last executing test programs: 11m21.032566509s ago: executing program 0 (id=80): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) set_mempolicy(0x6006, 0x0, 0x3) sendmsg$nl_route_sched(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xffe3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c}]}}}]}, 0x78}}, 0x0) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) lseek(r6, 0xfffffffffffffff9, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@var={0x2, 0x12, 0x0, 0x11, 0x4, 0xffffffff}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x2c}, 0x28) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) msync(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) r7 = syz_open_dev$video4linux(0x0, 0x3, 0x0) ioctl$VIDIOC_QUERYBUF(r7, 0xc04c5609, &(0x7f0000000140)=@multiplanar_overlay={0x5, 0x9, 0x4, 0x800000, 0x200, {0x77359400}, {0x1, 0x1, 0x4, 0x94, 0x3, 0x3, "4ff28405"}, 0x4, 0x3, {&(0x7f00000000c0)=[{0x8000, 0x7, {0x80000000}, 0x5}, {0x2, 0x1, {0xc5d7}, 0x4}]}, 0xffffffff}) r8 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f00000004c0)={0x1, {{0xa, 0x0, 0x100000, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1296}}, {{0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x5}}}, 0x104) r9 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r9, &(0x7f0000000000)=[{&(0x7f0000000140)=""/131, 0x83}], 0x1, 0x7, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r10, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r10, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="10000000000000000f010000000000003000000000000000ff00000005000000dae7c65afdd9d1d5073fbf984e560f7f7af0377a701ad4e8ab3a00000000000090000000000000000000000004000000474995282b8d35b2efb349cfa55288ab0139064c723f71e2d9ced0cbb2d46df48f8ee505b82850c69ed841ec12c3b6392c378033c46278ff6bc63d6d5bf4c8b718e78b05ad817aac3b5239cd4fe877aff14721f369a8fb6e6daa5710be61d3edc36edbd248ee581a70263663739cac6a0b0dc55ac9b2f56dc43f04dc78a3000058"], 0x128}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000340)="94", 0x1}], 0x1, &(0x7f0000002040)=[{0xc, 0x1, 0xffc}], 0xc}}], 0x2, 0x4000045) 11m19.616502623s ago: executing program 0 (id=83): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) read$dsp(r0, &(0x7f0000000140)=""/52, 0x34) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x0, &(0x7f0000000080)=0x2, 0x4) r2 = syz_io_uring_setup(0x1fa, &(0x7f0000000400)={0x0, 0x49aa, 0x80, 0x1, 0x10000051}, &(0x7f0000001080), &(0x7f0000000300), &(0x7f0000000000)) io_uring_enter(r2, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x8000) socket$inet6(0xa, 0x5, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000000)={{@my=0x1, 0xffffffff}, @local, 0x0, 0x0, 0x8000000, 0x0, 0x6, 0x7fc}) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000001300), 0x244000, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001040)={0xffffffffffffffff, 0xe0, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25, 0x8, 0x0, 0x0}}, 0x10) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x102800) write(0xffffffffffffffff, &(0x7f0000000000)="d5", 0xfffffedf) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 11m18.683738614s ago: executing program 0 (id=88): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000100)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x1200000}]}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000200)={0x2, 0x0, [{0x1b, 0x0, 0xfee00d00}, {0x832, 0x0, 0x40000}]}) ioctl$KVM_GET_LAPIC(r5, 0x8400ae8e, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="18000000160001ea"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @private=0xffffffff}, 0x10) recvmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}, 0xc}], 0x1, 0x60, 0x0) 11m17.524962609s ago: executing program 0 (id=93): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f00000000c0)=0xc) prlimit64(r0, 0x1, &(0x7f0000000000)={0x8, 0x889}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r4, 0x0, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) 11m16.72506244s ago: executing program 3 (id=95): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) gettid() timer_create(0x4, 0x0, &(0x7f0000000200)) syz_io_uring_setup(0x5b0f, 0x0, 0x0, 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x2, 0x1000) msgsnd(0x0, &(0x7f00000002c0)={0x2}, 0x8, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x68c81, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r2}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r3}, 0x38) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat2$dir(0xffffff9c, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)={0x802, 0x88, 0x20}, 0x18) write(0xffffffffffffffff, &(0x7f0000001900)='3', 0x1) 11m15.793450755s ago: executing program 0 (id=97): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000100)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x1200000}]}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000200)={0x2, 0x0, [{0x1b, 0x0, 0xfee00d00}, {0x832, 0x0, 0x40000}]}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="18000000160001ea"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @private=0xffffffff}, 0x10) recvmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}, 0xc}], 0x1, 0x60, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 11m15.574934604s ago: executing program 3 (id=100): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000100)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x1200000}]}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000200)={0x2, 0x0, [{0x1b, 0x0, 0xfee00d00}, {0x832, 0x0, 0x40000}]}) ioctl$KVM_GET_LAPIC(r5, 0x8400ae8e, &(0x7f0000000880)) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="18000000160001"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @private=0xffffffff}, 0x10) recvmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}, 0xc}], 0x1, 0x60, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 11m14.297703467s ago: executing program 0 (id=102): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x31) mount(0x0, 0x0, &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000007000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)="31301f31203100", 0x7) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/netdevsim/devices/netdevsim10/sriov_numvfs\x00', 0x1, 0x0) write(r2, &(0x7f0000000600)='1\x00', 0x2) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)=ANY=[@ANYBLOB], 0x38}}, 0x0) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@generic={&(0x7f0000001280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r2}, 0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x406, r5) ioctl$VIDIOC_G_FREQUENCY(r6, 0xc02c5638, &(0x7f0000000180)={0x4, 0x1, 0x245}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r4) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f00000041c0)={0x0, 0x0, &(0x7f0000004180)={&(0x7f0000004140)={0x30, r7, 0x21, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x4d}, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x800, 0x13}}}}}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x40080) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r1) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r9, 0x8, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0xc000) 11m14.18792443s ago: executing program 32 (id=102): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x31) mount(0x0, 0x0, &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000007000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)="31301f31203100", 0x7) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/netdevsim/devices/netdevsim10/sriov_numvfs\x00', 0x1, 0x0) write(r2, &(0x7f0000000600)='1\x00', 0x2) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)=ANY=[@ANYBLOB], 0x38}}, 0x0) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@generic={&(0x7f0000001280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r2}, 0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x406, r5) ioctl$VIDIOC_G_FREQUENCY(r6, 0xc02c5638, &(0x7f0000000180)={0x4, 0x1, 0x245}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r4) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f00000041c0)={0x0, 0x0, &(0x7f0000004180)={&(0x7f0000004140)={0x30, r7, 0x21, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x4d}, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x800, 0x13}}}}}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x40080) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r1) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r9, 0x8, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0xc000) 11m14.133156559s ago: executing program 3 (id=105): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000400)='dir0/trace_marker\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) close(r2) 11m13.662463646s ago: executing program 3 (id=107): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f00000000c0)=0xc) prlimit64(r0, 0x1, &(0x7f0000000000)={0x8, 0x889}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r4, 0x0, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) 11m12.259092174s ago: executing program 3 (id=111): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000380)=@arm64={0xf8, 0xb6, 0x8c, '\x00', 0x7fff}) 11m10.410546144s ago: executing program 3 (id=116): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x1, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x0, 0x20, 0x3, 0x0, 0x106c, 0x80000001, 0x8000000000000, 0x80000004000080, 0x0, 0x8, 0x0, 0x4, 0x9, 0x8001], 0xfec00000, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = ioctl$KVM_GET_STATS_FD_cpu(r2, 0xaece) syz_io_uring_setup(0x164e, &(0x7f0000000100)={0x0, 0x408, 0x8000, 0x0, 0x2ec, 0x0, r3}, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) 11m8.912154855s ago: executing program 33 (id=116): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x1, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x0, 0x20, 0x3, 0x0, 0x106c, 0x80000001, 0x8000000000000, 0x80000004000080, 0x0, 0x8, 0x0, 0x4, 0x9, 0x8001], 0xfec00000, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = ioctl$KVM_GET_STATS_FD_cpu(r2, 0xaece) syz_io_uring_setup(0x164e, &(0x7f0000000100)={0x0, 0x408, 0x8000, 0x0, 0x2ec, 0x0, r3}, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) 7m48.34107883s ago: executing program 5 (id=820): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000004380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006e80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2082) statx(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x4800, 0x100, 0x0) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x1280101, 0x0, 0x0, 0x81, 0x5}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000000000)="03684a7b99a4fde940f3ec0d105ea2c8267323117153aa4a4f099c3835a607cd5cbd77b83cc33d13bbb6c6bcae59db739af84a4b5d34bffc145f3cc27ed3d4f9d9b3103699a1e1cc4ddfb6c1afd07ddfc18e358cd62649479724ce867fefc0a15041bee9f6084842fb982d5c2cf1488d668b741c64f0a6fd2643e729ac5a56462a6b64d5a0a751fda4fadf63ba0dc2fd14ecbf546918db77095545b41ab170e5d6e8ec8bf9ce9b8d53b832e90c701fe52af7999f8fd509577ead1be27891ada8564167f2c7d2eea1c1c9c65d8e151c58ddee43ec34e74d330ec50cbbb2bb21892c7ca995066e3cbea8a69d94dc6bcef5f3c0ef630e774d092ea58627f3e09c66a9c7d1abcf4f8f8af87f4269df288aca9bbf758275ce9695256e764d185a91a7570fca3aab16c75ecaff6b8dda371c3226d6ec6e55c5c4d8cfc5c33892bacc956a3613bcfa849da1b5e070a7911d7488b3e628d9339718e8b821f1bb5d5c45f0316bb563d0a442801412dfd5a4d61ca657e04d6686f7d5863d57954400aeee8e79be8f3cc4cbb3d4b91269df039c3d3543e500b90a2bdc6eb60cc7afab7b5187d88fbd76e6212ea29e872b73f925287bdc808b4a4f8ec7f8aa08bc90b29e217c3eef69d8deae4141f4f9bd110b7bde9320e7b45f422e9a6111bcaf99c9911e46e219d3bab477926bd5d2e78d4cd0eca133c232b1e863fd7799dbf609f3670b323e5518e8f4bd36e9b3da2c68a28eaec9cac688b4dd0b73adc24a8c7acc264399b7facbc2f43e8e40b6cae9f8e956d1dbfe259f12bae75ad362c354050ffdd6e954f2d7615fafce888bd6f672a81c9fd4318caba765069c0a425e898bf7611b77f0fe61c27d318159dba42f011900246c64557d27b77aef928ab04a147baca37863cf998a2ac30b903c0314449ddb218887c309ec7184c8c733f5d4e7b2d79516e9531c9a5becf8294d6ccd777f285b13160e1c949d3069c6c66c0daa62bac679bc9b69825398d1c290d765e882fa2c8708b20ccec885ab6785dc22696b61c109ff84bc5407932c3e5bf12069a68b8e3333a26d3dd390ef9bc01b86013fbcb5c28a1f4d2b8084f1502fccc4027a124c3629d8f4a8befd14b597cebda5f94f36050a31b95087cbac347788a71a90e87f2187fae600aa42719c05c2859cb30ae0fd58a7bba681f7a6027a00583071def2c9a94456e5d9acb9fd2d11fdea524582489c02377bf7f590948985c769b3822cb6366681d79113c6a6c752f2475caba77b7b2e8f293d7fd9b991f63e254c98dec94f4f3def4fee9cdb56ff3ba7fe6a718cbe9a7f04710e257ea8a49d6605266048fc122d4f3173d4b04b3e282bd3c5198d7fcb72ec38e0b07dd8a541b2807e601e5a0a01f07a281e0e1a261c65977088a54597efd0997c59647aeebb2605a89705eeff3ec780e302e24b23a0cbe4f81367c3f118545f01328d22eb8e802667389143166a9db9477c9b58eb5c76a19b8f8b2692b0d356003f08ae54dfc820d8e357ecbf91fb7e212cbef1262171abaf2f613a5bb59b783cad476fec50d16ca0ac13c08a59a3097e6e3fde700a4b987d10311fc22d4aa210956cd859799f78010e4c0f25b715876aa253df15009490f71be3b0022875161f537c70b14bdb9e2d87a5a11b414a1198533c7de6fc4d22228133bc26b19d9f1e7627b14c72e3c39d3fa2186a42e50a0d1867dc312f94c7209d51475ed4aa80b2ccb0557a40422bf7317de2fdf3296727723a2d23babd5e23f7c3edf4942bb485b95a122e6aba41b8f80f684f84605462448d5a4fd66dfe9bbf80590b9999b4780d4f4f189a20f4400b2975df85b584c8c8f9fa3095f13aede1f52dac98be358b0a0d72bed4df71cd23973e326179580268c4e5d1be4b2ae2e1e2dba913998faa6088af128fc8fd3ae26203a898882b67d86d63f6ee8f8e216337330db6d928facf9d0ca273845ee5b33a0a136aeb48b7c52d3b95fe73efaf06197ec8753ee0349f19db8730917d0f18a2de9602d3b887bc583ff64dfee67e2bdf4d5cc1c341b89acd3dd5176d2c15ec2a77120b8a49591ca438ae36c52845e5dca550e539da9ba2a2eda49be316f3d6d4b7c83666bd4759940347c29dedd273adac722630a940e104316b4806553ded47132be4e31a50600f5a4dd56825b245b7aae853f56f79e0ec31f7b5db945ee3bb92865acb0d8828598e77446ee50ecd8bf5e7ccbd963445a09e3be215709b0b3bff2e9d12e6549924338f236b4ff973682e2e03fbf6b167e3b3a0f8c3f3c1e8d0e21a71937c918cabab50dd74c011a1a5531cfcf88a5df5fa58f17715f7c7b3a64d9dab6f20a596288969191420ed71daccbae7c1ec88bf74811b5e1f4bd306f3d810c4f3600df2903ffdf8db40ac7153fd93327a1065cf2c4590c8ba9f9391eb6aa600cb42aff8793e4721afeb3d470beda45dad9adfc6f4fdb24eafc63792f5015c656ca37cee82b7ee382bda31d786d6e03d4c8611c4ca464e2360ca747815c9eebd38c8fc7d5eea2db96b29d771a96dc5c884029077125bcc31980564555d21ecce5d0388e1bc1e618c7dfb31b02b1a6730db7eda387dd4ceb96f65178bb088e81133e5086f73c458f84139685ef930945a51979faeab539e4964244709dcb8b38f575d3a3ec1328a0df65fb34241db7cb3250b8ae0dbc44670d2b5cc3a1785d8d281c05256ef2beee3b202d8bce053e55ce1fb2bb208e65d488ae24484b00c2e343fc3544ca546406688022db6e29ceca9539ec095a2a2cfc5f516230f75fc961c5de1e8d33222331f57db02cac5f9208029c6114d041bb1cc7f959f77511f5790a564600c018afc253e5ecd5010bd769b45a04296ca09e87fb63bf3d3b51dd8b3f6d4426a03c0944d09dff654c5718ab1fef063caba34029be6811502e8bb785011dd1e34b0c192915adeeb40faad0725a8f9a62acf61b944a271d20567f350cdee22d76e3cc5966ba742d9c43823af19ba74c60da0df0c5f4e7e26af7224147774a1f8ae09f929066e1769ffb3c40ba9fed13d2670b9e865a155426ed5c83648c0ad34e46f5308b455e0835730fe529668b606f3f52b0d04534d0e14bc0ff0f742359550e6980ac9978455adb3de0f292af12a3700453e035a49eafe98fc0d7f26e42a6c41f380448607b7c96291f98fa6bbd7e32c249a49171f8fa81762a490a1ce5c39d66d35c6ed6c0679440c06197c2e24d48e1de81c711164c02820816afb5393d3d6c801c3c062ac46d1494f52c45ca36faf94894eec9d71e1be6c7256f4aee8dc080156b28623c821ef8d1826ebf0a41332620f42589270e142561374c825e828e2bd9ae41fd34959db48319d54ffe7a1b58ae8f7361cbaee8e26e0e7e1b7f125f8cd99788825efd01c38ec987904190a0ad52bc20cd36cc7209f9269ac87b2fa44d2456661d3056d893cf912c69ae6b2b83d0c781a6d6c33df1910867b71257ab74e244e3ebbac07445069418fe2e440a384e16feedf8e3165676e67866430eb6a8a5334620d8c2cda15b0328bb0c50630886353f95241cf4f3b647a4ff812c70e1b074c4befdc70fbfdbf868bcc81652034b5bfa831f1b686724046dcd17ac91ace83711e9ec7465d14c9d508bce93676a58ef7dae37221436865ad34ac2fd691e3b3e12aee6736dbdeec9b1c05fcedf8b9ced547259a1a40471ebe8b4bfda69d2f884da025e2809fb9f159150bbcb331ca3c502012a7fe76b4fc2771976aeb624ad7f2d72c707f5f19d8ded84581ac5afa697ff99d27d88c9588fe769839c9cc9d6786a0f814667527c53b6253b1825bfe17e7d734d96d61da0ae7349d0922774fa9b4baf332a4568e32cafa417ec659c4ad72cd656a1e2c59c8dee38890ed3acd8b4f8657de41f670106c38c38ba1a553f0f589a57c61f5105d70e0c0953459383cb9337ca972cda1d2cd3056eb07f21c1f5b995a04997fecf501bb201c67fd2afe4d44fedea595969b6b3706087b0f59d2ddbb099d60436a94f0ba33282b29f6e914fe92add4b33cf70b680b905cfa2b2ccb00b9967f99806e8d69783fd35a2d7fbb424e9fde2647609aecb0208bc3864bf95f05e50ba12123edaca8de927b338dfcb3cc597947c606c08315061a7fec98c48f480e2febd26fcc8dc12289aeb0adefa2c2be1766a5bc74ef1aab6c2cdbdfbf1810d956bc889c8e614b7b933ff6e336bb208db5b592775fe71c3ebfad5f47e0d074e1c0cb36761481ec677794f23c3698bd35875719f242e3fc939bc3668f9723f31effe189dabdf4ebbed073eab952c88f13059eee22230bc7724d7266b15726a0b0898cdd274e3e56d0a356166b5d16456249e9e92e84e39f61c0ecdf99ec2cd230440c03fd21cf68f27306628d35ea47367775f39d20a07f3959b38d49e3674061fc1018b647047ad39f77027878badd29927c5806f95aebde5f070fed28ed34052550678d3c6b677a3b5a46f76a98264c42206bf62caa95df5437092b68e025ee9ce2ad733b6db3ec97fd33cdc3b2f77ee90dd86d8bd289ae1a437c86f4153ddcff5e846347bfecc1499bb42980e4fa91790faee1b1991dfead5d7c460348631f0469b2b9e8f65207a00985511e0c41f441d9a3154f5a0298c172fd7135d4bf95c11cdf1769db1cc55f392aec309037599327a7c53c10a56d1ace8ad19186a2fc75dfa9d657c114eae99c1c1a6b4a58440718bea82290bd1c2a67048938c381648ea2b2c7110d748c9c8d782f20430b1427b51d7036e55b0997c6f75717db67a82c88d3647ee036b49392f0467d6010b32f9de3e5e79ef082c5bb975d11d2bf76a97f7159c11a7753db8a065d3126ccda9abbebd2c54374e389942c24b27435868fadb45bb060d3c1084b211e2afa8dfaa2d8dab8dc47fe10e6c32afece7c4976176a7c66d704125c0948c238c843b41b0246be1f50f8e07884cfe7ae8885ca06339a339c8d5978b079e0eb78facfa1dc67ca70733dfefc6c868ca149e0661b70e0134870a3107c8c46711fed14f892d6fc66d95306838688f13b19e904416a8d161cc33527878b38ad10b1c08db21457b2075608be7300d39748e4fcebe02b190f3e8ed32a0ef734b11ca43a21f5f809bba795f5aa0ea01050021d0f5213620af5b08fda6421a42b7c82804a20a6ef6d471babf76f46538327f943476d1d109a3f0dc531233d6f93d8dc27f4745735085f92adf63d617b373fba24f289035710e69eb80da12d36e8eaec22620ffaabadfb824bd5fc309a2c74959505856b5b890bba8f22bc571a9d87e93ba3b9aba6dcf26f7076c0c2e271641835ea25fd49d96c69d4fb8bb8731bd2cbc75146aed10d269f9060462339cde8830b535920be3dbf143eace0f1ea9469b95a64fbd7e5057eb880d4422cbf97cfc3f7140251d4923580ca2113f345cf24a66499ceffd2e39dc4fd74cf448638962957b409f0d218c165c13ffe107aa1dd1d9a02092cd46cf2b353dd2d2ca7b8a7ae8eda0ee18bba269bbffed0c7d400497aee4da0896cf6329d76ccea098fbef9075412d1c2a3644cf0f202b884303d204314ae92c56217b2feb5e7c1e15a99fbdd655fb8f6bbc3ab1259bf03b2ee17c5b7e9443695177ec5040eeff3fc36ceafe143393d76a3d735cfe6c9b632e52dbe64dc1265961e8a27ee9f76c0add9e0581e474d7678214f5b64c932903715befc6b766611f1d7e495573b9a3e009cfcb0ffef7ac57c3561badbfa41c119e541180aa2364de61a601699cd1bf3de01d15794b728e1444efd6ffa1e57d95489c8df91fbc057b66dd6d9f3a01b19f36bc99f0b54ed1f9905067dd1608bce47f5ff1981a25184aacd39e331d8ff3dfa7c012d7e667a69249cb4803b23f7eeaab8ed29c69ba3d2a1b88821ffefc5825650c53b6364f38e0a178312f5d29d5375423cceabc8e1c4e51a566ba3f9b176b858c8860440ff8ebdde725640d2dff6b9160bb69f188755b0ff766b410704cda4c33e1ae2c73b5799a00d2f55de73109728b350302b64df2ce3eaf2e0c6561009b60c2701ac493076305e97ed20c3b42f40b2bc7f13bba4ab8181e2085b07930c6f5579205dff696902be824e65ddc774e886e8d261fe74712a31e406b0f7725b4559d7ad0f27a1a870261aa5bb8a720e7c89ba933770d48821416de070df1abcc6eee1147c20bda090d940aeee2bd48c0f3d94675d9b9cf1a62ba50e31a7af0714dd8325d5fb7142e88c4d22ddb8f0278ee6ba88e361524e291b6d000f6523ad4188b021da9ef4a634ed09eb2002b9c726746c9ffc32f261edb448106aa1e2daaed865255fd1d296fedbbb2de3f7c1f15935e52006492b632ad125aa1e000c9d71bdb945792668e16b26122a3fd7cba1a40db8083068c5c48fd2aaa621c87d9f5621bba442fc26839030dbe4e37fda4046d6503bb03e0f928de25d4cd4e2a40ec93c9021dfcbb25f6e2c943cc85eba8123340d6364949581e8c8c2913d59dafe4297672c0b9e7418485f00cbcf672a588904beb3c074bebf339815b91c7c374ceed5a701e1ade8f5d87ca536120116307ac259577a8e12958425317c482d2c7089bf3d83e12318d1526107a050f3c094492de7255b22e18ca2ff261b3ed197f2f8e67b71b1c5a6a04b99158b58e9baad75201aabe13254617d0de0a9073af62491c67fc18d1ccbf7686a85a99b39e9d7d9c85a0777e47c9fd0e10c932c20f13ef287b44b9b706ec818aa0c48a10caac58a9b8355e84bc820698c2501f0c12e1b67df701cfcbe72dc47a2c87d43753ebfdb24cc838507e241d9fcd3d4955a373209ccda903a3ffced05e4232f2cca9bba197fdba8a9357cb1d6da6d9b4095027dc03e17d59ebc2d358e171da0044df102b193c79390ebcb58023b40c621df71e064b0056bfcf1eaee1eca85357cd1ac78feaa54bbbd85596977ba85003ea60d8685f4e3b756e4f81453077396590fa214f672929e81569442023667b798c24e06ee20dbf64cfccb51b2bca4e2a5b0df137bb37ab3e2854dc7e1b879866a72a5809b563596cc9fd3e53abdbccfd5dbc60662252ddc5c290d72230d79b7504b40fdb45ded2f02e926652c1e04ea4c1c488025ad1098adeebe98e385ab1caec4b9eb4d3bbd5ef3ddf1fd0d72784604a989558fd37f6d4fee20609090b3331e254fec98414a2c54589ee01c9429b7cb574b9167efede1d966a227bf2a8e422f38680d77d3c555cf1117e7d7e804ad730c36a78b7846473d6481bd0839bd3e6982ed47246c370a90b76e5b88de202346fb20b8b6b5ecb6a90b8478d17b175a1821df75b48ecc34866fe5c8960bf64d5ff92831bb9357474bec65e0dd1699b0f0340ee5ac5e9e9d3df66edca20201371fc21ad80aacd49c6b0abcfee9c876c15edcfccde823b55b61cb7b254487ef8c8781a22043f4adaf25df34580a6b3904fd014b50c59fa90eff75fa5fd32aaec9aa10df8a2b9b824952e475c964533942bbe30f4167a11fc15d548e0a31f911030569722f0c67e79e90483f6f0bee1c7f80face1a1b0f940c891be688cb16394f6c07fd29b5f248c211d1f76ec1292755d8bd963e191b3a8851472fbbd2cb732f4fd9fef3a8fb29aea097328173fdeaf56fa2279e86fb954306b040c960d0b601b3a741c96cf1f0bd1172f848585cb3b57d7d2e2a84914526f5a6f9895cf5aa4425b4dbf9f59037756a0321bba204a737e36277e86fd268f6047921f4f8fab69dfee137c07874f12f89084e7117e2c9221690a27f880f17d08d56f9dbc96ffef3920b55fb773dde72e1ba35f3e0c9872e339508281426ab04941df4885f7e0293149f1642c2573e2b6594b8fd953ae2468cf917cdaa0692cf461e3628860935def39af78af5e1540147ab1c70c3ab7f7c76abea0d8541feb43e632d7a2cc7bef15a4700304048ecf135968d0a9644ce899aad05b186a2224bab3836248cc6137472203ebceb29b3e87610df12417ee722f309c54b2e65591d8b929440f3ec43ee9ff8f7b7710668e4312610d1591303d5270394da0ab61e4515af5215dc81137f0dc90f951972731f8d98ceb8b4ea38da7d8dc153ccbae5068781eaf9a4a7b11b4319090261b61aa65a8536292eb5392020eb285b2db07f81e7f764d65037050f1e3748593474c6c1dc11cfcb56e1c916157280098a437265e1c682cbfed717e7275bc6c3bb6c6ef7f0f9fdd19ef82ff2c82284c3a061f57b21d3705aff97710108a7d1217a7ea3feda021d20f1fdca94bbef67e0aeaa3db6ccc2d060f7b33707fe19cb2d0232f1239373bb38e666cbbbf3a697c6d0e957ec6730f56034440e789a7a37304d09eb742f21019a77c608cf578162a55d0aea113c051b110b5281ed8b6638d2b31604e965cb019f2f106bc4e96d1313c70612f1ff18afdce7926270dd242c49cc53792f160d1e143e04d7eb3ca40828b153fac466bc53a084281987b47b806a4ef668859eb9035ef68e9c20bd6bb790fdf6f921569b4e97fae5b7edc761b4944c1d6d90f4df40bc3203ed838d4c61cdeb7a9bbb68d59b2cc00125eecaf06b759ac1b9dd68028225d0a60efa499e4436962362727011eef6cc55962dd4ffe2fd3892907e837045883cc9ba8892ab265a31924f3055d4dee68feff05d9f10ebdf1e8c1c1e7001b5b02a7fe26b9c0641e054ae37854187fb1bb6e9fae05b09e85a1e0e14bc801f2d8b9a178a9a72b147e137e0d83192664a88a3aca4fb6a4f0c5787b20c31bc5975dfbc8bcff8987573bd14b1ca434d93452e67ed01c60be99e535bb3f848888d224520b61cfc1de2d6b2ebef9f24674c31aada52784a0b7b60f351653c71d546cf951e6b4a0d917ac6afd0a713f41833f9f74a3a7d3c19b523299666da2b48676ca7aafebadef05b3bbf4b6b62834046f51d3d4582fb4c9de27a3f5e992853368e4f17f9dba27c8c4438307fc7405f53fb27cc81c1521452a1a5edb0cabdf7a73b1cab0675b619fd5a0fadb7147776e74695c042d9d8bfda045bcef7542b42249f34c7590605d0201a762390f2fee5f3cdb488426609c663c9fc4dc2a5277f3f589a14e6dcc202dfcd89bb148a368ff1792d230c19934143d2c260dbdfb334af863b856e415febd22fba01c568d8f48dba6d92f493cd1164a376f006d55db609cc2c9532a9f56da3b06e3db2a05f797eed57892e2fb677541324bcd763cf4669e7a871e322d0cc6e21befe3c767976f058dbe7a059d673c94c7ac5d49178bf19d32907b6fe66a92cc8ea30a858da43f74354390d6e97021da50812c59a78915e5b33221531bfa054c594ce3a2300e5a7d712773181901dfcf6922e980566fa62b1f2b669a27fbecce29e9be6d22058463e350163f33d18ce92a72d1b470857b6a37998aec5672521a8f0d66ab2bd01de516036ec47d1f63b95b437dc6d5a0168189d5a963cb0a80a9a5f20b03515396e3525f0ab13b0c1e5dd051b4c930da6d57ab6f7dd94ab3e689e0355af0b34871296152a76cce170d7b14d471ee4d9daa93de4ed755f30d45344f724288c17e4b22583158f1305ff55fecf7d526e207fa609886e14c9a168bf364b049409f63590f18a5515de8c1fd8c5a9710b6e33d2ecd01466b799f14be787612b8f17df0c05483a16097c0a504880249e28f1e067663c640a550a8c7ad9d090f7b2e902c5c20936869a5f3d3a014817f90babf847b43cf67ec23f120ae4abc63a418d1d99f359fc2c33a5bb34e1f5780576111a88c5ede834bc41e498548ddd128f9e884f4cd3e1bf1aaa1204079ce74e709306f38f2d6859128fc35d3a74c534ff1dccadfc8fe41f1be9510349af8710eb6d2dbc758be12b65622dad1cf48abc2fc409f5ed6a3af8d0b6548643c46dfba9db4e5827475e6e317c9c018a4dd5de391cc9cca85ec527537e26949e5091baca4f0b563d4c3969f15115e5ccdeb9e40788fe12f9d32d9488a70ae53b819726e4483ea6bbcb76f99775ca5e4f93c76edae462c08d596209f985aa55ef5e786701edcee8d831dd6dc0fee9ad01b6bdd63e886a5e55bdc593390c81e18dfd8c685b81306bad6b7a19a86b2bab5cbf4754708422e99f8f2497d798b3db565e709bcbba4c376c1c60b22b994fe8fdcb25215d505511cc1927f6a35344023d5da0a3ac0830e6aa80f5f7f0d94a67c99c6b22717078aecba2a599daa2acc054cda25e3965172e5fef464ec19aa71de5e84b6de30cc673fbab8c441ea37bfb3fc321a504371bc0996702e9be38db762e339ad7ad66dc2caa887e4ab60272d7963f85b14c941d31e545b85c640427302efe7142f0e0897a8c623ce57da213fbc2d1f90677142fd48cafca0b2934e572833ed6473218d0513dd1f6ecc578e5a1109ddae552b3be0cfe7246d7682a59fe9ae783a0f318d1800d5c466c80c5fd3facd0340f455f081068dd2cda5cda744018d902217152b6c05d37c090f8348b0471053152c2a4570fbab3f6dc30c8e49a63b88a00b3aac75180a633692e35ea976821694e133eb8bb4d31237d002fce1dd2ce55528dafcef2f0e00690562d144bb0e19576ce6ab72deac22067d8edac916b1b07e4eb57ff0b885b1b79f37dcf88135eedc17ffd948b61e4df4985033bcf891dd5b1448c8668947a271d93d03ce31216810a6bb45a6c5a12e290d97a60ad4b5c7384cf19421ac1ca64d346b50771e0b50e5caf1d9dfe056e8da247aa502ff04c8e29ca810a1d3ec7a89bc17dba2936f03a80228171f7999b3f2768617970efe57b14011c80666ac4999a568ebef74e2ca14df0ff6f0fcd47c538be96aaca1e65b53b98447101e49672b48167c0afc1afffe669b0f9718bd3305805c292db9738740b362564e4691cbdf061db1ed3f9db1f8bed82939f835d14f46818e3eb4e25f7a8d77d9d0d7913c45d8a81115c1a5e37b1d3bd1b7b5e6afaaefc81d9700bf83506fbf15457bc0f59f7008cc803efdcb6d39e388f6b28e80d47134265cc5438804b12d50e61a489da829dca05792d2ac182ba747331e88a7118f7dd38067f7d38f37be362260effacbc33863bb47aeebbadeae648a1090718266eedd2ed5a2c23f168759198aa92b2ac45c2a68ff212f29260e641a38541b066d39df4e95cd1c8e7e6ffae1b8017e6f629db3910b07496c8a81e4e66ac2321fd9e7ebfecf5bf6e922d7a79fb710a2d42dad1916c9b186c2c50c818fdb1afa19be867d943ee98f732fe3a01364281c0f6d0eb64a278721dc7bff5316256b0f4251abbd9b8ba7c7c12a3bf02a1fbc9ca94b965588fbc82343d07df8e06eaa5ed2137fec129351d80a9048a7d78b31ffaf2e388864a763c4af7aa53000e0bb2eb8ac0e4272cbb79dc6a7d65890f125c523c7cfddacdedbe87938aca915c92c807dab26be7d748827d4e3188676312ef1ac8460b29e8e715f4075e33104ce82e6785aadf17a7cf82d2a705e9f2d0fd25810ba33d76e54b48eda3effc01f37c89db38af81922fadc8c3361fe74ed51eac5e4437108106ffdedb339b406c082d62a8bf718989846d23f966e1ea39103010f767b3a6f0a0a2041b1dafcb787e69ffad75ed2a0081b92a4136ad5ae557c55a4b6219a390103428181ab36f329ad182a92957495c", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004480)={0x90, 0x0, 0x6, {0x3, 0x0, 0x7fffffff, 0x1fffffffffffd, 0x400, 0xc, {0x1, 0x9, 0x8, 0x1, 0x1, 0x4, 0x8, 0x123, 0xdab5, 0xa000, 0x0, r2, r3, 0x6, 0xffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r0, &(0x7f0000004180)={0x20, 0x0, r4, {0x5, 0x0, 0x6, 0x5e7}}, 0x20) 7m47.34016601s ago: executing program 5 (id=827): openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) socket$inet_smc(0x2b, 0x1, 0x0) close(r0) 7m47.250068256s ago: executing program 5 (id=829): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x31) mount(0x0, 0x0, &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000007000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)="31301f31203100", 0x7) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/netdevsim/devices/netdevsim10/sriov_numvfs\x00', 0x1, 0x0) write(r2, &(0x7f0000000600)='1\x00', 0x2) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)=ANY=[@ANYBLOB="3800000012000100010000000000000000000000000000000000000000000000100003006e657464657673696d31300008001d0001000000"], 0x38}}, 0x0) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@generic={&(0x7f0000001280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r2}, 0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x406, r5) ioctl$VIDIOC_G_FREQUENCY(r6, 0xc02c5638, &(0x7f0000000180)={0x4, 0x1, 0x245}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r4) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000004c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f00000041c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x40080) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r1) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r7, 0x8, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0xc000) 7m46.011996514s ago: executing program 5 (id=833): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='my_configfs\x00', 0x1ff) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x20008800) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='my_configfs/nullb\x00', 0x10000, 0x0) mkdirat(r1, &(0x7f0000000180)='nullb1\x00', 0x1ff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) syz_clone(0xe200, 0x0, 0x0, 0x0, 0x0, 0x0) setns(0xc9, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 7m45.089455172s ago: executing program 5 (id=840): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in=@broadcast, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000000280)=0xe4) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000602, r2, &(0x7f00000002c0)={0x0, 0xfffffffeffffffff, 0x1, 0x4}) syz_open_procfs(r1, &(0x7f00000000c0)='net/icmp\x00') syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = socket$key(0xf, 0x3, 0x2) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close(r5) accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @loopback}, 0x0, 0x800) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_CMDTEST(r6, 0x8040640a, 0x0) r7 = fsopen(&(0x7f0000000100)='tracefs\x00', 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000100), 0x208e24b) lseek(r8, 0x7, 0x4) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) sendmsg$key(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="20000000003038c719b694c2f960da306db932e4fa08e85d8cbe8b117a0883247d69e40c43d7e53fff2c568113285fe48d83469f364ead4314fecbd74c579f26d6248c7f80394310d6272010aa6a0d115395afd627bdeb3aa4293e929821357d1832230bc8674d195d57fd48ed05a0fd20406e766a3df8a7929191982650cce3e6f4651131c11110143227dfd3e0c13851"], 0x10}}, 0x4004040) unshare(0x10000000) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) 7m44.901935487s ago: executing program 5 (id=841): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000300)={0x1, 0x0, [{0x0, 0x2, 0x0, 0x0, @adapter={0xfffffffffffffff9, 0x0, 0x100, 0x0, 0x200400}}]}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f00000002c0)={0x0, 0x81}) 7m44.894647245s ago: executing program 34 (id=841): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000300)={0x1, 0x0, [{0x0, 0x2, 0x0, 0x0, @adapter={0xfffffffffffffff9, 0x0, 0x100, 0x0, 0x200400}}]}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f00000002c0)={0x0, 0x81}) 43.725913899s ago: executing program 1 (id=2642): sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000200)={0x240, 0x1f, 0x1, 0x70bd28, 0x0, "", [@nested={0x230, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @nested={0x21d, 0x39, 0x0, 0x1, [@nested={0xc, 0xa2, 0x0, 0x1, [@typed={0x8, 0xed, 0x0, 0x0, @str='syz\x00'}]}, @typed={0x14, 0x136, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @generic="595a8d911e22c19b7da2ff0fa5fa52ee3855b8fbff9c6ea5a467957852", @nested={0x141, 0x6c, 0x0, 0x1, [@generic="89ed77aab594e82d4130765cfe27a0474702f92d05922f9058b43bbd4ec0aaa9a29b63124516a94dcb22e6b848ff43c4ec16d62c5c5519d4f3be551d", @generic="d39fcaea8aedd4f2d112542cb024be83f11e60b3eb0431b54bf552948680dc1be5500553ff7ec1e37664c17a09e6c5aeaf6a93b6a435f09861142251f6b6d7ad9fff375e4e5fb5524271d4582c9bccc461c18bb51b9f4b80e2ae039a7154e85e51b21b87e65348e6a31ecd8b4686", @typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @generic="a68c349c349d87b44b6ccb4c6165748f623009feaff556951d44fa69d1b6c74e019e3ae39d8a1bf06ce795da916b38ef8bfc3b4a34f16b2770bd536bd71fd0b8ca2a2ca1d4c27481f11dea854f922c6eedf306c6eaefaaef25d38008e27e8079b660bf4c383fa855ba1c48c024da9ca571f91ea7e6740fc095d1505551418b7a3e7d2f3cb3b946d42bef99"]}, @nested={0x98, 0x34, 0x0, 0x1, [@nested={0x93, 0x58, 0x0, 0x1, [@generic="d5814ea826aa7f73f6edca3c5d5131ea47f09be4a580c1621f22b58b98dfde0bc50dc80408c634fb958a3349e70a7cc6d07d3875969a012ca44d37092de8ca6eaa444a5c6aa178a6e4e7b9497e96c5899f744933d157688bfc805a5f5e480946c8f23f08e88018474058b9ad1374ff20cdc3e9da42a4c44ed5a145460aad1349116b75058b1c9dbdadbce9d318aefa"]}]}]}]}]}, 0x240}], 0x1}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffcffff03400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d1030000140000001100"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 43.559702486s ago: executing program 1 (id=2644): mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r0, &(0x7f0000000400), 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0) write(r1, &(0x7f0000000700)="0705810240000007058102000200", 0xe) 43.345920516s ago: executing program 1 (id=2646): syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x7, 0x96603) r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRESDEC=r0, @ANYRES8=r0], 0x7c}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000480)=ANY=[@ANYBLOB="ff27483e", @ANYRES16=r2, @ANYRESDEC=r2], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x400c810) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) openat$vcs(0xffffff9c, &(0x7f0000000180), 0x50040, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) getsockname$packet(r3, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setscheduler(0x0, 0x1, 0x0) keyctl$set_reqkey_keyring(0xe, 0x5) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_rdma(0x10, 0x3, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd7000ffd9df2502000000ff000008"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4040) 42.107189969s ago: executing program 1 (id=2649): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x19, 0x4, 0x4, 0x2}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_clone(0x24100000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) pidfd_send_signal(r2, 0x4, 0x0, 0x2) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0\x00') ioctl$XFS_IOC_RTGROUP_GEOMETRY(r0, 0xc0805841, &(0x7f0000000340)={0x4, 0x2, 0x9, 0x80000000}) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x0) syz_clone(0x40011, 0x0, 0x0, 0x0, 0x0, 0x0) read$usbmon(r3, 0x0, 0x0) ioctl$MON_IOCG_STATS(r3, 0x80089203, &(0x7f0000000040)) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1, 0x103) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}}) r5 = openat$vsock(0xffffff9c, &(0x7f00000002c0), 0x4900, 0x0) statx(r5, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x40, 0x0) read$FUSE(r4, &(0x7f0000008340)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f0000004300)="00e7a0633e8438bafa888b9b02144af32e296a0a01dc194d649b6fa26d6d5e63bac4a04baeeb8aacb22c6eec461b67db6a737737c6d2687acb00572f92e3fdb5d0cb2f11121c557a943020200755bcab77b39c406b733239e2bb1175b9322ba39dc7d67da8f77aed1714dae2e6c24c3ea96be9d151c6ab7b3c54bbe507b8b2461fb4be8dc90042184af6d48f8ace16abb5e3fc943cf61cdb75624a259bdb5f7829b9775820f85f2d1a6ee6c6c2af4fd41ab8a41ecb2612abf13cd2c6f9f3e6db505e4bbe68cc000cf5fa6d5636191a4b366ab59af52132a3f9678d4ed1bd577bacffb3b52850804005eebf3dfa4763168ff30490a11acdbbf4c3312a45f30139f6b72b1e7cdec185006bb30e0e8fa88da2cefc718cae7e9830f7ca101e4e23c6bd16bfacf4a9927fb13af4b79c86ab999beda4ad396abdda354a42fb4ef21d6749175dc21a0cf9191aa4f90d274b50370a580ad8dcd166d2b06c0d8b071973c3fde30f7e2bc371a51ca5866bf8b24eaac75bf482dd4436b214ff62d32e20df223b0b680ede28b3a49e66e330a8a3ecace0db9855d235d5ff23765e742d1a739c2ac8743f4c62664a3b347279da55a1a5b16e1e2828b584a013577d50f890e3894d9e8d6bfccdfb2b70221f12a7fac24b7a8818edce72b65f622c77bf1312771a2c0d805ec9a25c536c91868762032255be78903b77b2c1a773a03996fabba69214e76f5df6df0375b592692a2c3c86c75a3be56fe598ddaea0b9901d20db7e43e128e04e5509283f833c24c625887288459db5727210ba9a301fb8c934dd1d8dca68039fe5b2e1a8d7cdfc6d875e5851098100c3cd42544ed90bb55b58d20a501fabbc485d148c615a3b070fa0520da2ed68ee115a4411d5418b47f3d95616096f67a7a36d68f1e8df82eca8ef96fb4a96b3422fe046a37ea5f5967513a559bd770fecab7228b0692f439765c9e9c6ea4fc608e0b27f9b49064dd2f9ac06f83f6d87ebc61fa3a29bb5ed39641245ce8cf43770df32a84838802b0827ca5a40e2003915e2ed108a005637bb028d29bd2cfd28a1bd55e67ed1b6b7b72163c27c4b0e36d1b134d6dfdb165a66fb46498fc04bb8053b84098af5b18758631d1318d625a6fa4d3ce5a4d3a90e10c6363a26b5ae96c2d56f87ad21a6118af6847d041f88f852ddc3f250c088ef5cb31198f3ac81cff9a5bab26ed56c09f8416188974e08349f7da28fc754b98c1ac4ea0060ac1e1b1c49f7dbadbc59254b265dc418cab9ac14e2bbecc4c3103543e37984efb1f61315e10d2b422732217d3a9b0cfe4561f3765d3bda60be239e02bdc164dd631582e8c87dd8fa60d63dcf9e7f3dadc4ce5e4433a42425b8ee8cb8a2defab0bf9b6109c90b5655b79b18c06884f2670a985d454e08e54de69f645cb0cbb70620bd988ee717c310ae77b4abe81c01c6e7f47268ee20bc30b9062830917705682eba2c5ef966b877f33294aa5f8b29d3dd5ed92302087f34fa18d19a005de05f925e3e93c8c0f24507ff20cd23d9ae5452c32ff58c78ccdb1ab32c98edfaa6d2c3971934ca8f849ac360c286566eb72b0793f12cef84bd282368d533247ee750f18aeda484167f3d680e4aaa3aa0694441d4ff6a71531f1a30f87eeb71afd04c5d686e1f86f27586f4e2c8ff77c09612ba1af9b3fb93efd31af42f8e0498f35d07c662b743a08f2839cad8f95b90cbb4fc0ed2ca45dd093a549cde4c6ff08ce09a2cbc6f9f78b6f96643357f92f8f403202742057731fd3e343a87c0affe803cfdbddb8c2694ab63f2dc35da705624747e30a943000fc82c40f10e1975d2e2ec15aefd531b6dbc053606b054dc976f44d5b5a5f37e9c08532ce16cf8bca55ab6c814ceb855ab50b8b52620f8645a9dc25fcb732080d84bf39c3ebb235b4d96da527b64ec4b72f69e91d16a4efcaf76f2e1f968ca68a06f60b01ec7becc9ffd7877c0992cb0f80fb3daabc039513896bd7697843be06aba53e7761e11e075c61ef2d897d4d9f90041c14283746feeb3f0d456ba4be27843350fe43e7c1110b4439489139f6dae01c43f23ec71f08d3042663c65e059d368e4e2c6e49de45bf078d3182a1bc1208bc59379e705aa3309579947409f2a8b3d79099c8619f916e7a6fa333d2312a274247156b8c25cbcfcc59ef13339c700f56a8691dff39bd4338789001872c0d90929037dc0ad99b380a6ba73f331f73f9274f4c2bf5233d7482edf37bf6ffed4f2c0ee44a1d57cae0d644f25591dc03bf837571a82d0c31b61be7ff85a5b3843e8f96a50eaa43f5c137ecfc4e4530d08a2afa4ba02fcc50117a4ad0d5862302017639344c82749f673dbd650e49b35300900000045c0973198291bb42b4cfcd3b0c252074341ea8eca19e122cd234da6d41bf5eedb706e16c17687ed8b84db67130796d26b94eac83bbcd785b603242bd6252c155711efd7dd22cc54e1eaf6d910d0f22c701f3d4da0314dd2829c6ee13bbcbd126558b47b8066bf0766c792a012315bd29bfeda8f28a2c1f4e638b701758e19a0e5bd5b4f19048b00a877d956292e345f8a3a8367892f955bcb5e50ca145ec5e2c9309e25941bd277e393aaad38f9b72a42514b27da6856223c37a1fc1327fa760551d3fdeb0b222ab180b16c9eea138cf4f327e88fdfee293c5b6b007028eb796a60772148282dcd17ffc1c90ed8b6540ede933545ed5a5301d6ff39734444ff3d85cda4ac3befa5083a4685e9e231eba4a91a35f4f7f48fd5ac2447c64c010e2a9f8e80691c95460e1995444466ec5f3cd71fe509a26ff0b7f3254bc8c3255e903834e841b37c70b267fb33deb0d1ed4ea84a869453ba508fc255b12cf847103d5195046c930ae4a75c956f22fcfe4186d547686b54bd7a534940d5d62216994eac0e8ed3bd2bd59354e6b9c6b5b10511d54a8b928040f1e13c4a423b0cf519fc6e9673df5c48c0778c7edb8fa8d8ace77463a77d2d6313160e1ee72742953e433b670400d59c93464fd91520847db238610ed0c289fc55647881a7d6257cf28090c75a6f19df079cfd35742a74a5ab270314f7c8039c20ff0f3f543d029b75a741b5dc6425241ac2ffabf1f96288e6d4ba34da09fb6049c2c8753fbd41fdb4bc68c57bf374ef4feb0df00c41319debb26afba2ff39e1799a1c2137f4e920ee5b02d93789b6b0c853e8143dae5b08ee85da2ea7c31803610ce797293ea95c16ade6dae2afb008e59d8b9505737f008b5227df5f1e4eb5d707f502698a17ead9b1f5ec09dff34248ff2fb153dc6df4812e39754a4baa42e1d8b77fbddef3ca091701ac28ae5fd422dbd8db5b122d3965383abc37a52d2fca5ce56eba974dba3d059cefe40e3c35c9daa8ae31198214303c1dcb90d58fc983ccfd504fa43925636f94b128d44e8aa5cd3ecfabd50a84062d03f7508a0575ab65ecc749d3ef566fdbc529a8139b7a7fb3a9bd784df52cddc6f2699044ba47615163fbbe19f3d88d38a8b71fe52b2611ca74341429d1cef1a7e350545be29d2caa560e60352cab074c298c44ca2c07f9795ce52f10aa3e2fcdef371f24e309b19e52218881f25a4674527edbe3b3bd0b9b536d810c6f9500c0c81bcfd9a440dd91c1d35c52758d2b2ae1a8497bb394c4f09d3947cf777727b0d1daf5ac4fe4fa3c247a791702cb84b96321b7fec81bf549d4eb5d6dafe019b26187417c68b064e4308908535a3e77b6cd3e28caaf12d726f15590b7958e40134d045a38cbb689131a7e85532f1c63dd4bac9e4d00645cd7b2b71704563f3738b92044a8153f6ba717800ab7cb238175c376d7add2c5ec38e4c856f1ab9c3ee33f6ca6d576ae908dd290e4bae23470182e253765e04e8eb02a791c4396a511ef467879a9e2818b8a4b1b0b39a6c44e816e3ebf6e3be93929dfcb38d5dad7d20b60215447674d0608b8b02331ac20e57083cb9b4449fecbb149441aea0ad82f00a82d87d743fc80d410922bc20923516885440f43c9f32beb81ce148def6140952583a7825c2d2fe012d52d30ef66d32a8a0864ac5c1737e2506228d41ff0515ee80be4cf012927dde0fd2a07cac68eff8c4437f2844d4df07936fd8753e5909f962c5c767f8719cc295bdfa8a16f3f36ff56e34d7b14b6b8c46d5af248b04a9c5396f84990e23d145670950bce5f5638e5e2cea37c371a4483729338f1305cbb32fa1c05dd9d21d2a69e5fa3abe9a2dad2237be20b4088393c04aa66cf13718de4bffac72f641a8c017a1d5568fa15a6a06e4dc833874ec95af6f115bdadf15179bfc8c4e3e64f26f1299e282c4ab397340934efc1e601afc630fe195e8ae7d8da1310568cab4f2fad085d0ec39710d8b7c812b3fd55c6f50925bcfc90fbcb35b8daa0f1e1f69d82fae2034039f7ad6921694ed48a55a68bc541e6d86f1e33c261a92d48b50eb58a03d8e31b2f6564a4ddc3ee988d0dc47b4b610a9a9dcb87571b5c1edb3362df0ec3d58872157e0f7247dfa8100b4478b705702a5620c9201010f40232327550db333e845dbecd6aadbd0a94c064862b1100b6dd45ece811b8c0275e3753e11b4bcd8bc5ed7668e72afa5bc5cc17b4c313273755f532ecfdefdf2d5c47999453a3b7c158d98332f0bd3a820cfb2c8c3bcd43197e7395a032cec6e41662079f2f654965aebc393e22b5c8516d9b8ad01e33ee481a4ac46a2df304dadeaa9e5274d340aaebe14dcea315fe1279f1a41a5c7aa8c94bf4b3d48757503171f53488e01210145e62c0de7c39737848dbdb1b207d4d33b8de180b020e8a76b1b521905e5e3ce97292f8558fb68efdee774681bfffcf1dc3eef35f660dd1659a32950de2d50e762313beee330d9c2a9fe8ce5e4e61ddd86378d3551335f6ef62053d3b248a8c33a11abdf3f3aa1975a15f4a6957a13d5b12a44d0f2b52b9a2d996e98c630c0f2abca80c7ae89efcf81ae284a0d19582cb1319d207077e5657d245533181ed6e07e0f7647123fc46c37bd75b4f4d181112b4a08acdcf445332cb9dde69a0923dd9244dd2ecd818b19588939922e3b2d8dd9d9fed95fa55b0e4564b38aca2c4d24eebc634664400177fbdeaeb278bb1d8eb11baf4be5c87d4f8d9a855bfa75df4c51fb4eec87a27c59df9a47d82523b08022a1c0fb22ff6f93c3d2cc22a4111a6ec5be428cba33617be65739c2240248f3a02d01ddf2d6aca9e537a2296b16d082d2b868504371dd5e41898885b03ebfaca73b40e8924ece83c1c80de6ce14943e1199c6f81bf359f44c3ed5ae3c6eacb730b1039f0b6555347bd566dfff45a7a2176420ab2b40916a73b66a3ad07af6e1ac5597393d203fa1ad34d4564af956a0a3e2997e27a4e5eff67dd89cce8875d995e00c1858234f149f6ad4cac2b8056966f726df57b8c4ee8f22f23097ba1471b1f1036e3a499400fccdb75b56eb13e9eca1407d5bff4b075b06d00fcbfcafc28431eb33156232e73c6577e3eca437330c494ede57b9609e1f40634918dea767338b5542197410cdc000143ace89ca0b7bf645b3267f74767d7c7fce05d2f59c137204e56bfa711f66903c511f681cf7a1b4f9fc0f42b7c438ff8957e1059375321df5b0c5c884f46d94c21686e1300582d34928bc398653118f79bfeea2e7cfbbf31a7718f4aab50fae57db94203d43e060365c9a7455241be03d82dffc3783d0f6aa170c0866eb0dad07485831526922d8348a7a16e2e9903a2ac93c58c6dce83127fab17703ec004a519ae5675baffb31bf4b52f9ca992a84017a44d68dc693abd829947342f277fdcbc87168bcc03c32b8b1e81a1915af2517c464af07d52b79d1b0e53164c82ba049f81e92ed1dc20a88fd72e9ce7aa4b22a7cc57dc5527d14f62bc29cfc9d57ed26fd523cac39ac00ba12d3a49d694709924275fc0793d56acf9558818dc9eb210749fa5307d45886b879257d627cee0542b51c2ce6ce134100efb47c92456ece5b73cdc051f570810a8d534222649eb56cf73a377162b753de6c282bcd4a25dda21dd10901bd8dfe8fd4ba8a70811c39707beded23dd60f23e2933372e3a6bce099899b07f0a4c4956fd98e956a8649622c77717de099463c0c6c9389ab4a1ae10f8ddd086d876af2943ee0b6b402ae5f89e09922e8c510ec0caa0a83e366e916400bfec88a52ab457037a35ddc6a8e2289c33684a5915c37bf5d227cbc65a737b52bdcb4fbbb7b4e7f965db116b46044d0870846c730dce12e120b1fe6dd5798ced24cad72c59a3f44de4978b8bc05a1dbeb766be6e2abf6ef46c67a58a370e54e92d89e5f44525e82b94a388d8d0cb20c3469a258c1633c9dddb6854aee255f93f59435ff317622f6899250aa185c207644275278580c5d32401741fe264a2e03b80f442ed58fd0704ebac923ac6a5abb7f0c695252f82e3fbcf2b99d721589a8fe3fad4d5926aee3d7bfafb6739e525faae3d25b12841fa2cc61dddc44d36acb9a8b72d60ecdd9c8cf04f9bac341b5e0f9bc59042db8126324888b07afe72b18cce36d61eec975b6b4ef5dc4a16ac14440cf770599bd4db630bd110eb63a03a80cd95c16d314a4de60cc5115bf0754cb7ab84a827ecefafa96069c721a5979f227fdc2467b4cd1975dafb5b28e1d6f3c1c3a2816ad831dd98c1378a03798c128f176426eaa0e361571e758d54bf4ec2c988355f016e16d6cd5cf97bb4891ab33f5623b7e796af313cc7a9e2f9510cd2bead1ea5dd080d9de1f595b2629ebccf69a0feaed3963ae8a6c89edd66fbf6e566379898185828925f8669668d6bddff961b08aaedbbe7fc196931a887ec740da6bcdab8f826a34aa2aa1e406a258558f3baf022a64222df4d6ee8726c79ba3dd6e11a19e4b4bb49b4a8cd99c189e6392f08ad731e415b65d0ccb919dca46efe9f79e21437111ab09e926d3038182044ae047bf1cc92e2d2644c528985719667a1a8abaf65d0f211172ea789b2fa016e1a88325d1ed706239da4dbb9e2079e3598b4ae5885667587ba1e0921c9ba55d7a3be4c47bc2f2f3547ce9efe32e5a22855f761bd4cbe1cd9337eda4bd7d82a918084d7e116b656104ca87e64b1b8c62323c3c296c5b5b98051feb607b872edf9f789744aff710c4b7279711182bcac6b76c05f5cd982f52f451e7e29046550e012e01d8cdd3e305427030f4247488c9136303084c12175c5c781cdd08aede5a356ea0ccdd05a460be3c7b4bfd62c3ce9ab68e285a36c1546d0b18edad71f69f5bedb340772e1bbb035514b085067259e39f59dc292a12557350c66904b253efee29a5eb7a6920f583c899dc46a1d3e2af2db3a3d1a0e8d1f98722a16c6cc1e401058d60c8c436d8f1166ba53bdde5810f9d0288528affd486c266546a864c92af3df8abd451cc1e0d6bfea534865cea9d49b3ea5e390fa823118df8a61e31022f5fbb8ceee870bf2e60890263c4d14e24d053d0fddf665ff80a66fa00a5957f8a30fe82a4b82cf2f6b4d49def98f66bfcdaa0aef13314e950ca9f3849b1edf3b82eaf74a0dbcf45c3dba9bd2d853281a78484f1efaf4150da1207ec3cb61fbcbf759f8182b7052b28d7164b73197b0a440759fe9d5ddf827f1897a174e82fb968a9a07c61bee44bc1f7f9ee5c6de04c02d57735c5fab741b36aec7c8642e56cba932a08b8e8a9d3eb066a4ee7cbf22e5abbd4346de59eca1f24ad9f7f9ff7621e5f30dd08f4cddda8e80e496908109f5212a72bab1378d1237def07bdda4178719975346c68405de15153031fb17535894e5e3c1de6fdd507333f0226b78ba7cae509cfb48d6735ede9392650bf85ac1db919b1e9fe0a823119d8253204dbb2f7a8f524be6d419f3a45c5051a7a88ef0bd41586d90c11a894d647f03895f671a6e19f1c70e32668653aba8366a3d372522f49844081a9637db080663ab02f4a8af502955d5411461b62f85308c91852f8fb9f0bdddd500b4a133791d3a2f91a82dc4b09f5ad2196a9172ab0cd3fafe7266e9f6d159110d99ca8da8a34b17be17a04ad4509a9fffab1e45e10f10e0cf9cfbd9c761ad044064c07e473fdc626289cfb88b13a11455c069b70aa02426d9119ac878a14c9483be9c0d5bcbb5fa76c8d06531f59c7cf7c26372e750e2f332418ca769e5e7fbeb3ada7bb58b573a0635e2e3ad9a53ddb809ea01086a3fa993ad57e89da6f9c5e61bd0f8ba69212a386b2aa1ae17520d7fb989dbe14021885eb50fa3048aebd42c861a09a308b660d382c0480ead8a52a1e14927c7c77957f94bb59ccfd557f8c4a7af23360a298a603d20ebc386db041d8c306b3e32b0bff541bdec5ff75c3b40950815cf9f89d48a382f67e44c409d046c01fb1262aca0df6f5238a3c3c09977261494f7361ba326815d6e23f49e4d6d4b54665081067332265fff59cf54af9da0db9d19bc611cbcb6e6f3f1e2e1ffb6cdd6253578d78d06a2ff5f9250f1994c5749e3ce49231fbd63bba28e948f9150933e3ae31299babaa41043b181a100882e613b4b4b8f49ceeb742d22f860853a9b917f5a323a8a1fb1f3363a7be4407fba44b408f259b5db79a055b92ce3d7a0649cc59f4afa2b1f69959d5c6f5eef1fa7987a47bee4491f685c52e9db1ee1a231ab5a4bae1019c97868a409dd0d57b32525394a233023c4a7ac429808bbcb57a34b41883202744c3bdebc0a637773273f19c2be6e806bef7fc1002846db762ee4e16867773808c5477987d5851d5b1641d070feabc203cb3d7943ffb206272fcac1bccb616352d85975f5a22c0f247548535ad9fb83fb2be17689453f10691143c060cd964df63c3c70e7b1cfc7e2b468015f327f9869353477bfeeed330b03ddd9e4e0a2441182244da283d7a59d2b2b20e6de3e3a47c26aeef4944c1190bba674523a6c3c4ed6bac53b9edffcb0e9fb19d8bf36949d03ef6a7e59eb903a00d9614f642d1932c766421906f5b177963c71e881453560e3ffcec792e8dc46b1832a8fcb2ab2268a9c1fb648d1c6fa1c8cbd50d5a2d8264fbc6c063e6daac5519d362da389dcd3d12c8039f991de91e728abf5bab95c3aef66dd8cc36c60e73cb10afb02eff6df20ff12c59b142b07fc48fe94612de80b8b958f78256fd7cf3c6f79a83867f3bb5f70da392957badadecefdf7b6e4ebd39ff945397c7d302ca0a5a3918d8abb893cd9cdd680916a50fe19699ff0476ad82e6ba46523f26ccc5eb65313c1df1077c8876d2b73bf86ba311862d12b0c557a92ef827197121512e87f817167d4b17c7e225a48b3f8fbbf4187438e0e9b78e905cdbeb72e80dfb37ec0104f5186b39b4ff34f0cdf4b74dc915acd3f98874cd6a67308d0ad9697121ac477550b1affe004f433705933f9647522be65cb5a7471120ec942aeb956f195be0c1783102cf7d842f2968222ae1a7fa6513f200d3fa85d71724956ed697f0673ee3b40a4d46ba4850439ec125b708ed52b52b9f72906477d520c90a9f5dd49a7a33a328137a183f439895532b78ae451a8c3db789bc862fbc37241d523027e1a008629c969380f6eb55f9cf3f0675bca6851f00df6aaf90de9f62d5c179945ef81d1073850301f97e379ea415d830e3f3751cf83e2dba541cb6cdd89e6b674f2c53e329e5f3dd418d534ada6469a5b3bca5b7cfbdfdd6df4abaf77d4520d0311e801145c91b52586a56086e663841b702f52cef9fff8cfb7b33dfa125688ba6b4fadd1dca8defaf4259ca85323b23d3bbb45933562c25af3e8d7bc6ad4a50ae974f8d207994b3bd74a6812ab6a40fcaf96bb4e17bd20d742b14c72226caef3e0f5c56c4930071e9f9a894f18650fbb785c6f707605c86b634c9722c8690cf3a954f68d7c2db3a257339ade67a41259f6f878dd0ab7876deffa77f6f00819282a8f4c4da84c6cf4f335cd0410770a2b1a1fbb3f85f4489eeceb78bbfddb2d1866c57b41f6ed179a0bc3750a486403d23473f2feef43ebc5af1018d9c20089e277d77fb9c34f425c8f8af4c49864b57572fa8c232e61ef37194251a1ddc2f73ffecd57e638751cb72bcb2c40d22540166ca1e8588f24b010c9fbd962e3a2c23a7e93f131df61b8703ce326ed80cc87912d3c6aaa27574bbe8d65bcaecd660c31cead132a44b1d0e4a53cacc0b82a263c4e7783944af0af08ea9e68e8e25ed9111cfef841f1b2fd24164f9097f70efe09b1109e5cb91fe68a2760381fd63a7fd422dd578a60661abc9ee3a5db1c2cde2fb21f2040f1ed3fc27b99e254256949d0560e8b98fa028fca50768caa951a87bf8969af498d50a9ee773c9caa7d9f7d8e1955506013f198cda316d79b177e59f233b98f727afd2494fc18642f0015adab756ea6742690c7d00f28655b915ce4eb8b3ba2e8559ba23e1ff1ccc9f79ae2df85f924459c56715dec78ef4592352eb1a850cd65ecd36e1a9121e888586b7b2fa84da920b8cf44480433e61ab076b10171c0537524bb170a4b99b0b0c437418a665b7ef909652b6483b20362e2b52d38245f9bd026001635be5b155f5c766a59306fbde231fa72b4d74449a2fe8fb969496ee26af5881adaafb4189b439877ab8f78709cfd32c10ea576a010bfc137b7a4aae137ea3d29070ce3bc8dbe6655e967115ca3461ad9d28b9cf8af07441e68a54ec5e889846f3978f07ba51f7d5af5da78c5c675dc5d0c1a4a399ff4247203573a46fb903eaf7bc886e6cbd3126fa4a3fe3bb13bbdfea7da871f6563aa750f6ad7895b34b2809563dcf5ed30f1c60cef4138aa49d4f55e396534ed10cf4d857723a2b442f47d79de162c30ec6c4daf939b4c88649494e3682d1da81b4a5928d8e18a16c46707a685305e592589acb484e28e9d5af89c44b6e563d125ec97c0155410527406d94b90bc9576a662db99da1cb82b04d610d02187ce08f22ea0e8fd31919d53fa6aaf980e31ca7f8610e695a41919c24136a8406c62d5f15fca365892a2b54ece17664b5247583ad60d863f283f3c288946139575dcaedc978762e85f534e56334ef0221c34ffae054ddf79339b8f08701e9699b11041df8f518dd33203363c8098fbefb01555bcc2542422777b38d8dff11b15aadb0c251ce2c5b32f8735b3cb784f2e5731b48feb5a0e791a1106abdea0f7d1f087737cbe7fdf523fa14c9be2a2987511004c5b7ac1814ef6961db16799698242452c469a07c30e4a1f73193c74a41bdd88aef50035e4648bc9dfa276951798420a45e4085932bdb9381af3cc4678bd962af616549e4020d2c9fd25e2117a6d8934fde2218273d7833d60ea492e251417a27e7fb32012a940a6b6487af4b64958bf05f1b1107732149d227eeda5ca5a43cf583dc297d66072a1acd75e93a7caefd36a0d581e21d5cb08654c4ecef46ebac5391546e0b7d2a6418548d8f816446bcf237f676e873e6bae9107234abe5ab24c53ea472ad10653cef068fd9f4e729fc0d526e489f8df13af5575f1e70e0ec22899728b0659d70fc2dd509d9df3ec170638f89e540f4d3f02aa9b1b1819f84da596e0d7b45a5818061728f8eeccd2bea0f460dd7e18cb95f2364c50e351f0690e184eb63ebbb14a0b4b2117e44f3b2b300", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x130, 0x0, 0x2, {0x0, 0x3, 0x0, '\x00', {0x7ff, 0x4, 0xadf, 0x10, r6, 0xffffffffffffffff, 0x8000, '\x00', 0x6, 0x7, 0x4, 0x3, {0x1, 0x6}, {0x4000000000006, 0x42}, {0x2000001, 0x9}, {0x4, 0xa00}, 0x2, 0x6, 0xfff, 0x7}}}}) 41.708570884s ago: executing program 1 (id=2653): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x6b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x189002, 0x40) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r3, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=""/4085, 0xff5}], 0x1}}], 0x4000000000001a3, 0x140, 0x0) 41.394126253s ago: executing program 1 (id=2658): syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x7, 0x96603) r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRESDEC=r0, @ANYRES8=r0], 0x7c}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000480)=ANY=[@ANYBLOB="ff27483e", @ANYRES16=r2, @ANYRESDEC=r2], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x400c810) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) openat$vcs(0xffffff9c, &(0x7f0000000180), 0x50040, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) getsockname$packet(r3, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setscheduler(0x0, 0x1, 0x0) keyctl$set_reqkey_keyring(0xe, 0x5) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_rdma(0x10, 0x3, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd7000ffd9df2502000000ff000008"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4040) 41.29398729s ago: executing program 35 (id=2658): syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x7, 0x96603) r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRESDEC=r0, @ANYRES8=r0], 0x7c}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000480)=ANY=[@ANYBLOB="ff27483e", @ANYRES16=r2, @ANYRESDEC=r2], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x400c810) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) openat$vcs(0xffffff9c, &(0x7f0000000180), 0x50040, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) getsockname$packet(r3, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setscheduler(0x0, 0x1, 0x0) keyctl$set_reqkey_keyring(0xe, 0x5) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_rdma(0x10, 0x3, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd7000ffd9df2502000000ff000008"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4040) 9.031444145s ago: executing program 7 (id=2785): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'dummy0\x00'}) sendmsg$nl_route(r0, 0x0, 0x10) 9.018612114s ago: executing program 7 (id=2786): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='sysfs\x00', &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000280)=@xdp={0x2c, 0x0, r4, 0x18}, 0x80, &(0x7f00000034c0)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1}, 0x8000) 5.062428763s ago: executing program 7 (id=2794): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00'], 0x30}, 0x1, 0x0, 0x0, 0x20004044}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x107, 0x100, 0x100, 0x7, 0x4000}}) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="94000000200025a729bd7000fddbdf250a0000cdff00000102000100080018004e234e230800060000000000050015000200000014000100fc010000000000000000000000000000080007000500000014000100ff010000000000000000000000000001080017804e"], 0x94}, 0x1, 0x0, 0x0, 0x8090}, 0x0) r6 = inotify_init() inotify_add_watch(r6, &(0x7f00000003c0)='.\x00', 0x5db) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') r7 = inotify_init() inotify_add_watch(r7, &(0x7f0000000000)='.\x00', 0x1400037e) inotify_add_watch(r6, &(0x7f0000000300)='./file1\x00', 0xa0000006) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000280)={0x60, 0x0, &(0x7f000025a000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x8, 0x0, 0x0, 0x1a6, 0x0, 0x0, 0x4, 0xf}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_newneigh={0xfffffffffffffe99, 0x1c, 0x1, 0x70b529, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x80, 0x5e, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, 0x28}, 0x1, 0x0, 0x0, 0x240008d4}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) syz_emit_ethernet(0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c2000021001122334455000442420300010104010000c9b196fca5a302f3205d9b62a8af05669e6990e8f7ce661c7b418dbbb417975fba701b023297b42fb32a388af37035c2481357decb68905d752aea00a34925a49a18e1"], 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001c00010029bd7000fadbdf2507000000", @ANYRES32=r9], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x48088) 4.924717063s ago: executing program 4 (id=2797): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r1 = syz_open_procfs(0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_io_uring_setup(0x246a, &(0x7f00000000c0)={0x0, 0xba2a, 0x80, 0x3, 0x1c4, 0x0, r1}, &(0x7f0000000140), &(0x7f0000000180), 0x0) pread64(r1, &(0x7f00000003c0)=""/262, 0x106, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, 0x0) sync_file_range(r0, 0xbb, 0x3, 0x2) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000005c0)={'gretap0\x00', &(0x7f0000000500)={'erspan0\x00', 0x0, 0x700, 0x8, 0x5, 0x8, {{0x1f, 0x4, 0x0, 0x2a, 0x7c, 0x68, 0x0, 0xb, 0x2f, 0x0, @rand_addr=0x64010102, @local, {[@end, @ra={0x94, 0x4}, @end, @ssrr={0x89, 0x17, 0xed, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x1f}, @multicast1]}, @timestamp_prespec={0x44, 0x2c, 0xa5, 0x3, 0x7, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfff}, {@loopback, 0x8001}, {@broadcast, 0x1ff}, {@broadcast, 0x7fff}, {@empty, 0x1}]}, @end, @rr={0x7, 0x1b, 0x23, [@multicast2, @multicast1, @empty, @dev={0xac, 0x14, 0x14, 0x1e}, @remote, @dev={0xac, 0x14, 0x14, 0x3c}]}]}}}}}) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001880)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x98, 0x98, 0x3, [@int={0x3, 0x0, 0x0, 0x1, 0x0, 0x54, 0x0, 0x2a, 0x1}, @var={0x3, 0x0, 0x0, 0xe, 0x1, 0x2}, @union={0x9, 0x5, 0x0, 0x5, 0x1, 0x8001, [{0x10, 0x3, 0x2}, {0x6, 0x3, 0x57cb64f7}, {0x0, 0x4, 0x10001}, {0x7, 0x4, 0x5}, {0x1, 0x5, 0x2}]}, @fwd={0xd}, @const={0x1, 0x0, 0x0, 0xa, 0x3}, @float={0xf, 0x0, 0x0, 0x10, 0x4}, @type_tag={0xe, 0x0, 0x0, 0x12, 0x3}]}, {0x0, [0x5f]}}, &(0x7f0000000880)=""/4096, 0xb3, 0x1000, 0x1, 0x7, 0x10000, @value=r1}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=@base={0x11, 0x0, 0x5, 0xf16c, 0x4001, r1, 0x2, '\x00', r4, r5, 0x5, 0x1, 0x2}, 0x50) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000640)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100d1000000fbdbdf3a3300000018000180140002007665746831"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4008800) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, r1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xd) readv(r2, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/171, 0xab}], 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x8d5}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x3, &(0x7f0000000080), 0x4) 4.825587235s ago: executing program 2 (id=2798): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x40) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="0000008a4ae334d22eee8b7dea21b17a6a7aba5a0cac1a6e6eba8c94160a0000000000000000004000", @ANYRES32=r4, @ANYBLOB="08000500"], 0x24}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[@ANYBLOB="500000fd070211000001f4021100000008021100000000000000000000000000640001000046020202020202010882848b960c121824"], 0x36) syz_80211_inject_frame(&(0x7f00000003c0)=@broadcast, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x330) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) mkdir(&(0x7f0000000540)='./trace\x00', 0x1ff) mount(&(0x7f0000000580)=@filename='nodev\x00', &(0x7f00000005c0)='./trace\x00', &(0x7f0000000600)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffff9c, &(0x7f0000000640)='./trace/events/mac80211/enable\x00', 0x1, 0x0) write(r5, &(0x7f0000000680)='1', 0x1) socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) futex(&(0x7f0000000240), 0x85, 0x0, 0x0, 0x0, 0x0) 3.879103058s ago: executing program 4 (id=2799): mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)="000000000902200001010080320904000002ff000000070581024000000705020240000012010002000000402505a0a4000100000001", 0x36) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r1, &(0x7f0000000700)="0705810240000007058102000200", 0xe) 3.771879434s ago: executing program 6 (id=2800): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000280)={{0x4, 0xfffd, 0x8, 0xe1a4}, 'syz0\x00', 0x10}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040880}, 0x4001) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) openat$random(0xffffff9c, &(0x7f0000000100), 0x8000, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x100008, 0x4, 0x8, 0x1, 0xffffffffffffffff, 0x400000}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r3}, 0x38) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001f00)=@newtaction={0x1114, 0x31, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x1100, 0x1, [@m_police={0x10fc, 0x1, 0x0, 0x0, {{0xb}, {0x10d0, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x5, 0xad8, 0x10001, 0x8001, 0x5, 0x7fff, 0xfffffff6, 0xfffffff4, 0x46, 0x5, 0x8, 0x0, 0x1, 0xd7, 0x0, 0x97, 0x8000, 0xa3, 0x3, 0x7, 0x100, 0x44a8, 0x6, 0x8001, 0x0, 0x7, 0xc4c7, 0x7ff, 0x44, 0x3, 0x0, 0x8, 0x8, 0x28, 0x8, 0x213580fd, 0x2, 0x1, 0x0, 0x5, 0x3, 0x31, 0x7, 0x200, 0x76, 0xec8a, 0x5, 0xe, 0x101, 0x0, 0xe5, 0xc, 0x5, 0x7, 0x4, 0x2, 0x0, 0x80dd, 0xb0, 0x35a26e02, 0xffff, 0xbf, 0x83b, 0x2, 0x200000, 0x8c, 0x2bf, 0x81a8, 0x8, 0x100, 0x3, 0x400, 0x0, 0x7, 0x2, 0x0, 0xffffffff, 0x6, 0x9, 0x237, 0x8, 0xb1, 0x7, 0x11, 0x3, 0x8e, 0xb55, 0x8000, 0x5, 0x6, 0xffffffcd, 0x2, 0x4, 0x80000000, 0x9, 0x7, 0x5, 0xc56a, 0x8, 0xffff, 0x2, 0x3, 0x5c, 0x8, 0x0, 0x6, 0x3, 0x50, 0x10000, 0x8001, 0x5, 0x1, 0x6, 0x7, 0xd, 0x9, 0x10000, 0x19, 0x91d, 0x3, 0x200002, 0x1, 0x3, 0x3, 0x7ff, 0x401, 0x7, 0xd70, 0x2c, 0x9, 0x3, 0x6070, 0xfff, 0x1000, 0x8, 0x4, 0x6, 0x5, 0x4, 0x7c, 0x488531db, 0x40, 0x6, 0x5, 0xfffffffb, 0x1000000, 0x1ff, 0x5, 0xc7, 0x0, 0x8, 0x5, 0x5, 0x7, 0xfffffffb, 0x5, 0x5c, 0x1000, 0x3, 0x527, 0x3, 0x5a85, 0xf6, 0xc, 0x1, 0xaa7a, 0x6, 0x1, 0xee1, 0x80000000, 0x825f, 0x9, 0x40, 0x233, 0x80000001, 0x6, 0x401, 0x9, 0x618, 0x6, 0x4, 0x1, 0x846, 0x7, 0xb46, 0x9, 0x1ff, 0xe0, 0x4, 0xd, 0x1, 0xc98, 0x3, 0xffff8000, 0xc, 0x6, 0xfe, 0x1, 0x8, 0x2, 0x2, 0x2, 0xbecd, 0x9, 0x3, 0xba, 0x400, 0x8fe1, 0x371, 0x80, 0x2, 0x8000, 0x10000, 0x9, 0x5, 0x6e36c67d, 0xbe4, 0x7f, 0x1, 0x7, 0x2, 0x3, 0x1, 0x64, 0x8843, 0x6, 0x80, 0x3, 0x6, 0xfffffe01, 0x5, 0x8001, 0xfffffff7, 0x9, 0x9, 0x3ff, 0x751, 0x0, 0x1, 0x8, 0xfffffff3, 0xe, 0x7fff, 0xff, 0x800, 0x3, 0xd, 0x80000000, 0xe, 0xc0, 0x6, 0x6397, 0x9f9, 0x239, 0x89e4]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x5e5, 0x0, 0x1, 0xa, 0x2, 0x5, 0x0, 0x5, 0x7, 0x2, 0x4, 0x0, 0x2, 0x1000, 0x7fffffff, 0x80, 0x6, 0x0, 0xffffffff, 0xaffc, 0x1, 0x34, 0x1, 0x4, 0x1, 0x5, 0x9, 0x4, 0x4, 0x1, 0x151d, 0x5, 0x6, 0xfffffffa, 0xd, 0xebc, 0x8, 0x752e, 0x8, 0x289, 0x100, 0xffffffff, 0x7f, 0x7fffffff, 0x101, 0x7f, 0x2, 0x5, 0x5, 0xfffffff7, 0x1, 0x5, 0x3, 0xd, 0x0, 0x7f, 0xffff2a91, 0x3, 0x100, 0x5, 0x2ce, 0x7f, 0xc14, 0xfff, 0x6, 0xfffffff7, 0x5, 0xd9, 0xffff6d2d, 0x7e, 0x0, 0x2, 0x4, 0xd1, 0x0, 0x0, 0x85, 0x1, 0xadfb, 0xd34, 0x9, 0xf324, 0x2000, 0x1, 0x5, 0x80, 0x1000, 0x0, 0x0, 0xecc1, 0xc, 0x1000, 0x7fffffff, 0x4, 0x4, 0x0, 0xfff, 0x7, 0x4, 0x7, 0x22, 0xa, 0x3, 0x2, 0x3e78, 0x134, 0x9, 0x80000001, 0x608, 0x80e8, 0x371, 0x8, 0x6f, 0x0, 0xfffff801, 0x6, 0x0, 0x4, 0x5, 0xffff, 0x0, 0x720fbc85, 0x101, 0x1ff, 0x48, 0xa3f, 0x4, 0xf46b, 0x9, 0x0, 0x4, 0x9, 0x401, 0x81, 0x84c, 0x6, 0x3, 0x5, 0xffff, 0x6, 0x7, 0x31a, 0xa, 0x9, 0xc16, 0x3ff, 0x0, 0x8001, 0x9, 0x1ff, 0x4, 0x68000000, 0x5, 0xfff, 0x800, 0x4, 0x30e9, 0x1, 0x9, 0x6, 0xec, 0x0, 0x7, 0x1, 0x8, 0xe0000, 0x0, 0x7, 0x8000000, 0x3, 0x7f, 0x1ff, 0x2, 0x9, 0x0, 0xfffffff1, 0xeb, 0x6, 0x10000, 0x0, 0x3, 0x6, 0x9, 0xdbe, 0x1000, 0x800, 0x3, 0x2, 0x3, 0x10001, 0xa, 0x7, 0x4, 0x4, 0xffffffff, 0x8, 0x0, 0x8000, 0x7, 0x8, 0x2, 0x8, 0x9, 0x238, 0x800, 0xffffffff, 0x4, 0x5, 0x9, 0x3c, 0x8000, 0x5, 0x1, 0x400, 0x2, 0xd, 0x200, 0xc, 0x2, 0x3, 0x1ff, 0x4, 0x0, 0x212c6b57, 0x75, 0x7, 0x70, 0xfffff219, 0xffffffc0, 0x2, 0x200, 0x6c, 0x7, 0x6, 0x9, 0x6bb1, 0x6, 0x8, 0x1, 0x9, 0x6a, 0xbf, 0x2, 0x2, 0x9, 0x9, 0x2, 0x9, 0x1, 0xc, 0x9, 0x8, 0x10000, 0x7, 0x3]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6000, 0x5, 0x757ab92d, 0x9b5, 0x3, {0x3, 0x0, 0x0, 0x3, 0x7, 0x8}, {0x1, 0x1, 0x3, 0xe5e, 0x7ff, 0x8}, 0xe, 0x8, 0x2}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x10000000, 0x5, 0x7fffffff, 0xfffffffe, {0x2, 0x2, 0x7, 0x8001, 0x101, 0x656}, {0x4, 0x1, 0x80, 0xfad, 0xe, 0x3}, 0x0, 0x9, 0xffff}}], [@TCA_POLICE_RESULT={0x8}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x8001}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7fff}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_RATE={0x404, 0x2, [0x100, 0x9, 0x3, 0xfffffff7, 0x1ff, 0x8, 0x4, 0x10000, 0x7fffffff, 0x0, 0x3ff, 0x9, 0x200, 0x7fff, 0x4, 0x8, 0x9000000, 0x1, 0xa, 0xffff751a, 0x1, 0x6, 0xc9e8, 0x8001, 0xffff, 0x9, 0xb, 0x8, 0x7, 0x100, 0xf, 0x2, 0x5, 0x38, 0x0, 0x5b2d, 0x0, 0x5, 0x5, 0x5, 0x9, 0x6, 0x3ff, 0x6, 0x5, 0x21, 0x1, 0x8, 0x9, 0x5, 0xf0c, 0x4, 0x1, 0xc48, 0x60000, 0x10001, 0x62e5, 0xf5, 0x3, 0x4, 0x6, 0x8, 0x6, 0x4, 0x7fff, 0x4, 0xb7, 0x4, 0x9, 0xdaff, 0xdca, 0x6711, 0x2, 0x6, 0x10001, 0x4, 0x101, 0x3, 0xde5, 0x3, 0x401, 0xffffffbc, 0x8000, 0x1, 0x6, 0xa9, 0x7, 0x9, 0x4, 0x8, 0x3, 0x1, 0xc, 0x4, 0x3, 0x6, 0x0, 0xf5, 0xf, 0x8, 0x1, 0x5, 0x2, 0x6b, 0x6, 0x8, 0x8001, 0x4, 0x0, 0x7, 0x7fff, 0x4, 0x0, 0x8, 0x9f4d, 0x9, 0x1000, 0xa10, 0x6, 0x0, 0x7, 0x7, 0x5, 0x1, 0x4, 0xfffffff7, 0x7fff, 0x9, 0x3, 0x5, 0x717, 0x5, 0x5, 0x4, 0x75, 0x401, 0x6, 0x5, 0x7, 0xd9e, 0x0, 0x7, 0x0, 0x97e2, 0x6, 0x6, 0x1ff, 0x6, 0xfffffffa, 0x2, 0x1000, 0x4, 0x800, 0xfffffff9, 0x8001, 0x3, 0x6, 0x69, 0x0, 0x6, 0x401, 0x474, 0x6, 0x1, 0x0, 0x7b75b7e8, 0xd, 0x401, 0xff, 0x3, 0xd93a, 0x6, 0xb98, 0x0, 0x401, 0x2, 0x6, 0x58, 0x3, 0x38f08769, 0xa78e, 0x7, 0x6, 0x7fff, 0x5, 0xa1b6, 0x5e5a, 0x9, 0x1, 0x1, 0x2, 0x1, 0x6, 0x2, 0xff, 0x4000, 0x0, 0x3, 0xb, 0x9, 0xc060da9, 0x8, 0xfffffffc, 0x0, 0x0, 0x1, 0x6, 0x9, 0x10, 0xa2, 0x2, 0xfffffffc, 0x10, 0x5, 0x4, 0x7392, 0x1, 0x2, 0x6, 0x6, 0x4, 0x9, 0xb1e2, 0x2, 0x1, 0xff, 0x6281, 0x5f, 0xc, 0x0, 0x2, 0x0, 0x7, 0xf987, 0xfffffff7, 0x3, 0x8, 0x2, 0x401, 0x6, 0x2, 0xb, 0x80, 0xfffffff7, 0x1, 0xffffad25, 0xa03, 0xff, 0x0, 0x2, 0x4, 0x4, 0x81, 0x4, 0x3, 0xf]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x8, 0xd4e4, 0x40, 0x3, 0x6, 0x64b8, 0x155a, 0x1000, 0x5dd900, 0x7ff, 0x2800000, 0x401, 0x5d, 0x6, 0xffff, 0x6, 0x80, 0x101, 0x3005f5ab, 0x3b7e6b03, 0xfff, 0x5, 0x2, 0x10000, 0xe, 0x8, 0x4, 0x8, 0x2, 0x7fffffff, 0x566, 0xb1, 0x5, 0x0, 0x0, 0x4, 0x81, 0x1, 0x8, 0x10001, 0x3, 0x0, 0x30000, 0x2, 0x0, 0x1, 0x0, 0x2, 0x2, 0x1, 0x0, 0x2, 0x0, 0x5, 0x1, 0x7, 0x1, 0x5, 0x1, 0x1000, 0x9, 0xfffffffb, 0x8, 0x3, 0xc00000, 0x5da, 0xffff7fff, 0x787, 0x7, 0x5, 0x8, 0x6a65, 0x1, 0x0, 0x5, 0xd6, 0x9, 0x6, 0x3, 0xa, 0xa0b0, 0xffffff81, 0x3ff, 0x1ff, 0xfffffff6, 0xa, 0xf, 0x6, 0x6, 0x7fffffff, 0x3, 0x10000, 0x31a2, 0x10000, 0x9, 0x5d86a571, 0x101, 0x8, 0x9, 0x1, 0x3, 0x2, 0x3, 0xa361, 0x4, 0xfffffff8, 0x80000000, 0x10001, 0xe, 0x2, 0x3d7a3cad, 0xcba, 0x7, 0x8, 0x7, 0x4, 0x800, 0x2, 0x2, 0x7, 0xfffffe00, 0x9, 0xbb7, 0x10, 0x9, 0x1, 0x5, 0x0, 0xff, 0xf, 0x45f, 0x7, 0x6, 0x9, 0x3, 0x7, 0x9, 0xfffffc01, 0x1b9, 0x1ff, 0x10000, 0x2, 0x8, 0xf, 0x5, 0x2, 0x3, 0xecd4, 0xd7, 0x7, 0x6, 0x7, 0x5, 0x7, 0x4, 0x78ad195f, 0x2, 0x6, 0xc, 0x1, 0x7, 0x76, 0xffffffff, 0x4, 0x8, 0x3, 0x7, 0x4, 0x400, 0x5, 0x0, 0x7, 0x2, 0xff, 0xbcdc, 0x40, 0x5, 0x5, 0x2, 0x9, 0x1, 0x2, 0x6, 0x3, 0x39f6, 0xfff, 0x40, 0x5, 0xbf, 0xe8, 0x7fff, 0x2, 0x8, 0x10000, 0x80000001, 0x5, 0x3, 0xc7, 0x7ff, 0x0, 0xfffffff9, 0x3, 0xd23, 0x4, 0x66, 0x2, 0xffffffff, 0x6, 0x9, 0x5, 0x4, 0x8, 0x7, 0xd, 0x7, 0x9, 0x2, 0x5, 0xffffffd4, 0x0, 0xfff, 0x0, 0x6, 0x200, 0x0, 0x0, 0x2, 0x0, 0x7f, 0xfffff801, 0x8, 0x4, 0x9, 0x3, 0x9, 0x2, 0x0, 0xfff, 0x800, 0x9, 0x40, 0x5, 0xfffffffb, 0x8, 0x799, 0x4, 0x3, 0x9, 0x80, 0x3, 0x4, 0x7f, 0x0, 0x4, 0x57]}]]}, {0x4}, {0xc, 0x3, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x1114}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x80) sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000040)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-twofish-avx\x00'}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000300)="80ba9fe37fe15a4003faed2aa9e3563d271030df15105f522e579c6c6290bec90b4f8210a0f02e15b44b489261f66f7b55590ab6b57c91bdfaddcdd76da1e17c1ebd1e6fe8d347d26d9c22ca75fd4066debe5346f9f1de6ca20ded2e2265a6fe8a9d3311508e0033abbbc5dce4fd4276b6c2af72fae05562868f55a38d65bfbe0a81875ed4d0fc68df802cae8bdf976328000b906deb7ff649363e341a34c8903dbefef1cd63a4286405f603e1d0030aa2b26c16d22f0187b6dc372249d5a70f1640e3f1736951", 0xc7}, {&(0x7f0000000400)="d0b60c8e4f23a541b142399ff1171fa464f6ae93", 0x14}], 0x2}, 0x1) 3.717106444s ago: executing program 4 (id=2801): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./debug\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) listen(0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x5) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100), 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) write(r2, &(0x7f00000001c0)="240000005800410f9c00f4f90085b3025cb1fddf08000100050100000800028001000000", 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x2, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r6, &(0x7f00000001c0)={0x18, 0x2, {0x3, @remote}}, 0x1e) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000640)='syzkaller\x00', 0x7}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x9, 0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x8, 'syz0\x00'}, 0x3, 0x0, 0x8, 0x0, 0x1, 0x0, 'syz1\x00', &(0x7f00000003c0)=['\x00'], 0x1}) 3.548172803s ago: executing program 6 (id=2802): socket(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x27c8, &(0x7f0000000540)={0x0, 0x800069ea, 0x3000, 0x3, 0x14b}, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x8, 0x8, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 3.073067652s ago: executing program 2 (id=2803): syz_usb_connect$uac3(0x0, 0xa0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f240902020000000001"], 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="18000000160001ea"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@multicast2, @private=0xffffffff}, 0x10) recvmmsg(r0, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}, 0xc}], 0x1, 0x60, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f00000000c0)=0x8b, 0x100000500) r3 = socket$inet_tcp(0x2, 0x1, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000002500)={&(0x7f00000001c0)=@abs, 0x6e, &(0x7f0000002440)}, 0x12041) r4 = socket(0x400000000010, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001ffffffff0000000000000000800040001000000", 0x24) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth1_to_hsr\x00'}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x914) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, 0x84) bind$inet6(r5, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) socket$nl_route(0x10, 0x3, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x800, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x800) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000640)={&(0x7f0000000580)=[0x0, 0x0, 0x0], 0x3, 0x8001}) sendto$inet(r3, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0) 2.929758731s ago: executing program 7 (id=2804): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x22, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @empty, @broadcast}}}}}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d00000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000007608000000c0000018000000000000000000000000000000950000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0xc}, 0x94) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(0x0, &(0x7f0000000300)='./file0/file0\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r3, &(0x7f0000001180)={0x2020, 0x0, 0x0, 0x0}, 0x2020) rename(&(0x7f0000000580)='./file0\x00', 0x0) symlinkat(&(0x7f0000001040)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') mount$nfs(&(0x7f0000000340)=')./.,\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x80000, &(0x7f0000000400)=ANY=[@ANYBLOB="2c65727370616e30002c2c2c47504c002c5c402c6673757569643d63636630616163002d640d63642d370132382d396364352d38003730313331302c66756e633d4d4f44554c455f434845434b2c646566636f6e746578743d757365725f752c66736d616769633d3078303030303030303030303030303030342c6f626a5f726f6c653d292c736d61636b66736861743d65727370616e30002c61707072616973655f747970653d696d617369672c657569643d", @ANYRESDEC=r4, @ANYBLOB="02"]) accept4(r2, 0x0, 0x0, 0x80000) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x7313}, [@call={0x85, 0x0, 0x0, 0x11}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x11}, 0x94) 2.911812154s ago: executing program 6 (id=2805): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/direction\x00', 0x1, 0x0) write$P9_RSTATFS(r0, &(0x7f0000000000)={0x43, 0x9, 0x1, {0x5, 0x2, 0x5, 0x9, 0x6, 0x2, 0x100, 0xfff, 0x5}}, 0x43) 2.790556155s ago: executing program 6 (id=2806): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x40) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="0000008a4ae334d22eee8b7dea21b17a6a7aba5a0cac1a6e6eba8c94160a0000000000000000", @ANYRES32=r4, @ANYBLOB="08000500"], 0x24}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[@ANYBLOB="500000fd070211000001f4021100000008021100000000000000000000000000640001000046020202020202010882848b960c121824"], 0x36) syz_80211_inject_frame(&(0x7f00000003c0)=@broadcast, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x330) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) mkdir(&(0x7f0000000540)='./trace\x00', 0x1ff) mount(&(0x7f0000000580)=@filename='nodev\x00', &(0x7f00000005c0)='./trace\x00', &(0x7f0000000600)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffff9c, &(0x7f0000000640)='./trace/events/mac80211/enable\x00', 0x1, 0x0) write(r5, &(0x7f0000000680)='1', 0x1) socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) futex(&(0x7f0000000240), 0x85, 0x0, 0x0, 0x0, 0x0) 1.722063296s ago: executing program 4 (id=2807): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000001300)=@ethtool_flash={0x33, 0x5, './file0\x00'}}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x14, r2, 0x1, 0x0, 0x0, {0x10}}, 0x14}, 0x1, 0x0, 0x0, 0x40000c5}, 0x2404c080) syz_emit_vhci(&(0x7f0000000740)=ANY=[@ANYBLOB="0404"], 0xd) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r7) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) r11 = socket$kcm(0x11, 0x3, 0x0) r12 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r11, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r11, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r13, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r3, &(0x7f00000001c0)="a6", 0x1, 0x40, 0x0, 0x0) 1.720831849s ago: executing program 7 (id=2808): syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x7, 0x96603) r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRESDEC=r0, @ANYRES8=r0], 0x7c}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000480)=ANY=[@ANYBLOB="ff27483e", @ANYRES16=r2, @ANYRESDEC=r2], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x400c810) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="000a30000000090a0108000000000000000000061400128010000180090001007866724d00000000080007400000003714000000000000020500000aa616dc6b6c7edc3dd07a972891ead645c6e5fac48dfaadea0000"], 0x58}, 0x1, 0x0, 0x0, 0x20040800}, 0xc040) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) openat$vcs(0xffffff9c, &(0x7f0000000180), 0x50040, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) getsockname$packet(r3, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) keyctl$set_reqkey_keyring(0xe, 0x5) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$nl_rdma(0x10, 0x3, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd7000ffd9df2502000000ff000008"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4040) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073797a3100000000080041007369770014003300626f6e64300000000000009400000000"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) 1.714527152s ago: executing program 2 (id=2809): syz_open_dev$loop(0x0, 0x5, 0x0) 1.614851918s ago: executing program 2 (id=2810): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x1a0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/direction\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/num_groups\x00', 0x1, 0x0) write(r1, &(0x7f0000000380)='2', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/midi1_num_groups\x00', 0x1, 0x0) write(r2, &(0x7f0000000440)='2', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1/first_group\x00', 0x1, 0x0) write(r3, &(0x7f0000000600)='2', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000640)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1/num_groups\x00', 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000780)='2', 0x1) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) symlinkat(&(0x7f0000000880)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000008c0)='./my_configfs/usb_gadget/g1/configs/c.1/midi2.usb0\x00') write(0xffffffffffffffff, &(0x7f0000000940)='dummy_udc.0', 0xb) 1.504542731s ago: executing program 2 (id=2811): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x40) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="0000008a4ae334d22eee8b7dea21b17a6a7aba5a0cac1a6e6eba8c94160a0000000000000000004000", @ANYRES32=r4, @ANYBLOB="08000500"], 0x24}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[@ANYBLOB="500000fd070211000001f4021100000008021100000000000000000000000000640001000046020202020202010882848b960c121824"], 0x36) syz_80211_inject_frame(&(0x7f00000003c0)=@broadcast, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x330) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) mkdir(&(0x7f0000000540)='./trace\x00', 0x1ff) mount(&(0x7f0000000580)=@filename='nodev\x00', &(0x7f00000005c0)='./trace\x00', &(0x7f0000000600)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffff9c, &(0x7f0000000640)='./trace/events/mac80211/enable\x00', 0x1, 0x0) write(r5, &(0x7f0000000680)='1', 0x1) socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) futex(&(0x7f0000000240), 0x85, 0x0, 0x0, 0x0, 0x0) 906.01685ms ago: executing program 6 (id=2812): syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x7, 0x96603) r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRESDEC=r0, @ANYRES8=r0], 0x7c}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000480)=ANY=[@ANYBLOB="ff27483e", @ANYRES16=r2, @ANYRESDEC=r2], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x400c810) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="000a30000000090a0108000000000000000000061400128010000180090001007866724d00000000080007400000003714000000000000020500000aa616dc6b6c7edc3dd07a972891ead645c6e5fac48dfaadea0000"], 0x58}, 0x1, 0x0, 0x0, 0x20040800}, 0xc040) openat$vcs(0xffffff9c, &(0x7f0000000180), 0x50040, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) getsockname$packet(r3, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setscheduler(0x0, 0x1, 0x0) keyctl$set_reqkey_keyring(0xe, 0x5) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$nl_rdma(0x10, 0x3, 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd7000ffd9df2502000000ff000008"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4040) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073797a3100000000080041007369770014003300626f6e64300000000000009400000000"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r7, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) 905.106216ms ago: executing program 7 (id=2813): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00'], 0x30}, 0x1, 0x0, 0x0, 0x20004044}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x107, 0x100, 0x100, 0x7, 0x4000}}) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="94000000200025a729bd7000fddbdf250a0000cdff00000102000100080018004e234e230800060000000000050015000200000014000100fc010000000000000000000000000000080007000500000014000100ff010000000000000000000000000001080017804e"], 0x94}, 0x1, 0x0, 0x0, 0x8090}, 0x0) r6 = inotify_init() inotify_add_watch(r6, &(0x7f00000003c0)='.\x00', 0x5db) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') r7 = inotify_init() inotify_add_watch(r7, &(0x7f0000000000)='.\x00', 0x1400037e) inotify_add_watch(r6, &(0x7f0000000300)='./file1\x00', 0xa0000006) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000280)={0x60, 0x0, &(0x7f000025a000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x8, 0x0, 0x0, 0x1a6, 0x0, 0x0, 0x4, 0xf}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_newneigh={0xfffffffffffffe99, 0x1c, 0x1, 0x70b529, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x80, 0x5e, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, 0x28}, 0x1, 0x0, 0x0, 0x240008d4}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) syz_emit_ethernet(0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c2000021001122334455000442420300010104010000c9b196fca5a302f3205d9b62a8af05669e6990e8f7ce661c7b418dbbb417975fba701b023297b42fb32a388af37035c2481357decb68905d752aea00a34925a49a18e1"], 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001c00010029bd7000fadbdf2507000000", @ANYRES32=r9], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x48088) 722.569928ms ago: executing program 4 (id=2814): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/direction\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/num_groups\x00', 0x1, 0x0) write(r1, &(0x7f0000000380)='2', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/midi1_num_groups\x00', 0x1, 0x0) write(r2, &(0x7f0000000440)='2', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1/first_group\x00', 0x1, 0x0) write(r3, &(0x7f0000000600)='2', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000640)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1/num_groups\x00', 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000780)='2', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000000940)='dummy_udc.0', 0xb) 231.987088ms ago: executing program 4 (id=2815): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'dummy0\x00', 0x0}) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@get={0x128, 0x13, 0x400, 0x70bd26, 0x25dfdbfb, {{'morus640-sse2\x00'}, '\x00', '\x00', 0x2600, 0x400}, [{0x8, 0x1, 0x1}, {0x8, 0x1, 0xeffffffc}, {0x8, 0x1, 0xfffffbfa}, {0x8, 0x1, 0xf}, {0x8}, {0x8, 0x1, 0x8000}, {0x8}, {0x8, 0x1, 0x82a7}, {0x8, 0x1, 0x7}]}, 0x128}, 0x1, 0x0, 0x0, 0x64000}, 0x4040) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x2ee}, &(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000007c0)={0x0, @bt={0xa8c, 0x870, 0x1, 0xdf9e32a0640bc3f8, 0xd59f82, 0x19f5, 0xacc, 0xb, 0x0, 0x8, 0x27fd, 0x7fff, 0x440, 0x3, 0xd, 0x22, {0x45, 0x80}, 0xcd, 0x3}}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getpriority(0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc04c565d, &(0x7f00000003c0)=@fd={0x113, 0x0, 0x4, 0x1000, 0x0, {0x0, 0xea60}, {0x5, 0xd2598af09f5c086f, 0x2, 0x0, 0x48, 0xf, "3076eddd"}, 0x4, 0x4, {}, 0x7ff, 0x0, r4}) sendto$inet6(r5, &(0x7f00000002c0), 0x0, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f00000000c0)={0x93, 0x800, 0x4, 0x80}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000005, 0x12, 0xffffffffffffffff, 0x66df4000) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000180)={0x0, 0x1, 0x12, 0x6, 0x200, &(0x7f0000000880)="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"}) sendmsg$nl_crypto(r2, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000400000000", @ANYRES32=0x0, @ANYBLOB="937b010000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 78.022345ms ago: executing program 6 (id=2816): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000006b70419a29d48dd58afdbb88ae413915edd26b4ea2fc", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r3}, 0x8) r6 = socket(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x98, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x3, [0x1, 0x1, 0x67af, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x1000], [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x198e, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_EGRESS_BLOCK={0x33, 0xe, 0x3}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6a27}]}, 0x98}, 0x1, 0x0, 0x0, 0x10}, 0x8) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x201c, &(0x7f0000000800)=ANY=[@ANYRES16=r8, @ANYRES8=r2, @ANYRES8=r5], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1a, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000002c0)=r9, 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000700)="d80000001a0081044e81f782db4cb904021d08004f1e81f8d8150019001105142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aebfb0daa7b0cd39e4edbb57a5025ccca9e020000000000000040fad95667e006dcbd63951f215ce3bb9ad809d5e1cace81017f5b5cef443dc3ed0bffece0b42a9ecbee5de6ccd40dd6e4", 0xd8}], 0x1}, 0x0) r10 = inotify_init1(0x0) r11 = inotify_add_watch(r10, &(0x7f0000000200)='.\x00', 0x44000160) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r12 = dup(r10) inotify_rm_watch(r12, r11) ioctl$sock_TIOCINQ(r12, 0x541b, &(0x7f0000000040)) r13 = accept4$vsock_stream(r3, &(0x7f00000001c0)={0x28, 0x0, 0x0, @hyper}, 0x10, 0x800) bind$vsock_stream(r13, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) r14 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r14, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) madvise(&(0x7f0000482000/0x3000)=nil, 0x3000, 0x11) 0s ago: executing program 2 (id=2817): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) kernel console output (not intermixed with test programs): ached [ 651.857612][T15346] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 652.091902][ T50] usb 50-1: SetAddress Request (34) to port 0 [ 652.094881][ T50] usb 50-1: new SuperSpeed USB device number 34 using vhci_hcd [ 652.424774][T15351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2376'. [ 652.429166][T15351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2376'. [ 652.433147][T15347] vhci_hcd: connection reset by peer [ 652.435259][ T9449] vhci_hcd vhci_hcd.6: stop threads [ 652.437139][ T9449] vhci_hcd vhci_hcd.6: release socket [ 652.439180][ T9449] vhci_hcd vhci_hcd.6: disconnect device [ 652.683921][ T5615] usb 9-1: USB disconnect, device number 55 [ 652.771260][T15353] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2377'. [ 652.934584][T15357] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2378'. [ 653.008230][ T6677] usb 7-1: USB disconnect, device number 56 [ 653.070731][ T844] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 653.261042][ T844] usb 6-1: Using ep0 maxpacket: 8 [ 653.266790][ T844] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 653.270468][ T844] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 653.277553][ T844] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 653.282012][ T844] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 653.286147][ T844] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 653.289150][ T844] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.790774][T15388] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2386'. [ 654.799087][T15388] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2386'. [ 655.621013][ T5845] usb 9-1: new high-speed USB device number 56 using dummy_hcd [ 655.771564][ T5845] usb 9-1: Using ep0 maxpacket: 8 [ 655.775051][ T5845] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 655.779674][ T5845] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 655.783254][ T5615] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 655.786145][ T5845] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 655.790219][ T5845] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 655.795762][ T5845] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 655.799533][ T5845] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.865782][ T844] usb 6-1: usb_control_msg returned -71 [ 655.867613][ T844] usbtmc 6-1:16.0: can't read capabilities [ 655.872465][ T844] usb 6-1: USB disconnect, device number 52 [ 655.910918][ T6677] usb 11-1: new high-speed USB device number 33 using dummy_hcd [ 655.940820][ T5615] usb 7-1: Using ep0 maxpacket: 8 [ 655.945664][ T5615] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 655.950570][ T5615] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 655.954282][ T5615] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 655.958233][ T5615] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 655.962336][ T5615] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 655.965167][ T5615] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.008349][ T5845] usb 9-1: GET_CAPABILITIES returned 0 [ 656.010184][ T5845] usbtmc 9-1:16.0: can't read capabilities [ 656.180676][ T6677] usb 11-1: Using ep0 maxpacket: 8 [ 656.184699][ T6677] usb 11-1: config index 0 descriptor too short (expected 74, got 45) [ 656.186846][ T5615] usb 7-1: GET_CAPABILITIES returned 0 [ 656.187457][ T6677] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 656.188997][ T5615] usbtmc 7-1:16.0: can't read capabilities [ 656.192639][ T6677] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 656.192658][ T6677] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 656.201198][ T6677] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 656.209609][ T6677] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 656.213628][ T6677] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 656.216385][ T6677] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.237533][T15401] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 656.239643][T15401] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 656.242779][T15401] vhci_hcd vhci_hcd.0: Device attached [ 656.251479][T15401] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 656.425668][ T6677] usb 11-1: GET_CAPABILITIES returned 0 [ 656.429376][ T6677] usbtmc 11-1:16.0: can't read capabilities [ 656.530747][ T5854] usb 40-1: SetAddress Request (46) to port 0 [ 656.534746][ T5854] usb 40-1: new SuperSpeed USB device number 46 using vhci_hcd [ 656.628050][ C2] usbtmc 9-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 656.632030][T15397] usbtmc 9-1:16.0: Unable to send data, error -71 [ 656.687402][ T6677] usb 11-1: USB disconnect, device number 33 [ 656.812739][T15402] vhci_hcd: connection reset by peer [ 656.815611][ T5846] vhci_hcd vhci_hcd.1: stop threads [ 656.817553][ T5846] vhci_hcd vhci_hcd.1: release socket [ 656.819727][ T5846] vhci_hcd vhci_hcd.1: disconnect device [ 657.120742][ T50] usb 50-1: device descriptor read/8, error -110 [ 657.557348][ T50] usb usb50-port1: attempt power cycle [ 658.020384][T15418] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2394'. [ 658.030146][T15418] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2394'. [ 658.155726][ T50] usb usb50-port1: unable to enumerate USB device [ 658.396548][ T5845] usb 9-1: USB disconnect, device number 56 [ 658.562550][ T5860] usb 7-1: USB disconnect, device number 57 [ 658.868228][T15431] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2396'. [ 658.869616][T15431] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2396'. [ 659.318090][T15433] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2398'. [ 659.318710][T15433] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2398'. [ 659.522223][T12447] Bluetooth: hci4: connection err: -111 [ 659.527863][T15429] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 659.554476][T15429] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 659.894264][T15441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2400'. [ 659.897742][T15441] siw: device registration error -23 [ 660.125083][T12447] Bluetooth: hci1: connection err: -111 [ 660.173031][T15455] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 660.175694][T15455] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 660.188007][T15455] vhci_hcd vhci_hcd.0: Device attached [ 660.255594][T15461] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 660.795924][T15456] vhci_hcd: connection closed [ 660.796335][ T13] vhci_hcd vhci_hcd.1: stop threads [ 660.802576][ T13] vhci_hcd vhci_hcd.1: release socket [ 660.805127][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 661.606200][ T5854] usb 40-1: device descriptor read/8, error -110 [ 662.002663][ T5854] usb usb40-port1: attempt power cycle [ 662.561449][ T5854] usb usb40-port1: unable to enumerate USB device [ 663.590280][T15480] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2406'. [ 663.600394][T15480] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2406'. [ 663.713617][T15481] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2407'. [ 663.726888][T15481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2407'. [ 664.217016][T15493] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2410'. [ 664.490376][T15490] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 664.631665][T15490] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 665.290139][T15508] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 665.292737][T15508] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 665.297176][T15508] vhci_hcd vhci_hcd.0: Device attached [ 665.319216][T15508] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 665.560775][ T50] usb 42-1: SetAddress Request (42) to port 0 [ 665.566738][ T50] usb 42-1: new SuperSpeed USB device number 42 using vhci_hcd [ 665.573776][T15514] lo speed is unknown, defaulting to 1000 [ 665.945558][T15509] vhci_hcd: connection reset by peer [ 665.947972][ T5824] vhci_hcd vhci_hcd.2: stop threads [ 665.949931][ T5824] vhci_hcd vhci_hcd.2: release socket [ 665.952410][ T5824] vhci_hcd vhci_hcd.2: disconnect device [ 666.055434][T15519] tipc: Failed to remove unknown binding: 66,0,0/0:3345932412/3345932413 [ 666.062027][T15519] tipc: Failed to remove unknown binding: 66,0,0/0:3345932412/3345932413 [ 666.120755][ T5860] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 666.270783][ T5860] usb 6-1: Using ep0 maxpacket: 8 [ 666.277851][ T5860] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 666.286616][ T5860] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 666.294470][ T5860] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 666.300915][ T5860] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 666.309755][ T5860] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 666.317093][ T5860] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.543355][ T5860] usb 6-1: GET_CAPABILITIES returned 0 [ 666.545364][ T5860] usbtmc 6-1:16.0: can't read capabilities [ 666.610556][T15531] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2421'. [ 666.622933][T15531] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2421'. [ 667.159453][T15542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2424'. [ 667.163163][T15542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2424'. [ 667.653024][T15552] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2427'. [ 667.709540][T15553] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 667.979498][T15556] input: syz0 as /devices/virtual/input/input31 [ 668.453641][T15564] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 668.463972][T15564] CIFS mount error: No usable UNC path provided in device string! [ 668.463972][T15564] [ 668.468327][T15564] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 668.679654][T15568] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2433'. [ 668.685967][T15568] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2433'. [ 668.906640][ T5855] usb 6-1: USB disconnect, device number 53 [ 669.150008][T15579] program syz.1.2435 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 669.510525][T15587] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2437'. [ 670.290759][ T844] usb 11-1: new high-speed USB device number 34 using dummy_hcd [ 670.453889][T15594] netlink: 'syz.6.2440': attribute type 10 has an invalid length. [ 670.471713][ T844] usb 11-1: unable to get BOS descriptor or descriptor too short [ 670.477486][ T844] usb 11-1: unable to read config index 0 descriptor/start: -71 [ 670.480915][ T844] usb 11-1: can't read configurations, error -71 [ 670.640885][ T50] usb 42-1: device descriptor read/8, error -110 [ 671.043320][ T50] usb usb42-port1: attempt power cycle [ 671.484393][T15601] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2442'. [ 671.486928][T15601] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2442'. [ 671.791305][ T50] usb usb42-port1: unable to enumerate USB device [ 671.809544][T15605] FAULT_INJECTION: forcing a failure. [ 671.809544][T15605] name failslab, interval 1, probability 0, space 0, times 0 [ 671.840015][T15605] CPU: 2 UID: 0 PID: 15605 Comm: syz.2.2444 Tainted: G L syzkaller #0 PREEMPT(full) [ 671.840050][T15605] Tainted: [L]=SOFTLOCKUP [ 671.840055][T15605] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 671.840062][T15605] Call Trace: [ 671.840067][T15605] [ 671.840072][T15605] dump_stack_lvl+0x100/0x190 [ 671.840092][T15605] should_fail_ex.cold+0x5/0xa [ 671.840106][T15605] should_failslab+0xc2/0x120 [ 671.840122][T15605] __kmalloc_noprof+0xfc/0x820 [ 671.840137][T15605] ? rds_sendmsg+0x97e/0x34a0 [ 671.840151][T15605] ? find_held_lock+0x2b/0x80 [ 671.840165][T15605] ? rds_message_alloc+0x48/0x220 [ 671.840185][T15605] rds_message_alloc+0x48/0x220 [ 671.840203][T15605] rds_sendmsg+0xdfc/0x34a0 [ 671.840215][T15605] ? __pfx___might_resched+0x10/0x10 [ 671.840238][T15605] ? __pfx_rds_sendmsg+0x10/0x10 [ 671.840251][T15605] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 671.840270][T15605] ? __might_fault+0xc5/0x140 [ 671.840283][T15605] ? __might_fault+0xc5/0x140 [ 671.840298][T15605] ? apparmor_socket_sendmsg+0x15b/0x270 [ 671.840314][T15605] ? __sys_sendto+0x48b/0x4e0 [ 671.840328][T15605] __sys_sendto+0x48b/0x4e0 [ 671.840343][T15605] ? __pfx_rds_sendmsg+0x10/0x10 [ 671.840354][T15605] ? __pfx___sys_sendto+0x10/0x10 [ 671.840379][T15605] ? fput+0x79/0x100 [ 671.840393][T15605] ? ksys_write+0x1ac/0x250 [ 671.840405][T15605] __ia32_sys_sendto+0xdd/0x1b0 [ 671.840420][T15605] ? __do_fast_syscall_32+0x98/0x970 [ 671.840436][T15605] ? lockdep_hardirqs_on+0x78/0x100 [ 671.840451][T15605] __do_fast_syscall_32+0xe7/0x970 [ 671.840466][T15605] ? lockdep_hardirqs_on+0x78/0x100 [ 671.840482][T15605] do_fast_syscall_32+0x32/0x70 [ 671.840497][T15605] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 671.840513][T15605] RIP: 0023:0xf7f67fec [ 671.840526][T15605] Code: Unable to access opcode bytes at 0xf7f67fc2. [ 671.840531][T15605] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000171 [ 671.840543][T15605] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 671.840550][T15605] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000080000040 [ 671.840557][T15605] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 671.840564][T15605] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 671.840583][T15605] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 671.840597][T15605] [ 672.041267][T15612] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2445'. [ 672.045830][T15612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2445'. [ 672.816404][T15610] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2446'. [ 672.821967][T15610] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2446'. [ 673.516542][T15632] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 673.539801][T15632] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 674.541783][T15635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2453'. [ 674.546609][T15635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2453'. [ 675.052465][ T5615] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 675.092149][T15650] netdevsim netdevsim6: Direct firmware load for ./file0 failed with error -2 [ 675.094913][T15650] netdevsim netdevsim6: Falling back to sysfs fallback for: ./file0 [ 675.149753][T12447] Bluetooth: hci1: connection err: -111 [ 675.220892][ T5615] usb 6-1: Using ep0 maxpacket: 8 [ 675.225044][ T5615] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 675.228456][ T5615] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 675.237456][ T5615] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 675.242090][ T5615] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 675.246785][ T5615] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 675.251416][ T5615] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 675.257568][ T5615] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 675.262012][ T5615] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.800756][ T5615] usb 6-1: usb_control_msg returned -71 [ 677.802642][ T5615] usbtmc 6-1:16.0: can't read capabilities [ 677.825033][ T5615] usb 6-1: USB disconnect, device number 54 [ 678.615853][T15709] gadgetfs: bound to dummy_udc driver [ 678.849954][T15719] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2474'. [ 679.131427][T15724] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2475'. [ 679.132329][T15724] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2475'. [ 679.336093][T15728] FAULT_INJECTION: forcing a failure. [ 679.336093][T15728] name failslab, interval 1, probability 0, space 0, times 0 [ 679.356424][T15728] CPU: 0 UID: 0 PID: 15728 Comm: syz.1.2477 Tainted: G L syzkaller #0 PREEMPT(full) [ 679.356457][T15728] Tainted: [L]=SOFTLOCKUP [ 679.356464][T15728] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 679.356475][T15728] Call Trace: [ 679.356482][T15728] [ 679.356490][T15728] dump_stack_lvl+0x100/0x190 [ 679.356520][T15728] should_fail_ex.cold+0x5/0xa [ 679.356543][T15728] should_failslab+0xc2/0x120 [ 679.356570][T15728] __kmalloc_noprof+0xfc/0x820 [ 679.356593][T15728] ? rcu_is_watching+0x12/0xc0 [ 679.356616][T15728] ? tomoyo_realpath_from_path+0xb6/0x690 [ 679.356651][T15728] tomoyo_realpath_from_path+0xb6/0x690 [ 679.356683][T15728] tomoyo_path_number_perm+0x23c/0x580 [ 679.356707][T15728] ? tomoyo_path_number_perm+0x22e/0x580 [ 679.356732][T15728] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 679.356757][T15728] ? get_pid_task+0x106/0x250 [ 679.356803][T15728] ? find_held_lock+0x2b/0x80 [ 679.356826][T15728] ? __fget_files+0x215/0x3d0 [ 679.356844][T15728] ? hook_file_ioctl_common+0x140/0x440 [ 679.356867][T15728] ? __fget_files+0x215/0x3d0 [ 679.356889][T15728] ? __fget_files+0x21f/0x3d0 [ 679.356910][T15728] security_file_ioctl_compat+0xd3/0x230 [ 679.356937][T15728] __ia32_compat_sys_ioctl+0xc2/0x360 [ 679.356968][T15728] __do_fast_syscall_32+0xe7/0x970 [ 679.356995][T15728] ? lockdep_hardirqs_on+0x78/0x100 [ 679.357021][T15728] do_fast_syscall_32+0x32/0x70 [ 679.357046][T15728] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 679.357070][T15728] RIP: 0023:0xf705efec [ 679.357091][T15728] Code: Unable to access opcode bytes at 0xf705efc2. [ 679.357100][T15728] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 679.357124][T15728] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000008030ae7c [ 679.357136][T15728] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 679.357146][T15728] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 679.357157][T15728] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 679.357167][T15728] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 679.357191][T15728] [ 679.357198][T15728] ERROR: Out of memory at tomoyo_realpath_from_path. [ 679.455482][T15733] FAULT_INJECTION: forcing a failure. [ 679.455482][T15733] name failslab, interval 1, probability 0, space 0, times 0 [ 679.465482][T15733] CPU: 0 UID: 0 PID: 15733 Comm: syz.6.2479 Tainted: G L syzkaller #0 PREEMPT(full) [ 679.465513][T15733] Tainted: [L]=SOFTLOCKUP [ 679.465519][T15733] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 679.465529][T15733] Call Trace: [ 679.465535][T15733] [ 679.465542][T15733] dump_stack_lvl+0x100/0x190 [ 679.465572][T15733] should_fail_ex.cold+0x5/0xa [ 679.465592][T15733] should_failslab+0xc2/0x120 [ 679.465616][T15733] __kmalloc_noprof+0xfc/0x820 [ 679.465638][T15733] ? tomoyo_encode2+0xfb/0x3c0 [ 679.465668][T15733] tomoyo_encode2+0xfb/0x3c0 [ 679.465695][T15733] tomoyo_encode+0x29/0x50 [ 679.465717][T15733] tomoyo_realpath_from_path+0x18c/0x690 [ 679.465747][T15733] tomoyo_path_number_perm+0x23c/0x580 [ 679.465769][T15733] ? tomoyo_path_number_perm+0x22e/0x580 [ 679.465791][T15733] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 679.465840][T15733] ? get_pid_task+0x106/0x250 [ 679.465883][T15733] ? find_held_lock+0x2b/0x80 [ 679.465904][T15733] ? __fget_files+0x215/0x3d0 [ 679.465920][T15733] ? hook_file_ioctl_common+0x140/0x440 [ 679.465941][T15733] ? __fget_files+0x215/0x3d0 [ 679.465959][T15733] ? __fget_files+0x21f/0x3d0 [ 679.465979][T15733] security_file_ioctl_compat+0xd3/0x230 [ 679.466001][T15733] __ia32_compat_sys_ioctl+0xc2/0x360 [ 679.466029][T15733] __do_fast_syscall_32+0xe7/0x970 [ 679.466051][T15733] ? lockdep_hardirqs_on+0x78/0x100 [ 679.466074][T15733] do_fast_syscall_32+0x32/0x70 [ 679.466096][T15733] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 679.466124][T15733] RIP: 0023:0xf705efec [ 679.466144][T15733] Code: Unable to access opcode bytes at 0xf705efc2. [ 679.466151][T15733] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 679.466169][T15733] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0845657 [ 679.466179][T15733] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 679.466188][T15733] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 679.466197][T15733] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 679.466206][T15733] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 679.466227][T15733] [ 679.466244][T15733] ERROR: Out of memory at tomoyo_realpath_from_path. [ 679.664464][T15738] gadgetfs: bound to dummy_udc driver [ 679.926499][T15747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2484'. [ 679.941852][T15747] siw: device registration error -23 [ 681.010220][T15759] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2487'. [ 681.265240][T15760] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2486'. [ 681.381192][T15765] usb usb9: usbfs: process 15765 (syz.1.2489) did not claim interface 20 before use [ 681.418501][T15768] gadgetfs: bound to dummy_udc driver [ 681.502115][T15771] FAULT_INJECTION: forcing a failure. [ 681.502115][T15771] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 681.506394][T15771] CPU: 2 UID: 0 PID: 15771 Comm: syz.4.2491 Tainted: G L syzkaller #0 PREEMPT(full) [ 681.506414][T15771] Tainted: [L]=SOFTLOCKUP [ 681.506419][T15771] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 681.506425][T15771] Call Trace: [ 681.506430][T15771] [ 681.506435][T15771] dump_stack_lvl+0x100/0x190 [ 681.506455][T15771] should_fail_ex.cold+0x5/0xa [ 681.506469][T15771] _copy_from_user+0x2e/0xd0 [ 681.506489][T15771] move_addr_to_kernel+0x65/0x170 [ 681.506503][T15771] get_compat_msghdr+0x3c7/0x480 [ 681.506524][T15771] ? __pfx_get_compat_msghdr+0x10/0x10 [ 681.506544][T15771] ? _kstrtoull+0x13c/0x1f0 [ 681.506557][T15771] ? __pfx__kstrtoull+0x10/0x10 [ 681.506570][T15771] ___sys_sendmsg+0x1b6/0x1e0 [ 681.506584][T15771] ? __pfx____sys_sendmsg+0x10/0x10 [ 681.506596][T15771] ? __lock_acquire+0x49f/0x1a40 [ 681.506630][T15771] __sys_sendmmsg+0x309/0x440 [ 681.506648][T15771] ? __pfx___sys_sendmmsg+0x10/0x10 [ 681.506664][T15771] ? find_held_lock+0x2b/0x80 [ 681.506681][T15771] ? __mutex_unlock_slowpath+0x35d/0x930 [ 681.506714][T15771] ? fput+0x79/0x100 [ 681.506735][T15771] ? ksys_write+0x1ac/0x250 [ 681.506756][T15771] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 681.506774][T15771] ? lockdep_hardirqs_on+0x78/0x100 [ 681.506796][T15771] __do_fast_syscall_32+0xe7/0x970 [ 681.506811][T15771] ? lockdep_hardirqs_on+0x78/0x100 [ 681.506827][T15771] do_fast_syscall_32+0x32/0x70 [ 681.506843][T15771] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 681.506859][T15771] RIP: 0023:0xf702efec [ 681.506873][T15771] Code: Unable to access opcode bytes at 0xf702efc2. [ 681.506878][T15771] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 681.506890][T15771] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800057c0 [ 681.506897][T15771] RDX: 0000000000000001 RSI: 00000000000c4894 RDI: 0000000000000000 [ 681.506904][T15771] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 681.506911][T15771] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 681.506917][T15771] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 681.506931][T15771] [ 681.747831][T15788] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2498'. [ 681.795199][T15788] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2498'. [ 681.799514][T15790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2497'. [ 682.551386][T15784] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 682.582330][T15784] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 682.677744][T15802] FAULT_INJECTION: forcing a failure. [ 682.677744][T15802] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 682.686268][T15806] gadgetfs: bound to dummy_udc driver [ 682.688094][T15802] CPU: 3 UID: 0 PID: 15802 Comm: syz.2.2501 Tainted: G L syzkaller #0 PREEMPT(full) [ 682.688113][T15802] Tainted: [L]=SOFTLOCKUP [ 682.688118][T15802] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 682.688125][T15802] Call Trace: [ 682.688129][T15802] [ 682.688134][T15802] dump_stack_lvl+0x100/0x190 [ 682.688154][T15802] should_fail_ex.cold+0x5/0xa [ 682.688168][T15802] _copy_from_user+0x2e/0xd0 [ 682.688188][T15802] move_addr_to_kernel+0x65/0x170 [ 682.688203][T15802] get_compat_msghdr+0x3c7/0x480 [ 682.688223][T15802] ? __pfx_get_compat_msghdr+0x10/0x10 [ 682.688246][T15802] ___sys_sendmsg+0x1b6/0x1e0 [ 682.688260][T15802] ? __pfx____sys_sendmsg+0x10/0x10 [ 682.688279][T15802] ? find_held_lock+0x2b/0x80 [ 682.688302][T15802] __sys_sendmsg+0x160/0x210 [ 682.688319][T15802] ? __pfx___sys_sendmsg+0x10/0x10 [ 682.688339][T15802] ? __pfx_ksys_write+0x10/0x10 [ 682.688354][T15802] __do_fast_syscall_32+0xe7/0x970 [ 682.688371][T15802] ? lockdep_hardirqs_on+0x78/0x100 [ 682.688386][T15802] do_fast_syscall_32+0x32/0x70 [ 682.688402][T15802] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 682.688418][T15802] RIP: 0023:0xf7f67fec [ 682.688432][T15802] Code: Unable to access opcode bytes at 0xf7f67fc2. [ 682.688437][T15802] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 682.688449][T15802] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000800001c0 [ 682.688456][T15802] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 682.688463][T15802] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 682.688469][T15802] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 682.688476][T15802] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 682.688489][T15802] [ 682.939717][T15817] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2506'. [ 683.000091][T15817] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2506'. [ 683.152946][T15826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2503'. [ 683.153482][T15826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2503'. [ 683.512216][ T5755] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 683.526149][ T5755] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 683.530187][ T5755] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 683.534147][ T5755] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 683.537650][ T5755] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 683.899265][T15840] gadgetfs: bound to dummy_udc driver [ 684.025280][T15845] Cannot find add_set index 0 as target [ 684.380427][T15831] lo speed is unknown, defaulting to 1000 [ 684.564455][T15849] syzkaller0: entered promiscuous mode [ 684.566902][T15849] syzkaller0: entered allmulticast mode [ 684.577293][ T9449] syzkaller0: tun_net_xmit 48 [ 685.452386][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.561920][T15859] __nla_validate_parse: 1 callbacks suppressed [ 685.561944][T15859] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2516'. [ 685.607430][T12447] Bluetooth: hci3: command tx timeout [ 685.615888][T15860] siw: device registration error -23 [ 687.066860][T15864] netdevsim netdevsim6: Direct firmware load for ./file0 failed with error -2 [ 687.069873][T15864] netdevsim netdevsim6: Falling back to sysfs fallback for: ./file0 [ 687.123654][T12447] Bluetooth: hci1: connection err: -111 [ 687.353952][T15831] bridge0: port 1(bridge_slave_0) entered blocking state [ 687.358577][T15831] bridge0: port 1(bridge_slave_0) entered disabled state [ 687.365067][T15831] bridge_slave_0: entered allmulticast mode [ 687.371514][T15831] bridge_slave_0: entered promiscuous mode [ 687.378075][T15831] bridge0: port 2(bridge_slave_1) entered blocking state [ 687.383074][T15831] bridge0: port 2(bridge_slave_1) entered disabled state [ 687.386726][T15831] bridge_slave_1: entered allmulticast mode [ 687.391585][T15831] bridge_slave_1: entered promiscuous mode [ 687.411685][T15831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 687.417213][T15831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 687.452285][T15872] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 687.463493][T15872] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 687.495517][T15831] team0: Port device team_slave_0 added [ 687.498805][T15831] team0: Port device team_slave_1 added [ 687.524562][T15831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 687.526788][T15831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 687.534755][T15831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 687.540711][T15831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 687.542846][T15831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 687.551189][T15831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 687.597343][T15831] hsr_slave_0: entered promiscuous mode [ 687.607168][T15831] hsr_slave_1: entered promiscuous mode [ 687.612684][T15831] debugfs: 'hsr0' already exists in 'hsr' [ 687.618971][T15831] Cannot create hsr debugfs directory [ 687.682109][T12447] Bluetooth: hci3: command tx timeout [ 687.950408][T15831] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.057263][T15831] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.061878][T15878] gadgetfs: bound to dummy_udc driver [ 688.145403][T15831] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.218890][T15831] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.396514][T15831] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 688.413912][T15831] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 688.421564][T15831] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 688.430156][T15831] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 688.441878][T15831] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 688.447741][T15831] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 688.450322][T15831] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 688.454703][T15831] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 688.510044][T15831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 688.521855][T15831] 8021q: adding VLAN 0 to HW filter on device team0 [ 688.527868][T11691] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.530282][T11691] bridge0: port 1(bridge_slave_0) entered forwarding state [ 688.538154][T11691] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.540454][T11691] bridge0: port 2(bridge_slave_1) entered forwarding state [ 688.766185][T15902] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2525'. [ 689.006187][T15831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 689.225288][T15831] veth0_vlan: entered promiscuous mode [ 689.260729][T15831] veth1_vlan: entered promiscuous mode [ 689.385856][T15831] veth0_macvtap: entered promiscuous mode [ 689.416547][T15831] veth1_macvtap: entered promiscuous mode [ 689.524862][T15831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 689.541620][T15831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 689.591234][T15637] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.621908][ T5824] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.663491][T15913] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 689.676024][T15913] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 689.692125][T11688] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 689.695388][T11688] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 689.700782][ T5860] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 689.700886][ T9449] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.706078][ T9449] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.719359][T11691] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 689.722934][T11691] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 689.730946][T12447] Bluetooth: hci2: connection err: -111 [ 689.760798][T12447] Bluetooth: hci3: command tx timeout [ 689.860675][ T5860] usb 7-1: Using ep0 maxpacket: 8 [ 689.865139][ T5860] usb 7-1: config index 0 descriptor too short (expected 74, got 45) [ 689.868687][ T5860] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 689.874411][ T5860] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 689.878797][ T5860] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 689.883646][ T5860] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 689.888285][ T5860] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 689.893947][ T5860] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 689.897689][ T5860] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.268585][ T5860] usb 7-1: GET_CAPABILITIES returned 0 [ 690.270480][ T5860] usbtmc 7-1:16.0: can't read capabilities [ 690.829464][T12447] Bluetooth: hci3: connection err: -111 [ 691.846475][T12447] Bluetooth: hci3: command tx timeout [ 692.507138][ T6677] usb 7-1: USB disconnect, device number 58 [ 693.422241][ T10] usb 11-1: new high-speed USB device number 36 using dummy_hcd [ 693.446949][T15949] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2534'. [ 693.459749][T15949] siw: device registration error -23 [ 693.900621][ T10] usb 11-1: device descriptor read/64, error -71 [ 693.999894][ T5755] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 694.015085][ T5755] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 694.020364][ T5755] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 694.023998][ T5755] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 694.027283][ T5755] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 694.140648][ T10] usb 11-1: new high-speed USB device number 37 using dummy_hcd [ 694.291107][ T10] usb 11-1: device descriptor read/64, error -71 [ 694.309565][T15952] lo speed is unknown, defaulting to 1000 [ 694.412476][ T10] usb usb11-port1: attempt power cycle [ 694.473539][T15966] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 694.489609][T15966] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 694.495247][T15966] pci 0000:00:01.0: BAR 2 [mem 0x81200000-0x81200fff] [ 694.498940][T15966] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 694.557361][T15973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2538'. [ 694.618856][T15974] siw: device registration error -23 [ 694.760866][ T10] usb 11-1: new high-speed USB device number 38 using dummy_hcd [ 694.781501][ T10] usb 11-1: device descriptor read/8, error -71 [ 694.848750][T15966] pci 0000:00:01.0: Adding to iommu group 1 [ 694.995667][T15966] pci 0000:00:01.0: vgaarb: bridge control possible [ 694.997715][T15966] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=none,locks=none [ 695.012151][T15966] pci 0000:00:04.0: [8086:3420] type 01 class 0x060400 PCIe Root Port [ 695.018220][T15966] pci 0000:00:04.0: PCI bridge to [bus 01] [ 695.020504][T15966] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 695.023769][T15966] pci 0000:00:04.0: bridge window [mem 0x81000000-0x811fffff] [ 695.028681][T15966] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 695.033779][T15966] pci 0000:00:04.0: enabling Extended Tags [ 695.041431][ T10] usb 11-1: new high-speed USB device number 39 using dummy_hcd [ 695.053620][T15966] pci 0000:00:04.0: Adding to iommu group 4 [ 695.062154][ T10] usb 11-1: device descriptor read/8, error -71 [ 695.073559][T15966] pci 0000:00:04.0: PCI bridge to [bus 01] [ 695.079191][T15966] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 01] add_size 200000 add_align 100000 [ 695.084843][T15966] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff] to [bus 01] add_size 200000 add_align 100000 [ 695.093062][T15966] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 695.096826][T15966] pci 0000:00:04.0: bridge window [mem 0x81000000-0x811fffff]: assigned [ 695.100422][T15966] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref]: assigned [ 695.105018][T15966] pci 0000:00:01.0: ROM [mem 0x81200000-0x8120ffff pref]: assigned [ 695.108503][T15966] pci 0000:00:01.0: BAR 2 [mem 0x81210000-0x81210fff]: assigned [ 695.116941][T15966] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff]: assigned [ 695.125033][T15966] pci 0000:00:04.0: PCI bridge to [bus 01] [ 695.130131][T15966] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 695.139873][T15966] pci 0000:00:04.0: bridge window [mem 0x81000000-0x811fffff] [ 695.149582][T15966] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 695.164143][T15966] bochs-drm 0000:00:01.0: enabling device (0100 -> 0102) [ 695.171562][ T10] usb usb11-port1: unable to enumerate USB device [ 695.185688][T15966] [drm] Found bochs VGA, ID 0xb0c5. [ 695.188105][T15966] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81210000. [ 695.192978][T15966] bochs-drm 0000:00:01.0: probe with driver bochs-drm failed with error -4 [ 695.217122][T15966] pcieport 0000:00:04.0: enabling device (0000 -> 0003) [ 695.294925][T15966] pcieport 0000:00:04.0: PME: Signaling with IRQ 25 [ 695.314065][T15966] aer 0000:00:04.0:pcie002: error -EINTR: request_irq(26) aer_irq aer_isr aerdrv [ 695.326372][T15966] pcieport 0000:00:04.0: AER: request AER IRQ 26 failed [ 695.330962][T15952] bridge0: port 1(bridge_slave_0) entered blocking state [ 695.334368][T15966] aer 0000:00:04.0:pcie002: probe with driver aer failed with error -4 [ 695.337936][T15952] bridge0: port 1(bridge_slave_0) entered disabled state [ 695.343671][T15952] bridge_slave_0: entered allmulticast mode [ 695.356250][T15952] bridge_slave_0: entered promiscuous mode [ 695.367093][T15952] bridge0: port 2(bridge_slave_1) entered blocking state [ 695.375512][T15952] bridge0: port 2(bridge_slave_1) entered disabled state [ 695.382431][T15952] bridge_slave_1: entered allmulticast mode [ 695.392043][T15952] bridge_slave_1: entered promiscuous mode [ 695.421481][T15952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 695.429512][T15952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 695.470182][T15952] team0: Port device team_slave_0 added [ 695.489363][T15952] team0: Port device team_slave_1 added [ 695.498730][T15984] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 695.507955][T15984] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 695.529766][T15952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 695.532814][T15952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 695.544486][T15952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 695.550477][T15952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 695.553655][T15952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 695.566336][T15952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 695.572138][ T5755] Bluetooth: hci4: connection err: -111 [ 695.609035][T15985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2539'. [ 695.705261][T15952] hsr_slave_0: entered promiscuous mode [ 695.714951][T15952] hsr_slave_1: entered promiscuous mode [ 695.723757][T15952] debugfs: 'hsr0' already exists in 'hsr' [ 695.731376][T15952] Cannot create hsr debugfs directory [ 695.970985][T15952] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.030718][ T50] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 696.090404][ T5755] Bluetooth: hci0: command tx timeout [ 696.097385][T15952] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.187381][ T50] usb 6-1: Using ep0 maxpacket: 16 [ 696.192404][ T50] usb 6-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 696.195422][ T50] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.198099][ T50] usb 6-1: Product: syz [ 696.199788][ T50] usb 6-1: Manufacturer: syz [ 696.201446][ T50] usb 6-1: SerialNumber: syz [ 696.204455][T15952] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.316286][T15952] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.417086][ T50] usb 6-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 696.430128][ T50] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 696.434643][ T50] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 696.437535][ T50] usb 6-1: media controller created [ 696.627114][T15988] netlink: 'syz.1.2541': attribute type 1 has an invalid length. [ 696.651069][ T50] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 696.895916][ T50] zl10353_read_register: readreg error (reg=127, ret==-110) [ 698.161257][ T5755] Bluetooth: hci0: command tx timeout [ 699.003067][T16005] netlink: 'syz.2.2545': attribute type 1 has an invalid length. [ 699.006404][T16005] FAULT_INJECTION: forcing a failure. [ 699.006404][T16005] name failslab, interval 1, probability 0, space 0, times 0 [ 699.011534][T16005] CPU: 0 UID: 0 PID: 16005 Comm: syz.2.2545 Tainted: G L syzkaller #0 PREEMPT(full) [ 699.011563][T16005] Tainted: [L]=SOFTLOCKUP [ 699.011569][T16005] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 699.011580][T16005] Call Trace: [ 699.011586][T16005] [ 699.011593][T16005] dump_stack_lvl+0x100/0x190 [ 699.011668][T16005] should_fail_ex.cold+0x5/0xa [ 699.011706][T16005] should_failslab+0xc2/0x120 [ 699.011761][T16005] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 699.011792][T16005] ? __alloc_skb+0x5b7/0x710 [ 699.011866][T16005] ? __alloc_skb+0x140/0x710 [ 699.011892][T16005] __alloc_skb+0x140/0x710 [ 699.011911][T16005] ? __alloc_skb+0x5b7/0x710 [ 699.011934][T16005] ? __pfx___alloc_skb+0x10/0x10 [ 699.011962][T16005] netlink_alloc_large_skb+0x69/0x150 [ 699.011985][T16005] netlink_sendmsg+0x680/0xda0 [ 699.012008][T16005] ? __pfx_netlink_sendmsg+0x10/0x10 [ 699.012030][T16005] ? apparmor_socket_sendmsg+0x15b/0x270 [ 699.012066][T16005] ____sys_sendmsg+0xa4d/0xbe0 [ 699.012083][T16005] ? __pfx_netlink_sendmsg+0x10/0x10 [ 699.012105][T16005] ? __pfx_____sys_sendmsg+0x10/0x10 [ 699.012134][T16005] ___sys_sendmsg+0x190/0x1e0 [ 699.012156][T16005] ? __pfx____sys_sendmsg+0x10/0x10 [ 699.012188][T16005] ? find_held_lock+0x2b/0x80 [ 699.012252][T16005] __sys_sendmsg+0x160/0x210 [ 699.012277][T16005] ? __pfx___sys_sendmsg+0x10/0x10 [ 699.012307][T16005] ? __pfx_ksys_write+0x10/0x10 [ 699.012341][T16005] __do_fast_syscall_32+0xe7/0x970 [ 699.012386][T16005] ? lockdep_hardirqs_on+0x78/0x100 [ 699.012412][T16005] do_fast_syscall_32+0x32/0x70 [ 699.012438][T16005] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 699.012462][T16005] RIP: 0023:0xf7f67fec [ 699.012484][T16005] Code: Unable to access opcode bytes at 0xf7f67fc2. [ 699.012502][T16005] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 699.012529][T16005] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000000 [ 699.012540][T16005] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 699.012551][T16005] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 699.012561][T16005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 699.012570][T16005] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 699.012594][T16005] [ 699.024025][T15952] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 699.144589][T15952] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 699.162093][T15952] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 699.168052][T15952] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 699.191772][T15952] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 699.217009][T15952] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 699.233593][T15952] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 699.249115][T15952] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 699.285011][ T50] dvb_usb_gl861 6-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 699.290792][ T50] usb 6-1: USB disconnect, device number 55 [ 699.372107][T15952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 699.384314][T15952] 8021q: adding VLAN 0 to HW filter on device team0 [ 699.390039][T11677] bridge0: port 1(bridge_slave_0) entered blocking state [ 699.392379][T11677] bridge0: port 1(bridge_slave_0) entered forwarding state [ 699.398857][T11677] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.401190][T11677] bridge0: port 2(bridge_slave_1) entered forwarding state [ 699.427008][T15952] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 699.432806][T15952] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 700.234260][T16035] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2548'. [ 700.241577][ T5755] Bluetooth: hci0: command tx timeout [ 700.290138][T15952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 700.367898][T16042] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2551'. [ 700.380357][T16042] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2551'. [ 700.384569][T16042] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2551'. [ 700.480780][ T50] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 700.488765][T15952] veth0_vlan: entered promiscuous mode [ 700.498519][T15952] veth1_vlan: entered promiscuous mode [ 700.515940][T15952] veth0_macvtap: entered promiscuous mode [ 700.531554][T15952] veth1_macvtap: entered promiscuous mode [ 700.546771][T15952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 700.558876][T15952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 700.621341][ T5824] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.629038][ T5824] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.630707][ T50] usb 7-1: Using ep0 maxpacket: 8 [ 700.637089][ T5824] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.645544][T16034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 700.652495][ T5824] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.665032][ T50] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 700.708738][ T50] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 700.728954][ T50] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 700.740205][ T50] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 700.758572][ T50] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 700.772049][ T50] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.774816][T16034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 700.779377][T11688] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 700.789873][T11688] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 700.837983][T11673] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 700.840610][T11673] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 700.953545][T16054] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2553'. [ 700.974527][T16057] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2535'. [ 700.974794][T16057] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2535'. [ 700.993433][ T50] usb 7-1: GET_CAPABILITIES returned 0 [ 700.994962][T16057] macsec1: entered promiscuous mode [ 700.995236][ T50] usbtmc 7-1:16.0: can't read capabilities [ 700.996923][T16057] dummy0: entered promiscuous mode [ 701.001040][T16057] macsec1: entered allmulticast mode [ 701.002927][T16057] dummy0: entered allmulticast mode [ 701.547193][T16067] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2556'. [ 701.554873][T16067] siw: device registration error -23 [ 701.685576][T16069] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2557'. [ 702.230640][T16072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2558'. [ 702.282881][T16073] siw: device registration error -23 [ 702.324144][ T5755] Bluetooth: hci0: command tx timeout [ 702.825156][T16080] siw: device registration error -23 [ 702.858510][T16076] bridge0: port 3(wlan1) entered blocking state [ 702.862495][T16076] bridge0: port 3(wlan1) entered disabled state [ 702.878221][T16076] mac80211_hwsim hwsim17 wlan1: entered allmulticast mode [ 702.900247][T16076] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 702.940706][T16076] netlink: 'syz.6.2560': attribute type 1 has an invalid length. [ 703.442836][ T5855] usb 7-1: USB disconnect, device number 59 [ 705.171221][ T50] usb 6-1: new full-speed USB device number 56 using dummy_hcd [ 705.341533][ T50] usb 6-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 705.346936][ T50] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 4 [ 705.351944][ T50] usb 6-1: config 0 interface 0 has no altsetting 0 [ 705.388647][ T50] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 705.392568][ T50] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 705.396026][ T50] usb 6-1: Product: syz [ 705.397906][ T50] usb 6-1: Manufacturer: syz [ 705.399941][ T50] usb 6-1: SerialNumber: syz [ 705.424066][ T50] usb 6-1: config 0 descriptor?? [ 705.464204][ T50] usb 6-1: selecting invalid altsetting 0 [ 705.644479][T16103] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 705.649065][T16103] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 705.653516][T16103] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 705.657225][T16103] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 705.661277][T16103] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 705.665149][T16103] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 705.668761][T16103] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 705.672734][T16103] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 705.676561][T16103] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 705.680183][T16103] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 705.692778][T16103] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 705.696568][T16103] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 705.700300][T16103] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 705.706740][T16103] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 705.833637][ T50] usb 6-1: USB disconnect, device number 56 [ 706.640726][ T50] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 706.793996][ T50] usb 6-1: Using ep0 maxpacket: 8 [ 706.798556][ T50] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 706.810688][ T50] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 706.819356][ T50] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 706.826222][ T50] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 706.836593][ T50] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 706.843044][ T50] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.862396][T16125] syzkaller0: entered promiscuous mode [ 706.864686][T16125] syzkaller0: entered allmulticast mode [ 706.876817][T16125] random: crng reseeded on system resumption [ 706.985030][T16126] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 707.009703][T16126] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 707.012267][T16126] pci 0000:00:01.0: BAR 2 [mem 0x81210000-0x81210fff] [ 707.014694][T16126] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 707.017771][T16126] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 707.036088][T16126] pci 0000:00:01.0: Adding to iommu group 1 [ 707.058578][ T50] usb 6-1: GET_CAPABILITIES returned 0 [ 707.060640][ T50] usbtmc 6-1:16.0: can't read capabilities [ 707.065944][T16126] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 707.068138][T16126] pci 0000:00:01.0: vgaarb: bridge control possible [ 707.070246][T16126] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=mem,locks=none [ 707.102822][T16126] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 707.105497][T16126] pci 0000:00:01.0: BAR 2 [mem 0x81200000-0x81200fff]: assigned [ 707.110053][T16126] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 707.138960][T16126] [drm] Found bochs VGA, ID 0xb0c5. [ 707.140718][T16126] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81200000. [ 707.156763][T16126] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 707.216877][T16126] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 707.435926][T16135] __nla_validate_parse: 5 callbacks suppressed [ 707.436207][T16135] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2576'. [ 707.467021][T16135] siw: device registration error -23 [ 707.746833][T16138] netlink: 'syz.2.2577': attribute type 1 has an invalid length. [ 707.824140][T16138] 8021q: adding VLAN 0 to HW filter on device bond1 [ 708.258367][T16145] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2579'. [ 708.262619][T16145] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2579'. [ 708.419530][T16147] netdevsim netdevsim6: Direct firmware load for ./file0 failed with error -2 [ 708.426574][T16147] netdevsim netdevsim6: Falling back to sysfs fallback for: ./file0 [ 708.486915][ T5755] Bluetooth: hci1: connection err: -111 [ 708.546003][T16149] fuse: root generation should be zero [ 709.321333][ T5855] usb 6-1: USB disconnect, device number 57 [ 710.731266][T16180] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2588'. [ 712.716673][T16180] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2588'. [ 712.935741][T16187] syzkaller0: entered promiscuous mode [ 712.937716][T16187] syzkaller0: entered allmulticast mode [ 713.050681][ T5855] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 713.201995][ T5855] usb 6-1: Using ep0 maxpacket: 8 [ 713.206316][ T5855] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 713.209438][ T5855] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 713.213525][ T5855] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 713.217590][ T5855] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 713.221735][ T5855] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 713.225277][ T5855] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 713.230321][ T5855] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 713.234418][ T5855] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.390655][ T10] usb 11-1: new high-speed USB device number 40 using dummy_hcd [ 713.534335][ T5855] usb 6-1: GET_CAPABILITIES returned 0 [ 713.536142][ T5855] usbtmc 6-1:16.0: can't read capabilities [ 713.562972][T16192] netlink: 'syz.6.2593': attribute type 10 has an invalid length. [ 714.060718][ T5860] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 714.220722][ T5860] usb 7-1: Using ep0 maxpacket: 8 [ 714.226115][ T5860] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 714.232350][ T5860] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 714.236718][ T5860] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 714.240447][ T5860] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 714.245770][ T5860] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 714.248869][ T5860] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.465726][ T5860] usb 7-1: GET_CAPABILITIES returned 0 [ 714.468457][ T5860] usbtmc 7-1:16.0: can't read capabilities [ 714.787482][ T5855] usb 7-1: USB disconnect, device number 60 [ 715.496492][T16206] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 715.545817][T16206] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 715.837312][ T5845] usb 6-1: USB disconnect, device number 58 [ 715.921358][T16210] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2599'. [ 715.924727][T16210] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2599'. [ 715.934266][T16210] macsec1: entered promiscuous mode [ 715.936016][T16210] dummy0: entered promiscuous mode [ 715.938023][T16210] macsec1: entered allmulticast mode [ 715.939857][T16210] dummy0: entered allmulticast mode [ 716.030668][ T5860] usb 9-1: new high-speed USB device number 57 using dummy_hcd [ 716.178314][ T10] usb 11-1: unable to get BOS descriptor or descriptor too short [ 716.192258][ T10] usb 11-1: unable to read config index 0 descriptor/start: -71 [ 716.199182][T16214] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2600'. [ 716.203120][ T10] usb 11-1: can't read configurations, error -71 [ 716.231231][T16208] dvmrp0: entered allmulticast mode [ 716.247802][T16214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2600'. [ 716.273682][T16208] netlink: 'syz.4.2598': attribute type 10 has an invalid length. [ 717.017656][T16224] FAULT_INJECTION: forcing a failure. [ 717.017656][T16224] name failslab, interval 1, probability 0, space 0, times 0 [ 717.023367][T16224] CPU: 3 UID: 0 PID: 16224 Comm: syz.1.2603 Tainted: G L syzkaller #0 PREEMPT(full) [ 717.023392][T16224] Tainted: [L]=SOFTLOCKUP [ 717.023396][T16224] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 717.023403][T16224] Call Trace: [ 717.023408][T16224] [ 717.023413][T16224] dump_stack_lvl+0x100/0x190 [ 717.023556][T16224] should_fail_ex.cold+0x5/0xa [ 717.023582][T16224] should_failslab+0xc2/0x120 [ 717.023619][T16224] __kmalloc_noprof+0xfc/0x820 [ 717.023640][T16224] ? rcu_is_watching+0x12/0xc0 [ 717.023670][T16224] ? tomoyo_realpath_from_path+0xb6/0x690 [ 717.023732][T16224] tomoyo_realpath_from_path+0xb6/0x690 [ 717.023753][T16224] tomoyo_path_number_perm+0x23c/0x580 [ 717.023780][T16224] ? tomoyo_path_number_perm+0x22e/0x580 [ 717.023795][T16224] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 717.023810][T16224] ? get_pid_task+0x106/0x250 [ 717.023844][T16224] ? find_held_lock+0x2b/0x80 [ 717.023864][T16224] ? __fget_files+0x215/0x3d0 [ 717.023883][T16224] ? hook_file_ioctl_common+0x140/0x440 [ 717.023898][T16224] ? __fget_files+0x215/0x3d0 [ 717.023911][T16224] ? __fget_files+0x21f/0x3d0 [ 717.023923][T16224] security_file_ioctl_compat+0xd3/0x230 [ 717.023940][T16224] __ia32_compat_sys_ioctl+0xc2/0x360 [ 717.023961][T16224] __do_fast_syscall_32+0xe7/0x970 [ 717.024012][T16224] ? lockdep_hardirqs_on+0x78/0x100 [ 717.024028][T16224] do_fast_syscall_32+0x32/0x70 [ 717.024044][T16224] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 717.024060][T16224] RIP: 0023:0xf7f86fec [ 717.024075][T16224] Code: Unable to access opcode bytes at 0xf7f86fc2. [ 717.024087][T16224] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 717.024100][T16224] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005608 [ 717.024107][T16224] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 717.024114][T16224] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 717.024120][T16224] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 717.024127][T16224] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 717.024140][T16224] [ 717.024146][T16224] ERROR: Out of memory at tomoyo_realpath_from_path. [ 718.264615][T16240] syzkaller0: entered promiscuous mode [ 718.266680][T16240] syzkaller0: entered allmulticast mode [ 718.271133][ T5855] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 718.274846][T16240] FAULT_INJECTION: forcing a failure. [ 718.274846][T16240] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 718.278916][T16240] CPU: 3 UID: 0 PID: 16240 Comm: syz.6.2608 Tainted: G L syzkaller #0 PREEMPT(full) [ 718.278936][T16240] Tainted: [L]=SOFTLOCKUP [ 718.278940][T16240] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 718.278947][T16240] Call Trace: [ 718.278952][T16240] [ 718.278957][T16240] dump_stack_lvl+0x100/0x190 [ 718.278976][T16240] should_fail_ex.cold+0x5/0xa [ 718.278991][T16240] _copy_from_user+0x2e/0xd0 [ 718.279022][T16240] move_addr_to_kernel+0x65/0x170 [ 718.279047][T16240] get_compat_msghdr+0x3c7/0x480 [ 718.279066][T16240] ? __pfx_get_compat_msghdr+0x10/0x10 [ 718.279089][T16240] ___sys_sendmsg+0x1b6/0x1e0 [ 718.279103][T16240] ? __pfx____sys_sendmsg+0x10/0x10 [ 718.279122][T16240] ? find_held_lock+0x2b/0x80 [ 718.279146][T16240] __sys_sendmsg+0x160/0x210 [ 718.279163][T16240] ? __pfx___sys_sendmsg+0x10/0x10 [ 718.279183][T16240] ? __pfx_ksys_write+0x10/0x10 [ 718.279198][T16240] __do_fast_syscall_32+0xe7/0x970 [ 718.279215][T16240] ? lockdep_hardirqs_on+0x78/0x100 [ 718.279230][T16240] do_fast_syscall_32+0x32/0x70 [ 718.279247][T16240] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 718.279262][T16240] RIP: 0023:0xf705efec [ 718.279277][T16240] Code: Unable to access opcode bytes at 0xf705efc2. [ 718.279282][T16240] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 718.279294][T16240] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080002900 [ 718.279302][T16240] RDX: 0000000020000885 RSI: 0000000000000000 RDI: 0000000000000000 [ 718.279310][T16240] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 718.279317][T16240] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 718.279323][T16240] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 718.279337][T16240] [ 718.430638][ T5855] usb 7-1: Using ep0 maxpacket: 8 [ 718.434788][ T5855] usb 7-1: config index 0 descriptor too short (expected 74, got 45) [ 718.438846][ T5855] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 718.445202][ T5855] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 718.448501][ T5855] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 718.453351][ T5855] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 718.456705][ T5855] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 718.462197][ T5855] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 718.465195][ T5855] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.524873][T16243] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2609'. [ 718.531508][T16243] siw: device registration error -23 [ 719.252127][T16246] siw: device registration error -23 [ 719.624557][ T5860] usb 9-1: unable to get BOS descriptor or descriptor too short [ 719.699455][ T5860] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 719.702496][ T5860] usb 9-1: can't read configurations, error -71 [ 720.039775][T16255] syzkaller0: entered promiscuous mode [ 720.041800][T16255] syzkaller0: entered allmulticast mode [ 720.052959][T16252] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2612'. qemu-system-x86_64: vtd_iova_to_slpte: detected slpte permission error (iova=0xbe100000, level=0x1, slpte=0x5f6b8002, write=0, pasid=0xffffffff) qemu-system-x86_64: vtd_iommu_translate: detected translation failure (dev=00:1f:02, iova=0xbe100000) qemu-system-x86_64: New fault is not recorded due to compression of faults [ 720.066634][ C2] DMAR: DRHD: handling fault status reg 2 [ 720.078622][ C2] DMAR: [DMA Read NO_PASID] Request device [0000:00:1f.2] fault addr 0xbe100000 [fault reason 0x06] PTE Read access is not set [ 720.153524][T16258] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2611'. [ 720.160064][T16258] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2611'. [ 720.257191][T16260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2614'. [ 720.260908][T16260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2614'. [ 720.466841][T16265] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2616'. [ 720.473540][T16265] siw: device registration error -23 [ 721.211111][T16269] netdevsim netdevsim6: Direct firmware load for ./file0 failed with error -2 [ 721.218340][T16269] netdevsim netdevsim6: Falling back to sysfs fallback for: ./file0 [ 721.291068][ T5755] Bluetooth: hci1: connection err: -111 [ 721.308758][ T5855] usb 7-1: usb_control_msg returned -71 [ 721.310695][ T5855] usbtmc 7-1:16.0: can't read capabilities [ 721.320236][ T5855] usb 7-1: USB disconnect, device number 61 [ 721.386605][T16276] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2621'. [ 721.457361][T16278] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2620'. [ 721.458149][T16278] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2620'. [ 721.670625][ T5855] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 721.695963][T16285] genirq: Flags mismatch irq 4. 00200000 (aio_iiro_16) vs. 00200080 (ttyS0) [ 721.917938][T16272] dvmrp0: entered allmulticast mode [ 722.661610][ T5860] usb 9-1: new high-speed USB device number 59 using dummy_hcd [ 722.825258][ T5860] usb 9-1: Using ep0 maxpacket: 8 [ 722.847468][ T5860] usb 9-1: config index 0 descriptor too short (expected 74, got 45) [ 722.851025][ T5860] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 722.855409][ T5860] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 722.859490][ T5860] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 722.864210][ T5860] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 722.868750][ T5860] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 722.874403][ T5860] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 722.878127][ T5860] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.296350][T16299] __nla_validate_parse: 2 callbacks suppressed [ 724.296540][T16299] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2628'. [ 724.350473][T16300] siw: device registration error -23 [ 725.043605][T16272] netlink: 'syz.2.2619': attribute type 10 has an invalid length. [ 725.429207][ T5855] usb 7-1: unable to get BOS descriptor or descriptor too short [ 725.443910][ T5855] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 725.446486][ T5855] usb 7-1: can't read configurations, error -71 [ 725.481818][ T5860] usb 9-1: usb_control_msg returned -71 [ 725.490338][ T5860] usbtmc 9-1:16.0: can't read capabilities [ 725.614029][T16319] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2633'. [ 725.617257][T16317] netlink: 'syz.4.2632': attribute type 2 has an invalid length. [ 725.620039][T16317] nbd: must specify at least one socket [ 725.765326][T16320] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2630'. [ 725.960708][ T5860] usb 9-1: USB disconnect, device number 59 [ 726.020365][T16331] binder: 16323:16331 unknown command 0 [ 726.022326][T16331] binder: 16323:16331 ioctl c0306201 800004c0 returned -22 [ 726.025421][T16331] binder: 16323:16331 ioctl c0306201 80000180 returned -14 [ 726.300993][T16337] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 726.862415][ T5845] usb 11-1: new high-speed USB device number 42 using dummy_hcd [ 727.020827][ T5845] usb 11-1: Using ep0 maxpacket: 8 [ 727.024615][ T5845] usb 11-1: config index 0 descriptor too short (expected 74, got 45) [ 727.028035][ T5845] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 727.033000][ T5845] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 727.036932][T16347] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2642'. [ 727.040419][ T5845] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 727.046045][ T5845] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 727.050143][ T5845] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 727.055746][ T5845] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 727.063147][ T5845] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.501936][T16361] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2646'. [ 728.495840][T16366] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 728.502782][T16366] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 728.705961][ T5845] usb 11-1: usb_control_msg returned -71 [ 728.707779][ T5845] usbtmc 11-1:16.0: can't read capabilities [ 728.719518][ T5845] usb 11-1: USB disconnect, device number 42 [ 728.783128][T16377] af_packet: tpacket_rcv: packet too big, clamped from 204 to 4294967272. macoff=96 [ 728.799378][T16377] FAULT_INJECTION: forcing a failure. [ 728.799378][T16377] name failslab, interval 1, probability 0, space 0, times 0 [ 728.807808][T16377] CPU: 3 UID: 0 PID: 16377 Comm: syz.6.2651 Tainted: G L syzkaller #0 PREEMPT(full) [ 728.807829][T16377] Tainted: [L]=SOFTLOCKUP [ 728.807833][T16377] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 728.807840][T16377] Call Trace: [ 728.807845][T16377] [ 728.807850][T16377] dump_stack_lvl+0x100/0x190 [ 728.807870][T16377] should_fail_ex.cold+0x5/0xa [ 728.807884][T16377] should_failslab+0xc2/0x120 [ 728.807901][T16377] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 728.807916][T16377] ? __alloc_skb+0x5b7/0x710 [ 728.807931][T16377] ? __alloc_skb+0x140/0x710 [ 728.807948][T16377] __alloc_skb+0x140/0x710 [ 728.807963][T16377] ? __alloc_skb+0x5b7/0x710 [ 728.807977][T16377] ? __pfx___alloc_skb+0x10/0x10 [ 728.807996][T16377] netlink_alloc_large_skb+0x69/0x150 [ 728.808011][T16377] netlink_sendmsg+0x680/0xda0 [ 728.808026][T16377] ? __pfx_netlink_sendmsg+0x10/0x10 [ 728.808041][T16377] ? apparmor_socket_sendmsg+0x15b/0x270 [ 728.808056][T16377] ____sys_sendmsg+0xa4d/0xbe0 [ 728.808067][T16377] ? __pfx_netlink_sendmsg+0x10/0x10 [ 728.808081][T16377] ? __pfx_____sys_sendmsg+0x10/0x10 [ 728.808099][T16377] ___sys_sendmsg+0x190/0x1e0 [ 728.808112][T16377] ? __pfx____sys_sendmsg+0x10/0x10 [ 728.808131][T16377] ? find_held_lock+0x2b/0x80 [ 728.808154][T16377] __sys_sendmsg+0x160/0x210 [ 728.808171][T16377] ? __pfx___sys_sendmsg+0x10/0x10 [ 728.808190][T16377] ? __pfx_ksys_write+0x10/0x10 [ 728.808205][T16377] __do_fast_syscall_32+0xe7/0x970 [ 728.808222][T16377] ? lockdep_hardirqs_on+0x78/0x100 [ 728.808238][T16377] do_fast_syscall_32+0x32/0x70 [ 728.808255][T16377] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 728.808270][T16377] RIP: 0023:0xf705efec [ 728.808283][T16377] Code: Unable to access opcode bytes at 0xf705efc2. [ 728.808289][T16377] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 728.808300][T16377] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000540 [ 728.808307][T16377] RDX: 000000002000c006 RSI: 0000000000000000 RDI: 0000000000000000 [ 728.808314][T16377] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 728.808320][T16377] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 728.808327][T16377] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 728.808340][T16377] [ 729.132728][T16386] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2656'. [ 729.136315][T16386] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2656'. [ 729.331514][ T5797] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.344922][T16384] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2655'. [ 729.400061][ T5797] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.506245][ T5797] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.515997][ T5755] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 729.523756][ T5755] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 729.536340][ T5755] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 729.547444][ T5755] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 729.551618][ T5755] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 729.553312][T16390] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2657'. [ 729.617776][ T5797] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.680710][ T6677] usb 9-1: new high-speed USB device number 60 using dummy_hcd [ 729.797862][ T5797] bridge_slave_1: left allmulticast mode [ 729.799852][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state [ 729.806906][ T5797] bridge_slave_0: left allmulticast mode [ 729.808754][ T5797] bridge_slave_0: left promiscuous mode [ 729.815959][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state [ 729.850786][ T6677] usb 9-1: Using ep0 maxpacket: 8 [ 729.863790][ T6677] usb 9-1: config index 0 descriptor too short (expected 74, got 45) [ 729.866742][ T6677] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 729.872145][ T6677] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 729.876779][ T6677] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 729.882188][ T6677] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 729.886485][ T6677] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 729.891094][ T6677] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 729.894019][ T6677] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.014188][ T5797] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 730.019237][ T5797] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 730.025496][ T5797] bond0 (unregistering): Released all slaves [ 730.035636][T16394] lo speed is unknown, defaulting to 1000 [ 730.038981][ T5457] 8021q: adding VLAN 0 to HW filter on device eth1 [ 730.293404][ T6677] usb 9-1: usb_control_msg returned -71 [ 730.295442][ T6677] usbtmc 9-1:16.0: can't read capabilities [ 730.325681][ T6677] usb 9-1: USB disconnect, device number 60 [ 730.457115][ T5457] 8021q: adding VLAN 0 to HW filter on device eth10 [ 730.512572][T16435] fuse: Bad value for 'fd' [ 730.730917][T16394] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.733878][T16394] bridge0: port 1(bridge_slave_0) entered disabled state [ 730.736720][T16394] bridge_slave_0: entered allmulticast mode [ 730.742091][T16394] bridge_slave_0: entered promiscuous mode [ 730.746980][T16394] bridge0: port 2(bridge_slave_1) entered blocking state [ 730.749248][T16394] bridge0: port 2(bridge_slave_1) entered disabled state [ 730.752750][T16394] bridge_slave_1: entered allmulticast mode [ 730.755532][T16394] bridge_slave_1: entered promiscuous mode [ 730.761471][ T5797] hsr_slave_0: left promiscuous mode [ 730.763624][ T5797] hsr_slave_1: left promiscuous mode [ 730.765704][ T5797] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 730.769421][ T5797] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 730.772858][T16452] FAULT_INJECTION: forcing a failure. [ 730.772858][T16452] name failslab, interval 1, probability 0, space 0, times 0 [ 730.777502][T16452] CPU: 2 UID: 0 PID: 16452 Comm: syz.6.2668 Tainted: G L syzkaller #0 PREEMPT(full) [ 730.777520][T16452] Tainted: [L]=SOFTLOCKUP [ 730.777524][T16452] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 730.777531][T16452] Call Trace: [ 730.777535][T16452] [ 730.777540][T16452] dump_stack_lvl+0x100/0x190 [ 730.777559][T16452] should_fail_ex.cold+0x5/0xa [ 730.777573][T16452] should_failslab+0xc2/0x120 [ 730.777615][T16452] __kmalloc_noprof+0xfc/0x820 [ 730.777630][T16452] ? tomoyo_encode2+0xfb/0x3c0 [ 730.777650][T16452] tomoyo_encode2+0xfb/0x3c0 [ 730.777669][T16452] tomoyo_encode+0x29/0x50 [ 730.777685][T16452] tomoyo_realpath_from_path+0x18c/0x690 [ 730.777705][T16452] tomoyo_path_number_perm+0x23c/0x580 [ 730.777720][T16452] ? tomoyo_path_number_perm+0x22e/0x580 [ 730.777735][T16452] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 730.777750][T16452] ? get_pid_task+0x106/0x250 [ 730.777778][T16452] ? find_held_lock+0x2b/0x80 [ 730.777792][T16452] ? __fget_files+0x215/0x3d0 [ 730.777803][T16452] ? hook_file_ioctl_common+0x140/0x440 [ 730.777824][T16452] ? __fget_files+0x215/0x3d0 [ 730.777836][T16452] ? __fget_files+0x21f/0x3d0 [ 730.777849][T16452] security_file_ioctl_compat+0xd3/0x230 [ 730.777865][T16452] __ia32_compat_sys_ioctl+0xc2/0x360 [ 730.777885][T16452] __do_fast_syscall_32+0xe7/0x970 [ 730.777901][T16452] ? lockdep_hardirqs_on+0x78/0x100 [ 730.777917][T16452] do_fast_syscall_32+0x32/0x70 [ 730.777933][T16452] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 730.777948][T16452] RIP: 0023:0xf705efec [ 730.777962][T16452] Code: Unable to access opcode bytes at 0xf705efc2. [ 730.777967][T16452] RSP: 002b:00000000f542c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 730.777979][T16452] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000c0386105 [ 730.777986][T16452] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 730.777993][T16452] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 730.777999][T16452] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 730.778005][T16452] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 730.778019][T16452] [ 730.778031][T16452] ERROR: Out of memory at tomoyo_realpath_from_path. [ 730.810190][T16454] input: syz0 as /devices/virtual/input/input32 [ 730.867568][ T5797] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 730.874920][ T5797] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 730.895253][T16437] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 730.902901][T16437] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 730.946313][T16452] input: syz0 as /devices/virtual/input/input33 [ 730.956332][ T5797] dummy0: left allmulticast mode [ 730.960924][ T5797] veth1_macvtap: left promiscuous mode [ 730.968248][ T5797] veth0_macvtap: left promiscuous mode [ 730.970100][ T5797] veth1_vlan: left promiscuous mode [ 730.973049][ T5797] veth0_vlan: left promiscuous mode [ 731.248004][ T5797] team0 (unregistering): Port device team_slave_1 removed [ 731.263684][ T5797] team0 (unregistering): Port device team_slave_0 removed [ 731.337260][ T5457] 8021q: adding VLAN 0 to HW filter on device eth11 [ 731.356540][T16394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 731.364388][T16394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 731.391786][T16394] team0: Port device team_slave_0 added [ 731.399436][T16394] team0: Port device team_slave_1 added [ 731.422683][T16394] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 731.425457][T16394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 731.436682][T16394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 731.456122][T16394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 731.459721][T16394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 731.470771][T16394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 731.538319][T16394] hsr_slave_0: entered promiscuous mode [ 731.551671][T16394] hsr_slave_1: entered promiscuous mode [ 731.555085][T16394] debugfs: 'hsr0' already exists in 'hsr' [ 731.559509][T16394] Cannot create hsr debugfs directory [ 731.565406][ T5457] 8021q: adding VLAN 0 to HW filter on device eth12 [ 731.683586][T12447] Bluetooth: hci2: command tx timeout [ 731.776076][T16473] input: syz0 as /devices/virtual/input/input34 [ 732.250748][T16394] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 732.255538][T16394] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 732.258325][T16394] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 732.333005][T16394] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 732.335862][T16394] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 732.426018][T16394] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 732.428954][T16394] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 732.442914][T16394] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 732.553302][T16394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 732.578959][T16394] 8021q: adding VLAN 0 to HW filter on device team0 [ 732.595596][T11681] bridge0: port 1(bridge_slave_0) entered blocking state [ 732.597688][T11681] bridge0: port 1(bridge_slave_0) entered forwarding state [ 732.631006][T11681] bridge0: port 2(bridge_slave_1) entered blocking state [ 732.633313][T11681] bridge0: port 2(bridge_slave_1) entered forwarding state [ 733.196662][T16394] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 733.310883][T11980] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 733.446932][T16394] veth0_vlan: entered promiscuous mode [ 733.475147][T16394] veth1_vlan: entered promiscuous mode [ 733.523551][T11980] usb 7-1: unable to get BOS descriptor or descriptor too short [ 733.534221][T11980] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 733.541027][T11980] usb 7-1: can't read configurations, error -71 [ 733.559933][T16394] veth0_macvtap: entered promiscuous mode [ 733.574033][T16394] veth1_macvtap: entered promiscuous mode [ 733.598177][T16394] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 733.602409][T16526] FAULT_INJECTION: forcing a failure. [ 733.602409][T16526] name failslab, interval 1, probability 0, space 0, times 0 [ 733.606581][T16526] CPU: 2 UID: 0 PID: 16526 Comm: syz.6.2678 Tainted: G L syzkaller #0 PREEMPT(full) [ 733.606600][T16526] Tainted: [L]=SOFTLOCKUP [ 733.606604][T16526] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 733.606612][T16526] Call Trace: [ 733.606616][T16526] [ 733.606621][T16526] dump_stack_lvl+0x100/0x190 [ 733.606640][T16526] should_fail_ex.cold+0x5/0xa [ 733.606654][T16526] should_failslab+0xc2/0x120 [ 733.606671][T16526] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 733.606687][T16526] ? __alloc_skb+0x5b7/0x710 [ 733.606702][T16526] ? __alloc_skb+0x140/0x710 [ 733.606719][T16526] __alloc_skb+0x140/0x710 [ 733.606734][T16526] ? __alloc_skb+0x5b7/0x710 [ 733.606748][T16526] ? __pfx___alloc_skb+0x10/0x10 [ 733.606767][T16526] netlink_alloc_large_skb+0x69/0x150 [ 733.606783][T16526] netlink_sendmsg+0x680/0xda0 [ 733.606809][T16526] ? __pfx_netlink_sendmsg+0x10/0x10 [ 733.606829][T16526] ? apparmor_socket_sendmsg+0x15b/0x270 [ 733.606852][T16526] ____sys_sendmsg+0xa4d/0xbe0 [ 733.606865][T16526] ? __pfx_netlink_sendmsg+0x10/0x10 [ 733.606879][T16526] ? __pfx_____sys_sendmsg+0x10/0x10 [ 733.606897][T16526] ___sys_sendmsg+0x190/0x1e0 [ 733.606911][T16526] ? __pfx____sys_sendmsg+0x10/0x10 [ 733.606929][T16526] ? find_held_lock+0x2b/0x80 [ 733.606953][T16526] __sys_sendmsg+0x160/0x210 [ 733.606969][T16526] ? __pfx___sys_sendmsg+0x10/0x10 [ 733.606989][T16526] ? __pfx_ksys_write+0x10/0x10 [ 733.607004][T16526] __do_fast_syscall_32+0xe7/0x970 [ 733.607020][T16526] ? lockdep_hardirqs_on+0x78/0x100 [ 733.607036][T16526] do_fast_syscall_32+0x32/0x70 [ 733.607057][T16526] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 733.607078][T16526] RIP: 0023:0xf705efec [ 733.607099][T16526] Code: Unable to access opcode bytes at 0xf705efc2. [ 733.607107][T16526] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 733.607125][T16526] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800004c0 [ 733.607135][T16526] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 733.607145][T16526] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 733.607154][T16526] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 733.607164][T16526] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 733.607185][T16526] [ 733.617400][T16394] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 733.771885][T12447] Bluetooth: hci2: command tx timeout [ 733.793552][ T5824] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.801934][ T5824] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.833751][T16530] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2680'. [ 733.836919][T16530] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2680'. [ 733.839267][T11681] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 733.847754][T11681] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 733.885765][T11681] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 733.888630][T11681] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 733.900946][ T5797] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.905263][ T5797] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.140627][ T10] usb 11-1: new high-speed USB device number 43 using dummy_hcd [ 734.372459][ T10] usb 11-1: Using ep0 maxpacket: 8 [ 734.385123][ T10] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 734.389387][ T10] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 734.398327][ T10] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 734.422658][ T10] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 734.440599][ T10] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 734.450859][ T10] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.686110][ T10] usb 11-1: GET_CAPABILITIES returned 0 [ 734.687924][ T10] usbtmc 11-1:16.0: can't read capabilities [ 735.313188][ T5860] usb 11-1: USB disconnect, device number 43 [ 735.358065][T16557] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2685'. [ 735.610776][ T5845] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 735.784297][ T5845] usb 7-1: unable to get BOS descriptor or descriptor too short [ 735.788076][ T5845] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 735.790860][ T5845] usb 7-1: can't read configurations, error -71 [ 735.850693][T12447] Bluetooth: hci2: command tx timeout [ 736.392798][T16566] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2688'. [ 736.467663][T16570] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2690'. [ 736.470943][T16570] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2690'. [ 736.477306][T16570] macsec1: entered promiscuous mode [ 736.478989][T16570] dummy0: entered promiscuous mode [ 736.481288][T16570] macsec1: entered allmulticast mode [ 736.482975][T16570] dummy0: entered allmulticast mode [ 736.658751][ T5797] bridge_slave_1: left allmulticast mode [ 736.660787][ T5797] bridge_slave_1: left promiscuous mode [ 736.664135][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state [ 736.679177][T16580] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 736.687558][T16580] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 736.703792][ T5797] bridge_slave_0: left allmulticast mode [ 736.705690][ T5797] bridge_slave_0: left promiscuous mode [ 736.707631][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state [ 736.720797][ T5797] dvmrp0: left allmulticast mode [ 736.810608][ T6677] usb 11-1: new high-speed USB device number 44 using dummy_hcd [ 736.880726][ T5797] bond1 (unregistering): (slave erspan1): Releasing active interface [ 736.886081][ T5797] erspan1 (unregistering): left promiscuous mode [ 736.924044][T12447] Bluetooth: hci0: connection err: -111 [ 736.948904][ T5797] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 736.958840][ T5797] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 736.968478][ T5797] bond0 (unregistering): Released all slaves [ 736.970635][ T6677] usb 11-1: Using ep0 maxpacket: 8 [ 736.970840][ T5860] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 736.975264][ T6677] usb 11-1: config index 0 descriptor too short (expected 74, got 45) [ 736.988554][ T6677] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 736.995504][ T5797] bond1 (unregistering): Released all slaves [ 737.001166][ T6677] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 737.019212][ T6677] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 737.025965][ T5797] bond2 (unregistering): Released all slaves [ 737.031025][ T6677] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 737.038551][ T6677] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 737.052586][ T6677] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 737.059157][ T5797] bond3 (unregistering): Released all slaves [ 737.061893][ T6677] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.147901][T16584] dvmrp0: entered allmulticast mode [ 737.303547][ T5797] : left promiscuous mode [ 737.441686][ T42] audit: type=1804 audit(1785650925.446:8054): pid=16588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2696" name="/newroot/82/bus/bus" dev="overlay" ino=470 res=1 errno=0 [ 737.553146][ T5797] IPVS: stopping master sync thread 13117 ... [ 737.887987][ T6677] usb 11-1: GET_CAPABILITIES returned 0 [ 737.891318][ T6677] usbtmc 11-1:16.0: can't read capabilities [ 737.920966][T12447] Bluetooth: hci2: command tx timeout [ 737.947823][ T6677] usb 11-1: USB disconnect, device number 44 [ 738.730667][T14737] usb 11-1: new high-speed USB device number 45 using dummy_hcd [ 738.821086][T16609] FAULT_INJECTION: forcing a failure. [ 738.821086][T16609] name failslab, interval 1, probability 0, space 0, times 0 [ 738.828958][T16609] CPU: 2 UID: 0 PID: 16609 Comm: syz.2.2699 Tainted: G L syzkaller #0 PREEMPT(full) [ 738.828980][T16609] Tainted: [L]=SOFTLOCKUP [ 738.828984][T16609] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 738.828992][T16609] Call Trace: [ 738.828997][T16609] [ 738.829002][T16609] dump_stack_lvl+0x100/0x190 [ 738.829023][T16609] should_fail_ex.cold+0x5/0xa [ 738.829037][T16609] should_failslab+0xc2/0x120 [ 738.829054][T16609] kmem_cache_alloc_noprof+0x91/0x6a0 [ 738.829070][T16609] ? fuse_request_alloc+0x22/0x200 [ 738.829112][T16609] fuse_request_alloc+0x22/0x200 [ 738.829126][T16609] fuse_get_req+0x20a/0x400 [ 738.829141][T16609] ? __pfx_fuse_get_req+0x10/0x10 [ 738.829155][T16609] ? from_kgid+0x8f/0xd0 [ 738.829182][T16609] ? __pfx_from_kgid+0x10/0x10 [ 738.829201][T16609] fuse_chan_send+0x257/0x9a0 [ 738.829221][T16609] __fuse_simple_request+0x18e/0x1e0 [ 738.829239][T16609] fuse_getxattr+0x24e/0x420 [ 738.829254][T16609] ? __pfx_fuse_getxattr+0x10/0x10 [ 738.829278][T16609] ? kasan_save_stack+0x3f/0x50 [ 738.829293][T16609] ? kasan_save_stack+0x30/0x50 [ 738.829306][T16609] ? kasan_save_track+0x14/0x30 [ 738.829319][T16609] ? __kasan_kmalloc+0xaa/0xb0 [ 738.829334][T16609] ? __pfx_fuse_xattr_get+0x10/0x10 [ 738.829347][T16609] fuse_xattr_get+0x77/0xb0 [ 738.829362][T16609] __vfs_getxattr+0x13d/0x1a0 [ 738.829383][T16609] ? __pfx___vfs_getxattr+0x10/0x10 [ 738.829394][T16609] ? __lock_acquire+0x49f/0x1a40 [ 738.829416][T16609] cap_inode_need_killpriv+0x40/0x60 [ 738.829430][T16609] security_inode_need_killpriv+0x87/0x1e0 [ 738.829447][T16609] file_remove_privs_flags+0x2b8/0x590 [ 738.829464][T16609] ? __pfx_file_remove_privs_flags+0x10/0x10 [ 738.829478][T16609] ? generic_write_check_limits+0x1ef/0x280 [ 738.829497][T16609] ? generic_write_checks+0x321/0x490 [ 738.829515][T16609] ? __pfx_generic_write_checks+0x10/0x10 [ 738.829533][T16609] ? __pfx_down_write+0x10/0x10 [ 738.829592][T16609] kiocb_modified+0x5a/0xa0 [ 738.829607][T16609] fuse_file_write_iter+0x349/0x960 [ 738.829626][T16609] do_iter_readv_writev+0x6f7/0x930 [ 738.829645][T16609] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 738.829669][T16609] vfs_writev+0x360/0xdd0 [ 738.829686][T16609] ? rcu_is_watching+0x12/0xc0 [ 738.829701][T16609] ? trace_contention_end+0x126/0x160 [ 738.829714][T16609] ? __pfx_vfs_writev+0x10/0x10 [ 738.829741][T16609] ? __fget_files+0x21f/0x3d0 [ 738.829756][T16609] ? do_writev+0x13e/0x340 [ 738.829772][T16609] do_writev+0x13e/0x340 [ 738.829789][T16609] ? __pfx_do_writev+0x10/0x10 [ 738.829805][T16609] ? ksys_write+0x1ac/0x250 [ 738.829816][T16609] ? __pfx_ksys_write+0x10/0x10 [ 738.829829][T16609] __do_fast_syscall_32+0xe7/0x970 [ 738.829846][T16609] ? lockdep_hardirqs_on+0x78/0x100 [ 738.829862][T16609] do_fast_syscall_32+0x32/0x70 [ 738.829882][T16609] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 738.829898][T16609] RIP: 0023:0xf7f67fec [ 738.829914][T16609] Code: Unable to access opcode bytes at 0xf7f67fc2. [ 738.829920][T16609] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000092 [ 738.829931][T16609] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080002000 [ 738.829938][T16609] RDX: 000000000000001f RSI: 0000000000000000 RDI: 0000000000000000 [ 738.829945][T16609] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 738.829952][T16609] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 738.829958][T16609] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 738.829972][T16609] [ 738.911898][T14737] usb 11-1: config 1 has an invalid descriptor of length 71, skipping remainder of the config [ 738.983929][T14737] usb 11-1: config 1 interface 0 altsetting 1 endpoint 0x2 has an invalid bInterval 65, changing to 10 [ 738.988035][T14737] usb 11-1: config 1 interface 0 altsetting 1 endpoint 0x2 has invalid maxpacket 34773, setting to 1024 [ 738.992407][T14737] usb 11-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 739.034155][T14737] usb 11-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 739.037096][T14737] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.039609][T14737] usb 11-1: Product: syz [ 739.041112][T14737] usb 11-1: Manufacturer: syz [ 739.042628][T14737] usb 11-1: SerialNumber: syz [ 739.065633][T14737] usb-storage 11-1:1.0: USB Mass Storage device detected [ 739.163394][T14737] usb-storage 11-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 739.177863][T14737] scsi host6: usb-storage 11-1:1.0 [ 739.774854][ T5860] usb 12-1: unable to get BOS descriptor or descriptor too short [ 739.789434][ T5860] usb 12-1: unable to read config index 0 descriptor/start: -71 [ 739.792096][ T5860] usb 12-1: can't read configurations, error -71 [ 740.134000][ T5860] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 740.280621][ T5860] usb 12-1: Using ep0 maxpacket: 8 [ 740.291795][ T5860] usb 12-1: config index 0 descriptor too short (expected 74, got 45) [ 740.295993][ T5860] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 740.304852][ T5860] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 740.307985][ T5860] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 740.311814][ T5860] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 740.314990][ T5860] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 740.318979][ T5860] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 740.322037][ T5860] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.498085][T16624] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2702'. [ 740.498529][T16624] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2702'. [ 740.605085][ T5860] usb 12-1: usb_control_msg returned -71 [ 740.607558][ T5860] usbtmc 12-1:16.0: can't read capabilities [ 740.642279][ T5860] usb 12-1: USB disconnect, device number 3 [ 741.120175][T16603] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 741.157307][T11980] usb 11-1: USB disconnect, device number 45 [ 741.482475][T16640] syzkaller0: entered promiscuous mode [ 741.486601][T16640] syzkaller0: entered allmulticast mode [ 741.496377][ T5797] hsr_slave_0: left promiscuous mode [ 741.498642][ T5797] hsr_slave_1: left promiscuous mode [ 741.502127][ T5797] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 741.504934][ T5797] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 741.508277][ T5797] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 741.511268][ T5797] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 741.519993][ T5797] dummy0: left allmulticast mode [ 741.527492][ T5797] veth1_macvtap: left allmulticast mode [ 741.537673][ T5797] veth1_macvtap: left promiscuous mode [ 741.539492][ T5797] veth0_macvtap: left promiscuous mode [ 741.543128][ T5797] veth1_vlan: left promiscuous mode [ 741.544968][ T5797] veth0_vlan: left promiscuous mode [ 741.636154][T16644] Format for deleting device is "id" (uint). [ 741.924658][T11681] smbdirect: ib_dev[syz2] removed [ 742.127279][ T5797] team0 (unregistering): Port device team_slave_1 removed [ 742.137059][ T5797] team0 (unregistering): Port device team_slave_0 removed [ 742.212131][T16652] siw: device registration error -23 [ 742.508070][T11686] smbdirect: ib_dev[syz0] removed [ 742.609586][T13264] lo speed is unknown, defaulting to 1000 [ 742.618195][ T5860] infiniband syz2: ib_query_port failed (-19) [ 742.620935][T13264] infiniband syz0: ib_query_port failed (-19) [ 742.781938][T16657] netdevsim netdevsim7: Direct firmware load for ./file0 failed with error -2 [ 742.824926][T16657] netdevsim netdevsim7: Falling back to sysfs fallback for: ./file0 [ 742.850229][ T5755] Bluetooth: hci2: connection err: -111 [ 743.200616][ T5855] usb 9-1: new low-speed USB device number 61 using dummy_hcd [ 743.372616][ T5855] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 743.376954][ T5855] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 743.383318][ T5855] usb 9-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 743.388341][ T5855] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.448342][ T5855] usb 9-1: config 0 descriptor?? [ 744.307094][ T5855] usbhid 9-1:0.0: can't add hid device: -71 [ 744.313825][ T5855] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 744.334291][ T5855] usb 9-1: USB disconnect, device number 61 [ 745.120757][ T844] usb 9-1: new high-speed USB device number 62 using dummy_hcd [ 745.193634][T16701] FAULT_INJECTION: forcing a failure. [ 745.193634][T16701] name failslab, interval 1, probability 0, space 0, times 0 [ 745.197645][T16701] CPU: 2 UID: 0 PID: 16701 Comm: syz.2.2722 Tainted: G L syzkaller #0 PREEMPT(full) [ 745.197664][T16701] Tainted: [L]=SOFTLOCKUP [ 745.197669][T16701] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 745.197676][T16701] Call Trace: [ 745.197681][T16701] [ 745.197686][T16701] dump_stack_lvl+0x100/0x190 [ 745.197705][T16701] should_fail_ex.cold+0x5/0xa [ 745.197719][T16701] should_failslab+0xc2/0x120 [ 745.197736][T16701] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 745.197751][T16701] ? __alloc_skb+0x5b7/0x710 [ 745.197766][T16701] ? __alloc_skb+0x140/0x710 [ 745.197783][T16701] __alloc_skb+0x140/0x710 [ 745.197797][T16701] ? __alloc_skb+0x5b7/0x710 [ 745.197811][T16701] ? __pfx___alloc_skb+0x10/0x10 [ 745.197830][T16701] netlink_alloc_large_skb+0x69/0x150 [ 745.197844][T16701] netlink_sendmsg+0x680/0xda0 [ 745.197859][T16701] ? __pfx_netlink_sendmsg+0x10/0x10 [ 745.197874][T16701] ? apparmor_socket_sendmsg+0x15b/0x270 [ 745.197890][T16701] ____sys_sendmsg+0xa4d/0xbe0 [ 745.197901][T16701] ? __pfx_netlink_sendmsg+0x10/0x10 [ 745.197915][T16701] ? __pfx_____sys_sendmsg+0x10/0x10 [ 745.197932][T16701] ___sys_sendmsg+0x190/0x1e0 [ 745.197946][T16701] ? __pfx____sys_sendmsg+0x10/0x10 [ 745.197965][T16701] ? find_held_lock+0x2b/0x80 [ 745.197988][T16701] __sys_sendmsg+0x160/0x210 [ 745.198005][T16701] ? __pfx___sys_sendmsg+0x10/0x10 [ 745.198024][T16701] ? __pfx_ksys_write+0x10/0x10 [ 745.198039][T16701] __do_fast_syscall_32+0xe7/0x970 [ 745.198055][T16701] ? lockdep_hardirqs_on+0x78/0x100 [ 745.198071][T16701] do_fast_syscall_32+0x32/0x70 [ 745.198087][T16701] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 745.198102][T16701] RIP: 0023:0xf7f67fec [ 745.198115][T16701] Code: Unable to access opcode bytes at 0xf7f67fc2. [ 745.198121][T16701] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 745.198133][T16701] RAX: ffffffffffffffda RBX: 000000000000001f RCX: 0000000080000540 [ 745.198140][T16701] RDX: 0000000000040090 RSI: 0000000000000000 RDI: 0000000000000000 [ 745.198147][T16701] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 745.198154][T16701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 745.198160][T16701] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 745.198174][T16701] [ 745.302495][ T844] usb 9-1: Using ep0 maxpacket: 8 [ 745.305766][ T844] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 745.308967][ T844] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 745.312109][ T844] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.882237][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.714885][T16721] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 747.756322][T16721] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 747.973535][ T24] usb 9-1: USB disconnect, device number 62 [ 748.631798][ T24] usb 9-1: new high-speed USB device number 63 using dummy_hcd [ 748.900672][ T24] usb 9-1: Using ep0 maxpacket: 8 [ 749.004737][ T24] usb 9-1: config index 0 descriptor too short (expected 74, got 45) [ 749.018140][ T24] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 749.037111][ T24] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 749.055640][ T24] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 749.059802][ T24] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 749.065243][ T24] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 749.069569][ T24] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 749.073962][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.315609][T16750] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2732'. [ 749.323686][T16750] siw: device registration error -23 [ 749.449631][T16754] program syz.2.2734 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 750.270607][ T24] usb 9-1: usb_control_msg returned -71 [ 750.278576][ T24] usbtmc 9-1:16.0: can't read capabilities [ 750.287654][ T24] usb 9-1: USB disconnect, device number 63 [ 751.504980][T16787] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2746'. [ 751.509654][T16787] siw: device registration error -23 [ 751.570829][ T5860] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 751.650609][ T10] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 751.991266][ T10] usb 7-1: unable to get BOS descriptor or descriptor too short [ 751.995815][ T10] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 751.998846][ T10] usb 7-1: can't read configurations, error -71 [ 752.050818][ T5860] usb 12-1: Using ep0 maxpacket: 8 [ 752.054532][ T5860] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 752.059085][ T5860] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 752.063467][ T5860] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 752.067392][ T5860] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 752.072976][ T5860] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 752.076681][ T5860] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.124554][T16792] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 752.180019][T16792] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 752.532700][T16797] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2748'. [ 753.360756][ T5860] usb 12-1: usb_control_msg returned -71 [ 753.363088][ T5860] usbtmc 12-1:16.0: can't read capabilities [ 753.378283][ T5860] usb 12-1: USB disconnect, device number 4 [ 753.418988][T16801] FAULT_INJECTION: forcing a failure. [ 753.418988][T16801] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 753.428896][T16802] gadgetfs: bound to dummy_udc driver [ 753.433244][T16801] CPU: 0 UID: 0 PID: 16801 Comm: syz.2.2750 Tainted: G L syzkaller #0 PREEMPT(full) [ 753.433271][T16801] Tainted: [L]=SOFTLOCKUP [ 753.433277][T16801] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 753.433286][T16801] Call Trace: [ 753.433293][T16801] [ 753.433300][T16801] dump_stack_lvl+0x100/0x190 [ 753.433328][T16801] should_fail_ex.cold+0x5/0xa [ 753.433349][T16801] save_fsave_header+0x14c/0x2f0 [ 753.433392][T16801] ? __pfx_save_fsave_header+0x10/0x10 [ 753.433416][T16801] ? copy_fpstate_to_sigframe+0x2b8/0xae0 [ 753.433434][T16801] ? __local_bh_enable_ip+0x9e/0x120 [ 753.433457][T16801] copy_fpstate_to_sigframe+0x755/0xae0 [ 753.433496][T16801] ? do_raw_spin_lock+0x128/0x260 [ 753.433519][T16801] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 753.433540][T16801] ? posixtimer_deliver_signal+0x19d/0x6e0 [ 753.433563][T16801] ? x86_task_fpu+0x5f/0x90 [ 753.433590][T16801] get_sigframe+0x3fb/0x940 [ 753.433631][T16801] ? __pfx_get_sigframe+0x10/0x10 [ 753.433655][T16801] ? rcu_is_watching+0x12/0xc0 [ 753.433676][T16801] ? siginfo_layout+0x156/0x290 [ 753.433698][T16801] ia32_setup_rt_frame+0xe7/0xaf0 [ 753.433725][T16801] ? __pfx_ia32_setup_rt_frame+0x10/0x10 [ 753.433751][T16801] arch_do_signal_or_restart+0x459/0x7a0 [ 753.433768][T16801] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 753.433800][T16801] ? fput+0x79/0x100 [ 753.433824][T16801] exit_to_user_mode_loop+0x139/0x6f0 [ 753.433842][T16801] ? rcu_is_watching+0x12/0xc0 [ 753.433863][T16801] do_int80_emulation+0x513/0x720 [ 753.433889][T16801] asm_int80_emulation+0x1a/0x20 [ 753.433906][T16801] RIP: 0023:0xf71673eb [ 753.433920][T16801] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 753.433935][T16801] RSP: 002b:00000000f54264bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 753.433952][T16801] RAX: 0000000000000001 RBX: 0000000000000003 RCX: 00000000f54265c0 [ 753.433963][T16801] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 753.433973][T16801] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 753.433982][T16801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 753.433991][T16801] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 753.434012][T16801] [ 753.571266][T16803] 9p: Bad value for 'rfdno' [ 753.700605][ T10] usb 6-1: new full-speed USB device number 59 using dummy_hcd [ 753.703957][ C0] gadgetfs: connected [ 753.707481][ T10] gadgetfs: disconnected [ 753.870750][ C0] gadgetfs: connected [ 753.873263][ T10] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 753.876122][ T10] usb 6-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 753.878909][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.938018][T16799] gadgetfs: suspended from state 3 [ 753.940045][T16799] gadgetfs: disconnected [ 754.090634][T12447] Bluetooth: hci4: command 0x0406 tx timeout [ 754.381305][ T10] usb 6-1: can't set config #1, error -71 [ 754.403128][ T10] usb 6-1: USB disconnect, device number 59 [ 754.504062][T16811] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2756'. [ 754.606584][T16818] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2757'. [ 754.618742][T16818] siw: device registration error -23 [ 754.643007][T16821] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2754'. [ 754.840640][ T10] usb 11-1: new high-speed USB device number 46 using dummy_hcd [ 755.000978][ T10] usb 11-1: Using ep0 maxpacket: 8 [ 755.004727][ T10] usb 11-1: unable to get BOS descriptor or descriptor too short [ 755.008027][ T10] usb 11-1: config 4 interface 0 has no altsetting 0 [ 755.022242][ T10] usb 11-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 755.025037][ T10] usb 11-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 755.030581][T13264] usb 12-1: new high-speed USB device number 5 using dummy_hcd [ 755.035463][ T10] usb 11-1: Manufacturer: syz [ 755.038178][ T10] usb 11-1: SerialNumber: syz [ 755.205416][T13264] usb 12-1: Using ep0 maxpacket: 8 [ 755.211136][T13264] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 755.214672][T13264] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 755.217959][T13264] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 755.223330][T13264] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 755.231805][T13264] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 755.237806][T13264] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.475551][ T10] usb 11-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 755.481524][ T10] usb 11-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 755.489027][ T10] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 755.495772][ T10] usb 11-1: media controller created [ 755.534502][T16835] netlink: 'syz.2.2762': attribute type 2 has an invalid length. [ 755.552476][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 755.594112][ T10] zl10353_read_register: readreg error (reg=127, ret==0) [ 755.636715][ T10] usb 11-1: USB disconnect, device number 46 [ 755.717255][T13264] usb 12-1: usb_control_msg returned -71 [ 755.719009][T13264] usbtmc 12-1:16.0: can't read capabilities [ 755.757419][T13264] usb 12-1: USB disconnect, device number 5 [ 756.577613][T16828] Set syz1 is full, maxelem 65536 reached [ 757.606351][T16857] FAULT_INJECTION: forcing a failure. [ 757.606351][T16857] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 757.610620][T16857] CPU: 2 UID: 0 PID: 16857 Comm: syz.4.2769 Tainted: G L syzkaller #0 PREEMPT(full) [ 757.610649][T16857] Tainted: [L]=SOFTLOCKUP [ 757.610655][T16857] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 757.610666][T16857] Call Trace: [ 757.610673][T16857] [ 757.610681][T16857] dump_stack_lvl+0x100/0x190 [ 757.610716][T16857] should_fail_ex.cold+0x5/0xa [ 757.610738][T16857] _copy_to_user+0x32/0xd0 [ 757.610768][T16857] simple_read_from_buffer+0xcb/0x170 [ 757.610801][T16857] proc_fail_nth_read+0x1af/0x230 [ 757.610826][T16857] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 757.610852][T16857] ? rw_verify_area+0xce/0x6d0 [ 757.610878][T16857] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 757.610901][T16857] vfs_read+0x1e4/0xb40 [ 757.610921][T16857] ? __pfx_vfs_read+0x10/0x10 [ 757.610935][T16857] ? find_held_lock+0x2b/0x80 [ 757.610959][T16857] ? __fget_files+0x215/0x3d0 [ 757.610981][T16857] ? __fget_files+0x21f/0x3d0 [ 757.611005][T16857] ksys_read+0x12a/0x250 [ 757.611021][T16857] ? __pfx_ksys_read+0x10/0x10 [ 757.611045][T16857] do_int80_emulation+0x14b/0x720 [ 757.611074][T16857] asm_int80_emulation+0x1a/0x20 [ 757.611093][T16857] RIP: 0023:0xf71673eb [ 757.611108][T16857] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 757.611126][T16857] RSP: 002b:00000000f54264bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 757.611145][T16857] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54265d0 [ 757.611157][T16857] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 757.611167][T16857] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 757.611177][T16857] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 757.611188][T16857] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 757.611211][T16857] [ 757.631137][T14737] usb 11-1: new high-speed USB device number 47 using dummy_hcd [ 757.850598][T14737] usb 11-1: Using ep0 maxpacket: 8 [ 757.856528][T14737] usb 11-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 757.863555][T16865] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 757.863995][T14737] usb 11-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 757.865673][T16865] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 757.869959][T16865] vhci_hcd vhci_hcd.0: Device attached [ 757.878209][T14737] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 757.885203][T14737] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.898456][T16865] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 757.903677][T14737] usbtmc 11-1:16.0: bulk endpoints not found [ 757.979236][T16864] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 758.161476][T13264] usb 42-1: SetAddress Request (46) to port 0 [ 758.163505][T13264] usb 42-1: new SuperSpeed USB device number 46 using vhci_hcd [ 758.498916][T16866] vhci_hcd: connection reset by peer [ 758.505345][ T5797] vhci_hcd vhci_hcd.2: stop threads [ 758.509924][ T5797] vhci_hcd vhci_hcd.2: release socket [ 758.512702][ T5797] vhci_hcd vhci_hcd.2: disconnect device [ 759.360738][T14737] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 759.535421][T14737] usb 7-1: unable to get BOS descriptor or descriptor too short [ 759.543674][T14737] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 759.547403][T14737] usb 7-1: can't read configurations, error -71 [ 760.438619][ T10] usb 11-1: USB disconnect, device number 47 [ 760.900905][T16903] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 760.903012][T16903] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 760.914915][T16903] vhci_hcd vhci_hcd.0: Device attached [ 761.063109][T16903] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 761.191678][ T24] usb 50-1: SetAddress Request (38) to port 0 [ 761.194667][ T24] usb 50-1: new SuperSpeed USB device number 38 using vhci_hcd [ 761.688295][T16911] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 761.717166][T16911] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 761.734124][T16917] syzkaller0: entered promiscuous mode [ 761.738302][T16917] syzkaller0: entered allmulticast mode [ 761.815473][T16904] vhci_hcd: connection reset by peer [ 761.818302][T16248] vhci_hcd vhci_hcd.6: stop threads [ 761.820015][T16248] vhci_hcd vhci_hcd.6: release socket [ 761.824125][T16248] vhci_hcd vhci_hcd.6: disconnect device [ 762.233400][ T5860] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 762.724958][T16924] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 762.728625][T16924] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 763.201133][T13264] usb 42-1: device descriptor read/8, error -110 [ 763.596150][T13264] usb usb42-port1: attempt power cycle [ 764.321645][T13264] usb usb42-port1: unable to enumerate USB device [ 765.603102][ T5860] usb 7-1: unable to get BOS descriptor or descriptor too short [ 765.607076][ T5860] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 765.613758][ T5860] usb 7-1: can't read configurations, error -71 [ 765.915538][T16967] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 765.929052][T16967] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 766.484069][ T24] usb 50-1: device descriptor read/8, error -110 [ 766.837275][T16972] gadgetfs: bound to dummy_udc driver [ 767.005960][ T24] usb usb50-port1: attempt power cycle [ 767.052077][T16975] netlink: 'syz.6.2800': attribute type 3 has an invalid length. [ 767.504937][T16960] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2794'. [ 767.532090][T16960] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2794'. [ 767.561828][ T24] usb usb50-port1: unable to enumerate USB device [ 768.040681][T13264] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 768.260570][T13264] usb 7-1: unable to get BOS descriptor or descriptor too short [ 768.267248][T13264] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 768.271329][T13264] usb 7-1: can't read configurations, error -71 [ 768.341131][T16994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 768.383139][T16994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 768.690209][T16998] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 768.693790][T16998] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 769.147881][T17013] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2808'. [ 769.151690][T17013] siw: device registration error -23 [ 769.788457][T17016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 769.808412][T17016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 769.997257][T17025] sound umpC3D2: No UMP Group is found in FB [ 769.999917][T17025] sound umpC3D3: No UMP Group is found in FB [ 770.122731][T17028] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2813'. [ 770.160773][T17028] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2813'. [ 770.278367][T17034] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2812'. [ 770.303944][T17034] siw: device registration error -23 [ 770.470736][T14737] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 770.662491][T14737] usb 5-1: Dual-Role OTG device on HNP port [ 770.666751][T14737] usb 5-1: New USB device found, idVendor=17b3, idProduct=0000, bcdDevice= 7.02 [ 770.670055][T14737] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.686637][ C3] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000e6: 0000 [#1] SMP KASAN NOPTI [ 770.690373][ C3] KASAN: null-ptr-deref in range [0x0000000000000730-0x0000000000000737] [ 770.693188][ C3] CPU: 3 UID: 0 PID: 14737 Comm: kworker/3:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 770.696577][ C3] Tainted: [L]=SOFTLOCKUP [ 770.697930][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 770.701042][ C3] Workqueue: usb_hub_wq hub_event [ 770.702652][ C3] RIP: 0010:f_midi2_free_ep_reqs+0x56/0x2b0 [ 770.704501][ C3] Code: 85 6a 02 00 00 49 8b 45 00 48 89 44 24 18 48 05 30 07 00 00 48 89 c2 48 89 44 24 20 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e b5 01 00 00 48 8b 44 24 18 31 [ 770.710491][ C3] RSP: 0018:ffffc900005e89e8 EFLAGS: 00010002 [ 770.712377][ C3] RAX: dffffc0000000000 RBX: ffff88805cd6c000 RCX: ffffffff87e556f9 [ 770.714836][ C3] RDX: 00000000000000e6 RSI: ffffffff87e55536 RDI: ffff88805cd6c128 [ 770.717281][ C3] RBP: ffff88805cd6c128 R08: 0000000000000004 R09: 0000000000000020 [ 770.719708][ C3] R10: 0000000000000020 R11: 000000000000756b R12: ffff88805cd6c0f0 [ 770.722124][ C3] R13: ffff88805cd6c128 R14: ffff88805cd6c740 R15: 0000000000000001 [ 770.724609][ C3] FS: 0000000000000000(0000) GS:ffff888096edf000(0000) knlGS:0000000000000000 [ 770.727400][ C3] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 770.729466][ C3] CR2: 000000003171e000 CR3: 000000004e975000 CR4: 0000000000352ef0 [ 770.731938][ C3] Call Trace: [ 770.733005][ C3] [ 770.733947][ C3] f_midi2_set_alt+0x444/0x5f0 [ 770.735501][ C3] composite_setup+0x16f8/0x9290 [ 770.737061][ C3] ? __lock_acquire+0x49f/0x1a40 [ 770.738633][ C3] ? __bfs+0x291/0x2a0 [ 770.739933][ C3] ? __pfx_composite_setup+0x10/0x10 [ 770.741629][ C3] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 770.743303][ C3] ? do_raw_spin_lock+0x128/0x260 [ 770.744879][ C3] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 770.746565][ C3] ? configfs_composite_setup+0xfb/0x130 [ 770.748326][ C3] configfs_composite_setup+0xfb/0x130 [ 770.750044][ C3] dummy_timer+0x2045/0x36f0 [ 770.751509][ C3] ? trace_fn_trace+0x131/0x200 [ 770.753051][ C3] ? do_raw_spin_lock+0x128/0x260 [ 770.754645][ C3] ? find_held_lock+0x2b/0x80 [ 770.756162][ C3] ? debug_object_deactivate+0x2e4/0x3b0 [ 770.757946][ C3] ? debug_object_deactivate+0x2e4/0x3b0 [ 770.759711][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 770.761539][ C3] ? debug_object_deactivate+0x2e4/0x3b0 [ 770.763306][ C3] ? __pfx_debug_object_deactivate+0x10/0x10 [ 770.765335][ C3] ? __pfx_dummy_timer+0x10/0x10 [ 770.766865][ C3] ? mark_held_locks+0x40/0x70 [ 770.768349][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 770.770185][ C3] ? __pfx_dummy_timer+0x10/0x10 [ 770.771741][ C3] __hrtimer_run_queues+0x462/0x9c0 [ 770.773385][ C3] hrtimer_run_softirq+0x17d/0x2c0 [ 770.775055][ C3] handle_softirqs+0x1ea/0x9b0 [ 770.776580][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 770.778254][ C3] ? _raw_spin_unlock+0x28/0x50 [ 770.779795][ C3] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 770.781564][ C3] __irq_exit_rcu+0x162/0x210 [ 770.783044][ C3] irq_exit_rcu+0x9/0x30 [ 770.784387][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 770.786166][ C3] [ 770.787103][ C3] [ 770.788040][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 770.789838][ C3] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 770.791739][ C3] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 36 58 29 f6 48 89 df e8 be a7 29 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 d5 b6 18 f6 65 8b 05 4e 07 a8 08 85 c0 74 16 5b [ 770.797715][ C3] RSP: 0018:ffffc9000469e928 EFLAGS: 00000246 [ 770.799677][ C3] RAX: 0000000000000002 RBX: ffff8880253ac000 RCX: 0000000000000040 [ 770.802136][ C3] RDX: 0000000000000000 RSI: ffffffff8e1a99ad RDI: ffffffff8c400a80 [ 770.804624][ C3] RBP: 0000000000000246 R08: 0000000000000001 R09: 0000000000000000 [ 770.807103][ C3] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000080000000 [ 770.809561][ C3] R13: ffff8880246ac478 R14: 0000000000000000 R15: ffff8880246ac400 [ 770.812024][ C3] dummy_urb_enqueue+0x56c/0x880 [ 770.813593][ C3] ? bus_for_each_drv+0x151/0x1e0 [ 770.815215][ C3] usb_hcd_submit_urb+0x268/0x2150 [ 770.816819][ C3] ? __device_attach+0x1e4/0x4d0 [ 770.818379][ C3] ? device_initial_probe+0xaf/0xd0 [ 770.820021][ C3] ? bus_probe_device+0x64/0x160 [ 770.821581][ C3] ? device_add+0x121d/0x1970 [ 770.823054][ C3] ? usb_new_device.cold+0x685/0x115c [ 770.826524][ C3] ? hub_event+0x30a3/0x4a60 [ 770.827988][ C3] ? process_one_work+0xa23/0x1940 [ 770.829587][ C3] usb_submit_urb+0x827/0x19b0 [ 770.831113][ C3] ? __init_swait_queue_head+0xca/0x150 [ 770.832849][ C3] usb_start_wait_urb+0x10e/0x580 [ 770.834490][ C3] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 770.836267][ C3] ? trace_kmalloc+0xeb/0x110 [ 770.837782][ C3] ? __asan_memset+0x23/0x50 [ 770.839266][ C3] usb_control_msg+0x328/0x4b0 [ 770.840780][ C3] ? __pfx_usb_control_msg+0x10/0x10 [ 770.842434][ C3] ? _raw_spin_unlock_irq+0x23/0x50 [ 770.844080][ C3] usb_control_msg_send+0xca/0x130 [ 770.845702][ C3] usb_set_interface+0x9b6/0xe20 [ 770.847258][ C3] snd_usb_midi_v2_create+0x629/0x4070 [ 770.848974][ C3] ? __mutex_unlock_slowpath+0x35d/0x930 [ 770.850749][ C3] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 770.852617][ C3] ? snd_info_create_entry+0x6f/0x400 [ 770.854335][ C3] ? lockdep_init_map_type+0x5c/0x250 [ 770.856035][ C3] ? __pfx_snd_usb_midi_v2_create+0x10/0x10 [ 770.857953][ C3] ? snd_info_create_entry+0x314/0x400 [ 770.859661][ C3] ? usb_ifnum_to_if+0x16f/0x1d0 [ 770.861256][ C3] snd_usb_create_stream.isra.0+0x386/0x4d0 [ 770.863161][ C3] usb_audio_probe+0xf05/0x3b10 [ 770.864698][ C3] ? __pfx_usb_audio_probe+0x10/0x10 [ 770.866404][ C3] ? do_raw_spin_lock+0x128/0x260 [ 770.867988][ C3] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 770.869676][ C3] ? mark_held_locks+0x40/0x70 [ 770.871218][ C3] ? _raw_spin_lock_irqsave+0x52/0x60 [ 770.872915][ C3] ? mark_held_locks+0x40/0x70 [ 770.874430][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 770.876275][ C3] usb_probe_interface+0x303/0x8f0 [ 770.877892][ C3] ? __pfx_usb_probe_interface+0x10/0x10 [ 770.879655][ C3] really_probe+0x241/0xa60 [ 770.881089][ C3] __driver_probe_device+0x20e/0x450 [ 770.882810][ C3] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 770.884661][ C3] driver_probe_device+0x4a/0x140 [ 770.886283][ C3] __device_attach_driver+0x1df/0x320 [ 770.887974][ C3] ? __pfx___device_attach_driver+0x10/0x10 [ 770.889852][ C3] bus_for_each_drv+0x159/0x1e0 [ 770.891381][ C3] ? __pfx_bus_for_each_drv+0x10/0x10 [ 770.893057][ C3] ? lockdep_hardirqs_on+0x78/0x100 [ 770.894695][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 770.896538][ C3] __device_attach+0x1e4/0x4d0 [ 770.898072][ C3] ? __pfx___device_attach+0x10/0x10 [ 770.899738][ C3] ? do_raw_spin_unlock+0x145/0x1e0 [ 770.901364][ C3] device_initial_probe+0xaf/0xd0 [ 770.902956][ C3] bus_probe_device+0x64/0x160 [ 770.904459][ C3] device_add+0x121d/0x1970 [ 770.905948][ C3] ? __pfx_device_add+0x10/0x10 [ 770.907473][ C3] ? usb_cache_string+0xd0/0x100 [ 770.909028][ C3] ? usb_cache_string+0xd6/0x100 [ 770.910583][ C3] ? kfree+0x22b/0x6c0 [ 770.911864][ C3] usb_set_configuration+0xd97/0x1c60 [ 770.913556][ C3] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 770.915465][ C3] usb_generic_driver_probe+0xa1/0xe0 [ 770.917147][ C3] usb_probe_device+0xef/0x400 [ 770.918666][ C3] ? __pfx_usb_probe_device+0x10/0x10 [ 770.920353][ C3] really_probe+0x241/0xa60 [ 770.921794][ C3] __driver_probe_device+0x20e/0x450 [ 770.923443][ C3] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 770.925313][ C3] driver_probe_device+0x4a/0x140 [ 770.926905][ C3] __device_attach_driver+0x1df/0x320 [ 770.928561][ C3] ? __pfx___device_attach_driver+0x10/0x10 [ 770.930379][ C3] bus_for_each_drv+0x159/0x1e0 [ 770.931888][ C3] ? __pfx_bus_for_each_drv+0x10/0x10 [ 770.933570][ C3] ? lockdep_hardirqs_on+0x78/0x100 [ 770.935204][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 770.937028][ C3] __device_attach+0x1e4/0x4d0 [ 770.938594][ C3] ? __pfx___device_attach+0x10/0x10 [ 770.940270][ C3] ? do_raw_spin_unlock+0x145/0x1e0 [ 770.941913][ C3] device_initial_probe+0xaf/0xd0 [ 770.943497][ C3] bus_probe_device+0x64/0x160 [ 770.945024][ C3] device_add+0x121d/0x1970 [ 770.946470][ C3] ? __pfx_device_add+0x10/0x10 [ 770.947964][ C3] ? usb_detect_static_quirks+0x335/0x3e0 [ 770.949689][ C3] usb_new_device.cold+0x685/0x115c [ 770.951323][ C3] ? _mutex_trylock_nest_lock+0x241/0x310 [ 770.953096][ C3] ? __pfx_usb_new_device+0x10/0x10 [ 770.954689][ C3] ? mark_held_locks+0x40/0x70 [ 770.956216][ C3] hub_event+0x30a3/0x4a60 [ 770.957650][ C3] ? __pfx_hub_event+0x10/0x10 [ 770.959130][ C3] ? debug_object_deactivate+0x2e4/0x3b0 [ 770.960851][ C3] ? rcu_is_watching+0x12/0xc0 [ 770.962376][ C3] process_one_work+0xa23/0x1940 [ 770.963939][ C3] ? __pfx_process_one_work+0x10/0x10 [ 770.965661][ C3] ? __pfx_hub_event+0x10/0x10 [ 770.967166][ C3] worker_thread+0x5ef/0xe50 [ 770.968629][ C3] ? __pfx_worker_thread+0x10/0x10 [ 770.970240][ C3] ? kthread+0x13a/0x450 [ 770.971560][ C3] ? __pfx_worker_thread+0x10/0x10 [ 770.973188][ C3] kthread+0x370/0x450 [ 770.974524][ C3] ? __pfx_kthread+0x10/0x10 [ 770.976000][ C3] ret_from_fork+0x72b/0xd50 [ 770.977479][ C3] ? __pfx_ret_from_fork+0x10/0x10 [ 770.979090][ C3] ? __switch_to+0x800/0x10f0 [ 770.980600][ C3] ? __pfx_kthread+0x10/0x10 [ 770.982073][ C3] ret_from_fork_asm+0x1a/0x30 [ 770.983595][ C3] [ 770.984583][ C3] Modules linked in: [ 770.985866][ C3] ---[ end trace 0000000000000000 ]--- [ 770.987565][ C3] RIP: 0010:f_midi2_free_ep_reqs+0x56/0x2b0 [ 770.989409][ C3] Code: 85 6a 02 00 00 49 8b 45 00 48 89 44 24 18 48 05 30 07 00 00 48 89 c2 48 89 44 24 20 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e b5 01 00 00 48 8b 44 24 18 31 [ 770.995372][ C3] RSP: 0018:ffffc900005e89e8 EFLAGS: 00010002 [ 770.997310][ C3] RAX: dffffc0000000000 RBX: ffff88805cd6c000 RCX: ffffffff87e556f9 [ 770.999791][ C3] RDX: 00000000000000e6 RSI: ffffffff87e55536 RDI: ffff88805cd6c128 [ 771.002247][ C3] RBP: ffff88805cd6c128 R08: 0000000000000004 R09: 0000000000000020 [ 771.004690][ C3] R10: 0000000000000020 R11: 000000000000756b R12: ffff88805cd6c0f0 [ 771.007163][ C3] R13: ffff88805cd6c128 R14: ffff88805cd6c740 R15: 0000000000000001 [ 771.009633][ C3] FS: 0000000000000000(0000) GS:ffff888096edf000(0000) knlGS:0000000000000000 [ 771.012393][ C3] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 771.014486][ C3] CR2: 000000003171e000 CR3: 000000004e975000 CR4: 0000000000352ef0 [ 771.017005][ C3] Kernel panic - not syncing: Fatal exception in interrupt [ 771.019922][ C3] Kernel Offset: disabled [ 771.021281][ C3] Rebooting in 86400 seconds..