last executing test programs: 8m47.104346952s ago: executing program 2 (id=337): gettid() openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="54000000020601040000000000000000000000000c00078008000640000000010500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e657400000000bffb2648c216955eadf2594f9a8b282112759761b8fbd6cd305a1b3bfee9337edf84371ab0475b8ec7c4416bd2d503c975aaed22ca96f54d7d7cc8c089ab39"], 0x54}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000500), 0x42, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = dup(r2) io_setup(0x19, &(0x7f00000009c0)) write$UHID_INPUT(r3, &(0x7f0000000880)={0x8, {"42d1d92b458e9ea9121673103f96e2a6f652a6bdda39b5d7420184a77546c6fff4a436cebd267e2cba6384cfd34afd4d775ba7dae05a62136afcfc54f5d02449793625a11ecd264a66c65811ec065bf3384ba3a94511f88032621b01045583e45e0f9b8befcefeee83c1c07af866dc99b3a7fe5fdee5dc46a3e9cb1edaeba78d42d3be0bca7db3ac5afa44e7331dbdb3ac881558a185f17f98bf0eb96c68c011a16cae07edc32699fe15c4c964be095ef651bfa7c0d94f13fa1c3170e9fb1b6da3eced5ba82a5bf3198a410a82d22a2c9d70affcfa48c6dec8448cee3e26219817c2faa2f4bc424789791e43a266ee715ab789495c7570726e2250d43fb1b1d113097c8fd4c1cb3668b8c892b1adefbe6eeee0516dc7a83e698bd9cc63df91ecf51c3c34cef6dc62c1eabbafdb9fb960522f2241e383b943609aea34880728553c1caf4d435f517ce3364bc62a340cb999324a1b2af232a945cab0bacc01cc3f5aae8e09c0592c78cc75bfbe5419f1b6dcc226456dc3473036665c91f00267de753b542060780257d2e8d72fbccdbad113381ba1cf207c86d959843aa68dbb7a753e6800ebfc3328034691a8a30296741cd1a895cf54ce89a556c2070a7cbb8e682cd8a79a57f484f19f10f34bd307d631a9d215bfabebf4a7aeda75c6d217568c5b281b38470982ec48ac6f636909d15758d95c1461540711b09398a4693fa62c3c93822048ae9675d9d6881191c8f9ec846c188f473cdcfa5273bbbcad0d5d7d36763bc3861076722bd48c3345498cc48048222f5574ec7378bc7efe5252795065bbcdb7ce499e0c0bebee079be6f4c7c5c15cd7e56b6413dd07ad8327044f8b725e8fa9c99c45c0b9daef51afa7c291006b684375316e7a501d35041b18e55b1391e36becf00194ba3630dcee4fde391d15347bc28c6c53cf3cccffe116330739d93a6ff56be34c316a71410281f3c619e7ad12e37c668b1f4795fd27e6f483b85c9763ce42524a66d1ba6ee7156e36678cb78c779d976dbdbdebdff36049aaf0b59c93725746eeeb960d938485c4dfa2b4caa029c6a142fb0119d7247baa3d065fc61f3afb531dd579f857adc835f7ebe3545c6f5ca8b3a749c0832cfe6be5dae01543ea3a56663b5cf58de7daaace2c3271848a65d9bbff1a13b354dd614fbf223dde719dfe6591bb5fe4edc3ac31d9ae18432740b7c05de02b9fb86cf9fe4454961da31cd41ddb6fb95a72e5723d6cc3cb57520806d09a853ecfe29c9cdfce35395f1fd7f2593600f9d5bd7b6b157d5575672430509c7eeebe3805438cfae86a5993cd3e6fa39f9567000c9baf665254042ca19fb1adfdec37720d41dca15523a8073e5c49db4add9caeefdec2b7aafdca5baafe78b9a7f8c2bdd5c58baa8a87ec2f8fcf708045ec7ab899c47481c59184bd10f8319f73263d9b4efefb0247a39fc6d451cae8d3a3a51b6e98977be59b2e1beec3a1a9e0dd8475123c3162d0927eab50f44e48c39a95938a033015b8ef9fc02fdee10540b123c7a53d6706f7476ab88d0d5121676e7d7cbc2635ba281b369f3378afaef92a60c92393efe9c45ccf60f1bdb69097e5f1bc67b1597e6b5de3dd5a7f162690972c6768cf63a9b4a7875268c97b31a427b983196f601d28f1648fd40b4b6a16b4ff4b2737cbd0d14b0c43b0c33d5c876df6591efa0b51bc44413fff32524dab4d198f045b2622c4e2fdcec8e6606b88ed3de71ad0d3dd0dbd661e39acd69af980e1b7c7d539d6498d68b64bac9233efd7d4b00db3fea8c0bf02aebcfb2240bc11ec5bceccccad5b00007a29f345620ae4673f1d41c514e9f5b583433adde93069a1cd01621b50d87dfffd5d410d077b9b4b6b8a807298ee871ff649e8620b06af7988f3d4ae20cb5482121875cdcd9b4e44a74c691c09bac1e7947f2f4f4d228146a1f867633c19ee3b709a86968428f2810d92598bdbcd18b93fbc9a705dda58691ebad397335e80a0cd17b1e6518386251341129e8fdb252b12b741847a4bb8da0e617bbe203f65cfd52cd271dc267598ec0ed469a57fe98e338468839a3cb20caec617f94fa65262e55bd34f2ebd64a88b75779993e6903a50d6ceb7fbf1c6bd1f83b7afa213471d86f52b060c9af2559f3332eab72bbef58de69c481122ad0fdaf499aee6121a52d0ed2b9fc2d62412f8f77e331f025f2ca21adba1434e41577580fae31a3892fdf3e08d1627c6cd1791abc41ac64da3d8aafbd6fbb5ff3d582030162bfc20dbb7aec5ba68a7f88167124d675674b15012930b491540f3d8ea93a6486b64ac5a88bce5491822f0c79cb43a90e349d8480929343b307662ac67934ac3bc5c6e4bc409340ae234f86febf422eae94f22fe41cfacf9b62703a64dca51a81995d646ddb91f0962ebe9c93597349635e73b7604024edb816a07863fbc80febd2d024e497ff03bf91b7f2e6e74601f9564ac8a30bc6571f9e0c6e9cb105bd8204d3a6de3a21952005c22aa4ad68fe4d4d79377d7f19241961cc1993d7cd7fe02bb023702a65024f8cf7e18072ed500ea6a2b545951023f794a0fefb317531ea1f702002ef5897b4629308c28724554d8f0d89fb0369fb6270fa7a885df66e49b6353b65924578e0aea8dd4ee65d32ebeebbc238973aae8fa25b9e4dc36df1a15b174b2ca3c8650ac1f255a1707d46b5d555a61ddccf6c232488c92949e1756e0bbc7d845676b4143ab12ad17f214bc5caae48e410df19616e9e371f8dfc8d00bb4a4a510594479c75276474d9a346db1d357bedb5de96e56846d306a2dfe98d24fd676e79f89e560a95d8894d1160bda8b46bb8e061a6199d373e94c2947f852f4e54c58476d4bc37c66ecfd0d23f967fc73667f9ae39dcc4b14fcb9ab524e04143d624d04c3031dbd9259864c5040a481a5906b870ed4be35818bc6cd45ce4f91bd8e39b424526e36afb87b298eedb187883d5005c4407637f0edacac29f5f6eb38f525a662a6c3c201fd48b811519bc621494440c09f9f2c989dafe2fe8215d1050ef3769f49aad149cbddd4b5133a1711a055e5172894fa617dcf9801b78695e75754bd590deaf816a4233f63311c2e5e9f82413e66f743e96ace48083fb97c869c3d07c8593e0e6a4b8446471e44bc04b6381ba359baba2a60daf4e29fd25d2ddf7ac1a60191474c09e4a4bde1e1ab97dfa01bdbb95cc356c51cde94d26848d60ac4c310fd9691425edd6f14304775f2271b04412473c623b4b74eb53c8e3e4251209ea44689b6144993ee4287353f8a41659cdf456e2544d116064b0e6ea6d0ef105cc207ef3e63f0ff27ecdb32fc1bed4a9f261e3234207bc8d601ae3aebf56bdf6957c49d98e23ac43b90fecd89630fe7b8e7f9c2845c3f791fb7140d9dfe24ef9564b96f1e449fcb84e2e9ec41255f60f5b61994bac1fde331f2560a3d183f96de605e51c48789ef15edd9a85f34978df474811c92a19b838a24fe956fe4b8c4dacf48518418d7d0a276c72a759f0f0fe7efc27ff8f2478164615cd0b86fcff3bf6c4f78e0154267af5f40f52cbf0bac7184d84a1ddae1a8fcfa9d9da983dd470b5d1f656e716eb7309bf07d4cd71818b55927e679033b3ea63f1fe5ec1b0280607e0976e90d714eebbc6710e5fc1dae090dfbcbf6e67f77928615d60bb672e1ef8140eeccaed9a22c122699b4615ff52abd5bda6327b019471f3ecf18497335b8eae99b99211e88ecd068aaad527506c307240fb1949ce6168995120aecb013abbc05b654dee28bc95f5b96b22e69abfd6923eef1a90b6d1152327aaacf5f138547255043723c26711ea3dd937a68445a1fd69642b23336190ae3c5e0555a3def9a38431e8fe95395dbc0c5b7b929f9847a6e74ea21c7bacf248c9830839286af319a94c8c4d01b37779b74e159c4b40ae7004ad95de5db6967e6d5dc8313c9067e6ed161c1fd210c2d17cbfc49061e867154624ed93fb6c06f546d03e8141fe00f983551c4888285c584dce9a3541d24ba38c3a149e865318a8ec53ec577de540b9e421700cb24347368c06eeb568ebca9dd044591cab837fe7a6e70bf2622062753ed1dc2051f2d7867b4c23f657777dc5eafbf4ed86d3e295ea7edfe7213aa0990da23fb288a289dbfd59d4c524cf3f02a2afb25f5e9d7d8cd0166a13ec56d05596152e1a83259ec852f96971afe3aa47a5971bf3b12281f588fd3fe59d29b1ebc6e797d766ec717d76d28f03c1225e85cbd9f5d09080aa9e85dc3dba8be5e3de98cb98aec4c9db811cebe8fe4883dc9c55455c6a7010e8d82d98c20efa3146939c5d1634dfac84310450a7410073e879b0172fc4587450ac286b0b50de0edcec3d97a25a9e12d879ac90d12f8fb0fa38e90289946ede3e1953d4bb896138a733218d9e3b198c5717fba844a72e9622c56bb1df9a9c71fd21111434b3362ebdb0e4b75b348fb53287bc64689d8dc7c2d0ecdf15900ab5f4d5d54cfc4c0c6f6805247bd309dc329a63944a40bac7b21a6d587c1a372ba113d74cb8b102d41cd34dff7d8d4c721fbfd718263c6976983c9dfbc8903fbf05198bc9d7909ccd2e9233f147b8f4827e390ca06e148051ddac02d6e0315638cf85c2ae259d903e7ce2a9fb19c81e9d368663f9b8c2d86a627812cdb36c4f7fd9fd033bb9d1ea26acf621909c791ed181fb16b1553f5654ac2eaff7c77049a6605ab08f19b64b200a276cbb9915b50da6305d07a40d9af915a5c43adfa42e07806b91fca4da099a72ca9375755f8b57d657f567696106ca1fb8abe0c76bebe1a00ac475c3d98137968d1fdb77d1b1ab5f4369e0e5a496ab9d4403e5c25b469096ba7957faf5aa8b8eb1562609279db8570e32947f723e2e4802e43f391a696ce4db76b780a1bea0087bfe9ed878cc7a72e79fde3b6e29eeaebab382488a38cfe20766ce14289e89d91d7b7fd7f8e222968b94c7edcde8144ae48d3ff6253fc86514137b804535cb0276b9a51692ba08c2ab831c82eac25f7d8f9549ad6916bc0ab3667a63dcbf3f4ab81e37fbcdef650ea24ffc952b71cdd0e4abc8ac803a4153877403e14adc800687f5978f9ed73617edd1931e1d777d7e8fe346a169a645b844c639355e8970ecf43e9fc37e78f7d311787de593128d671f2fe8d1efcf9c30be758e39686b3810a354f8f70c3b8875d10f251d14e9f510103d370b4c2a35fc0b7bd4fc4672957889719b982ce9696900570a292a755b85c7aa68bf9d867be67052075ff8e376c58b3471dd7423f5c40cd72f0c27d054d2ddd7b06e63153e67a408b412ee94489c6f9f7add7d19fdf269c3db26a1a6565cb9fa4a8567f398276c50d1c439da577c4018f912fff16262d8b86dbc3b1cf7d56fcf25cf4dce6b1c99f83bcd85beef32bb7f12d6f9eb366be1cb8ca6dd43476be8b3e6c82b8ce48e9a7c279d31f8906014e5e371a102a87a6037d228719caa2c096ed5d8d5d7a6cbda9bf720ae5bf460188afd0ec006eccc1c3e8efc1dc8fbf8ffc1e1fc02ee42e4d65d225fcfc9cf8388afbc51f0b15187477fdabd8fbd1766c09b1c6940a2abe3366018db6834e41c8ccbd65cb049c06659031fd2973f983b4cb4414fc62479c50b0d0bd422b4f826194d2fb83ae56cc3dbd7bb7856c2f33f716bfbedb965c3f08882ab088d6f66d1f2a94f82100e6481c184ee58a98a318ca04561c6140da0a87bc1bec0c13d3517a2dff36223205aa65a00d053f268125a608f52138c6ce64de980391f7adb1563c3fe97ae8bc84142ac7823a9e7645d99f64db79d1fb9dd4dd2afefa", 0x1000}}, 0x1006) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0cc5605, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) getsockopt$ax25_int(r3, 0x101, 0x9, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000140)=r4) syz_io_uring_setup(0x50ce, &(0x7f0000000000)={0x0, 0x58a3, 0x80, 0x3, 0x37a, 0x0, r3}, &(0x7f0000000100), &(0x7f0000ff4000)) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x2, 0x0, 0xa, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) 8m45.293395496s ago: executing program 2 (id=344): mmap(&(0x7f0000220000/0x3000)=nil, 0x3000, 0x300000e, 0x80010, 0xffffffffffffffff, 0x553f5000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x0, 0x0) preadv2(r1, &(0x7f0000000280)=[{&(0x7f00000008c0)=""/211, 0xd3}], 0x1, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x4000884) r2 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141101) r3 = dup(r2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = userfaultfd(0x80001) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r3, 0xc0045540, &(0x7f00000004c0)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r5}, 0x18) r6 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r7 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r7}, &(0x7f0000000080)) read$FUSE(r6, &(0x7f00000008c0)={0x2020}, 0xfffffef0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) socket$xdp(0x2c, 0x3, 0x0) timer_getoverrun(0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000001400010000000000fcdbdf25021f59fe", @ANYRES32=r10, @ANYBLOB="140006008100000002000000140067f402d345b9ce9100000000000000a71f00"], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) 8m44.053755353s ago: executing program 2 (id=346): mkdir(&(0x7f0000000100)='./file0\x00', 0x1b0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x10000, 0xd1) (async) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x70c80, 0x181) (async) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0xa1000316) (async, rerun: 64) r1 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x936, 0x0, 0x1, 0x40000336}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) (rerun: 64) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47b6, 0x800000, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x27, 0x301, 0x270bd24, 0x25dfdbfd, {0x5}}, 0x14}}, 0x0) 8m43.925700826s ago: executing program 2 (id=347): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x1dc) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000001cc0)='./file0\x00', 0x2, 0x80e2e8) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x89f9b000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) read$FUSE(r2, &(0x7f00000083c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000580)={0x50, 0x0, r3, {0x7, 0x1f, 0x911, 0x24808521, 0x3, 0x1, 0x3, 0x0, 0x0, 0x0, 0x80, 0xa4001f7e}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x8) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r5, 0x2, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r4, &(0x7f00000000c0)='!', 0xb7f40, 0x3000000000000000}]) dup3(r4, r2, 0x0) fcntl$setstatus(r1, 0x4, 0x6000) close_range(r0, 0xffffffffffffffff, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x2}, 0x8) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, &(0x7f0000000780)=""/106, &(0x7f0000000380), &(0x7f0000000000), 0x80, r7, 0x0, 0x7}, 0x38) sendto$inet(r6, &(0x7f0000000100)="ab", 0x34000, 0x40048c4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) 8m43.375365482s ago: executing program 2 (id=349): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x60040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x118a, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x80000000000206, 0x80) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x2c1, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x3}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) r5 = openat$binderfs(0xffffff9c, &(0x7f0000000a00)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r5, 0xc00c6211, &(0x7f0000000a40)) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES8=r2, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000000023000000000000000000000000000000000000000000008dbe84165decc4e50e3163de85cc913193cf406090f6a9989c6b7d92e3e2911505670e74e8e1d18dc8abab760aa3633e68bdd2526c34eeedf61f1bb418133ef8a2a45fe5842d3d21c9e3c4f20a54600f2a047d1471fd84eb32913d10fed7d1679a868479991c082bc6a62cc55daf19be9addbfd84fdb1002c98b8a9e69a1a229c267e7e723c539980246c16cf586bd6aab0263cdb3c6cecbfc2a4b6f3a4f4d292c3d6feadac56f9774bd9ea5f36d35a1"], 0x50) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r4, &(0x7f0000000180), 0x400008a, 0x0) bind$llc(0xffffffffffffffff, 0x0, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) prlimit64(r1, 0x4, &(0x7f0000000040)={0x6}, 0x0) 8m42.985843018s ago: executing program 2 (id=351): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) ioctl$BLKBSZGET(r2, 0x80081270, 0x0) 8m42.895895786s ago: executing program 32 (id=351): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) ioctl$BLKBSZGET(r2, 0x80081270, 0x0) 5m58.852794249s ago: executing program 1 (id=1225): r0 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x40084d0c, &(0x7f0000000040)={'syztnl1\x00', 0x0}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x25dfdbfa, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x6, 0x4, 0x9, 0x80000000, 0x5, 0x8e, 0x8, 0x9}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000008}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001100010000000000ffffffff07000000", @ANYRES32=r5, @ANYBLOB="4b6fcd30000004000c001a800800058004000380"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) setresuid(0x0, 0xee00, 0xffffffffffffffff) r6 = io_uring_setup(0xa77, &(0x7f0000000080)={0x0, 0xffffeffa, 0x800, 0x7, 0x2}) setrlimit(0x40000000000008, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/4105, 0x1009}], 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@getchain={0x3c, 0x66, 0x100, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x1c, 0x3}, {0x5, 0xffe0}, {0xccdce9c86b98c5fe, 0xa}}, [{0x8, 0xb, 0x4}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008809}, 0x20000040) r7 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r9, 0x7a7, &(0x7f00000009c0)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r9, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r9, 0x7a8, &(0x7f0000000780)={{@my=0x1}, @local, 0x8, 0x2000000, 0x2449, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x0, 0x8000}) r10 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r10, 0x11b, 0x6, &(0x7f0000000200)=0x10200, 0x4) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r9, 0x7a8, &(0x7f0000000040)={{@my=0x1, 0xa}, @any, 0x0, 0x1, 0x9, 0xfffffffffffffffd, 0x0, 0x8, 0x9}) r11 = dup(r8) write$uinput_user_dev(r11, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x3, 0x1, 0x9}, 0x3, [0x20004, 0x6, 0x802, 0xe9a2, 0x1, 0x0, 0xa9ba, 0xc1f, 0x1, 0x7f5b, 0x3, 0x6, 0x3, 0x10000, 0x2, 0x3, 0x0, 0x3, 0xe, 0x7, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0xfff, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x9, 0xb, 0xce, 0x5, 0x80, 0x401, 0x5, 0x0, 0xfffffffa, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x3, 0x80000000, 0x1, 0x9, 0x7, 0x8, 0x5, 0xfff, 0x1, 0x9, 0x7fff, 0x10000, 0x2, 0x8], [0x2, 0x1, 0x10000, 0x7, 0x9, 0x6, 0x5, 0x4, 0x9, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x4, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0xb, 0x0, 0x0, 0x0, 0x4, 0x2001, 0x7, 0x8, 0x10d, 0x1, 0x5, 0x9, 0xfffffb66, 0xfb5, 0x2, 0x4, 0x7, 0x10002, 0x8000, 0x7fff, 0x5, 0x4, 0x4, 0x6f, 0x80b, 0x1, 0x6, 0x525ba681, 0x4f75, 0x7, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x8b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x40, 0x4, 0xfffffff9, 0x7aa, 0x10, 0x565a, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x49, 0x6, 0x4, 0xabc, 0xa3, 0x40003, 0x1, 0x40000000, 0x3, 0x4c, 0x3, 0x5, 0x2, 0xd21e, 0x9, 0x12, 0xfffffffe, 0x2, 0xfff, 0x6, 0x800100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x81, 0x47, 0x7, 0x0, 0x11, 0x2, 0xffd, 0x7, 0x7, 0x7ffd, 0x7ff, 0x10, 0x2, 0x10001, 0x1, 0x10001, 0x6, 0x71c, 0xfffffffd], [0xc0, 0x3, 0x10, 0x4e28, 0x7, 0x7, 0xfffffff3, 0x497, 0x4, 0x1, 0x3, 0x5, 0x56, 0xc28, 0x9, 0x5, 0x5, 0xa, 0x79a, 0x4, 0x9, 0x6, 0xc41f, 0x5, 0x1ff, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x0, 0x1004, 0x10, 0xd, 0x6, 0x8000, 0x53, 0x78d, 0x4, 0x1, 0xffffb027, 0xfffffff8, 0x9, 0x7, 0x7, 0x101, 0x7, 0x7, 0x4, 0x0, 0xb, 0x400, 0x8, 0x0, 0x8, 0x7, 0x9, 0x8, 0x0, 0x1, 0xffff, 0xfffffff7, 0x5]}, 0x45c) getsockname$netlink(r11, &(0x7f0000001340), &(0x7f0000001380)=0xc) ftruncate(r7, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r7, 0x0) lseek(r7, 0x0, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) 5m58.639177199s ago: executing program 1 (id=1228): gettid() openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="54000000020601040000000000000000000000000c00078008000640000000010500010006000000050005000a00000005000400000000000900020073797a31000000000d0003006861"], 0x54}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000500), 0x42, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = dup(r2) io_setup(0x19, &(0x7f00000009c0)=0x0) io_submit(r4, 0x4048, &(0x7f0000000500)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0, 0x0, 0x5, 0x0, 0x2}]) write$UHID_INPUT(r3, &(0x7f0000000880)={0x8, {"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", 0x1000}}, 0x1006) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0cc5605, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) getsockopt$ax25_int(r3, 0x101, 0x9, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000140)=r5) syz_io_uring_setup(0x50ce, &(0x7f0000000000)={0x0, 0x58a3, 0x80, 0x3, 0x37a, 0x0, r3}, &(0x7f0000000100), &(0x7f0000ff4000)) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x2, 0x0, 0xa, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) 5m57.692760039s ago: executing program 1 (id=1234): r0 = openat$sw_sync_info(0xffffff9c, &(0x7f0000000000), 0x406000, 0x0) ioctl$I2C_PEC(r0, 0x708, 0x401) sendmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000040)=@caif=@dbg={0x25, 0x6, 0xa}, 0x80, &(0x7f0000000340)=[{&(0x7f00000000c0)="62ed8bbe5a4f7f83ce555c343e88053168fcdff69348488009c84f4f922b5273f837a4332affcb1c9d558b73c5e9c59031a452b0fc8ed02fab8874bbb91598653c8dc4410247def25583281b76b4c71014a41307a55778163430754631ede9367e9f59f08a7a30cd62fa3faf423c696114759b7d612f5586ab78824742a3259c786de1af3192c3304c41714b5b9239da6d96480a5c01ba6b4dab572a0d05b300aeee6b728dd21e09b746b3e19b45ab91179713ab", 0xb4}, {&(0x7f0000000180)="6e8cf926a2c659f7d8cff02c9f9e27f987216b3a1b83ba6629b85ad2227e6af0726efa086d0f429ec6947c8791d9a479c2a282472b7ad59639382a0c786cc764de04c47623c3bad03b85f0b3d207f92d4a440b8ca3d98ed903e31f23266f134743b719315adaefb51038be2761d402dc3ab7fc0aa439f0882f7a9c2e6cf722ec83c566ba40f64ab3b566cf15f351a53f66399d7d3b18cec083bc303f8107dd3e49371b58940cc74a09734e0e4a4be1fc7c3f2153b6ebdd44c7c68561243118a8b5b80126b069384ee7ab241ca81da4845ad9ca9003eb0f7bf16cb59de9fcc8a01faa19bbc1f30fa147", 0xe9}, {&(0x7f0000000280)="5df059822b2a716c9bc8e29e87b7c7aa71c787156aff9e8c1236132127355c0f35eeb0b83f521519e9a5be8f71f91d08257b5034e6900accdea19b9e5f159e359149963b77035341055fed30c585ce963f24357c9af9876a99f83fd04a47402b3762b9bc5dc34f8b346d0f272d700d707f6dc2a56c881d0c141d8491fb69fd69332967b1c8c283045d2093865033fceb8f5adc2311c8636180351004a4987248cb675e55fb83f68141b7", 0xaa}], 0x3, &(0x7f0000000380)=[{0x54, 0x104, 0x10001, "8c8182227048ef99d187600c9e9450971c12f9b2055245a293946205458e70e5e13e503cff6bb88b24fc34460a4374ec9a2ec8808bfed51937eed430e24e8549188375b77e"}, {0xc8, 0x109, 0x6, "1fb5ec72954fb5696fb75b9fb79d89b1191d2611b835ebf75478643e4dce4f9f75359dd1da7065433764b8d45c5b8ccb5b07dedbcc3ab73e81802702552770da760bf55ea89193030188225a7e4f0b12eedfb3f1412411423f34e1ad6806dea4d0e8e25beb59944b274957eaf2528e64e8f61d9cac0fa6674ac6d8c2388fcf84ad49553c20e79d19da1fc2cbf013a0be591acdbb8ec433d39fc5940f8edc56cb493ccea4ebb592cb3c5abffa1945fc870bc196c9e033196bc8c192"}, {0x7c, 0x114, 0x1, "5ead18ca1826d0ee2a87d22331712cb41aa56fce19024f33a9d5696dcad92dd7afad1180faacc4846a374ee42f50a1f226be76550ecd5f899d17d90632e8beb1fe7d6f24f211fb6741f8c0c49304fbbde031b1e5afd8ae56a27bce79e0a28736e94d94ac0d798befb7069e872159b9"}, {0x54, 0x118, 0x1, "6b07bcc7bd7bc4c902585d2b9ae2c349371122d699a0bc99eb152f2cf98ff64631a99aa5a75e6208ab27ac3ed36dbf9f1900cb0644f190da0a4d8b795f71d398101dd5e21326c127"}, {0x7c, 0x109, 0x8, "e4c3e78bcd697dd890dd7304d15000d183dfe963fbb2fab06e984dfea9861b2616917df9dc4d6e4f2900a94b2f865523b47bce07484ef5bed750df9e32c2706560ee64abc798c65ee08d9b2a2e0ebe0d22572e5cbc0ef6c880967c63d068bada0e063c22f83f0d030c03f02d05"}, {0x10c, 0x6, 0xfff, "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"}, {0x40, 0x115, 0xfffffffb, "89c31eafdb9b6cfe8f04b2cb797ba3013e0be935059a50f6a194748c1a567723e4f79a6443bf43adb97a71f26aa14e95e4a6230a"}, {0xe4, 0x3a, 0x0, "c9ff70b4125591283cf7e7dfe951a9c9d312a7f9a9b39964c8af5ffb66100cfac9eacb0a050f2123e80aa4392253a84e712a6a49ed49e1e3ad0d199c6cd842aec5b08f22521677dfba52df8b260338672033e22f83a963d2c30cf557a0700422d779137ade2908769cab5a422f388586fd94589633333434a178b8bc05551e88f6f353ea7d435dbe250ff7f2bd34aedbc1212ef8daa277ca031a5555b3f15a6f2be29742f8ee103d437df1a829dc3fa051f612530e6f1ba1502edb134f925c4d4a9495d6877545db354a07172d90c82578c203900c6da59a"}, {0xa0, 0x10a, 0x1, "66e9d382fb637bdd91ccc3834a2779ce5141b3a95b0b40da2a1d4adaac45af55d2079f6318c4786b6db480109422cbc33cec7642f9cd252205c784fe7043c54a8d7f512c3977e08b36c18eea64fe6d94d116a85584b4db1248edce5a347359e976c55c483063bd645e0714f7bd11cdd8d0bef503fd60f939b1931d16d019275b2b974a794d2120c40bc46cda755be9e6c1"}], 0x538}}], 0x1, 0x20004000) (async) sendmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f0000000040)=@caif=@dbg={0x25, 0x6, 0xa}, 0x80, &(0x7f0000000340)=[{&(0x7f00000000c0)="62ed8bbe5a4f7f83ce555c343e88053168fcdff69348488009c84f4f922b5273f837a4332affcb1c9d558b73c5e9c59031a452b0fc8ed02fab8874bbb91598653c8dc4410247def25583281b76b4c71014a41307a55778163430754631ede9367e9f59f08a7a30cd62fa3faf423c696114759b7d612f5586ab78824742a3259c786de1af3192c3304c41714b5b9239da6d96480a5c01ba6b4dab572a0d05b300aeee6b728dd21e09b746b3e19b45ab91179713ab", 0xb4}, {&(0x7f0000000180)="6e8cf926a2c659f7d8cff02c9f9e27f987216b3a1b83ba6629b85ad2227e6af0726efa086d0f429ec6947c8791d9a479c2a282472b7ad59639382a0c786cc764de04c47623c3bad03b85f0b3d207f92d4a440b8ca3d98ed903e31f23266f134743b719315adaefb51038be2761d402dc3ab7fc0aa439f0882f7a9c2e6cf722ec83c566ba40f64ab3b566cf15f351a53f66399d7d3b18cec083bc303f8107dd3e49371b58940cc74a09734e0e4a4be1fc7c3f2153b6ebdd44c7c68561243118a8b5b80126b069384ee7ab241ca81da4845ad9ca9003eb0f7bf16cb59de9fcc8a01faa19bbc1f30fa147", 0xe9}, {&(0x7f0000000280)="5df059822b2a716c9bc8e29e87b7c7aa71c787156aff9e8c1236132127355c0f35eeb0b83f521519e9a5be8f71f91d08257b5034e6900accdea19b9e5f159e359149963b77035341055fed30c585ce963f24357c9af9876a99f83fd04a47402b3762b9bc5dc34f8b346d0f272d700d707f6dc2a56c881d0c141d8491fb69fd69332967b1c8c283045d2093865033fceb8f5adc2311c8636180351004a4987248cb675e55fb83f68141b7", 0xaa}], 0x3, &(0x7f0000000380)=[{0x54, 0x104, 0x10001, "8c8182227048ef99d187600c9e9450971c12f9b2055245a293946205458e70e5e13e503cff6bb88b24fc34460a4374ec9a2ec8808bfed51937eed430e24e8549188375b77e"}, {0xc8, 0x109, 0x6, "1fb5ec72954fb5696fb75b9fb79d89b1191d2611b835ebf75478643e4dce4f9f75359dd1da7065433764b8d45c5b8ccb5b07dedbcc3ab73e81802702552770da760bf55ea89193030188225a7e4f0b12eedfb3f1412411423f34e1ad6806dea4d0e8e25beb59944b274957eaf2528e64e8f61d9cac0fa6674ac6d8c2388fcf84ad49553c20e79d19da1fc2cbf013a0be591acdbb8ec433d39fc5940f8edc56cb493ccea4ebb592cb3c5abffa1945fc870bc196c9e033196bc8c192"}, {0x7c, 0x114, 0x1, "5ead18ca1826d0ee2a87d22331712cb41aa56fce19024f33a9d5696dcad92dd7afad1180faacc4846a374ee42f50a1f226be76550ecd5f899d17d90632e8beb1fe7d6f24f211fb6741f8c0c49304fbbde031b1e5afd8ae56a27bce79e0a28736e94d94ac0d798befb7069e872159b9"}, {0x54, 0x118, 0x1, "6b07bcc7bd7bc4c902585d2b9ae2c349371122d699a0bc99eb152f2cf98ff64631a99aa5a75e6208ab27ac3ed36dbf9f1900cb0644f190da0a4d8b795f71d398101dd5e21326c127"}, {0x7c, 0x109, 0x8, "e4c3e78bcd697dd890dd7304d15000d183dfe963fbb2fab06e984dfea9861b2616917df9dc4d6e4f2900a94b2f865523b47bce07484ef5bed750df9e32c2706560ee64abc798c65ee08d9b2a2e0ebe0d22572e5cbc0ef6c880967c63d068bada0e063c22f83f0d030c03f02d05"}, {0x10c, 0x6, 0xfff, "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"}, {0x40, 0x115, 0xfffffffb, "89c31eafdb9b6cfe8f04b2cb797ba3013e0be935059a50f6a194748c1a567723e4f79a6443bf43adb97a71f26aa14e95e4a6230a"}, {0xe4, 0x3a, 0x0, "c9ff70b4125591283cf7e7dfe951a9c9d312a7f9a9b39964c8af5ffb66100cfac9eacb0a050f2123e80aa4392253a84e712a6a49ed49e1e3ad0d199c6cd842aec5b08f22521677dfba52df8b260338672033e22f83a963d2c30cf557a0700422d779137ade2908769cab5a422f388586fd94589633333434a178b8bc05551e88f6f353ea7d435dbe250ff7f2bd34aedbc1212ef8daa277ca031a5555b3f15a6f2be29742f8ee103d437df1a829dc3fa051f612530e6f1ba1502edb134f925c4d4a9495d6877545db354a07172d90c82578c203900c6da59a"}, {0xa0, 0x10a, 0x1, "66e9d382fb637bdd91ccc3834a2779ce5141b3a95b0b40da2a1d4adaac45af55d2079f6318c4786b6db480109422cbc33cec7642f9cd252205c784fe7043c54a8d7f512c3977e08b36c18eea64fe6d94d116a85584b4db1248edce5a347359e976c55c483063bd645e0714f7bd11cdd8d0bef503fd60f939b1931d16d019275b2b974a794d2120c40bc46cda755be9e6c1"}], 0x538}}], 0x1, 0x20004000) bind$packet(r0, &(0x7f0000000900)={0x11, 0x9, 0x0, 0x1, 0x3, 0x6, @multicast}, 0x14) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f0000000940)='+\x00', 0x2) (async) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f0000000940)='+\x00', 0x2) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f0000000980), &(0x7f00000009c0)=0x8) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000a40)={0x1, 0x7, 0x7, &(0x7f0000000a00)={0x15, "485c4381fe29f80fdb73b734a4b5eb7c063f4ada7ea7fb23e51f23d0f55d38bb5a"}}) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000ac0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000a80)=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x1}}, 0x20) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000b00)={0x0, @in={{0x2, 0x4e24, @multicast1}}, [0x8, 0x1, 0x6, 0x3401, 0x8, 0x1, 0x7, 0x8001, 0x3, 0xfffffffffffffffd, 0x6, 0x1, 0x3, 0x6, 0xee5c]}, &(0x7f0000000c00)=0xfc) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000b00)={0x0, @in={{0x2, 0x4e24, @multicast1}}, [0x8, 0x1, 0x6, 0x3401, 0x8, 0x1, 0x7, 0x8001, 0x3, 0xfffffffffffffffd, 0x6, 0x1, 0x3, 0x6, 0xee5c]}, &(0x7f0000000c00)=0xfc) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000c40)={r1, 0x2}, &(0x7f0000000c80)=0x8) (async) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000c40)={r1, 0x2}, &(0x7f0000000c80)=0x8) sendmsg$sock(r0, &(0x7f00000011c0)={&(0x7f0000000cc0)=@isdn={0x22, 0x8, 0x5, 0x3}, 0x80, &(0x7f0000001140)=[{&(0x7f0000000d40)="fda2fbb70739020b65e242ed4f61b13ac35a5d4d821d89c4", 0x18}, {&(0x7f0000000d80)="4ff483b7f885b84ee2a462b8bc25cb651bd098ec26e67d76fc80e25067cff83cf939e51b818b3dc2aa1ffa70105006cd3e5b7ae83660b33baf2dfe4286b634ea6ba9f2d863c63d276d43b4201ec62600757883e6b8a8e73c25d5b3d98d757719d4c65ffb4933a25862bdef7d7d45db207569d0c8babe5945f26387702405a4ad2a5c9708f0a74c9d5ae593c840ec5122a9e45d2dcedc56a4abed29f9b0ba4266ff4ee22d98d1baa973933f14d6f756a28cb3d7938c7dabd7db452ffce9e22d024df85f44f4e69b4b4d2a03250d54515d5da99d99550aa5edb94ea601835bbea107424e5c397742d317cb991dd5404f27", 0xf0}, {&(0x7f0000000e80)="f4938c568c717c6481326f2346a0f563596f4b91322e0c782087244d54a2e312998711ad147a79efdb05de469070df", 0x2f}, {&(0x7f0000000ec0)="82cf63383eeb327cca111fb304aa944c52d9fc0e62497ca54524b9c217538f7ce31e1306217a72a225269d471f6910717ec6b2077c9c082876ec9ef8f29a488db691ed414c340c351e146ecfb8c2653a77852b1f9f990ae2d2cb7a950781a885021a", 0x62}, {&(0x7f0000000f40)="8c807f00795be2ce118284f7e69777d98d8feb250c74f39e4296e9286ae960966a612e4c9c619c1d59757efa21238a81f5e4a0c891ab23c11148a23cda37d8d624596b4c05726bc420e118cf3df0d3a8c5550373200784163b9b136950a9443003fcc80cc840c0b190f79d1499945f834585329da2e4b46eb468ef1695941c0b4d8235ca4f6726d4562728f65ccfbf1120ff4dc17c2e6e3dc8d8792a3d7d694fc4d3b91bafc74fe2b4b547a1c98453ff8f77a69037f8814d63c292ee4d9004486554e28787110924c98d53d7416c9523ab3ec5bd167592cad6619529cca9566935592ef4dc076e90dfc12e0a2d8d6e23", 0xf0}, {&(0x7f0000001040)="2e5a0da8b5d344f1783a2f4a1a10aa5ae89f09d60fefb708383ecacac5321337b4eae505d4a77549c11f54db2cf9ab56112682ed7785fa3ed16590bf1470f7d7a5657128fc19a3a8205383e07aff72297be80614f389cb07fb81cc9a5f46485f0ff92fcf02cc1188656c98d6667106425496c9ece2430a786a0efb976d2ab4b60b73c88fa3df29c957be0d279e981c7d883f2e978b0240e59aed71d94b07366463cc9c6085184b0dc442a9f9c3372d539f1ed9d70cd71ee31f18f7cc0f51472e77bcb6099e3eed2d8975e14fed1c65b7f5b7eccdb141f74fe87abf", 0xdb}], 0x6, &(0x7f0000001180)=[@mark={{0x10, 0x1, 0x24, 0xfff}}], 0x10}, 0x1) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000001200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000001240)={'pcmmio\x00', [0x3, 0x0, 0x9, 0xc63, 0x6a908303, 0x128, 0x7, 0x7f, 0x8001, 0xff, 0x40, 0xfff, 0x7, 0x10000, 0x8, 0x2, 0x4, 0x7, 0x9, 0x7, 0xe, 0x7, 0x7d4, 0x4, 0x1, 0x9, 0xfffffffc, 0x8, 0xff, 0x8aa, 0xe8, 0x2c]}) (async) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000001240)={'pcmmio\x00', [0x3, 0x0, 0x9, 0xc63, 0x6a908303, 0x128, 0x7, 0x7f, 0x8001, 0xff, 0x40, 0xfff, 0x7, 0x10000, 0x8, 0x2, 0x4, 0x7, 0x9, 0x7, 0xe, 0x7, 0x7d4, 0x4, 0x1, 0x9, 0xfffffffc, 0x8, 0xff, 0x8aa, 0xe8, 0x2c]}) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000001300), &(0x7f0000001340)=0x4) fcntl$addseals(r0, 0x409, 0x8) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000001380)) sendto$inet(r0, &(0x7f00000013c0)="4f0259d96c5b8119310de47d97ca5aeaff61136cf4fd5d94a62f35b3ca82990d91f3de4080f6227cde89b0c0a796e718fe56e63bd42f9c6049e30d83c1645cd1fbab9de5cf5b7515dc0fe45b7891f7e8793c7790ab86eab8f244dd93e1699782fc934fd3e4fddbd07a42bfb9ca9006d16216fe", 0x73, 0x20000000, &(0x7f0000001440)={0x2, 0x4e22, @empty}, 0x10) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000001, 0x71, r2, 0x3551b000) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000001580)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000001540)={0xffffffffffffffff}, 0x13d, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f00000015c0)={0xb, 0x10, 0xfa00, {&(0x7f0000001480), r3, 0x9}}, 0x18) (async) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f00000015c0)={0xb, 0x10, 0xfa00, {&(0x7f0000001480), r3, 0x9}}, 0x18) write$binfmt_misc(r2, &(0x7f0000001600)="84331d2055962f60ca5283c225c8bf482147c35f34c0d44473fdb2f0d8428771f85ec2ffccfb5657e2d2914f622eb0cc7915a8a26a72deac8db9c6603012b8188cce4060fea2a78cb6e72e4775139d45726e898ed359efd3af81c188f0638ab2809c6c64c58aa369e05b8fac7e0aa09718032391d74e4d0cefadc9e40fa5082c88623a42bd8006dc10d54209d79a4b32cab1", 0x92) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000016c0)={0x1, 0x4, 0x0, 0x400, 0x4, 0xa48}) (async) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000016c0)={0x1, 0x4, 0x0, 0x400, 0x4, 0xa48}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000001740), r0) (async) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001740), r0) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000001880)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001840)={&(0x7f0000001780)={0x90, r5, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5e}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netpci0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x15}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x1}, 0x40000) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000001880)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001840)={&(0x7f0000001780)={0x90, r5, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5e}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netpci0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x15}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x1}, 0x40000) ioctl$USBDEVFS_DISCSIGNAL(r2, 0x8008550e, &(0x7f0000001900)={0x1, &(0x7f00000018c0)="6ec4cb5bf1bfebfe9df4ada953c78a18cfa5fc3fbdc34f26ff4e0540c3f37e279c"}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000001b00)={&(0x7f0000001940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001980)=[{}, {}, {}], &(0x7f0000001a80)=[0x0, 0x0], &(0x7f0000001ac0)=[0x0, 0x0, 0x0], 0x3, 0x2, 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001b80)={r6}) sendmsg$inet(r0, &(0x7f0000001f40)={&(0x7f0000001bc0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001e80)=[{&(0x7f0000001c00)="d086ebaec41ffd4d6276c5fb2839b9a076da202d98d04fe99b563ad11dd0c39e5d083bdb8f91c5236a7dc0ffc091447b0ec193eab560e977bd88c55c40a9eadb26e6a4befd255eb80bccf1efa2ea641455fbf18ea8a33e4c0ce72c9c8cc68f51dca23fe1d1dc4ad0ab04f53000849e136a39dc4a550f5ec428ca22e085274bfd76b24da3687e4c2a35a1511b", 0x8c}, {&(0x7f0000001cc0)="6a3bc744f698", 0x6}, {&(0x7f0000001d00)="9a0340551abd1f70b878b29d4f13c5a637a6886c5d70cf7c68b3cd8f653e659b0bde84f27049ac8e58e1e858b9ced38a43fc2a47e20ca31c837275ee8ad5b74de4998b76bf1b2f2b8830d02f40f8fd136c6469390d51fecd7439c5d9f1ce7f107462b5de2b7f3e7c0c0ad030159ca8fc107328608a8ca0fd97dfba0974e35f9c3c8d9aae0f88a600c16c088b166563a2c2419cff46929d2a623c9ef8256d18", 0x9f}, {&(0x7f0000001dc0)="c24d314fb1b5c14c8194c43c1e28c8c52c6e6bd3bc85c9a656f765edf0474ae21561c34393b03634ee7ad0a6dc8796a2ed812c6bb4e8e86163be7d316fb7269a771622aadd5fb92b373d9b58b963868a64cd649bb924a2a8edf38ab22d558d969787b212b6aae2559447355839363def8a8569d3f586810659f9603c334dd7a24b7dd33248842595e78658fa06646b68a08575ae783d9338ea33e40fbf00deac1efb0bc4d67302b70b4468d318d8bba865e6677f062ec97ddd7a82", 0xbb}], 0x4, &(0x7f0000001ec0)=[@ip_retopts={{0x44, 0x0, 0x7, {[@timestamp={0x44, 0x8, 0xad, 0x0, 0x4, [0xfff]}, @generic={0x83, 0x2}, @timestamp={0x44, 0x18, 0xd1, 0x0, 0xa, [0x40000000, 0x8, 0x9c2c, 0x9, 0x4]}, @cipso={0x86, 0x10, 0x1, [{0x3, 0xa, "10de3e9a7de40a8b"}]}, @rr={0x7, 0x3, 0xd5}, @noop]}}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x101}}], 0x54}, 0x0) fcntl$getown(r0, 0x9) (async) fcntl$getown(r0, 0x9) 5m57.612189492s ago: executing program 1 (id=1235): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) dup(r0) pread64(0xffffffffffffffff, &(0x7f0000000040)=""/123, 0x7b, 0x6) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) setgroups(0x41b7, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0]) 5m55.843583926s ago: executing program 1 (id=1242): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) getpid() syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) socket$inet(0x2, 0x80001, 0x84) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r2, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x4, 0xff}, {0x8}, @ext={0x0, 0x0}}, {0x0, 0x0, 0xfe, 0x0, @time={0x0, 0x2}, {}, {0x2, 0x2}, @connect={{0x2, 0x3}, {0x1}}}, {0x4, 0x0, 0x0, 0x0, @time={0x2, 0x6}, {0x0, 0x8}, {}, @control={0x0, 0x0, 0x5}}, {0x43, 0x4, 0x1, 0x0, @time={0x200, 0x2}, {}, {}, @connect={{}, {0x0, 0x5}}}], 0x70) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000001c0)={'wg1\x00', 0x4000}) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r3, &(0x7f0000000000)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x2) syz_open_dev$sndmidi(&(0x7f0000000080), 0xc, 0x109042) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) add_key(&(0x7f0000000040)='ceph\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) read$FUSE(r6, &(0x7f0000009780)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000840)=ANY=[@ANYBLOB="edffffff00000000", @ANYRES64=0x3], 0x10) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x334, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x2a0, 0x206, 0x240, 0x2a0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'team_slave_1\x00', 'ip6gre0\x00', {}, {}, 0x6c, 0x0, 0x4}, 0x1ea, 0x70, 0xb8, 0x0, {0x390, 0x8f00}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0xf6, 0x86d, 0x7, 'syz0\x00', {0xdf}}}}, {{@ip={@multicast1, @remote, 0xffffffff, 0x0, 'team0\x00', 'netdevsim0\x00', {}, {}, 0x67, 0x2, 0x10}, 0x0, 0xc0, 0x1e8, 0x0, {}, [@common=@unspec=@connmark={{0x2c}, {0x7a1f, 0x8, 0x1}}, @inet=@rpfilter={{0x24}, {0x8}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xfffffffa, 'u:r:untrusted_app:s0:c512,c768\x00'}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x390) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x4c0d9}, 0x20000008) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)=0x32) 5m55.222962966s ago: executing program 1 (id=1246): add_key(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0x0) r0 = io_uring_setup(0x2255, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xc, 0x50, r0, 0x80000) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) (async) msgrcv(0x0, 0x0, 0x0, 0x0, 0xa1e3a9fe3eb9c551) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x48) (async) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x23) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x1fd, 0x0, 0xdddd1000, 0x1000, &(0x7f0000394000/0x1000)=nil}) r3 = syz_open_dev$audion(&(0x7f0000000100), 0x9, 0x612000) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r3, 0x8008ae9d, &(0x7f0000000140)) userfaultfd(0x80001) socket$netlink(0x10, 0x3, 0x1) (async) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000001340)) (async) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000180)=0x6f) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r5, &(0x7f00000002c0)=""/4096, 0x1000) (async) write$dsp(r4, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) (async) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x80001}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x7, 0xf, 0x80000006}, 0x0, 0x0) 5m55.10345143s ago: executing program 33 (id=1246): add_key(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0x0) r0 = io_uring_setup(0x2255, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xc, 0x50, r0, 0x80000) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) (async) msgrcv(0x0, 0x0, 0x0, 0x0, 0xa1e3a9fe3eb9c551) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x48) (async) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x23) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x1fd, 0x0, 0xdddd1000, 0x1000, &(0x7f0000394000/0x1000)=nil}) r3 = syz_open_dev$audion(&(0x7f0000000100), 0x9, 0x612000) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r3, 0x8008ae9d, &(0x7f0000000140)) userfaultfd(0x80001) socket$netlink(0x10, 0x3, 0x1) (async) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000001340)) (async) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000180)=0x6f) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r5, &(0x7f00000002c0)=""/4096, 0x1000) (async) write$dsp(r4, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) (async) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x80001}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x7, 0xf, 0x80000006}, 0x0, 0x0) 7.725942919s ago: executing program 5 (id=2987): r0 = syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x0) read$usbmon(r0, 0x0, 0x0) socket$inet(0x2, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000600)) 6.79762512s ago: executing program 5 (id=2992): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x4, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_u}]}}) write$P9_RVERSION(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="150000006bffff"], 0x15) r5 = socket(0x2d, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, 0x0, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x802c550a, &(0x7f0000000000)=ANY=[]) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, 0x0) 6.793995289s ago: executing program 4 (id=2993): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) socket$inet(0x2, 0x80001, 0x84) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r2, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x4, 0xff}, {0x8}, @ext={0x0, 0x0}}, {0x0, 0x0, 0xfe, 0x0, @time={0x0, 0x2}, {}, {0x2, 0x2}, @connect={{0x2, 0x3}, {0x1}}}, {0x4, 0x0, 0x0, 0x0, @time={0x2, 0x6}, {0x0, 0x8}, {}, @control={0x0, 0x0, 0x5}}, {0x43, 0x4, 0x1, 0x0, @time={0x200, 0x2}, {}, {}, @connect={{}, {0x0, 0x5}}}], 0x70) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000001c0)={'wg1\x00', 0x4000}) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r3, &(0x7f0000000000)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x2) syz_open_dev$sndmidi(&(0x7f0000000080), 0xc, 0x109042) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) add_key(&(0x7f0000000040)='ceph\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) read$FUSE(r6, &(0x7f0000009780)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000840)=ANY=[@ANYBLOB="edffffff00000000", @ANYRES64=0x3], 0x10) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x334, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x2a0, 0x206, 0x240, 0x2a0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'team_slave_1\x00', 'ip6gre0\x00', {}, {}, 0x6c, 0x0, 0x4}, 0x1ea, 0x70, 0xb8, 0x0, {0x390, 0x8f00}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0xf6, 0x86d, 0x7, 'syz0\x00', {0xdf}}}}, {{@ip={@multicast1, @remote, 0xffffffff, 0x0, 'team0\x00', 'netdevsim0\x00', {}, {}, 0x67, 0x2, 0x10}, 0x0, 0xc0, 0x1e8, 0x0, {}, [@common=@unspec=@connmark={{0x2c}, {0x7a1f, 0x8, 0x1}}, @inet=@rpfilter={{0x24}, {0x8}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xfffffffa, 'u:r:untrusted_app:s0:c512,c768\x00'}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x390) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000002e00010026bdf000fcdbdf25040000000c000c000100000000000000981672cfe0b6a50dca0d6f6a7effc9212afeb9b12cb304c0ec0f3a1d40bb956341f8fcb7676d7e5068a0b6e84b8d9a422f258fde9caa2328e6c2558255a56ece9b7c0dffab8c06de5ee0e7b9eeb069ea1de040bca2317a1a38286059f97e1ed5a3d2e38c010198e9a25049caf1db58d50f3f3dc47735e557d3457d1d33379e3b88ef4e018e6bbdff0a07e7cadc54f9df82f248cd78b17fc7110bca169b93e38151f7096e3c46deba3bd3d529f218b7b4f24f92a54fc51a04e5963dd5fd3941c19cc052d7edaeebd8c0262ca23631b35ddb1c532972d4ba9e67bb981c1317aef424bfe146605eb4cd15ef6f6c78c93f7375d7005c8af342204c34bfb5049d88e2e27e0e69e37aad20faf2a14d201fe92c4249be580784"], 0x20}, 0x1, 0x0, 0x0, 0x4c0d9}, 0x20000008) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)=0x32) 6.70016918s ago: executing program 0 (id=2994): gettid() openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="54000000020601040000000000000000000000000c00078008000640000000010500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e657400000000bffb2648c216955eadf2594f9a8b282112759761b8fbd6cd305a1b3bfee9337edf84371ab0475b8ec7c4416bd2d503c975aaed22ca96f54d7d7cc8c089ab39"], 0x54}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000500), 0x42, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = dup(r2) io_setup(0x19, &(0x7f00000009c0)=0x0) io_submit(r4, 0x4048, &(0x7f0000000500)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0, 0x0, 0x5, 0x0, 0x2}]) write$UHID_INPUT(r3, &(0x7f0000000880)={0x8, {"42d1d92b458e9ea9121673103f96e2a6f652a6bdda39b5d7420184a77546c6fff4a436cebd267e2cba6384cfd34afd4d775ba7dae05a62136afcfc54f5d02449793625a11ecd264a66c65811ec065bf3384ba3a94511f88032621b01045583e45e0f9b8befcefeee83c1c07af866dc99b3a7fe5fdee5dc46a3e9cb1edaeba78d42d3be0bca7db3ac5afa44e7331dbdb3ac881558a185f17f98bf0eb96c68c011a16cae07edc32699fe15c4c964be095ef651bfa7c0d94f13fa1c3170e9fb1b6da3eced5ba82a5bf3198a410a82d22a2c9d70affcfa48c6dec8448cee3e26219817c2faa2f4bc424789791e43a266ee715ab789495c7570726e2250d43fb1b1d113097c8fd4c1cb3668b8c892b1adefbe6eeee0516dc7a83e698bd9cc63df91ecf51c3c34cef6dc62c1eabbafdb9fb960522f2241e383b943609aea34880728553c1caf4d435f517ce3364bc62a340cb999324a1b2af232a945cab0bacc01cc3f5aae8e09c0592c78cc75bfbe5419f1b6dcc226456dc3473036665c91f00267de753b542060780257d2e8d72fbccdbad113381ba1cf207c86d959843aa68dbb7a753e6800ebfc3328034691a8a30296741cd1a895cf54ce89a556c2070a7cbb8e682cd8a79a57f484f19f10f34bd307d631a9d215bfabebf4a7aeda75c6d217568c5b281b38470982ec48ac6f636909d15758d95c1461540711b09398a4693fa62c3c93822048ae9675d9d6881191c8f9ec846c188f473cdcfa5273bbbcad0d5d7d36763bc3861076722bd48c3345498cc48048222f5574ec7378bc7efe5252795065bbcdb7ce499e0c0bebee079be6f4c7c5c15cd7e56b6413dd07ad8327044f8b725e8fa9c99c45c0b9daef51afa7c291006b684375316e7a501d35041b18e55b1391e36becf00194ba3630dcee4fde391d15347bc28c6c53cf3cccffe116330739d93a6ff56be34c316a71410281f3c619e7ad12e37c668b1f4795fd27e6f483b85c9763ce42524a66d1ba6ee7156e36678cb78c779d976dbdbdebdff36049aaf0b59c93725746eeeb960d938485c4dfa2b4caa029c6a142fb0119d7247baa3d065fc61f3afb531dd579f857adc835f7ebe3545c6f5ca8b3a749c0832cfe6be5dae01543ea3a56663b5cf58de7daaace2c3271848a65d9bbff1a13b354dd614fbf223dde719dfe6591bb5fe4edc3ac31d9ae18432740b7c05de02b9fb86cf9fe4454961da31cd41ddb6fb95a72e5723d6cc3cb57520806d09a853ecfe29c9cdfce35395f1fd7f2593600f9d5bd7b6b157d5575672430509c7eeebe3805438cfae86a5993cd3e6fa39f9567000c9baf665254042ca19fb1adfdec37720d41dca15523a8073e5c49db4add9caeefdec2b7aafdca5baafe78b9a7f8c2bdd5c58baa8a87ec2f8fcf708045ec7ab899c47481c59184bd10f8319f73263d9b4efefb0247a39fc6d451cae8d3a3a51b6e98977be59b2e1beec3a1a9e0dd8475123c3162d0927eab50f44e48c39a95938a033015b8ef9fc02fdee10540b123c7a53d6706f7476ab88d0d5121676e7d7cbc2635ba281b369f3378afaef92a60c92393efe9c45ccf60f1bdb69097e5f1bc67b1597e6b5de3dd5a7f162690972c6768cf63a9b4a7875268c97b31a427b983196f601d28f1648fd40b4b6a16b4ff4b2737cbd0d14b0c43b0c33d5c876df6591efa0b51bc44413fff32524dab4d198f045b2622c4e2fdcec8e6606b88ed3de71ad0d3dd0dbd661e39acd69af980e1b7c7d539d6498d68b64bac9233efd7d4b00db3fea8c0bf02aebcfb2240bc11ec5bceccccad5b00007a29f345620ae4673f1d41c514e9f5b583433adde93069a1cd01621b50d87dfffd5d410d077b9b4b6b8a807298ee871ff649e8620b06af7988f3d4ae20cb5482121875cdcd9b4e44a74c691c09bac1e7947f2f4f4d228146a1f867633c19ee3b709a86968428f2810d92598bdbcd18b93fbc9a705dda58691ebad397335e80a0cd17b1e6518386251341129e8fdb252b12b741847a4bb8da0e617bbe203f65cfd52cd271dc267598ec0ed469a57fe98e338468839a3cb20caec617f94fa65262e55bd34f2ebd64a88b75779993e6903a50d6ceb7fbf1c6bd1f83b7afa213471d86f52b060c9af2559f3332eab72bbef58de69c481122ad0fdaf499aee6121a52d0ed2b9fc2d62412f8f77e331f025f2ca21adba1434e41577580fae31a3892fdf3e08d1627c6cd1791abc41ac64da3d8aafbd6fbb5ff3d582030162bfc20dbb7aec5ba68a7f88167124d675674b15012930b491540f3d8ea93a6486b64ac5a88bce5491822f0c79cb43a90e349d8480929343b307662ac67934ac3bc5c6e4bc409340ae234f86febf422eae94f22fe41cfacf9b62703a64dca51a81995d646ddb91f0962ebe9c93597349635e73b7604024edb816a07863fbc80febd2d024e497ff03bf91b7f2e6e74601f9564ac8a30bc6571f9e0c6e9cb105bd8204d3a6de3a21952005c22aa4ad68fe4d4d79377d7f19241961cc1993d7cd7fe02bb023702a65024f8cf7e18072ed500ea6a2b545951023f794a0fefb317531ea1f702002ef5897b4629308c28724554d8f0d89fb0369fb6270fa7a885df66e49b6353b65924578e0aea8dd4ee65d32ebeebbc238973aae8fa25b9e4dc36df1a15b174b2ca3c8650ac1f255a1707d46b5d555a61ddccf6c232488c92949e1756e0bbc7d845676b4143ab12ad17f214bc5caae48e410df19616e9e371f8dfc8d00bb4a4a510594479c75276474d9a346db1d357bedb5de96e56846d306a2dfe98d24fd676e79f89e560a95d8894d1160bda8b46bb8e061a6199d373e94c2947f852f4e54c58476d4bc37c66ecfd0d23f967fc73667f9ae39dcc4b14fcb9ab524e04143d624d04c3031dbd9259864c5040a481a5906b870ed4be35818bc6cd45ce4f91bd8e39b424526e36afb87b298eedb187883d5005c4407637f0edacac29f5f6eb38f525a662a6c3c201fd48b811519bc621494440c09f9f2c989dafe2fe8215d1050ef3769f49aad149cbddd4b5133a1711a055e5172894fa617dcf9801b78695e75754bd590deaf816a4233f63311c2e5e9f82413e66f743e96ace48083fb97c869c3d07c8593e0e6a4b8446471e44bc04b6381ba359baba2a60daf4e29fd25d2ddf7ac1a60191474c09e4a4bde1e1ab97dfa01bdbb95cc356c51cde94d26848d60ac4c310fd9691425edd6f14304775f2271b04412473c623b4b74eb53c8e3e4251209ea44689b6144993ee4287353f8a41659cdf456e2544d116064b0e6ea6d0ef105cc207ef3e63f0ff27ecdb32fc1bed4a9f261e3234207bc8d601ae3aebf56bdf6957c49d98e23ac43b90fecd89630fe7b8e7f9c2845c3f791fb7140d9dfe24ef9564b96f1e449fcb84e2e9ec41255f60f5b61994bac1fde331f2560a3d183f96de605e51c48789ef15edd9a85f34978df474811c92a19b838a24fe956fe4b8c4dacf48518418d7d0a276c72a759f0f0fe7efc27ff8f2478164615cd0b86fcff3bf6c4f78e0154267af5f40f52cbf0bac7184d84a1ddae1a8fcfa9d9da983dd470b5d1f656e716eb7309bf07d4cd71818b55927e679033b3ea63f1fe5ec1b0280607e0976e90d714eebbc6710e5fc1dae090dfbcbf6e67f77928615d60bb672e1ef8140eeccaed9a22c122699b4615ff52abd5bda6327b019471f3ecf18497335b8eae99b99211e88ecd068aaad527506c307240fb1949ce6168995120aecb013abbc05b654dee28bc95f5b96b22e69abfd6923eef1a90b6d1152327aaacf5f138547255043723c26711ea3dd937a68445a1fd69642b23336190ae3c5e0555a3def9a38431e8fe95395dbc0c5b7b929f9847a6e74ea21c7bacf248c9830839286af319a94c8c4d01b37779b74e159c4b40ae7004ad95de5db6967e6d5dc8313c9067e6ed161c1fd210c2d17cbfc49061e867154624ed93fb6c06f546d03e8141fe00f983551c4888285c584dce9a3541d24ba38c3a149e865318a8ec53ec577de540b9e421700cb24347368c06eeb568ebca9dd044591cab837fe7a6e70bf2622062753ed1dc2051f2d7867b4c23f657777dc5eafbf4ed86d3e295ea7edfe7213aa0990da23fb288a289dbfd59d4c524cf3f02a2afb25f5e9d7d8cd0166a13ec56d05596152e1a83259ec852f96971afe3aa47a5971bf3b12281f588fd3fe59d29b1ebc6e797d766ec717d76d28f03c1225e85cbd9f5d09080aa9e85dc3dba8be5e3de98cb98aec4c9db811cebe8fe4883dc9c55455c6a7010e8d82d98c20efa3146939c5d1634dfac84310450a7410073e879b0172fc4587450ac286b0b50de0edcec3d97a25a9e12d879ac90d12f8fb0fa38e90289946ede3e1953d4bb896138a733218d9e3b198c5717fba844a72e9622c56bb1df9a9c71fd21111434b3362ebdb0e4b75b348fb53287bc64689d8dc7c2d0ecdf15900ab5f4d5d54cfc4c0c6f6805247bd309dc329a63944a40bac7b21a6d587c1a372ba113d74cb8b102d41cd34dff7d8d4c721fbfd718263c6976983c9dfbc8903fbf05198bc9d7909ccd2e9233f147b8f4827e390ca06e148051ddac02d6e0315638cf85c2ae259d903e7ce2a9fb19c81e9d368663f9b8c2d86a627812cdb36c4f7fd9fd033bb9d1ea26acf621909c791ed181fb16b1553f5654ac2eaff7c77049a6605ab08f19b64b200a276cbb9915b50da6305d07a40d9af915a5c43adfa42e07806b91fca4da099a72ca9375755f8b57d657f567696106ca1fb8abe0c76bebe1a00ac475c3d98137968d1fdb77d1b1ab5f4369e0e5a496ab9d4403e5c25b469096ba7957faf5aa8b8eb1562609279db8570e32947f723e2e4802e43f391a696ce4db76b780a1bea0087bfe9ed878cc7a72e79fde3b6e29eeaebab382488a38cfe20766ce14289e89d91d7b7fd7f8e222968b94c7edcde8144ae48d3ff6253fc86514137b804535cb0276b9a51692ba08c2ab831c82eac25f7d8f9549ad6916bc0ab3667a63dcbf3f4ab81e37fbcdef650ea24ffc952b71cdd0e4abc8ac803a4153877403e14adc800687f5978f9ed73617edd1931e1d777d7e8fe346a169a645b844c639355e8970ecf43e9fc37e78f7d311787de593128d671f2fe8d1efcf9c30be758e39686b3810a354f8f70c3b8875d10f251d14e9f510103d370b4c2a35fc0b7bd4fc4672957889719b982ce9696900570a292a755b85c7aa68bf9d867be67052075ff8e376c58b3471dd7423f5c40cd72f0c27d054d2ddd7b06e63153e67a408b412ee94489c6f9f7add7d19fdf269c3db26a1a6565cb9fa4a8567f398276c50d1c439da577c4018f912fff16262d8b86dbc3b1cf7d56fcf25cf4dce6b1c99f83bcd85beef32bb7f12d6f9eb366be1cb8ca6dd43476be8b3e6c82b8ce48e9a7c279d31f8906014e5e371a102a87a6037d228719caa2c096ed5d8d5d7a6cbda9bf720ae5bf460188afd0ec006eccc1c3e8efc1dc8fbf8ffc1e1fc02ee42e4d65d225fcfc9cf8388afbc51f0b15187477fdabd8fbd1766c09b1c6940a2abe3366018db6834e41c8ccbd65cb049c06659031fd2973f983b4cb4414fc62479c50b0d0bd422b4f826194d2fb83ae56cc3dbd7bb7856c2f33f716bfbedb965c3f08882ab088d6f66d1f2a94f82100e6481c184ee58a98a318ca04561c6140da0a87bc1bec0c13d3517a2dff36223205aa65a00d053f268125a608f52138c6ce64de980391f7adb1563c3fe97ae8bc84142ac7823a9e7645d99f64db79d1fb9dd4dd2afefa", 0x1000}}, 0x1006) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0cc5605, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) getsockopt$ax25_int(r3, 0x101, 0x9, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000140)=r5) syz_io_uring_setup(0x50ce, &(0x7f0000000000)={0x0, 0x58a3, 0x80, 0x3, 0x37a, 0x0, r3}, &(0x7f0000000100), &(0x7f0000ff4000)) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0xf}, {0xe, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x2, 0x0, 0xa, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) 5.678638721s ago: executing program 4 (id=2995): r0 = socket$inet6(0xa, 0x80000, 0x88c7) read(r0, &(0x7f0000000000)=""/210, 0xd2) r1 = accept4$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast2}}, &(0x7f0000000140)=0x1c, 0x0) getpeername$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, &(0x7f00000001c0)=0x1c) r2 = openat$rtc(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$RTC_EPOCH_READ(r2, 0x8004700d, &(0x7f0000000240)) ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0x292) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='schedstat\x00') ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f00000002c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000300)) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r4, &(0x7f0000000340)={0xa, 0x4e23, 0x8001, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) r5 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000380), 0x40000, 0x0) write$P9_RSYMLINK(r5, &(0x7f00000003c0)={0x14, 0x11, 0x2, {0x80, 0x1}}, 0x14) openat$sequencer(0xffffff9c, &(0x7f0000000400), 0x800, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r6) openat$kvm(0xffffff9c, &(0x7f0000000480), 0x841, 0x0) ioctl$HIDIOCGRAWNAME(r3, 0x80404804, &(0x7f00000004c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000500)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f00000005c0)={'syztnl2\x00', &(0x7f0000000540)={'syztnl0\x00', r7, 0x2f, 0x6, 0x9, 0x5, 0x40, @dev={0xfe, 0x80, '\x00', 0xf}, @local, 0x7801, 0x1, 0x5, 0x4}}) r8 = signalfd(r0, &(0x7f0000000600)={[0x2, 0x3ff]}, 0x8) ioctl$EVIOCGNAME(r8, 0x80404506, &(0x7f0000000640)=""/142) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r9, 0x11a, 0x1, &(0x7f0000000700)=@gcm_256={{0x304}, "09c9617bb1af7470", "514b8c2c223362dee433cac32ecfa4203f4941ea0336286f820a10e6ab0a2399", "fcf7b38c", "61c8af45774a8e09"}, 0x38) openat$autofs(0xffffff9c, &(0x7f0000000740), 0x2100, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r8, 0x84, 0x3, &(0x7f0000000780), &(0x7f00000007c0)=0x4) sendmsg$IPSET_CMD_SWAP(r5, &(0x7f00000008c0)={&(0x7f0000000800), 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x20, 0x6, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc0}, 0x1) connect$unix(r3, &(0x7f0000000900)=@abs={0x1, 0x0, 0x4e23}, 0x6e) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000980)=0x4214, 0x4) 5.678261579s ago: executing program 5 (id=2996): signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x6ba]}, 0x8) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0xa, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000290000fb050000003c"], 0x18}, 0xc044) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.509670153s ago: executing program 4 (id=2997): signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x6ba]}, 0x8) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0xa, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc01000000"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000290000fb050000003c"], 0x18}, 0xc044) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.304166082s ago: executing program 0 (id=2998): gettid() openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="54000000020601040000000000000000000000000c00078008000640000000010500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e657400000000bffb2648c216955eadf2594f9a8b282112759761b8fbd6cd305a1b3bfee9337edf84371ab0475b8ec7c4416bd2d503c975aaed22ca96f54d7d7cc8c089ab39"], 0x54}}, 0x0) prlimit64(0x0, 0xa, &(0x7f0000000380)={0x4, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000500), 0x42, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = dup(r2) io_setup(0x19, &(0x7f00000009c0)=0x0) io_submit(r4, 0x4048, &(0x7f0000000500)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0, 0x0, 0x5, 0x0, 0x2}]) write$UHID_INPUT(r3, &(0x7f0000000880)={0x8, {"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", 0x1000}}, 0x1006) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0cc5605, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) getsockopt$ax25_int(r3, 0x101, 0x9, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000140)=r5) syz_io_uring_setup(0x50ce, &(0x7f0000000000)={0x0, 0x58a3, 0x80, 0x3, 0x37a, 0x0, r3}, &(0x7f0000000100), &(0x7f0000ff4000)) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x2, 0x0, 0xa, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) 5.16015372s ago: executing program 3 (id=3000): r0 = syz_open_dev$swradio(0x0, 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000a40)={0x0, 0x5, 0x3, 0x40}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) capget(0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x2002c810) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x707cb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f0000000a00)=[{{&(0x7f00000000c0)=@caif=@rfm, 0x80, &(0x7f0000000980)=[{&(0x7f0000000040)=""/14, 0xe}, {&(0x7f0000000380)=""/189, 0xbd}, {&(0x7f0000000440)=""/201, 0xc9}, {&(0x7f0000000540)=""/215, 0xd7}, {&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000000640)=""/204, 0xcc}, {&(0x7f0000000740)=""/228, 0xe4}, {&(0x7f0000000900)=""/75, 0x4b}, {&(0x7f0000001a80)=""/4096, 0x1000}], 0x9, &(0x7f0000002a80)=""/192, 0xc0}, 0xdf}], 0x1, 0x12023, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r6, 0x6, 0x3, 0x0, 0xfffffffffffffffe) r7 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r7, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) 4.179846593s ago: executing program 0 (id=3001): r0 = syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x7ffffffe, 0x0, 0x0) read$usbmon(r0, 0x0, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='pimreg0\x00', 0x7) getsockopt$MRT(r2, 0x0, 0xcf, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0x9) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000280)=0x6) sched_setaffinity(r6, 0x0, 0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x3, &(0x7f00000001c0), 0x4) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffeffffffffff", 0x45}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010) socket$inet6_sctp(0xa, 0x1, 0x84) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) 3.972206397s ago: executing program 4 (id=3002): signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x6ba]}, 0x8) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0xa, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000290000fb050000003c"], 0x18}, 0xc044) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.91182316s ago: executing program 5 (id=3003): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000100)={0x24, 0xa, 0x2, "3258e54601cccf040000000000000000000000130200ffffff00000000b28d00", 0x3631564e}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x40}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xa43d, 0x80, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x813dd71bcd858e8e, 0x2004, @fd, 0x80000001, &(0x7f0000000040)=""/8, 0x8, 0x11, 0x1}) io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) sched_setscheduler(r0, 0x0, &(0x7f0000000380)=0x6) write$binfmt_script(r6, &(0x7f0000000100)={'#! ', './file0', [{0x20, 'blkio.\x8fL\xb8\xcf\xfb\x8f\x1b\xb2\xf0p\x8dbfq.io_ser\x01\xbd\xe4\x8a\xfd\xa6\x8a\x18es'}], 0xa, "53823ffab1b1036ca7601514b5fb928f0e9f6f29478c83390048462e8b37e9dbd9f9acc6463707b054d21bc1789083ea179bb57f01ddd4ed600636eea1518f9dae7500"}, 0x74) ioctl$PPPIOCSACTIVE(r6, 0x40087446, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x1, 0x0, 0xb, 0x942}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=[@cred={{0x18, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}], 0x18, 0x40050}}], 0x1, 0x4) ioctl$CDROMRESET(r6, 0x5312) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) write(r8, 0x0, 0x0) mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000200)='ext2\x00', 0x21000d, 0x0) 3.719912637s ago: executing program 4 (id=3004): ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) r0 = syz_open_dev$dri(&(0x7f0000000040), 0x20000000, 0x40800) sendfile64(r0, r0, &(0x7f0000000100)=0x401, 0x80) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r5, 0x8946, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x8000) io_uring_enter(0xffffffffffffffff, 0x40f5, 0x1f18, 0xa5, 0x0, 0x0) r6 = fsmount(r1, 0x1, 0x4) r7 = openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000180)={[{0x2b, 'cpuset'}]}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa8}, [@ldst={0x5, 0x3, 0x0, 0x0, 0xa}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) 3.08033564s ago: executing program 3 (id=3005): ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000100)={0x1, @pix_mp={0x0, 0x0, 0x3136564e, 0x4, 0x0, [{}, {}, {0x6, 0x9}, {}, {0x0, 0x1000}]}}) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[]) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, 0x0) 3.080184099s ago: executing program 3 (id=3006): add_key(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = io_uring_setup(0x2255, &(0x7f0000000440)={0x0, 0x6aee, 0x200, 0x1, 0x37}) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0xa1e3a9fe3eb9c551) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0xfffffffd}, 0x50) 2.501732694s ago: executing program 3 (id=3007): gettid() openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="54000000020601040000000000000000000000000c00078008000640000000010500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e657400000000bffb2648c216955eadf2594f9a8b282112759761b8fbd6cd305a1b3bfee9337edf84371ab0475b8ec7c4416bd2d503c975aaed22ca96f54d7d7cc8c089ab39"], 0x54}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000500), 0x42, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = dup(r2) io_setup(0x19, &(0x7f00000009c0)=0x0) io_submit(r4, 0x4048, &(0x7f0000000500)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0, 0x0, 0x5, 0x0, 0x2}]) write$UHID_INPUT(r3, &(0x7f0000000880)={0x8, {"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", 0x1000}}, 0x1006) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0cc5605, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) getsockopt$ax25_int(r3, 0x101, 0x9, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000140)=r5) syz_io_uring_setup(0x50ce, &(0x7f0000000000)={0x0, 0x58a3, 0x80, 0x3, 0x37a, 0x0, r3}, &(0x7f0000000100), &(0x7f0000ff4000)) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0xf}, {0xe, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x2, 0x0, 0xa, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) 2.05979079s ago: executing program 0 (id=3008): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x400000000000004) clock_nanosleep(0x7, 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40840}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(r4, &(0x7f0000000400), &(0x7f0000000440)=@v1={0x1000000, [{0x7}]}, 0xc, 0x3) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f00000007c0)={0x85c, r2, 0x8, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x1}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x5}, @NL80211_ATTR_PEER_MEASUREMENTS={0x824, 0x111, 0x0, 0x1, {0x820, 0x5, 0x0, 0x1, [{0x3a8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x40}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x368, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xd8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x69}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6dfc}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x128, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xea}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x40}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x200}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xfc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x100}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x50, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x54f}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}]}, {0xcc, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x19b}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x7}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x102}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x157c}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x22}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x44}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14c8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}]}, {0x3a8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf7c3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x1e4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x94, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xf0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x10, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x49}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x74, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xcc2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xc8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xb8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x31}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x101}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe0}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x85c}, 0x1, 0x0, 0x0, 0x4010}, 0x20000001) socket$nl_netfilter(0x10, 0x3, 0xc) 1.825410777s ago: executing program 0 (id=3009): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x6f, 0x48014) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x100000001, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7fee, 0x0, 0x9, 0x0, 0xfffffffffffffffa, 0xfa0f, 0xb}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8, 0x17, 0x0}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x54}}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x102001, 0x0) r4 = ioctl$TIOCGPTPEER(r3, 0x5441, 0xb3d) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0x1b) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x2}, 0x10}, 0x94) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x4e24, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xd) ioctl$TCFLSH(r6, 0x5411, 0xffefff1f00000000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r7 = fsopen(&(0x7f00000018c0)='binfmt_misc\x00', 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x6, 0x0, 0x0, 0x0) close(r5) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r9, 0x84, 0x2, &(0x7f0000000000)={0x1, 0x40, 0xee6a, 0x6}, 0x8) connect$unix(r5, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) 1.200953875s ago: executing program 3 (id=3010): signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x6ba]}, 0x8) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0xa, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc01000000"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000290000fb050000003c"], 0x18}, 0xc044) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 767.947965ms ago: executing program 0 (id=3011): r0 = syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x0) read$usbmon(r0, 0x0, 0x0) socket$inet(0x2, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000600)) 237.918514ms ago: executing program 5 (id=3012): signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x6ba]}, 0x8) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0xa, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000290000fb050000003c"], 0x18}, 0xc044) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 69.721606ms ago: executing program 3 (id=3013): r0 = syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x0) read$usbmon(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0f0000001043105f85519e218cdcac547da0f3c30007000000010005000000ff02000000cb0800000000000000fdffffff000001000000000000000000000002", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a0002007000000014000e00fe8000000000000000000000000000bb"], 0x100}}, 0x0) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000600)) syz_open_dev$usbfs(&(0x7f0000000000), 0x205, 0x44680) 68.515212ms ago: executing program 5 (id=3014): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x9, 0xfd}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r1, 0x0, 0x5}, 0x18) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) openat$uinput(0xffffff9c, &(0x7f0000000180), 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000003c0), 0x80002, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000380)={0xc}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc22, &(0x7f0000000180)=0x1400200bce) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') setpgid(r3, r3) setpgid(0x0, r3) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x1f00, 0x12) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40100, 0x0) 0s ago: executing program 4 (id=3015): add_key(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = io_uring_setup(0x2255, &(0x7f0000000440)={0x0, 0x6aee, 0x200, 0x1, 0x37}) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0xa1e3a9fe3eb9c551) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0xfffffffd}, 0x50) kernel console output (not intermixed with test programs): syz.5.2507" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 536.180144][T15960] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2506'. [ 536.182381][ T40] audit: type=1326 audit(1766945952.333:23765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15957 comm="syz.5.2507" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 536.190292][T15960] 9p: Bad value for 'rfdno' [ 536.192800][ T40] audit: type=1326 audit(1766945952.333:23766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15957 comm="syz.5.2507" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf707d5a7 code=0x7ffc0000 [ 536.229710][T15963] 9p: Bad value for 'rfdno' [ 536.455976][T15951] vhci_hcd: connection closed [ 536.456599][ T6228] vhci_hcd vhci_hcd.3: stop threads [ 536.461506][ T6228] vhci_hcd vhci_hcd.3: release socket [ 536.464041][ T6228] vhci_hcd vhci_hcd.3: disconnect device [ 537.520373][T15990] FAULT_INJECTION: forcing a failure. [ 537.520373][T15990] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 537.524640][T15990] CPU: 0 UID: 0 PID: 15990 Comm: syz.3.2515 Tainted: G L syzkaller #0 PREEMPT(full) [ 537.524658][T15990] Tainted: [L]=SOFTLOCKUP [ 537.524663][T15990] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 537.524670][T15990] Call Trace: [ 537.524674][T15990] [ 537.524679][T15990] dump_stack_lvl+0x16c/0x1f0 [ 537.524700][T15990] should_fail_ex+0x512/0x640 [ 537.524715][T15990] _copy_to_user+0x32/0xd0 [ 537.524728][T15990] drm_ioctl+0x5eb/0xc30 [ 537.524742][T15990] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 537.524757][T15990] ? __pfx_drm_ioctl+0x10/0x10 [ 537.524777][T15990] drm_compat_ioctl+0x327/0x460 [ 537.524793][T15990] ? __pfx_drm_compat_ioctl+0x10/0x10 [ 537.524812][T15990] __ia32_compat_sys_ioctl+0x242/0x370 [ 537.524828][T15990] __do_fast_syscall_32+0xe8/0x680 [ 537.524848][T15990] do_fast_syscall_32+0x32/0x80 [ 537.524858][T15990] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 537.524873][T15990] RIP: 0023:0xf7ff7579 [ 537.524882][T15990] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 537.524893][T15990] RSP: 002b:00000000f54e655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 537.524904][T15990] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c03864bc [ 537.524911][T15990] RDX: 0000000080000500 RSI: 0000000000000000 RDI: 0000000000000000 [ 537.524918][T15990] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 537.524924][T15990] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 537.524931][T15990] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 537.524945][T15990] [ 538.119525][T16007] 9p: Bad value for 'wfdno' [ 538.138723][ T9847] libceph: connect (1)[c::]:6789 error -101 [ 538.161372][ T9847] libceph: mon0 (1)[c::]:6789 connect error [ 538.178559][T16006] ceph: No mds server is up or the cluster is laggy [ 538.342681][T16011] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 538.345117][T16011] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 538.380286][T16011] vhci_hcd vhci_hcd.0: Device attached [ 538.525221][T16019] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 538.533048][T16019] Error validating options; rc = [-22] [ 538.620662][ T6099] usb 45-1: new low-speed USB device number 21 using vhci_hcd [ 538.741371][T16017] vhci_hcd: connection reset by peer [ 538.743917][ T6134] vhci_hcd vhci_hcd.4: stop threads [ 538.746372][ T6134] vhci_hcd vhci_hcd.4: release socket [ 538.748899][ T6134] vhci_hcd vhci_hcd.4: disconnect device [ 538.830666][ T6052] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 538.989810][ T6052] usb 10-1: Using ep0 maxpacket: 16 [ 539.001094][ T6052] usb 10-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 539.005443][ T6052] usb 10-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 539.009691][ T6052] usb 10-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 539.019850][ T6052] usb 10-1: config 1 interface 0 has no altsetting 0 [ 539.021405][T16027] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 539.024500][T16027] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 539.030976][ T6052] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 539.032586][T16030] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 539.035027][ T6052] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.037151][T16030] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 539.041188][ T6052] usb 10-1: Product: syz [ 539.043737][T16030] vhci_hcd vhci_hcd.0: Device attached [ 539.049805][ T6052] usb 10-1: Manufacturer: syz [ 539.051960][ T6052] usb 10-1: SerialNumber: syz [ 539.083658][T16027] vhci_hcd vhci_hcd.0: Device attached [ 539.285213][T16031] vhci_hcd: connection closed [ 539.287028][ T1164] vhci_hcd vhci_hcd.0: stop threads [ 539.297120][ T1164] vhci_hcd vhci_hcd.0: release socket [ 539.309925][ T6237] usb 38-1: SetAddress Request (74) to port 0 [ 539.312838][ T6237] usb 38-1: new SuperSpeed USB device number 74 using vhci_hcd [ 539.316232][ T1164] vhci_hcd vhci_hcd.0: disconnect device [ 539.328212][ T6052] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 539.351824][ T6237] usb 38-1: enqueue for inactive port 0 [ 539.657061][T16036] validate_nla: 57 callbacks suppressed [ 539.657097][T16036] netlink: 'syz.4.2525': attribute type 13 has an invalid length. [ 539.685198][T16028] vhci_hcd: connection closed [ 539.686072][ T6134] vhci_hcd vhci_hcd.3: stop threads [ 539.688959][ T6134] vhci_hcd vhci_hcd.3: release socket [ 539.688959][T16036] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 539.691075][ T6134] vhci_hcd vhci_hcd.3: disconnect device [ 539.757639][ T6237] usb usb38-port1: attempt power cycle [ 540.097412][ T6014] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 540.330338][ T6237] usb usb38-port1: unable to enumerate USB device [ 540.415225][T16048] FAULT_INJECTION: forcing a failure. [ 540.415225][T16048] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 540.419552][T16048] CPU: 2 UID: 0 PID: 16048 Comm: syz.3.2528 Tainted: G L syzkaller #0 PREEMPT(full) [ 540.419572][T16048] Tainted: [L]=SOFTLOCKUP [ 540.419576][T16048] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 540.419583][T16048] Call Trace: [ 540.419588][T16048] [ 540.419592][T16048] dump_stack_lvl+0x16c/0x1f0 [ 540.419613][T16048] should_fail_ex+0x512/0x640 [ 540.419628][T16048] _copy_to_user+0x32/0xd0 [ 540.419642][T16048] simple_read_from_buffer+0xcb/0x170 [ 540.419659][T16048] proc_fail_nth_read+0x197/0x240 [ 540.419679][T16048] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 540.419698][T16048] ? rw_verify_area+0xcf/0x6c0 [ 540.419712][T16048] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 540.419743][T16048] vfs_read+0x1e4/0xcf0 [ 540.419760][T16048] ? __pfx___mutex_lock+0x10/0x10 [ 540.419779][T16048] ? __pfx_vfs_read+0x10/0x10 [ 540.419793][T16048] ? find_held_lock+0x2b/0x80 [ 540.419812][T16048] ? __fget_files+0x20e/0x3c0 [ 540.419831][T16048] ksys_read+0x12a/0x250 [ 540.419846][T16048] ? __pfx_ksys_read+0x10/0x10 [ 540.419866][T16048] __do_fast_syscall_32+0xe8/0x680 [ 540.419885][T16048] do_fast_syscall_32+0x32/0x80 [ 540.419895][T16048] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 540.419910][T16048] RIP: 0023:0xf7ff7579 [ 540.419919][T16048] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 540.419930][T16048] RSP: 002b:00000000f54c5590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 540.419941][T16048] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f54c5620 [ 540.419948][T16048] RDX: 000000000000000f RSI: 00000000f7486ff4 RDI: 0000000000000000 [ 540.419955][T16048] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 540.419961][T16048] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 540.419968][T16048] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 540.419981][T16048] [ 540.422947][T16047] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2530'. [ 541.420850][ T9846] usb usb44-port1: attempt power cycle [ 541.598705][T16064] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 541.600957][T16064] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 541.607419][T16064] vhci_hcd vhci_hcd.0: Device attached [ 541.899890][ T6014] usb 38-1: SetAddress Request (78) to port 0 [ 541.902056][ T6014] usb 38-1: new SuperSpeed USB device number 78 using vhci_hcd [ 541.915368][T16071] netlink: 'syz.4.2535': attribute type 13 has an invalid length. [ 541.992839][T16071] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 542.006463][T16065] vhci_hcd: connection closed [ 542.007191][ T9846] usb usb44-port1: unable to enumerate USB device [ 542.026541][ T171] vhci_hcd vhci_hcd.0: stop threads [ 542.028400][ T171] vhci_hcd vhci_hcd.0: release socket [ 542.031789][ T171] vhci_hcd vhci_hcd.0: disconnect device [ 542.111615][T16073] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 542.113898][T16073] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 542.127344][T16073] vhci_hcd vhci_hcd.0: Device attached [ 542.400288][ T5981] usb 44-1: SetAddress Request (79) to port 0 [ 542.402532][ T5981] usb 44-1: new SuperSpeed USB device number 79 using vhci_hcd [ 542.490100][ T6014] usb 38-1: enqueue for inactive port 0 [ 542.706759][T16074] vhci_hcd: connection reset by peer [ 542.709194][ T6228] vhci_hcd vhci_hcd.3: stop threads [ 542.712687][ T6228] vhci_hcd vhci_hcd.3: release socket [ 542.714759][ T6228] vhci_hcd vhci_hcd.3: disconnect device [ 543.020589][ T6014] usb usb38-port1: attempt power cycle [ 543.365262][T16106] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 543.367504][T16106] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 543.373477][T16106] vhci_hcd vhci_hcd.0: Device attached [ 543.590290][ T6014] usb usb38-port1: unable to enumerate USB device [ 543.612675][T16116] netlink: 'syz.3.2549': attribute type 13 has an invalid length. [ 543.658776][T16116] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 543.741083][ T6099] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 543.952336][T16107] vhci_hcd: connection closed [ 543.953731][ T90] vhci_hcd vhci_hcd.4: stop threads [ 543.959579][ T90] vhci_hcd vhci_hcd.4: release socket [ 543.962977][ T90] vhci_hcd vhci_hcd.4: disconnect device [ 544.561569][T16012] usblp0:failed reading printer status (-110) [ 544.587524][T16126] netlink: 'syz.3.2553': attribute type 1 has an invalid length. [ 544.598100][ T7488] usb 10-1: USB disconnect, device number 7 [ 544.603745][ T7488] usblp0: removed [ 544.636345][T16126] 8021q: adding VLAN 0 to HW filter on device bond1 [ 544.818484][T16136] dlm: no local IP address has been set [ 544.820685][T16136] dlm: cannot start dlm midcomms -107 [ 544.833366][T16136] netlink: 'syz.5.2554': attribute type 12 has an invalid length. [ 544.838337][T16126] bond1 (unregistering): Released all slaves [ 544.850901][T16128] geneve2: entered promiscuous mode [ 544.907696][T16138] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 544.910021][T16138] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 544.919289][T16138] vhci_hcd vhci_hcd.0: Device attached [ 545.103656][T15392] usb 46-1: SetAddress Request (79) to port 0 [ 545.105964][T15392] usb 46-1: new SuperSpeed USB device number 79 using vhci_hcd [ 545.548007][T16153] netlink: 'syz.3.2559': attribute type 13 has an invalid length. [ 545.566094][T16140] vhci_hcd: connection reset by peer [ 545.569077][ T12] vhci_hcd vhci_hcd.4: stop threads [ 545.576743][ T12] vhci_hcd vhci_hcd.4: release socket [ 545.579448][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 545.600382][T16153] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 545.854007][T16157] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 545.856372][T16157] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 545.870157][T16157] vhci_hcd vhci_hcd.0: Device attached [ 546.109836][ T9848] usb 47-1: new low-speed USB device number 13 using vhci_hcd [ 546.568900][T16166] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 546.591290][T16172] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 546.600987][T16158] vhci_hcd: connection reset by peer [ 546.603157][ T6137] vhci_hcd vhci_hcd.5: stop threads [ 546.605502][ T6137] vhci_hcd vhci_hcd.5: release socket [ 546.607900][ T6137] vhci_hcd vhci_hcd.5: disconnect device [ 546.702260][T16177] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 546.704471][T16177] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 546.707566][T16177] vhci_hcd vhci_hcd.0: Device attached [ 546.854282][T16184] 9p: Bad value for 'rfdno' [ 547.006293][T16187] futex_wake_op: syz.4.2568 tries to shift op by -1; fix this program [ 547.015363][ T40] kauditd_printk_skb: 232 callbacks suppressed [ 547.015375][ T40] audit: type=1326 audit(1766945963.213:23999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16186 comm="syz.4.2568" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 547.024322][ T40] audit: type=1326 audit(1766945963.213:24000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16186 comm="syz.4.2568" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf703d5a7 code=0x7ffc0000 [ 547.031481][ T40] audit: type=1326 audit(1766945963.213:24001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16186 comm="syz.4.2568" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 547.038132][ T40] audit: type=1326 audit(1766945963.213:24002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16186 comm="syz.4.2568" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 547.044735][ T40] audit: type=1326 audit(1766945963.213:24003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16186 comm="syz.4.2568" exe="/syz-executor" sig=0 arch=40000003 syscall=385 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 547.051433][ T40] audit: type=1326 audit(1766945963.213:24004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16186 comm="syz.4.2568" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 547.057863][ T40] audit: type=1326 audit(1766945963.213:24005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16186 comm="syz.4.2568" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 547.064877][ T40] audit: type=1326 audit(1766945963.213:24006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16186 comm="syz.4.2568" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 547.071610][ T40] audit: type=1326 audit(1766945963.213:24007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16186 comm="syz.4.2568" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 547.078020][ T40] audit: type=1326 audit(1766945963.213:24008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16186 comm="syz.4.2568" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 547.309368][T16178] vhci_hcd: connection closed [ 547.309611][ T171] vhci_hcd vhci_hcd.3: stop threads [ 547.314286][ T171] vhci_hcd vhci_hcd.3: release socket [ 547.316315][ T171] vhci_hcd vhci_hcd.3: disconnect device [ 547.402783][T16194] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 547.404928][T16194] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 547.408901][T16194] vhci_hcd vhci_hcd.0: Device attached [ 547.430687][ T5981] usb 44-1: device descriptor read/8, error -110 [ 547.820434][ T5981] usb usb44-port1: attempt power cycle [ 548.030877][T16206] netlink: 'syz.3.2572': attribute type 13 has an invalid length. [ 548.038680][T16195] vhci_hcd: connection closed [ 548.040042][ T9568] vhci_hcd vhci_hcd.5: stop threads [ 548.049870][ T9568] vhci_hcd vhci_hcd.5: release socket [ 548.053962][ T9568] vhci_hcd vhci_hcd.5: disconnect device [ 548.068901][T16206] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 548.384359][ T5981] usb usb44-port1: unable to enumerate USB device [ 549.231344][T16230] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 549.233840][T16230] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 549.237558][T16230] vhci_hcd vhci_hcd.0: Device attached [ 549.342350][T16235] futex_wake_op: syz.4.2580 tries to shift op by -1; fix this program [ 549.794990][T16231] vhci_hcd: connection closed [ 549.795285][ T6228] vhci_hcd vhci_hcd.5: stop threads [ 549.799981][ T6228] vhci_hcd vhci_hcd.5: release socket [ 549.802573][ T6228] vhci_hcd vhci_hcd.5: disconnect device [ 549.982274][T16241] tipc: Can't bind to reserved service type 2 [ 549.985697][T16241] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2581'. [ 549.997093][T16241] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2581'. [ 550.159840][T15392] usb 46-1: device descriptor read/8, error -110 [ 550.280085][T15392] usb usb46-port1: attempt power cycle [ 550.635963][T16254] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 550.638147][T16254] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 550.657217][T16254] vhci_hcd vhci_hcd.0: Device attached [ 550.871692][T15392] usb usb46-port1: unable to enumerate USB device [ 551.022597][ T6014] usb 45-1: new low-speed USB device number 22 using vhci_hcd [ 551.180439][T16256] vhci_hcd: connection reset by peer [ 551.185600][ T6101] vhci_hcd vhci_hcd.4: stop threads [ 551.187496][ T6101] vhci_hcd vhci_hcd.4: release socket [ 551.189463][ T6101] vhci_hcd vhci_hcd.4: disconnect device [ 551.259897][ T9848] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 552.357879][T16286] 9p: Bad value for 'wfdno' [ 552.681940][T16302] 9p: Bad value for 'rfdno' [ 553.887536][T16319] 9p: Bad value for 'wfdno' [ 553.985160][T16324] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2606'. [ 554.140121][T16339] FAULT_INJECTION: forcing a failure. [ 554.140121][T16339] name failslab, interval 1, probability 0, space 0, times 0 [ 554.144403][T16339] CPU: 3 UID: 0 PID: 16339 Comm: syz.0.2611 Tainted: G L syzkaller #0 PREEMPT(full) [ 554.144422][T16339] Tainted: [L]=SOFTLOCKUP [ 554.144426][T16339] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 554.144434][T16339] Call Trace: [ 554.144438][T16339] [ 554.144443][T16339] dump_stack_lvl+0x16c/0x1f0 [ 554.144482][T16339] should_fail_ex+0x512/0x640 [ 554.144501][T16339] ? fs_reclaim_acquire+0xae/0x150 [ 554.144520][T16339] should_failslab+0xc2/0x120 [ 554.144538][T16339] __kmalloc_noprof+0xeb/0x910 [ 554.144550][T16339] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 554.144569][T16339] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 554.144583][T16339] tomoyo_realpath_from_path+0xc2/0x6e0 [ 554.144600][T16339] ? tomoyo_profile+0x47/0x60 [ 554.144618][T16339] tomoyo_path_number_perm+0x245/0x580 [ 554.144630][T16339] ? tomoyo_path_number_perm+0x237/0x580 [ 554.144644][T16339] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 554.144670][T16339] ? find_held_lock+0x2b/0x80 [ 554.144685][T16339] ? hook_file_ioctl_common+0x144/0x410 [ 554.144702][T16339] ? __fget_files+0x20e/0x3c0 [ 554.144717][T16339] ? __fput_deferred+0x430/0x480 [ 554.144731][T16339] security_file_ioctl_compat+0x9b/0x240 [ 554.144746][T16339] __ia32_compat_sys_ioctl+0xc3/0x370 [ 554.144762][T16339] __do_fast_syscall_32+0xe8/0x680 [ 554.144781][T16339] do_fast_syscall_32+0x32/0x80 [ 554.144792][T16339] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 554.144806][T16339] RIP: 0023:0xf704d579 [ 554.144815][T16339] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 554.144826][T16339] RSP: 002b:00000000f543d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 554.144850][T16339] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000004008550c [ 554.144857][T16339] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 554.144864][T16339] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 554.144870][T16339] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 554.144876][T16339] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 554.144891][T16339] [ 554.144907][T16339] ERROR: Out of memory at tomoyo_realpath_from_path. [ 554.523399][T16350] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 554.525908][T16350] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 554.529020][T16350] vhci_hcd vhci_hcd.0: Device attached [ 554.994143][T16353] vhci_hcd: connection closed [ 554.994644][ T6228] vhci_hcd vhci_hcd.4: stop threads [ 554.998175][ T6228] vhci_hcd vhci_hcd.4: release socket [ 555.000177][ T6228] vhci_hcd vhci_hcd.4: disconnect device [ 555.202494][T16361] 9p: Bad value for 'wfdno' [ 555.382410][T16365] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 555.384712][T16365] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 555.387610][T16365] vhci_hcd vhci_hcd.0: Device attached [ 555.824941][ T59] usb 47-1: new low-speed USB device number 14 using vhci_hcd [ 556.055605][T16366] vhci_hcd: connection reset by peer [ 556.060134][ T46] vhci_hcd vhci_hcd.5: stop threads [ 556.061949][ T46] vhci_hcd vhci_hcd.5: release socket [ 556.065459][ T46] vhci_hcd vhci_hcd.5: disconnect device [ 556.149877][ T6014] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 556.300982][T16383] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2622'. [ 556.775009][T16395] futex_wake_op: syz.5.2626 tries to shift op by -1; fix this program [ 556.779408][ T40] kauditd_printk_skb: 493 callbacks suppressed [ 556.779423][ T40] audit: type=1326 audit(1766945972.973:24502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16394 comm="syz.5.2626" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 556.792349][ T40] audit: type=1326 audit(1766945972.983:24503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16394 comm="syz.5.2626" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 556.803006][ T40] audit: type=1326 audit(1766945972.983:24504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16394 comm="syz.5.2626" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf707d5a7 code=0x7ffc0000 [ 556.812719][ T40] audit: type=1326 audit(1766945972.983:24505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16394 comm="syz.5.2626" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 556.820932][ T40] audit: type=1326 audit(1766945972.993:24506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16394 comm="syz.5.2626" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 556.824281][T16397] 9p: Bad value for 'wfdno' [ 556.828604][ T40] audit: type=1326 audit(1766945972.993:24507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16394 comm="syz.5.2626" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf707d5a7 code=0x7ffc0000 [ 556.828650][ T40] audit: type=1326 audit(1766945972.993:24508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16394 comm="syz.5.2626" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 556.848576][ T40] audit: type=1326 audit(1766945972.993:24509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16394 comm="syz.5.2626" exe="/syz-executor" sig=0 arch=40000003 syscall=385 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 556.856257][ T40] audit: type=1326 audit(1766945972.993:24510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16394 comm="syz.5.2626" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 556.866043][ T40] audit: type=1326 audit(1766945972.993:24511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16394 comm="syz.5.2626" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 557.246201][T16411] syzkaller0: entered promiscuous mode [ 557.248058][T16411] syzkaller0: entered allmulticast mode [ 557.255339][T16412] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 557.257506][T16412] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 557.260822][T16412] vhci_hcd vhci_hcd.0: Device attached [ 557.500310][ T9848] usb 46-1: SetAddress Request (83) to port 0 [ 557.503255][ T9848] usb 46-1: new SuperSpeed USB device number 83 using vhci_hcd [ 557.771106][T16422] FAULT_INJECTION: forcing a failure. [ 557.771106][T16422] name failslab, interval 1, probability 0, space 0, times 0 [ 557.775880][T16422] CPU: 0 UID: 0 PID: 16422 Comm: syz.5.2635 Tainted: G L syzkaller #0 PREEMPT(full) [ 557.775912][T16422] Tainted: [L]=SOFTLOCKUP [ 557.775916][T16422] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 557.775924][T16422] Call Trace: [ 557.775929][T16422] [ 557.775934][T16422] dump_stack_lvl+0x16c/0x1f0 [ 557.775955][T16422] should_fail_ex+0x512/0x640 [ 557.775968][T16422] ? kmem_cache_alloc_noprof+0x62/0x770 [ 557.775984][T16422] should_failslab+0xc2/0x120 [ 557.776001][T16422] kmem_cache_alloc_noprof+0x83/0x770 [ 557.776014][T16422] ? __anon_vma_prepare+0xae/0x5e0 [ 557.776030][T16422] ? __anon_vma_prepare+0xae/0x5e0 [ 557.776041][T16422] __anon_vma_prepare+0xae/0x5e0 [ 557.776052][T16422] ? __filemap_get_folio_mpol+0x32f/0xc60 [ 557.776068][T16422] __vmf_anon_prepare+0x11c/0x240 [ 557.776087][T16422] hugetlb_no_page+0x10ae/0x2140 [ 557.776105][T16422] hugetlb_fault+0x5ed/0x1730 [ 557.776119][T16422] ? __pfx_hugetlb_fault+0x10/0x10 [ 557.776136][T16422] ? find_vma+0xbf/0x140 [ 557.776151][T16422] ? __pfx_find_vma+0x10/0x10 [ 557.776168][T16422] handle_mm_fault+0x95d/0xad0 [ 557.776183][T16422] do_user_addr_fault+0x7a6/0x1370 [ 557.776198][T16422] ? rcu_is_watching+0x12/0xc0 [ 557.776216][T16422] exc_page_fault+0x64/0xc0 [ 557.776233][T16422] asm_exc_page_fault+0x26/0x30 [ 557.776244][T16422] RIP: 0010:__put_user_4+0xd/0x20 [ 557.776261][T16422] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca e9 c7 c0 03 00 0f 1f 80 00 00 00 00 90 90 90 [ 557.776272][T16422] RSP: 0018:ffffc900066bfb98 EFLAGS: 00050202 [ 557.776282][T16422] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000080000004 [ 557.776289][T16422] RDX: 0000000000000000 RSI: ffffffff871652b6 RDI: ffff888068164f5c [ 557.776296][T16422] RBP: ffffc900066bfe88 R08: 0000000086553328 R09: 0000000088655332 [ 557.776302][T16422] R10: 0000000000000001 R11: ffff8880480e2ff0 R12: ffff888024941900 [ 557.776309][T16422] R13: 0000000000000000 R14: ffff888068164f00 R15: ffff888043fb5130 [ 557.776320][T16422] ? processcompl+0x1e6/0x660 [ 557.776339][T16422] processcompl+0x225/0x660 [ 557.776363][T16422] usbdev_ioctl+0x2db/0x4070 [ 557.776380][T16422] ? tomoyo_path_number_perm+0x18d/0x580 [ 557.776395][T16422] ? __pfx_usbdev_ioctl+0x10/0x10 [ 557.776416][T16422] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 557.776435][T16422] ? do_vfs_ioctl+0x128/0x14f0 [ 557.776448][T16422] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 557.776466][T16422] ? find_held_lock+0x2b/0x80 [ 557.776481][T16422] ? hook_file_ioctl_common+0x144/0x410 [ 557.776497][T16422] ? __fget_files+0x20e/0x3c0 [ 557.776512][T16422] ? __fput_deferred+0x430/0x480 [ 557.776525][T16422] ? __pfx_usbdev_ioctl+0x10/0x10 [ 557.776541][T16422] compat_ptr_ioctl+0x6e/0xa0 [ 557.776553][T16422] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 557.776566][T16422] __ia32_compat_sys_ioctl+0x242/0x370 [ 557.776583][T16422] __do_fast_syscall_32+0xe8/0x680 [ 557.776602][T16422] do_fast_syscall_32+0x32/0x80 [ 557.776612][T16422] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 557.776625][T16422] RIP: 0023:0xf707d579 [ 557.776634][T16422] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 557.776644][T16422] RSP: 002b:00000000f546d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 557.776655][T16422] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000004008550c [ 557.776661][T16422] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 557.776668][T16422] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 557.776674][T16422] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 557.776681][T16422] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 557.776695][T16422] [ 557.905646][T16413] vhci_hcd: connection reset by peer [ 557.919991][ T90] vhci_hcd vhci_hcd.4: stop threads [ 557.922402][ T90] vhci_hcd vhci_hcd.4: release socket [ 557.925392][ T90] vhci_hcd vhci_hcd.4: disconnect device [ 558.023059][T16424] 9p: Bad value for 'wfdno' [ 558.675776][T16428] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 558.678699][T16428] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 558.682879][T16428] vhci_hcd vhci_hcd.0: Device attached [ 558.699673][T16447] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 558.699692][T16447] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 558.700811][T16447] vhci_hcd vhci_hcd.0: Device attached [ 558.745216][T16428] wg2 speed is unknown, defaulting to 1000 [ 558.748317][T16428] wg2 speed is unknown, defaulting to 1000 [ 558.751166][T16428] wg2 speed is unknown, defaulting to 1000 [ 558.827068][T16428] infiniband syz2: set active [ 558.828638][T16428] infiniband syz2: added wg2 [ 558.831910][ T53] wg2 speed is unknown, defaulting to 1000 [ 558.846543][T16441] syz2: rxe_newlink: already configured on wg2 [ 558.847703][T16428] RDS/IB: syz2: added [ 558.850358][T16428] smc: adding ib device syz2 with port count 1 [ 558.852406][T16428] smc: ib device syz2 port 1 has no pnetid [ 558.856061][T16428] wg2 speed is unknown, defaulting to 1000 [ 558.939847][ T6014] usb 43-1: new low-speed USB device number 24 using vhci_hcd [ 558.940128][T16428] wg2 speed is unknown, defaulting to 1000 [ 559.027098][T16428] wg2 speed is unknown, defaulting to 1000 [ 559.117211][T16428] wg2 speed is unknown, defaulting to 1000 [ 559.349256][ T53] wg2 speed is unknown, defaulting to 1000 [ 559.359472][T16448] vhci_hcd: connection reset by peer [ 559.363063][ T6137] vhci_hcd vhci_hcd.3: stop threads [ 559.364806][ T6137] vhci_hcd vhci_hcd.3: release socket [ 559.366667][ T6137] vhci_hcd vhci_hcd.3: disconnect device [ 559.439400][T16445] vhci_hcd: connection closed [ 559.440742][ T6101] vhci_hcd vhci_hcd.5: stop threads [ 559.444155][ T6101] vhci_hcd vhci_hcd.5: release socket [ 559.449951][ T6101] vhci_hcd vhci_hcd.5: disconnect device [ 559.544882][T16458] 9p: Bad value for 'wfdno' [ 560.029388][T16462] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(12) [ 560.032004][T16462] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 560.035084][T16462] vhci_hcd vhci_hcd.0: Device attached [ 560.041480][T16464] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 560.043744][T16464] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 560.046434][T16464] vhci_hcd vhci_hcd.0: Device attached [ 560.310032][ T6052] usb 38-1: SetAddress Request (82) to port 0 [ 560.312430][ T6052] usb 38-1: new SuperSpeed USB device number 82 using vhci_hcd [ 560.344173][T16465] vhci_hcd: connection closed [ 560.344382][ T6101] vhci_hcd vhci_hcd.4: stop threads [ 560.348685][ T6101] vhci_hcd vhci_hcd.4: release socket [ 560.351385][ T6101] vhci_hcd vhci_hcd.4: disconnect device [ 560.435910][T16470] futex_wake_op: syz.3.2647 tries to shift op by -1; fix this program [ 560.445987][T16472] FAULT_INJECTION: forcing a failure. [ 560.445987][T16472] name failslab, interval 1, probability 0, space 0, times 0 [ 560.454897][T16472] CPU: 3 UID: 0 PID: 16472 Comm: syz.5.2648 Tainted: G L syzkaller #0 PREEMPT(full) [ 560.454929][T16472] Tainted: [L]=SOFTLOCKUP [ 560.454935][T16472] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 560.454946][T16472] Call Trace: [ 560.454953][T16472] [ 560.454965][T16472] dump_stack_lvl+0x16c/0x1f0 [ 560.454995][T16472] should_fail_ex+0x512/0x640 [ 560.455014][T16472] ? kmem_cache_alloc_noprof+0x62/0x770 [ 560.455038][T16472] should_failslab+0xc2/0x120 [ 560.455064][T16472] kmem_cache_alloc_noprof+0x83/0x770 [ 560.455084][T16472] ? __anon_vma_prepare+0x344/0x5e0 [ 560.455108][T16472] ? __anon_vma_prepare+0x344/0x5e0 [ 560.455126][T16472] __anon_vma_prepare+0x344/0x5e0 [ 560.455144][T16472] ? __filemap_get_folio_mpol+0x32f/0xc60 [ 560.455168][T16472] __vmf_anon_prepare+0x11c/0x240 [ 560.455195][T16472] hugetlb_no_page+0x10ae/0x2140 [ 560.455223][T16472] hugetlb_fault+0x5ed/0x1730 [ 560.455245][T16472] ? __pfx_hugetlb_fault+0x10/0x10 [ 560.455272][T16472] ? find_vma+0xbf/0x140 [ 560.455294][T16472] ? __pfx_find_vma+0x10/0x10 [ 560.455320][T16472] handle_mm_fault+0x95d/0xad0 [ 560.455343][T16472] do_user_addr_fault+0x7a6/0x1370 [ 560.455367][T16472] ? rcu_is_watching+0x12/0xc0 [ 560.455445][T16472] exc_page_fault+0x64/0xc0 [ 560.455481][T16472] asm_exc_page_fault+0x26/0x30 [ 560.455499][T16472] RIP: 0010:__put_user_4+0xd/0x20 [ 560.455526][T16472] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca e9 c7 c0 03 00 0f 1f 80 00 00 00 00 90 90 90 [ 560.455546][T16472] RSP: 0018:ffffc9002001fb98 EFLAGS: 00050202 [ 560.455564][T16472] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000080000004 [ 560.455576][T16472] RDX: 0000000000000000 RSI: ffffffff871652b6 RDI: ffff8880681b335c [ 560.455588][T16472] RBP: ffffc9002001fe88 R08: 0000000086553328 R09: 0000000088655332 [ 560.455601][T16472] R10: 0000000000000001 R11: ffff888024308b30 R12: ffff888022da1d00 [ 560.455613][T16472] R13: 0000000000000000 R14: ffff8880681b3300 R15: ffff888043fb5130 [ 560.455634][T16472] ? processcompl+0x1e6/0x660 [ 560.455666][T16472] processcompl+0x225/0x660 [ 560.455699][T16472] usbdev_ioctl+0x2db/0x4070 [ 560.455726][T16472] ? tomoyo_path_number_perm+0x18d/0x580 [ 560.455751][T16472] ? __pfx_usbdev_ioctl+0x10/0x10 [ 560.455789][T16472] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 560.455821][T16472] ? do_vfs_ioctl+0x128/0x14f0 [ 560.455845][T16472] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 560.455877][T16472] ? find_held_lock+0x2b/0x80 [ 560.455901][T16472] ? hook_file_ioctl_common+0x144/0x410 [ 560.455931][T16472] ? __fget_files+0x20e/0x3c0 [ 560.455956][T16472] ? __fput_deferred+0x430/0x480 [ 560.455978][T16472] ? __pfx_usbdev_ioctl+0x10/0x10 [ 560.456007][T16472] compat_ptr_ioctl+0x6e/0xa0 [ 560.456028][T16472] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 560.456051][T16472] __ia32_compat_sys_ioctl+0x242/0x370 [ 560.456078][T16472] __do_fast_syscall_32+0xe8/0x680 [ 560.456110][T16472] do_fast_syscall_32+0x32/0x80 [ 560.456127][T16472] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 560.456149][T16472] RIP: 0023:0xf707d579 [ 560.456166][T16472] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 560.456183][T16472] RSP: 002b:00000000f546d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 560.456200][T16472] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000004008550c [ 560.456212][T16472] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 560.456223][T16472] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 560.456235][T16472] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 560.456246][T16472] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 560.456280][T16472] [ 560.457298][T16467] vhci_hcd: connection reset by peer [ 560.610767][ T171] vhci_hcd vhci_hcd.0: stop threads [ 560.613227][ T171] vhci_hcd vhci_hcd.0: release socket [ 560.616109][ T171] vhci_hcd vhci_hcd.0: disconnect device [ 560.949877][ T59] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 561.202533][T16492] dlm: no local IP address has been set [ 561.204792][T16492] dlm: cannot start dlm midcomms -107 [ 561.222425][T16491] netlink: 'syz.0.2652': attribute type 13 has an invalid length. [ 561.223473][T16492] netlink: 'syz.4.2653': attribute type 12 has an invalid length. [ 561.266137][T16491] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 562.381058][ T60] usb usb48-port1: attempt power cycle [ 562.550189][ T9848] usb 46-1: device descriptor read/8, error -110 [ 562.606984][T16509] 9pnet: p9_errstr2errno: server reported unknown error [ 562.617044][T16512] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2661'. [ 562.621656][T16512] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2661'. [ 562.690013][ T9848] usb usb46-port1: attempt power cycle [ 562.706599][T16509] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2661'. [ 562.709411][T16509] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2661'. [ 562.980232][ T60] usb usb48-port1: unable to enumerate USB device [ 563.203203][T16524] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 563.205522][T16524] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 563.215201][T16524] vhci_hcd vhci_hcd.0: Device attached [ 563.305320][ T9848] usb usb46-port1: unable to enumerate USB device [ 563.437059][T16534] dlm: no local IP address has been set [ 563.439178][T16534] dlm: cannot start dlm midcomms -107 [ 563.450508][T16534] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 563.457516][T16528] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 563.459608][T16528] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 563.462415][T16528] vhci_hcd vhci_hcd.0: Device attached [ 563.469845][ T5981] usb 47-1: new low-speed USB device number 15 using vhci_hcd [ 563.636658][T16533] vhci_hcd: connection closed [ 563.636870][ T6101] vhci_hcd vhci_hcd.4: stop threads [ 563.640222][ T6101] vhci_hcd vhci_hcd.4: release socket [ 563.642076][ T6101] vhci_hcd vhci_hcd.4: disconnect device [ 563.747096][T16525] vhci_hcd: connection reset by peer [ 563.750846][ T6134] vhci_hcd vhci_hcd.5: stop threads [ 563.752777][ T6134] vhci_hcd vhci_hcd.5: release socket [ 563.754690][ T6134] vhci_hcd vhci_hcd.5: disconnect device [ 563.955812][T16539] netlink: 'syz.3.2667': attribute type 13 has an invalid length. [ 563.983857][T16539] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 564.060022][ T6014] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 564.618620][T16547] dlm: no local IP address has been set [ 564.620743][T16547] dlm: cannot start dlm midcomms -107 [ 564.631962][T16547] netlink: 'syz.0.2669': attribute type 12 has an invalid length. [ 565.352667][ T6052] usb 38-1: device descriptor read/8, error -110 [ 565.440439][T16550] netlink: 'syz.5.2670': attribute type 1 has an invalid length. [ 565.463797][T16557] 9p: Bad value for 'rfdno' [ 565.501335][T16557] kvm: kvm [16556]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0x186) = 0x8000 [ 565.729660][T16563] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 565.734183][T16563] Error validating options; rc = [-22] [ 565.751274][ T6052] usb usb38-port1: attempt power cycle [ 566.059903][ T9848] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 566.240113][ T9848] usb 9-1: Using ep0 maxpacket: 16 [ 566.243296][ T9848] usb 9-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 566.247027][ T9848] usb 9-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 566.250617][ T9848] usb 9-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 566.254770][ T9848] usb 9-1: config 1 interface 0 has no altsetting 0 [ 566.260044][ T9848] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 566.262957][ T9848] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.265468][ T9848] usb 9-1: Product: syz [ 566.266845][ T9848] usb 9-1: Manufacturer: syz [ 566.268369][ T9848] usb 9-1: SerialNumber: syz [ 566.312027][ T6052] usb usb38-port1: unable to enumerate USB device [ 566.350834][T16570] dlm: no local IP address has been set [ 566.352753][T16570] dlm: cannot start dlm midcomms -107 [ 566.363450][T16570] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 566.367263][T16570] netlink: 'syz.5.2675': attribute type 12 has an invalid length. [ 566.531524][ T9848] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 566.730933][T16575] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 566.733136][T16575] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 566.736619][T16575] vhci_hcd vhci_hcd.0: Device attached [ 567.009873][ T6052] usb 44-1: SetAddress Request (83) to port 0 [ 567.012617][ T6052] usb 44-1: new SuperSpeed USB device number 83 using vhci_hcd [ 567.262420][T16576] vhci_hcd: connection reset by peer [ 567.265241][ T61] vhci_hcd vhci_hcd.3: stop threads [ 567.267760][ T61] vhci_hcd vhci_hcd.3: release socket [ 567.272002][ T61] vhci_hcd vhci_hcd.3: disconnect device [ 567.276606][T16581] dlm: no local IP address has been set [ 567.279161][T16581] dlm: cannot start dlm midcomms -107 [ 567.295274][T16581] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 567.592077][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 567.594738][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.619967][ T5981] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 569.012251][T16590] netlink: 'syz.5.2680': attribute type 13 has an invalid length. [ 569.041894][T16590] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 569.076499][T16592] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 569.078712][T16592] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 569.083068][T16592] vhci_hcd vhci_hcd.0: Device attached [ 569.350842][ T6237] usb 38-1: SetAddress Request (86) to port 0 [ 569.356514][ T6237] usb 38-1: new SuperSpeed USB device number 86 using vhci_hcd [ 569.466323][T16593] vhci_hcd: connection reset by peer [ 569.476768][ T1144] vhci_hcd vhci_hcd.0: stop threads [ 569.478600][ T1144] vhci_hcd vhci_hcd.0: release socket [ 569.481450][ T1144] vhci_hcd vhci_hcd.0: disconnect device [ 570.459815][ T5981] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 570.611469][ T5981] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 570.614944][ T5981] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 570.631556][ T5981] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 570.638311][ T5981] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 570.641507][ T5981] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.644662][ T5981] usb 5-1: Product: syz [ 570.650077][ T5981] usb 5-1: Manufacturer: syz [ 570.656932][ T5981] usb 5-1: SerialNumber: syz [ 570.817492][T16606] 9p: Bad value for 'rfdno' [ 570.854714][T16606] kvm: kvm [16605]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0x186) = 0x8000 [ 570.876848][T16604] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2683'. [ 571.830272][T16560] usblp0:failed reading printer status (-110) [ 571.847575][ T6014] usb 9-1: USB disconnect, device number 14 [ 571.852246][ T6014] usblp0: removed [ 572.080236][ T6052] usb 44-1: device descriptor read/8, error -110 [ 572.188904][T16625] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 572.191109][T16625] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 572.207536][T16628] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 572.210394][T16628] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 572.213863][T16625] vhci_hcd vhci_hcd.0: Device attached [ 572.220477][T16628] vhci_hcd vhci_hcd.0: Device attached [ 572.329997][ T6052] usb 44-1: SetAddress Request (84) to port 0 [ 572.332925][ T6052] usb 44-1: new SuperSpeed USB device number 84 using vhci_hcd [ 572.479901][ T60] usb 46-1: SetAddress Request (87) to port 0 [ 572.482128][ T60] usb 46-1: new SuperSpeed USB device number 87 using vhci_hcd [ 572.658210][T16629] vhci_hcd: connection reset by peer [ 572.661016][ T6101] vhci_hcd vhci_hcd.3: stop threads [ 572.662964][ T6101] vhci_hcd vhci_hcd.3: release socket [ 572.665178][ T6101] vhci_hcd vhci_hcd.3: disconnect device [ 572.806810][T16626] vhci_hcd: connection reset by peer [ 572.811899][ T1164] vhci_hcd vhci_hcd.4: stop threads [ 572.814221][ T1164] vhci_hcd vhci_hcd.4: release socket [ 572.816939][ T1164] vhci_hcd vhci_hcd.4: disconnect device [ 573.251152][T16635] netlink: 'syz.3.2690': attribute type 8 has an invalid length. [ 573.341208][ T5981] usb 5-1: 0:2 : does not exist [ 573.360614][ T5981] usb 5-1: USB disconnect, device number 26 [ 573.392605][T11370] udevd[11370]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 573.896266][T16643] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 573.898490][T16643] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 573.902217][T16643] vhci_hcd vhci_hcd.0: Device attached [ 574.010845][T16649] netlink: 'syz.0.2692': attribute type 13 has an invalid length. [ 574.154344][T16644] vhci_hcd: connection closed [ 574.155595][ T7310] vhci_hcd vhci_hcd.5: stop threads [ 574.164180][ T7310] vhci_hcd vhci_hcd.5: release socket [ 574.171553][ T7310] vhci_hcd vhci_hcd.5: disconnect device [ 574.312674][T16651] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 574.315390][T16651] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 574.318970][T16651] vhci_hcd vhci_hcd.0: Device attached [ 574.339272][T16649] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 574.773668][ T6237] usb 38-1: device descriptor read/8, error -110 [ 574.992638][T16657] dlm: no local IP address has been set [ 574.995074][T16657] dlm: cannot start dlm midcomms -107 [ 575.027389][T16657] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 575.170641][ T6237] usb usb38-port1: attempt power cycle [ 575.281263][T16652] vhci_hcd: connection closed [ 575.285966][ T12] vhci_hcd vhci_hcd.4: stop threads [ 575.321533][T16661] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2695'. [ 575.335665][ T12] vhci_hcd vhci_hcd.4: release socket [ 575.373370][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 575.740399][ T6237] usb usb38-port1: unable to enumerate USB device [ 576.002490][ T40] kauditd_printk_skb: 478 callbacks suppressed [ 576.002506][ T40] audit: type=1326 audit(1766945992.203:24990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16664 comm="syz.0.2696" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 576.014771][ T40] audit: type=1326 audit(1766945992.213:24991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16664 comm="syz.0.2696" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 576.040520][ T40] audit: type=1326 audit(1766945992.243:24992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16664 comm="syz.0.2696" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 576.049651][ T40] audit: type=1326 audit(1766945992.243:24993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16664 comm="syz.0.2696" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 576.058878][ T40] audit: type=1326 audit(1766945992.243:24994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16664 comm="syz.0.2696" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 576.068856][ T40] audit: type=1326 audit(1766945992.243:24995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16664 comm="syz.0.2696" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 576.079254][ T40] audit: type=1326 audit(1766945992.243:24996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16664 comm="syz.0.2696" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 576.119046][ T40] audit: type=1326 audit(1766945992.313:24997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16664 comm="syz.0.2696" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 576.131506][ T40] audit: type=1326 audit(1766945992.313:24998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16664 comm="syz.0.2696" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 576.342641][T16677] dlm: no local IP address has been set [ 576.344551][T16677] dlm: cannot start dlm midcomms -107 [ 576.362341][T16677] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 576.373295][T16677] netlink: 'syz.0.2700': attribute type 12 has an invalid length. [ 576.401547][T16679] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2707'. [ 577.289591][T16688] dlm: no local IP address has been set [ 577.291494][T16688] dlm: cannot start dlm midcomms -107 [ 577.304595][T16688] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 577.322874][T16688] netlink: 'syz.0.2702': attribute type 12 has an invalid length. [ 577.364008][T16692] netlink: 'syz.4.2703': attribute type 8 has an invalid length. [ 577.429915][ T6052] usb 44-1: device descriptor read/8, error -110 [ 577.509967][ T60] usb 46-1: device descriptor read/8, error -110 [ 577.540191][ T6052] usb usb44-port1: attempt power cycle [ 577.805117][T16697] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 577.807639][T16697] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 577.820220][T16697] vhci_hcd vhci_hcd.0: Device attached [ 577.979937][ T60] usb 46-1: SetAddress Request (88) to port 0 [ 577.999063][ T60] usb 46-1: new SuperSpeed USB device number 88 using vhci_hcd [ 578.025917][T16705] netlink: 'syz.3.2706': attribute type 13 has an invalid length. [ 578.051369][T16705] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 578.512930][T16706] netlink: 'syz.5.2705': attribute type 13 has an invalid length. [ 578.543062][T16706] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 578.641382][T16711] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.738874][T16711] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.759051][T16698] vhci_hcd: connection closed [ 578.759245][ T1164] vhci_hcd vhci_hcd.4: stop threads [ 578.767856][ T1164] vhci_hcd vhci_hcd.4: release socket [ 578.773199][ T1164] vhci_hcd vhci_hcd.4: disconnect device [ 578.802988][T16711] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.879277][T16711] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.074789][ T1144] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.077612][ T1144] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.135784][ T1144] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.143458][ T1144] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.146092][ T60] usb 46-1: enqueue for inactive port 0 [ 579.634517][ T60] usb usb46-port1: attempt power cycle [ 579.705229][ T6052] usb usb44-port1: unable to enumerate USB device [ 579.892010][T16719] netlink: 'syz.0.2710': attribute type 13 has an invalid length. [ 579.904526][T16719] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 580.270422][ T60] usb usb46-port1: unable to enumerate USB device [ 580.834900][T16725] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2713'. [ 581.170213][T16727] netlink: 'syz.5.2711': attribute type 10 has an invalid length. [ 581.579934][T16734] dlm: no local IP address has been set [ 581.582378][T16734] dlm: cannot start dlm midcomms -107 [ 581.594762][T16723] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 581.713631][T16734] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 581.721308][T16734] netlink: 'syz.3.2714': attribute type 12 has an invalid length. [ 582.654770][T16756] futex_wake_op: syz.5.2720 tries to shift op by -1; fix this program [ 582.692228][ T40] audit: type=1326 audit(1766945998.873:24999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16754 comm="syz.5.2720" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 582.699058][ T40] audit: type=1326 audit(1766945998.873:25000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16754 comm="syz.5.2720" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf707d5a7 code=0x7ffc0000 [ 582.710978][T16758] dlm: no local IP address has been set [ 582.712812][T16759] netlink: 'syz.0.2721': attribute type 13 has an invalid length. [ 582.713259][T16758] dlm: cannot start dlm midcomms -107 [ 582.720588][T16759] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 582.737816][T16758] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 582.788606][ T40] audit: type=1326 audit(1766945998.873:25001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16754 comm="syz.5.2720" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 582.798483][ T40] audit: type=1326 audit(1766945998.963:25002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16754 comm="syz.5.2720" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 582.816506][ T40] audit: type=1326 audit(1766945998.963:25003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16754 comm="syz.5.2720" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf707d5a7 code=0x7ffc0000 [ 582.831275][ T40] audit: type=1326 audit(1766945998.963:25004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16754 comm="syz.5.2720" exe="/syz-executor" sig=0 arch=40000003 syscall=385 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 582.885565][ T40] audit: type=1326 audit(1766945998.963:25005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16754 comm="syz.5.2720" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 582.915069][ T40] audit: type=1326 audit(1766945998.963:25006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16754 comm="syz.5.2720" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf707d5a7 code=0x7ffc0000 [ 582.930250][ T40] audit: type=1326 audit(1766945998.963:25007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16754 comm="syz.5.2720" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 582.941383][ T40] audit: type=1326 audit(1766945998.973:25008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16754 comm="syz.5.2720" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 583.009907][T16764] netlink: 'syz.3.2723': attribute type 13 has an invalid length. [ 583.834339][T16767] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2724'. [ 584.009483][T16774] FAULT_INJECTION: forcing a failure. [ 584.009483][T16774] name failslab, interval 1, probability 0, space 0, times 0 [ 584.014583][T16774] CPU: 1 UID: 0 PID: 16774 Comm: syz.0.2726 Tainted: G L syzkaller #0 PREEMPT(full) [ 584.014602][T16774] Tainted: [L]=SOFTLOCKUP [ 584.014606][T16774] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 584.014614][T16774] Call Trace: [ 584.014618][T16774] [ 584.014623][T16774] dump_stack_lvl+0x16c/0x1f0 [ 584.014665][T16774] should_fail_ex+0x512/0x640 [ 584.014686][T16774] ? fs_reclaim_acquire+0xae/0x150 [ 584.014705][T16774] should_failslab+0xc2/0x120 [ 584.014723][T16774] __kmalloc_noprof+0xeb/0x910 [ 584.014738][T16774] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 584.014757][T16774] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 584.014772][T16774] tomoyo_realpath_from_path+0xc2/0x6e0 [ 584.014789][T16774] ? tomoyo_profile+0x47/0x60 [ 584.014806][T16774] tomoyo_path_number_perm+0x245/0x580 [ 584.014819][T16774] ? tomoyo_path_number_perm+0x237/0x580 [ 584.014833][T16774] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 584.014859][T16774] ? find_held_lock+0x2b/0x80 [ 584.014875][T16774] ? hook_file_ioctl_common+0x144/0x410 [ 584.014891][T16774] ? __fget_files+0x20e/0x3c0 [ 584.014907][T16774] ? __fput_deferred+0x430/0x480 [ 584.014921][T16774] security_file_ioctl_compat+0x9b/0x240 [ 584.014936][T16774] __ia32_compat_sys_ioctl+0xc3/0x370 [ 584.014952][T16774] __do_fast_syscall_32+0xe8/0x680 [ 584.014975][T16774] do_fast_syscall_32+0x32/0x80 [ 584.014985][T16774] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 584.015000][T16774] RIP: 0023:0xf704d579 [ 584.015009][T16774] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 584.015020][T16774] RSP: 002b:00000000f543d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 584.015032][T16774] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080089203 [ 584.015039][T16774] RDX: 0000000080000600 RSI: 0000000000000000 RDI: 0000000000000000 [ 584.015046][T16774] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 584.015052][T16774] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 584.015059][T16774] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 584.015072][T16774] [ 584.015078][T16774] ERROR: Out of memory at tomoyo_realpath_from_path. [ 584.545370][T16802] dlm: no local IP address has been set [ 584.551167][T16802] dlm: cannot start dlm midcomms -107 [ 584.580465][T16802] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 584.868895][T16804] 9p: Bad value for 'wfdno' [ 584.984616][T16804] kvm: kvm [16803]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0x186) = 0x8000 [ 585.549925][ T60] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 585.603823][T16816] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 585.606770][T16816] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 585.647363][T16816] vhci_hcd vhci_hcd.0: Device attached [ 585.704435][ T60] usb 8-1: config 0 has no interfaces? [ 585.708789][ T60] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 585.718183][ T60] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 585.721907][ T60] usb 8-1: Product: syz [ 585.729920][ T60] usb 8-1: Manufacturer: syz [ 585.734389][ T60] usb 8-1: config 0 descriptor?? [ 585.826771][T16821] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 585.829661][T16821] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 585.834333][T16821] vhci_hcd vhci_hcd.0: Device attached [ 585.902389][ T6014] usb 45-1: new low-speed USB device number 23 using vhci_hcd [ 585.909652][T16825] futex_wake_op: syz.5.2738 tries to shift op by -1; fix this program [ 585.961651][ T6052] usb 8-1: USB disconnect, device number 25 [ 585.990196][T16817] vhci_hcd: connection reset by peer [ 585.993590][ T6137] vhci_hcd vhci_hcd.4: stop threads [ 585.995615][ T6137] vhci_hcd vhci_hcd.4: release socket [ 585.998151][ T6137] vhci_hcd vhci_hcd.4: disconnect device [ 586.119847][ T60] usb 38-1: SetAddress Request (90) to port 0 [ 586.122739][ T60] usb 38-1: new SuperSpeed USB device number 90 using vhci_hcd [ 586.254382][T16822] vhci_hcd: connection reset by peer [ 586.256602][ T6134] vhci_hcd vhci_hcd.0: stop threads [ 586.259014][ T6134] vhci_hcd vhci_hcd.0: release socket [ 586.261491][ T6134] vhci_hcd vhci_hcd.0: disconnect device [ 586.664514][T16839] netlink: 'syz.3.2741': attribute type 10 has an invalid length. [ 586.724251][T16842] 9p: Bad value for 'wfdno' [ 586.820243][T16842] kvm: kvm [16841]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0x186) = 0x8000 [ 587.096008][T16854] dlm: no local IP address has been set [ 587.098576][T16854] dlm: cannot start dlm midcomms -107 [ 587.113198][T16854] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 587.938662][T16875] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2751'. [ 587.939569][T16877] futex_wake_op: syz.5.2752 tries to shift op by -1; fix this program [ 587.950569][ T40] kauditd_printk_skb: 480 callbacks suppressed [ 587.950586][ T40] audit: type=1326 audit(1766946004.143:25489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16874 comm="syz.5.2752" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 587.979869][ T40] audit: type=1326 audit(1766946004.143:25490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16874 comm="syz.5.2752" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf707d5a7 code=0x7ffc0000 [ 587.987246][ T40] audit: type=1326 audit(1766946004.143:25491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16874 comm="syz.5.2752" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 588.003901][ T40] audit: type=1326 audit(1766946004.143:25492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16874 comm="syz.5.2752" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 588.016678][ T40] audit: type=1326 audit(1766946004.153:25493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16874 comm="syz.5.2752" exe="/syz-executor" sig=0 arch=40000003 syscall=385 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 588.017043][T16879] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 588.019093][T16883] 9p: Bad value for 'wfdno' [ 588.028727][T16879] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 588.032855][T16879] vhci_hcd vhci_hcd.0: Device attached [ 588.049630][T16882] vhci_hcd: connection closed [ 588.052830][ T40] audit: type=1326 audit(1766946004.153:25494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16874 comm="syz.5.2752" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 588.053528][ T6137] vhci_hcd vhci_hcd.3: stop threads [ 588.069831][ T40] audit: type=1326 audit(1766946004.153:25495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16874 comm="syz.5.2752" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 588.072138][ T6137] vhci_hcd vhci_hcd.3: release socket [ 588.077968][ T40] audit: type=1326 audit(1766946004.153:25496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16874 comm="syz.5.2752" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 588.077999][ T40] audit: type=1326 audit(1766946004.153:25497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16874 comm="syz.5.2752" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 588.078054][ T40] audit: type=1326 audit(1766946004.153:25498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16874 comm="syz.5.2752" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 588.081264][ T6137] vhci_hcd vhci_hcd.3: disconnect device [ 588.089598][T16883] kvm: kvm [16881]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0x186) = 0x8000 [ 588.794314][T16893] ALSA: mixer_oss: invalid OSS volume '' [ 589.524342][T16906] dlm: no local IP address has been set [ 589.526830][T16906] dlm: cannot start dlm midcomms -107 [ 589.539293][T16906] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 589.947120][T16919] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2765'. [ 589.958035][ T64] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 589.966404][ T64] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 589.971589][ T64] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 589.977642][ T64] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 589.981298][ T64] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 590.041722][T16918] wg2 speed is unknown, defaulting to 1000 [ 590.180437][T16925] input: syz1 as /devices/virtual/input/input14 [ 590.357836][T16934] 9p: Bad value for 'wfdno' [ 590.409657][T16934] kvm: kvm [16933]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0x186) = 0x8000 [ 590.461089][T16918] chnl_net:caif_netlink_parms(): no params data found [ 590.605622][T16918] bridge0: port 1(bridge_slave_0) entered blocking state [ 590.613340][T16918] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.616836][T16918] bridge_slave_0: entered allmulticast mode [ 590.621340][T16918] bridge_slave_0: entered promiscuous mode [ 590.631555][T16918] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.635103][T16918] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.638381][T16918] bridge_slave_1: entered allmulticast mode [ 590.643353][T16918] bridge_slave_1: entered promiscuous mode [ 590.671745][T16918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 590.742460][T16918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 590.793206][T16918] team0: Port device team_slave_0 added [ 590.798532][T16918] team0: Port device team_slave_1 added [ 590.822647][T16918] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 590.825675][T16918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 590.835744][T16918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 590.841052][T16918] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 590.843597][T16918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 590.853326][T16918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 590.916454][T16918] hsr_slave_0: entered promiscuous mode [ 590.923956][T16918] hsr_slave_1: entered promiscuous mode [ 590.927181][T16918] debugfs: 'hsr0' already exists in 'hsr' [ 590.930571][T16918] Cannot create hsr debugfs directory [ 591.041304][ T6014] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 591.482785][T16951] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 591.485336][T16951] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 591.507573][T16951] vhci_hcd vhci_hcd.0: Device attached [ 591.583812][ T60] usb 38-1: device descriptor read/8, error -110 [ 592.001231][T16952] vhci_hcd: connection closed [ 592.012825][ T6101] vhci_hcd vhci_hcd.5: stop threads [ 592.017419][ T6101] vhci_hcd vhci_hcd.5: release socket [ 592.028504][ T6101] vhci_hcd vhci_hcd.5: disconnect device [ 592.039874][ T9848] usb 48-1: SetAddress Request (67) to port 0 [ 592.042646][ T9848] usb 48-1: new SuperSpeed USB device number 67 using vhci_hcd [ 592.066951][ T9848] usb 48-1: enqueue for inactive port 0 [ 592.089802][ T5944] Bluetooth: hci1: command tx timeout [ 592.185682][T16970] loop9: detected capacity change from 0 to 7 [ 592.208456][T11370] Dev loop9: unable to read RDB block 7 [ 592.211615][T11370] loop9: AHDI p4 [ 592.213040][T11370] loop9: partition table partially beyond EOD, truncated [ 592.220605][T16970] Dev loop9: unable to read RDB block 7 [ 592.223137][T16970] loop9: AHDI p4 [ 592.224811][T16970] loop9: partition table partially beyond EOD, truncated [ 592.269631][ T6134] dvmrp0 (unregistering): left allmulticast mode [ 592.341389][ T6134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 592.349565][ T6134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 592.357289][ T6134] bond0 (unregistering): Released all slaves [ 592.394785][ T60] usb usb38-port1: attempt power cycle [ 592.460799][ T9848] usb usb48-port1: attempt power cycle [ 592.483567][ T6134] bond1 (unregistering): Released all slaves [ 592.557491][T16974] netlink: 'syz.3.2772': attribute type 13 has an invalid length. [ 592.561389][T16974] netlink: 'syz.3.2772': attribute type 27 has an invalid length. [ 592.641054][ T6134] bond2 (unregistering): Released all slaves [ 592.667721][ T6134] bond3 (unregistering): Released all slaves [ 592.993264][ T60] usb usb38-port1: unable to enumerate USB device [ 593.020294][ T9848] usb usb48-port1: unable to enumerate USB device [ 593.167358][T16982] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 593.170339][T16982] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 593.216338][T16982] vhci_hcd vhci_hcd.0: Device attached [ 593.231549][T16982] fuse: Bad value for 'fd' [ 593.271062][T16988] futex_wake_op: syz.0.2775 tries to shift op by -1; fix this program [ 593.287120][ T40] kauditd_printk_skb: 252 callbacks suppressed [ 593.287138][ T40] audit: type=1326 audit(1766946009.473:25751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16985 comm="syz.0.2775" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 593.317327][ T40] audit: type=1326 audit(1766946009.473:25752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16985 comm="syz.0.2775" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 593.329937][ T40] audit: type=1326 audit(1766946009.473:25753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16985 comm="syz.0.2775" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf704d5a7 code=0x7ffc0000 [ 593.345439][ T40] audit: type=1326 audit(1766946009.473:25754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16985 comm="syz.0.2775" exe="/syz-executor" sig=0 arch=40000003 syscall=385 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 593.355438][ T40] audit: type=1326 audit(1766946009.473:25755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16985 comm="syz.0.2775" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 593.365645][ T40] audit: type=1326 audit(1766946009.473:25756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16985 comm="syz.0.2775" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 593.392522][ T40] audit: type=1326 audit(1766946009.473:25757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16985 comm="syz.0.2775" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 593.401101][ T40] audit: type=1326 audit(1766946009.473:25758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16985 comm="syz.0.2775" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 593.409332][ T40] audit: type=1326 audit(1766946009.473:25759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16985 comm="syz.0.2775" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 593.417152][ T40] audit: type=1326 audit(1766946009.483:25760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16985 comm="syz.0.2775" exe="/syz-executor" sig=0 arch=40000003 syscall=313 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 593.555666][ T9848] usb 48-1: SetAddress Request (71) to port 0 [ 593.557922][ T9848] usb 48-1: new SuperSpeed USB device number 71 using vhci_hcd [ 593.931830][T16983] vhci_hcd: connection reset by peer [ 593.935660][ T9568] vhci_hcd vhci_hcd.5: stop threads [ 593.938028][ T9568] vhci_hcd vhci_hcd.5: release socket [ 593.941034][ T9568] vhci_hcd vhci_hcd.5: disconnect device [ 593.981899][T16918] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 593.990063][T16918] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 593.998731][T16918] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 594.012097][T16918] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 594.142149][T16918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 594.149902][ T5944] Bluetooth: hci1: command tx timeout [ 594.161249][T16918] 8021q: adding VLAN 0 to HW filter on device team0 [ 594.202160][ T6137] bridge0: port 1(bridge_slave_0) entered blocking state [ 594.205337][ T6137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 594.210484][ T6137] bridge0: port 2(bridge_slave_1) entered blocking state [ 594.213665][ T6137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 594.736767][T17022] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2779'. [ 594.742733][T16918] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 595.019735][T17028] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 595.022155][T17028] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 595.035453][T17028] vhci_hcd vhci_hcd.0: Device attached [ 595.176536][T17033] fuse: Bad value for 'rootmode' [ 595.469017][T16918] veth0_vlan: entered promiscuous mode [ 595.484813][T16918] veth1_vlan: entered promiscuous mode [ 595.574481][T16918] veth0_macvtap: entered promiscuous mode [ 595.589270][T16918] veth1_macvtap: entered promiscuous mode [ 595.596387][T17029] vhci_hcd: connection closed [ 595.596854][ T46] vhci_hcd vhci_hcd.5: stop threads [ 595.602416][ T46] vhci_hcd vhci_hcd.5: release socket [ 595.608061][ T46] vhci_hcd vhci_hcd.5: disconnect device [ 595.631705][T16918] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 595.640373][T16918] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 595.650843][ T9568] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.659913][ T9568] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.712643][ T9568] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.716527][ T9568] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.025909][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 596.030618][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 596.057058][ T171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 596.059681][ T171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 596.150407][T17046] futex_wake_op: syz.4.2784 tries to shift op by -1; fix this program [ 596.196543][T17047] netlink: 'syz.0.2783': attribute type 13 has an invalid length. [ 596.199135][T17047] netlink: 'syz.0.2783': attribute type 27 has an invalid length. [ 596.229883][ T5944] Bluetooth: hci1: command tx timeout [ 597.323098][ T6134] hsr_slave_0: left promiscuous mode [ 597.329278][ T6134] hsr_slave_1: left promiscuous mode [ 597.331635][ T6134] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 597.335650][ T6134] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 597.370732][ T6134] pim6reg (unregistering): left allmulticast mode [ 598.010977][T17083] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 598.013932][T17083] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 598.017405][T17083] vhci_hcd vhci_hcd.0: Device attached [ 598.052357][T17086] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 598.054777][T17086] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 598.057803][T17086] vhci_hcd vhci_hcd.0: Device attached [ 598.279203][T17084] vhci_hcd: connection closed [ 598.280248][ T61] vhci_hcd vhci_hcd.4: stop threads [ 598.284942][ T61] vhci_hcd vhci_hcd.4: release socket [ 598.286902][ T61] vhci_hcd vhci_hcd.4: disconnect device [ 598.290062][ T60] usb 37-1: new low-speed USB device number 24 using vhci_hcd [ 598.300947][ T6014] usb 46-1: enqueue for inactive port 0 [ 598.308757][T17087] vhci_hcd: connection reset by peer [ 598.310146][ T5944] Bluetooth: hci1: command tx timeout [ 598.321650][ T61] vhci_hcd vhci_hcd.0: stop threads [ 598.324070][ T61] vhci_hcd vhci_hcd.0: release socket [ 598.326568][ T61] vhci_hcd vhci_hcd.0: disconnect device [ 598.346731][ T6134] team_slave_1 (unregistering): left allmulticast mode [ 598.350716][ T6134] team0 (unregistering): Port device team_slave_1 removed [ 598.402837][ T6134] team_slave_0 (unregistering): left allmulticast mode [ 598.406882][ T6134] team0 (unregistering): Port device team_slave_0 removed [ 598.630014][ T9848] usb 48-1: device descriptor read/8, error -110 [ 598.830849][ T6014] usb usb46-port1: attempt power cycle [ 599.020689][ T9848] usb usb48-port1: attempt power cycle [ 599.092822][ T6134] team0 (unregistering): left allmulticast mode [ 599.500402][ T6014] usb usb46-port1: unable to enumerate USB device [ 599.920983][ T9848] usb usb48-port1: unable to enumerate USB device [ 599.924376][T17110] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 599.926354][T17110] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 599.930983][T17110] vhci_hcd vhci_hcd.0: Device attached [ 600.174686][T17111] vhci_hcd: connection closed [ 600.175363][ T7310] vhci_hcd vhci_hcd.4: stop threads [ 600.179155][ T7310] vhci_hcd vhci_hcd.4: release socket [ 600.181404][ T7310] vhci_hcd vhci_hcd.4: disconnect device [ 600.223093][ T6237] usb 46-1: enqueue for inactive port 0 [ 600.380746][ T6099] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 600.560124][ T6099] usb 10-1: Using ep0 maxpacket: 16 [ 600.567359][ T6099] usb 10-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 600.576252][ T6099] usb 10-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 600.586380][ T6099] usb 10-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 600.596544][ T6099] usb 10-1: config 1 interface 0 has no altsetting 0 [ 600.608187][ T6099] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 600.613245][ T6099] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.616083][ T6099] usb 10-1: Product: syz [ 600.617858][ T6099] usb 10-1: Manufacturer: syz [ 600.620657][ T6099] usb 10-1: SerialNumber: syz [ 600.669906][T15855] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 600.721553][ T6237] usb usb46-port1: attempt power cycle [ 600.819958][T15855] usb 5-1: Using ep0 maxpacket: 8 [ 600.823963][T15855] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 600.826962][T15855] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.833123][T15855] pvrusb2: Hardware description: Terratec Grabster AV400 [ 600.836249][T15855] pvrusb2: ********** [ 600.838069][T15855] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 600.843091][T15855] pvrusb2: Important functionality might not be entirely working. [ 600.846495][T15855] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 600.851771][T15855] pvrusb2: ********** [ 601.036677][ T2488] pvrusb2: Invalid write control endpoint [ 601.055926][T17118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 601.059674][T17118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 601.080705][ T2488] pvrusb2: Invalid write control endpoint [ 601.083279][ T2488] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 601.087747][ T2488] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 601.091091][ T2488] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 601.095470][ T2488] pvrusb2: Device being rendered inoperable [ 601.098120][ T2488] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 601.102682][ T2488] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 601.112326][ T2488] pvrusb2: Attached sub-driver cx25840 [ 601.114853][ T2488] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 601.119241][ T2488] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 601.157217][T17139] dlm: no local IP address has been set [ 601.161881][T17139] dlm: cannot start dlm midcomms -107 [ 601.187960][T17139] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 601.195945][T17139] netlink: 'syz.4.2807': attribute type 12 has an invalid length. [ 601.202153][T17141] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.204864][T17141] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.238114][T17124] pvrusb2: Killing an I2C write to 6 that is too large (desired=63 limit=61) [ 601.261721][ T6031] usb 5-1: USB disconnect, device number 27 [ 601.263416][T17141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 601.272537][T17141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 601.300507][ T6237] usb usb46-port1: unable to enumerate USB device [ 601.384441][ T61] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.387576][ T61] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.392189][ T61] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.396328][ T61] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.502578][T17145] tipc: Failed to remove unknown binding: 66,1,1/0:148418904/148418906 [ 601.512430][T17145] tipc: Failed to remove unknown binding: 66,1,1/0:148418904/148418906 [ 601.515454][T17145] tipc: Failed to remove unknown binding: 66,1,1/0:148418904/148418906 [ 602.057161][T17154] gtp0: entered promiscuous mode [ 602.189945][ T7488] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 602.341387][ T7488] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 602.346467][ T7488] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 602.352274][ T7488] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 602.356382][ T7488] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.364661][T17153] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 602.372451][ T7488] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 602.568661][ T9846] usb 9-1: USB disconnect, device number 15 [ 603.149826][ T7488] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 603.156223][ T6099] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 603.173168][ T6099] usb 10-1: USB disconnect, device number 8 [ 603.181356][ T6099] usblp0: removed [ 603.325780][ T7488] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 603.329349][ T7488] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 603.337379][ T7488] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 603.346160][ T7488] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.353631][T17165] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 603.364219][ T7488] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 603.565962][ T7488] usb 5-1: USB disconnect, device number 28 [ 603.622242][T11501] udevd[11501]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 603.659926][ T60] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 603.979875][ T6014] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 604.141311][ T6014] usb 8-1: Using ep0 maxpacket: 8 [ 604.147794][ T6014] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 604.154088][ T6014] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.164800][ T6014] pvrusb2: Hardware description: Terratec Grabster AV400 [ 604.168130][ T6014] pvrusb2: ********** [ 604.170482][ T6014] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 604.175654][ T6014] pvrusb2: Important functionality might not be entirely working. [ 604.179381][ T6014] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 604.185141][ T6014] pvrusb2: ********** [ 604.430359][T17185] overlay: Unknown parameter 'subj_type' [ 604.502523][T17186] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 604.554011][T17186] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 604.558349][T17186] overlayfs: failed to look up (tracing) for ino (-66) [ 605.272846][ T2488] pvrusb2: Invalid write control endpoint [ 605.279492][ T9846] usb 8-1: USB disconnect, device number 26 [ 605.301302][ T2488] pvrusb2: Invalid write control endpoint [ 605.304449][ T2488] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 605.307695][ T2488] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 605.311417][ T2488] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 605.315660][ T2488] pvrusb2: Device being rendered inoperable [ 605.318213][ T2488] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 605.322877][ T2488] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 605.326754][ T2488] pvrusb2: Attached sub-driver cx25840 [ 605.329082][ T2488] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 605.334043][ T2488] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 606.609796][T17246] dlm: no local IP address has been set [ 606.611846][T17246] dlm: cannot start dlm midcomms -107 [ 606.622239][T17246] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 606.627503][T17246] netlink: 'syz.5.2835': attribute type 12 has an invalid length. [ 606.903851][T17258] FAULT_INJECTION: forcing a failure. [ 606.903851][T17258] name failslab, interval 1, probability 0, space 0, times 0 [ 606.909118][T17258] CPU: 2 UID: 0 PID: 17258 Comm: syz.3.2840 Tainted: G L syzkaller #0 PREEMPT(full) [ 606.909147][T17258] Tainted: [L]=SOFTLOCKUP [ 606.909153][T17258] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 606.909164][T17258] Call Trace: [ 606.909171][T17258] [ 606.909178][T17258] dump_stack_lvl+0x16c/0x1f0 [ 606.909210][T17258] should_fail_ex+0x512/0x640 [ 606.909231][T17258] ? fs_reclaim_acquire+0xae/0x150 [ 606.909260][T17258] should_failslab+0xc2/0x120 [ 606.909287][T17258] __kmalloc_noprof+0xeb/0x910 [ 606.909307][T17258] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 606.909336][T17258] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 606.909359][T17258] tomoyo_realpath_from_path+0xc2/0x6e0 [ 606.909386][T17258] ? tomoyo_profile+0x47/0x60 [ 606.909414][T17258] tomoyo_path_number_perm+0x245/0x580 [ 606.909435][T17258] ? tomoyo_path_number_perm+0x237/0x580 [ 606.909457][T17258] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 606.909502][T17258] ? find_held_lock+0x2b/0x80 [ 606.909525][T17258] ? hook_file_ioctl_common+0x144/0x410 [ 606.909552][T17258] ? __fget_files+0x20e/0x3c0 [ 606.909576][T17258] ? __fput_deferred+0x430/0x480 [ 606.909598][T17258] security_file_ioctl_compat+0x9b/0x240 [ 606.909622][T17258] __ia32_compat_sys_ioctl+0xc3/0x370 [ 606.909647][T17258] __do_fast_syscall_32+0xe8/0x680 [ 606.909678][T17258] do_fast_syscall_32+0x32/0x80 [ 606.909694][T17258] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 606.909716][T17258] RIP: 0023:0xf7ff7579 [ 606.909745][T17258] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 606.909763][T17258] RSP: 002b:00000000f54c555c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 606.909780][T17258] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000009208 [ 606.909791][T17258] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 606.909801][T17258] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 606.909812][T17258] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 606.909822][T17258] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 606.909844][T17258] [ 607.003499][T17258] ERROR: Out of memory at tomoyo_realpath_from_path. [ 607.144780][T17267] hfsplus: unable to find HFS+ superblock [ 607.151842][T17266] program syz.4.2841 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 607.277242][T17266] wg2 speed is unknown, defaulting to 1000 [ 607.472206][T17276] SET target dimension over the limit! [ 607.721912][T17285] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2846'. [ 608.246327][T17299] futex_wake_op: syz.3.2850 tries to shift op by -1; fix this program [ 608.250859][ T40] kauditd_printk_skb: 455 callbacks suppressed [ 608.250874][ T40] audit: type=1326 audit(1766946024.453:26216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17298 comm="syz.3.2850" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7579 code=0x7ffc0000 [ 608.265981][ T40] audit: type=1326 audit(1766946024.463:26217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17298 comm="syz.3.2850" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7ff7579 code=0x7ffc0000 [ 608.276075][ T40] audit: type=1326 audit(1766946024.463:26218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17298 comm="syz.3.2850" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7ff75a7 code=0x7ffc0000 [ 608.284820][ T40] audit: type=1326 audit(1766946024.463:26219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17298 comm="syz.3.2850" exe="/syz-executor" sig=0 arch=40000003 syscall=385 compat=1 ip=0xf7ff7579 code=0x7ffc0000 [ 608.293186][ T40] audit: type=1326 audit(1766946024.463:26220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17298 comm="syz.3.2850" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7579 code=0x7ffc0000 [ 608.302515][ T40] audit: type=1326 audit(1766946024.463:26221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17298 comm="syz.3.2850" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7ff7579 code=0x7ffc0000 [ 608.307569][T17301] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2851'. [ 608.314506][ T40] audit: type=1326 audit(1766946024.463:26222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17298 comm="syz.3.2850" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7579 code=0x7ffc0000 [ 608.314549][ T40] audit: type=1326 audit(1766946024.463:26223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17298 comm="syz.3.2850" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7ff7579 code=0x7ffc0000 [ 608.336376][ T40] audit: type=1326 audit(1766946024.463:26224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17298 comm="syz.3.2850" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7579 code=0x7ffc0000 [ 608.347706][ T40] audit: type=1326 audit(1766946024.463:26225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17298 comm="syz.3.2850" exe="/syz-executor" sig=0 arch=40000003 syscall=313 compat=1 ip=0xf7ff7579 code=0x7ffc0000 [ 608.368603][T17301] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.372521][T17301] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.560944][T17311] netlink: 'syz.4.2852': attribute type 13 has an invalid length. [ 608.566333][T17311] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2852'. [ 610.109811][ T60] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 610.111281][T17336] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 610.148906][T17338] dlm: no local IP address has been set [ 610.151674][T17338] dlm: cannot start dlm midcomms -107 [ 610.220330][T17338] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 610.230529][T17338] netlink: 'syz.5.2860': attribute type 12 has an invalid length. [ 610.390310][ T60] usb 5-1: Using ep0 maxpacket: 16 [ 610.555928][T17341] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2859'. [ 610.571328][ T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 610.574959][ T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 610.578184][ T60] usb 5-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 610.581488][ T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.583351][T17339] netlink: 'syz.4.2859': attribute type 29 has an invalid length. [ 610.587943][ T60] usb 5-1: config 0 descriptor?? [ 610.775412][T17339] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2859'. [ 610.786503][T17339] veth0_to_bridge: entered promiscuous mode [ 610.925711][T17331] veth0_to_bridge: left promiscuous mode [ 611.004873][ T60] kye 0003:0458:5016.0003: control desc unexpectedly large [ 611.018186][ T60] input: HID 0458:5016 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:0458:5016.0003/input/input15 [ 611.097678][ T60] input: HID 0458:5016 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:0458:5016.0003/input/input16 [ 611.131952][ T60] kye 0003:0458:5016.0003: input,hiddev0,hidraw1: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.0-1/input0 [ 611.332251][ T60] usb 5-1: USB disconnect, device number 29 [ 611.707364][T17355] futex_wake_op: syz.3.2863 tries to shift op by -1; fix this program [ 613.185381][T17386] wireguard0: entered promiscuous mode [ 613.187568][T17386] wireguard0: entered allmulticast mode [ 613.320389][T17389] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 613.322590][T17389] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 613.325433][T17389] vhci_hcd vhci_hcd.0: Device attached [ 613.599871][ T9846] usb 48-1: SetAddress Request (75) to port 0 [ 613.602911][ T9846] usb 48-1: new SuperSpeed USB device number 75 using vhci_hcd [ 613.785404][T17396] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2875'. [ 613.881430][T17390] vhci_hcd: connection reset by peer [ 613.884015][ T7310] vhci_hcd vhci_hcd.5: stop threads [ 613.886088][ T7310] vhci_hcd vhci_hcd.5: release socket [ 613.887983][ T7310] vhci_hcd vhci_hcd.5: disconnect device [ 614.118168][T17403] netlink: 'syz.4.2877': attribute type 13 has an invalid length. [ 614.484708][T17410] futex_wake_op: syz.0.2878 tries to shift op by -1; fix this program [ 614.490056][ T40] kauditd_printk_skb: 526 callbacks suppressed [ 614.490071][ T40] audit: type=1326 audit(1766946030.683:26752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17409 comm="syz.0.2878" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 614.504928][ T40] audit: type=1326 audit(1766946030.703:26753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17409 comm="syz.0.2878" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 614.517053][T17403] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 614.517133][ T40] audit: type=1326 audit(1766946030.703:26754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17409 comm="syz.0.2878" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf704d5a7 code=0x7ffc0000 [ 614.538102][ T40] audit: type=1326 audit(1766946030.703:26755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17409 comm="syz.0.2878" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 614.551761][ T40] audit: type=1326 audit(1766946030.713:26756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17409 comm="syz.0.2878" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 614.563028][ T40] audit: type=1326 audit(1766946030.713:26757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17409 comm="syz.0.2878" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf704d5a7 code=0x7ffc0000 [ 614.573829][ T40] audit: type=1326 audit(1766946030.713:26758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17409 comm="syz.0.2878" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 614.584347][ T40] audit: type=1326 audit(1766946030.733:26759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17409 comm="syz.0.2878" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 614.604945][ T40] audit: type=1326 audit(1766946030.733:26760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17409 comm="syz.0.2878" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf704d5a7 code=0x7ffc0000 [ 614.618007][ T40] audit: type=1326 audit(1766946030.733:26761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17409 comm="syz.0.2878" exe="/syz-executor" sig=0 arch=40000003 syscall=385 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 614.918971][T17415] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 614.921882][T17415] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 614.926701][T17415] vhci_hcd vhci_hcd.0: Device attached [ 615.427265][T17423] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2882'. [ 615.455973][T17416] vhci_hcd: connection closed [ 615.456590][ T6134] vhci_hcd vhci_hcd.5: stop threads [ 615.466734][ T6134] vhci_hcd vhci_hcd.5: release socket [ 615.468900][ T6134] vhci_hcd vhci_hcd.5: disconnect device [ 616.346588][T17430] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 616.349344][T17430] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 616.352867][T17430] vhci_hcd vhci_hcd.0: Device attached [ 616.910995][T17431] vhci_hcd: connection closed [ 616.911381][ T61] vhci_hcd vhci_hcd.5: stop threads [ 616.915939][ T61] vhci_hcd vhci_hcd.5: release socket [ 616.916106][T17443] wireguard0: entered promiscuous mode [ 616.919993][ T61] vhci_hcd vhci_hcd.5: disconnect device [ 616.920322][T17443] wireguard0: entered allmulticast mode [ 617.247664][T17455] futex_wake_op: syz.4.2889 tries to shift op by -1; fix this program [ 617.678973][T17465] dlm: no local IP address has been set [ 617.681487][T17465] dlm: cannot start dlm midcomms -107 [ 617.692823][T17465] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 617.699303][T17465] netlink: 'syz.3.2891': attribute type 12 has an invalid length. [ 617.884673][T17472] netlink: 'syz.5.2893': attribute type 13 has an invalid length. [ 617.909900][T17472] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 618.361528][T17474] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2894'. [ 618.602859][T17481] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2897'. [ 618.629863][ T9846] usb 48-1: device descriptor read/8, error -110 [ 618.802403][T17481] netlink: 'syz.0.2897': attribute type 13 has an invalid length. [ 618.810076][T17481] gretap0: refused to change device tx_queue_len [ 618.812469][T17481] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 618.839912][ T9848] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 619.344912][ T6031] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 619.422886][T17495] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 619.425942][T17495] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 619.429564][T17495] vhci_hcd vhci_hcd.0: Device attached [ 619.509837][ T6031] usb 10-1: Using ep0 maxpacket: 8 [ 619.517967][ T6031] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 619.530613][ T6031] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 619.534123][ T6031] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 619.537508][ T6031] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 619.542126][ T6031] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 619.546990][ T6031] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 619.556958][ T6031] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.661621][T17503] dlm: no local IP address has been set [ 619.663497][T17503] dlm: cannot start dlm midcomms -107 [ 619.689839][ T6014] usb 37-1: new low-speed USB device number 25 using vhci_hcd [ 619.693841][T17503] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 619.700632][T17503] netlink: 'syz.3.2902': attribute type 12 has an invalid length. [ 619.830688][ T9846] usb usb48-port1: attempt power cycle [ 619.895699][T17505] ip6erspan0: entered promiscuous mode [ 619.950069][ T6031] usb 10-1: usb_control_msg returned -32 [ 619.955110][ T6031] usbtmc 10-1:16.0: can't read capabilities [ 619.989719][T17496] vhci_hcd: connection reset by peer [ 619.995739][ T46] vhci_hcd vhci_hcd.0: stop threads [ 619.998266][ T46] vhci_hcd vhci_hcd.0: release socket [ 620.001829][ T46] vhci_hcd vhci_hcd.0: disconnect device [ 620.172142][T17507] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 620.174895][T17507] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 620.178626][T17507] vhci_hcd vhci_hcd.0: Device attached [ 620.314040][T17510] netlink: 2012 bytes leftover after parsing attributes in process `syz.5.2899'. [ 620.319930][T17510] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2899'. [ 620.359938][T17510] usbtmc 10-1:16.0: usb_control_msg returned -32 [ 620.440914][T17508] vhci_hcd: connection closed [ 620.441711][ T12] vhci_hcd vhci_hcd.4: stop threads [ 620.449873][ T12] vhci_hcd vhci_hcd.4: release socket [ 620.452505][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 620.470361][ T60] usb 46-1: enqueue for inactive port 0 [ 620.532051][ T9846] usb usb48-port1: unable to enumerate USB device [ 620.724386][T17514] netlink: 'syz.3.2904': attribute type 1 has an invalid length. [ 620.727021][T17514] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2904'. [ 620.970403][ T60] usb usb46-port1: attempt power cycle [ 621.410928][T17530] netlink: 'syz.4.2908': attribute type 13 has an invalid length. [ 621.435280][T17530] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 621.592775][ T60] usb usb46-port1: unable to enumerate USB device [ 622.019380][ T60] usb 10-1: USB disconnect, device number 9 [ 622.419906][ T60] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 622.579985][ T60] usb 10-1: Using ep0 maxpacket: 16 [ 622.584481][ T60] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 622.589341][ T60] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 622.594030][ T60] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 622.599937][ T60] usb 10-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 622.604916][ T60] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.618787][ T60] usb 10-1: config 0 descriptor?? [ 622.801387][T17552] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 622.803616][T17552] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 622.806563][T17552] vhci_hcd vhci_hcd.0: Device attached [ 622.996293][T17553] vhci_hcd: connection closed [ 622.996549][ T1164] vhci_hcd vhci_hcd.3: stop threads [ 623.000105][ T1164] vhci_hcd vhci_hcd.3: release socket [ 623.002101][ T1164] vhci_hcd vhci_hcd.3: disconnect device [ 623.034420][ T60] input: HID 05ac:8241 as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/0003:05AC:8241.0004/input/input17 [ 623.120687][ T60] appleir 0003:05AC:8241.0004: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.5-1/input0 [ 623.250866][ T60] usb 10-1: USB disconnect, device number 10 [ 623.481528][T17548] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 623.484206][T17548] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 623.530540][T17548] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 623.533204][T17548] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 623.536785][T17548] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 623.543906][T17548] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 623.546547][T17548] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 623.552372][T17548] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 623.674178][T17548] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 623.676936][T17548] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 623.682670][T17548] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 624.155347][T17579] futex_wake_op: syz.5.2924 tries to shift op by -1; fix this program [ 624.159381][ T40] kauditd_printk_skb: 486 callbacks suppressed [ 624.159395][ T40] audit: type=1326 audit(1766946040.353:27248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17578 comm="syz.5.2924" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 624.172114][ T40] audit: type=1326 audit(1766946040.373:27249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17578 comm="syz.5.2924" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 624.182949][ T40] audit: type=1326 audit(1766946040.383:27250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17578 comm="syz.5.2924" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf707d5a7 code=0x7ffc0000 [ 624.196292][ T40] audit: type=1326 audit(1766946040.393:27251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17578 comm="syz.5.2924" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 624.207714][ T40] audit: type=1326 audit(1766946040.393:27252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17578 comm="syz.5.2924" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf707d5a7 code=0x7ffc0000 [ 624.218985][ T40] audit: type=1326 audit(1766946040.393:27253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17578 comm="syz.5.2924" exe="/syz-executor" sig=0 arch=40000003 syscall=385 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 624.229431][ T40] audit: type=1326 audit(1766946040.393:27254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17578 comm="syz.5.2924" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 624.246378][ T40] audit: type=1326 audit(1766946040.393:27255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17578 comm="syz.5.2924" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 624.254851][ T40] audit: type=1326 audit(1766946040.393:27256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17578 comm="syz.5.2924" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 624.263289][ T40] audit: type=1326 audit(1766946040.393:27257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17578 comm="syz.5.2924" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 624.405178][T17586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2927'. [ 624.739911][ T5944] Bluetooth: hci0: command 0x0406 tx timeout [ 624.780010][ T6014] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 625.150911][ T60] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 625.193995][T17609] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 625.196214][T17609] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 625.200321][T17609] vhci_hcd vhci_hcd.0: Device attached [ 625.319954][ T60] usb 9-1: Using ep0 maxpacket: 16 [ 625.323956][ T60] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 625.328645][ T60] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 625.339404][ T60] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 625.346310][ T60] usb 9-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 625.352983][ T60] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.367315][ T60] usb 9-1: config 0 descriptor?? [ 625.470284][ T5994] usb 44-1: SetAddress Request (88) to port 0 [ 625.473073][ T5994] usb 44-1: new SuperSpeed USB device number 88 using vhci_hcd [ 625.589973][ T64] Bluetooth: hci3: command 0x0c1a tx timeout [ 625.592961][ T5944] Bluetooth: hci4: command 0x0c1a tx timeout [ 625.749905][ T64] Bluetooth: hci1: command 0x0c1a tx timeout [ 625.858118][ T60] input: HID 05ac:8241 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/0003:05AC:8241.0005/input/input18 [ 625.892524][T17610] vhci_hcd: connection reset by peer [ 625.894722][ T12] vhci_hcd vhci_hcd.3: stop threads [ 625.896495][ T12] vhci_hcd vhci_hcd.3: release socket [ 625.898460][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 625.960676][ T60] appleir 0003:05AC:8241.0005: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.4-1/input0 [ 626.085119][ T6014] usb 9-1: USB disconnect, device number 16 [ 626.780413][T17638] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 626.783332][T17638] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 626.789826][ T64] Bluetooth: hci0: command 0x0406 tx timeout [ 626.797096][T17638] vhci_hcd vhci_hcd.0: Device attached [ 627.022751][T17650] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2942'. [ 627.112824][T17651] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 627.115729][T17651] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 627.119435][T17651] vhci_hcd vhci_hcd.0: Device attached [ 627.371144][T17640] vhci_hcd: connection closed [ 627.378791][T17652] vhci_hcd: connection closed [ 627.379907][ T60] usb 38-1: SetAddress Request (94) to port 0 [ 627.383784][ T12] vhci_hcd vhci_hcd.3: stop threads [ 627.383819][ T60] usb 38-1: new SuperSpeed USB device number 94 using vhci_hcd [ 627.385535][ T12] vhci_hcd vhci_hcd.3: release socket [ 627.392834][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 627.399912][ T12] vhci_hcd vhci_hcd.0: stop threads [ 627.402351][ T12] vhci_hcd vhci_hcd.0: release socket [ 627.405785][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 627.683559][ T64] Bluetooth: hci3: command 0x0c1a tx timeout [ 627.684228][ T5944] Bluetooth: hci4: command 0x0c1a tx timeout [ 627.839866][ T5944] Bluetooth: hci1: command 0x0c1a tx timeout [ 627.853090][T17661] dlm: no local IP address has been set [ 627.855085][T17661] dlm: cannot start dlm midcomms -107 [ 627.883723][T17661] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 627.907181][T17661] netlink: 'syz.4.2945': attribute type 12 has an invalid length. [ 628.104990][T17666] wg2 speed is unknown, defaulting to 1000 [ 628.237555][T17676] program syz.3.2950 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 628.454117][T17680] can: request_module (can-proto-3) failed. [ 628.646939][T17687] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 628.649279][T17687] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 628.661853][T17687] vhci_hcd vhci_hcd.0: Device attached [ 628.907213][T17693] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 628.909346][T17693] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 628.916146][T17693] vhci_hcd vhci_hcd.0: Device attached [ 629.044352][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.179874][ T982] usb 45-1: new low-speed USB device number 24 using vhci_hcd [ 629.346988][T17688] vhci_hcd: connection closed [ 629.347341][ T9568] vhci_hcd vhci_hcd.3: stop threads [ 629.358640][ T9568] vhci_hcd vhci_hcd.3: release socket [ 629.361811][ T9568] vhci_hcd vhci_hcd.3: disconnect device [ 629.402410][T17704] ipvlan2: entered promiscuous mode [ 629.405056][T17704] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 629.562024][T17694] vhci_hcd: connection reset by peer [ 629.564360][ T9568] vhci_hcd vhci_hcd.4: stop threads [ 629.566312][ T9568] vhci_hcd vhci_hcd.4: release socket [ 629.569314][ T9568] vhci_hcd vhci_hcd.4: disconnect device [ 629.575229][T17712] dlm: no local IP address has been set [ 629.577417][T17712] dlm: cannot start dlm midcomms -107 [ 629.588296][T17712] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 629.598167][T17712] netlink: 'syz.0.2958': attribute type 12 has an invalid length. [ 629.749856][ T5944] Bluetooth: hci4: command 0x0c1a tx timeout [ 629.759938][ T5944] Bluetooth: hci3: command 0x0c1a tx timeout [ 629.919816][ T5944] Bluetooth: hci1: command 0x0c1a tx timeout [ 630.529908][T17728] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 630.532172][T17728] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 630.535201][T17728] vhci_hcd vhci_hcd.0: Device attached [ 630.560065][ T5994] usb 44-1: device descriptor read/8, error -110 [ 630.990550][ T5994] usb usb44-port1: attempt power cycle [ 631.179720][T17729] vhci_hcd: connection closed [ 631.180080][ T12] vhci_hcd vhci_hcd.4: stop threads [ 631.183642][ T12] vhci_hcd vhci_hcd.4: release socket [ 631.186321][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 631.369923][T15392] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 631.401869][T17742] futex_wake_op: syz.0.2967 tries to shift op by -1; fix this program [ 631.406264][ T40] kauditd_printk_skb: 236 callbacks suppressed [ 631.406277][ T40] audit: type=1326 audit(1766946047.603:27494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17741 comm="syz.0.2967" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 631.419718][ T40] audit: type=1326 audit(1766946047.613:27495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17741 comm="syz.0.2967" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 631.428152][ T40] audit: type=1326 audit(1766946047.613:27496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17741 comm="syz.0.2967" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf704d5a7 code=0x7ffc0000 [ 631.436171][ T40] audit: type=1326 audit(1766946047.613:27497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17741 comm="syz.0.2967" exe="/syz-executor" sig=0 arch=40000003 syscall=385 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 631.451174][ T40] audit: type=1326 audit(1766946047.613:27498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17741 comm="syz.0.2967" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 631.470276][ T40] audit: type=1326 audit(1766946047.613:27499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17741 comm="syz.0.2967" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 631.478404][ T40] audit: type=1326 audit(1766946047.613:27500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17741 comm="syz.0.2967" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 631.486781][ T40] audit: type=1326 audit(1766946047.613:27501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17741 comm="syz.0.2967" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 631.496393][ T40] audit: type=1326 audit(1766946047.613:27502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17741 comm="syz.0.2967" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 631.506681][ T40] audit: type=1326 audit(1766946047.613:27503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17741 comm="syz.0.2967" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 631.546359][T17748] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 631.551904][T17748] block device autoloading is deprecated and will be removed. [ 631.729656][T17750] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 631.732463][T17750] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 631.739581][T17750] vhci_hcd vhci_hcd.0: Device attached [ 631.855871][T17756] dlm: no local IP address has been set [ 631.858821][T17756] dlm: cannot start dlm midcomms -107 [ 631.874427][T17756] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 631.880896][T17756] netlink: 'syz.5.2970': attribute type 12 has an invalid length. [ 632.214312][T15392] usb 43-1: new low-speed USB device number 25 using vhci_hcd [ 632.273839][T17751] vhci_hcd: connection reset by peer [ 632.276500][ T1144] vhci_hcd vhci_hcd.3: stop threads [ 632.278359][ T1144] vhci_hcd vhci_hcd.3: release socket [ 632.281252][ T1144] vhci_hcd vhci_hcd.3: disconnect device [ 632.339992][T17764] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 632.342866][T17764] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 632.346136][T17764] vhci_hcd vhci_hcd.0: Device attached [ 632.470084][ T60] usb 38-1: device descriptor read/8, error -110 [ 632.887153][ T60] usb usb38-port1: attempt power cycle [ 632.953735][T17765] vhci_hcd: connection closed [ 632.954087][ T9568] vhci_hcd vhci_hcd.4: stop threads [ 632.960428][ T9568] vhci_hcd vhci_hcd.4: release socket [ 632.963956][ T9568] vhci_hcd vhci_hcd.4: disconnect device [ 633.802248][ T60] usb usb38-port1: unable to enumerate USB device [ 634.207145][T17793] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 634.209501][T17793] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 634.288498][T17800] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2980'. [ 634.329913][ T982] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 634.352670][T17793] vhci_hcd vhci_hcd.0: Device attached [ 634.581217][T17804] dlm: no local IP address has been set [ 634.583190][T17804] dlm: cannot start dlm midcomms -107 [ 634.600510][T17804] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 634.606686][T17804] netlink: 'syz.0.2982': attribute type 12 has an invalid length. [ 634.719897][ T6052] usb 47-1: new low-speed USB device number 17 using vhci_hcd [ 634.997385][T17795] vhci_hcd: connection reset by peer [ 635.061130][ T90] vhci_hcd vhci_hcd.5: stop threads [ 635.089905][ T90] vhci_hcd vhci_hcd.5: release socket [ 635.096484][ T90] vhci_hcd vhci_hcd.5: disconnect device [ 635.352328][T17811] futex_wake_op: syz.3.2983 tries to shift op by -1; fix this program [ 635.667930][T17817] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 635.922687][ T9846] usb usb46-port1: attempt power cycle [ 636.520532][ T9846] usb usb46-port1: unable to enumerate USB device [ 636.895347][T17826] (syz.0.2985,17826,1):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 637.339998][T15392] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 637.473120][T17847] dlm: no local IP address has been set [ 637.475779][T17847] dlm: cannot start dlm midcomms -107 [ 637.524335][T17847] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 637.532833][T17847] netlink: 'syz.4.2993': attribute type 12 has an invalid length. [ 637.578890][T17848] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 637.581781][T17848] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 637.606771][T17848] vhci_hcd vhci_hcd.0: Device attached [ 638.189603][T17849] vhci_hcd: connection closed [ 638.190080][ T1144] vhci_hcd vhci_hcd.3: stop threads [ 638.194681][ T1144] vhci_hcd vhci_hcd.3: release socket [ 638.197164][ T1144] vhci_hcd vhci_hcd.3: disconnect device [ 638.250122][ T5994] usb 44-1: enqueue for inactive port 0 [ 639.174722][T17868] netlink: 'syz.0.2998': attribute type 13 has an invalid length. [ 639.183717][T17868] bridge0: port 2(bridge_slave_1) entered blocking state [ 639.186296][T17868] bridge0: port 2(bridge_slave_1) entered listening state [ 639.188825][T17868] bridge0: port 1(bridge_slave_0) entered blocking state [ 639.191272][T17868] bridge0: port 1(bridge_slave_0) entered listening state [ 639.235649][T17868] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 639.819898][ T6052] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 641.238564][T17891] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 642.076837][T17895] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 642.079604][T17895] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 642.237565][T17895] vhci_hcd vhci_hcd.0: Device attached [ 642.546561][ T40] kauditd_printk_skb: 453 callbacks suppressed [ 642.546572][ T40] audit: type=1326 audit(1766946058.733:27957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17904 comm="syz.0.3009" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 642.549868][ T6031] usb 46-1: SetAddress Request (107) to port 0 [ 642.591905][ T40] audit: type=1326 audit(1766946058.733:27958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17904 comm="syz.0.3009" exe="/syz-executor" sig=0 arch=40000003 syscall=430 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 642.600308][ T6031] usb 46-1: new SuperSpeed USB device number 107 using vhci_hcd [ 642.603435][ T40] audit: type=1326 audit(1766946058.733:27959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17904 comm="syz.0.3009" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 642.618981][ T40] audit: type=1326 audit(1766946058.733:27960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17904 comm="syz.0.3009" exe="/syz-executor" sig=0 arch=40000003 syscall=431 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 642.639286][ T40] audit: type=1326 audit(1766946058.733:27961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17904 comm="syz.0.3009" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 642.646859][ T40] audit: type=1326 audit(1766946058.733:27962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17904 comm="syz.0.3009" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 642.662310][ T40] audit: type=1326 audit(1766946058.733:27963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17904 comm="syz.0.3009" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 642.669293][ T40] audit: type=1326 audit(1766946058.743:27964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17904 comm="syz.0.3009" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 642.691263][ T40] audit: type=1326 audit(1766946058.743:27965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17904 comm="syz.0.3009" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 642.725978][ T40] audit: type=1326 audit(1766946058.743:27966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17904 comm="syz.0.3009" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 643.368386][T17900] vhci_hcd: connection reset by peer [ 643.371880][ T7321] vhci_hcd vhci_hcd.4: stop threads [ 643.373910][ T7321] vhci_hcd vhci_hcd.4: release socket [ 643.375948][ T7321] vhci_hcd vhci_hcd.4: disconnect device [ 644.183126][T17927] [ 644.184306][T17927] ====================================================== [ 644.187416][T17927] WARNING: possible circular locking dependency detected [ 644.190471][T17927] syzkaller #0 Tainted: G L [ 644.193127][T17927] ------------------------------------------------------ [ 644.196119][T17927] syz.5.3014/17927 is trying to acquire lock: [ 644.198679][T17927] ffff888022690948 (&sbi->pipe_mutex){+.+.}-{4:4}, at: autofs_notify_daemon+0x4a6/0xd60 [ 644.202806][T17927] [ 644.202806][T17927] but task is already holding lock: [ 644.206079][T17927] ffff88801b37ec88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 [ 644.210121][T17927] [ 644.210121][T17927] which lock already depends on the new lock. [ 644.210121][T17927] [ 644.214871][T17927] [ 644.214871][T17927] the existing dependency chain (in reverse order) is: [ 644.218857][T17927] [ 644.218857][T17927] -> #3 (&of->mutex){+.+.}-{4:4}: [ 644.222050][T17927] __mutex_lock+0x1aa/0x1ca0 [ 644.224581][T17927] kernfs_seq_start+0x4f/0x2a0 [ 644.227158][T17927] seq_read_iter+0x2c1/0x12d0 [ 644.229439][T17927] kernfs_fop_read_iter+0x46c/0x610 [ 644.232008][T17927] copy_splice_read+0x618/0xc20 [ 644.234658][T17927] do_splice_read+0x285/0x370 [ 644.237076][T17927] splice_file_to_pipe+0x109/0x120 [ 644.239723][T17927] do_sendfile+0x400/0xe50 [ 644.242095][T17927] __ia32_compat_sys_sendfile+0x1e5/0x220 [ 644.244971][T17927] __do_fast_syscall_32+0xe8/0x680 [ 644.247451][T17927] do_fast_syscall_32+0x32/0x80 [ 644.249697][T17927] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 644.252742][T17927] [ 644.252742][T17927] -> #2 (&p->lock){+.+.}-{4:4}: [ 644.255981][T17927] __mutex_lock+0x1aa/0x1ca0 [ 644.258198][T17927] seq_read_iter+0xe1/0x12d0 [ 644.260215][T17927] kernfs_fop_read_iter+0x46c/0x610 [ 644.262775][T17927] copy_splice_read+0x618/0xc20 [ 644.265046][T17927] do_splice_read+0x285/0x370 [ 644.267444][T17927] splice_file_to_pipe+0x109/0x120 [ 644.269887][T17927] do_sendfile+0x400/0xe50 [ 644.272043][T17927] __ia32_compat_sys_sendfile+0x1e5/0x220 [ 644.274813][T17927] __do_fast_syscall_32+0xe8/0x680 [ 644.277279][T17927] do_fast_syscall_32+0x32/0x80 [ 644.279604][T17927] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 644.282552][T17927] [ 644.282552][T17927] -> #1 (&pipe->mutex){+.+.}-{4:4}: [ 644.285764][T17927] __mutex_lock+0x1aa/0x1ca0 [ 644.288014][T17927] anon_pipe_write+0x15d/0x1bd0 [ 644.290387][T17927] __kernel_write_iter+0x720/0xb10 [ 644.292734][T17927] __kernel_write+0xf5/0x140 [ 644.294397][T17927] autofs_notify_daemon+0x4db/0xd60 [ 644.296226][T17927] autofs_wait+0x10f3/0x1ac0 [ 644.297899][T17927] autofs_do_expire_multi+0x14e/0x500 [ 644.299853][T17927] _autofs_dev_ioctl+0x83b/0xb40 [ 644.301701][T17927] autofs_dev_ioctl_compat+0x19/0x30 [ 644.303764][T17927] __ia32_compat_sys_ioctl+0x242/0x370 [ 644.305897][T17927] __do_fast_syscall_32+0xe8/0x680 [ 644.308347][T17927] do_fast_syscall_32+0x32/0x80 [ 644.310701][T17927] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 644.313663][T17927] [ 644.313663][T17927] -> #0 (&sbi->pipe_mutex){+.+.}-{4:4}: [ 644.317011][T17927] __lock_acquire+0x1669/0x2890 [ 644.319379][T17927] lock_acquire+0x179/0x330 [ 644.321959][T17927] __mutex_lock+0x1aa/0x1ca0 [ 644.324259][T17927] autofs_notify_daemon+0x4a6/0xd60 [ 644.326819][T17927] autofs_wait+0x10f3/0x1ac0 [ 644.329070][T17927] autofs_mount_wait+0x132/0x3c0 [ 644.331480][T17927] autofs_d_automount+0x4b2/0x960 [ 644.333993][T17927] __traverse_mounts+0x1b9/0x830 [ 644.336427][T17927] step_into_slowpath+0x772/0xf50 [ 644.339110][T17927] path_lookupat+0x627/0xc40 [ 644.341399][T17927] filename_lookup+0x224/0x5f0 [ 644.343781][T17927] kern_path+0x35/0x50 [ 644.345867][T17927] lookup_bdev+0xd8/0x280 [ 644.348056][T17927] resume_store+0x1d6/0x490 [ 644.350338][T17927] kobj_attr_store+0x58/0x80 [ 644.352575][T17927] sysfs_kf_write+0xf2/0x150 [ 644.354868][T17927] kernfs_fop_write_iter+0x3af/0x570 [ 644.357400][T17927] vfs_write+0x7d3/0x11d0 [ 644.359579][T17927] ksys_write+0x12a/0x250 [ 644.361823][T17927] __do_fast_syscall_32+0xe8/0x680 [ 644.364223][T17927] do_fast_syscall_32+0x32/0x80 [ 644.366468][T17927] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 644.369400][T17927] [ 644.369400][T17927] other info that might help us debug this: [ 644.369400][T17927] [ 644.373840][T17927] Chain exists of: [ 644.373840][T17927] &sbi->pipe_mutex --> &p->lock --> &of->mutex [ 644.373840][T17927] [ 644.378853][T17927] Possible unsafe locking scenario: [ 644.378853][T17927] [ 644.382020][T17927] CPU0 CPU1 [ 644.384362][T17927] ---- ---- [ 644.386673][T17927] lock(&of->mutex); [ 644.388403][T17927] lock(&p->lock); [ 644.391158][T17927] lock(&of->mutex); [ 644.394276][T17927] lock(&sbi->pipe_mutex); [ 644.396304][T17927] [ 644.396304][T17927] *** DEADLOCK *** [ 644.396304][T17927] [ 644.399709][T17927] 4 locks held by syz.5.3014/17927: [ 644.402208][T17927] #0: ffff88802221bb38 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 644.406215][T17927] #1: ffff88804509a420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 644.410211][T17927] #2: ffff88801b37ec88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 [ 644.414525][T17927] #3: ffff88801c3730f8 (kn->active#70){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 [ 644.418867][T17927] [ 644.418867][T17927] stack backtrace: [ 644.421508][T17927] CPU: 2 UID: 0 PID: 17927 Comm: syz.5.3014 Tainted: G L syzkaller #0 PREEMPT(full) [ 644.421562][T17927] Tainted: [L]=SOFTLOCKUP [ 644.421570][T17927] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 644.421582][T17927] Call Trace: [ 644.421591][T17927] [ 644.421601][T17927] dump_stack_lvl+0x116/0x1f0 [ 644.421633][T17927] print_circular_bug+0x275/0x340 [ 644.421668][T17927] check_noncircular+0x146/0x160 [ 644.421699][T17927] __lock_acquire+0x1669/0x2890 [ 644.421722][T17927] lock_acquire+0x179/0x330 [ 644.421740][T17927] ? autofs_notify_daemon+0x4a6/0xd60 [ 644.421762][T17927] ? __pfx___might_resched+0x10/0x10 [ 644.421787][T17927] ? __lock_acquire+0x12c2/0x2890 [ 644.421805][T17927] __mutex_lock+0x1aa/0x1ca0 [ 644.421835][T17927] ? autofs_notify_daemon+0x4a6/0xd60 [ 644.421856][T17927] ? __kernel_text_address+0xd/0x40 [ 644.421878][T17927] ? find_held_lock+0x2b/0x80 [ 644.421900][T17927] ? autofs_notify_daemon+0x4a6/0xd60 [ 644.421920][T17927] ? autofs_notify_daemon+0x45a/0xd60 [ 644.421941][T17927] ? __pfx___mutex_lock+0x10/0x10 [ 644.421970][T17927] ? __mutex_unlock_slowpath+0x161/0x790 [ 644.421999][T17927] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 644.422028][T17927] ? from_kgid_munged+0xab/0x130 [ 644.422059][T17927] ? autofs_notify_daemon+0x4a6/0xd60 [ 644.422079][T17927] autofs_notify_daemon+0x4a6/0xd60 [ 644.422102][T17927] ? __pfx_autofs_notify_daemon+0x10/0x10 [ 644.422122][T17927] ? kernfs_fop_write_iter+0x3af/0x570 [ 644.422148][T17927] ? vfs_write+0x7d3/0x11d0 [ 644.422174][T17927] ? ksys_write+0x12a/0x250 [ 644.422207][T17927] ? lockdep_init_map_type+0x5c/0x270 [ 644.422227][T17927] ? lockdep_init_map_type+0x5c/0x270 [ 644.422247][T17927] autofs_wait+0x10f3/0x1ac0 [ 644.422270][T17927] ? __pfx_autofs_wait+0x10/0x10 [ 644.422289][T17927] ? __pfx_path_check_mount+0x10/0x10 [ 644.422308][T17927] ? find_held_lock+0x2b/0x80 [ 644.422331][T17927] ? path_has_submounts+0xcf/0x120 [ 644.422354][T17927] ? do_raw_spin_unlock+0x172/0x230 [ 644.422376][T17927] ? find_held_lock+0x2b/0x80 [ 644.422400][T17927] autofs_mount_wait+0x132/0x3c0 [ 644.422421][T17927] autofs_d_automount+0x4b2/0x960 [ 644.422443][T17927] __traverse_mounts+0x1b9/0x830 [ 644.422466][T17927] step_into_slowpath+0x772/0xf50 [ 644.422490][T17927] ? __up_read+0x2d1/0x700 [ 644.422511][T17927] ? __pfx_step_into_slowpath+0x10/0x10 [ 644.422542][T17927] ? __lookup_slow+0x3d0/0x460 [ 644.422567][T17927] path_lookupat+0x627/0xc40 [ 644.422593][T17927] filename_lookup+0x224/0x5f0 [ 644.422619][T17927] ? __pfx_filename_lookup+0x10/0x10 [ 644.422652][T17927] ? getname_kernel+0x52/0x370 [ 644.422671][T17927] ? __asan_memcpy+0x3c/0x60 [ 644.422695][T17927] kern_path+0x35/0x50 [ 644.422718][T17927] lookup_bdev+0xd8/0x280 [ 644.422737][T17927] ? __pfx_lookup_bdev+0x10/0x10 [ 644.422755][T17927] ? __asan_memcpy+0x3c/0x60 [ 644.422777][T17927] resume_store+0x1d6/0x490 [ 644.422801][T17927] ? __pfx_resume_store+0x10/0x10 [ 644.422826][T17927] ? find_held_lock+0x2b/0x80 [ 644.422851][T17927] ? __pfx_resume_store+0x10/0x10 [ 644.422872][T17927] kobj_attr_store+0x58/0x80 [ 644.422901][T17927] ? __pfx_kobj_attr_store+0x10/0x10 [ 644.422928][T17927] sysfs_kf_write+0xf2/0x150 [ 644.422947][T17927] kernfs_fop_write_iter+0x3af/0x570 [ 644.422974][T17927] ? __pfx_sysfs_kf_write+0x10/0x10 [ 644.422993][T17927] vfs_write+0x7d3/0x11d0 [ 644.423020][T17927] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 644.423047][T17927] ? __pfx_vfs_write+0x10/0x10 [ 644.423071][T17927] ? find_held_lock+0x2b/0x80 [ 644.423100][T17927] ksys_write+0x12a/0x250 [ 644.423126][T17927] ? __pfx_ksys_write+0x10/0x10 [ 644.423154][T17927] __do_fast_syscall_32+0xe8/0x680 [ 644.423184][T17927] do_fast_syscall_32+0x32/0x80 [ 644.423201][T17927] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 644.423226][T17927] RIP: 0023:0xf707d579 [ 644.423241][T17927] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 644.423260][T17927] RSP: 002b:00000000f544c55c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 644.423278][T17927] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000040 [ 644.423291][T17927] RDX: 0000000000000012 RSI: 0000000000000000 RDI: 0000000000000000 [ 644.423302][T17927] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 644.423313][T17927] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 644.423326][T17927] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 644.423344][T17927] [ 644.649389][T17940] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 644.652408][T17940] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 644.657566][T17940] vhci_hcd vhci_hcd.0: Device attached [ 644.919865][ T9] usb 43-1: new low-speed USB device number 26 using vhci_hcd [ 644.922783][T15392] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 644.932698][T17927] PM: Image not found (code -22) [ 645.059942][T15392] usb 5-1: device descriptor read/64, error -71 [ 645.300087][T15392] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 645.402319][T17941] vhci_hcd: connection reset by peer [ 645.404234][ T9568] vhci_hcd vhci_hcd.3: stop threads [ 645.406815][ T9568] vhci_hcd vhci_hcd.3: release socket [ 645.409383][ T9568] vhci_hcd vhci_hcd.3: disconnect device [ 645.429894][T15392] usb 5-1: device descriptor read/64, error -71 [ 645.551068][T15392] usb usb5-port1: attempt power cycle [ 645.899954][T15392] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 645.920528][T15392] usb 5-1: device descriptor read/8, error -71 [ 646.179808][T15392] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 646.210577][T15392] usb 5-1: device descriptor read/8, error -71 [ 646.320679][T15392] usb usb5-port1: unable to enumerate USB device [ 647.669920][ T6031] usb 46-1: device descriptor read/8, error -110 [ 648.062284][ T6031] usb usb46-port1: attempt power cycle [ 648.620753][ T6031] usb usb46-port1: unable to enumerate USB device [ 650.060387][ T9] vhci_hcd vhci_hcd.3: vhci_device speed not set