last executing test programs: 4m42.501586551s ago: executing program 0 (id=972): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000"], 0x3c}, 0x1, 0x0, 0x0, 0x2400c881}, 0x10) 4m42.451506284s ago: executing program 0 (id=973): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x3, 0x5}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) ioctl$TCXONC(r1, 0x540a, 0x2) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000140)={0x4, 0x40, 0x3c0}) syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r0) r2 = socket(0x1d, 0x2, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000000)={0x1d, r4, 0x6}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) close(0x3) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ip_mr_vif\x00') setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f00000001c0)=0x4880, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc17}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x8a3b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) name_to_handle_at(r7, &(0x7f0000000000)='./mnt\x00', &(0x7f0000000080)=@FILEID_INO32_GEN={0x8, 0x1, {0xb, 0xfffffff9}}, 0x0, 0x600) openat$kvm(0xffffff9c, &(0x7f0000000180), 0x100, 0x0) r9 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x25) ioctl$KVM_XEN_HVM_CONFIG(r9, 0x4038ae7a, &(0x7f0000000100)={0x2, 0x4000008d, 0x0, 0x0}) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0}, 0x0) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r10, 0x0, 0x0) getsockopt$inet_mptcp_buf(r10, 0x11c, 0x2, &(0x7f0000000040)=""/170, &(0x7f0000000140)=0xaa) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="34a35500e096dfcd7e11106a118e5039bf15925678a203c093cccc997b02ac95f715c43b369110fc1765ac3b433b1f3ab84c2082fd", @ANYRES64=r9, @ANYRES32=r6], 0x34}, 0x1, 0x0, 0x0, 0x1000}, 0x20004014) 4m41.559363934s ago: executing program 0 (id=976): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001100010027bd7000fddbdf", @ANYRES32=0x0, @ANYBLOB="2010000000000400140003007621"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000000104010100000000000000001ce2efb60a00000406000640"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44010) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$packet(0x11, 0x2, 0x300) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000280)=ANY=[@ANYRES64=r3, @ANYRES8], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000180)=r8, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$VIDIOC_QUERYMENU(r4, 0xc008561c, &(0x7f00000000c0)={0xf0f002, 0x2, @name="2a0bfa91762a67fc38beda01496988cd2bae0aa03dc5d7b06bef2d1e67d01e0c"}) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x10}}, 0x0) syz_open_dev$radio(&(0x7f0000000080), 0x3, 0x2) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r9, 0xffffffffffffffff, 0x0) 4m40.611844669s ago: executing program 0 (id=978): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x801) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, &(0x7f0000000580)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d307830303030303030303030303031303030"]) chdir(&(0x7f0000000100)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x58) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, &(0x7f0000000380)={'ip_vti0\x00', 0x2, 0xfff}) keyctl$instantiate(0xc, 0x0, 0x0, 0x2e, 0xfffffffffffffffa) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000000040)='fd', 0x0, r3) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) open(&(0x7f0000000000)='.\x00', 0x0, 0x244) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r5, r5) setpgid(r5, r5) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0x9362, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000300)) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000180001002cbd700000000000", @ANYRES8=r6, @ANYBLOB, @ANYRESOCT=r0], 0x44}}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) 4m40.539824395s ago: executing program 0 (id=980): r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setrlimit(0x0, &(0x7f0000000280)={0xc800, 0xfffffffe}) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x86022, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x44021, 0x0) madvise(&(0x7f00002d9000/0x2000)=nil, 0x2000, 0x70) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, 0x0, 0x44) bpf$MAP_CREATE(0x0, 0x0, 0x48) ptrace(0x4206, 0x0) tkill(0x0, 0x12) tkill(0x0, 0x12) unshare(0x6a040300) 4m40.05169205s ago: executing program 0 (id=988): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000"], 0x3c}, 0x1, 0x0, 0x0, 0x2400c881}, 0x10) 4m39.954169712s ago: executing program 32 (id=988): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000"], 0x3c}, 0x1, 0x0, 0x0, 0x2400c881}, 0x10) 4.957971743s ago: executing program 1 (id=1969): r0 = syz_open_dev$vcsa(&(0x7f0000006180), 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./mysys\x00', 0x1ff) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0403"], 0xe) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000a80)=@security={'security\x00', 0x44, 0x4, 0x4a4, 0xffffffff, 0x314, 0x314, 0x0, 0xffffffff, 0xffffffff, 0x3dc, 0x3dc, 0x3dc, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x7f}}, [0xffffff00, 0xff, 0x0, 0xffffffff], [0xff000000, 0xff000000, 0xffffff00, 0x7e5debfdf7c2f28d], 'vlan0\x00', 'batadv_slave_0\x00', {0xff}, {0xff}, 0x3a, 0xf, 0x0, 0x4}, 0x203, 0x124, 0x148, 0x8502, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x91}, {0x2}], 0x1}}, @common=@hbh={{0x48}, {0x8, 0x2, 0x1, [0x8007, 0xfff9, 0x8000, 0xa2, 0x8200, 0xb4f3, 0xffff, 0x6, 0x41, 0x7, 0xfffc, 0x6, 0x8, 0x1, 0x8, 0xd], 0x10}}]}, @common=@unspec=@CONNSECMARK={0x24, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xa4, 0x1cc}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x200000, 'system_u:object_r:modem_device_t:s0\x00'}}}, {{@ipv6={@empty, @dev={0xfe, 0x80, '\x00', 0x42}, [0xff, 0xffffff, 0xff000000, 0xff], [0xffffffff, 0xff, 0xffffff00, 0xffffff00], 'macvtap0\x00', 'veth0_to_bond\x00', {}, {0xff}, 0x16, 0x14, 0x0, 0x38}, 0x0, 0xa4, 0xc8}, @common=@unspec=@CLASSIFY={0x24, 'CLASSIFY\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x500) mount(0x0, &(0x7f0000002000)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_BUFINFO(r2, 0xc02c640e, &(0x7f0000000000)={0x6, 0x101, 0x7fff, 0x5377, 0x17c, 0x7ffffffb, 0x1ff}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/module/ueagle_atm/parameters/sync_wait\x00', 0x1, 0x0) write(r3, &(0x7f0000000200)='0,', 0x2) poll(&(0x7f00000061c0), 0x0, 0x3) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000600)={'vcan0\x00', 0x0}) bind$can_raw(r4, &(0x7f0000000240)={0x1d, r5}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) write$FUSE_INIT(r6, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x10082c0c, 0x1, 0x80, 0x5, 0x7, 0x0, 0x0, 0x10, 0x8000002}}, 0x50) sendfile(r4, r6, &(0x7f0000000040), 0xfffffdef) umount2(&(0x7f0000000040)='./mysys/module/ueagle_atm/parameters/sync_wait\x00', 0x0) write$P9_RFSYNC(r0, &(0x7f0000006240)={0x7, 0x33, 0x1}, 0x7) 4.783523711s ago: executing program 1 (id=1972): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x100, 0x50, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'ip6_vti0\x00', 0x0, 0x4, 0x3, 0x3, 0x3, 0x54, @remote, @loopback, 0x8, 0x8000, 0x400, 0x7fffffff}}) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x80, r1, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x16}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xb}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x53f}]}, 0x80}}, 0x4000001) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, &(0x7f0000000300)}}, 0x3c) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000400), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r5) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="34000000e14b44d413cad75e2e63f528a216701c5fe5202623962e89eacbd81590e7159535ff9339f7904965e51f70125d473c7bd3406348398c407c887f673121f87338a0fbff66485a94ef6500831565b7d483b0c969ced75f1182a497b207497682c7471958b12dcedbfbc14cf64afb4e4156399b13cb258fe03a1d062bfeb249f14b2ecc7d69ca92ccc6ec9b0cf0172fc9f4b28d730e3e77d5c6f9ff48595b31055ef278b5dcd82a8e7ffe58559850295dfc2997bd1426d6dc7ed159edcd0bab926b98d00a", @ANYRES16=r6, @ANYBLOB="010000000000feffffff03000000200001800c00028008000200060000000f00010069623a627269646765300000"], 0x34}}, 0x0) sendmsg$TIPC_NL_NODE_GET(r4, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={0x164, r6, 0x8, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0xb8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x400}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x31ce}]}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x59245c54}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9a3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd511}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xb}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x230b}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5c10}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffff6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000001}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xa12}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000005) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = memfd_create(&(0x7f0000000340)='%\x00#D)\xdeA\x02\n,\x06\x89\x96\x8f\xd3F\x9fe\xf7\x9f\x9f\x0f\xeb\v\xc3\x86c\xe7\xc6\x88\xce%0\x05\x9d4M\tH\x89m\x14>4\xe4\xb4m\fF\xaf\x9d&\x05\xcf\xc1HZ\x9a\xa3X\xaa;t\x12\'\xf5\x18PvY\xbe\xd1J6\xd9\xa6\xec\xde\xd4\xb9I5\x1a\xc6S\x14\x18]K\xe0\xef\x97Vv\xbe\x8a\xffG\xc79\x9d\x19\x10\x8c\xb2\xe0` >D\x11*V\xb9\xcfi\x03FnU\t|b\xbe\x10\xc4\xd4\x01\xb2=\x11%\xd0`-\xe2\x1d\x8e\x7f\xd1\x15\x03\xa5(\x1e\x05H\xe8\'[0\xc2\vO\xdc\xf8?QT[8:f\xe9f\x9b\xd3\xe2:\xa2b\xa3\x89\n\x9d\n\xe2\xb7\xf6\xa6\xbe\x82]YF\x90\x8e\xde\xbd\xb1w\xf7\x15\xed\xd8\xea\xa8\xef\xfbM\x82oX\x80~\xe3\x1fH\xf4\x99\xa4\xd2E\'@\xab\x13\x94\xc2\xef\x81R\xbd\xaah\xd2D\xce\x1f\'\x8b9\xa5\x88\xf1C\x1a\a!\x95\x165RS1\x9e[\xf4\xa9v\xfah\xb7\xd8\x9c&\x85\xcbs\xad\x14\xf5\xd5\xd7M\x06\x15\x9d\xa2\xfb\xfc\x9c\x94`x\xdfma\xa6\x04\x06\xcb\xeb\vC{b\xceW3l\x8a\x9cO\"\xb5\xeb#\x03k\xe4\x99\xeb\xe3\x9d\xba\xd0\xb5\x0fh\xf2\xdc\x01\x81\xb48\xea\xaf\xd0*\x9c\x1d\xba,;\x17\xfb\x94M1\xea\x1f\xbf', 0x5) ioctl$FS_IOC_RESVSP(r7, 0x402c5828, &(0x7f0000000180)={0x0, 0x2, 0x80000, 0xb3}) r8 = mq_open(&(0x7f0000000540)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v\xf8\xff\xff\xff\xff\xff\xff\xffr\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xb9f\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\xb2F\xdf\xcc\xae', 0x40, 0xa8, 0x0) lseek(r8, 0x0, 0x3) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt\x00', 0x1ff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$sock_linger(r10, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x4}, 0x8) shutdown(r10, 0x1) mount(&(0x7f0000001100)=@filename='127.0.0.1:/\x00', &(0x7f0000001000)='./mnt\x00', &(0x7f0000001200)='nfs\x00', 0x0, &(0x7f0000001300)='nolock,v3,addr=127.0.0.1\x00') close(r9) r11 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r3, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r9}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_NET_NS_FD={0x8, 0x7, r11}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) 4.571398023s ago: executing program 1 (id=1974): r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x511741) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, {{0x0, 0x122a000000}}}, 0x28) ioctl$FS_IOC_SETFLAGS(r2, 0xc0606610, &(0x7f0000000040)=0x60) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f00000002c0)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x60, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r3}, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000cc0)={0x6, 0x2b, &(0x7f0000000d80)=ANY=[@ANYBLOB="18460000fdffffff000000000000000018640000060000000000000009000000185a0000060000000000000000000000b7080000000000007b8af8ff00000000b708000000f0ffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a500000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018120000", @ANYRES32, @ANYRESDEC=r1, @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000"], &(0x7f0000000b80)='GPL\x00', 0x80000001, 0x13, &(0x7f0000000bc0)=""/19, 0x41100, 0x10, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000c40)={0x3, 0x4, 0x7, 0x7}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000c80)=[{0x2, 0x3, 0x5, 0xb}, {0x1, 0x5, 0xd, 0x4}, {0x0, 0x1, 0x7, 0xf}, {0x1, 0x4, 0xc, 0xa}], 0x10, 0x2566}, 0x94) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="080000000000000004000000018000006d000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80200, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_GUEST_MEMFD(r6, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r7, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/llc/socket\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) landlock_create_ruleset(&(0x7f0000000040)={0x4000, 0x3}, 0x18, 0x0) 4.273537073s ago: executing program 1 (id=1977): r0 = socket$nl_rdma(0x10, 0x3, 0x14) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x161d02) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x0, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x7, &(0x7f0000000040)=0x8000001, 0x4) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) setgroups(0x0, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58) ioctl$TIOCSERGETLSR(r4, 0x5459, &(0x7f00000001c0)) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000000280)=ANY=[@ANYRES16=r0, @ANYRESHEX=r0, @ANYRES64=r4, @ANYRESHEX], 0x24}, 0x1, 0x0, 0x0, 0x24048454}, 0x0) ptrace$peekuser(0x3, r5, 0x7) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000000314230c2dbd7000ffdbdf250900020073797a32000f00000800410072786500140033007767320000000000000000000000000066129cbdaaf92ea305126427a766b1c085924cd6ad57b03cfe9655f622d77d2aeea86454e08d702ca2d6392ca31ef21b722d78da5d90886bb0db32b0e33c89a5e901bb4e0379f25665d395238e6730ad37288567b268fe7f1586d588e526e7d727ec73b81279a75e879dd960e5107507609756ec582a8032a0ae41beb16ed972c66cc59029b79ace6666660cde28316ee23ff7ea64e39ae6d39b5f45f5ccf2adaffee80cc44776710ba5c2a2e806dcb0a1fd133d11902dea4f"], 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x5514, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000040)={'\x00', 0xd, 0x1, 0x102, 0x401, 0x1}) 2.321590758s ago: executing program 3 (id=1992): r0 = syz_open_dev$mouse(0x0, 0x0, 0x511741) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, {{0x0, 0x122a000000}}}, 0x28) ioctl$FS_IOC_SETFLAGS(r2, 0xc0606610, &(0x7f0000000040)=0x60) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c00)={'veth1_macvtap\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000cc0)={0x6, 0x2b, &(0x7f0000000d80)=ANY=[@ANYBLOB="18460000fdffffff000000000000000018640000060000000000000009000000185a0000060000000000000000000000b7080000000000007b8af8ff00000000b708000000f0ffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a500000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018120000", @ANYRES32, @ANYRESDEC=r1, @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000"], &(0x7f0000000b80)='GPL\x00', 0x80000001, 0x13, &(0x7f0000000bc0)=""/19, 0x41100, 0x10, '\x00', r3, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000c40)={0x3, 0x4, 0x7, 0x7}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000c80)=[{0x2, 0x3, 0x5, 0xb}, {0x1, 0x5, 0xd, 0x4}, {0x0, 0x1, 0x7, 0xf}, {0x1, 0x4, 0xc, 0xa}], 0x10, 0x2566}, 0x94) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r4, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f00001ffe01000000000000", 0x1c) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80200, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/llc/socket\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 2.32074151s ago: executing program 2 (id=1993): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e) syz_emit_ethernet(0x78, &(0x7f0000000880)={@link_local, @random="0000fc00", @val={@val={0x88a8, 0x3}, {0x8100, 0x3, 0x0, 0x1}}, {@ipv4={0x800, @gre={{0x7, 0x4, 0x1, 0x6, 0x62, 0x64, 0x0, 0x4, 0x2f, 0x0, @multicast1, @multicast2, {[@cipso={0x86, 0x6, 0xffffffffffffffff}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x2}, {0x0, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x3, {{0x3, 0x1, 0xe2, 0x0, 0x1, 0x1, 0x1, 0x8}, 0x1, {0x8}}}, {0x8, 0x22eb, 0x4, {{0xf, 0x2, 0x2, 0x3, 0x0, 0x0, 0x6}, 0x2, {0x9c, 0xbd, 0x0, 0x19, 0x1, 0x1, 0x3, 0x0, 0x1}}}, {0x8, 0x6558, 0x2, "f80f"}}}}}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) lseek(0xffffffffffffffff, 0x101, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0xffffffff, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x0, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1d5) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r4 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_SETINFO(r4, 0xffffffff80000601, 0xee01, &(0x7f0000000300)={0xfffffffffffffffc, 0x5, 0x1, 0x2}) (fail_nth: 1) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000103000000004800000001"], 0x114}], 0x1}, 0x24044010) recvmmsg(r5, 0x0, 0x0, 0x14022, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x57c}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) 2.313438199s ago: executing program 1 (id=1994): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x100, 0x50, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'ip6_vti0\x00', 0x0, 0x4, 0x3, 0x3, 0x3, 0x54, @remote, @loopback, 0x8, 0x8000, 0x400, 0x7fffffff}}) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x80, r1, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x16}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xb}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x53f}]}, 0x80}}, 0x4000001) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, &(0x7f0000000300)}}, 0x3c) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000400), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r5) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="34000000e14b44d413cad75e2e63f528a216701c5fe5202623962e89eacbd81590e7159535ff9339f7904965e51f70125d473c7bd3406348398c407c887f673121f87338a0fbff66485a94ef6500831565b7d483b0c969ced75f1182a497b207497682c7471958b12dcedbfbc14cf64afb4e4156399b13cb258fe03a1d062bfeb249f14b2ecc7d69ca92ccc6ec9b0cf0172fc9f4b28d730e3e77d5c6f9ff48595b31055ef278b5dcd82a8e7ffe58559850295dfc2997bd1426d6dc7ed159edcd0bab926b98d00a", @ANYRES16=r6, @ANYBLOB="010000000000feffffff03000000200001800c00028008000200060000000f00010069623a627269646765300000"], 0x34}}, 0x0) sendmsg$TIPC_NL_NODE_GET(r4, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={0x164, r6, 0x8, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0xb8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x400}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x31ce}]}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x59245c54}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9a3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd511}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xb}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x230b}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5c10}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffff6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000001}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xa12}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000005) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = memfd_create(&(0x7f0000000340)='%\x00#D)\xdeA\x02\n,\x06\x89\x96\x8f\xd3F\x9fe\xf7\x9f\x9f\x0f\xeb\v\xc3\x86c\xe7\xc6\x88\xce%0\x05\x9d4M\tH\x89m\x14>4\xe4\xb4m\fF\xaf\x9d&\x05\xcf\xc1HZ\x9a\xa3X\xaa;t\x12\'\xf5\x18PvY\xbe\xd1J6\xd9\xa6\xec\xde\xd4\xb9I5\x1a\xc6S\x14\x18]K\xe0\xef\x97Vv\xbe\x8a\xffG\xc79\x9d\x19\x10\x8c\xb2\xe0` >D\x11*V\xb9\xcfi\x03FnU\t|b\xbe\x10\xc4\xd4\x01\xb2=\x11%\xd0`-\xe2\x1d\x8e\x7f\xd1\x15\x03\xa5(\x1e\x05H\xe8\'[0\xc2\vO\xdc\xf8?QT[8:f\xe9f\x9b\xd3\xe2:\xa2b\xa3\x89\n\x9d\n\xe2\xb7\xf6\xa6\xbe\x82]YF\x90\x8e\xde\xbd\xb1w\xf7\x15\xed\xd8\xea\xa8\xef\xfbM\x82oX\x80~\xe3\x1fH\xf4\x99\xa4\xd2E\'@\xab\x13\x94\xc2\xef\x81R\xbd\xaah\xd2D\xce\x1f\'\x8b9\xa5\x88\xf1C\x1a\a!\x95\x165RS1\x9e[\xf4\xa9v\xfah\xb7\xd8\x9c&\x85\xcbs\xad\x14\xf5\xd5\xd7M\x06\x15\x9d\xa2\xfb\xfc\x9c\x94`x\xdfma\xa6\x04\x06\xcb\xeb\vC{b\xceW3l\x8a\x9cO\"\xb5\xeb#\x03k\xe4\x99\xeb\xe3\x9d\xba\xd0\xb5\x0fh\xf2\xdc\x01\x81\xb48\xea\xaf\xd0*\x9c\x1d\xba,;\x17\xfb\x94M1\xea\x1f\xbf', 0x5) ioctl$FS_IOC_RESVSP(r7, 0x402c5828, &(0x7f0000000180)={0x0, 0x2, 0x80000, 0xb3}) r8 = mq_open(&(0x7f0000000540)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v\xf8\xff\xff\xff\xff\xff\xff\xffr\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xb9f\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\xb2F\xdf\xcc\xae', 0x40, 0xa8, 0x0) lseek(r8, 0x0, 0x3) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt\x00', 0x1ff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$sock_linger(r10, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x4}, 0x8) shutdown(r10, 0x1) mount(&(0x7f0000001100)=@filename='127.0.0.1:/\x00', &(0x7f0000001000)='./mnt\x00', &(0x7f0000001200)='nfs\x00', 0x0, &(0x7f0000001300)='nolock,v3,addr=127.0.0.1\x00') close(r9) r11 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r3, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r9}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_NET_NS_FD={0x8, 0x7, r11}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) 2.217504204s ago: executing program 2 (id=1995): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) accept4$x25(r1, 0x0, 0x0, 0x80000) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x4, 0x0, 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text16={0x10, 0x0}], 0x1, 0x6d, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000004c0)={0x3, 0x953, 0x0, &(0x7f0000000180)="a1984ec3aec3fc2e025f90eda6dbc903939aac644fd36f1e65174cae030c42cbacc392851a695f247112e91f059460a2c031929dc0515ac7cd20775ff9da9c2b6cb48968dcd6d8d982c492932c572f084d3af58650d207eec0794b3e47c5678c36b99eed61e1dbac68ce8a79aa21a51202018bdc4a51489844f785887083841d65c129992bbe5a51c71b95a9847d2bdede66c6e3184c386faf938fd6db888e73a5c0dcc69c3de7458e68ed33226a8d1c8e17", 0x0, 0xb2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41100, 0x51}, 0x94) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000040)={[0x7, 0xc, 0x6, 0xfffffffffffffffd, 0x8, 0x5, 0x4, 0x2, 0x8, 0x6, 0x3, 0x3, 0x1932be21, 0x100000000, 0x4, 0x4], 0xeeee0000, 0x40600}) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0x10, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x1}) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000800)=[@text32={0x20, 0x0}], 0x1, 0x2a, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x1, 0x7, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x40, 0x40, 0x40, 0x2, {{0x7, 0x4, 0x3, 0xc, 0x1c, 0x65, 0x0, 0x9, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x31}, @dev={0xac, 0x14, 0x14, 0x24}, {[@generic={0x94, 0x4, "c3b8"}, @end]}}}}}) sendmsg$nl_route_sched(r7, &(0x7f0000003680)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003640)={&(0x7f0000001080)=@newchain={0x258c, 0x64, 0x100, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x4, 0x5}, {0xd, 0x8}, {0xe, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x20, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0x32d, 0x81}}, @TCA_U32_POLICE={0xc, 0x6, [@TCA_POLICE_RESULT={0x8, 0x5, 0x7f}]}]}}, @filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}]}}, @TCA_CHAIN={0x8, 0xb, 0xbc7}, @filter_kind_options=@f_basic={{0xa}, {0x2510, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xa, 0x8}}, @TCA_BASIC_POLICE={0x4c0, 0x4, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x7, 0x7fff, 0x8, 0x3, 0x4, 0xfff, 0x9, 0x2, 0x4, 0x7fffffff, 0x7, 0x5, 0xa118, 0x800, 0x800, 0x6, 0x5, 0xc, 0x6, 0xb3, 0x4, 0x7fff, 0x9, 0x43, 0xd42b, 0x4, 0xc, 0x8, 0x80, 0x4, 0x9, 0x1, 0x5f79, 0x1, 0x1, 0x2, 0xd, 0xc74, 0x3, 0x7, 0x1000, 0x4, 0xb, 0xb8d, 0x5, 0x9, 0x7, 0x3, 0x5f28, 0x2, 0xc2, 0x3d, 0x708, 0x4, 0x1, 0x8, 0x4, 0x7, 0xdc9, 0x2, 0x2, 0x8, 0x9, 0xe8f47542, 0x0, 0x6, 0x2, 0xa07, 0x4b70, 0x81, 0x9, 0x7f86, 0x0, 0x8, 0x9, 0x4, 0x18000, 0x4, 0x40, 0x8, 0x6, 0x8001, 0x7fffffff, 0x3, 0x649, 0x7f, 0x47601d03, 0x7f, 0x0, 0xfffff9c0, 0xffffff01, 0x4, 0xfffffffc, 0xb, 0x4885, 0x7, 0x8000, 0x6, 0x5, 0x2, 0x4, 0x401, 0x0, 0x8000, 0x0, 0xfffffffd, 0x3, 0x1, 0x9, 0x9, 0x3, 0x10001, 0x2, 0x9, 0xffff55b3, 0xb9, 0x8000, 0x9, 0x6, 0x2, 0x3, 0xb, 0x8, 0x3, 0x5, 0x5, 0x7, 0x8, 0x9, 0xfffffffc, 0x4, 0x80000001, 0x2, 0x10, 0xb7b0, 0x4, 0xfffffffc, 0x2, 0x6, 0x9, 0x2, 0x91, 0x6, 0x5, 0x3ff, 0x8, 0x5, 0x4, 0x3, 0x7, 0x736e, 0x100, 0x56000000, 0x0, 0x8, 0x1, 0x7ff, 0x3, 0xc0c6, 0x1, 0xf, 0x4, 0x1, 0x7, 0x0, 0xff, 0x80, 0x3, 0x1, 0x0, 0x64, 0x3, 0x8, 0x2, 0x5, 0x5, 0x6, 0xfffffc00, 0x4, 0xd, 0x514e, 0x1, 0x8, 0x40, 0x800, 0x7f, 0x6, 0xb, 0x4, 0x9, 0x5, 0x3, 0x8, 0x101, 0x7, 0x1, 0x8001, 0x100, 0x4b, 0xe, 0x2, 0x7, 0x10000, 0x80000001, 0xffff7fff, 0x9185, 0x9, 0x3, 0x9, 0x3, 0x14f12c8e, 0x546, 0x9, 0x1e97, 0x101, 0x7, 0xc, 0x1, 0xd7ec, 0x0, 0x2, 0x3, 0x0, 0xe2, 0x4a, 0xb, 0xb0, 0xa, 0x6, 0x200, 0x0, 0xc39, 0x4, 0x2, 0xfffffffe, 0x4, 0x27, 0x8, 0x3, 0x0, 0x81, 0x9984, 0xfffffff0, 0x10001, 0x0, 0x401, 0x9, 0x6, 0x9, 0xfff, 0x80000000, 0x7d0, 0x7fff, 0x3, 0x400]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x400}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x17f}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8001, 0x4, 0x10, 0x80000000, 0x4, {0x1, 0x2, 0xce0, 0x8, 0xe, 0xffff}, {0x1, 0x0, 0xfffd, 0x3ff, 0x6ca, 0xe}, 0x2, 0x7, 0x6}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x3, 0x4, 0x5, 0xffffffff, {0x1, 0x0, 0x8, 0x8, 0x400, 0x10000}, {0xb, 0x2, 0x4, 0x1, 0x400}, 0x0, 0x6, 0xffffffff}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffff6c01}]}, @TCA_BASIC_ACT={0x203c, 0x3, [@m_skbedit={0xc0, 0xd, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xffe0, 0x2}}]}, {0x84, 0x6, "25beece4be56a7208bdc479dc9dec141a9e46125f6bb8a0f461e8ecc251e8ce36c4a33259ddab38dde0b317d2bd888a43f791ff0b781e7b72aaeea0cff0fd4f21ef7ea2b135ffb0d1dad776ffe6fce9f34cc554e05fd9f8412cab2e0859ce72577bdb770055477e8ab70a2f12cf4153d1b5182c54e106161e022ef7e0bfbfc67"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_pedit={0x1e60, 0x0, 0x0, 0x0, {{0xa}, {0x1de4, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x78, 0x5, 0x0, 0x1, [{0x54, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x4}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x46de8baf8429a20b}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe50, 0x4, {{{0x7f, 0x400, 0x1, 0x8000, 0x380}, 0x7, 0x0, [{0xc, 0x9, 0x40, 0x7ff, 0x3, 0x2}, {0x0, 0x7, 0xdff, 0x6, 0x8001, 0xf9}]}, [{0x0, 0x2, 0xa13c, 0x81, 0x9, 0x9}, {0x5, 0xf80f, 0x6, 0x2, 0x9, 0x9}, {0x1, 0x4, 0x7, 0x6, 0x7, 0x401}, {0x4, 0x9, 0xe, 0x1, 0xf, 0x6}, {0x81, 0x8, 0x7b, 0x8, 0x2, 0x2}, {0x0, 0x4, 0x400, 0x7fffffff, 0x1, 0x9988}, {0x2, 0x2, 0x5, 0x8, 0xb8, 0x2}, {0x2, 0x79, 0x3ff, 0xfffffffa, 0x2, 0x9}, {0x4, 0x96c, 0x3, 0x8, 0x9, 0x3}, {0x0, 0xfffffffd, 0xfffffff9, 0x10000, 0x7, 0x3}, {0x2, 0x4, 0x6, 0x80, 0x3ff, 0x400}, {0x0, 0x1ff, 0x5, 0x4, 0x4, 0x9}, {0x4, 0x46, 0x7, 0x200, 0x5, 0xe}, {0x1, 0x9, 0xe, 0x6, 0x6, 0x8}, {0xe23e, 0x4, 0x7, 0x0, 0x6, 0xa2}, {0x4, 0x3, 0xffff, 0x1, 0x7, 0xfff}, {0x3, 0xab3, 0x4, 0xfffffff9, 0x0, 0x4}, {0x2000000, 0xc, 0x800, 0x9, 0x6d6, 0x5}, {0x3, 0x2, 0x1, 0xf0, 0x2, 0x4}, {0xef1, 0xa5, 0x1ff, 0x4, 0x8, 0x5}, {0x6, 0x20000000, 0x6, 0x67, 0x3, 0x9}, {0x4, 0x4, 0xd, 0x0, 0x4, 0xb1}, {0x7, 0x7, 0x2, 0x0, 0x5d55dccf, 0x5}, {0x8, 0x7ff, 0x9, 0x10000, 0xbe99, 0x7}, {0xffffffff, 0x0, 0x6, 0x6, 0x2, 0x2}, {0xa, 0x4, 0x7fff, 0x1649, 0x4, 0x2}, {0x200, 0x3ff, 0x40, 0x3, 0x34d7, 0x3}, {0x81, 0x1, 0xf, 0x3, 0x3}, {0x3, 0x5, 0x7, 0x1, 0xffffffff, 0x5}, {0x296, 0xab2, 0x10, 0x7, 0x1, 0xe}, {0x3, 0x5, 0x80, 0x100, 0x8001, 0xfffffffb}, {0x6, 0x8, 0x2c8, 0x80000000, 0x3a5, 0x19c}, {0x7, 0x7fff, 0xc16, 0x10, 0x8, 0x800}, {0x8, 0x9, 0x8, 0x7, 0xffff78a0, 0x6}, {0xfa, 0x74a, 0x7, 0xfffffffd, 0x3, 0x2}, {0x2, 0xfffffa4b, 0x6, 0x10000, 0x10001, 0x5}, {0x29, 0x40, 0x9, 0x7, 0x7edc, 0x5}, {0x40, 0x81, 0x8001, 0x7, 0x8}, {0x6, 0x9, 0x8, 0x4, 0x1, 0x8001}, {0x2, 0x4, 0xc, 0x0, 0xffffffff, 0xa4}, {0xdf9, 0x0, 0x4, 0x9, 0xffffffff, 0x4894}, {0x1d9, 0xb, 0x0, 0x9, 0xb, 0x1000}, {0x8, 0x4, 0x5, 0x0, 0x1, 0x6}, {0x465, 0x5, 0x6, 0xc6d, 0xffff8000, 0x3ff}, {0x3, 0x9, 0x80000001, 0x73, 0xe5, 0x3}, {0x5, 0xe, 0x9, 0x7, 0xf, 0x101}, {0x5a21, 0x80000000, 0x8, 0x1000, 0xee5, 0xc7}, {0x4, 0x5, 0xe0, 0x4, 0x2, 0x3}, {0x381a, 0x4, 0x3, 0x9, 0x2, 0x2}, {0x9, 0x6, 0x1, 0x8, 0x5, 0x8001}, {0xffffffed, 0x100, 0x7fffffff, 0xd8, 0xa41, 0x8}, {0x10, 0x14ff, 0x3, 0xfffffffa, 0xfffffffb, 0x101}, {0x5, 0x6, 0x200, 0x8, 0x4, 0x5}, {0xfffffff7, 0x932, 0x0, 0x200, 0x80, 0x4}, {0x10001, 0x2, 0x8, 0x9, 0x9, 0x99e1}, {0x6, 0x5, 0x6, 0x5, 0x40000000, 0x81}, {0x5, 0xb, 0x3, 0x4e5dc3e2, 0xb01f, 0x9}, {0x5, 0x1, 0x3, 0xfffffff4, 0x7e}, {0x6, 0x7, 0x9, 0x6, 0xfff}, {0x5, 0x80000000, 0x6, 0x80000001, 0x8000, 0x280000}, {0x8, 0x0, 0x7, 0xfffffffb, 0x6, 0x3ec3}, {0x0, 0xc, 0x9, 0x0, 0x21, 0xa8}, {0x8, 0x2, 0x200, 0x4, 0x7fff, 0x2}, {0x4, 0x8, 0x10000, 0xfffffffd, 0xcb11, 0xfa3}, {0xffffffff, 0x4, 0x3, 0xffffffff, 0x81, 0x5}, {0x0, 0xd, 0x1000, 0x7fff, 0x5, 0x8}, {0x3, 0x3, 0x7, 0x4, 0x8c, 0x3}, {0x2, 0x0, 0xffff, 0x40, 0x7, 0x40}, {0x1000, 0x1000, 0x4, 0x80, 0x5, 0x9}, {0x9, 0x3, 0x9, 0x4, 0x400, 0x1}, {0x0, 0xc1, 0x80, 0xfffffffd, 0x400, 0x2}, {0x5, 0x1, 0x7, 0x0, 0x8, 0x2}, {0x1, 0xae6, 0x6, 0x5, 0x1, 0x8}, {0xffffffff, 0x5, 0x1, 0x7f, 0x7, 0x4}, {0x6, 0x7, 0xa, 0x1c, 0x10001, 0xd8a}, {0x0, 0x2, 0x5, 0x1, 0x0, 0x8}, {0x4, 0x8, 0x1, 0xfffffff4, 0x0, 0x80000001}, {0x0, 0x4, 0x10, 0x0, 0x1, 0xffff}, {0xfff, 0x2, 0x3ff, 0x10001, 0x2, 0x1}, {0x2, 0x0, 0x3, 0x7fff, 0xf85, 0x3}, {0x40, 0x0, 0xff, 0x4, 0x8d6, 0x29471e55}, {0x33, 0x40, 0x0, 0x4, 0x1, 0x4}, {0x2, 0x9, 0x9, 0x0, 0x80000000, 0x8}, {0x401, 0x81, 0x9647, 0x5b, 0x8}, {0xf, 0x8, 0x3, 0x4, 0xc, 0x8}, {0xa5, 0x80, 0x5, 0x1, 0x157, 0x3}, {0x6, 0x5, 0x10001, 0xffffffb8, 0x2, 0x7eb3}, {0x8000, 0x9, 0x5, 0x8001, 0x8, 0x1}, {0x3, 0x9, 0x953, 0x1, 0x8, 0x800}, {0x1, 0x2, 0xd0, 0x6, 0x3, 0x4}, {0x4, 0x101, 0x0, 0x8000, 0x3800, 0x1bee98ee}, {0x6, 0x7, 0x3b6e, 0x1621, 0x6, 0xbf2d}, {0x10, 0x2f7, 0x1000, 0xb4f, 0xc, 0x135c}, {0xf4, 0x4, 0x80000001, 0x45f, 0x7fff, 0x2}, {0x1, 0x9, 0x6, 0x2, 0x5, 0x9}, {0x4, 0x6, 0xffffffff, 0x835b, 0xff, 0x2}, {0x1ff, 0x9d9a, 0x10001, 0x8, 0x400, 0x1}, {0xd4a, 0x8, 0x4, 0x1796, 0x2b, 0x4f3}, {0x0, 0x5, 0x7, 0xfffffff9, 0x8, 0x10001}, {0x1ff, 0x8, 0x4, 0xffff, 0x401, 0x9}, {0x6, 0x9c, 0xfd, 0x1, 0x7, 0xf}, {0x6, 0x2, 0x8, 0x1, 0x4517}, {0xffffffff, 0x1, 0x100, 0x51afe2ba, 0x64a, 0x54}, {0xfffffffd, 0x2, 0x1, 0x10000, 0x718, 0x40}, {0x16, 0xf2cf, 0x9, 0x9, 0xce, 0x7f}, {0x4, 0x6d1, 0x2, 0xfffffeff, 0xc1, 0xfffffff7}, {0x0, 0x10, 0x7, 0x5, 0x34000000, 0x80000000}, {0xffff, 0xfd, 0x3, 0x9, 0x4}, {0x4, 0x6, 0x2, 0x7fff, 0x4, 0xfffffffa}, {0xfffffffb, 0x7, 0xb, 0x7fff, 0x5, 0x9}, {0x58e, 0x22b, 0x5, 0x9, 0xffffff46, 0x3c85}, {0x3ee, 0xb23, 0x5, 0x6, 0x400, 0x8}, {0x6, 0xb4c, 0x68d, 0x3, 0x0, 0xffffffff}, {0x4a11b57, 0x1, 0x6, 0x5, 0x9, 0x7}, {0x9, 0x7, 0x10000, 0x6, 0x40, 0x8}, {0x0, 0x5, 0xc, 0x1c, 0x7, 0xa9}, {0x7fffffff, 0x101, 0x5, 0x4, 0x80, 0x5}, {0xe264, 0x0, 0x7fff, 0xec0d, 0x3f, 0x2}, {0x7, 0x6, 0x7, 0x1000, 0x0, 0x9817}, {0x3ff, 0x0, 0xb3a6, 0x133, 0x1, 0x57}, {0xfffffff6, 0x46, 0xff, 0x4, 0x8, 0x7}, {0x2, 0x2, 0xffff, 0x1, 0x5}, {0x9, 0x4, 0x3, 0x1, 0x2}, {0x1ff, 0x40, 0x8, 0x5, 0xd4, 0x1}, {0x5, 0x81, 0x2, 0x9, 0x351, 0x8}, {0x3, 0x6, 0x7ff, 0x3, 0x7, 0x1}, {0x8, 0x9, 0x2, 0x563, 0x1, 0x9}, {0x8000, 0x9, 0x7, 0x9, 0x7, 0x7c}], [{0x5}, {0x1, 0x1}, {}, {0x1}, {0x4}, {0x0, 0x1}, {0x5}, {0x2}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x5, 0x2}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x3}, {0x2}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0xad6c8fa8b31285ab}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x1}, {0x3}, {0x5, 0x1}, {}, {0x2}, {0x5, 0x1}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {}, {0x2}, {0x1}, {0x4}, {}, {0x1}, {0x1}, {0x1}, {0x3, 0x1}, {0x1}, {0x4e487bed4dd4f98b, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x5, 0x1}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x1}, {0x4}, {0x4, 0x1}, {0x4}, {0x2}, {}, {0x4}, {0x0, 0x1}, {0x4, 0x1}, {}, {}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x1, 0xd8782ec0621a243a}, {0x5}, {0x83fa623c9e490298}, {0x3}, {0x1}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x3}, {0x1}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {}, {0x7}, {0x3}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x4}, {0x2}, {0x4, 0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0xc8, 0x5, 0x0, 0x1, [{0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}]}, @TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x6, 0x4, 0x20000000, 0x800, 0xea8}, 0x2, 0x8, [{0x77d2, 0x6, 0x4f, 0x1, 0x8, 0xa}, {0xfffffff6, 0xd, 0x4, 0x0, 0xfffffffc, 0xc0}]}, [{0x0, 0x4, 0xb, 0x5, 0x5, 0x8d0}, {0x4, 0x1, 0x8, 0x9, 0x5, 0x7}, {0x4a, 0x5, 0x6, 0x5, 0x1, 0x7}, {0xa, 0x1, 0x3, 0x3, 0x2f64, 0x792ca715}, {0x4, 0x6, 0xbb3, 0x9, 0xe5, 0x9}, {0x1, 0xee, 0x428fab42, 0xe6c, 0x5, 0xfffffffa}, {0x6, 0x401, 0x5, 0xb, 0x0, 0x3ff}, {0x820, 0x1, 0x1, 0x3, 0x27, 0x5}, {0x399, 0x8, 0x7, 0xfffff3fa, 0xffff, 0x9}, {0x5, 0xc, 0x6, 0x6, 0x9, 0x7}, {0x0, 0x43b0, 0x8, 0x5, 0x2, 0x5}, {0x8, 0xd88d, 0x7, 0xaf, 0x7, 0x2}, {0x6, 0x7fff, 0xfffffffd, 0xfffffff9, 0x9, 0x7}, {0x5, 0x100, 0xb, 0x10001, 0xfffffffb, 0x3ff}, {0xfff, 0xfffffffc, 0x1ff, 0x1, 0x4, 0x1}, {0x0, 0x1, 0x8, 0xc5b, 0x8, 0x7}, {0x7f, 0x4, 0x7fff, 0xffffffff, 0x3, 0x3ff}, {0x76d75299, 0x7, 0x2, 0x98, 0x3, 0x7fffffff}, {0x9, 0x401, 0x2cc, 0xf, 0x0, 0xe}, {0x3ff, 0x54, 0x7, 0x4, 0x9, 0x3}, {0x9, 0x0, 0x5c, 0x5, 0x8, 0x6}, {0x1800, 0x6, 0x80000001, 0x8000, 0xfffffff8, 0xf}, {0x2, 0x2, 0x6, 0x101, 0x2f21ff94, 0x3}, {0x61f, 0x9, 0x9, 0x2, 0x1, 0x7}, {0x2, 0x1, 0x2, 0x5, 0x2, 0x9}, {0x5, 0x5, 0xfffffffe, 0x4, 0x7, 0x7}, {0xba8, 0x3, 0x7, 0x8, 0x0, 0x7ff}, {0x10000, 0x10001, 0x6, 0x5, 0x0, 0x81}, {0x10, 0xd, 0x700, 0x6, 0x4, 0x2}, {0xd, 0x8, 0x200, 0xd6e, 0x4, 0x7}, {0x8, 0x7, 0x3, 0x7fffffff, 0x8, 0xcb89}, {0x2, 0x5, 0x9, 0x9, 0x9c000000, 0x10001}, {0x9, 0x3, 0x7, 0x7fff, 0x800, 0x9a}, {0x5, 0x0, 0x7, 0x5, 0x5}, {0x81, 0x9aa, 0x5, 0x9, 0x2, 0x537}, {0x5, 0x4, 0x0, 0x6c, 0x8, 0x4}, {0x9, 0x9, 0x48000, 0x6, 0x800, 0x7}, {0x9, 0x800, 0x2, 0x9, 0x9, 0x9}, {0x200, 0xa83a, 0x5, 0x5, 0x3, 0x9a}, {0x1a, 0xfd, 0xffffffff, 0xbd, 0x3, 0x9}, {0x1000, 0x40, 0x4d3, 0x1ff, 0x2, 0xf4}, {0x2, 0x2, 0xa9, 0x61b707be, 0x6, 0xc}, {0x0, 0xc, 0xf80, 0x0, 0x0, 0x3ff}, {0x4, 0x4, 0x20, 0x4, 0x6, 0x7fffffff}, {0x9, 0x1, 0x9, 0x3, 0x7, 0x800}, {0x3, 0x2, 0xff, 0x1253acdb, 0x3, 0x800}, {0x7fff, 0x800, 0x1000, 0x5, 0x101, 0x10}, {0x4, 0x6, 0x8, 0x5, 0x4, 0x2}, {0x0, 0xb2, 0x8, 0x6, 0x9, 0xe}, {0x6, 0xa4, 0x8001, 0x8, 0x0, 0x3}, {0xfff, 0x4, 0x8000, 0x8, 0xfffffff9, 0x7}, {0x2, 0x6, 0x1ff, 0xfff, 0x6, 0x5}, {0x6, 0x0, 0x52d5, 0xffffff93, 0x2, 0x10}, {0x81, 0x1fc0000, 0xfffffffb, 0xfffffff8, 0x35f8fe5, 0xffff7fff}, {0x644f, 0x1, 0x0, 0x6, 0x0, 0x1c00}, {0xb, 0x2, 0x1000, 0xffffff81, 0x7a, 0x9}, {0x2, 0xce0, 0x8, 0x6, 0x3}, {0x5, 0x4dd, 0x4, 0x0, 0xffffffc0, 0x8}, {0x7, 0x8, 0x7, 0xfffff801, 0x7, 0x707}, {0x2, 0x1, 0x73, 0x80, 0xe0ff, 0x10000}, {0x7, 0xffff, 0x8, 0x5, 0x5, 0x3}, {0x1000000, 0x8, 0x4, 0x10001, 0x6, 0x5}, {0x136c0, 0xec4d, 0x58d, 0x0, 0x6, 0x7}, {0x3, 0x1, 0x4, 0x0, 0x4, 0xb6bf}, {0x4, 0x0, 0x1, 0x4, 0x9, 0x7}, {0x8, 0x80, 0x7, 0x0, 0x81, 0x6}, {0x3, 0x59, 0x2, 0x9, 0xdf, 0x14ad}, {0x4, 0x5, 0x4, 0xfffffffa, 0x5, 0xffff}, {0x7fffffff, 0x5bbb, 0x3, 0xfffff655, 0xfffffff8, 0xffffd7d8}, {0x10000, 0xd, 0x4, 0xae, 0x9, 0x9}, {0x9, 0x6, 0x40000000, 0x6, 0x1ff, 0x96}, {0x0, 0x1, 0x2cef, 0x6, 0x6, 0x1af}, {0xe8c00000, 0x7600, 0x1000, 0x98, 0x80000001, 0x401}, {0x43c4, 0x5a2a, 0x4f, 0xc7e6, 0x6, 0x6}, {0x400, 0x5, 0xcc, 0xfffffff9, 0x400}, {0x1, 0x4, 0x1, 0xb8c, 0x1cd777d9, 0x80}, {0x66, 0x52, 0x8, 0x4, 0x0, 0x7}, {0x7, 0x2, 0x8, 0xd, 0x3, 0x71d}, {0x5, 0xbd, 0x7, 0x4, 0x1, 0xe45}, {0x10000, 0x5, 0x4, 0x7, 0x8, 0x3}, {0xd51, 0xe1, 0x8, 0xd5b6, 0xc0, 0x3}, {0x3, 0x5, 0x3, 0x101, 0x18000, 0x3}, {0x3, 0xe, 0x0, 0x770, 0x7, 0x1}, {0x6, 0x2, 0x8, 0x6, 0x3, 0x35b1f5fa}, {0x8, 0x6a1e, 0x4, 0xa7, 0x86db, 0x8}, {0x5, 0xffffffff, 0x8000, 0x2, 0xe, 0x8}, {0xb72d, 0x9, 0x5, 0x9, 0x8001, 0xd}, {0x3, 0x401, 0x4, 0x5, 0x1e, 0x3}, {0x6, 0xa22, 0x1, 0x401, 0x3, 0x401}, {0x3, 0x5, 0x800, 0x770, 0x3, 0xf4f}, {0x5, 0x6, 0x2, 0xfffffbf0, 0x1, 0x4}, {0xd53, 0x0, 0xb5, 0x10001, 0x2, 0x40}, {0xa, 0xffff, 0xb, 0x7, 0x1, 0x6}, {0x1, 0x482, 0x5, 0x7, 0x3, 0x2}, {0x2, 0xfffffffc, 0x8, 0x1, 0xd, 0x393}, {0xfffffffb, 0x5, 0x800, 0x6, 0x8, 0x9}, {0xfffeffff, 0x0, 0x7ff, 0xfffff001, 0x4, 0x4}, {0x1, 0x7, 0x10000, 0x81, 0x1ff, 0x6}, {0x7b, 0xb33d, 0x4, 0x0, 0x9, 0x53c}, {0x3ff, 0xc, 0xffffffff, 0x80000000, 0x28, 0x1ff}, {0x3, 0x9, 0x6, 0x2, 0x9, 0x14}, {0x0, 0x80, 0x40, 0x3, 0x4, 0xa2}, {0x6c96442c, 0x8000, 0x0, 0x1cb7207f, 0x5, 0x8}, {0x7, 0x81, 0x2f06, 0x7fffffff, 0x8}, {0xfffffffc, 0x2, 0x8, 0xa3, 0x3, 0x80000000}, {0x7, 0x6, 0x2, 0x8, 0x7, 0x1}, {0x6, 0x9, 0x81, 0x3, 0x7, 0x6}, {0x1, 0xf5, 0xffffa275, 0x2, 0x2, 0x10000}, {0x7, 0x2, 0xed3, 0x7175}, {0x10000, 0x8, 0x5, 0x2, 0xb91, 0xffffffff}, {0xc, 0xfffffff2, 0x9, 0x6, 0x6, 0x4}, {0x441a, 0x9, 0x4, 0xae97}, {0x5, 0x6, 0x3, 0xffffffff, 0xf, 0x7c}, {0x8, 0x8, 0x9014, 0x9, 0x4, 0x6}, {0x6, 0x6, 0x81, 0x3, 0xfffffffc, 0x2}, {0xfffffffb, 0x81, 0x0, 0x7ff, 0x9, 0x2613}, {0x54a, 0xc93, 0x9, 0x5, 0x770, 0xfe4}, {0x101, 0x1000, 0xe5, 0x6, 0x8, 0x6}, {0x7, 0xcd, 0x8, 0x2, 0x1, 0x81}, {0x6, 0xc, 0xfff, 0x4, 0x200, 0x2}, {0x3, 0x8, 0x401, 0xffffffff, 0x2, 0x5}, {0xfffffb41, 0x4, 0x55a, 0xe, 0x3, 0x9}, {0xc0000000, 0x1, 0x7cd7, 0xe98, 0xd, 0xa4}, {0x0, 0x2, 0x0, 0x2, 0x8, 0x7}, {0xceb7, 0x2, 0x3, 0x5, 0x7ff, 0x3}, {0x8, 0x0, 0x2, 0x5, 0x52, 0xfffffffa}, {0x6, 0x9, 0x7, 0x6, 0x1, 0x4ed4}, {0x8, 0x4, 0x0, 0x40, 0x3ff, 0x101}], [{0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x5}, {0x6, 0x1}, {0x4}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x0, 0x1}, {0x5}, {0x2}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {0x1}, {0x4}, {0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {}, {0x5}, {}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {}, {0x0, 0x1}, {0x2}, {0x2, 0x1}, {0x2}, {0x1, 0x1}, {0x2}, {0x2, 0x1}, {}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x2}, {0x5}, {}, {0x1, 0x1}, {0x9, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x2}, {0x2}, {}, {0x0, 0x1}, {}, {0x7070942386176f42}, {0x4, 0x1}, {0x4, 0x1}, {0x6}, {0x3, 0x1}, {0x3}, {0x1}, {0x7}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3}, {0x5}], 0x1}}]}, {0x53, 0x6, "208bc6d9d7fa2103234e5a711483d8431ae4ac1fed2c01087af56af1363d5e978c3c2b8244c342dc1c11a297344172296936861a1b86ffdd4d3549c0f94e456c39e6bf1dfcb99f641453c975aca965"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_sample={0x118, 0x7, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x101}]}, {0xe3, 0x6, "89331e2d2d7063ab28f4c9488ef62bfda55ed41153cf76f8451edc90b995d78175dbadaac0aec6fa5a0171631c525608ef51c66d3071c0a9b66d1bc9d7b3c5b2c4d4cd344cdef80bb3838e240fd3efd54d44130ae5306c086301b7f9228eea3835d5776a108a32216e91f2e8029559048475041a89d8cb0406208c06f7d48af16c15bfa18327d6e9a6fb12148b5376bf209263dfe8be7f37c9b13b8ff5d58ba2a065df1c3341451906b3410a3f4de926a3eacd30c73e90e350fe0a8d6be7f76568861e7d9ac365cef1654043235be0834f2435fab87d46fa23c8783d8b121a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x8, 0x2}}]}}]}, 0x258c}}, 0x4000) write$FUSE_NOTIFY_DELETE(r2, &(0x7f0000000f40)={0x10c, 0x6, 0x0, {0x4, 0x8000000000, 0xe3, 0x0, '/sys/\x06\xc0\xa4\x9eN\x00\x00\x00\x00\x00\x00\x00en\xdf\x00\x00\x00\x00\x80\x00\x01\x00\x00\x00\x00\x00\x8a\xde\xb5\x1a8\xc1T\xcc\xe9|8\x18\xf0\xb5\xb4X0\x92\n%EaFK\xea\xce\x86c9\xff6h\x8c$\xa2,\xc3\xa4\xc9\xf4\xc8\x1f\xa3\xc2wa\x8f\xc5G\xad\x15\x9b\xfd\xcc8G\xefP\xbd*\x98`\xeb]\xde\xd6\xd0W\xd3\x18\x93g\x18]\xe0\xfc\xd0\v{\xf6,\xd6\xa3\xb1\xfc\xbcG8u\x9bH\xb3;\x94\x891It\x0e\x9em\xad\x90\xd2\x92i)1LgS\x8f4z\xa4\xf7\x8f\x16\xeeCS;Kk\xdcE\xe0\x1f\x9b\xa4Y\x85\xd8\x80zS\f\xb7\xf2\xb2|\x88\x1b?\x8e\nu+\xe8\xbf\xdc>\xd5X\xe2\xfdR\xed\xc2\xc8_\xf0\x0f\x7f}\xc4\x91\xca?\x8a\x89x\xce\xd7u\x03\xe5\x88\x90\x9ck1!+|\x18\x82W[\x84\x05/\xccI\xff'}}, 0x10c) r9 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r9, 0xee01, 0x0) keyctl$setperm(0x5, r9, 0x30925) 2.216687204s ago: executing program 3 (id=1996): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x100010, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xfc, {"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", 0x1000}}, 0x1006) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r3, 0x0, r2, 0x0, 0x6, 0x0) write(r2, &(0x7f00000002c0)="fe", 0xfdef) read$watch_queue(r1, &(0x7f0000000780)=""/221, 0xfdef) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[], 0x14}}, 0x54) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2400c800}, 0x0) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4006, &(0x7f0000000c00)=0xc, 0x6, 0x2) r4 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x0) fchdir(r5) ioctl$USBDEVFS_ALLOC_STREAMS(r5, 0x8008551c, &(0x7f0000001040)=ANY=[@ANYBLOB="5ffa00000000000055a08bb012048e737e29fd58af9c0558286432ce56db4dd4e7d4d5c86fc886d5f1ea89bd27d0c2c050d7799dc6a9ee4384119f09cc81d659e94bd9385f3266c1d4a907b7db255d89d117879b42847abf74c4ddc20b1ded2589d8b103120e84ba74b45c0e3e86670c2e7bd277f643a2a6962c5ddb947d1f31f23065b36dcc41f68cd26cc8a3e30381bcf3e3c06a1b87d2cc43dfc0831f3c833dffdaa308fe4634f630ee6e51c69cabc60c9b3311a344462c98ee7a87f31d7e04c6f1f25bd5f87c8b55701a9b3c341275"]) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000) io_setup(0x2278, &(0x7f0000000180)) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$usbfs(0x0, 0xf, 0x8041) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000001140)={0x8, 0x2, "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"}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000ff0000000100000000010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000e600000000000000000000000900"/28], 0x49) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x101c42, 0x0) 2.033909584s ago: executing program 2 (id=1997): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e) syz_emit_ethernet(0x78, &(0x7f0000000880)={@link_local, @random="0000fc00", @val={@val={0x88a8, 0x3}, {0x8100, 0x3, 0x0, 0x1}}, {@ipv4={0x800, @gre={{0x7, 0x4, 0x1, 0x6, 0x62, 0x64, 0x0, 0x4, 0x2f, 0x0, @multicast1, @multicast2, {[@cipso={0x86, 0x6, 0xffffffffffffffff}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x2}, {0x0, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x3, {{0x3, 0x1, 0xe2, 0x0, 0x1, 0x1, 0x1, 0x8}, 0x1, {0x8}}}, {0x8, 0x22eb, 0x4, {{0xf, 0x2, 0x2, 0x3, 0x0, 0x0, 0x6}, 0x2, {0x9c, 0xbd, 0x0, 0x19, 0x1, 0x1, 0x3, 0x0, 0x1}}}, {0x8, 0x6558, 0x2, "f80f"}}}}}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r2, 0x4068aea3, &(0x7f0000000000)={0x8f, 0x0, 0xa}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fchdir(r0) lseek(0xffffffffffffffff, 0x101, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0xffffffff, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1200000007060108000000000000d2d80000bf9f2042e5fd8715dc46"], 0x1c}}, 0x0) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x0, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1d5) mount(0x0, &(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000240)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000601, 0xee01, &(0x7f0000000300)={0xfffffffffffffffc, 0x5, 0x1, 0x2}) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r6, 0x0, 0x0, 0x14022, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2.023463814s ago: executing program 1 (id=1998): r0 = socket(0x10, 0x803, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x30, &(0x7f0000000140)={0x11, 0x4, 0x6}, 0x0) syz_open_dev$admmidi(&(0x7f0000000000), 0x80, 0x130c42) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x12, 0x8c, 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r3, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r5, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001080)={0x20, 0x0, 0x7, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000019}, 0x8080) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006080)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r6, {0x4, 0x8001}, {}, {0xa, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x6, 0xd}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2002c805}, 0x20000054) syz_open_dev$vim2m(&(0x7f0000000000), 0xfff, 0x2) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, 0x0, 0x118) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) r8 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000400)=ANY=[@ANYBLOB="12010002000000405a0609000001000000010902190001010080320904000001ff0000000705810240"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/ttyUSB0\x00', 0x2, 0x0) syz_usb_control_io(r8, 0x0, 0x0) 1.79794008s ago: executing program 2 (id=2001): ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(r1, r1, 0x2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, 0x3e9, 0x100, 0x8070bd29, 0x25dfdbfd, {0x22, 0x0, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0xfff, 0x76}}, 0x3c}, 0x1, 0x0, 0x0, 0x14008400}, 0x44000) sendto$inet(r3, 0x0, 0x0, 0x28040041, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="e186", 0x2}], 0x1}, 0x24044041) recvmmsg(r3, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) 1.755497895s ago: executing program 2 (id=2002): r0 = socket$nl_rdma(0x10, 0x3, 0x14) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x161d02) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x0, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x7, &(0x7f0000000040)=0x8000001, 0x4) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) setgroups(0x0, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r5 = syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58) ioctl$TIOCSERGETLSR(r4, 0x5459, &(0x7f00000001c0)) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000000280)=ANY=[@ANYRES16=r0, @ANYRESHEX=r0, @ANYRES64=r4, @ANYRESHEX], 0x24}, 0x1, 0x0, 0x0, 0x24048454}, 0x0) ptrace$peekuser(0x3, r5, 0x7) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000000314230c2dbd7000ffdbdf250900020073797a32000f00000800410072786500140033007767320000000000000000000000000066129cbdaaf92ea305126427a766b1c085924cd6ad57b03cfe9655f622d77d2aeea86454e08d702ca2d6392ca31ef21b722d78da5d90886bb0db32b0e33c89a5e901bb4e0379f25665d395238e6730ad37288567b268fe7f1586d588e526e7d727ec73b81279a75e879dd960e5107507609756ec582a8032a0ae41beb16ed972c66cc59029b79ace6666660cde28316ee23ff7ea64e39ae6d39b5f45f5ccf2adaffee80cc44776710ba5c2a2e806dcb0a1fd133d11902dea4f"], 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x5514, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000040)={'\x00', 0xd, 0x1, 0x102, 0x401, 0x1}) 1.427890385s ago: executing program 4 (id=2003): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0x0, 0xa}, {0xffff, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x800003, 0x3, 0x1, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x6, 0x7, 0x7fff, 0xffffff43, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x80, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0x8, 0x80000001, 0x8, 0x4, 0x9, 0x5, 0xfffffffd, 0x19, 0x7, 0xc, 0x7, 0x4, 0x1, 0xfefffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x400004, 0x0, 0x8, 0x5, 0x48001, 0x5, 0x1, 0x1000, 0x9, 0x1, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff40, 0x1, 0x6ddd, 0xf, 0x6, 0x556, 0x1, 0x2e, 0x5, 0x80000001, 0x1, 0x0, 0x200, 0x3, 0x2, 0x6, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x7c, 0xb, 0x0, 0x743, 0x5, 0x3, 0x0, 0x200, 0x5, 0x1, 0x8, 0x3, 0x200100, 0x3, 0x0, 0xfffffffe, 0x6, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x1c0, 0xf80, 0x7, 0x116b, 0x2302, 0x9, 0x3ff, 0x2, 0x5, 0x8, 0x6, 0xffffffff, 0x20000004, 0x10001, 0x512d, 0x1, 0x5, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x9, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e5, 0x48, 0x9, 0x7, 0x10, 0x3, 0x6, 0xf, 0xff, 0xf, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x204a82, 0xffff0000, 0x7ff, 0x9, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x1000000a, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x5, 0x3ff, 0x2, 0x100, 0x8, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x6ba4, 0x7, 0x3565, 0x10001, 0x2, 0x4, 0x8, 0x1000, 0x0, 0x71f, 0x2, 0xc59, 0x6e8, 0x9, 0x101, 0x80000000, 0x6, 0xc, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) r5 = socket$inet6(0xa, 0x3, 0x5) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @empty}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) r7 = socket(0xa, 0x3, 0x3a) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x0, 0x8, r9, 0x4000401}, 0xc) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r10, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x2c, r11, 0x605, 0x70bd25, 0x25dfdc01, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x41840) setsockopt$MRT6_FLUSH(r7, 0x29, 0xd4, &(0x7f0000000080)=0xc, 0x4) sendmmsg(r5, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0x54) getgid() sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r3, 0x21}, [@IFLA_MASTER={0x8, 0xa, r4}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r12 = socket(0x200000000000011, 0x2, 0xfffffffd) r13 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$sock(r13, &(0x7f0000001140), 0x0, 0x2a9b0a4a1e70e25c) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r12) sendmsg$NL80211_CMD_NEW_STATION(r12, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x104, r15, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x7f}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xc2, 0xbe, "a50efeffc909c6d889f31a6682a2120f3a13f0019bb69c67a2bcc51d36ac2886024934f8bd84a984560e0892de63ca357a4902f8a60168fd68e859a4d5d60b96f393f1c565d85392615da81c48d99969c481942c8734eb481433db7286ece859bece9a3a2391b9fccda9d813f417189167590ff5e1b5831cd14eacad29cd1109627c8c72873c29571f388863d24da8c87ef2adcab9bf59d4f6b834993a846f5864a5bfa098a7f7998f960117b73c49aa9bd0e2fd0ed2c15f1fb629e77eca"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x1}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x6, 0xbd, [0xc4]}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x3}]}, 0x104}, 0x1, 0x0, 0x0, 0x40004}, 0x20000004) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r14, @ANYBLOB="0000000003120100500012800b00010062726964676500004000028008000500010000000600270fff0000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f00000026c0)={0x0, 0x2, 0x0, 0x4}) 1.427598969s ago: executing program 4 (id=2004): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x84, 0x0, 0xa, 0x200, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x4e, 0x6, "437c2137181ad0cd9882e08b01bcc9c7b293f080806ae982ceed63657e94c90a33558f5a497b09e8d15a897c064ed6b29c3b26bfd8bcbb9b4b4ac31dc6c77ef5c53fd99d2cec2469659a"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xac}, 0x1, 0x0, 0x0, 0x40000}, 0x40006) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x9c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x58, 0x12, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x8}]}}}, {0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}, {0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x120}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe4}}, 0x20050800) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x0, 0xffffffffffffffff}}, './file0\x00'}) landlock_restrict_self(r2, 0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e000000850000000700000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000640)="d9b9547ed3c0021a6fd6a67ab922", 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$FUSE_DEV_IOC_BACKING_OPEN(r2, 0x4010e501, &(0x7f0000000080)={r2}) 1.360124143s ago: executing program 4 (id=2005): r0 = syz_open_dev$mouse(0x0, 0x0, 0x511741) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, {{0x0, 0x122a000000}}}, 0x28) ioctl$FS_IOC_SETFLAGS(r2, 0xc0606610, &(0x7f0000000040)=0x60) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, 0x0, &(0x7f0000000440)='GPL\x00', 0x60, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c00)={'veth1_macvtap\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000cc0)={0x6, 0x2b, &(0x7f0000000d80)=ANY=[@ANYBLOB="18460000fdffffff000000000000000018640000060000000000000009000000185a0000060000000000000000000000b7080000000000007b8af8ff00000000b708000000f0ffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a500000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018120000", @ANYRES32, @ANYRESDEC=r1, @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000"], &(0x7f0000000b80)='GPL\x00', 0x80000001, 0x13, &(0x7f0000000bc0)=""/19, 0x41100, 0x10, '\x00', r3, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000c40)={0x3, 0x4, 0x7, 0x7}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000c80)=[{0x2, 0x3, 0x5, 0xb}, {0x1, 0x5, 0xd, 0x4}, {0x0, 0x1, 0x7, 0xf}, {0x1, 0x4, 0xc, 0xa}], 0x10, 0x2566}, 0x94) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r4, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f00001ffe01000000000000", 0x1c) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80200, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/llc/socket\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1.297086944s ago: executing program 4 (id=2006): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) accept4$x25(r1, 0x0, 0x0, 0x80000) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x4, 0x0, 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text16={0x10, 0x0}], 0x1, 0x6d, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000004c0)={0x3, 0x953, 0x0, &(0x7f0000000180)="a1984ec3aec3fc2e025f90eda6dbc903939aac644fd36f1e65174cae030c42cbacc392851a695f247112e91f059460a2c031929dc0515ac7cd20775ff9da9c2b6cb48968dcd6d8d982c492932c572f084d3af58650d207eec0794b3e47c5678c36b99eed61e1dbac68ce8a79aa21a51202018bdc4a51489844f785887083841d65c129992bbe5a51c71b95a9847d2bdede66c6e3184c386faf938fd6db888e73a5c0dcc69c3de7458e68ed33226a8d1c8e17", 0x0, 0xb2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41100, 0x51}, 0x94) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000040)={[0x7, 0xc, 0x6, 0xfffffffffffffffd, 0x8, 0x5, 0x4, 0x2, 0x8, 0x6, 0x3, 0x3, 0x1932be21, 0x100000000, 0x4, 0x4], 0xeeee0000, 0x40600}) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0x10, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x1}) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000800)=[@text32={0x20, 0x0}], 0x1, 0x2a, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x1, 0x7, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x40, 0x40, 0x40, 0x2, {{0x7, 0x4, 0x3, 0xc, 0x1c, 0x65, 0x0, 0x9, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x31}, @dev={0xac, 0x14, 0x14, 0x24}, {[@generic={0x94, 0x4, "c3b8"}, @end]}}}}}) sendmsg$nl_route_sched(r7, &(0x7f0000003680)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003640)={&(0x7f0000001080)=@newchain={0x259c, 0x64, 0x100, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x4, 0x5}, {0xd, 0x8}, {0xe, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x20, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0x32d, 0x81}}, @TCA_U32_POLICE={0xc, 0x6, [@TCA_POLICE_RESULT={0x8, 0x5, 0x7f}]}]}}, @filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}]}}, @TCA_CHAIN={0x8, 0xb, 0xbc7}, @filter_kind_options=@f_basic={{0xa}, {0x2520, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xa, 0x8}}, @TCA_BASIC_POLICE={0x4c0, 0x4, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x7, 0x7fff, 0x8, 0x3, 0x4, 0xfff, 0x9, 0x2, 0x4, 0x7fffffff, 0x7, 0x5, 0xa118, 0x800, 0x800, 0x6, 0x5, 0xc, 0x6, 0xb3, 0x4, 0x7fff, 0x9, 0x43, 0xd42b, 0x4, 0xc, 0x8, 0x80, 0x4, 0x9, 0x1, 0x5f79, 0x1, 0x1, 0x2, 0xd, 0xc74, 0x3, 0x7, 0x1000, 0x4, 0xb, 0xb8d, 0x5, 0x9, 0x7, 0x3, 0x5f28, 0x2, 0xc2, 0x3d, 0x708, 0x4, 0x1, 0x8, 0x4, 0x7, 0xdc9, 0x2, 0x2, 0x8, 0x9, 0xe8f47542, 0x0, 0x6, 0x2, 0xa07, 0x4b70, 0x81, 0x9, 0x7f86, 0x0, 0x8, 0x9, 0x4, 0x18000, 0x4, 0x40, 0x8, 0x6, 0x8001, 0x7fffffff, 0x3, 0x649, 0x7f, 0x47601d03, 0x7f, 0x0, 0xfffff9c0, 0xffffff01, 0x4, 0xfffffffc, 0xb, 0x4885, 0x7, 0x8000, 0x6, 0x5, 0x2, 0x4, 0x401, 0x0, 0x8000, 0x0, 0xfffffffd, 0x3, 0x1, 0x9, 0x9, 0x3, 0x10001, 0x2, 0x9, 0xffff55b3, 0xb9, 0x8000, 0x9, 0x6, 0x2, 0x3, 0xb, 0x8, 0x3, 0x5, 0x5, 0x7, 0x8, 0x9, 0xfffffffc, 0x4, 0x80000001, 0x2, 0x10, 0xb7b0, 0x4, 0xfffffffc, 0x2, 0x6, 0x9, 0x2, 0x91, 0x6, 0x5, 0x3ff, 0x8, 0x5, 0x4, 0x3, 0x7, 0x736e, 0x100, 0x56000000, 0x0, 0x8, 0x1, 0x7ff, 0x3, 0xc0c6, 0x1, 0xf, 0x4, 0x1, 0x7, 0x0, 0xff, 0x80, 0x3, 0x1, 0x0, 0x64, 0x3, 0x8, 0x2, 0x5, 0x5, 0x6, 0xfffffc00, 0x4, 0xd, 0x514e, 0x1, 0x8, 0x40, 0x800, 0x7f, 0x6, 0xb, 0x4, 0x9, 0x5, 0x3, 0x8, 0x101, 0x7, 0x1, 0x8001, 0x100, 0x4b, 0xe, 0x2, 0x7, 0x10000, 0x80000001, 0xffff7fff, 0x9185, 0x9, 0x3, 0x9, 0x3, 0x14f12c8e, 0x546, 0x9, 0x1e97, 0x101, 0x7, 0xc, 0x1, 0xd7ec, 0x0, 0x2, 0x3, 0x0, 0xe2, 0x4a, 0xb, 0xb0, 0xa, 0x6, 0x200, 0x0, 0xc39, 0x4, 0x2, 0xfffffffe, 0x4, 0x27, 0x8, 0x3, 0x0, 0x81, 0x9984, 0xfffffff0, 0x10001, 0x0, 0x401, 0x9, 0x6, 0x9, 0xfff, 0x80000000, 0x7d0, 0x7fff, 0x3, 0x400]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x400}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x17f}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8001, 0x4, 0x10, 0x80000000, 0x4, {0x1, 0x2, 0xce0, 0x8, 0xe, 0xffff}, {0x1, 0x0, 0xfffd, 0x3ff, 0x6ca, 0xe}, 0x2, 0x7, 0x6}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x3, 0x4, 0x5, 0xffffffff, {0x1, 0x0, 0x8, 0x8, 0x400, 0x10000}, {0xb, 0x2, 0x4, 0x1, 0x400}, 0x0, 0x6, 0xffffffff}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffff6c01}]}, @TCA_BASIC_ACT={0x204c, 0x3, [@m_skbedit={0xc0, 0xd, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xffe0, 0x2}}]}, {0x84, 0x6, "25beece4be56a7208bdc479dc9dec141a9e46125f6bb8a0f461e8ecc251e8ce36c4a33259ddab38dde0b317d2bd888a43f791ff0b781e7b72aaeea0cff0fd4f21ef7ea2b135ffb0d1dad776ffe6fce9f34cc554e05fd9f8412cab2e0859ce72577bdb770055477e8ab70a2f12cf4153d1b5182c54e106161e022ef7e0bfbfc67"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_pedit={0x1e60, 0x0, 0x0, 0x0, {{0xa}, {0x1de4, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x78, 0x5, 0x0, 0x1, [{0x54, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x4}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x46de8baf8429a20b}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe50, 0x4, {{{0x7f, 0x400, 0x1, 0x8000, 0x380}, 0x7, 0x0, [{0xc, 0x9, 0x40, 0x7ff, 0x3, 0x2}, {0x0, 0x7, 0xdff, 0x6, 0x8001, 0xf9}]}, [{0x0, 0x2, 0xa13c, 0x81, 0x9, 0x9}, {0x5, 0xf80f, 0x6, 0x2, 0x9, 0x9}, {0x1, 0x4, 0x7, 0x6, 0x7, 0x401}, {0x4, 0x9, 0xe, 0x1, 0xf, 0x6}, {0x81, 0x8, 0x7b, 0x8, 0x2, 0x2}, {0x0, 0x4, 0x400, 0x7fffffff, 0x1, 0x9988}, {0x2, 0x2, 0x5, 0x8, 0xb8, 0x2}, {0x2, 0x79, 0x3ff, 0xfffffffa, 0x2, 0x9}, {0x4, 0x96c, 0x3, 0x8, 0x9, 0x3}, {0x0, 0xfffffffd, 0xfffffff9, 0x10000, 0x7, 0x3}, {0x2, 0x4, 0x6, 0x80, 0x3ff, 0x400}, {0x0, 0x1ff, 0x5, 0x4, 0x4, 0x9}, {0x4, 0x46, 0x7, 0x200, 0x5, 0xe}, {0x1, 0x9, 0xe, 0x6, 0x6, 0x8}, {0xe23e, 0x4, 0x7, 0x0, 0x6, 0xa2}, {0x4, 0x3, 0xffff, 0x1, 0x7, 0xfff}, {0x3, 0xab3, 0x4, 0xfffffff9, 0x0, 0x4}, {0x2000000, 0xc, 0x800, 0x9, 0x6d6, 0x5}, {0x3, 0x2, 0x1, 0xf0, 0x2, 0x4}, {0xef1, 0xa5, 0x1ff, 0x4, 0x8, 0x5}, {0x6, 0x20000000, 0x6, 0x67, 0x3, 0x9}, {0x4, 0x4, 0xd, 0x0, 0x4, 0xb1}, {0x7, 0x7, 0x2, 0x0, 0x5d55dccf, 0x5}, {0x8, 0x7ff, 0x9, 0x10000, 0xbe99, 0x7}, {0xffffffff, 0x0, 0x6, 0x6, 0x2, 0x2}, {0xa, 0x4, 0x7fff, 0x1649, 0x4, 0x2}, {0x200, 0x3ff, 0x40, 0x3, 0x34d7, 0x3}, {0x81, 0x1, 0xf, 0x3, 0x3}, {0x3, 0x5, 0x7, 0x1, 0xffffffff, 0x5}, {0x296, 0xab2, 0x10, 0x7, 0x1, 0xe}, {0x3, 0x5, 0x80, 0x100, 0x8001, 0xfffffffb}, {0x6, 0x8, 0x2c8, 0x80000000, 0x3a5, 0x19c}, {0x7, 0x7fff, 0xc16, 0x10, 0x8, 0x800}, {0x8, 0x9, 0x8, 0x7, 0xffff78a0, 0x6}, {0xfa, 0x74a, 0x7, 0xfffffffd, 0x3, 0x2}, {0x2, 0xfffffa4b, 0x6, 0x10000, 0x10001, 0x5}, {0x29, 0x40, 0x9, 0x7, 0x7edc, 0x5}, {0x40, 0x81, 0x8001, 0x7, 0x8}, {0x6, 0x9, 0x8, 0x4, 0x1, 0x8001}, {0x2, 0x4, 0xc, 0x0, 0xffffffff, 0xa4}, {0xdf9, 0x0, 0x4, 0x9, 0xffffffff, 0x4894}, {0x1d9, 0xb, 0x0, 0x9, 0xb, 0x1000}, {0x8, 0x4, 0x5, 0x0, 0x1, 0x6}, {0x465, 0x5, 0x6, 0xc6d, 0xffff8000, 0x3ff}, {0x3, 0x9, 0x80000001, 0x73, 0xe5, 0x3}, {0x5, 0xe, 0x9, 0x7, 0xf, 0x101}, {0x5a21, 0x80000000, 0x8, 0x1000, 0xee5, 0xc7}, {0x4, 0x5, 0xe0, 0x4, 0x2, 0x3}, {0x381a, 0x4, 0x3, 0x9, 0x2, 0x2}, {0x9, 0x6, 0x1, 0x8, 0x5, 0x8001}, {0xffffffed, 0x100, 0x7fffffff, 0xd8, 0xa41, 0x8}, {0x10, 0x14ff, 0x3, 0xfffffffa, 0xfffffffb, 0x101}, {0x5, 0x6, 0x200, 0x8, 0x4, 0x5}, {0xfffffff7, 0x932, 0x0, 0x200, 0x80, 0x4}, {0x10001, 0x2, 0x8, 0x9, 0x9, 0x99e1}, {0x6, 0x5, 0x6, 0x5, 0x40000000, 0x81}, {0x5, 0xb, 0x3, 0x4e5dc3e2, 0xb01f, 0x9}, {0x5, 0x1, 0x3, 0xfffffff4, 0x7e}, {0x6, 0x7, 0x9, 0x6, 0xfff}, {0x5, 0x80000000, 0x6, 0x80000001, 0x8000, 0x280000}, {0x8, 0x0, 0x7, 0xfffffffb, 0x6, 0x3ec3}, {0x0, 0xc, 0x9, 0x0, 0x21, 0xa8}, {0x8, 0x2, 0x200, 0x4, 0x7fff, 0x2}, {0x4, 0x8, 0x10000, 0xfffffffd, 0xcb11, 0xfa3}, {0xffffffff, 0x4, 0x3, 0xffffffff, 0x81, 0x5}, {0x0, 0xd, 0x1000, 0x7fff, 0x5, 0x8}, {0x3, 0x3, 0x7, 0x4, 0x8c, 0x3}, {0x2, 0x0, 0xffff, 0x40, 0x7, 0x40}, {0x1000, 0x1000, 0x4, 0x80, 0x5, 0x9}, {0x9, 0x3, 0x9, 0x4, 0x400, 0x1}, {0x0, 0xc1, 0x80, 0xfffffffd, 0x400, 0x2}, {0x5, 0x1, 0x7, 0x0, 0x8, 0x2}, {0x1, 0xae6, 0x6, 0x5, 0x1, 0x8}, {0xffffffff, 0x5, 0x1, 0x7f, 0x7, 0x4}, {0x6, 0x7, 0xa, 0x1c, 0x10001, 0xd8a}, {0x0, 0x2, 0x5, 0x1, 0x0, 0x8}, {0x4, 0x8, 0x1, 0xfffffff4, 0x0, 0x80000001}, {0x0, 0x4, 0x10, 0x0, 0x1, 0xffff}, {0xfff, 0x2, 0x3ff, 0x10001, 0x2, 0x1}, {0x2, 0x0, 0x3, 0x7fff, 0xf85, 0x3}, {0x40, 0x0, 0xff, 0x4, 0x8d6, 0x29471e55}, {0x33, 0x40, 0x0, 0x4, 0x1, 0x4}, {0x2, 0x9, 0x9, 0x0, 0x80000000, 0x8}, {0x401, 0x81, 0x9647, 0x5b, 0x8}, {0xf, 0x8, 0x3, 0x4, 0xc, 0x8}, {0xa5, 0x80, 0x5, 0x1, 0x157, 0x3}, {0x6, 0x5, 0x10001, 0xffffffb8, 0x2, 0x7eb3}, {0x8000, 0x9, 0x5, 0x8001, 0x8, 0x1}, {0x3, 0x9, 0x953, 0x1, 0x8, 0x800}, {0x1, 0x2, 0xd0, 0x6, 0x3, 0x4}, {0x4, 0x101, 0x0, 0x8000, 0x3800, 0x1bee98ee}, {0x6, 0x7, 0x3b6e, 0x1621, 0x6, 0xbf2d}, {0x10, 0x2f7, 0x1000, 0xb4f, 0xc, 0x135c}, {0xf4, 0x4, 0x80000001, 0x45f, 0x7fff, 0x2}, {0x1, 0x9, 0x6, 0x2, 0x5, 0x9}, {0x4, 0x6, 0xffffffff, 0x835b, 0xff, 0x2}, {0x1ff, 0x9d9a, 0x10001, 0x8, 0x400, 0x1}, {0xd4a, 0x8, 0x4, 0x1796, 0x2b, 0x4f3}, {0x0, 0x5, 0x7, 0xfffffff9, 0x8, 0x10001}, {0x1ff, 0x8, 0x4, 0xffff, 0x401, 0x9}, {0x6, 0x9c, 0xfd, 0x1, 0x7, 0xf}, {0x6, 0x2, 0x8, 0x1, 0x4517}, {0xffffffff, 0x1, 0x100, 0x51afe2ba, 0x64a, 0x54}, {0xfffffffd, 0x2, 0x1, 0x10000, 0x718, 0x40}, {0x16, 0xf2cf, 0x9, 0x9, 0xce, 0x7f}, {0x4, 0x6d1, 0x2, 0xfffffeff, 0xc1, 0xfffffff7}, {0x0, 0x10, 0x7, 0x5, 0x34000000, 0x80000000}, {0xffff, 0xfd, 0x3, 0x9, 0x4}, {0x4, 0x6, 0x2, 0x7fff, 0x4, 0xfffffffa}, {0xfffffffb, 0x7, 0xb, 0x7fff, 0x5, 0x9}, {0x58e, 0x22b, 0x5, 0x9, 0xffffff46, 0x3c85}, {0x3ee, 0xb23, 0x5, 0x6, 0x400, 0x8}, {0x6, 0xb4c, 0x68d, 0x3, 0x0, 0xffffffff}, {0x4a11b57, 0x1, 0x6, 0x5, 0x9, 0x7}, {0x9, 0x7, 0x10000, 0x6, 0x40, 0x8}, {0x0, 0x5, 0xc, 0x1c, 0x7, 0xa9}, {0x7fffffff, 0x101, 0x5, 0x4, 0x80, 0x5}, {0xe264, 0x0, 0x7fff, 0xec0d, 0x3f, 0x2}, {0x7, 0x6, 0x7, 0x1000, 0x0, 0x9817}, {0x3ff, 0x0, 0xb3a6, 0x133, 0x1, 0x57}, {0xfffffff6, 0x46, 0xff, 0x4, 0x8, 0x7}, {0x2, 0x2, 0xffff, 0x1, 0x5}, {0x9, 0x4, 0x3, 0x1, 0x2}, {0x1ff, 0x40, 0x8, 0x5, 0xd4, 0x1}, {0x5, 0x81, 0x2, 0x9, 0x351, 0x8}, {0x3, 0x6, 0x7ff, 0x3, 0x7, 0x1}, {0x8, 0x9, 0x2, 0x563, 0x1, 0x9}, {0x8000, 0x9, 0x7, 0x9, 0x7, 0x7c}], [{0x5}, {0x1, 0x1}, {}, {0x1}, {0x4}, {0x0, 0x1}, {0x5}, {0x2}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x5, 0x2}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x3}, {0x2}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0xad6c8fa8b31285ab}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x1}, {0x3}, {0x5, 0x1}, {}, {0x2}, {0x5, 0x1}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {}, {0x2}, {0x1}, {0x4}, {}, {0x1}, {0x1}, {0x1}, {0x3, 0x1}, {0x1}, {0x4e487bed4dd4f98b, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x5, 0x1}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x1}, {0x4}, {0x4, 0x1}, {0x4}, {0x2}, {}, {0x4}, {0x0, 0x1}, {0x4, 0x1}, {}, {}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x1, 0xd8782ec0621a243a}, {0x5}, {0x83fa623c9e490298}, {0x3}, {0x1}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x3}, {0x1}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {}, {0x7}, {0x3}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x4}, {0x2}, {0x4, 0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0xc8, 0x5, 0x0, 0x1, [{0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}]}, @TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x6, 0x4, 0x20000000, 0x800, 0xea8}, 0x2, 0x8, [{0x77d2, 0x6, 0x4f, 0x1, 0x8, 0xa}, {0xfffffff6, 0xd, 0x4, 0x0, 0xfffffffc, 0xc0}]}, [{0x0, 0x4, 0xb, 0x5, 0x5, 0x8d0}, {0x4, 0x1, 0x8, 0x9, 0x5, 0x7}, {0x4a, 0x5, 0x6, 0x5, 0x1, 0x7}, {0xa, 0x1, 0x3, 0x3, 0x2f64, 0x792ca715}, {0x4, 0x6, 0xbb3, 0x9, 0xe5, 0x9}, {0x1, 0xee, 0x428fab42, 0xe6c, 0x5, 0xfffffffa}, {0x6, 0x401, 0x5, 0xb, 0x0, 0x3ff}, {0x820, 0x1, 0x1, 0x3, 0x27, 0x5}, {0x399, 0x8, 0x7, 0xfffff3fa, 0xffff, 0x9}, {0x5, 0xc, 0x6, 0x6, 0x9, 0x7}, {0x0, 0x43b0, 0x8, 0x5, 0x2, 0x5}, {0x8, 0xd88d, 0x7, 0xaf, 0x7, 0x2}, {0x6, 0x7fff, 0xfffffffd, 0xfffffff9, 0x9, 0x7}, {0x5, 0x100, 0xb, 0x10001, 0xfffffffb, 0x3ff}, {0xfff, 0xfffffffc, 0x1ff, 0x1, 0x4, 0x1}, {0x0, 0x1, 0x8, 0xc5b, 0x8, 0x7}, {0x7f, 0x4, 0x7fff, 0xffffffff, 0x3, 0x3ff}, {0x76d75299, 0x7, 0x2, 0x98, 0x3, 0x7fffffff}, {0x9, 0x401, 0x2cc, 0xf, 0x0, 0xe}, {0x3ff, 0x54, 0x7, 0x4, 0x9, 0x3}, {0x9, 0x0, 0x5c, 0x5, 0x8, 0x6}, {0x1800, 0x6, 0x80000001, 0x8000, 0xfffffff8, 0xf}, {0x2, 0x2, 0x6, 0x101, 0x2f21ff94, 0x3}, {0x61f, 0x9, 0x9, 0x2, 0x1, 0x7}, {0x2, 0x1, 0x2, 0x5, 0x2, 0x9}, {0x5, 0x5, 0xfffffffe, 0x4, 0x7, 0x7}, {0xba8, 0x3, 0x7, 0x8, 0x0, 0x7ff}, {0x10000, 0x10001, 0x6, 0x5, 0x0, 0x81}, {0x10, 0xd, 0x700, 0x6, 0x4, 0x2}, {0xd, 0x8, 0x200, 0xd6e, 0x4, 0x7}, {0x8, 0x7, 0x3, 0x7fffffff, 0x8, 0xcb89}, {0x2, 0x5, 0x9, 0x9, 0x9c000000, 0x10001}, {0x9, 0x3, 0x7, 0x7fff, 0x800, 0x9a}, {0x5, 0x0, 0x7, 0x5, 0x5}, {0x81, 0x9aa, 0x5, 0x9, 0x2, 0x537}, {0x5, 0x4, 0x0, 0x6c, 0x8, 0x4}, {0x9, 0x9, 0x48000, 0x6, 0x800, 0x7}, {0x9, 0x800, 0x2, 0x9, 0x9, 0x9}, {0x200, 0xa83a, 0x5, 0x5, 0x3, 0x9a}, {0x1a, 0xfd, 0xffffffff, 0xbd, 0x3, 0x9}, {0x1000, 0x40, 0x4d3, 0x1ff, 0x2, 0xf4}, {0x2, 0x2, 0xa9, 0x61b707be, 0x6, 0xc}, {0x0, 0xc, 0xf80, 0x0, 0x0, 0x3ff}, {0x4, 0x4, 0x20, 0x4, 0x6, 0x7fffffff}, {0x9, 0x1, 0x9, 0x3, 0x7, 0x800}, {0x3, 0x2, 0xff, 0x1253acdb, 0x3, 0x800}, {0x7fff, 0x800, 0x1000, 0x5, 0x101, 0x10}, {0x4, 0x6, 0x8, 0x5, 0x4, 0x2}, {0x0, 0xb2, 0x8, 0x6, 0x9, 0xe}, {0x6, 0xa4, 0x8001, 0x8, 0x0, 0x3}, {0xfff, 0x4, 0x8000, 0x8, 0xfffffff9, 0x7}, {0x2, 0x6, 0x1ff, 0xfff, 0x6, 0x5}, {0x6, 0x0, 0x52d5, 0xffffff93, 0x2, 0x10}, {0x81, 0x1fc0000, 0xfffffffb, 0xfffffff8, 0x35f8fe5, 0xffff7fff}, {0x644f, 0x1, 0x0, 0x6, 0x0, 0x1c00}, {0xb, 0x2, 0x1000, 0xffffff81, 0x7a, 0x9}, {0x2, 0xce0, 0x8, 0x6, 0x3}, {0x5, 0x4dd, 0x4, 0x0, 0xffffffc0, 0x8}, {0x7, 0x8, 0x7, 0xfffff801, 0x7, 0x707}, {0x2, 0x1, 0x73, 0x80, 0xe0ff, 0x10000}, {0x7, 0xffff, 0x8, 0x5, 0x5, 0x3}, {0x1000000, 0x8, 0x4, 0x10001, 0x6, 0x5}, {0x136c0, 0xec4d, 0x58d, 0x0, 0x6, 0x7}, {0x3, 0x1, 0x4, 0x0, 0x4, 0xb6bf}, {0x4, 0x0, 0x1, 0x4, 0x9, 0x7}, {0x8, 0x80, 0x7, 0x0, 0x81, 0x6}, {0x3, 0x59, 0x2, 0x9, 0xdf, 0x14ad}, {0x4, 0x5, 0x4, 0xfffffffa, 0x5, 0xffff}, {0x7fffffff, 0x5bbb, 0x3, 0xfffff655, 0xfffffff8, 0xffffd7d8}, {0x10000, 0xd, 0x4, 0xae, 0x9, 0x9}, {0x9, 0x6, 0x40000000, 0x6, 0x1ff, 0x96}, {0x0, 0x1, 0x2cef, 0x6, 0x6, 0x1af}, {0xe8c00000, 0x7600, 0x1000, 0x98, 0x80000001, 0x401}, {0x43c4, 0x5a2a, 0x4f, 0xc7e6, 0x6, 0x6}, {0x400, 0x5, 0xcc, 0xfffffff9, 0x400}, {0x1, 0x4, 0x1, 0xb8c, 0x1cd777d9, 0x80}, {0x66, 0x52, 0x8, 0x4, 0x0, 0x7}, {0x7, 0x2, 0x8, 0xd, 0x3, 0x71d}, {0x5, 0xbd, 0x7, 0x4, 0x1, 0xe45}, {0x10000, 0x5, 0x4, 0x7, 0x8, 0x3}, {0xd51, 0xe1, 0x8, 0xd5b6, 0xc0, 0x3}, {0x3, 0x5, 0x3, 0x101, 0x18000, 0x3}, {0x3, 0xe, 0x0, 0x770, 0x7, 0x1}, {0x6, 0x2, 0x8, 0x6, 0x3, 0x35b1f5fa}, {0x8, 0x6a1e, 0x4, 0xa7, 0x86db, 0x8}, {0x5, 0xffffffff, 0x8000, 0x2, 0xe, 0x8}, {0xb72d, 0x9, 0x5, 0x9, 0x8001, 0xd}, {0x3, 0x401, 0x4, 0x5, 0x1e, 0x3}, {0x6, 0xa22, 0x1, 0x401, 0x3, 0x401}, {0x3, 0x5, 0x800, 0x770, 0x3, 0xf4f}, {0x5, 0x6, 0x2, 0xfffffbf0, 0x1, 0x4}, {0xd53, 0x0, 0xb5, 0x10001, 0x2, 0x40}, {0xa, 0xffff, 0xb, 0x7, 0x1, 0x6}, {0x1, 0x482, 0x5, 0x7, 0x3, 0x2}, {0x2, 0xfffffffc, 0x8, 0x1, 0xd, 0x393}, {0xfffffffb, 0x5, 0x800, 0x6, 0x8, 0x9}, {0xfffeffff, 0x0, 0x7ff, 0xfffff001, 0x4, 0x4}, {0x1, 0x7, 0x10000, 0x81, 0x1ff, 0x6}, {0x7b, 0xb33d, 0x4, 0x0, 0x9, 0x53c}, {0x3ff, 0xc, 0xffffffff, 0x80000000, 0x28, 0x1ff}, {0x3, 0x9, 0x6, 0x2, 0x9, 0x14}, {0x0, 0x80, 0x40, 0x3, 0x4, 0xa2}, {0x6c96442c, 0x8000, 0x0, 0x1cb7207f, 0x5, 0x8}, {0x7, 0x81, 0x2f06, 0x7fffffff, 0x8}, {0xfffffffc, 0x2, 0x8, 0xa3, 0x3, 0x80000000}, {0x7, 0x6, 0x2, 0x8, 0x7, 0x1}, {0x6, 0x9, 0x81, 0x3, 0x7, 0x6}, {0x1, 0xf5, 0xffffa275, 0x2, 0x2, 0x10000}, {0x7, 0x2, 0xed3, 0x7175}, {0x10000, 0x8, 0x5, 0x2, 0xb91, 0xffffffff}, {0xc, 0xfffffff2, 0x9, 0x6, 0x6, 0x4}, {0x441a, 0x9, 0x4, 0xae97}, {0x5, 0x6, 0x3, 0xffffffff, 0xf, 0x7c}, {0x8, 0x8, 0x9014, 0x9, 0x4, 0x6}, {0x6, 0x6, 0x81, 0x3, 0xfffffffc, 0x2}, {0xfffffffb, 0x81, 0x0, 0x7ff, 0x9, 0x2613}, {0x54a, 0xc93, 0x9, 0x5, 0x770, 0xfe4}, {0x101, 0x1000, 0xe5, 0x6, 0x8, 0x6}, {0x7, 0xcd, 0x8, 0x2, 0x1, 0x81}, {0x6, 0xc, 0xfff, 0x4, 0x200, 0x2}, {0x3, 0x8, 0x401, 0xffffffff, 0x2, 0x5}, {0xfffffb41, 0x4, 0x55a, 0xe, 0x3, 0x9}, {0xc0000000, 0x1, 0x7cd7, 0xe98, 0xd, 0xa4}, {0x0, 0x2, 0x0, 0x2, 0x8, 0x7}, {0xceb7, 0x2, 0x3, 0x5, 0x7ff, 0x3}, {0x8, 0x0, 0x2, 0x5, 0x52, 0xfffffffa}, {0x6, 0x9, 0x7, 0x6, 0x1, 0x4ed4}, {0x8, 0x4, 0x0, 0x40, 0x3ff, 0x101}], [{0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x5}, {0x6, 0x1}, {0x4}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x0, 0x1}, {0x5}, {0x2}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {0x1}, {0x4}, {0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {}, {0x5}, {}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {}, {0x0, 0x1}, {0x2}, {0x2, 0x1}, {0x2}, {0x1, 0x1}, {0x2}, {0x2, 0x1}, {}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x2}, {0x5}, {}, {0x1, 0x1}, {0x9, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x2}, {0x2}, {}, {0x0, 0x1}, {}, {0x7070942386176f42}, {0x4, 0x1}, {0x4, 0x1}, {0x6}, {0x3, 0x1}, {0x3}, {0x1}, {0x7}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3}, {0x5}], 0x1}}]}, {0x53, 0x6, "208bc6d9d7fa2103234e5a711483d8431ae4ac1fed2c01087af56af1363d5e978c3c2b8244c342dc1c11a297344172296936861a1b86ffdd4d3549c0f94e456c39e6bf1dfcb99f641453c975aca965"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_sample={0x128, 0x7, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x101}]}, {0xf3, 0x6, "89331e2d2d7063ab28f4c9488ef62bfda55ed41153cf76f8451edc90b995d78175dbadaac0aec6fa5a0171631c525608ef51c66d3071c0a9b66d1bc9d7b3c5b2c4d4cd344cdef80bb3838e240fd3efd54d44130ae5306c086301b7f9228eea3835d5776a108a32216e91f2e8029559048475041a89d8cb0406208c06f7d48af16c15bfa18327d6e9a6fb12148b5376bf209263dfe8be7f37c9b13b8ff5d58ba2a065df1c3341451906b3410a3f4de926a3eacd30c73e90e350fe0a8d6be7f76568861e7d9ac365cef1654043235be0834f2435fab87d46fa23c8783d8b121a7b9a8998065b3874903a689d6415309e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x8, 0x2}}]}}]}, 0x259c}}, 0x4000) write$FUSE_NOTIFY_DELETE(r2, &(0x7f0000000f40)={0x10c, 0x6, 0x0, {0x4, 0x8000000000, 0xe3, 0x0, '/sys/\x06\xc0\xa4\x9eN\x00\x00\x00\x00\x00\x00\x00en\xdf\x00\x00\x00\x00\x80\x00\x01\x00\x00\x00\x00\x00\x8a\xde\xb5\x1a8\xc1T\xcc\xe9|8\x18\xf0\xb5\xb4X0\x92\n%EaFK\xea\xce\x86c9\xff6h\x8c$\xa2,\xc3\xa4\xc9\xf4\xc8\x1f\xa3\xc2wa\x8f\xc5G\xad\x15\x9b\xfd\xcc8G\xefP\xbd*\x98`\xeb]\xde\xd6\xd0W\xd3\x18\x93g\x18]\xe0\xfc\xd0\v{\xf6,\xd6\xa3\xb1\xfc\xbcG8u\x9bH\xb3;\x94\x891It\x0e\x9em\xad\x90\xd2\x92i)1LgS\x8f4z\xa4\xf7\x8f\x16\xeeCS;Kk\xdcE\xe0\x1f\x9b\xa4Y\x85\xd8\x80zS\f\xb7\xf2\xb2|\x88\x1b?\x8e\nu+\xe8\xbf\xdc>\xd5X\xe2\xfdR\xed\xc2\xc8_\xf0\x0f\x7f}\xc4\x91\xca?\x8a\x89x\xce\xd7u\x03\xe5\x88\x90\x9ck1!+|\x18\x82W[\x84\x05/\xccI\xff'}}, 0x10c) r9 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r9, 0xee01, 0x0) keyctl$setperm(0x5, r9, 0x30925) 1.051542443s ago: executing program 3 (id=2007): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x100, 0x50, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'ip6_vti0\x00', 0x0, 0x4, 0x3, 0x3, 0x3, 0x54, @remote, @loopback, 0x8, 0x8000, 0x400, 0x7fffffff}}) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x80, r1, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x16}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xb}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x53f}]}, 0x80}}, 0x4000001) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, &(0x7f0000000300)}}, 0x3c) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000400), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r5) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="34000000e14b44d413cad75e2e63f528a216701c5fe5202623962e89eacbd81590e7159535ff9339f7904965e51f70125d473c7bd3406348398c407c887f673121f87338a0fbff66485a94ef6500831565b7d483b0c969ced75f1182a497b207497682c7471958b12dcedbfbc14cf64afb4e4156399b13cb258fe03a1d062bfeb249f14b2ecc7d69ca92ccc6ec9b0cf0172fc9f4b28d730e3e77d5c6f9ff48595b31055ef278b5dcd82a8e7ffe58559850295dfc2997bd1426d6dc7ed159edcd0bab926b98d00a", @ANYRES16=r6, @ANYBLOB="010000000000feffffff03000000200001800c00028008000200060000000f00010069623a627269646765300000"], 0x34}}, 0x0) sendmsg$TIPC_NL_NODE_GET(r4, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={0x164, r6, 0x8, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0xb8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x400}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x31ce}]}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x59245c54}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9a3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd511}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xb}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x230b}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5c10}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffff6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000001}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xa12}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000005) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = memfd_create(&(0x7f0000000340)='%\x00#D)\xdeA\x02\n,\x06\x89\x96\x8f\xd3F\x9fe\xf7\x9f\x9f\x0f\xeb\v\xc3\x86c\xe7\xc6\x88\xce%0\x05\x9d4M\tH\x89m\x14>4\xe4\xb4m\fF\xaf\x9d&\x05\xcf\xc1HZ\x9a\xa3X\xaa;t\x12\'\xf5\x18PvY\xbe\xd1J6\xd9\xa6\xec\xde\xd4\xb9I5\x1a\xc6S\x14\x18]K\xe0\xef\x97Vv\xbe\x8a\xffG\xc79\x9d\x19\x10\x8c\xb2\xe0` >D\x11*V\xb9\xcfi\x03FnU\t|b\xbe\x10\xc4\xd4\x01\xb2=\x11%\xd0`-\xe2\x1d\x8e\x7f\xd1\x15\x03\xa5(\x1e\x05H\xe8\'[0\xc2\vO\xdc\xf8?QT[8:f\xe9f\x9b\xd3\xe2:\xa2b\xa3\x89\n\x9d\n\xe2\xb7\xf6\xa6\xbe\x82]YF\x90\x8e\xde\xbd\xb1w\xf7\x15\xed\xd8\xea\xa8\xef\xfbM\x82oX\x80~\xe3\x1fH\xf4\x99\xa4\xd2E\'@\xab\x13\x94\xc2\xef\x81R\xbd\xaah\xd2D\xce\x1f\'\x8b9\xa5\x88\xf1C\x1a\a!\x95\x165RS1\x9e[\xf4\xa9v\xfah\xb7\xd8\x9c&\x85\xcbs\xad\x14\xf5\xd5\xd7M\x06\x15\x9d\xa2\xfb\xfc\x9c\x94`x\xdfma\xa6\x04\x06\xcb\xeb\vC{b\xceW3l\x8a\x9cO\"\xb5\xeb#\x03k\xe4\x99\xeb\xe3\x9d\xba\xd0\xb5\x0fh\xf2\xdc\x01\x81\xb48\xea\xaf\xd0*\x9c\x1d\xba,;\x17\xfb\x94M1\xea\x1f\xbf', 0x5) ioctl$FS_IOC_RESVSP(r7, 0x402c5828, &(0x7f0000000180)={0x0, 0x2, 0x80000, 0xb3}) r8 = mq_open(&(0x7f0000000540)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v\xf8\xff\xff\xff\xff\xff\xff\xffr\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xb9f\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\xb2F\xdf\xcc\xae', 0x40, 0xa8, 0x0) lseek(r8, 0x0, 0x3) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt\x00', 0x1ff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$sock_linger(r10, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x4}, 0x8) shutdown(r10, 0x1) mount(&(0x7f0000001100)=@filename='127.0.0.1:/\x00', &(0x7f0000001000)='./mnt\x00', &(0x7f0000001200)='nfs\x00', 0x0, &(0x7f0000001300)='nolock,v3,addr=127.0.0.1\x00') close(r9) r11 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r3, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r9}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_NET_NS_FD={0x8, 0x7, r11}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) 1.013406746s ago: executing program 4 (id=2008): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000380)={"b8e50a31a002b94fcd8fc4db3056309d", 0x0, 0x0, {0x7, 0x100}, {0x0, 0x5}, 0x51, [0x7, 0x3, 0xe, 0x2, 0x9, 0x1, 0xd8e, 0x7fc0000, 0x5, 0x0, 0x6, 0x3, 0x5, 0x49, 0xfffffffffffffffe, 0xc]}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0xfffffffffffffeef, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x2000400, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000140)='./file0\x00') chdir(&(0x7f0000000240)='./file0\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder1\x00', 0x4, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) mount$binder(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x1000810, 0x0) 847.471646ms ago: executing program 3 (id=2009): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$kcm(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0c42, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x2, 0x202000) r2 = socket(0x2, 0x2, 0x1) bind$unix(r2, &(0x7f0000000000)=@abs, 0x6e) r3 = socket(0x2, 0x2, 0x1) bind$unix(r3, &(0x7f0000000000)=@abs, 0x58) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') ioctl$FIOCLEX(r0, 0x5451) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x9, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x44, 0x24, 0xd0f, 0xe0ff, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}, @TCA_CAKE_AUTORATE={0x8}]}}]}, 0x44}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0xc0b45545, &(0x7f0000000040)=0x1000) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f00000001c0)={{0x0, 0x0, 0xfffd, 0x8001}, 'syz1\x00'}) r7 = syz_open_dev$vbi(&(0x7f0000000140), 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r7, 0xc0cc5640, &(0x7f0000000600)={0xc, @pix_mp={0x3, 0x81, 0x200141e, 0x7, 0x2, [{0xfff, 0x8}, {0x4, 0x5}, {0x3, 0x3}, {0x1, 0x1}, {0x6, 0x9}, {0x287c, 0x6}, {0x7897, 0x11}, {0xfffffc00, 0x2}], 0x85, 0x0, 0x6, 0x2, 0x3}}) write$uinput_user_dev(r6, &(0x7f00000003c0)={'syz1\x00', {0x4, 0x694b, 0x7, 0x725}, 0x4d, [0x3, 0x5, 0x3, 0x7ff, 0x8, 0x7, 0x7ff, 0xcd28, 0xffff0000, 0x3, 0x9, 0x2, 0x7, 0xffffffff, 0x80000001, 0x401, 0x9, 0x6, 0x1, 0x1ff, 0x1, 0x3, 0x6, 0x7, 0x9, 0x656, 0x1, 0x80, 0x8000, 0x0, 0xffffffff, 0xfffffff7, 0x1, 0x0, 0x0, 0x1, 0x8, 0xb6, 0xbb93, 0x10001, 0x6, 0xffff, 0x400, 0x5, 0xffffff04, 0x4, 0x5e0, 0x101, 0xfdc, 0x7, 0x8001, 0x6, 0x5, 0x7fff, 0x9, 0xd8d8, 0x4, 0x2, 0x3, 0x0, 0xfffffff8, 0x1000, 0xfb9, 0xffffffff], [0xffffffff, 0x830, 0x7, 0x5, 0x6, 0x7, 0x2, 0x80000000, 0x9, 0xfffffff9, 0x74, 0x3, 0x18, 0x9, 0x2, 0xfff, 0x7fff, 0x6, 0x331, 0x8000, 0x0, 0xffffff13, 0x3, 0x1, 0xfffffff8, 0x45b, 0x6, 0x8, 0x101, 0x5, 0x81, 0xfffffff7, 0x9, 0x7, 0xf4, 0x5, 0x0, 0x8, 0x52, 0x2, 0x4, 0x8, 0x8, 0x7, 0x0, 0xb, 0x1000062, 0x2, 0xfffffff9, 0x9, 0x5, 0xf2b, 0xe, 0x5, 0x1, 0x5, 0x8, 0x36, 0x3, 0x6, 0x2, 0x7, 0x2, 0x8], [0x7ff, 0x5, 0x6b7cc830, 0x40, 0x434, 0x1ff, 0x7fff, 0x8000, 0x7, 0x8, 0x7fff, 0x32, 0x7ff, 0x1, 0x2, 0x2, 0x0, 0x3, 0xe7a, 0x6, 0x5, 0x9, 0x956e, 0x9, 0x76c, 0x9, 0xff, 0x734, 0x1, 0x5, 0x5, 0x0, 0x19b, 0x802, 0x0, 0x6, 0xa, 0x7fff, 0xcbfd, 0x81, 0x5, 0x80001000, 0x1, 0x101, 0xa35, 0x262c, 0xfffffffd, 0x0, 0xe2d, 0x5, 0x4, 0x9, 0x7fffffff, 0x4, 0x5, 0x10000, 0x0, 0x0, 0x0, 0xb715, 0x304, 0x6, 0x5, 0x4], [0xa166, 0x151, 0xd68e, 0x8000, 0x6, 0x6, 0x7, 0x5, 0x6, 0x7, 0x5, 0x3, 0x5, 0x7, 0x6, 0x80, 0xfffffff3, 0x7ff, 0x6a1, 0x5, 0x10000, 0x3, 0x2, 0x7, 0x45f2, 0x10, 0x7, 0x98, 0xff, 0x7, 0x1, 0x5, 0x8, 0x10, 0x26, 0x5, 0x3ff, 0x10, 0x9, 0x40, 0x3, 0x7f, 0x5, 0x3, 0x1606d85b, 0x9, 0x8, 0x3, 0x2, 0x20000000, 0x1, 0x8001, 0x8, 0x4060, 0x10, 0x7, 0x80, 0x2, 0x31c, 0x1, 0x7, 0x249, 0x8, 0x5]}, 0x45c) 141.336155ms ago: executing program 3 (id=2010): ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(r1, r1, 0x2) bind$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, 0x3e9, 0x100, 0x8070bd29, 0x25dfdbfd, {0x22, 0x0, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0xfff, 0x76}}, 0x3c}, 0x1, 0x0, 0x0, 0x14008400}, 0x44000) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x28040041, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="e186", 0x2}], 0x1}, 0x24044041) recvmmsg(0xffffffffffffffff, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) 106.2509ms ago: executing program 3 (id=2011): setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000002c0)=0x10, 0xffffffffffffff7c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001100)={0x0, 0x0}) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a\x9e@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e*\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) syz_open_dev$hidraw(0x0, 0x4, 0x90542) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x54) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket(0x10, 0x3, 0x0) r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x800) socket$xdp(0x2c, 0x3, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000140)=""/210) 54.372297ms ago: executing program 4 (id=2012): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$kcm(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0c42, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x2, 0x202000) r2 = socket(0x2, 0x2, 0x1) bind$unix(r2, &(0x7f0000000000)=@abs, 0x6e) r3 = socket(0x2, 0x2, 0x1) bind$unix(r3, &(0x7f0000000000)=@abs, 0x58) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') ioctl$FIOCLEX(r0, 0x5451) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x9, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x44, 0x24, 0xd0f, 0xe0ff, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}, @TCA_CAKE_AUTORATE={0x8}]}}]}, 0x44}}, 0x0) (fail_nth: 1) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0xc0b45545, &(0x7f0000000040)=0x1000) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f00000001c0)={{0x0, 0x0, 0xfffd, 0x8001}, 'syz1\x00'}) r7 = syz_open_dev$vbi(&(0x7f0000000140), 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r7, 0xc0cc5640, &(0x7f0000000600)={0xc, @pix_mp={0x3, 0x81, 0x200141e, 0x7, 0x2, [{0xfff, 0x8}, {0x4, 0x5}, {0x3, 0x3}, {0x1, 0x1}, {0x6, 0x9}, {0x287c, 0x6}, {0x7897, 0x11}, {0xfffffc00, 0x2}], 0x85, 0x0, 0x6, 0x2, 0x3}}) write$uinput_user_dev(r6, &(0x7f00000003c0)={'syz1\x00', {0x4, 0x694b, 0x7, 0x725}, 0x4d, [0x3, 0x5, 0x3, 0x7ff, 0x8, 0x7, 0x7ff, 0xcd28, 0xffff0000, 0x3, 0x9, 0x2, 0x7, 0xffffffff, 0x80000001, 0x401, 0x9, 0x6, 0x1, 0x1ff, 0x1, 0x3, 0x6, 0x7, 0x9, 0x656, 0x1, 0x80, 0x8000, 0x0, 0xffffffff, 0xfffffff7, 0x1, 0x0, 0x0, 0x1, 0x8, 0xb6, 0xbb93, 0x10001, 0x6, 0xffff, 0x400, 0x5, 0xffffff04, 0x4, 0x5e0, 0x101, 0xfdc, 0x7, 0x8001, 0x6, 0x5, 0x7fff, 0x9, 0xd8d8, 0x4, 0x2, 0x3, 0x0, 0xfffffff8, 0x1000, 0xfb9, 0xffffffff], [0xffffffff, 0x830, 0x7, 0x5, 0x6, 0x7, 0x2, 0x80000000, 0x9, 0xfffffff9, 0x74, 0x3, 0x18, 0x9, 0x2, 0xfff, 0x7fff, 0x6, 0x331, 0x8000, 0x0, 0xffffff13, 0x3, 0x1, 0xfffffff8, 0x45b, 0x6, 0x8, 0x101, 0x5, 0x81, 0xfffffff7, 0x9, 0x7, 0xf4, 0x5, 0x0, 0x8, 0x52, 0x2, 0x4, 0x8, 0x8, 0x7, 0x0, 0xb, 0x1000062, 0x2, 0xfffffff9, 0x9, 0x5, 0xf2b, 0xe, 0x5, 0x1, 0x5, 0x8, 0x36, 0x3, 0x6, 0x2, 0x7, 0x2, 0x8], [0x7ff, 0x5, 0x6b7cc830, 0x40, 0x434, 0x1ff, 0x7fff, 0x8000, 0x7, 0x8, 0x7fff, 0x32, 0x7ff, 0x1, 0x2, 0x2, 0x0, 0x3, 0xe7a, 0x6, 0x5, 0x9, 0x956e, 0x9, 0x76c, 0x9, 0xff, 0x734, 0x1, 0x5, 0x5, 0x0, 0x19b, 0x802, 0x0, 0x6, 0xa, 0x7fff, 0xcbfd, 0x81, 0x5, 0x80001000, 0x1, 0x101, 0xa35, 0x262c, 0xfffffffd, 0x0, 0xe2d, 0x5, 0x4, 0x9, 0x7fffffff, 0x4, 0x5, 0x10000, 0x0, 0x0, 0x0, 0xb715, 0x304, 0x6, 0x5, 0x4], [0xa166, 0x151, 0xd68e, 0x8000, 0x6, 0x6, 0x7, 0x5, 0x6, 0x7, 0x5, 0x3, 0x5, 0x7, 0x6, 0x80, 0xfffffff3, 0x7ff, 0x6a1, 0x5, 0x10000, 0x3, 0x2, 0x7, 0x45f2, 0x10, 0x7, 0x98, 0xff, 0x7, 0x1, 0x5, 0x8, 0x10, 0x26, 0x5, 0x3ff, 0x10, 0x9, 0x40, 0x3, 0x7f, 0x5, 0x3, 0x1606d85b, 0x9, 0x8, 0x3, 0x2, 0x20000000, 0x1, 0x8001, 0x8, 0x4060, 0x10, 0x7, 0x80, 0x2, 0x31c, 0x1, 0x7, 0x249, 0x8, 0x5]}, 0x45c) 0s ago: executing program 2 (id=2013): r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1608e2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/freeze_filesystems', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000440)={r0, 0x0, {0x0, 0x0, 0x0, 0x8, 0x8, 0x0, 0x240d4f6463445852, 0x10, 0x9, "ad862c930080149989fc8d503dc3bd3fe37d58128b9ad0099cebdc25f5ab60c9e6d66581000000000000ddffffff000000000000000000000000e800", "32d803964e202874df2cfc06c89f3d9e236aa52ac70a4b81ed010000000000000000000000000800", "715200601a8ca5b07dcc141802c4dacf162e43ac61f7ad330000000000a04100", [0x9]}}) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:04.0/remove\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='1', 0x1) r2 = openat2$dir(0xffffff9c, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)={0x40, 0x5}, 0x18) socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = openat(r2, &(0x7f0000000040)='./sys/bus/pci/devices/0000:00:04.0/remove\x00', 0x21001, 0x12c) write(r3, &(0x7f0000000600)='1', 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x5c, r5, 0x917, 0xfffffffc, 0xfffffffc, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xfffffffc}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @multicast1}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x100008c5}, 0x20000810) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r5, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_SESSION_ID={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xffb) fcntl$setstatus(r6, 0x4, 0x2400) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000380)={0x0, {}, 0x2000000000000000, {}, 0xdb03, 0x9, 0xc, 0x4, "edf0c98dd46e2f433e157c11b61fd76e031f98e8aad01ccba893d22c6ca42d0e22404919797d9893631da439ace17384471651e41baa61a7fc47257802d43f31", "feb09f79899ce11f40e6932779d1f45df1ae19f87439dac78295c165d48aff1f", [0x3, 0x6]}) kernel console output (not intermixed with test programs): 53883][T11542] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 481.660520][T11542] opticon 8-1:1.0: device disconnected [ 481.661840][ T6099] usb 9-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 481.671094][ T6099] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.694448][T11943] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 481.709394][ T6099] opticon 9-1:1.0: opticon converter detected [ 481.713529][T11941] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 481.746744][T11941] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 41501 - 0 [ 481.769515][T11941] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 481.787395][ T6099] usb 9-1: opticon converter now attached to ttyUSB0 [ 481.868036][T11945] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.935494][T11949] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1741'. [ 481.949395][T11949] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.952604][ T961] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 481.981096][ T5822] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 481.983853][ T5822] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 41501 - 0 [ 481.987081][ T5822] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 481.996434][T11945] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.021541][ T13] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.024693][ T13] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 41501 - 0 [ 482.030145][ T13] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 482.034556][ T13] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.037568][ T13] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 41501 - 0 [ 482.041111][ T13] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 482.044968][ T13] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.047740][ T13] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 41501 - 0 [ 482.050723][ T13] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 482.086444][T11949] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.156376][T11945] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.217794][T11949] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.275400][ T961] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 482.315238][T11949] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.321136][ T5959] usb 8-1: new high-speed USB device number 50 using dummy_hcd [ 482.371126][ T5822] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.374185][ T5822] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.377061][ T5822] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.379799][ T5822] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.404929][ T5822] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.462466][ T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.465920][ T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.469238][ T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.541010][ T961] usb 7-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 482.542812][ T5959] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 482.543728][ T961] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.551131][T11947] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 482.553556][ T5959] usb 8-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 482.555150][ T961] opticon 7-1:1.0: opticon converter detected [ 482.557347][ T5959] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.560941][ T961] usb 7-1: opticon converter now attached to ttyUSB1 [ 482.572967][T11951] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 482.589712][ T5959] opticon 8-1:1.0: opticon converter detected [ 482.596691][ T5959] usb 8-1: opticon converter now attached to ttyUSB2 [ 484.394238][ T5959] usb 7-1: USB disconnect, device number 64 [ 484.410022][ T5959] opticon ttyUSB1: opticon converter now disconnected from ttyUSB1 [ 484.418565][ T5959] opticon 7-1:1.0: device disconnected [ 484.447828][T11953] option changes via remount are deprecated (pid=11952 comm=syz.2.1742) [ 484.937696][ T961] usb 8-1: USB disconnect, device number 50 [ 484.966086][ T961] opticon ttyUSB2: opticon converter now disconnected from ttyUSB2 [ 484.981350][ T961] opticon 8-1:1.0: device disconnected [ 485.091858][T11960] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1744'. [ 485.154800][T11961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1744'. [ 485.725604][T11965] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 485.727738][T11965] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 485.730635][T11965] vhci_hcd vhci_hcd.0: Device attached [ 485.788710][T11965] rdma_rxe: rxe_newlink: failed to add wg2 [ 486.021355][ T8376] usb 44-1: SetAddress Request (18) to port 0 [ 486.023523][ T8376] usb 44-1: new SuperSpeed USB device number 18 using vhci_hcd [ 486.322704][T11966] vhci_hcd: connection reset by peer [ 486.328109][ T5794] vhci_hcd vhci_hcd.3: stop threads [ 486.330601][ T5794] vhci_hcd vhci_hcd.3: release socket [ 486.332690][ T5794] vhci_hcd vhci_hcd.3: disconnect device [ 486.491432][T11926] usb 6-1: failed to restore interface 0 altsetting 251 (error=-110) [ 486.495616][ T24] usb 6-1: USB disconnect, device number 50 [ 486.664375][ T5757] Bluetooth: hci3: unexpected event for opcode 0x0809 [ 486.698801][T11975] input: syz1 as /devices/virtual/input/input29 [ 486.819968][T11977] FAULT_INJECTION: forcing a failure. [ 486.819968][T11977] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 486.828781][T11977] CPU: 1 UID: 0 PID: 11977 Comm: syz.1.1749 Tainted: G L syzkaller #0 PREEMPT(full) [ 486.828818][T11977] Tainted: [L]=SOFTLOCKUP [ 486.828826][T11977] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 486.828837][T11977] Call Trace: [ 486.828846][T11977] [ 486.828853][T11977] dump_stack_lvl+0x100/0x190 [ 486.828885][T11977] should_fail_ex.cold+0x5/0xa [ 486.828909][T11977] _copy_to_user+0x32/0xd0 [ 486.828945][T11977] simple_read_from_buffer+0xcb/0x170 [ 486.828999][T11977] proc_fail_nth_read+0x1af/0x230 [ 486.829041][T11977] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 486.829068][T11977] ? rw_verify_area+0xce/0x6d0 [ 486.829096][T11977] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 486.829121][T11977] vfs_read+0x1e4/0xb40 [ 486.829143][T11977] ? __pfx_vfs_read+0x10/0x10 [ 486.829162][T11977] ? find_held_lock+0x2b/0x80 [ 486.829188][T11977] ? __fget_files+0x215/0x3d0 [ 486.829211][T11977] ? __fget_files+0x21f/0x3d0 [ 486.829237][T11977] ksys_read+0x12a/0x250 [ 486.829255][T11977] ? __pfx_ksys_read+0x10/0x10 [ 486.829270][T11977] ? trace_syscall_enter+0xd9/0x110 [ 486.829299][T11977] do_int80_emulation+0x14b/0x720 [ 486.829332][T11977] asm_int80_emulation+0x1a/0x20 [ 486.829354][T11977] RIP: 0023:0xf71f74eb [ 486.829371][T11977] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 486.829387][T11977] RSP: 002b:00000000f54b64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 486.829405][T11977] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54b65d0 [ 486.829416][T11977] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 486.829426][T11977] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 486.829435][T11977] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 486.829445][T11977] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 486.829467][T11977] [ 487.107905][ T961] usb 9-1: USB disconnect, device number 27 [ 487.277600][ T961] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 487.342311][ T961] opticon 9-1:1.0: device disconnected [ 488.240042][T11992] wlan1: deauthenticating from 08:02:11:00:00:00 by local choice (Reason: 3=DEAUTH_LEAVING) [ 488.338596][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 488.346982][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.084594][T12008] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1757'. [ 489.094682][T12008] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.148613][ T8452] libceph: connect (1)[c::]:6789 error -101 [ 489.152979][ T8452] libceph: mon0 (1)[c::]:6789 connect error [ 489.173770][T12008] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.191063][ T24] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 489.194989][T12009] ceph: No mds server is up or the cluster is laggy [ 489.237985][T12008] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.308503][T12008] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.341106][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 489.345492][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 489.349655][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 489.355722][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 489.359603][ T24] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 489.366546][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 489.395808][ T24] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 489.398884][ T24] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 489.408728][ T24] usb 6-1: Manufacturer: syz [ 489.493685][ T24] usb 6-1: config 0 descriptor?? [ 489.643001][ T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.656588][ T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.673735][ T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.742218][T12018] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 489.744626][T12018] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 489.747783][T12018] vhci_hcd vhci_hcd.0: Device attached [ 489.761577][ T24] rc_core: IR keymap rc-hauppauge not found [ 489.761592][ T24] Registered IR keymap rc-empty [ 489.764271][ T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 489.772681][ T5822] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.782360][ T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 489.814961][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 489.816147][T12018] rdma_rxe: rxe_newlink: failed to add wg2 [ 489.833304][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input30 [ 489.866618][ T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 489.871244][T12015] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 489.907981][ T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 489.955844][ T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 489.981434][ T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 490.001983][ T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 490.034611][T12015] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 490.039575][ T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 490.044837][ T29] usb 46-1: SetAddress Request (10) to port 0 [ 490.045632][T12015] usb 7-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 490.047538][ T29] usb 46-1: new SuperSpeed USB device number 10 using vhci_hcd [ 490.050660][T12015] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.072509][ T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 490.093814][ T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 490.114591][ T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 490.142240][ T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 490.215541][T12012] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 490.297244][ T24] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 490.308738][T12015] opticon 7-1:1.0: opticon converter detected [ 490.312738][ T24] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 490.353879][T12020] vhci_hcd: connection reset by peer [ 490.356695][ T13] vhci_hcd vhci_hcd.4: stop threads [ 490.359283][ T13] vhci_hcd vhci_hcd.4: release socket [ 490.362160][ T13] vhci_hcd vhci_hcd.4: disconnect device [ 490.435253][ T24] usb 6-1: USB disconnect, device number 52 [ 490.466815][T12015] usb 7-1: opticon converter now attached to ttyUSB0 [ 490.545716][ T10] libceph: connect (1)[c::]:6789 error -101 [ 490.547800][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 490.549995][T12029] ceph: No mds server is up or the cluster is laggy [ 490.861250][T12038] ptrace attach of "/syz-executor exec"[12039] was attempted by "/syz-executor exec"[12038] [ 491.054655][ T8376] usb 44-1: device descriptor read/8, error -110 [ 491.452189][ T8376] usb usb44-port1: attempt power cycle [ 491.557987][T12050] ALSA: mixer_oss: invalid OSS volume 'PHl' [ 491.577777][T12050] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1767'. [ 491.808126][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.815354][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.714582][ T8376] usb usb44-port1: unable to enumerate USB device [ 493.094104][ T6100] usb 8-1: new high-speed USB device number 51 using dummy_hcd [ 493.172922][T12075] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 493.175670][T12075] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 493.179301][T12075] vhci_hcd vhci_hcd.0: Device attached [ 493.187053][T12075] syz2: rxe_newlink: already configured on wg2 [ 493.197805][ T8376] libceph: connect (1)[c::]:6789 error -101 [ 493.199986][ T8376] libceph: mon0 (1)[c::]:6789 connect error [ 493.202792][ T8376] libceph: connect (1)[c::]:6789 error -101 [ 493.205109][ T8376] libceph: mon0 (1)[c::]:6789 connect error [ 493.241060][ T6100] usb 8-1: Using ep0 maxpacket: 16 [ 493.243019][T12078] ceph: No mds server is up or the cluster is laggy [ 493.244876][ T6100] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 493.248726][ T6100] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 493.252579][ T6100] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 493.255750][ T6100] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 493.258840][ T6100] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 493.264208][ T6100] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 493.267140][ T6100] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 493.282815][ T6100] usb 8-1: Manufacturer: syz [ 493.286080][ T6100] usb 8-1: config 0 descriptor?? [ 493.461084][ T6099] usb 40-1: SetAddress Request (18) to port 0 [ 493.462938][ T6099] usb 40-1: new SuperSpeed USB device number 18 using vhci_hcd [ 493.551110][ T6100] rc_core: IR keymap rc-hauppauge not found [ 493.553764][ T6100] Registered IR keymap rc-empty [ 493.555784][ T6100] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 493.571061][ T6100] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 493.601596][ T6100] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 493.606008][ T6100] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input32 [ 493.612073][ T6100] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 493.641216][ T6100] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 493.661095][ T6100] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 493.691361][ T6100] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 493.711061][ T6100] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 493.731200][ T6100] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 493.751196][ T6100] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 493.771117][ T6100] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 493.791187][ T6100] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 493.821102][ T6100] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 493.839991][T12079] vhci_hcd: connection reset by peer [ 493.842324][ T13] vhci_hcd vhci_hcd.1: stop threads [ 493.844192][ T13] vhci_hcd vhci_hcd.1: release socket [ 493.846339][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 493.855332][ T6100] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 493.859246][ T6100] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 493.866779][ T6100] usb 8-1: USB disconnect, device number 51 [ 494.645780][T12098] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 494.647895][T12098] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 494.657438][T12098] vhci_hcd vhci_hcd.0: Device attached [ 494.669728][T12098] rdma_rxe: rxe_newlink: failed to add wg2 [ 494.815114][T12103] ALSA: mixer_oss: invalid OSS volume 'PHl' [ 494.822050][T12103] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1777'. [ 494.931135][ T5959] usb 44-1: SetAddress Request (22) to port 0 [ 494.933515][ T5959] usb 44-1: new SuperSpeed USB device number 22 using vhci_hcd [ 495.020219][T12109] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1779'. [ 495.025361][T12109] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 495.028571][T12109] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 41501 - 0 [ 495.032144][T12109] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 495.099746][T12109] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 495.104051][T12109] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 41501 - 0 [ 495.108342][T12109] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 495.181135][ T29] usb 46-1: device descriptor read/8, error -110 [ 495.212959][T12109] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 495.218722][T12109] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 41501 - 0 [ 495.223127][T12109] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 495.293917][T12109] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 495.297736][T12109] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 41501 - 0 [ 495.302177][T12109] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 495.423562][T11542] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 495.458609][T12100] vhci_hcd: connection reset by peer [ 495.461134][ T13] vhci_hcd vhci_hcd.3: stop threads [ 495.462964][ T13] vhci_hcd vhci_hcd.3: release socket [ 495.464992][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 495.471197][ T13] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 495.473877][ T13] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 41501 - 0 [ 495.477271][ T13] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 495.480085][ T13] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 495.484127][ T13] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 41501 - 0 [ 495.486811][ T13] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 495.489430][ T13] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 495.492044][ T13] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 41501 - 0 [ 495.494622][ T13] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 495.497286][ T13] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 495.499861][ T13] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 41501 - 0 [ 495.502573][ T13] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 495.584067][T11542] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 495.587991][T11542] usb 9-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 495.591456][T11542] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.608544][T12112] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 495.617061][T11542] opticon 9-1:1.0: opticon converter detected [ 495.636759][T11542] usb 9-1: opticon converter now attached to ttyUSB1 [ 495.712933][ T961] usb 7-1: USB disconnect, device number 65 [ 495.726058][ T961] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 495.751611][ T961] opticon 7-1:1.0: device disconnected [ 496.492072][ T29] usb usb46-port1: attempt power cycle [ 496.991255][T12124] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1783'. [ 497.131568][T12126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1783'. [ 497.496481][ T29] usb usb46-port1: unable to enumerate USB device [ 498.019385][ T5757] Bluetooth: hci2: unexpected event for opcode 0x2041 [ 498.027071][ T29] usb 9-1: USB disconnect, device number 28 [ 498.031863][ T29] opticon ttyUSB1: opticon converter now disconnected from ttyUSB1 [ 498.040542][ T29] opticon 9-1:1.0: device disconnected [ 498.045033][T12138] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 498.057912][T12138] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 498.069005][T12138] udc dummy_udc.0: failed to start g1: -22 [ 498.086561][T12138] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 498.104235][T12138] UDC core: g1: couldn't find an available UDC or it's busy [ 498.421091][ T29] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 498.571088][ T6099] usb 40-1: device descriptor read/8, error -110 [ 498.582572][ T29] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 498.585805][ T29] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 498.589079][ T29] usb 9-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 498.592123][ T29] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.600675][ T29] spcp8x5 9-1:1.0: SPCP8x5 converter detected [ 498.609846][ T29] usb 9-1: SPCP8x5 converter now attached to ttyUSB0 [ 498.971292][T12144] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 498.976012][T12144] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 498.979474][T12144] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 499.011095][ T6099] usb usb40-port1: attempt power cycle [ 499.069398][T12155] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 499.071667][T12155] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 499.075107][T12155] vhci_hcd vhci_hcd.0: Device attached [ 499.086480][T12144] SPCP8x5 ttyUSB0: Set UART format 0x70b failed (error = -32) [ 499.096142][T12155] rdma_rxe: rxe_newlink: failed to add wg2 [ 499.292295][ T961] usb 9-1: USB disconnect, device number 29 [ 499.304434][ T961] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 499.312001][ T961] spcp8x5 9-1:1.0: device disconnected [ 499.322866][T12160] FAULT_INJECTION: forcing a failure. [ 499.322866][T12160] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 499.328311][T12160] CPU: 2 UID: 0 PID: 12160 Comm: syz.1.1795 Tainted: G L syzkaller #0 PREEMPT(full) [ 499.328339][T12160] Tainted: [L]=SOFTLOCKUP [ 499.328346][T12160] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 499.328357][T12160] Call Trace: [ 499.328364][T12160] [ 499.328373][T12160] dump_stack_lvl+0x100/0x190 [ 499.328402][T12160] should_fail_ex.cold+0x5/0xa [ 499.328424][T12160] _copy_from_iter+0x1f4/0x1690 [ 499.328457][T12160] ? __asan_memset+0x23/0x50 [ 499.328478][T12160] ? __pfx__copy_from_iter+0x10/0x10 [ 499.328506][T12160] ? __pfx___alloc_skb+0x10/0x10 [ 499.328542][T12160] netlink_sendmsg+0x808/0xda0 [ 499.328570][T12160] ? __pfx_netlink_sendmsg+0x10/0x10 [ 499.328595][T12160] ? apparmor_socket_sendmsg+0x15b/0x270 [ 499.328622][T12160] ____sys_sendmsg+0xa4d/0xbe0 [ 499.328641][T12160] ? __pfx_netlink_sendmsg+0x10/0x10 [ 499.328665][T12160] ? __pfx_____sys_sendmsg+0x10/0x10 [ 499.328690][T12160] ? __pfx_trace_clock_local+0x10/0x10 [ 499.328718][T12160] ___sys_sendmsg+0x190/0x1e0 [ 499.328739][T12160] ? __pfx____sys_sendmsg+0x10/0x10 [ 499.328771][T12160] ? find_held_lock+0x2b/0x80 [ 499.328804][T12160] __sys_sendmsg+0x160/0x210 [ 499.328827][T12160] ? __pfx___sys_sendmsg+0x10/0x10 [ 499.328859][T12160] __do_fast_syscall_32+0xe7/0x970 [ 499.328885][T12160] ? lockdep_hardirqs_on+0x78/0x100 [ 499.328907][T12160] do_fast_syscall_32+0x32/0x70 [ 499.328931][T12160] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 499.328952][T12160] RIP: 0023:0xf7ff6fec [ 499.328978][T12160] Code: Unable to access opcode bytes at 0xf7ff6fc2. [ 499.328986][T12160] RSP: 002b:00000000f549550c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 499.329005][T12160] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000900 [ 499.329016][T12160] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 499.329027][T12160] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 499.329037][T12160] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 499.329048][T12160] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 499.329071][T12160] [ 499.361166][T11542] usb 42-1: SetAddress Request (14) to port 0 [ 499.405147][T11542] usb 42-1: new SuperSpeed USB device number 14 using vhci_hcd [ 499.612131][ T6099] usb usb40-port1: unable to enumerate USB device [ 499.691415][T12156] vhci_hcd: connection reset by peer [ 499.694300][ T13] vhci_hcd vhci_hcd.2: stop threads [ 499.695989][ T13] vhci_hcd vhci_hcd.2: release socket [ 499.699188][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 500.013157][ T5959] usb 44-1: device descriptor read/8, error -110 [ 500.386069][T12175] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 500.388477][T12175] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 500.391946][T12175] udc dummy_udc.0: failed to start g1: -22 [ 500.394899][T12175] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 500.398895][T12175] UDC core: g1: couldn't find an available UDC or it's busy [ 500.444149][T12179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1801'. [ 500.449419][T12179] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.535394][T12179] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.617498][T12179] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.704370][ T5959] usb usb44-port1: attempt power cycle [ 500.735234][T12179] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.868005][ T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.871985][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.875890][ T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.882089][ T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.961171][ T6099] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 501.020465][T12189] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1804'. [ 501.054657][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.057638][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.102468][ T6100] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 501.108095][T12190] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1804'. [ 501.453583][ T6099] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 501.743877][ T8376] libceph: connect (1)[c::]:6789 error -101 [ 501.745927][ T8376] libceph: mon0 (1)[c::]:6789 connect error [ 501.786644][T12194] ceph: No mds server is up or the cluster is laggy [ 501.865106][ T6099] usb 6-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 501.868033][ T6099] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.892636][T12185] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 501.909749][ T6099] opticon 6-1:1.0: opticon converter detected [ 501.925153][ T6099] usb 6-1: opticon converter now attached to ttyUSB0 [ 501.951990][ T5959] usb usb44-port1: unable to enumerate USB device [ 501.963827][ T6100] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 64 [ 501.967144][ T6100] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64 [ 501.970214][ T6100] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 501.973902][ T6100] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 501.976985][ T6100] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 64 [ 501.980034][ T6100] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 64 [ 501.984752][ T6100] usb 9-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 501.987667][ T6100] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 501.990166][ T6100] usb 9-1: Product: syz [ 501.991610][ T6100] usb 9-1: Manufacturer: syz [ 501.995512][T12187] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 501.998072][T12187] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 502.000743][T12187] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 502.003354][T12187] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 502.005720][T12187] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 502.008086][T12187] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 502.012125][ T6100] usb 9-1: USB2VGA dongle found at address 30 [ 502.017459][ T6100] usb 9-1: Allocated 8 output buffers [ 502.023860][ T6100] usb 9-1: Failed to early initialize device [ 502.131534][ T41] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 502.292662][ T41] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 16402, setting to 1024 [ 502.296286][ T41] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 502.299420][ T41] usb 7-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 502.302601][ T41] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.307407][T12200] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 502.310828][ T41] spcp8x5 7-1:1.0: SPCP8x5 converter detected [ 502.314903][ T41] usb 7-1: SPCP8x5 converter now attached to ttyUSB1 [ 502.397738][T12201] qnx4: no qnx4 filesystem (no root dir). [ 502.764075][T12211] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 502.766243][T12211] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 502.769044][T12211] vhci_hcd vhci_hcd.0: Device attached [ 502.779665][T12211] rdma_rxe: rxe_newlink: failed to add wg2 [ 503.031848][ T961] usb 44-1: SetAddress Request (26) to port 0 [ 503.035355][ T961] usb 44-1: new SuperSpeed USB device number 26 using vhci_hcd [ 503.358933][T12212] vhci_hcd: connection reset by peer [ 503.362214][ T13] vhci_hcd vhci_hcd.3: stop threads [ 503.364122][ T13] vhci_hcd vhci_hcd.3: release socket [ 503.366979][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 504.022041][ T6100] usb 9-1: USB disconnect, device number 30 [ 504.117988][T12217] FAULT_INJECTION: forcing a failure. [ 504.117988][T12217] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 504.122238][T12217] CPU: 0 UID: 0 PID: 12217 Comm: syz.3.1810 Tainted: G L syzkaller #0 PREEMPT(full) [ 504.122274][T12217] Tainted: [L]=SOFTLOCKUP [ 504.122279][T12217] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 504.122286][T12217] Call Trace: [ 504.122291][T12217] [ 504.122296][T12217] dump_stack_lvl+0x100/0x190 [ 504.122316][T12217] should_fail_ex.cold+0x5/0xa [ 504.122332][T12217] _copy_to_user+0x32/0xd0 [ 504.122354][T12217] simple_read_from_buffer+0xcb/0x170 [ 504.122376][T12217] proc_fail_nth_read+0x1af/0x230 [ 504.122393][T12217] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 504.122410][T12217] ? rw_verify_area+0xce/0x6d0 [ 504.122427][T12217] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 504.122443][T12217] vfs_read+0x1e4/0xb40 [ 504.122456][T12217] ? __pfx_vfs_read+0x10/0x10 [ 504.122465][T12217] ? find_held_lock+0x2b/0x80 [ 504.122481][T12217] ? __fget_files+0x215/0x3d0 [ 504.122495][T12217] ? __fget_files+0x21f/0x3d0 [ 504.122509][T12217] ksys_read+0x12a/0x250 [ 504.122520][T12217] ? __pfx_ksys_read+0x10/0x10 [ 504.122530][T12217] ? trace_syscall_enter+0xd9/0x110 [ 504.122546][T12217] do_int80_emulation+0x14b/0x720 [ 504.122566][T12217] asm_int80_emulation+0x1a/0x20 [ 504.122577][T12217] RIP: 0023:0xf71874eb [ 504.122589][T12217] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 504.122601][T12217] RSP: 002b:00000000f543d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 504.122612][T12217] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f543d5d0 [ 504.122620][T12217] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 504.122626][T12217] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 504.122633][T12217] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 504.122640][T12217] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 504.122653][T12217] [ 504.253385][T12221] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1811'. [ 504.262397][T12221] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.339764][T12221] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.409411][T12225] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1812'. [ 504.416009][T12225] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 504.419124][T12225] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 41501 - 0 [ 504.422432][T12225] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 504.446718][T12221] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.493872][T11542] usb 42-1: device descriptor read/8, error -110 [ 504.500575][T12225] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 504.504414][T12225] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 41501 - 0 [ 504.507791][T12225] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 504.543155][T12221] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.594818][T12225] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 504.597875][T12225] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 41501 - 0 [ 504.601284][T12225] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 504.706361][T12225] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 504.710457][T12225] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 41501 - 0 [ 504.714053][T12225] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 504.748611][ T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.760267][ T6099] usb 8-1: new high-speed USB device number 52 using dummy_hcd [ 504.771287][ T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.775001][ T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.779413][ T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.831056][ T8452] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 504.881237][ T13] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 504.883421][T11542] usb usb42-port1: attempt power cycle [ 504.884558][ T13] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 41501 - 0 [ 504.890203][ T13] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 504.894283][ T13] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 504.897558][ T13] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 41501 - 0 [ 504.899312][ T5959] usb 7-1: USB disconnect, device number 66 [ 504.900935][ T13] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 504.925120][ T13] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 504.928916][ T5959] SPCP8x5 ttyUSB1: SPCP8x5 converter now disconnected from ttyUSB1 [ 504.931230][ T13] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 41501 - 0 [ 504.934767][ T5959] spcp8x5 7-1:1.0: device disconnected [ 504.939500][ T13] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 504.945672][ T13] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 504.959824][ T13] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 41501 - 0 [ 504.962625][ T13] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 504.968184][T12229] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 504.970684][T12229] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 504.975171][T12229] udc dummy_udc.0: failed to start g1: -22 [ 504.977188][T12229] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 504.981715][T12229] UDC core: g1: couldn't find an available UDC or it's busy [ 504.993540][ T8452] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 504.999790][ T8452] usb 9-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 505.003373][ T8452] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.008196][T12227] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 505.014765][ T8452] opticon 9-1:1.0: opticon converter detected [ 505.018557][ T8452] usb 9-1: opticon converter now attached to ttyUSB1 [ 505.070504][T12231] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1814'. [ 505.134609][T12232] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1814'. [ 505.453838][T11542] usb usb42-port1: unable to enumerate USB device [ 505.937140][ T6099] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 506.061784][ T5959] libceph: connect (1)[c::]:6789 error -101 [ 506.064464][ T5959] libceph: mon0 (1)[c::]:6789 connect error [ 506.104193][T12236] ceph: No mds server is up or the cluster is laggy [ 506.818513][ T6099] usb 8-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 506.827785][ T6099] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.847171][T12241] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1816'. [ 506.881162][T12222] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 506.913379][T12242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1816'. [ 506.987916][ T6099] opticon 8-1:1.0: opticon converter detected [ 507.048743][ T6099] usb 8-1: opticon converter now attached to ttyUSB2 [ 507.455513][ T29] usb 6-1: USB disconnect, device number 53 [ 507.470367][ T29] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 507.485188][ T29] opticon 6-1:1.0: device disconnected [ 507.594009][T12247] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 507.597124][T12247] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 507.603085][T12247] udc dummy_udc.0: failed to start g1: -22 [ 507.610134][T12247] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 507.616560][T12247] UDC core: g1: couldn't find an available UDC or it's busy [ 507.683103][T12248] smbdirect: ib_dev[syz0] removed [ 507.914121][T12253] netlink: 'syz.2.1819': attribute type 1 has an invalid length. [ 508.091159][ T961] usb 44-1: device descriptor read/8, error -110 [ 508.409283][ T29] usb 9-1: USB disconnect, device number 31 [ 508.423716][ T29] opticon ttyUSB1: opticon converter now disconnected from ttyUSB1 [ 508.435915][ T29] opticon 9-1:1.0: device disconnected [ 508.508221][ T961] usb usb44-port1: attempt power cycle [ 508.685056][ T6099] usb 8-1: USB disconnect, device number 52 [ 508.718705][ T5757] Bluetooth: hci2: unexpected event for opcode 0x2041 [ 508.727672][T12261] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 508.729777][T12261] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 508.729820][ T6099] opticon ttyUSB2: opticon converter now disconnected from ttyUSB2 [ 508.733493][T12261] udc dummy_udc.0: failed to start g1: -22 [ 508.737741][T12261] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 508.749267][T12261] UDC core: g1: couldn't find an available UDC or it's busy [ 508.752802][ T6099] opticon 8-1:1.0: device disconnected [ 508.803199][T12263] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1823'. [ 508.807013][T12263] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1823'. [ 508.914920][ T24] libceph: connect (1)[c::]:6789 error -101 [ 508.917065][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 508.960766][T12267] ceph: No mds server is up or the cluster is laggy [ 509.032270][T12272] can0: slcan on ttyprintk. [ 509.101876][ T961] usb usb44-port1: unable to enumerate USB device [ 509.592402][T12256] can0 (unregistered): slcan off ttyprintk. [ 509.746615][T12294] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1828'. [ 509.749962][T12294] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1828'. [ 509.934729][T12298] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1831'. [ 509.939777][T12298] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.065239][T12298] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.111597][ T41] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 510.134385][T12298] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.200165][T12298] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.291209][ T5822] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.295697][ T41] usb 7-1: Using ep0 maxpacket: 16 [ 510.302825][ T41] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 510.312700][ T41] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 510.319217][ T5822] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.323300][ T41] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 510.327356][ T5822] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.330894][ T5822] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.332984][ T961] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 510.334808][ T41] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 510.341248][ T41] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 510.347675][ T41] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 510.351351][ T41] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 510.354266][ T41] usb 7-1: Manufacturer: syz [ 510.357729][ T41] usb 7-1: config 0 descriptor?? [ 510.493624][ T961] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 510.497123][ T961] usb 6-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 510.500026][ T961] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.507436][T12301] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 510.514510][ T961] opticon 6-1:1.0: opticon converter detected [ 510.523400][ T961] usb 6-1: opticon converter now attached to ttyUSB0 [ 510.611048][ T41] rc_core: IR keymap rc-hauppauge not found [ 510.613858][ T41] Registered IR keymap rc-empty [ 510.616538][ T41] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 510.631122][ T41] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 510.651825][ T41] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 510.657051][ T41] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input33 [ 510.665244][ T41] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 510.681316][ T41] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 510.711254][ T41] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 510.731632][ T41] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 510.761485][ T41] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 510.781700][ T41] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 510.801214][ T41] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 510.821185][ T41] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 510.841165][ T41] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 510.861147][ T41] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 510.874297][ T5757] Bluetooth: hci2: unexpected event for opcode 0x2041 [ 510.883932][T12308] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 510.886193][T12308] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 510.888636][T12308] udc dummy_udc.0: failed to start g1: -22 [ 510.890375][T12308] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 510.894974][ T41] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 510.899540][T12308] UDC core: g1: couldn't find an available UDC or it's busy [ 510.901766][ T41] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 510.911130][ T41] usb 7-1: USB disconnect, device number 67 [ 511.572170][T12311] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 511.574183][T12311] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 511.576673][T12311] vhci_hcd vhci_hcd.0: Device attached [ 512.533993][T12311] rdma_rxe: rxe_newlink: failed to add wg2 [ 512.637510][T12315] vhci_hcd: connection closed [ 512.637777][ T13] vhci_hcd vhci_hcd.3: stop threads [ 512.642460][ T13] vhci_hcd vhci_hcd.3: release socket [ 512.644811][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 514.702936][T12325] netlink: 'syz.4.1835': attribute type 1 has an invalid length. [ 514.710776][ T24] libceph: connect (1)[c::]:6789 error -101 [ 514.714281][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 514.717260][T12321] ceph: No mds server is up or the cluster is laggy [ 514.820164][T12328] binder: Bad value for 'stats' [ 515.029542][T12328] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1837'. [ 515.465961][T12335] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1839'. [ 515.469824][T12335] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1839'. [ 515.602759][T12340] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1841'. [ 515.693758][T12343] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1841'. [ 515.882603][ T961] usb 6-1: USB disconnect, device number 54 [ 515.906735][ T961] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 515.916034][ T961] opticon 6-1:1.0: device disconnected [ 515.916167][ T5757] Bluetooth: hci3: unexpected event for opcode 0x2041 [ 515.922882][T12347] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 515.925667][T12347] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 515.928815][T12347] udc dummy_udc.0: failed to start g1: -22 [ 515.931726][T12347] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 515.936839][T12347] UDC core: g1: couldn't find an available UDC or it's busy [ 515.991753][T12349] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1843'. [ 516.062754][T12350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1843'. [ 517.176516][ T5959] libceph: connect (1)[c::]:6789 error -101 [ 517.179030][ T5959] libceph: mon0 (1)[c::]:6789 connect error [ 517.222544][ T8376] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 517.226575][T12365] ceph: No mds server is up or the cluster is laggy [ 517.392691][ T8376] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 16402, setting to 1024 [ 517.396337][ T8376] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 517.399378][ T8376] usb 6-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 517.402741][ T8376] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.407662][T12358] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 517.411893][T12362] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484032 (4294968064 ns) > initial count (6 ns). Using initial count to start timer. [ 517.419478][ T8376] spcp8x5 6-1:1.0: SPCP8x5 converter detected [ 517.423947][ T8376] usb 6-1: SPCP8x5 converter now attached to ttyUSB0 [ 517.935305][T12380] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1851'. [ 517.943209][T12380] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.074573][T12383] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1852'. [ 518.077070][T12380] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.141480][ T6099] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 518.171290][T12385] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1852'. [ 518.211794][T12380] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.311082][ T6099] usb 9-1: Using ep0 maxpacket: 16 [ 518.316091][ T6099] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 518.321866][ T6099] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 518.325490][ T6099] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 518.329475][ T6099] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 518.353164][ T29] usb 8-1: new high-speed USB device number 53 using dummy_hcd [ 518.361101][ T6099] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 518.376365][ T6099] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 518.383105][ T6099] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 518.388337][ T6099] usb 9-1: Manufacturer: syz [ 518.397575][T12380] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.401345][ T6099] usb 9-1: config 0 descriptor?? [ 518.547449][ T29] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 518.552857][ T5822] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.556458][ T29] usb 8-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 518.559398][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.581765][T12381] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 518.603568][ T29] opticon 8-1:1.0: opticon converter detected [ 518.631413][ T29] usb 8-1: opticon converter now attached to ttyUSB1 [ 518.691129][ T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.698959][ T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.710395][ T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.771090][ T6099] rc_core: IR keymap rc-hauppauge not found [ 518.773073][ T6099] Registered IR keymap rc-empty [ 518.774897][ T6099] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 518.803279][ T6099] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 518.883301][ T6099] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0 [ 518.894603][ T6099] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0/input34 [ 518.906313][ T6099] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 518.921999][ T6099] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 518.941618][ T6099] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 518.961239][ T6099] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 518.981271][ T6099] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 519.011171][ T6099] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 519.031362][ T6099] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 519.061140][ T6099] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 519.081137][ T6099] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 519.101193][ T6099] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 519.122561][ T6099] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 519.125355][ T6099] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 519.131855][ T6099] usb 9-1: USB disconnect, device number 32 [ 519.993428][ T10] usb 6-1: USB disconnect, device number 55 [ 520.012700][ T10] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 520.017466][ T10] spcp8x5 6-1:1.0: device disconnected [ 520.037368][ T5757] Bluetooth: hci3: unexpected event for opcode 0x202d [ 520.321041][T12398] netlink: 'syz.1.1853': attribute type 1 has an invalid length. [ 520.553263][T12401] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1855'. [ 520.615877][T12402] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1855'. [ 520.950084][ T5823] usb 8-1: USB disconnect, device number 53 [ 520.968831][ T5823] opticon ttyUSB1: opticon converter now disconnected from ttyUSB1 [ 520.979384][ T5823] opticon 8-1:1.0: device disconnected [ 521.058273][T12405] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1858'. [ 521.068286][T12405] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.142996][T12405] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.228872][T12405] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.341458][T12405] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.578658][T12410] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484032 (4294968064 ns) > initial count (6 ns). Using initial count to start timer. [ 521.771141][ T5823] usb 8-1: new high-speed USB device number 54 using dummy_hcd [ 522.136463][ T8376] libceph: connect (1)[c::]:6789 error -101 [ 522.139280][ T8376] libceph: mon0 (1)[c::]:6789 connect error [ 522.178714][T12421] ceph: No mds server is up or the cluster is laggy [ 522.310473][T12428] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1864'. [ 522.412059][ T8376] libceph: connect (1)[c::]:6789 error -101 [ 522.415441][ T8376] libceph: mon0 (1)[c::]:6789 connect error [ 522.758483][ T5823] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 522.791491][ T6099] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 522.898920][ T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.932915][ T5822] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.936288][ T5822] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.941273][ T5822] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.967149][ T6099] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 16402, setting to 1024 [ 522.971692][ T6099] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 522.975185][ T6099] usb 9-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 522.977993][ T6099] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.995216][T12431] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 523.015686][ T6099] spcp8x5 9-1:1.0: SPCP8x5 converter detected [ 523.039690][ T6099] usb 9-1: SPCP8x5 converter now attached to ttyUSB0 [ 523.251442][ T5823] usb 8-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 523.254246][ T5823] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.266537][T12407] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 523.272059][ T5823] opticon 8-1:1.0: opticon converter detected [ 523.280100][ T5823] usb 8-1: opticon converter now attached to ttyUSB1 [ 523.331214][ T961] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 523.481067][ T961] usb 6-1: Using ep0 maxpacket: 16 [ 523.484475][ T961] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 523.487753][ T961] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 523.491540][ T8376] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 523.494189][ T961] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 523.499664][ T961] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 523.503286][ T961] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 523.512738][ T961] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 523.515739][ T961] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 523.518843][ T961] usb 6-1: Manufacturer: syz [ 523.526535][ T961] usb 6-1: config 0 descriptor?? [ 523.651102][ T8376] usb 7-1: Using ep0 maxpacket: 16 [ 523.655478][ T8376] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 523.658864][ T8376] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 523.662544][ T8376] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 523.666035][ T8376] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 523.669597][ T8376] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 523.675263][ T8376] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 523.678429][ T8376] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 523.681406][ T8376] usb 7-1: Manufacturer: syz [ 523.688103][ T8376] usb 7-1: config 0 descriptor?? [ 523.792641][ T961] rc_core: IR keymap rc-hauppauge not found [ 523.794580][ T961] Registered IR keymap rc-empty [ 523.797777][ T961] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 523.821114][ T961] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 523.842458][ T961] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 523.849897][ T961] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input36 [ 523.859196][ T961] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 523.881232][ T961] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 523.901570][ T961] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 523.921124][ T961] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 523.941272][ T961] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 523.951148][ T8376] rc_core: IR keymap rc-hauppauge not found [ 523.953211][ T8376] Registered IR keymap rc-empty [ 523.954932][ T8376] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 523.961067][ T961] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 523.971131][ T8376] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 523.981975][ T961] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 523.991812][ T8376] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc1 [ 523.999077][ T8376] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc1/input37 [ 524.004057][ T961] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 524.010816][ T8376] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 524.021083][ T961] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 524.031379][ T8376] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 524.041234][ T961] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 524.051310][ T8376] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 524.063053][ T961] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 524.066322][ T961] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 524.071743][ T8376] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 524.074504][ T961] usb 6-1: USB disconnect, device number 56 [ 524.094045][ T8376] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 524.111509][ T8376] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 524.131242][ T8376] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 524.151277][ T8376] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 524.171850][ T8376] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 524.192372][ T8376] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 524.222110][ T8376] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 524.227046][ T8376] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 524.234440][ T8376] usb 7-1: USB disconnect, device number 68 [ 524.645522][T12454] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1872'. [ 524.719819][T12458] FAULT_INJECTION: forcing a failure. [ 524.719819][T12458] name failslab, interval 1, probability 0, space 0, times 0 [ 524.725876][T12458] CPU: 2 UID: 0 PID: 12458 Comm: syz.1.1874 Tainted: G L syzkaller #0 PREEMPT(full) [ 524.725905][T12458] Tainted: [L]=SOFTLOCKUP [ 524.725913][T12458] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 524.725924][T12458] Call Trace: [ 524.725932][T12458] [ 524.725940][T12458] dump_stack_lvl+0x100/0x190 [ 524.725969][T12458] should_fail_ex.cold+0x5/0xa [ 524.725989][T12458] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 524.726030][T12458] should_failslab+0xc2/0x120 [ 524.726056][T12458] kmem_cache_alloc_noprof+0x91/0x6a0 [ 524.726081][T12458] ? skb_clone+0x190/0x400 [ 524.726116][T12458] skb_clone+0x190/0x400 [ 524.726143][T12458] netlink_deliver_tap+0xaed/0xcc0 [ 524.726197][T12458] netlink_unicast+0x6a5/0x850 [ 524.726223][T12458] ? __pfx_netlink_unicast+0x10/0x10 [ 524.726243][T12458] ? genl_rcv_msg+0x4be/0x800 [ 524.726274][T12458] netlink_ack+0x655/0xb80 [ 524.726303][T12458] netlink_rcv_skb+0x333/0x420 [ 524.726325][T12458] ? __pfx_genl_rcv_msg+0x10/0x10 [ 524.726351][T12458] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 524.726388][T12458] ? netlink_deliver_tap+0x1ae/0xcc0 [ 524.726413][T12458] genl_rcv+0x28/0x40 [ 524.726434][T12458] netlink_unicast+0x585/0x850 [ 524.726460][T12458] ? __pfx_netlink_unicast+0x10/0x10 [ 524.726489][T12458] netlink_sendmsg+0x8b0/0xda0 [ 524.726529][T12458] ? __pfx_netlink_sendmsg+0x10/0x10 [ 524.726558][T12458] ? apparmor_socket_sendmsg+0x15b/0x270 [ 524.726584][T12458] __sys_sendto+0x48b/0x4e0 [ 524.726609][T12458] ? __pfx_netlink_sendmsg+0x10/0x10 [ 524.726631][T12458] ? __pfx___sys_sendto+0x10/0x10 [ 524.726682][T12458] __ia32_compat_sys_socketcall+0x59a/0x770 [ 524.726709][T12458] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 524.726728][T12458] ? trace_event_buffer_commit+0x20a/0xa80 [ 524.726766][T12458] do_int80_emulation+0x14b/0x720 [ 524.726799][T12458] asm_int80_emulation+0x1a/0x20 [ 524.726818][T12458] RIP: 0023:0xf71f74eb [ 524.726834][T12458] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 524.726852][T12458] RSP: 002b:00000000f54b534c EFLAGS: 00000246 ORIG_RAX: 0000000000000066 [ 524.726873][T12458] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000f54b53f4 [ 524.726885][T12458] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 524.726896][T12458] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 524.726907][T12458] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 524.726919][T12458] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 524.726943][T12458] [ 524.728442][T12458] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1874'. [ 524.855115][ T8452] libceph: connect (1)[c::]:6789 error -101 [ 524.857136][ T8452] libceph: mon0 (1)[c::]:6789 connect error [ 524.899301][T12459] ceph: No mds server is up or the cluster is laggy [ 525.033836][T11542] usb 8-1: USB disconnect, device number 54 [ 525.042883][T11542] opticon ttyUSB1: opticon converter now disconnected from ttyUSB1 [ 525.063533][T11542] opticon 8-1:1.0: device disconnected [ 525.418196][T12468] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 525.424295][ T961] usb 9-1: USB disconnect, device number 33 [ 525.442098][ T961] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 525.446276][ T961] spcp8x5 9-1:1.0: device disconnected [ 525.687728][T12468] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1876'. [ 525.692116][T12468] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1876'. [ 525.764570][T12489] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1882'. [ 525.812358][T12491] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 525.814994][T12491] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 525.818504][T12491] vhci_hcd vhci_hcd.0: Device attached [ 525.821479][T12492] vhci_hcd: unknown pdu 1 [ 525.823435][ T5822] vhci_hcd vhci_hcd.2: stop threads [ 525.825354][ T5822] vhci_hcd vhci_hcd.2: release socket [ 525.831868][ T5822] vhci_hcd vhci_hcd.2: disconnect device [ 525.961163][ T961] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 525.980524][ T42] kauditd_printk_skb: 27 callbacks suppressed [ 525.980538][ T42] audit: type=1326 audit(1785953850.636:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12494 comm="syz.3.1884" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 525.991198][ T6099] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 525.991434][ T42] audit: type=1326 audit(1785953850.646:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12494 comm="syz.3.1884" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 526.000925][ T42] audit: type=1326 audit(1785953850.656:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12494 comm="syz.3.1884" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf704efec code=0x7ffc0000 [ 526.008249][ T42] audit: type=1326 audit(1785953850.656:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12494 comm="syz.3.1884" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 526.015294][ T42] audit: type=1326 audit(1785953850.656:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12494 comm="syz.3.1884" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 526.021884][ T42] audit: type=1326 audit(1785953850.686:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12494 comm="syz.3.1884" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf704efec code=0x7ffc0000 [ 526.111055][ T961] usb 9-1: Using ep0 maxpacket: 16 [ 526.114321][ T961] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 526.117602][ T961] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 526.124302][ T961] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 526.127440][ T961] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 526.130406][ T961] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 526.135623][ T961] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 526.138579][ T961] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 526.141158][ T961] usb 9-1: Manufacturer: syz [ 526.141165][ T6099] usb 6-1: Using ep0 maxpacket: 16 [ 526.146080][ T961] usb 9-1: config 0 descriptor?? [ 526.153442][ T6099] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 526.162566][ T6099] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 526.166784][ T6099] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 526.170172][ T6099] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 526.173566][ T6099] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 526.178516][ T6099] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 526.186481][ T6099] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 526.191163][ T6099] usb 6-1: Manufacturer: syz [ 526.197386][ T6099] usb 6-1: config 0 descriptor?? [ 526.314722][ T42] audit: type=1326 audit(1785953850.976:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12494 comm="syz.3.1884" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 526.321340][ T42] audit: type=1326 audit(1785953850.986:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12494 comm="syz.3.1884" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 526.401040][ T961] rc_core: IR keymap rc-hauppauge not found [ 526.403435][ T961] Registered IR keymap rc-empty [ 526.409832][ T961] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 526.441221][ T961] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 526.461975][ T961] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0 [ 526.467382][ T961] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0/input38 [ 526.476330][ T961] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 526.481041][ T6099] rc_core: IR keymap rc-hauppauge not found [ 526.482843][ T6099] Registered IR keymap rc-empty [ 526.484587][ T6099] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 526.491755][ T961] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 526.501105][ T6099] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 526.521132][ T961] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 526.522181][ T6099] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc1 [ 526.530422][ T6099] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc1/input39 [ 526.542670][ T6099] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 526.551192][ T961] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 526.561152][ T6099] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 526.571131][ T961] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 526.581396][ T6099] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 526.591079][ T961] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 526.604253][ T6099] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 526.611217][ T961] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 526.621175][ T6099] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 526.641059][ T961] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 526.642783][ T6099] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 526.661453][ T961] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 526.671513][ T6099] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 526.691272][ T6099] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 526.691299][ T961] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 526.721159][ T6099] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 526.725071][ T961] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 526.728391][ T961] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 526.738648][ T961] usb 9-1: USB disconnect, device number 34 [ 526.741130][ T6099] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 526.772069][ T6099] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 526.779558][ T6099] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 526.793549][ T6099] usb 6-1: USB disconnect, device number 57 [ 526.867964][ T5757] Bluetooth: hci2: unexpected event for opcode 0x2041 [ 526.876046][T12507] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 526.878013][T12507] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 526.880235][T12507] udc dummy_udc.0: failed to start g1: -22 [ 526.882301][T12507] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 526.885696][T12507] UDC core: g1: couldn't find an available UDC or it's busy [ 527.252515][T12521] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1892'. [ 527.257956][T12521] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1892'. [ 527.367023][T12523] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484032 (4294968064 ns) > initial count (6 ns). Using initial count to start timer. [ 527.943726][T12531] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1895'. [ 528.023502][ T5757] Bluetooth: hci3: unexpected event for opcode 0x2041 [ 528.030580][T12533] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 528.033026][T12533] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 528.035804][T12533] udc dummy_udc.0: failed to start g1: -22 [ 528.037865][T12533] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 528.042245][T12533] UDC core: g1: couldn't find an available UDC or it's busy [ 528.311251][T11542] usb 8-1: new high-speed USB device number 55 using dummy_hcd [ 528.381180][ T961] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 528.479680][T12551] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484032 (4294968064 ns) > initial count (6 ns). Using initial count to start timer. [ 528.499181][T11542] usb 8-1: Using ep0 maxpacket: 16 [ 528.532041][ T961] usb 6-1: Using ep0 maxpacket: 16 [ 528.560181][ T961] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 528.564786][ T961] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 528.568703][ T961] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 528.603377][ T961] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 528.615011][ T961] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 528.663600][ T961] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 528.668268][ T961] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 528.671119][T11542] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 528.671564][ T961] usb 6-1: Manufacturer: syz [ 528.674846][T11542] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 528.680677][T11542] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 528.683958][ T961] usb 6-1: config 0 descriptor?? [ 528.684660][T11542] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 528.690169][T11542] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 528.696612][T11542] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 528.701522][T11542] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 528.704887][T11542] usb 8-1: Manufacturer: syz [ 528.709404][T11542] usb 8-1: config 0 descriptor?? [ 528.941064][ T961] rc_core: IR keymap rc-hauppauge not found [ 528.942894][ T961] Registered IR keymap rc-empty [ 528.963043][T11542] rc_core: IR keymap rc-hauppauge not found [ 528.965590][T11542] Registered IR keymap rc-empty [ 528.968266][T11542] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 528.991210][T11542] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 529.022630][T11542] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc1 [ 529.030205][T11542] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc1/input42 [ 529.039215][T11542] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 529.061239][T11542] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 529.104960][T11542] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 529.143147][T11542] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 529.211141][T11542] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 529.241148][T11542] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 529.261125][T11542] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 529.291131][T11542] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 529.296626][ T961] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 529.317010][T11542] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 529.351223][T11542] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 529.368367][ T961] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 529.375680][T11542] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 529.375705][T11542] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 529.381458][T11542] usb 8-1: USB disconnect, device number 55 [ 529.433228][ T961] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 529.438218][ T961] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input41 [ 529.444812][ T961] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 529.461243][ T961] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 529.481572][ T961] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 529.501160][ T961] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 529.521145][ T961] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 529.541182][ T961] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 529.561879][ T961] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 529.581154][ T961] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 529.601402][ T961] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 529.614408][T12568] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 529.616589][T12568] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 529.619018][T12568] udc dummy_udc.0: failed to start g1: -22 [ 529.620744][T12568] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 529.622371][ T961] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 529.624910][T12568] UDC core: g1: couldn't find an available UDC or it's busy [ 529.643380][ T961] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 529.647074][ T961] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 529.661831][ T961] usb 6-1: USB disconnect, device number 58 [ 529.811990][T12577] wg2 speed is unknown, defaulting to 1000 [ 529.835436][ T42] audit: type=1804 audit(1785953854.496:104): pid=12576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1910" name="/newroot/512/merge/file" dev="overlay" ino=2878 res=1 errno=0 [ 530.288279][T12586] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484032 (4294968064 ns) > initial count (6 ns). Using initial count to start timer. [ 530.294060][T12588] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1913'. [ 530.301979][T12588] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 530.305954][T12588] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 41501 - 0 [ 530.310089][T12588] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 530.396956][T12588] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 530.400858][T12588] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 41501 - 0 [ 530.404137][T12588] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 530.467177][T12593] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1914'. [ 530.474190][T12593] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.484081][T12588] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 530.487420][T12588] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 41501 - 0 [ 530.490574][T12588] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 530.613773][T12593] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.638218][ T5757] Bluetooth: hci2: unexpected event for opcode 0x2041 [ 530.746212][T12588] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 530.757269][T12588] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 41501 - 0 [ 530.768129][T12588] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 530.798153][T12593] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.801119][T11542] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 530.881154][ T8452] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 530.961476][T12593] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.001131][ T5794] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 531.003718][ T5794] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 41501 - 0 [ 531.006461][ T5794] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 531.008995][ T5794] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 531.013807][ T5794] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 41501 - 0 [ 531.016619][ T5794] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 531.019164][ T5794] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 531.022354][ T5794] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 41501 - 0 [ 531.025139][ T5794] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 531.027663][ T5794] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 531.030238][ T5794] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 41501 - 0 [ 531.033980][ T5794] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 531.037772][ T8452] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 531.041676][ T8452] usb 6-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 531.044392][ T8452] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.051077][ T6100] usb 8-1: new high-speed USB device number 56 using dummy_hcd [ 531.053942][T12595] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 531.062247][ T8452] opticon 6-1:1.0: opticon converter detected [ 531.071564][ T8452] usb 6-1: opticon converter now attached to ttyUSB0 [ 531.092219][ T5794] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.109223][ T5794] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.131187][ T5794] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.141642][ T5794] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.781253][ T6100] usb 8-1: Using ep0 maxpacket: 16 [ 532.411028][ T6100] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 532.417600][ T6100] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 532.420822][ T6100] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 532.423808][ T6100] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 532.426691][ T6100] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 532.432028][ T6100] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 532.435049][ T6100] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 532.437599][ T6100] usb 8-1: Manufacturer: syz [ 532.440867][ T6100] usb 8-1: config 0 descriptor?? [ 532.691085][ T6100] rc_core: IR keymap rc-hauppauge not found [ 532.692926][ T6100] Registered IR keymap rc-empty [ 532.694876][ T6100] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 532.711130][ T6100] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 532.723261][T11542] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 532.728210][T11542] usb 9-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 532.731669][T11542] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.732073][ T6100] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 532.739117][ T6100] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input44 [ 532.739757][T12591] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 532.747010][T11542] opticon 9-1:1.0: opticon converter detected [ 532.748195][ T6100] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 532.752486][T11542] usb 9-1: opticon converter now attached to ttyUSB1 [ 532.771131][ T6100] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 532.801312][ T6100] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 532.833411][ T6100] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 532.851104][ T6100] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 532.871502][ T6100] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 532.891085][ T6100] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 532.911133][ T6100] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 532.931094][ T6100] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 532.961202][ T6100] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 532.982211][ T6100] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 532.984954][ T6100] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 532.991303][ T6100] usb 8-1: USB disconnect, device number 56 [ 533.101795][ T5850] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 533.251158][ T5850] usb 7-1: Using ep0 maxpacket: 16 [ 533.258647][ T5850] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 533.262997][ T5850] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 533.266543][ T5850] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 533.269552][ T5850] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 533.272728][ T5850] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 533.278238][ T5850] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 533.281267][ T5850] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 533.283791][ T5850] usb 7-1: Manufacturer: syz [ 533.288983][ T5850] usb 7-1: config 0 descriptor?? [ 533.531776][ T5850] rc_core: IR keymap rc-hauppauge not found [ 533.533978][ T5850] Registered IR keymap rc-empty [ 533.536758][ T5850] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 533.551089][ T5850] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 533.571867][ T5850] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 533.578379][ T5850] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input45 [ 533.587244][ T5850] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 533.601422][ T5850] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 533.621359][ T5850] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 533.642182][ T5850] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 533.662055][ T5850] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 533.681239][ T5850] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 533.701277][ T5850] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 533.721205][ T5850] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 533.741683][ T5850] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 533.761282][ T5850] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 533.783286][ T5850] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 533.786220][ T5850] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 533.792557][ T5850] usb 7-1: USB disconnect, device number 69 [ 533.973750][T11542] usb 9-1: USB disconnect, device number 35 [ 533.983962][T11542] opticon ttyUSB1: opticon converter now disconnected from ttyUSB1 [ 533.987492][T11542] opticon 9-1:1.0: device disconnected [ 534.106193][T12621] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484032 (4294968064 ns) > initial count (6 ns). Using initial count to start timer. [ 534.255411][T12624] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1923'. [ 534.323451][T12624] i801_smbus 0000:00:03.0: SMBus using polling [ 534.351348][T12624] i2c i2c-2: Memory type 0x07 not supported yet, not instantiating SPD [ 534.636691][T11542] libceph: connect (1)[c::]:6789 error -101 [ 534.638830][T11542] libceph: mon0 (1)[c::]:6789 connect error [ 534.642696][T11542] libceph: connect (1)[c::]:6789 error -101 [ 534.644798][T11542] libceph: mon0 (1)[c::]:6789 connect error [ 534.731898][T12637] ceph: No mds server is up or the cluster is laggy [ 534.763488][ T5823] usb 8-1: new high-speed USB device number 57 using dummy_hcd [ 534.921142][ T5823] usb 8-1: Using ep0 maxpacket: 16 [ 534.924763][ T5823] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 534.927923][ T5823] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 534.931353][ T5823] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 534.934436][ T5823] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 534.937408][ T5823] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 534.942522][ T5823] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 534.945356][ T5823] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 534.948483][ T5823] usb 8-1: Manufacturer: syz [ 534.952182][ T5823] usb 8-1: config 0 descriptor?? [ 535.211247][ T5823] rc_core: IR keymap rc-hauppauge not found [ 535.213429][ T5823] Registered IR keymap rc-empty [ 535.216851][ T5823] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 535.251134][ T5823] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 535.271880][ T5823] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 535.278091][ T5823] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input47 [ 535.284070][ T5823] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 535.311101][ T5823] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 535.314153][ T6099] libceph: connect (1)[c::]:6789 error -101 [ 535.316784][ T6099] libceph: mon0 (1)[c::]:6789 connect error [ 535.332668][ T5823] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 535.361136][ T5823] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 535.361743][T12647] ceph: No mds server is up or the cluster is laggy [ 535.381360][ T5823] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 535.401281][ T5823] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 535.421152][ T5823] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 535.441339][ T5823] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 535.461069][ T5823] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 535.481202][ T5823] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 535.503043][ T5823] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 535.505977][ T5823] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 535.511112][ T5823] usb 8-1: USB disconnect, device number 57 [ 535.581496][ T6099] libceph: connect (1)[c::]:6789 error -101 [ 535.584936][ T6099] libceph: mon0 (1)[c::]:6789 connect error [ 536.087452][T12663] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 536.089697][T12663] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 536.095375][T12663] vhci_hcd vhci_hcd.0: Device attached [ 536.111391][T12662] ceph: No mds server is up or the cluster is laggy [ 536.113813][ T6099] libceph: connect (1)[c::]:6789 error -101 [ 536.116886][ T6099] libceph: mon0 (1)[c::]:6789 connect error [ 536.194754][T12663] rdma_rxe: rxe_newlink: failed to add wg2 [ 536.213593][T12671] FAULT_INJECTION: forcing a failure. [ 536.213593][T12671] name failslab, interval 1, probability 0, space 0, times 0 [ 536.217916][T12671] CPU: 2 UID: 0 PID: 12671 Comm: syz.4.1934 Tainted: G L syzkaller #0 PREEMPT(full) [ 536.217937][T12671] Tainted: [L]=SOFTLOCKUP [ 536.217942][T12671] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 536.217949][T12671] Call Trace: [ 536.217954][T12671] [ 536.217959][T12671] dump_stack_lvl+0x100/0x190 [ 536.217981][T12671] should_fail_ex.cold+0x5/0xa [ 536.217996][T12671] should_failslab+0xc2/0x120 [ 536.218013][T12671] __kmalloc_noprof+0xfc/0x820 [ 536.218028][T12671] ? rcu_is_watching+0x12/0xc0 [ 536.218042][T12671] ? tomoyo_realpath_from_path+0xb6/0x690 [ 536.218064][T12671] tomoyo_realpath_from_path+0xb6/0x690 [ 536.218086][T12671] tomoyo_path_number_perm+0x23c/0x580 [ 536.218124][T12671] ? tomoyo_path_number_perm+0x22e/0x580 [ 536.218140][T12671] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 536.218169][T12671] ? find_held_lock+0x2b/0x80 [ 536.218183][T12671] ? __fget_files+0x215/0x3d0 [ 536.218193][T12671] ? hook_file_ioctl_common+0x140/0x440 [ 536.218210][T12671] ? __fget_files+0x215/0x3d0 [ 536.218223][T12671] ? __fget_files+0x21f/0x3d0 [ 536.218236][T12671] security_file_ioctl_compat+0xd3/0x230 [ 536.218253][T12671] __ia32_compat_sys_ioctl+0xc2/0x360 [ 536.218272][T12671] __do_fast_syscall_32+0xe7/0x970 [ 536.218291][T12671] ? lockdep_hardirqs_on+0x78/0x100 [ 536.218307][T12671] do_fast_syscall_32+0x32/0x70 [ 536.218324][T12671] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 536.218339][T12671] RIP: 0023:0xf7f98fec [ 536.218354][T12671] Code: Unable to access opcode bytes at 0xf7f98fc2. [ 536.218360][T12671] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 536.218372][T12671] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000000089f3 [ 536.218379][T12671] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 536.218386][T12671] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 536.218393][T12671] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 536.218399][T12671] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 536.218415][T12671] [ 536.218421][T12671] ERROR: Out of memory at tomoyo_realpath_from_path. [ 536.381519][ T5959] usb 44-1: SetAddress Request (30) to port 0 [ 536.383984][ T5959] usb 44-1: new SuperSpeed USB device number 30 using vhci_hcd [ 536.451447][ T5823] usb 6-1: USB disconnect, device number 59 [ 536.462752][ T5823] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 536.471528][ T5823] opticon 6-1:1.0: device disconnected [ 536.542742][T12675] overlayfs: failed lookup in lower (newroot/238, name='file0', err=-40): overlapping layers [ 536.549211][T12675] overlayfs: failed lookup in lower (newroot/238, name='file0', err=-40): overlapping layers [ 536.557330][T12675] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 536.800354][T12666] vhci_hcd: connection reset by peer [ 536.803362][ T5794] vhci_hcd vhci_hcd.3: stop threads [ 536.806245][ T5794] vhci_hcd vhci_hcd.3: release socket [ 536.808703][ T5794] vhci_hcd vhci_hcd.3: disconnect device [ 537.279351][T12688] netlink: 'syz.1.1940': attribute type 29 has an invalid length. [ 537.284247][T12688] netlink: 'syz.1.1940': attribute type 29 has an invalid length. [ 537.291404][T12688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1940'. [ 537.301163][ T41] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 537.316073][T12688] macsec0: entered promiscuous mode [ 537.317833][T12688] dummy0: entered promiscuous mode [ 537.320610][T12688] macsec0: entered allmulticast mode [ 537.322619][T12688] dummy0: entered allmulticast mode [ 537.461121][ T41] usb 7-1: Using ep0 maxpacket: 16 [ 537.465649][ T41] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 537.470025][ T41] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 537.475164][ T41] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 537.479313][ T41] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 537.484511][ T41] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 537.492509][ T41] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 537.496302][ T41] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 537.499520][ T41] usb 7-1: Manufacturer: syz [ 537.504608][ T41] usb 7-1: config 0 descriptor?? [ 537.530548][ T5850] libceph: connect (1)[c::]:6789 error -101 [ 537.533600][ T5850] libceph: mon0 (1)[c::]:6789 connect error [ 537.577227][T12698] ceph: No mds server is up or the cluster is laggy [ 537.688129][T12708] FAULT_INJECTION: forcing a failure. [ 537.688129][T12708] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 537.701056][T12708] CPU: 0 UID: 0 PID: 12708 Comm: syz.4.1943 Tainted: G L syzkaller #0 PREEMPT(full) [ 537.701090][T12708] Tainted: [L]=SOFTLOCKUP [ 537.701097][T12708] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 537.701108][T12708] Call Trace: [ 537.701116][T12708] [ 537.701124][T12708] dump_stack_lvl+0x100/0x190 [ 537.701153][T12708] should_fail_ex.cold+0x5/0xa [ 537.701175][T12708] _copy_from_user+0x2e/0xd0 [ 537.701206][T12708] get_compat_msghdr+0xb3/0x480 [ 537.701227][T12708] ? __pfx_get_compat_msghdr+0x10/0x10 [ 537.701248][T12708] ? __pfx_trace_clock_local+0x10/0x10 [ 537.701280][T12708] ___sys_sendmsg+0x1b6/0x1e0 [ 537.701304][T12708] ? __pfx____sys_sendmsg+0x10/0x10 [ 537.701336][T12708] ? find_held_lock+0x2b/0x80 [ 537.701374][T12708] __sys_sendmsg+0x160/0x210 [ 537.701401][T12708] ? __pfx___sys_sendmsg+0x10/0x10 [ 537.701440][T12708] __do_fast_syscall_32+0xe7/0x970 [ 537.701468][T12708] ? lockdep_hardirqs_on+0x78/0x100 [ 537.701495][T12708] do_fast_syscall_32+0x32/0x70 [ 537.701521][T12708] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 537.701545][T12708] RIP: 0023:0xf7f98fec [ 537.701567][T12708] Code: Unable to access opcode bytes at 0xf7f98fc2. [ 537.701576][T12708] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 537.701595][T12708] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 537.701607][T12708] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 537.701619][T12708] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 537.701629][T12708] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 537.701640][T12708] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 537.701662][T12708] [ 537.811163][ T41] rc_core: IR keymap rc-hauppauge not found [ 537.814159][ T41] Registered IR keymap rc-empty [ 537.816501][ T41] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 537.831588][ T41] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 537.852245][ T41] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 537.860109][ T41] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input48 [ 537.885695][ T41] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 537.901285][ T41] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 537.921116][ T41] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 537.941253][ T41] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 537.961211][ T41] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 537.981976][ T41] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 537.996054][T12715] FAULT_INJECTION: forcing a failure. [ 537.996054][T12715] name failslab, interval 1, probability 0, space 0, times 0 [ 538.001496][T12715] CPU: 1 UID: 0 PID: 12715 Comm: syz.4.1945 Tainted: G L syzkaller #0 PREEMPT(full) [ 538.001527][T12715] Tainted: [L]=SOFTLOCKUP [ 538.001534][T12715] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 538.001544][T12715] Call Trace: [ 538.001552][T12715] [ 538.001549][ T41] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 538.001560][T12715] dump_stack_lvl+0x100/0x190 [ 538.001588][T12715] should_fail_ex.cold+0x5/0xa [ 538.001612][T12715] should_failslab+0xc2/0x120 [ 538.001638][T12715] kmem_cache_alloc_noprof+0x91/0x6a0 [ 538.001661][T12715] ? do_getname+0x35/0x390 [ 538.001689][T12715] do_getname+0x35/0x390 [ 538.001713][T12715] do_sys_openat2+0xc7/0x1e0 [ 538.001738][T12715] ? __pfx_do_sys_openat2+0x10/0x10 [ 538.001762][T12715] ? trace_buffer_unlock_commit_regs+0x375/0x540 [ 538.001790][T12715] __ia32_compat_sys_openat+0x12d/0x210 [ 538.001816][T12715] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 538.001840][T12715] ? find_held_lock+0x2b/0x80 [ 538.001864][T12715] ? trace_syscall_enter+0xd9/0x110 [ 538.001890][T12715] __do_fast_syscall_32+0xe7/0x970 [ 538.001917][T12715] ? lockdep_hardirqs_on+0x78/0x100 [ 538.001948][T12715] do_fast_syscall_32+0x32/0x70 [ 538.001974][T12715] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 538.001997][T12715] RIP: 0023:0xf7f98fec [ 538.002018][T12715] Code: Unable to access opcode bytes at 0xf7f98fc2. [ 538.002027][T12715] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 538.002046][T12715] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000140 [ 538.002059][T12715] RDX: 0000000000080201 RSI: 0000000000000088 RDI: 0000000000000000 [ 538.002070][T12715] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 538.002081][T12715] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 538.002119][T12715] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 538.002144][T12715] [ 538.081288][ T41] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 538.101249][ T41] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 538.110880][T12721] tipc: Invalid UDP bearer configuration [ 538.110932][T12721] tipc: Enabling of bearer rejected, failed to enable media [ 538.121221][ T41] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 538.142541][ T41] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 538.146606][ T41] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 538.154854][ T41] usb 7-1: USB disconnect, device number 70 [ 538.838329][ T5757] Bluetooth: hci3: unexpected event for opcode 0x2041 [ 539.164927][T12750] FAULT_INJECTION: forcing a failure. [ 539.164927][T12750] name failslab, interval 1, probability 0, space 0, times 0 [ 539.169889][T12750] CPU: 3 UID: 0 PID: 12750 Comm: syz.3.1956 Tainted: G L syzkaller #0 PREEMPT(full) [ 539.169920][T12750] Tainted: [L]=SOFTLOCKUP [ 539.169926][T12750] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 539.169937][T12750] Call Trace: [ 539.169946][T12750] [ 539.169954][T12750] dump_stack_lvl+0x100/0x190 [ 539.169981][T12750] should_fail_ex.cold+0x5/0xa [ 539.170002][T12750] should_failslab+0xc2/0x120 [ 539.170026][T12750] __kmalloc_noprof+0xfc/0x820 [ 539.170047][T12750] ? rcu_is_watching+0x12/0xc0 [ 539.170067][T12750] ? tomoyo_realpath_from_path+0xb6/0x690 [ 539.170125][T12750] tomoyo_realpath_from_path+0xb6/0x690 [ 539.170155][T12750] tomoyo_path_number_perm+0x23c/0x580 [ 539.170178][T12750] ? tomoyo_path_number_perm+0x22e/0x580 [ 539.170201][T12750] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 539.170244][T12750] ? find_held_lock+0x2b/0x80 [ 539.170265][T12750] ? __fget_files+0x215/0x3d0 [ 539.170280][T12750] ? hook_file_ioctl_common+0x140/0x440 [ 539.170302][T12750] ? __fget_files+0x215/0x3d0 [ 539.170321][T12750] ? __fget_files+0x21f/0x3d0 [ 539.170341][T12750] security_file_ioctl_compat+0xd3/0x230 [ 539.170365][T12750] __ia32_compat_sys_ioctl+0xc2/0x360 [ 539.170399][T12750] __do_fast_syscall_32+0xe7/0x970 [ 539.170422][T12750] ? lockdep_hardirqs_on+0x78/0x100 [ 539.170438][T12750] do_fast_syscall_32+0x32/0x70 [ 539.170454][T12750] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 539.170469][T12750] RIP: 0023:0xf704efec [ 539.170485][T12750] Code: Unable to access opcode bytes at 0xf704efc2. [ 539.170490][T12750] RSP: 002b:00000000f543d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 539.170503][T12750] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000002284 [ 539.170510][T12750] RDX: 0000000080000f80 RSI: 0000000000000000 RDI: 0000000000000000 [ 539.170517][T12750] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 539.170524][T12750] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 539.170531][T12750] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 539.170545][T12750] [ 539.170551][T12750] ERROR: Out of memory at tomoyo_realpath_from_path. [ 539.240916][T12743] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 539.255996][T12743] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 539.257727][T12743] vhci_hcd vhci_hcd.0: Device attached [ 539.283978][T12757] 9p: Bad value for 'wfdno' [ 539.291252][T12759] syzkaller0: entered promiscuous mode [ 539.293636][T12759] syzkaller0: entered allmulticast mode [ 539.333372][T12753] syz2: rxe_newlink: already configured on wg2 [ 539.338255][T12757] wg2 speed is unknown, defaulting to 1000 [ 539.531980][ T10] usb 40-1: SetAddress Request (22) to port 0 [ 539.535087][ T10] usb 40-1: new SuperSpeed USB device number 22 using vhci_hcd [ 539.603380][ T8376] libceph: connect (1)[c::]:6789 error -101 [ 539.605468][ T8376] libceph: mon0 (1)[c::]:6789 connect error [ 539.651088][T12770] ceph: No mds server is up or the cluster is laggy [ 539.707611][T12775] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484032 (4294968064 ns) > initial count (6 ns). Using initial count to start timer. [ 539.780112][T12754] vhci_hcd: connection reset by peer [ 539.784616][ T5822] vhci_hcd vhci_hcd.1: stop threads [ 539.786939][ T5822] vhci_hcd vhci_hcd.1: release socket [ 539.789305][ T5822] vhci_hcd vhci_hcd.1: disconnect device [ 539.897449][T12779] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1963'. [ 539.965419][T12780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1963'. [ 540.300898][T12783] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484032 (4294968064 ns) > initial count (6 ns). Using initial count to start timer. [ 541.087771][T12797] xt_connbytes: Forcing CT accounting to be enabled [ 541.091402][T12797] xt_SECMARK: invalid mode: 0 [ 541.407065][T12808] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484032 (4294968064 ns) > initial count (6 ns). Using initial count to start timer. [ 541.447632][T12809] netlink: 2516 bytes leftover after parsing attributes in process `syz.4.1971'. [ 541.451402][ T5959] usb 44-1: device descriptor read/8, error -110 [ 541.724212][T12817] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1976'. [ 541.871792][ T5959] usb usb44-port1: attempt power cycle [ 541.913412][T12825] FAULT_INJECTION: forcing a failure. [ 541.913412][T12825] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 541.917332][T12826] xt_SECMARK: invalid mode: 0 [ 541.917609][T12825] CPU: 1 UID: 0 PID: 12825 Comm: syz.2.1979 Tainted: G L syzkaller #0 PREEMPT(full) [ 541.917628][T12825] Tainted: [L]=SOFTLOCKUP [ 541.917632][T12825] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 541.917639][T12825] Call Trace: [ 541.917645][T12825] [ 541.917650][T12825] dump_stack_lvl+0x100/0x190 [ 541.917669][T12825] should_fail_ex.cold+0x5/0xa [ 541.917683][T12825] _copy_to_user+0x32/0xd0 [ 541.917704][T12825] simple_read_from_buffer+0xcb/0x170 [ 541.917725][T12825] proc_fail_nth_read+0x1af/0x230 [ 541.917744][T12825] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 541.917760][T12825] ? rw_verify_area+0xce/0x6d0 [ 541.917778][T12825] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 541.917793][T12825] vfs_read+0x1e4/0xb40 [ 541.917806][T12825] ? __pfx_vfs_read+0x10/0x10 [ 541.917816][T12825] ? find_held_lock+0x2b/0x80 [ 541.917831][T12825] ? __fget_files+0x215/0x3d0 [ 541.917844][T12825] ? __fget_files+0x21f/0x3d0 [ 541.917858][T12825] ksys_read+0x12a/0x250 [ 541.917869][T12825] ? __pfx_ksys_read+0x10/0x10 [ 541.917879][T12825] ? trace_syscall_enter+0xd9/0x110 [ 541.917896][T12825] do_int80_emulation+0x14b/0x720 [ 541.917915][T12825] asm_int80_emulation+0x1a/0x20 [ 541.917927][T12825] RIP: 0023:0xf71974eb [ 541.917937][T12825] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 541.917949][T12825] RSP: 002b:00000000f544d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 541.917961][T12825] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f544d5d0 [ 541.917968][T12825] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 541.917975][T12825] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 541.917982][T12825] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 541.917989][T12825] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 541.918002][T12825] [ 541.987168][T12820] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 541.989503][T12820] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 541.992426][T12820] vhci_hcd vhci_hcd.0: Device attached [ 542.045063][T12820] syz2: rxe_newlink: already configured on wg2 [ 542.155214][T12841] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484032 (4294968064 ns) > initial count (6 ns). Using initial count to start timer. [ 542.160651][T12844] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1984'. [ 542.471989][ T5959] usb usb44-port1: unable to enumerate USB device [ 542.802638][T12830] vhci_hcd: connection closed [ 542.802896][ T5794] vhci_hcd vhci_hcd.1: stop threads [ 542.806344][ T5794] vhci_hcd vhci_hcd.1: release socket [ 542.808081][ T5794] vhci_hcd vhci_hcd.1: disconnect device [ 542.808990][T12850] FAULT_INJECTION: forcing a failure. [ 542.808990][T12850] name failslab, interval 1, probability 0, space 0, times 0 [ 542.814152][T12850] CPU: 0 UID: 0 PID: 12850 Comm: syz.2.1986 Tainted: G L syzkaller #0 PREEMPT(full) [ 542.814171][T12850] Tainted: [L]=SOFTLOCKUP [ 542.814175][T12850] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 542.814182][T12850] Call Trace: [ 542.814187][T12850] [ 542.814193][T12850] dump_stack_lvl+0x100/0x190 [ 542.814212][T12850] should_fail_ex.cold+0x5/0xa [ 542.814226][T12850] should_failslab+0xc2/0x120 [ 542.814243][T12850] __kmalloc_noprof+0xfc/0x820 [ 542.814258][T12850] ? rcu_is_watching+0x12/0xc0 [ 542.814272][T12850] ? tomoyo_realpath_from_path+0xb6/0x690 [ 542.814295][T12850] tomoyo_realpath_from_path+0xb6/0x690 [ 542.814315][T12850] tomoyo_path_number_perm+0x23c/0x580 [ 542.814343][T12850] ? tomoyo_path_number_perm+0x22e/0x580 [ 542.814359][T12850] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 542.814388][T12850] ? find_held_lock+0x2b/0x80 [ 542.814403][T12850] ? __fget_files+0x215/0x3d0 [ 542.814413][T12850] ? hook_file_ioctl_common+0x140/0x440 [ 542.814429][T12850] ? __fget_files+0x215/0x3d0 [ 542.814442][T12850] ? __fget_files+0x21f/0x3d0 [ 542.814455][T12850] security_file_ioctl_compat+0xd3/0x230 [ 542.814472][T12850] __ia32_compat_sys_ioctl+0xc2/0x360 [ 542.814492][T12850] __do_fast_syscall_32+0xe7/0x970 [ 542.814510][T12850] ? lockdep_hardirqs_on+0x78/0x100 [ 542.814526][T12850] do_fast_syscall_32+0x32/0x70 [ 542.814543][T12850] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 542.814558][T12850] RIP: 0023:0xf705efec [ 542.814570][T12850] Code: Unable to access opcode bytes at 0xf705efc2. [ 542.814576][T12850] RSP: 002b:00000000f542c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 542.814588][T12850] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005412 [ 542.814595][T12850] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 542.814602][T12850] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 542.814609][T12850] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 542.814616][T12850] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 542.814631][T12850] [ 542.814636][T12850] ERROR: Out of memory at tomoyo_realpath_from_path. [ 543.191926][T12862] netlink: 'syz.2.1989': attribute type 1 has an invalid length. [ 543.205953][T12862] bond1: entered promiscuous mode [ 543.208120][T12862] 8021q: adding VLAN 0 to HW filter on device bond1 [ 543.215957][T12862] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1989'. [ 543.219161][T12862] bond1: entered allmulticast mode [ 543.550720][T12870] netlink: 'syz.3.1991': attribute type 9 has an invalid length. [ 543.554090][T12870] netlink: 'syz.3.1991': attribute type 1 has an invalid length. [ 543.556916][T12870] netlink: 'syz.3.1991': attribute type 8 has an invalid length. [ 543.696715][T12877] FAULT_INJECTION: forcing a failure. [ 543.696715][T12877] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 543.701222][T12877] CPU: 0 UID: 0 PID: 12877 Comm: syz.2.1993 Tainted: G L syzkaller #0 PREEMPT(full) [ 543.701241][T12877] Tainted: [L]=SOFTLOCKUP [ 543.701245][T12877] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 543.701253][T12877] Call Trace: [ 543.701257][T12877] [ 543.701262][T12877] dump_stack_lvl+0x100/0x190 [ 543.701281][T12877] should_fail_ex.cold+0x5/0xa [ 543.701296][T12877] _copy_from_user+0x2e/0xd0 [ 543.701316][T12877] do_quotactl+0xc75/0x14b0 [ 543.701332][T12877] ? __pfx_do_quotactl+0x10/0x10 [ 543.701352][T12877] ? down_read+0x13b/0x4c0 [ 543.701371][T12877] ? __pfx_down_read+0x10/0x10 [ 543.701387][T12877] ? mnt_get_write_access+0x1e9/0x2f0 [ 543.701407][T12877] __ia32_sys_quotactl_fd+0x4cb/0x580 [ 543.701424][T12877] __do_fast_syscall_32+0xe7/0x970 [ 543.701441][T12877] ? lockdep_hardirqs_on+0x78/0x100 [ 543.701458][T12877] do_fast_syscall_32+0x32/0x70 [ 543.701474][T12877] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 543.701489][T12877] RIP: 0023:0xf705efec [ 543.701504][T12877] Code: Unable to access opcode bytes at 0xf705efc2. [ 543.701509][T12877] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 00000000000001bb [ 543.701521][T12877] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000601 [ 543.701529][T12877] RDX: 000000000000ee01 RSI: 0000000080000300 RDI: 0000000000000000 [ 543.701535][T12877] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 543.701542][T12877] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 543.701549][T12877] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 543.701563][T12877] [ 543.702686][T12877] netlink: 'syz.2.1993': attribute type 9 has an invalid length. [ 543.755608][T12877] netlink: 'syz.2.1993': attribute type 1 has an invalid length. [ 543.757876][T12877] netlink: 'syz.2.1993': attribute type 8 has an invalid length. [ 543.834100][T12882] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484032 (4294968064 ns) > initial count (6 ns). Using initial count to start timer. [ 544.006984][T12893] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1998'. [ 544.020684][T12893] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.106426][T12893] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.110010][T12898] netlink: 'syz.4.1999': attribute type 1 has an invalid length. [ 544.132035][T12898] bond0: entered allmulticast mode [ 544.173241][T12904] lo: entered allmulticast mode [ 544.177329][T12904] lo: left allmulticast mode [ 544.179373][T12904] pim6reg: left allmulticast mode [ 544.236144][T12907] bond0: entered promiscuous mode [ 544.239318][T12907] batadv0: entered promiscuous mode [ 544.242367][T12907] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 544.250885][T12907] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 544.254880][T12907] bond0: left promiscuous mode [ 544.256948][T12907] batadv0: left promiscuous mode [ 544.295089][T12904] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.298301][T12904] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.373954][T11542] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 544.379294][T12893] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.437162][T12910] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 544.439631][T12910] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 544.442926][T12910] vhci_hcd vhci_hcd.0: Device attached [ 544.449699][T12910] rdma_rxe: rxe_newlink: failed to add wg2 [ 544.451405][T12893] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.479489][T12914] lo: entered allmulticast mode [ 544.482932][T12914] lo: left allmulticast mode [ 544.530517][T12916] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2004'. [ 544.535394][T12916] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2004'. [ 544.539463][T11542] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 544.546534][T11542] usb 6-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 544.553521][T11542] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.558922][T12896] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 544.565489][T11542] opticon 6-1:1.0: opticon converter detected [ 544.576414][T11542] usb 6-1: opticon converter now attached to ttyUSB0 [ 544.611417][ T5822] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.613975][ T5822] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.621155][ T5822] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.623767][ T5822] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.651409][ T10] usb 40-1: device descriptor read/8, error -110 [ 544.711165][ T5823] usb 42-1: SetAddress Request (18) to port 0 [ 544.715052][ T5823] usb 42-1: new SuperSpeed USB device number 18 using vhci_hcd [ 544.760405][T12921] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484032 (4294968064 ns) > initial count (6 ns). Using initial count to start timer. [ 545.042226][ T10] usb usb40-port1: attempt power cycle [ 545.171110][T12911] vhci_hcd: connection reset by peer [ 545.174745][ T5794] vhci_hcd vhci_hcd.2: stop threads [ 545.176590][ T5794] vhci_hcd vhci_hcd.2: release socket [ 545.179018][ T5794] vhci_hcd vhci_hcd.2: disconnect device [ 545.622712][ T10] usb usb40-port1: unable to enumerate USB device [ 546.051265][T12941] FAULT_INJECTION: forcing a failure. [ 546.051265][T12941] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 546.058910][T12941] CPU: 2 UID: 0 PID: 12941 Comm: syz.4.2012 Tainted: G L syzkaller #0 PREEMPT(full) [ 546.058942][T12941] Tainted: [L]=SOFTLOCKUP [ 546.058947][T12941] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 546.058954][T12941] Call Trace: [ 546.058960][T12941] [ 546.058966][T12941] dump_stack_lvl+0x100/0x190 [ 546.058986][T12941] should_fail_ex.cold+0x5/0xa [ 546.059000][T12941] _copy_from_user+0x2e/0xd0 [ 546.059020][T12941] get_compat_msghdr+0xb3/0x480 [ 546.059033][T12941] ? __pfx_get_compat_msghdr+0x10/0x10 [ 546.059046][T12941] ? __pfx_trace_clock_local+0x10/0x10 [ 546.059066][T12941] ___sys_sendmsg+0x1b6/0x1e0 [ 546.059082][T12941] ? __pfx____sys_sendmsg+0x10/0x10 [ 546.059101][T12941] ? find_held_lock+0x2b/0x80 [ 546.059125][T12941] __sys_sendmsg+0x160/0x210 [ 546.059142][T12941] qemu-system-x86_64: vtd_irte_get: detected non-present IRTE (index=15, high=0x0, low=0x0) ? __pfx___sys_sendmsg+0x10/0x10 [ 546.059166][T12941] __do_fast_syscall_32+0xe7/0x970 [ 546.059183][T12941] ? lockdep_hardirqs_on+0x78/0x100 [ 546.059200][T12941] do_fast_syscall_32+0x32/0x70 [ 546.059216][T12941] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 546.059231][T12941] RIP: 0023:0xf7f98fec [ 546.059245][T12941] Code: Unable to access opcode bytes at 0xf7f98fc2. [ 546.059251][T12941] RSP: 002b:00000000f543550c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 546.059263][T12941] RAX: ffffffffffffffda RBX: 000000000000000d RCX: 0000000080000300 [ 546.059270][T12941] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 546.059277][T12941] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 546.059284][T12941] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 546.059290][T12941] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 546.059304][T12941] [ 546.088830][T12943] ------------[ cut here ]------------ [ 546.120462][T12943] remove_proc_entry: removing non-empty directory 'irq/20', leaking at least 'comedi_parport' [ 546.123756][T12943] WARNING: fs/proc/generic.c:747 at remove_proc_entry+0x4e7/0x610, CPU#0: syz.2.2013/12943 [ 546.126862][T12943] Modules linked in: [ 546.128419][T12943] CPU: 0 UID: 0 PID: 12943 Comm: syz.2.2013 Tainted: G L syzkaller #0 PREEMPT(full) [ 546.131981][T12943] Tainted: [L]=SOFTLOCKUP [ 546.133586][T12943] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 546.136720][T12943] RIP: 0010:remove_proc_entry+0x4f5/0x610 [ 546.138524][T12943] Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 c7 00 00 00 48 8d 3d 59 89 6e 0e 49 8b 95 d0 00 00 00 48 c7 c6 40 f4 e9 8b <67> 48 0f b9 3a e9 2a fe ff ff e8 ac 06 4f ff 48 8d 7d 18 48 b8 00 [ 546.144661][T12943] RSP: 0018:ffffc900067076a0 EFLAGS: 00010246 [ 546.146570][T12943] RAX: dffffc0000000000 RBX: dffffc0000000000 RCX: ffff88805059e21c [ 546.149023][T12943] RDX: ffff88801d3f85dc RSI: ffffffff8be9f440 RDI: ffffffff91293390 [ 546.151595][T12943] RBP: ffff88805059e1f8 R08: ffff88805059e35c R09: ffffed100a0b3c2b [ 546.152621][ T24] usb 8-1: new high-speed USB device number 58 using dummy_hcd [ 546.154132][T12943] R10: ffff88805059e15b R11: 0000000000000000 R12: ffff88805059e140 [ 546.154144][T12943] R13: ffff88801d3f8500 R14: ffff88805059e338 R15: dffffc0000000000 [ 546.154154][T12943] FS: 0000000000000000(0000) GS:ffff888096bdf000(0063) knlGS:00000000f544db40 [ 546.154179][T12943] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 546.154191][T12943] CR2: 00000000f73a7598 CR3: 0000000051421000 CR4: 0000000000352ef0 [ 546.168926][T12943] Call Trace: [ 546.170148][T12943] [ 546.171169][T12943] ? __pfx_remove_proc_entry+0x10/0x10 [ 546.172950][T12943] ? mtree_load+0x32d/0xa90 [ 546.174447][T12943] ? __pfx_mtree_load+0x10/0x10 [ 546.175995][T12943] ? rcu_is_watching+0x12/0xc0 [ 546.177519][T12943] unregister_irq_proc+0x206/0x2a0 [ 546.179151][T12943] ? __pfx_unregister_irq_proc+0x10/0x10 [ 546.181068][T12943] free_desc+0x89/0x330 [ 546.182404][T12943] ? __pfx_free_desc+0x10/0x10 [ 546.183918][T12943] ? kasan_quarantine_put+0x104/0x240 [ 546.185600][T12943] ? lockdep_hardirqs_on+0x78/0x100 [ 546.187271][T12943] ? irq_domain_free_irqs+0x3e0/0x5c0 [ 546.188962][T12943] irq_free_descs+0x84/0xc0 [ 546.190496][T12943] irq_domain_free_irqs+0x46a/0x5c0 [ 546.192209][T12943] mp_unmap_irq+0xf8/0x130 [ 546.193625][T12943] ? __pfx_acpi_unregister_gsi_ioapic+0x10/0x10 [ 546.195597][T12943] acpi_unregister_gsi_ioapic+0x40/0x60 [ 546.197330][T12943] acpi_unregister_gsi+0x25/0x40 [ 546.198901][T12943] acpi_pci_irq_disable+0x275/0x360 [ 546.200633][T12943] ? __pfx_acpi_pci_irq_disable+0x10/0x10 [ 546.202549][T12943] pcibios_disable_device+0x89/0xb0 [ 546.204230][T12943] do_pci_disable_device+0x9f/0x100 [ 546.205875][T12943] ? __pfx_do_pci_disable_device+0x10/0x10 [ 546.207714][T12943] pci_disable_device+0x130/0x270 [ 546.209304][T12943] pci_device_remove+0xb2/0x1d0 [ 546.211412][T12943] ? __pfx_pci_device_remove+0x10/0x10 [ 546.213133][T12943] device_remove+0xcb/0x180 [ 546.214614][T12943] device_release_driver_internal+0x44e/0x620 [ 546.216522][T12943] pci_stop_bus_device+0x120/0x160 [ 546.218142][T12943] pci_stop_and_remove_bus_device+0x58/0xa0 [ 546.220344][T12943] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 546.223595][T12943] remove_store+0x123/0x140 [ 546.225082][T12943] ? __pfx_remove_store+0x10/0x10 [ 546.226701][T12943] ? find_held_lock+0x2b/0x80 [ 546.228191][T12943] ? sysfs_file_kobj+0xe4/0x290 [ 546.229736][T12943] ? sysfs_file_kobj+0xe4/0x290 [ 546.231379][T12943] ? __pfx_remove_store+0x10/0x10 [ 546.232968][T12943] dev_attr_store+0x58/0x80 [ 546.234801][T12943] ? __pfx_dev_attr_store+0x10/0x10 [ 546.236553][T12943] sysfs_kf_write+0xf2/0x150 [ 546.238016][T12943] kernfs_fop_write_iter+0x3e0/0x5f0 [ 546.239677][T12943] ? __pfx_sysfs_kf_write+0x10/0x10 [ 546.241387][T12943] vfs_write+0x6ac/0x1050 [ 546.242765][T12943] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 546.244631][T12943] ? __pfx_vfs_write+0x10/0x10 [ 546.246149][T12943] ? find_held_lock+0x2b/0x80 [ 546.247647][T12943] ksys_write+0x12a/0x250 [ 546.249014][T12943] ? __pfx_ksys_write+0x10/0x10 [ 546.250559][T12943] ? trace_syscall_enter+0xd9/0x110 [ 546.252269][T12943] __do_fast_syscall_32+0xe7/0x970 [ 546.253888][T12943] do_fast_syscall_32+0x32/0x70 [ 546.255448][T12943] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 546.257430][T12943] RIP: 0023:0xf705efec [ 546.258734][T12943] Code: Unable to access opcode bytes at 0xf705efc2. [ 546.260830][T12943] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 546.263469][T12943] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000400 [ 546.265996][T12943] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 546.268489][T12943] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 546.271019][T12943] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 546.273649][T12943] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 546.276124][T12943] [ 546.277117][T12943] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 546.279387][T12943] CPU: 0 UID: 0 PID: 12943 Comm: syz.2.2013 Tainted: G L syzkaller #0 PREEMPT(full) [ 546.282776][T12943] Tainted: [L]=SOFTLOCKUP [ 546.284135][T12943] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 546.287255][T12943] Call Trace: [ 546.288318][T12943] [ 546.289265][T12943] dump_stack_lvl+0x100/0x190 [ 546.290789][T12943] vpanic+0x552/0x970 [ 546.292059][T12943] ? __pfx_vpanic+0x10/0x10 [ 546.293501][T12943] panic+0xd1/0xe0 [ 546.294702][T12943] ? __pfx_panic+0x10/0x10 [ 546.296121][T12943] check_panic_on_warn.cold+0x19/0x34 [ 546.297806][T12943] ? remove_proc_entry+0x4e7/0x610 [ 546.299432][T12943] __warn.cold+0x191/0x318 [ 546.300860][T12943] __report_bug+0x30f/0x440 [ 546.302321][T12943] ? remove_proc_entry+0x4e7/0x610 [ 546.303941][T12943] ? __pfx___report_bug+0x10/0x10 [ 546.305532][T12943] ? __do_fast_syscall_32+0xe7/0x970 [ 546.307207][T12943] ? do_fast_syscall_32+0x32/0x70 [ 546.308804][T12943] ? do_raw_spin_lock+0x128/0x260 [ 546.310434][T12943] ? find_held_lock+0x2b/0x80 [ 546.311932][T12943] ? proc_entry_rundown+0x158/0x1e0 [ 546.313569][T12943] ? proc_entry_rundown+0x158/0x1e0 [ 546.315215][T12943] report_bug_entry+0xe1/0x290 [ 546.317084][T12943] ? remove_proc_entry+0x4f5/0x610 [ 546.318899][T12943] handle_bug+0x1cd/0x2a0 [ 546.320304][T12943] exc_invalid_op+0x17/0x50 [ 546.321746][T12943] asm_exc_invalid_op+0x1a/0x20 [ 546.323398][T12943] RIP: 0010:remove_proc_entry+0x4f5/0x610 [ 546.325674][T12943] Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 c7 00 00 00 48 8d 3d 59 89 6e 0e 49 8b 95 d0 00 00 00 48 c7 c6 40 f4 e9 8b <67> 48 0f b9 3a e9 2a fe ff ff e8 ac 06 4f ff 48 8d 7d 18 48 b8 00 [ 546.331638][T12943] RSP: 0018:ffffc900067076a0 EFLAGS: 00010246 [ 546.333592][T12943] RAX: dffffc0000000000 RBX: dffffc0000000000 RCX: ffff88805059e21c [ 546.336050][T12943] RDX: ffff88801d3f85dc RSI: ffffffff8be9f440 RDI: ffffffff91293390 [ 546.338505][T12943] RBP: ffff88805059e1f8 R08: ffff88805059e35c R09: ffffed100a0b3c2b [ 546.340970][T12943] R10: ffff88805059e15b R11: 0000000000000000 R12: ffff88805059e140 [ 546.343449][T12943] R13: ffff88801d3f8500 R14: ffff88805059e338 R15: dffffc0000000000 [ 546.345920][T12943] ? __pfx_remove_proc_entry+0x10/0x10 [ 546.347642][T12943] ? mtree_load+0x32d/0xa90 [ 546.349091][T12943] ? __pfx_mtree_load+0x10/0x10 [ 546.350973][T12943] ? rcu_is_watching+0x12/0xc0 [ 546.352827][T12943] unregister_irq_proc+0x206/0x2a0 [ 546.354703][T12943] ? __pfx_unregister_irq_proc+0x10/0x10 [ 546.356486][T12943] free_desc+0x89/0x330 [ 546.357810][T12943] ? __pfx_free_desc+0x10/0x10 [ 546.359326][T12943] ? kasan_quarantine_put+0x104/0x240 [ 546.361032][T12943] ? lockdep_hardirqs_on+0x78/0x100 [ 546.362671][T12943] ? irq_domain_free_irqs+0x3e0/0x5c0 [ 546.364390][T12943] irq_free_descs+0x84/0xc0 [ 546.365823][T12943] irq_domain_free_irqs+0x46a/0x5c0 [ 546.367472][T12943] mp_unmap_irq+0xf8/0x130 [ 546.368886][T12943] ? __pfx_acpi_unregister_gsi_ioapic+0x10/0x10 [ 546.370875][T12943] acpi_unregister_gsi_ioapic+0x40/0x60 [ 546.372615][T12943] acpi_unregister_gsi+0x25/0x40 [ 546.374374][T12943] acpi_pci_irq_disable+0x275/0x360 [ 546.376077][T12943] ? __pfx_acpi_pci_irq_disable+0x10/0x10 [ 546.377870][T12943] pcibios_disable_device+0x89/0xb0 [ 546.379518][T12943] do_pci_disable_device+0x9f/0x100 [ 546.381181][T12943] ? __pfx_do_pci_disable_device+0x10/0x10 [ 546.383019][T12943] pci_disable_device+0x130/0x270 [ 546.384625][T12943] pci_device_remove+0xb2/0x1d0 [ 546.386166][T12943] ? __pfx_pci_device_remove+0x10/0x10 [ 546.387872][T12943] device_remove+0xcb/0x180 [ 546.389312][T12943] device_release_driver_internal+0x44e/0x620 [ 546.391232][T12943] pci_stop_bus_device+0x120/0x160 [ 546.392838][T12943] pci_stop_and_remove_bus_device+0x58/0xa0 [ 546.394739][T12943] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 546.396767][T12943] remove_store+0x123/0x140 [ 546.398210][T12943] ? __pfx_remove_store+0x10/0x10 [ 546.399791][T12943] ? find_held_lock+0x2b/0x80 [ 546.401298][T12943] ? sysfs_file_kobj+0xe4/0x290 [ 546.402840][T12943] ? sysfs_file_kobj+0xe4/0x290 [ 546.404582][T12943] ? __pfx_remove_store+0x10/0x10 [ 546.406589][T12943] dev_attr_store+0x58/0x80 [ 546.408468][T12943] ? __pfx_dev_attr_store+0x10/0x10 [ 546.410469][T12943] sysfs_kf_write+0xf2/0x150 [ 546.411973][T12943] kernfs_fop_write_iter+0x3e0/0x5f0 [ 546.413726][T12943] ? __pfx_sysfs_kf_write+0x10/0x10 [ 546.415390][T12943] vfs_write+0x6ac/0x1050 [ 546.416784][T12943] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 546.418631][T12943] ? __pfx_vfs_write+0x10/0x10 [ 546.420156][T12943] ? find_held_lock+0x2b/0x80 [ 546.421666][T12943] ksys_write+0x12a/0x250 [ 546.423048][T12943] ? __pfx_ksys_write+0x10/0x10 [ 546.424610][T12943] ? trace_syscall_enter+0xd9/0x110 [ 546.426220][T12943] __do_fast_syscall_32+0xe7/0x970 [ 546.427843][T12943] do_fast_syscall_32+0x32/0x70 [ 546.429391][T12943] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 546.431399][T12943] RIP: 0023:0xf705efec [ 546.432698][T12943] Code: Unable to access opcode bytes at 0xf705efc2. [ 546.434805][T12943] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 546.437404][T12943] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000400 [ 546.439868][T12943] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 546.442361][T12943] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 546.444843][T12943] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 546.447328][T12943] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 546.449802][T12943] [ 546.451416][T12943] Kernel Offset: disabled [ 546.452779][T12943] Rebooting in 86400 seconds..