6reg: left allmulticast mode [ 311.590947][ T9822] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1090'. [ 311.686497][ T855] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 311.785792][ T9826] pim6reg: entered allmulticast mode [ 311.799388][ T9826] team0: entered allmulticast mode [ 311.802098][ T9826] team_slave_0: entered allmulticast mode [ 311.804576][ T9826] team_slave_1: entered allmulticast mode [ 311.808294][ T9826] team0: left allmulticast mode [ 311.811457][ T9826] team_slave_0: left allmulticast mode [ 311.815124][ T9826] team_slave_1: left allmulticast mode [ 311.817652][ T9826] pim6reg: left allmulticast mode [ 311.844956][ T855] usb 10-1: Using ep0 maxpacket: 8 [ 311.848363][ T855] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 311.852372][ T855] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 311.856440][ T855] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 311.859818][ T855] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 311.863953][ T855] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 311.868113][ T855] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.083670][ T9831] sp0: Synchronizing with TNC [ 312.097205][ T855] usb 10-1: GET_CAPABILITIES returned 0 [ 312.099355][ T855] usbtmc 10-1:16.0: can't read capabilities [ 312.703040][ T9845] random: crng reseeded on system resumption [ 313.086314][ T9851] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1096'. [ 313.106220][ T9851] input: syz0 as /devices/virtual/input/input28 [ 313.211646][ T9853] FAULT_INJECTION: forcing a failure. [ 313.211646][ T9853] name failslab, interval 1, probability 0, space 0, times 0 [ 313.221208][ T9853] CPU: 3 UID: 0 PID: 9853 Comm: syz.3.1097 Tainted: G L syzkaller #0 PREEMPT(full) [ 313.221236][ T9853] Tainted: [L]=SOFTLOCKUP [ 313.221241][ T9853] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 313.221251][ T9853] Call Trace: [ 313.221257][ T9853] [ 313.221263][ T9853] dump_stack_lvl+0x100/0x190 [ 313.221286][ T9853] should_fail_ex.cold+0x5/0xa [ 313.221306][ T9853] should_failslab+0xc2/0x120 [ 313.221324][ T9853] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 313.221346][ T9853] ? __anon_vma_prepare+0xae/0x5e0 [ 313.221372][ T9853] __anon_vma_prepare+0xae/0x5e0 [ 313.221390][ T9853] ? __filemap_get_folio_mpol+0x3ba/0xe70 [ 313.221408][ T9853] __vmf_anon_prepare+0x11f/0x250 [ 313.221428][ T9853] hugetlb_no_page+0xe2e/0x1980 [ 313.221456][ T9853] hugetlb_fault+0x5e5/0x1410 [ 313.221477][ T9853] ? __pfx_hugetlb_fault+0x10/0x10 [ 313.221504][ T9853] ? find_vma+0xbf/0x140 [ 313.221519][ T9853] ? __pfx_find_vma+0x10/0x10 [ 313.221536][ T9853] handle_mm_fault+0x5f1/0xa20 [ 313.221560][ T9853] do_user_addr_fault+0x74c/0x12f0 [ 313.221581][ T9853] ? trace_page_fault_kernel+0x7a/0x200 [ 313.221599][ T9853] exc_page_fault+0x6f/0xd0 [ 313.221624][ T9853] asm_exc_page_fault+0x26/0x30 [ 313.221639][ T9853] RIP: 0010:_copy_to_iter+0x4c0/0x1720 [ 313.221662][ T9853] Code: 00 e8 b4 b1 13 fd 48 8b 74 24 18 48 8b 44 24 08 4c 8d 24 06 89 de 4c 89 e7 e8 6c 7a 80 fd 0f 01 cb 48 89 d9 4c 89 f7 4c 89 e6 a4 0f 1f 00 49 89 cc 0f 01 ca 48 89 d8 48 29 c8 48 01 44 24 08 [ 313.221676][ T9853] RSP: 0018:ffffc90002b479e8 EFLAGS: 00050246 [ 313.221690][ T9853] RAX: 0000000000000001 RBX: 0000000000000eb0 RCX: 0000000000000eb0 [ 313.221699][ T9853] RDX: 0000000000000001 RSI: ffff88806b70e000 RDI: 00000000800005c0 [ 313.221708][ T9853] RBP: ffffc90002b47bf0 R08: 0000000000000000 R09: ffffed100d6e1dd5 [ 313.221716][ T9853] R10: ffff88806b70eeaf R11: 0000000000000000 R12: ffff88806b70e000 [ 313.221725][ T9853] R13: 0000000000000000 R14: 00000000800005c0 R15: 0000000000000eb0 [ 313.221744][ T9853] ? _copy_to_iter+0x4b4/0x1720 [ 313.221774][ T9853] ? __pfx__copy_to_iter+0x10/0x10 [ 313.221793][ T9853] ? m_stop+0x39c/0x500 [ 313.221810][ T9853] ? m_stop+0x333/0x500 [ 313.221824][ T9853] seq_read_iter+0xdab/0x1270 [ 313.221850][ T9853] seq_read+0x33b/0x4c0 [ 313.221865][ T9853] ? __pfx_seq_read+0x10/0x10 [ 313.221877][ T9853] ? __pfx___might_resched+0x10/0x10 [ 313.221894][ T9853] ? lock_acquire+0x1b1/0x370 [ 313.221917][ T9853] ? rw_verify_area+0xce/0x6d0 [ 313.221951][ T9853] ? __pfx_seq_read+0x10/0x10 [ 313.221969][ T9853] vfs_read+0x1e4/0xb30 [ 313.221989][ T9853] ? __pfx_vfs_read+0x10/0x10 [ 313.222002][ T9853] ? find_held_lock+0x2b/0x80 [ 313.222020][ T9853] ? __fget_files+0x215/0x3d0 [ 313.222041][ T9853] ? __fget_files+0x21f/0x3d0 [ 313.222065][ T9853] ksys_read+0x12a/0x250 [ 313.222082][ T9853] ? __pfx_ksys_read+0x10/0x10 [ 313.222098][ T9853] ? ksys_write+0x1ac/0x250 [ 313.222116][ T9853] ? rcu_is_watching+0x12/0xc0 [ 313.222138][ T9853] __do_fast_syscall_32+0xe7/0x950 [ 313.222155][ T9853] ? lockdep_hardirqs_on+0x78/0x100 [ 313.222180][ T9853] do_fast_syscall_32+0x32/0x70 [ 313.222195][ T9853] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 313.222214][ T9853] RIP: 0023:0xf6ffefcc [ 313.222228][ T9853] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 313.222242][ T9853] RSP: 002b:00000000f53ed50c EFLAGS: 00000292 ORIG_RAX: 0000000000000003 [ 313.222256][ T9853] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800005c0 [ 313.222265][ T9853] RDX: 0000000000002020 RSI: 0000000000000000 RDI: 0000000000000000 [ 313.222277][ T9853] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 313.222288][ T9853] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 313.222297][ T9853] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 313.222319][ T9853] [ 313.685086][ T9863] netlink: 189928 bytes leftover after parsing attributes in process `syz.2.1102'. [ 314.703127][ T8247] usb 10-1: USB disconnect, device number 5 [ 314.845147][ T9882] netlink: 'syz.5.1107': attribute type 1 has an invalid length. [ 314.851401][ T9882] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1107'. [ 314.982067][ T9889] bond0: entered promiscuous mode [ 314.983851][ T9889] bond_slave_0: entered promiscuous mode [ 314.987048][ T9889] bond_slave_1: entered promiscuous mode [ 314.992881][ T9889] tls_set_device_offload_rx: netdev not found [ 315.073394][ T9885] netlink: 'syz.2.1109': attribute type 1 has an invalid length. [ 315.076538][ T9885] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1109'. [ 315.119283][ T9884] bond0: left promiscuous mode [ 315.121284][ T9884] bond_slave_0: left promiscuous mode [ 315.123724][ T9884] bond_slave_1: left promiscuous mode [ 315.263740][ T9908] sp0: Synchronizing with TNC [ 315.305381][ T9909] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1116'. [ 315.763451][ T9912] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1113'. [ 316.282550][ T40] kauditd_printk_skb: 22 callbacks suppressed [ 316.282569][ T40] audit: type=1804 audit(1776995495.604:71): pid=9926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1119" name="file0" dev="ramfs" ino=28149 res=1 errno=0 [ 316.767941][ T9952] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1125'. [ 316.802660][ T9952] input: syz0 as /devices/virtual/input/input29 [ 316.832065][ T9954] IPv6: addrconf: prefix option has invalid lifetime [ 316.912737][ T9956] 9p: Bad value for 'rfdno' [ 317.596392][ T9966] FAULT_INJECTION: forcing a failure. [ 317.596392][ T9966] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 317.601380][ T9966] CPU: 0 UID: 0 PID: 9966 Comm: syz.3.1129 Tainted: G L syzkaller #0 PREEMPT(full) [ 317.601421][ T9966] Tainted: [L]=SOFTLOCKUP [ 317.601426][ T9966] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 317.601432][ T9966] Call Trace: [ 317.601437][ T9966] [ 317.601443][ T9966] dump_stack_lvl+0x100/0x190 [ 317.601460][ T9966] should_fail_ex.cold+0x5/0xa [ 317.601476][ T9966] _copy_from_user+0x2e/0xd0 [ 317.601493][ T9966] compat_wext_handle_ioctl+0xc4/0x220 [ 317.601515][ T9966] ? __pfx_compat_wext_handle_ioctl+0x10/0x10 [ 317.601532][ T9966] ? do_vfs_ioctl+0x226/0x13e0 [ 317.601546][ T9966] compat_sock_ioctl+0x381/0x760 [ 317.601566][ T9966] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 317.601581][ T9966] ? hook_file_ioctl_common+0x149/0x410 [ 317.601601][ T9966] ? __fget_files+0x21f/0x3d0 [ 317.601615][ T9966] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 317.601631][ T9966] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 317.601643][ T9966] __do_fast_syscall_32+0xe7/0x950 [ 317.601656][ T9966] do_fast_syscall_32+0x32/0x70 [ 317.601666][ T9966] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 317.601680][ T9966] RIP: 0023:0xf6ffefcc [ 317.601690][ T9966] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 317.601700][ T9966] RSP: 002b:00000000f53ed50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 317.601711][ T9966] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000008b32 [ 317.601718][ T9966] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 317.601724][ T9966] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 317.601730][ T9966] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 317.601736][ T9966] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 317.601749][ T9966] [ 317.755789][ T9970] 9p: Bad value for 'rfdno' [ 318.183194][ T9974] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1133'. [ 318.234459][ T9974] input: syz0 as /devices/virtual/input/input30 [ 318.957294][ T9987] netlink: 'syz.6.1140': attribute type 1 has an invalid length. [ 318.962137][ T9987] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1140'. [ 318.969516][ T9987] bond0: entered promiscuous mode [ 318.971673][ T9987] bond_slave_0: entered promiscuous mode [ 318.975454][ T9987] bond_slave_1: entered promiscuous mode [ 319.044993][ T9993] tls_set_device_offload_rx: netdev not found [ 319.057703][ T6054] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 319.084664][ T9986] bond0: left promiscuous mode [ 319.088133][ T9986] bond_slave_0: left promiscuous mode [ 319.091234][ T9986] bond_slave_1: left promiscuous mode [ 319.219023][ T6054] usb 10-1: device descriptor read/64, error -71 [ 319.474378][ T6054] usb 10-1: new full-speed USB device number 7 using dummy_hcd [ 319.635071][ T6054] usb 10-1: device descriptor read/64, error -71 [ 319.753649][ T6054] usb usb10-port1: attempt power cycle [ 320.136981][ T6054] usb 10-1: new full-speed USB device number 8 using dummy_hcd [ 320.158911][ T6054] usb 10-1: device descriptor read/8, error -71 [ 320.233302][ T6129] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 320.393481][ T6129] usb 8-1: Using ep0 maxpacket: 8 [ 320.400120][ T6129] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 320.405825][ T6129] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 320.410543][ T6129] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 320.489832][ T6054] usb 10-1: new full-speed USB device number 9 using dummy_hcd [ 320.555310][ T6129] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 320.778581][ T6129] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 320.782511][ T6129] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.786130][ T6054] usb 10-1: device descriptor read/8, error -71 [ 320.911459][ T6054] usb usb10-port1: unable to enumerate USB device [ 321.091035][ T6129] usb 8-1: GET_CAPABILITIES returned 0 [ 321.094258][ T6129] usbtmc 8-1:16.0: can't read capabilities [ 321.627714][T10020] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1148'. [ 321.640287][T10022] FAULT_INJECTION: forcing a failure. [ 321.640287][T10022] name failslab, interval 1, probability 0, space 0, times 0 [ 321.646230][T10022] CPU: 1 UID: 0 PID: 10022 Comm: syz.2.1147 Tainted: G L syzkaller #0 PREEMPT(full) [ 321.646259][T10022] Tainted: [L]=SOFTLOCKUP [ 321.646265][T10022] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 321.646275][T10022] Call Trace: [ 321.646282][T10022] [ 321.646288][T10022] dump_stack_lvl+0x100/0x190 [ 321.646313][T10022] should_fail_ex.cold+0x5/0xa [ 321.646337][T10022] should_failslab+0xc2/0x120 [ 321.646358][T10022] __kmalloc_cache_noprof+0x7a/0x6f0 [ 321.646380][T10022] ? __io_uring_add_tctx_node+0x1ac/0x4c0 [ 321.646410][T10022] __io_uring_add_tctx_node+0x1ac/0x4c0 [ 321.646434][T10022] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 321.646456][T10022] ? __fget_files+0x21f/0x3d0 [ 321.646481][T10022] __io_uring_add_tctx_node_from_submit+0x89/0x130 [ 321.646505][T10022] __do_sys_io_uring_enter+0x1656/0x1b50 [ 321.646525][T10022] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 321.646561][T10022] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 321.646581][T10022] ? __fget_files+0x21f/0x3d0 [ 321.646604][T10022] ? fput+0x79/0x100 [ 321.646626][T10022] ? ksys_write+0x1ac/0x250 [ 321.646651][T10022] ? rcu_is_watching+0x12/0xc0 [ 321.646678][T10022] __do_fast_syscall_32+0xe7/0x950 [ 321.646694][T10022] ? lockdep_hardirqs_on+0x78/0x100 [ 321.646731][T10022] do_fast_syscall_32+0x32/0x70 [ 321.646751][T10022] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 321.646772][T10022] RIP: 0023:0xf6fdefcc [ 321.646788][T10022] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 321.646804][T10022] RSP: 002b:00000000f534b50c EFLAGS: 00000292 ORIG_RAX: 00000000000001aa [ 321.646822][T10022] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000001 [ 321.646832][T10022] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 0000000000000000 [ 321.646843][T10022] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 321.646852][T10022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 321.646863][T10022] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 321.646885][T10022] [ 321.647709][T10022] ------------[ cut here ]------------ [ 321.678689][T10020] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1148'. [ 321.678900][T10022] !test_bit(IO_WQ_BIT_EXIT, &wq->state) [ 321.740497][T10022] WARNING: io_uring/io-wq.c:1396 at io_wq_put_and_exit+0x8a7/0x9d0, CPU#1: syz.2.1147/10022 [ 321.746128][T10022] Modules linked in: [ 321.747854][T10022] CPU: 1 UID: 0 PID: 10022 Comm: syz.2.1147 Tainted: G L syzkaller #0 PREEMPT(full) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 321.752619][T10022] Tainted: [L]=SOFTLOCKUP [ 321.754774][T10022] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 321.758727][T10022] RIP: 0010:io_wq_put_and_exit+0x8a7/0x9d0 [ 321.761262][T10022] Code: ff e8 dd 71 16 fd 44 0f b6 74 24 78 31 ff 44 89 f6 e8 1d 6c 16 fd 45 84 f6 0f 85 1a fd ff ff e9 67 fd ff ff e8 ba 71 16 fd 90 <0f> 0b 90 e9 00 f8 ff ff e8 0c 35 83 fd e9 72 f8 ff ff 48 8b 3c 24 [ 321.768334][T10022] RSP: 0018:ffffc9002440fbb8 EFLAGS: 00010293 [ 321.770441][T10022] RAX: 0000000000000000 RBX: ffff88802533b000 RCX: ffffffff84f24d66 [ 321.773660][T10022] RDX: ffff888025370000 RSI: ffffffff84f25566 RDI: ffff888025370000 [ 321.776796][T10022] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 321.779581][T10022] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff92004881f99 [ 321.783236][T10022] R13: 0000000000000000 R14: ffff888025370968 R15: ffff888061418018 [ 321.786292][T10022] FS: 0000000000000000(0000) GS:ffff8880971e2000(0063) knlGS:00000000f534bb40 [ 321.789008][T10022] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 321.791167][T10022] CR2: 00000000f534aff4 CR3: 00000000799af000 CR4: 0000000000352ef0 [ 321.794627][T10022] Call Trace: [ 321.796146][T10022] [ 321.797442][T10022] ? dump_stack_lvl+0x17c/0x190 [ 321.799205][T10022] ? __pfx_io_wq_put_and_exit+0x10/0x10 [ 321.801357][T10022] ? rcu_is_watching+0x12/0xc0 [ 321.803382][T10022] ? trace_kmalloc+0xe3/0x110 [ 321.805174][T10022] ? __kmalloc_cache_noprof+0x298/0x6f0 [ 321.807789][T10022] ? __io_uring_add_tctx_node+0x1ac/0x4c0 [ 321.810515][T10022] __io_uring_add_tctx_node+0x3e8/0x4c0 [ 321.812885][T10022] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 321.815836][T10022] ? __fget_files+0x21f/0x3d0 [ 321.817389][T10022] __io_uring_add_tctx_node_from_submit+0x89/0x130 [ 321.819826][T10022] __do_sys_io_uring_enter+0x1656/0x1b50 [ 321.822122][T10022] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 321.824545][T10022] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 321.827132][T10022] ? __fget_files+0x21f/0x3d0 [ 321.829157][T10022] ? fput+0x79/0x100 [ 321.830604][T10022] ? ksys_write+0x1ac/0x250 [ 321.832146][T10022] ? rcu_is_watching+0x12/0xc0 [ 321.833701][T10022] __do_fast_syscall_32+0xe7/0x950 [ 321.835681][T10022] ? lockdep_hardirqs_on+0x78/0x100 [ 321.837700][T10022] do_fast_syscall_32+0x32/0x70 [ 321.839445][T10022] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 321.841862][T10022] RIP: 0023:0xf6fdefcc [ 321.843753][T10022] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 321.852593][T10022] RSP: 002b:00000000f534b50c EFLAGS: 00000292 ORIG_RAX: 00000000000001aa [ 321.855988][T10022] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000001 [ 321.859219][T10022] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 0000000000000000 [ 321.862559][T10022] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 321.866254][T10022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 321.870804][T10022] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 321.874246][T10022] [ 321.875668][T10022] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 321.879009][T10022] CPU: 1 UID: 0 PID: 10022 Comm: syz.2.1147 Tainted: G L syzkaller #0 PREEMPT(full) [ 321.883590][T10022] Tainted: [L]=SOFTLOCKUP [ 321.885455][T10022] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 321.889698][T10022] Call Trace: [ 321.891292][T10022] [ 321.892704][T10022] dump_stack_lvl+0x100/0x190 [ 321.895023][T10022] vpanic+0x552/0x970 [ 321.896746][T10022] ? __pfx_vpanic+0x10/0x10 [ 321.898722][T10022] panic+0xd1/0xe0 [ 321.900375][T10022] ? __pfx_panic+0x10/0x10 [ 321.902305][T10022] ? check_panic_on_warn+0x1f/0x90 [ 321.904495][T10022] check_panic_on_warn.cold+0x19/0x34 [ 321.906691][T10022] ? io_wq_put_and_exit+0x8a7/0x9d0 [ 321.909137][T10022] __warn.cold+0x191/0x328 [ 321.911342][T10022] __report_bug+0x296/0x3d0 [ 321.913568][T10022] ? io_wq_put_and_exit+0x8a7/0x9d0 [ 321.915812][T10022] ? __pfx___report_bug+0x10/0x10 [ 321.917905][T10022] ? _printk+0xcf/0x110 [ 321.919680][T10022] ? __pfx__printk+0x10/0x10 [ 321.921648][T10022] ? find_held_lock+0x2b/0x80 [ 321.923975][T10022] ? is_bpf_text_address+0x8a/0x1a0 [ 321.926483][T10022] ? bpf_ksym_find+0x124/0x1c0 [ 321.928741][T10022] ? io_wq_put_and_exit+0x8a7/0x9d0 [ 321.930921][T10022] report_bug+0xb2/0x220 [ 321.932762][T10022] ? io_wq_put_and_exit+0x8a7/0x9d0 [ 321.934992][T10022] handle_bug+0x16a/0x2a0 [ 321.936806][T10022] exc_invalid_op+0x17/0x50 [ 321.938750][T10022] asm_exc_invalid_op+0x1a/0x20 [ 321.940951][T10022] RIP: 0010:io_wq_put_and_exit+0x8a7/0x9d0 [ 321.943886][T10022] Code: ff e8 dd 71 16 fd 44 0f b6 74 24 78 31 ff 44 89 f6 e8 1d 6c 16 fd 45 84 f6 0f 85 1a fd ff ff e9 67 fd ff ff e8 ba 71 16 fd 90 <0f> 0b 90 e9 00 f8 ff ff e8 0c 35 83 fd e9 72 f8 ff ff 48 8b 3c 24 [ 321.952447][T10022] RSP: 0018:ffffc9002440fbb8 EFLAGS: 00010293 [ 321.954978][T10022] RAX: 0000000000000000 RBX: ffff88802533b000 RCX: ffffffff84f24d66 [ 321.958303][T10022] RDX: ffff888025370000 RSI: ffffffff84f25566 RDI: ffff888025370000 [ 321.961668][T10022] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 321.965917][T10022] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff92004881f99 [ 321.969586][T10022] R13: 0000000000000000 R14: ffff888025370968 R15: ffff888061418018 [ 321.972885][T10022] ? io_wq_put_and_exit+0xa6/0x9d0 [ 321.975078][T10022] ? io_wq_put_and_exit+0x8a6/0x9d0 [ 321.977319][T10022] ? io_wq_put_and_exit+0x8a6/0x9d0 [ 321.979552][T10022] ? dump_stack_lvl+0x17c/0x190 [ 321.981736][T10022] ? __pfx_io_wq_put_and_exit+0x10/0x10 [ 321.984365][T10022] ? rcu_is_watching+0x12/0xc0 [ 321.986655][T10022] ? trace_kmalloc+0xe3/0x110 [ 321.988727][T10022] ? __kmalloc_cache_noprof+0x298/0x6f0 [ 321.991071][T10022] ? __io_uring_add_tctx_node+0x1ac/0x4c0 [ 321.993423][T10022] __io_uring_add_tctx_node+0x3e8/0x4c0 [ 321.995948][T10022] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 321.998953][T10022] ? __fget_files+0x21f/0x3d0 [ 322.001383][T10022] __io_uring_add_tctx_node_from_submit+0x89/0x130 [ 322.004521][T10022] __do_sys_io_uring_enter+0x1656/0x1b50 [ 322.006968][T10022] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 322.009460][T10022] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 322.011974][T10022] ? __fget_files+0x21f/0x3d0 [ 322.014011][T10022] ? fput+0x79/0x100 [ 322.015623][T10022] ? ksys_write+0x1ac/0x250 [ 322.017275][T10022] ? rcu_is_watching+0x12/0xc0 [ 322.019663][T10022] __do_fast_syscall_32+0xe7/0x950 [ 322.022219][T10022] ? lockdep_hardirqs_on+0x78/0x100 [ 322.024521][T10022] do_fast_syscall_32+0x32/0x70 [ 322.026687][T10022] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 322.029372][T10022] RIP: 0023:0xf6fdefcc [ 322.031126][T10022] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 322.039979][T10022] RSP: 002b:00000000f534b50c EFLAGS: 00000292 ORIG_RAX: 00000000000001aa [ 322.043970][T10022] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000001 [ 322.047507][T10022] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 0000000000000000 [ 322.050850][T10022] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 322.054201][T10022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 322.057749][T10022] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 322.061766][T10022] [ 322.064175][T10022] Kernel Offset: disabled [ 322.066023][T10022] Rebooting in 86400 seconds..