last executing test programs: 21m27.18280322s ago: executing program 32 (id=2546): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffffd) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x0, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000380)={0x1, 0x1, 0x0, &(0x7f0000000100)=""/233, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/88, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)={0x2, 0x0, [{0xeeef0004, 0x1a, &(0x7f0000000200)=""/26}, {0x2, 0x9d, &(0x7f0000000600)=""/157}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, 0x0) ioctl$VHOST_VDPA_SET_STATUS(r1, 0x4008af25, &(0x7f00000000c0)) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0xc841) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$packet(0x11, 0x3, 0x300) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x4e24, 0x1, @loopback, 0x9}}, 0x0, 0x0, 0x32, 0x0, "aae37be4753f0a28060a80cdd60fe31d6ba25cec257a3a485a338d600a8402d23df4854ed4cf29109f0e30e8d115e434392db157494620680fffb8cb989ab0cfc17eb88225e0fb0a062dd7a81eb098d3"}, 0xd8) 17m52.752829437s ago: executing program 0 (id=3526): prctl$PR_SET_KEEPCAPS(0x59616d61, 0x1) ptrace(0x10, 0x1) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) syz_open_dev$sndmidi(&(0x7f0000000200), 0x5, 0x80000) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000001c0)=0x2) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x50, 0xff, 0x0, 0xc}]}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r3 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f0000000380)={0xc, 0x8, 0x144, {&(0x7f0000001140)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x1, @empty, 0x100009}, {0xa, 0x4e22, 0xfffffffc, @mcast1}, r4, 0x3}}, 0x48) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r6, r7, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17m51.734694975s ago: executing program 0 (id=3527): ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x12}) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000080008d804dd0000000000000109022400010000a008090400fe01030001000921fffffd0122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40402) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f00000000c0)={0x1, 0xfd, 0x4, 0x0}) 17m50.261110629s ago: executing program 0 (id=3531): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1003, 0x1, 0x4}, 0x38) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x0, 0xe40, 0xfffffe6d, &(0x7f0000000100)="5c71f91b05c413550230b4c817a628", 0x0, 0x1, 0x0, 0x302, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x48) (fail_nth: 4) 17m50.161409797s ago: executing program 0 (id=3532): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) sendfile64(r0, r0, &(0x7f00000001c0)=0x3ff, 0x8) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000100)={0x60, 0x1, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x48}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x4080}, 0x8000) fsopen(&(0x7f0000000300)='debugfs\x00', 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) r5 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f0000000340)={@multicast1, @broadcast}, &(0x7f0000000380)=0xc) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x1006, 0x1, 0x72, 0x3, 0x2, 0x3, 0x401, 0x8000000000000000, 0x5, 0x5, 0x8, 0xefffffffffffffff, 0x2000000000000000, 0x5, 0x8d], 0x4, 0x284a93}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001000050428bd7000fcdbdf2500200000", @ANYRES32=0x0, @ANYBLOB="4000000004000000240012800b0001006970766c616e0000140002800600010000000000060001000200000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9], 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @multicast1}, @in={0x2, 0x4e21, @rand_addr=0x64010100}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e24, @local}], 0x40) ioctl$KVM_RUN(r7, 0xae80, 0x0) 17m49.888004908s ago: executing program 0 (id=3533): syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x24002000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfbfffffd, 0x0, 0x0, 0x0, 0x7fc}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0xc, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r4, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x1092, &(0x7f0000001640)=ANY=[], 0x0) 17m49.318660745s ago: executing program 0 (id=3534): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182) r2 = syz_io_uring_complete(0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) listen(0xffffffffffffffff, 0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(0x0, 0x0, 0x2) socket$inet_udp(0x2, 0x2, 0x0) unshare(0x8020000) r4 = semget$private(0x0, 0x4000, 0x0) semctl$GETALL(r4, 0x0, 0xd, &(0x7f00000002c0)=""/203) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sysinfo(&(0x7f0000000440)=""/108) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x40, r6, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xa02}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xd}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000140)={0x270, r6, 0x8, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x52}}}}, [@NL80211_ATTR_TX_RATES={0x250, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x1, 0xf, 0x5, 0xf, 0x7, 0x3173, 0x1000]}}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xff80, 0x5, 0x10, 0x7, 0x7, 0x9, 0x9]}}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfa9f, 0x7ff, 0xfe04, 0x0, 0x81, 0x5d, 0xb1, 0x5]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x5]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x0, 0xf3, 0x101, 0x7ead, 0x9, 0x17, 0x7]}}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x4, 0x6}, {0x3, 0x5}, {0x2, 0x7}, {0x7}, {0x0, 0x4}, {0x6, 0x4}, {0x4, 0x3}, {0x2, 0x6}, {0x3, 0x1}]}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x2, 0x2}, {0x7, 0x1}, {0x6, 0x3}, {0x1, 0x3}, {0x0, 0x5}, {0x3, 0x7}, {0x7, 0x7}, {0x1, 0xa}, {0x0, 0x9}, {0x3, 0x9}, {0x4, 0x6}, {0x4, 0x5}, {0x1, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffc, 0x7, 0x4, 0x1, 0x3, 0x1, 0x9d, 0x8]}}]}, @NL80211_BAND_2GHZ={0x88, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x1, 0x6c, 0x4, 0x3, 0xb, 0x4, 0x30]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x18, 0x60, 0x18, 0x1, 0x5, 0x31, 0x4, 0xb, 0x6c, 0x16, 0x5, 0x4, 0xc, 0x16, 0x1b, 0x1b, 0x1, 0x5]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x9, 0x1c6, 0x4, 0x4, 0x8, 0x3265, 0x6]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x3e, 0x4, 0x1b, 0x2, 0xb, 0x3, 0x6, 0x6, 0x16, 0x4, 0x16, 0x18, 0x24]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x1, 0x4, 0x9, 0xd, 0x400, 0x2, 0x100]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x400, 0x69d9, 0x3, 0x8, 0x923a, 0x4, 0x7ff, 0x8]}}]}, @NL80211_BAND_60GHZ={0xbc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x43, 0x2, [{0x1, 0x1}, {0x6, 0x3}, {0x7, 0x3}, {0x0, 0x7}, {0x4, 0xa}, {0x2, 0x9}, {0x0, 0x3}, {0x7, 0x6}, {0x0, 0x15}, {0x2, 0x3}, {0x0, 0x6}, {0x7, 0x4}, {0x5, 0x9}, {0x4, 0x1}, {0x1, 0x2}, {0x1}, {0x5, 0x5}, {0x4, 0x7}, {0x6, 0x6}, {0x3, 0x3}, {0x6, 0x5}, {0x5, 0x6}, {0x5, 0x8}, {0x3, 0x2}, {0x2, 0x7}, {0x1, 0x5}, {0x4, 0x7}, {0x1, 0x7}, {0x7}, {0x1, 0x4}, {0x0, 0xa}, {0x7, 0xa}, {0x4, 0x4}, {0x6, 0x8}, {0x2, 0x3}, {0x4, 0x9}, {0x6, 0x9}, {0x0, 0x9}, {0x5, 0xa}, {0x5, 0x7}, {0x3, 0x6}, {0x1, 0x8}, {0x6, 0x2}, {0x4, 0x5}, {0x6, 0x2}, {0x1, 0xa}, {0x1, 0x7}, {0x4, 0x1}, {0x5, 0x1}, {0x0, 0x8}, {0x0, 0xa}, {0x6, 0x3}, {0x4}, {0x5}, {0x0, 0x7}, {0x1, 0x4}, {0x6, 0x2}, {0x1, 0x4}, {0x6, 0x2}, {0x0, 0x9}, {0x2, 0x9}, {0x5, 0x9}, {0x5, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x0, 0x60]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x5, 0x3, 0x5, 0x16, 0x1, 0x36, 0x18, 0x6c, 0x6, 0x6, 0x4, 0x48, 0x1b, 0x24, 0x4, 0x36, 0x6, 0x1b]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x8943, 0x70, 0x9, 0x80, 0x6, 0x6, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x9, 0xc, 0x12, 0x24, 0x4, 0x6c, 0xb, 0x3, 0x48, 0x12, 0x60, 0x0, 0x16, 0x2, 0x4, 0x9, 0xc, 0xb]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ff, 0x11bc, 0x8, 0xe5c2, 0x8, 0x8, 0x7, 0xc2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x370, 0x7f, 0x2, 0x9b9, 0x37d, 0x3, 0x2, 0xb1aa]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb, 0x3ff, 0x1, 0x2, 0x4, 0xffbb, 0xfffe, 0x70]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, 0x270}, 0x1, 0x0, 0x0, 0x8010}, 0x4000845) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) ioctl$USBDEVFS_BULK(r0, 0x5523, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) 17m49.120257515s ago: executing program 33 (id=3486): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$snapshot(0xffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r1, 0x3304) (async) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x8000) mount(&(0x7f0000000580)=@nullb, &(0x7f0000000100)='./file0\x00', &(0x7f0000000380)='xfs\x00', 0x81001f, &(0x7f0000000980)='norecovery') (async) r2 = openat$sysfs(0xffffff9c, &(0x7f0000000280)='/sys/power/freeze_filesystems', 0x101801, 0x80) writev(r2, &(0x7f0000000740)=[{&(0x7f0000000600)="6225d69519", 0x5}], 0x1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) (async) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0xb, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, 0x0, 0x0) (async) openat$binderfs(0xffffff9c, &(0x7f0000000200)='./binderfs2/custom0\x00', 0x2, 0x0) (async) close_range(r3, 0xffffffffffffffff, 0x200000000000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) (async) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) r6 = openat$binder_debug(0xffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1f, 0x10, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYBLOB="690f5bcdc3d0e755b6c7568cbb0ea03fe3cd2df99146db5f90d506a4e524e0549b7d3920f45d3c86b84abbd248fa390f2b48fa3ca8a58429d432dd579852e52499cddff7cc551f95758af14e3e9bff3195a1f390fab4b501a7efa8746f0df3962c5a715e2c295f81b6c68217983e20b6c16b8f701c6e768b0403d852f87ba52f45c06c5a22775956b803d567752dcef5e3c8dd19757ef6ae354705727a4ea06277d7537247e936764949cce734afe448332f40d811571295c2dd08ce48e3004c", @ANYRES8=r5, @ANYRESDEC=r1, @ANYRES16=r6], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) (async) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f0000000640)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r8, 0x124, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000001e40)}}, 0x10) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x4c) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) lsetxattr$system_posix_acl(&(0x7f0000002540)='./file0\x00', &(0x7f0000002580)='system.posix_acl_default\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="0200000001000200000000000400020000000000100001000000000020"], 0x24, 0x3) (async) lgetxattr(&(0x7f0000000580)='./file0\x00', &(0x7f0000002880)=@known='system.posix_acl_default\x00', 0x0, 0x0) r9 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010003b1f67337e1500"/24, @ANYRES32=0x0, @ANYBLOB="0304000000000000140012800a000100767863616e0000000400028008001c00", @ANYRES32=r9, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 17m37.671638649s ago: executing program 34 (id=3523): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x206, 0xa0182) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) ioctl$USBDEVFS_BULK(r1, 0x5523, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d80672e65a6a0a72e19c2b60bd6276fd8bb6366e9d1ed9a60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d10d1f600"}) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x42, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045510, &(0x7f0000000040)={0x0, 0x200000}) fanotify_init(0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000380)={'gretap0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x20, 0x7800, 0x0, 0x9, {{0x25, 0x4, 0x3, 0x5, 0x94, 0x68, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}, @remote, {[@generic={0x89, 0x11, "b23a90a397381515254cebde5285c7"}, @rr={0x7, 0x13, 0xe8, [@dev={0xac, 0x14, 0x14, 0x3e}, @rand_addr=0x64010102, @rand_addr=0x64010102, @remote]}, @lsrr={0x83, 0x7, 0xf1, [@local]}, @rr={0x7, 0x1b, 0xe8, [@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @multicast1, @empty, @remote, @loopback]}, @timestamp_addr={0x44, 0x1c, 0xf5, 0x1, 0x1, [{@remote, 0x800}, {@remote}, {@multicast2, 0x6}]}, @timestamp={0x44, 0x8, 0xb, 0x0, 0xa, [0x5]}, @rr={0x7, 0x13, 0x35, [@remote, @multicast2, @rand_addr=0x64010100, @rand_addr=0x64010101]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f00000003c0)={'ip6gre0\x00', 0x0, 0x4, 0x9, 0x5, 0x4, 0x8, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x20, 0x7830, 0x2, 0x21}}) r8 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x74, 0x2c, 0xf3f, 0x70bd2b, 0x25dfdbbd, {0x0, 0x0, 0x0, r9, {0xc, 0xc}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_EMATCHES={0x40, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x1}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x86, 0x1}, {0x5, 0x7}}}]}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0xe0, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0xc0}, {0x8000, 0x1, 0x1}}}]}}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) getpeername$packet(r2, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000004c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000580)={'ip6tnl0\x00', &(0x7f0000000500)={'syztnl2\x00', 0x0, 0x29, 0xdd, 0x10, 0x7, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7, 0x40, 0x9, 0x5}}) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r14, 0x31, 0x455965fb809f3ff7}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_PROXYARP={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000000780)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x17c, 0x0, 0x32, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x80}, 0x840) ioctl$KVM_ASSIGN_SET_MSIX_NR(0xffffffffffffffff, 0x4008ae73, &(0x7f0000000000)={0x7, 0x7ff}) 17m32.991938668s ago: executing program 35 (id=3534): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182) r2 = syz_io_uring_complete(0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) listen(0xffffffffffffffff, 0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(0x0, 0x0, 0x2) socket$inet_udp(0x2, 0x2, 0x0) unshare(0x8020000) r4 = semget$private(0x0, 0x4000, 0x0) semctl$GETALL(r4, 0x0, 0xd, &(0x7f00000002c0)=""/203) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sysinfo(&(0x7f0000000440)=""/108) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x40, r6, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xa02}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xd}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000140)={0x270, r6, 0x8, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x52}}}}, [@NL80211_ATTR_TX_RATES={0x250, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x1, 0xf, 0x5, 0xf, 0x7, 0x3173, 0x1000]}}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xff80, 0x5, 0x10, 0x7, 0x7, 0x9, 0x9]}}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfa9f, 0x7ff, 0xfe04, 0x0, 0x81, 0x5d, 0xb1, 0x5]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x5]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x0, 0xf3, 0x101, 0x7ead, 0x9, 0x17, 0x7]}}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x4, 0x6}, {0x3, 0x5}, {0x2, 0x7}, {0x7}, {0x0, 0x4}, {0x6, 0x4}, {0x4, 0x3}, {0x2, 0x6}, {0x3, 0x1}]}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x2, 0x2}, {0x7, 0x1}, {0x6, 0x3}, {0x1, 0x3}, {0x0, 0x5}, {0x3, 0x7}, {0x7, 0x7}, {0x1, 0xa}, {0x0, 0x9}, {0x3, 0x9}, {0x4, 0x6}, {0x4, 0x5}, {0x1, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffc, 0x7, 0x4, 0x1, 0x3, 0x1, 0x9d, 0x8]}}]}, @NL80211_BAND_2GHZ={0x88, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x1, 0x6c, 0x4, 0x3, 0xb, 0x4, 0x30]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x18, 0x60, 0x18, 0x1, 0x5, 0x31, 0x4, 0xb, 0x6c, 0x16, 0x5, 0x4, 0xc, 0x16, 0x1b, 0x1b, 0x1, 0x5]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x9, 0x1c6, 0x4, 0x4, 0x8, 0x3265, 0x6]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x3e, 0x4, 0x1b, 0x2, 0xb, 0x3, 0x6, 0x6, 0x16, 0x4, 0x16, 0x18, 0x24]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x1, 0x4, 0x9, 0xd, 0x400, 0x2, 0x100]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x400, 0x69d9, 0x3, 0x8, 0x923a, 0x4, 0x7ff, 0x8]}}]}, @NL80211_BAND_60GHZ={0xbc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x43, 0x2, [{0x1, 0x1}, {0x6, 0x3}, {0x7, 0x3}, {0x0, 0x7}, {0x4, 0xa}, {0x2, 0x9}, {0x0, 0x3}, {0x7, 0x6}, {0x0, 0x15}, {0x2, 0x3}, {0x0, 0x6}, {0x7, 0x4}, {0x5, 0x9}, {0x4, 0x1}, {0x1, 0x2}, {0x1}, {0x5, 0x5}, {0x4, 0x7}, {0x6, 0x6}, {0x3, 0x3}, {0x6, 0x5}, {0x5, 0x6}, {0x5, 0x8}, {0x3, 0x2}, {0x2, 0x7}, {0x1, 0x5}, {0x4, 0x7}, {0x1, 0x7}, {0x7}, {0x1, 0x4}, {0x0, 0xa}, {0x7, 0xa}, {0x4, 0x4}, {0x6, 0x8}, {0x2, 0x3}, {0x4, 0x9}, {0x6, 0x9}, {0x0, 0x9}, {0x5, 0xa}, {0x5, 0x7}, {0x3, 0x6}, {0x1, 0x8}, {0x6, 0x2}, {0x4, 0x5}, {0x6, 0x2}, {0x1, 0xa}, {0x1, 0x7}, {0x4, 0x1}, {0x5, 0x1}, {0x0, 0x8}, {0x0, 0xa}, {0x6, 0x3}, {0x4}, {0x5}, {0x0, 0x7}, {0x1, 0x4}, {0x6, 0x2}, {0x1, 0x4}, {0x6, 0x2}, {0x0, 0x9}, {0x2, 0x9}, {0x5, 0x9}, {0x5, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x0, 0x60]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x5, 0x3, 0x5, 0x16, 0x1, 0x36, 0x18, 0x6c, 0x6, 0x6, 0x4, 0x48, 0x1b, 0x24, 0x4, 0x36, 0x6, 0x1b]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x8943, 0x70, 0x9, 0x80, 0x6, 0x6, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x9, 0xc, 0x12, 0x24, 0x4, 0x6c, 0xb, 0x3, 0x48, 0x12, 0x60, 0x0, 0x16, 0x2, 0x4, 0x9, 0xc, 0xb]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ff, 0x11bc, 0x8, 0xe5c2, 0x8, 0x8, 0x7, 0xc2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x370, 0x7f, 0x2, 0x9b9, 0x37d, 0x3, 0x2, 0xb1aa]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb, 0x3ff, 0x1, 0x2, 0x4, 0xffbb, 0xfffe, 0x70]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, 0x270}, 0x1, 0x0, 0x0, 0x8010}, 0x4000845) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) ioctl$USBDEVFS_BULK(r0, 0x5523, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) 17m23.278950346s ago: executing program 7 (id=3600): epoll_create1(0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x5}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x9c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000140)='\b', 0x1}], 0x1}}], 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000003c0)={0x0, 0xff00, 0x100}, 0x8) 17m23.22097843s ago: executing program 7 (id=3601): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) setsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000080)=0x6, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0008ecb0cb9577", @ANYRES16=r0, @ANYBLOB="010040000000000300", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018"], 0x4c}, 0x1, 0x0, 0x0, 0x40010}, 0x10004010) 17m23.136942647s ago: executing program 7 (id=3603): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000140)='\b', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000003c0)={0x0, 0xff00, 0x100}, 0x8) 17m23.135910102s ago: executing program 7 (id=3605): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpgid(0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000140)={0x2, r1}) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000000)={'bond0\x00', @random="010011201000"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_usb_disconnect(0xffffffffffffffff) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r5, 0x5b02, 0x0) syz_usb_connect(0x2, 0x46, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r2, @ANYRESOCT=r3, @ANYBLOB="d4c45e750a3646b21e6f3869f8d361901c94855f883daad71d8e105b30e7641524446456b431cd1f43a1dbdfc91b632862325b045fa5b9a1526638eddfa45a671dd10313"], 0x0) syz_usb_connect(0x2, 0x36, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r5, 0x0, 0x0) syz_usb_disconnect(r2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CAP_HYPERV_SYNIC(r8, 0x4068aea3, &(0x7f0000000280)) ioctl$KVM_SET_FPU(r8, 0x41a0ae8d, &(0x7f0000000300)={'\x00', 0x8, 0x1, 0x9, 0x0, 0x3, 0x25000, 0x8080000, '\x00', 0xc3ed}) 17m19.84295514s ago: executing program 7 (id=3615): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000070a010400000000000000000a0000030900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4004) openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) getpgrp(0xffffffffffffffff) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x6, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r3, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x7, @empty, 0x3aa7}, @ib={0x1b, 0xffff, 0x0, {"fe80000000000000546dd1caff00"}, 0x0, 0xfffffffffffffffc, 0x6}}}, 0x118) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r4) sendmsg$NFC_CMD_VENDOR(r4, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20008010) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$vsock_stream(0x28, 0x1, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000340), 0x2440, 0x0) ioctl$PTP_EXTTS_REQUEST2(r5, 0xc4c03d12, &(0x7f0000000040)={0x5, 0x5}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELSET={0x48, 0xb, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x35}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x27}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x70}, 0x1, 0x0, 0x0, 0x8001}, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x1000000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0xf}, 0x0, 0x0) 17m18.694132418s ago: executing program 7 (id=3622): symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x190) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r0, 0x103, 0x1) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x40702) ioctl$USBDEVFS_CONNECTINFO(r1, 0x80045505, &(0x7f0000002a40)) 17m2.432634105s ago: executing program 36 (id=3622): symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x190) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r0, 0x103, 0x1) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x40702) ioctl$USBDEVFS_CONNECTINFO(r1, 0x80045505, &(0x7f0000002a40)) 12m6.711156895s ago: executing program 3 (id=4449): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0xffffffff, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x278, &(0x7f0000000340)={0x0, 0x0, 0x13580}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000000)) syz_usbip_server_init(0x6) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req={0x3, 0x6, 0x7}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000002780)={0x0, @in={{0x2, 0x4e24, @empty}}, 0xfff7, 0x3}, 0x88) write(r5, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) syz_open_dev$tty20(0xc, 0x4, 0x1) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/163, 0xa3}, {&(0x7f0000000480)=""/109, 0x6d}, {&(0x7f0000000600)=""/227, 0xe3}, {&(0x7f0000000180)}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/97, 0x61}], 0x7) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r0, 0x0, 0x5004) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, 0x0, 0x0) 12m5.000091813s ago: executing program 3 (id=4452): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1a, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e76, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0xc}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x880}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x10000001) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rt_sigqueueinfo(r0, 0x37, 0x0) mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) socket$nl_netfilter(0x10, 0x3, 0xc) acct(&(0x7f00000001c0)='./file0\x00') ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0xb, 0x0, 0x0, @pid=r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2804}, 0x20048880) 12m4.070895251s ago: executing program 3 (id=4456): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_rr_get_interval(0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010018030000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000900000000000000000000000900000000000000000000000a02262478fe4ecc6e7083b93dbdc872fffa3668e120269d5877fd64e43ad3d48c82d158d0d9671cc94ec1d41d429a2e4c08d10af2b2bc3f815c59d50a891f56f793f5"], 0x0, 0x96}, 0x28) r0 = openat(0xffffffffffffff9c, 0x0, 0x300000d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@polexpire={0xcc, 0x1b, 0x321, 0x70bd29, 0x25dfdbff, {{{@in=@empty, @in=@private=0xa010101, 0x4e23, 0x8, 0x4e22, 0xfff7, 0x2, 0xa0, 0xa0, 0x89}, {0x0, 0x7fffffffffffffff, 0xa07d, 0xffffffff, 0x6, 0x3, 0x0, 0x9}, {0x4, 0xf8177b30, 0x9, 0x6c62}, 0x3, 0x6e6bb8, 0x2, 0x0, 0x3, 0x3}, 0x5d}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}, @mark={0xc, 0x15, {0x350759, 0x1}}]}, 0xcc}}, 0x0) r4 = socket$inet(0x2, 0xa, 0x262) socket$tipc(0x1e, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r0, 0x2, 0x2, 0x1}, 0x50) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @multicast2}}) r5 = openat$sndseq(0xffffff9c, &(0x7f0000001240), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r5, 0xc0a45320, &(0x7f00000000c0)={{0x80, 0xff}, 'port0\x00', 0x3eb, 0x21e3f, 0x10, 0x0, 0x3, 0x5, 0x400, 0x0, 0xa}) openat$sequencer2(0xffffff9c, &(0x7f0000000280), 0xe0190, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8953, &(0x7f0000000000)={{0x2, 0x4e22, @dev}, {0x0, @multicast}, 0x38, {0x2, 0x2, @broadcast}, 'syz_tun\x00'}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) 12m2.009902454s ago: executing program 3 (id=4462): r0 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000600)={{&(0x7f00004d9000/0x3000)=nil, 0x3000}, 0x1}) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) r1 = openat$btrfs_control(0xffffff9c, &(0x7f0000000280), 0x14400, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x6, 0xc2, &(0x7f0000000680)=""/194, 0x41100, 0x7b, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000037}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="02130000f8dbdf250000000000000000"], 0x10}}, 0x4000050) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x28, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x40010, r0, 0xd0e46000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_POWER(r7, 0x112, 0x9, 0x0, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40046607, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x5, 0x6d}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x1, 0x323b, 0x55}, {@remote, 0x4e27, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000000)=""/91) mount(0x0, 0x0, &(0x7f0000000340)='f2fs\x00', 0x8000, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r8, 0x0, 0x485, 0x0, 0x0) add_key$user(&(0x7f0000000440), 0x0, &(0x7f00000000c0)="ff", 0x1, 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup.net/devices.allow\x00', &(0x7f0000000080), 0x80080a, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYRESHEX=r10, @ANYBLOB=',mcize=0x0000000027f61c0f,\x00', @ANYRES8]) 12m1.061204587s ago: executing program 3 (id=4463): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) futex(0x0, 0x800000000006, 0x0, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000340)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010018030000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000900000000000000000000000900000000000000000000000a02262478fe4ecc6e7083b93dbdc872fffa3668e120269d5877fd64e43ad3d48c82d158d0d9671cc94ec1d41d429a2e4c08d10af2b2bc3f815c59d50a891f56f793f5"], 0x0, 0x96}, 0x28) r0 = openat(0xffffffffffffff9c, 0x0, 0x300000d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@polexpire={0xcc, 0x1b, 0x321, 0x70bd29, 0x25dfdbff, {{{@in=@empty, @in=@private=0xa010101, 0x4e23, 0x8, 0x4e22, 0xfff7, 0x2, 0xa0, 0xa0, 0x89}, {0x0, 0x7fffffffffffffff, 0xa07d, 0xffffffff, 0x6, 0x3, 0x0, 0x9}, {0x4, 0xf8177b30, 0x9, 0x6c62}, 0x3, 0x6e6bb8, 0x2, 0x0, 0x3, 0x3}, 0x5d}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}, @mark={0xc, 0x15, {0x350759, 0x1}}]}, 0xcc}}, 0x0) r4 = socket$inet(0x2, 0xa, 0x262) socket$tipc(0x1e, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r0, 0x2, 0x2, 0x1}, 0x50) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @multicast2}}) r5 = openat$sndseq(0xffffff9c, &(0x7f0000001240), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r5, 0xc0a45320, &(0x7f00000000c0)={{0x80, 0xff}, 'port0\x00', 0x3eb, 0x21e3f, 0x10, 0x0, 0x3, 0x5, 0x400, 0x0, 0xa}) openat$sequencer2(0xffffff9c, &(0x7f0000000280), 0xe0190, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8953, &(0x7f0000000000)={{0x2, 0x4e22, @dev}, {0x0, @multicast}, 0x38, {0x2, 0x2, @broadcast}, 'syz_tun\x00'}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) 11m58.948182616s ago: executing program 3 (id=4471): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000ffffffff00000000fe01000085714c00180000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x46, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setgroups(0x40000000000002e6, &(0x7f0000000140)=[0x0]) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(0xffffffffffffffff, 0x0, 0x0) connect$qrtr(r1, &(0x7f0000000040), 0xc) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) writev(r1, &(0x7f0000000180)=[{0x0}], 0x1) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r5, 0x3) accept4$bt_l2cap(r5, 0x0, 0x0, 0x800) 11m56.956715612s ago: executing program 6 (id=4476): prctl$PR_SET_KEEPCAPS(0x59616d61, 0x1) ptrace(0x10, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000', @ANYBLOB=',group_id', @ANYRESDEC=0x0]) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000001c0)=0x2) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x50, 0xff, 0x0, 0xc}]}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r4 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000380)={0xc, 0x8, 0x144, {&(0x7f0000001140)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x1, @empty, 0x100009}, {0xa, 0x4e22, 0xfffffffc, @mcast1}, r5, 0x3}}, 0x48) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, 0x0, 0x0, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000002000020029bd7000fedbdf251100000008003600", @ANYRES32=r1, @ANYBLOB="0c003b00030000000000000008001100", @ANYRES32, @ANYBLOB="18008e800400768008003400", @ANYRES32, @ANYBLOB="040007940300b770"], 0x48}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) 11m55.81690784s ago: executing program 6 (id=4479): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001800010000000000000000000a00200000000000000000000500140000000000080004", @ANYRES32=0x0, @ANYBLOB="0c000e"], 0x38}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_emit_vhci(&(0x7f0000000540)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x1, 0x2016}}}, 0x7) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8200, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x10040) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x42, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x69, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x14, 0xffffff87}]}}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x20, 0x8, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x8001, 0x400056}]}}}}}}}, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000040)={0xc000003, 0xf, &(0x7f0000000080)=[0x1e, 0x9, 0x2, 0x4, 0x4, 0xffffdffa, 0x2d7b, 0x40000003, 0x5d, 0x5, 0xfffffffa, 0x8, 0x6, 0x880e, 0x5], 0x2, 0x4000007}) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newtfilter={0x64, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{0xfff9, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x0, 0xc0, 0x2}}}, @TCA_EM_META_RVALUE={0x5, 0x3, [@TCF_META_TYPE_VAR="cf"]}]}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 11m52.736229863s ago: executing program 6 (id=4485): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0xc00, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) mkdirat(r3, &(0x7f00000001c0)='./file7\x00', 0x1ac) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0081e7", @ANYRESOCT=r0, @ANYRES8=r0], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$binder_debug(0xffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x1000000c, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_rdma(0x10, 0x3, 0x14) syz_io_uring_setup(0x7fae, 0x0, 0x0, &(0x7f0000000140), 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0x1, &(0x7f0000006680)) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_pidfd_open(r6, 0x0) waitid$P_PIDFD(0x3, r7, 0x0, 0x4, 0x0) ppoll(&(0x7f0000000080)=[{r7, 0x194}], 0x1, 0x0, 0x0, 0x0) r8 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r8, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) listen(r8, 0x2) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 11m51.586775475s ago: executing program 6 (id=4489): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x0, @mcast1, 0x1}, @in={0x2, 0x4e20, @rand_addr=0x64010101}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0xe000000, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x4}], 0x1c) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000000000)='exfat\x00', 0x8000, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x11, r1, 0x0) msync(&(0x7f000021c000/0x2000)=nil, 0x2000, 0x6) r2 = openat$nmem0(0xffffff9c, &(0x7f0000000000), 0x503380, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x40, 0x140a, 0x100, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x8040}, 0x20008810) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000000c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) rmdir(&(0x7f0000000040)='./file0/file2\x00') timer_create(0x9, &(0x7f0000002c00)={0x0, 0x25, 0x1}, &(0x7f0000002c40)=0x0) timer_settime(r4, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x77359400}}, &(0x7f00000001c0)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ppoll(&(0x7f0000000000)=[{r7, 0x8000}], 0x1, 0x0, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r8, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x14, 'syz0\x00'}}}, 0x28}}, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r9, 0x29, 0x14, &(0x7f00000002c0)="0bbb268dd6ffa80800000000000000000000210d", 0x14) prlimit64(r3, 0x7, &(0x7f0000000140)={0xfffffff7, 0x9}, &(0x7f0000000180)) getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000080)={@remote}, &(0x7f00000000c0)=0x14) 11m51.094690852s ago: executing program 6 (id=4491): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(r0, 0x0, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'ip_vti0\x00', &(0x7f0000000300)={'gre0\x00', 0x0, 0x80, 0x10, 0x8, 0x8a0, {{0xa, 0x4, 0x1, 0x2, 0x28, 0x65, 0x0, 0x7, 0x2f, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x2e}, {[@generic={0x82, 0x12, "c031f5af7ba1061ef3b55b9754a521ba"}]}}}}}) sendmsg$nl_route(r1, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=@ipv4_delroute={0x40, 0x19, 0x2, 0x70bd25, 0x25dfdbff, {0x2, 0x14, 0x14, 0x7, 0x1, 0x3, 0xff, 0x9, 0x87bb089dbf2fb343}, [@RTA_PREFSRC={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @RTA_DST={0x8, 0x1, @local}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x10, 0x2, r2}}, @RTA_NH_ID={0x8, 0x1e, 0x800}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x1) r3 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r3, 0x0, 0x44004) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000009c0)={'veth1_to_batadv\x00'}) r4 = openat$pfkey(0xffffff9c, &(0x7f0000000a00), 0x52800, 0x0) write$char_usb(r4, &(0x7f0000000a40)="8fb0616838c1e309029d58b5a38eef5ecc0abf3eeb85cda0765569798a0efcdad31940982121e80c2781ce6936b28fd45cac4aec0a5cacca7dad0f21e901034f621e49d7cc44350694a60ad0fec8508ff1c5bbcb8e0295a73b6153d3b90c44f896f69627facbb7bc5aa61d8b1c48", 0x6e) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), r4) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24040010}, 0x20008005) io_setup(0x481e, &(0x7f0000000c00)) syz_emit_vhci(&(0x7f0000000c40)=@HCI_EVENT_PKT={0x4, @hci_ev_hardware_error={{0x10, 0x1}, {0x1}}}, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r4, 0x8982, &(0x7f0000000c80)={0x1, 'netdevsim0\x00', {}, 0x100}) clock_gettime(0x0, &(0x7f0000001240)) 11m50.799803019s ago: executing program 6 (id=4492): bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000ffffffff00000000fe01000085714c00180000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x46, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setgroups(0x40000000000002e6, &(0x7f0000000140)=[0x0]) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(0xffffffffffffffff, 0x0, 0x0) connect$qrtr(r1, &(0x7f0000000040), 0xc) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) writev(r1, &(0x7f0000000180)=[{0x0}], 0x1) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r5, 0x3) accept4$bt_l2cap(r5, 0x0, 0x0, 0x800) 11m42.699692115s ago: executing program 37 (id=4471): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000ffffffff00000000fe01000085714c00180000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x46, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setgroups(0x40000000000002e6, &(0x7f0000000140)=[0x0]) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(0xffffffffffffffff, 0x0, 0x0) connect$qrtr(r1, &(0x7f0000000040), 0xc) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) writev(r1, &(0x7f0000000180)=[{0x0}], 0x1) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r5, 0x3) accept4$bt_l2cap(r5, 0x0, 0x0, 0x800) 11m34.002526922s ago: executing program 38 (id=4492): bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000ffffffff00000000fe01000085714c00180000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x46, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setgroups(0x40000000000002e6, &(0x7f0000000140)=[0x0]) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(0xffffffffffffffff, 0x0, 0x0) connect$qrtr(r1, &(0x7f0000000040), 0xc) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) writev(r1, &(0x7f0000000180)=[{0x0}], 0x1) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r5, 0x3) accept4$bt_l2cap(r5, 0x0, 0x0, 0x800) 6m27.883999956s ago: executing program 2 (id=5396): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f00000000c0)={0x0, 0xfffffffffffffd7d, 0x0, 0x0, &(0x7f0000000080)}, 0x2000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000010640)={'ip6_vti0\x00', &(0x7f0000000240)=@ethtool_test={0x2e, 0x8000, 0xd, 0x3, [0x1000, 0x8, 0x9]}}) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0xff07, 0x0) r3 = socket(0x11, 0x2, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) setsockopt$packet_int(r3, 0x107, 0xc, &(0x7f00000000c0)=0xffffffff, 0x4) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000280)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x114}, {&(0x7f0000000b80)={0x254, 0x3e, 0x20, 0x70bd29, 0x25dfdbfc, "", [@nested={0xd7, 0x32, 0x0, 0x1, [@nested={0x4, 0x165}, @typed={0x60, 0x126, 0x0, 0x0, @binary="dfb613c4472107341d85abdfce361e034aae7e64c6d705107a4e7c7bc9ebad8e0b0ed2acaabc8f37bfa6e1930df0064d82bc1267d1d8e85d5512443aed0d73d0debcf9f36f1d02660c59586c00d45730e3bc35d956d3e1a7e460a8b8"}, @typed={0x8, 0x112, 0x0, 0x0, @u32=0x6}, @nested={0x4}, @generic="b65dff8a3b12f280e583c9a66be028e40e165edd770b96553ea158561559ade8ed352d89bac9eb2e96372b9d2a6acb841da7d8df263a206e7cccd10902687efd4bdb3f6f1171e2637054fd625cb1144f1ca5c952029163cd3cd7efc28be6c6", @nested={0x4, 0x29}]}, @generic="18a2fbd1a8158f4b1ef5a7f5118017a8672a83230505815666ad708c8c924874c3a268dad1237025b1f47f6185ab57efbad8c8b2313d190a2dbfc26008713f65b1cb3196f13ea8e901e1e839333ce824b405f57b75ec211153e95e5c37124e4198133a1546b217d6baac0652c2ff858788fdc6394545abb36c34588f65e40746c01a5bfade60980c735d88", @generic="65ee18fb4b98d1516ed7d179465958b878095e719a42c52da1a4cb7f971672c0edccaa9f419147302ea685f5a3b593332cfda06187d42be201f5ce90fcfce62ab48e5112b3350ee7c727dd77b90da3e3dc16009c5a2d2dd828edc71ce3f3525df5d34653e0890840213ee853f4164cece84bd33135a93fd79bba718cc9aa4076159ede34ba9b9b5270a0d9fdb4500ef0788502bc8a15e68885d094a0b3efe06d4b35f7b114a928e2ca3e160f28a57720e484a11309d499e4a69fec46386fef7a2d7e875e902baae4e2e37d674d920ff3d6e627cee379", @typed={0x8, 0x3a21, 0x0, 0x0, @pid=r5}]}, 0x254}], 0x2}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "5193bb672965593497c186a80e00", '\x00\x00=*', "1202000000040030"}, 0x38) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e22, 0x3, @local, 0x8001}}, 0x0, 0x0, 0x41, 0x0, "b208405cce4456e4fc032a98e0d944147fe5e8260998f956cc57c244519b07550335ebf4a3d016c8824222e928f39cd7494c2b19ec11630a00000000048f6700"}, 0xd8) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) sendto$inet6(r6, 0x0, 0x0, 0x20000000, &(0x7f0000000380)={0xa, 0x4e21, 0x10001, @empty, 0x2}, 0x1c) getsockopt$IP6T_SO_GET_REVISION_TARGET(r6, 0x29, 0x45, &(0x7f0000000080)={'ah\x00'}, &(0x7f0000000180)=0x1e) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) mknodat(r7, &(0x7f0000000040)='./file1\x00', 0x10, 0x2) fdatasync(r7) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x0) 6m26.918156299s ago: executing program 2 (id=5399): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xd, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x0) readv(r3, &(0x7f0000000380)=[{&(0x7f0000000540)=""/4114, 0x1012}], 0x1) r4 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r4, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0x20040814) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) r7 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16abf8d77f0", 0x9, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000300)={0x0, 0x0, r7}, &(0x7f00000003c0)=""/4096, 0x1000, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) 6m25.808564564s ago: executing program 2 (id=5402): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) pwritev2(r0, &(0x7f0000000980)=[{&(0x7f0000000500)="be", 0x20013}], 0x1, 0x5, 0xa, 0x14) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000010) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0xffff8000, 0x0, 0x2, 0x0) syz_emit_ethernet(0xea, &(0x7f0000000540)=ANY=[@ANYBLOB], &(0x7f0000000500)={0x1, 0x3, [0x2b, 0xb41, 0x727, 0x85e]}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000840)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a40)=@newtfilter={0x48, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbbd, {0x0, 0x0, 0x0, r4, {0xd, 0xb}, {0x0, 0xfff3}, {0xd, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x18, 0x2, [@TCA_BASIC_POLICE={0x14, 0x4, [@TCA_POLICE_RESULT={0x8, 0x5, 0xe}, @TCA_POLICE_RESULT={0x8, 0x5, 0x95f}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20041010}, 0x10) pipe(0x0) eventfd(0xfffffc00) pread64(r1, &(0x7f0000000000)=""/23, 0x17, 0x7) 6m24.778878437s ago: executing program 2 (id=5407): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x2, @mcast2}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000100)={0x400, 0xf0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8, 0x4000, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0xc}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000007000000140001800500020001000000080006001a"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000580)) ioctl$VFAT_IOCTL_READDIR_BOTH(r5, 0x2202, 0x0) openat$cgroup_ro(r5, &(0x7f0000000080)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r6}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x18, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000003000000004865000040000018010000756c6c2500000000002020207b1af8ff0000f8ffffffb702000008000000b7030000090000008500000006000000b7080000000000007b8af8ff00000000b7080000660400007b8af0ff00000000bfa100000000000007010000e37bffffbfa400000000000007040000f0ffffffb70200000800000018230000d1a63ea4d900926eaa21abdbbad0703ee4ec448f584ab42ceeb2cc4e7d281224ef4a900e4b74499ef14aeabf61427c77ab64c610", @ANYRES32=r6, @ANYBLOB="0000000800000085000000a50000009500"/32], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r7}, 0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace$pokeuser(0x6, r9, 0xd0, 0x5) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="380000001800010000f3ffffffffffff010000000000000d00000000060015000200000014008e2ac88004000800000000000000000000004d91238ee0a418f3eaad4a073793331bfae4d98501633895a5e1f48458194b0d0079cd8222a2b1eb541a6903d1da49201929c60c54ee9fdf48655abadfb68d1107adb0522d27cba6d10e4ea2e942d80c7e20636a63402b50916799039bb9ea236478551060de59987d4b00000000000000264203d061172d285a802cc84d82eaf4be5140e3af2d980704d680686395eec499933112a801311aaee201998112850665103b2035e0e6459e47ed8c"], 0x38}}, 0x0) r10 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r10, &(0x7f00000000c0)={0x1d, r11}, 0x10) sendmsg$can_bcm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x410) 6m24.097706715s ago: executing program 2 (id=5410): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000e, 0x6c2f2, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015000100fdffffff0000000002180300", @ANYRES32=r1, @ANYBLOB="1400030010657468300000000000000000"], 0x34}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015000100fdffffff0000000002180300", @ANYRES32=r1, @ANYBLOB="1400030010657468300000000000000000"], 0x34}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000001000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000001000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000000000/0x14000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x884, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) io_uring_setup(0x4, &(0x7f0000000040)={0x0, 0x73e6, 0x1c402, 0x2, 0x1e1}) syz_clone(0x1000011, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x1000011, 0x0, 0x0, 0x0, 0x0, 0x0) 6m23.509692134s ago: executing program 2 (id=5412): bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='$\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="6b45c2e35440fb", @ANYRES32, @ANYRES8=0x0, @ANYRES64=0x0], 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000ffffffff00000000fe01000085714c0018000000950000000000"], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x46, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setgroups(0x0, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(0xffffffffffffffff, 0x0, 0x0) connect$qrtr(r1, &(0x7f0000000040), 0xc) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) writev(r1, &(0x7f0000000180)=[{0x0}], 0x1) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r5, 0x3) accept4$bt_l2cap(r5, 0x0, 0x0, 0x800) 6m23.375695758s ago: executing program 39 (id=5412): bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='$\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="6b45c2e35440fb", @ANYRES32, @ANYRES8=0x0, @ANYRES64=0x0], 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000ffffffff00000000fe01000085714c0018000000950000000000"], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x46, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setgroups(0x0, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(0xffffffffffffffff, 0x0, 0x0) connect$qrtr(r1, &(0x7f0000000040), 0xc) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) writev(r1, &(0x7f0000000180)=[{0x0}], 0x1) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r5, 0x3) accept4$bt_l2cap(r5, 0x0, 0x0, 0x800) 3m52.409324694s ago: executing program 8 (id=6024): r0 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0xa41) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000001c0)={"1b00", 0x10, 0x5, 0x3, 0x800, 0x0, "f759e100edc710000000d9fc6300", "00000004", "13249443", "e8cc1304", ["0016c4a3c42dc8077a0e00", "c2fed6e2fffff2f57f168640", "0000000e0100000007000020", "0000000000000000009700"]}) 3m52.348647616s ago: executing program 8 (id=6027): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="6400000002060103000000000000000000000000050001000700000016000300686173683a6e65742c706f72742c6e65740000000900020073797a30000000000500040000000000"], 0x64}}, 0x20048800) 3m52.271861896s ago: executing program 8 (id=6031): syz_genetlink_get_family_id$ethtool(&(0x7f0000000640), 0xffffffffffffffff) 3m52.248281062s ago: executing program 8 (id=6033): unshare(0x24020400) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, 0x0) 3m52.19699758s ago: executing program 8 (id=6035): r0 = syz_usb_connect$cdc_ncm(0x0, 0x8f, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x20, 0x80, 0x3c, {0x102, 0x2070, 0xfff, 0x9, 0x4, 0x8000, 0xfffd, 0xff, 0x3906, 0xfffc, 0x4, 0x8fb}}, 0x0, 0x0, 0x0, 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc048aeca, &(0x7f0000000580)={0x1, 0x0, [{0xac5, 0x0, 0x8000000000000000}]}) syz_usb_control_io(r0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)={0x34, r8, 0x1, 0x70bd2c, 0x44, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x34}}, 0x4) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x14, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00030400000014030409"], 0x0, 0x0, 0x0}, 0x0) 3m51.427497933s ago: executing program 8 (id=6042): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42797000) r1 = openat$mice(0xffffffffffffff9c, &(0x7f00000002c0), 0x2) readv(r1, &(0x7f0000000700)=[{&(0x7f0000000200)=""/167, 0xa7}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) open$dir(&(0x7f00000004c0)='./file1\x00', 0x450401, 0x90) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') fstat64(r2, &(0x7f00000000c0)) 3m35.13429025s ago: executing program 40 (id=6042): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42797000) r1 = openat$mice(0xffffffffffffff9c, &(0x7f00000002c0), 0x2) readv(r1, &(0x7f0000000700)=[{&(0x7f0000000200)=""/167, 0xa7}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) open$dir(&(0x7f00000004c0)='./file1\x00', 0x450401, 0x90) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') fstat64(r2, &(0x7f00000000c0)) 7.159704022s ago: executing program 4 (id=7030): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="00000000040000090000000000000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, r0, 0x200000000000000) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/net\x00') r1 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = openat$cgroup_root(0xffffff9c, &(0x7f0000002a80)='./cgroup.net/syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000002ac0)={0x400, &(0x7f0000000240), &(0x7f00000002c0), &(0x7f0000000540), {0x15}, &(0x7f0000001940)=""/4096, 0x1000, &(0x7f0000002940)=""/192, &(0x7f0000002a40)=[0x0, 0x0, r1], 0x3, {r2}}, 0x58) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r4, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r5, 0x24, 0x0, 0xffff, &(0x7f0000000000)=[0x0], 0x40e8, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c300000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000018c0)={r7, 0x0, 0x7e, 0x7, &(0x7f0000000340)="700bb2d9f8036310f46f7e3715917d0462311d9318673f5c9aa9a1bd140f177640cf11753bdb35c37ee0621e4f0f9b1151ff50d3c24c2dda40f9685c569c4fd76f003b2f2772e5caf30ae13cefcd3f8c34455e13eede29c0a1403880416b3aef675649e502fd689724a05e2f70a56545c53deb2f6d46ba7011201cdfc0d3", &(0x7f00000004c0)=""/7, 0x5, 0x0, 0x22, 0x1000, &(0x7f0000000500)="304ac4b90a404ffe2f07cb3e87837df9361d2c2b4235c4d4e038e10de2712be92583", &(0x7f00000008c0)="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", 0x7, 0x0, 0xf5b}, 0x4c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r7, 0x5, 0xe, 0x0, &(0x7f00000000c0)="469dc2d342e2b7000091000000000bcf48f3ac4e19a56ceb0b42c0", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x22) 7.0410366s ago: executing program 4 (id=7031): bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="6b45c2e35440fb", @ANYRES32, @ANYRES8=0x0, @ANYRES64=0x0], 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000ffffffff00000000fe01000085714c00180000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x46, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setgroups(0x40000000000002e6, &(0x7f0000000140)=[0x0]) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(0xffffffffffffffff, 0x0, 0x0) connect$qrtr(r1, &(0x7f0000000040), 0xc) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) writev(r1, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r5, 0x3) accept4$bt_l2cap(r5, 0x0, 0x0, 0x800) 5.844104238s ago: executing program 4 (id=7034): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000003480), 0x8) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) openat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000280)={0x591002, 0x8c, 0xc}, 0x18) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r3, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r4, r3, 0x0, 0x578410eb) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000080)={0x4, 0x1, 0x19, 0x6, 0x100, 0x0}) 4.829872722s ago: executing program 9 (id=7038): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) (async) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async) r3 = socket(0x400000000010, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000300)={'ip6tnl0\x00', r5, 0x29, 0x10, 0x4, 0x800, 0x0, @private2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10, 0x20, 0x7, 0x10000}}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000004c0)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000005c0)={'syztnl2\x00', &(0x7f0000000540)={'syztnl2\x00', 0x0, 0x29, 0x4, 0x0, 0x5, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, 0x8000, 0x8000, 0x3}}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=@newtfilter={0x3f0, 0x2c, 0x8, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xf, 0xfff3}, {0xb, 0x8}, {0x3, 0x4}}, [@filter_kind_options=@f_route={{0xa}, {0x380, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r2}, @TCA_ROUTE4_TO={0x8, 0x2, 0x5}, @TCA_ROUTE4_TO={0x8, 0x2, 0x9a}, @TCA_ROUTE4_TO={0x8, 0x2, 0xd3}, @TCA_ROUTE4_IIF={0x8, 0x4, r6}, @TCA_ROUTE4_IIF={0x8, 0x4, r5}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x10, 0x3}}, @TCA_ROUTE4_POLICE={0x78, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x10001}, @TCA_POLICE_TBF={0x3c, 0x1, {0x100000, 0x1, 0x8, 0x13, 0x9, {0xc9, 0x0, 0x1, 0xf1af, 0x4, 0xc23}, {0x3, 0x2, 0x0, 0x9, 0x3ff, 0xd8a}, 0x8, 0xbd60, 0xc8}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x80aa}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}]}, @TCA_ROUTE4_ACT={0x2cc, 0x6, [@m_bpf={0xdc, 0x16, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x90, 0x6, "bad141751b2f559b2f9e91f34b41d3ea8ef9f539b08e1a7af4fce71a5f2b9c33b2419eead8a4708f3e705eda332a6bb40eefad2bdcd40fc85848b8deffbe12bd9561034ad623f0fbbbdbfd7fedd1ae88df01600d769ff32e5544d594764e6a4104d4095b3f18a52c0aaa45ee90520bb7b152737dad9814e2ec9d9ec626f562cc0d0275b869d79b2af004c497"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_mirred={0x138, 0x18, 0x0, 0x0, {{0xb}, {0xe4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x6, 0x5, 0x1, 0x5d0}, 0x2, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x8, 0x7, 0x3, 0xeae}, 0x1, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1800000, 0x8, 0x1, 0x1a5}, 0x0, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x7, 0x0, 0x4}, 0x3, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x9, 0x0, 0xfffffff7}, 0x1, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7ff, 0x6, 0x10000000, 0xd, 0x10}, 0x2, r9}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0xd, 0x20000000, 0x6903, 0x80}, 0x4, r2}}]}, {0x2b, 0x6, "b482243d733e752369ea707504a5561f49e1db4fa8fa0aa198b72b811cc1137574bde48a898710"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ife={0xb4, 0xa, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xffff, 0x40, 0x1, 0x5}}}]}, {0x6e, 0x6, "d4a0c57ece74d3a655793655c67ddbe653787dd0df8253c013d2fe15eac1a4c198037d3c029dfdb407fda9636b40f10e9c6b79272855288ffb2ffebe09037ba3555fe57a8cfb13f3a6282c8e0ea480c9c2881c5029af83a98d7e27f9c44506bf0d27f815929034ab7b5c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_RATE={0x6, 0x5, {0xb, 0x2d}}, @filter_kind_options=@f_fw={{0x7}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'macsec0\x00'}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0xf6}}, @TCA_RATE={0x6, 0x5, {0x34, 0x2}}]}, 0xfffffffffffffe73}}, 0x2) (async) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x66, 0x8ff, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x10, 0x4}, {0x2, 0xfff1}, {0xfff2, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r10 = open(&(0x7f0000000000)='./file0\x00', 0x4000, 0x8) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@bridge_getneigh={0x58, 0x1e, 0x400, 0x70bd2c, 0x25dfdbfe, {0x7, 0x0, 0x0, r5, 0x21a4, 0x40000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r10}]}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x5}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x6}, @IFLA_IFNAME={0x14, 0x3, 'wlan1\x00'}, @IFLA_NET_NS_FD={0x8, 0x1c, r10}]}, 0x58}, 0x1, 0x0, 0x0, 0x40010}, 0x2000c040) (async) sendmmsg$inet(r0, &(0x7f0000000700)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000d00)=[@ip_pktinfo={{0x18, 0x0, 0x8, {r2, @empty, @remote}}}], 0x18}}], 0x1, 0x40000) 4.44205119s ago: executing program 9 (id=7040): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000000)={0x2c, r2, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_BSS_BASIC_RATES={0x4}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008004) (fail_nth: 5) 4.258550747s ago: executing program 5 (id=7041): socket(0x10, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r0, &(0x7f0000000040)='FROZEN\x00', 0x7) mkdirat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x1ff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x8000) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000300)='syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000340), 0x2, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000010000104fcffffff8000000000000000b4608a08aa703f09c96460d7033403bbcaeb5893f79251f22ecd3c199f221db1f8752d31ba75395798b6d5a9c9a2c8bafc7dd869056a452cd2aadd9e1dd973a8ac122f60aa4c44a4e817f18aa7f49c3b766cafea42a1d37220f6a772b15142ccb7d355f673e1a7550086e87200f3abb9696f730fa892c43466ee14f85140159c9cd9cafc057c5bc31972cad5c7482dae73", @ANYRES32=r3, @ANYBLOB="0388010004c10000"], 0x20}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000023c0)={{0x1, 0x1, 0x18, r1, {0xf}}, './file0\x00'}) write$binfmt_script(r1, &(0x7f0000000200), 0xfffffd9d) sendfile(r0, r0, 0x0, 0x9) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000380)={0x0, 'nicvf0\x00', {0x2}, 0xdc82}) 4.182018651s ago: executing program 9 (id=7042): bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="6b45c2e35440fb", @ANYRES32, @ANYRES8=0x0, @ANYRES64=0x0], 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000ffffffff00000000fe01000085714c00180000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x46, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setgroups(0x40000000000002e6, &(0x7f0000000140)=[0x0]) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(0xffffffffffffffff, 0x0, 0x0) connect$qrtr(r1, &(0x7f0000000040), 0xc) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) writev(r1, &(0x7f0000000180), 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r5, 0x3) accept4$bt_l2cap(r5, 0x0, 0x0, 0x800) 3.185485475s ago: executing program 5 (id=7043): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x7f, 0x584e4f53, 0x3, 0x2, 0x7, 0x4, 0x5, 0x1, 0x4, 0x2, 0x3}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000003480), 0x8) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) openat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000280)={0x591002, 0x8c, 0xc}, 0x18) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r3, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r4, r3, 0x0, 0x578410eb) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000080)={0x4, 0x1, 0x19, 0x6, 0x100, 0x0}) 2.545723465s ago: executing program 9 (id=7044): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xfffffffb}, 0x5, 0x34, 0x91f}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0x16}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x18000, 0x2, 0x1, 0x5, 0x8, 0xfffffffc}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000b0}, 0x80d0) syz_usb_connect(0x5, 0x2d, &(0x7f0000004f80)=ANY=[@ANYBLOB="1201000021cbc4401a2e414c96c4010203010902"], 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.059486341s ago: executing program 5 (id=7045): syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40844}, 0x0) 2.057296617s ago: executing program 1 (id=7046): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000a00ecff0800010073797a300000000074000000160a010100000000000000000a00000008000740000000014000038008000140000000002c000380140001006e657464657673696d300000000000001400010076657468305f766c616e00000000000008000240000000070900010073797a3000000000090002"], 0xbc}}, 0x24048800) 1.991680388s ago: executing program 5 (id=7047): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x7f, 0x584e4f53, 0x3, 0x2, 0x7, 0x4, 0x5, 0x1, 0x4, 0x2, 0x3}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000003480), 0x8) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) openat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000280)={0x591002, 0x8c, 0xc}, 0x18) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r3, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r4, r3, 0x0, 0x578410eb) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000080)={0x4, 0x1, 0x19, 0x6, 0x100, 0x0}) 1.966300868s ago: executing program 4 (id=7048): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x103000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000000)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r2, r1], 0x2}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f00000002c0)={0x0, 0x0, 0x0}) (fail_nth: 5) 1.961664685s ago: executing program 1 (id=7049): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, 0x0, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x6667b9fe4a4fda2, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x5}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f00000056c0)=[{&(0x7f0000000280)="5b4ea50f20d7212327af", 0xa}, {&(0x7f0000001440)="f0e266805aba28ca0c0d67b3479e1c7cb90d64b8ba8093c11696a92981d4fdd1f40043ce52efdea3f8d7b9ba23840df17c5a35207d6fc677263be310a063adb7b1528b8a04ec5b50d2cfa0df73c57f16a94941e8fb22f429a1f34b5b01514fef", 0x60}, {&(0x7f0000002440)="253c10cd0a56ebbb9e8b465670109c340c95f1d27d36cbeb7fa948545e9b18da346b70b5dc6ea12ad1a30e4f7038336f1af1d61b04de988f1755e9b3ba9919b2a4952ceda920a7f0e22dd239d4a74f2d1c854bc64f09f979aa3e9f5c25ff8ec189e5d8", 0x63}, {&(0x7f00000024c0)="2ba671ae8107530b978dd82841597ed8f4275ed9e6b9f7b73ee6324ddf688ad9d88125b82afd2e28aef7183086ce0dd4ee880fc56a2ca8b52ef8f5b5f3e475f49b0bcd201fe612703d680fdd1151dd32535b04d4697d472c7750d6c4c197162e9f872253b611b1ca20e79dcf40d1faf58a453f8db9a03fdd351b54ad4e77fa0fda7990bb281079ae7ba3994aef7380e1d6342305e2d12c57379fd12e784f48e4e832171df4576c8724e3bfd70ebc92fc11914cd4", 0xb4}, {&(0x7f00000025c0)="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", 0x7f5}], 0x5}}], 0x1, 0x0) socket$kcm(0x29, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000480), 0x0, 0x2, 0x0) 1.728533572s ago: executing program 1 (id=7050): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32], 0x70}, 0x1, 0x0, 0x0, 0x48011}, 0x40) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0xc048094) (fail_nth: 5) 1.727813706s ago: executing program 4 (id=7051): r0 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) getsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000040), &(0x7f0000000080)=0x8) fcntl$addseals(r0, 0x409, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$NILFS_IOCTL_RESIZE(r0, 0x40086e8b, &(0x7f00000000c0)=0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000200)=0xe4) read$FUSE(r1, &(0x7f0000000240)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000002280)={{0x1, 0x1, 0x18, r0, {r2, r3}}, './file0\x00'}) mkdirat(r5, &(0x7f00000022c0)='./file0\x00', 0x41) syncfs(r1) getsockopt$EBT_SO_GET_ENTRIES(r5, 0x0, 0x81, &(0x7f00000023c0)={'nat\x00', 0x0, 0x4, 0x69, [0xa030, 0x2, 0x4, 0x7, 0x0, 0x7], 0x3, &(0x7f0000002300)=[{}, {}, {}], &(0x7f0000002340)=""/105}, &(0x7f0000002440)=0x50) syz_emit_ethernet(0x11f, &(0x7f0000002480)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, @multicast, @val={@val={0x88a8, 0x1, 0x1, 0x3}, {0x8100, 0x6, 0x1, 0x2}}, {@ipv4={0x800, @udp={{0x2c, 0x4, 0x2, 0x9, 0x109, 0x68, 0x0, 0xff, 0x11, 0x0, @remote, @private=0xa010101, {[@timestamp_prespec={0x44, 0x14, 0x61, 0x3, 0x9, [{@private=0xa010102, 0x5}, {@remote, 0xae}]}, @end, @lsrr={0x83, 0x23, 0xa4, [@empty, @dev={0xac, 0x14, 0x14, 0x42}, @local, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @rand_addr=0x64010101, @local]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x10, 0x97, 0x0, 0x0, [0x1, 0x5, 0x1]}, @timestamp_prespec={0x44, 0x4c, 0x7c, 0x3, 0x5, [{@broadcast, 0x2}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x454}, {@local, 0xc}, {@loopback, 0x1}, {@empty, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xa0000000}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}]}, @noop]}}, {0x4e24, 0x4e21, 0x59, 0x0, @wg=@data={0x4, 0x2, 0x6, "6e22f64f45aefd5f5ae3bf672f667033f2de2eba9b224b611c99fcaa340f025f25f3b0496d0c61df8f4ccb1d3ff975ed444b92d7754218877f201c4b28698b691d"}}}}}}, 0x0) write$ublk_bdev(0xffffffffffffffff, &(0x7f00000025c0)="70d8935298c884bd1c705e440fd82a137c7af7aa77fae369fa75f16af6308fcbf11a857b16df91a6e18839e085eabdc14557f22430f54cc0eb32e1b86efe5dfbd0dbcdf7d5", 0x45) setsockopt$bt_BT_SNDMTU(r5, 0x112, 0xc, &(0x7f0000002640)=0xcac, 0x2) syz_ublk_setup_queues(r5, 0x0, &(0x7f0000002680)={0x0, 0x9f38, 0x10230, 0x1, 0x281, 0x0, r5}, &(0x7f0000002700)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6fad, 0x800, 0x3, 0x185}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2b7f63e7, 0x20, 0x2, 0xdf, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x81da, 0x400, 0x1, 0x15c, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x779c, 0x8000, 0x2, 0x7b, 0x0, r5}}], 0x4, &(0x7f0000003980)={0x2e, 0x5, 0x0, r5, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x1}, 0x0, 0x0, '\x00', {0x0, 0x774, 0x0, &(0x7f0000002980)=@buf_1k="6f5530f9c9ee86e5ee4454795c76b69751f7bd2ef74eda6e2089be903504fd3b24f119dc29f399d1e5e8fb51778e9717848f3de94f9774972fe7b7bf097376c516845738b69dffbd284d1494c273232f7e814af84da6f4a70835507df8392df1ffb32ef523a84edb77e5bb912a1368b0d4dff33d7ae5da73d6b055f014b4a104dd9405bc583f14b8ee49f76a9f0ff56148fd9082b772feec786edd8c362d557c76db50be224eeef23af8eae046293e30ecb51150a0dabe5608053166f7bc5c5ec6f9a50f1745a249787296984573a37dce23147f837f9772c77b1ce315b43e169f3243450b0c814b50ccc51dbd98af4523f44793464eb1ee5ec943b6e7ad140e3536068698d87fd0a27449a62cf81e829b3f30fdf19e379f89618c3e8e0e6743ec750e0b308c541864cb905f31170cfce8b90a689683cc657291df4fd475194eb19b41b19100e79237dd333a30b9344ba07c4beed4282791866939c392fdc709fd1a09ca7b5bf71131cc947867688c6cd1e4bd66e2b10fde5398890adc0e472598c8a7d595ea74aa05be647a36094e273b9da31e1e7a7673792bc0a1f89654d3f3caa2a32851065ace1d91e13c079e7f18914e65743fb2791c42cf925f9804063bc963dde92932369f25a5e26ec572e593e4107700d9e4a692e4b14baae85571a6e0a7949f413d692d08502d9f9680e5565cf56c404cfd0c29cf335f0e2268265dfea7dd060a7f40dcad3880f22928e64ab9e52eea1dce95c328c24418b281d2bd867018ccdea8964a0f3331a47a991d0b3ad7a392987426678f1e32dee76f0f2af684433af33bb420ef98077925ea0afc460fe83b15e171aafd50bd5b5559a3a1d07515dd5a0e16d5dbe3963a48941900ba48001856c9189aef5dca7d64a3b05deac1e6597c82f5c74eea00987426ccb4d5b1f66d0982a491bd7e6eeeadce65ac92d659bb1d379fc18ec082151cc5d2553ec3f0491cf90e8f1e9b8a1b69f99e324687720ec21a2a5ed8d4f9a5c848d8e52f07ddc2c49c08e7f416ba960fc94f7a98a169b71491d3ef894e505a9f499d6e36635f079d2db6d80b95875bf413f6c0a61b18bb2f3e370514af79894c5355db6f4e48b7c56088450e14303c4e88efdff0c8fd748d6647075ac108b8bc2f4ff6d206f39763516f1267f249e5e29039504e80e3af13e3c5f22caddbcb8e2c93037189cb92ece19a7d64a67fb58e341f4103cca8c0bbe684e6f4a47cb579d7f4e2d2ce66b415fa9877611972a4a18b818f0fc6798d6d6e2ee32b4e8ee289608c696853586a25e1f487a79ebe76b1c2d768f58643f7549cba81c5f8ae2722f86ee1f781aa81e3afbd08fa515380dc25c3ed5e083e4b412e2adb249602f2a7d6cb82efad69241ea16dc2e8e2b008edede1a08d059dc8376fa2c74b6f4cc3e53705ed1db7bfe32d880affaf2b47e6af733d"}}, &(0x7f0000003a00)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_ublk_process_io(r7, 0x0, 0x3, &(0x7f0000004a40)=@ublk_io_need_get_data_sqe={0x2e, 0x8, 0x0, r5, 0xc0107522, 0x0, 0x0, 0x0, 0x2, {0x2}, 0x0, r8, '\x00', {0x4, 0xde2, 0x1edf, &(0x7f0000003a40)=@buf_max_buf="455cab44a7ab93bdec3ebf97bc67b258110193d5be015e2d7551998b82eeab8e4ba6da02e41fae17e460bcbf1d78dec259d8c546b8d182530481c69a3f570d5e058ff98498ec908b9c14f6267e365f2195155ac91a39ef1366965734b643d606e6a61368bbade97a252fbaa1b6528472a64bdb015f45ba5ef9924ae398c47673dd1acc4998bf324064ac82c97c2b0124a8aa1d871a6ff4083b8897a57210821a52719807334ece4cd75a6638bf261d0ffd0df3e2f5c4a58691bfffaeb4755a1edd682d22827a09000b3aab9c0d93fc6e42628ba58a0ceaf086f25d898eb15f77f06ee42521449f1607528890fae0f30655379b71cc5be621e631ce546fa124a6442cd658046eb0f1795e874267814682fd97ccbeac9af479a07d770fe53c4a626cf4c786026bdd29bba2e49cfc0bba3e7a2c4057668a9e63a51880fdc2ea209f7d3f5dab3b5c4e38ccdc75a96c0ebec174ff2771e6b25e342c2896863644afed8f03433df469c7d19dc722c19c099c412cc79b9a0f596c5f2ce70622973d957bc743055cc657f4e280f2012cdb196ef8568dd8d544ea12b21d8a706f28846a4d65d6d5f8abb071e7b011541a951f7aa638f3de5bef16ffd739c43c07c5c4c3e5476cafbb2e6411696cc8c5eccb6b353d4c66732cd2adc2efb07f7714aee71ead7c3a5d600e77de79eaf91de6999a41b6e598ca5ef9c853b1a45ae1a7cf471965f15137495cbcdddcd01a4da244d66afbff77250211aad9a0ffa734b7dfce267b57ca164420412cd3df69640d56a1fc7a0e8c015bac8e27dc5c6f2c76484b9b9050a7eb880d4b2347411a975924f4a2e62ecee9095473197d701871f0fc57a8031e1f44cf1d79704b72ebbf52ede89dc1ee22d9023f53963d223652a5b04898e7e706ca80b9bd7150c0e9a7239b75ffee548d8abd2e49aaf963478c4184e8787487501171c2d475aec713b1eea687a6ff62bf9fef329ac4d87e08450a5e6b25604d4b5b9a09d8912406f466f25a4a376a31236e0f00e9c20bfcb6ac5db142de135818b00ceb04ee269c3248f440af0cc75799c178cf03801902819f8ff61bb593287ea0feadc8152a0c0b92a1ceec571673e4342c0d02436f9cd0c802189ef548642c9aa77d1aabe5dbaa43424adc3d68dde36fa1510a31b2c63df2f2bfb518ece9f3b1239f4ba52f2ee5ff26573c52f1c8eb18b7e4f46c09790f6e06fb499be6120526ed77046592dbf75ad87142d9a69aebdef06911f210c8eafba58e374a09b6b6a9db6d1c7c52df07d24fb06a861314285e310a5821176940e7690ebb157c2db139c51a7c8277d5d8f0f94f42aaec73afc2f8232009a2d65d99e73355743503a6fd9458f96c619fa1c9e214faad5228e8e66af37538bd0c0c16fd2fefc5ffae367f3567f5cb43fdfde387761f3b35a031eef4f6feb70bb10ca27078aafd719d2c926d2841ea302b569b34ae71c2ed8606da8f14ac9f4fee4812586592d29e83239f62911e6caf3861bc946d4edc42aed7596d553f0a5b6452bff129698abaa23b437e182f841bace3238c8c006cfe85b351abecf2fd4989108dcf6e70a14442ff357574c1d03d24c7b2b2dd65449b5e3807379751a5643a10ae3aa797be3070b12ffe3295e5d27a2cf752468bb15996b811556a94f9d9c10c7e1b9b4cfbd7baffb16c7c2ea06331009a0b5eb0a2434a16bb8d3933f9f29046c9ec50f745c80cb87edf71936c7b8e96af87cfd1166358dca83ce7ee378e97f2467a2aace19459f2689f2865c5f8a7b330b2732ede198c38f4ad7e12ee2f8b8a3e6770ef94c285b2a2b0c96cad7e1e62fb48f81faa5f313d1cc508ed1968387160faa0d4d10f39e2a1e368a6d0a543543b6da29dfd03c1f232a04b54296866e4be6dd74c62355b5fe445724366a68ead47ffa13530e25364b313819849869d4b731aa84294947c25b2fe73011d09541cb25cbcc5871429772c4278b7316c0decc9cb51d3aea8c8f8df85524336800f7d52f917e4009b13e05381096448ab106d1eb7085f779b4c47dbb1a00fc428bfc133d657ee3ec3c3d3b79560e9381a739f079555f996b449710432929fc6d5e9eb1f3a2f299de0b3eaa9e7f164a43465893b3dbe1adbcc1901b71659644016966a42f7e4b1c0f5bdb72473f8497c2f398e1c3e6d89ab0bcac5fe0e2a008ac4087b848ea91adb087248aac5d1d20e84dbb8492f9e6c55ad062fd274be744eb90a025375f44d27f9f8204c9558a063dcb25a526b5c689cab3a41279a96179827664a6c348d128102664954da43294e17b3311dc0aa9ea7ce0ee6d1dc546cc975dd3980228b6a301b9b57b5c7ab12500b52677417ee8e640b38c8d9be61e46669cdca8137192e155d80216635c45c9f9bd3ce6f7c63a19ea3d6575e6bb18d80f48f34f9abb7745dfd4f9ef3c8a49d594d394c90a147f83281c2f8492b5731265ce12552e5fb9994f5ec51a89c84370300e69826c7d2ed5a0e92e3e9db7dd6371e605ddc82c9707471852b5622ab533d02231585dd43df897af56e23a0a298adad2fd39a7bee10ccf6228652374224f31a0ad168d486efe2e8c0f0271c593d4d9c1a8b3f1901b5d0ad89ae6cba63f603e5ac507c7e21d5e281ec61bf75fa1e990a8fe20cc6993a8128e42fefa5ac854723b2a5b1dc2322d407b508fa1d46f1a76d79af7a15df54fed90c2babd9c96dd502e63d3321f75d7969fd3c3a1e6d7bb793608ed417b5eb9225fe6a6925138b4dcd4e8c3858837b6370bc6466d8792b032d481ace10b29483f2078a6ae004fa141d40034ea1ed4b09da23019d66c9c1a7ad6aeba94c66ce0d5bf8ef3bc1e2889e3449abf0a3b8aa425deeccd6fadfbbb8137d38923dacd3896deee564f240c582478c7f14e4e1400bc0b960ddf7316f7bfcc356ebdccc82a34c4eac038489dab2204c3769ef7585c4166727b8e4d708f9dc052a0c98fd23d096d26ad81881fd71b32656c9fe33dc82eaae41c5c61ea40d9950ee476130e2cba03810d5b8bf764dd299ac217a4f45464ceee23d19a636494f9f36335bf7ff2a474f60cecbf055758326c3df188234020509de9f6a4e1827df043ab2276f1f56718a4ad193bfd1586aedb3f9317f5197cd672504ff3dabb3b317bac0c66a057ec9ba103faa01c843b75f66da78af5a6292d9d866be4cce6ff157c026da0c1d67a431d9c848781acdfa15de0397dbcada4524d2ad9ca549f26cffcae20ad1ce07c37e54029b577e568ce2edb5f5df4a7660c54d511580c0ba127c852bcc583e3e5a5fac2982958abdb44954f732d5fe03664597d75ab6b03693469e1c65890a7bb16710c33d1cda08df752bf1df8657326279bb4656efb91cd21102d9926ea74e0715056370195ca730afd5cb8b41ba5cc10e5cb177506c237da63328108a1c3b69d2401a7f3e99505421080ab94bd9e7eb38777d27083ef1900e66dce0ce52e28cb47599036151fdd32f81b8d4fd52a043d34abfccb258dce84cfa7a936c017a7bfc56cbb18484cf6558c997e4e83f0c33d2b42e859ba935bd66d97bbaccae346fbe85b2302c21d0562f8ae21d37858764e16cf736c430ae2e88e9f6b8836ef0d8b08ef7c028f31640f837226686353fc327e52c7bc65aac9fa6b0fe688a633d7eea2f2d561095defa16ca2719186219615cfc13f2443c38279ff2a15e01e35afb558058bae354e57f3f3742d50fcb67697e3d0aa3f8d4ee861807699db210c52148ddae861c7201a95225e6bad37a680868f3fc95e094596b869ab2970de406ab6d12e13b51028d70b40f229d964f33a2908b25f1883776567f2da108dd1b70ba551090fe257af118e7d86410bd503c90cd793bb7a86eeb4ec176e3e9b6c9f2d854a8027f42002b75946e74cad8b24e685d3a7072e7ced36f9c8c248ee412865c94a07f1edb112d5c8046f2fdeecfb33d4d5df000485400d590e2b2513c8ef711afb3ffb6071c9a9ce2811a760a1a3b57feb58e356cdba62dfbb9fd8d6b04fef9d4668f2e430a110c058128adc2edf6175651ee7a24808636bb3ca533377f064a3a25458b0d12374d06a28a7c29dc297fce031dfe03d5c0e44a214113a4168ee5bd80d962224f61d174cefd48e829708b6e99f32f47d6857d2e7ef23ff911d5c7b59176911f9d48a2bf7ecd8896114a4c42456d97ec8796d30ed174aba811009ab354c941cc9117eb82700c27600f7de9769b6780b7424d021ac06ad3b80b58529630ea54144f9e9a238d0224a3138a0035061f52eb667dd1a8bd7efee7141c21a978baae0b3822f477a6466f68cbfebed411c8885ccda23cc35d26c150d05b67b2e76151514627305649b6b0a3ddd2ca5c6e7fb20fe305e7965c158677859537aec96713ba3c41fff6939ee6cd7838d0ae02ec2bd879c778e6813bf55cf75cb49d09821b9cf4d6b5c19d5adcb9bfe4e8b6325b09bcbb40c037fc5a0dea1ab4da0dc6c445f11a16b91c6d88c748e3dab6caeafc9fbccfee0782723687ab26a75bba9cef03c425d19c4856970aa1127332c4c884bace58c4e79460ddce6bf10da0cc9aff50ebd107d50b51a784770f7a7fd8bdf8c116bb182ff2eb0ebf382631c5c7252183f3b9eb9f28017b3d4e2114c04693c5cae96dba2535d6250f09aabef7131641705578d632e0ca5a144d1ab7acadcf6942e6828fa12219af238bd88653cf6410ee024ee58a14276de4128d6128e1ee9f09bf3d94e9a73a326d7995b526735eeec2b23a599a550a27ed39c6eef3721f3b4ee18dabdd8c1b2182f954d5cc712e21c73c06d647bfd87f2ac40f34aa128d0aca6f9cc9679773ef976bb1d0939cb6e8632657572242517265282672b2909bfb31219748117219faf3cc47ddae1d5a193fa9cedbf489ab1ff974a23efeada91713834b5b8dd9ed8ace8aa85dae57095491cc06a5ca8a1edd07aa9570dba3e9980225acb652f74d644b9a06f53800b1201a11778c8cfdef34f7e9a8b19f5fba54685979361a1d1a40754f24e8c952bc25e567310f7aa4025ebc2153f6013d80ae2df8eb4ce504557602264eb46a01761036d3fd6d11122f40103308c2fcee36e5c7304f50ff4b7efb26f06adff859cb43b3585ed7b877a95ed6810496eb2c92b0d929300b0157d4090e0255e7976b2ccd478704822384d28b8a4ef713a9dd39b67e95df4299a4e59acffb2077e79173df5b1197cd20b04e2492743d7c2c021b69f8472b3fed7f57d8eaeabd5e207cf7afb56d62973fa41000c76c04188cb10985f2b97147c275c4a07bf0d056db082fc4b30759011d2a33ca448e6e9014e0b312104c0dc6ddc7e52cc8215f6f7ea1682f8a1c3c65d2bf7f15ad2e75bcbf23fc51dcea007f0efe3476e01e90046c3c4ebe198e2b157e71b525e188c256ac91d676f33e2c19a4da81d1caae2ef4c29b3cd099ff00c15736abdaed12a0ce8d28f93827f1ec2d5ffd21ef783664ce8a2110bad8811cef7901c6bc4a47042b258b1f952c2013830c8e9db9678040fcaa026e0205520063ecccb2e95729b9029466d56fb4c916a6a53c34f61662d44ae20eed28b8cc7a6957c012caac5c5c4858d5307d9f98a580745ae3bc9e282a64ef8bf0de1b32a0c595f7a64412b0d8b1d03fb74590431940235ac692f91c41d18abad3d1c2f88fb8069bf4ef658b257a686812fa3450d1c199901acb35f55f022ccbc8163968a330082e394a54ee9312ff1a9d995022654dd7ecba73e1f50c23d9193c3bfbabc6f409b91d2deb825c8fb11554624164eab8ee6bfb84b089e670adb6e56743fae4f6a3c3b8887b5f1e0998"}}, 0x0) ioctl$XFS_IOC_SCRUBV_METADATA(r6, 0xc0285840, &(0x7f0000004b40)={0x101, 0x8, 0x7, 0x0, 0x3, 0x5, 0x0, &(0x7f0000004ac0)=[{0x0, 0xfe}, {0x11, 0xfe, 0x81}, {0xc, 0xfe, 0x9}, {0x1, 0x1ff, 0x8}, {0x21, 0x101, 0x1}]}) ioctl$KVM_SET_CLOCK(r5, 0x4030ae7b, &(0x7f0000004b80)={0xffffffffffffff00, 0x4, 0x31f, 0xff, 0x2}) r9 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r9, &(0x7f0000005080)={&(0x7f0000004bc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000005040)={&(0x7f0000004c00)={0x440, 0x3f4, 0x400, 0x70bd2d, 0x25dfdbfe, {0x10, 0x2, 0x19, [0x1, 0x6, 0xffff, 0xfffffc01, 0x101, 0x34, 0x101, 0x2, 0x9, 0x100, 0xb3, 0x26, 0x0, 0x5, 0x6, 0x80000000, 0xbc, 0x4, 0xfe, 0x809, 0x8, 0x60, 0x5, 0x3, 0x2, 0x7, 0x6c0a, 0xd0, 0x7, 0x3, 0x80000000, 0x6, 0x2, 0x4, 0x9, 0x7, 0xe95, 0x7, 0x0, 0x6, 0x5, 0x5, 0x5, 0x200, 0x2, 0x6de9, 0xccf, 0x2, 0x6, 0x3ff, 0x0, 0x4, 0xffff57de, 0x401, 0x992, 0x2, 0x4, 0x2, 0x80000000, 0x5, 0x6ef53892, 0x8000, 0xfffffff7], [0x3, 0x1, 0x6, 0x8, 0x2, 0x4, 0x62, 0x3, 0x5, 0xffff0000, 0x5, 0xfffffffc, 0x1, 0x79f1, 0x3, 0x6, 0x6f082151, 0x6e, 0x9, 0x0, 0x5, 0x9, 0xa4, 0x7, 0x100, 0x800, 0x0, 0x2, 0x3, 0x7, 0xf63, 0x491, 0x4, 0x7fff, 0x8, 0x80000000, 0x0, 0x7, 0x88e, 0x7, 0x6, 0x56db, 0x5, 0xff, 0x1, 0x5, 0x1e8, 0x80000001, 0xffff8000, 0x5, 0x9, 0x401, 0x8, 0x9, 0x6, 0x5, 0x40, 0x8, 0x7, 0xb57, 0xfffffffe, 0x10001, 0xd, 0x5], [0x4, 0x135214bf, 0x9, 0x1, 0x5, 0x80000001, 0x9, 0x10001, 0x8, 0x3, 0x3, 0x100, 0x3, 0x6, 0x0, 0x1, 0x7f, 0x5, 0x10, 0xa3e, 0x4, 0x9, 0x3, 0x49, 0x4, 0x8001, 0xb98, 0x7f7, 0x6, 0xdfd, 0x4, 0x40, 0x5, 0x10001, 0x9, 0xc73, 0x8, 0x6, 0x4, 0x2, 0x6, 0x7, 0x6, 0x2, 0x200, 0x7, 0x8, 0x80, 0x6, 0xc5, 0x8000, 0x1000, 0x9, 0x7, 0x80000000, 0x10, 0x0, 0x8001, 0x7, 0xffffffff, 0x5, 0x1, 0x6, 0x4], [0x2, 0x5, 0x36, 0x7, 0xff, 0x3, 0x4, 0x8, 0x5, 0xc0a4, 0xffffffff, 0xcc, 0x7ff, 0x401, 0x9, 0xa, 0x800, 0x3, 0x8, 0x8, 0x5, 0x0, 0x9d24add, 0xfffffffe, 0x8, 0x81, 0x5, 0x5, 0xce4, 0x7, 0x0, 0x9, 0xfffffff7, 0x0, 0x10001, 0x3d, 0x8, 0x6, 0x1, 0x117, 0x1000, 0x7, 0x4, 0x7, 0x9, 0x6, 0x1, 0x9, 0x24000, 0x1000, 0x4, 0x1, 0xffffff00, 0xc0000, 0x5, 0x8, 0x3ff, 0x1, 0xfffff3a5, 0x8, 0x10001, 0x100, 0x3], 0x1f, ['u!$&@*\'@\x00', '\xbb\xbb\xbb\xbb\xbb\xbb', '\\\x00', '%\x00', '\xaa\xaa\xaa\xaa\xaa', '\xbb\xbb\xbb\xbb\xbb\xbb', '\x00']}, ["", "", "", "", "", "", "", ""]}, 0x440}, 0x1, 0x0, 0x0, 0xc841}, 0x49413483e9b46ac5) ioctl$KVM_CREATE_GUEST_MEMFD(r5, 0xc040aed4, &(0x7f00000050c0)={0x10, 0x1}) syz_open_procfs(r4, &(0x7f0000005100)='schedstat\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000005140)='./file0/../file0\x00', 0x14) ioctl$VFAT_IOCTL_READDIR_SHORT(r6, 0x82187202, &(0x7f0000005180)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r10 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg(r10, &(0x7f0000005880)={&(0x7f00000053c0)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f00000057c0)=[{&(0x7f0000005440)=""/57, 0x39}, {&(0x7f0000005480)=""/220, 0xdc}, {&(0x7f0000005580)=""/149, 0x95}, {&(0x7f0000005640)=""/176, 0xb0}, {&(0x7f0000005700)=""/178, 0xb2}], 0x5, &(0x7f0000005800)=""/97, 0x61}, 0x100) write$bt_hci(r5, &(0x7f00000058c0)={0x1, @write_class_of_dev={{0xc24, 0x3}, {"b1c606"}}}, 0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000005940)={0x4, &(0x7f0000005900)=[{0x1, 0xb, 0x0, 0x6}, {0x7, 0x3, 0x9, 0xffffffff}, {0x2, 0x7, 0x5, 0x9}, {0x8, 0x2, 0x2a, 0x6}]}) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000005980)={0x3adc, 0x3}, 0x4) 1.658939055s ago: executing program 1 (id=7052): socket(0x10, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) mkdirat$cgroup(r0, &(0x7f00000000c0)='syz1\x00', 0x1ff) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x8000) syz_usb_control_io$hid(r2, 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000340), 0x2, 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000010000104fcffffff8000000000000000b4608a08aa703f09c96460d7033403bbcaeb5893f79251f22ecd3c199f221db1f8752d31ba75395798b6d5a9c9a2c8bafc7dd869056a452cd2aadd9e1dd973a8ac122f60aa4c44a4e817f18aa7f49c3b766cafea42a1d37220f6a772b15142ccb7d355f673e1a7550086e87200f3abb9696f730fa892c43466ee14f85140159c9cd9cafc057c5bc31972cad5c7482dae73", @ANYRES32=r5, @ANYBLOB="0388010004c10000"], 0x20}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000023c0)={{0x1, 0x1, 0x18, r3, {0xf}}, './file0\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='nv', 0x2) write$binfmt_script(r3, &(0x7f0000000200), 0xfffffd9d) r6 = openat$sndseq(0xffffff9c, &(0x7f0000000180), 0xff57ca7a5a68be80) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r6, 0xc058534f, &(0x7f0000000280)={{0x9, 0x8}, 0x1, 0x40, 0x7fff, {0x6, 0x8}, 0xb, 0x6}) syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="40100d"], 0x0, 0x0, 0x0}, 0x0) mkdirat$cgroup(r0, &(0x7f0000000100)='syz0\x00', 0x1ff) 980.030558ms ago: executing program 9 (id=7053): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f) read$dsp(r0, &(0x7f0000000340)=""/36, 0x24) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sysctl(0xffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0) semget$private(0x0, 0x2, 0x200) umount2(0x0, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x1, 0x3966, 0x1, 0x6000, 0xfffffffc, r6, r7, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@ipv6_getroute={0x64, 0x1a, 0x20, 0x70bd2a, 0x25dfdbfd, {0xa, 0x14, 0x20, 0x4, 0xfc, 0x1, 0xff, 0x4, 0x2100}, [@RTA_EXPIRES={0x8, 0x17, 0x37b08751}, @RTA_PRIORITY={0x8, 0x6, 0x4}, @RTA_UID={0x8, 0x19, r6}, @RTA_EXPIRES={0x8, 0x17, 0x2e5b}, @RTA_OIF={0x8, 0x4, r3}, @RTA_PREF={0x5, 0x14, 0x1}, @RTA_PRIORITY={0x8, 0x6, 0x6}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x8}, @RTA_UID={0x8, 0x19, r6}]}, 0x64}, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2) ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x7) 871.504985ms ago: executing program 5 (id=7054): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001400030400000000000000000a3f0000", @ANYRES32=r1, @ANYBLOB="14000200ff2300000000000000000000000000011400060000000000060000000000000000000000080008000004"], 0x48}}, 0x0) (fail_nth: 5) 788.602785ms ago: executing program 4 (id=7055): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x278, &(0x7f0000000340)={0x0, 0x0, 0x13580}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000000)) syz_usbip_server_init(0x6) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req={0x3, 0x6, 0x7}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000002780)={0x0, @in={{0x2, 0x4e24, @empty}}, 0xfff7, 0x3}, 0x88) write(r5, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) syz_open_dev$tty20(0xc, 0x4, 0x1) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/163, 0xa3}, {&(0x7f0000000480)=""/109, 0x6d}, {&(0x7f0000000600)=""/227, 0xe3}, {&(0x7f0000000180)}, {&(0x7f0000000700)=""/4096, 0x1000}, {0x0}, {&(0x7f0000002700)=""/97, 0x61}], 0x7) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000300)='source', &(0x7f0000000180)='4:,=\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r0, 0x0, 0x5004) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, 0x0, 0x0) 694.210184ms ago: executing program 5 (id=7056): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="bcea"]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f00000028c0)={0x2020}, 0x2020) (fail_nth: 5) 76.973761ms ago: executing program 1 (id=7057): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x81c0, 0x0) acct(&(0x7f0000000080)='./file2\x00') execve(&(0x7f0000000140)='./file2\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x0, @empty=0x1000000}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)='\b\x00', 0x2}, {&(0x7f0000000100)="6306bc3795f8", 0x6}], 0x2, &(0x7f0000000180)=[@ip_retopts={{0x14, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0x4, [@empty]}]}}}], 0x14}, 0x0) 241.028µs ago: executing program 1 (id=7058): socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48) socket$inet6(0xa, 0x80002, 0x0) socket$inet6(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) socket$inet6_sctp(0xa, 0x5, 0x84) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1, @ANYRESHEX=r2], 0x15) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_IRQCHIP(r4, 0x400caed0, &(0x7f0000000980)={0x1, 0x0, @ioapic={0xffffffff, 0x296d, 0x4, 0x6, 0x0, [{0x98, 0x20, 0x7f, '\x00', 0x7f}, {0x41, 0x8, 0x81, '\x00', 0x7}, {0xf, 0x5, 0x2, '\x00', 0x13}, {0x3, 0x3e, 0x8, '\x00', 0x8f}, {0x3, 0x7f, 0x91, '\x00', 0xa}, {0xf, 0xe3, 0x0, '\x00', 0xac}, {0x83, 0x8, 0x6, '\x00', 0x8}, {0x1, 0xfa, 0x6, '\x00', 0x67}, {0x2, 0x7, 0x2, '\x00', 0x2}, {0x8, 0x4, 0x45, '\x00', 0x9f}, {0xf, 0x8, 0x6, '\x00', 0x3}, {0x2, 0x4c, 0x43, '\x00', 0xa}, {0x7, 0x6, 0x2, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x7}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0x8, 0x5e, 0x4, '\x00', 0x3}, {0x5, 0xa0, 0x47, '\x00', 0x6}, {0x7, 0x3, 0x1, '\x00', 0xa7}, {0x4, 0x0, 0x7, '\x00', 0x7}, {0x5e, 0xa, 0x7, '\x00', 0x3}, {0x7f, 0x6, 0xca, '\x00', 0x4}, {0x93, 0x44, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x0, '\x00', 0xfc}, {0x6, 0xc, 0xc6, '\x00', 0x8}]}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) socket$kcm(0x10, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x4}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$video(&(0x7f0000002e00), 0x8, 0x2000) socket$nl_rdma(0x10, 0x3, 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x81}, 0x10) pipe2(&(0x7f0000000040), 0x800) 0s ago: executing program 9 (id=7059): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_FSCOUNTS(r1, 0x80205871, &(0x7f00000001c0)) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x2a, 0x107, 0xfffffffc, 0x25dfdbff, {0x3, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @uid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES16=r2], 0xbc}}, 0x24048800) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) pread64(r3, &(0x7f0000000100)=""/79, 0x4f, 0x1ffeffc) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000180)={0x17, 0xbe, &(0x7f00000000c0)="c29d170e110761a93469b3349cdee3f6205d6b0c55642d72d0c2d2525d1d36601329470fce360979c0279154a651ee93af3652b6e4808e007367b44399e4919cb5b6fa6c63a0441796d7f81b2b590e86197f8cd1a579cd17c69782c843f1b641a4c302aa1dbecff9776e2d6021c417ff52c7d66743ba7d0485d4a21bf66527d94aae870673729fce9bd8271e8823baea505d6ab3c6ee97dbd77b57fb05361abe3e79970e39fe23234bb11a68e6395c5152397ce25d36309f41d5ca531baa"}) kernel console output (not intermixed with test programs): 1678.960599][T30976] ? lockdep_hardirqs_on+0x78/0x100 [ 1678.960621][T30976] do_fast_syscall_32+0x32/0x70 [ 1678.960642][T30976] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1678.960661][T30976] RIP: 0023:0xf7fc2f7c [ 1678.960674][T30976] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1678.960688][T30976] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1678.960703][T30976] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000800000c0 [ 1678.960713][T30976] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 1678.960721][T30976] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1678.960730][T30976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1678.960740][T30976] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1678.960760][T30976] [ 1678.961116][T30976] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6671'. [ 1678.992175][T30978] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6672'. [ 1679.052244][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1679.055190][T30978] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6672'. [ 1679.507186][T20365] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 1679.671088][T20365] usb 9-1: Using ep0 maxpacket: 32 [ 1679.674917][T20365] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1679.679247][T20365] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1679.688280][T20365] usb 9-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1679.692144][T20365] usb 9-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1679.695450][T20365] usb 9-1: Product: syz [ 1679.697099][T20365] usb 9-1: Manufacturer: syz [ 1679.704184][T20365] hub 9-1:4.0: USB hub found [ 1680.050844][T20365] hub 9-1:4.0: config failed, hub has too many ports! (err -19) [ 1680.168019][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1680.395644][T20365] usb 9-1: USB disconnect, device number 33 [ 1681.305235][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1681.359605][T29313] usb 10-1: new high-speed USB device number 68 using dummy_hcd [ 1681.554407][T29313] usb 10-1: Using ep0 maxpacket: 32 [ 1681.558215][T29313] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1681.562019][T29313] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1681.567726][T29313] usb 10-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1681.571436][T29313] usb 10-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1681.574067][T29313] usb 10-1: Product: syz [ 1681.575725][T29313] usb 10-1: Manufacturer: syz [ 1681.583658][T29313] hub 10-1:4.0: USB hub found [ 1681.810636][T29313] hub 10-1:4.0: config failed, can't read hub descriptor (err -22) [ 1681.837871][T29313] usb 10-1: USB disconnect, device number 68 [ 1682.092000][T31023] tipc: Enabling of bearer rejected, failed to enable media [ 1682.356035][ T8258] usb 14-1: new high-speed USB device number 56 using dummy_hcd [ 1682.421080][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1682.486202][T29313] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 1682.540156][ T8258] usb 14-1: Using ep0 maxpacket: 32 [ 1682.544303][ T8258] usb 14-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1682.549030][ T8258] usb 14-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1682.556876][ T8258] usb 14-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1682.560887][ T8258] usb 14-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1682.565426][ T8258] usb 14-1: Product: syz [ 1682.567283][ T8258] usb 14-1: Manufacturer: syz [ 1682.573917][ T8258] hub 14-1:4.0: USB hub found [ 1682.660412][T29313] usb 9-1: config 0 has no interfaces? [ 1682.683416][T29313] usb 9-1: New USB device found, idVendor=2e1a, idProduct=4c41, bcdDevice=c4.96 [ 1682.687463][T29313] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1682.692706][T29313] usb 9-1: Product: syz [ 1682.695427][T29313] usb 9-1: Manufacturer: syz [ 1682.697793][T29313] usb 9-1: SerialNumber: syz [ 1682.747677][T29313] usb 9-1: config 0 descriptor?? [ 1682.878353][ T8258] hub 14-1:4.0: config failed, can't read hub descriptor (err -22) [ 1682.910087][ T8258] usb 14-1: USB disconnect, device number 56 [ 1683.061136][T15608] usb 9-1: USB disconnect, device number 34 [ 1683.558334][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1683.764169][ T8258] usb 14-1: new high-speed USB device number 57 using dummy_hcd [ 1683.948266][ T8258] usb 14-1: Using ep0 maxpacket: 32 [ 1683.951345][ T8258] usb 14-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1683.954772][ T8258] usb 14-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1683.959208][ T8258] usb 14-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1683.962061][ T8258] usb 14-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1683.964689][ T8258] usb 14-1: Product: syz [ 1683.966132][ T8258] usb 14-1: Manufacturer: syz [ 1683.974044][ T8258] hub 14-1:4.0: USB hub found [ 1684.262040][ T8258] hub 14-1:4.0: config failed, hub has too many ports! (err -19) [ 1684.598965][T15608] usb 14-1: USB disconnect, device number 57 [ 1684.673992][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1685.811654][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1686.927078][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1687.328472][T31081] 9pnet_virtio: no channels available for device syz [ 1687.366527][T31082] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(6) [ 1687.368997][T31082] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1687.371253][T20365] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1687.377163][T31082] vhci_hcd vhci_hcd.0: Device attached [ 1687.443456][T31088] tipc: Enabling of bearer rejected, failed to enable media [ 1687.561182][T20365] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1687.568404][T20365] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1687.573694][T20365] usb 6-1: Product: syz [ 1687.577957][T20365] usb 6-1: Manufacturer: syz [ 1687.579738][T20365] usb 6-1: SerialNumber: syz [ 1687.661995][T31083] vhci_hcd: connection closed [ 1687.662263][ T12] vhci_hcd vhci_hcd.9: stop threads [ 1687.666742][ T12] vhci_hcd vhci_hcd.9: release socket [ 1687.668508][ T12] vhci_hcd vhci_hcd.9: disconnect device [ 1687.685328][T15429] usb 56-1: enqueue for inactive port 0 [ 1687.858576][T15608] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 1688.025079][T15608] usb 9-1: config 0 has no interfaces? [ 1688.030071][T15608] usb 9-1: New USB device found, idVendor=2e1a, idProduct=4c41, bcdDevice=c4.96 [ 1688.039878][T15608] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1688.043396][T15608] usb 9-1: Product: syz [ 1688.045056][T15608] usb 9-1: Manufacturer: syz [ 1688.046489][T15608] usb 9-1: SerialNumber: syz [ 1688.050168][T15608] usb 9-1: config 0 descriptor?? [ 1688.053530][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1688.219299][T15429] usb usb56-port1: attempt power cycle [ 1688.276468][T31098] tipc: Enabling of bearer rejected, failed to enable media [ 1688.320846][ T8258] usb 9-1: USB disconnect, device number 35 [ 1688.682652][ T9] usb 10-1: new high-speed USB device number 69 using dummy_hcd [ 1688.823446][T15429] usb usb56-port1: unable to enumerate USB device [ 1688.846270][ T9] usb 10-1: config 0 has no interfaces? [ 1688.851565][ T9] usb 10-1: New USB device found, idVendor=2e1a, idProduct=4c41, bcdDevice=c4.96 [ 1688.861968][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1688.865404][ T9] usb 10-1: Product: syz [ 1688.867161][ T9] usb 10-1: Manufacturer: syz [ 1688.868963][ T9] usb 10-1: SerialNumber: syz [ 1688.873309][ T9] usb 10-1: config 0 descriptor?? [ 1689.180058][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1689.185662][T20365] rtl8150 6-1:1.0: couldn't reset the device [ 1689.189885][T20365] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 1689.601300][T20365] usb 10-1: USB disconnect, device number 69 [ 1690.306858][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1690.308407][T15608] usb 6-1: USB disconnect, device number 70 [ 1691.119042][T15429] usb 14-1: new high-speed USB device number 58 using dummy_hcd [ 1691.162576][T29313] usb 10-1: new high-speed USB device number 70 using dummy_hcd [ 1691.281445][T15429] usb 14-1: Using ep0 maxpacket: 32 [ 1691.324764][T29313] usb 10-1: Using ep0 maxpacket: 32 [ 1691.327977][T29313] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1691.331409][T29313] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1691.336015][T29313] usb 10-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1691.339317][T29313] usb 10-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1691.341936][T29313] usb 10-1: Product: syz [ 1691.343507][T29313] usb 10-1: Manufacturer: syz [ 1691.358517][T29313] hub 10-1:4.0: USB hub found [ 1691.443892][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1691.452751][T15429] usb 14-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1691.456900][T15429] usb 14-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1691.462017][T15429] usb 14-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1691.465069][T15429] usb 14-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1691.467943][T15429] usb 14-1: Product: syz [ 1691.469318][T15429] usb 14-1: Manufacturer: syz [ 1691.474900][T15429] hub 14-1:4.0: USB hub found [ 1691.670702][T29313] hub 10-1:4.0: config failed, hub has too many ports! (err -19) [ 1691.781030][T31144] tipc: Enabling of bearer rejected, failed to enable media [ 1691.817165][T15429] hub 14-1:4.0: config failed, hub has too many ports! (err -19) [ 1692.024477][T29313] usb 10-1: USB disconnect, device number 70 [ 1692.202206][T15608] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 1692.213314][T15429] usb 14-1: USB disconnect, device number 58 [ 1692.367209][T15608] usb 9-1: config 0 has no interfaces? [ 1692.372131][T15608] usb 9-1: New USB device found, idVendor=2e1a, idProduct=4c41, bcdDevice=c4.96 [ 1692.375793][T15608] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1692.378746][T15608] usb 9-1: Product: syz [ 1692.380224][T15608] usb 9-1: Manufacturer: syz [ 1692.381623][T15608] usb 9-1: SerialNumber: syz [ 1692.384771][T15608] usb 9-1: config 0 descriptor?? [ 1692.559591][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1692.688990][T15608] usb 9-1: USB disconnect, device number 36 [ 1693.674932][T31169] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6715'. [ 1693.686122][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1694.590324][T31191] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1694.592542][T31191] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1694.595670][T31191] vhci_hcd vhci_hcd.0: Device attached [ 1694.825860][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1694.896670][T31192] vhci_hcd: connection closed [ 1694.896926][ T1167] vhci_hcd vhci_hcd.5: stop threads [ 1694.903557][ T8258] usb 48-1: SetAddress Request (71) to port 0 [ 1694.905538][ T8258] usb 48-1: new SuperSpeed USB device number 71 using vhci_hcd [ 1694.908279][ T1167] vhci_hcd vhci_hcd.5: release socket [ 1694.909981][ T1167] vhci_hcd vhci_hcd.5: disconnect device [ 1694.931825][ T8258] usb 48-1: enqueue for inactive port 0 [ 1694.964374][T20365] usb 14-1: new high-speed USB device number 59 using dummy_hcd [ 1695.138757][T20365] usb 14-1: too many configurations: 9, using maximum allowed: 8 [ 1695.150084][T20365] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1695.153677][T20365] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1695.157887][T20365] usb 14-1: config 0 interface 0 has no altsetting 0 [ 1695.182766][T20365] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1695.186390][T20365] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1695.190712][T20365] usb 14-1: config 0 interface 0 has no altsetting 0 [ 1695.208682][T20365] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1695.212295][T20365] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1695.216686][T20365] usb 14-1: config 0 interface 0 has no altsetting 0 [ 1695.220710][T20365] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1695.223743][T20365] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1695.227161][T20365] usb 14-1: config 0 interface 0 has no altsetting 0 [ 1695.230154][T20365] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1695.232953][T20365] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1695.236319][T20365] usb 14-1: config 0 interface 0 has no altsetting 0 [ 1695.239322][T20365] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1695.242161][T20365] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1695.245456][T20365] usb 14-1: config 0 interface 0 has no altsetting 0 [ 1695.249243][T20365] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1695.252739][T20365] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1695.256075][T20365] usb 14-1: config 0 interface 0 has no altsetting 0 [ 1695.258981][T20365] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1695.261795][T20365] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1695.265069][T20365] usb 14-1: config 0 interface 0 has no altsetting 0 [ 1695.269145][T20365] usb 14-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1695.271950][T20365] usb 14-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1695.274468][T20365] usb 14-1: Product: syz [ 1695.275729][T20365] usb 14-1: Manufacturer: syz [ 1695.277121][T20365] usb 14-1: SerialNumber: syz [ 1695.280102][T20365] usb 14-1: config 0 descriptor?? [ 1695.286838][T20365] yurex 14-1:0.0: USB YUREX device now attached to Yurex #0 [ 1695.377485][ T8258] usb usb48-port1: attempt power cycle [ 1695.514380][T20365] usb 14-1: USB disconnect, device number 59 [ 1695.521368][T20365] yurex 14-1:0.0: USB YUREX #0 now disconnected [ 1695.949983][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1696.015691][ T8258] usb usb48-port1: unable to enumerate USB device [ 1696.134216][T15608] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1696.231643][T20365] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 1696.296617][T15608] usb 6-1: Using ep0 maxpacket: 32 [ 1696.301007][T15608] usb 6-1: config 1 interface 0 altsetting 3 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1696.309654][T15608] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1696.313524][T15608] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1696.316346][T15608] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1696.318978][T15608] usb 6-1: Product: ᐊ [ 1696.320341][T15608] usb 6-1: Manufacturer: 긠㧉ﴽ猞ላ襾넉⟭䇁ڛ៓硰⟟棁⣳㖚뱍芒ꦎ⏵ [ 1696.323531][T15608] usb 6-1: SerialNumber: 毸ꮮ瀺躑꼹粲텢诼굞霌샊ﭾ餁桔콮㌺噬⼇濿寪佉­欪足 [ 1696.332478][T31203] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1696.336733][T31207] tipc: Enabling of bearer rejected, failed to enable media [ 1696.394923][T20365] usb 9-1: Using ep0 maxpacket: 8 [ 1696.402192][T20365] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1696.407615][T20365] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1696.411507][T20365] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 1696.416199][T20365] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1696.420301][T20365] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1696.425585][T20365] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1696.430733][T20365] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1696.567043][T15608] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 1696.572225][T15608] usb 6-1: USB disconnect, device number 71 [ 1696.657244][T20365] usb 9-1: GET_CAPABILITIES returned 0 [ 1696.658966][T20365] usbtmc 9-1:16.0: can't read capabilities [ 1696.762539][ T5610] usb 14-1: new high-speed USB device number 60 using dummy_hcd [ 1696.882613][T29313] usb 9-1: USB disconnect, device number 37 [ 1696.931394][ T5610] usb 14-1: config 0 has no interfaces? [ 1696.942153][ T5610] usb 14-1: New USB device found, idVendor=2e1a, idProduct=4c41, bcdDevice=c4.96 [ 1696.945096][ T5610] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1696.947778][ T5610] usb 14-1: Product: syz [ 1696.949304][ T5610] usb 14-1: Manufacturer: syz [ 1696.950905][ T5610] usb 14-1: SerialNumber: syz [ 1696.974464][ T5610] usb 14-1: config 0 descriptor?? [ 1697.065717][T27560] Bluetooth: hci0: command 0x0406 tx timeout [ 1697.065733][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1697.307944][T15429] usb 14-1: USB disconnect, device number 60 [ 1698.192157][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1698.457703][T31241] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6730'. [ 1698.531738][T31244] syzkaller0: entered promiscuous mode [ 1698.533853][T31244] syzkaller0: entered allmulticast mode [ 1698.542729][T31244] tipc: Enabled bearer , priority 0 [ 1698.549774][T31244] tipc: Resetting bearer [ 1698.558795][T31243] tipc: Resetting bearer [ 1698.581460][T31243] tipc: Disabling bearer [ 1698.982824][T31253] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1698.985557][T31253] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1699.008065][T31253] vhci_hcd vhci_hcd.0: Device attached [ 1699.043958][T31257] FAULT_INJECTION: forcing a failure. [ 1699.043958][T31257] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1699.048972][T31257] CPU: 2 UID: 0 PID: 31257 Comm: syz.9.6733 Tainted: G L syzkaller #0 PREEMPT(full) [ 1699.048996][T31257] Tainted: [L]=SOFTLOCKUP [ 1699.049001][T31257] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1699.049010][T31257] Call Trace: [ 1699.049015][T31257] [ 1699.049021][T31257] dump_stack_lvl+0x100/0x190 [ 1699.049095][T31257] should_fail_ex.cold+0x5/0xa [ 1699.049109][T31257] ? prepare_alloc_pages+0x16d/0x5f0 [ 1699.049129][T31257] should_fail_alloc_page+0xeb/0x140 [ 1699.049146][T31257] prepare_alloc_pages+0x1f0/0x5f0 [ 1699.049164][T31257] ? kmalloc_reserve+0x148/0x350 [ 1699.049205][T31257] ? __alloc_skb+0x185/0x710 [ 1699.049219][T31257] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 1699.049241][T31257] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1699.049269][T31257] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1699.049299][T31257] ? rcu_is_watching+0x12/0xc0 [ 1699.049316][T31257] ? trace_kmem_cache_alloc+0xd5/0x100 [ 1699.049331][T31257] ? __kasan_slab_alloc+0x89/0x90 [ 1699.049347][T31257] ? kmem_cache_alloc_node_noprof+0x2a9/0x6f0 [ 1699.049368][T31257] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1699.049388][T31257] ? policy_nodemask+0xed/0x4f0 [ 1699.049406][T31257] alloc_pages_mpol+0x1fb/0x540 [ 1699.049423][T31257] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1699.049438][T31257] ? __alloc_skb+0x5b7/0x710 [ 1699.049450][T31257] ? __pfx___alloc_skb+0x10/0x10 [ 1699.049466][T31257] alloc_pages_noprof+0x1a/0x160 [ 1699.049485][T31257] alloc_skb_with_frags+0x4e7/0x760 [ 1699.049501][T31257] ? __might_fault+0xc5/0x140 [ 1699.049524][T31257] sock_alloc_send_pskb+0x801/0x980 [ 1699.049546][T31257] ? _copy_from_iter+0x270/0x1690 [ 1699.049595][T31257] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1699.049617][T31257] ? _parse_integer_limit+0x17f/0x1d0 [ 1699.049632][T31257] ? iov_iter_advance+0xac/0x6d0 [ 1699.049667][T31257] tun_get_user+0x904/0x3c20 [ 1699.049692][T31257] ? __pfx_tun_get_user+0x10/0x10 [ 1699.049708][T31257] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1699.049728][T31257] ? find_held_lock+0x2b/0x80 [ 1699.049745][T31257] ? tun_get+0x191/0x370 [ 1699.049757][T31257] ? tun_get+0x191/0x370 [ 1699.049773][T31257] tun_chr_write_iter+0xdc/0x200 [ 1699.049789][T31257] vfs_write+0x6ac/0x1070 [ 1699.049806][T31257] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1699.049822][T31257] ? __pfx_vfs_write+0x10/0x10 [ 1699.049835][T31257] ? find_held_lock+0x2b/0x80 [ 1699.049863][T31257] ksys_write+0x12a/0x250 [ 1699.049878][T31257] ? __pfx_ksys_write+0x10/0x10 [ 1699.049892][T31257] ? ksys_write+0x1ac/0x250 [ 1699.049908][T31257] ? rcu_is_watching+0x12/0xc0 [ 1699.049926][T31257] __do_fast_syscall_32+0xe7/0x970 [ 1699.049975][T31257] ? lockdep_hardirqs_on+0x78/0x100 [ 1699.049995][T31257] do_fast_syscall_32+0x32/0x70 [ 1699.050015][T31257] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1699.050033][T31257] RIP: 0023:0xf70bef7c [ 1699.050045][T31257] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1699.050058][T31257] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 1699.050074][T31257] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 1699.050083][T31257] RDX: 0000000000000ffe RSI: 0000000000000000 RDI: 0000000000000000 [ 1699.050091][T31257] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1699.050099][T31257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1699.050107][T31257] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1699.050124][T31257] [ 1699.318704][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1699.318788][T15429] usb 48-1: SetAddress Request (75) to port 0 [ 1699.326091][T15429] usb 48-1: new SuperSpeed USB device number 75 using vhci_hcd [ 1699.432196][T31254] vhci_hcd: connection reset by peer [ 1699.435693][T20065] vhci_hcd vhci_hcd.5: stop threads [ 1699.438049][T20065] vhci_hcd vhci_hcd.5: release socket [ 1699.440344][T20065] vhci_hcd vhci_hcd.5: disconnect device [ 1699.546203][T20365] usb 14-1: new high-speed USB device number 61 using dummy_hcd [ 1699.708675][T20365] usb 14-1: Using ep0 maxpacket: 32 [ 1699.712090][T20365] usb 14-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1699.716412][T20365] usb 14-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1699.721781][T20365] usb 14-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1699.725298][T20365] usb 14-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1699.728106][T20365] usb 14-1: Product: syz [ 1699.729461][T20365] usb 14-1: Manufacturer: syz [ 1699.736974][T20365] hub 14-1:4.0: USB hub found [ 1700.083795][T31270] FAULT_INJECTION: forcing a failure. [ 1700.083795][T31270] name failslab, interval 1, probability 0, space 0, times 0 [ 1700.088696][T31270] CPU: 1 UID: 0 PID: 31270 Comm: syz.5.6738 Tainted: G L syzkaller #0 PREEMPT(full) [ 1700.088722][T31270] Tainted: [L]=SOFTLOCKUP [ 1700.088727][T31270] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1700.088737][T31270] Call Trace: [ 1700.088744][T31270] [ 1700.088751][T31270] dump_stack_lvl+0x100/0x190 [ 1700.088782][T31270] should_fail_ex.cold+0x5/0xa [ 1700.088803][T31270] should_failslab+0xc2/0x120 [ 1700.088823][T31270] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1700.088847][T31270] ? inet_bind2_bucket_create+0x36/0x5f0 [ 1700.088863][T31270] ? do_raw_spin_lock+0x128/0x260 [ 1700.088884][T31270] inet_bind2_bucket_create+0x36/0x5f0 [ 1700.088904][T31270] __inet_hash_connect+0x1527/0x2000 [ 1700.088929][T31270] ? __pfx___inet6_check_established+0x10/0x10 [ 1700.088951][T31270] ? __pfx___inet_hash_connect+0x10/0x10 [ 1700.088969][T31270] ? inet6_ehashfn+0x25/0x3e0 [ 1700.088988][T31270] ? inet6_hash_connect+0xe7/0x180 [ 1700.089009][T31270] tcp_v6_connect+0x1550/0x23e0 [ 1700.089029][T31270] ? tcp_sendmsg_fastopen+0x24d/0x750 [ 1700.089043][T31270] ? tcp_sendmsg_locked+0x27bb/0x4500 [ 1700.089063][T31270] ? __pfx_tcp_v6_connect+0x10/0x10 [ 1700.089093][T31270] __inet_stream_connect+0x208/0xfa0 [ 1700.089122][T31270] ? __pfx___inet_stream_connect+0x10/0x10 [ 1700.089156][T31270] tcp_sendmsg_fastopen+0x3ed/0x750 [ 1700.089176][T31270] tcp_sendmsg_locked+0x27bb/0x4500 [ 1700.089196][T31270] ? __lock_acquire+0x4a5/0x2630 [ 1700.089219][T31270] ? __lock_acquire+0x4a5/0x2630 [ 1700.089242][T31270] ? __pfx___might_resched+0x10/0x10 [ 1700.089257][T31270] ? __lock_acquire+0x4a5/0x2630 [ 1700.089281][T31270] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 1700.089303][T31270] ? do_raw_spin_lock+0x128/0x260 [ 1700.089319][T31270] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1700.089341][T31270] ? __local_bh_enable_ip+0x9e/0x120 [ 1700.089364][T31270] tcp_sendmsg+0x2e/0x50 [ 1700.089377][T31270] ? __pfx_tcp_sendmsg+0x10/0x10 [ 1700.089391][T31270] inet6_sendmsg+0xb9/0x140 [ 1700.089412][T31270] ____sys_sendmsg+0x704/0xb70 [ 1700.089436][T31270] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1700.089461][T31270] ? _kstrtoull+0x13c/0x1f0 [ 1700.089478][T31270] ? __pfx__kstrtoull+0x10/0x10 [ 1700.089496][T31270] ___sys_sendmsg+0x190/0x1e0 [ 1700.089518][T31270] ? __pfx____sys_sendmsg+0x10/0x10 [ 1700.089540][T31270] ? __lock_acquire+0x4a5/0x2630 [ 1700.089585][T31270] __sys_sendmmsg+0x2ff/0x430 [ 1700.089604][T31270] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1700.089628][T31270] ? __fget_files+0x215/0x3d0 [ 1700.089671][T31270] ? fput+0x79/0x100 [ 1700.089695][T31270] ? ksys_write+0x1ac/0x250 [ 1700.089717][T31270] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 1700.089737][T31270] ? lockdep_hardirqs_on+0x78/0x100 [ 1700.089759][T31270] __do_fast_syscall_32+0xe7/0x970 [ 1700.089782][T31270] ? lockdep_hardirqs_on+0x78/0x100 [ 1700.089805][T31270] do_fast_syscall_32+0x32/0x70 [ 1700.089827][T31270] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1700.089847][T31270] RIP: 0023:0xf7fc2f7c [ 1700.089860][T31270] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1700.089876][T31270] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 1700.089893][T31270] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 1700.089903][T31270] RDX: 0000000000000001 RSI: 00000000200880d8 RDI: 0000000000000000 [ 1700.089913][T31270] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1700.089922][T31270] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1700.089931][T31270] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1700.089952][T31270] [ 1700.348137][ T5832] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 1700.369825][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1700.445316][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1700.521084][ T5832] usb 9-1: Using ep0 maxpacket: 32 [ 1700.527194][ T5832] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1700.530723][ T5832] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1700.535291][ T5832] usb 9-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1700.545662][ T5832] usb 9-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1700.548390][ T5832] usb 9-1: Product: syz [ 1700.549805][ T5832] usb 9-1: Manufacturer: syz [ 1700.581677][ T5832] hub 9-1:4.0: USB hub found [ 1700.947077][ T5832] hub 9-1:4.0: config failed, hub has too many ports! (err -19) [ 1701.465676][ T8258] usb 9-1: USB disconnect, device number 38 [ 1701.571905][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1702.076012][T20365] hub 14-1:4.0: config failed, can't read hub descriptor (err -22) [ 1702.150804][T20365] usb 14-1: USB disconnect, device number 61 [ 1702.176777][T31289] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6744'. [ 1702.405958][ T5832] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 1702.590050][ T5832] usb 9-1: Using ep0 maxpacket: 32 [ 1702.595794][ T5832] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1702.601348][ T5832] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1702.629081][ T5832] usb 9-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1702.642902][ T5832] usb 9-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1702.658400][ T5832] usb 9-1: Product: syz [ 1702.660278][ T5832] usb 9-1: Manufacturer: syz [ 1702.685302][ T5832] hub 9-1:4.0: USB hub found [ 1702.698229][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1703.066248][T31308] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1703.068304][T31308] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1703.075670][T31308] vhci_hcd vhci_hcd.0: Device attached [ 1703.525361][T31309] vhci_hcd: connection closed [ 1703.525734][ T1167] vhci_hcd vhci_hcd.5: stop threads [ 1703.538126][ T1167] vhci_hcd vhci_hcd.5: release socket [ 1703.547382][ T1167] vhci_hcd vhci_hcd.5: disconnect device [ 1703.835592][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1704.039826][ T5832] hub 9-1:4.0: config failed, can't read hub descriptor (err -22) [ 1704.086149][ T5832] usb 9-1: USB disconnect, device number 39 [ 1704.864746][T15429] usb 48-1: device descriptor read/8, error -110 [ 1704.953418][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1705.492965][ T9] usb 10-1: new high-speed USB device number 71 using dummy_hcd [ 1705.656090][ T9] usb 10-1: Using ep0 maxpacket: 32 [ 1705.674249][ T9] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1705.681993][ T9] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1705.704893][ T9] usb 10-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1705.709153][ T9] usb 10-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1705.722428][ T9] usb 10-1: Product: syz [ 1705.728196][ T9] usb 10-1: Manufacturer: syz [ 1705.794548][ T9] hub 10-1:4.0: USB hub found [ 1706.077791][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1706.162448][ T9] hub 10-1:4.0: config failed, hub has too many ports! (err -19) [ 1706.168445][T15429] usb usb48-port1: attempt power cycle [ 1706.565941][T15608] usb 10-1: USB disconnect, device number 71 [ 1706.674585][ T9] usb 6-1: new full-speed USB device number 72 using dummy_hcd [ 1706.782907][T15429] usb usb48-port1: unable to enumerate USB device [ 1706.838126][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1706.845811][ T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1706.856764][ T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1706.864743][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1706.875348][T31364] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(6) [ 1706.877646][T31364] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1706.880805][T31364] vhci_hcd vhci_hcd.0: Device attached [ 1707.062470][T31369] tipc: Enabling of bearer rejected, failed to enable media [ 1707.102557][T31351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1707.107654][T31351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1707.113565][ T9] usb 6-1: usb_control_msg returned -32 [ 1707.118187][ T9] usbtmc 6-1:16.0: can't read capabilities [ 1707.171856][T15429] usb 56-1: SetAddress Request (35) to port 0 [ 1707.175526][T15429] usb 56-1: new SuperSpeed USB device number 35 using vhci_hcd [ 1707.204322][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1707.350524][T15427] usb 6-1: USB disconnect, device number 72 [ 1707.464678][T20365] usb 10-1: new high-speed USB device number 72 using dummy_hcd [ 1707.560919][T31365] vhci_hcd: connection reset by peer [ 1707.562128][T31378] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 1707.562842][ T120] vhci_hcd vhci_hcd.9: stop threads [ 1707.567038][ T120] vhci_hcd vhci_hcd.9: release socket [ 1707.568981][ T120] vhci_hcd vhci_hcd.9: disconnect device [ 1707.628962][T20365] usb 10-1: config 0 has no interfaces? [ 1707.633607][T20365] usb 10-1: New USB device found, idVendor=2e1a, idProduct=4c41, bcdDevice=c4.96 [ 1707.637402][T20365] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1707.642126][T20365] usb 10-1: Product: syz [ 1707.643915][T20365] usb 10-1: Manufacturer: syz [ 1707.645920][T20365] usb 10-1: SerialNumber: syz [ 1707.651106][T20365] usb 10-1: config 0 descriptor?? [ 1707.922877][T20365] usb 10-1: USB disconnect, device number 72 [ 1707.951338][T31382] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6762'. [ 1708.214092][ T8258] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1708.330857][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1708.345341][T31399] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6766'. [ 1708.352629][ T8258] usb 6-1: device descriptor read/64, error -71 [ 1708.612936][ T8258] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1708.753408][ T8258] usb 6-1: device descriptor read/64, error -71 [ 1708.779039][T31418] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 1708.872728][ T8258] usb usb6-port1: attempt power cycle [ 1709.240689][ T8258] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1709.262837][ T8258] usb 6-1: device descriptor read/8, error -71 [ 1709.457335][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1709.523134][ T8258] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1709.559301][ T8258] usb 6-1: device descriptor read/8, error -71 [ 1709.674654][ T8258] usb usb6-port1: unable to enumerate USB device [ 1709.749856][T15608] usb 10-1: new high-speed USB device number 73 using dummy_hcd [ 1709.912581][T15608] usb 10-1: Using ep0 maxpacket: 32 [ 1709.918375][T15608] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1709.924243][T15608] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1709.931763][T15608] usb 10-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1709.939481][T15608] usb 10-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1709.944575][T15608] usb 10-1: Product: syz [ 1709.948742][T15608] usb 10-1: Manufacturer: syz [ 1709.956565][T15608] hub 10-1:4.0: USB hub found [ 1710.033154][T31441] tipc: Enabling of bearer rejected, failed to enable media [ 1710.464854][ T8258] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 1710.583888][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1710.676398][T15608] hub 10-1:4.0: config failed, can't read hub descriptor (err -22) [ 1710.750454][T15608] usb 10-1: USB disconnect, device number 73 [ 1710.766133][ T8258] usb 9-1: config 0 has no interfaces? [ 1711.369373][ T8258] usb 9-1: New USB device found, idVendor=2e1a, idProduct=4c41, bcdDevice=c4.96 [ 1711.537236][ T8258] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1711.539689][ T8258] usb 9-1: Product: syz [ 1711.540972][ T8258] usb 9-1: Manufacturer: syz [ 1711.542379][ T8258] usb 9-1: SerialNumber: syz [ 1711.559300][ T8258] usb 9-1: config 0 descriptor?? [ 1711.721195][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1712.568567][ T5832] usb 9-1: USB disconnect, device number 40 [ 1712.637939][T31476] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 1712.674785][T15429] usb 56-1: device descriptor read/8, error -110 [ 1712.837133][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1713.121169][T15429] usb usb56-port1: attempt power cycle [ 1713.790236][ T8258] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 1713.801828][T15429] usb usb56-port1: unable to enumerate USB device [ 1713.953041][ T8258] usb 9-1: Using ep0 maxpacket: 32 [ 1713.957827][ T8258] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1713.962556][ T8258] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1713.968710][ T8258] usb 9-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1713.972544][ T8258] usb 9-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1713.974206][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1713.979171][ T8258] usb 9-1: Product: syz [ 1713.980949][ T8258] usb 9-1: Manufacturer: syz [ 1713.992098][ T8258] hub 9-1:4.0: USB hub found [ 1714.469558][ T8258] hub 9-1:4.0: config failed, can't read hub descriptor (err -22) [ 1714.505900][ T8258] usb 9-1: USB disconnect, device number 41 [ 1714.614854][T31512] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6793'. [ 1715.089898][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1715.273441][T31526] tipc: Enabled bearer , priority 0 [ 1715.276384][T31526] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1715.393644][T29244] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 1715.608222][T15429] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1715.620914][T29244] usb 9-1: Using ep0 maxpacket: 32 [ 1715.629450][T29244] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1715.640723][T29244] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1715.649935][T29244] usb 9-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1715.654182][T29244] usb 9-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1715.657901][T29244] usb 9-1: Product: syz [ 1715.660073][T29244] usb 9-1: Manufacturer: syz [ 1715.695346][T29244] hub 9-1:4.0: USB hub found [ 1715.786155][T15429] usb 6-1: config 0 has no interfaces? [ 1715.794891][T15429] usb 6-1: New USB device found, idVendor=2e1a, idProduct=4c41, bcdDevice=c4.96 [ 1715.798675][T15429] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1715.802219][T15429] usb 6-1: Product: syz [ 1715.804049][T15429] usb 6-1: Manufacturer: syz [ 1715.807056][T15429] usb 6-1: SerialNumber: syz [ 1715.818925][T15429] usb 6-1: config 0 descriptor?? [ 1715.991345][T29244] hub 9-1:4.0: config failed, hub has too many ports! (err -19) [ 1716.048656][T15429] usb 6-1: USB disconnect, device number 77 [ 1716.082317][T31525] tipc: Disabling bearer [ 1716.216505][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1716.402462][T16930] usb 9-1: USB disconnect, device number 42 [ 1717.343097][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1717.938406][T31572] syzkaller0: entered promiscuous mode [ 1717.942033][T31572] syzkaller0: entered allmulticast mode [ 1717.950894][T31572] tipc: Enabled bearer , priority 0 [ 1717.956734][T31572] tipc: Resetting bearer [ 1717.969664][T31571] tipc: Resetting bearer [ 1717.996814][T31571] tipc: Disabling bearer [ 1718.469617][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1718.945208][T31589] tipc: Enabling of bearer rejected, failed to enable media [ 1719.061225][T31574] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1719.064944][T31574] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1719.079864][T31574] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1719.081828][T31574] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1719.088040][T31574] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1719.093703][T31574] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1719.368871][T15427] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1719.476980][T15608] usb 10-1: new high-speed USB device number 74 using dummy_hcd [ 1719.598861][T15427] usb 6-1: config 0 has no interfaces? [ 1719.601122][T31611] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1719.603188][T31611] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1719.606894][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1719.644084][T15427] usb 6-1: New USB device found, idVendor=2e1a, idProduct=4c41, bcdDevice=c4.96 [ 1719.650285][T15608] usb 10-1: Using ep0 maxpacket: 32 [ 1719.652314][T15427] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1719.660715][T31611] vhci_hcd vhci_hcd.0: Device attached [ 1719.661475][T15608] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1719.673631][T15427] usb 6-1: Product: syz [ 1719.675126][T15608] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1719.675419][T15427] usb 6-1: Manufacturer: syz [ 1719.684044][T15608] usb 10-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1719.691708][T15608] usb 10-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1719.695198][T15427] usb 6-1: SerialNumber: syz [ 1719.698381][T15608] usb 10-1: Product: syz [ 1719.700224][T15608] usb 10-1: Manufacturer: syz [ 1719.708112][T15427] usb 6-1: config 0 descriptor?? [ 1719.713905][T15608] hub 10-1:4.0: USB hub found [ 1720.007150][T15608] hub 10-1:4.0: config failed, hub has too many ports! (err -19) [ 1720.061907][T15429] usb 46-1: SetAddress Request (18) to port 0 [ 1720.066562][T15429] usb 46-1: new SuperSpeed USB device number 18 using vhci_hcd [ 1720.281011][T15427] usb 6-1: USB disconnect, device number 78 [ 1720.408800][ T8258] usb 10-1: USB disconnect, device number 74 [ 1720.462767][T17993] Bluetooth: hci1: command 0x0406 tx timeout [ 1720.704995][T31613] vhci_hcd: connection reset by peer [ 1720.707418][T24377] vhci_hcd vhci_hcd.4: stop threads [ 1720.709199][T24377] vhci_hcd vhci_hcd.4: release socket [ 1720.711027][T24377] vhci_hcd vhci_hcd.4: disconnect device [ 1720.722518][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1720.898871][T31631] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 1721.243077][T17993] Bluetooth: hci2: command 0x0406 tx timeout [ 1721.331855][T17993] Bluetooth: hci0: command 0x0406 tx timeout [ 1721.331920][T27560] Bluetooth: hci3: command 0x0406 tx timeout [ 1721.667314][T31652] tipc: Enabled bearer , priority 0 [ 1721.676863][T31652] tipc: Resetting bearer [ 1721.708972][T31651] tipc: Disabling bearer [ 1721.849042][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1722.891098][T31662] tipc: Enabled bearer , priority 0 [ 1722.896120][T31662] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1722.975560][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1723.183240][T29244] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1723.582479][T27560] Bluetooth: hci3: command 0x0406 tx timeout [ 1723.593025][T27560] Bluetooth: hci0: command 0x0406 tx timeout [ 1723.982926][ T9] tipc: Node number set to 3398619599 [ 1724.112879][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1724.337759][T29244] usb 6-1: config 0 has no interfaces? [ 1724.405326][T29244] usb 6-1: New USB device found, idVendor=2e1a, idProduct=4c41, bcdDevice=c4.96 [ 1724.408761][T29244] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1724.411238][T29244] usb 6-1: Product: syz [ 1724.412536][T29244] usb 6-1: Manufacturer: syz [ 1724.413966][T29244] usb 6-1: SerialNumber: syz [ 1724.418088][T29244] usb 6-1: config 0 descriptor?? [ 1724.436913][T31678] FAULT_INJECTION: forcing a failure. [ 1724.436913][T31678] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1724.459485][T31678] CPU: 3 UID: 0 PID: 31678 Comm: syz.4.6833 Tainted: G L syzkaller #0 PREEMPT(full) [ 1724.459516][T31678] Tainted: [L]=SOFTLOCKUP [ 1724.459522][T31678] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1724.459533][T31678] Call Trace: [ 1724.459540][T31678] [ 1724.459547][T31678] dump_stack_lvl+0x100/0x190 [ 1724.459583][T31678] should_fail_ex.cold+0x5/0xa [ 1724.459607][T31678] _copy_from_user+0x2e/0xd0 [ 1724.459633][T31678] get_compat_msghdr+0xb3/0x4b0 [ 1724.459654][T31678] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1724.459684][T31678] ___sys_sendmsg+0x1b6/0x1e0 [ 1724.459713][T31678] ? __pfx____sys_sendmsg+0x10/0x10 [ 1724.459748][T31678] ? find_held_lock+0x2b/0x80 [ 1724.459787][T31678] __sys_sendmsg+0x170/0x220 [ 1724.459807][T31678] ? __pfx___sys_sendmsg+0x10/0x10 [ 1724.459824][T31678] ? __fget_files+0x21f/0x3d0 [ 1724.459853][T31678] ? ksys_write+0x1ac/0x250 [ 1724.459874][T31678] ? rcu_is_watching+0x12/0xc0 [ 1724.459896][T31678] __do_fast_syscall_32+0xe7/0x970 [ 1724.459926][T31678] ? lockdep_hardirqs_on+0x78/0x100 [ 1724.459952][T31678] do_fast_syscall_32+0x32/0x70 [ 1724.459978][T31678] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1724.460000][T31678] RIP: 0023:0xf6feef7c [ 1724.460016][T31678] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1724.460033][T31678] RSP: 002b:00000000f539b50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1724.460051][T31678] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000800001c0 [ 1724.460062][T31678] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1724.460072][T31678] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1724.460082][T31678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1724.460093][T31678] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1724.460116][T31678] [ 1724.639774][T15427] usb 6-1: USB disconnect, device number 79 [ 1724.679808][T31661] tipc: Disabling bearer [ 1724.838692][T29244] usb 10-1: new high-speed USB device number 75 using dummy_hcd [ 1724.968705][ T8258] usb 14-1: new high-speed USB device number 62 using dummy_hcd [ 1725.001369][T29244] usb 10-1: Using ep0 maxpacket: 32 [ 1725.004809][T29244] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1725.007981][T29244] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1725.012429][T29244] usb 10-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1725.015043][T29244] usb 10-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1725.017360][T29244] usb 10-1: Product: syz [ 1725.018557][T29244] usb 10-1: Manufacturer: syz [ 1725.025156][T29244] hub 10-1:4.0: USB hub found [ 1725.131063][ T8258] usb 14-1: Using ep0 maxpacket: 32 [ 1725.134407][ T8258] usb 14-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1725.138120][ T8258] usb 14-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1725.142819][ T8258] usb 14-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1725.145739][ T8258] usb 14-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1725.148764][ T8258] usb 14-1: Product: syz [ 1725.150611][ T8258] usb 14-1: Manufacturer: syz [ 1725.155306][ T8258] hub 14-1:4.0: USB hub found [ 1725.228824][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1725.308590][T29244] hub 10-1:4.0: config failed, hub has too many ports! (err -19) [ 1725.456152][T15608] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 1725.457813][ T8258] hub 14-1:4.0: config failed, hub has too many ports! (err -19) [ 1725.575552][T15429] usb 46-1: device descriptor read/8, error -110 [ 1725.620203][T15608] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1725.624046][T15608] usb 9-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1725.628319][T15608] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1725.632249][T15608] usb 9-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1725.636977][T15608] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1725.641472][T15608] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1725.647898][T15608] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1725.650834][T15608] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1725.653869][T15608] usb 9-1: Product: syz [ 1725.655433][T15608] usb 9-1: Manufacturer: syz [ 1725.658987][T31695] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1725.663364][T15608] cdc_wdm 9-1:1.0: skipping garbage [ 1725.665765][T15608] cdc_wdm 9-1:1.0: skipping garbage [ 1725.669637][T15608] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 1725.671684][T15608] cdc_wdm 9-1:1.0: Unknown control protocol [ 1725.727421][T15427] usb 10-1: USB disconnect, device number 75 [ 1725.857104][T23084] usb 14-1: USB disconnect, device number 62 [ 1725.890642][ C1] wdm_int_callback: 324 callbacks suppressed [ 1725.890664][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1725.895801][ C1] wdm_int_callback: 324 callbacks suppressed [ 1725.895817][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1725.901116][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1725.903813][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1725.906547][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1725.909309][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1725.912056][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1725.914766][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1725.917509][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1725.920251][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1725.923013][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1725.925676][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1725.928430][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1725.931165][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1725.933912][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1725.936538][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1725.939282][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1725.941974][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1725.944691][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1725.947452][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1725.964362][T15427] usb 9-1: USB disconnect, device number 43 [ 1725.966911][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1726.012085][T15429] usb usb46-port1: attempt power cycle [ 1726.355120][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1726.363217][T31709] syzkaller0: entered promiscuous mode [ 1726.365584][T31709] syzkaller0: entered allmulticast mode [ 1726.627848][T15429] usb usb46-port1: unable to enumerate USB device [ 1726.902531][T31728] netlink: 'syz.4.6847': attribute type 1 has an invalid length. [ 1726.906040][T31728] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6847'. [ 1726.971240][T31733] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6847'. [ 1727.189224][T15608] usb 10-1: new high-speed USB device number 76 using dummy_hcd [ 1727.351680][T15608] usb 10-1: Using ep0 maxpacket: 32 [ 1727.356260][T15608] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1727.361114][T15608] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1727.369091][T15608] usb 10-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1727.373171][T15608] usb 10-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1727.376930][T15608] usb 10-1: Product: syz [ 1727.378846][T15608] usb 10-1: Manufacturer: syz [ 1727.389182][T15608] hub 10-1:4.0: USB hub found [ 1727.481685][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1727.672657][T15608] hub 10-1:4.0: config failed, hub has too many ports! (err -19) [ 1728.057995][T15608] usb 10-1: USB disconnect, device number 76 [ 1728.618944][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1728.792310][T29244] usb 10-1: new high-speed USB device number 77 using dummy_hcd [ 1728.942524][T31748] syzkaller0: entered promiscuous mode [ 1728.945611][T31748] syzkaller0: entered allmulticast mode [ 1728.976478][T29244] usb 10-1: Using ep0 maxpacket: 8 [ 1728.982326][T29244] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 1728.985574][T29244] usb 10-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1728.996548][T29244] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1729.004987][T29244] usb 10-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1729.025792][T29244] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1729.030151][T29244] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1729.033780][T29244] usb 10-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1729.037830][T29244] usb 10-1: config 168 interface 0 has no altsetting 0 [ 1729.041752][T29244] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 1729.044283][T29244] usb 10-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1729.050102][T29244] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1729.054620][T29244] usb 10-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1729.058284][T29244] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1729.068704][T29244] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1729.072570][T29244] usb 10-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1729.078505][T29244] usb 10-1: config 168 interface 0 has no altsetting 0 [ 1729.083391][T29244] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 1729.086181][T29244] usb 10-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1729.089790][T29244] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1729.093348][T29244] usb 10-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1729.097159][T29244] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1729.101185][T29244] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1729.104995][T29244] usb 10-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1729.110602][T29244] usb 10-1: config 168 interface 0 has no altsetting 0 [ 1729.115650][T29244] usb 10-1: string descriptor 0 read error: -22 [ 1729.117933][T29244] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1729.120780][T29244] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1729.126249][T31766] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1729.130388][T29244] adutux 10-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1729.353831][ T9] usb 10-1: USB disconnect, device number 77 [ 1729.442467][T29244] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 1729.577529][T31742] adutux: No device or device unplugged -19 [ 1729.607082][T29244] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1729.610662][T29244] usb 9-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1729.614795][T29244] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1729.618546][T29244] usb 9-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1729.623204][T29244] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1729.627804][T29244] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1729.633968][T29244] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1729.637680][T29244] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1729.640957][T29244] usb 9-1: Product: syz [ 1729.642695][T29244] usb 9-1: Manufacturer: syz [ 1729.648644][T31769] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1729.653309][T29244] cdc_wdm 9-1:1.0: skipping garbage [ 1729.655548][T29244] cdc_wdm 9-1:1.0: skipping garbage [ 1729.659384][T29244] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 1729.662498][T29244] cdc_wdm 9-1:1.0: Unknown control protocol [ 1729.745453][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1730.174633][T31780] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6857'. [ 1730.194192][T31788] FAULT_INJECTION: forcing a failure. [ 1730.194192][T31788] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1730.198229][T31788] CPU: 1 UID: 0 PID: 31788 Comm: syz.5.6859 Tainted: G L syzkaller #0 PREEMPT(full) [ 1730.198247][T31788] Tainted: [L]=SOFTLOCKUP [ 1730.198251][T31788] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1730.198258][T31788] Call Trace: [ 1730.198269][T31788] [ 1730.198274][T31788] dump_stack_lvl+0x100/0x190 [ 1730.198295][T31788] should_fail_ex.cold+0x5/0xa [ 1730.198309][T31788] _copy_to_user+0x32/0xd0 [ 1730.198326][T31788] simple_read_from_buffer+0xcb/0x170 [ 1730.198340][T31788] proc_fail_nth_read+0x1af/0x230 [ 1730.198359][T31788] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1730.198377][T31788] ? rw_verify_area+0xce/0x6d0 [ 1730.198387][T31788] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1730.198407][T31788] vfs_read+0x1e4/0xb30 [ 1730.198421][T31788] ? __pfx_vfs_read+0x10/0x10 [ 1730.198432][T31788] ? find_held_lock+0x2b/0x80 [ 1730.198446][T31788] ? __fget_files+0x215/0x3d0 [ 1730.198461][T31788] ? __fget_files+0x21f/0x3d0 [ 1730.198477][T31788] ksys_read+0x12a/0x250 [ 1730.198489][T31788] ? __pfx_ksys_read+0x10/0x10 [ 1730.198501][T31788] ? rcu_is_watching+0x12/0xc0 [ 1730.198513][T31788] ? rcu_is_watching+0x12/0xc0 [ 1730.198527][T31788] do_int80_emulation+0x14b/0x720 [ 1730.198546][T31788] asm_int80_emulation+0x1a/0x20 [ 1730.198557][T31788] RIP: 0023:0xf71c61ab [ 1730.198566][T31788] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1730.198577][T31788] RSP: 002b:00000000f54864bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1730.198588][T31788] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f54865d0 [ 1730.198595][T31788] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 1730.198601][T31788] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1730.198607][T31788] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1730.198614][T31788] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1730.198627][T31788] [ 1730.283747][T31790] netlink: 'syz.5.6860': attribute type 1 has an invalid length. [ 1730.286205][T31790] netlink: 224 bytes leftover after parsing attributes in process `syz.5.6860'. [ 1730.314092][T31790] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6860'. [ 1730.384547][T23084] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1730.547123][T23084] usb 6-1: Using ep0 maxpacket: 32 [ 1730.550132][T23084] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1730.553482][T23084] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1730.558009][T23084] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1730.561044][T23084] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1730.563622][T23084] usb 6-1: Product: syz [ 1730.564917][T23084] usb 6-1: Manufacturer: syz [ 1730.569313][T23084] hub 6-1:4.0: USB hub found [ 1730.847870][T23084] hub 6-1:4.0: config failed, hub has too many ports! (err -19) [ 1730.861286][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1731.208212][T15427] usb 6-1: USB disconnect, device number 80 [ 1731.316027][ C0] wdm_int_callback: 5982 callbacks suppressed [ 1731.316050][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1731.319987][ C0] wdm_int_callback: 5982 callbacks suppressed [ 1731.319997][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1731.323897][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1731.325859][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1731.328087][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1731.330100][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1731.332124][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1731.334141][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1731.336196][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1731.338250][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1731.340335][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1731.343064][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1731.345791][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1731.348537][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1731.351301][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1731.354015][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1731.356789][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1731.359522][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1731.362438][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1731.365164][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1731.998516][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1732.434286][T29244] usb 9-1: USB disconnect, device number 44 [ 1732.509531][T31809] syzkaller0: entered promiscuous mode [ 1732.511271][T31809] syzkaller0: entered allmulticast mode [ 1732.621160][T31812] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 1733.114300][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1733.180849][T31828] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6869'. [ 1733.743500][T15608] usb 14-1: new high-speed USB device number 63 using dummy_hcd [ 1733.916411][T15608] usb 14-1: Using ep0 maxpacket: 32 [ 1733.921444][T15608] usb 14-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1733.925167][T15608] usb 14-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1733.930904][T15608] usb 14-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1733.934371][T15608] usb 14-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1733.937739][T15608] usb 14-1: Product: syz [ 1733.939466][T15608] usb 14-1: Manufacturer: syz [ 1733.949477][T15608] hub 14-1:4.0: USB hub found [ 1734.170904][T15608] hub 14-1:4.0: config failed, hub has too many ports! (err -19) [ 1734.245208][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1734.511847][ T8258] usb 14-1: USB disconnect, device number 63 [ 1734.668128][T31840] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6872'. [ 1735.177017][T17993] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1735.196649][T17993] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1735.202236][T17993] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1735.216278][T17993] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1735.219665][T17993] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1735.358352][T24029] bridge0: port 3(syz_tun) entered disabled state [ 1735.378070][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1735.382948][T24029] syz_tun (unregistering): left promiscuous mode [ 1735.385598][T24029] bridge0: port 3(syz_tun) entered disabled state [ 1735.634858][T31855] bridge0: port 1(bridge_slave_0) entered blocking state [ 1735.637173][T31855] bridge0: port 1(bridge_slave_0) entered disabled state [ 1735.639563][T31855] bridge_slave_0: entered allmulticast mode [ 1735.642281][T31855] bridge_slave_0: entered promiscuous mode [ 1735.645426][T31855] bridge0: port 2(bridge_slave_1) entered blocking state [ 1735.647727][T31855] bridge0: port 2(bridge_slave_1) entered disabled state [ 1735.650080][T31855] bridge_slave_1: entered allmulticast mode [ 1735.652860][T31855] bridge_slave_1: entered promiscuous mode [ 1735.667635][T31855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1735.672300][T31855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1735.686657][T31855] team0: Port device team_slave_0 added [ 1735.689757][T31855] team0: Port device team_slave_1 added [ 1735.704137][T31855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1735.706650][T31855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1735.714301][T31855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1735.795901][ T183] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1735.821417][T31855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1735.825931][T31855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1735.836635][T31855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1735.863576][T31855] hsr_slave_0: entered promiscuous mode [ 1735.866226][T31855] hsr_slave_1: entered promiscuous mode [ 1735.868652][T31855] debugfs: 'hsr0' already exists in 'hsr' [ 1735.870422][T31855] Cannot create hsr debugfs directory [ 1735.945660][ T183] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1736.057909][ T183] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1736.101441][T31883] syzkaller0: entered promiscuous mode [ 1736.103205][T31883] syzkaller0: entered allmulticast mode [ 1736.108786][T31883] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1736.158184][ T183] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1736.317081][ T183] bridge_slave_1: left allmulticast mode [ 1736.319049][ T183] bridge_slave_1: left promiscuous mode [ 1736.323005][ T183] bridge0: port 2(bridge_slave_1) entered disabled state [ 1736.335489][ T183] bridge_slave_0: left allmulticast mode [ 1736.337741][ T183] bridge_slave_0: left promiscuous mode [ 1736.342369][ T183] bridge0: port 1(bridge_slave_0) entered disabled state [ 1736.439829][ T8258] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1736.493749][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1736.622626][ T8258] usb 6-1: config 0 has no interfaces? [ 1736.629128][ T8258] usb 6-1: New USB device found, idVendor=2e1a, idProduct=4c41, bcdDevice=c4.96 [ 1736.636301][ T8258] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1736.639741][ T8258] usb 6-1: Product: syz [ 1736.642437][ T8258] usb 6-1: Manufacturer: syz [ 1736.648142][ T8258] usb 6-1: SerialNumber: syz [ 1736.652423][ T8258] usb 6-1: config 0 descriptor?? [ 1736.813635][ T183] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1737.043816][ T183] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1737.052232][ T183] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1737.059573][ T183] bond0 (unregistering): Released all slaves [ 1737.069354][ T183] bond1 (unregistering): Released all slaves [ 1737.085353][ T183] bond2 (unregistering): Released all slaves [ 1737.099869][ T183] bond3 (unregistering): Released all slaves [ 1737.140185][T15427] usb 6-1: USB disconnect, device number 81 [ 1737.393485][ T183] tipc: Left network mode [ 1737.447488][T27560] Bluetooth: hci4: command tx timeout [ 1737.620418][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1737.701251][ T5452] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1738.023052][T31905] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1738.025075][T31905] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1738.032916][T31905] vhci_hcd vhci_hcd.0: Device attached [ 1738.356911][T15427] usb 48-1: SetAddress Request (79) to port 0 [ 1738.361005][T15427] usb 48-1: new SuperSpeed USB device number 79 using vhci_hcd [ 1738.746786][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1738.761821][T31907] vhci_hcd: connection reset by peer [ 1738.763792][ T13] vhci_hcd vhci_hcd.5: stop threads [ 1738.765841][ T13] vhci_hcd vhci_hcd.5: release socket [ 1738.768256][ T13] vhci_hcd vhci_hcd.5: disconnect device [ 1738.823607][T31919] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 1738.885475][T31855] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1738.898920][T31855] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1738.911512][T31855] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1738.934789][T31855] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1738.959588][T31855] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1738.975712][T31855] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1738.978843][T31855] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1738.985596][T31855] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1739.084873][T31855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1739.105404][T31855] 8021q: adding VLAN 0 to HW filter on device team0 [ 1739.262660][T15633] bridge0: port 1(bridge_slave_0) entered blocking state [ 1739.265764][T15633] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1739.304982][ T183] veth1_macvtap: left promiscuous mode [ 1739.307178][ T183] veth0_macvtap: left promiscuous mode [ 1739.310383][ T183] veth1_vlan: left promiscuous mode [ 1739.312059][ T183] veth0_vlan: left promiscuous mode [ 1739.333199][T31911] qrtr: Invalid version 0 [ 1739.663225][ T183] team0 (unregistering): Port device team_slave_1 removed [ 1739.675021][ T183] team0 (unregistering): Port device team_slave_0 removed [ 1739.700176][T27560] Bluetooth: hci4: command tx timeout [ 1739.763584][T15633] bridge0: port 2(bridge_slave_1) entered blocking state [ 1739.765776][T15633] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1739.884188][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1740.147977][ T183] IPVS: stop unused estimator thread 0... [ 1740.247247][T31855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1740.362851][T31969] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6888'. [ 1740.441188][T31855] veth0_vlan: entered promiscuous mode [ 1740.446508][T31855] veth1_vlan: entered promiscuous mode [ 1740.463467][T31855] veth0_macvtap: entered promiscuous mode [ 1740.468818][T31855] veth1_macvtap: entered promiscuous mode [ 1740.481102][T31855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1740.488053][T31855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1740.494793][T15536] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1740.498456][T15536] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1740.503229][T15536] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1740.507819][T15536] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1740.586746][T15633] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1740.596210][T15633] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1740.615283][ T183] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1740.618861][ T183] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1740.684622][T31977] syzkaller0: entered promiscuous mode [ 1740.687251][T31977] syzkaller0: entered allmulticast mode [ 1740.999807][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1741.632591][T31980] syzkaller0: entered promiscuous mode [ 1741.634197][T31980] syzkaller0: entered allmulticast mode [ 1741.638561][T31980] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1741.920801][T29244] usb 10-1: new high-speed USB device number 78 using dummy_hcd [ 1741.953269][T27560] Bluetooth: hci4: command tx timeout [ 1742.109890][T29244] usb 10-1: config 0 has no interfaces? [ 1742.123609][T29244] usb 10-1: New USB device found, idVendor=2e1a, idProduct=4c41, bcdDevice=c4.96 [ 1742.127342][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1742.132801][T29244] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1742.139316][T29244] usb 10-1: Product: syz [ 1742.141013][T29244] usb 10-1: Manufacturer: syz [ 1742.142819][T29244] usb 10-1: SerialNumber: syz [ 1742.152964][T29244] usb 10-1: config 0 descriptor?? [ 1742.386033][T15429] usb 10-1: USB disconnect, device number 78 [ 1743.252957][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1743.753304][T32006] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6897'. [ 1743.870795][T15427] usb 48-1: device descriptor read/8, error -110 [ 1743.874548][T32010] qrtr: Invalid version 0 [ 1744.217057][T27560] Bluetooth: hci4: command tx timeout [ 1744.320266][T15427] usb usb48-port1: attempt power cycle [ 1744.379347][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1745.008194][T32016] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 1745.008536][T15427] usb usb48-port1: unable to enumerate USB device [ 1745.470614][T32021] overlayfs: upper fs does not support file handles, falling back to index=off. [ 1745.506639][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1746.000591][T32025] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 1746.003037][T32025] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1746.012672][T32025] vhci_hcd vhci_hcd.0: Device attached [ 1746.186710][T32030] syzkaller0: entered promiscuous mode [ 1746.189171][T32030] syzkaller0: entered allmulticast mode [ 1746.193203][T32030] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1746.308283][T15429] usb 40-1: SetAddress Request (19) to port 0 [ 1746.310786][T15429] usb 40-1: new SuperSpeed USB device number 19 using vhci_hcd [ 1746.470936][T32026] vhci_hcd: connection reset by peer [ 1746.474712][ T183] vhci_hcd vhci_hcd.1: stop threads [ 1746.478188][ T183] vhci_hcd vhci_hcd.1: release socket [ 1746.480229][ T183] vhci_hcd vhci_hcd.1: disconnect device [ 1746.482332][T15608] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 1746.632439][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1747.087324][T15608] usb 9-1: config 0 has no interfaces? [ 1747.111878][T15608] usb 9-1: New USB device found, idVendor=2e1a, idProduct=4c41, bcdDevice=c4.96 [ 1747.114790][T15608] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1747.117739][T15608] usb 9-1: Product: syz [ 1747.119089][T15608] usb 9-1: Manufacturer: syz [ 1747.120605][T15608] usb 9-1: SerialNumber: syz [ 1747.126540][T15608] usb 9-1: config 0 descriptor?? [ 1747.350999][T15608] usb 9-1: USB disconnect, device number 45 [ 1747.759063][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1748.256663][T32059] overlayfs: failed to get index nlink (file0/file2, err=-61) [ 1748.351568][T32060] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6910'. [ 1748.439707][T32072] syzkaller0: entered promiscuous mode [ 1748.441505][T32072] syzkaller0: entered allmulticast mode [ 1748.560552][T31932] usb 14-1: new high-speed USB device number 64 using dummy_hcd [ 1748.576621][T32074] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1748.579301][T32074] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1748.584852][T32074] vhci_hcd vhci_hcd.0: Device attached [ 1748.723510][T31932] usb 14-1: too many configurations: 9, using maximum allowed: 8 [ 1748.727214][T31932] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1748.729978][T31932] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 48, changing to 9 [ 1748.733385][T31932] usb 14-1: config 0 interface 0 has no altsetting 0 [ 1748.737284][T31932] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1748.740102][T31932] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 48, changing to 9 [ 1748.744363][T31932] usb 14-1: config 0 interface 0 has no altsetting 0 [ 1748.748064][T31932] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1748.751555][T31932] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 48, changing to 9 [ 1748.756037][T31932] usb 14-1: config 0 interface 0 has no altsetting 0 [ 1748.759585][T31932] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1748.763115][T31932] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 48, changing to 9 [ 1748.767623][T31932] usb 14-1: config 0 interface 0 has no altsetting 0 [ 1748.771089][T31932] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1748.774651][T31932] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 48, changing to 9 [ 1748.779204][T31932] usb 14-1: config 0 interface 0 has no altsetting 0 [ 1748.782702][T31932] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1748.786170][T31932] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 48, changing to 9 [ 1748.790470][T31932] usb 14-1: config 0 interface 0 has no altsetting 0 [ 1748.793930][T31932] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1748.797404][T31932] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 48, changing to 9 [ 1748.801756][T31932] usb 14-1: config 0 interface 0 has no altsetting 0 [ 1748.805283][T31932] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1748.808785][T31932] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 48, changing to 9 [ 1748.813072][T31932] usb 14-1: config 0 interface 0 has no altsetting 0 [ 1748.817435][T31932] usb 14-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1748.821034][T31932] usb 14-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1748.824318][T31932] usb 14-1: Product: syz [ 1748.826253][T31932] usb 14-1: Manufacturer: syz [ 1748.828134][T31932] usb 14-1: SerialNumber: syz [ 1748.831661][T31932] usb 14-1: config 0 descriptor?? [ 1748.836720][T31932] yurex 14-1:0.0: USB YUREX device now attached to Yurex #0 [ 1748.842208][T15608] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1748.885441][T15427] usb 46-1: SetAddress Request (22) to port 0 [ 1748.885490][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1748.887436][T15427] usb 46-1: new SuperSpeed USB device number 22 using vhci_hcd [ 1749.004679][T15608] usb 6-1: Using ep0 maxpacket: 32 [ 1749.008006][T15608] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1749.011422][T15608] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1749.016715][T15608] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1749.020266][T15608] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1749.023691][T15608] usb 6-1: Product: syz [ 1749.025356][T15608] usb 6-1: Manufacturer: syz [ 1749.035935][T15608] hub 6-1:4.0: USB hub found [ 1749.218845][T32075] vhci_hcd: connection reset by peer [ 1749.220998][ T13] vhci_hcd vhci_hcd.4: stop threads [ 1749.223089][ T13] vhci_hcd vhci_hcd.4: release socket [ 1749.224935][ T13] vhci_hcd vhci_hcd.4: disconnect device [ 1749.259972][T15608] hub 6-1:4.0: config failed, hub has too many ports! (err -19) [ 1749.355850][T31932] usb 14-1: USB disconnect, device number 64 [ 1749.368053][T31932] yurex 14-1:0.0: USB YUREX #0 now disconnected [ 1749.589867][T15608] usb 6-1: USB disconnect, device number 82 [ 1750.011964][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1750.035563][T32084] syzkaller0: entered promiscuous mode [ 1750.037907][T32084] syzkaller0: entered allmulticast mode [ 1750.340390][T32097] binder: 32096:32097 ioctl c0306201 80000040 returned -22 [ 1750.640887][T32101] syzkaller0: entered promiscuous mode [ 1750.642837][T32101] syzkaller0: entered allmulticast mode [ 1750.647781][T32101] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1750.933101][T31932] usb 10-1: new high-speed USB device number 79 using dummy_hcd [ 1751.108281][T31932] usb 10-1: config 0 has no interfaces? [ 1751.113202][T31932] usb 10-1: New USB device found, idVendor=2e1a, idProduct=4c41, bcdDevice=c4.96 [ 1751.117301][T31932] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1751.120609][T31932] usb 10-1: Product: syz [ 1751.122397][T31932] usb 10-1: Manufacturer: syz [ 1751.124578][T31932] usb 10-1: SerialNumber: syz [ 1751.131187][T31932] usb 10-1: config 0 descriptor?? [ 1751.139169][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1751.354509][T32106] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6922'. [ 1751.358973][T32105] syzkaller0: entered promiscuous mode [ 1751.359609][T32106] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6922'. [ 1751.360725][T32105] syzkaller0: entered allmulticast mode [ 1751.372647][T31932] usb 10-1: USB disconnect, device number 79 [ 1751.430524][T32106] geneve2: entered promiscuous mode [ 1751.433256][T32106] geneve2: entered allmulticast mode [ 1751.831841][T15429] usb 40-1: device descriptor read/8, error -110 [ 1751.863895][T32126] 9pnet_virtio: no channels available for device syz [ 1752.265044][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1752.536359][T15429] usb usb40-port1: attempt power cycle [ 1753.402642][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1753.949167][T32146] syzkaller0: entered promiscuous mode [ 1753.953635][T32146] syzkaller0: entered allmulticast mode [ 1754.193767][ T5610] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 1754.200477][T27560] Bluetooth: hci0: unexpected event for opcode 0x040d [ 1754.242843][T32157] syzkaller0: entered promiscuous mode [ 1754.244730][T32157] syzkaller0: entered allmulticast mode [ 1754.248522][T32157] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1754.345418][T15427] usb 46-1: device descriptor read/8, error -110 [ 1754.388151][ T5610] usb 6-1: Using ep0 maxpacket: 32 [ 1754.395100][ T5610] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1754.399777][ T5610] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1754.405784][ T5610] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1754.409399][ T5610] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1754.413195][ T5610] usb 6-1: Product: syz [ 1754.414896][ T5610] usb 6-1: Manufacturer: syz [ 1754.421332][T15429] usb usb40-port1: unable to enumerate USB device [ 1754.425582][ T5610] hub 6-1:4.0: USB hub found [ 1754.518086][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1754.550558][ T5832] usb 10-1: new high-speed USB device number 80 using dummy_hcd [ 1754.726937][ T5832] usb 10-1: config 0 has no interfaces? [ 1754.732038][ T5832] usb 10-1: New USB device found, idVendor=2e1a, idProduct=4c41, bcdDevice=c4.96 [ 1754.735998][ T5832] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1754.739490][ T5832] usb 10-1: Product: syz [ 1754.743230][ T5832] usb 10-1: Manufacturer: syz [ 1754.746152][ T5832] usb 10-1: SerialNumber: syz [ 1754.755403][ T5832] usb 10-1: config 0 descriptor?? [ 1754.789766][T15427] usb usb46-port1: attempt power cycle [ 1754.876088][ T5610] hub 6-1:4.0: config failed, can't read hub descriptor (err -22) [ 1754.919460][ T5610] usb 6-1: USB disconnect, device number 83 [ 1754.993079][ T5832] usb 10-1: USB disconnect, device number 80 [ 1755.406506][T32171] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6942'. [ 1755.428857][T15427] usb usb46-port1: unable to enumerate USB device [ 1755.644770][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1755.857930][T32182] Bluetooth: MGMT ver 1.23 [ 1755.954629][T32185] syzkaller0: entered promiscuous mode [ 1755.956441][T32185] syzkaller0: entered allmulticast mode [ 1756.635897][T32203] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6949'. [ 1756.749771][T32208] syzkaller0: entered promiscuous mode [ 1756.751943][T32208] syzkaller0: entered allmulticast mode [ 1756.756318][T32208] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1756.771121][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1757.052707][T15427] usb 14-1: new high-speed USB device number 65 using dummy_hcd [ 1757.217777][T15427] usb 14-1: config 0 has no interfaces? [ 1757.222645][T15427] usb 14-1: New USB device found, idVendor=2e1a, idProduct=4c41, bcdDevice=c4.96 [ 1757.226801][T15427] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1757.230278][T15427] usb 14-1: Product: syz [ 1757.232109][T15427] usb 14-1: Manufacturer: syz [ 1757.234234][T15427] usb 14-1: SerialNumber: syz [ 1757.240111][T15427] usb 14-1: config 0 descriptor?? [ 1757.472498][T29244] usb 14-1: USB disconnect, device number 65 [ 1757.674768][T32213] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 1757.897658][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1758.873088][T15427] IPVS: starting estimator thread 0... [ 1758.980841][T32237] IPVS: using max 47 ests per chain, 112800 per kthread [ 1759.024119][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1759.382560][ T5610] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 1759.559452][ T5610] usb 9-1: Using ep0 maxpacket: 32 [ 1759.579708][ T5610] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1759.585863][ T5610] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1759.593513][ T5610] usb 9-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1759.595067][T32242] FAULT_INJECTION: forcing a failure. [ 1759.595067][T32242] name failslab, interval 1, probability 0, space 0, times 0 [ 1759.596542][ T5610] usb 9-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1759.601075][T32242] CPU: 3 UID: 0 PID: 32242 Comm: syz.9.6962 Tainted: G L syzkaller #0 PREEMPT(full) [ 1759.601095][T32242] Tainted: [L]=SOFTLOCKUP [ 1759.601099][T32242] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1759.601106][T32242] Call Trace: [ 1759.601111][T32242] [ 1759.601116][T32242] dump_stack_lvl+0x100/0x190 [ 1759.601146][T32242] should_fail_ex.cold+0x5/0xa [ 1759.601167][T32242] should_failslab+0xc2/0x120 [ 1759.601187][T32242] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1759.601212][T32242] ? skb_clone+0x190/0x400 [ 1759.601234][T32242] skb_clone+0x190/0x400 [ 1759.601252][T32242] netlink_deliver_tap+0xaed/0xcc0 [ 1759.601278][T32242] netlink_unicast+0x62b/0x850 [ 1759.601303][T32242] ? __pfx_netlink_unicast+0x10/0x10 [ 1759.601331][T32242] netlink_sendmsg+0x8b0/0xda0 [ 1759.601356][T32242] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1759.601381][T32242] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1759.601404][T32242] ____sys_sendmsg+0x9e1/0xb70 [ 1759.601424][T32242] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1759.601447][T32242] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1759.601479][T32242] ___sys_sendmsg+0x190/0x1e0 [ 1759.601503][T32242] ? __pfx____sys_sendmsg+0x10/0x10 [ 1759.601535][T32242] ? find_held_lock+0x2b/0x80 [ 1759.601571][T32242] __sys_sendmsg+0x170/0x220 [ 1759.601588][T32242] ? __pfx___sys_sendmsg+0x10/0x10 [ 1759.601604][T32242] ? __fget_files+0x21f/0x3d0 [ 1759.601629][T32242] ? ksys_write+0x1ac/0x250 [ 1759.601649][T32242] ? rcu_is_watching+0x12/0xc0 [ 1759.601670][T32242] __do_fast_syscall_32+0xe7/0x970 [ 1759.601696][T32242] ? lockdep_hardirqs_on+0x78/0x100 [ 1759.601721][T32242] do_fast_syscall_32+0x32/0x70 [ 1759.601746][T32242] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1759.601767][T32242] RIP: 0023:0xf6ffef7c [ 1759.601782][T32242] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1759.601797][T32242] RSP: 002b:00000000f53ed50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1759.601814][T32242] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800006c0 [ 1759.601826][T32242] RDX: 0000000024000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 1759.601835][T32242] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1759.601845][T32242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1759.601855][T32242] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1759.601877][T32242] [ 1759.664035][T32245] syzkaller0: entered promiscuous mode [ 1759.669687][ T5610] usb 9-1: Product: syz [ 1759.670848][T32245] syzkaller0: entered allmulticast mode [ 1759.673193][ T5610] usb 9-1: Manufacturer: syz [ 1759.683641][T32245] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1759.692131][ T5610] hub 9-1:4.0: USB hub found [ 1759.977940][ T5610] hub 9-1:4.0: config failed, hub has too many ports! (err -19) [ 1759.988205][ T34] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 1760.150685][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1760.162925][ T34] usb 6-1: config 0 has no interfaces? [ 1760.166509][ T34] usb 6-1: New USB device found, idVendor=2e1a, idProduct=4c41, bcdDevice=c4.96 [ 1760.172181][ T34] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1760.177297][ T34] usb 6-1: Product: syz [ 1760.178616][ T34] usb 6-1: Manufacturer: syz [ 1760.182540][ T34] usb 6-1: SerialNumber: syz [ 1760.187998][ T34] usb 6-1: config 0 descriptor?? [ 1760.346230][T15429] usb 9-1: USB disconnect, device number 46 [ 1760.469324][ T9] usb 6-1: USB disconnect, device number 84 [ 1760.529771][T29244] usb 14-1: new high-speed USB device number 66 using dummy_hcd [ 1760.697680][T29244] usb 14-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1760.700634][T29244] usb 14-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1760.704514][T29244] usb 14-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1760.707971][T29244] usb 14-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1760.711883][T29244] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1760.715717][T29244] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1760.726813][T29244] usb 14-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1760.730100][T29244] usb 14-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1760.732754][T29244] usb 14-1: Product: syz [ 1760.734248][T29244] usb 14-1: Manufacturer: syz [ 1760.751963][T32256] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1760.762033][T29244] cdc_wdm 14-1:1.0: skipping garbage [ 1760.765707][T29244] cdc_wdm 14-1:1.0: skipping garbage [ 1760.778567][T29244] cdc_wdm 14-1:1.0: cdc-wdm0: USB WDM device [ 1760.786235][T29244] cdc_wdm 14-1:1.0: Unknown control protocol [ 1760.940360][T32262] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6969'. [ 1760.980642][ C3] wdm_int_callback: 5261 callbacks suppressed [ 1760.980657][ C3] cdc_wdm 14-1:1.0: nonzero urb status received: -71 [ 1760.984627][ C3] wdm_int_callback: 5261 callbacks suppressed [ 1760.984639][ C3] cdc_wdm 14-1:1.0: wdm_int_callback - 0 bytes [ 1760.988651][ C3] cdc_wdm 14-1:1.0: nonzero urb status received: -71 [ 1760.990746][ C3] cdc_wdm 14-1:1.0: wdm_int_callback - 0 bytes [ 1760.993460][ C3] cdc_wdm 14-1:1.0: nonzero urb status received: -71 [ 1760.995978][ C3] cdc_wdm 14-1:1.0: wdm_int_callback - 0 bytes [ 1760.998064][ C3] cdc_wdm 14-1:1.0: nonzero urb status received: -71 [ 1761.000132][ C3] cdc_wdm 14-1:1.0: wdm_int_callback - 0 bytes [ 1761.002204][ C3] cdc_wdm 14-1:1.0: nonzero urb status received: -71 [ 1761.004373][ C3] cdc_wdm 14-1:1.0: wdm_int_callback - 0 bytes [ 1761.006580][ C3] cdc_wdm 14-1:1.0: nonzero urb status received: -71 [ 1761.008596][ C3] cdc_wdm 14-1:1.0: wdm_int_callback - 0 bytes [ 1761.010668][ C3] cdc_wdm 14-1:1.0: nonzero urb status received: -71 [ 1761.012722][ C3] cdc_wdm 14-1:1.0: wdm_int_callback - 0 bytes [ 1761.014817][ C3] cdc_wdm 14-1:1.0: nonzero urb status received: -71 [ 1761.016904][ C3] cdc_wdm 14-1:1.0: wdm_int_callback - 0 bytes [ 1761.019500][ C3] cdc_wdm 14-1:1.0: nonzero urb status received: -71 [ 1761.022128][ C3] cdc_wdm 14-1:1.0: wdm_int_callback - 0 bytes [ 1761.024375][ C3] cdc_wdm 14-1:1.0: nonzero urb status received: -71 [ 1761.026459][ C3] cdc_wdm 14-1:1.0: wdm_int_callback - 0 bytes [ 1761.277140][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1762.403770][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1762.434387][T32286] syzkaller0: entered promiscuous mode [ 1762.436792][T32286] syzkaller0: entered allmulticast mode [ 1763.010298][T29244] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 1763.172735][T29244] usb 6-1: Using ep0 maxpacket: 32 [ 1763.176698][T29244] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1763.181225][T29244] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1763.186987][T29244] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1763.190573][T29244] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1763.193860][T29244] usb 6-1: Product: syz [ 1763.195768][T29244] usb 6-1: Manufacturer: syz [ 1763.201359][T29244] hub 6-1:4.0: USB hub found [ 1763.484201][T29244] hub 6-1:4.0: config failed, hub has too many ports! (err -19) [ 1763.512455][ T9] usb 14-1: USB disconnect, device number 66 [ 1763.530120][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1764.011402][T15429] usb 6-1: USB disconnect, device number 85 [ 1764.656660][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1764.963548][T32334] syzkaller0: entered promiscuous mode [ 1764.965357][T32334] syzkaller0: entered allmulticast mode [ 1765.189625][T32346] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1765.191655][T32346] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1765.198530][T32346] vhci_hcd vhci_hcd.0: Device attached [ 1765.218515][T32350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6992'. [ 1765.360727][ T9] usb 14-1: new high-speed USB device number 67 using dummy_hcd [ 1765.512425][T15429] usb 48-1: SetAddress Request (83) to port 0 [ 1765.514541][T15429] usb 48-1: new SuperSpeed USB device number 83 using vhci_hcd [ 1765.534096][ T9] usb 14-1: Using ep0 maxpacket: 32 [ 1765.538346][ T9] usb 14-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1765.542914][ T9] usb 14-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1765.549107][ T9] usb 14-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1765.553013][ T9] usb 14-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1765.556811][ T9] usb 14-1: Product: syz [ 1765.558632][ T9] usb 14-1: Manufacturer: syz [ 1765.567014][ T9] hub 14-1:4.0: USB hub found [ 1765.771622][T32347] vhci_hcd: connection reset by peer [ 1765.776679][ T13] vhci_hcd vhci_hcd.5: stop threads [ 1765.779294][ T13] vhci_hcd vhci_hcd.5: release socket [ 1765.782050][ T13] vhci_hcd vhci_hcd.5: disconnect device [ 1765.784590][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1765.851853][ T9] hub 14-1:4.0: config failed, hub has too many ports! (err -19) [ 1766.206192][ T9] usb 14-1: USB disconnect, device number 67 [ 1766.699276][T32374] syzkaller0: entered promiscuous mode [ 1766.701072][T32374] syzkaller0: entered allmulticast mode [ 1766.706921][T32373] FAULT_INJECTION: forcing a failure. [ 1766.706921][T32373] name failslab, interval 1, probability 0, space 0, times 0 [ 1766.710753][T32373] CPU: 2 UID: 0 PID: 32373 Comm: syz.4.6998 Tainted: G L syzkaller #0 PREEMPT(full) [ 1766.710770][T32373] Tainted: [L]=SOFTLOCKUP [ 1766.710774][T32373] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1766.710781][T32373] Call Trace: [ 1766.710785][T32373] [ 1766.710790][T32373] dump_stack_lvl+0x100/0x190 [ 1766.710810][T32373] should_fail_ex.cold+0x5/0xa [ 1766.710824][T32373] should_failslab+0xc2/0x120 [ 1766.710838][T32373] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1766.710855][T32373] ? skb_clone+0x190/0x400 [ 1766.710868][T32373] skb_clone+0x190/0x400 [ 1766.710879][T32373] nfnetlink_rcv_batch+0x1c8/0x2880 [ 1766.710893][T32373] ? kfree_skbmem+0x19a/0x210 [ 1766.710909][T32373] ? kfree_skbmem+0x19f/0x210 [ 1766.710924][T32373] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 1766.710936][T32373] ? __dev_queue_xmit+0x9ef/0x4950 [ 1766.710950][T32373] ? rcu_is_watching+0x12/0xc0 [ 1766.710964][T32373] ? __local_bh_enable_ip+0x9e/0x120 [ 1766.710979][T32373] ? lockdep_hardirqs_on+0x78/0x100 [ 1766.710995][T32373] ? __dev_queue_xmit+0x9ef/0x4950 [ 1766.711015][T32373] ? __asan_memset+0x23/0x50 [ 1766.711031][T32373] ? __nla_validate_parse+0x1e7/0x28b0 [ 1766.711061][T32373] ? __pfx___nla_validate_parse+0x10/0x10 [ 1766.711074][T32373] ? rcu_is_watching+0x12/0xc0 [ 1766.711086][T32373] ? apparmor_capable+0x1d7/0x4d0 [ 1766.711101][T32373] ? __nla_parse+0x40/0x60 [ 1766.711114][T32373] nfnetlink_rcv+0x3bd/0x440 [ 1766.711126][T32373] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1766.711140][T32373] netlink_unicast+0x585/0x850 [ 1766.711156][T32373] ? __pfx_netlink_unicast+0x10/0x10 [ 1766.711174][T32373] netlink_sendmsg+0x8b0/0xda0 [ 1766.711190][T32373] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1766.711206][T32373] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1766.711219][T32373] ____sys_sendmsg+0x9e1/0xb70 [ 1766.711233][T32373] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1766.711248][T32373] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1766.711267][T32373] ___sys_sendmsg+0x190/0x1e0 [ 1766.711283][T32373] ? __pfx____sys_sendmsg+0x10/0x10 [ 1766.711304][T32373] ? find_held_lock+0x2b/0x80 [ 1766.711325][T32373] __sys_sendmsg+0x170/0x220 [ 1766.711336][T32373] ? __pfx___sys_sendmsg+0x10/0x10 [ 1766.711346][T32373] ? __fget_files+0x21f/0x3d0 [ 1766.711363][T32373] ? ksys_write+0x1ac/0x250 [ 1766.711375][T32373] ? rcu_is_watching+0x12/0xc0 [ 1766.711389][T32373] __do_fast_syscall_32+0xe7/0x970 [ 1766.711404][T32373] ? lockdep_hardirqs_on+0x78/0x100 [ 1766.711420][T32373] do_fast_syscall_32+0x32/0x70 [ 1766.711436][T32373] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1766.711450][T32373] RIP: 0023:0xf6feef7c [ 1766.711459][T32373] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1766.711474][T32373] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1766.711486][T32373] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 1766.711496][T32373] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1766.711505][T32373] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1766.711513][T32373] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1766.711522][T32373] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1766.711542][T32373] [ 1766.737242][T32378] netlink: 'syz.1.7001': attribute type 1 has an invalid length. [ 1766.820535][T32378] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7001'. [ 1766.856734][T32378] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7001'. [ 1766.909710][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1767.151274][T32390] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7005'. [ 1767.578242][T32400] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1767.581048][T32400] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1767.585518][T32400] vhci_hcd vhci_hcd.0: Device attached [ 1767.885501][T15427] usb 46-1: SetAddress Request (26) to port 0 [ 1767.888674][T15427] usb 46-1: new SuperSpeed USB device number 26 using vhci_hcd [ 1768.023556][T32401] vhci_hcd: connection reset by peer [ 1768.028254][T15536] vhci_hcd vhci_hcd.4: stop threads [ 1768.030180][T15536] vhci_hcd vhci_hcd.4: release socket [ 1768.032737][T15536] vhci_hcd vhci_hcd.4: disconnect device [ 1768.036260][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1768.805388][T31932] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 1768.885950][T32426] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7012'. [ 1768.956977][ T5889] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 1768.978868][T31932] usb 6-1: Using ep0 maxpacket: 32 [ 1768.983920][T31932] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1768.988429][T31932] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1768.999700][T31932] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1769.009838][T31932] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1769.014001][T31932] usb 6-1: Product: syz [ 1769.015788][T31932] usb 6-1: Manufacturer: syz [ 1769.023361][T31932] hub 6-1:4.0: USB hub found [ 1769.033583][T32433] syzkaller0: entered promiscuous mode [ 1769.035953][T32433] syzkaller0: entered allmulticast mode [ 1769.143060][ T5889] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1769.146765][ T5889] usb 9-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1769.150810][ T5889] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1769.154911][ T5889] usb 9-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1769.159367][ T5889] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1769.162781][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1769.163720][ T5889] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1769.171723][ T5889] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1769.175524][ T5889] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1769.178302][ T5889] usb 9-1: Product: syz [ 1769.179733][ T5889] usb 9-1: Manufacturer: syz [ 1769.186643][T32418] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1769.191496][ T5889] cdc_wdm 9-1:1.0: skipping garbage [ 1769.194013][ T5889] cdc_wdm 9-1:1.0: skipping garbage [ 1769.204196][ T5889] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 1769.207182][ T5889] cdc_wdm 9-1:1.0: Unknown control protocol [ 1769.302936][T31932] hub 6-1:4.0: config failed, hub has too many ports! (err -19) [ 1769.466693][ C3] wdm_int_callback: 13287 callbacks suppressed [ 1769.466715][ C3] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1769.471994][ C3] wdm_int_callback: 13287 callbacks suppressed [ 1769.472010][ C3] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1769.477145][ C3] cdc_wdm 9-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 1769.481339][T29313] usb 9-1: USB disconnect, device number 47 [ 1769.564945][ T40] audit: type=1326 audit(1781195794.835:12710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32437 comm="syz.9.7016" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef7c code=0x7ffc0000 [ 1769.581898][ T40] audit: type=1326 audit(1781195794.835:12711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32437 comm="syz.9.7016" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef7c code=0x7ffc0000 [ 1769.589024][ T40] audit: type=1326 audit(1781195794.835:12712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32437 comm="syz.9.7016" exe="/syz-executor" sig=0 arch=40000003 syscall=76 compat=1 ip=0xf6ffef7c code=0x7ffc0000 [ 1769.595582][ T40] audit: type=1326 audit(1781195794.835:12713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32437 comm="syz.9.7016" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef7c code=0x7ffc0000 [ 1769.603509][ T40] audit: type=1326 audit(1781195794.835:12714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32437 comm="syz.9.7016" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef7c code=0x7ffc0000 [ 1769.613023][ T40] audit: type=1326 audit(1781195794.844:12715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32437 comm="syz.9.7016" exe="/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf6ffef7c code=0x7ffc0000 [ 1769.621595][ T40] audit: type=1326 audit(1781195794.844:12716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32437 comm="syz.9.7016" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef7c code=0x7ffc0000 [ 1769.631180][ T40] audit: type=1326 audit(1781195794.844:12717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32437 comm="syz.9.7016" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef7c code=0x7ffc0000 [ 1769.638861][ T40] audit: type=1326 audit(1781195794.844:12718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32437 comm="syz.9.7016" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf6ffef7c code=0x7ffc0000 [ 1769.654382][ T40] audit: type=1326 audit(1781195794.853:12719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32437 comm="syz.9.7016" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef7c code=0x7ffc0000 [ 1769.661696][ T5889] usb 6-1: USB disconnect, device number 86 [ 1769.711286][T17993] block nbd5: Receive control failed (result -32) [ 1769.734398][T32451] block nbd5: shutting down sockets [ 1769.837546][T32453] netlink: 64 bytes leftover after parsing attributes in process `syz.5.7019'. [ 1770.289366][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1770.374912][T32460] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1770.376936][T32460] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1770.378980][T32440] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1770.388717][T32460] vhci_hcd vhci_hcd.0: Device attached [ 1770.389770][T32440] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1770.438116][T32440] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1770.440552][T32440] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1770.734973][T32469] syzkaller0: entered promiscuous mode [ 1770.737413][T32469] syzkaller0: entered allmulticast mode [ 1771.155888][T17993] Bluetooth: hci0: command 0x0406 tx timeout [ 1771.160733][T27560] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1771.169657][T32440] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1771.180976][T32440] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1771.416065][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1771.569982][T32462] vhci_hcd: connection reset by peer [ 1771.572828][T20066] vhci_hcd vhci_hcd.5: stop threads [ 1771.577463][T20066] vhci_hcd vhci_hcd.5: release socket [ 1771.582326][T15429] usb 48-1: device descriptor read/8, error -110 [ 1771.582470][T20066] vhci_hcd vhci_hcd.5: disconnect device [ 1771.600775][T32440] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1771.606813][T32440] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1771.747583][T32484] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1771.801960][T32487] bond1: Removing last arp target with arp_interval on [ 1772.001326][T15429] usb usb48-port1: attempt power cycle [ 1772.542297][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1772.607763][T15429] usb usb48-port1: unable to enumerate USB device [ 1773.662568][T15427] usb 46-1: device descriptor read/8, error -110 [ 1773.669078][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1774.135894][T15427] usb usb46-port1: attempt power cycle [ 1774.529245][T32532] FAULT_INJECTION: forcing a failure. [ 1774.529245][T32532] name failslab, interval 1, probability 0, space 0, times 0 [ 1774.546353][T32532] CPU: 3 UID: 0 PID: 32532 Comm: syz.9.7040 Tainted: G L syzkaller #0 PREEMPT(full) [ 1774.546384][T32532] Tainted: [L]=SOFTLOCKUP [ 1774.546390][T32532] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1774.546401][T32532] Call Trace: [ 1774.546407][T32532] [ 1774.546414][T32532] dump_stack_lvl+0x100/0x190 [ 1774.546448][T32532] should_fail_ex.cold+0x5/0xa [ 1774.546474][T32532] should_failslab+0xc2/0x120 [ 1774.546496][T32532] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1774.546524][T32532] ? skb_clone+0x190/0x400 [ 1774.546548][T32532] skb_clone+0x190/0x400 [ 1774.546568][T32532] netlink_deliver_tap+0xaed/0xcc0 [ 1774.546597][T32532] netlink_unicast+0x62b/0x850 [ 1774.546625][T32532] ? __pfx_netlink_unicast+0x10/0x10 [ 1774.546656][T32532] netlink_sendmsg+0x8b0/0xda0 [ 1774.546684][T32532] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1774.546711][T32532] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1774.546735][T32532] ____sys_sendmsg+0x9e1/0xb70 [ 1774.546766][T32532] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1774.546788][T32532] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1774.546821][T32532] ___sys_sendmsg+0x190/0x1e0 [ 1774.546847][T32532] ? __pfx____sys_sendmsg+0x10/0x10 [ 1774.546882][T32532] ? find_held_lock+0x2b/0x80 [ 1774.546921][T32532] __sys_sendmsg+0x170/0x220 [ 1774.546941][T32532] ? __pfx___sys_sendmsg+0x10/0x10 [ 1774.546958][T32532] ? __fget_files+0x21f/0x3d0 [ 1774.546986][T32532] ? ksys_write+0x1ac/0x250 [ 1774.547008][T32532] ? rcu_is_watching+0x12/0xc0 [ 1774.547032][T32532] __do_fast_syscall_32+0xe7/0x970 [ 1774.547059][T32532] ? lockdep_hardirqs_on+0x78/0x100 [ 1774.547086][T32532] do_fast_syscall_32+0x32/0x70 [ 1774.547113][T32532] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1774.547136][T32532] RIP: 0023:0xf6ffef7c [ 1774.547151][T32532] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1774.547167][T32532] RSP: 002b:00000000f53ed50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1774.547201][T32532] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001200 [ 1774.547213][T32532] RDX: 0000000020008004 RSI: 0000000000000000 RDI: 0000000000000000 [ 1774.547223][T32532] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1774.547234][T32532] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1774.547244][T32532] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1774.547267][T32532] [ 1774.747579][T15427] usb usb46-port1: unable to enumerate USB device [ 1774.795474][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1775.073208][T32539] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 1775.075214][T32539] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1775.095379][T32539] vhci_hcd vhci_hcd.0: Device attached [ 1775.466040][T15427] usb 40-1: SetAddress Request (23) to port 0 [ 1775.488821][T15427] usb 40-1: new SuperSpeed USB device number 23 using vhci_hcd [ 1775.732121][T32540] vhci_hcd: connection reset by peer [ 1775.739256][T15536] vhci_hcd vhci_hcd.1: stop threads [ 1775.741394][T15536] vhci_hcd vhci_hcd.1: release socket [ 1775.743215][T15536] vhci_hcd vhci_hcd.1: disconnect device [ 1775.922048][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1776.446688][T32551] syzkaller0: entered promiscuous mode [ 1776.449205][T32551] syzkaller0: entered allmulticast mode [ 1776.456782][T32551] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1776.756076][T31932] usb 14-1: new high-speed USB device number 68 using dummy_hcd [ 1776.923648][T32554] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7046'. [ 1776.936207][T31932] usb 14-1: config 0 has no interfaces? [ 1776.942166][T31932] usb 14-1: New USB device found, idVendor=2e1a, idProduct=4c41, bcdDevice=c4.96 [ 1776.946128][T31932] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1776.958805][T31932] usb 14-1: Product: syz [ 1776.965515][T31932] usb 14-1: Manufacturer: syz [ 1776.967645][T31932] usb 14-1: SerialNumber: syz [ 1776.985414][T31932] usb 14-1: config 0 descriptor?? [ 1776.989564][T32557] FAULT_INJECTION: forcing a failure. [ 1776.989564][T32557] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1776.993908][T32557] CPU: 1 UID: 0 PID: 32557 Comm: syz.4.7048 Tainted: G L syzkaller #0 PREEMPT(full) [ 1776.993927][T32557] Tainted: [L]=SOFTLOCKUP [ 1776.993931][T32557] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1776.993937][T32557] Call Trace: [ 1776.993942][T32557] [ 1776.993946][T32557] dump_stack_lvl+0x100/0x190 [ 1776.993968][T32557] should_fail_ex.cold+0x5/0xa [ 1776.993982][T32557] _copy_to_user+0x32/0xd0 [ 1776.993998][T32557] simple_read_from_buffer+0xcb/0x170 [ 1776.994012][T32557] proc_fail_nth_read+0x1af/0x230 [ 1776.994030][T32557] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1776.994048][T32557] ? rw_verify_area+0xce/0x6d0 [ 1776.994073][T32557] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1776.994090][T32557] vfs_read+0x1e4/0xb30 [ 1776.994104][T32557] ? __pfx_vfs_read+0x10/0x10 [ 1776.994115][T32557] ? find_held_lock+0x2b/0x80 [ 1776.994129][T32557] ? __fget_files+0x215/0x3d0 [ 1776.994145][T32557] ? __fget_files+0x21f/0x3d0 [ 1776.994161][T32557] ksys_read+0x12a/0x250 [ 1776.994172][T32557] ? __pfx_ksys_read+0x10/0x10 [ 1776.994184][T32557] ? rcu_is_watching+0x12/0xc0 [ 1776.994218][T32557] ? rcu_is_watching+0x12/0xc0 [ 1776.994234][T32557] do_int80_emulation+0x14b/0x720 [ 1776.994253][T32557] asm_int80_emulation+0x1a/0x20 [ 1776.994264][T32557] RIP: 0023:0xf71261ab [ 1776.994274][T32557] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1776.994284][T32557] RSP: 002b:00000000f53dd4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1776.994295][T32557] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f53dd5d0 [ 1776.994302][T32557] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 1776.994308][T32557] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1776.994314][T32557] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1776.994320][T32557] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1776.994334][T32557] [ 1777.059303][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1777.162521][T32563] netlink: 80 bytes leftover after parsing attributes in process `syz.1.7050'. [ 1777.167709][T32563] FAULT_INJECTION: forcing a failure. [ 1777.167709][T32563] name failslab, interval 1, probability 0, space 0, times 0 [ 1777.172790][T32563] CPU: 2 UID: 0 PID: 32563 Comm: syz.1.7050 Tainted: G L syzkaller #0 PREEMPT(full) [ 1777.172818][T32563] Tainted: [L]=SOFTLOCKUP [ 1777.172824][T32563] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1777.172835][T32563] Call Trace: [ 1777.172843][T32563] [ 1777.172851][T32563] dump_stack_lvl+0x100/0x190 [ 1777.172885][T32563] should_fail_ex.cold+0x5/0xa [ 1777.172907][T32563] should_failslab+0xc2/0x120 [ 1777.172926][T32563] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1777.172951][T32563] ? rtnl_newlink+0x126/0x2380 [ 1777.172973][T32563] ? __pfx_rtnl_newlink+0x10/0x10 [ 1777.172992][T32563] rtnl_newlink+0x126/0x2380 [ 1777.173019][T32563] ? __pfx_rtnl_newlink+0x10/0x10 [ 1777.173033][T32563] ? rcu_is_watching+0x12/0xc0 [ 1777.173054][T32563] ? kasan_quarantine_put+0x104/0x240 [ 1777.173071][T32563] ? lockdep_hardirqs_on+0x78/0x100 [ 1777.173098][T32563] ? kfree_skbmem+0x19a/0x210 [ 1777.173125][T32563] ? kmem_cache_free+0x127/0x6c0 [ 1777.173153][T32563] ? __lock_acquire+0x4a5/0x2630 [ 1777.173183][T32563] ? __dev_queue_xmit+0x9ef/0x4950 [ 1777.173214][T32563] ? find_held_lock+0x2b/0x80 [ 1777.173235][T32563] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1777.173253][T32563] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1777.173270][T32563] ? __pfx_rtnl_newlink+0x10/0x10 [ 1777.173290][T32563] rtnetlink_rcv_msg+0x95e/0xe90 [ 1777.173312][T32563] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1777.173338][T32563] ? ref_tracker_free+0x37e/0x6c0 [ 1777.173359][T32563] netlink_rcv_skb+0x159/0x420 [ 1777.173379][T32563] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1777.173397][T32563] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1777.173428][T32563] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1777.173454][T32563] netlink_unicast+0x585/0x850 [ 1777.173481][T32563] ? __pfx_netlink_unicast+0x10/0x10 [ 1777.173506][T32563] netlink_sendmsg+0x8b0/0xda0 [ 1777.173531][T32563] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1777.173557][T32563] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1777.173580][T32563] ____sys_sendmsg+0x9e1/0xb70 [ 1777.173603][T32563] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1777.173626][T32563] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1777.173656][T32563] ___sys_sendmsg+0x190/0x1e0 [ 1777.173682][T32563] ? __pfx____sys_sendmsg+0x10/0x10 [ 1777.173717][T32563] ? find_held_lock+0x2b/0x80 [ 1777.173750][T32563] __sys_sendmsg+0x170/0x220 [ 1777.173768][T32563] ? __pfx___sys_sendmsg+0x10/0x10 [ 1777.173786][T32563] ? __fget_files+0x21f/0x3d0 [ 1777.173814][T32563] ? ksys_write+0x1ac/0x250 [ 1777.173836][T32563] ? rcu_is_watching+0x12/0xc0 [ 1777.173859][T32563] __do_fast_syscall_32+0xe7/0x970 [ 1777.173882][T32563] ? lockdep_hardirqs_on+0x78/0x100 [ 1777.173908][T32563] do_fast_syscall_32+0x32/0x70 [ 1777.173934][T32563] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1777.173957][T32563] RIP: 0023:0xf703ef7c [ 1777.173973][T32563] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1777.173987][T32563] RSP: 002b:00000000f542d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1777.174004][T32563] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 1777.174016][T32563] RDX: 000000000c048094 RSI: 0000000000000000 RDI: 0000000000000000 [ 1777.174027][T32563] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1777.174038][T32563] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1777.174049][T32563] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1777.174072][T32563] [ 1777.226292][ T9] usb 14-1: USB disconnect, device number 68 [ 1777.535846][T15429] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 1777.698437][T15429] usb 6-1: Using ep0 maxpacket: 32 [ 1777.702459][T15429] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1777.706475][T15429] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1777.713490][T15429] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1777.717122][T15429] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1777.720340][T15429] usb 6-1: Product: syz [ 1777.722182][T15429] usb 6-1: Manufacturer: syz [ 1777.733307][T15429] hub 6-1:4.0: USB hub found [ 1778.017399][T15429] hub 6-1:4.0: config failed, hub has too many ports! (err -19) [ 1778.115039][T32578] FAULT_INJECTION: forcing a failure. [ 1778.115039][T32578] name failslab, interval 1, probability 0, space 0, times 0 [ 1778.120426][T32578] CPU: 3 UID: 0 PID: 32578 Comm: syz.5.7054 Tainted: G L syzkaller #0 PREEMPT(full) [ 1778.120454][T32578] Tainted: [L]=SOFTLOCKUP [ 1778.120460][T32578] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1778.120470][T32578] Call Trace: [ 1778.120477][T32578] [ 1778.120484][T32578] dump_stack_lvl+0x100/0x190 [ 1778.120517][T32578] should_fail_ex.cold+0x5/0xa [ 1778.120541][T32578] should_failslab+0xc2/0x120 [ 1778.120562][T32578] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1778.120607][T32578] ? skb_clone+0x190/0x400 [ 1778.120630][T32578] skb_clone+0x190/0x400 [ 1778.120650][T32578] netlink_deliver_tap+0xaed/0xcc0 [ 1778.120679][T32578] netlink_unicast+0x62b/0x850 [ 1778.120706][T32578] ? __pfx_netlink_unicast+0x10/0x10 [ 1778.120736][T32578] netlink_sendmsg+0x8b0/0xda0 [ 1778.120763][T32578] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1778.120790][T32578] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1778.120813][T32578] ____sys_sendmsg+0x9e1/0xb70 [ 1778.120835][T32578] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1778.120861][T32578] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1778.120895][T32578] ___sys_sendmsg+0x190/0x1e0 [ 1778.120921][T32578] ? __pfx____sys_sendmsg+0x10/0x10 [ 1778.120957][T32578] ? find_held_lock+0x2b/0x80 [ 1778.120995][T32578] __sys_sendmsg+0x170/0x220 [ 1778.121015][T32578] ? __pfx___sys_sendmsg+0x10/0x10 [ 1778.121032][T32578] ? __fget_files+0x21f/0x3d0 [ 1778.121061][T32578] ? ksys_write+0x1ac/0x250 [ 1778.121083][T32578] ? rcu_is_watching+0x12/0xc0 [ 1778.121107][T32578] __do_fast_syscall_32+0xe7/0x970 [ 1778.121134][T32578] ? lockdep_hardirqs_on+0x78/0x100 [ 1778.121161][T32578] do_fast_syscall_32+0x32/0x70 [ 1778.121188][T32578] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1778.121210][T32578] RIP: 0023:0xf7fc2f7c [ 1778.121224][T32578] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1778.121241][T32578] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1778.121258][T32578] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 1778.121275][T32578] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1778.121285][T32578] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1778.121295][T32578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1778.121304][T32578] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1778.121328][T32578] [ 1778.185701][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1778.380881][T15429] usb 6-1: USB disconnect, device number 87 [ 1778.521896][ T5610] usb 10-1: new high-speed USB device number 81 using dummy_hcd [ 1778.560511][T32586] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1778.562950][T32586] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1778.567568][T32586] vhci_hcd vhci_hcd.0: Device attached [ 1778.705710][ T5610] usb 10-1: Using ep0 maxpacket: 8 [ 1778.710401][ T5610] usb 10-1: config 179 has an invalid interface number: 65 but max is 0 [ 1778.714025][ T5610] usb 10-1: config 179 has no interface number 0 [ 1778.716992][ T5610] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1778.721904][ T5610] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1778.726623][ T5610] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1778.731221][ T5610] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1778.735880][ T5610] usb 10-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1778.741465][ T5610] usb 10-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1778.745397][ T5610] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1778.752939][T32583] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1778.857318][T15429] usb 46-1: SetAddress Request (30) to port 0 [ 1778.863674][T15429] usb 46-1: new SuperSpeed USB device number 30 using vhci_hcd [ 1778.874112][T32591] Process accounting resumed [ 1778.977264][T32595] block nbd0: not configured, cannot reconfigure [ 1778.986041][ T5610] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:179.65/input/input55 [ 1778.988160][T32593] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 1779.023313][T32593] ------------[ cut here ]------------ [ 1779.028437][T32593] kvm_is_error_gpa(gpa) == kvm_is_error_hva(uhva) [ 1779.028454][T32593] WARNING: arch/x86/kvm/../../../virt/kvm/pfncache.c:267 at __kvm_gpc_refresh+0x1992/0x22c0, CPU#0: syz.1.7058/32593 [ 1779.036450][T32593] Modules linked in: [ 1779.038912][T32593] CPU: 0 UID: 0 PID: 32593 Comm: syz.1.7058 Tainted: G L syzkaller #0 PREEMPT(full) [ 1779.044095][T32593] Tainted: [L]=SOFTLOCKUP [ 1779.045918][T32593] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1779.050446][T32593] RIP: 0010:__kvm_gpc_refresh+0x1992/0x22c0 [ 1779.053010][T32593] Code: 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 26 08 00 00 48 8b 04 24 31 db 48 8b a8 08 01 00 00 e9 cf f0 ff ff e8 8f 3a 85 00 90 <0f> 0b 90 e9 92 f7 ff ff e8 81 3a 85 00 48 85 db 0f 84 e9 ed ff ff [ 1779.060907][T32593] RSP: 0018:ffffc900069070f0 EFLAGS: 00010287 [ 1779.063753][T32593] RAX: 00000000000006f0 RBX: ffffffffffffffff RCX: ffffc9000e4f2000 [ 1779.067124][T32593] RDX: 0000000000080000 RSI: ffffffff8182c2d1 RDI: ffff88804b3a2540 [ 1779.070392][T32593] RBP: ffffffffffffff01 R08: 0000000000000000 R09: 0000000000000001 [ 1779.073673][T32593] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888000000000 [ 1779.077458][T32593] R13: ffff888000000001 R14: ffff888000000000 R15: ffffc90006907308 [ 1779.080762][T32593] FS: 0000000000000000(0000) GS:ffff88809718e000(0063) knlGS:00000000f542db40 [ 1779.084724][T32593] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 1779.088400][T32593] CR2: 00000000f7336b04 CR3: 00000000666a4000 CR4: 0000000000352ef0 [ 1779.091726][T32593] DR0: ffffffffffffffff DR1: 00000000000001f7 DR2: 00000000ffffffff [ 1779.095017][T32593] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1779.098661][T32593] Call Trace: [ 1779.100113][T32593] [ 1779.101430][T32593] ? find_held_lock+0x2b/0x80 [ 1779.103464][T32593] ? __pfx___mutex_lock+0x10/0x10 [ 1779.105587][T32593] ? __lock_acquire+0x4a5/0x2630 [ 1779.107802][T32593] ? __pfx___kvm_gpc_refresh+0x10/0x10 [ 1779.110492][T32593] kvm_gpc_refresh+0xc9/0x170 [ 1779.112465][T32593] kvm_xen_set_evtchn.part.0+0x168/0x230 [ 1779.115033][T32593] ? kvm_xen_set_evtchn.part.0+0x153/0x230 [ 1779.117856][T32593] kvm_xen_hvm_evtchn_send+0x22f/0x290 [ 1779.120337][T32593] ? __pfx_kvm_xen_hvm_evtchn_send+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1779.123653][T32593] kvm_arch_vm_ioctl+0x13ac/0x18d0 [ 1779.126142][T32593] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 1779.128777][T32593] ? __pfx_stack_trace_save+0x10/0x10 [ 1779.131056][T32593] ? stack_depot_save_flags+0x27/0x9d0 [ 1779.133579][T32593] ? xa_load+0x149/0x2c0 [ 1779.135421][T32593] ? kasan_save_stack+0x3f/0x50 [ 1779.137402][T32593] ? kasan_save_stack+0x30/0x50 [ 1779.139652][T32593] ? kasan_save_track+0x14/0x30 [ 1779.141699][T32593] ? __kasan_slab_alloc+0x89/0x90 [ 1779.144116][T32593] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 1779.146522][T32593] ? security_inode_alloc+0x3b/0x2c0 [ 1779.149052][T32593] ? inode_init_always_gfp+0xc77/0xfb0 [ 1779.151540][T32593] ? alloc_inode+0x8e/0x250 [ 1779.153544][T32593] ? new_inode+0x22/0x1c0 [ 1779.155386][T32593] ? __debugfs_create_file+0x105/0x4f0 [ 1779.158002][T32593] ? debugfs_create_file_full+0x41/0x60 [ 1779.160343][T32593] ? kvm_arch_create_vcpu_debugfs+0x55/0x170 [ 1779.162875][T32593] ? kvm_vm_ioctl+0x2587/0x4050 [ 1779.164798][T32593] ? kvm_vm_compat_ioctl+0x2f7/0x3f0 [ 1779.166926][T32593] ? __ia32_compat_sys_ioctl+0x2cf/0x360 [ 1779.169276][T32593] ? __do_fast_syscall_32+0xe7/0x970 [ 1779.171646][T32593] ? do_fast_syscall_32+0x32/0x70 [ 1779.173758][T32593] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1779.176473][T32593] ? __lock_acquire+0x4a5/0x2630 [ 1779.178531][T32593] ? __lock_acquire+0x4a5/0x2630 [ 1779.180661][T32593] ? __lock_acquire+0x4a5/0x2630 [ 1779.182947][T32593] ? find_held_lock+0x2b/0x80 [ 1779.184971][T32593] ? is_bpf_text_address+0x8a/0x1a0 [ 1779.187140][T32593] ? is_bpf_text_address+0x8a/0x1a0 [ 1779.189324][T32593] ? bpf_ksym_find+0x124/0x1c0 [ 1779.191335][T32593] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1779.194018][T32593] ? is_bpf_text_address+0x94/0x1a0 [ 1779.196186][T32593] ? kernel_text_address+0x8d/0x100 [ 1779.197812][T32583] FAULT_INJECTION: forcing a failure. [ 1779.197812][T32583] name failslab, interval 1, probability 0, space 0, times 0 [ 1779.198359][T32593] ? __pfx_widen_string+0x10/0x10 [ 1779.204024][T32583] CPU: 3 UID: 0 PID: 32583 Comm: syz.5.7056 Tainted: G L syzkaller #0 PREEMPT(full) [ 1779.204051][T32583] Tainted: [L]=SOFTLOCKUP [ 1779.204057][T32583] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1779.204067][T32583] Call Trace: [ 1779.204073][T32583] [ 1779.204081][T32583] dump_stack_lvl+0x100/0x190 [ 1779.204110][T32583] should_fail_ex.cold+0x5/0xa [ 1779.204133][T32583] ? kobject_get_path+0xcf/0x2c0 [ 1779.204158][T32583] should_failslab+0xc2/0x120 [ 1779.204177][T32583] __kmalloc_noprof+0xe0/0x850 [ 1779.204202][T32583] ? kasan_quarantine_put+0x104/0x240 [ 1779.204220][T32583] ? lockdep_hardirqs_on+0x78/0x100 [ 1779.204247][T32583] kobject_get_path+0xcf/0x2c0 [ 1779.204278][T32583] input_devices_seq_show+0x8d/0x1130 [ 1779.204311][T32583] ? __pfx_input_devices_seq_show+0x10/0x10 [ 1779.204339][T32583] ? __kvmalloc_node_noprof+0x37b/0xa00 [ 1779.204360][T32583] ? seq_list_start+0x7a/0xc0 [ 1779.204390][T32583] seq_read_iter+0xbce/0x1270 [ 1779.204419][T32583] seq_read+0x33b/0x4c0 [ 1779.204441][T32583] ? __pfx_seq_read+0x10/0x10 [ 1779.204463][T32583] ? lock_acquire+0x1b1/0x370 [ 1779.204498][T32583] ? __pfx_seq_read+0x10/0x10 [ 1779.204516][T32583] proc_reg_read+0x240/0x330 [ 1779.204534][T32583] ? __pfx_proc_reg_read+0x10/0x10 [ 1779.204555][T32583] vfs_read+0x1e4/0xb30 [ 1779.204580][T32583] ? __pfx_vfs_read+0x10/0x10 [ 1779.204597][T32583] ? find_held_lock+0x2b/0x80 [ 1779.204619][T32583] ? __fget_files+0x215/0x3d0 [ 1779.204644][T32583] ? __fget_files+0x21f/0x3d0 [ 1779.204671][T32583] ksys_read+0x12a/0x250 [ 1779.204690][T32583] ? __pfx_ksys_read+0x10/0x10 [ 1779.204708][T32583] ? ksys_write+0x1ac/0x250 [ 1779.204729][T32583] ? rcu_is_watching+0x12/0xc0 [ 1779.204753][T32583] __do_fast_syscall_32+0xe7/0x970 [ 1779.204778][T32583] ? lockdep_hardirqs_on+0x78/0x100 [ 1779.204809][T32583] do_fast_syscall_32+0x32/0x70 [ 1779.204835][T32583] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1779.204857][T32583] RIP: 0023:0xf7fc2f7c [ 1779.204872][T32583] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1779.204888][T32583] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000003 [ 1779.204905][T32583] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800028c0 [ 1779.204916][T32583] RDX: 0000000000002020 RSI: 0000000000000000 RDI: 0000000000000000 [ 1779.204926][T32583] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1779.204935][T32583] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1779.204945][T32583] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1779.204970][T32583] [ 1779.209742][ T34] usb 10-1: USB disconnect, device number 81 [ 1779.209755][ C2] xpad 10-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1779.209901][T32593] ? __kernel_text_address+0xd/0x30 [ 1779.209922][ C2] xpad 10-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1779.303646][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1779.329601][T32593] ? unwind_get_return_address+0x59/0xa0 [ 1779.331975][T32593] ? arch_stack_walk+0xa6/0xf0 [ 1779.334083][T32593] kvm_vm_ioctl+0x1564/0x4050 [ 1779.336140][T32593] ? tomoyo_path_number_perm+0x46d/0x580 [ 1779.338640][T32593] ? stack_trace_save+0x8e/0xc0 [ 1779.340842][T32593] ? __pfx_stack_trace_save+0x10/0x10 [ 1779.343247][T32593] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1779.345374][T32593] ? __lock_acquire+0x4a5/0x2630 [ 1779.347482][T32593] ? tomoyo_path_number_perm+0x46d/0x580 [ 1779.349823][T32593] ? kasan_save_stack+0x3f/0x50 [ 1779.351856][T32593] ? kasan_save_stack+0x30/0x50 [ 1779.353811][T32593] ? kasan_save_track+0x14/0x30 [ 1779.355890][T32593] ? kasan_save_free_info+0x3b/0x70 [ 1779.357938][T32593] ? __kasan_slab_free+0x5f/0x80 [ 1779.360082][T32593] ? kfree+0x223/0x6c0 [ 1779.361973][T32593] ? tomoyo_path_number_perm+0x46d/0x580 [ 1779.364541][T32593] ? security_file_ioctl_compat+0xd3/0x230 [ 1779.367349][T32593] ? __ia32_compat_sys_ioctl+0xc2/0x360 [ 1779.369770][T32593] ? __do_fast_syscall_32+0xe7/0x970 [ 1779.372034][T32593] ? kvm_arch_vm_compat_ioctl+0x2d0/0x470 [ 1779.374439][T32593] ? __pfx_kvm_arch_vm_compat_ioctl+0x10/0x10 [ 1779.377044][T32593] ? kasan_quarantine_put+0x104/0x240 [ 1779.379392][T32593] ? lockdep_hardirqs_on+0x78/0x100 [ 1779.381579][T32593] ? find_held_lock+0x2b/0x80 [ 1779.383574][T32593] ? tomoyo_path_number_perm+0x28f/0x580 [ 1779.385977][T32593] ? tomoyo_path_number_perm+0x28f/0x580 [ 1779.388593][T32593] ? tomoyo_path_number_perm+0x188/0x580 [ 1779.391199][T32593] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1779.393774][T32593] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1779.396291][T32593] ? do_vfs_ioctl+0x226/0x13e0 [ 1779.398340][T32593] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1779.400570][T32593] kvm_vm_compat_ioctl+0x2f7/0x3f0 [ 1779.402769][T32593] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 1779.405126][T32593] ? find_held_lock+0x2b/0x80 [ 1779.407135][T32593] ? __fget_files+0x215/0x3d0 [ 1779.409117][T32593] ? hook_file_ioctl_common+0x149/0x410 [ 1779.411538][T32593] ? __fget_files+0x21f/0x3d0 [ 1779.413613][T32593] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 1779.416129][T32593] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 1779.418572][T32593] __do_fast_syscall_32+0xe7/0x970 [ 1779.420787][T32593] do_fast_syscall_32+0x32/0x70 [ 1779.422873][T32593] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1779.425514][T32593] RIP: 0023:0xf703ef7c [ 1779.427267][T32593] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1779.435454][T32593] RSP: 002b:00000000f542d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 1779.438925][T32593] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 00000000400caed0 [ 1779.442304][T32593] RDX: 0000000080000980 RSI: 0000000000000000 RDI: 0000000000000000 [ 1779.445593][T32593] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1779.448866][T32593] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1779.452135][T32593] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1779.455537][T32593] [ 1779.456884][T32593] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1779.459942][T32593] CPU: 0 UID: 0 PID: 32593 Comm: syz.1.7058 Tainted: G L syzkaller #0 PREEMPT(full) [ 1779.464394][T32593] Tainted: [L]=SOFTLOCKUP [ 1779.466163][T32593] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1779.470405][T32593] Call Trace: [ 1779.471855][T32593] [ 1779.473116][T32593] dump_stack_lvl+0x100/0x190 [ 1779.475121][T32593] vpanic+0x552/0x970 [ 1779.476825][T32593] ? __pfx_vpanic+0x10/0x10 [ 1779.478762][T32593] panic+0xd1/0xe0 [ 1779.480396][T32593] ? __pfx_panic+0x10/0x10 [ 1779.482363][T32593] check_panic_on_warn.cold+0x19/0x34 [ 1779.484729][T32593] ? __kvm_gpc_refresh+0x1992/0x22c0 [ 1779.486996][T32593] __warn.cold+0x191/0x328 [ 1779.488876][T32593] __report_bug+0x296/0x3d0 [ 1779.490798][T32593] ? __kvm_gpc_refresh+0x1992/0x22c0 [ 1779.492983][T32593] ? __pfx___report_bug+0x10/0x10 [ 1779.495109][T32593] ? lockdep_unlock+0x5a/0xc0 [ 1779.497076][T32593] ? __lock_acquire+0xd73/0x2630 [ 1779.499153][T32593] ? __kvm_gpc_refresh+0x1992/0x22c0 [ 1779.501364][T32593] report_bug+0xb2/0x220 [ 1779.503157][T32593] ? __kvm_gpc_refresh+0x1992/0x22c0 [ 1779.505336][T32593] handle_bug+0x16a/0x2a0 [ 1779.507132][T32593] exc_invalid_op+0x17/0x50 [ 1779.509034][T32593] asm_exc_invalid_op+0x1a/0x20 [ 1779.511073][T32593] RIP: 0010:__kvm_gpc_refresh+0x1992/0x22c0 [ 1779.513487][T32593] Code: 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 26 08 00 00 48 8b 04 24 31 db 48 8b a8 08 01 00 00 e9 cf f0 ff ff e8 8f 3a 85 00 90 <0f> 0b 90 e9 92 f7 ff ff e8 81 3a 85 00 48 85 db 0f 84 e9 ed ff ff [ 1779.521384][T32593] RSP: 0018:ffffc900069070f0 EFLAGS: 00010287 [ 1779.523915][T32593] RAX: 00000000000006f0 RBX: ffffffffffffffff RCX: ffffc9000e4f2000 [ 1779.527210][T32593] RDX: 0000000000080000 RSI: ffffffff8182c2d1 RDI: ffff88804b3a2540 [ 1779.530485][T32593] RBP: ffffffffffffff01 R08: 0000000000000000 R09: 0000000000000001 [ 1779.533776][T32593] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888000000000 [ 1779.537040][T32593] R13: ffff888000000001 R14: ffff888000000000 R15: ffffc90006907308 [ 1779.540328][T32593] ? __kvm_gpc_refresh+0x1991/0x22c0 [ 1779.542547][T32593] ? find_held_lock+0x2b/0x80 [ 1779.544500][T32593] ? __pfx___mutex_lock+0x10/0x10 [ 1779.546531][T32593] ? __lock_acquire+0x4a5/0x2630 [ 1779.548591][T32593] ? __pfx___kvm_gpc_refresh+0x10/0x10 [ 1779.550883][T32593] kvm_gpc_refresh+0xc9/0x170 [ 1779.552861][T32593] kvm_xen_set_evtchn.part.0+0x168/0x230 [ 1779.555220][T32593] ? kvm_xen_set_evtchn.part.0+0x153/0x230 [ 1779.557751][T32593] kvm_xen_hvm_evtchn_send+0x22f/0x290 [ 1779.560111][T32593] ? __pfx_kvm_xen_hvm_evtchn_send+0x10/0x10 [ 1779.562613][T32593] kvm_arch_vm_ioctl+0x13ac/0x18d0 [ 1779.564763][T32593] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 1779.567061][T32593] ? __pfx_stack_trace_save+0x10/0x10 [ 1779.569292][T32593] ? stack_depot_save_flags+0x27/0x9d0 [ 1779.571581][T32593] ? xa_load+0x149/0x2c0 [ 1779.573366][T32593] ? kasan_save_stack+0x3f/0x50 [ 1779.575401][T32593] ? kasan_save_stack+0x30/0x50 [ 1779.577425][T32593] ? kasan_save_track+0x14/0x30 [ 1779.579484][T32593] ? __kasan_slab_alloc+0x89/0x90 [ 1779.581586][T32593] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 1779.583737][T32593] ? security_inode_alloc+0x3b/0x2c0 [ 1779.585814][T32593] ? inode_init_always_gfp+0xc77/0xfb0 [ 1779.588100][T32593] ? alloc_inode+0x8e/0x250 [ 1779.590009][T32593] ? new_inode+0x22/0x1c0 [ 1779.591843][T32593] ? __debugfs_create_file+0x105/0x4f0 [ 1779.594099][T32593] ? debugfs_create_file_full+0x41/0x60 [ 1779.596427][T32593] ? kvm_arch_create_vcpu_debugfs+0x55/0x170 [ 1779.598926][T32593] ? kvm_vm_ioctl+0x2587/0x4050 [ 1779.600975][T32593] ? kvm_vm_compat_ioctl+0x2f7/0x3f0 [ 1779.603187][T32593] ? __ia32_compat_sys_ioctl+0x2cf/0x360 [ 1779.605509][T32593] ? __do_fast_syscall_32+0xe7/0x970 [ 1779.607737][T32593] ? do_fast_syscall_32+0x32/0x70 [ 1779.609852][T32593] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1779.612515][T32593] ? __lock_acquire+0x4a5/0x2630 [ 1779.614525][T32593] ? __lock_acquire+0x4a5/0x2630 [ 1779.616497][T32593] ? __lock_acquire+0x4a5/0x2630 [ 1779.618545][T32593] ? find_held_lock+0x2b/0x80 [ 1779.620544][T32593] ? is_bpf_text_address+0x8a/0x1a0 [ 1779.622735][T32593] ? is_bpf_text_address+0x8a/0x1a0 [ 1779.624897][T32593] ? bpf_ksym_find+0x124/0x1c0 [ 1779.626936][T32593] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1779.629484][T32593] ? is_bpf_text_address+0x94/0x1a0 [ 1779.631672][T32593] ? kernel_text_address+0x8d/0x100 [ 1779.633847][T32593] ? __pfx_widen_string+0x10/0x10 [ 1779.635967][T32593] ? __kernel_text_address+0xd/0x30 [ 1779.638157][T32593] ? unwind_get_return_address+0x59/0xa0 [ 1779.640465][T32593] ? arch_stack_walk+0xa6/0xf0 [ 1779.642381][T32593] kvm_vm_ioctl+0x1564/0x4050 [ 1779.644340][T32593] ? tomoyo_path_number_perm+0x46d/0x580 [ 1779.646709][T32593] ? stack_trace_save+0x8e/0xc0 [ 1779.648748][T32593] ? __pfx_stack_trace_save+0x10/0x10 [ 1779.650915][T32593] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1779.652940][T32593] ? __lock_acquire+0x4a5/0x2630 [ 1779.655002][T32593] ? tomoyo_path_number_perm+0x46d/0x580 [ 1779.657282][T32593] ? kasan_save_stack+0x3f/0x50 [ 1779.659328][T32593] ? kasan_save_stack+0x30/0x50 [ 1779.661391][T32593] ? kasan_save_track+0x14/0x30 [ 1779.663397][T32593] ? kasan_save_free_info+0x3b/0x70 [ 1779.665524][T32593] ? __kasan_slab_free+0x5f/0x80 [ 1779.667602][T32593] ? kfree+0x223/0x6c0 [ 1779.669332][T32593] ? tomoyo_path_number_perm+0x46d/0x580 [ 1779.671669][T32593] ? security_file_ioctl_compat+0xd3/0x230 [ 1779.674075][T32593] ? __ia32_compat_sys_ioctl+0xc2/0x360 [ 1779.676364][T32593] ? __do_fast_syscall_32+0xe7/0x970 [ 1779.678578][T32593] ? kvm_arch_vm_compat_ioctl+0x2d0/0x470 [ 1779.680958][T32593] ? __pfx_kvm_arch_vm_compat_ioctl+0x10/0x10 [ 1779.683510][T32593] ? kasan_quarantine_put+0x104/0x240 [ 1779.685748][T32593] ? lockdep_hardirqs_on+0x78/0x100 [ 1779.687923][T32593] ? find_held_lock+0x2b/0x80 [ 1779.689886][T32593] ? tomoyo_path_number_perm+0x28f/0x580 [ 1779.692229][T32593] ? tomoyo_path_number_perm+0x28f/0x580 [ 1779.694566][T32593] ? tomoyo_path_number_perm+0x188/0x580 [ 1779.696914][T32593] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1779.699426][T32593] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1779.701886][T32593] ? do_vfs_ioctl+0x226/0x13e0 [ 1779.703894][T32593] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1779.706018][T32593] kvm_vm_compat_ioctl+0x2f7/0x3f0 [ 1779.708169][T32593] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 1779.710500][T32593] ? find_held_lock+0x2b/0x80 [ 1779.712462][T32593] ? __fget_files+0x215/0x3d0 [ 1779.714462][T32593] ? hook_file_ioctl_common+0x149/0x410 [ 1779.716784][T32593] ? __fget_files+0x21f/0x3d0 [ 1779.718754][T32593] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 1779.721031][T32593] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 1779.723302][T32593] __do_fast_syscall_32+0xe7/0x970 [ 1779.725443][T32593] do_fast_syscall_32+0x32/0x70 [ 1779.727502][T32593] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1779.730111][T32593] RIP: 0023:0xf703ef7c [ 1779.731844][T32593] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1779.739749][T32593] RSP: 002b:00000000f542d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 1779.743196][T32593] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 00000000400caed0 [ 1779.746473][T32593] RDX: 0000000080000980 RSI: 0000000000000000 RDI: 0000000000000000 [ 1779.749700][T32593] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1779.752944][T32593] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1779.756176][T32593] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1779.759426][T32593] [ 1779.761561][T32593] Kernel Offset: disabled [ 1779.763334][T32593] Rebooting in 86400 seconds..