last executing test programs: 17m17.971773495s ago: executing program 32 (id=304): syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newtaction={0xc0, 0x30, 0x400, 0x0, 0x0, {}, [{0xac, 0x1, [@m_ct={0x34, 0x2, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0x5}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x74, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x7}, 0x4}}]}, {0x2f, 0x6, "8263ea4ca9f04c3b22ee4ee0e70f7254df628333ce1487834c997040e684262dc4c3f78f54473de8e6d521"}, {0xc}, {0xc}}}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10suse\x00\x00\x00\x00\x00\x00\x00dn\x00\x00\x00', 0x0) r4 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x39, 0x0, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r4, &(0x7f0000002940), 0x40000000000017d, 0x811) openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r5 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x100}) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x0, 0x2) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) 16m54.654338044s ago: executing program 33 (id=414): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r0, &(0x7f0000000240), 0xfffffecc) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000440)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8c0483, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x17, 0x7, 0x8c, 0x401, 0x1bcd9, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x1}, 0x50) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r5, &(0x7f0000000000), 0xd) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000600)={0x1, 0x0, @pic={0x2, 0xfe, 0xe1, 0xc, 0x6, 0xd5, 0x40, 0xd3, 0xfb, 0x7, 0xc, 0x0, 0x3, 0x2, 0x9, 0x5}}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0xffffffff, 0x7d, 0x0, 0x20, 0x3, 0x0, 0x106e, 0x80000080000001, 0x2, 0x1, 0xfffffffffffffffd, 0x7, 0x5, 0x8000000000000007, 0x800000000000000, 0x9], 0x0, 0x3c4210}) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x7284a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0xab}]}}}]}, 0x40}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000005c0)=[{{&(0x7f00000000c0)=@phonet={0x23, 0x1, 0x7d, 0x8f}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000140)="aebf39c64104a8c2ae8ee51e5cc3e6e9f8699d9bc7114b3b4e8fa154b2a804c611b89e4b69bc03dce2b5dcd6f5ec5bcc9460fb9837d1017c8d20abbfbc191c7ae41fe636a61c4938a3fe7e655ee8514054122db73f885732a877c6250a91a5dea192fa6bd589666562ac47a5c7234defe9da511e89302c238aed04d69a76a993b163acd007996f94bd7a86453ae93f50a5497baa8e2b6c9323fcf0092e90756d42fd25205814d94d537c378dc4fc270ade05b1ea92e3eaae621128a1e69685c0ebed6b1f1215bc744d5e3ee439fc1caf76266066abc6f324d5419e885c5dce4f42351bcd8af08360828e113a411c8be5beba24f584f0f93a28", 0xf9}, {&(0x7f0000000280)="da55a6a76dde7e19088aa54eab56867dcc79ad34e122a9ea0a6795a8eb755c4e1a00abd8c80690874c6bf4421cd66a7a13ca0640daf00d03e9be3290c308a83576f0efa36013ce884e5c9df9ed0767283c7bbac37c372b0c4a6bfac7b6986ba2b1dee95c935e28dcdb18a259cfa83cd27c256130d54dbf93dd15be72f7e629", 0x7f}, {&(0x7f0000000300)="64965a", 0x3}, {&(0x7f0000000340)="97e89b36f922d29bf3b9901952162a04d692f82df724dd5ed4cea013f9b4be4c87660f3722b196d4bac9039595fe501a0d1450aa95f142f0d60b6d", 0x3b}, {&(0x7f0000000380)="8c682d474c0c5df4cad7ad11f2a9b657744feb727df5e8a4b9c3d29f788e2721c70508d263f21f01969a0e1e54003ed1b3533aed3a8ff927caa676b3c9f9db8802734755b558516a34fd3e2b220bc52adc9d70beea4f1f0240d7ff3aa373a87daf00ad017e13381e5e75bd82ddc273962f7af73315731cf3b62e8b7f3795f388915e4928c7b2ca45ce8ac72ce9665e2542143b83807fdda9bd294f15756883b6fd6c11f22ea9559cb7c76597c7e2c630faf0ed2653f0e871fd", 0xb9}, {&(0x7f0000000440)="ec73e97398284fe1f2a028d3bd1e897ad0f9f656aa870d99642857a5e18eb410347438384cd12120cb9c2b76893c47250ff525276cfed5df98b8afe8d7a1655fa7a5278f6926a4737ab357dd97091423fa564582d81599596ad6f961ca654d57a5a40d62287ce95a063a706fe9f3ac11ef1ed7a2cc5631756687ee100ac52a848c", 0x81}, {&(0x7f0000000500)="f10c68133a8e0c31b58ea29ebda7fe8d7394563103176a790b1a94c3ec0df8314aefb32c3237ae5ee67ad31cea1a9a09e35bc7a0255454d7a6bbd38cd220f78f63ba6a7a9498012e2ef74a1664f550177e164e4263f07315c5a8e06ed45644dd3e4b9f", 0x63}], 0x7, &(0x7f0000000840)=[{0x14, 0x101, 0x7ff, "d4a69b191eb2ebd1"}, {0x7c, 0x102, 0x1ff, "c753eb10b981c1c664f77782e68271b5a8d008330f781e300dc5def9e4aa92522fbecd1d0a6ed3b0ab6345963c1be7813597183b1a3182a2534e04471677386860ebbb53c6c7907cf2e623473c62e6719a817bb60d78b9556895bd70fd349063f8cbfcbd1ede70f7ba3767fe0ee288fd"}, {0xa4, 0x116, 0x5, "ee53bd41ad893984e4c48e2e1921954e7efe21b8bed07f4e218b9a1009ed618bf5a0dba33d610b3551b92c866da2656d81366130221bdc6722b8194bab113b620eec2d2a924555ea71b5d9278d10f1abe29da7a40a8dbfccd4a5aa140f407d538ac56b049bb45aa81203d402799981217aaf098a30f12d163a25c44671f2d43a2d4d0a53b9d4377d27a853a6d4e32618d1af7a715686"}, {0xbc, 0x1, 0x7afb5ff3, "353bfb765bd060f8df7d564fda1a7c642a70fbede71c3280d75767a9d056896ac43d1dec5f7dd3e21348d34d3ef26e696820d95dda36d5b23a7af08b0e73282e030e44579f0431dd71b0ab121dca09625ce709da5ab0ce5252a9300609881ed97fb473e98b15e3d2424a103f94c43255f95c7110254a2436d341b0ff7523729b6c16ad175835af94664e703aa08efa467937c2d69a9e11d12a7a058de96a90686b928ac65bceca086a82b407b8"}, {0x74, 0x10b, 0x0, "be8b74e3b74ab1e23216bf745a774367bc0ecdf1e7e1f76f1c052e66c2a7c6c10f72cbcc102edc3cc1de5014900e42ae600bfbb896f4ee2fa70eabde39fb3525c6cb738ad33b2a0e0958b49274cd8cf4e667cccd0ca5020e9ea950c01f3b3e354f235a959b7a"}, {0x88, 0x109, 0x7, "d7628507b2a4fc2584e3ef09bd278f4372fc9f8c9499d5d7da2f74c56e93b796799f71670df5f59ae4acde4d8bae7d4f0e7e758a0b01759cb48ca6d6f7641fa203fe0c759d45a4065ab44b8b24a546667596981486aa3c6abe5a472d64ec11b4b3c528d446b186580c069729ce65ae69eacee42daa9ec38aaa7202bf"}], 0x2ec}}], 0x1, 0x81) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c81, 0x8) 16m8.89837665s ago: executing program 5 (id=612): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08f503400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, 'X.'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) 16m8.819627861s ago: executing program 34 (id=612): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08f503400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, 'X.'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) 12m36.806738605s ago: executing program 0 (id=1599): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000100)={0x28, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3}) r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x34, r5, 0x1, 0x70bd2f, 0xfffffffc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4b}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x41}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000008) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x20, 0x4, 0x44, 0x0, 0x0, 0x1}, [@FRA_SRC={0x8, 0x2, @private=0xa010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) fcntl$dupfd(r0, 0x406, r0) setxattr$incfs_metadata(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="73656375f466c648"]) syz_emit_ethernet(0x66, 0x0, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r9) 12m36.585942329s ago: executing program 0 (id=1600): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r2 = epoll_create(0x7f) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)={0xc}) r3 = dup(r1) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0xd, "0062ba7d820700000000000000000000096304"}) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x1c, 0x1, @ib={0x1b, 0x4, 0xd, {"21edab2acf34faeebda477b05d04bf94"}, 0x7, 0x7, 0x1}}}, 0xa0) r4 = syz_open_pts(r3, 0x82882) dup3(r4, r1, 0x80000) read(r1, &(0x7f00000005c0)=""/228, 0xe4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={&(0x7f0000001600)="84e4a56d762eb0e55b09433175d5f8fb1e40fe2e2dd193049b4791a0df50442e380f5935c2f48fb7bf6e84ae8a1aae5378f3876e5fdbe67dcd12db958c284cffb42cc9ff02d7961ee2421fe2927c5893158ab0d0c6c57a25", &(0x7f0000001680)="92f302dbb62ae9bc0b5d377a7ac631bdd70d55d163c431bb1f60b6e10a75aea940f1f9cc1d65e9741b6fecfe78501e12ff63ec78db5df010a01b14b076c17c08ac2b8b3b716c9f4711e70ad3ff434db440e5bc2de69a16a5d2a70f9a578762e10ffcde11bcf176bd89c5179805e4d27058e9b7f3ca77286020ea2553e438bf2e35070d8388fe644b0e27d4e6612698c84e13a9bc91d57eda26e5047f14f19c6e09f05ed0b1c8cdfc10bb3d49e351bfded6edec4e396196c4a5b9c326edda16496a66283fb72a12a7f43f0e11dbb77a480743ed89b5ea423a036f"}}, &(0x7f00000015c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0xb}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) clock_gettime(0x0, &(0x7f0000001580)={0x0, 0x0}) timer_settime(r5, 0x1, &(0x7f0000000040)={{0x77359400}, {r6, r7+10000000}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r8 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) setsockopt$IP_VS_SO_SET_STARTDAEMON(r8, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'hsr0\x00', 0x4}, 0x18) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r9}, 0x10) setsockopt$IP_VS_SO_SET_STOPDAEMON(r8, 0x0, 0x48c, &(0x7f00000003c0)={0x1, 'batadv_slave_0\x00', 0x2}, 0x18) r10 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000002c0)="ae", 0x1, 0xfffffffffffffffd) add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000340)="0571494264a11f697b83383ec9faa2f5455b19c2b5d283818aa9e31ee2f6062e03b12c0a4c507e432a539c4f82c2ded8f0b37fb1d87a9e0355e423a5a96ada2afd3128a2c2ac5a", 0x47, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000400)={0x0, 0x1000, 0x51}, &(0x7f0000000300)=ANY=[@ANYRESHEX=r8, @ANYRES64], &(0x7f0000000500)="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", &(0x7f0000001840)=""/81) keyctl$read(0xb, r10, &(0x7f0000000240)=""/112, 0x349b7f55) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060008060000100002"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@delchain={0x24, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5, 0xd}, {0xfff2, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004010}, 0x45) 12m36.556756356s ago: executing program 0 (id=1601): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f00000008c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0x18}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newtfilter={0x38, 0x2c, 0xd23, 0x70bd22, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x2400}, {0x0, 0xf5}, {0x8, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r1}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4084}, 0x8000) 12m36.405045876s ago: executing program 0 (id=1603): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount$tmpfs(0x0, &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1000810, 0x0) (fail_nth: 6) 12m36.275080213s ago: executing program 0 (id=1605): r0 = socket$packet(0x11, 0x2, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4c4100, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0xe4}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0xfffffffffffffed5, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000004a00611400000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000000080002dff7040000"], 0x24}}, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) bind$packet(r0, &(0x7f0000000240)={0x11, 0xe, 0x0, 0x1, 0x5, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = syz_open_dev$vim2m(&(0x7f0000000280), 0x1, 0x2) mkdirat(r3, &(0x7f0000000080)='./file0\x00', 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x4, 0x2, 0x1}) bind$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x40, 0x3, 0x1}, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0) r5 = socket(0x23, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x5, 0x6, 0x73}, {@remote, 0x4e22, 0x0, 0xcd}}, 0x44) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r7 = eventfd2(0xeffffffd, 0x801) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000001340)={0x3, 0x0, 0x2, r7, 0x3}) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f00000000c0)={0x3, 0x40000, 0x0, r7, 0xa}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB="6000df55", @ANYRES16=r10, @ANYBLOB="05042bbd7000fedbdf250100000008000100", @ANYRES32=r11, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e636500"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r9, 0x0, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f0000000000)) 12m34.812949951s ago: executing program 0 (id=1606): syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x82c02) syz_open_dev$video(&(0x7f0000000040), 0x7, 0x0) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x2e) syz_socket_connect_nvme_tcp() socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x20000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000380)=[{0x1, 0x3, {0x1, 0x0, 0x1}, {0x0, 0xf0, 0x4}, 0xfd, 0xfe}, {0x0, 0x2, {0x0, 0xff}, {0x1, 0xff, 0x3}, 0x0, 0xfe}, {0x2, 0x2, {0x1, 0x0, 0x1}, {}, 0x1}, {0x3, 0x2, {0x2, 0xff, 0x4}, {0x0, 0x0, 0x3}, 0xff, 0xfd}, {0x3, 0x3, {0x0, 0x0, 0x2}, {0x0, 0x1}, 0x1, 0x2}], 0xa0) 12m34.747401438s ago: executing program 35 (id=1606): syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x82c02) syz_open_dev$video(&(0x7f0000000040), 0x7, 0x0) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x2e) syz_socket_connect_nvme_tcp() socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x20000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000380)=[{0x1, 0x3, {0x1, 0x0, 0x1}, {0x0, 0xf0, 0x4}, 0xfd, 0xfe}, {0x0, 0x2, {0x0, 0xff}, {0x1, 0xff, 0x3}, 0x0, 0xfe}, {0x2, 0x2, {0x1, 0x0, 0x1}, {}, 0x1}, {0x3, 0x2, {0x2, 0xff, 0x4}, {0x0, 0x0, 0x3}, 0xff, 0xfd}, {0x3, 0x3, {0x0, 0x0, 0x2}, {0x0, 0x1}, 0x1, 0x2}], 0xa0) 12m4.175985701s ago: executing program 1 (id=1760): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x40) openat$uinput(0xffffff9c, &(0x7f0000000180), 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) openat$iommufd(0xffffffffffffff9c, &(0x7f00000003c0), 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc22, &(0x7f0000000180)=0x1400200bce) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, 0x0, &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') setpgid(r0, r0) setpgid(0x0, r0) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0x1f00, 0x12) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40100, 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) 12m2.844293233s ago: executing program 1 (id=1767): creat(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/185, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0xec) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_io_uring_setup(0x283d, &(0x7f0000000380)={0x0, 0xb173, 0x200, 0x3, 0xce}, &(0x7f0000000100), &(0x7f0000000400)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) close(0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) read$FUSE(0xffffffffffffffff, &(0x7f0000000480)={0x2020}, 0x2020) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffee9, 0xc9100120, 0x0, 0xfffffffffffffd25) io_uring_enter(0xffffffffffffffff, 0x4e14, 0x912a, 0x41, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) 12m0.352118392s ago: executing program 1 (id=1770): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xd, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x10001}]}}]}, 0x38}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xd, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x1}]}}]}, 0x38}, 0x1, 0x2710}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r7 = openat$kvm(0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x38) syz_clone3(&(0x7f0000000300)={0xd0280f80, 0x0, 0x0, 0x0, {0x100003c}, 0x0, 0x0, 0x0, 0x0}, 0x58) iopl(0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0x2, 0x7, 0x0, 0x5, 0x1, 0x4, 0x2, 0x7}}) r8 = syz_open_dev$sndctrl(&(0x7f0000000240), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r8, 0xc2c45512, &(0x7f0000000340)={{0x3, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x4, 0xffffffff, 0xffff, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x4000, 0x0, 0x0, 0xfffffffc, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1fb, 0x0, 0xffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20, 0x0, 0x0, 0x0, 0x0, 0x47e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffdffc7, 0x8, 0xffff, 0x3, 0x2, 0x3, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x80000001, 0x0, 0x0, 0x8, 0xf1e9, 0x0, 0x0, 0x2147, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1ff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, 0x1, 0x0, 0xffffffff, 0x0, 0x4000000]}) prlimit64(0x0, 0x4, &(0x7f0000000140)={0x2, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x0, 0x0) 11m58.799051398s ago: executing program 1 (id=1774): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) socket(0x2b, 0x800, 0x100) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x3f) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x1c1840, 0x92) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r5, &(0x7f00000001c0)="f1", 0x1) sendfile(r5, r3, 0x0, 0x40001) sendfile(r5, r4, 0x0, 0x7ffff000) r6 = openat$mice(0xffffff9c, &(0x7f0000000100), 0x0) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f00000001c0)={'pimreg1\x00'}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r7 = fsmount(r1, 0x0, 0x3) sendmsg$AUDIT_TTY_SET(r7, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x3f9, 0x100, 0x70bd27, 0x25dfdbfe, {}, ["", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x20048040}, 0x8080) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r7}}, 0x58) 11m57.254949818s ago: executing program 1 (id=1776): socket(0x2, 0x80805, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x840, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) close(0x3) setrlimit(0x9, &(0x7f0000000040)={0x7fff, 0x37e}) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xa43d, 0x80, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x0) 11m56.21077223s ago: executing program 1 (id=1784): creat(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/185, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0xec) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_io_uring_setup(0x283d, &(0x7f0000000380)={0x0, 0xb173, 0x200, 0x3, 0xce}, &(0x7f0000000100), &(0x7f0000000400)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r4) socket$packet(0x11, 0x3, 0x300) read$FUSE(r4, &(0x7f0000000480)={0x2020}, 0x2020) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffee9, 0xc9100120, 0x0, 0xfffffffffffffd25) io_uring_enter(0xffffffffffffffff, 0x4e14, 0x912a, 0x41, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) 11m56.093551582s ago: executing program 36 (id=1784): creat(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/185, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0xec) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_io_uring_setup(0x283d, &(0x7f0000000380)={0x0, 0xb173, 0x200, 0x3, 0xce}, &(0x7f0000000100), &(0x7f0000000400)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r4) socket$packet(0x11, 0x3, 0x300) read$FUSE(r4, &(0x7f0000000480)={0x2020}, 0x2020) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffee9, 0xc9100120, 0x0, 0xfffffffffffffd25) io_uring_enter(0xffffffffffffffff, 0x4e14, 0x912a, 0x41, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) 11m9.685852553s ago: executing program 8 (id=1956): r0 = socket$inet(0x2, 0x1, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000000bc0)=[{{&(0x7f0000000180)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10, 0x0}}], 0x1, 0x20004840) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x8280) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x10b200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_ONE_REG(r4, 0x4048aecb, &(0x7f00000002c0)=@arm64_ccsidr={0x6020000000110009, 0x0}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r1, 0xc0804124, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) shutdown(r0, 0x0) 11m9.075643481s ago: executing program 8 (id=1962): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f0000000080)={0x0, 0x1, 0x6, 0x1fd}) (async) fchmod(r0, 0x40) add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000b00)={'syz', 0x1}, &(0x7f0000000040)="fc479c5868cc5f3be60ca131267200c06c825525055e14240e97093029f9654a25f0f30104558151da2c2d9bc1115f33c419eea78bbe6f5b6d06a408", 0x3c, 0xffffffffffffffff) 11m9.074770021s ago: executing program 8 (id=1964): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES32=r4], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@dellink={0x44, 0x11, 0x4, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, 0x40, 0x6422858d3b522e50}, [@IFLA_OPERSTATE={0x5, 0x10, 0x6d}, @IFLA_PHYS_PORT_ID={0x14, 0x22, "0b4066ad9bd3ae2bcadb65abcfec3be4"}, @IFLA_LINK_NETNSID={0x56, 0x25, 0x1}]}, 0x44}}, 0x0) 11m8.985857935s ago: executing program 8 (id=1966): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount$tmpfs(0xf000, &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1000810, 0x0) 11m8.895713147s ago: executing program 8 (id=1967): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x40) openat$uinput(0xffffff9c, &(0x7f0000000180), 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) openat$iommufd(0xffffffffffffff9c, &(0x7f00000003c0), 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc22, &(0x7f0000000180)=0x1400200bce) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') setpgid(r0, r0) setpgid(0x0, r0) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0x1f00, 0x12) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40100, 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) 11m7.735543657s ago: executing program 8 (id=1971): r0 = socket$inet6(0xa, 0x3, 0x6) sendmmsg$inet6(r0, &(0x7f0000001c80)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}, 0x4000}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 11m7.62843563s ago: executing program 37 (id=1971): r0 = socket$inet6(0xa, 0x3, 0x6) sendmmsg$inet6(r0, &(0x7f0000001c80)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}, 0x4000}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 9m29.698890367s ago: executing program 9 (id=2457): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000080003851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x1e}, 0x94) 9m29.571021598s ago: executing program 9 (id=2460): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) splice(r1, 0x0, r0, 0x0, 0x10000008ebc, 0x0) ioctl$RTC_PLL_SET(r0, 0x401c7012, &(0x7f0000000080)={0x8000, 0xf, 0x2, 0x175, 0x2, 0x69986590, 0x6}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xf, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x50}, @TCA_FQ_PIE_ECN={0x8}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x805}, 0x20008844) 9m26.462799552s ago: executing program 9 (id=2485): r0 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x3232, 0x100, 0x0, 0x3de}, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_FSYNC={0x3, 0xa, 0x0, @fd, 0x0, 0x0, 0x0, 0x1}) (async) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@ipv6_getnexthop={0x44, 0x6a, 0x20, 0x70bd2a, 0x25dfdffd, {}, [@NHA_GROUPS={0x4}, @NHA_MASTER={0x8, 0xa, 0x2}, @NHA_OIF={0x8}, @NHA_MASTER={0x8, 0xa, 0x1}, @NHA_FDB={0x4}, @NHA_FDB={0x4}, @NHA_OIF={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r3, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES64=r4, @ANYBLOB="010025bd7000fbdbdf251e00000008000300", @ANYRES32=r5, @ANYBLOB="50002f800c0002000203aaaaaaaaaaaa0c0003800800010002000000340003"], 0x6c}, 0x1, 0x0, 0x0, 0x20040814}, 0x10000890) 9m26.374915275s ago: executing program 9 (id=2488): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount$tmpfs(0xfff6, &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1000810, 0x0) 9m26.244755763s ago: executing program 9 (id=2489): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0xffffffff}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x3}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x0, 0x4}}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x1, 0x206, 0x7}]}}]}}]}, 0x5c}}, 0x24040084) 9m25.504245459s ago: executing program 9 (id=2492): socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x181802) r1 = openat$sw_sync(0xffffff9c, &(0x7f0000000040), 0x22040, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb:\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xa, 0x0, 0x0, 0x2}) io_uring_enter(r2, 0x7a98, 0x0, 0x0, 0x0, 0xfffffffffffffc76) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x40305839, &(0x7f0000000540)) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)=@o_path={&(0x7f0000000200)='./file0\x00', 0x0, 0x0, r0}, 0x14) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000300)=r6, 0x4) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001008000000000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000010001280080001007369740004000880"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r8, 0x0, 0xffffffdb) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f00000001c0)={0x9, {0x50, 0xffff, 0xb96f, 0xd}}) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r8, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r10, r8}}, 0x18) madvise(&(0x7f0000644000/0x4000)=nil, 0x4000, 0x9) 9m25.449441987s ago: executing program 38 (id=2492): socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x181802) r1 = openat$sw_sync(0xffffff9c, &(0x7f0000000040), 0x22040, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb:\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xa, 0x0, 0x0, 0x2}) io_uring_enter(r2, 0x7a98, 0x0, 0x0, 0x0, 0xfffffffffffffc76) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x40305839, &(0x7f0000000540)) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)=@o_path={&(0x7f0000000200)='./file0\x00', 0x0, 0x0, r0}, 0x14) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000300)=r6, 0x4) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001008000000000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="000000000000000010001280080001007369740004000880"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r8, 0x0, 0xffffffdb) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f00000001c0)={0x9, {0x50, 0xffff, 0xb96f, 0xd}}) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r8, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r10, r8}}, 0x18) madvise(&(0x7f0000644000/0x4000)=nil, 0x4000, 0x9) 7m37.703242813s ago: executing program 3 (id=3001): ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) socket$packet(0x11, 0x2, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) (fail_nth: 11) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x4, 0x200000005c831, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, 0x0) 7m37.513914908s ago: executing program 3 (id=3003): r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4c4100, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0xe4}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0xfffffffffffffed5, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000004a00611400000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000000080002dff7040000"], 0x24}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) bind$packet(r0, &(0x7f0000000240)={0x11, 0xe, 0x0, 0x1, 0x5, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = syz_open_dev$vim2m(&(0x7f0000000280), 0x1, 0x2) mkdirat(r4, &(0x7f0000000080)='./file0\x00', 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x4, 0x2, 0x1}) bind$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x40, 0x3, 0x1}, 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0) r6 = socket(0x23, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x5, 0x6, 0x73}, {@remote, 0x4e22, 0x0, 0xcd}}, 0x44) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r8 = eventfd2(0xeffffffd, 0x801) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000001340)={0x3, 0x0, 0x2, r8, 0x3}) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f00000000c0)={0x3, 0x40000, 0x0, r8, 0xa}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r10, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB="6000df55", @ANYRES16=r11, @ANYBLOB="05042bbd7000fedbdf250100000008000100", @ANYRES32=r12, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e636500"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r10, 0x0, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r13, 0x8933, &(0x7f0000000000)) 7m37.151499328s ago: executing program 3 (id=3008): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b70000008100003bbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071105400000000001d400500000000004704000001ed00000f030000000000001d440000000000006b0a00fe000000007313000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff31a8fd3c0fd8b7ff831028e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd829e654400e2438ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda82fc9c4d7ecc7a803bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ff616236fd8f2477184bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a83469620c6e74e1f46132559c4f8700a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a920099c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40fc5d2f55ff07c53147de202ce517b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661061173f359e9052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff26b61aac8aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3ba18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e26534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336dfaa6d5d164301190bc2d4c04087729033342045804a28082abc3b4762302a271722fb515f31e0dd115a292f1e68481a62c49d15ea5460a29c60b1058fb7aa9bf4ee3cbe11b03711a15d730646b72d074dab1e8c429339f3460d324c17a4a8bfc7d7eab45bef00664d6dc82300000000000", @ANYBLOB="f65c4042a0e3a6477d81d83ce49419e316631e86bfc22aa0a46e6d106d58fa80e58c84fd"], &(0x7f00000001c0)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xfffffffc}, 0x10}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x109a42, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f00000000c0)={0xe000001a}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x101901, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x5, 0x7fff7ffc}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000180)={0x0, 0x1, r5, 0x5, 0x80000}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r6, 0xc008ae88, 0x0) ioctl$KVM_SET_CPUID(r6, 0x4008ae8a, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) pselect6(0x40, &(0x7f0000000080)={0x6, 0x1, 0x6, 0xa0e4, 0xd113, 0x439, 0x7}, &(0x7f0000000140)={0x4, 0x0, 0x1, 0x5, 0x200, 0x0, 0x7fffffff, 0x1}, &(0x7f0000000180)={0x6, 0xab10, 0x2, 0x9, 0x40, 0xbc, 0x81, 0x7}, &(0x7f00000001c0), &(0x7f00000002c0)={&(0x7f0000000240)={[0x8, 0x4]}, 0x8}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_emit_vhci(&(0x7f0000000600)=ANY=[@ANYBLOB="0413ff03"], 0x8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc001, 0x0, 0x0) r7 = openat$nci(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r8 = syz_io_uring_complete(0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r7, 0x5000940e, &(0x7f0000000640)={{r8}, "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"}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_RADAR_DETECT(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="01002dbd7000fedbdf255e000000080003b91526a2dc8da900", @ANYRES32=r12, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 7m36.142557187s ago: executing program 3 (id=3018): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount$tmpfs(0xf0ffff, &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1000810, 0x0) 7m36.041547354s ago: executing program 3 (id=3020): syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x82c02) syz_open_dev$video(&(0x7f0000000040), 0x7, 0x0) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, 0x0, 0x2e) syz_socket_connect_nvme_tcp() bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@fallback, 0x5, 0x1, 0x8b78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0xfffffec4) syz_io_uring_setup(0x23b5, &(0x7f0000000140)={0x0, 0xb0c4, 0x0, 0x2, 0x5a}, &(0x7f0000000000)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r6, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a2", 0x85}], 0x1}, 0x20000000) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r5, 0x6b, 0x1, &(0x7f0000000380)=[{0x1, 0x3, {0x1, 0x0, 0x1}, {0x0, 0xf0, 0x4}, 0xfd, 0xfe}, {0x0, 0x2, {0x0, 0xff}, {0x1, 0xff, 0x3}, 0x0, 0xfe}, {0x2, 0x2, {0x1, 0x0, 0x1}, {}, 0x1}, {0x3, 0x2, {0x2, 0xff, 0x4}, {0x0, 0x0, 0x3}, 0xff, 0xfd}, {0x3, 0x3, {0x0, 0x0, 0x2}, {0x0, 0x1}, 0x1, 0x2}], 0xa0) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r6, {0xfff3, 0x10}, {0xfff1, 0x9}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x48040}, 0x20000050) 7m35.573962354s ago: executing program 3 (id=3030): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="200200004100080029bd7000fedbdf251c000000891952ce7dd9dfce270e9af74c83741d87cae08f0519af315f8805f2d6ff10a7b616be2e53c26314899f1ed49646a5a6bc2f8c013f117206396fc79d57d67721a162dc9e51c37f7a2ab9ac73c9de10670127ab6ddd497491ff0ab98e3b4544ef7fe074131a81584d1e713c865db1474b0a9e07a4bb854f04e0e02be565264b244ea2bdea133f4c0dff2db91ef2459f4880a80ed9395c267c19821f651c43"], 0x220}}, 0x40000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000002a80)={0x81, 0x0, 0x3}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x105) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8d}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc00}) 7m35.415321114s ago: executing program 39 (id=3030): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="200200004100080029bd7000fedbdf251c000000891952ce7dd9dfce270e9af74c83741d87cae08f0519af315f8805f2d6ff10a7b616be2e53c26314899f1ed49646a5a6bc2f8c013f117206396fc79d57d67721a162dc9e51c37f7a2ab9ac73c9de10670127ab6ddd497491ff0ab98e3b4544ef7fe074131a81584d1e713c865db1474b0a9e07a4bb854f04e0e02be565264b244ea2bdea133f4c0dff2db91ef2459f4880a80ed9395c267c19821f651c43"], 0x220}}, 0x40000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000002a80)={0x81, 0x0, 0x3}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x105) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8d}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc00}) 26.96006013s ago: executing program 4 (id=5177): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) pipe(0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000300)={0x2, 0x200, 0x1, 0x2, 0x4, "261ba50e65a5df7d"}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {}, [{0x84, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0xfffffcdc}, {0x4}, {0xc}, {0xc, 0x8, {0xc00, 0x2}}}}, @m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xc, 0x762, 0x5, 0xc, 0x9}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0xffffffff}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4040}, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c0001007665"], 0x48}}, 0x0) 26.27029288s ago: executing program 4 (id=5180): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0xfffffffd}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x104) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000d000000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r5, 0x0, 0xb, 0x0, &(0x7f0000000000)="77844923fbde9d724bbda1", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x3e, 0x107, 0xfffffffc, 0x10000, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x2e, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x8, 0x14, 0x0, 0x1, [@nested={0x4, 0x13}]}]}]}, 0x30}, 0x1, 0x0, 0xfeff, 0x4048011}, 0xc000) 25.089828321s ago: executing program 4 (id=5186): socket$netlink(0x10, 0x3, 0xf) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r2, &(0x7f00000001c0)={0x18, 0x2, {0x3, @remote}}, 0x1e) syz_usbip_server_init(0x6) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000006c0)={0x0, 0x8, 0x8000, 0x4}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r4 = openat$rdma_cm(0xffffff9c, &(0x7f0000000300), 0x2, 0x0) memfd_create(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r4, 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x2, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000201f0000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000011000000bf09000000000000550901000074f696e500000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0x803, 0x0) 23.240139548s ago: executing program 4 (id=5195): syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x2, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x4888}}}}}}}, 0x0) 23.239716203s ago: executing program 4 (id=5196): io_cancel(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) r0 = socket$inet6(0xa, 0x5, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x121) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f00000000c0)='./file0\x00') setpgid(r1, r1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setpgid(0x0, r1) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000004c0)=[@in6={0xa, 0x0, 0x0, @local, 0x1}], 0x1c) 22.920308743s ago: executing program 4 (id=5197): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9a) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000009800)=[{{&(0x7f0000000480)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000780)=[{&(0x7f00000001c0)="ef2cbf580d2e630863032ac618b407ed8c50b6b909b7380dd8c12888714519b72d6b10ee3be2fdcad5f0f51c", 0x2c}, {&(0x7f0000000340)="daa9c1651ac2d2d62081", 0xa}, {&(0x7f0000000500)="9197c7b4eb3b3a8ac984", 0xa}, {&(0x7f0000000540)="ecdca5417cebd477821be8ade7c0626fc73eac26d0b8eff64a483202309aaf152b766727e87a366f36c255489fbf50957edbff2a2fc242224f998ad4361524d8bf66c13e59dc029bb035b49f2a02b81e4ae3a3f1670b8c7af9fcc2e840b4092d608f9d0f742e95d3bd970a5cacd607ce60c502c1d9c15adaca1525e40a17a5cf8e69db3f2e076903e997e1a01be21d2de14230fea7f61363e406088dc011185046f21549a4422fc56baf01d24f5ac6b3b279fd63f0aa5b6691905973b801d893a7bd4e34d60f0000", 0xc8}, {&(0x7f0000000640)="9f0677436f4f921730519c4b4ad42c1694a545b68b70ba0bdacb0d6186578dc3f742343b298d033949a187e9d8b9ce472a6606e19a823644a161ee6257c1a873b177756344fddccce84bd793e2d68a", 0x4f}, {&(0x7f00000006c0)="26c1d12e772729f075a36c5aaf2659662d76fdc8fe4132e4eaf9d08bd415810d", 0x20}, {&(0x7f0000000700)="df", 0x1}, {&(0x7f0000000740)="99ac380986c666eeda41f7104ec3d08e8fc4764a6aa2e41e3ed71eb0517382f07167338171a80cc47bd1e3", 0x2b}], 0x8, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="c382b60687c75d900100000093f5fbe8b679b73e6b6c5df3bb3618f86c3e186a4d83b805e97324e01088f5c9b5f0d429d903fac6ac114eba5c2c8a1a779d80d761f611f3a95523be5b4f2a3bf0c35a3202f1009b3026763147269900000000", @ANYBLOB="0c0000000100000001000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r2, @ANYBLOB="0c0000000100000001000000200000000100000001000000", @ANYBLOB="14000a000100000001000000", @ANYRES32=r7, @ANYRES32=r7, @ANYRES32=r7, @ANYRES32=r2, @ANYBLOB="180000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES16=0x0], 0xe0, 0x1}}, {{&(0x7f0000000f00)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001180)=[{&(0x7f0000000f80)="cb7aa99b39b99b7b9e89eeee256a3bead7d7d2d3c5331b95a3d5960828d0eed83220a7fee96ef16310ad9a4194de59df397202e548a38082c378c3b314bc69d792596364bc6b5201a476a8ad4f89d9fc46fbe38c7b296cd3ea1b843cc45793e3972d2e75cf6f2ff4a0b51c689c6f319df799efe54827af43814bc0bc0f05e5f1689da8ededdc11b6c21538fee84f248f266c28539a52e8bd515437b8897c9f104bb3730936c11ad392", 0xa9}, {&(0x7f0000001040)="1f900f08a6d02312f6e96f45fe1cd919b4a7f7195e72ade1fc308b0680ec1ae6976c5a5751d317e483ad1185ddf0e2ebc1edfe8b774bdffae1d5805ec28b554f31fa2dd8b990c0ca66d2d4bda53f12926b6b7c72c343e94150482b3c614aad9c463dcdf54f31aa", 0x67}, {&(0x7f0000000840)="82ea7e7bfa68ac0be3a29e2f3ac95d7d13fd4836c6da0d653cdacfc2669e210bccbade03cb4adc9fafb5baa055479983623f6b7cded6a7e15918f1a843ec6549fa8010d775ddf886a0fcfd148f95feac528fd6b6ba882d868939b96729e60779a69b8700115837b48f33a2c41e99e400b60ff01a8d889a85e8d8d3396a74071cb6f2098ce024c9b323662cc37042d4000c72356adea06a915a47a194bcad18a6902e2acfa6ad661a851d4276", 0xac}, {&(0x7f00000012c0)="9ab1c27d329f03e14bc38b6a807390cd2a8a18ba0b1c0466fa8a8bc0ba1464475fa0a2e0f5c867d0d896ea93a5690ca8098e5631361df3af77f18f34a0a32d0225da87f37d5c5dbfa2e0e729c93a747e7508175faa95d5f3bff51532143c3c9464affe6b90df0e8186f83ebdf8d9f9daa7aecc85ace7d0cb5ca01943414e4b7c4668ab3a94b240395ace61807080eaded6d9192868a0bd84d88b25929b447ca500c49909ffc69a47337078d4d0e854c81941f5656cbee2581b5ebc5a60661354f8ddb7492142", 0xc6}, {&(0x7f00000083c0)="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", 0x1000}], 0x5, &(0x7f00000009c0)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3]}}], 0x50, 0x40000}}, {{&(0x7f0000001440)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000001980)=[{&(0x7f0000001200)="058d50267bceff9d2cdd86459421113a8bda7840a479bdf5b0035b36f70210c0187a8dc7c229794c11011e9f49d841b5d01e34c8485d4b146847cc08", 0x3c}, {&(0x7f00000014c0)="ea540cb99644ac3caa87bd3ba4bc292b748f7e0a067e3f54a1bbadbd808f02f2dc559eb8a949b6db2307b58347b693a85873be84a11b54c1ae5665d52d45696a49ff1ea26132537fc210dd77a5716722ced85d0970ed5084751e589159a62cb830eff9eb8b0a88ef065751c1daead42599e34b30b34a07f85635603254", 0x7d}, {&(0x7f0000001540)="816d4ea58b06f5443f1282c8f820a7c21cbb0d190eece1a7337a53ce263e05a1be395022bf47d55cf4a15253e94d783ce48d1ffa844ce2aa8a81a7682fa44c637f092dbb504b975946ccda228bb70bff82725204239852a9a05494b7dadf4578b777d788d5461c3832f8755419d7639b3dec96f5d637e696a041e7dc7a637b738a2925be78784e049b77ec9312d555a690ac9b7bdaa06590bd08781ea667aedacf4a20f75a41f65e71a536c7b1ac71f2cab9f108993b7b0a05b895e772bd5e70392a321de9", 0xc5}, {&(0x7f0000001640)="ab0cc68c193d6e172fb31677ee39110481c322fd1a6026953f9e7cda2832f071f9bc826119803174b1bfa0786b940df62fa0367abca0469e2b6b9669b1746ef5e7bf3437ea1c84deb5c51643acf582e3fbcca713ea077d9b9448dce5263137f7fd30c2970cc2ef4d94bf139cb1f64bd71063d9e8d73bcf918fe26cb93ec48a90b70e83300f72994d26331596a9ef319701c53a71f6260f9b22ed66786ff6f62e03fce60e5992e4b0fa4d3b71b18c", 0xae}, {&(0x7f0000001700)="51f047a5ace0d2be5a74969ea28896b8f0ab341200443a7182f42734bf73cf1d5994c402a94391ac1dfcc1f7a9a002bc9b8fbeb2c879e865aac2619bd3ffeb0e75016cbfb3bc320b4446b8cbc2b5c71c07d634314aff1341575ffa6547979417f3d9ce7336ba596b3c6dadbc9b75bb8c3efec6ba448b9a25bda883586786922da77a02f01c720ec950774ac2226f30fee5237e30", 0x94}, {&(0x7f00000017c0)="12e9f0388406361d4c4d94627d5487ceded4677775007445f3d9444c84522a4c73f1514cd277b6ac1655c21c3e387a203d8daa9ea739e6512f6125b3d3ac606974da13200345bde0c51741d8a14e371aba74d8a19c9f3471aa848e33919de92c5730077564509d29a957cb0d4c5e34a2e94b70fab886e80b32e6a4da951de9c560dd55f8e3814d12186058dad95e63c3439f3d4473cc19b99bf87b207c0ea8", 0x9f}, {&(0x7f0000001880)="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", 0xfe}], 0x7, 0x0, 0x0, 0x4000050}}, {{&(0x7f00000019c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001b00)=[{&(0x7f0000001a40)="3b7d9caee424bd49a083d5cc6fc725f40d559339d9bf78481145b438f552dce6300c318e4a98e6836a8ba0c88995e75a896902c8aff1ef23e8ce54c4106ca7528405a8a750d6c33ad46d39d02ddf6b941a810e7324d43a05497cc0c7fee13ba201d9293f6c211b9accd503e24de45a45d6f3efa208f12643913406dd92a338450c27937224e105561657e39aa7f80f7f767c5727c839a2e42dfa15e40d319cb85e75c443c8caca90", 0xa8}], 0x1, &(0x7f0000000c00)=ANY=[@ANYBLOB="340000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r6, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32=r2, @ANYRES32=r5, @ANYRES32, @ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="18007bb957a324fa91230000d734", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000100000001000000", @ANYRES32=r0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xe0}}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001cc0)="4698e4846d704b0f4da55b28e04d06285c5aa118b34d479ad4fa2d6dfaad7b6bc74af4efb59f22ce55a4f83ce80ab0958e89c58c5b3df3f7ace2e9c1e3684b81bd7d19c856fec32765a215901ff81b35726b7484850cbff5da0d5f210502a564969350f1341d33f193ee245d7128b9e85ad743a8af75d3786772604b4c9d9d13232e3710e54cee32b481e5da9c5580a3d6005350a967f21df4b7f98ee4c08b40f115c9f16445a14f922afe6a60be575fce48f9ce3c945f7b4d0f1b17c4d9442d0f7034bc60106840677dd7b713be886c2cffc786378a43041c", 0xd9}, {&(0x7f0000001dc0)="ed", 0x1}], 0x2, &(0x7f0000009740)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x1c, 0x1, 0x1, [r7, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8, 0x810}}], 0x5, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = syz_io_uring_setup(0x890, &(0x7f0000000140)={0x0, 0xaedd, 0x4, 0x2, 0x186}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r8, 0x47f6, 0x0, 0x4, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e28, 0xb, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}, 0x1c, &(0x7f0000000380)}, 0x580c2) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @private1, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x2, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84880) write$P9_RSETATTR(r11, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}, @TCA_CT_LABELS_MASK={0x0, 0x8, "b93318933ac691d6f85047862fc35fe5"}]}, {0xb5}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x10}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) getpid() 11.63969871s ago: executing program 6 (id=5230): openat$mice(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffffffa, 0x0, 0x0, 0x0, 0x239, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x4, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x960, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1010001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xd, 0x0, 0x0, 0x400000, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000340)={'sit0\x00', &(0x7f00000001c0)={@dev={0xfe, 0x80, '\x00', 0x2d}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x14, 0x2}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x3c, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000280), 0x2}, 0x0, 0x22121}) r3 = syz_io_uring_setup(0x487, &(0x7f0000000100)={0x0, 0x59c4, 0x800, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r6 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$PTRACE_GETSIGMASK(0x420a, r6, 0x8, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r3}) io_uring_enter(r3, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 10.742981157s ago: executing program 6 (id=5233): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x4, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x25, 0x18, @val=@tracing={0x0, 0xf3}}, 0x1c) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r4, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000040)=0x1) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040100ff580c030322156754413a3bf2f49b9a888bbf3fb967e682e2047c9f5e1a991445"], 0x8) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, &(0x7f0000000140)) r5 = socket(0x40000000015, 0x5, 0x0) r6 = syz_io_uring_setup(0x892, &(0x7f0000000140)={0x0, 0xaef2, 0x0, 0x2, 0x2ee}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xffffbffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x2000, 0x0, {0x2}}) io_uring_enter(r6, 0x47f6, 0xfff5, 0x2, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x10, 0x0, 0x1, 0xfffffffe, 0x25dfdbfd, {{0x8}, {@void, @void}}}, 0x14}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 9.135763736s ago: executing program 6 (id=5238): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$ax25_int(r2, 0x101, 0x7, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000240)="ad000000000037eb00800000f1cfb65c", 0x10) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0xc040}, 0x8800) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000600)=""/152, 0x98}], 0x1) recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}) io_uring_enter(r3, 0x47f4, 0x0, 0x0, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000280), 0x6) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) syz_open_dev$dri(&(0x7f0000000200), 0x8, 0x64000) close_range(r6, 0xffffffffffffffff, 0x0) mount$9p_virtio(&(0x7f0000001a80), &(0x7f0000001ac0)='.\x00', &(0x7f0000001b00), 0x10000, &(0x7f0000000180)={'trans=virtio,', {[{@posixacl}]}}) 7.904648409s ago: executing program 40 (id=5197): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9a) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000009800)=[{{&(0x7f0000000480)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000780)=[{&(0x7f00000001c0)="ef2cbf580d2e630863032ac618b407ed8c50b6b909b7380dd8c12888714519b72d6b10ee3be2fdcad5f0f51c", 0x2c}, {&(0x7f0000000340)="daa9c1651ac2d2d62081", 0xa}, {&(0x7f0000000500)="9197c7b4eb3b3a8ac984", 0xa}, {&(0x7f0000000540)="ecdca5417cebd477821be8ade7c0626fc73eac26d0b8eff64a483202309aaf152b766727e87a366f36c255489fbf50957edbff2a2fc242224f998ad4361524d8bf66c13e59dc029bb035b49f2a02b81e4ae3a3f1670b8c7af9fcc2e840b4092d608f9d0f742e95d3bd970a5cacd607ce60c502c1d9c15adaca1525e40a17a5cf8e69db3f2e076903e997e1a01be21d2de14230fea7f61363e406088dc011185046f21549a4422fc56baf01d24f5ac6b3b279fd63f0aa5b6691905973b801d893a7bd4e34d60f0000", 0xc8}, {&(0x7f0000000640)="9f0677436f4f921730519c4b4ad42c1694a545b68b70ba0bdacb0d6186578dc3f742343b298d033949a187e9d8b9ce472a6606e19a823644a161ee6257c1a873b177756344fddccce84bd793e2d68a", 0x4f}, {&(0x7f00000006c0)="26c1d12e772729f075a36c5aaf2659662d76fdc8fe4132e4eaf9d08bd415810d", 0x20}, {&(0x7f0000000700)="df", 0x1}, {&(0x7f0000000740)="99ac380986c666eeda41f7104ec3d08e8fc4764a6aa2e41e3ed71eb0517382f07167338171a80cc47bd1e3", 0x2b}], 0x8, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="c382b60687c75d900100000093f5fbe8b679b73e6b6c5df3bb3618f86c3e186a4d83b805e97324e01088f5c9b5f0d429d903fac6ac114eba5c2c8a1a779d80d761f611f3a95523be5b4f2a3bf0c35a3202f1009b3026763147269900000000", @ANYBLOB="0c0000000100000001000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r2, @ANYBLOB="0c0000000100000001000000200000000100000001000000", @ANYBLOB="14000a000100000001000000", @ANYRES32=r7, @ANYRES32=r7, @ANYRES32=r7, @ANYRES32=r2, @ANYBLOB="180000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES16=0x0], 0xe0, 0x1}}, {{&(0x7f0000000f00)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001180)=[{&(0x7f0000000f80)="cb7aa99b39b99b7b9e89eeee256a3bead7d7d2d3c5331b95a3d5960828d0eed83220a7fee96ef16310ad9a4194de59df397202e548a38082c378c3b314bc69d792596364bc6b5201a476a8ad4f89d9fc46fbe38c7b296cd3ea1b843cc45793e3972d2e75cf6f2ff4a0b51c689c6f319df799efe54827af43814bc0bc0f05e5f1689da8ededdc11b6c21538fee84f248f266c28539a52e8bd515437b8897c9f104bb3730936c11ad392", 0xa9}, {&(0x7f0000001040)="1f900f08a6d02312f6e96f45fe1cd919b4a7f7195e72ade1fc308b0680ec1ae6976c5a5751d317e483ad1185ddf0e2ebc1edfe8b774bdffae1d5805ec28b554f31fa2dd8b990c0ca66d2d4bda53f12926b6b7c72c343e94150482b3c614aad9c463dcdf54f31aa", 0x67}, {&(0x7f0000000840)="82ea7e7bfa68ac0be3a29e2f3ac95d7d13fd4836c6da0d653cdacfc2669e210bccbade03cb4adc9fafb5baa055479983623f6b7cded6a7e15918f1a843ec6549fa8010d775ddf886a0fcfd148f95feac528fd6b6ba882d868939b96729e60779a69b8700115837b48f33a2c41e99e400b60ff01a8d889a85e8d8d3396a74071cb6f2098ce024c9b323662cc37042d4000c72356adea06a915a47a194bcad18a6902e2acfa6ad661a851d4276", 0xac}, {&(0x7f00000012c0)="9ab1c27d329f03e14bc38b6a807390cd2a8a18ba0b1c0466fa8a8bc0ba1464475fa0a2e0f5c867d0d896ea93a5690ca8098e5631361df3af77f18f34a0a32d0225da87f37d5c5dbfa2e0e729c93a747e7508175faa95d5f3bff51532143c3c9464affe6b90df0e8186f83ebdf8d9f9daa7aecc85ace7d0cb5ca01943414e4b7c4668ab3a94b240395ace61807080eaded6d9192868a0bd84d88b25929b447ca500c49909ffc69a47337078d4d0e854c81941f5656cbee2581b5ebc5a60661354f8ddb7492142", 0xc6}, {&(0x7f00000083c0)="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", 0x1000}], 0x5, &(0x7f00000009c0)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3]}}], 0x50, 0x40000}}, {{&(0x7f0000001440)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000001980)=[{&(0x7f0000001200)="058d50267bceff9d2cdd86459421113a8bda7840a479bdf5b0035b36f70210c0187a8dc7c229794c11011e9f49d841b5d01e34c8485d4b146847cc08", 0x3c}, {&(0x7f00000014c0)="ea540cb99644ac3caa87bd3ba4bc292b748f7e0a067e3f54a1bbadbd808f02f2dc559eb8a949b6db2307b58347b693a85873be84a11b54c1ae5665d52d45696a49ff1ea26132537fc210dd77a5716722ced85d0970ed5084751e589159a62cb830eff9eb8b0a88ef065751c1daead42599e34b30b34a07f85635603254", 0x7d}, {&(0x7f0000001540)="816d4ea58b06f5443f1282c8f820a7c21cbb0d190eece1a7337a53ce263e05a1be395022bf47d55cf4a15253e94d783ce48d1ffa844ce2aa8a81a7682fa44c637f092dbb504b975946ccda228bb70bff82725204239852a9a05494b7dadf4578b777d788d5461c3832f8755419d7639b3dec96f5d637e696a041e7dc7a637b738a2925be78784e049b77ec9312d555a690ac9b7bdaa06590bd08781ea667aedacf4a20f75a41f65e71a536c7b1ac71f2cab9f108993b7b0a05b895e772bd5e70392a321de9", 0xc5}, {&(0x7f0000001640)="ab0cc68c193d6e172fb31677ee39110481c322fd1a6026953f9e7cda2832f071f9bc826119803174b1bfa0786b940df62fa0367abca0469e2b6b9669b1746ef5e7bf3437ea1c84deb5c51643acf582e3fbcca713ea077d9b9448dce5263137f7fd30c2970cc2ef4d94bf139cb1f64bd71063d9e8d73bcf918fe26cb93ec48a90b70e83300f72994d26331596a9ef319701c53a71f6260f9b22ed66786ff6f62e03fce60e5992e4b0fa4d3b71b18c", 0xae}, {&(0x7f0000001700)="51f047a5ace0d2be5a74969ea28896b8f0ab341200443a7182f42734bf73cf1d5994c402a94391ac1dfcc1f7a9a002bc9b8fbeb2c879e865aac2619bd3ffeb0e75016cbfb3bc320b4446b8cbc2b5c71c07d634314aff1341575ffa6547979417f3d9ce7336ba596b3c6dadbc9b75bb8c3efec6ba448b9a25bda883586786922da77a02f01c720ec950774ac2226f30fee5237e30", 0x94}, {&(0x7f00000017c0)="12e9f0388406361d4c4d94627d5487ceded4677775007445f3d9444c84522a4c73f1514cd277b6ac1655c21c3e387a203d8daa9ea739e6512f6125b3d3ac606974da13200345bde0c51741d8a14e371aba74d8a19c9f3471aa848e33919de92c5730077564509d29a957cb0d4c5e34a2e94b70fab886e80b32e6a4da951de9c560dd55f8e3814d12186058dad95e63c3439f3d4473cc19b99bf87b207c0ea8", 0x9f}, {&(0x7f0000001880)="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", 0xfe}], 0x7, 0x0, 0x0, 0x4000050}}, {{&(0x7f00000019c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001b00)=[{&(0x7f0000001a40)="3b7d9caee424bd49a083d5cc6fc725f40d559339d9bf78481145b438f552dce6300c318e4a98e6836a8ba0c88995e75a896902c8aff1ef23e8ce54c4106ca7528405a8a750d6c33ad46d39d02ddf6b941a810e7324d43a05497cc0c7fee13ba201d9293f6c211b9accd503e24de45a45d6f3efa208f12643913406dd92a338450c27937224e105561657e39aa7f80f7f767c5727c839a2e42dfa15e40d319cb85e75c443c8caca90", 0xa8}], 0x1, &(0x7f0000000c00)=ANY=[@ANYBLOB="340000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r6, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="240000000100000001000000", @ANYRES32, @ANYRES32=r2, @ANYRES32=r5, @ANYRES32, @ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="18007bb957a324fa91230000d734", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000100000001000000", @ANYRES32=r0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xe0}}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001cc0)="4698e4846d704b0f4da55b28e04d06285c5aa118b34d479ad4fa2d6dfaad7b6bc74af4efb59f22ce55a4f83ce80ab0958e89c58c5b3df3f7ace2e9c1e3684b81bd7d19c856fec32765a215901ff81b35726b7484850cbff5da0d5f210502a564969350f1341d33f193ee245d7128b9e85ad743a8af75d3786772604b4c9d9d13232e3710e54cee32b481e5da9c5580a3d6005350a967f21df4b7f98ee4c08b40f115c9f16445a14f922afe6a60be575fce48f9ce3c945f7b4d0f1b17c4d9442d0f7034bc60106840677dd7b713be886c2cffc786378a43041c", 0xd9}, {&(0x7f0000001dc0)="ed", 0x1}], 0x2, &(0x7f0000009740)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x1c, 0x1, 0x1, [r7, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8, 0x810}}], 0x5, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = syz_io_uring_setup(0x890, &(0x7f0000000140)={0x0, 0xaedd, 0x4, 0x2, 0x186}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r8, 0x47f6, 0x0, 0x4, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e28, 0xb, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}, 0x1c, &(0x7f0000000380)}, 0x580c2) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @private1, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x2, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84880) write$P9_RSETATTR(r11, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}, @TCA_CT_LABELS_MASK={0x0, 0x8, "b93318933ac691d6f85047862fc35fe5"}]}, {0xb5}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x10}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) getpid() 6.979558223s ago: executing program 7 (id=5244): socket(0x14, 0x80000, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000040000000400000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000300)=""/102392, 0x18ff8) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) fcntl$notify(r3, 0x402, 0x19) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xf, 0x81, 0x9, 0x100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c0100001a000100feffffff00010000e0000002000000020000000000000000fc0100000000000000000000000000010001071c4e2300050a0000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc020000000000000000000000000001fe000000000000009201000000000010a39b000000000000ffff0000000000001c250800000000000500000000000000feffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffefffffffc8300000000000080000000053500000200010020000000480003006465666c6174650000000000000000a1a9eea00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001d00fffeffff"], 0x13c}}, 0x844) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001800dd8d000000ba7e9698ed1fbfa80e000000000002"], 0x3c}}, 0x0) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r9, &(0x7f0000000000)={0x27}, 0x62) r10 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r10, &(0x7f0000000000)={0x27}, 0x74) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xf8, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x9, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xf8}}, 0x0) 4.859778414s ago: executing program 6 (id=5249): socket(0x2, 0x2, 0x1) syz_open_dev$video(0x0, 0x7efffffe, 0x101302) socket(0x2a, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x1d, 0x2, 0x6) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000080003851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x1e}, 0x94) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 3.649413049s ago: executing program 7 (id=5253): mbind(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x7797, 0x3) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) (async) unshare(0x2c060000) (async) ptrace$PTRACE_GETSIGMASK(0x420a, 0x0, 0x0, 0x0) unshare(0x24020400) syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000892e79105e042107259c010203010902"], 0x0) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x80085502, 0x0) (async) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') (async) ioprio_get$pid(0x2, 0xffffffffffffffff) (async) bpf$BPF_GET_MAP_INFO(0x3, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='wlan1\x00', 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) (async) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) sendto$inet(r3, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000040)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x1, 0x2c, 0x2, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0xc2, 0x3, 0x0, 0xffff, {[@fastopen={0x22, 0x2}]}}}}}}}, 0x0) 3.479685326s ago: executing program 7 (id=5254): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x4, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x25, 0x18, @val=@tracing={0x0, 0xf3}}, 0x1c) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r4, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000040)=0x1) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040100ff580c030322156754413a3bf2f49b9a888bbf3fb967e682e2047c9f5e1a991445"], 0x8) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, &(0x7f0000000140)) r5 = socket(0x40000000015, 0x5, 0x0) r6 = syz_io_uring_setup(0x892, &(0x7f0000000140)={0x0, 0xaef2, 0x0, 0x2, 0x2ee}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xffffbffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x2000, 0x0, {0x2}}) io_uring_enter(r6, 0x47f6, 0xfff5, 0x2, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x10, 0x0, 0x1, 0xfffffffe, 0x25dfdbfd, {{0x8}, {@void, @void}}}, 0x14}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 3.378745605s ago: executing program 6 (id=5255): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4, 0xffffffff}, @const={0x2000, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x13, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x54}, 0x20) 3.319853914s ago: executing program 6 (id=5256): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$ax25_int(r2, 0x101, 0x7, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000240)="ad000000000037eb00800000f1cfb65c", 0x10) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0xc040}, 0x8800) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000600)=""/152, 0x98}], 0x1) recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}) io_uring_enter(r3, 0x47f4, 0x0, 0x0, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000280), 0x6) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) syz_open_dev$dri(&(0x7f0000000200), 0x8, 0x64000) close_range(r6, 0xffffffffffffffff, 0x0) mount$9p_virtio(&(0x7f0000001a80), &(0x7f0000001ac0)='.\x00', &(0x7f0000001b00), 0x10000, &(0x7f0000000180)={'trans=virtio,', {[{@posixacl}]}}) 2.758889149s ago: executing program 2 (id=5257): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) poll(&(0x7f0000000100)=[{r0, 0x8030}], 0x1, 0x89) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0xa000000}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000040)="03", 0x1}], 0x1}}], 0x1, 0x34000811) 2.529753191s ago: executing program 2 (id=5258): openat$mice(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffffffa, 0x0, 0x0, 0x0, 0x239, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x4, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x960, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1010001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xd, 0x0, 0x0, 0x400000, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{0x0}], 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000340)={'sit0\x00', &(0x7f00000001c0)={@dev={0xfe, 0x80, '\x00', 0x2d}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x14, 0x2}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x3c, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000280), 0x2}, 0x0, 0x22121}) r3 = syz_io_uring_setup(0x487, &(0x7f0000000100)={0x0, 0x59c4, 0x800, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r6 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$PTRACE_GETSIGMASK(0x420a, r6, 0x8, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r3}) io_uring_enter(r3, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 2.152318388s ago: executing program 5 (id=5240): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x3c, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000280), 0x2}, 0x0, 0x22121}) r0 = syz_io_uring_setup(0x487, &(0x7f0000000100)={0x0, 0x59c4, 0x800, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r0}) io_uring_enter(r0, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 2.018455939s ago: executing program 5 (id=5259): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000000980)={0x0, 0x12c, @pic={0x0, 0x0, 0x0, 0x0, 0x1, 0x45, 0x3, 0x0, 0xfd, 0x0, 0x4}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, 0x0) lgetxattr(0x0, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x4, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x2, 0x4) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x20004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x2) ioctl$sock_ifreq(0xffffffffffffffff, 0x8920, &(0x7f0000000000)={'ip6gretap0\x00', @ifru_mtu=0x6}) ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000)) sendmsg$NFNL_MSG_ACCT_GET(r2, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6c0000004107030000000000000000000a000008340007800800024000000dd7080001400000000a0800024080000001080002400000e000080002400000000508000240000000000c00034000000000000000090c00024000000000000000080c0002400000000000000006"], 0x6c}, 0x1, 0x0, 0x0, 0x4004}, 0x40) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x2, 0x0) migrate_pages(0x0, 0x7, &(0x7f0000000280)=0x9, &(0x7f0000000300)=0x3) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_mode_change={{0x14, 0x6}, {0x3, 0x0, 0x2, 0x9c00}}}, 0x9) 1.856658966s ago: executing program 7 (id=5260): openat$uhid(0xffffff9c, &(0x7f0000000240), 0x802, 0x0) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@local}, {}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0) r0 = syz_io_uring_setup(0x231, &(0x7f00000002c0)={0x0, 0x3d86, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x18}) io_uring_enter(r0, 0x2b9c, 0x2, 0x0, 0x0, 0xffffffffffffff11) 1.77000383s ago: executing program 2 (id=5261): pipe(&(0x7f0000000080)) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) prctl$PR_SCHED_CORE(0x41555856, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x20240, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xf, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100}, 0x94) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(0xffffffffffffffff, &(0x7f0000000340)="0a000300010000", 0x7) recvmmsg(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x12122, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'veth1_to_batadv\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000004b40)=@newlink={0x60, 0x10, 0x503, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x440, 0x80}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0xff7f0000}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x60}, 0x1, 0x400000000000000}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0a00000004000000ff0f0000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) 1.698373414s ago: executing program 7 (id=5262): socket(0x2, 0x2, 0x1) syz_open_dev$video(0x0, 0x7efffffe, 0x101302) socket(0x2a, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x1d, 0x2, 0x6) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000080003851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x1e}, 0x94) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 780.035228ms ago: executing program 2 (id=5263): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x95ff, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x20}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 779.607568ms ago: executing program 5 (id=5264): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000340)=ANY=[@ANYRES16=r0, @ANYRES64=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="0700000014002efd108c430dae9639d7c0869f162a3df72b70238d9b99bfc2a49676282076a13be146098d9861346d470dfecbfc12144cf31190ee9fbdee09", @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x2, 0x101, 0x0, 0x0, 0x10000000, {0x3c, 0xd08, 0x0, 0x100, 0x0, 0x0, 0x7, 0x0, 0x122, 0x6000, 0x10000, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$TIOCGPTPEER(r2, 0x932, 0x200000000005) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) write$P9_RSYMLINK(r2, &(0x7f0000000000)={0x14, 0x11, 0x2, {0x4, 0x0, 0x8}}, 0x14) close_range(r3, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) 679.971255ms ago: executing program 2 (id=5265): socket(0x39, 0x3, 0x3a) rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x6}, 0x20, 0x1, 0x0) msgget$private(0x0, 0x3ac) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x38, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x4}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}]}, 0x38}}, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000000100)="1800000072006bcd9e3fe3dc", 0xc}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x48800) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, r2, 0x9c3fa077fa966179, 0x4, 0x23, {{0x7e}, {@void, @void}}}, 0x14}}, 0x0) 679.63381ms ago: executing program 5 (id=5266): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="02000000010001000000000002000300", @ANYRES32=0xee00, @ANYBLOB="04000400ee00000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="08000600", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="08000500", @ANYRES32=r2, @ANYBLOB="100006000000000020"], 0x54, 0x1) 609.605443ms ago: executing program 5 (id=5267): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 429.889ms ago: executing program 2 (id=5268): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x40) openat$uinput(0xffffff9c, &(0x7f0000000180), 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000003c0), 0x80002, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000380)={0xc}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc22, &(0x7f0000000180)=0x1400200bce) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') setpgid(r2, r2) setpgid(0x0, r2) sched_setaffinity(0x0, 0xfffffffffffffefe, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x1f00, 0x12) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40000, 0x0) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/dev_snmp6\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 0s ago: executing program 7 (id=5269): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x4800100b, r0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r0, r2, 0x0, 0x4) r3 = fsopen(&(0x7f00000002c0)='iso9660\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) openat$pfkey(0xffffff9c, &(0x7f0000000000), 0x200000, 0x0) kernel console output (not intermixed with test programs): 1 length: 5 > 1 [ 1032.255664][ T6032] usb 9-1: Using ep0 maxpacket: 32 [ 1032.896600][ T6032] usb 9-1: config 0 has an invalid descriptor of length 13, skipping remainder of the config [ 1033.002914][ T6032] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1033.015734][ T6032] usb 9-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1033.018922][ T6032] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1033.021481][ T6032] usb 9-1: Product: syz [ 1033.022909][ T6032] usb 9-1: Manufacturer: syz [ 1033.024656][ T6032] usb 9-1: SerialNumber: syz [ 1033.027452][ T6032] usb 9-1: config 0 descriptor?? [ 1033.108236][ T5981] usb usb52-port1: attempt power cycle [ 1033.267769][T23786] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 1033.269995][T23786] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1033.275203][T23786] vhci_hcd vhci_hcd.0: Device attached [ 1033.338602][T23786] netlink: 'syz.7.4597': attribute type 1 has an invalid length. [ 1033.364606][T23786] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1033.402952][T23786] bond2: (slave geneve3): making interface the new active one [ 1033.409190][T23786] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 1033.609066][T23787] vhci_hcd: connection closed [ 1033.610780][T15249] vhci_hcd vhci_hcd.7: stop threads [ 1033.614293][T15249] vhci_hcd vhci_hcd.7: release socket [ 1033.616299][T15249] vhci_hcd vhci_hcd.7: disconnect device [ 1033.683555][ T5981] usb usb52-port1: unable to enumerate USB device [ 1033.745293][ T29] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 1033.945221][ T6131] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 1034.727919][ T9] usb 9-1: USB disconnect, device number 11 [ 1034.746796][T23805] syzkaller0: entered promiscuous mode [ 1034.748891][T23805] syzkaller0: entered allmulticast mode [ 1034.884209][T23809] netlink: 'syz.4.4604': attribute type 1 has an invalid length. [ 1035.111563][T23812] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1035.113851][T23812] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1035.116792][T23812] vhci_hcd vhci_hcd.0: Device attached [ 1035.435330][ T6044] usb 46-1: SetAddress Request (26) to port 0 [ 1035.438106][ T6044] usb 46-1: new SuperSpeed USB device number 26 using vhci_hcd [ 1035.828822][T23813] vhci_hcd: connection reset by peer [ 1035.831560][T15249] vhci_hcd vhci_hcd.4: stop threads [ 1035.833664][T15249] vhci_hcd vhci_hcd.4: release socket [ 1035.835782][T15249] vhci_hcd vhci_hcd.4: disconnect device [ 1035.933217][T13595] Bluetooth: hci4: unexpected event 0x01 length: 5 > 1 [ 1036.373195][T23835] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4611'. [ 1036.675431][ T6131] usb 12-1: new high-speed USB device number 26 using dummy_hcd [ 1036.835346][ T6131] usb 12-1: Using ep0 maxpacket: 32 [ 1036.838862][ T6131] usb 12-1: config 0 has an invalid descriptor of length 13, skipping remainder of the config [ 1036.843707][ T6131] usb 12-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1036.850086][ T6131] usb 12-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1036.854304][ T6131] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1036.857207][ T6131] usb 12-1: Product: syz [ 1036.858644][ T6131] usb 12-1: Manufacturer: syz [ 1036.860239][ T6131] usb 12-1: SerialNumber: syz [ 1036.863071][ T6131] usb 12-1: config 0 descriptor?? [ 1037.463264][T23838] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 1037.465549][T23838] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1037.470381][T23838] vhci_hcd vhci_hcd.0: Device attached [ 1037.715493][ T6131] usb 49-1: new low-speed USB device number 16 using vhci_hcd [ 1037.767609][T23839] vhci_hcd: connection reset by peer [ 1037.769611][ T60] vhci_hcd vhci_hcd.6: stop threads [ 1037.771537][ T60] vhci_hcd vhci_hcd.6: release socket [ 1037.773648][ T60] vhci_hcd vhci_hcd.6: disconnect device [ 1037.961115][T23855] syzkaller0: entered promiscuous mode [ 1037.963038][T23855] syzkaller0: entered allmulticast mode [ 1037.988841][T23856] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4615'. [ 1037.995596][T23856] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4615'. [ 1039.295762][ T9] usb 12-1: USB disconnect, device number 26 [ 1039.462279][T13595] Bluetooth: hci4: unexpected event 0x01 length: 5 > 1 [ 1040.515477][ T6044] usb 46-1: device descriptor read/8, error -110 [ 1040.918415][ T6044] usb usb46-port1: attempt power cycle [ 1040.931660][T23888] tipc: Started in network mode [ 1040.933571][T23888] tipc: Node identity 5e9ff65609b8, cluster identity 4711 [ 1040.938782][T23888] tipc: Enabled bearer , priority 0 [ 1040.945784][T23888] syzkaller0: entered promiscuous mode [ 1040.947780][T23888] syzkaller0: entered allmulticast mode [ 1040.950184][T13595] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1040.969507][T23888] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1040.994973][T23888] tipc: Resetting bearer [ 1041.027102][T23887] tipc: Resetting bearer [ 1041.041752][T23887] tipc: Disabling bearer [ 1041.276534][T23901] netlink: 7 bytes leftover after parsing attributes in process `syz.2.4628'. [ 1041.320780][T23901] netlink: 7 bytes leftover after parsing attributes in process `syz.2.4628'. [ 1041.526191][ T6044] usb usb46-port1: unable to enumerate USB device [ 1041.678290][T23909] loop6: detected capacity change from 0 to 2640 [ 1041.680834][T23909] buffer_io_error: 6 callbacks suppressed [ 1041.680844][T23909] Buffer I/O error on dev loop6, logical block 0, async page read [ 1041.685622][T23909] Buffer I/O error on dev loop6, logical block 0, async page read [ 1041.688237][T23909] Buffer I/O error on dev loop6, logical block 0, async page read [ 1041.691012][T23909] Buffer I/O error on dev loop6, logical block 0, async page read [ 1041.693685][T23909] Buffer I/O error on dev loop6, logical block 0, async page read [ 1041.696433][T23909] Buffer I/O error on dev loop6, logical block 0, async page read [ 1041.699054][T23909] Buffer I/O error on dev loop6, logical block 0, async page read [ 1041.702656][T23909] Buffer I/O error on dev loop6, logical block 0, async page read [ 1041.705629][T23909] ldm_validate_partition_table(): Disk read failed. [ 1041.707891][T23909] Buffer I/O error on dev loop6, logical block 0, async page read [ 1041.710465][T23909] Buffer I/O error on dev loop6, logical block 0, async page read [ 1041.713045][T23909] Dev loop6: unable to read RDB block 0 [ 1041.715187][T23909] loop6: unable to read partition table [ 1041.717579][T23909] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1041.805526][T23909] loop6: detected capacity change from 2640 to 524288000 [ 1042.052601][ T6044] libceph: connect (1)[c::]:6789 error -101 [ 1042.065248][ T6044] libceph: mon0 (1)[c::]:6789 connect error [ 1042.102315][T23917] ceph: No mds server is up or the cluster is laggy [ 1042.825270][ T6131] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 1043.425685][T13595] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 1043.608226][ T40] audit: type=1326 audit(1766924097.845:113509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23947 comm="syz.7.4643" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fd6598 code=0x7ffc0000 [ 1043.625196][ T40] audit: type=1326 audit(1766924097.845:113510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23947 comm="syz.7.4643" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fd6598 code=0x7ffc0000 [ 1043.639883][ T40] audit: type=1326 audit(1766924097.845:113511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23947 comm="syz.7.4643" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fd6598 code=0x7ffc0000 [ 1043.662355][ T40] audit: type=1326 audit(1766924097.845:113512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23947 comm="syz.7.4643" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fd6598 code=0x7ffc0000 [ 1043.682730][ T40] audit: type=1326 audit(1766924097.845:113513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23947 comm="syz.7.4643" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fd6598 code=0x7ffc0000 [ 1043.741785][ T40] audit: type=1326 audit(1766924097.845:113514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23947 comm="syz.7.4643" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fd6598 code=0x7ffc0000 [ 1043.775374][ T40] audit: type=1326 audit(1766924097.845:113515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23947 comm="syz.7.4643" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fd6598 code=0x7ffc0000 [ 1043.783504][ T40] audit: type=1326 audit(1766924097.845:113516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23947 comm="syz.7.4643" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fd6598 code=0x7ffc0000 [ 1043.807248][ T40] audit: type=1326 audit(1766924097.845:113517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23947 comm="syz.7.4643" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fd6598 code=0x7ffc0000 [ 1043.814481][ T40] audit: type=1326 audit(1766924097.845:113518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23947 comm="syz.7.4643" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fd6598 code=0x7ffc0000 [ 1044.525242][T15703] libceph: connect (1)[c::]:6789 error -101 [ 1044.527651][T15703] libceph: mon0 (1)[c::]:6789 connect error [ 1044.583234][T23970] ceph: No mds server is up or the cluster is laggy [ 1044.715737][T23974] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1045.161544][T23982] overlayfs: failed to resolve './file0': -2 [ 1045.575533][T23991] syzkaller0: entered promiscuous mode [ 1045.577601][T23991] syzkaller0: entered allmulticast mode [ 1046.591842][T24001] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 1046.594047][T24001] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1046.597402][T24001] vhci_hcd vhci_hcd.0: Device attached [ 1046.599066][T24000] mac80211_hwsim hwsim29 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1046.885293][T15703] usb 52-1: SetAddress Request (76) to port 0 [ 1046.888248][T15703] usb 52-1: new SuperSpeed USB device number 76 using vhci_hcd [ 1047.055905][T24002] vhci_hcd: connection reset by peer [ 1047.071034][T15249] vhci_hcd vhci_hcd.7: stop threads [ 1047.072848][T15249] vhci_hcd vhci_hcd.7: release socket [ 1047.074740][T15249] vhci_hcd vhci_hcd.7: disconnect device [ 1047.189770][T24020] netlink: 'syz.6.4657': attribute type 2 has an invalid length. [ 1047.604097][T24028] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4664'. [ 1047.604399][T24027] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4665'. [ 1047.607798][T24028] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4664'. [ 1047.612041][T24027] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4665'. [ 1047.613525][T24028] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4664'. [ 1047.659542][T24027] hsr_slave_1 (unregistering): left promiscuous mode [ 1048.997091][T24063] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 1048.999232][T24063] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1049.003028][T24063] vhci_hcd vhci_hcd.0: Device attached [ 1049.158747][T24067] netlink: 'syz.4.4675': attribute type 27 has an invalid length. [ 1049.162555][T24067] veth1_vlan: left allmulticast mode [ 1049.165359][T24067] macvtap1: left promiscuous mode [ 1049.175568][T24067] macvtap1: left allmulticast mode [ 1049.295195][ T9] usb 50-1: SetAddress Request (115) to port 0 [ 1049.297291][ T9] usb 50-1: new SuperSpeed USB device number 115 using vhci_hcd [ 1049.417380][T24064] vhci_hcd: connection reset by peer [ 1049.419423][T12813] vhci_hcd vhci_hcd.6: stop threads [ 1049.421139][T12813] vhci_hcd vhci_hcd.6: release socket [ 1049.423066][T12813] vhci_hcd vhci_hcd.6: disconnect device [ 1049.784227][T24073] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 1049.786685][T24073] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1049.790209][T24073] vhci_hcd vhci_hcd.0: Device attached [ 1050.074112][T24082] xt_socket: unknown flags 0xd0 [ 1050.078270][T24082] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1050.157164][T24088] syzkaller0: entered promiscuous mode [ 1050.159925][T24088] syzkaller0: entered allmulticast mode [ 1050.515430][ T5109] wlan1: Trigger new scan to find an IBSS to join [ 1050.710968][T24074] vhci_hcd: connection closed [ 1050.711762][ T1068] vhci_hcd vhci_hcd.7: stop threads [ 1050.720590][ T1068] vhci_hcd vhci_hcd.7: release socket [ 1050.725851][ T1068] vhci_hcd vhci_hcd.7: disconnect device [ 1051.556756][T24093] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 1051.559175][T24093] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1051.562056][T24093] vhci_hcd vhci_hcd.0: Device attached [ 1051.837972][T24106] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4683'. [ 1051.841077][T24106] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4683'. [ 1051.925861][ T6131] usb 42-1: SetAddress Request (118) to port 0 [ 1051.928297][ T6131] usb 42-1: new SuperSpeed USB device number 118 using vhci_hcd [ 1051.977249][T15703] usb 52-1: device descriptor read/8, error -110 [ 1052.166392][T24102] vhci_hcd: connection reset by peer [ 1052.169497][ T5109] vhci_hcd vhci_hcd.2: stop threads [ 1052.171808][ T5109] vhci_hcd vhci_hcd.2: release socket [ 1052.174507][ T5109] vhci_hcd vhci_hcd.2: disconnect device [ 1052.521441][T15703] usb usb52-port1: attempt power cycle [ 1053.117050][T15703] usb usb52-port1: unable to enumerate USB device [ 1053.475254][ T5109] wlan1: Trigger new scan to find an IBSS to join [ 1054.094710][T24152] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4692'. [ 1054.157472][ T40] kauditd_printk_skb: 338 callbacks suppressed [ 1054.157486][ T40] audit: type=1804 audit(1766924108.395:113857): pid=24152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4692" name="/newroot/447/file0" dev="fuse" ino=1 res=1 errno=0 [ 1054.166143][T24152] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4692'. [ 1054.170804][T24152] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4692'. [ 1054.355635][ T9] usb 50-1: device descriptor read/8, error -110 [ 1054.405896][ T96] wlan1: Creating new IBSS network, BSSID 92:2c:2c:cd:9b:90 [ 1054.516713][T24168] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1054.520073][T24168] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1054.524050][T24168] vhci_hcd vhci_hcd.0: Device attached [ 1054.603976][T24167] overlayfs: statfs failed on './file0' [ 1054.765761][ T9] usb usb50-port1: attempt power cycle [ 1054.785253][ T6044] usb 46-1: SetAddress Request (30) to port 0 [ 1054.788137][ T6044] usb 46-1: new SuperSpeed USB device number 30 using vhci_hcd [ 1055.050337][T24171] vhci_hcd: connection reset by peer [ 1055.052750][ T96] vhci_hcd vhci_hcd.4: stop threads [ 1055.055452][ T96] vhci_hcd vhci_hcd.4: release socket [ 1055.057918][ T96] vhci_hcd vhci_hcd.4: disconnect device [ 1055.395960][ T9] usb usb50-port1: unable to enumerate USB device [ 1055.764669][T24205] FAULT_INJECTION: forcing a failure. [ 1055.764669][T24205] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1055.772268][T24205] CPU: 0 UID: 0 PID: 24205 Comm: syz.4.4708 Tainted: G L syzkaller #0 PREEMPT(full) [ 1055.772289][T24205] Tainted: [L]=SOFTLOCKUP [ 1055.772293][T24205] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1055.772301][T24205] Call Trace: [ 1055.772306][T24205] [ 1055.772310][T24205] dump_stack_lvl+0x16c/0x1f0 [ 1055.772340][T24205] should_fail_ex+0x512/0x640 [ 1055.772357][T24205] _copy_from_user+0x2e/0xd0 [ 1055.772370][T24205] get_compat_msghdr+0xa7/0x170 [ 1055.772386][T24205] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1055.772406][T24205] ___sys_sendmsg+0x1ae/0x1d0 [ 1055.772423][T24205] ? __pfx____sys_sendmsg+0x10/0x10 [ 1055.772444][T24205] ? find_held_lock+0x2b/0x80 [ 1055.772469][T24205] __sys_sendmsg+0x16d/0x220 [ 1055.772485][T24205] ? __pfx___sys_sendmsg+0x10/0x10 [ 1055.772513][T24205] ? do_user_addr_fault+0x843/0x1370 [ 1055.772539][T24205] __do_fast_syscall_32+0xe8/0x680 [ 1055.772560][T24205] do_fast_syscall_32+0x32/0x80 [ 1055.772571][T24205] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1055.772587][T24205] RIP: 0023:0xf70cd579 [ 1055.772601][T24205] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1055.772619][T24205] RSP: 002b:00000000f54bd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1055.772636][T24205] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000700 [ 1055.772643][T24205] RDX: 0000000024040084 RSI: 0000000000000000 RDI: 0000000000000000 [ 1055.772650][T24205] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1055.772657][T24205] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1055.772664][T24205] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1055.772679][T24205] [ 1056.535248][T24221] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 1056.538173][T24221] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1056.545323][T24221] vhci_hcd vhci_hcd.0: Device attached [ 1056.995223][ T6131] usb 42-1: device descriptor read/8, error -110 [ 1057.055224][T24222] vhci_hcd: connection closed [ 1057.055749][ T96] vhci_hcd vhci_hcd.4: stop threads [ 1057.060139][ T96] vhci_hcd vhci_hcd.4: release socket [ 1057.062637][ T96] vhci_hcd vhci_hcd.4: disconnect device [ 1057.387423][ T6131] usb usb42-port1: attempt power cycle [ 1057.417894][T24236] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 1057.420674][T24236] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1057.430483][T24236] vhci_hcd vhci_hcd.0: Device attached [ 1057.606931][T24237] vhci_hcd: connection closed [ 1057.615416][ T96] vhci_hcd vhci_hcd.7: stop threads [ 1057.619325][ T96] vhci_hcd vhci_hcd.7: release socket [ 1057.637381][ T96] vhci_hcd vhci_hcd.7: disconnect device [ 1058.011281][ T6131] usb usb42-port1: unable to enumerate USB device [ 1058.656876][T24250] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 1058.659145][T24250] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1058.663280][T24252] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4716'. [ 1058.676490][T24250] vhci_hcd vhci_hcd.0: Device attached [ 1058.681110][T24252] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4716'. [ 1059.096339][ T9] usb 51-1: new low-speed USB device number 14 using vhci_hcd [ 1059.141514][T24256] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4720'. [ 1059.144486][T24256] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4720'. [ 1059.148325][T24256] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4720'. [ 1059.151256][T24256] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4720'. [ 1059.154123][T24256] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4720'. [ 1059.240013][T24251] vhci_hcd: connection reset by peer [ 1059.242768][ T96] vhci_hcd vhci_hcd.7: stop threads [ 1059.245365][ T96] vhci_hcd vhci_hcd.7: release socket [ 1059.247889][ T96] vhci_hcd vhci_hcd.7: disconnect device [ 1059.856715][T13595] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 1059.878125][ T6044] usb 46-1: device descriptor read/8, error -110 [ 1060.296024][ T6044] usb usb46-port1: attempt power cycle [ 1060.499652][T24275] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 1060.501874][T24275] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1060.505402][T24275] vhci_hcd vhci_hcd.0: Device attached [ 1060.855734][ T6044] usb usb46-port1: unable to enumerate USB device [ 1060.903307][T24284] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 1060.905664][T24284] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1060.936784][T24284] vhci_hcd vhci_hcd.0: Device attached [ 1060.995220][ T8588] usb 45-1: new low-speed USB device number 6 using vhci_hcd [ 1061.785247][ T6131] usb 50-1: SetAddress Request (119) to port 0 [ 1061.788888][ T6131] usb 50-1: new SuperSpeed USB device number 119 using vhci_hcd [ 1061.822870][T24286] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 1061.827712][ T60] vhci_hcd vhci_hcd.6: stop threads [ 1061.830134][ T60] vhci_hcd vhci_hcd.6: release socket [ 1061.832768][ T60] vhci_hcd vhci_hcd.6: disconnect device [ 1062.005206][T24276] vhci_hcd: connection reset by peer [ 1062.177473][ T1148] vhci_hcd vhci_hcd.4: stop threads [ 1062.180289][ T1148] vhci_hcd vhci_hcd.4: release socket [ 1062.182574][ T1148] vhci_hcd vhci_hcd.4: disconnect device [ 1062.495881][T24297] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 1062.498640][T24297] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1062.502659][T24297] vhci_hcd vhci_hcd.0: Device attached [ 1062.875284][T24304] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 1062.877565][T24304] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1062.880336][T24304] vhci_hcd vhci_hcd.0: Device attached [ 1062.887370][T24309] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1062.889703][T24309] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1062.892537][T24309] vhci_hcd vhci_hcd.0: Device attached [ 1063.230152][T24299] vhci_hcd: connection closed [ 1063.230458][ T13] vhci_hcd vhci_hcd.7: stop threads [ 1063.231487][T24305] netlink: 9 bytes leftover after parsing attributes in process `syz.2.4732'. [ 1063.235895][ T13] vhci_hcd vhci_hcd.7: release socket [ 1063.239719][ T13] vhci_hcd vhci_hcd.7: disconnect device [ 1063.385180][T24306] vhci_hcd: connection closed [ 1063.385400][ T60] vhci_hcd vhci_hcd.6: stop threads [ 1063.389137][ T60] vhci_hcd vhci_hcd.6: release socket [ 1063.391365][ T60] vhci_hcd vhci_hcd.6: disconnect device [ 1063.416391][T24310] vhci_hcd: connection closed [ 1063.416878][ T60] vhci_hcd vhci_hcd.2: stop threads [ 1063.420317][ T60] vhci_hcd vhci_hcd.2: release socket [ 1063.422258][ T60] vhci_hcd vhci_hcd.2: disconnect device [ 1064.225356][ T9] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 1064.306053][ T40] audit: type=1326 audit(1766924118.535:113858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24327 comm="syz.2.4738" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd579 code=0x7ffc0000 [ 1064.315356][ T40] audit: type=1326 audit(1766924118.535:113859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24327 comm="syz.2.4738" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd579 code=0x7ffc0000 [ 1064.322525][ T40] audit: type=1326 audit(1766924118.535:113860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24327 comm="syz.2.4738" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf6ffd579 code=0x7ffc0000 [ 1064.563137][ T40] audit: type=1326 audit(1766924118.795:113861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24327 comm="syz.2.4738" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd579 code=0x7ffc0000 [ 1064.572835][ T40] audit: type=1326 audit(1766924118.795:113862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24327 comm="syz.2.4738" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd579 code=0x7ffc0000 [ 1065.016783][T24346] bridge0: port 1(erspan0) entered blocking state [ 1065.019298][T24346] bridge0: port 1(erspan0) entered disabled state [ 1065.021933][T24346] erspan0: entered allmulticast mode [ 1065.027650][T24346] erspan0: entered promiscuous mode [ 1065.030533][T24346] bridge0: port 1(erspan0) entered blocking state [ 1065.032763][T24346] bridge0: port 1(erspan0) entered forwarding state [ 1065.042363][T24348] netlink: 'syz.2.4741': attribute type 1 has an invalid length. [ 1065.158039][T24352] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1065.161744][T24352] bond3: (slave vxcan1): Error -95 calling set_mac_address [ 1065.178319][T24348] bond3: (slave gretap2): making interface the new active one [ 1065.181857][T24348] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 1065.190236][T24348] macvlan2: entered promiscuous mode [ 1065.192045][T24348] macvlan2: entered allmulticast mode [ 1065.194164][T24348] bond3: entered promiscuous mode [ 1065.195980][T24348] gretap2: entered promiscuous mode [ 1065.198303][T24348] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1065.204119][T24348] bond3: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap2 [ 1065.209053][T24348] bond3: left promiscuous mode [ 1065.210682][T24348] gretap2: left promiscuous mode [ 1065.494405][T24348] syz.2.4741 (24348) used greatest stack depth: 17784 bytes left [ 1065.963515][T24358] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 1065.965788][T24358] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1065.988115][T24358] vhci_hcd vhci_hcd.0: Device attached [ 1066.115254][ T8588] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 1066.235148][ T5981] usb 41-1: new low-speed USB device number 15 using vhci_hcd [ 1066.387251][T24359] vhci_hcd: connection reset by peer [ 1066.390877][ T5109] vhci_hcd vhci_hcd.2: stop threads [ 1066.393288][ T5109] vhci_hcd vhci_hcd.2: release socket [ 1066.415219][ T5109] vhci_hcd vhci_hcd.2: disconnect device [ 1066.685458][T24374] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 1066.687616][T24374] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1066.690386][T24374] vhci_hcd vhci_hcd.0: Device attached [ 1066.845387][ T6131] usb 50-1: device descriptor read/8, error -110 [ 1066.947730][T24379] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 1066.949962][T24379] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1066.952594][T24379] vhci_hcd vhci_hcd.0: Device attached [ 1067.186198][ T6044] usb 51-1: new low-speed USB device number 15 using vhci_hcd [ 1067.191088][T24387] syzkaller0: entered promiscuous mode [ 1067.192927][T24387] syzkaller0: entered allmulticast mode [ 1067.305191][T10123] usb 49-1: new low-speed USB device number 17 using vhci_hcd [ 1067.345151][T24375] vhci_hcd: connection closed [ 1067.345490][ T1148] vhci_hcd vhci_hcd.6: stop threads [ 1067.348964][ T1148] vhci_hcd vhci_hcd.6: release socket [ 1067.350970][ T1148] vhci_hcd vhci_hcd.6: disconnect device [ 1067.356187][T10123] usb 49-1: enqueue for inactive port 0 [ 1067.418802][T10123] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 1067.621028][T24380] vhci_hcd: connection reset by peer [ 1067.623161][ T13] vhci_hcd vhci_hcd.7: stop threads [ 1067.625025][ T13] vhci_hcd vhci_hcd.7: release socket [ 1067.627018][ T13] vhci_hcd vhci_hcd.7: disconnect device [ 1068.249408][T24401] netlink: 360 bytes leftover after parsing attributes in process `syz.6.4754'. [ 1068.432093][ T6131] usb usb50-port1: attempt power cycle [ 1068.939643][T24418] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4758'. [ 1068.957092][T24418] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4758'. [ 1069.005774][ T6131] usb usb50-port1: unable to enumerate USB device [ 1069.023768][T24421] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4759'. [ 1070.016387][T24425] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 1070.019307][T24425] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1070.022895][T24425] vhci_hcd vhci_hcd.0: Device attached [ 1070.038763][T24429] vhci_hcd: connection closed [ 1070.045511][ T60] vhci_hcd vhci_hcd.2: stop threads [ 1070.049390][ T60] vhci_hcd vhci_hcd.2: release socket [ 1070.051196][ T60] vhci_hcd vhci_hcd.2: disconnect device [ 1070.755868][T24441] syzkaller0: entered promiscuous mode [ 1070.757774][T24441] syzkaller0: entered allmulticast mode [ 1071.389782][ T5981] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 1072.267714][ T6044] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 1072.291904][T24463] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 1072.294520][T24463] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1072.297683][T24463] vhci_hcd vhci_hcd.0: Device attached [ 1072.309590][T24465] vhci_hcd: connection closed [ 1072.314283][T18557] vhci_hcd vhci_hcd.4: stop threads [ 1072.318395][T18557] vhci_hcd vhci_hcd.4: release socket [ 1072.320339][T18557] vhci_hcd vhci_hcd.4: disconnect device [ 1073.018182][T24483] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4777'. [ 1073.172958][T24489] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4780'. [ 1073.194373][T24490] 9pnet_virtio: no channels available for device syz [ 1073.905367][T24497] syzkaller0: entered promiscuous mode [ 1073.907257][T24497] syzkaller0: entered allmulticast mode [ 1075.064777][T24507] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4785'. [ 1075.116591][T24508] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4785'. [ 1075.555824][T24507] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1075.559769][T24508] bond3: entered promiscuous mode [ 1075.561559][T24508] bond3: entered allmulticast mode [ 1075.570643][T24509] dummy0: entered promiscuous mode [ 1075.572589][T24509] dummy0: entered allmulticast mode [ 1075.575277][T24509] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 1075.776950][T24521] syzkaller1: entered promiscuous mode [ 1075.778786][T24521] syzkaller1: entered allmulticast mode [ 1075.781850][T24521] FAULT_INJECTION: forcing a failure. [ 1075.781850][T24521] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1075.786193][T24521] CPU: 2 UID: 0 PID: 24521 Comm: syz.7.4788 Tainted: G L syzkaller #0 PREEMPT(full) [ 1075.786211][T24521] Tainted: [L]=SOFTLOCKUP [ 1075.786215][T24521] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1075.786222][T24521] Call Trace: [ 1075.786227][T24521] [ 1075.786231][T24521] dump_stack_lvl+0x16c/0x1f0 [ 1075.786257][T24521] should_fail_ex+0x512/0x640 [ 1075.786272][T24521] _copy_from_iter+0x2a4/0x16c0 [ 1075.786287][T24521] ? _copy_from_iter+0x161/0x16c0 [ 1075.786299][T24521] ? __pfx__copy_from_iter+0x10/0x10 [ 1075.786313][T24521] ? __pfx__copy_from_iter+0x10/0x10 [ 1075.786325][T24521] ? _copy_from_iter+0x161/0x16c0 [ 1075.786339][T24521] copy_page_from_iter+0xde/0x180 [ 1075.786353][T24521] skb_copy_datagram_from_iter+0x2a0/0x740 [ 1075.786371][T24521] tun_get_user+0x1850/0x3cc0 [ 1075.786390][T24521] ? __pfx_tun_get_user+0x10/0x10 [ 1075.786403][T24521] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1075.786420][T24521] ? find_held_lock+0x2b/0x80 [ 1075.786435][T24521] ? tun_get+0x191/0x370 [ 1075.786448][T24521] tun_chr_write_iter+0xdc/0x210 [ 1075.786461][T24521] vfs_write+0x7d3/0x11d0 [ 1075.786478][T24521] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1075.786491][T24521] ? __pfx_vfs_write+0x10/0x10 [ 1075.786505][T24521] ? find_held_lock+0x2b/0x80 [ 1075.786527][T24521] ksys_write+0x12a/0x250 [ 1075.786542][T24521] ? __pfx_ksys_write+0x10/0x10 [ 1075.786558][T24521] ? do_user_addr_fault+0x843/0x1370 [ 1075.786574][T24521] __do_fast_syscall_32+0xe8/0x680 [ 1075.786593][T24521] do_fast_syscall_32+0x32/0x80 [ 1075.786603][T24521] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1075.786621][T24521] RIP: 0023:0xf7fd6579 [ 1075.786630][T24521] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1075.786641][T24521] RSP: 002b:00000000f54c655c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 1075.786652][T24521] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000240 [ 1075.786659][T24521] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000000 [ 1075.786665][T24521] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1075.786672][T24521] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1075.786678][T24521] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1075.786695][T24521] [ 1075.937212][T24512] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 1075.940011][T24512] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1075.943361][T24512] vhci_hcd vhci_hcd.0: Device attached [ 1075.960925][T24525] vhci_hcd: connection closed [ 1075.983053][T15620] vhci_hcd vhci_hcd.2: stop threads [ 1075.988538][T15620] vhci_hcd vhci_hcd.2: release socket [ 1075.991139][T15620] vhci_hcd vhci_hcd.2: disconnect device [ 1076.058629][T24523] ubi: mtd0 is already attached to ubi31 [ 1076.103456][T24524] macvtap1: entered promiscuous mode [ 1076.105517][T24524] macvtap1: entered allmulticast mode [ 1076.107868][T24524] veth1_vlan: entered allmulticast mode [ 1077.184340][T24543] syzkaller0: entered promiscuous mode [ 1077.187237][T24543] syzkaller0: entered allmulticast mode [ 1077.206088][T24542] 9pnet_virtio: no channels available for device syz [ 1077.613027][T24545] syzkaller0: entered promiscuous mode [ 1077.614983][T24545] syzkaller0: entered allmulticast mode [ 1079.471041][T24552] netlink: 'syz.7.4800': attribute type 1 has an invalid length. [ 1080.009539][T24560] hub 1-0:1.0: USB hub found [ 1080.011470][T24560] hub 1-0:1.0: 2 ports detected [ 1080.320418][T24562] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1080.322705][T24562] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1080.326096][T24562] vhci_hcd vhci_hcd.0: Device attached [ 1080.351735][T24566] vhci_hcd: connection closed [ 1080.352237][T13482] vhci_hcd vhci_hcd.4: stop threads [ 1080.355910][T13482] vhci_hcd vhci_hcd.4: release socket [ 1080.357757][T13482] vhci_hcd vhci_hcd.4: disconnect device [ 1080.667629][T24579] syzkaller1: entered promiscuous mode [ 1080.669560][T24579] syzkaller1: entered allmulticast mode [ 1080.954417][T24588] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4811'. [ 1081.145319][T24592] block nbd0: server does not support multiple connections per device. [ 1081.148429][T24592] block nbd0: shutting down sockets [ 1081.175427][T24593] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 1081.177763][T24593] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1081.181006][T24593] vhci_hcd vhci_hcd.0: Device attached [ 1081.465248][T12232] usb 46-1: SetAddress Request (34) to port 0 [ 1081.467436][T12232] usb 46-1: new SuperSpeed USB device number 34 using vhci_hcd [ 1081.548182][T24595] vhci_hcd: connection reset by peer [ 1081.550257][ T1148] vhci_hcd vhci_hcd.4: stop threads [ 1081.552415][ T1148] vhci_hcd vhci_hcd.4: release socket [ 1081.556240][ T1148] vhci_hcd vhci_hcd.4: disconnect device [ 1081.608679][T13595] Bluetooth: hci1: unexpected event 0x01 length: 5 > 1 [ 1081.699425][T24610] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4818'. [ 1083.127549][T24614] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 1083.130008][T24614] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1083.132659][T24614] vhci_hcd vhci_hcd.0: Device attached [ 1083.150437][T24616] vhci_hcd: connection closed [ 1083.154325][T15620] vhci_hcd vhci_hcd.7: stop threads [ 1083.195176][T15620] vhci_hcd vhci_hcd.7: release socket [ 1083.204894][T15620] vhci_hcd vhci_hcd.7: disconnect device [ 1083.406268][T24623] netlink: 244 bytes leftover after parsing attributes in process `syz.4.4821'. [ 1083.422073][T24625] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 1083.424261][T24625] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1083.427547][T24625] vhci_hcd vhci_hcd.0: Device attached [ 1083.491093][T13595] Bluetooth: hci4: Malformed Event: 0x13 [ 1083.695769][ T5981] usb 50-1: SetAddress Request (123) to port 0 [ 1083.697982][ T5981] usb 50-1: new SuperSpeed USB device number 123 using vhci_hcd [ 1083.891313][T13595] Bluetooth: hci1: Malformed Event: 0x13 [ 1083.891636][T24635] FAULT_INJECTION: forcing a failure. [ 1083.891636][T24635] name failslab, interval 1, probability 0, space 0, times 0 [ 1083.897524][T24635] CPU: 2 UID: 0 PID: 24635 Comm: syz.7.4823 Tainted: G L syzkaller #0 PREEMPT(full) [ 1083.897543][T24635] Tainted: [L]=SOFTLOCKUP [ 1083.897547][T24635] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1083.897554][T24635] Call Trace: [ 1083.897560][T24635] [ 1083.897566][T24635] dump_stack_lvl+0x16c/0x1f0 [ 1083.897587][T24635] should_fail_ex+0x512/0x640 [ 1083.897600][T24635] ? kmem_cache_alloc_noprof+0x62/0x770 [ 1083.897615][T24635] should_failslab+0xc2/0x120 [ 1083.897633][T24635] kmem_cache_alloc_noprof+0x83/0x770 [ 1083.897647][T24635] ? getname_flags.part.0+0x4c/0x550 [ 1083.897662][T24635] ? getname_flags.part.0+0x4c/0x550 [ 1083.897673][T24635] getname_flags.part.0+0x4c/0x550 [ 1083.897687][T24635] getname_flags+0x93/0xf0 [ 1083.897702][T24635] do_sys_openat2+0xb9/0x290 [ 1083.897715][T24635] ? __pfx_do_sys_openat2+0x10/0x10 [ 1083.897729][T24635] ? __pfx___seccomp_filter+0x10/0x10 [ 1083.897745][T24635] __ia32_compat_sys_openat+0x16d/0x210 [ 1083.897758][T24635] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 1083.897772][T24635] ? ksys_write+0x1ac/0x250 [ 1083.897788][T24635] ? __secure_computing+0x21c/0x320 [ 1083.897803][T24635] __do_fast_syscall_32+0xe8/0x680 [ 1083.897823][T24635] do_fast_syscall_32+0x32/0x80 [ 1083.897833][T24635] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1083.897847][T24635] RIP: 0023:0xf7fd6579 [ 1083.897857][T24635] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1083.897868][T24635] RSP: 002b:00000000f54a555c EFLAGS: 00000296 ORIG_RAX: 0000000000000127 [ 1083.897879][T24635] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000000 [ 1083.897886][T24635] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 1083.897893][T24635] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1083.897899][T24635] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1083.897919][T24635] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1083.897933][T24635] [ 1083.996225][T24627] vhci_hcd: connection reset by peer [ 1083.998286][T16025] vhci_hcd vhci_hcd.6: stop threads [ 1084.000057][T16025] vhci_hcd vhci_hcd.6: release socket [ 1084.001920][T16025] vhci_hcd vhci_hcd.6: disconnect device [ 1084.277780][ T40] audit: type=1326 audit(1766924138.505:113863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24624 comm="syz.2.4822" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd579 code=0x7fc00000 [ 1084.287391][ T40] audit: type=1326 audit(1766924138.505:113864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24624 comm="syz.2.4822" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf6ffd579 code=0x7fc00000 [ 1084.295416][ T40] audit: type=1326 audit(1766924138.505:113865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24624 comm="syz.2.4822" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd579 code=0x7fc00000 [ 1084.304075][ T40] audit: type=1326 audit(1766924138.505:113866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24624 comm="syz.2.4822" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd579 code=0x7fc00000 [ 1084.314028][ T40] audit: type=1326 audit(1766924138.505:113867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24624 comm="syz.2.4822" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd579 code=0x7fc00000 [ 1084.323200][ T40] audit: type=1326 audit(1766924138.505:113868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24624 comm="syz.2.4822" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd579 code=0x7fc00000 [ 1084.332257][ T40] audit: type=1326 audit(1766924138.505:113869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24624 comm="syz.2.4822" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd579 code=0x7fc00000 [ 1084.341386][ T40] audit: type=1326 audit(1766924138.505:113870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24624 comm="syz.2.4822" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd579 code=0x7fc00000 [ 1084.350533][ T40] audit: type=1326 audit(1766924138.505:113871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24624 comm="syz.2.4822" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd579 code=0x7fc00000 [ 1084.359731][ T40] audit: type=1326 audit(1766924138.505:113872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24624 comm="syz.2.4822" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd579 code=0x7fc00000 [ 1084.425648][ T6032] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1084.431062][T13595] Bluetooth: hci4: Malformed Event: 0x13 [ 1084.576977][ T6032] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1084.582230][ T6032] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1084.585453][ T6032] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1084.588184][ T6032] usb 9-1: Product: syz [ 1084.589722][ T6032] usb 9-1: Manufacturer: syz [ 1084.591376][ T6032] usb 9-1: SerialNumber: syz [ 1085.609970][T24653] /dev/sr0: Can't open blockdev [ 1086.241752][T24663] FAULT_INJECTION: forcing a failure. [ 1086.241752][T24663] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1086.246107][T24663] CPU: 3 UID: 0 PID: 24663 Comm: syz.6.4829 Tainted: G L syzkaller #0 PREEMPT(full) [ 1086.246127][T24663] Tainted: [L]=SOFTLOCKUP [ 1086.246131][T24663] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1086.246138][T24663] Call Trace: [ 1086.246142][T24663] [ 1086.246147][T24663] dump_stack_lvl+0x16c/0x1f0 [ 1086.246168][T24663] should_fail_ex+0x512/0x640 [ 1086.246183][T24663] _copy_from_user+0x2e/0xd0 [ 1086.246197][T24663] memdup_user+0x6b/0xe0 [ 1086.246211][T24663] strndup_user+0x78/0xe0 [ 1086.246225][T24663] __ia32_sys_mount+0x136/0x310 [ 1086.246237][T24663] ? __pfx___ia32_sys_mount+0x10/0x10 [ 1086.246249][T24663] ? do_user_addr_fault+0x843/0x1370 [ 1086.246265][T24663] __do_fast_syscall_32+0xe8/0x680 [ 1086.246284][T24663] do_fast_syscall_32+0x32/0x80 [ 1086.246295][T24663] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1086.246309][T24663] RIP: 0023:0xf7f87579 [ 1086.246318][T24663] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1086.246329][T24663] RSP: 002b:00000000f547655c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 1086.246340][T24663] RAX: ffffffffffffffda RBX: 0000000080001a80 RCX: 0000000080001ac0 [ 1086.246347][T24663] RDX: 0000000080001b00 RSI: 0000000000010000 RDI: 0000000080000180 [ 1086.246354][T24663] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1086.246360][T24663] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1086.246366][T24663] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1086.246379][T24663] [ 1086.419454][T24667] overlayfs: failed to resolve './file0': -2 [ 1086.478079][T24668] input: syz0 as /devices/virtual/input/input137 [ 1086.480956][T24668] input: failed to attach handler leds to device input137, error: -6 [ 1086.515250][T12232] usb 46-1: device descriptor read/8, error -110 [ 1086.575195][ T6131] usb 11-1: new high-speed USB device number 11 using dummy_hcd [ 1086.727113][ T6131] usb 11-1: config 0 has no interfaces? [ 1086.729860][ T6131] usb 11-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1086.734117][ T6131] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1086.739987][ T6131] usb 11-1: config 0 descriptor?? [ 1086.756203][ T3741] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1086.908249][T12232] usb usb46-port1: attempt power cycle [ 1086.946295][ T6131] usb 11-1: USB disconnect, device number 11 [ 1087.218578][ T6044] usb 9-1: USB disconnect, device number 12 [ 1087.425663][T24671] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 1087.428338][T24671] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1087.431119][T24671] vhci_hcd vhci_hcd.0: Device attached [ 1087.458621][T24676] vhci_hcd: connection closed [ 1087.465157][ T3741] vhci_hcd vhci_hcd.7: stop threads [ 1087.468542][ T3741] vhci_hcd vhci_hcd.7: release socket [ 1087.470362][ T3741] vhci_hcd vhci_hcd.7: disconnect device [ 1087.475715][T12232] usb usb46-port1: unable to enumerate USB device [ 1087.546771][T24678] 9pnet_virtio: no channels available for device syz [ 1088.015276][ T6131] usb 11-1: new high-speed USB device number 12 using dummy_hcd [ 1088.175165][ T6131] usb 11-1: Using ep0 maxpacket: 32 [ 1088.180293][ T6131] usb 11-1: config 0 has an invalid interface number: 12 but max is 0 [ 1088.185123][ T6131] usb 11-1: config 0 has no interface number 0 [ 1088.187253][ T6131] usb 11-1: config 0 interface 12 has no altsetting 0 [ 1088.205900][ T6131] usb 11-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1088.208974][ T6131] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1088.213921][ T6131] usb 11-1: Product: syz [ 1088.215554][ T6131] usb 11-1: Manufacturer: syz [ 1088.217564][ T6131] usb 11-1: SerialNumber: syz [ 1088.227877][ T6131] usb 11-1: config 0 descriptor?? [ 1088.391779][T24692] netlink: 'syz.2.4836': attribute type 1 has an invalid length. [ 1088.394626][T24692] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4836'. [ 1088.676895][ T6131] f81534 11-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1088.679993][ T6131] f81534 11-1:0.12: f81534_find_config_idx: read failed: -71 [ 1088.683222][ T6131] f81534 11-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1088.705392][ T6131] f81534 11-1:0.12: probe with driver f81534 failed with error -71 [ 1088.725313][ T6131] usb 11-1: USB disconnect, device number 12 [ 1088.755275][ T5981] usb 50-1: device descriptor read/8, error -110 [ 1089.185704][ T5981] usb usb50-port1: attempt power cycle [ 1089.240104][T24699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4841'. [ 1089.756093][ T5981] usb usb50-port1: unable to enumerate USB device [ 1089.802196][T24707] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 1089.804441][T24707] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1089.807183][T24707] vhci_hcd vhci_hcd.0: Device attached [ 1089.840556][T24710] vhci_hcd: connection closed [ 1089.841721][ T1148] vhci_hcd vhci_hcd.6: stop threads [ 1089.841860][T24709] netlink: 'syz.2.4843': attribute type 10 has an invalid length. [ 1089.844726][ T1148] vhci_hcd vhci_hcd.6: release socket [ 1089.860098][T24709] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1089.863262][ T1148] vhci_hcd vhci_hcd.6: disconnect device [ 1089.879640][T24715] ip6erspan0: entered allmulticast mode [ 1090.539028][T24738] netlink: 'syz.7.4854': attribute type 3 has an invalid length. [ 1090.542051][T24738] netlink: 'syz.7.4854': attribute type 1 has an invalid length. [ 1090.545412][T24738] netlink: 228 bytes leftover after parsing attributes in process `syz.7.4854'. [ 1090.868705][T24748] loop6: detected capacity change from 0 to 2640 [ 1090.871324][T24748] buffer_io_error: 6 callbacks suppressed [ 1090.871334][T24748] Buffer I/O error on dev loop6, logical block 0, async page read [ 1090.888223][T24748] Buffer I/O error on dev loop6, logical block 0, async page read [ 1090.895157][T24748] Buffer I/O error on dev loop6, logical block 0, async page read [ 1090.902534][T24748] Buffer I/O error on dev loop6, logical block 0, async page read [ 1090.905736][T24748] Buffer I/O error on dev loop6, logical block 0, async page read [ 1090.908628][T24748] Buffer I/O error on dev loop6, logical block 0, async page read [ 1090.912727][T24748] Buffer I/O error on dev loop6, logical block 0, async page read [ 1090.947583][T24748] Buffer I/O error on dev loop6, logical block 0, async page read [ 1090.951361][T24748] ldm_validate_partition_table(): Disk read failed. [ 1090.953868][T24748] Buffer I/O error on dev loop6, logical block 0, async page read [ 1090.995251][T24748] Buffer I/O error on dev loop6, logical block 0, async page read [ 1090.997889][T24748] Dev loop6: unable to read RDB block 0 [ 1090.999712][T24748] loop6: unable to read partition table [ 1091.001496][T24748] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1091.045176][T24751] loop6: detected capacity change from 2640 to 524288000 [ 1091.117518][T13595] Bluetooth: hci3: unexpected event 0x01 length: 5 > 1 [ 1091.682052][T24758] overlayfs: failed to resolve './file0': -2 [ 1091.781572][T24759] input: syz0 as /devices/virtual/input/input138 [ 1091.785197][T24759] input: failed to attach handler leds to device input138, error: -6 [ 1092.780421][T24761] cgroup: Name too long [ 1093.420840][T24775] debugfs: 'ttyS3' already exists in 'caif_serial' [ 1093.468188][T24780] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 1093.470703][T24780] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1093.474163][T24780] vhci_hcd vhci_hcd.0: Device attached [ 1093.505695][T24781] vhci_hcd: connection closed [ 1093.506007][ T46] vhci_hcd vhci_hcd.2: stop threads [ 1093.510407][ T46] vhci_hcd vhci_hcd.2: release socket [ 1093.512706][ T46] vhci_hcd vhci_hcd.2: disconnect device [ 1093.776749][T24785] binder: 24783:24785 ioctl 84009422 80000c40 returned -22 [ 1093.794223][T24785] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4867'. [ 1093.798468][T24785] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4867'. [ 1093.803880][T24785] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4867'. [ 1094.555290][T24794] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1094.557484][T24794] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1094.560697][T24794] vhci_hcd vhci_hcd.0: Device attached [ 1094.567158][T24791] bond0: (slave dummy0): Releasing backup interface [ 1094.573088][T24791] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1094.596103][T24791] netlink: 'syz.2.4869': attribute type 10 has an invalid length. [ 1094.855256][T15703] usb 46-1: SetAddress Request (38) to port 0 [ 1094.857954][T15703] usb 46-1: new SuperSpeed USB device number 38 using vhci_hcd [ 1095.259163][ T5959] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1095.280334][ T5959] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1095.292788][T24806] syz.4.4870 (24806): drop_caches: 1 [ 1095.297272][ T5959] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1095.300448][T24814] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 4, id = 0 [ 1095.301637][ T5959] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1095.328296][ T5959] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1095.573857][T24795] vhci_hcd: connection reset by peer [ 1095.578931][T12813] vhci_hcd vhci_hcd.4: stop threads [ 1095.581335][T12813] vhci_hcd vhci_hcd.4: release socket [ 1095.586539][T12813] vhci_hcd vhci_hcd.4: disconnect device [ 1095.609728][T24806] syz.4.4870 (24806): drop_caches: 1 [ 1096.091695][T24810] chnl_net:caif_netlink_parms(): no params data found [ 1096.227734][T24810] bridge0: port 1(bridge_slave_0) entered blocking state [ 1096.230128][T24810] bridge0: port 1(bridge_slave_0) entered disabled state [ 1096.232749][T24810] bridge_slave_0: entered allmulticast mode [ 1096.239114][T24810] bridge_slave_0: entered promiscuous mode [ 1096.242487][T24810] bridge0: port 2(bridge_slave_1) entered blocking state [ 1096.244966][T24810] bridge0: port 2(bridge_slave_1) entered disabled state [ 1096.247504][T24810] bridge_slave_1: entered allmulticast mode [ 1096.250468][T24810] bridge_slave_1: entered promiscuous mode [ 1096.265661][T24810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1096.279072][T24810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1096.337098][T24827] FAULT_INJECTION: forcing a failure. [ 1096.337098][T24827] name failslab, interval 1, probability 0, space 0, times 0 [ 1096.342266][T24827] CPU: 1 UID: 0 PID: 24827 Comm: syz.7.4878 Tainted: G L syzkaller #0 PREEMPT(full) [ 1096.342297][T24827] Tainted: [L]=SOFTLOCKUP [ 1096.342304][T24827] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1096.342315][T24827] Call Trace: [ 1096.342323][T24827] [ 1096.342331][T24827] dump_stack_lvl+0x16c/0x1f0 [ 1096.342363][T24827] should_fail_ex+0x512/0x640 [ 1096.342385][T24827] ? __kmalloc_cache_noprof+0x5f/0x800 [ 1096.342409][T24827] should_failslab+0xc2/0x120 [ 1096.342438][T24827] __kmalloc_cache_noprof+0x80/0x800 [ 1096.342459][T24827] ? create_io_worker+0xc9/0x5b0 [ 1096.342485][T24827] ? create_io_worker+0x1f/0x5b0 [ 1096.342505][T24827] ? create_io_worker+0xc9/0x5b0 [ 1096.342526][T24827] create_io_worker+0xc9/0x5b0 [ 1096.342550][T24827] io_wq_enqueue+0x4cc/0x980 [ 1096.342574][T24827] ? __pfx_io_wq_enqueue+0x10/0x10 [ 1096.342595][T24827] ? __pfx_io_wq_work_match_item+0x10/0x10 [ 1096.342616][T24827] ? io_prep_async_work+0x3c3/0x770 [ 1096.342634][T24827] ? strncpy_from_user+0x203/0x2e0 [ 1096.342655][T24827] io_queue_iowq+0x246/0x500 [ 1096.342676][T24827] io_queue_sqe_fallback+0x170/0x6e0 [ 1096.342696][T24827] ? io_statx_prep+0x295/0x360 [ 1096.342718][T24827] io_submit_sqes+0x14d8/0x28e0 [ 1096.342754][T24827] __do_sys_io_uring_enter+0xd6b/0x1630 [ 1096.342780][T24827] ? __fget_files+0x20e/0x3c0 [ 1096.342820][T24827] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 1096.342847][T24827] ? fput+0x70/0xf0 [ 1096.342863][T24827] ? ksys_write+0x1ac/0x250 [ 1096.342886][T24827] ? __pfx_ksys_write+0x10/0x10 [ 1096.342911][T24827] ? do_user_addr_fault+0x843/0x1370 [ 1096.342937][T24827] __do_fast_syscall_32+0xe8/0x680 [ 1096.342966][T24827] do_fast_syscall_32+0x32/0x80 [ 1096.342982][T24827] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1096.343003][T24827] RIP: 0023:0xf7fd6579 [ 1096.343015][T24827] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1096.343031][T24827] RSP: 002b:00000000f54c655c EFLAGS: 00000296 ORIG_RAX: 00000000000001aa [ 1096.343048][T24827] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000c1c [ 1096.343058][T24827] RDX: 00000000fffffff8 RSI: 000000000000000e RDI: 0000000000000000 [ 1096.343069][T24827] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1096.343079][T24827] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1096.343090][T24827] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1096.343113][T24827] [ 1096.350109][T24810] team0: Port device team_slave_0 added [ 1096.373496][T24829] devpts: Bad value for 'max' [ 1096.451524][T24810] team0: Port device team_slave_1 added [ 1096.464520][T24810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1096.472949][T24810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1096.482679][T24810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1096.561464][T24810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1096.564507][T24810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1096.584497][T24810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1096.732697][T24810] hsr_slave_0: entered promiscuous mode [ 1096.739537][T24810] hsr_slave_1: entered promiscuous mode [ 1096.978942][T18557] batman_adv: batadv0: Removing interface: gretap1 [ 1096.992504][T18557] bond3 (unregistering): (slave gretap2): Releasing active interface [ 1097.082386][ T8588] usb 12-1: new high-speed USB device number 27 using dummy_hcd [ 1097.110663][T18557] dvmrp1 (unregistering): left allmulticast mode [ 1097.255226][ T8588] usb 12-1: Using ep0 maxpacket: 32 [ 1097.259217][ T8588] usb 12-1: config 0 has an invalid interface number: 12 but max is 0 [ 1097.263186][ T8588] usb 12-1: config 0 has no interface number 0 [ 1097.266113][ T8588] usb 12-1: config 0 interface 12 has no altsetting 0 [ 1097.271148][ T8588] usb 12-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1097.274678][ T8588] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1097.277441][ T8588] usb 12-1: Product: syz [ 1097.278854][ T8588] usb 12-1: Manufacturer: syz [ 1097.280408][ T8588] usb 12-1: SerialNumber: syz [ 1097.283798][ T8588] usb 12-1: config 0 descriptor?? [ 1097.318086][T18557] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1097.323141][T18557] bond0 (unregistering): (slave bond2): Releasing backup interface [ 1097.328342][T18557] bond0 (unregistering): Released all slaves [ 1097.400175][T13595] Bluetooth: hci2: command tx timeout [ 1097.451586][T18557] bond1 (unregistering): Released all slaves [ 1097.572683][T18557] bond2 (unregistering): Released all slaves [ 1097.580753][T18557] bond3 (unregistering): Released all slaves [ 1097.715240][ T8588] f81534 12-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1097.718037][ T8588] f81534 12-1:0.12: f81534_find_config_idx: read failed: -71 [ 1097.720467][ T8588] f81534 12-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1097.732248][T18557] tipc: Left network mode [ 1097.732890][ T8588] f81534 12-1:0.12: probe with driver f81534 failed with error -71 [ 1097.738215][ T8588] usb 12-1: USB disconnect, device number 27 [ 1097.930182][T24849] cgroup: Name too long [ 1097.983564][T24810] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1097.988025][T24810] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1097.994808][T24810] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1097.999090][T24810] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1098.131041][T18557] hsr_slave_0: left promiscuous mode [ 1098.587406][T24859] overlayfs: failed to resolve './file1': -2 [ 1098.808015][T24859] /dev/sr0: Can't open blockdev [ 1099.302614][T24810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1099.332889][T24810] 8021q: adding VLAN 0 to HW filter on device team0 [ 1099.348369][ T3741] bridge0: port 1(bridge_slave_0) entered blocking state [ 1099.351172][ T3741] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1099.364538][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 1099.367732][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1099.490727][T13595] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 1099.491486][ T5959] Bluetooth: hci2: command tx timeout [ 1099.558932][T24810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1099.590574][T24810] veth0_vlan: entered promiscuous mode [ 1099.603940][T24810] veth1_vlan: entered promiscuous mode [ 1099.636851][T24810] veth0_macvtap: entered promiscuous mode [ 1099.679150][T24810] veth1_macvtap: entered promiscuous mode [ 1099.722781][T24810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1099.732964][T24810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1099.741088][ T3741] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.745349][ T3741] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.750915][ T3741] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.755134][ T3741] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.822226][ T3741] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1099.826063][ T3741] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1099.846593][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1099.852618][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1100.199576][T15703] usb 46-1: device descriptor read/8, error -110 [ 1100.728323][T18557] IPVS: stop unused estimator thread 0... [ 1100.996359][T24899] netlink: 220 bytes leftover after parsing attributes in process `syz.4.4895'. [ 1101.000265][T24899] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4895'. [ 1101.010295][T24899] FAULT_INJECTION: forcing a failure. [ 1101.010295][T24899] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1101.015465][T24899] CPU: 0 UID: 0 PID: 24899 Comm: syz.4.4895 Tainted: G L syzkaller #0 PREEMPT(full) [ 1101.015485][T24899] Tainted: [L]=SOFTLOCKUP [ 1101.015490][T24899] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1101.015497][T24899] Call Trace: [ 1101.015501][T24899] [ 1101.015506][T24899] dump_stack_lvl+0x16c/0x1f0 [ 1101.015527][T24899] should_fail_ex+0x512/0x640 [ 1101.015543][T24899] _copy_to_user+0x32/0xd0 [ 1101.015557][T24899] simple_read_from_buffer+0xcb/0x170 [ 1101.015575][T24899] proc_fail_nth_read+0x197/0x240 [ 1101.015594][T24899] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1101.015613][T24899] ? rw_verify_area+0xcf/0x6c0 [ 1101.015627][T24899] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1101.015645][T24899] vfs_read+0x1e4/0xcf0 [ 1101.015661][T24899] ? __pfx___mutex_lock+0x10/0x10 [ 1101.015680][T24899] ? __pfx_vfs_read+0x10/0x10 [ 1101.015694][T24899] ? find_held_lock+0x2b/0x80 [ 1101.015712][T24899] ? __fget_files+0x20e/0x3c0 [ 1101.015719][T24900] 9p: Unknown Cache mode or invalid value fscach [ 1101.015731][T24899] ksys_read+0x12a/0x250 [ 1101.015746][T24899] ? __pfx_ksys_read+0x10/0x10 [ 1101.015766][T24899] __do_fast_syscall_32+0xe8/0x680 [ 1101.015784][T24899] do_fast_syscall_32+0x32/0x80 [ 1101.015795][T24899] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1101.015809][T24899] RIP: 0023:0xf70cd579 [ 1101.015818][T24899] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1101.015829][T24899] RSP: 002b:00000000f54bd590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1101.015840][T24899] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f54bd620 [ 1101.015847][T24899] RDX: 000000000000000f RSI: 00000000f7466ff4 RDI: 0000000000000000 [ 1101.015854][T24899] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1101.015860][T24899] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1101.015867][T24899] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1101.015880][T24899] [ 1101.078257][T15703] usb usb46-port1: attempt power cycle [ 1101.297261][ T40] kauditd_printk_skb: 760 callbacks suppressed [ 1101.297279][ T40] audit: type=1326 audit(1766924155.465:114633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24894 comm="syz.7.4893" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 1101.326967][T24906] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1101.415293][T24886] IPVS: starting estimator thread 0... [ 1101.469570][T24906] bond4 (unregistering): Released all slaves [ 1101.482357][ T40] audit: type=1326 audit(1766924155.465:114634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24894 comm="syz.7.4893" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 1101.497348][ T40] audit: type=1326 audit(1766924155.475:114635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24894 comm="syz.7.4893" exe="/syz-executor" sig=0 arch=40000003 syscall=27 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 1101.510941][ T40] audit: type=1326 audit(1766924155.475:114636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24894 comm="syz.7.4893" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 1101.527843][ T40] audit: type=1326 audit(1766924155.475:114637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24894 comm="syz.7.4893" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 1101.535279][T24910] IPVS: using max 45 ests per chain, 108000 per kthread [ 1101.555224][ T5959] Bluetooth: hci2: command tx timeout [ 1101.686520][T15703] usb usb46-port1: unable to enumerate USB device [ 1101.695882][ T40] audit: type=1326 audit(1766924155.485:114638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24894 comm="syz.7.4893" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 1101.725880][ T40] audit: type=1326 audit(1766924155.485:114639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24894 comm="syz.7.4893" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 1101.750138][ T40] audit: type=1326 audit(1766924155.485:114640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24894 comm="syz.7.4893" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 1101.770446][ T40] audit: type=1326 audit(1766924155.485:114641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24894 comm="syz.7.4893" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 1101.789646][ T40] audit: type=1326 audit(1766924155.805:114642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24894 comm="syz.7.4893" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 1103.646581][ T5959] Bluetooth: hci2: command tx timeout [ 1104.831304][T24939] Bluetooth: MGMT ver 1.23 [ 1104.916009][ C3] vxcan0: j1939_tp_rxtimer: 0xffff88805f889c00: rx timeout, send abort [ 1105.415801][ C3] vxcan0: j1939_tp_rxtimer: 0xffff88802897cc00: rx timeout, send abort [ 1105.422445][ C3] vxcan0: j1939_tp_rxtimer: 0xffff88805f889c00: abort rx timeout. Force session deactivation [ 1105.918583][ C3] vxcan0: j1939_tp_rxtimer: 0xffff88802897cc00: abort rx timeout. Force session deactivation [ 1105.965354][T24954] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 1105.968218][T24954] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1105.971904][T24954] vhci_hcd vhci_hcd.0: Device attached [ 1106.216999][T24958] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 1106.220448][T24958] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1106.255308][ T6131] usb 52-1: SetAddress Request (81) to port 0 [ 1106.258108][ T6131] usb 52-1: new SuperSpeed USB device number 81 using vhci_hcd [ 1106.265389][T24958] vhci_hcd vhci_hcd.0: Device attached [ 1106.445402][T24955] vhci_hcd: connection reset by peer [ 1106.448821][ T6652] vhci_hcd vhci_hcd.7: stop threads [ 1106.451266][ T6652] vhci_hcd vhci_hcd.7: release socket [ 1106.454460][ T6652] vhci_hcd vhci_hcd.7: disconnect device [ 1106.555246][ T6012] usb 46-1: SetAddress Request (42) to port 0 [ 1106.558010][ T6012] usb 46-1: new SuperSpeed USB device number 42 using vhci_hcd [ 1106.752564][T24959] vhci_hcd: connection reset by peer [ 1106.755617][T18557] vhci_hcd vhci_hcd.4: stop threads [ 1106.757508][T18557] vhci_hcd vhci_hcd.4: release socket [ 1106.760484][T18557] vhci_hcd vhci_hcd.4: disconnect device [ 1107.859548][T24983] bridge0: port 1(erspan0) entered blocking state [ 1107.863549][T24983] bridge0: port 1(erspan0) entered disabled state [ 1107.868211][T24983] erspan0: entered allmulticast mode [ 1107.882315][T24983] erspan0: entered promiscuous mode [ 1108.327924][T24995] veth1_vlan: left allmulticast mode [ 1108.331324][T24995] macvtap1: left promiscuous mode [ 1108.333305][T24995] macvtap1: left allmulticast mode [ 1109.926501][T25016] syzkaller0: entered promiscuous mode [ 1109.929938][T25016] syzkaller0: entered allmulticast mode [ 1110.058819][T25020] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4925'. [ 1110.063676][T25020] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4925'. [ 1111.341464][ T6131] usb 52-1: device descriptor read/8, error -110 [ 1111.472414][T25058] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1111.635291][ T6012] usb 46-1: device descriptor read/8, error -110 [ 1111.713176][T15703] usb 9-1: new full-speed USB device number 13 using dummy_hcd [ 1111.755141][ T6131] usb usb52-port1: attempt power cycle [ 1111.860749][T25067] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4937'. [ 1111.879780][T25064] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1111.906045][T25070] macvtap1: entered promiscuous mode [ 1111.907995][T25070] macvtap1: entered allmulticast mode [ 1111.909918][T25070] veth1_vlan: entered allmulticast mode [ 1111.918236][T25070] macvtap2: entered promiscuous mode [ 1111.920139][T25070] macvtap2: entered allmulticast mode [ 1111.954265][T25064] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1111.957248][T15703] usb 9-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1111.961635][T15703] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1111.965928][T15703] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1111.969536][T15703] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1111.973704][T15703] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1111.981957][T15703] usb 9-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1111.986269][T15703] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1111.989773][T15703] usb 9-1: Product: syz [ 1111.991713][T15703] usb 9-1: Manufacturer: syz [ 1111.993861][T15703] usb 9-1: SerialNumber: syz [ 1111.998426][T15703] usb 9-1: config 0 descriptor?? [ 1112.001310][T25060] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1112.006299][T15703] input: KB Gear Tablet as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input140 [ 1112.039165][T25064] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1112.045668][ T6012] usb usb46-port1: attempt power cycle [ 1112.172205][T25064] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1112.214620][T25059] [U]  [ 1112.217020][T10123] usb 9-1: USB disconnect, device number 13 [ 1112.217049][ C1] kbtab 9-1:0.0: kbtab_irq - usb_submit_urb failed with result -19 [ 1112.286912][ T5109] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.297097][ T5109] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.304492][ T5109] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.326293][ T6131] usb usb52-port1: unable to enumerate USB device [ 1112.331640][T15249] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.363657][T25075] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 1112.366610][T25075] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1112.490649][T25075] vhci_hcd vhci_hcd.0: Device attached [ 1112.636032][ T6012] usb usb46-port1: unable to enumerate USB device [ 1112.735173][ T6032] usb 41-1: new low-speed USB device number 16 using vhci_hcd [ 1112.863095][T25093] tipc: Enabled bearer , priority 0 [ 1112.876918][T25092] tipc: Disabling bearer [ 1112.990551][T25076] vhci_hcd: connection reset by peer [ 1113.002088][T25099] netlink: 'syz.6.4948': attribute type 1 has an invalid length. [ 1113.011388][T15620] vhci_hcd vhci_hcd.2: stop threads [ 1113.013138][T15620] vhci_hcd vhci_hcd.2: release socket [ 1113.014943][T15620] vhci_hcd vhci_hcd.2: disconnect device [ 1113.049724][T25099] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1113.054472][T25099] bond2: (slave bond3): making interface the new active one [ 1113.057283][T25099] bond2: (slave bond3): Enslaving as an active interface with an up link [ 1113.062765][T25099] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4948'. [ 1113.067112][T25099] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1113.222784][T25108] netlink: 204 bytes leftover after parsing attributes in process `syz.6.4949'. [ 1113.519820][T25115] ubi: mtd0 is already attached to ubi31 [ 1113.565439][ T90] wlan0: Trigger new scan to find an IBSS to join [ 1114.178530][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 1114.178542][ T40] audit: type=1326 audit(1766924168.415:114644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25135 comm="syz.7.4960" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fd6579 code=0x0 [ 1114.251806][T25144] vlan3: entered promiscuous mode [ 1114.254267][T25144] vlan3: entered allmulticast mode [ 1114.256954][T25144] hsr_slave_1: entered allmulticast mode [ 1114.529410][T25152] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4964'. [ 1114.561361][T20078] usb 11-1: new high-speed USB device number 13 using dummy_hcd [ 1114.747557][T20078] usb 11-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1114.750857][T20078] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1114.753768][T20078] usb 11-1: Product: syz [ 1114.756920][T20078] usb 11-1: Manufacturer: syz [ 1114.758880][T20078] usb 11-1: SerialNumber: syz [ 1114.766315][T20078] usb 11-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1114.813757][T20078] usb 11-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1115.230542][ T6012] usb 11-1: USB disconnect, device number 13 [ 1115.885143][T20078] ath9k_htc 11-1:1.0: ath9k_htc: Target is unresponsive [ 1115.890117][T20078] ath9k_htc: Failed to initialize the device [ 1115.893006][ T6012] usb 11-1: ath9k_htc: USB layer deinitialized [ 1116.244567][T25182] netlink: 3 bytes leftover after parsing attributes in process `syz.6.4974'. [ 1116.251582][T25182] batadv3: entered allmulticast mode [ 1116.515574][ T46] wlan0: Trigger new scan to find an IBSS to join [ 1116.551527][T25176] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 1116.553692][T25176] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1116.556428][T25176] vhci_hcd vhci_hcd.0: Device attached [ 1116.560232][T25190] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(9) [ 1116.562459][T25190] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1116.566376][T25190] vhci_hcd vhci_hcd.0: Device attached [ 1116.825522][T12232] usb 46-1: SetAddress Request (46) to port 0 [ 1116.828761][T12232] usb 46-1: new SuperSpeed USB device number 46 using vhci_hcd [ 1117.265958][T25191] vhci_hcd: connection closed [ 1117.266036][T25188] vhci_hcd: connection reset by peer [ 1117.270469][T15620] vhci_hcd vhci_hcd.4: stop threads [ 1117.272622][T15620] vhci_hcd vhci_hcd.4: release socket [ 1117.286175][T15620] vhci_hcd vhci_hcd.4: disconnect device [ 1117.290746][T15620] vhci_hcd vhci_hcd.4: stop threads [ 1117.293061][T15620] vhci_hcd vhci_hcd.4: release socket [ 1117.315225][T15620] vhci_hcd vhci_hcd.4: disconnect device [ 1117.763322][T25170] kexec: Could not allocate control_code_buffer [ 1117.777986][T25209] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 1117.780820][T25209] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1117.795309][T25209] vhci_hcd vhci_hcd.0: Device attached [ 1117.865348][ T6032] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 1118.035153][T15703] usb 51-1: new low-speed USB device number 16 using vhci_hcd [ 1118.076245][T25218] FAULT_INJECTION: forcing a failure. [ 1118.076245][T25218] name failslab, interval 1, probability 0, space 0, times 0 [ 1118.081322][T25218] CPU: 2 UID: 0 PID: 25218 Comm: syz.2.4984 Tainted: G L syzkaller #0 PREEMPT(full) [ 1118.081342][T25218] Tainted: [L]=SOFTLOCKUP [ 1118.081346][T25218] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1118.081354][T25218] Call Trace: [ 1118.081359][T25218] [ 1118.081364][T25218] dump_stack_lvl+0x16c/0x1f0 [ 1118.081386][T25218] should_fail_ex+0x512/0x640 [ 1118.081399][T25218] ? fs_reclaim_acquire+0xae/0x150 [ 1118.081418][T25218] should_failslab+0xc2/0x120 [ 1118.081436][T25218] __kmalloc_noprof+0xeb/0x910 [ 1118.081448][T25218] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1118.081467][T25218] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1118.081482][T25218] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1118.081498][T25218] ? tomoyo_profile+0x47/0x60 [ 1118.081516][T25218] tomoyo_path_number_perm+0x245/0x580 [ 1118.081529][T25218] ? tomoyo_path_number_perm+0x237/0x580 [ 1118.081543][T25218] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1118.081569][T25218] ? find_held_lock+0x2b/0x80 [ 1118.081584][T25218] ? hook_file_ioctl_common+0x144/0x410 [ 1118.081600][T25218] ? __fget_files+0x20e/0x3c0 [ 1118.081615][T25218] ? __fput_deferred+0x430/0x480 [ 1118.081641][T25218] security_file_ioctl_compat+0x9b/0x240 [ 1118.081663][T25218] __ia32_compat_sys_ioctl+0xc3/0x370 [ 1118.081686][T25218] __do_fast_syscall_32+0xe8/0x680 [ 1118.081714][T25218] do_fast_syscall_32+0x32/0x80 [ 1118.081728][T25218] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1118.081748][T25218] RIP: 0023:0xf7f47579 [ 1118.081761][T25218] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1118.081774][T25218] RSP: 002b:00000000f543655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1118.081785][T25218] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae80 [ 1118.081792][T25218] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1118.081798][T25218] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1118.081805][T25218] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1118.081811][T25218] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1118.081825][T25218] [ 1118.081936][T25218] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1118.503399][T25211] vhci_hcd: connection reset by peer [ 1118.505702][T15249] vhci_hcd vhci_hcd.7: stop threads [ 1118.507595][T15249] vhci_hcd vhci_hcd.7: release socket [ 1118.509932][T15249] vhci_hcd vhci_hcd.7: disconnect device [ 1118.898804][T25229] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 1118.901406][T25229] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1118.905196][T25229] vhci_hcd vhci_hcd.0: Device attached [ 1118.923216][T25229] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1119.245944][T25237] erspan0: left allmulticast mode [ 1119.247730][T25237] erspan0: left promiscuous mode [ 1119.249627][T25237] bridge0: port 1(erspan0) entered disabled state [ 1119.268954][T25237] bond3: (slave dummy0): Releasing backup interface [ 1119.273412][T25237] dummy0: left promiscuous mode [ 1119.275691][T25237] dummy0: left allmulticast mode [ 1119.283036][T25237] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1119.326427][T25240] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4992'. [ 1119.349803][T25237] netlink: 'syz.7.4991': attribute type 10 has an invalid length. [ 1119.352423][T25237] netlink: 2 bytes leftover after parsing attributes in process `syz.7.4991'. [ 1119.382376][T25237] team0: entered promiscuous mode [ 1119.475263][ T90] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1119.517031][T25247] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1119.520204][T25247] batadv1: entered promiscuous mode [ 1119.523417][T25247] team0: Port device batadv1 added [ 1119.567207][T25250] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4995'. [ 1119.571309][T25250] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4995'. [ 1119.576332][T25250] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4995'. [ 1119.595385][T25250] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4995'. [ 1119.599381][T25250] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4995'. [ 1119.603048][T25250] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4995'. [ 1119.611384][T25250] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4995'. [ 1119.676524][T25230] vhci_hcd: connection closed [ 1119.676794][ T6652] vhci_hcd vhci_hcd.4: stop threads [ 1119.681690][ T6652] vhci_hcd vhci_hcd.4: release socket [ 1119.684104][ T6652] vhci_hcd vhci_hcd.4: disconnect device [ 1119.810083][T25259] nbd: couldn't find device at index -2145452028 [ 1120.526795][T25296] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 1120.529097][T25296] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1120.532068][T25296] vhci_hcd vhci_hcd.0: Device attached [ 1120.765253][ T6012] usb 49-1: new low-speed USB device number 18 using vhci_hcd [ 1121.095496][T25297] vhci_hcd: connection reset by peer [ 1121.097883][T15620] vhci_hcd vhci_hcd.6: stop threads [ 1121.099801][T15620] vhci_hcd vhci_hcd.6: release socket [ 1121.101724][T15620] vhci_hcd vhci_hcd.6: disconnect device [ 1121.442702][T25324] raw_sendmsg: syz.7.5020 forgot to set AF_INET. Fix it! [ 1121.496635][T20078] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1121.645284][T20078] usb 9-1: Using ep0 maxpacket: 8 [ 1121.649919][T20078] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1121.653428][T20078] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1121.658233][T20078] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1121.663257][T20078] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1121.675315][T20078] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1121.685195][T20078] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1121.688315][T20078] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1121.875664][T12232] usb 46-1: device descriptor read/8, error -110 [ 1121.897936][T20078] usb 9-1: GET_CAPABILITIES returned 0 [ 1121.899861][T20078] usbtmc 9-1:16.0: can't read capabilities [ 1122.132671][T10123] usb 9-1: USB disconnect, device number 14 [ 1122.287808][T12232] usb usb46-port1: attempt power cycle [ 1122.355208][ T5981] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 1122.378175][T25347] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 1122.380735][T25347] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1122.384576][T25347] vhci_hcd vhci_hcd.0: Device attached [ 1122.989478][T25348] vhci_hcd: connection closed [ 1122.989674][T16025] vhci_hcd vhci_hcd.6: stop threads [ 1122.993748][T16025] vhci_hcd vhci_hcd.6: release socket [ 1122.996960][T16025] vhci_hcd vhci_hcd.6: disconnect device [ 1123.028586][ T5959] Bluetooth: hci1: Malformed Event: 0x13 [ 1123.155649][T15703] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 1123.568413][T25383] usb usb7: usbfs: process 25383 (syz.6.5038) did not claim interface 0 before use [ 1123.572039][T25383] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1123.622086][T12232] usb usb46-port1: unable to enumerate USB device [ 1123.798476][ T40] audit: type=1326 audit(1766924178.035:114645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25361 comm="syz.7.5032" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x7fc00000 [ 1123.809106][ T40] audit: type=1326 audit(1766924178.035:114646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25361 comm="syz.7.5032" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fd6579 code=0x7fc00000 [ 1123.818094][ T40] audit: type=1326 audit(1766924178.035:114647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25361 comm="syz.7.5032" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x7fc00000 [ 1123.827144][ T40] audit: type=1326 audit(1766924178.035:114648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25361 comm="syz.7.5032" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x7fc00000 [ 1123.834823][ T40] audit: type=1326 audit(1766924178.035:114649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25361 comm="syz.7.5032" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x7fc00000 [ 1123.848400][ T40] audit: type=1326 audit(1766924178.035:114650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25361 comm="syz.7.5032" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x7fc00000 [ 1123.856300][ T40] audit: type=1326 audit(1766924178.035:114651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25361 comm="syz.7.5032" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x7fc00000 [ 1123.966968][ T40] audit: type=1326 audit(1766924178.035:114652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25361 comm="syz.7.5032" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x7fc00000 [ 1123.986736][ T40] audit: type=1326 audit(1766924178.035:114653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25361 comm="syz.7.5032" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x7fc00000 [ 1123.993800][ T40] audit: type=1326 audit(1766924178.035:114654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25361 comm="syz.7.5032" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x7fc00000 [ 1124.069896][ T5959] Bluetooth: hci3: unexpected event 0x01 length: 5 > 1 [ 1125.186445][T25417] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 1125.191599][T25417] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1125.225363][T25417] vhci_hcd vhci_hcd.0: Device attached [ 1125.491561][T25420] vhci_hcd: connection closed [ 1125.499134][T15620] vhci_hcd vhci_hcd.7: stop threads [ 1125.503321][T15620] vhci_hcd vhci_hcd.7: release socket [ 1125.535255][T12232] usb 51-1: new low-speed USB device number 17 using vhci_hcd [ 1125.535283][T15620] vhci_hcd vhci_hcd.7: disconnect device [ 1125.665702][T25430] __nla_validate_parse: 61 callbacks suppressed [ 1125.665715][T25430] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5049'. [ 1125.725517][ T5959] Bluetooth: hci3: Malformed Event: 0x13 [ 1125.865547][ T6012] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 1126.020438][T25436] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1126.022780][T25436] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1126.026579][T25436] vhci_hcd vhci_hcd.0: Device attached [ 1126.182438][T25442] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1126.192017][T25437] vhci_hcd: connection closed [ 1126.192260][ T3741] vhci_hcd vhci_hcd.2: stop threads [ 1126.196089][ T3741] vhci_hcd vhci_hcd.2: release socket [ 1126.198153][ T3741] vhci_hcd vhci_hcd.2: disconnect device [ 1126.407746][T25446] syzkaller0: entered promiscuous mode [ 1126.410127][T25446] syzkaller0: entered allmulticast mode [ 1126.825212][ T5959] Bluetooth: hci3: unexpected event 0x01 length: 5 > 1 [ 1127.615427][T25468] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 1127.619939][T25468] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1127.622829][T25468] vhci_hcd vhci_hcd.0: Device attached [ 1127.818390][T25469] vhci_hcd: connection closed [ 1127.818639][ T13] vhci_hcd vhci_hcd.4: stop threads [ 1127.823034][ T13] vhci_hcd vhci_hcd.4: release socket [ 1127.825755][ T13] vhci_hcd vhci_hcd.4: disconnect device [ 1127.855225][T15703] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 1127.989670][ T6032] usb usb50-port1: attempt power cycle [ 1128.067247][ T5959] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1128.407857][T25482] syzkaller0: entered promiscuous mode [ 1128.409725][T25482] syzkaller0: entered allmulticast mode [ 1128.745606][ T6032] usb usb50-port1: unable to enumerate USB device [ 1129.878512][T25505] syzkaller1: entered promiscuous mode [ 1129.881102][T25505] syzkaller1: entered allmulticast mode [ 1129.942200][ T5959] Bluetooth: hci2: unexpected event 0x01 length: 5 > 1 [ 1130.097673][T25508] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1130.103449][T25508] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1130.108571][T25508] vhci_hcd vhci_hcd.0: Device attached [ 1130.375291][ T6032] usb 46-1: SetAddress Request (50) to port 0 [ 1130.378916][ T6032] usb 46-1: new SuperSpeed USB device number 50 using vhci_hcd [ 1130.524297][T25510] vhci_hcd: connection reset by peer [ 1130.527162][T15620] vhci_hcd vhci_hcd.4: stop threads [ 1130.529487][T15620] vhci_hcd vhci_hcd.4: release socket [ 1130.531531][T15620] vhci_hcd vhci_hcd.4: disconnect device [ 1130.551372][T25515] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 1130.553611][T25515] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1130.557506][T25515] vhci_hcd vhci_hcd.0: Device attached [ 1130.641895][T25519] syzkaller0: entered promiscuous mode [ 1130.643749][T25519] syzkaller0: entered allmulticast mode [ 1130.739190][T25528] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 1130.741549][T25528] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1130.744730][T25528] vhci_hcd vhci_hcd.0: Device attached [ 1130.843991][T25535] SET target dimension over the limit! [ 1130.971301][T25516] vhci_hcd: connection reset by peer [ 1130.973595][ T6652] vhci_hcd vhci_hcd.7: stop threads [ 1130.975927][ T6652] vhci_hcd vhci_hcd.7: release socket [ 1130.978220][ T6652] vhci_hcd vhci_hcd.7: disconnect device [ 1131.109025][T25545] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5080'. [ 1131.113185][T25545] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5080'. [ 1131.153099][T25536] syz.6.5075 (25536): drop_caches: 1 [ 1131.165252][T12232] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 1131.276940][T25536] syz.6.5075 (25536): drop_caches: 1 [ 1131.425213][ T6044] usb 50-1: SetAddress Request (5) to port 0 [ 1131.529165][ T5959] Bluetooth: hci0: unexpected event 0x01 length: 5 > 1 [ 1131.578074][T25529] vhci_hcd: connection closed [ 1131.583100][ T5109] vhci_hcd vhci_hcd.6: stop threads [ 1131.588920][ T5109] vhci_hcd vhci_hcd.6: release socket [ 1131.591820][ T5109] vhci_hcd vhci_hcd.6: disconnect device [ 1131.761168][ T6044] usb 50-1: new SuperSpeed USB device number 5 using vhci_hcd [ 1132.083257][ T6044] usb 50-1: enqueue for inactive port 0 [ 1132.487183][ T6044] usb usb50-port1: attempt power cycle [ 1132.697844][T25590] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 1132.700017][T25590] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1132.703480][T25590] vhci_hcd vhci_hcd.0: Device attached [ 1132.975365][T24893] usb 52-1: SetAddress Request (85) to port 0 [ 1132.977936][T24893] usb 52-1: new SuperSpeed USB device number 85 using vhci_hcd [ 1133.066811][ T6044] usb usb50-port1: unable to enumerate USB device [ 1133.241464][T25591] vhci_hcd: connection reset by peer [ 1133.244516][ T90] vhci_hcd vhci_hcd.7: stop threads [ 1133.251371][ T90] vhci_hcd vhci_hcd.7: release socket [ 1133.254087][ T90] vhci_hcd vhci_hcd.7: disconnect device [ 1133.285679][ T5959] Bluetooth: hci3: unexpected event 0x01 length: 5 > 1 [ 1133.393971][T25614] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 1133.399363][T25614] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1133.405237][T25614] vhci_hcd vhci_hcd.0: Device attached [ 1133.637341][T25615] vhci_hcd: connection closed [ 1133.637944][ T1141] vhci_hcd vhci_hcd.2: stop threads [ 1133.641663][ T1141] vhci_hcd vhci_hcd.2: release socket [ 1133.643577][ T1141] vhci_hcd vhci_hcd.2: disconnect device [ 1133.655290][ T6044] usb 41-1: new low-speed USB device number 17 using vhci_hcd [ 1133.658800][ T6044] usb 41-1: enqueue for inactive port 0 [ 1133.735258][ T6044] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 1135.738486][ T6032] usb 46-1: device descriptor read/8, error -110 [ 1135.787893][T25665] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 1135.790288][T25665] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1135.816161][T25665] vhci_hcd vhci_hcd.0: Device attached [ 1136.127374][ T6032] usb usb46-port1: attempt power cycle [ 1136.686162][ T6032] usb usb46-port1: unable to enumerate USB device [ 1136.935365][T20078] usb 50-1: SetAddress Request (9) to port 0 [ 1136.937434][T20078] usb 50-1: new SuperSpeed USB device number 9 using vhci_hcd [ 1136.953620][ T5959] Bluetooth: hci0: unexpected event 0x01 length: 5 > 1 [ 1136.968152][T25679] syzkaller0: entered promiscuous mode [ 1136.972734][T25679] syzkaller0: entered allmulticast mode [ 1137.001519][T25666] vhci_hcd: connection reset by peer [ 1137.004249][T16025] vhci_hcd vhci_hcd.6: stop threads [ 1137.090069][T16025] vhci_hcd vhci_hcd.6: release socket [ 1137.093020][T16025] vhci_hcd vhci_hcd.6: disconnect device [ 1137.589216][T25680] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 1137.591421][T25680] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1137.594147][T25680] vhci_hcd vhci_hcd.0: Device attached [ 1137.770390][T25689] vhci_hcd: connection closed [ 1137.770646][ T5109] vhci_hcd vhci_hcd.7: stop threads [ 1137.774159][ T5109] vhci_hcd vhci_hcd.7: release socket [ 1137.776113][ T5109] vhci_hcd vhci_hcd.7: disconnect device [ 1138.045241][T24893] usb 52-1: device descriptor read/8, error -110 [ 1138.394721][T25692] FAULT_INJECTION: forcing a failure. [ 1138.394721][T25692] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1138.400905][T25692] CPU: 2 UID: 0 PID: 25692 Comm: syz.4.5115 Tainted: G L syzkaller #0 PREEMPT(full) [ 1138.400933][T25692] Tainted: [L]=SOFTLOCKUP [ 1138.400940][T25692] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1138.400951][T25692] Call Trace: [ 1138.400958][T25692] [ 1138.400966][T25692] dump_stack_lvl+0x16c/0x1f0 [ 1138.401022][T25692] should_fail_ex+0x512/0x640 [ 1138.401053][T25692] strncpy_from_user+0x3b/0x2e0 [ 1138.401073][T25692] getname_flags.part.0+0x8f/0x550 [ 1138.401098][T25692] getname_uflags+0x98/0xf0 [ 1138.401121][T25692] io_statx_prep+0x228/0x360 [ 1138.401147][T25692] io_submit_sqes+0xa14/0x28e0 [ 1138.401187][T25692] __do_sys_io_uring_enter+0xd6b/0x1630 [ 1138.401215][T25692] ? __fget_files+0x20e/0x3c0 [ 1138.401241][T25692] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 1138.401268][T25692] ? fput+0x70/0xf0 [ 1138.401286][T25692] ? ksys_write+0x1ac/0x250 [ 1138.401311][T25692] ? __pfx_ksys_write+0x10/0x10 [ 1138.401336][T25692] ? do_user_addr_fault+0x843/0x1370 [ 1138.401363][T25692] __do_fast_syscall_32+0xe8/0x680 [ 1138.401394][T25692] do_fast_syscall_32+0x32/0x80 [ 1138.401410][T25692] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1138.401432][T25692] RIP: 0023:0xf70cd579 [ 1138.401446][T25692] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1138.401463][T25692] RSP: 002b:00000000f54bd55c EFLAGS: 00000296 ORIG_RAX: 00000000000001aa [ 1138.401482][T25692] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000c1c [ 1138.401493][T25692] RDX: 00000000fffffff8 RSI: 000000000000000e RDI: 0000000000000000 [ 1138.401504][T25692] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1138.401514][T25692] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1138.401525][T25692] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1138.401548][T25692] [ 1138.460689][T24893] usb usb52-port1: attempt power cycle [ 1138.545164][ T6131] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 1138.866051][T25712] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1138.869577][T25712] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1138.872739][T25712] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1138.876828][T25712] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1139.780720][ T53] libceph: connect (1)[c::]:6789 error -101 [ 1139.783223][ T53] libceph: mon0 (1)[c::]:6789 connect error [ 1139.819617][T25724] ceph: No mds server is up or the cluster is laggy [ 1139.835798][T24893] usb usb52-port1: unable to enumerate USB device [ 1139.880133][T25727] bridge0: port 1(erspan0) entered blocking state [ 1139.882841][T25727] bridge0: port 1(erspan0) entered forwarding state [ 1139.895176][T25727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1139.900934][T25727] 8021q: adding VLAN 0 to HW filter on device team0 [ 1139.943292][T25727] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1140.423743][T25750] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1140.426396][T25750] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1140.433354][T25750] vhci_hcd vhci_hcd.0: Device attached [ 1140.475403][ T6013] usb 12-1: new high-speed USB device number 28 using dummy_hcd [ 1140.605244][ T6013] usb 12-1: device descriptor read/64, error -71 [ 1140.695237][ T6131] usb 42-1: SetAddress Request (124) to port 0 [ 1140.699436][ T6131] usb 42-1: new SuperSpeed USB device number 124 using vhci_hcd [ 1140.782691][T25762] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 1140.784834][T25762] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1140.790589][T25762] vhci_hcd vhci_hcd.0: Device attached [ 1140.855246][ T6013] usb 12-1: new high-speed USB device number 29 using dummy_hcd [ 1140.929154][T25751] vhci_hcd: connection reset by peer [ 1140.945582][ T13] vhci_hcd vhci_hcd.2: stop threads [ 1140.951573][ T13] vhci_hcd vhci_hcd.2: release socket [ 1140.955252][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 1140.995538][ T6013] usb 12-1: device descriptor read/64, error -71 [ 1141.106218][ T6013] usb usb12-port1: attempt power cycle [ 1141.168361][T25763] vhci_hcd: connection closed [ 1141.168664][ T3741] vhci_hcd vhci_hcd.6: stop threads [ 1141.172305][ T3741] vhci_hcd vhci_hcd.6: release socket [ 1141.174839][ T3741] vhci_hcd vhci_hcd.6: disconnect device [ 1141.445590][ T6013] usb 12-1: new high-speed USB device number 30 using dummy_hcd [ 1141.466217][ T6013] usb 12-1: device descriptor read/8, error -71 [ 1141.725342][ T6013] usb 12-1: new high-speed USB device number 31 using dummy_hcd [ 1141.732074][T25773] overlayfs: failed to resolve './file1': -2 [ 1141.746036][ T6013] usb 12-1: device descriptor read/8, error -71 [ 1141.865616][ T6013] usb usb12-port1: unable to enumerate USB device [ 1142.702000][T20078] usb 50-1: device descriptor read/8, error -110 [ 1143.054231][T25773] /dev/sr0: Can't open blockdev [ 1143.096620][T20078] usb usb50-port1: attempt power cycle [ 1143.165257][ T53] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 1143.310200][T25813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5137'. [ 1143.313458][T25813] netlink: 'syz.2.5137': attribute type 5 has an invalid length. [ 1143.316228][T25813] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5137'. [ 1143.337999][T25813] geneve2: entered promiscuous mode [ 1143.339984][T25813] geneve2: entered allmulticast mode [ 1143.347844][ T6652] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 1143.366429][ T6652] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 1143.369187][ T6652] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 1143.372062][ T6652] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 1143.779737][T25817] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 1143.782909][T25817] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1143.785974][T25817] vhci_hcd vhci_hcd.0: Device attached [ 1143.862408][T25805] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 1144.025631][ T6013] usb 51-1: new low-speed USB device number 19 using vhci_hcd [ 1144.214062][T25818] vhci_hcd: connection reset by peer [ 1144.220849][ T6652] vhci_hcd vhci_hcd.7: stop threads [ 1144.225167][ T6652] vhci_hcd vhci_hcd.7: release socket [ 1144.227054][ T6652] vhci_hcd vhci_hcd.7: disconnect device [ 1144.233526][T25827] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5144'. [ 1144.317042][T25835] syzkaller0: entered promiscuous mode [ 1144.319658][T25835] syzkaller0: entered allmulticast mode [ 1144.448008][T20078] usb usb50-port1: unable to enumerate USB device [ 1145.011890][T25847] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5151'. [ 1145.315671][ T5959] Bluetooth: hci0: command 0x0406 tx timeout [ 1145.805208][ T6131] usb 42-1: device descriptor read/8, error -110 [ 1146.121820][T25857] 9p: Unknown uid 00000000004294967295 [ 1146.226684][ T6131] usb usb42-port1: attempt power cycle [ 1146.719609][T25876] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 1146.719627][T25876] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1146.720118][T25876] vhci_hcd vhci_hcd.0: Device attached [ 1146.975961][ T6131] usb usb42-port1: unable to enumerate USB device [ 1147.066457][T25877] vhci_hcd: connection closed [ 1147.067034][ T1141] vhci_hcd vhci_hcd.2: stop threads [ 1147.070416][ T1141] vhci_hcd vhci_hcd.2: release socket [ 1147.072384][ T1141] vhci_hcd vhci_hcd.2: disconnect device [ 1147.115266][T24886] usb 41-1: new low-speed USB device number 18 using vhci_hcd [ 1147.117719][T24886] usb 41-1: enqueue for inactive port 0 [ 1147.195801][T24886] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 1147.686072][T25906] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5168'. [ 1148.252210][T25927] netfs: Couldn't get user pages (rc=-14) [ 1148.255044][T25927] netfs: Zero-sized read [R=76c] [ 1148.872025][T25935] netlink: 'syz.4.5176': attribute type 2 has an invalid length. [ 1149.145276][ T6013] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 1149.482182][T25903] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 1149.485100][T25903] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1149.491187][T25937] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5177'. [ 1149.494996][T25937] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5177'. [ 1149.526657][T25903] vhci_hcd vhci_hcd.0: Device attached [ 1149.720173][T25939] vhci_hcd: connection closed [ 1149.720571][ T13] vhci_hcd vhci_hcd.6: stop threads [ 1149.724971][ T13] vhci_hcd vhci_hcd.6: release socket [ 1149.730486][ T13] vhci_hcd vhci_hcd.6: disconnect device [ 1149.982772][T25954] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 1149.985037][T25954] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1149.996065][T25954] vhci_hcd vhci_hcd.0: Device attached [ 1150.265233][ T6131] usb 52-1: SetAddress Request (89) to port 0 [ 1150.267589][ T6131] usb 52-1: new SuperSpeed USB device number 89 using vhci_hcd [ 1150.370167][T25955] vhci_hcd: connection reset by peer [ 1150.389355][ T3741] vhci_hcd vhci_hcd.7: stop threads [ 1150.391871][ T3741] vhci_hcd vhci_hcd.7: release socket [ 1150.394652][ T3741] vhci_hcd vhci_hcd.7: disconnect device [ 1150.644789][T25963] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5183'. [ 1150.649793][T25963] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5183'. [ 1150.653870][T25963] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5183'. [ 1150.660656][T25963] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5183'. [ 1150.664537][T25963] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5183'. [ 1150.905319][T25973] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 1150.907670][T25973] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1150.910835][T25973] vhci_hcd vhci_hcd.0: Device attached [ 1151.034135][ T5959] Bluetooth: hci1: unexpected event 0x01 length: 5 > 1 [ 1151.124085][T25982] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5190'. [ 1151.185472][ T6012] usb 50-1: SetAddress Request (14) to port 0 [ 1151.188281][ T6012] usb 50-1: new SuperSpeed USB device number 14 using vhci_hcd [ 1151.493449][T25986] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 1151.496516][T25986] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1151.512137][T25986] vhci_hcd vhci_hcd.0: Device attached [ 1151.532573][T25974] vhci_hcd: connection reset by peer [ 1151.548772][ T90] vhci_hcd vhci_hcd.6: stop threads [ 1151.551110][ T90] vhci_hcd vhci_hcd.6: release socket [ 1151.553556][ T90] vhci_hcd vhci_hcd.6: disconnect device [ 1151.719155][T25990] vhci_hcd: connection closed [ 1151.727099][ T6652] vhci_hcd vhci_hcd.4: stop threads [ 1151.730716][ T6652] vhci_hcd vhci_hcd.4: release socket [ 1151.733183][ T6652] vhci_hcd vhci_hcd.4: disconnect device [ 1152.035438][ T90] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1152.192181][T25997] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 1152.195475][T25997] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1152.199594][T25997] vhci_hcd vhci_hcd.0: Device attached [ 1153.877945][T25998] vhci_hcd: connection closed [ 1153.878165][ T13] vhci_hcd vhci_hcd.7: stop threads [ 1153.897615][ T13] vhci_hcd vhci_hcd.7: release socket [ 1153.900049][ T13] vhci_hcd vhci_hcd.7: disconnect device [ 1153.995967][ T5959] Bluetooth: hci3: unexpected event 0x01 length: 5 > 1 [ 1154.145787][T26022] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1154.150573][T26022] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1154.170757][T26022] vhci_hcd vhci_hcd.0: Device attached [ 1154.189191][T26022] binder: Unknown parameter 'stobalÿÿÿ.{m„ñzʹ{üGdC`½Æ#R_A' [ 1154.217874][T26022] Invalid option length (1048030) for dns_resolver key [ 1154.341893][T26023] vhci_hcd: connection closed [ 1154.342139][ T13] vhci_hcd vhci_hcd.2: stop threads [ 1154.351980][ T13] vhci_hcd vhci_hcd.2: release socket [ 1154.354755][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 1155.231956][T26042] bridge0: port 3(erspan0) entered blocking state [ 1155.236841][T26042] bridge0: port 3(erspan0) entered disabled state [ 1155.240131][T26042] erspan0: entered allmulticast mode [ 1155.246231][T26042] erspan0: entered promiscuous mode [ 1155.249435][T26042] bridge0: port 3(erspan0) entered blocking state [ 1155.251683][T26042] bridge0: port 3(erspan0) entered forwarding state [ 1155.315255][ T6131] usb 52-1: device descriptor read/8, error -110 [ 1155.496433][T26046] FAULT_INJECTION: forcing a failure. [ 1155.496433][T26046] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1155.503364][T26046] CPU: 3 UID: 0 PID: 26046 Comm: syz.7.5206 Tainted: G L syzkaller #0 PREEMPT(full) [ 1155.503395][T26046] Tainted: [L]=SOFTLOCKUP [ 1155.503401][T26046] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1155.503412][T26046] Call Trace: [ 1155.503418][T26046] [ 1155.503426][T26046] dump_stack_lvl+0x16c/0x1f0 [ 1155.503467][T26046] should_fail_ex+0x512/0x640 [ 1155.503490][T26046] _copy_from_user+0x2e/0xd0 [ 1155.503510][T26046] get_compat_msghdr+0xa7/0x170 [ 1155.503532][T26046] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1155.503555][T26046] ? __lock_acquire+0x436/0x2890 [ 1155.503575][T26046] ___sys_recvmsg+0x191/0x1a0 [ 1155.503598][T26046] ? __pfx____sys_recvmsg+0x10/0x10 [ 1155.503623][T26046] ? find_held_lock+0x2b/0x80 [ 1155.503652][T26046] ? __pfx___might_resched+0x10/0x10 [ 1155.503680][T26046] do_recvmmsg+0x55d/0x750 [ 1155.503704][T26046] ? __pfx_do_recvmmsg+0x10/0x10 [ 1155.503740][T26046] ? __fget_files+0x20e/0x3c0 [ 1155.503768][T26046] __sys_recvmmsg+0x21c/0x280 [ 1155.503791][T26046] ? __pfx___sys_recvmmsg+0x10/0x10 [ 1155.503814][T26046] ? __pfx_ksys_write+0x10/0x10 [ 1155.503842][T26046] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 1155.503867][T26046] ? __do_fast_syscall_32+0x9a/0x680 [ 1155.503895][T26046] ? lockdep_hardirqs_on+0x7c/0x110 [ 1155.503921][T26046] __do_fast_syscall_32+0xe8/0x680 [ 1155.503950][T26046] do_fast_syscall_32+0x32/0x80 [ 1155.503966][T26046] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1155.503988][T26046] RIP: 0023:0xf7fd6579 [ 1155.504003][T26046] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1155.504020][T26046] RSP: 002b:00000000f54c655c EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1155.504039][T26046] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080002440 [ 1155.504050][T26046] RDX: 00000000ffffff67 RSI: 0000000000000000 RDI: 0000000000000000 [ 1155.504061][T26046] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1155.504072][T26046] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1155.504083][T26046] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1155.504104][T26046] [ 1155.721322][ T6131] usb usb52-port1: attempt power cycle [ 1155.755033][ T5959] Bluetooth: hci3: unexpected event 0x01 length: 5 > 1 [ 1156.275418][ T6012] usb 50-1: device descriptor read/8, error -110 [ 1156.304525][ T6131] usb usb52-port1: unable to enumerate USB device [ 1156.627758][T26060] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1156.630707][T26060] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1156.634816][T26061] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(8) [ 1156.637792][T26061] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1156.655354][T26060] vhci_hcd vhci_hcd.0: Device attached [ 1156.658974][T26061] vhci_hcd vhci_hcd.0: Device attached [ 1156.693606][T26063] vhci_hcd: connection closed [ 1156.693679][T26062] vhci_hcd: connection closed [ 1156.694003][T16025] vhci_hcd vhci_hcd.2: stop threads [ 1156.700186][T16025] vhci_hcd vhci_hcd.2: release socket [ 1156.702657][T16025] vhci_hcd vhci_hcd.2: disconnect device [ 1156.705326][T16025] vhci_hcd vhci_hcd.2: stop threads [ 1156.707363][T16025] vhci_hcd vhci_hcd.2: release socket [ 1156.709543][T16025] vhci_hcd vhci_hcd.2: disconnect device [ 1156.766084][ T6012] usb usb50-port1: attempt power cycle [ 1157.148220][T26070] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1157.151125][T26070] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1157.154106][T26070] vhci_hcd vhci_hcd.0: Device attached [ 1157.358360][ T6012] usb usb50-port1: unable to enumerate USB device [ 1157.435452][T10123] usb 42-1: SetAddress Request (3) to port 0 [ 1157.438910][T10123] usb 42-1: new SuperSpeed USB device number 3 using vhci_hcd [ 1157.644966][T26071] vhci_hcd: connection reset by peer [ 1157.650431][ T1141] vhci_hcd vhci_hcd.2: stop threads [ 1157.652286][ T1141] vhci_hcd vhci_hcd.2: release socket [ 1157.654267][ T1141] vhci_hcd vhci_hcd.2: disconnect device [ 1158.585355][ T827] usb 11-1: new high-speed USB device number 14 using dummy_hcd [ 1158.725234][ T827] usb 11-1: device descriptor read/64, error -71 [ 1159.918407][ T827] usb 11-1: new high-speed USB device number 15 using dummy_hcd [ 1159.944867][T26093] team0: left promiscuous mode [ 1159.947194][T26093] batadv1: left promiscuous mode [ 1160.045160][ T827] usb 11-1: device descriptor read/64, error -71 [ 1160.059096][T26093] geneve2: left promiscuous mode [ 1160.060947][T26093] geneve2: left allmulticast mode [ 1160.064856][T26093] veth1_vlan: left allmulticast mode [ 1160.071683][T26093] macvtap1: left promiscuous mode [ 1160.073503][T26093] macvtap1: left allmulticast mode [ 1160.077673][T26093] vlan2: left promiscuous mode [ 1160.079481][T26093] vlan2: left allmulticast mode [ 1160.081288][T26093] hsr_slave_1: left allmulticast mode [ 1160.093049][T26093] bond3: left promiscuous mode [ 1160.094983][T26093] bond3: left allmulticast mode [ 1160.098375][T26093] ip6erspan0: left allmulticast mode [ 1160.103398][T16025] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1160.107741][T16025] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1160.110624][T16025] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1160.114264][T16025] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1160.155345][ T827] usb usb11-port1: attempt power cycle [ 1160.495227][ T827] usb 11-1: new high-speed USB device number 16 using dummy_hcd [ 1160.520814][ T827] usb 11-1: device descriptor read/8, error -71 [ 1160.718177][T26107] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1160.755281][ T827] usb 11-1: new high-speed USB device number 17 using dummy_hcd [ 1160.776076][ T827] usb 11-1: device descriptor read/8, error -71 [ 1160.885319][ T827] usb usb11-port1: unable to enumerate USB device [ 1161.008605][T26110] tipc: Started in network mode [ 1161.010200][T26110] tipc: Node identity , cluster identity 4711 [ 1161.012162][T26110] tipc: Failed to obtain node identity [ 1161.014010][T26110] tipc: Enabling of bearer rejected, failed to enable media [ 1161.093245][T26112] : renamed from dummy0 (while UP) [ 1161.822590][T26120] 9pnet_virtio: no channels available for device syz [ 1162.524685][T26133] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 1162.527359][T26133] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1162.529999][T10123] usb 42-1: device descriptor read/8, error -110 [ 1162.535422][T26133] vhci_hcd vhci_hcd.0: Device attached [ 1162.645803][ T6013] usb 12-1: new high-speed USB device number 32 using dummy_hcd [ 1162.795167][ T6013] usb 12-1: Using ep0 maxpacket: 8 [ 1162.804791][ T6013] usb 12-1: unable to read config index 0 descriptor/start: -61 [ 1162.808469][ T6013] usb 12-1: can't read configurations, error -61 [ 1162.916198][T10123] usb usb42-port1: attempt power cycle [ 1162.945197][ T6013] usb 12-1: new high-speed USB device number 33 using dummy_hcd [ 1163.055205][ T6012] usb 41-1: new low-speed USB device number 19 using vhci_hcd [ 1163.095244][ T6013] usb 12-1: Using ep0 maxpacket: 8 [ 1163.101548][ T6013] usb 12-1: unable to read config index 0 descriptor/start: -61 [ 1163.104239][ T6013] usb 12-1: can't read configurations, error -61 [ 1163.107386][ T6013] usb usb12-port1: attempt power cycle [ 1163.145894][T26134] vhci_hcd: connection reset by peer [ 1163.148250][ T60] vhci_hcd vhci_hcd.2: stop threads [ 1163.150554][ T60] vhci_hcd vhci_hcd.2: release socket [ 1163.152486][ T60] vhci_hcd vhci_hcd.2: disconnect device [ 1163.445234][ T6013] usb 12-1: new high-speed USB device number 34 using dummy_hcd [ 1163.465670][ T6013] usb 12-1: Using ep0 maxpacket: 8 [ 1163.469704][ T6013] usb 12-1: unable to read config index 0 descriptor/start: -61 [ 1163.472281][ T6013] usb 12-1: can't read configurations, error -61 [ 1163.595348][ T6013] usb 12-1: new high-speed USB device number 35 using dummy_hcd [ 1163.615893][ T6013] usb 12-1: Using ep0 maxpacket: 8 [ 1163.620575][ T6013] usb 12-1: unable to read config index 0 descriptor/start: -61 [ 1163.623219][ T6013] usb 12-1: can't read configurations, error -61 [ 1163.627366][ T6013] usb usb12-port1: unable to enumerate USB device [ 1165.090979][T26149] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 1165.093307][T26149] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1165.111422][T26149] vhci_hcd vhci_hcd.0: Device attached [ 1165.355346][ T5959] Bluetooth: hci3: unexpected event 0x01 length: 5 > 1 [ 1165.525540][T26158] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1165.695342][T26150] vhci_hcd: connection closed [ 1165.695526][ T13] vhci_hcd vhci_hcd.2: stop threads [ 1165.698978][ T13] vhci_hcd vhci_hcd.2: release socket [ 1165.700981][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 1165.788043][T26159] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5234'. [ 1166.501990][T26167] genirq: Flags mismatch irq 4. 00200000 (pcmmio) vs. 00200080 (ttyS0) [ 1166.916859][T26175] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 1166.919234][T26175] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1166.922179][T26175] vhci_hcd vhci_hcd.0: Device attached [ 1167.076673][T26179] 9pnet_virtio: no channels available for device syz [ 1167.424117][T26177] vhci_hcd: connection closed [ 1167.424316][ T1141] vhci_hcd vhci_hcd.2: stop threads [ 1167.428074][ T1141] vhci_hcd vhci_hcd.2: release socket [ 1167.430194][ T1141] vhci_hcd vhci_hcd.2: disconnect device [ 1168.205269][ T6012] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 1168.208759][T26192] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1168.219189][T26192] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1168.223171][T26192] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1168.239016][T26192] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1168.242994][T26192] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1168.592755][T26194] FAULT_INJECTION: forcing a failure. [ 1168.592755][T26194] name failslab, interval 1, probability 0, space 0, times 0 [ 1168.597240][T26194] CPU: 1 UID: 0 PID: 26194 Comm: syz.2.5242 Tainted: G L syzkaller #0 PREEMPT(full) [ 1168.597260][T26194] Tainted: [L]=SOFTLOCKUP [ 1168.597264][T26194] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1168.597271][T26194] Call Trace: [ 1168.597275][T26194] [ 1168.597280][T26194] dump_stack_lvl+0x16c/0x1f0 [ 1168.597301][T26194] should_fail_ex+0x512/0x640 [ 1168.597314][T26194] ? __kmalloc_noprof+0xca/0x910 [ 1168.597328][T26194] should_failslab+0xc2/0x120 [ 1168.597346][T26194] __kmalloc_noprof+0xeb/0x910 [ 1168.597357][T26194] ? __io_alloc_req_refill+0x33a/0x5e0 [ 1168.597370][T26194] ? io_cache_alloc_new+0x45/0xf0 [ 1168.597390][T26194] ? io_cache_alloc_new+0x45/0xf0 [ 1168.597407][T26194] io_cache_alloc_new+0x45/0xf0 [ 1168.597424][T26194] io_msg_alloc_async+0x1c3/0x3a0 [ 1168.597441][T26194] io_send_zc_prep+0x478/0x9e0 [ 1168.597459][T26194] io_submit_sqes+0xa14/0x28e0 [ 1168.597480][T26194] __do_sys_io_uring_enter+0xd6b/0x1630 [ 1168.597498][T26194] ? __fget_files+0x20e/0x3c0 [ 1168.597513][T26194] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 1168.597530][T26194] ? fput+0x70/0xf0 [ 1168.597541][T26194] ? ksys_write+0x1ac/0x250 [ 1168.597556][T26194] ? __pfx_ksys_write+0x10/0x10 [ 1168.597575][T26194] __do_fast_syscall_32+0xe8/0x680 [ 1168.597595][T26194] do_fast_syscall_32+0x32/0x80 [ 1168.597605][T26194] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1168.597619][T26194] RIP: 0023:0xf7f47579 [ 1168.597629][T26194] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1168.597646][T26194] RSP: 002b:00000000f543655c EFLAGS: 00000296 ORIG_RAX: 00000000000001aa [ 1168.597658][T26194] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000749f [ 1168.597665][T26194] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 1168.597671][T26194] RBP: 00000000fffffef5 R08: 0000000000000000 R09: 0000000000000000 [ 1168.597678][T26194] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1168.597684][T26194] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1168.597698][T26194] [ 1169.057577][T26206] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5244'. [ 1169.289086][T26190] chnl_net:caif_netlink_parms(): no params data found [ 1169.474082][T26190] bridge0: port 1(bridge_slave_0) entered blocking state [ 1169.477412][T26190] bridge0: port 1(bridge_slave_0) entered disabled state [ 1169.480738][T26190] bridge_slave_0: entered allmulticast mode [ 1169.485777][T26190] bridge_slave_0: entered promiscuous mode [ 1169.491445][T26190] bridge0: port 2(bridge_slave_1) entered blocking state [ 1169.494523][T26190] bridge0: port 2(bridge_slave_1) entered disabled state [ 1169.497751][T26190] bridge_slave_1: entered allmulticast mode [ 1169.502326][T26190] bridge_slave_1: entered promiscuous mode [ 1169.525991][T10123] usb usb42-port1: unable to enumerate USB device [ 1169.537830][T26190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1169.549452][T26190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1169.596200][T26190] team0: Port device team_slave_0 added [ 1169.603574][T26190] team0: Port device team_slave_1 added [ 1169.646874][T26190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1169.650026][T26190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1169.659447][T26190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1169.663986][T26190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1169.666529][T26190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1169.674905][T26190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1169.729827][T26190] hsr_slave_0: entered promiscuous mode [ 1169.734266][T26190] hsr_slave_1: entered promiscuous mode [ 1169.737177][T26190] debugfs: 'hsr0' already exists in 'hsr' [ 1169.739135][T26190] Cannot create hsr debugfs directory [ 1169.869641][ T5959] Bluetooth: hci2: unexpected event 0x01 length: 5 > 1 [ 1170.355360][ T5959] Bluetooth: hci4: command tx timeout [ 1170.525372][ T1240] erspan0: left allmulticast mode [ 1170.527493][ T1240] erspan0: left promiscuous mode [ 1170.529412][ T1240] bridge0: port 1(erspan0) entered disabled state [ 1171.052642][ T1240] batman_adv: batadv0: Removing interface: gretap1 [ 1171.275094][ T1240] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1171.278916][ T1240] bond0 (unregistering): Released all slaves [ 1171.354219][T26231] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 1171.356441][T26231] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1171.360520][T26231] vhci_hcd vhci_hcd.0: Device attached [ 1171.487559][ T1240] bond1 (unregistering): Released all slaves [ 1171.625650][ T6032] usb 49-1: new low-speed USB device number 20 using vhci_hcd [ 1171.685768][ T1240] IPVS: stopping backup sync thread 18396 ... [ 1171.855679][T26190] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1171.860856][T26190] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1171.866539][T26190] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1171.871571][T26190] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1171.904633][T26232] vhci_hcd: connection reset by peer [ 1171.908555][T16025] vhci_hcd vhci_hcd.6: stop threads [ 1171.910745][T16025] vhci_hcd vhci_hcd.6: release socket [ 1171.918044][T16025] vhci_hcd vhci_hcd.6: disconnect device [ 1171.985960][ T1240] hsr_slave_0: left promiscuous mode [ 1172.047018][ T1240] team0 (unregistering): Port device batadv1 removed [ 1172.435873][ T5959] Bluetooth: hci4: command tx timeout [ 1172.634385][ T5959] Bluetooth: hci1: unexpected event 0x01 length: 5 > 1 [ 1173.067385][T26190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1173.106993][T26190] 8021q: adding VLAN 0 to HW filter on device team0 [ 1173.122225][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 1173.125149][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1173.149692][T16025] bridge0: port 2(bridge_slave_1) entered blocking state [ 1173.152725][T16025] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1173.318942][T26190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1173.512606][T26190] veth0_vlan: entered promiscuous mode [ 1173.518369][T26190] veth1_vlan: entered promiscuous mode [ 1173.539643][T26190] veth0_macvtap: entered promiscuous mode [ 1173.543918][T26190] veth1_macvtap: entered promiscuous mode [ 1173.554201][T26190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1173.561976][T26190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1173.568396][ T5109] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1173.574574][ T5109] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1173.626783][ T5109] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1173.641083][ T5109] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1173.689280][T16025] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1173.691959][T16025] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1173.709992][T16025] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1173.714442][T16025] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1174.465346][T26297] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 1174.467835][T26297] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1174.475975][T26297] vhci_hcd vhci_hcd.0: Device attached [ 1174.515404][ T5959] Bluetooth: hci4: command tx timeout [ 1174.745265][ T53] usb 51-1: new low-speed USB device number 20 using vhci_hcd [ 1175.122763][T26298] vhci_hcd: connection reset by peer [ 1175.132397][ T1240] vhci_hcd vhci_hcd.7: stop threads [ 1175.132533][T26304] fuse: Unknown parameter '' [ 1175.134263][ T1240] vhci_hcd vhci_hcd.7: release socket [ 1175.138241][ T1240] vhci_hcd vhci_hcd.7: disconnect device [ 1175.335233][T26310] syzkaller0: entered promiscuous mode [ 1175.337970][T26310] syzkaller0: entered allmulticast mode [ 1175.654940][ T40] kauditd_printk_skb: 1370 callbacks suppressed [ 1175.654957][ T40] audit: type=1326 audit(1766924229.885:116025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26312 comm="syz.2.5268" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f47579 code=0x0 [ 1175.902213][T26318] [ 1175.903081][T26318] ====================================================== [ 1175.906515][T26318] WARNING: possible circular locking dependency detected [ 1175.909738][T26318] syzkaller #0 Tainted: G L [ 1175.912413][T26318] ------------------------------------------------------ [ 1175.915560][T26318] syz.7.5269/26318 is trying to acquire lock: [ 1175.917588][T26318] ffff88802aef10d0 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x12d0 [ 1175.920346][T26318] [ 1175.920346][T26318] but task is already holding lock: [ 1175.923760][T26318] ffff888021482468 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x64/0x80 [ 1175.927437][T26318] [ 1175.927437][T26318] which lock already depends on the new lock. [ 1175.927437][T26318] [ 1175.931555][T26318] [ 1175.931555][T26318] the existing dependency chain (in reverse order) is: [ 1175.934782][T26318] [ 1175.934782][T26318] -> #3 (&pipe->mutex){+.+.}-{4:4}: [ 1175.937241][T26318] __mutex_lock+0x1aa/0x1ca0 [ 1175.938972][T26318] anon_pipe_write+0x15d/0x1bd0 [ 1175.940909][T26318] __kernel_write_iter+0x720/0xb10 [ 1175.943193][T26318] __kernel_write+0xf5/0x140 [ 1175.945483][T26318] autofs_notify_daemon+0x4db/0xd60 [ 1175.947669][T26318] autofs_wait+0x10f3/0x1ac0 [ 1175.949540][T26318] autofs_mount_wait+0x132/0x3c0 [ 1175.951471][T26318] autofs_d_automount+0x4b2/0x960 [ 1175.953592][T26318] __traverse_mounts+0x1b9/0x830 [ 1175.955950][T26318] step_into_slowpath+0x772/0xf50 [ 1175.957798][T26318] path_lookupat+0x627/0xc40 [ 1175.959510][T26318] filename_lookup+0x224/0x5f0 [ 1175.961327][T26318] kern_path+0x35/0x50 [ 1175.963108][T26318] lookup_bdev+0xd8/0x280 [ 1175.965245][T26318] resume_store+0x1d6/0x490 [ 1175.967648][T26318] kobj_attr_store+0x58/0x80 [ 1175.969618][T26318] sysfs_kf_write+0xf2/0x150 [ 1175.971362][T26318] kernfs_fop_write_iter+0x3af/0x570 [ 1175.973337][T26318] vfs_write+0x7d3/0x11d0 [ 1175.975475][T26318] ksys_write+0x12a/0x250 [ 1175.977664][T26318] __do_fast_syscall_32+0xe8/0x680 [ 1175.979640][T26318] do_fast_syscall_32+0x32/0x80 [ 1175.981971][T26318] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1175.985115][T26318] [ 1175.985115][T26318] -> #2 (&sbi->pipe_mutex){+.+.}-{4:4}: [ 1175.989484][T26318] __mutex_lock+0x1aa/0x1ca0 [ 1175.991404][T26318] autofs_notify_daemon+0x4a6/0xd60 [ 1175.993710][T26318] autofs_wait+0x10f3/0x1ac0 [ 1175.995926][T26318] autofs_mount_wait+0x132/0x3c0 [ 1175.998477][T26318] autofs_d_automount+0x4b2/0x960 [ 1176.000313][T26318] __traverse_mounts+0x1b9/0x830 [ 1176.002643][T26318] step_into_slowpath+0x772/0xf50 [ 1176.004896][T26318] path_lookupat+0x627/0xc40 [ 1176.006642][T26318] filename_lookup+0x224/0x5f0 [ 1176.008870][T26318] kern_path+0x35/0x50 [ 1176.010878][T26318] lookup_bdev+0xd8/0x280 [ 1176.012904][T26318] resume_store+0x1d6/0x490 [ 1176.015067][T26318] kobj_attr_store+0x58/0x80 [ 1176.017290][T26318] sysfs_kf_write+0xf2/0x150 [ 1176.019222][T26318] kernfs_fop_write_iter+0x3af/0x570 [ 1176.021256][T26318] vfs_write+0x7d3/0x11d0 [ 1176.023251][T26318] ksys_write+0x12a/0x250 [ 1176.025093][T26318] __do_fast_syscall_32+0xe8/0x680 [ 1176.027127][T26318] do_fast_syscall_32+0x32/0x80 [ 1176.029475][T26318] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1176.032507][T26318] [ 1176.032507][T26318] -> #1 (&of->mutex){+.+.}-{4:4}: [ 1176.035673][T26318] __mutex_lock+0x1aa/0x1ca0 [ 1176.037946][T26318] kernfs_seq_start+0x4f/0x2a0 [ 1176.040231][T26318] seq_read_iter+0x2c1/0x12d0 [ 1176.042598][T26318] kernfs_fop_read_iter+0x46c/0x610 [ 1176.045179][T26318] copy_splice_read+0x618/0xc20 [ 1176.047545][T26318] do_splice_read+0x285/0x370 [ 1176.049552][T26318] splice_direct_to_actor+0x2a1/0xa30 [ 1176.052171][T26318] do_splice_direct+0x174/0x240 [ 1176.055250][T26318] do_sendfile+0xb06/0xe50 [ 1176.057615][T26318] __ia32_compat_sys_sendfile+0x1e5/0x220 [ 1176.060311][T26318] __do_fast_syscall_32+0xe8/0x680 [ 1176.062831][T26318] do_fast_syscall_32+0x32/0x80 [ 1176.065205][T26318] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1176.068169][T26318] [ 1176.068169][T26318] -> #0 (&p->lock){+.+.}-{4:4}: [ 1176.070684][T26318] __lock_acquire+0x1669/0x2890 [ 1176.072501][T26318] lock_acquire+0x179/0x330 [ 1176.074337][T26318] __mutex_lock+0x1aa/0x1ca0 [ 1176.076593][T26318] seq_read_iter+0xe1/0x12d0 [ 1176.078812][T26318] kernfs_fop_read_iter+0x46c/0x610 [ 1176.081316][T26318] copy_splice_read+0x618/0xc20 [ 1176.083054][T26318] do_splice_read+0x285/0x370 [ 1176.084756][T26318] splice_file_to_pipe+0x109/0x120 [ 1176.086758][T26318] do_sendfile+0x400/0xe50 [ 1176.088415][T26318] __ia32_compat_sys_sendfile+0x1e5/0x220 [ 1176.090433][T26318] __do_fast_syscall_32+0xe8/0x680 [ 1176.092301][T26318] do_fast_syscall_32+0x32/0x80 [ 1176.094041][T26318] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1176.096245][T26318] [ 1176.096245][T26318] other info that might help us debug this: [ 1176.096245][T26318] [ 1176.099835][T26318] Chain exists of: [ 1176.099835][T26318] &p->lock --> &sbi->pipe_mutex --> &pipe->mutex [ 1176.099835][T26318] [ 1176.103901][T26318] Possible unsafe locking scenario: [ 1176.103901][T26318] [ 1176.106479][T26318] CPU0 CPU1 [ 1176.108324][T26318] ---- ---- [ 1176.110103][T26318] lock(&pipe->mutex); [ 1176.111521][T26318] lock(&sbi->pipe_mutex); [ 1176.113805][T26318] lock(&pipe->mutex); [ 1176.115902][T26318] lock(&p->lock); [ 1176.117168][T26318] [ 1176.117168][T26318] *** DEADLOCK *** [ 1176.117168][T26318] [ 1176.120782][T26318] 1 lock held by syz.7.5269/26318: [ 1176.122466][T26318] #0: ffff888021482468 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x64/0x80 [ 1176.125504][T26318] [ 1176.125504][T26318] stack backtrace: [ 1176.127419][T26318] CPU: 1 UID: 0 PID: 26318 Comm: syz.7.5269 Tainted: G L syzkaller #0 PREEMPT(full) [ 1176.127437][T26318] Tainted: [L]=SOFTLOCKUP [ 1176.127441][T26318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1176.127448][T26318] Call Trace: [ 1176.127454][T26318] [ 1176.127459][T26318] dump_stack_lvl+0x116/0x1f0 [ 1176.127480][T26318] print_circular_bug+0x275/0x340 [ 1176.127500][T26318] check_noncircular+0x146/0x160 [ 1176.127520][T26318] __lock_acquire+0x1669/0x2890 [ 1176.127531][T26318] ? mark_held_locks+0x49/0x80 [ 1176.127543][T26318] lock_acquire+0x179/0x330 [ 1176.127554][T26318] ? seq_read_iter+0xe1/0x12d0 [ 1176.127569][T26318] ? __pfx___might_resched+0x10/0x10 [ 1176.127587][T26318] __mutex_lock+0x1aa/0x1ca0 [ 1176.127605][T26318] ? seq_read_iter+0xe1/0x12d0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1176.127619][T26318] ? do_sendfile+0x400/0xe50 [ 1176.127633][T26318] ? __do_fast_syscall_32+0xe8/0x680 [ 1176.127650][T26318] ? do_fast_syscall_32+0x32/0x80 [ 1176.127659][T26318] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1176.127673][T26318] ? seq_read_iter+0xe1/0x12d0 [ 1176.127688][T26318] ? __pfx___mutex_lock+0x10/0x10 [ 1176.127707][T26318] ? alloc_pages_bulk_noprof+0xac5/0x1410 [ 1176.127722][T26318] ? seq_read_iter+0xe1/0x12d0 [ 1176.127736][T26318] seq_read_iter+0xe1/0x12d0 [ 1176.127750][T26318] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1176.127765][T26318] kernfs_fop_read_iter+0x46c/0x610 [ 1176.127784][T26318] copy_splice_read+0x618/0xc20 [ 1176.127801][T26318] ? __pfx_aa_file_perm+0x10/0x10 [ 1176.127817][T26318] ? __pfx_copy_splice_read+0x10/0x10 [ 1176.127835][T26318] ? __fget_files+0x204/0x3c0 [ 1176.127851][T26318] ? __pfx_copy_splice_read+0x10/0x10 [ 1176.127866][T26318] do_splice_read+0x285/0x370 [ 1176.127882][T26318] splice_file_to_pipe+0x109/0x120 [ 1176.127900][T26318] do_sendfile+0x400/0xe50 [ 1176.127915][T26318] ? __pfx_do_sendfile+0x10/0x10 [ 1176.127930][T26318] ? __pfx___seccomp_filter+0x10/0x10 [ 1176.127945][T26318] __ia32_compat_sys_sendfile+0x1e5/0x220 [ 1176.127956][T26318] ? xfd_validate_state+0x61/0x180 [ 1176.127967][T26318] ? __pfx___ia32_compat_sys_sendfile+0x10/0x10 [ 1176.127979][T26318] ? __secure_computing+0x21c/0x320 [ 1176.127993][T26318] __do_fast_syscall_32+0xe8/0x680 [ 1176.128011][T26318] do_fast_syscall_32+0x32/0x80 [ 1176.128021][T26318] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1176.128035][T26318] RIP: 0023:0xf7fd6579 [ 1176.128045][T26318] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1176.128057][T26318] RSP: 002b:00000000f54c655c EFLAGS: 00000296 ORIG_RAX: 00000000000000bb [ 1176.128069][T26318] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000004 [ 1176.128076][T26318] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000000 [ 1176.128082][T26318] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1176.128089][T26318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1176.128095][T26318] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1176.128104][T26318] [ 1176.595240][ T5959] Bluetooth: hci4: command tx timeout [ 1176.754690][ T6032] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 1178.152758][T24888] smc: removing ib device syz1 [ 1178.987051][ T1240] bridge_slave_1: left allmulticast mode [ 1178.989113][ T1240] bridge_slave_1: left promiscuous mode [ 1178.991209][ T1240] bridge0: port 2(bridge_slave_1) entered disabled state [ 1178.994385][ T1240] bridge_slave_0: left allmulticast mode [ 1178.996773][ T1240] bridge_slave_0: left promiscuous mode [ 1178.998872][ T1240] bridge0: port 1(bridge_slave_0) entered disabled state [ 1179.090528][ T1240] batman_adv: batadv0: Removing interface: gretap1 [ 1179.267075][ T1240] bond0 (unregistering): left promiscuous mode [ 1179.269693][ T1240] bond_slave_0: left promiscuous mode [ 1179.272019][ T1240] bond_slave_1: left promiscuous mode [ 1179.274295][ T1240] mac80211_hwsim hwsim38 wlan1: left promiscuous mode [ 1179.278069][ T1240] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1179.282411][ T1240] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1179.287778][ T1240] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1179.293206][ T1240] bond0 (unregistering): Released all slaves [ 1179.410211][ T1240] bond1 (unregistering): (slave dummy0): Releasing backup interface [ 1179.413928][ T1240] bond1 (unregistering): Released all slaves [ 1179.422299][ T1240] bond2 (unregistering): (slave bond3): Releasing backup interface [ 1179.426438][ T1240] bond2 (unregistering): Released all slaves [ 1179.552652][ T1240] bond3 (unregistering): Released all slaves [ 1179.681361][ T1240] bond2 (unregistering): (slave geneve3): Releasing active interface [ 1179.848907][ T1240] bond0 (unregistering): Released all slaves [ 1179.852243][ T1240] bond1 (unregistering): Released all slaves [ 1179.875231][ T53] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 1179.949242][ T1240] bond2 (unregistering): Released all slaves [ 1180.039281][ T1240] bond3 (unregistering): Released all slaves [ 1180.144094][ T1240] tipc: Disabling bearer [ 1180.147901][ T1240] tipc: Left network mode [ 1180.197118][ T1240] IPVS: stopping backup sync thread 24814 ... [ 1180.647660][ T1240] batadv0: left promiscuous mode [ 1180.651380][ T1240] hsr_slave_0: left promiscuous mode [ 1180.653694][ T1240] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1180.656420][ T1240] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1180.660948][ T1240] hsr_slave_0: left promiscuous mode [ 1180.663026][ T1240] hsr_slave_1: left promiscuous mode [ 1180.678500][ T1240] team0 (unregistering): Port device batadv2 removed [ 1180.694345][ T1240] team0 (unregistering): Port device batadv1 removed [ 1180.957690][ T1240] team0 (unregistering): Port device team_slave_1 removed [ 1180.987461][ T1240] team0 (unregistering): Port device team_slave_0 removed [ 1181.234611][ T1240] team0 (unregistering): Port device batadv1 removed [ 1182.700058][ T1240] IPVS: stop unused estimator thread 0... [ 1182.703456][ T1240] IPVS: stop unused estimator thread 0... [ 1182.774209][ T1240] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1182.850005][ T1240] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1182.888811][ T1240] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1182.928526][ T1240] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1182.998856][ T1240] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1183.002757][ T1240] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1183.059198][ T1240] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1183.063511][ T1240] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1183.119680][ T1240] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1183.124067][ T1240] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1183.180592][ T1240] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1183.184765][ T1240] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1183.273775][ T1240] bridge_slave_1: left allmulticast mode [ 1183.276281][ T1240] bridge_slave_1: left promiscuous mode [ 1183.278731][ T1240] bridge0: port 2(bridge_slave_1) entered disabled state [ 1183.283297][ T1240] bridge_slave_0: left allmulticast mode [ 1183.285928][ T1240] bridge_slave_0: left promiscuous mode [ 1183.288505][ T1240] bridge0: port 1(bridge_slave_0) entered disabled state [ 1183.293249][ T1240] erspan0: left allmulticast mode [ 1183.295017][ T1240] erspan0: left promiscuous mode [ 1183.296897][ T1240] bridge0: port 3(erspan0) entered disabled state [ 1183.299857][ T1240] bridge_slave_1: left allmulticast mode [ 1183.301750][ T1240] bridge_slave_1: left promiscuous mode [ 1183.303602][ T1240] bridge0: port 2(bridge_slave_1) entered disabled state [ 1183.306741][ T1240] bridge_slave_0: left allmulticast mode [ 1183.308759][ T1240] bridge_slave_0: left promiscuous mode [ 1183.310650][ T1240] bridge0: port 1(bridge_slave_0) entered disabled state [ 1183.447673][ T1240] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1183.451450][ T1240] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1183.454877][ T1240] bond0 (unregistering): Released all slaves [ 1183.718155][ T1240] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1183.721802][ T1240] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1183.725748][ T1240] bond0 (unregistering): Released all slaves [ 1184.164127][ T1240] hsr_slave_0: left promiscuous mode [ 1184.167091][ T1240] hsr_slave_1: left promiscuous mode [ 1184.169976][ T1240] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1184.173273][ T1240] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1184.177020][ T1240] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1184.180248][ T1240] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1184.187243][ T1240] hsr_slave_0: left promiscuous mode [ 1184.190058][ T1240] hsr_slave_1: left promiscuous mode [ 1184.192785][ T1240] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1184.196301][ T1240] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1184.199312][ T1240] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1184.202362][ T1240] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1184.209368][ T1240] veth1_macvtap: left promiscuous mode [ 1184.211759][ T1240] veth0_macvtap: left promiscuous mode [ 1184.214295][ T1240] veth1_vlan: left promiscuous mode [ 1184.216836][ T1240] veth0_vlan: left promiscuous mode [ 1184.219613][ T1240] veth1_vlan: left allmulticast mode [ 1184.222096][ T1240] veth1_macvtap: left promiscuous mode [ 1184.224571][ T1240] veth0_macvtap: left promiscuous mode [ 1184.227125][ T1240] veth1_vlan: left promiscuous mode [ 1184.229211][ T1240] veth0_vlan: left promiscuous mode [ 1184.405589][ T1240] team0 (unregistering): Port device team_slave_1 removed [ 1184.432696][ T1240] team0 (unregistering): Port device team_slave_0 removed [ 1184.611726][ T1240] team0 (unregistering): Port device team_slave_1 removed [ 1184.627972][ T1240] team0 (unregistering): Port device team_slave_0 removed