last executing test programs: 8.200904424s ago: executing program 2 (id=2109): ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000000)={0x80000000, 0x6, 0x3, 0x2, 0x9e, "3f3c5e0000ff775cfffffffff903e7ffffff00", 0x401, 0x91}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000003f00)=[{&(0x7f0000000000)={0x14, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x2}]}, 0x14}], 0x1}, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000240), 0x6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc044560f, &(0x7f0000000380)=@mmap={0x0, 0x1, 0x4, 0x2, 0x0, {}, {0x0, 0x2, 0x0, 0x0, 0x4, 0x0, "37bb54f0"}}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000100)=0x1) r2 = epoll_create1(0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0xd, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000d40)=ANY=[@ANYBLOB="030000000a004e230000000cff010000000000000000000000000001f8ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x190) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000180)={0x3, {{0xa, 0x4e20, 0xa42, @mcast1, 0xbf9}}, {{0xa, 0x4e24, 0xc7e2, @empty, 0xfffffe01}}}, 0x108) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000b700", @ANYRES16=0x0, @ANYBLOB="000328bd7000fddbdf25380000000c0058004a00000000000000"], 0x20}}, 0x20000000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000300)={0xe000000c}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x1}, 0x1c) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_80211_inject_frame(&(0x7f0000000200)=@broadcast, &(0x7f0000000340)=ANY=[@ANYBLOB="5809040050505050505008021100000008021100000178005a0e3269ef10d89883c73a681f906df5132399625b45678683ecd90140d60631a2e1de82aea74420925b3ecc7036281514157658997a0d49d2ccdb2c2a0199eac8bb2681222991cfd939737569cd7e4a692fb61d23cc96c08a35"], 0x80) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x20, r7, 0x1, 0x70bd2b, 0x1000, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x122}]}, 0x20}}, 0x400400c) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4, @multicast1}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000180)="5566fb8aa6", 0x5}, {&(0x7f0000000100)="ff324d434ec75697a84d04", 0xb}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403"], 0x10b8}, 0xff00) ioctl(r5, 0x890c, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') 6.644992171s ago: executing program 3 (id=2113): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x9, 0xf}}, @TCA_U32_DIVISOR={0x8, 0x4, 0xf6}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) 6.523826267s ago: executing program 0 (id=2114): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x3c, 0x2, 0x6, 0x605, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x4}]}, 0x3c}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x541b, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, 0x1, 0x4, 0x101, 0x0, 0x0, {0xa}, [@NFULA_CFG_MODE={0xa, 0x2, {0x25, 0x1}}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4000) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x4c, 0x9, 0x6, 0x101, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010102}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}]}]}, 0x4c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x23, 0x3, 0x0, 0x0, &(0x7f0000000000)) setresuid(0xee00, 0xee01, 0x0) ioctl$CDROM_GET_CAPABILITY(0xffffffffffffffff, 0x5331) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$sock_buf(r3, 0x6, 0x23, &(0x7f0000003340)=""/4096, &(0x7f0000000380)=0x1000) setreuid(0xee00, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x2, 0x20002) read(r4, &(0x7f00000000c0)=""/209, 0xd1) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r5, 0x4b72, &(0x7f0000000e00)={0x1, 0xfffffffc, 0x2000001a, 0x16, 0xc0, &(0x7f0000000a00)}) 6.493716065s ago: executing program 3 (id=2115): socket$kcm(0x2, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8000) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000100)=@id={0x1e, 0x3, 0x1, {0x4e23}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f00000008c0)={&(0x7f0000000600)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80) r3 = dup3(r1, r2, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) r6 = openat$ndctl0(0xffffff9c, &(0x7f0000000140), 0x40, 0x0) sendmsg$kcm(r6, &(0x7f00000037c0)={&(0x7f00000002c0)=@ethernet={0x1, @broadcast}, 0x80, &(0x7f00000025c0)=[{&(0x7f00000023c0)="b430c35df4c636af39fa9f10270764f8d1a34156cfed5f7b8d0edf0e9877fdf483fc496dc9a5ec991bbded7cefffe0655d6b9bdb0418eba601832f6fd8e141c8b9301331da82fb9e6123fda8107a5bb6d840984681cdf58ba36060d210dfc04e90db1ac7cf10b5fae4aec67f78836f6ae4c76b1e85490fcc92d8b3bb82970b9723d3", 0x82}, {&(0x7f0000002480)="e4805458db2b3595d9d8dc1ba40f4ae17bc39d228c8a158d7bbf21b641c87cc79e2fe23d8238b596703fafd6c409e9b78ea74ee7418f1021c460d7c9a7e2ca15e9aba337b9f500b6be05cdd8391592532bdbcc85439c82c9218775b34580ea608a91d25b9d85f1fb05be998ae45a0017f3aae2833abd3e97eb07640d291c2db00b6fd2cffa95a4b574629a16b516f6292c7c1bfd4bceda4c4cea5db6aaa328147ce0bdacc6dfa7661982e3daecd48b9c05732fcdaec4bfa0cde6b02a8d7c9b170546c04aab6b2e18", 0xc8}, {&(0x7f0000002580)="0d7f8c56fab60cc216e038", 0xb}], 0x3, &(0x7f0000002600)=[{0x84, 0x117, 0x8, "13ce2dc159560fc553ab58da59c57dac0f8d273dbcd4e7ea8ea2d2d0fb4cc67c2c4a03fb3914c8fd3b25328dff3cb39e35a0cb24c8c02c38e090ccc2a71f06d6c614fbfdd51d9f4eebeb10e401e9e72996add227241f764c5c5bba186a9b16808964126f1d7018d0a073c5aee1108fdffb066bc1466b864d"}, {0x100c, 0x109, 0x4, "7b27605fc0201fcb8f2d179f908e5dc7622af907e24467b85097d1da8384833a78f65d69fc3ed453840f2cd132ec10f47111c5e75e12b520f106de1896f7a332bfbcbf070f9fa096a4351b9e871229b9fece0c8178bb5ce2f55b71af1716854df13deef31144ea772421c49ffe31d0593cd0dd811c306646bcb6f05fbcf81fc5a32373df84499c6d87f3dcc539564b92c19d18227f465f986afd09163c9c394556297ed7e9e7f3c8ff5cb9dcdc7bdd812e4e570c0ffbda14c23348db9e2476047979d74d909daba93626e60cdd956b302a06b3dff4b6e4cbd75c2c4aaa948a5a13c87a3f617968a8583c20940728073ca347d68d926164e7bb273b009b1f48a1f2cd4237f2efbef1f4bee9cda1716cc6c143a327fef0035d4dc8e3ad0fd03d338c6b14b09589934efadfa8f29ee45c4de25ac17252a7e10b0c7910e38f37bae92d86a3191239df3b638d88a73a1e6d56773fa71f91a172fb332a2716a446acb39e58ce2375229edf1cb399089b1f7b93760d6a9fff8116b972bac6791361cce60f52c706ad984b63928b913caba656d56f474b875c65074834669a42dfbc39257f9628b527f3752d472fbdaae3234c64d3d2c595dd2fa83d736b8bd2298287eb01bba551c31cbdf1f4fbe9dd03922558218911c16e7015be7863e83f63ec5abfdb82e00da57163f459ff9ae81f927f19fde698758b28f594f25c375aa9cf264261d6d4d6c945009a88864c04c0c7572932be8fea57f8c68405f0bbbeea41c058b2d227a411e61a990a20ef07cd851c998f46837e4cac0a1cb30c4ec562b7b4fcc1a708a282e186dd11783b574f168577e283fed039e1a0120ea3b33bf34a9ee87dd79e673fb16c02284bc9b8a4010d0ede9860b068dcdaee77ed8d1d8d1e5af389d37766ddd3d49bc99f8bf96623553df8d439251963b83d6970a428344fd915922e4f5a27fcfbab7e4f052255097538f48b17a17083d66b88b8dfd4c069703ea1c2c5d7dac7a7cd5f370a8a04f9dcc3bbde3cc18229627aa8e55aa5d62258c97b9469960a0ade9db154292196ae7f1c5cf4a460530509cef16215d78558d8d5437bbd815d7ff0f5f0ac3814d587515491b9e2e4d1a35ac2ced062eb2937ccd0a2090c1f8702a2fdaaecfc98535671ea5e65b11c5bf5b1f1f6376b9a9b57e030620a86e5f7b4556259d3a156ee6af3584497349b04e7c941054d78d77698b8774525bbf0c0f8d295d0f87155ac5f10602c21fe9d58430ebaca0bf9d889e2359a79f248f63afc2bd4ce1fe02b02e96c3c4d4b46c90ebfdee114d9831b31200d82c49ced4c5ff89e1ccbf217de46a1a55054394de0fb9af72fd5a665a96801bd1391c3af8cc30f63f21e22c17af43bfce74b0c61c458f1801a8725b11debd0e0eb1583e5ea5acd8df4053921064c2cf8c710c61cc5fb125213034c9708ddcfd4feb285a9cc53c83251fdae0df9fad1bdaba709119ab105bc63617c7e61975c72520f360aa6008f954fbdb7ad657e4e90ed5ab4cb7a909dc11a60922c6084ad154d6d3e72578dbfea0bf090208a2d1a71de16fb80120ded4948be912d4b2514ad552e186dfee1048251c85152399ecec1ea36d40f13e9867cd8868cb65c966db7c23253c6108372dc19dbba12c65ea57cc5e1fd7095a24419dee11de543e3b6e62de456eec9ab949cef595030d331b698ef06c26c272d000badc07e2e0b28e4892327f3a18d92689c1f7b9f5f0aab76109babf17417699dfddae0ac3f4e994f2e86bac3733f982d8c49ba121e1841410dd8c04fa9ff4e130af764a961565625428af55f2143c1f7bdd162086eed115308c889ca261a502934ba09dc83cd636b105e6d6de0eb6159d21b9b6b06835b73202e314cf88cd062093d34185c8487d6170b82c34ad6846f3a726f8ab4c20e04c97242119fc55c978ddb6e0667a5e305efb459d37ddd91fde23af4f6a503d276693e0e11fc3fa23cc650222a3c7b716b9e64f442f496168b8327c483240ab308571627e46f21053564d3504654ae1e3fd6ded067e3674af7a772b18273d3add60f2ac519f2f2b175d6a23dd227a66be92edd14c1b32d1f0095dca631d4db6a3845b5452690fad0a123662b7477e8ece1118a8df4e7ae149472cbf9c0d84237068c7cd2018d81fe760ea0233d2e4f384ec4d274ad9b08f7ed30d5e97c88a7f7fb7597c443401cddb8279377c8b2d7eece67998b3957e929b31c53ddca5778095f525c6bcf3238dce27459414d89f2533b5f36b21737535a5d570f76561fa9b07f9d28d19f8845e8d7823dbf06929292e2027bf7ecdef28e8ee88b8a7bff6277a0b097bd6b6d2ee24e6144b673583c6045c9787518b7fcce378c8407d08fbac90159f918bfbc8433d7a6e4baf0e3a9b7c956c4549a3bfde1ef40546470d081c88f1decd95079f15594406503dfce98e85b2b3d423318d4f633c69ef38f0cc6742cd364b223d59db49cd81b685c8e6b4822fb77090b37146cadbafe203e3bd68e68a7f288fe8a8af32d7253e8df03bbf81d3370d3c0ca38169b6567f154105f05d13dca95e1d5c909039af0541787b08c801f9d8a66d0d2857ad8a232d6d25e4eff69138b0051c087278dfdff1d19f0c738e60c1fde0eca66682c2e6c5f65ca3361141f855b1685666554bcb9d8ac75cef20a9387f2e3493da6a9e4462df3a3e59aab8c461d072e1cc349f2670e4863cd87ff1d049d56cf88b46afdafbdf6b3b08073fac56ea5885fd874c19d64541690e10ddcbc629541f46d49156e6eb3f2ad813b98d6f46098956ecbae5bcc16b486b84477bf562d0aef38ce345ca9e3a00f519a394f3f72ba11bd83e8c8300a7e311390c8a6a6baeb2937c39c9e8d6741749f38235b792c3c49d0800b4475ec5915644777596b66d5819a9f24d65cb2b1910748f98ac6b27badec3da23918fa7b4934af528c480ff5c99fdf412229f2f2e9d13664c41b60a173a8e10317aabfbe405f89f70872ae6555f9f387bed75f50f653b5b90dac600c4074094f6c9aae9e19f73389cd20640d72963b3e384180a4714489cfd7c70fc102653920acf905e2724d3437c59d0630e2391627bdbf8652c31fe36aed36d633b1fd0eab4a39b049ee0fb62511fcc1ffe5b6e7eb18bd0d04962e09de7b45a87d1976ab081c010145d4b0fd3285b5e7ee277ef956295b2e8d55374f01e22d850f58507c85a7b5e643e5d8ca0f52063b41f19d428bb857ebd47f8a0ca987632bedc2cf1c7e8d82371e0bca648dbd97770d2c8925e57c15f7b5e9335020c7d25cbb69c100a304a4f59b0cbd458a2ca29ba9ae748b313146df6fa81d98617661e6c391a1ba489db0943b15e5484070fb2fcc4f2ea6014152804d27e75111f593fca292c84ddb67c292586e2ac38979d8e476a8a6dbfaa37cfab46f57c2c96aa2e96d110d869056c0f20c2491e21435a89a943bda086cf77f5853e1dc60bf37165d8e5870361544d6af4e8aa92c0249fb013c9cdd2b7a0aaf04e3ab032f3c81278228653a72a0c4c433dbf7a0c291d15e8fe623c25af2360fa4e6df803c43508ce303b27170616572befb155455549f39fc0ec3c24d2c429e6896c459d3907ef78f9b19665edfef0c6e7cb58d67c90c1da51f5b0be58bed4074e5a046633b811d300c7cf83780b192c97e6e2daa1077f4dd4cf338f65d4ce74504eca6f694ca9f5cac67325c53623cc4108339e53f08304c0ffa553e59d605f209db4e08a4b99d38799dd039eb772eac96b16e5faa7d5b687e3c31ed243719732460b6234e4f2c539263e54915139ef843e81fa94e127998b30cf04ea9b949b3dcdd5bf6a63095490e3c1cde1f17b73e98b36bd36831e57bb2874bf8f5eda327a5a13f633aaea90841b1a52d9715b94e1ddbdf8cfd5ce635f5bea178abe24468a42081709958e11f914b5de307eb3cf2173413b702e056bdc63dc8982e20ebc4811bf8bf428b766cad0bd26e9865f2e757a67b7ee48c3ff774510152769dfc1104abbe6ce20eb49bbe950714018cee8649959d79e8f0680c578a764f61dcdf201eb5be2f8d3dfc04369c6fbd9e12322b2addb7b6499b05e04e49a9bd15ab4d10449b90e26da3341e0fde17d3ccdc0d23fdd33fdcc53c31ab6502c3b5b5016ee395c9028f267dda17d2403dd4f1c92cb580e2a5414ff0ead60206ef177b5cf20ea16181811fb0f83d2954c739ec594e84c9c1269b66a26061983ce31e207297046580047dc9fb2e870e7bd5275fb780fb95d065c9dc129320b0e88da0d014106dbe749ea8f69f465446034531cf6cd5508d360296a542f3755b6c53cadb86448fd4f394d3ee193ee4153674dedc04d0394f2b47fb093e8cb2098b364c784869d6935ad6b7000c0f675cafc4a2163bd0d808a56d4f3d419d9bbf80f0f94b1131d565c9d2e0c974d46cbec9fbd8b4d39adb35730b12cec7390bc8f8ea9c003c7bc9ef84b04734402aa1fab4a889ac2219c9c6d10259ef8b4854791bc3a2c10d50f2c344377b5ee36c3d275e3a446648caec51c37412061b5a260a0a369a21d90e31a127d83a0bef4c973d34634379b7200391da47c1894ffd07387f93210ff14c585f17caca5503dbd9ff6975cf954e1f2eb6d4dfaffa2564adc43f68fa5e792ba45b4cf3b318096526849631a3b46f0d5456dd1eecba7038f9613752eeeb1820b12de82ca8c63a8b01b2774a73e192c5dd423fc6fd04d494f06c602e69cb802b76db8f8e81aab246ce63aeb8ce62329686b272e6d314e7420426fd2770845aa475f88a1507a81e612fe61d64f8e5870348097980d5c120329aaa866129f9a0981bf62e324d9e4434e7169a678301f224d3706a0395d374379ff2fb071f26a9331e74853de568a42606ea802fc52eaf93998861bd206bc6efc4c89ead9b204669e9a20ff2024f031f90c37ac7d5ad5404390e58de21d611d09be1e7f179eec6c8649f21bdb464be6e0ce54f525ffd1c154a2c9ff3900786ae40dbc21e2bd00331b5f8b864062dd43c36ed011459c38b2eab86018e43a303df682d73adacffa67daeb5d85e3d9db2ad614e29713f483a9de9735484934b279c243d96966ae579972b5d47bc90f8335ca26c42878e204b7cc14640586b933ed3f7b6f14f89e3729f55fb501add735b3b88076b2ff7dc59ab32abfb20ba499c94bc9b3ae73f7e2917d73b9d4c6feeff0547d11e653e2ec9dae7463e2a3b8b2bf73d734de6e0cb6bc9b72e472103a2e3db944eb79e1d5bf7813cc3e2d57b26063fe687da7a7bd65f85f9635a4187953f33ae8ec477626fba229e5dad22c0c9890ee789ad16c711281ef4bdbf9f126200b2cb4f89709e9b08908e36a17bac3fad12e727a9f2136c4e0fd98e631a517374c4d69e160685749bf083786dca6b2187fb4740249c3633d1bdd0d35f3b9a33f09a1d9c91b627641faa0e88fc99e88d9abae6e0e14b80319592fc003d1fd99726009b8db3652bb804a74dff3df6b6b55ce020e2d43ce6074bf0d80e3af47174f965588de89403f8f0c6f632193dd54eab549dc05a5a1a0ffd0bd81bd8a3e7f4d59d4634e6adc8d244065a17029a514382f071a7008730bf5a40b576d5bfd4eed2f95beb2b1b491262f17c29151a36eae4e8029276272278ff6c7ac6d8e97d9987352503ebd25f02d9a88e73e42f03a7c7dade35efed700207d618cd90fac005fe712581f13018ba36fc8f5ec05573879aa0a5c756a99747ce2605137387e35066b3fc68576e21c300e8973a4c83861863398c754cb126cbdd8592936b6f196f4118bec108f9498a380bcc28b18111ac"}, {0x90, 0x117, 0x9, "493046b1fea7fba69f353341499d46dfbe9cf4cd265f4666dc5eacdf362feab99f056444248bf193cd22f72eff7235f777d99d7d9874546292cc3b9493a9759e7cce9157da87fc0da3c63199a355ace67f2d9f6cef0e91fadbdcca519341696f64a1d39393859f255cb42f8ea87c3b1c86f6ce405313c2c9b04c3bb4febbb1b7edcd44f3"}, {0x88, 0x110, 0x9, "23311875e793331a2d44d15fea2b51881ab1e42cbf531e02ac0eabfc9a2e1c3adcee1d57f7cc86ebfd3be47268d1fc8384ed2ad680c4f756622eee5d6574048ec80ae9e7e8eeade9904d3bd7e3d2448048f94bf27cd318c54c11c750ecae20e1ed7ce240b52c39a37e29a26cd8cf0b72a92cc88cc8c4e4125ecedb06"}], 0x11a8}, 0x40044) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./dev/ttyGS0\x00', 0x2, 0x0) write(r8, &(0x7f0000000a00)='hel', 0x3) sendmsg$tipc(r8, &(0x7f0000002380)={0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000000380)="3db46f515c0b04cc998a958ecc0d79f371a23e5cbb8c1e7f147f26c91e6fac08179a01696cd2a168e44fb58675442cc6da5dc45798fd0fe9fcc9d9cba788e97cd111ff77d02b2a278839a491a0b80bb1e00e899e510023b868c6b28f763521b82f26d4eaa6fc35ae6833d26b2646e8191afcef3e65343864b4d412724575ee65c009922f75e0b89af0cd2aea0a0592ee0ddac0d68467cd3395b9d6c296f1a77e5b152bcdc6ac0be9304b55a9dca3c2283f3d4ef2382d7c6a9cec9e307bd0f89d606e61739ab3a49bd1e79f95b95545d32250d21b728fba66311c542b4015ee28d02609a0029b7bc214cd60", 0xeb}, {&(0x7f0000000e00)="d3f35721480f4461bab9f2a75cf3bd53889f1f257aefbc94cd59c7696f00faa19e1cb9b3d53141c0428f9f2ddfc90be23ceaf0c4d8efa24949d9f0b277202691d68d14e44cbee1704cca52b341fff223a8563f0c601270e34d97337b395fd2b0758f6fd60a0279784bec9ba0b1804d4bbc2e0ba1c3f675ea22a27a7734118c2bdac76eab93ff90760c3480ae7c0d93c2696a2351776a5ef65fd5b2549c23ff5b9cd92c6def3ad5da3e293fd19e59a17f026e5b932727e00e23a69e111a0c42dbee562beafd9f11daf0ac14fd40e6dfd8d247f61b5aebc80951fa778a6cfa37f12088ec491ce239469b35e3ec31c61c73028bc02fe825f877289cb967", 0xfc}, {&(0x7f0000000f00)="422af3682c41d0194314d36a596d851f0ac1acb52e6b19f4a58c855d83f49eca1df9342b4bb1300c2214ec51d865ff1f9d1b", 0x32}, {&(0x7f0000000f40)="19e5e74b9d196d4691b875cc7f6723d48726fd2ced9f2da8cdbbd70e7c0e5db41ef377075bde9f469426aedc7bb33b26f043a38a7e3952ee7579a7969cb244de28660d7d44e577302f7e8dc73f2dd14afd7e82936a3621a14153803834f262701400d232def0833535f151bf8944c7e8a910686de05b9f8b1f43abe9d76eea2ce4c0650002c662e4623e12ad31e27de431782804c78b6d50a1914163931d7dffd4a49b468858dfe669672dc8f2ec43e65abf20006e06ce89fcb16f2556e0917e7992c2f1e18c030ed63bcbae611065", 0xcf}, {&(0x7f0000001040)="8cc6abbe569029f697d9c1860994f9077c242c451ebf034a29e13300ea0321a44770102972fbb3706fc2ba59a38dbf4ce3b1bde6d3f16e1e5465713d896aeb8b75a2b2cf35c172d1ce64f44f8d2d7589c178ef026c8df692b8aa02d42fa5c4625432c14e85fb3a517a367b9ad8", 0x6d}, {&(0x7f00000010c0)="d771e346a3c1ee701a46b255651a106a274f0de41357fa3a60cab130f2a939a0c8cc6d5be899c168e456c648d6ae2ef6701ffc31a4c4352814fa16c95028fb19f4b50413d6d8ebf2f320794645f42e5e38b1ed9e671364b08acedb3d8440daa6634aa64203a1622dbd1c2b02c911ff651aa77b09075bf4fc2a9732163ebb50b8b57fd6215a6aacfc0d0cfe834d81b94e6c001b215da16778bbce1dbca38da7e77cb06c4ad0719c6cd18530ec", 0xac}, {&(0x7f0000001180)="0be26dd041425fa6e222fb28291c44efeaae986b87b3dff6eb618f4ba6a3c06ff8937fe7a0d304b78a9157f0316d718fe3039e", 0x33}, {&(0x7f00000011c0)="9567a414f8585d7ccefd8eccd54b595bda12159c7957b7029bbfb808e1b71fd17a99046e736ba7e68ae622ceeb5d351f08c10e0e367e49", 0x37}, {&(0x7f0000001200)="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", 0x1000}, {&(0x7f0000002200)="d800e6bdacf35d3039d0c758810be6e668d7412f3bcd43349306d124dee7cfc53010003c012dd4a3a9e8fea974c4c944c65c42c8dc89c6787e14b7ec1779a52a43d0fea29e1382872acc6186452f05041a7dbf92f66cf715a979763c5b647b24be0a64dcc77c6d60b82b477e9230f2a4025ee69c73ce1ee148eff8932b5260047427b35c3e8a1328f16e72bf8f248fca35ce1b852248f9b47050ee6e89060cad85f50f80e487d83a7dd0df0c4f546fc8a91dcb16fba63458cfb2cc46b4c7", 0xbe}], 0xa, &(0x7f0000002340)="619acda28c664efc892f82edf905731bdfd6c0953abcd279199e935708", 0x1d, 0x800}, 0x44) close_range(r7, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000480)="b9ffb2ed6844268cb89e14f0886411e0ff15661aaa50e7369dfbac141416e000004062079f4b", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.38878488s ago: executing program 1 (id=2116): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0xb, 0xfffffffffffffffe}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0xc0, 0x0, &(0x7f00000005c0)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000280)={@fda={0x66646185, 0x6, 0x1, 0x10}, @fda={0x66646185, 0x8, 0x0, 0x19}, @fd}, &(0x7f0000000300)={0x0, 0x1c, 0x38}}, 0x40}, @request_death={0x400c630e, 0x2}, @register_looper, @exit_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0xffffffffffffff54, &(0x7f0000000500)={@fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x1b}}, &(0x7f0000000580)={0x0, 0x18, 0x30}}, 0x400}, @clear_death={0x400c630f, 0x2}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) gettid() clock_nanosleep(0x9, 0x0, &(0x7f0000000140)={0x77359400}, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r8 = userfaultfd(0x80800) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_CONTINUE(r8, 0xc020aa07, &(0x7f0000000380)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) setns(0xc9, 0x0) r9 = gettid() r10 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0x50b, 0x8, 0x0, {0x60, 0x0, 0x0, r11, {0x0, 0x8}, {0xffff, 0xffff}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x18, 0x2, {{0x200, 0x5, 0x0, 0x0, 0xf407}, 0xfffffffb, 0x1, 0x0, 0x4, 0x7, 0x4, 0x40, 0x9, 0x0, 0x1ff, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0xa23, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, r9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008880}, 0x20000084) mount(&(0x7f00000006c0)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0)='minix\x00', 0x204001, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) 6.384728155s ago: executing program 3 (id=2117): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r0 = getpgid(0x0) r1 = eventfd(0xfffffff9) ppoll(&(0x7f0000000600)=[{r1, 0x1000}], 0x1, 0x0, 0x0, 0x0) read$eventfd(r1, &(0x7f0000000080), 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="057e30aae10df4f97559054b9a301ecfe91b645115e1421774006df60cb393573839b0078ce169ec2fde0afea66b5bbefa9d4f3cd8c2458336ceb1f0efe647d6d7b1cdbd12c9b8e3a822cbd51494bf79a1dbe5c22338ce37ed467a1d3d616564cbb81faa2e935b2697c12efb0ed141fa2eaad4747725c4bf20f8975e402b03eb77d1aa3f10f512397b5037b1b4cd4b7c08c03dc5e52a066e5982969fa044125ae251f46c26e2536cc8b77e8edb251378be4beedfb8dca0d449123f57677ca3da5bdebf91b195f1a5d49d7c292f20f58d490de36d8ee0e8a86bd04c3165549465cbee7891fc747d7def370ce644db894b56bd53af0d0e261bcfa6bf72a684dafc5bcafe07ece74cbd1d5fa32716dd03f7acd4f32d935438c91e033beaf49e3963e13d05e7a8334a858639636799f04a9033193e7d18a2a4b20bcc96811bb5efe476db70a76b7456ac4e71f3e89c00da0c7761c188570c7902bf2fee1be273be8a9f7a2d7508ef2188d3ba1db4fa9d1533d2f2a288cdfe3b0c50908d56ba69e81386e7e979e9d7ff78685ffb8de6baea2451762736a2bbafa11d541790b0564aef9b0b80fa24832090b84341a9fdf712d3296f911020f8021eda8130befaaab01cbe91dfc5768e6ff31ec50dd88596832a9f5fd4f558d367f40e454d3c97ad16a7f30b93629ee2def77b99f8a17c157529b0782fd847a4c75a2302ca96bbdcff660c2cca753e1a8c60dbcfb319a1594565a2e15bb6124316e196e3cafaf1a29eef84a0908d1dc80af7e333c65736699f1254addf2ab582f5c87c4f6ca234d7ca9673dc29444044b95abdaea958274e39aeb163ee2d05bc2ade5c33a0466e14fbdf8aa70ca2964c06ee5bc57b894b0143a7a503cc43574a07958940b029678df44d6c82fa2e6937ea6aeb5b8f33c21628e3b0d623c23c2e5a3546194fea742d90c1d61f343a005b9e58c3e8292b256fd0ecca81cda433f3bb0ed633607f0b635cdd8b4919bfa37c1e99df087d3f8f3ba5dec7930657eb3a4d8febb5234e048881fbfc499fe5eb6a0ce34546f7010ae2291e6731d0798ca451387a123998e68f6f577ba4e556bb9a119011a191a6bbcf55beb1fb0b8252deeed5721b271b964534a04462720c4c03e8ea7f120cfa1be630e7fc680d1f6e067075c72f642babcacf6b00cd3fdb9f3200e4ff8935b17ebe222053c78c3752666088017c2150dd014b9578af6adb15527a483eff5bb623710ca7b37ed49ff7cf1525f296af6f27846524e4aaea7476a2d08dceeca84a1ab11e2767abff12d10deaf63681dcabe9b1fb9ebe207d8e37bcdba9a73a02ebea4e3a072397a88c47795d5e88b2040c9fe3f96f66f8f7d593547c8fc8f4e75a1c20962ecf2dd1e7bddf896f2a6c5f37a8784e2bc5b10cef2feab3b6eee7430908eeadd372248041a09b0c29385cd7a75754d2c429e72bf5fdac34097bbbbb3790f86399c60cb5054fbeb8eb1241608b506beb135091c18110c1d10d9a80f4adb11a6fd3001957cae0b4f8f730cc4fa4a7328e23f390caab014cfeec0ebfd0e14021f47fe330a68680678d23e7ca1ff18e7e242f4c1e3cca51dec73c58b596c2a92267ee76d3657c1e2b34102b09fa4c59c2619148440bf26802c6f858b8eee6d8c697bad2c4d5a0f76c6a4cdd3b8fdc21e447920491ef40578b68a7a5dfda04fa235fac01ad4e824b627137dc48807100e52ec5ae2f3a3fd84d68b824033b4f0ee28a9e72333b4e209ae905d0781e4fe8116e03b1ca5c3b1ea84974cabaa0214ed15bfe01e974491e8a20f9d03ed1b73799b083f3a65e809c3ff3cf126288fc1627409d46f78b5fe8b8ba0b3ddc3ac79aecd6eee2e0cc59826e5798f48f80f0c7f549b3a656e9acbc5e51bdc3becef93533166c1d9ffe4335ec973d3d27ce5987d150f554c4095650528578fe4858b670b0786f23c886612191f89ec57970dbc0e33cd62b57a08fa940b339577fd12d07dec2ac50e9e0b27f0716b3233803153389a95df956637af8d9778e27bce49ab0a832978712a074d3f7516ad512ed0d9b43049b5990c841a7b7146a24c62fb70645b8d85b6c8863d5c6aab03638ffa4e30c8de24383cf320eee735a4fd37262d473076f495da8b2f0f028b8f178c238010738d6afb1dc2e48089e80f6a7658ad3496f1a1f7f78abdcf934c733d22abb0671a0d41b9b33a5faf99d7b82166e27df0f97a7953dcc1fb364478200253757e8311ba61cb4c78a380cdd820553c7296816210f64b34619966f1540a407c8d6e8e30788909de19ede4116d09a14ce26ad59957add80b90602855c0134ba7fe8afd4493f7cd9ced61fda7d0ae02505c046acf68d68ecd9b1507a4d4eba4c2c834777b2c3c5a8b3c06677fe468072dcab48c1ac9deec30265c7f6c5864df89e25bba52715c82e9921db601b3935f5047b8cc07351b9965b1a1f6ef36c1fba89d9d96e332eacc1e8a78e09d7d6ba30845866449ed5264f763735d4e7cc133dba4b296b2dd9331efea01e5b3d05f38055e41c49993d679ef133b9b1af435fd0ac5fad33f571c76d02c40d4e301110b4442aa134364f0456da0cf362b2c27ebd667c0969ae09dad18becba9d6918fb1e741f685735cc7078f0e6328181a83da67516fac31522f9d9fc64a4b769e57e76bfff6f9867fa2fee1e7dddd11128322210e44eeef6db7269dfa1bfbd9099dd6f8219d585c22c20483251447772719a6115ccb690609de352989610a138110c884562b65de3cf63c3ebe9adfeb53c6e4ecc637c98b60161f71952b84c6fc4cea6af0ed533144bde4f8fbab2d3ffe0b2a5d0c55ec9979ea85a25045ad3a84becf0e891b89c1a83178d7368aea4bdfa0ebd46b8e110a2972c8ac96e10ac630e89f8d76bf35b03b5ecd393d1986fc61318e08ef02721e5f2cd2fe098ebcd1bd30a8f87b2a5650b51dd50d0d78ab7fe66490f5827372f1779d3d389e9fa66bd0296f0203af010d8f76783837cdde2555a90be577626a12de47d4da638efd0017750a230485f6ade34a27284d85dd87f9db8a832c571106d8296629418777b4d933fa049f0f4e5958c193e889305074091be14c66a4bf02cdfe1e8d26a5d21fa78c5628a7ee3d7a0c550296b2f0625e2dd18d45f2d45bee6746d4462c92bc3cf50503c7479bd121393821afe1cd7144ea37f4e8e5ee21f739024ad25af9430dee006b76617725556ff8a820b767fa821629819732f086a5fdf2ccb4edae0aceb3d6dea698e798ead905a2eef9065d633b007271e93101a71cbe385f56e32b3a8fb081c5c1ab09b729f89294a0007f13a3b8e93686020d993b812c6f85fe1618db897cd67be6cd5053dc8490bbebee133d140503c4aa51eea0c156523a1d81ae849dbe5a273bfc0de94836f8160ea9f146147fc02dd7b55dca6a2a43692268ee98f51fcd2d3faa76071d9716e877b2a3dcb51a51d5359a2ee705da52b43306f1f3caf33342fc281bc9c58d1ce05ecdeca371e3a788542f8fa999e4d8e10e66f0b6053d7d4cfc6acb815628bc2409b3dec01726121c267b3ee85fd61bbbdda68ae2c13026863e4a54b93d956fe692707a179411c841ca7d2f33a5223181b18b7ba2eebdd7c2a8dec3ac2a317b5fbd996e8598c394ee627308f0e887480a8dcd59b0256b636f4c62566501a733fa74232945ba1d9e2bae347391bf9ae2da4d3af2b262b772421fd3a5cab46862ea6049f5c9c76dd8549ce0e6c31c792b81b6b21f0bcca18bb2fa6a9d4d6e0a837bb119e2e002a69d6ca95a4b2acc463076c2e05731ef0cfaea84387a6baf6737cc14a25f5329ea924090311213344625a69ee382dd4bc72e00e63329956f3e021092585c9affa06a95bd0ef653ae9ff0abed5ee561ada4f83d8ef202d9c0b2225ebe8660cc408859d45e0332f4f78f6a339bce9d12ca2bc5116a8fd4007c485f5c1c41af96c41d96db35411842d7babc05c8b228066dccb9b67f348974363be521e41fa94d2034a0bc1e87360a80606e1e1bfa8e6399601b30bf93ac41129869158bc2b791b50e51519133ab58afd4023d4d721129b1307f054103a47c49e0524ac4df511c3409fa62d8b5c1a897794600f53efdcc987e06bffd77c9fc75fb7221ef29ed2f7e3e8abcb4a1875b85bd5176a6fba9a361d8684876508443bd50e630f4c684002b15930cf81d740b880eed25d22d8de8c00066790df084fea7c5021184a210a6d24f9bc862c4e3eafbb1782fa240ecfa5959d7a681bae84e8a96a5ff45dea4f9e16dd2cff2dccc6cf4042b44b7ad1f55dc1db5998ed40a409c0e67e1e64fab423d2c00fabb8976d9dacf0c82530e356a99f75082f3411adddfe4ab1ad3b55599fa15450dd5feee23591f1ce398e4c5ae8aad71ad26ea189c333c8467d1eaba9589bb8c41bbfe8c0c173e5446bc06b578c1db849fabe5fcd8fe0fca94bdc799b53b897249826037499e8b6213d640724fda1bcc9341ac61fbea02c8f39a53c496902d5c7922f678a273cdf5ffff38ea028ae19dc72f0b0688f2b9b7d5a9c04153c10ff4168cf9f243dea03b336be778f6c79d67a2d0ade82863eaf95d6fc7f745569864f369f4b39177c356c8c393bded485df28622f01251e58f3d39498520ff90e6c670f0dce5b494cb1d78dfad108406dc5857086d386bd42bd03fe716f049407e5e55caa0e73e96c1a4f6d5791ce7195b2ce72de52ed617ecefaeeabfa9350af49d1d91f9a4b97dc0808869b916f34ee242c40fe8c8aee57b6ddb69f9a10636e481dfa059ef001bad7020266f0d74b14edce6c18ffef854768a60885bad798658a6b9d0b438c483ba159346d5ce0771f53ff1ae0bd47d8583bd56237f8da2747ac7eb2a87b6e26c4820d4fe18b76e06bb6e0c0cdf478b4aecd381c2a6ca9f10ec433f0aca63a66d04f70557baf9f2844005351a21664c2430fb0002cd03bcf0b2004068a2567f91a9fbee8c6d948fb35d48527b23e1398ce9f535e2b0b33c2bc31ab737ba4b980f46f5d424e33892c8093f3cd18510a3157afc023f63ad3ba999e950747c78c06ab141a26d74ffc049a6f76c465f9f9f03a8d339a8e61fef26a5239fbc11c01a87800c81efd7b9f28ee2ab2ed88a383f5013bfd6671ea3086121b235a0cc45ccb300c02588895f8d13ec7e00a3aaaa8b0e739f666fd1b13a90b23998704859c9c76108ed7ecdc63770e6ebaa0aeb9208b92ec4e948ac7fc81cc6f305f06c2f2d8c9267463af92e185ff627eed54313fa2ee0bff2cfa8be411982fd19fa88db5ec99f238f88782f8c7a957bef14f79351b63799a4cce160357c068987a5516b04c79644c140850cddc8bd5541fcca9e30826aad864240f434bd1fc67b58e3d664f782e9e46edcb34e2db98a39c23e334e51c71c9fa466470992cc1fbc36c3c8ff4340be67f9b85a74c9114cb9fe5ca4dcbb641ea17a54ba4658aeaa515109e117625a6196dd66d3584d293b468fce63b5a9c4b9461700c74ae955539bfbbe3eccfa7d9c9f737792a9d4b978baa2e92819e88340b73c88c2900b723248b18ae9414cb37a64ef8cb8ca85cda9677d9f1e71a6b70fe3ad17f2d13c1df48d93bfa50fd939a72ea26f9fbeaa6f8af2eec91b04a8fa7dc14fec0f54fcd1c5c848b4432f979f10e661cd2d7f8ff669ce99f9813fc5440fbbeb35f1a5e5115f5ca35dcc270bdbcae07a9ae8e22aabf8178379dee08874ec7840de27815890a88fc9a3bcfa88a33f9baef9af0ae01b2bd34a907f1151cb14bc8b396bc43a60f884f425e4a04348cc645aae68db49980139ddad0fed303e40b124fd654b36c961a56c44cc3686a7529b1f1ee47da3a0f1158542337df15780444790a2ff1b57e062f0db66730c9f98de395f939f44188225211c514447f67fcbf320a34c43ce09ed272bb992db3a35ae2c3c491c36f2de88984129fcea1ffd235aff7bef7fa95d65894db9a5f1b348efcb571a81b3d73ccd07cbef052389001e4d456800e05ca53bcf3485ce05791ff65a9f7913416ae26972f34f51a3270580b81307ce31c98eda06f3b35890ce317e79a16d728cd0bb6a3835667555c0c5138cfa5305a91db1f873b2a75b82ffcb27616ee67777708f7dc2ed9ddbeb38a60f446d3ac88ded25265c25ef38b0755a9d34bab5e669b6501d8c9787aae7eced9945cad3d4d1c32fa68b48a1d773750f814631db3e088c1b5e7ffa854ea1343d94ec1343918d7a1c5a095bb72b00eb3bff210aeec0b8a581a2a13429b83a193f4d447059265b63c4b8f8ea1b9494f65e79844d956c5d80780849dc086506e9eba002e682a1bae1543f8289588c574bb6ca9a2e57b908aaffed23ecf3536abaf96fe08291f3d70773288b4698e972b0187385dfff4cba59175814e75e7e5146205c7f2d2f749583b393f46c448c152d8be50d60ed8d8bdb30fc7925656a0f90b1de967c729980815e5f19ed453fbefcff67832cb90d753410a0b18eb7504600b11b0360c3d3594d48d832160d357afc1f17dc71dccabef7bbcf1fdd55b48cb02135c32650ab07b902f36b48be9376b2dd68343eacfe80d9dab3205a393a4c6ffd405f6db323dea11be4f22ce50df1e0cfec9e9b1e23acb94d66ea787d08f615a7c7288cdf1921a13a85d885e47cf1067d89ebad5b92ce5c9da255f8d74bd2d5b78366f998cc35bf35e45d06128f1c5984fabee7542642bbf6d981b60759d3e7900e5b3d1d7310f90df0c88a600ff2f39932bf7411e61c692c9444dc9ae0dff28c0b94292c430ac4464e83ce8a29b886f45c98b8396667740c5be51e592eac0250d6e479505d36e930ca3a32cb671d58707d25b10e2660cd5e661b08e268c8bf1b3cbceb2d995a2a6fdfe5475cccc965f71baa7c84054e3bb6cbcb7167b06c708cd72ad4301e943dd1b2b2c325f682be3eaae730a8ed8bc3134b28d1ce04543bc66a529744561c42d25e65c7b5cc2a17875ebf35e53aa46e1edec29ff8d046a7e01459d9639c10d1df998cd9a12d7e50b2dc71ee7338cf71beb72d5020dc69eeafc354bf822d65ee0328eb07d04ac0d266fdb53227a158411da5ded254b3c359ee710e0278e1a06f06002538e108450fd6b11949fdc618a29baf34f232aa192230ddb318aa6d59d122257e50713fe73e6c0059399589c382dc901a8c3381139436f7331b69f457bbb38ed54daaa07a52cceb053c32690836c664b73d86261216b8610fc7b4d53dd3e5d9bcb3e25528e132911cac37e7f2618274c733b5ae02f9c27638d9e11988f1dfbb281ffd8cddf8558a481861cbe9d53a4ad8282d3587449cd51759ca397eda122d286e117d01539359870b94c98a3ce383ed1d280bcceb228acf73193e87fd3650e4dfd563cc55bfbc8626a41293cc90ef76e28e2dedaf968602d2997ae1c2752a0febe3a78f3756d40201ae13074091238324422caabe22c66b7866065264261fc2c3e0569493468d1c1c36259aedd5f078a231e72decd70f4de8532f6753287435296f33a096bc1c8b0ebb68c9f783881e45ac54159ec1c2f9e1f5cb48f96729a62d1b4fdaa89ef5de8741bca04e953534dc977e881a61281812af435206378eff173d7929ab4967e511bdc14e6a783ab647a4c257a4fcd6ba38ef32bc48a0064341697e34f7465b3e6240589d854db4d9714e998f2edf3a03986598a52aaf647d938f4a8e07c1c29615803af6cd403d261ad6da3c1c804034b4a4eef3ea1cc8db39d9e171b3f6dd074388577a4eb901c25c8031e4592cea80b6354850657f53b2acd910ec2c5a7db6abb0153e051dadfbcdf047e35591b96b5657ca55d99ef6fb48e07c34321cd20c40b30a646132f8afcb9426fe84a790567fb847076a8762ca29cfb037e0c948edc12122a1160a55d465f5c912406a10dc0d3c1156cd207e9ffe906d267c9c870521934e1c56af460c0ad0dea9c929acf85768e22bb65eca6e25e4ec8e6edb7a6215e8c7e5fdb56c7131b156ab6a78fc808f8f17a2708ff68b37778c00b3b546004fb2b2c588d8ca8276d281026bfe896698569814410422f27421b8fc5c09d47635f17ddf6b9f56a202a991514678c18a4afabe1eeca6fce1187fffcb6ebdacfc6cac9750766ed40c80e7eceb342a3fa6f86d014949f9d111bfd96e2a39d364f2e2722f2d9ab0577befe26055890161d780e52eff4022461c1d3b019b86af28c4f02fd1f7496d8c141344ad5756bcdc45158f3af7aac227c8853f607cae412db6fa924c039859fe455857bd5fde66cc1b773c12f516401a31c80d750079247c128a103361e7f0a392d21b4b1b594307ff6b37e5a242666209ec517561e04645b92e7cf3cff1a6c76c900d12d9556e2962c535401b1e61fa85e06551ed678703fb3bf8590f2608ae3c278b8d1ac286af38061afbbc3cb27ee7adc6ad299151cd00a84506e6a97648ff99f2a9d35d8421e71589437406fa8e6def8ce34c9abe5de3481c492887176d4485dac794b84567d5ebaf68d0007cb2256a0f1ce4318f6891f750fa9696fed3525059688cf973e70d688b1759cd0f3dfb0b2a7078174b978767cbdbfc3f7d5850e2f7772e2bd6e3ed69ef13cc141238b5ee04b6615e33c42fcd6cf979a0ac848458b713b9a988c1e3fc32f2a182fc0cab2e6933e9aa5c2d77db8c6a1802b43bd8220ff0ca92229fc26a44761d00eeebec834e5f7d382b4f58a2759c56e53b163dae034ffa1970acc57165746e575470e13c4044f392ae4bea93e7d666256436507bb987a247785301274d4f262f94989cdc94b209b7499bd0cb4437525b72be79c87c6076533e4a14799a60bd3563d46ee4767108bed7e637cfed6f3139637bb01f36385dc5873eed726fbec9a87da294cc11db8b49fe45b798ae74e1a8cb0f2907eb0178d2baf5f0f88f654baab9f147741945c496ddea1cfed65a82e913a131c4ac7bb6f0d8d5d28225dab8a33c6e60c0d2b2d5dbd8c35089f13f9a2ae81ec9addaefea9b8ddabc8cdeb6437381ce346db6e14d9d1e8bb4662b508d61da77fc8d9ebebceb1c23be5d0a7bba4a48c0591333ab7779bae78ff23c4bbf8a8cf30f3120a5b63a047064d7ed7d37191cf39b6d1e8ffe3b47379767bd691cb855a9c938e9a0235a5ec9c316a6dceca63fa5fe6df0b9f0d6b38add216aaf2726d3377ab827b00b4cbf490708a0f679b8cd7caadb3dee40cc98f778917d6a6263fcc0747bf75fd676d84abb7d10087da323f95c2571139fd4c9826ad5db6ee4c246b9da20592cae11f9264bd2945aa1a427b2acefb514a2daafbbae35ff761eb1e3b98b4a1dfca348b8c4ff96325a618d677180ceb7e916654ecc2deecb4e61d01080f44b98776b1b43aebeffe2c14006dd1d78c8babf1179f42fd20d87654d3246d41e9dc633eac1741be44f8d751d8c9fd57316fe06d60872939b7a2906bb27a299a3408a51d74e5d98417f05f85fc1b332e103e79203e9fe344dc1d1572de39d914c5270c839870d2b33da5a6efc08c4f0c8227cc35a7f77c6a55f80ceef90e217c80e5ecb4c236685f5219787b01612cfbac90794e8269c07fb7ca4f7dba4defb2aae2b37f7b1696e78de15dbb1b6d4ee0cc4c0fae274b2c2de9343862de1d9847515ad235b1837daa9b814f19e895ae3966ed262e3e7add9f19009e6b61462917b29502b67e124c43538a6bcab7296529e01bb26ab8b3ef094ed057383c4f92790b6f705ae9d943c4e8dad84f6ef82b54d062713c16960fb475d74d46a1b16062563da3391cc6ff5185162c31ff7339e4837e38adab8ab911abaaa006e313dd19a1f92b4f7bede4525b154e1b9f796136a85f3602da011ae2232be902347e08ce0bbf3d23d91c4aac11c8824caafa1d1ff0343ce655802c1915f3ae7c0c670b18e56e139be66a33613afcb3b1928613b3afba9d635070af678216d57023d1911f0eb7ebddefc96f0efd8e9dc10e8a87a68393e19733ef900c6264722940750ae16f664e445414e85e98570303c6d87d7f265cfae0a1e9314fc14674c2871c0d59bbe2eddaf9330a4e2a28673af73910d6cb90790f800e89d55a2930910a8430ade9551819d83d5ea6da4e58326b7ce555d01da86ea78200f0219ec92473da95cd5a632c525ca9fbcddebb8168881cdb2f5da787d0e31881e2b17d78184f3a0bed8662486d3937dab275d050b9dd5a2ce904208a91a467afc33e10fb6c1ca788a5ef30d6e8b615ec0ae1503fea7006569559b7b155c31b196b85881c5671173c06fc5373e9fd973e7111ed45874609bf3c88c6db732210a3ea04cb68662bbc2048bb55d811482af5c658e29bd18c57ffa25e88d7297cd20d4c2b13007cfae89f4dcd90177a0806a2ceb2095333b58f828c093b9bf63cd07e3d56a446fd12e755fd651211bc160948836939c17623b317b9e935307044bab2c11879a62288e7ecbbb97f10f52516f517b7b8e44cff5964fdfaf8044065056b48db13b1365004c336afa3535af1242c9b7271b8b1ba2213fcbb80926bcd394815cd7c27e3aeb2348dc45f5e06e32f5bd56d1c472f41b564ec0939cd012028412883cc098d086fd43858747b746be72b979d175f6a6447fc5908616dec7fc6c962e12e96e09bd068acd2fcf0ce1cc26d9f82b2b91bc9aafcbf8435011f73b6a8ea1bb2f3289b23236136b31656600762feff53e607df8cf3c9a7f257b212630c19f142e4cf5094250b629cabb145c77f1f14ad60ab7617078f810a766cfa341fb7c16086609bc0a768fb1cd782606f32b83a0a55d883269a05b80275612dc571cb993ea9e447b4d32570d412203ab4c8b050b63bb5ac0f8d6f4e9a1644e4b622587b2ae125c2093bd363493d58544d6303a0de17780fcd83e993aa83f4432274eee1e6333fcdc77bcfdea95b8b9ed787723e35b71f1dbe89ff1e3e6fde146c05b6fe9eae52b472624e412253a63e7fcf1b77dbff7509eec5a55501e222f66bd84d36663cd244fa1556bd34b4c9957a93a71e63961ffc7700c5545acdd3e79da41e1cfaca0956d4978222cda23a574d691dbb6c6bd083c70c2782c045bbbe0fcaa10efbc002af6832e3fa7dda0ec8ff6ded69302d55d5a62a7ec213f16ecc5e3304a83103d1c2b21e04e3f5f3730339a630a407e8cc6a5afd2f2ed78ff992035a3783a2708195a46e565a9113be8c228ccaae3510363b475732ad48fe8ff34801f4c35132359d4c5c5bff65141f4a8684d462cf5d97b44496440fff3f7a28d28bbaa8e6db2a6064cbe9fca4679afe8ca6dd27a25c56f3e58165040f19a0455199a0ece4583f060979427f2f3495f40a83bc6ee3eaadab18705d464662b8aba9c7aa2f29114f7acc247548a85bd44723064abeee18f7f558f6d0d74fa08103dd906124454745d23005c425b260b0034372123b642a0cbebbc1a0bcf0cfc3639876eceac5f9734057ff659cfd35b1a3eaa768b86d66244aabc23a45676a59d492614f1c0011c9253e53fc7bb3e20d303afdb5b6614dcc7bbf72a339e414672aac23c2e2983083f08dbc34e3452def00f402598b6aaa4f0d896d1648b1442621993b7d0c930560cb6152b9ce59f94356726816a224fca84da5dbde6675d20f546a3e4635e82ff9575cac9160e6819f", 0x2000, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002480), 0xce4, r4}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x3ff, r4, 0x0, 0x100000000000000}, 0x38) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$cuse(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$FUSE_NOTIFY_RESEND(r6, &(0x7f0000000100)={0x14}, 0x14) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x1c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004055}, 0x48000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) move_pages(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000012000/0x3000)=nil], 0x0, 0x0, 0x6) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000011f000/0x2000)=nil, 0x2000, &(0x7f0000000000)='\x00') 6.37159674s ago: executing program 2 (id=2118): r0 = socket(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) statx(0xffffffffffffffff, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000001000/0x3000)=nil, 0x3000, &(0x7f0000000100)='autofs\x00') r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x175a978679bbbe1d, 0x80a0a1240160183d) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x4) renameat(r2, &(0x7f0000000080)='./file0\x00', r3, &(0x7f0000000180)='./file1\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002780)=ANY=[@ANYBLOB="640000000206010800000000000000000100000a16000300686173683a6e65742c706f72742c6e6574000000050001000700000005000500020000000900020073797a310000000005000400000000001400078008000840000000f108000640"], 0x64}, 0x1, 0x0, 0x0, 0x2006c0c4}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x7}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf4}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000000406030000000000000000000000000005000100070000008b434b420557e3bc2663192cab715837"], 0x1c}}, 0x40000) mount(0x0, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000000)='tmpfs\x00', 0x2000008, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) mmap$snddsp(&(0x7f0000556000/0x2000)=nil, 0x2000, 0x1000000, 0x1010, r6, 0x3000) 5.694573967s ago: executing program 0 (id=2119): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x605, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x4}]}, 0x50}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x541b, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4000) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x4c, 0x9, 0x6, 0x101, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010102}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}]}]}, 0x4c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x23, 0x3, 0x0, 0x0, &(0x7f0000000000)) setresuid(0xee00, 0xee01, 0x0) ioctl$CDROM_GET_CAPABILITY(0xffffffffffffffff, 0x5331) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$sock_buf(r3, 0x6, 0x23, &(0x7f0000003340)=""/4096, &(0x7f0000000380)=0x1000) setreuid(0xee00, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x2, 0x20002) read(r4, &(0x7f00000000c0)=""/209, 0xd1) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r5, 0x4b72, &(0x7f0000000e00)={0x1, 0xfffffffc, 0x2000001a, 0x16, 0xc0, &(0x7f0000000a00)}) 5.275908722s ago: executing program 1 (id=2120): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x1a8043, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000010010401040000000000000000000000080500010003000000"], 0x1c}}, 0x24008880) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f0000000300)={0x80a0000, 0x3000}) r4 = eventfd(0xf9) ioctl$KVM_IOEVENTFD(r1, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0xfec00000, 0x0, r4}) r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x5, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000500a8000600200006400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r7, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000600)=ANY=[@ANYBLOB="00afed0a0c1229f6465758a3cd06d079dead6f6c469a36cd6af6af309c81c51fada453092a4a488534eb22dbc66553e5fdb34060d11618fdf620b38de6ac4996459e55aa59441eef63aeed750503c748fd8f0f5583515b7ac0ce2d351420ff5fb311a45504c3f70d636e30c507b572e1e82d97215cac4887ed6b1e78b1b7cf6f99ded4c30fc173bf53746273a9bf4465b208a569a7f6e57e4211645848eab692290338847f40b392cd4d6f339e800e1a84b7095293a683bb91629d4a1b0b086f0fd37da47fb26ac3ae1ff63394c7a5faea7db8f69b096205133bf5b7744c"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x100}, 0x10}, 0x94) sendmmsg$sock(r7, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}}], 0x1, 0x20000000) ioctl$vim2m_VIDIOC_STREAMON(r5, 0x40045612, &(0x7f0000000080)=0x2) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000080)="0000000000000001ff69000000000001000000c000000002000200861fa72e5b01504104bfeacdd5a9007d167c71e3b8a90400000000000000c833020a6da8881fb79e110483bfadf224a22c76ecc7a56843a85f7df51293f0eb84ef8f0f07342db3b0e5a5647b7bed1fbf069ca713670adf7d9fb6d2600fd9c1981fe9f095cfe9d2fe1e1e34f6096bf02543747b2c792890f07c0da0fa25e6101062e6c9176a70e41698814a213711764f88495994cfd8a57c1e13f6b5298e7ab3a2bfb58dde34d58536633c27882e51ced17d67999b00094461", 0xd4, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r8, 0x6, 0x5, 0x0, 0x0) recvmsg(r8, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x40000040) ioctl$VIDIOC_DECODER_CMD(r5, 0xc0485660, &(0x7f0000000380)={0x1, 0x2, @start={0x7, 0x1}}) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000002c0)={0xffffffffffffffff}, 0x111, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r9, &(0x7f0000000200)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @rand_addr=' \x01\x00'}, {0xa, 0xfffb, 0xfffffffd, @loopback}, r10}}, 0x48) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000000)={0xffff1000, 0x10000, 0x8}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000140)={0xffff0000, 0x106000}) mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, 0x0) 4.988684223s ago: executing program 2 (id=2121): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty}], 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x37}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000540)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) close(r1) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), 0xffffffffffffffff) pread64(0xffffffffffffffff, &(0x7f0000000040)=""/41, 0x29, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="57e016ebff476afb81e4bbb6da7dd21df61c700014000100ff010000000000000000"], 0x28}}, 0x20008000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x15, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="791010000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x28}, 0x94) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={0x18, 0x52, 0x201, 0x2, 0x0, {0x1c}, [@generic="de"]}, 0x18}, 0x1, 0x0, 0x0, 0x4040000}, 0x40044c4) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0x41000, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x8, 0x6, 0x40}, {0xffffffff, 0x10000, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0x99f8d1e5a676aae2, 0x3000, 0x8, 0x0, 0x8, 0xc4, 0x0, 0x0, 0x48, 0x3, 0x0, 0xfc}, {0x200000, 0xeee96000, 0xa, 0x0, 0x1, 0xa6, 0x9, 0x0, 0x8, 0xfe, 0x4, 0x4}, {0x6000, 0xffff1000, 0xe, 0x0, 0x0, 0x4, 0xfe, 0xfd, 0x0, 0x3c}, {0x8000000, 0x0, 0xb, 0x78, 0x5, 0x80, 0x0, 0x0, 0x3, 0xff, 0x1}, {0x0, 0xeeee0000, 0xa, 0x4, 0x0, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x8}, {0x81a0002, 0x6000, 0xc, 0x0, 0x0, 0x5, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x8cc}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x0, 0x114, 0x0, 0xf801, 0x0, [0x80000005, 0x0, 0x1]}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000061100800000000006301080000000000950000000000000002944ee61685f26594cf35daa444ab5feeb7505ab1905c309d516a577094f9fd798040d87575a335accd559a5a2dcffb6cb57a35819bfdd1ce90c4ad2ec096fd3a4c3e19c7bd8209d91350e3fa6c8df3fba6450e7d09"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf7}, 0x39) 4.810947294s ago: executing program 1 (id=2122): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20000890}, 0x40080) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) keyctl$clear(0x11, 0xfffffffffffffffd) listen(r0, 0xa) add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffe) listen(r0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, 0x0, 0x40, 0x1) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x50000, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r2, r2, 0x0, 0x200000) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x1002000ff) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x4903, 0x0) ioctl$CDROMVOLCTRL(r4, 0x31e, &(0x7f0000000040)={0xa1, 0xe, 0x44, 0x1}) ioctl$OCFS2_IOC_RESVSP64(r1, 0x402c582a, &(0x7f0000000180)={0x1, 0x1, 0x4, 0x1b, 0xe225, 0xc}) 4.790586787s ago: executing program 3 (id=2123): bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) r0 = openat$btrfs_control(0xffffff9c, &(0x7f0000000080), 0x640040, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000100)=0x0) io_uring_register$IORING_REGISTER_QUERY(0xffffffffffffffff, 0x23, &(0x7f00000033c0)=[{0x0, &(0x7f00000032c0)="2060a7bf1c", 0x2, 0x5}], 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000540), 0x40000, 0x0) getdents64(r2, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000702, r1, &(0x7f0000000480)) socket(0x1a, 0xa, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000018110000", @ANYRES32, @ANYRES64=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$DVB_DEMUX_DMX_QUERYBUF(r0, 0xc0186f3d, &(0x7f0000000000)={0xfff, 0x516, 0xffffcf13, 0x2, 0x0, 0x7}) r4 = syz_usb_connect(0x5, 0x58, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r4, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000001c0)={0x40, 0x8, 0x8, "fde61e0ee4a63b9e"}, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ff8000/0x1000)=nil) syz_usb_control_io(r4, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000001e00)={0x20, 0x14, 0x4, "348b35e5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$cdrom(0xffffff9c, &(0x7f0000000100), 0x8000, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) ioctl$CDROMREADAUDIO(r5, 0x530e, &(0x7f0000000180)={@lba, 0x1, 0x5, &(0x7f0000000140)=""/5}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3}, 0xc) 4.753722955s ago: executing program 0 (id=2124): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000002340)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000010000006000000000000850000006c0000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedc0790701757df37538e486dd63"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0xf0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4.636222013s ago: executing program 0 (id=2125): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x97ff, 0x0, 0x3, 0x1}, 0x8) 3.255927716s ago: executing program 2 (id=2126): ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000000)={0x80000000, 0x6, 0x3, 0x2, 0x9e, "3f3c5e0000ff775cfffffffff903e7ffffff00", 0x401, 0x91}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000003f00)=[{&(0x7f0000000000)={0x14, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x2}]}, 0x14}], 0x1}, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000240), 0x6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc044560f, &(0x7f0000000380)=@mmap={0x0, 0x1, 0x4, 0x2, 0x0, {}, {0x0, 0x2, 0x0, 0x0, 0x4, 0x0, "37bb54f0"}}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000100)=0x1) r2 = epoll_create1(0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0xd, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000d40)=ANY=[@ANYBLOB="030000000a004e230000000cff010000000000000000000000000001f8ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x190) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000180)={0x3, {{0xa, 0x4e20, 0xa42, @mcast1, 0xbf9}}, {{0xa, 0x4e24, 0xc7e2, @empty, 0xfffffe01}}}, 0x108) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000b700", @ANYRES16=0x0, @ANYBLOB="000328bd7000fddbdf25380000000c0058004a00000000000000"], 0x20}}, 0x20000000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000300)={0xe000000c}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x1}, 0x1c) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_80211_inject_frame(&(0x7f0000000200)=@broadcast, &(0x7f0000000340)=ANY=[@ANYBLOB="5809040050505050505008021100000008021100000178005a0e3269ef10d89883c73a681f906df5132399625b45678683ecd90140d60631a2e1de82aea74420925b3ecc7036281514157658997a0d49d2ccdb2c2a0199eac8bb2681222991cfd939737569cd7e4a692fb61d23cc96c08a35"], 0x80) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x20, r7, 0x1, 0x70bd2b, 0x1000, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x122}]}, 0x20}}, 0x400400c) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4, @multicast1}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000180)="5566fb8aa6", 0x5}, {&(0x7f0000000100)="ff324d434ec75697a84d04", 0xb}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403"], 0x10b8}, 0xff00) ioctl(r5, 0x890c, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') 3.069125458s ago: executing program 0 (id=2127): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x68, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x3c, 0x30, 0x24, "", [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x7, 0x1, 0x2, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x0, 0x9, 0xc0}}}}}]}}]}}, &(0x7f0000000900)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x80, 0x2, 0x80, 0x20, 0x4}, 0x169, &(0x7f0000000200)={0x5, 0xf, 0x169, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x5a, 0xa, 0x8001, 0x8}, @wireless={0xb, 0x10, 0x1, 0x2, 0x1, 0x6, 0x5, 0x1ff, 0x7}, @generic={0xce, 0x10, 0xb, "78229d7ab68f36dad30153f3b099a17211ccf5775b73588ee15ddcacc31194d9baffd9234cf3e619244ffdbb925bcf46acc33648abe182b87ff59cc932ce2692542e4bc2670ea1f65ffeb5b347779b6cee31fb0b0274eaf54a5b1172c6aa1ad085436d9adbd796ec7748ad5b8bcbbeddc71fc185261f94e85d646fcb52f9a8f4c2f454f0ee846c9c4430b12031260480bfdd0ccd45e6105231889120f6ebb737c1bf455df9ed42a85f49eb0c716fbec247cdc75eb5ec29fe167b78a58eb5ffc663adc5942ef136a1399f30"}, @generic={0x6c, 0x10, 0x3, "db954eedf6d68586f732c1ecfb0a21fbe635c2a2e8fdb8c65e958cb18eac309318077578ed2d47aa1c90786eca9d6dd77eacb57bd66501763206fa9ff852b673855689d722ff18a022b8b48da8129627fa2e8420cb6fd98b0e74b918706b6b97194086cca236369ce1"}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "87359476e4fd1b60f174226ae5cf1935"}]}, 0x9, [{0x64, &(0x7f0000000380)=@string={0x64, 0x3, "090ffefa5e6647b7a2ee5c47789779321e665ef2b2f3dd4aa78560b13a6415ee71dd8c79db7f274f5f709556dd5531eb9b47e35c1ff806e34891f1fa89a535ff4fbbe9fb61c35c9aaed2c38d61199377c872e1079b958273c7c20a4f2475d922c5e6"}}, {0x56, &(0x7f0000000400)=@string={0x56, 0x3, "fc89a7cb06a6f4007f4fbd7f1c8474d3471d4e5c91c414b2613ac7d1385a91d63881d284c638b803a37a1dfa24d32392d63dac3372c31d39fe1ee4e37233e44c0f9e82bc68498ad16197fb3f81ffd55a4a3056c8"}}, {0x37, &(0x7f0000000480)=@string={0x37, 0x3, "dd9467be284e30d91e8dca7e92e7ddb0b531b65f16354ae39a1c6d90291d363c55196a2a183cdf322c51b6aef341470d9d709404f9"}}, {0xe2, &(0x7f00000004c0)=@string={0xe2, 0x3, "c0fe803cc97c1263d14edb9a8c824ad0c4ea9308e2eafebaa9a06d70333c2ffd62b5d659f456dee178f2cc6df2b76df47946cb5eb412a904385bc088435e980b52170e5c4bcdb5ce160aee732652a6b0a092f1e9a3ebb2963384684ff458a6b046ae82ab74a4ea8e1cfcd721d8f00da39aa13b9bbe877d51b11d10c6874581afc75fef0358704aa2b62710466927380cd2c92d084563826bedd5b91a6ee205c6b894186a4095c37108b25c95e2d734369a751a2267240b8f53a2347ab1146d546fe6665f06490726b03f47638320de5f47ffd42b135ed32caa3dd353e26fb4b4"}}, {0x58, &(0x7f00000005c0)=@string={0x58, 0x3, "64a7e8f2a25b215645c9d0de107827d6fd9aeba61bb9c46c724a33c62f9b2189f1292de903ce974a6588446d3bd4e63e3faf185d70462d510008a05a9c0c9320820cb76e37497f065a375d81828046338064539b9063"}}, {0x7d, &(0x7f0000000640)=@string={0x7d, 0x3, "7b45e8029551f319337c6c46abd7b92040e68ef35a662ea6423974d44240875969d57388f4adfab19191ebaf07974602f8be45fcde920b4881cfefb56b7f766d55d4055089306409cb8d9d3816e6b51605a5b520eff4b82efed520172ab1b929075c6e6308941f6c674f9815b41db5c95319aeabe10807a478a447"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0xc09}}, {0xc9, &(0x7f0000000700)=@string={0xc9, 0x3, "0a69c25309b8773abc395b15da67de5607864234b41aaaa06e3bf00c13868d4d25a46505cea98b6341397a146f780be681a20cc6c5edf793f2fd42a22eb125f4e17e5dd90006d40af5069b10ba6d8320ed69aee8d828e27bbc51785faf02851bd416d785bf7707708dd31fec83ea43d6b4c217846c9362a176a4eeab9fb782889ace7eb3cd426906db875c6e86300f32c2881d2d59fa50438f791ec123576f6dc9fff41ed401568d114b43fdde5572f367a452fe011eec3694a8b8ce183a53bd73843a4e3ce16c"}}, {0xc3, &(0x7f0000000800)=@string={0xc3, 0x3, "33ba6333349d648b15e096aef2072e140200eea4c2ce38ed494769d06159bcf846114eba2b52f0cf9e8d6d5bcefb77d6c52250cb9723a050c520cf154e34e0c15aaa7bc27fbc87d31a90fdf8ea84994a1833d728f8bdae537b1d42e2ad41041d1559ea0fb813791e1f3d8c912af9cd927eb00dcf588a54685ba8c52cca8c735dc495d6308335209254b11b415e64ec026fc0b78a469da8f54b5b49c0da03504c8ac26058487e54abd9a1e6bc24698a9354ef4eebbea76572a6c2d92c7154b466d2"}}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x8, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file1\x00', 0x0) read$char_usb(r1, &(0x7f0000000100)=""/178, 0xb2) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x5, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) 2.277663402s ago: executing program 1 (id=2128): ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000000)={0x80000000, 0x6, 0x3, 0x2, 0x9e, "3f3c5e0000ff775cfffffffff903e7ffffff00", 0x401, 0x91}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000003f00)=[{&(0x7f0000000000)={0x14, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x2}]}, 0x14}], 0x1}, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000240), 0x6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc044560f, &(0x7f0000000380)=@mmap={0x0, 0x1, 0x4, 0x2, 0x0, {}, {0x0, 0x2, 0x0, 0x0, 0x4, 0x0, "37bb54f0"}}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000100)=0x1) r2 = epoll_create1(0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000d40)=ANY=[@ANYBLOB="030000000a004e230000000cff010000000000000000000000000001f8ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x190) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000180)={0x3, {{0xa, 0x4e20, 0xa42, @mcast1, 0xbf9}}, {{0xa, 0x4e24, 0xc7e2, @empty, 0xfffffe01}}}, 0x108) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000b700", @ANYRES16=0x0, @ANYBLOB="000328bd7000fddbdf25380000000c0058004a00000000000000"], 0x20}}, 0x20000000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000300)={0xe000000c}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x1}, 0x1c) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_80211_inject_frame(&(0x7f0000000200)=@broadcast, &(0x7f0000000340)=ANY=[@ANYBLOB="5809040050505050505008021100000008021100000178005a0e3269ef10d89883c73a681f906df5132399625b45678683ecd90140d60631a2e1de82aea74420925b3ecc7036281514157658997a0d49d2ccdb2c2a0199eac8bb2681222991cfd939737569cd7e4a692fb61d23cc96c08a35"], 0x80) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x20, r7, 0x1, 0x70bd2b, 0x1000, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x122}]}, 0x20}}, 0x400400c) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4, @multicast1}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000180)="5566fb8aa6", 0x5}, {&(0x7f0000000100)="ff324d434ec75697a84d04", 0xb}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403"], 0x10b8}, 0xff00) ioctl(r5, 0x890c, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') 2.070746448s ago: executing program 2 (id=2129): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0xe0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20000890}, 0x40080) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) keyctl$clear(0x11, 0xfffffffffffffffd) listen(r0, 0xa) add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffe) listen(r0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, 0x0, 0x40, 0x1) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x50000, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r2, r2, 0x0, 0x200000) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x1002000ff) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x4903, 0x0) ioctl$CDROMVOLCTRL(r4, 0x31e, &(0x7f0000000040)={0xa1, 0xe, 0x44, 0x1}) ioctl$OCFS2_IOC_RESVSP64(r1, 0x402c582a, &(0x7f0000000180)={0x1, 0x1, 0x4, 0x1b, 0xe225, 0xc}) 1.60820599s ago: executing program 3 (id=2130): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/keys\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="0000023f320104"], 0x138) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) r3 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r3, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r3, 0x2) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48c0}, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x44}, 0x1, 0x1000000, 0x0, 0x24004800}, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_MEM_REGION(r4, 0x22, &(0x7f0000000400)={&(0x7f00000003c0)={&(0x7f00000002c0)="669bfdcefc287fada304ce4b5bc1fdf9ef3eaca8a6e287af19f3364a929d53890af15cfea6769ad6da4c91ef36019ce8c199e7a0f7f87413ec229cae4f4267604d8c06c0eda40358160d3839b3f26d4471c6efaebdecc636c2f887512dcbc55c5778f2b1e5d8dcfd1ba65aed845954c29612c08594c6635bb91677ad5a10fe97e6a0cb55a74b152efd515963c6ebe9dba91efe6320b8cadf7a12c1e96dfe03cbdc3e9ed8238b73dfad43a4ab18dadb147b2393a3c1fb0dac4fca171a4e16331ba5ba5ec9eb3ca4666e63071dba2a7b2f2fe7bb0825e3dd4a4f6132d233d96d", 0xdf, 0x1, 0x8, 0x5}}, 0x1) write(r4, &(0x7f0000000180)='100', 0x3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r5) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)=ANY=[@ANYBLOB="48bd0000", @ANYRES16=r6, @ANYBLOB="01000000000000000000010000000400048008000200010000000800010000000000040008801c000c8014000b8008000a008fee0000080009000000000004000b80"], 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) mkdirat(r4, &(0x7f0000000440)='.\x00', 0xc8) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x0, 0x310) write(r7, &(0x7f0000000280)='0', 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0a00000004000000060000000b"], 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380), 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1f0000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000200"/28], 0x50) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r8 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x2ed1, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 843.838868ms ago: executing program 3 (id=2131): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0xb, 0xfffffffffffffffe}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0xc0, 0x0, &(0x7f00000005c0)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000280)={@fda={0x66646185, 0x6, 0x1, 0x10}, @fda={0x66646185, 0x8, 0x0, 0x19}, @fd}, &(0x7f0000000300)={0x0, 0x1c, 0x38}}, 0x40}, @request_death={0x400c630e, 0x2}, @register_looper, @exit_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0xffffffffffffff54, &(0x7f0000000500)={@fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x1b}}, &(0x7f0000000580)={0x0, 0x18, 0x30}}, 0x400}, @clear_death={0x400c630f, 0x2}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) clock_nanosleep(0x9, 0x0, &(0x7f0000000140)={0x77359400}, &(0x7f0000000040)) rt_sigqueueinfo(0x0, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xac9a}) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r8 = userfaultfd(0x80800) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_CONTINUE(r8, 0xc020aa07, &(0x7f0000000380)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) setns(0xc9, 0x0) r9 = gettid() r10 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0x50b, 0x8, 0x0, {0x60, 0x0, 0x0, r11, {0x0, 0x8}, {0xffff, 0xffff}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x18, 0x2, {{0x200, 0x5, 0x0, 0x0, 0xf407}, 0xfffffffb, 0x1, 0x0, 0x4, 0x7, 0x4, 0x40, 0x9, 0x0, 0x1ff, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0xa23, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, r9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008880}, 0x20000084) mount(&(0x7f00000006c0)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0)='minix\x00', 0x204001, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) 544.188697ms ago: executing program 1 (id=2132): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x605, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x4}]}, 0x50}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x541b, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4000) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x4c, 0x9, 0x6, 0x101, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010102}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}]}]}, 0x4c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x23, 0x3, 0x0, 0x0, &(0x7f0000000000)) setresuid(0xee00, 0xee01, 0x0) ioctl$CDROM_GET_CAPABILITY(0xffffffffffffffff, 0x5331) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$sock_buf(r3, 0x6, 0x23, &(0x7f0000003340)=""/4096, &(0x7f0000000380)=0x1000) setreuid(0xee00, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x2, 0x20002) read(r4, &(0x7f00000000c0)=""/209, 0xd1) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r5, 0x4b72, &(0x7f0000000e00)={0x1, 0xfffffffc, 0x2000001a, 0x16, 0xc0, &(0x7f0000000a00)}) 347.375337ms ago: executing program 2 (id=2133): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0xb, 0xfffffffffffffffe}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0xc0, 0x0, &(0x7f00000005c0)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000280)={@fda={0x66646185, 0x6, 0x1, 0x10}, @fda={0x66646185, 0x8, 0x0, 0x19}, @fd}, &(0x7f0000000300)={0x0, 0x1c, 0x38}}, 0x40}, @request_death={0x400c630e, 0x2}, @register_looper, @exit_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0xffffffffffffff54, &(0x7f0000000500)={@fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x1b}}, &(0x7f0000000580)={0x0, 0x18, 0x30}}, 0x400}, @clear_death={0x400c630f, 0x2}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) r7 = gettid() rt_sigqueueinfo(r7, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xac9a}) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r9 = userfaultfd(0x80800) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_CONTINUE(r9, 0xc020aa07, &(0x7f0000000380)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) setns(0xc9, 0x0) r10 = gettid() r11 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0x50b, 0x8, 0x0, {0x60, 0x0, 0x0, r12, {0x0, 0x8}, {0xffff, 0xffff}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x18, 0x2, {{0x200, 0x5, 0x0, 0x0, 0xf407}, 0xfffffffb, 0x1, 0x0, 0x4, 0x7, 0x4, 0x40, 0x9, 0x0, 0x1ff, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0xa23, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, r10}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008880}, 0x20000084) mount(&(0x7f00000006c0)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0)='minix\x00', 0x204001, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) 230.849022ms ago: executing program 1 (id=2134): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000340), r0) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000e00)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1400200}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000e40)={0x9b8, r6, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_PEERS={0x34, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PEERS={0x920, 0x8, 0x0, 0x1, [{0x47c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xf}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xf4}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5000}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ALLOWEDIPS={0x400, 0x9, 0x0, 0x1, [{0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xe}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x4}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x26}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x23}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24}]}, {0x360, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x330, 0x9, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x26}}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}, {0x40, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @multicast1}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x26eeeaea, @private0, 0x5}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}, {0x54, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3ab}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x10000, @private1, 0xd}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}]}, {0x18, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @empty}}]}, {0x44, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}]}, {0x44, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x3, @empty, 0x9}}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_FLAGS={0x8, 0x3, 0xe}]}]}, @WGDEVICE_A_IFINDEX={0x8}]}, 0x9b8}, 0x1, 0x0, 0x0, 0x4000004}, 0x40000) read$FUSE(r5, 0x0, 0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x8084) syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/12, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 0 (id=2135): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x4c, 0x0, "01deaba05ccc4fa00711be66bd584ecd190428efc9e569f4b222158b227692cebc00924f2deea371bafa061b8f2959b4b696b22e4881f40a0d8f4c2fdea78893bc2c160df3e41db4153cfd9221d01c79"}, 0xd8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(0x0, r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x80) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0xffffffff}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002940), 0x40000000000017d, 0x888) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_opts(r4, 0x29, 0x39, &(0x7f0000000280)=ANY=[@ANYBLOB="1b0204"], 0x18) r5 = userfaultfd(0x80801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000000)={0x2, 0x0, 0xffffe000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_RUN(r8, 0xae80, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x400c0, &(0x7f0000000040)={0xa, 0x4e24, 0xffffff7c, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x9}, 0x1c) kernel console output (not intermixed with test programs): up backlog [ 391.828584][T11594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.238532][ T34] net_ratelimit: 3 callbacks suppressed [ 393.238552][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.038075][T11594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.267833][T10705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.988670][ T3269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.148086][T11594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.308277][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.478071][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.247876][T11594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.348103][T10705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.347951][T11594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.248081][T11691] net_ratelimit: 2 callbacks suppressed [ 398.248096][T11691] Set syz0 is full, maxelem 65536 reached [ 398.327627][ T847] usb 8-1: new full-speed USB device number 15 using dummy_hcd [ 398.367730][ T5839] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 398.422783][T11701] netlink: 'syz.2.1657': attribute type 1 has an invalid length. [ 398.425258][T11701] netlink: 756 bytes leftover after parsing attributes in process `syz.2.1657'. [ 398.428409][T10705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.448603][T11594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.480419][T11704] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1658'. [ 398.489758][ T847] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1951, setting to 1023 [ 398.493589][ T847] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4 [ 398.499123][ T847] usb 8-1: New USB device found, idVendor=0499, idProduct=2001, bcdDevice= 0.40 [ 398.502088][ T847] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.505299][ T847] usb 8-1: Product: syz [ 398.506668][ T847] usb 8-1: Manufacturer: syz [ 398.508422][ T847] usb 8-1: SerialNumber: syz [ 398.518026][ T5839] usb 6-1: Using ep0 maxpacket: 32 [ 398.521343][ T5839] usb 6-1: unable to get BOS descriptor or descriptor too short [ 398.528707][ T5839] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 398.531339][ T5839] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 398.533905][ T5839] usb 6-1: config 14 has no interface number 0 [ 398.535853][ T5839] usb 6-1: config 14 has no interface number 1 [ 398.541657][ T5839] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 398.545278][ T5839] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 398.549203][ T5839] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 398.553057][ T5839] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 398.556645][ T5839] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 398.560541][ T5839] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 398.564730][ T5839] usb 6-1: config 14 interface 57 has no altsetting 0 [ 398.566877][ T5839] usb 6-1: config 14 interface 228 has no altsetting 0 [ 398.573106][ T5839] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 398.576347][ T5839] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.579268][ T5839] usb 6-1: Product: syz [ 398.580764][ T5839] usb 6-1: Manufacturer: syz [ 398.582289][ T5839] usb 6-1: SerialNumber: syz [ 398.872930][T11695] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 398.877475][T11695] qnx6: wrong signature (magic) in superblock #1. [ 398.886948][T11695] qnx6: unable to read the first superblock [ 399.011602][ T5839] legousbtower 6-1:14.57: interrupt endpoints not found [ 399.444730][ T5839] legousbtower 6-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 399.449671][ T5839] legousbtower 6-1:14.228: LEGO USB Tower #-159 now attached to major 180 minor 1 [ 399.469467][T10705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.588821][T11594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.284945][T11708] 9p: p9: multiple sources not supported [ 400.558410][T10705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.600707][ T847] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 400.649428][ T847] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 400.728640][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.732048][ T847] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 400.736449][ T847] snd-usb-audio 8-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 400.774562][ T847] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 401.077924][ T3269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.249692][ T847] snd-usb-audio 8-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 401.266344][ T847] usb 8-1: USB disconnect, device number 15 [ 401.282163][T11697] udevd[11697]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.2/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 401.411510][T11694] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 401.415585][ T5832] usb 6-1: USB disconnect, device number 12 [ 401.421695][ T5832] legousbtower 6-1:14.228: LEGO USB Tower #-159 now disconnected [ 401.632603][T10705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.836683][ T5832] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 401.844544][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.871501][T11720] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 401.989449][T11725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 402.005251][ T5832] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 402.011592][ T5832] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.021934][ T5832] usb 6-1: Product: syz [ 402.023598][ T5832] usb 6-1: Manufacturer: syz [ 402.029323][ T5832] usb 6-1: SerialNumber: syz [ 402.045935][T11725] nbd: must specify at least one socket [ 402.368255][T11712] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 402.473714][T11730] MINIX-fs: blocksize too small for device [ 402.514107][T11730] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 402.551696][T11715] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1661'. [ 402.558222][T11736] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 402.560950][T11736] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 402.571770][T11736] vhci_hcd vhci_hcd.0: Device attached [ 402.634438][ T5832] rtl8150 6-1:1.0: couldn't reset the device [ 402.637089][ T5832] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 402.676690][ T5832] usb 6-1: USB disconnect, device number 13 [ 402.827710][T10705] usb 43-1: new high-speed USB device number 3 using vhci_hcd [ 403.018366][ T3269] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 403.147748][ C2] bridge0: port 3(syz_tun) entered learning state [ 403.167771][ T3269] usb 7-1: Using ep0 maxpacket: 8 [ 403.172063][ T3269] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 403.175673][ T3269] usb 7-1: config 0 has no interface number 0 [ 403.180273][ T3269] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 403.184879][ T3269] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 403.188976][ T3269] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 403.192501][ T3269] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 403.196594][ T3269] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 403.199934][ T3269] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.204371][ T3269] usb 7-1: config 0 descriptor?? [ 403.209345][ T3269] ldusb 7-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 403.578250][T11737] vhci_hcd: connection closed [ 403.586636][ T12] vhci_hcd vhci_hcd.3: stop threads [ 403.600535][ T12] vhci_hcd vhci_hcd.3: release socket [ 403.620266][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 403.717749][ T5853] net_ratelimit: 2 callbacks suppressed [ 403.717764][ T5853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.107981][ T3269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.172493][T11754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.177518][T11754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.278581][T11594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.323760][T11756] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality. [ 404.748275][ T5853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.067898][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.071103][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.397984][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.460074][ T3269] usb 7-1: USB disconnect, device number 15 [ 405.468613][ T3269] ldusb 7-1:0.55: LD USB Device #1 now disconnected [ 405.801272][T11774] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 405.808294][ T5853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.926974][T11776] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 405.962223][T11776] nbd: must specify at least one socket [ 406.607900][T11594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.831628][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.563536][T11594] syzkaller0: tun_net_xmit 76 [ 408.567922][T11594] syzkaller0: tun_net_xmit 48 [ 408.597826][ T3269] syzkaller0: tun_net_xmit 76 [ 408.628341][T11803] syzkaller0: create flow: hash 2581440744 index 1 [ 408.758578][ T3269] syzkaller0: tun_net_xmit 76 [ 408.784273][T11807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.788536][T11807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.809858][T10705] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 408.869734][T11813] netlink: 'syz.2.1685': attribute type 10 has an invalid length. [ 408.889923][T11802] syzkaller0: delete flow: hash 2581440744 index 1 [ 408.900582][T11806] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 408.908404][ T5853] net_ratelimit: 3 callbacks suppressed [ 408.908415][ T5853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.040319][T11594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.257959][ T5839] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 409.419825][ T5839] usb 6-1: Using ep0 maxpacket: 32 [ 409.431532][ T5839] usb 6-1: unable to get BOS descriptor or descriptor too short [ 409.443396][ T5839] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 409.452024][ T5839] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 409.465378][ T5839] usb 6-1: config 14 has no interface number 0 [ 409.475296][ T5839] usb 6-1: config 14 has no interface number 1 [ 409.488795][ T5839] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 409.502053][ T5839] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 409.510181][ T5839] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 409.514138][ T5839] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 409.517678][ T5839] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 409.521222][ T5839] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 409.525296][ T5839] usb 6-1: config 14 interface 57 has no altsetting 0 [ 409.527390][ T5839] usb 6-1: config 14 interface 228 has no altsetting 0 [ 409.552801][ T5839] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 409.555778][ T5839] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.558305][ T5839] usb 6-1: Product: syz [ 409.559729][ T5839] usb 6-1: Manufacturer: syz [ 409.561131][ T5839] usb 6-1: SerialNumber: syz [ 409.964260][T10705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.981607][ T5839] legousbtower 6-1:14.57: interrupt endpoints not found [ 410.140454][T11594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.356985][T11827] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3780442281 (7560884562 ns) > initial count (4669583980 ns). Using initial count to start timer. [ 410.384332][ T5839] legousbtower 6-1:14.228: get version request failed: -121 [ 410.394277][ T5839] legousbtower 6-1:14.228: probe with driver legousbtower failed with error -121 [ 410.494287][T11830] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 410.516792][T11830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.520616][T11830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.705256][T11815] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 410.773094][ T5839] usb 6-1: USB disconnect, device number 14 [ 410.908150][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.988078][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.149677][T11833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.153223][T11833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.155986][T11833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.538188][T11809] batman_adv: batadv0: Adding interface: dummy0 [ 411.540429][T11809] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.548632][T11809] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 411.637175][T11846] netlink: 'syz.3.1695': attribute type 1 has an invalid length. [ 411.648007][T11846] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 412.292836][T11853] tc action pedit 'at' offset 5 out of bounds [ 412.298281][T11853] tc action pedit 'at' offset 5 out of bounds [ 412.301334][T11853] tc action pedit 'at' offset 5 out of bounds [ 412.304255][T11853] tc action pedit 'at' offset 5 out of bounds [ 412.306959][T11853] tc action pedit 'at' offset 5 out of bounds [ 412.309883][T11853] tc action pedit 'at' offset 5 out of bounds [ 412.312823][T11853] tc action pedit 'at' offset 5 out of bounds [ 412.315658][T11853] tc action pedit 'at' offset 5 out of bounds [ 412.318363][T11853] tc action pedit 'at' offset 5 out of bounds [ 412.320853][T11853] tc action pedit 'at' offset 5 out of bounds [ 412.457704][ T10] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 412.600207][T11862] 9p: Bad value for 'wfdno' [ 412.608389][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 412.614163][ T10] usb 8-1: unable to get BOS descriptor or descriptor too short [ 412.619421][ T10] usb 8-1: config 14 has an invalid interface number: 57 but max is 1 [ 412.624365][ T10] usb 8-1: config 14 has an invalid interface number: 228 but max is 1 [ 412.628862][ T10] usb 8-1: config 14 has no interface number 0 [ 412.631969][ T10] usb 8-1: config 14 has no interface number 1 [ 412.635404][ T10] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 412.643219][ T10] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 412.648336][ T10] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 412.653438][ T10] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 412.658625][ T10] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 412.660316][T11862] exFAT-fs (nbd0): mounting with "discard" option, but the device does not support discard [ 412.662695][ T10] usb 8-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 412.662715][ T10] usb 8-1: config 14 interface 57 has no altsetting 0 [ 412.662725][ T10] usb 8-1: config 14 interface 228 has no altsetting 0 [ 412.664713][ T10] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 412.682051][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.685266][ T10] usb 8-1: Product: syz [ 412.686676][ T10] usb 8-1: Manufacturer: syz [ 412.688940][ T10] usb 8-1: SerialNumber: syz [ 412.703829][T11862] exFAT-fs (nbd0): unable to read boot sector [ 412.707746][T11862] exFAT-fs (nbd0): failed to read boot sector [ 412.709674][T11862] exFAT-fs (nbd0): failed to recognize exfat type [ 413.118420][ T10] legousbtower 8-1:14.57: interrupt endpoints not found [ 413.358824][T11856] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 413.519215][ T10] legousbtower 8-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 413.523234][ T10] legousbtower 8-1:14.228: LEGO USB Tower #-159 now attached to major 180 minor 1 [ 413.772534][T11879] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 413.775449][T11879] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 413.787930][T11879] vhci_hcd vhci_hcd.0: Device attached [ 413.851365][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.854842][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.874762][T11883] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 413.929028][T11883] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 413.948114][ T5839] net_ratelimit: 9 callbacks suppressed [ 413.948132][ T5839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.057856][ T10] usb 40-1: SetAddress Request (2) to port 0 [ 414.060695][ T10] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 414.376420][T10705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.448937][T11880] vhci_hcd: connection reset by peer [ 414.453051][T11594] vhci_hcd vhci_hcd.1: stop threads [ 414.454854][T11594] vhci_hcd vhci_hcd.1: release socket [ 414.456822][T11594] vhci_hcd vhci_hcd.1: disconnect device [ 414.627807][T11594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.668230][T11479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.803566][T11890] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 414.891552][T11893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 414.902275][T11893] nbd: must specify at least one socket [ 415.270464][T11850] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 415.274167][ T5839] usb 8-1: USB disconnect, device number 16 [ 415.286067][ T5839] legousbtower 8-1:14.228: LEGO USB Tower #-159 now disconnected [ 415.462561][T11903] dvmrp0: entered allmulticast mode [ 415.562267][T10705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.717332][ T5839] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 415.798288][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.867690][ T5839] usb 8-1: Using ep0 maxpacket: 32 [ 415.870980][ T5839] usb 8-1: unable to get BOS descriptor or descriptor too short [ 415.875309][ T5839] usb 8-1: config 14 has an invalid interface number: 57 but max is 1 [ 415.884230][ T5839] usb 8-1: config 14 has an invalid interface number: 228 but max is 1 [ 415.893704][ T5839] usb 8-1: config 14 has no interface number 0 [ 415.895686][ T5839] usb 8-1: config 14 has no interface number 1 [ 415.907689][ T5839] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 415.911288][ T5839] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 415.918731][ T5839] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 415.927953][ T5839] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 415.935487][ T5839] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 415.941793][ T5839] usb 8-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 415.958008][ T5839] usb 8-1: config 14 interface 57 has no altsetting 0 [ 415.963428][ T5839] usb 8-1: config 14 interface 228 has no altsetting 0 [ 415.969838][ T5839] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 415.973061][ T5839] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.975561][ T5839] usb 8-1: Product: syz [ 415.979635][ T5839] usb 8-1: Manufacturer: syz [ 415.983226][ T5839] usb 8-1: SerialNumber: syz [ 416.428820][ T5839] legousbtower 8-1:14.57: interrupt endpoints not found [ 416.599957][ T5853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.689256][T11905] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 416.696104][ T5839] legousbtower 8-1:14.228: get version request failed: -71 [ 416.707144][ T5839] legousbtower 8-1:14.228: probe with driver legousbtower failed with error -71 [ 416.717837][ T5839] usb 8-1: USB disconnect, device number 17 [ 416.976003][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.988882][ T5839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.858268][ T5853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.400731][T11945] binder: 11944:11945 ioctl c0186405 800028c0 returned -22 [ 418.810652][T11952] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1719'. [ 418.924117][T11950] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 419.136931][T11953] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 419.152117][ T10] usb 40-1: device descriptor read/8, error -110 [ 419.238194][T11953] nbd: must specify at least one socket [ 419.538874][ T10] usb usb40-port1: attempt power cycle [ 419.558038][ T13] net_ratelimit: 2 callbacks suppressed [ 419.558052][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.952924][ T5853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.028707][ T5839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.102349][ T10] usb usb40-port1: unable to enumerate USB device [ 420.681662][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.860955][ T10] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 420.991305][ T5853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.009079][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 421.019635][ T10] usb 8-1: unable to get BOS descriptor or descriptor too short [ 421.029687][ T10] usb 8-1: config 14 has an invalid interface number: 57 but max is 1 [ 421.034219][ T10] usb 8-1: config 14 has an invalid interface number: 228 but max is 1 [ 421.039294][ T10] usb 8-1: config 14 has no interface number 0 [ 421.041275][ T10] usb 8-1: config 14 has no interface number 1 [ 421.045587][ T10] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 421.052326][ T10] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 421.058383][ T10] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 421.064286][ T10] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 421.072193][ T10] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 421.077773][ T10] usb 8-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 421.086514][ T10] usb 8-1: config 14 interface 57 has no altsetting 0 [ 421.093482][ T10] usb 8-1: config 14 interface 228 has no altsetting 0 [ 421.101313][ T10] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 421.106128][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.112794][ T10] usb 8-1: Product: syz [ 421.114208][ T10] usb 8-1: Manufacturer: syz [ 421.116243][ T10] usb 8-1: SerialNumber: syz [ 421.393626][T11975] Set syz0 is full, maxelem 65536 reached [ 421.539403][ T10] legousbtower 8-1:14.57: interrupt endpoints not found [ 421.779610][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.892952][T11968] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 421.926807][ T10] legousbtower 8-1:14.228: get version request failed: -71 [ 421.937172][ T10] legousbtower 8-1:14.228: probe with driver legousbtower failed with error -71 [ 421.966863][ T10] usb 8-1: USB disconnect, device number 18 [ 422.038016][ T5853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.061334][T11984] Set syz0 is full, maxelem 65536 reached [ 422.979843][T11594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.593832][T12015] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 423.604396][T12011] MINIX-fs: blocksize too small for device [ 423.648383][T12011] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 423.694693][T12016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 423.703708][T12016] nbd: must specify at least one socket [ 424.099463][T11479] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 424.179336][T12035] comedi: valid board names for 8255 driver are: [ 424.184575][T12035] 8255 [ 424.185789][T12035] comedi: valid board names for vmk80xx driver are: [ 424.195236][T12035] vmk80xx [ 424.196647][T12035] comedi: valid board names for usbduxsigma driver are: [ 424.199781][T12035] usbduxsigma [ 424.201217][T12035] comedi: valid board names for usbduxfast driver are: [ 424.204281][T12035] usbduxfast [ 424.205439][T12035] comedi: valid board names for usbdux driver are: [ 424.207887][T12035] usbdux [ 424.209112][T12035] comedi: valid board names for ni6501 driver are: [ 424.211700][T12035] ni6501 [ 424.212916][T12035] comedi: valid board names for dt9812 driver are: [ 424.215678][T12035] dt9812 [ 424.216791][T12035] comedi: valid board names for ni_labpc_cs driver are: [ 424.219375][T12035] ni_labpc_cs [ 424.220725][T12035] comedi: valid board names for ni_daq_700 driver are: [ 424.223551][T12035] ni_daq_700 [ 424.224786][T12035] comedi: valid board names for labpc_pci driver are: [ 424.227339][T12035] labpc_pci [ 424.228806][T12035] comedi: valid board names for adl_pci9118 driver are: [ 424.231850][T12035] pci9118dg [ 424.233321][T12035] pci9118hg [ 424.234802][T12035] pci9118hr [ 424.236190][T12035] comedi: valid board names for 8255_pci driver are: [ 424.238894][T12035] 8255_pci [ 424.240309][T12035] comedi: valid board names for s526 driver are: [ 424.242958][T12035] s526 [ 424.244243][T12035] comedi: valid board names for multiq3 driver are: [ 424.246991][T12035] multiq3 [ 424.248383][T12035] comedi: valid board names for pcmuio driver are: [ 424.251184][T12035] pcmuio48 [ 424.252681][T12035] pcmuio96 [ 424.254090][T12035] comedi: valid board names for pcmmio driver are: [ 424.256823][T12035] pcmmio [ 424.258163][T12035] comedi: valid board names for pcmda12 driver are: [ 424.260849][T12035] pcmda12 [ 424.262309][T12035] comedi: valid board names for pcmad driver are: [ 424.264986][T12035] pcmad12 [ 424.266292][T12035] pcmad16 [ 424.267945][T12035] comedi: valid board names for ni_labpc driver are: [ 424.270759][T12035] lab-pc-1200 [ 424.272319][T12035] lab-pc-1200ai [ 424.273970][T12035] lab-pc+ [ 424.275326][T12035] comedi: valid board names for atmio16 driver are: [ 424.277938][T12035] atmio16 [ 424.278909][T11479] usb 7-1: Using ep0 maxpacket: 32 [ 424.279275][T12035] atmio16d [ 424.282212][T12035] comedi: valid board names for ni_at_ao driver are: [ 424.285002][T12035] at-ao-6 [ 424.285796][T11479] usb 7-1: unable to get BOS descriptor or descriptor too short [ 424.286288][T12035] at-ao-10 [ 424.290863][T11479] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 424.290875][T12035] comedi: valid board names for ni_at_a2150 driver are: [ 424.290888][T12035] ni_at_a2150 [ 424.294338][T11479] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 424.296633][T12035] comedi: valid board names for adq12b driver are: [ 424.296645][T12035] adq12b [ 424.296652][T12035] comedi: valid board names for mpc624 driver are: [ 424.296660][T12035] mpc624 [ 424.296667][T12035] comedi: valid board names for c6xdigio driver are: [ 424.296675][T12035] c6xdigio [ 424.296682][T12035] comedi: valid board names for aio_iiro_16 driver are: [ 424.296689][T12035] aio_iiro_16 [ 424.296696][T12035] comedi: valid board names for aio_aio12_8 driver are: [ 424.299178][T11479] usb 7-1: config 14 has no interface number 0 [ 424.301001][T12035] aio_aio12_8 [ 424.301011][T12035] aio_ai12_8 [ 424.301017][T12035] aio_ao12_4 [ 424.301024][T12035] comedi: valid board names for fl512 driver are: [ 424.301032][T12035] fl512 [ 424.301038][T12035] comedi: valid board names for dmm32at driver are: [ 424.303745][T11479] usb 7-1: config 14 has no interface number 1 [ 424.304652][T12035] dmm32at [ 424.304659][T12035] comedi: valid board names for dt282x driver are: [ 424.304665][T12035] dt2821 [ 424.304669][T12035] dt2821-f [ 424.304673][T12035] dt2821-g [ 424.304678][T12035] dt2823 [ 424.304682][T12035] dt2824-pgh [ 424.304686][T12035] dt2824-pgl [ 424.304690][T12035] dt2825 [ 424.304694][T12035] dt2827 [ 424.304698][T12035] dt2828 [ 424.304701][T12035] dt2829 [ 424.304705][T12035] dt21-ez [ 424.304709][T12035] dt23-ez [ 424.304713][T12035] dt24-ez [ 424.307500][T11479] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 424.308316][T12035] dt24-ez-pgl [ 424.308322][T12035] comedi: valid board names for dt2817 driver are: [ 424.308328][T12035] dt2817 [ 424.308332][T12035] comedi: valid board names for dt2815 driver are: [ 424.308337][T12035] dt2815 [ 424.313050][T11479] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 424.314566][T12035] comedi: valid board names for dt2814 driver are: [ 424.314577][T12035] dt2814 [ 424.314583][T12035] comedi: valid board names for dt2811 driver are: [ 424.314590][T12035] dt2811-pgh [ 424.314596][T12035] dt2811-pgl [ 424.315821][T11479] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 424.318156][T12035] comedi: valid board names for dt2801 driver are: [ 424.318164][T12035] dt2801 [ 424.320666][T11479] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 424.321248][T12035] comedi: valid board names for das6402 driver are: [ 424.321256][T12035] das6402-12 [ 424.322769][T11479] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 424.323681][T12035] das6402-16 [ 424.323688][T12035] comedi: valid board names for das1800 driver are: [ 424.326156][T11479] usb 7-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 424.327028][T12035] das-1701st [ 424.327034][T12035] das-1701st-da [ 424.331494][T11479] usb 7-1: config 14 interface 57 has no altsetting 0 [ 424.331805][T12035] das-1702st [ 424.331812][T12035] das-1702st-da [ 424.333197][T11479] usb 7-1: config 14 interface 228 has no altsetting 0 [ 424.335096][T12035] das-1702hr [ 424.335103][T12035] das-1702hr-da [ 424.335107][T12035] das-1701ao [ 424.335111][T12035] das-1702ao [ 424.335115][T12035] das-1801st [ 424.335119][T12035] das-1801st-da [ 424.369448][T11479] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 424.369584][T12035] das-1802st [ 424.370874][T11479] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.370889][T11479] usb 7-1: Product: syz [ 424.370897][T11479] usb 7-1: Manufacturer: syz [ 424.374431][T12035] das-1802st-da [ 424.383292][T11479] usb 7-1: SerialNumber: syz [ 424.384314][T12035] das-1802hr [ 424.400848][ T42] audit: type=1326 audit(1785820086.482:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12037 comm="syz.1.1745" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f63fec code=0x0 [ 424.401542][T12035] das-1802hr-da [ 424.417739][ T9] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 424.418496][T12035] das-1801hc [ 424.439186][T12035] das-1802hc [ 424.440561][T12035] das-1801ao [ 424.441909][T12035] das-1802ao [ 424.443241][T12035] comedi: valid board names for das800 driver are: [ 424.445845][T12035] das-800 [ 424.447131][T12035] cio-das800 [ 424.448512][T12035] das-801 [ 424.449521][T12035] cio-das801 [ 424.450611][T12035] das-802 [ 424.451605][T12035] cio-das802 [ 424.452668][T12035] cio-das802/16 [ 424.453806][T12035] comedi: valid board names for isa-das08 driver are: [ 424.455901][T12035] isa-das08 [ 424.456942][T12035] das08-pgm [ 424.458280][T12035] das08-pgh [ 424.459326][T12035] das08-pgl [ 424.460686][T12035] das08-aoh [ 424.461784][T12035] das08-aol [ 424.462866][T12035] das08-aom [ 424.463915][T12035] das08/jr-ao [ 424.465019][T12035] das08jr-16-ao [ 424.466155][T12035] pc104-das08 [ 424.467240][T12035] das08jr/16 [ 424.468375][T12035] comedi: valid board names for das16m1 driver are: [ 424.470420][T12035] das16m1 [ 424.471406][T12035] comedi: valid board names for dac02 driver are: [ 424.473424][T12035] dac02 [ 424.474612][T12035] comedi: valid board names for rti802 driver are: [ 424.476807][T12035] rti802 [ 424.478020][T12035] comedi: valid board names for rti800 driver are: [ 424.480597][T12035] rti800 [ 424.481850][T12035] rti815 [ 424.482943][T12035] comedi: valid board names for pcm3724 driver are: [ 424.485053][T12035] pcm3724 [ 424.486065][T12035] comedi: valid board names for pcl818 driver are: [ 424.488248][T12035] pcl818l [ 424.489445][T12035] pcl818h [ 424.490458][T12035] pcl818hd [ 424.491508][T12035] pcl818hg [ 424.492533][T12035] pcl818 [ 424.493484][T12035] pcl718 [ 424.494429][T12035] pcm3718 [ 424.495418][T12035] comedi: valid board names for pcl816 driver are: [ 424.497458][T12035] pcl816 [ 424.498561][T12035] pcl814b [ 424.499575][T12035] comedi: valid board names for pcl812 driver are: [ 424.501719][T12035] pcl812 [ 424.502671][T12035] pcl812pg [ 424.503706][T12035] acl8112pg [ 424.504743][T12035] acl8112dg [ 424.505783][T12035] acl8112hg [ 424.506823][T12035] a821pgl [ 424.508250][T12035] a821pglnda [ 424.509961][T12035] a821pgh [ 424.511243][T12035] a822pgl [ 424.512432][T12035] a822pgh [ 424.513420][T12035] a823pgl [ 424.514416][T12035] a823pgh [ 424.515453][T12035] pcl813 [ 424.516408][T12035] pcl813b [ 424.517407][T12035] acl8113 [ 424.518488][T12035] iso813 [ 424.519459][T12035] acl8216 [ 424.520527][T12035] a826pg [ 424.521545][T12035] comedi: valid board names for pcl730 driver are: [ 424.523836][T12035] pcl730 [ 424.525077][T12035] iso730 [ 424.526300][T12035] acl7130 [ 424.527680][T12035] pcm3730 [ 424.529032][T12035] pcl725 [ 424.530301][T12035] p8r8dio [ 424.531650][T12035] acl7225b [ 424.532974][T12035] p16r16dio [ 424.534339][T12035] pcl733 [ 424.535445][T12035] pcl734 [ 424.536631][T12035] opmm-1616-xt [ 424.538174][T12035] pearl-mm-p [ 424.539592][T12035] ir104-pbf [ 424.540995][T12035] comedi: valid board names for pcl726 driver are: [ 424.543513][T12035] pcl726 [ 424.544474][T12035] pcl727 [ 424.545416][T12035] pcl728 [ 424.546384][T12035] acl6126 [ 424.547382][T12035] acl6128 [ 424.548510][T12035] comedi: valid board names for pcl724 driver are: [ 424.550626][T12035] pcl724 [ 424.551583][T12035] pcl722 [ 424.552531][T12035] pcl731 [ 424.553566][T12035] acl7122 [ 424.554916][T12035] acl7124 [ 424.556218][T12035] pet48dio [ 424.557625][T12035] pcmio48 [ 424.558931][T12035] onyx-mm-dio [ 424.560361][T12035] comedi: valid board names for pcl711 driver are: [ 424.562891][T12035] pcl711 [ 424.564142][T12035] pcl711b [ 424.565433][T12035] acl8112hg [ 424.566779][T12035] acl8112dg [ 424.567640][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 424.568274][T12035] comedi: valid board names for amplc_pc263 driver are: [ 424.573151][ T9] usb 8-1: unable to get BOS descriptor or descriptor too short [ 424.573218][T12035] pc263 [ 424.577666][T12035] comedi: valid board names for amplc_pc236 driver are: [ 424.577669][ T9] usb 8-1: config 14 has an invalid interface number: 57 but max is 1 [ 424.580510][T12035] pc36at [ 424.580520][T12035] comedi: valid board names for amplc_dio200 driver are: [ 424.580531][T12035] pc212e [ 424.580537][T12035] pc214e [ 424.580544][T12035] pc215e [ 424.580550][T12035] pc218e [ 424.580559][T12035] pc272e [ 424.583924][ T9] usb 8-1: config 14 has an invalid interface number: 228 but max is 1 [ 424.583948][ T9] usb 8-1: config 14 has no interface number 0 [ 424.583963][ T9] usb 8-1: config 14 has no interface number 1 [ 424.585200][T12035] comedi: valid board names for comedi_parport driver are: [ 424.588329][ T9] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 424.589453][T12035] comedi_parport [ 424.590701][ T9] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 424.591958][T12035] comedi: valid board names for comedi_test driver are: [ 424.593180][ T9] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 424.594416][T12035] comedi_test [ 424.602531][ T9] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 424.605053][T12035] comedi: valid board names for comedi_bond driver are: [ 424.605062][T12035] comedi_bond [ 424.636287][ T9] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 424.641248][ T9] usb 8-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 424.646638][ T9] usb 8-1: config 14 interface 57 has no altsetting 0 [ 424.649541][ T9] usb 8-1: config 14 interface 228 has no altsetting 0 [ 424.655078][ T9] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 424.659046][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.662452][ T9] usb 8-1: Product: syz [ 424.664236][ T9] usb 8-1: Manufacturer: syz [ 424.666190][ T9] usb 8-1: SerialNumber: syz [ 424.851008][T11479] legousbtower 7-1:14.57: interrupt endpoints not found [ 425.083333][ T9] legousbtower 8-1:14.57: interrupt endpoints not found [ 425.229323][ T13] net_ratelimit: 5 callbacks suppressed [ 425.229337][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.233862][ T5853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.302688][T12045] tcf_pedit_act: 7 callbacks suppressed [ 425.302701][T12045] tc action pedit 'at' offset 5 out of bounds [ 425.307363][T12045] tc action pedit 'at' offset 5 out of bounds [ 425.309363][T12045] tc action pedit 'at' offset 5 out of bounds [ 425.311307][T12045] tc action pedit 'at' offset 5 out of bounds [ 425.313220][T12045] tc action pedit 'at' offset 5 out of bounds [ 425.315103][T12045] tc action pedit 'at' offset 5 out of bounds [ 425.317006][T12045] tc action pedit 'at' offset 5 out of bounds [ 425.318951][T12045] tc action pedit 'at' offset 5 out of bounds [ 425.320881][T12045] tc action pedit 'at' offset 5 out of bounds [ 425.322793][T12045] tc action pedit 'at' offset 5 out of bounds [ 425.324718][T12045] 0: reclassify loop, rule prio 0, protocol 800 [ 425.470452][T12030] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 425.485696][ T9] legousbtower 8-1:14.228: get version request failed: -71 [ 425.497729][ T9] legousbtower 8-1:14.228: probe with driver legousbtower failed with error -71 [ 426.193659][ T9] usb 8-1: USB disconnect, device number 19 [ 426.200042][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.279978][T10705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.558381][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.800662][T12069] Driver unsupported XDP return value 0 on prog (id 75) dev N/A, expect packet loss! [ 427.125568][T12073] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 427.268251][T12076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 427.276772][T12076] nbd: must specify at least one socket [ 427.317883][T10705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.687901][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.348219][ T5853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.797829][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.530689][T12019] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 429.535649][T11479] legousbtower 7-1:14.228: get version request failed: -71 [ 429.539283][T11479] legousbtower 7-1:14.228: probe with driver legousbtower failed with error -71 [ 429.566273][T11479] usb 7-1: USB disconnect, device number 16 [ 429.578834][T12079] MINIX-fs: blocksize too small for device [ 429.603934][T12081] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3780442281 (7560884562 ns) > initial count (4669583980 ns). Using initial count to start timer. [ 429.639083][T12079] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 429.678831][T12086] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 429.743210][T12091] FAULT_INJECTION: forcing a failure. [ 429.743210][T12091] name failslab, interval 1, probability 0, space 0, times 0 [ 429.756049][T12091] CPU: 2 UID: 0 PID: 12091 Comm: syz.2.1759 Tainted: G L syzkaller #0 PREEMPT(full) [ 429.756079][T12091] Tainted: [L]=SOFTLOCKUP [ 429.756086][T12091] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 429.756097][T12091] Call Trace: [ 429.756103][T12091] [ 429.756112][T12091] dump_stack_lvl+0x100/0x190 [ 429.756137][T12091] should_fail_ex.cold+0x5/0xa [ 429.756157][T12091] should_failslab+0xc2/0x120 [ 429.756180][T12091] __kmalloc_cache_noprof+0x91/0x6c0 [ 429.756198][T12091] ? snd_mixer_oss_put_volume1_sw.isra.0+0xff/0x500 [ 429.756253][T12091] snd_mixer_oss_put_volume1_sw.isra.0+0xff/0x500 [ 429.756285][T12091] snd_mixer_oss_put_recsrc1_sw+0x87/0xc0 [ 429.756312][T12091] snd_mixer_oss_ioctl1+0xfb8/0x1bb0 [ 429.756336][T12091] ? kasan_quarantine_put+0x104/0x240 [ 429.756356][T12091] ? __pfx_snd_mixer_oss_put_recsrc1_sw+0x10/0x10 [ 429.756383][T12091] ? __pfx_snd_mixer_oss_ioctl1+0x10/0x10 [ 429.756406][T12091] ? tomoyo_path_number_perm+0x28f/0x580 [ 429.756429][T12091] ? tomoyo_path_number_perm+0x28f/0x580 [ 429.756454][T12091] ? tomoyo_path_number_perm+0x188/0x580 [ 429.756477][T12091] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 429.756500][T12091] ? get_pid_task+0x106/0x250 [ 429.756531][T12091] snd_mixer_oss_ioctl_card+0x102/0x170 [ 429.756556][T12091] ? __pfx_snd_mixer_oss_ioctl_card+0x10/0x10 [ 429.756589][T12091] snd_pcm_oss_ioctl+0x34d/0x3790 [ 429.756610][T12091] ? find_held_lock+0x2b/0x80 [ 429.756629][T12091] ? __fget_files+0x215/0x3d0 [ 429.756644][T12091] ? hook_file_ioctl_common+0x140/0x440 [ 429.756667][T12091] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 429.756688][T12091] ? __fget_files+0x21f/0x3d0 [ 429.756708][T12091] ? __pfx_snd_pcm_oss_ioctl_compat+0x10/0x10 [ 429.756728][T12091] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 429.756755][T12091] __do_fast_syscall_32+0xe7/0x970 [ 429.756779][T12091] ? lockdep_hardirqs_on+0x78/0x100 [ 429.756802][T12091] do_fast_syscall_32+0x32/0x70 [ 429.756825][T12091] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 429.756846][T12091] RIP: 0023:0xf7f08fec [ 429.756868][T12091] Code: Unable to access opcode bytes at 0xf7f08fc2. [ 429.756883][T12091] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 429.756899][T12091] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000c0044dff [ 429.756910][T12091] RDX: 0000000080000b00 RSI: 0000000000000000 RDI: 0000000000000000 [ 429.756920][T12091] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 429.756929][T12091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 429.756938][T12091] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 429.756963][T12091] [ 429.790689][T12094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.864014][T12094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.055042][T12090] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 430.123720][T12098] MINIX-fs: blocksize too small for device [ 430.211001][T12098] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 430.326752][T12105] tcf_pedit_act: 7 callbacks suppressed [ 430.326771][T12105] tc action pedit 'at' offset 5 out of bounds [ 430.332604][T12105] tc action pedit 'at' offset 5 out of bounds [ 430.334533][T12105] tc action pedit 'at' offset 5 out of bounds [ 430.336455][T12105] tc action pedit 'at' offset 5 out of bounds [ 430.338471][T12105] tc action pedit 'at' offset 5 out of bounds [ 430.340758][T12105] tc action pedit 'at' offset 5 out of bounds [ 430.342788][T12105] tc action pedit 'at' offset 5 out of bounds [ 430.344867][T12105] tc action pedit 'at' offset 5 out of bounds [ 430.347366][T12105] tc action pedit 'at' offset 5 out of bounds [ 430.349764][T12105] tc action pedit 'at' offset 5 out of bounds [ 430.351796][T12105] net_ratelimit: 4 callbacks suppressed [ 430.351806][T12105] 0: reclassify loop, rule prio 0, protocol 800 [ 430.431780][ T5853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.911981][T12114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 430.958632][T12112] netlink: 'syz.0.1764': attribute type 21 has an invalid length. [ 430.961837][T12112] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1764'. [ 430.965347][T12112] netlink: 'syz.0.1764': attribute type 5 has an invalid length. [ 430.968784][T12112] netlink: 'syz.0.1764': attribute type 6 has an invalid length. [ 430.974094][T12112] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1764'. [ 430.989484][T12112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.992898][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.107830][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.473252][T10705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.550127][T12130] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1769'. [ 431.571082][T12130] MINIX-fs: blocksize too small for device [ 431.633087][T12130] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 432.131252][T12123] Set syz0 is full, maxelem 65536 reached [ 432.207810][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.271615][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.386401][ T42] audit: type=1326 audit(1785820094.462:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12149 comm="syz.3.1777" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f24fec code=0x0 [ 432.428262][ T5832] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 432.508707][ T5853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.588065][ T5832] usb 7-1: Using ep0 maxpacket: 32 [ 432.591571][ T5832] usb 7-1: unable to get BOS descriptor or descriptor too short [ 432.594813][ T5832] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 432.597638][ T5832] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 432.600462][ T5832] usb 7-1: config 14 has no interface number 0 [ 432.602480][ T5832] usb 7-1: config 14 has no interface number 1 [ 432.604519][ T5832] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 432.608031][ T5832] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 432.611861][ T5832] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 432.615487][ T5832] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 432.619335][ T5832] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 432.623065][ T5832] usb 7-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 432.627145][ T5832] usb 7-1: config 14 interface 57 has no altsetting 0 [ 432.629558][ T5832] usb 7-1: config 14 interface 228 has no altsetting 0 [ 432.633512][ T5832] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 432.636492][ T5832] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.639137][ T5832] usb 7-1: Product: syz [ 432.640649][ T5832] usb 7-1: Manufacturer: syz [ 432.642180][ T5832] usb 7-1: SerialNumber: syz [ 432.687735][T10705] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 432.837609][T10705] usb 6-1: Using ep0 maxpacket: 16 [ 432.842452][T10705] usb 6-1: unable to get BOS descriptor or descriptor too short [ 432.849329][T10705] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 432.853298][T10705] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 432.859098][T10705] usb 6-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 432.862575][T10705] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.865586][T10705] usb 6-1: Product: syz [ 432.867229][T10705] usb 6-1: Manufacturer: syz [ 432.869173][T10705] usb 6-1: SerialNumber: syz [ 433.054453][ T5832] legousbtower 7-1:14.57: interrupt endpoints not found [ 433.228096][ C2] bridge0: port 3(syz_tun) entered forwarding state [ 433.230863][ C2] bridge0: topology change detected, propagating [ 433.248435][ T5853] libceph: connect (1)[c::]:6789 error -101 [ 433.252417][ T5853] libceph: mon0 (1)[c::]:6789 connect error [ 433.286397][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.289725][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.311257][T12136] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 433.320632][ T5832] legousbtower 7-1:14.228: get version request failed: -71 [ 433.325788][ T5832] legousbtower 7-1:14.228: probe with driver legousbtower failed with error -71 [ 433.331587][T12161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 433.332198][T12163] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1779'. [ 433.342832][T12163] netlink: 'syz.3.1779': attribute type 1 has an invalid length. [ 433.344933][ T5832] usb 7-1: USB disconnect, device number 17 [ 433.351367][T12158] ceph: No mds server is up or the cluster is laggy [ 433.401049][T12163] bond9: entered promiscuous mode [ 433.407845][T12163] 8021q: adding VLAN 0 to HW filter on device bond9 [ 433.544761][T12167] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1780'. [ 433.917680][ T5839] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 434.047691][ T5839] usb 8-1: device descriptor read/64, error -71 [ 434.141693][T12176] netlink: 'syz.2.1784': attribute type 21 has an invalid length. [ 434.144930][T12176] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1784'. [ 434.148492][T12176] netlink: 'syz.2.1784': attribute type 5 has an invalid length. [ 434.151568][T12176] netlink: 'syz.2.1784': attribute type 6 has an invalid length. [ 434.154525][T12176] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1784'. [ 434.298204][ T5839] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 434.427724][ T5839] usb 8-1: device descriptor read/64, error -71 [ 434.538142][ T5839] usb usb8-port1: attempt power cycle [ 434.807272][T12187] netlink: 'syz.0.1788': attribute type 32 has an invalid length. [ 434.810689][T12187] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1788'. [ 434.813783][T12187] netlink: 'syz.0.1788': attribute type 32 has an invalid length. [ 434.876410][T12190] vcan1: entered promiscuous mode [ 434.878225][ T5839] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 434.880692][T12190] vcan1: entered allmulticast mode [ 434.898393][ T5839] usb 8-1: device descriptor read/8, error -71 [ 435.025116][T12192] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1789'. [ 435.137676][ T5839] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 435.147693][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 435.158509][ T5839] usb 8-1: device descriptor read/8, error -71 [ 435.197598][ T0] NOHZ tick-stop error: local softirq work is pending, handler #280!!! [ 435.207624][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 435.227684][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 435.257594][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 435.269430][ T5839] usb usb8-port1: unable to enumerate USB device [ 435.370870][ T5839] net_ratelimit: 7 callbacks suppressed [ 435.370885][ T5839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.764111][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.011316][T10705] usb 6-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 436.016141][T10705] usb 6-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 436.020747][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.053960][T10705] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 436.058777][T10705] usb 6-1: USB disconnect, device number 15 [ 436.098537][T11705] udevd[11705]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 436.742579][T12202] Set syz0 is full, maxelem 65536 reached [ 436.978626][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.068855][T10705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.204029][T12220] binder: 12215:12220 ioctl 4018620d 0 returned -22 [ 437.299979][T12224] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1796'. [ 437.324792][T12224] MINIX-fs: blocksize too small for device [ 437.528571][T12224] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 437.572807][T12227] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1798'. [ 437.626747][T12231] netlink: 'syz.0.1800': attribute type 12 has an invalid length. [ 438.097805][T11594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.166947][ T5853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.479115][ T5839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.972586][T12249] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3780442281 (7560884562 ns) > initial count (4669583980 ns). Using initial count to start timer. [ 439.227776][T11594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.630853][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.142431][T12268] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 440.145302][T12268] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 440.157133][T12268] vhci_hcd vhci_hcd.0: Device attached [ 440.395424][ T10] net_ratelimit: 11 callbacks suppressed [ 440.395439][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.420564][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.428042][ T5839] usb 38-1: SetAddress Request (2) to port 0 [ 440.432534][ T5839] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 440.441080][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.514324][ T5853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.527828][T11594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.554340][T11479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.758332][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.840061][T11479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.842831][T11479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.917062][T12269] vhci_hcd: connection reset by peer [ 440.919063][ T13] vhci_hcd vhci_hcd.0: stop threads [ 440.920813][ T13] vhci_hcd vhci_hcd.0: release socket [ 440.925922][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 441.232592][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.465442][T12289] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1813'. [ 441.651807][T12286] MINIX-fs: blocksize too small for device [ 441.979326][T12286] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 444.900476][T12325] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 445.007317][T12327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 445.053236][T12327] nbd: must specify at least one socket [ 445.120536][ T42] audit: type=1326 audit(1785820107.202:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12332 comm="syz.3.1830" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f24fec code=0x0 [ 445.234069][T12335] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1831'. [ 445.472122][ T5839] usb 38-1: device descriptor read/8, error -110 [ 445.750021][T12355] FAULT_INJECTION: forcing a failure. [ 445.750021][T12355] name failslab, interval 1, probability 0, space 0, times 0 [ 445.756608][T12355] CPU: 0 UID: 0 PID: 12355 Comm: syz.2.1837 Tainted: G L syzkaller #0 PREEMPT(full) [ 445.756632][T12355] Tainted: [L]=SOFTLOCKUP [ 445.756639][T12355] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 445.756648][T12355] Call Trace: [ 445.756655][T12355] [ 445.756662][T12355] dump_stack_lvl+0x100/0x190 [ 445.756683][T12355] should_fail_ex.cold+0x5/0xa [ 445.756697][T12355] should_failslab+0xc2/0x120 [ 445.756714][T12355] __kmalloc_cache_noprof+0x91/0x6c0 [ 445.756727][T12355] ? alloc_pipe_info+0x10e/0x590 [ 445.756742][T12355] alloc_pipe_info+0x10e/0x590 [ 445.756755][T12355] splice_direct_to_actor+0x78f/0xa30 [ 445.756783][T12355] ? __pfx_direct_splice_actor+0x10/0x10 [ 445.756799][T12355] ? __pfx_aa_file_perm+0x10/0x10 [ 445.756819][T12355] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 445.756835][T12355] do_splice_direct+0x174/0x240 [ 445.756847][T12355] ? __pfx_do_splice_direct+0x10/0x10 [ 445.756860][T12355] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 445.756872][T12355] ? bpf_lsm_file_permission+0x9/0x10 [ 445.756883][T12355] ? security_file_permission+0x76/0x210 [ 445.756901][T12355] ? rw_verify_area+0xce/0x6d0 [ 445.756919][T12355] do_sendfile+0xadc/0xe20 [ 445.756939][T12355] ? __pfx_do_sendfile+0x10/0x10 [ 445.756956][T12355] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 445.756978][T12355] ? __fget_files+0x21f/0x3d0 [ 445.756991][T12355] __ia32_compat_sys_sendfile+0x1e5/0x220 [ 445.757005][T12355] ? fput+0x79/0x100 [ 445.757017][T12355] ? __pfx___ia32_compat_sys_sendfile+0x10/0x10 [ 445.757031][T12355] ? ksys_write+0x1ac/0x250 [ 445.757041][T12355] ? __pfx_ksys_write+0x10/0x10 [ 445.757055][T12355] __do_fast_syscall_32+0xe7/0x970 [ 445.757072][T12355] ? lockdep_hardirqs_on+0x78/0x100 [ 445.757088][T12355] do_fast_syscall_32+0x32/0x70 [ 445.757104][T12355] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 445.757119][T12355] RIP: 0023:0xf7f08fec [ 445.757135][T12355] Code: Unable to access opcode bytes at 0xf7f08fc2. [ 445.757141][T12355] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 00000000000000bb [ 445.757153][T12355] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000003 [ 445.757160][T12355] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 445.757167][T12355] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 445.757173][T12355] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 445.757180][T12355] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 445.757193][T12355] [ 445.867811][ T34] net_ratelimit: 14 callbacks suppressed [ 445.867828][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.942242][ T5839] usb usb38-port1: attempt power cycle [ 445.972943][T12359] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 446.133674][T12364] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 446.185346][ T34] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 446.408607][ T34] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 446.411161][T12359] nbd: must specify at least one socket [ 446.413898][ T34] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 446.430017][ T34] usb 6-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 446.433469][ T34] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.443626][ T34] usb 6-1: Product: syz [ 446.445427][ T34] usb 6-1: Manufacturer: syz [ 446.447334][ T34] usb 6-1: SerialNumber: syz [ 446.449210][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.457334][ T34] ti_usb_3410_5052 6-1:2.0: TI USB 5052 2 port adapter converter detected [ 446.466787][ T34] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 446.480037][ T34] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 446.498198][ T5839] usb usb38-port1: unable to enumerate USB device [ 446.966318][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.988939][ T5839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.560911][T11594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.764204][T12357] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set config on port 0, -110 [ 447.784742][T12357] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -32 [ 447.792002][T12357] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -32 [ 447.802928][T12357] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command, -32 [ 448.007310][ T42] audit: type=1326 audit(1785820110.082:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12389 comm="syz.3.1848" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f24fec code=0x0 [ 448.028141][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.288510][T12398] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1851'. [ 448.496965][ T34] usb 6-1: USB disconnect, device number 16 [ 448.524390][ T34] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 448.540504][ T34] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 448.551155][ T34] ti_usb_3410_5052 6-1:2.0: device disconnected [ 448.787717][T11594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.068988][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.827677][ T42] audit: type=1326 audit(1785820111.902:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12429 comm="syz.3.1862" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f24fec code=0x0 [ 449.947959][T11594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.018812][T12426] netlink: 19 bytes leftover after parsing attributes in process `syz.0.1860'. [ 450.024896][T12426] netlink: 19 bytes leftover after parsing attributes in process `syz.0.1860'. [ 450.029618][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.083616][T11594] net_ratelimit: 2 callbacks suppressed [ 451.083635][T11594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.179490][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.389845][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.744830][T12444] Set syz0 is full, maxelem 65536 reached [ 451.790854][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.457572][ T5853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.525740][ T42] audit: type=1326 audit(1785820114.602:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12464 comm="syz.1.1874" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f63fec code=0x0 [ 452.577810][T11594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.110204][T12471] Set syz0 is full, maxelem 65536 reached [ 453.552285][T12480] infiniband syz0: set active [ 453.554750][T12480] infiniband syz0: added bond_slave_1 [ 453.678167][T12480] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 453.686179][T12480] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 453.693115][T12480] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 453.721933][T12480] RDS/IB: syz0: added [ 453.723609][T12480] smc: adding ib device syz0 with port count 1 [ 453.725646][T12480] smc: ib device syz0 port 1 has no pnetid [ 453.898449][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.245363][ T9] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 454.319293][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.437687][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 454.455833][T12483] syzkaller0: entered promiscuous mode [ 454.458546][T12483] syzkaller0: entered allmulticast mode [ 454.982689][T12493] FAULT_INJECTION: forcing a failure. [ 454.982689][T12493] name failslab, interval 1, probability 0, space 0, times 0 [ 454.987012][T12493] CPU: 3 UID: 0 PID: 12493 Comm: syz.3.1882 Tainted: G L syzkaller #0 PREEMPT(full) [ 454.987030][T12493] Tainted: [L]=SOFTLOCKUP [ 454.987035][T12493] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 454.987042][T12493] Call Trace: [ 454.987047][T12493] [ 454.987053][T12493] dump_stack_lvl+0x100/0x190 [ 454.987084][T12493] should_fail_ex.cold+0x5/0xa [ 454.987098][T12493] should_failslab+0xc2/0x120 [ 454.987114][T12493] __kmalloc_noprof+0xfc/0x820 [ 454.987128][T12493] ? rcu_is_watching+0x12/0xc0 [ 454.987142][T12493] ? tomoyo_realpath_from_path+0xb6/0x690 [ 454.987169][T12493] tomoyo_realpath_from_path+0xb6/0x690 [ 454.987190][T12493] tomoyo_path_number_perm+0x23c/0x580 [ 454.987288][T12493] ? tomoyo_path_number_perm+0x22e/0x580 [ 454.987305][T12493] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 454.987321][T12493] ? get_pid_task+0x106/0x250 [ 454.987349][T12493] ? find_held_lock+0x2b/0x80 [ 454.987363][T12493] ? __fget_files+0x215/0x3d0 [ 454.987374][T12493] ? hook_file_ioctl_common+0x140/0x440 [ 454.987407][T12493] ? __fget_files+0x215/0x3d0 [ 454.987421][T12493] ? __fget_files+0x21f/0x3d0 [ 454.987434][T12493] security_file_ioctl_compat+0xd3/0x230 [ 454.987452][T12493] __ia32_compat_sys_ioctl+0xc2/0x360 [ 454.987471][T12493] __do_fast_syscall_32+0xe7/0x970 [ 454.987490][T12493] ? lockdep_hardirqs_on+0x78/0x100 [ 454.987506][T12493] do_fast_syscall_32+0x32/0x70 [ 454.987522][T12493] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 454.987538][T12493] RIP: 0023:0xf7f24fec [ 454.987553][T12493] Code: Unable to access opcode bytes at 0xf7f24fc2. [ 454.987559][T12493] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 454.987571][T12493] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000401054d5 [ 454.987578][T12493] RDX: 0000000080000240 RSI: 0000000000000000 RDI: 0000000000000000 [ 454.987585][T12493] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 454.987592][T12493] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 454.987598][T12493] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 454.987613][T12493] [ 455.076993][T12493] ERROR: Out of memory at tomoyo_realpath_from_path. [ 455.196703][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 455.204134][ T9] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 455.207629][ T9] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 455.212065][ T9] usb 6-1: config 14 has no interface number 0 [ 455.213941][ T9] usb 6-1: config 14 has no interface number 1 [ 455.215825][ T9] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 455.221701][ T9] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 455.226024][ T9] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 455.229721][ T9] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 455.233284][ T9] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 455.236740][ T9] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 455.241549][ T9] usb 6-1: config 14 interface 57 has no altsetting 0 [ 455.244166][ T9] usb 6-1: config 14 interface 228 has no altsetting 0 [ 455.249233][ T9] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 455.253025][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.256236][ T9] usb 6-1: Product: syz [ 455.257965][ T9] usb 6-1: Manufacturer: syz [ 455.259737][ T9] usb 6-1: SerialNumber: syz [ 455.711165][ T9] legousbtower 6-1:14.57: interrupt endpoints not found [ 455.724009][ T42] audit: type=1326 audit(1785820117.802:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12504 comm="syz.2.1886" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f08fec code=0x0 [ 455.763833][T12507] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1885'. [ 455.979776][T12478] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 455.989896][ T9] legousbtower 6-1:14.228: get version request failed: -71 [ 455.992309][ T9] legousbtower 6-1:14.228: probe with driver legousbtower failed with error -71 [ 456.005198][ T9] usb 6-1: USB disconnect, device number 17 [ 456.367856][ T13] net_ratelimit: 4 callbacks suppressed [ 456.367875][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.427972][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.586453][T12514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1889'. [ 457.467846][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.551560][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.731512][T12535] Set syz0 is full, maxelem 65536 reached [ 457.829174][ T42] audit: type=1326 audit(1785820119.892:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12542 comm="syz.0.1898" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x0 [ 458.121342][T12549] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 458.147907][T12549] nbd: must specify at least one socket [ 458.268183][ T3269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.521967][ T5853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.707759][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.966195][T12561] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1902'. [ 459.478648][T12567] netlink: 'syz.1.1904': attribute type 21 has an invalid length. [ 459.483416][T12567] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1904'. [ 459.497668][T12567] netlink: 'syz.1.1904': attribute type 5 has an invalid length. [ 459.500075][T12567] netlink: 'syz.1.1904': attribute type 6 has an invalid length. [ 459.502508][T12567] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1904'. [ 459.547849][ T5853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.007822][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.047457][T12580] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1905'. [ 460.076456][T12581] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 460.095605][T12571] MINIX-fs: blocksize too small for device [ 460.110625][T12581] nbd: must specify at least one socket [ 460.148526][T12571] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 460.943325][T12595] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1912'. [ 460.983533][T12595] batadv0: entered promiscuous mode [ 460.987695][T12595] macsec1: entered promiscuous mode [ 460.989638][T12595] macsec1: entered allmulticast mode [ 460.998733][T12595] batadv0: entered allmulticast mode [ 461.014010][T12595] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 461.026093][T12595] batadv0: left allmulticast mode [ 461.036172][T12595] batadv0: left promiscuous mode [ 461.193687][T12599] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1911'. [ 461.253150][T12603] MINIX-fs: blocksize too small for device [ 461.286433][T12601] netlink: 'syz.0.1915': attribute type 21 has an invalid length. [ 461.289819][T12601] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1915'. [ 461.321596][T12601] netlink: 'syz.0.1915': attribute type 5 has an invalid length. [ 461.327616][T12601] netlink: 'syz.0.1915': attribute type 6 has an invalid length. [ 461.331177][T12601] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1915'. [ 461.335629][T12603] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 461.450231][T12613] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 461.480244][T12613] nbd: must specify at least one socket [ 461.637856][ T5853] net_ratelimit: 6 callbacks suppressed [ 461.637984][ T5853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.967716][T12627] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1920'. [ 461.972179][T12627] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1920'. [ 462.031497][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.226807][T11594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.669065][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.357692][T12645] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1923'. [ 463.365005][T12645] MINIX-fs: blocksize too small for device [ 463.408841][T12645] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 463.567819][T11594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.718250][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.953868][ T847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.958373][T12649] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 464.155843][T12664] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1930'. [ 464.175694][T12664] input: syz0 as /devices/virtual/input/input12 [ 464.497846][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 464.599661][ T3269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.670201][T11594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.930190][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.936884][ T1167] Bluetooth: hci4: Frame reassembly failed (-84) [ 464.944888][ T1167] Bluetooth: hci4: Frame reassembly failed (-84) [ 466.992039][ T5748] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 467.017856][T11594] net_ratelimit: 4 callbacks suppressed [ 467.017875][T11594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.148182][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.238948][ T5853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.208146][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.270329][ T5853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.479514][T12746] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1953'. [ 468.490542][T12746] batadv0: entered promiscuous mode [ 468.493042][T12746] macsec1: entered promiscuous mode [ 468.495696][T12746] macsec1: entered allmulticast mode [ 468.498172][T12746] batadv0: entered allmulticast mode [ 468.501786][T12746] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 468.505845][T12746] batadv0: left allmulticast mode [ 468.508348][T12746] batadv0: left promiscuous mode [ 468.838508][ T5853] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 468.907939][ T3269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.968613][T12758] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 468.989158][ T5853] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 468.992845][ T5853] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 468.995983][ T5853] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 468.999023][ T5853] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.006518][T12749] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 469.015970][ T5853] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 469.429490][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.114811][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.538239][T11594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.696965][T12779] Set syz0 is full, maxelem 65536 reached [ 471.600141][ T3269] usb 6-1: USB disconnect, device number 18 [ 472.137728][ T9] net_ratelimit: 2 callbacks suppressed [ 472.137741][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.193109][ T42] audit: type=1804 audit(1785820134.222:116): pid=12828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1977" name="bus" dev="ramfs" ino=38871 res=1 errno=0 [ 472.268210][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.363377][T12837] Bluetooth: MGMT ver 1.23 [ 472.497755][ T5853] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 472.668225][ T1357] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.705373][ T5853] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 472.719504][ T5853] usb 7-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 472.735118][ T5853] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 472.753828][ T5853] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.903151][T11594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.969994][ T5853] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 472.975928][ T5853] usb 7-1: invalid MIDI out EP 0 [ 473.101699][T12848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.156753][T12848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.221516][T12852] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1984'. [ 473.224943][T12852] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1984'. [ 473.243689][T12848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.244793][T12852] random: crng reseeded on system resumption [ 473.253914][T12848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.259358][T12848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.268823][T12849] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.308391][ T5853] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 473.318243][ T5853] usb 7-1: USB disconnect, device number 18 [ 473.443981][T12861] cgroup: release_agent respecified [ 473.457010][T12861] random: crng reseeded on system resumption [ 473.473105][T12861] input: syz0 as /devices/virtual/input/input13 [ 473.812089][T12873] overlayfs: missing 'workdir' [ 473.824124][T12870] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1990'. [ 473.884593][T12875] MINIX-fs: blocksize too small for device [ 473.919232][T12875] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 474.062044][ T34] usb 7-1: new low-speed USB device number 19 using dummy_hcd [ 474.218611][ T34] usb 7-1: Invalid ep0 maxpacket: 64 [ 474.347943][ T34] usb 7-1: new low-speed USB device number 20 using dummy_hcd [ 474.499511][ T34] usb 7-1: Invalid ep0 maxpacket: 64 [ 474.501802][ T34] usb usb7-port1: attempt power cycle [ 474.691705][T12905] veth1: entered promiscuous mode [ 474.694216][T12905] veth1: entered allmulticast mode [ 474.715179][ T42] audit: type=1326 audit(1785820136.792:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12904 comm="syz.0.1997" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 474.722545][ T42] audit: type=1326 audit(1785820136.792:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12904 comm="syz.0.1997" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 474.730305][ T42] audit: type=1326 audit(1785820136.802:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12904 comm="syz.0.1997" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 474.739286][ T42] audit: type=1326 audit(1785820136.802:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12904 comm="syz.0.1997" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 474.746502][ T42] audit: type=1326 audit(1785820136.802:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12904 comm="syz.0.1997" exe="/syz-executor" sig=0 arch=40000003 syscall=97 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 474.754253][ T42] audit: type=1326 audit(1785820136.802:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12904 comm="syz.0.1997" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 474.764090][ T42] audit: type=1326 audit(1785820136.802:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12904 comm="syz.0.1997" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 474.772870][ T42] audit: type=1326 audit(1785820136.812:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12904 comm="syz.0.1997" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 474.782036][ T42] audit: type=1326 audit(1785820136.812:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12904 comm="syz.0.1997" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 474.847760][ T34] usb 7-1: new low-speed USB device number 21 using dummy_hcd [ 474.868465][ T34] usb 7-1: Invalid ep0 maxpacket: 64 [ 474.895852][T12907] FAULT_INJECTION: forcing a failure. [ 474.895852][T12907] name failslab, interval 1, probability 0, space 0, times 0 [ 474.901523][T12907] CPU: 0 UID: 0 PID: 12907 Comm: syz.0.1998 Tainted: G L syzkaller #0 PREEMPT(full) [ 474.901543][T12907] Tainted: [L]=SOFTLOCKUP [ 474.901547][T12907] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 474.901555][T12907] Call Trace: [ 474.901559][T12907] [ 474.901564][T12907] dump_stack_lvl+0x100/0x190 [ 474.901584][T12907] should_fail_ex.cold+0x5/0xa [ 474.901595][T12907] ? sctp_get_port_local+0xbb3/0x1630 [ 474.901649][T12907] should_failslab+0xc2/0x120 [ 474.901671][T12907] __kmalloc_cache_noprof+0x91/0x6c0 [ 474.901684][T12907] ? sctp_add_bind_addr+0xae/0x3e0 [ 474.901702][T12907] sctp_add_bind_addr+0xae/0x3e0 [ 474.901719][T12907] sctp_do_bind+0x36c/0x760 [ 474.901735][T12907] sctp_connect_new_asoc+0x5e7/0x770 [ 474.901749][T12907] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 474.901766][T12907] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 474.901784][T12907] sctp_sendmsg+0x1743/0x22e0 [ 474.901799][T12907] ? __pfx___might_resched+0x10/0x10 [ 474.901818][T12907] ? __pfx_sctp_sendmsg+0x10/0x10 [ 474.901831][T12907] ? aa_sk_perm+0x309/0xaa0 [ 474.901853][T12907] ? __might_fault+0xc5/0x140 [ 474.901868][T12907] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 474.901882][T12907] ? __pfx_sctp_sendmsg+0x10/0x10 [ 474.901896][T12907] inet_sendmsg+0x11c/0x140 [ 474.901928][T12907] __sys_sendto+0x453/0x4e0 [ 474.901947][T12907] ? __pfx_inet_sendmsg+0x10/0x10 [ 474.901963][T12907] ? __pfx___sys_sendto+0x10/0x10 [ 474.901988][T12907] ? fput+0x79/0x100 [ 474.902001][T12907] ? ksys_write+0x1ac/0x250 [ 474.902013][T12907] __ia32_sys_sendto+0xdd/0x1b0 [ 474.902029][T12907] __do_fast_syscall_32+0xe7/0x970 [ 474.902047][T12907] ? lockdep_hardirqs_on+0x78/0x100 [ 474.902063][T12907] do_fast_syscall_32+0x32/0x70 [ 474.902080][T12907] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 474.902095][T12907] RIP: 0023:0xf6ffefec [ 474.902109][T12907] Code: Unable to access opcode bytes at 0xf6ffefc2. [ 474.902115][T12907] RSP: 002b:00000000f53ed50c EFLAGS: 00000292 ORIG_RAX: 0000000000000171 [ 474.902127][T12907] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000180 [ 474.902134][T12907] RDX: 0000000000034000 RSI: 0000000000000000 RDI: 0000000080000480 [ 474.902141][T12907] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 474.902147][T12907] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 474.902154][T12907] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 474.902170][T12907] [ 474.998918][ T34] usb 7-1: new low-speed USB device number 22 using dummy_hcd [ 475.018389][ T34] usb 7-1: Invalid ep0 maxpacket: 64 [ 475.021359][ T34] usb usb7-port1: unable to enumerate USB device [ 475.112915][T12912] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2000'. [ 475.120636][T12913] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 475.133472][T12912] batadv0: entered promiscuous mode [ 475.140318][T12912] macsec1: entered promiscuous mode [ 475.150191][T12912] macsec1: entered allmulticast mode [ 475.155237][T12912] batadv0: entered allmulticast mode [ 475.160756][T12909] nbd: must specify at least one socket [ 475.163904][T12912] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 475.177397][T12912] batadv0: left allmulticast mode [ 475.181091][T12912] batadv0: left promiscuous mode [ 476.667379][T12942] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2011'. [ 476.681077][T12942] batadv0: entered promiscuous mode [ 476.683573][T12942] macsec1: entered promiscuous mode [ 476.685647][T12942] macsec1: entered allmulticast mode [ 476.687376][T12942] batadv0: entered allmulticast mode [ 476.690333][T12942] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 476.693196][T12942] batadv0: left allmulticast mode [ 476.695011][T12942] batadv0: left promiscuous mode [ 477.163088][T12953] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 477.355605][T12950] nbd: must specify at least one socket [ 477.397789][ T5853] net_ratelimit: 375 callbacks suppressed [ 477.397803][ T5853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.679806][T11594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.254793][T12966] FAULT_INJECTION: forcing a failure. [ 478.254793][T12966] name failslab, interval 1, probability 0, space 0, times 0 [ 478.260055][T12966] CPU: 0 UID: 0 PID: 12966 Comm: syz.1.2017 Tainted: G L syzkaller #0 PREEMPT(full) [ 478.260084][T12966] Tainted: [L]=SOFTLOCKUP [ 478.260091][T12966] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 478.260102][T12966] Call Trace: [ 478.260111][T12966] [ 478.260119][T12966] dump_stack_lvl+0x100/0x190 [ 478.260145][T12966] should_fail_ex.cold+0x5/0xa [ 478.260166][T12966] should_failslab+0xc2/0x120 [ 478.260204][T12966] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 478.260229][T12966] ? __alloc_skb+0x5b7/0x710 [ 478.260254][T12966] ? __alloc_skb+0x140/0x710 [ 478.260280][T12966] __alloc_skb+0x140/0x710 [ 478.260302][T12966] ? __alloc_skb+0x5b7/0x710 [ 478.260326][T12966] ? __pfx___alloc_skb+0x10/0x10 [ 478.260358][T12966] alloc_skb_with_frags+0xdd/0x760 [ 478.260394][T12966] sock_alloc_send_pskb+0x801/0x980 [ 478.260426][T12966] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 478.260451][T12966] ? find_held_lock+0x2b/0x80 [ 478.260473][T12966] ? sock_def_readable+0x1d2/0x600 [ 478.260494][T12966] ? sock_def_readable+0x1d2/0x600 [ 478.260524][T12966] unix_dgram_sendmsg+0x3c7/0x1810 [ 478.260576][T12966] ? tomoyo_socket_sendmsg_permission+0x14e/0x3c0 [ 478.260608][T12966] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 478.260640][T12966] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 478.260671][T12966] ? apparmor_socket_sendmsg+0x15b/0x270 [ 478.260697][T12966] ____sys_sendmsg+0xa4d/0xbe0 [ 478.260717][T12966] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 478.260745][T12966] ? __pfx_____sys_sendmsg+0x10/0x10 [ 478.260768][T12966] ? rcu_is_watching+0x12/0xc0 [ 478.260792][T12966] ? ___sys_sendmsg+0x19d/0x1e0 [ 478.260812][T12966] ? kfree+0x1e5/0x6c0 [ 478.260831][T12966] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 478.260859][T12966] ___sys_sendmsg+0x190/0x1e0 [ 478.260883][T12966] ? __pfx____sys_sendmsg+0x10/0x10 [ 478.260902][T12966] ? do_user_addr_fault+0x7de/0x12f0 [ 478.260935][T12966] ? lockdep_hardirqs_on+0x78/0x100 [ 478.260960][T12966] ? irqentry_exit+0x24d/0xa00 [ 478.260996][T12966] ? __pfx___might_resched+0x10/0x10 [ 478.261023][T12966] ? __sys_sendmmsg+0x31d/0x440 [ 478.261051][T12966] __sys_sendmmsg+0x309/0x440 [ 478.261079][T12966] ? __pfx___sys_sendmmsg+0x10/0x10 [ 478.261104][T12966] ? find_held_lock+0x2b/0x80 [ 478.261131][T12966] ? __mutex_unlock_slowpath+0x35d/0x930 [ 478.261165][T12966] ? fput+0x79/0x100 [ 478.261201][T12966] ? ksys_write+0x1ac/0x250 [ 478.261221][T12966] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 478.261243][T12966] ? lockdep_hardirqs_on+0x78/0x100 [ 478.261265][T12966] __do_fast_syscall_32+0xe7/0x970 [ 478.261289][T12966] ? lockdep_hardirqs_on+0x78/0x100 [ 478.261313][T12966] do_fast_syscall_32+0x32/0x70 [ 478.261339][T12966] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 478.261363][T12966] RIP: 0023:0xf7f63fec [ 478.261386][T12966] Code: Unable to access opcode bytes at 0xf7f63fc2. [ 478.261396][T12966] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 478.261414][T12966] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080002dc0 [ 478.261426][T12966] RDX: 00000000db7a66cb RSI: 0000000000000000 RDI: 0000000000000000 [ 478.261436][T12966] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 478.261446][T12966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 478.261457][T12966] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 478.261479][T12966] [ 478.428129][ T5853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.987818][T11594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.207832][T12983] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 479.271925][T12985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.280747][T12985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.289146][T12985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.292617][T12985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.361397][T12986] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 479.375636][T12986] nbd: must specify at least one socket [ 479.395627][ T3269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.398723][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.401890][ T5853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.405129][ T3269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.477827][ T5853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.118129][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.371271][T13001] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 480.374171][T13001] overlayfs: failed to set xattr on upper [ 480.376535][T13001] overlayfs: ...falling back to redirect_dir=nofollow. [ 480.388817][T12999] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 480.398749][T13001] overlayfs: ...falling back to metacopy=off. [ 480.450136][T13003] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 480.452945][T13003] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 480.455789][T13003] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 480.568045][T13001] overlayfs: ...falling back to index=off. [ 480.570018][T13001] overlayfs: ...falling back to uuid=null. [ 480.618101][T13010] netlink: 'syz.2.2033': attribute type 21 has an invalid length. [ 480.621600][T12996] nbd: must specify at least one socket [ 480.623768][T13010] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2033'. [ 480.632930][T13010] netlink: 'syz.2.2033': attribute type 5 has an invalid length. [ 480.637657][T13010] netlink: 'syz.2.2033': attribute type 6 has an invalid length. [ 480.640993][T13010] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2033'. [ 481.779297][T13017] syz_tun: left promiscuous mode [ 481.786351][T13017] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.829930][T13017] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 481.846047][T13017] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 481.998991][T13017] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 482.001658][T13017] vlan2: left allmulticast mode [ 482.003528][T13017] bond0: left allmulticast mode [ 482.007393][T13017] bond_slave_0: left allmulticast mode [ 482.011925][T13017] bond_slave_1: left allmulticast mode [ 482.023227][T13017] bond1: left promiscuous mode [ 482.025171][T13017] ip6gre1: left promiscuous mode [ 482.034214][T13017] bond2: left promiscuous mode [ 482.039116][T13017] bond3: left promiscuous mode [ 482.052505][T13017] bond4: left promiscuous mode [ 482.061284][T13017] veth3: left allmulticast mode [ 482.066258][T13017] batadv0: left allmulticast mode [ 482.070892][T13017] macsec1: left promiscuous mode [ 482.075263][T13017] macsec1: left allmulticast mode [ 482.085495][T13017] vlan3: left allmulticast mode [ 482.145973][T13022] syzkaller0: entered promiscuous mode [ 482.148597][T13022] syzkaller0: entered allmulticast mode [ 482.155069][T13022] tipc: Enabled bearer , priority 0 [ 482.159169][T13021] tipc: Resetting bearer [ 482.182335][T13021] tipc: Disabling bearer [ 482.197821][ T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.205381][ T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.211373][ T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.219013][ T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.425299][T13036] net_ratelimit: 9 callbacks suppressed [ 482.425317][T13036] Set syz0 is full, maxelem 65536 reached [ 482.507720][ T5107] Bluetooth: hci1: command 0x0406 tx timeout [ 482.509726][ T5761] Bluetooth: hci2: command 0x0406 tx timeout [ 482.511843][ T5748] Bluetooth: hci3: command 0x0c1a tx timeout [ 482.580583][T13042] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 482.604354][ T5853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.507918][T11594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.512059][T13047] Set syz0 is full, maxelem 65536 reached [ 483.640377][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.540585][T13076] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2052'. [ 484.550929][T13076] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2052'. [ 484.638992][T13084] syzkaller0: entered promiscuous mode [ 484.640674][T13084] syzkaller0: entered allmulticast mode [ 484.688579][ T5853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.807821][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.845031][T13094] size and base must be multiples of 4 kiB [ 484.847013][T13094] CPU: 2 UID: 0 PID: 13094 Comm: syz.3.2058 Tainted: G L syzkaller #0 PREEMPT(full) [ 484.847033][T13094] Tainted: [L]=SOFTLOCKUP [ 484.847037][T13094] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 484.847046][T13094] Call Trace: [ 484.847051][T13094] [ 484.847056][T13094] dump_stack_lvl+0x100/0x190 [ 484.847075][T13094] mtrr_del.cold+0x72/0x85 [ 484.847089][T13094] mtrr_ioctl+0xbc8/0xcf0 [ 484.847105][T13094] ? __pfx_mtrr_ioctl+0x10/0x10 [ 484.847122][T13094] ? find_held_lock+0x2b/0x80 [ 484.847144][T13094] ? __fget_files+0x21f/0x3d0 [ 484.847158][T13094] ? __pfx_mtrr_ioctl+0x10/0x10 [ 484.847173][T13094] proc_reg_compat_ioctl+0x229/0x320 [ 484.847187][T13094] ? __pfx_proc_reg_compat_ioctl+0x10/0x10 [ 484.847199][T13094] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 484.847217][T13094] __do_fast_syscall_32+0xe7/0x970 [ 484.847237][T13094] do_fast_syscall_32+0x32/0x70 [ 484.847272][T13094] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 484.847291][T13094] RIP: 0023:0xf7f24fec [ 484.847306][T13094] Code: Unable to access opcode bytes at 0xf7f24fc2. [ 484.847312][T13094] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 484.847325][T13094] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000040104d04 [ 484.847334][T13094] RDX: 0000000080000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 484.847343][T13094] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 484.847351][T13094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 484.847359][T13094] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 484.847374][T13094] [ 484.909360][T13094] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1^!`l1&b0xUϔr$G [ 485.076511][T13100] FAULT_INJECTION: forcing a failure. [ 485.076511][T13100] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 485.081998][T13100] CPU: 3 UID: 0 PID: 13100 Comm: syz.3.2060 Tainted: G L syzkaller #0 PREEMPT(full) [ 485.082023][T13100] Tainted: [L]=SOFTLOCKUP [ 485.082029][T13100] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 485.082039][T13100] Call Trace: [ 485.082046][T13100] [ 485.082054][T13100] dump_stack_lvl+0x100/0x190 [ 485.082082][T13100] should_fail_ex.cold+0x5/0xa [ 485.082105][T13100] _copy_to_user+0x32/0xd0 [ 485.082134][T13100] simple_read_from_buffer+0xcb/0x170 [ 485.082163][T13100] proc_fail_nth_read+0x1af/0x230 [ 485.082185][T13100] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 485.082208][T13100] ? rw_verify_area+0xce/0x6d0 [ 485.082234][T13100] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 485.082256][T13100] vfs_read+0x1e4/0xb40 [ 485.082279][T13100] ? __pfx_vfs_read+0x10/0x10 [ 485.082293][T13100] ? find_held_lock+0x2b/0x80 [ 485.082314][T13100] ? __fget_files+0x215/0x3d0 [ 485.082333][T13100] ? __fget_files+0x21f/0x3d0 [ 485.082355][T13100] ksys_read+0x12a/0x250 [ 485.082369][T13100] ? __pfx_ksys_read+0x10/0x10 [ 485.082391][T13100] do_int80_emulation+0x14b/0x720 [ 485.082424][T13100] asm_int80_emulation+0x1a/0x20 [ 485.082444][T13100] RIP: 0023:0xf71273eb [ 485.082458][T13100] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 485.082473][T13100] RSP: 002b:00000000f53e64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 485.082496][T13100] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53e65d0 [ 485.082506][T13100] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 485.082516][T13100] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 485.082525][T13100] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 485.082534][T13100] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 485.082558][T13100] [ 485.340267][T13107] FAULT_INJECTION: forcing a failure. [ 485.340267][T13107] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 485.344870][T13107] CPU: 2 UID: 0 PID: 13107 Comm: syz.1.2062 Tainted: G L syzkaller #0 PREEMPT(full) [ 485.344889][T13107] Tainted: [L]=SOFTLOCKUP [ 485.344893][T13107] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 485.344901][T13107] Call Trace: [ 485.344906][T13107] [ 485.344911][T13107] dump_stack_lvl+0x100/0x190 [ 485.344929][T13107] should_fail_ex.cold+0x5/0xa [ 485.344943][T13107] _copy_to_user+0x32/0xd0 [ 485.344963][T13107] simple_read_from_buffer+0xcb/0x170 [ 485.344984][T13107] proc_fail_nth_read+0x1af/0x230 [ 485.345001][T13107] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 485.345017][T13107] ? rw_verify_area+0xce/0x6d0 [ 485.345038][T13107] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 485.345054][T13107] vfs_read+0x1e4/0xb40 [ 485.345066][T13107] ? __pfx_vfs_read+0x10/0x10 [ 485.345076][T13107] ? find_held_lock+0x2b/0x80 [ 485.345090][T13107] ? __fget_files+0x215/0x3d0 [ 485.345104][T13107] ? __fget_files+0x21f/0x3d0 [ 485.345118][T13107] ksys_read+0x12a/0x250 [ 485.345129][T13107] ? __pfx_ksys_read+0x10/0x10 [ 485.345143][T13107] do_int80_emulation+0x14b/0x720 [ 485.345162][T13107] asm_int80_emulation+0x1a/0x20 [ 485.345174][T13107] RIP: 0023:0xf71673eb [ 485.345184][T13107] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 485.345196][T13107] RSP: 002b:00000000f54264bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 485.345207][T13107] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54265d0 [ 485.345215][T13107] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 485.345222][T13107] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 485.345228][T13107] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 485.345235][T13107] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 485.345248][T13107] [ 485.514882][T13103] Set syz0 is full, maxelem 65536 reached [ 485.617953][T13111] tipc: Started in network mode [ 485.621972][T13111] tipc: Node identity 4, cluster identity 4711 [ 485.622827][ T42] kauditd_printk_skb: 25 callbacks suppressed [ 485.622868][ T42] audit: type=1800 audit(1785820147.692:151): pid=13111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2064" name="b_vendor_code" dev="configfs" ino=41878 res=0 errno=0 [ 485.624220][T13111] tipc: Node number set to 4 [ 485.977965][T11594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.293520][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.538247][T13136] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 486.602744][T13142] netlink: 58 bytes leftover after parsing attributes in process `syz.1.2071'. [ 486.617690][T13142] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2071'. [ 486.622391][T13142] netlink: 58 bytes leftover after parsing attributes in process `syz.1.2071'. [ 486.700230][T13147] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 486.724203][T13149] debugfs: '1^!`l1&b0xUϔr$Gu' already exists in 'ieee80211' [ 486.736543][T13147] nbd: must specify at least one socket [ 486.930937][T13152] [U] [ 486.932685][T13152] [U] [ 486.933889][T13152] [U] [ 486.935074][T13152] [U] [ 486.940431][T13152] [U] [ 486.941609][T13152] [U] [ 486.942771][T13152] [U] [ 486.943960][T13152] [U] [ 486.948203][T13152] [U] [ 486.949411][T13152] [U] [ 486.950601][T13152] [U] [ 486.951806][T13152] [U] [ 486.961347][T13152] [U] [ 486.962567][T13152] [U] [ 486.963768][T13152] [U] [ 486.964959][T13152] [U] [ 486.968993][T13152] [U] [ 486.970218][T13152] [U] [ 486.971448][T13152] [U] [ 486.972630][T13152] [U] [ 486.973967][T13152] [U] [ 486.975154][T13152] [U] [ 486.976222][T13152] [U] [ 486.977407][T13152] [U] [ 486.978976][T13152] [U] [ 486.979904][T13152] [U] [ 486.980896][T13152] [U] [ 486.982021][T13152] [U] [ 486.984267][T13152] [U] [ 486.985303][T13152] [U] [ 486.986178][T13152] [U] [ 486.987051][T13152] [U] [ 486.991764][T13152] [U] [ 486.992773][T13152] [U] [ 486.993673][T13152] [U] [ 486.994548][T13152] [U] [ 487.021393][T13152] [U] [ 487.022573][T13152] [U] [ 487.023659][T13152] [U] [ 487.024713][T13152] [U] [ 487.026801][T13152] [U] [ 487.027878][T13152] [U] [ 487.028817][T13152] [U] [ 487.029593][T13152] [U] [ 487.049711][T13152] [U] [ 487.050886][T13152] [U] [ 487.052011][T13152] [U] [ 487.053121][T13152] [U] [ 487.071148][T13152] [U] [ 487.072349][T13152] [U] [ 487.073448][T13152] [U] [ 487.074325][T13152] [U] [ 487.078305][T13152] [U] [ 487.079491][T13152] [U] [ 487.080606][T13152] [U] [ 487.081581][T13152] [U] [ 487.082647][T13152] [U] [ 487.083553][T13152] [U] [ 487.084691][T13152] [U] [ 487.085806][T13152] [U] [ 487.088986][T13152] [U] [ 487.089922][T13152] [U] [ 487.090812][T13152] [U] [ 487.091930][T13152] [U] [ 487.099321][T13152] [U] [ 487.100507][T13152] [U] [ 487.101641][T13152] [U] [ 487.102757][T13152] [U] [ 487.104169][T13152] [U] [ 487.105313][T13152] [U] [ 487.106424][T13152] [U] [ 487.107553][T13152] [U] [ 487.112486][T13152] [U] [ 487.113634][T13152] [U] [ 487.114741][T13152] [U] [ 487.115862][T13152] [U] [ 487.119884][T13152] [U] [ 487.121176][T13152] [U] [ 487.122376][T13152] [U] [ 487.123588][T13152] [U] [ 487.127870][T13152] [U] [ 487.128792][T13152] [U] [ 487.129687][T13152] [U] [ 487.130573][T13152] [U] [ 487.131623][T13152] [U] [ 487.132524][T13152] [U] [ 487.133414][T13152] [U] [ 487.134295][T13152] [U] [ 487.135392][T13152] [U] [ 487.136287][T13152] [U] [ 487.137176][T13152] [U] [ 487.138054][T13152] [U] [ 487.139319][T13152] [U] [ 487.140335][T13152] [U] [ 487.141241][T13152] [U] [ 487.142121][T13152] [U] [ 487.143179][T13152] [U] [ 487.144087][T13152] [U] [ 487.144977][T13152] [U] [ 487.145852][T13152] [U] [ 487.146864][T13152] [U] [ 487.147769][T13152] [U] [ 487.148648][T13152] [U] [ 487.149528][T13152] [U] [ 487.150644][T13152] [U] [ 487.151549][T13152] [U] [ 487.152343][T13152] [U] [ 487.153239][T13152] [U] [ 487.154335][T13152] [U] [ 487.155240][T13152] [U] [ 487.156154][T13152] [U] [ 487.157039][T13152] [U] [ 487.158103][T13152] [U] [ 487.158966][T13152] [U] [ 487.159870][T13152] [U] [ 487.160750][T13152] [U] [ 487.161784][T13152] [U] [ 487.162678][T13152] [U] [ 487.163611][T13152] [U] [ 487.164492][T13152] [U] [ 487.165530][T13152] [U] [ 487.166411][T13152] [U] [ 487.167309][T13152] [U] [ 487.168190][T13152] [U] [ 487.169267][T13152] [U] [ 487.170170][T13152] [U] [ 487.171059][T13152] [U] [ 487.177079][T13151] [U] [ 487.181209][T13158] dlm: no locking on control device [ 487.198607][T13158] bond5 (unregistering): Released all slaves [ 488.087449][T13173] netlink: 'syz.0.2084': attribute type 1 has an invalid length. [ 488.163776][T13173] 8021q: adding VLAN 0 to HW filter on device bond7 [ 488.205831][T13180] FAULT_INJECTION: forcing a failure. [ 488.205831][T13180] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 488.215748][T13180] CPU: 3 UID: 0 PID: 13180 Comm: syz.3.2083 Tainted: G L syzkaller #0 PREEMPT(full) [ 488.215778][T13180] Tainted: [L]=SOFTLOCKUP [ 488.215784][T13180] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 488.215795][T13180] Call Trace: [ 488.215802][T13180] [ 488.215810][T13180] dump_stack_lvl+0x100/0x190 [ 488.215837][T13180] should_fail_ex.cold+0x5/0xa [ 488.215859][T13180] _copy_from_user+0x2e/0xd0 [ 488.215889][T13180] get_compat_msghdr+0xb3/0x480 [ 488.215920][T13180] ? __pfx_get_compat_msghdr+0x10/0x10 [ 488.215949][T13180] ? rcu_is_watching+0x12/0xc0 [ 488.215978][T13180] ? ___sys_sendmsg+0x19d/0x1e0 [ 488.215997][T13180] ? kfree+0x1e5/0x6c0 [ 488.216014][T13180] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 488.216042][T13180] ___sys_sendmsg+0x1b6/0x1e0 [ 488.216064][T13180] ? __pfx____sys_sendmsg+0x10/0x10 [ 488.216083][T13180] ? do_user_addr_fault+0x7de/0x12f0 [ 488.216118][T13180] ? lockdep_hardirqs_on+0x78/0x100 [ 488.216143][T13180] ? irqentry_exit+0x24d/0xa00 [ 488.216175][T13180] ? __pfx___might_resched+0x10/0x10 [ 488.216202][T13180] ? __sys_sendmmsg+0x31d/0x440 [ 488.216230][T13180] __sys_sendmmsg+0x309/0x440 [ 488.216258][T13180] ? __pfx___sys_sendmmsg+0x10/0x10 [ 488.216283][T13180] ? find_held_lock+0x2b/0x80 [ 488.216311][T13180] ? __mutex_unlock_slowpath+0x35d/0x930 [ 488.216348][T13180] ? fput+0x79/0x100 [ 488.216369][T13180] ? ksys_write+0x1ac/0x250 [ 488.216390][T13180] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 488.216408][T13180] ? lockdep_hardirqs_on+0x78/0x100 [ 488.216431][T13180] __do_fast_syscall_32+0xe7/0x970 [ 488.216455][T13180] ? lockdep_hardirqs_on+0x78/0x100 [ 488.216478][T13180] do_fast_syscall_32+0x32/0x70 [ 488.216503][T13180] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 488.216526][T13180] RIP: 0023:0xf7f24fec [ 488.216547][T13180] Code: Unable to access opcode bytes at 0xf7f24fc2. [ 488.216556][T13180] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 488.216574][T13180] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800bd000 [ 488.216585][T13180] RDX: 0000000000000318 RSI: 0000000000000000 RDI: 0000000000000000 [ 488.216595][T13180] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 488.216605][T13180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 488.216616][T13180] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 488.216639][T13180] [ 488.312931][T11594] net_ratelimit: 2 callbacks suppressed [ 488.312943][T11594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.373089][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.109963][T13194] Invalid ELF header magic: != ELF [ 489.397776][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.439883][T13201] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 489.453425][T13199] netlink: 'syz.0.2090': attribute type 21 has an invalid length. [ 489.457804][T13199] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2090'. [ 489.457835][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.462443][T13199] netlink: 'syz.0.2090': attribute type 5 has an invalid length. [ 489.469194][T13199] netlink: 'syz.0.2090': attribute type 6 has an invalid length. [ 489.472534][T13199] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2090'. [ 489.481850][T13199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.485703][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.807653][ T34] usb 7-1: new low-speed USB device number 23 using dummy_hcd [ 489.924324][T13213] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2096'. [ 489.928425][T13213] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2096'. [ 489.961686][ T34] usb 7-1: unable to get BOS descriptor or descriptor too short [ 489.965076][ T34] usb 7-1: config 100 has an invalid interface number: 173 but max is 0 [ 489.980226][ T34] usb 7-1: config 100 has no interface number 0 [ 489.989723][ T34] usb 7-1: config 100 interface 173 altsetting 142 endpoint 0xE is Bulk; changing to Interrupt [ 490.001082][ T34] usb 7-1: config 100 interface 173 altsetting 142 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 490.011643][ T34] usb 7-1: config 100 interface 173 altsetting 142 endpoint 0x83 has invalid wMaxPacketSize 0 [ 490.022163][ T34] usb 7-1: config 100 interface 173 has no altsetting 0 [ 490.026894][ T34] usb 7-1: string descriptor 0 read error: -22 [ 490.031121][ T34] usb 7-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4 [ 490.034457][ T34] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.109349][T13207] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 490.170486][ T34] metro_usb 7-1:100.173: Metrologic USB to Serial converter detected [ 490.198451][ T34] usb 7-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 490.299087][T13225] netlink: 27 bytes leftover after parsing attributes in process `syz.3.2100'. [ 490.351106][ T205] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.354541][ T205] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.371874][T13225] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 490.392434][T13207] metro-usb ttyUSB0: metrousb_open - failed submitting interrupt in urb, error code=-90 [ 490.407633][ T34] usb 7-1: USB disconnect, device number 23 [ 490.428363][ T34] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 490.436226][ T34] metro_usb 7-1:100.173: device disconnected [ 490.442250][ T5853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.470770][T13209] Set syz0 is full, maxelem 65536 reached [ 490.597897][T11594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.907960][ T9] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 490.969598][T13241] ip6t_srh: unknown srh invflags 4000 [ 491.029362][T13242] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 491.031965][T13242] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 491.038903][T13242] vhci_hcd vhci_hcd.0: Device attached [ 491.057725][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 491.061172][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 491.068152][ T9] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 491.077637][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.084522][ T9] usb 6-1: config 0 descriptor?? [ 491.277993][ T3269] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 491.294174][ T9] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 491.320638][T13243] vhci_hcd: connection reset by peer [ 491.323414][ T12] vhci_hcd vhci_hcd.2: stop threads [ 491.325234][ T12] vhci_hcd vhci_hcd.2: release socket [ 491.327351][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 491.468029][ T5846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.562462][ T10] usb 6-1: USB disconnect, device number 19 [ 493.043183][T13254] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 493.129267][T13258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 493.168659][T13258] nbd: must specify at least one socket [ 493.281244][T13264] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2112'. [ 493.296016][T13264] batadv0: entered promiscuous mode [ 493.300430][T13264] macsec1: entered promiscuous mode [ 493.302597][T13264] macsec1: entered allmulticast mode [ 493.304572][T13264] batadv0: entered allmulticast mode [ 493.308770][T13264] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 493.312869][T13264] batadv0: left allmulticast mode [ 493.315289][T13264] batadv0: left promiscuous mode [ 493.820385][T13268] net_ratelimit: 4 callbacks suppressed [ 493.820400][T13268] Set syz0 is full, maxelem 65536 reached [ 493.968922][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.030409][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.040737][ T847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.047281][ T1167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.059263][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.069559][ T5853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.073336][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.080562][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.172966][T13282] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2116'. [ 494.234695][T13284] MINIX-fs: blocksize too small for device [ 494.281454][T13284] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 494.336530][T10705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.057329][T13300] netlink: 'syz.1.2120': attribute type 21 has an invalid length. [ 495.062722][T13300] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2120'. [ 495.072093][T13300] netlink: 'syz.1.2120': attribute type 5 has an invalid length. [ 495.086462][T13300] netlink: 'syz.1.2120': attribute type 6 has an invalid length. [ 495.089196][T13300] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2120'. [ 495.668254][ T10] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 495.838830][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 495.843991][ T10] usb 8-1: unable to get BOS descriptor or descriptor too short [ 495.847458][ T10] usb 8-1: config 14 has an invalid interface number: 57 but max is 1 [ 495.850446][ T10] usb 8-1: config 14 has an invalid interface number: 228 but max is 1 [ 495.853173][ T10] usb 8-1: config 14 has no interface number 0 [ 495.855194][ T10] usb 8-1: config 14 has no interface number 1 [ 495.857406][ T10] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 495.864059][ T10] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 495.868514][ T10] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 495.872142][ T10] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 495.875759][ T10] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 495.879642][ T10] usb 8-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 495.883773][ T10] usb 8-1: config 14 interface 57 has no altsetting 0 [ 495.886019][ T10] usb 8-1: config 14 interface 228 has no altsetting 0 [ 495.892517][ T10] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 495.895542][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.898747][ T10] usb 8-1: Product: syz [ 495.900201][ T10] usb 8-1: Manufacturer: syz [ 495.901658][ T10] usb 8-1: SerialNumber: syz [ 496.301118][T13321] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 496.303536][T13321] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 496.314567][ T10] legousbtower 8-1:14.57: interrupt endpoints not found [ 496.329905][T13321] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 496.338619][T13321] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 496.417709][ T3269] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 496.718111][ T10] legousbtower 8-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 496.722297][ T10] legousbtower 8-1:14.228: LEGO USB Tower #-159 now attached to major 180 minor 1 [ 496.763182][T13321] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 496.767351][T13321] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 497.028250][T13334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 497.035488][T13334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 497.307067][T13329] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 497.389698][T13341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 497.401922][T13341] nbd: must specify at least one socket [ 497.878602][T13363] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 497.983991][T13367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 498.004456][T13367] nbd: must specify at least one socket [ 498.432713][ T3269] usb 8-1: USB disconnect, device number 24 [ 498.466665][ T3269] legousbtower 8-1:14.228: LEGO USB Tower #-159 now disconnected [ 499.578054][ T13] net_ratelimit: 10 callbacks suppressed [ 499.578066][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.657946][T13371] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 499.668082][ T1357] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.794430][ T1163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.799221][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.803788][ T5853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.840210][T13405] Set syz0 is full, maxelem 65536 reached [ 500.008912][T13414] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2133'. [ 500.016304][T13401] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2131'. [ 500.026696][T13409] MINIX-fs: blocksize too small for device [ 500.080045][T13409] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 500.103339][T13424] MINIX-fs: blocksize too small for device [ 500.124739][T13401] ------------[ cut here ]------------ [ 500.129122][T13401] err [ 500.129132][T13401] WARNING: net/wireless/core.c:207 at cfg80211_switch_netns+0x575/0x690, CPU#0: syz.3.2131/13401 [ 500.134091][T13401] Modules linked in: [ 500.136082][T13401] CPU: 0 UID: 0 PID: 13401 Comm: syz.3.2131 Tainted: G L syzkaller #0 PREEMPT(full) [ 500.140450][T13401] Tainted: [L]=SOFTLOCKUP [ 500.141829][T13401] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 500.145073][T13401] RIP: 0010:cfg80211_switch_netns+0x575/0x690 [ 500.146930][T13401] Code: 87 8b fe 31 ff 89 c5 89 c6 e8 b7 44 07 f7 85 ed 0f 84 0f ff ff ff e8 3a 4a 07 f7 90 0f 0b 90 e9 01 ff ff ff e8 2c 4a 07 f7 90 <0f> 0b 90 e9 78 fd ff ff bd a1 ff ff ff e9 23 fe ff ff e8 54 da 76 [ 500.153088][T13401] RSP: 0018:ffffc9000473f530 EFLAGS: 00010287 [ 500.154861][T13401] RAX: 000000000000b8af RBX: 00000000ffffffef RCX: ffffc9000c402000 [ 500.157473][T13401] RDX: 0000000000080000 RSI: ffffffff8b0266d4 RDI: ffff88802930a540 [ 500.160063][T13401] RBP: ffff888072680740 R08: 0000000000000005 R09: 0000000000000000 [ 500.162423][T13401] R10: 00000000ffffffef R11: 0000000000000000 R12: ffff888072680928 [ 500.164897][T13401] R13: ffff888072680e10 R14: ffff888057b7cef0 R15: ffff888072680000 [ 500.167367][T13401] FS: 0000000000000000(0000) GS:ffff888096bdf000(0063) knlGS:00000000f53e6b40 [ 500.170401][T13401] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 500.172488][T13401] CR2: 00000000f739d8e4 CR3: 000000007943b000 CR4: 0000000000352ef0 [ 500.175096][T13401] Call Trace: [ 500.176178][T13401] [ 500.177146][T13401] nl80211_wiphy_netns+0x17c/0x290 [ 500.178890][T13401] genl_family_rcv_msg_doit+0x214/0x300 [ 500.180656][T13401] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 500.182628][T13401] ? genl_get_cmd+0x3e7/0x760 [ 500.184146][T13401] ? bpf_lsm_capable+0x9/0x10 [ 500.185717][T13401] ? security_capable+0x80/0x260 [ 500.187294][T13401] ? ns_capable+0xd2/0xf0 [ 500.188811][T13401] genl_rcv_msg+0x560/0x800 [ 500.190278][T13401] ? __pfx_genl_rcv_msg+0x10/0x10 [ 500.191902][T13401] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 500.193611][T13401] ? __pfx_nl80211_wiphy_netns+0x10/0x10 [ 500.195404][T13401] ? __pfx_nl80211_post_doit+0x10/0x10 [ 500.197131][T13401] netlink_rcv_skb+0x159/0x420 [ 500.200941][T13401] ? __pfx_genl_rcv_msg+0x10/0x10 [ 500.202554][T13401] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 500.204232][T13401] ? netlink_deliver_tap+0x1ae/0xcc0 [ 500.205899][T13401] genl_rcv+0x28/0x40 [ 500.207213][T13401] netlink_unicast+0x585/0x850 [ 500.208808][T13401] ? __pfx_netlink_unicast+0x10/0x10 [ 500.210471][T13401] netlink_sendmsg+0x8b0/0xda0 [ 500.212106][T13401] ? __pfx_netlink_sendmsg+0x10/0x10 [ 500.213783][T13401] ? apparmor_socket_sendmsg+0x15b/0x270 [ 500.215550][T13401] ____sys_sendmsg+0xa4d/0xbe0 [ 500.217058][T13401] ? __pfx_netlink_sendmsg+0x10/0x10 [ 500.218810][T13401] ? __pfx_____sys_sendmsg+0x10/0x10 [ 500.220562][T13401] ? plist_check_list+0x1b8/0x280 [ 500.222127][T13401] ? plist_del+0x308/0x510 [ 500.223560][T13401] ___sys_sendmsg+0x190/0x1e0 [ 500.225056][T13401] ? __pfx____sys_sendmsg+0x10/0x10 [ 500.226699][T13401] ? futex_wake+0x220/0x5e0 [ 500.228260][T13401] ? find_held_lock+0x2b/0x80 [ 500.229777][T13401] __sys_sendmsg+0x160/0x210 [ 500.231278][T13401] ? __pfx___sys_sendmsg+0x10/0x10 [ 500.232908][T13401] __do_fast_syscall_32+0xe7/0x970 [ 500.234564][T13401] ? lockdep_hardirqs_on+0x78/0x100 [ 500.236213][T13401] do_fast_syscall_32+0x32/0x70 [ 500.237838][T13401] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 500.239835][T13401] RIP: 0023:0xf7f24fec [ 500.241154][T13401] Code: Unable to access opcode bytes at 0xf7f24fc2. [ 500.243242][T13401] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 500.245854][T13401] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000380 [ 500.248390][T13401] RDX: 0000000020000084 RSI: 0000000000000000 RDI: 0000000000000000 [ 500.250841][T13401] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 500.253296][T13401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 500.255766][T13401] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 500.259825][T13401] [ 500.260830][T13401] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 500.264102][T13401] CPU: 0 UID: 0 PID: 13401 Comm: syz.3.2131 Tainted: G L syzkaller #0 PREEMPT(full) [ 500.267634][T13401] Tainted: [L]=SOFTLOCKUP [ 500.269009][T13401] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 500.272260][T13401] Call Trace: [ 500.273328][T13401] [ 500.274280][T13401] dump_stack_lvl+0x100/0x190 [ 500.275780][T13401] vpanic+0x552/0x970 [ 500.277058][T13401] ? __pfx_vpanic+0x10/0x10 [ 500.278515][T13401] panic+0xd1/0xe0 [ 500.279717][T13401] ? __pfx_panic+0x10/0x10 [ 500.281164][T13401] check_panic_on_warn.cold+0x19/0x34 [ 500.282873][T13401] ? cfg80211_switch_netns+0x575/0x690 [ 500.284601][T13401] __warn.cold+0x191/0x318 [ 500.286016][T13401] __report_bug+0x30f/0x440 [ 500.287478][T13401] ? cfg80211_switch_netns+0x575/0x690 [ 500.289192][T13401] ? __pfx___report_bug+0x10/0x10 [ 500.290798][T13401] ? cfg80211_switch_netns+0x575/0x690 [ 500.292529][T13401] report_bug+0xb2/0x220 [ 500.293878][T13401] ? cfg80211_switch_netns+0x575/0x690 [ 500.295596][T13401] handle_bug+0x16a/0x2a0 [ 500.296965][T13401] exc_invalid_op+0x17/0x50 [ 500.298413][T13401] asm_exc_invalid_op+0x1a/0x20 [ 500.299953][T13401] RIP: 0010:cfg80211_switch_netns+0x575/0x690 [ 500.301864][T13401] Code: 87 8b fe 31 ff 89 c5 89 c6 e8 b7 44 07 f7 85 ed 0f 84 0f ff ff ff e8 3a 4a 07 f7 90 0f 0b 90 e9 01 ff ff ff e8 2c 4a 07 f7 90 <0f> 0b 90 e9 78 fd ff ff bd a1 ff ff ff e9 23 fe ff ff e8 54 da 76 [ 500.309237][T13401] RSP: 0018:ffffc9000473f530 EFLAGS: 00010287 [ 500.311624][T13401] RAX: 000000000000b8af RBX: 00000000ffffffef RCX: ffffc9000c402000 [ 500.314685][T13401] RDX: 0000000000080000 RSI: ffffffff8b0266d4 RDI: ffff88802930a540 [ 500.317801][T13401] RBP: ffff888072680740 R08: 0000000000000005 R09: 0000000000000000 [ 500.320878][T13401] R10: 00000000ffffffef R11: 0000000000000000 R12: ffff888072680928 [ 500.323937][T13401] R13: ffff888072680e10 R14: ffff888057b7cef0 R15: ffff888072680000 [ 500.326981][T13401] ? cfg80211_switch_netns+0x574/0x690 [ 500.329130][T13401] nl80211_wiphy_netns+0x17c/0x290 [ 500.331140][T13401] genl_family_rcv_msg_doit+0x214/0x300 [ 500.333304][T13401] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 500.335666][T13401] ? genl_get_cmd+0x3e7/0x760 [ 500.337515][T13401] ? bpf_lsm_capable+0x9/0x10 [ 500.339396][T13401] ? security_capable+0x80/0x260 [ 500.341378][T13401] ? ns_capable+0xd2/0xf0 [ 500.343092][T13401] genl_rcv_msg+0x560/0x800 [ 500.344929][T13401] ? __pfx_genl_rcv_msg+0x10/0x10 [ 500.346847][T13401] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 500.348580][T13401] ? __pfx_nl80211_wiphy_netns+0x10/0x10 [ 500.350373][T13401] ? __pfx_nl80211_post_doit+0x10/0x10 [ 500.352132][T13401] netlink_rcv_skb+0x159/0x420 [ 500.353661][T13401] ? __pfx_genl_rcv_msg+0x10/0x10 [ 500.355256][T13401] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 500.356938][T13401] ? netlink_deliver_tap+0x1ae/0xcc0 [ 500.358599][T13401] genl_rcv+0x28/0x40 [ 500.359878][T13401] netlink_unicast+0x585/0x850 [ 500.361409][T13401] ? __pfx_netlink_unicast+0x10/0x10 [ 500.363071][T13401] netlink_sendmsg+0x8b0/0xda0 [ 500.364595][T13401] ? __pfx_netlink_sendmsg+0x10/0x10 [ 500.366370][T13401] ? apparmor_socket_sendmsg+0x15b/0x270 [ 500.368287][T13401] ____sys_sendmsg+0xa4d/0xbe0 [ 500.369866][T13401] ? __pfx_netlink_sendmsg+0x10/0x10 [ 500.371574][T13401] ? __pfx_____sys_sendmsg+0x10/0x10 [ 500.373247][T13401] ? plist_check_list+0x1b8/0x280 [ 500.374843][T13401] ? plist_del+0x308/0x510 [ 500.376293][T13401] ___sys_sendmsg+0x190/0x1e0 [ 500.377815][T13401] ? __pfx____sys_sendmsg+0x10/0x10 [ 500.379468][T13401] ? futex_wake+0x220/0x5e0 [ 500.380956][T13401] ? find_held_lock+0x2b/0x80 [ 500.382466][T13401] __sys_sendmsg+0x160/0x210 [ 500.383955][T13401] ? __pfx___sys_sendmsg+0x10/0x10 [ 500.385587][T13401] __do_fast_syscall_32+0xe7/0x970 [ 500.387232][T13401] ? lockdep_hardirqs_on+0x78/0x100 [ 500.388880][T13401] do_fast_syscall_32+0x32/0x70 [ 500.390421][T13401] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 500.392435][T13401] RIP: 0023:0xf7f24fec [ 500.393771][T13401] Code: Unable to access opcode bytes at 0xf7f24fc2. [ 500.395861][T13401] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 500.398451][T13401] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000380 [ 500.400940][T13401] RDX: 0000000020000084 RSI: 0000000000000000 RDI: 0000000000000000 [ 500.403423][T13401] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 500.405901][T13401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 500.408369][T13401] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 500.410856][T13401] [ 500.412490][T13401] Kernel Offset: disabled [ 500.413854][T13401] Rebooting in 86400 seconds..