last executing test programs: 5m28.80808438s ago: executing program 3 (id=425): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x140800, 0x0) r1 = epoll_create1(0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001e000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000000000700050001000000"], 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x20000014}) sched_setattr(0x0, &(0x7f0000000180)={0x47, 0x5, 0x8, 0x5, 0x0, 0x9, 0x0, 0x57c73f3a, 0xfa11, 0xffffffff}, 0x0) getsockopt$sock_int(r3, 0x1, 0x5, &(0x7f0000000000), &(0x7f0000000040)=0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) write(r4, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x41, 0x0, 0x0) poll(&(0x7f0000000140)=[{r3, 0x2cfc08c20dafc34e}, {r1, 0xf102}], 0x2, 0x8000007) r6 = syz_usb_connect(0x3, 0x32, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000200000040110700090001010203010902200001010080fa0904000002070102000705810200020007050202"], 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffd, 0xfffffffc}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) ioprio_get$pid(0x3, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r6, 0x81, 0x4, &(0x7f0000000800)="38359f64") 5m24.179124878s ago: executing program 3 (id=435): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000080)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) r3 = mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x6, 0x3000001, 0x50, r1, 0x20000000) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000480)) syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x2, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f0000000280)=@IORING_OP_READV_FIXED={0x3c, 0x5c, 0x4004, @fd, 0x9, 0x0, 0x0, 0x4, 0x0, {0x1, 0x0, 0x5, '\x00', 0x0, 0xffffffffffffffff}}) syz_ublk_add_dev(r1, r3, r5, r9, &(0x7f0000000340)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0x750, 0x0, 0x0, 0x1000, 0xfff, 0xffffffffffffffff, 0x0, 0x82}}}, &(0x7f00000003c0)) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x8000) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}, 0x1, 0x0, 0x0, 0x40801}, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x480, 0x3, 0x0, 0x0, 0x0, 0x1}, 0x14, 0x0) 5m20.192172807s ago: executing program 3 (id=441): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendto(r0, &(0x7f0000000000), 0x0, 0x40000, 0x0, 0x0) sendto(r0, &(0x7f0000000400)="9400000042000100020000000000000003010000102700003200010000112233445566778899aabb080045000020000140004011b778c0a80101c0a8010204d2162e000c00007465737400003c00020008000300010000001000040066778899aabb001122334455060006000800000010000700c0a80101c0a801021100400008000a0004d2162e0c00030008000c0004000100", 0x94, 0x0, 0x0, 0x0) (fail_nth: 8) 5m19.821465338s ago: executing program 3 (id=442): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendto(r0, &(0x7f0000000000), 0x0, 0x40000, 0x0, 0x0) sendto(r0, &(0x7f0000000400)="9400200042000100020000000000000003010000102700003200010000112233445566778899aabb080045000020000140004011b778c0a80101c0a8010204d2162e000c00007465737400003c00020008000300010000001000040066778899aabb001122334455060006000800000010000700c0a80101c0a801021100400008000a0004d2162e0c00030008000c0004000100", 0x94, 0x0, 0x0, 0x0) 5m19.339538268s ago: executing program 3 (id=445): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000018c0), r0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000004c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000ffdbdf25090000006400038008000100013f00000800030004000000140002007665744e315f6d616376746170000000060004000200000008000500e0000000140002006970766c616e31"], 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) 5m19.287239076s ago: executing program 3 (id=446): syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB], 0x17) syz_emit_vhci(0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r0, 0x40109441, &(0x7f0000000300)={0x5, 0x6, 0xffffffff}) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f00000000c0), 0x80000) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x2, 0x7, 0x401, "5debca56de5667430241dbfaf876b2ff", 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r4, r4, r4}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) ptrace$ARCH_SHSTK_LOCK(0x1e, r1, 0x1, 0x5003) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) 5m3.683838767s ago: executing program 32 (id=446): syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB], 0x17) syz_emit_vhci(0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r0, 0x40109441, &(0x7f0000000300)={0x5, 0x6, 0xffffffff}) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f00000000c0), 0x80000) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x2, 0x7, 0x401, "5debca56de5667430241dbfaf876b2ff", 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r4, r4, r4}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) ptrace$ARCH_SHSTK_LOCK(0x1e, r1, 0x1, 0x5003) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) 4m24.783606281s ago: executing program 1 (id=645): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000240)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x110, 0x1}], 0x10, 0x7000000}, 0xf401}], 0x1, 0x0) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x10, 0x110, 0x1}], 0x10, 0x7000000}, 0xf401}], 0x1, 0x1000000) 4m24.749091948s ago: executing program 1 (id=647): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x55}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x4004, @fd_index=0x7, 0x4, &(0x7f0000000240)=[{&(0x7f0000000180)=""/139}], 0xfa861e14cc207c, 0x8}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000500)={0x2, 0x0, @pic={0x5, 0x1, 0x7, 0x8, 0x2, 0x80, 0x8, 0xf, 0x31, 0x5, 0xfe, 0xa, 0xfe, 0x8e, 0x5}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 4m24.521606437s ago: executing program 1 (id=649): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x800000, 0x52000) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000180)="cf", 0x1) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000001040)='./sys\x00', &(0x7f0000001080)='sysfs\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r0, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x78, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r0, {0x10, 0x5}, {}, {0x10, 0x5}}, [@filter_kind_options=@f_flow={{0x9}, {0x48, 0x2, [@TCA_FLOW_EMATCHES={0x44, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x3, 0x3, 0x3a40}, {0x7, 0x8, 0xfffffff8, 0x7}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x8, 0x1, 0xb9a}, {0x7, 0xf9b, 0xf752, 0x0, 0x7, 0x2, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x628}}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x48014}, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./sys/class/scsi_host/host0/scan\x00', 0x1, 0x0) write(r1, &(0x7f0000001400)='- - -', 0x5) 4m23.401322696s ago: executing program 1 (id=655): futex_waitv(&(0x7f0000001b00)=[{0xfff, &(0x7f0000000340)=0xfffffffffffff697, 0x6}], 0x1, 0x0, 0x0, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x129042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) (async) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) (async) sendmsg$nl_netfilter(r0, &(0x7f0000001b40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000002fc0)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB="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", @ANYRES32=r1, @ANYRES64=r1], 0x14ec}, 0x1, 0x0, 0x0, 0x4000054}, 0x24009095) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) (async) listen(r2, 0x80) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x1ff) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)=ANY=[@ANYBLOB="2cdb023d20f19cd2b8000000000000000a0000090900420073797a30000000000900020073797a3100002000"], 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x106000, 0x0) mount$nfs4(&(0x7f0000000500)='127.0.0.1:/\x00\x9bWd.\xa3\xb2G\xc1gY\xb7}6\xb7\xb2\x9c\xff\xa3\xb3z\a\xd60U\x98\xf5\xe8\xec\xb3\xf9*W\x84\xc4!l\x92SY\x96\x05:\x13zp\xda\xa8\x06\x00\xb4#\x1b\xaaG2d\xb3\r\x0f\xae\x16\xc2\x10r\xf8\xc8\xc2{f\x00\x00', &(0x7f0000000400)='./mnt\x00', &(0x7f0000000440), 0x1024400, &(0x7f0000000580)=ANY=[]) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f00000002c0)={0x3, 0x7b}) (async) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000980)={0x2, @win={{0x4, 0x7, 0x2, 0x43}, 0x2, 0xc, 0x0, 0xd, 0x0, 0x8}}) (async) socket$netlink(0x10, 0x3, 0x14) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async) open_tree(0xffffffffffffffff, &(0x7f0000000380)='./file1\x00', 0x80200) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r5, &(0x7f0000000100)={0xa, 0xfffe, 0x4, @mcast2={0xff, 0x3}}, 0x1c) (async) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) (async) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r5, &(0x7f0000000000)="8f6bb66f", 0x3c, 0x0, 0x0, 0xfffffffffffffec8) nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/kernel/sunrpc/xprt-switches/switch-0/xprt-0-tcp/srcaddr\x00', 0x0, 0x0) 4m23.269022514s ago: executing program 1 (id=656): ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, [], [0xffffffff], [0x0, 0x0, 0x10], [0xfffffffffffffffc]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x161e42, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000000000/0x3000)=nil, &(0x7f0000001000/0x2000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000200), 0x0, r0}, 0x68) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) bind$802154_raw(r1, &(0x7f0000000080)={0x1e, @none={0x0, 0x2}}, 0x14) fcntl$setlease(r0, 0x400, 0x3) r2 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x8550, 0xc00, 0x1, 0xf, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_RENAMEAT={0x23, 0x10, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0x0, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x777) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) r7 = mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x3, 0x3000002, 0x50, r6, 0x20000000) syz_io_uring_modify_offsets$flags(r7, r4, 0x68, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x13f, 0x3}}, 0x20) io_uring_enter(r2, 0x39d7, 0x400001, 0x1, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') pread64(r8, &(0x7f0000001300)=""/4118, 0x1016, 0x0) 4m23.173252848s ago: executing program 1 (id=657): r0 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x6, 0x200) ioctl$MON_IOCX_MFETCH(r0, 0xc00c9207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1, 0x7fff}) 4m7.573322012s ago: executing program 33 (id=657): r0 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x6, 0x200) ioctl$MON_IOCX_MFETCH(r0, 0xc00c9207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1, 0x7fff}) 3m47.136556076s ago: executing program 2 (id=792): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x3f, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x8, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ife={0x48, 0x3ffd, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x10000040, 0x0, 0xffffffffffffffff}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f000000c700)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000640)="6b15a0f00fe017b6492dbe871df73c04def0c04399b5468ea29d846ad74cc9c4085137bed939bd056975a17e03e410ad5d586a9499f1f8502e4614e9b27eb9fdb1515d0df91d19b5255abaa88ef022025bfbe02b2a6082d5bb304d4cd1444fa690c44d5bb9dd51fcb73d1e00615d76f138f780b5956d25a9d8dbbd61b0fee9a6c69e59d26f2a7849426497a20404f516f9d49260f80b1d5ec551ab4a8abd495a7080e74509df8edf0e1ce31d49e7b4697f266b03f44a3f13baaf6b663973d578ca96b95724dc107ebc3c", 0xca}], 0x1, 0x0, 0x0, 0x400c831}}, {{&(0x7f0000000780)=@abs={0x21659b837c0b1c4f, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c80)=[{&(0x7f0000000800)="4458fd2f3f88b0cbd080ea79022a0b109c7811917474", 0x16}, {&(0x7f0000000840)="5dc399b4a8aefee84b3ebc7d", 0xc}, {&(0x7f0000000880)="3d582502406eb689fd", 0x9}, {&(0x7f00000008c0)="1a6c9e2a60873b73329c85ea4a0e96f71993ec36ee4045372927c8d7eb513d03a0eeb477895c7f2cf6f024544ad005597a59327c79d12b862b3f2fa777895d9343deae704e72ccb10ef4e0ee8780ee00459cf3a8d0a5766a5baccfa47ac8525ce01f7a646adb41132c30cf3a4390bc963978", 0x72}, {&(0x7f0000000940)="15b6d0bc0bcc85cef7660e7f078827f69dec7b47d10d257cd28c12890b2e18c7c2c14fae7f", 0x25}, {&(0x7f0000000980)="0c2ff6f541b66a3349409d969ba3e1ac520a5b0a7116930748b78817ff3ca1409b52ea48860e062359094ca71f4c1c01f6bc600a617247e3b560ab492912eee4da80653db69b076c24d0c03828022b6965b0eb0e090c16e8269c31ecb1fb16fd74fca9a6ab8d4bc623e13549edc786cb72ff63bd018cbd7c4fb6bf468cb74ef8d63a10a84819d23a4a344e894dc55554988b076eb68ea4866974367623afab72420d0a38", 0xa4}, {&(0x7f0000000a40)="162e18b928c8c39a7fc452229b95156c498730d11b83955ff26c909b5d9e078842c19ec698a2c1b857f982500e317c885d88f5f63986eb77c833b3bef2355902d585988c8bed59185713470d9e4455e3e0d3efe83384ef0e87d9497d4b818be4ae35e86a288a3dbe38a3f6d6bd939b89d95dc189e0fa", 0x76}, {&(0x7f0000000ac0)="b1482154df04778c1366164d69ab862cfde5ad5bc96d540f03e8e85bc4026965e9aa25df31cd753b2df57366f995782858b0f930d36ff22b48344f7d75ab313b934fda178f4760ca2ded636299464058b289cebcc36ff38b2e6d5775effe2ad3a7f65fa7386c7a723cb6f45259a3fba7f6067a985914e95224c43778955d61cd6629007c1d739a01490328df242297f6b0fe8ba7ad7456ce3b315927df51c178b3376d8e39c075f385fb636ea16de06d8863a92e4ad4f5c987f9c8ee617aac0a95fc223fc2a806e5ddb4ece65dda3548ce8c2d1824b2d2d4010cc4cbbb94d1a2b4a68bec4cb4", 0xe6}, {&(0x7f0000000bc0)="85fddd1372778e75da8e1a3e295c8a249f4417f82fb7868bffd6f538f805651b71edbaaf3576d7a34782992c8a298d42e3232219ee7a7e930c65b4e3f064f1fc7e2fb968e97f3cf1fc33300e499538fd7da3f3c2813985584fa53be63ea23b6be5cbea2157578445ee5a4c2e224fa981b505639e3a86dbab9dd254cbc9934d947a1577c10c00218f0801c119805030d2e8001e644888d5285b43303460810e23e4fd607ac0c6c67e52370988", 0xac}], 0x9, &(0x7f0000002fc0)=[@cred={{0x18, 0x1, 0x2, {r0}}}, @cred={{0x18, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x20, 0x1, 0x1, [r1, r2, r2, r1, 0xffffffffffffffff]}}, @cred={{0x18, 0x1, 0x2, {r0, 0xee01}}}, @cred={{0x18, 0x1, 0x2, {r0}}}], 0x80, 0x100c0}}, {{0x0, 0x0, &(0x7f000000bf40)=[{&(0x7f0000006200)="0b20ca000c8441c0e5aa671975f752c8131ca68d412cefe0b05b8961d1078df8fcfced122c88716f8a70325300facd2a86cb9c4dfd1ef4b8a13ce34af35ec74432b8434553fd912096fcb8060fd1fe72a419ed5d160c2f3cacfc3d7714bd07c813cddf88f1f00bf2ece93d79bc4ef7ff25261b8597abeeedf68d3e8278e45854fbdb8b5ad4af47b0cc9df343cb7ea837b9f57c53aa3273c9a94d3bff682bd114b7e222148eab17f144f3cf8fdd87876109587372292b", 0xb6}, {&(0x7f0000008340)="4063a4b595c2948af796932e4ff84eaf5390d3c1f991ed16631816d66155ee238ede6d8d07c2a932fd4295e3ef14b968ad6b1cf2e791219df54feffb0d3e0bd5fbf046", 0x43}, {&(0x7f00000083c0)="27769008ef2b65fa5a4ebffc6319549f35cdc436a4a473a34a374612699836db731a3253bf2b826ac463b312be5dd4dd84b2ce6710c81b4751b9d5c5712eb7caceedad41530ac2912f0164105ec43e150dc51eaa2128b81ec14d7324f8f42c5c7ef9c8ac1f1e7556d831f5f720a2b1eb4ff252cd513bee54d3dc847fae846843", 0x80}, {&(0x7f000000ae80)="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", 0x1000}, {&(0x7f000000be80)="680648fd68e1a28140892b816ab1c6c6367de1fae068ad6a719fa10f1a3b989a256ad2f2e0bedb859c21e1a0e1a684832587e26454b710791227cbd169bf2da76ee43368f639c33c8596d542dde9149318265df135abd618051577cee511cc4fabc63fed23733cddf662f67761bc277f823ea53e0521f9589db1f8102088a7d0ae88c3b39ee2ca281987f0280f6bd42b3a2e6332348479454f40752a534191be17d17694df2c9e8f1e24d4bfa2", 0xad}], 0x5, &(0x7f0000000d00)=ANY=[@ANYBLOB="240000000100000001400000862b0d387857bfd3d12a1568dd6a3cc7a4a18253b34bd71ef4e9855301bceaf10bce47a8139321bc51769392c2bc71ed249abb4c6669eda91d91be56170ac7eebfaf15c04e7c4a128ff056f01298a9d58fc1b11dc821774550fac0238961abecf317973508c235c9291e003125bcc276d54f41100609f55babac221b6454eb72c806046dda2525d3372bb828", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32=r1], 0x24, 0x44080}}, {{&(0x7f000000bfc0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f000000c500)=[{&(0x7f000000c040)="8a5437ba36dc17ff0b0fa62cc2184f57c273", 0x12}, {&(0x7f000000c080)="f9334f96c22bcb56b4b372debb252460e4cb5733ee2fdb03f67503adcc38e44f1d052bd6d1cedc36cb23fb6480ef48e5727a7c68cddccfde16b0a549614984a3a4309443906bf373f00409", 0x4b}, {&(0x7f000000c100)="493d4c148b5f30d2fd23c2d096599f0869055f83c6d10cc7b64283995861a5c8648f5af0872c0080a06c59b5415d374f69be57da2cd60c09fd38413e21c9473ebf514f876ed155eb3eb2077930a2ea44eb9e4d783346d18ef8ae59de68b723813ad4011928fb7eb5f8a5a2ccb1c3b8399280a917f5334277c87a7a3e5747d52a27f0f50b556e834ca6bf1402dc33ec889a745e723eb9aa7d75fff3072398afba501b8212e209b5e213fbf70816f8", 0xae}, {&(0x7f000000c1c0)="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", 0xfe}, {&(0x7f000000c2c0)="6b0d133a7a5be85dda6be6078ca6be17a0b7a0f4c03e271b1316bfb87a2fbc72880ba647f4c80b38e7b5c250316a5d1d332d01cf9d683f656d88bb14d3557bd8a0628ea9f56cdc30960a881baa11f8e9acc4003301895509cc9edf6cd0968ee53933c31e417998e66c1c4da12a52bd3f7f061ea4ca556f610d4cda6fc11eac01f3", 0x81}, {&(0x7f000000c380)="3590e9175d636efcacfe424c591ee98a34659fc4f880874af3d814b7d6d83140d9a6690e955ab591c0483161ece1c32f0fb38a7a5ef427", 0x37}, {&(0x7f000000c3c0)="63df4c5b817b725fd1381089f82a6e22d4d583f9df12b8bb73b67e9588c8b5cc595b95c507142640e68d31d672eac8", 0x2f}, {&(0x7f000000c400)="f5af07d66aff77e5de078863b5fdb774a2c6c9188c54f93faa0ac89be21bc1d69a930991ef72018b2a8c2f9e401f26682f95eae36b88b9a15a6b5d94e3a220b17ede792a939b88203bc4e8aed9ccdebc9072e7ac4c1367326d90216ace2370feea826b448b0967d338ac03146ca9ac0e9b603080004300ba981ef7ba3262d528af7198d9920189b6beae0315909efe15a556cdb6ba3fa2a0ee13fc7105de0ee940f6aa2e9e32a0e01525d5c5bdb99207417c7a461d25e2e6e2f1233a8edfddf8e432eedf810b5f127d7c5ee4ee1bfce04da27c3d9b7a4bd4a7017c61b50b1d0460b2c2352ebd9939438c46ae87480075574052", 0xf3}], 0x8, &(0x7f000000c680)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x48, 0x4000000}}], 0x4, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ppoll(&(0x7f0000000080)=[{r3, 0x2}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000040)=0x200000000) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000100)) r5 = dup(r4) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000000)={0x1, r5}) connect$vsock_stream(r5, &(0x7f0000000300)={0x28, 0x0, 0x2710, @host}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004009959e40c16c39e100", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008"], 0x58}}, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f00000001c0)={'\x00', 0x68, 0x6, 0x6, 0xad, 0x3, r0}) r7 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae5af847cf809c4ee3c41512cb02c31c01801b7fdb1", 0x55}], 0x1}, 0x44000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000004c0)={'gretap0\x00', &(0x7f0000000440)={'gretap0\x00', 0x0, 0x20, 0x7800, 0x200, 0xa, {{0xc, 0x4, 0x2, 0x3, 0x30, 0x68, 0x0, 0x5f, 0x2f, 0x0, @remote, @rand_addr=0x64010101, {[@generic={0x83, 0x4, "63d9"}, @end, @timestamp_prespec={0x44, 0xc, 0x5, 0x3, 0x6, [{@local, 0x1}]}, @timestamp={0x44, 0x8, 0x30, 0x0, 0x2, [0x7]}]}}}}}) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r9, &(0x7f0000000000)=0xb00, 0x12) sendmsg$xdp(r5, &(0x7f0000000600)={&(0x7f0000000500)={0x2c, 0xc, r8, 0x32}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000540)="9bca790fd30c2cdb439fe29b3757845b91ddbd2ad9cfaf101dde188cd2dde2414fb72e788e50a30d2b49", 0x2a}], 0x1, 0x0, 0x0, 0x40000}, 0x20000000) 3m46.038667754s ago: executing program 2 (id=796): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/failslab/cache-filter\x00', 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x1000001, 0x4c032, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) write$9p(r2, 0x0, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'macvtap0\x00'}) socket(0x400000000010, 0x3, 0x0) r4 = fsopen(&(0x7f0000000000)='ubifs\x00', 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="180200000100ffff0000000000000000850000000700000085000000d000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_open_procfs(0x0, &(0x7f0000000400)='fdinfo\x00') name_to_handle_at(r6, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x400) r7 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r7, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0xfe8a}], 0x1}, 0x0) recvmsg(r7, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x7, &(0x7f0000000180), 0xfd31) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="f7edad2ffcffffffff0000000000", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x9}, 0x4c) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) socket$nl_netfilter(0x10, 0x3, 0xc) 3m44.741419872s ago: executing program 2 (id=804): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x50601, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x1000001, 0x4c032, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) sendmmsg$inet6(r2, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x400, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r3, {0x4, 0x1}, {0x2, 0xffff}, {0x0, 0xc}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xa2b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8801}, 0x20000040) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x500}, 0x38) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r0, @ANYBLOB="5f713de43b7b7276d2e6e0877fa2b440576c50780f00b6c5395c57b39fd955e39a1cdf4ef35cbce3dbf10da41b89472e1bf190fed660e5204944dab2b6c3859086ef94493c4d5bb638ed9899b8ebc64c197a93ea25603f72e1157ab8dc11979d2335fa"], 0x24}}, 0x44004) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) r7 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r7, 0x800442d4, &(0x7f0000000340)=0x9) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='pids.events\x00', 0x26e1, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000840) close(0x4) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4040aea0, &(0x7f0000000180)=@x86={0x0, 0xf, 0x1, 0x0, 0xf6, 0x1, 0x9, 0x29, 0x0, 0x5, 0x6, 0x81, 0x0, 0x94ca, 0x2a, 0x86, 0x13, 0x6, 0xe, '\x00', 0x0, 0xfffffffffffffff8}) ioctl$KVM_RUN(r8, 0xae80, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=@newqdisc={0xe8, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0x9, 0xffff}}, [@TCA_STAB={0xc4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x3, 0x0, 0x6, 0x0, 0xf1f, 0x7, 0x1}}, {0x6, 0x2, [0xfa61]}}, {{0x1c, 0x1, {0xff, 0x3, 0x4, 0x4, 0x1, 0x1, 0xd, 0x3}}, {0xa, 0x2, [0x8001, 0x2, 0x1]}}, {{0x1c, 0x1, {0x3, 0x9, 0xd0df, 0x9, 0x2, 0x6, 0x4, 0x4}}, {0xc, 0x2, [0x1ff, 0x1000, 0x1ff, 0x24]}}, {{0x1c, 0x1, {0x2, 0x1, 0x81, 0x20a2, 0x2, 0x80, 0x0, 0x3}}, {0xa, 0x2, [0x6, 0x4, 0x1]}}, {{0x1c, 0x1, {0x8, 0x8, 0x8, 0x5, 0x0, 0x7, 0xfffffe00, 0x2}}, {0x8, 0x2, [0x1, 0x1]}}]}]}, 0xe8}}, 0x0) 3m44.018016995s ago: executing program 2 (id=806): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='wwnn=0x3333333333333333,wwpn=0x4444444444444444,roles=-2,lpwwnn=0x1111111111111111,lpwwpn=0x0222222222222222', 0x6c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x800, 0x4, 0x0, 0x0, @irqchip={0x8, 0xc8}}]}) close(r2) 3m43.746105885s ago: executing program 2 (id=809): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = io_uring_setup(0x2e05, &(0x7f00000001c0)={0x0, 0x5acf, 0x40, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000240)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0xf4000000}) 3m42.453559207s ago: executing program 2 (id=816): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x3c1, 0x3, 0x29c, 0xc8, 0x111, 0x4b4, 0xc8, 0xd4feffff, 0x1d4, 0x20a, 0x278, 0x1d4, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffff00, 0xff], [0x0, 0x0, 0x0, 0xffffffff], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0xa4, 0xc8}, @common=@inet=@TCPMSS={0x24, 'TCPMSS\x00', 0x0, {0x7}}}, {{@ipv6={@loopback, @loopback, [0x0, 0xffffffff, 0xffffffff], [0x0, 0x0, 0x0, 0xff], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa4, 0x10c}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x20, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x2f8) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbfs(&(0x7f0000000000), 0x77, 0x101341) r1 = gettid() (async) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="020300090a0000000000000000000000030006000000000002000000fd1414000000000000000000020001000000000000000002fffffffb030005000000000002000000000000000000000000000000c9cb8c463843f41976dfe9fe674d72b1fd3f90a3d417b1043a198ee752902e387d77b0c946c68cf54ed8ac16eb829e0150961673ca881301d3a9ec003e233673d83a2061ad18146cc39c5e59cd1910912dd907bf2251dd5d78fd7354b5f19448"], 0x50}}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x12}, 0x0, 0x0, 0x0, 0x4}}, 0xe8) (async) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmsg$key(r2, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="bed200099400000005140000ffaf966cabd08f"], 0x10}}, 0x0) (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x1}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) r4 = socket$inet6_udp(0xa, 0x2, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x2) (async) fsopen(0x0, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2c41, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x2, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x0, 0xff, 0x8, 0x1, 0x2}, 0x20) (async) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/gser.usb0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000000400)='\n', 0x1) 3m26.573280645s ago: executing program 34 (id=816): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x3c1, 0x3, 0x29c, 0xc8, 0x111, 0x4b4, 0xc8, 0xd4feffff, 0x1d4, 0x20a, 0x278, 0x1d4, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffff00, 0xff], [0x0, 0x0, 0x0, 0xffffffff], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0xa4, 0xc8}, @common=@inet=@TCPMSS={0x24, 'TCPMSS\x00', 0x0, {0x7}}}, {{@ipv6={@loopback, @loopback, [0x0, 0xffffffff, 0xffffffff], [0x0, 0x0, 0x0, 0xff], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa4, 0x10c}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x20, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x2f8) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbfs(&(0x7f0000000000), 0x77, 0x101341) r1 = gettid() (async) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="020300090a0000000000000000000000030006000000000002000000fd1414000000000000000000020001000000000000000002fffffffb030005000000000002000000000000000000000000000000c9cb8c463843f41976dfe9fe674d72b1fd3f90a3d417b1043a198ee752902e387d77b0c946c68cf54ed8ac16eb829e0150961673ca881301d3a9ec003e233673d83a2061ad18146cc39c5e59cd1910912dd907bf2251dd5d78fd7354b5f19448"], 0x50}}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x12}, 0x0, 0x0, 0x0, 0x4}}, 0xe8) (async) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmsg$key(r2, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="bed200099400000005140000ffaf966cabd08f"], 0x10}}, 0x0) (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x1}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) r4 = socket$inet6_udp(0xa, 0x2, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x2) (async) fsopen(0x0, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2c41, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x2, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x0, 0xff, 0x8, 0x1, 0x2}, 0x20) (async) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/gser.usb0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000000400)='\n', 0x1) 3m22.734536169s ago: executing program 4 (id=896): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000780)={'macvlan0\x00', 0x400}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000080)={0x10000, 0x3d, 0x6, 0x5, 0x6, "cb320a95a94ed57be9a57ff9691bad949023de", 0x0, 0x3}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, {0xe}, {0x0, 0x9}, {0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4044084}, 0xc000) 3m22.538192608s ago: executing program 4 (id=899): r0 = openat$ptmx(0xffffff9c, &(0x7f0000000000), 0x400000, 0x0) openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000080)="2a18", &(0x7f00000000c0)=@udp=r1, 0xfcb979ae8705025a}, 0x1c) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r2 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/197, 0xc5}, {&(0x7f0000000240)}, {&(0x7f0000000280)=""/37, 0x25}, {&(0x7f00000002c0)=""/117, 0x75}], 0x4, &(0x7f0000000380)=""/9, 0x9}, 0x40012043) (async) ioctl$TCFLSH(r0, 0x540b, 0x1) (async) r3 = openat$snapshot(0xffffff9c, &(0x7f0000000400), 0x40, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000780)={'syztnl1\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x4, 0xb, 0x7, 0x7, 0x2a, @empty, @dev={0xfe, 0x80, '\x00', 0x14}, 0x20, 0x8, 0x9, 0x2}}) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000007c0)={'vxcan1\x00', 0x0}) sendmsg$inet(r2, &(0x7f0000000900)={&(0x7f0000000440)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000480)="c5cd00749c3ddf1738c6c51d8f7427eddcb23f7be1e306e7d8c8b1c9f9db6a7afa0f4ff77cd4a70efe521b1cb2105325", 0x30}, {&(0x7f00000004c0)="bdc180ce7b36e6cedbd66f15808a07fa7816d86083c7e6c55a90e489c9cf4c8c55005fb8cdb1c1df2fac99493d388f369b2b3facd5e2e969abfcbae1385098fd62ea85abc45bc25d89a2f6b218ed7ef685ade787f0079e6e3f2fa065fe7f21d82febe6849d6f856f13f58a2c1e22f8722378f8529ff51e0a9f2ab5cf688c1cc7fa8c834f381883587ed4476e784e6a7c805519a8b2c321dd8b14d255287767007a147df12d2c22b3360846dbf09e7a", 0xaf}, {&(0x7f0000000580)="9a9b784c9ed2d89c75802bb6704938a245ea8278a5b73774f5c9b8f7eca19314844d3eda85856be5f2caeb2a138c", 0x2e}, {&(0x7f00000005c0)="03c3f5ddafc10fd5367a04e89a17f8d80f2fa940e314dc6dad8faa41147431909aea3bd4041bde605eb830e8b6bf8e51f7bada95dc282dde49ad189c93e1548cd1eed16776d30e2ae0ff21f66f4932a2d46532ee0ccaa676f2b5c7698695fe09ea003e4d5bd12078297e672547477e89c4b6814b587cff05ad54968e0a997efb4f48097f3dc62bff6fca48d71707edec911524cad9f1d8e2e27c18f882b91f1b6e46c328911e2845ec322f1975c709f0f000cb4ac6672e624a", 0xb9}, {&(0x7f0000000680)="244d78454eac8cd651eadbc3cfc1c94090a90e1b74a39c8d70a3e964c5f26839d4c521e05ff2d94d15e7fdef6b", 0x2d}], 0x5, &(0x7f0000000800)=[@ip_pktinfo={{0x18, 0x0, 0x8, {r4, @remote, @private=0xa010102}}}, @ip_ttl={{0x10, 0x0, 0x2, 0x200}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x3}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x9}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r5, @private=0xa010102, @broadcast}}}, @ip_retopts={{0x68, 0x0, 0x7, {[@noop, @noop, @lsrr={0x83, 0x17, 0x30, [@broadcast, @rand_addr=0x64010101, @rand_addr=0x64010101, @private=0xa010100, @multicast2]}, @end, @cipso={0x86, 0x27, 0x3, [{0x0, 0x11, "7e3dca2d7b604cb5b44bc228d4685d"}, {0x7, 0x7, '5\x005VJ'}, {0x6, 0x3, "e2"}, {0x7, 0x6, "280ca066"}]}, @ra={0x94, 0x4}, @rr={0x7, 0x17, 0xb4, [@loopback, @private=0xa010102, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2]}]}}}, @ip_ttl={{0x10, 0x0, 0x2, 0x3}}], 0xd8}, 0x80) (async, rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r6, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, r7, 0x2, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x71}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) ioctl$VIDIOC_S_FREQUENCY(r3, 0x402c5639, &(0x7f0000000a80)={0x9, 0x5, 0x3}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000b00), r6) sendmsg$IPVS_CMD_GET_INFO(r6, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x64, r8, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x62}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xe4}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x29}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5e}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x1) (async) socket$rds(0x15, 0x5, 0x0) (async) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000c40)) r9 = openat$cachefiles(0xffffff9c, &(0x7f0000000c80), 0x101081, 0x0) (async, rerun: 64) r10 = openat$rdma_cm(0xffffff9c, &(0x7f0000000cc0), 0x2, 0x0) (async, rerun: 64) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000d00)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r10, &(0x7f0000000d80)={0xf, 0x8, 0xfa00, {r11, 0xc}}, 0x10) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001e00)={0x1, &(0x7f0000000dc0)="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", &(0x7f0000001dc0)=@tcp6=r9, 0x1}, 0x1c) (async, rerun: 64) r12 = openat(r9, &(0x7f0000001e40)='./file0\x00', 0x80, 0x10) (rerun: 64) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r3, 0x4008ae48, &(0x7f0000001e80)=0x70000) (async) sendmsg$DEVLINK_CMD_PORT_SPLIT(r9, &(0x7f0000001fc0)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f00)={0x44, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8008}, 0x44) (async) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r12, 0x84, 0x21, &(0x7f0000002000), 0x4) 3m21.527906899s ago: executing program 4 (id=901): rseq(0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)=ANY=[@ANYBLOB="200000f22c000701feffffff010000e1047c00000c00018008001600a43453ca9939d6cedca88b82ee84ecb84901950e54ecba004a4621b4d8df138896d587e19319be1098b94a36af48c612de34983babf70dfe9879a8281cbd9aa741d03ce9e18616f23e2cd0d57199396b3598ad8755e7297c96e7143b26bfda6a1e99e33ef979cda99d38383daf60d2fcc4d08de25068acbd0e7367bbcf75faf701124e55db414fc86f94b7408a4e0648004480578a7c3515026a06bbde", @ANYRES32=0x0, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x488d1}, 0x400c850) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) listns(0x0, 0x0, 0x0, 0x0) r2 = accept4$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x2, 0x0, @remote}, &(0x7f0000000180)=0x10, 0x100000) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100008002004e20ac1e0101000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000300000002004e247f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e21ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e23e000000200"/524], 0x20c) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, 0x0, 0x20000800) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x6375, 0x200) prlimit64(0x0, 0xf, &(0x7f0000000140)={0x20000cf}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000000c0)={0x0, 0x0, 0x80800, 0x0, 0xffffffffffffffff}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, 0x0, 0x404c040) close(0xffffffffffffffff) r5 = syz_open_dev$sndpcmp(&(0x7f0000000580), 0x1, 0x14201) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r5, 0xc25c4110, &(0x7f0000000780)={0x3000000, [[0x7fff, 0x2, 0x0, 0x0, 0x1, 0x10000], [0xfffffffc, 0x40000e89, 0x0, 0x0, 0x6, 0x4], [0x403, 0x2000c, 0x0, 0x20, 0x0, 0x6]], '\x00', [{0x5, 0x9}, {}, {0x0, 0x1}, {0x0, 0x10000}, {0x1002}, {0xfffffffe}, {0x4, 0xffffff01}, {0x0, 0x4}, {0xfffffffe, 0x4}, {0x0, 0xffffffff}, {}, {0x2}], '\x00', 0x100}) ioctl$OCFS2_IOC_REFLINK(0xffffffffffffffff, 0x40186f04, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000600), r4) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f00000006c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r6, 0x10, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0xbca}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket(0xd, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000440), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) setrlimit(0x7, &(0x7f0000000480)={0x4, 0x200003}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES16=r6], 0x48) sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f0000000080)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="600009546acdf9c38092f75063271e348296d7bd518fbd4e4dfb00", @ANYBLOB="2bc3cb5b9c349a5286f1e591993cd75c4cbdd08cc6397d373a92e3fede3965043ab81e46e402583e65405df5b18ecbd158d241cab9356977d4884673b7f99b26bb0e53b7de7c57860503977e02c2fd492f0f36c30e6920a914ed07b48973ca5d056d8375adc990ec468cd9b3ea0d8a70dbdf8e4f1b2b52969dbccd6d832e5f0022103be5a2d959de26bb2fe6ab022f318f698e43331552aa93cd524cd40a866e144f802647c3f17d5ae37b396788", @ANYRESOCT=r1], 0x60}, 0x1, 0x0, 0x0, 0x880}, 0x50) 3m21.147722503s ago: executing program 4 (id=904): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000080)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) r3 = mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x6, 0x3000001, 0x50, r1, 0x20000000) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000480)) syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x2, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f0000000280)=@IORING_OP_READV_FIXED={0x3c, 0x5c, 0x4004, @fd, 0x9, 0x0, 0x0, 0x4, 0x0, {0x1, 0x0, 0x5, '\x00', 0x0, 0xffffffffffffffff}}) syz_ublk_add_dev(r1, r3, r5, r9, &(0x7f0000000340)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0x750, 0x0, 0x0, 0x1000, 0xfff, 0xffffffffffffffff, 0x0, 0x82}}}, &(0x7f00000003c0)) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500190002000000080009000400000008000b0005000000080097004e214e22080001"], 0x5c}}, 0x8000) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}, 0x1, 0x0, 0x0, 0x40801}, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) 3m20.980828734s ago: executing program 4 (id=905): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000001c0)={0x8, "b546baa5cc590d30d4d8b40d29968173b959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000780)={"b93b0500000000000000c1fb10628c8ebb0ddd5f497e5600", r2}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x300, 0x0, 0x2, 0x1, 0x6, 0xb}, 0x20) socket$nl_route(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r2) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x840) syz_open_dev$sg(&(0x7f00000003c0), 0x1, 0x40002) r6 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r6, &(0x7f0000000180)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x2, @remote, 0x200000}}, 0x80, 0x0, 0x0, &(0x7f00000003c0)=[{0x10, 0x110, 0x1, "dc"}], 0x10}, 0x40) close_range(r4, 0xffffffffffffffff, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c646566e1756c745f7065726d697373696f6e732c6d61785f726561643d3078303030703030303030785f726561643d3078303030303030303030303030396231642c6d697373696f6e732c000000000000000000000800"]) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r8, 0x0, 0x2, &(0x7f0000000200)={0xfbfa, [0x22c328cb, 0x2], 0x7}, 0x10) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x80, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000000c0)=0xf) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r7}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x16, &(0x7f0000000600)=ANY=[@ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x36}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0500000000000000000000000000400000"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000140)="70134285474c1508cfe2", 0x7ff, r10, 0x4}, 0x38) 3m20.858561841s ago: executing program 4 (id=906): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000003f40)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001840)={0x10, 0x1001}, 0x10}], 0x1}, 0x10) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0105500, &(0x7f0000000000)=ANY=[@ANYBLOB="a1"]) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) listns(&(0x7f0000000000)={0x20, 0x0, 0x0, 0x10000000, 0x0, 0xfffffffffffffff1}, 0x0, 0x0, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi0\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000007, 0x13, r1, 0x0) 3m20.438249474s ago: executing program 5 (id=910): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x103200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x400448cb, 0x0) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r6, 0x4068aea3, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000080), &(0x7f00000000c0)=0x8) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x400000b0, 0x0, 0x7fff}, {0x400000b1, 0x0, 0x8}]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3m20.238855107s ago: executing program 5 (id=912): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd70f0e37ef45f048c3100180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20000805}, 0x8000) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4, 0x0, 0xffbd}}, 0x26) r4 = accept4(r2, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @local}}, &(0x7f0000000140)=0x80, 0x80800) r5 = syz_open_dev$vim2m(&(0x7f0000000040), 0x8, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r5, 0xc0d05604, &(0x7f00000001c0)={0x2, @vbi}) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r4) syz_emit_ethernet(0x6f, &(0x7f0000000640)={@random="b9200ccf188c", @random="ada1d50109bc", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0x61, 0x0, 0x0, 0xa, 0x11, 0x0, @empty, @empty}, {0x4e23, 0x4e20, 0x4d, 0x0, @opaque="361c3bc3105908202c8312ce6a3ecfb4f817260261b8d0f8edb283c8cd432fb15ee65932a0130c74fd9a26fca77226d8b339bc5442ac8924dd010d3f6b0b9b272397d4c987"}}}}}, 0x0) 3m20.188708071s ago: executing program 5 (id=913): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000080)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) r3 = mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x6, 0x3000001, 0x50, r1, 0x20000000) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000480)) syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x2, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f0000000280)=@IORING_OP_READV_FIXED={0x3c, 0x5c, 0x4004, @fd, 0x9, 0x0, 0x0, 0x4, 0x0, {0x1, 0x0, 0x5, '\x00', 0x0, 0xffffffffffffffff}}) syz_ublk_add_dev(r1, r3, r5, r9, &(0x7f0000000340)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0x750, 0x0, 0x0, 0x1000, 0xfff, 0xffffffffffffffff, 0x0, 0x82}}}, &(0x7f00000003c0)) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500190002000000080009000400000008000b0005000000080097004e214e22080001"], 0x5c}}, 0x8000) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}, 0x1, 0x0, 0x0, 0x40801}, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) 3m17.19004126s ago: executing program 5 (id=927): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x4080, &(0x7f0000002ac0)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4000, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd}}}}}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb0800450000380000000000019078ac1e0001ac1414aa030409781200183f250287a67f05a33f52000800000000000000000100186371ae9b1c03"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x3, 0x1, 0x7fff0001}]}) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) llistxattr(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_procfs$userns(0x0, &(0x7f0000000040)) brk(0x0) 3m16.939992125s ago: executing program 5 (id=930): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) r2 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r2, &(0x7f0000000200)={0x2, 0x4e1e, @local}, 0xc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x101, 0x8001, &(0x7f0000000840)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r3, &(0x7f0000000000)='7', 0x1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) socket$packet(0x11, 0x3, 0x300) fsync(0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1}, 0x90) 3m16.806427574s ago: executing program 5 (id=933): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000680)={'macvlan0\x00', &(0x7f0000000580)=@ethtool_rx_ntuple={0x35, {0x3, @sctp_ip4_spec={@broadcast, @initdev={0xac, 0x1e, 0x81, 0x0}, 0x4e22, 0x4e20, 0x4}, @udp_ip4_spec={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x4e23}, 0x0, 0xdbb8, 0x2, 0x1, 0xffffffffffffffff}}}) syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x22020600) pselect6(0x40, &(0x7f0000000000)={0x9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101381) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="01000000cf7676eab1e49e3f8456c2c03bd54893d8493b302fd8680844735eafb50f4872fbdca9650b27e75151fbf4b7f2f2659af96e6630566164b0384e1f057696cff5cd268539ac9e9b57473ed7c4540f0625908101332c8ca91c6c98978441a7fee1d72127e6957b0773361d7e5a89ed4e331d413cf562e5e84ae692fd362d55ce4957a241210000000060475edc20349c70fc97f9223c72bdbe43ef1b572d9e7591762bf3df916ef4e3a85e4a9b6469abc3bf63f706b7e1aa2227809348a2a16881c4ce7307665d0c91d75edb853aa2cd832263c4f77bf132cbbf6525674c", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000001c00018008000300ac1e000106000100020000000500020001000000"], 0x30}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)={0x38, r5, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x38}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r3, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000300)=0x300000000) r6 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r6, 0x6b, 0x2, &(0x7f0000000500), 0x4) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), r3) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00022abd7000ffdbdf250300000008000300e0fe61fd9fbb4d176e0000000000000006000000020000000600000014000100fe8000000000000000000000000000aa08000300631802000014000100fe80000000000000000000000000002f14000100fe8000000000000000000000000000bb241742817f216a8b73757e907b833f08db043b85c906340f1b73f6571c03da2b81edd86197923decc21597ac745b7b559d1e274fdbd1012a8cf0b119539602004d9f8f244722f78cff233b2854fab38564e301756c4c3dcb714ef89871e34eb6921c1d6545b58713d8aacc534f5053914471fa396c0745d1d9f4dc8ea844de43b5c2f9935ba10befcbe1a1328594120c5bfb6e8305ab624bd3e5f7cef93b0494e515ca373a2a0d2e3dc13fc8a4ed4beac215950cd60d62bcefa9118be400631856c84cdfe2301946fe6a0e16a413d562cb53127fcf3d65f563a0037feb6b2b9ca1d554c30e5bb48526faa5eb1f707d6cff6f21e4"], 0x78}}, 0x80c0) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000040)='wg2\x00', 0x4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) r8 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r9 = getpid() r10 = syz_pidfd_open(r9, 0x0) write$binfmt_register(r8, &(0x7f0000000140)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x2, 0x3a, '[[#', 0x3a, '/proc/sys/fs/binfmt_misc/register\x00', 0x3a, './file0'}, 0x4c) setns(r10, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x8100, &(0x7f0000000200)={0x87, 0x1, 0x80000}, 0x20) 3m5.75734814s ago: executing program 35 (id=906): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000003f40)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001840)={0x10, 0x1001}, 0x10}], 0x1}, 0x10) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0105500, &(0x7f0000000000)=ANY=[@ANYBLOB="a1"]) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) listns(&(0x7f0000000000)={0x20, 0x0, 0x0, 0x10000000, 0x0, 0xfffffffffffffff1}, 0x0, 0x0, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi0\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000007, 0x13, r1, 0x0) 3m1.291903631s ago: executing program 36 (id=933): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000680)={'macvlan0\x00', &(0x7f0000000580)=@ethtool_rx_ntuple={0x35, {0x3, @sctp_ip4_spec={@broadcast, @initdev={0xac, 0x1e, 0x81, 0x0}, 0x4e22, 0x4e20, 0x4}, @udp_ip4_spec={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x4e23}, 0x0, 0xdbb8, 0x2, 0x1, 0xffffffffffffffff}}}) syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x22020600) pselect6(0x40, &(0x7f0000000000)={0x9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101381) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="01000000cf7676eab1e49e3f8456c2c03bd54893d8493b302fd8680844735eafb50f4872fbdca9650b27e75151fbf4b7f2f2659af96e6630566164b0384e1f057696cff5cd268539ac9e9b57473ed7c4540f0625908101332c8ca91c6c98978441a7fee1d72127e6957b0773361d7e5a89ed4e331d413cf562e5e84ae692fd362d55ce4957a241210000000060475edc20349c70fc97f9223c72bdbe43ef1b572d9e7591762bf3df916ef4e3a85e4a9b6469abc3bf63f706b7e1aa2227809348a2a16881c4ce7307665d0c91d75edb853aa2cd832263c4f77bf132cbbf6525674c", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000001c00018008000300ac1e000106000100020000000500020001000000"], 0x30}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)={0x38, r5, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x38}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r3, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000300)=0x300000000) r6 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r6, 0x6b, 0x2, &(0x7f0000000500), 0x4) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), r3) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="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"], 0x78}}, 0x80c0) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000040)='wg2\x00', 0x4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) r8 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r9 = getpid() r10 = syz_pidfd_open(r9, 0x0) write$binfmt_register(r8, &(0x7f0000000140)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x2, 0x3a, '[[#', 0x3a, '/proc/sys/fs/binfmt_misc/register\x00', 0x3a, './file0'}, 0x4c) setns(r10, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x8100, &(0x7f0000000200)={0x87, 0x1, 0x80000}, 0x20) 8.632034727s ago: executing program 6 (id=1857): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000080)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) r3 = mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x6, 0x3000001, 0x50, r1, 0x20000000) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000480)) syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x2, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, r9, 0x0) syz_ublk_add_dev(r1, r3, r5, r9, &(0x7f0000000340)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0x750, 0x0, 0x0, 0x1000, 0xfff, 0xffffffffffffffff, 0x0, 0x82}}}, &(0x7f00000003c0)) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500190002000000080009000400000008000b0005000000080097004e214e22080001"], 0x5c}}, 0x8000) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}, 0x1, 0x0, 0x0, 0x40801}, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x480, 0x3, 0x0, 0x0, 0x0, 0x1}, 0x14, 0x0) 5.460224968s ago: executing program 6 (id=1883): r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000080)={{0x3, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r5, 0x54a1) write$nci(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="7200050109189bccc457b4aa98a7bda9a9e1c5f3d8f0ee12ba18980bc32589411527c93100c88149cf4667e4de3ba849e1ca55677cc971035c1fe53aeabb3ff8c7d1d9618955ba467909ada0a22c0803527c3e88e832c1bd3df1d7f1431adf396cf5c3fe58a689833c0d6b8ea5dede791fe361a40ed0b8e6de0693beceb16e64af8aeb2a873cc9639d256e8310a06253ef30f587ac2471ea4bc3bcd860ace28a9dc5e8e1d72d8c8fceea9332532804007f7437e62631b9ec681f95ae1d1306db387558f7ff59e12eaa01d158a69c1dfbeb0684fc32176d43b648ed483689890f8089d9d3f704ff381299df3b79c14cb2fe65e9def1be18"], 0x8) write$nci(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="4100010078ad03875b850bf549f976b72a0249c1b7b29f6e38eeb79784aa12e2678d9ba2affddd0d7a7de577bcf6980e420e4265b64faf3447783cb7ae759bb4024ecbf515440c0e4b94886cd1e48fc63627a24920799b8db8f24eaf2aaf757d5ed3919368fd1e2d8ddd54df7b29ccfbce4fc49381f2a8"], 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x14, r4, 0x1, 0x123, 0x40000234}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x0) write$nci(r0, &(0x7f0000000300)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x2}, 0x5) r6 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f0000000280)=@IORING_OP_EPOLL_WAIT={0x3b, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[{0x80000000}], 0x1, 0x0, 0x1}) io_uring_enter(r6, 0x2000, 0xfffffffd, 0x324e51b73ad39f18, 0x0, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000680), 0x8280, 0x0) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r10, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x1c}}, 0x4010) write$nci(r0, 0x0, 0x0) ioctl$XFS_IOC_GETPARENTS(r5, 0xc028583e, &(0x7f0000000640)={{[0x1, 0x2, 0xa06, 0x7]}, 0x0, 0x0, 0x4, 0x0, &(0x7f00000004c0)=[{{@_ha_fsid={[0xa, 0x9]}, {0x6, 0x7, 0x7f, 0x7fff}}, 0x9, 0x0, '\x00'}, {{@_ha_fsid={[0x100, 0xdc70]}, {0x9, 0xfc5, 0xb, 0x7}}, 0x6, 0x0, 'nfc\x00'}, {{@_ha_fsid={[0x0, 0x2]}, {0x9, 0x8, 0xff, 0x7fffffff}}, 0x4000657d, 0x0, '\x00'}, {{@align=0xa8, {0x6, 0x409f, 0x6, 0x5}}, 0x1ad, 0x0, '\x15\x00'}, {{@_ha_fsid={[0x9, 0x5]}, {0xd, 0xfffb, 0x5, 0x1}}, 0x1cd, 0x0, '/dev/virtual_nci\x00'}, {{@align=0x3, {0xe, 0x7, 0x101}}, 0xb07, 0x0, '!!$]}+\\+){%\x00'}, {{@_ha_fsid={[0xc0, 0x4]}, {0x4, 0x0, 0xfffffff7, 0x40}}, 0x7ff, 0x0, '[!{[\'#\x00'}, {{@_ha_fsid={[0x8000]}, {0x4, 0x5, 0xff, 0x7}}, 0x7, 0x0, '[/\\\\\x00'}, {{@align=0x40, {0xe, 0x5, 0xd, 0x54}}, 0x1000, 0x0, 'nfc\x00'}, {{@_ha_fsid={[0x69df9abb, 0x7fffffff]}, {0x1, 0x5, 0xfffff7e6, 0xc0}}, 0x1, 0x0, 'nfc\x00'}]}) r11 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r11, 0x6b, 0x3, &(0x7f0000000380), &(0x7f00000003c0)=0x4) 5.047761727s ago: executing program 8 (id=1886): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001380)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd24, 0x25df5bfd, {0x0, 0x0, 0x0, r5, {0x5, 0xa}, {}, {0x7}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xfff1, 0xd}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c8dd}, 0x20004804) 4.866805971s ago: executing program 8 (id=1887): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000200000000000a50000000060a010400000000001000000a0000010900010073797a31000000002400048020000180070001006374000014000280080002000000000608000140000000090900020073797a320000000014000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x3a00, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 4.772545009s ago: executing program 8 (id=1888): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x10000) read$FUSE(r3, &(0x7f0000000740)={0x2020}, 0x2020) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BSG_GET_RESERVED_SIZE(r3, 0x2272, &(0x7f00000000c0)) r6 = dup(r5) getsockopt$inet_sctp_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000180)={0x0, 0x7fff, 0x4, 0x2, 0x465, 0x6, 0xffff, 0x0, {0x0, @in6={{0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}}, 0x7fff, 0x2089, 0x6, 0x2, 0x749b}}, &(0x7f0000000240)=0xb0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x5) r8 = eventfd2(0x0, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x0, &(0x7f0000000280)={0x5, {{0x2, 0x4e21, @multicast1}}, {{0x2, 0x4e22, @multicast1}}}, 0x104) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi={{0x22, 0x1d}, {0x2, [{@none, 0x80, 0x1, "995988", 0xea, 0x6}, {@none, 0x0, 0x3, '$P*', 0x5, 0x6}]}}}, 0x20) io_setup(0x4, &(0x7f0000000080)=0x0) io_pgetevents(r9, 0x2, 0x2, &(0x7f0000000100)=[{}, {}], 0x0, 0x0) io_pgetevents(r9, 0x1, 0x1, &(0x7f0000000480)=[{}], 0x0, 0x0) io_submit(r9, 0x2, &(0x7f00000000c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffe, r7, 0x0, 0x0, 0x0, 0x0, 0x3, r8}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, r7, 0x6a855000) shutdown(r7, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x48, r1, 0x5, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0xffffffffffffff2b, 0x12, 0x64}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x48}}, 0x24) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r1, 0x2, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x6, 0x64}}}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x1, 0x1, 0x3, 0x0, {0xf, 0x7, 0x0, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x300, 0x1, 0x76}}, @NL80211_ATTR_SSID={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20044044}, 0x20000040) 3.705800762s ago: executing program 8 (id=1889): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000000c060101000000000000000000000004050001009e"], 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8feffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r4, 0x5, 0x14, 0x0, &(0x7f00000001c0)="2e9a53f271a76d2608004c6588a80a38667d2f15", 0x0, 0xd0e, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) listen(0xffffffffffffffff, 0x5) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000480)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x8080, 0x7, 0xbb, 0xffffd45d, {{0xa, 0x4, 0x3, 0x0, 0x28, 0x65, 0x0, 0x0, 0x2f, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x25}, {[@timestamp_addr={0x44, 0x14, 0xd, 0x1, 0x5, [{@local, 0x4}, {@multicast2, 0x3}]}]}}}}}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff, '\x00', r6, r0}, 0x50) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r10 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r9, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) r11 = syz_open_dev$video(&(0x7f0000000040), 0x8000000a7, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r11, 0xc0185647, &(0x7f0000000080)={0xf0003e7, 0x1, 0x200006, 0xffffffffffffffff, 0xffe7, &(0x7f0000000000)={0x980912, 0xe43, '\x00', @value=0x5}}) 3.233903712s ago: executing program 0 (id=1894): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xc, 0xa96}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x70, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r2, {0xc, 0x3da48c8682330ab8}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x86, 0x2}, {0x0, 0x7}}}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x1, 0x7, 0x4}, {{0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x2400508c}, 0x4880) (fail_nth: 3) 2.683683502s ago: executing program 8 (id=1895): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYRES64=0x0, @ANYRES16, @ANYRES16], 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mount(&(0x7f00000002c0)=@nullb, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='ntfs3\x00', 0x1000080, 0x0) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r5, 0x0, 0x0}, 0x20) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r6, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/40, 0x28}], 0x1, 0x3c, 0x9) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc04c565d, &(0x7f0000000100)=@multiplanar_userptr={0x200, 0x4, 0x4, 0x10000, 0x40, {0x77359400}, {0x1, 0x2, 0x96, 0xa, 0x3, 0x3, "67a75ac7"}, 0x1ff, 0x2, {&(0x7f0000000340)=[{0x7f, 0x4ab, {&(0x7f0000000240)}, 0xe28c}, {0x101, 0x6, {&(0x7f0000000280)}, 0x6}]}, 0x2399b854}) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r1, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r1, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f000000c280)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="14030000300001000001000004000000010300800c0001"], 0x314}], 0x1}, 0x800) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup(r4, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x37, 0x0, 0xfffffffe, 0x0, 0x10000, @value=r6}, 0x28) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0), 0x12) syz_usb_connect(0x0, 0x39, 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r7, 0x400448ca, 0x0) ioctl(r7, 0x400448c9, 0x0) 2.67865363s ago: executing program 0 (id=1905): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x92040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r3, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000024c0)=@newtaction={0x9c, 0x30, 0x58f, 0x70bd2d, 0x0, {}, [{0x88, 0x1, [@m_ctinfo={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x1000, 0x0, 0x0, 0x0, 0xfffffffd}, @local, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20048042}, 0x8000) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) chdir(0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000044) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) unshare(0x6a040000) write(r4, &(0x7f0000000000)='14', 0x2) unshare(0x6a040000) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x13, &(0x7f0000000080)=[0x3ff, 0x6], 0x2) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r0, 0xc008aec1, &(0x7f0000000380)={0xa00}) 2.270159172s ago: executing program 6 (id=1897): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b0000000d000000cc0002000600000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000040), 0x4b2, r0}, 0x38) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x20, r3, 0x8068fcc7c2ae86ff, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x44) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, r4, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x37c}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @multicast2}}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xb}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x70}}, 0x0) sendmmsg$inet_sctp(r1, &(0x7f0000009ac0)=[{&(0x7f0000000880)=@in={0x2, 0x4e21, @private=0xa010100}, 0x10, &(0x7f0000000bc0)=[{&(0x7f00000008c0)="1d", 0x1}], 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="1400000084000000000003000200030001010e00100000008400141434287ec4b281e95565b8926d5a07000000588a8e737cc15302e38866365192a79428bc439c"], 0x24, 0x1}], 0x1, 0x8ddcc1c97e7a01d0) syz_emit_ethernet(0x26, &(0x7f0000000180)={@link_local, @local, @val={@val={0x88a8, 0x7, 0x0, 0x4}, {0x8100, 0x6, 0x1}}, {@can={0xc, {{0x0, 0x0, 0x1, 0x1}, 0x5, 0x2, 0x0, 0x0, "733175ee4253a7e9"}}}}, &(0x7f0000000200)={0x0, 0x4, [0x7fc, 0x483, 0x8b7, 0x83c]}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000100), 0x9, r0}, 0x38) 2.269835765s ago: executing program 7 (id=1899): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r1], 0x78}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000100)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x2b}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x11, 0x30, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e20, 0x4e20, 0x1c, 0x0, @wg=@data={0x4, 0xfffffff5, 0x0, "261aa969"}}}}, 0x3e) 1.968212324s ago: executing program 7 (id=1900): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = openat$pmem0(0xffffff9c, &(0x7f0000000340), 0x18a00, 0x0) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000540)={0x7}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a310000000094000000060a010400000000000000000100000008000b40000000006c000480340001800b000100657874686472000024000280080001400000000c08000340000000b108000440000000220500020007000000340001800c0001006269747769736500240002"], 0x108}}, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYRES64=r2, @ANYRES32=r1], 0x78}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000010400000020040000000000000000000d040000000000000000000010040000000400000000000008030000000000000061"], 0x0, 0x52}, 0x28) setsockopt$inet_group_source_req(r1, 0x0, 0x2c, &(0x7f0000000400)={0x10, {{0x2, 0x4e22, @loopback}}, {{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}}}, 0x104) socket$kcm(0x2, 0x3, 0x2) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r7, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0x268db4b0, 0x43}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x48000}, 0x10) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r8, 0x0, 0xcc, 0x0, 0x0) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="080008004547004e00660000401190780a010102ac1414164e204e20003a907842fb000000f4ffffae620c41d66750401c631c34d2c2032302cf1a42cac4eb22d72a47592d6149a369565ebc111b434ff273"], 0x52) 1.765207582s ago: executing program 7 (id=1901): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x6, 0x4, 0xffffff01, 0x815, 0x10, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6493790710000000000080000b2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf"], 0x0, 0x5}, 0x94) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x85, &(0x7f0000000ac0), 0x90) sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000000)="83", 0x1}], 0x1}, 0x4c0e0) 1.658156596s ago: executing program 0 (id=1902): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xc, 0xa96}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x70, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r2, {0xc, 0x3da48c8682330ab8}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x86, 0x2}, {0x0, 0x7}}}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x1, 0x7, 0x4}, {{0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x2400508c}, 0x4880) 1.585896589s ago: executing program 7 (id=1903): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000002c0)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x3402c000}, 0x0) 1.497867046s ago: executing program 7 (id=1904): r0 = syz_open_dev$mtd(&(0x7f0000000200), 0x0, 0x8000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x8840, 0xa2) mount(0x0, 0x0, &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$tipc(0x1e, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="6e6577206465664ba77e7861756c7420757365723a73797a20303030303030303030303030303030303430393600"], 0x2a, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000240)={0x40, 0x2, 0x2, 0x3}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) bind$bt_hci(r2, &(0x7f0000000240)={0x1f, 0xffff, 0x3}, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./mnt\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs\x00', 0x117) mount(0x0, &(0x7f0000000080)='./my_configfs\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) symlinkat(&(0x7f0000000200)='./my_configfs/usb_gadget/g1/functions/obex.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./my_configfs/usb_gadget/g1/configs/c.1/obex.usb0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./mnt/usb_gadget/g1/functions/geth.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000380)='./mnt/usb_gadget/g1/functions/geth.usb0\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./mnt/usb_gadget/g1/configs/c.1/geth.usb0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000000540)='dummy_udc.0', 0xb) copy_file_range(r1, &(0x7f0000000000)=0x1, r1, &(0x7f0000000040)=0x8, 0x2, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000e00)={0xfc, {"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", 0x1000}}, 0x1006) readv(r0, &(0x7f0000001980)=[{&(0x7f0000001940)=""/13, 0xd}, {0x0, 0xffb6}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) 1.488067503s ago: executing program 0 (id=1913): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000002c0)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x3402c000}, 0x0) 1.428081178s ago: executing program 0 (id=1906): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sendfile(r5, r4, 0x0, 0x7ffff000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_tracing={0x1a, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x70, '\x00', 0x0, 0x673b631391172388, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2653c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x24, r7, 0x1, 0x70bd2c, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x24}}, 0x18) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400109"], 0x87) socket$nl_route(0x10, 0x3, 0x0) 1.400207322s ago: executing program 6 (id=1907): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = syz_open_dev$dvb_dvr(&(0x7f0000000100), 0x4, 0x121c80) ioctl$DVB_DVR_DMX_EXPBUF(r1, 0xc00c6f3e, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x2) 1.226149823s ago: executing program 7 (id=1908): openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000340)=""/140, 0x8c}], 0x1, 0xd69d, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x88, 0x88, 0x3, [@enum64={0x5, 0x1, 0x0, 0x13, 0x0, 0x3, [{0x9, 0x9, 0x1000}]}, @int={0x10, 0x0, 0x0, 0x1, 0x0, 0x26, 0x0, 0x3a, 0x2}, @union={0x2, 0x7, 0x0, 0x5, 0x0, 0x3, [{0x8, 0x5, 0xd}, {0x4, 0x4, 0x1e1}, {0x9, 0x4, 0x2}, {0x8, 0x1, 0xed07}, {0xf, 0x5, 0x400}, {0x0, 0x3}, {0x4, 0x2, 0x4}]}]}, {0x0, [0x0]}}, &(0x7f00000008c0)=""/54, 0xa3, 0x36}, 0x28) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) madvise(&(0x7f000000f000/0x4000)=nil, 0x4000, 0xa) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtaction={0x14, 0x30, 0x1}, 0xffffffffffffffe6}}, 0x11) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000500)={0x0, 0x0, 0x1000, 0x2000, &(0x7f0000010000/0x2000)=nil}) ioctl(r4, 0x4048aec9, &(0x7f0000000600)="010000000000000001") ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x7800, 0x20, 0x9, 0x6, {{0x6, 0x4, 0x1, 0x36, 0x18, 0x64, 0x0, 0xea, 0x2f, 0x0, @broadcast, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0x4, 0xbe, 0x1, 0x4}]}}}}}) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7c, 0x10000, 0x8000, 0x4, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0x8, 0x40080000006, 0xb06c}, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x6, 0x10001, 0x5}) 1.183089561s ago: executing program 6 (id=1909): socket$inet_udp(0x2, 0x2, 0x0) r0 = fanotify_init(0x8, 0x40000) write$binfmt_elf64(r0, 0x0, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) readv(r1, 0x0, 0x0) mount(&(0x7f00000003c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0)='minix\x00', 0x200480, 0x0) readv(r1, &(0x7f00000006c0)=[{&(0x7f0000000180)=""/146, 0x92}, {0x0}], 0x2) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80383, 0x0) fsync(r2) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) keyctl$clear(0x11, 0xfffffffffffffffd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x50000, 0x0) 21.304249ms ago: executing program 8 (id=1910): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$TCSBRK(r1, 0x400455c8, 0x2) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xc0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xc0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f0000000440)={{0xa, 0x4e20, 0x7, @mcast2, 0xffff}, {0xa, 0x4e24, 0xa, @mcast1, 0x7}, 0x0, {[0x6, 0x4, 0xd, 0x8, 0x3, 0x30d0, 0x0, 0x3]}}, 0x5c) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0xffffffffffffff11, r3, 0x1, 0x4, 0x0, {{}, {@void, @val={0xc, 0x99, {0x2fc, 0x18}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1644}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE, @NL80211_ATTR_CENTER_FREQ1={0x0, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x0, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x0, 0x119, 0x9}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x0, 0x122, 0x250}, @NL80211_ATTR_CHANNEL_WIDTH={0x0, 0x9f, 0x3}]]}, 0x30}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r9 = userfaultfd(0x80001) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_CONTINUE(r9, 0xc020aa07, &(0x7f0000000380)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) setns(0xc9, 0x0) r10 = gettid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r6, 0xa23, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, r10}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008880}, 0x20000084) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x53, 0x4005, 0x1, {0x9, 0x1}, {0x2a, 0x2}, @period={0x5c, 0x3, 0x0, 0x18c, 0xe2, {0x1, 0x1, 0x5, 0x40}, 0x5, &(0x7f0000000180)=[0x80, 0x8000, 0xfff, 0xfff9, 0x6]}}) r11 = syz_open_dev$evdev(&(0x7f00000000c0), 0x1, 0x842b01) write$char_usb(r11, &(0x7f0000000040)="e2", 0x2250) syz_open_dev$sg(0x0, 0x7d97, 0x800) 9.057781ms ago: executing program 6 (id=1911): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1fb, 0x1102) (async) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x2002) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xb, &(0x7f0000000000)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r5}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x1}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000340)='\x00'/14, 0x0, 0x3b69, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000080)=0x6) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r8, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000180)={0x3c, r7, 0x6ae3e61d32b8160b, 0x0, 0x25dfdbfb, {0x4a}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x3c}}, 0x4000c00) (async, rerun: 32) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x4}) (rerun: 32) 0s ago: executing program 0 (id=1919): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sendfile(r5, r4, 0x0, 0x7ffff000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_tracing={0x1a, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x70, '\x00', 0x0, 0x673b631391172388, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2653c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x24, r7, 0x1, 0x70bd2c, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x24}}, 0x18) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400109"], 0x87) kernel console output (not intermixed with test programs): 5] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800007c0 [ 431.198988][T11885] RDX: 0000000000000044 RSI: 0000000000000000 RDI: 0000000000000000 [ 431.199002][T11885] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 431.199015][T11885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 431.199027][T11885] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 431.199056][T11885] [ 431.209821][ C2] hpet: Lost 1 RTC interrupts [ 431.707268][T10524] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 432.115842][ T8960] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 432.752719][T10524] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 433.482072][T11908] FAULT_INJECTION: forcing a failure. [ 433.482072][T11908] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 433.487402][T11908] CPU: 0 UID: 0 PID: 11908 Comm: syz.8.1525 Tainted: G L syzkaller #0 PREEMPT(full) [ 433.487433][T11908] Tainted: [L]=SOFTLOCKUP [ 433.487440][T11908] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 433.487451][T11908] Call Trace: [ 433.487458][T11908] [ 433.487467][T11908] dump_stack_lvl+0x100/0x190 [ 433.487498][T11908] should_fail_ex.cold+0x5/0xa [ 433.487524][T11908] _copy_from_user+0x2e/0xd0 [ 433.487552][T11908] tracing_set_trace_write+0xe3/0x240 [ 433.487578][T11908] ? __pfx_tracing_set_trace_write+0x10/0x10 [ 433.487601][T11908] ? lock_acquire+0x1d1/0x380 [ 433.487634][T11908] vfs_write+0x2aa/0x1050 [ 433.487653][T11908] ? __pfx_tracing_set_trace_write+0x10/0x10 [ 433.487671][T11908] ? lock_acquire+0x1d1/0x380 [ 433.487691][T11908] ? __fget_files+0x34/0x3d0 [ 433.487709][T11908] ? __pfx_vfs_write+0x10/0x10 [ 433.487724][T11908] ? find_held_lock+0x2b/0x80 [ 433.487747][T11908] ? __fget_files+0x215/0x3d0 [ 433.487772][T11908] ? __fget_files+0x21f/0x3d0 [ 433.487802][T11908] ksys_write+0x12a/0x250 [ 433.487823][T11908] ? __pfx_ksys_write+0x10/0x10 [ 433.487843][T11908] ? ksys_write+0x1ac/0x250 [ 433.487871][T11908] __do_fast_syscall_32+0x13a/0x8b0 [ 433.487896][T11908] ? lockdep_hardirqs_on+0x7d/0x110 [ 433.487920][T11908] do_fast_syscall_32+0x32/0x70 [ 433.487943][T11908] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 433.487967][T11908] RIP: 0023:0xf705efec [ 433.487988][T11908] Code: Unable to access opcode bytes at 0xf705efc2. [ 433.487997][T11908] RSP: 002b:00000000f542c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 433.488015][T11908] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000140 [ 433.488027][T11908] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000000 [ 433.488038][T11908] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 433.488048][T11908] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 433.488060][T11908] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 433.488085][T11908] [ 433.836118][ T25] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 434.065624][ T84] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 435.428367][ T25] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 436.345804][T11924] veth0: entered promiscuous mode [ 436.348790][T11924] veth0: left promiscuous mode [ 436.396852][T11924] FAULT_INJECTION: forcing a failure. [ 436.396852][T11924] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 436.396883][T11924] CPU: 3 UID: 0 PID: 11924 Comm: syz.7.1532 Tainted: G L syzkaller #0 PREEMPT(full) [ 436.396909][T11924] Tainted: [L]=SOFTLOCKUP [ 436.396917][T11924] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 436.396929][T11924] Call Trace: [ 436.396936][T11924] [ 436.396944][T11924] dump_stack_lvl+0x100/0x190 [ 436.396975][T11924] should_fail_ex.cold+0x5/0xa [ 436.397002][T11924] _copy_to_user+0x32/0xd0 [ 436.397032][T11924] simple_read_from_buffer+0xcb/0x170 [ 436.397058][T11924] proc_fail_nth_read+0x1af/0x230 [ 436.397082][T11924] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 436.397106][T11924] ? rw_verify_area+0xce/0x6d0 [ 436.397126][T11924] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 436.397148][T11924] vfs_read+0x1e4/0xb40 [ 436.397170][T11924] ? lock_acquire+0x1d1/0x380 [ 436.397197][T11924] ? __fget_files+0x34/0x3d0 [ 436.397221][T11924] ? __pfx_vfs_read+0x10/0x10 [ 436.397241][T11924] ? find_held_lock+0x2b/0x80 [ 436.397263][T11924] ? __fget_files+0x215/0x3d0 [ 436.397297][T11924] ? __fget_files+0x21f/0x3d0 [ 436.397327][T11924] ksys_read+0x12a/0x250 [ 436.397364][T11924] ? __pfx_ksys_read+0x10/0x10 [ 436.397394][T11924] do_int80_emulation+0x166/0x650 [ 436.397422][T11924] asm_int80_emulation+0x1a/0x20 [ 436.397442][T11924] RIP: 0023:0xf71975ab [ 436.397458][T11924] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 436.397477][T11924] RSP: 002b:00000000f544d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 436.397497][T11924] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000f544d5d0 [ 436.397510][T11924] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 436.397546][T11924] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 436.397558][T11924] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 436.397570][T11924] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 436.397596][T11924] [ 436.520200][ T25] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 436.974451][T11931] jffs2: notice: (11931) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 437.012281][T11931] overlayfs: upper fs does not support tmpfile. [ 437.081475][T11929] FAULT_INJECTION: forcing a failure. [ 437.081475][T11929] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 437.081510][T11929] CPU: 3 UID: 0 PID: 11929 Comm: syz.7.1534 Tainted: G L syzkaller #0 PREEMPT(full) [ 437.081563][T11929] Tainted: [L]=SOFTLOCKUP [ 437.081571][T11929] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 437.081583][T11929] Call Trace: [ 437.081591][T11929] [ 437.081599][T11929] dump_stack_lvl+0x100/0x190 [ 437.081632][T11929] should_fail_ex.cold+0x5/0xa [ 437.081657][T11929] strncpy_from_user+0x3b/0x2d0 [ 437.081691][T11929] do_getname+0x78/0x390 [ 437.081713][T11929] do_sys_openat2+0xc7/0x1e0 [ 437.081743][T11929] ? __pfx_do_sys_openat2+0x10/0x10 [ 437.081777][T11929] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 437.081826][T11929] __ia32_compat_sys_openat+0x12d/0x210 [ 437.081847][T11929] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 437.081867][T11929] ? fput+0x7c/0x100 [ 437.081894][T11929] ? ksys_write+0x1ac/0x250 [ 437.081916][T11929] ? __pfx_ksys_write+0x10/0x10 [ 437.081946][T11929] __do_fast_syscall_32+0x13a/0x8b0 [ 437.081986][T11929] ? lockdep_hardirqs_on+0x7d/0x110 [ 437.082013][T11929] do_fast_syscall_32+0x32/0x70 [ 437.082038][T11929] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 437.082063][T11929] RIP: 0023:0xf705efec [ 437.082084][T11929] Code: Unable to access opcode bytes at 0xf705efc2. [ 437.082093][T11929] RSP: 002b:00000000f542c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 437.082113][T11929] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000040 [ 437.082126][T11929] RDX: 000000000000275a RSI: 0000000000000000 RDI: 0000000000000000 [ 437.082137][T11929] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 437.082149][T11929] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 437.082165][T11929] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 437.082190][T11929] [ 437.377643][T11931] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 437.553364][ T854] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 437.721835][ C2] hpet: Lost 1 RTC interrupts [ 437.865446][ T10] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 437.879966][ T8960] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 438.624411][ T854] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 439.626308][ T25] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 439.806601][ T8947] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 439.828985][ T1438] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.829131][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.095643][T11950] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1539'. [ 440.095670][T11950] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1539'. [ 440.668751][T10524] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 440.840354][T11954] overlayfs: workdir and upperdir must be separate subtrees [ 441.611890][T11967] device-mapper: ioctl: device has been removed from the dev hash table. [ 441.635134][T11980] FAULT_INJECTION: forcing a failure. [ 441.635134][T11980] name failslab, interval 1, probability 0, space 0, times 0 [ 441.635172][T11980] CPU: 0 UID: 0 PID: 11980 Comm: syz.8.1548 Tainted: G L syzkaller #0 PREEMPT(full) [ 441.635201][T11980] Tainted: [L]=SOFTLOCKUP [ 441.635209][T11980] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 441.635221][T11980] Call Trace: [ 441.635228][T11980] [ 441.635236][T11980] dump_stack_lvl+0x100/0x190 [ 441.635268][T11980] should_fail_ex.cold+0x5/0xa [ 441.635292][T11980] should_failslab+0xc2/0x120 [ 441.635320][T11980] __kvmalloc_node_noprof+0x113/0x9b0 [ 441.635344][T11980] ? __kmalloc_cache_noprof+0x2c1/0x6d0 [ 441.635365][T11980] ? percpu_ref_init+0xec/0x3f0 [ 441.635383][T11980] ? io_alloc_cache_init+0x38/0x170 [ 441.635408][T11980] io_alloc_cache_init+0x38/0x170 [ 441.635431][T11980] io_uring_setup.cold+0x4aa/0x1c5e [ 441.635461][T11980] ? ksys_write+0x190/0x250 [ 441.635483][T11980] ? ksys_write+0x190/0x250 [ 441.635531][T11980] ? __pfx_io_uring_setup+0x10/0x10 [ 441.635572][T11980] ? do_futex+0x190/0x440 [ 441.635593][T11980] ? __pfx_do_futex+0x10/0x10 [ 441.635623][T11980] ? xfd_validate_state+0x129/0x190 [ 441.635659][T11980] __ia32_sys_io_uring_setup+0xc2/0x170 [ 441.635688][T11980] __do_fast_syscall_32+0x13a/0x8b0 [ 441.635711][T11980] ? lockdep_hardirqs_on+0x7d/0x110 [ 441.635733][T11980] do_fast_syscall_32+0x32/0x70 [ 441.635755][T11980] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 441.635778][T11980] RIP: 0023:0xf705efec [ 441.635798][T11980] Code: Unable to access opcode bytes at 0xf705efc2. [ 441.635807][T11980] RSP: 002b:00000000f544d4bc EFLAGS: 00000282 ORIG_RAX: 00000000000001a9 [ 441.635827][T11980] RAX: ffffffffffffffda RBX: 0000000000003bd4 RCX: 0000000080000180 [ 441.635838][T11980] RDX: 00000000f71c0fd7 RSI: 0000000000000001 RDI: 00000000f544d53c [ 441.635849][T11980] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 441.635859][T11980] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 441.635868][T11980] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 441.635889][T11980] [ 441.716243][ T854] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 442.763940][T10524] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 443.418818][ T9963] usb 13-1: new high-speed USB device number 14 using dummy_hcd [ 443.655213][ T84] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 443.882596][ T25] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 444.044931][ T9963] usb 13-1: Using ep0 maxpacket: 8 [ 444.057380][ T9963] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 444.066428][ T9963] usb 13-1: config index 0 descriptor too short (expected 301, got 45) [ 444.066481][ T9963] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 444.066508][ T9963] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 444.066532][ T9963] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 444.066554][ T9963] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 444.066591][ T9963] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.306118][T11978] syz.6.1547 (11978) used greatest stack depth: 19656 bytes left [ 444.393852][ T9963] usb 13-1: GET_CAPABILITIES returned 0 [ 444.393889][ T9963] usbtmc 13-1:16.0: can't read capabilities [ 444.395126][T11993] netlink: 'syz.7.1552': attribute type 1 has an invalid length. [ 444.472596][T11993] bond2: entered promiscuous mode [ 444.479317][T11993] 8021q: adding VLAN 0 to HW filter on device bond2 [ 444.481026][T11869] syz.6.1507 (11869) used greatest stack depth: 18816 bytes left [ 444.534229][T11993] bond2: (slave bridge1): making interface the new active one [ 444.534254][T11993] bridge1: entered promiscuous mode [ 444.536261][T11993] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 444.642974][T10524] usb 13-1: USB disconnect, device number 14 [ 444.907338][ T25] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 444.908067][ T8947] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 444.935413][ T9963] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 445.375033][ T43] audit: type=1326 audit(1790577659.576:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12012 comm="syz.7.1560" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 445.375088][ T43] audit: type=1326 audit(1790577659.576:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12012 comm="syz.7.1560" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 445.375129][ T43] audit: type=1326 audit(1790577659.576:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12012 comm="syz.7.1560" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf705efec code=0x7ffc0000 [ 445.375171][ T43] audit: type=1326 audit(1790577659.576:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12012 comm="syz.7.1560" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 445.375209][ T43] audit: type=1326 audit(1790577659.576:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12012 comm="syz.7.1560" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 445.375249][ T43] audit: type=1326 audit(1790577659.586:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12012 comm="syz.7.1560" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71975ab code=0x7ffc0000 [ 445.375287][ T43] audit: type=1326 audit(1790577659.586:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12012 comm="syz.7.1560" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 445.375324][ T43] audit: type=1326 audit(1790577659.586:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12012 comm="syz.7.1560" exe="/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf705efec code=0x7ffc0000 [ 445.375360][ T43] audit: type=1326 audit(1790577659.586:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12012 comm="syz.7.1560" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 445.375952][ T43] audit: type=1326 audit(1790577659.586:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12012 comm="syz.7.1560" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 445.494633][T12022] FAULT_INJECTION: forcing a failure. [ 445.494633][T12022] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 445.494678][T12022] CPU: 3 UID: 0 PID: 12022 Comm: syz.8.1563 Tainted: G L syzkaller #0 PREEMPT(full) [ 445.494711][T12022] Tainted: [L]=SOFTLOCKUP [ 445.494720][T12022] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 445.494734][T12022] Call Trace: [ 445.494743][T12022] [ 445.494753][T12022] dump_stack_lvl+0x100/0x190 [ 445.494811][T12022] should_fail_ex.cold+0x5/0xa [ 445.494843][T12022] _copy_to_user+0x32/0xd0 [ 445.494877][T12022] simple_read_from_buffer+0xcb/0x170 [ 445.494908][T12022] proc_fail_nth_read+0x1af/0x230 [ 445.494939][T12022] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 445.494970][T12022] ? rw_verify_area+0xce/0x6d0 [ 445.494997][T12022] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 445.495026][T12022] vfs_read+0x1e4/0xb40 [ 445.495055][T12022] ? lock_acquire+0x1d1/0x380 [ 445.495089][T12022] ? __fget_files+0x34/0x3d0 [ 445.495118][T12022] ? __pfx_vfs_read+0x10/0x10 [ 445.495143][T12022] ? find_held_lock+0x2b/0x80 [ 445.495171][T12022] ? __fget_files+0x215/0x3d0 [ 445.495206][T12022] ? __fget_files+0x21f/0x3d0 [ 445.495249][T12022] ksys_read+0x12a/0x250 [ 445.495277][T12022] ? __pfx_ksys_read+0x10/0x10 [ 445.495314][T12022] do_int80_emulation+0x166/0x650 [ 445.495349][T12022] asm_int80_emulation+0x1a/0x20 [ 445.495373][T12022] RIP: 0023:0xf71975ab [ 445.495393][T12022] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 445.495414][T12022] RSP: 002b:00000000f544d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 445.495438][T12022] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f544d5d0 [ 445.495453][T12022] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 445.495467][T12022] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 445.495481][T12022] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 445.495494][T12022] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 445.495527][T12022] [ 445.917153][T12026] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1565'. [ 445.917563][T12026] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1565'. [ 445.917850][T12026] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1565'. [ 445.918089][T12026] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1565'. [ 445.918322][T12026] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1565'. [ 445.918544][T12026] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1565'. [ 445.918764][T12026] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1565'. [ 445.918979][T12026] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1565'. [ 445.919213][T12026] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1565'. [ 445.919426][T12026] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1565'. [ 445.971693][ T854] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 446.231745][T12039] openvswitch: netlink: IP tunnel dst address not specified [ 446.231777][T12039] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 446.323587][T12047] input: syz0 as /devices/virtual/input/input36 [ 447.002425][ T25] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 447.598359][T12062] netlink: 'syz.8.1572': attribute type 1 has an invalid length. [ 447.638504][ T5750] Bluetooth: hci3: unexpected event for opcode 0x202d [ 448.025331][T10524] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 448.077920][T12076] 8021q: adding VLAN 0 to HW filter on device bond3 [ 448.121246][T12087] 8021q: adding VLAN 0 to HW filter on device bond4 [ 449.065624][T10524] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 449.386859][ T8969] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 449.467934][T12128] netlink: 'syz.7.1594': attribute type 10 has an invalid length. [ 449.469221][T12128] dummy0: entered promiscuous mode [ 449.490208][T12128] bridge0: port 3(dummy0) entered blocking state [ 449.490364][T12128] bridge0: port 3(dummy0) entered disabled state [ 449.490481][T12128] dummy0: entered allmulticast mode [ 449.492757][T12128] bridge0: port 3(dummy0) entered blocking state [ 449.492842][T12128] bridge0: port 3(dummy0) entered forwarding state [ 449.514030][T12128] fuse: Bad value for 'fd' [ 449.514279][T12129] fuse: Bad value for 'fd' [ 449.526371][T12132] FAULT_INJECTION: forcing a failure. [ 449.526371][T12132] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 449.526404][T12132] CPU: 0 UID: 0 PID: 12132 Comm: syz.8.1595 Tainted: G L syzkaller #0 PREEMPT(full) [ 449.526429][T12132] Tainted: [L]=SOFTLOCKUP [ 449.526436][T12132] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 449.526447][T12132] Call Trace: [ 449.526454][T12132] [ 449.526460][T12132] dump_stack_lvl+0x100/0x190 [ 449.526488][T12132] should_fail_ex.cold+0x5/0xa [ 449.526512][T12132] _copy_from_user+0x2e/0xd0 [ 449.526538][T12132] ppp_write+0x1a0/0x400 [ 449.526558][T12132] ? __pfx_ppp_write+0x10/0x10 [ 449.526573][T12132] vfs_writev+0x5ed/0xdd0 [ 449.526600][T12132] ? __pfx_vfs_writev+0x10/0x10 [ 449.526627][T12132] ? lock_acquire+0x1d1/0x380 [ 449.526658][T12132] ? __fget_files+0x34/0x3d0 [ 449.526687][T12132] ? __fget_files+0x21f/0x3d0 [ 449.526713][T12132] ? do_pwritev+0x1ac/0x270 [ 449.526730][T12132] do_pwritev+0x1ac/0x270 [ 449.526749][T12132] ? __pfx_do_pwritev+0x10/0x10 [ 449.526766][T12132] ? ksys_write+0x1ac/0x250 [ 449.526785][T12132] ? __pfx_ksys_write+0x10/0x10 [ 449.526809][T12132] __do_fast_syscall_32+0x13a/0x8b0 [ 449.526831][T12132] ? lockdep_hardirqs_on+0x7d/0x110 [ 449.526853][T12132] do_fast_syscall_32+0x32/0x70 [ 449.526875][T12132] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 449.526897][T12132] RIP: 0023:0xf705efec [ 449.526916][T12132] Code: Unable to access opcode bytes at 0xf705efc2. [ 449.526924][T12132] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 000000000000014e [ 449.526942][T12132] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080002100 [ 449.526953][T12132] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 0000000000000008 [ 449.526963][T12132] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 449.526972][T12132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 449.527006][T12132] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 449.527028][T12132] [ 449.713558][T12136] FAULT_INJECTION: forcing a failure. [ 449.713558][T12136] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 449.713590][T12136] CPU: 0 UID: 0 PID: 12136 Comm: syz.8.1596 Tainted: G L syzkaller #0 PREEMPT(full) [ 449.713613][T12136] Tainted: [L]=SOFTLOCKUP [ 449.713619][T12136] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 449.713629][T12136] Call Trace: [ 449.713635][T12136] [ 449.713642][T12136] dump_stack_lvl+0x100/0x190 [ 449.713671][T12136] should_fail_ex.cold+0x5/0xa [ 449.713693][T12136] _copy_from_user+0x2e/0xd0 [ 449.713727][T12136] bpf_test_init.isra.0+0xaf/0x100 [ 449.713751][T12136] bpf_prog_test_run_skb+0x48e/0x3530 [ 449.713777][T12136] ? lock_acquire+0x1d1/0x380 [ 449.713801][T12136] ? __fget_files+0x34/0x3d0 [ 449.713823][T12136] ? find_held_lock+0x2b/0x80 [ 449.713843][T12136] ? __fget_files+0x1d1/0x3d0 [ 449.713868][T12136] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 449.713895][T12136] ? fput+0x7c/0x100 [ 449.713920][T12136] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 449.713944][T12136] __sys_bpf+0x2265/0x4a30 [ 449.713968][T12136] ? __pfx___sys_bpf+0x10/0x10 [ 449.713986][T12136] ? lock_acquire+0x1d1/0x380 [ 449.714009][T12136] ? get_pid_task+0x2a/0x250 [ 449.714028][T12136] ? find_held_lock+0x2b/0x80 [ 449.714047][T12136] ? get_pid_task+0xfc/0x250 [ 449.714063][T12136] ? get_pid_task+0xfc/0x250 [ 449.714087][T12136] ? proc_fail_nth_write+0x9f/0x220 [ 449.714117][T12136] ? find_held_lock+0x2b/0x80 [ 449.714153][T12136] ? rcu_read_lock_any_held+0x6a/0x90 [ 449.714178][T12136] ? find_held_lock+0x2b/0x80 [ 449.714199][T12136] ? ksys_write+0x190/0x250 [ 449.714220][T12136] ? ksys_write+0x190/0x250 [ 449.714243][T12136] ? lock_acquire+0x1d1/0x380 [ 449.714284][T12136] ? fput+0x7c/0x100 [ 449.714307][T12136] ? __ia32_sys_bpf+0xcc/0x170 [ 449.714320][T12136] __ia32_sys_bpf+0xcc/0x170 [ 449.714334][T12136] ? __do_fast_syscall_32+0xb3/0x8b0 [ 449.714349][T12136] __do_fast_syscall_32+0x13a/0x8b0 [ 449.714363][T12136] ? lockdep_hardirqs_on+0x7d/0x110 [ 449.714378][T12136] do_fast_syscall_32+0x32/0x70 [ 449.714393][T12136] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 449.714407][T12136] RIP: 0023:0xf705efec [ 449.714421][T12136] Code: Unable to access opcode bytes at 0xf705efc2. [ 449.714427][T12136] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 449.714439][T12136] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000600 [ 449.714446][T12136] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 449.714452][T12136] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 449.714459][T12136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 449.714466][T12136] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 449.714480][T12136] [ 450.009954][T12140] loop0: detected capacity change from 0 to 32768 [ 450.029326][ T25] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 450.056899][T12140] loop1: detected capacity change from 0 to 65536 [ 450.119774][ T42] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 450.189438][T12140] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 450.676745][ T8969] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 451.145536][T10524] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 451.271995][T12167] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 451.305309][T12169] FAULT_INJECTION: forcing a failure. [ 451.305309][T12169] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 451.305343][T12169] CPU: 0 UID: 0 PID: 12169 Comm: syz.0.1603 Tainted: G L syzkaller #0 PREEMPT(full) [ 451.305368][T12169] Tainted: [L]=SOFTLOCKUP [ 451.305376][T12169] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 451.305387][T12169] Call Trace: [ 451.305394][T12169] [ 451.305402][T12169] dump_stack_lvl+0x100/0x190 [ 451.305431][T12169] should_fail_ex.cold+0x5/0xa [ 451.305484][T12169] _copy_from_user+0x2e/0xd0 [ 451.305513][T12169] kstrtouint_from_user+0xd6/0x1d0 [ 451.305536][T12169] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 451.305561][T12169] ? lock_acquire+0x1d1/0x380 [ 451.305594][T12169] proc_fail_nth_write+0x83/0x220 [ 451.305619][T12169] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 451.305652][T12169] vfs_write+0x2aa/0x1050 [ 451.305676][T12169] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 451.305699][T12169] ? lock_acquire+0x1d1/0x380 [ 451.305725][T12169] ? __fget_files+0x34/0x3d0 [ 451.305749][T12169] ? __pfx_vfs_write+0x10/0x10 [ 451.305770][T12169] ? find_held_lock+0x2b/0x80 [ 451.305795][T12169] ? __fget_files+0x215/0x3d0 [ 451.305824][T12169] ? __fget_files+0x21f/0x3d0 [ 451.305856][T12169] ksys_write+0x12a/0x250 [ 451.305881][T12169] ? __pfx_ksys_write+0x10/0x10 [ 451.305912][T12169] do_int80_emulation+0x166/0x650 [ 451.305941][T12169] asm_int80_emulation+0x1a/0x20 [ 451.305961][T12169] RIP: 0023:0xf71175ab [ 451.305979][T12169] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 451.305998][T12169] RSP: 002b:00000000f53cd4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 451.306018][T12169] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53cd5d0 [ 451.306032][T12169] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 451.306043][T12169] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 451.306061][T12169] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 451.306074][T12169] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 451.306102][T12169] [ 451.621750][T12172] __nla_validate_parse: 159 callbacks suppressed [ 451.621775][T12172] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1605'. [ 451.621842][T12172] bridge_slave_1: left allmulticast mode [ 451.621862][T12172] bridge_slave_1: left promiscuous mode [ 451.622231][T12172] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.652095][T12172] bridge_slave_0: left allmulticast mode [ 451.652125][T12172] bridge_slave_0: left promiscuous mode [ 451.652341][T12172] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.743748][ T5754] Bluetooth: hci1: unexpected event for opcode 0x200c [ 451.945123][ T10] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 452.058106][T12188] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 452.110974][ T5754] Bluetooth: hci5: command 0x0406 tx timeout [ 452.185529][T10524] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 452.185758][T10524] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.189510][ T8969] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 452.305359][T12197] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 452.305594][T12197] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 452.305989][T12197] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 452.306237][T12197] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 452.306477][T12197] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 452.306723][T12197] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 452.306961][T12197] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 452.307345][T12197] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 452.307591][T12197] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 452.307830][T12197] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 452.449535][ T5750] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 452.535020][ T7714] usb 11-1: new high-speed USB device number 9 using dummy_hcd [ 452.599437][ T5750] Bluetooth: hci6: link tx timeout [ 452.599657][ T5750] Bluetooth: hci6: killing stalled connection 10:aa:aa:aa:aa:aa [ 452.605503][ T5750] Bluetooth: hci6: link tx timeout [ 452.605521][ T5750] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 452.697264][ T7714] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 452.698269][ T7714] usb 11-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 452.698298][ T7714] usb 11-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 61 [ 452.698320][ T7714] usb 11-1: config 0 interface 0 has no altsetting 0 [ 452.700255][ T7714] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 452.700270][ T7714] usb 11-1: Product: syz [ 452.700278][ T7714] usb 11-1: Manufacturer: syz [ 452.700286][ T7714] usb 11-1: SerialNumber: syz [ 452.705289][ T7714] usb 11-1: config 0 descriptor?? [ 452.707521][T12195] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 452.712903][ T7714] usb 11-1: selecting invalid altsetting 0 [ 452.829058][T10524] libceph: connect (1)[c::]:6789 error -97 [ 452.829206][T10524] libceph: mon0 (1)[c::]:6789 connect error [ 452.933567][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.934029][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.934354][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.934620][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.934977][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.936664][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.936977][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.937287][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.937624][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.938080][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.938411][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.938692][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.938976][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.939282][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.939592][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.939902][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.940286][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.940589][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.940903][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.941171][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.941410][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.941706][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.941958][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.942219][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.942514][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.942804][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.943074][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.943367][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.943661][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.943977][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.944269][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.944562][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.948308][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.948589][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.948885][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.949160][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.949435][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.949753][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.950052][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.951951][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.952217][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.952476][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.952643][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.952864][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.953145][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.953418][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.953716][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.954038][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.954292][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.954555][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.954885][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.955146][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.955409][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.955679][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.955953][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.956217][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.956473][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.956664][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.956839][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.957015][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.957201][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.957378][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.957580][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.957769][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.957944][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.958118][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.958391][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.958559][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.958735][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.958903][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.959066][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.959271][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.959532][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.959781][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.960037][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.960283][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.960588][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.960841][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.961088][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.961336][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.961606][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.961844][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.962096][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.962338][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.962531][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.962703][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.962866][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.963031][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.963193][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.963354][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.963566][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.963733][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.963894][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.964062][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.964224][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.964387][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.964552][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.964758][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.969816][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.970006][T12195] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 452.984093][ T7714] usb 11-1: USB disconnect, device number 9 [ 452.992089][T12213] ceph: No mds server is up or the cluster is laggy [ 453.145372][ T25] libceph: connect (1)[c::]:6789 error -97 [ 453.159372][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 453.226241][T10524] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 453.760550][T12224] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 453.873389][T12226] FAULT_INJECTION: forcing a failure. [ 453.873389][T12226] name failslab, interval 1, probability 0, space 0, times 0 [ 453.873419][T12226] CPU: 0 UID: 0 PID: 12226 Comm: syz.6.1621 Tainted: G L syzkaller #0 PREEMPT(full) [ 453.873473][T12226] Tainted: [L]=SOFTLOCKUP [ 453.873480][T12226] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 453.873491][T12226] Call Trace: [ 453.873497][T12226] [ 453.873505][T12226] dump_stack_lvl+0x100/0x190 [ 453.873532][T12226] should_fail_ex.cold+0x5/0xa [ 453.873556][T12226] should_failslab+0xc2/0x120 [ 453.873582][T12226] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 453.873607][T12226] ? gadget_dev_desc_UDC_store+0x51/0x2e0 [ 453.873632][T12226] kstrdup+0x51/0xe0 [ 453.873653][T12226] gadget_dev_desc_UDC_store+0x51/0x2e0 [ 453.873677][T12226] configfs_write_iter+0x302/0x4e0 [ 453.873708][T12226] vfs_write+0x6af/0x1050 [ 453.873730][T12226] ? __pfx_configfs_write_iter+0x10/0x10 [ 453.873760][T12226] ? __pfx_vfs_write+0x10/0x10 [ 453.873779][T12226] ? find_held_lock+0x2b/0x80 [ 453.873819][T12226] ksys_write+0x12a/0x250 [ 453.873862][T12226] ? __pfx_ksys_write+0x10/0x10 [ 453.873882][T12226] ? ksys_write+0x1ac/0x250 [ 453.873904][T12226] ? __pfx_ksys_write+0x10/0x10 [ 453.873931][T12226] __do_fast_syscall_32+0x13a/0x8b0 [ 453.873955][T12226] ? lockdep_hardirqs_on+0x7d/0x110 [ 453.874030][T12226] do_fast_syscall_32+0x32/0x70 [ 453.874063][T12226] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 453.874087][T12226] RIP: 0023:0xf7fe5fec [ 453.874109][T12226] Code: Unable to access opcode bytes at 0xf7fe5fc2. [ 453.874117][T12226] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 453.874135][T12226] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000800004c0 [ 453.874148][T12226] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 453.874159][T12226] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 453.874170][T12226] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 453.874181][T12226] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 453.874207][T12226] [ 454.180819][ T7714] libceph: connect (1)[c::]:6789 error -101 [ 454.180957][ T7714] libceph: mon0 (1)[c::]:6789 connect error [ 454.265092][T10524] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 454.307961][T12235] ceph: No mds server is up or the cluster is laggy [ 454.426655][T12247] netlink: 116 bytes leftover after parsing attributes in process `syz.8.1626'. [ 454.436471][ T7714] libceph: connect (1)[c::]:6789 error -101 [ 454.436650][ T7714] libceph: mon0 (1)[c::]:6789 connect error [ 454.469273][T12249] FAULT_INJECTION: forcing a failure. [ 454.469273][T12249] name failslab, interval 1, probability 0, space 0, times 0 [ 454.469309][T12249] CPU: 0 UID: 0 PID: 12249 Comm: syz.7.1627 Tainted: G L syzkaller #0 PREEMPT(full) [ 454.469336][T12249] Tainted: [L]=SOFTLOCKUP [ 454.469343][T12249] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 454.469355][T12249] Call Trace: [ 454.469363][T12249] [ 454.469370][T12249] dump_stack_lvl+0x100/0x190 [ 454.469419][T12249] should_fail_ex.cold+0x5/0xa [ 454.469470][T12249] should_failslab+0xc2/0x120 [ 454.469501][T12249] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 454.469528][T12249] ? __alloc_skb+0x5b7/0x710 [ 454.469557][T12249] ? __alloc_skb+0x140/0x710 [ 454.469590][T12249] __alloc_skb+0x140/0x710 [ 454.469618][T12249] ? __alloc_skb+0x5b7/0x710 [ 454.469653][T12249] ? __pfx___alloc_skb+0x10/0x10 [ 454.469682][T12249] ? aa_sk_perm+0x389/0xab0 [ 454.469705][T12249] netlink_alloc_large_skb+0x69/0x150 [ 454.469734][T12249] netlink_sendmsg+0x680/0xda0 [ 454.469765][T12249] ? __pfx_netlink_sendmsg+0x10/0x10 [ 454.469793][T12249] ? apparmor_socket_sendmsg+0x165/0x280 [ 454.469825][T12249] __sys_sendto+0x48b/0x4e0 [ 454.469851][T12249] ? __pfx_netlink_sendmsg+0x10/0x10 [ 454.469878][T12249] ? __pfx___sys_sendto+0x10/0x10 [ 454.469911][T12249] ? lock_acquire+0x1d1/0x380 [ 454.469955][T12249] __ia32_compat_sys_socketcall+0x59a/0x770 [ 454.469982][T12249] ? __fget_files+0x21f/0x3d0 [ 454.470004][T12249] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 454.470031][T12249] ? fput+0x7c/0x100 [ 454.470066][T12249] do_int80_emulation+0x166/0x650 [ 454.470093][T12249] asm_int80_emulation+0x1a/0x20 [ 454.470113][T12249] RIP: 0023:0xf71975ab [ 454.470128][T12249] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 454.470146][T12249] RSP: 002b:00000000f544c34c EFLAGS: 00000246 ORIG_RAX: 0000000000000066 [ 454.470165][T12249] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000f544c3f4 [ 454.470176][T12249] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 454.470187][T12249] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 454.470198][T12249] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 454.470209][T12249] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 454.470287][T12249] [ 454.520627][ T8959] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 454.574215][T10524] usb 13-1: new high-speed USB device number 15 using dummy_hcd [ 454.667037][ T5750] Bluetooth: hci6: command 0x0406 tx timeout [ 454.728639][T10524] usb 13-1: device descriptor read/64, error -71 [ 454.786970][T12256] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1631'. [ 454.787000][T12256] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1631'. [ 454.787017][T12256] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1631'. [ 454.885288][T12266] erspan0: entered promiscuous mode [ 454.986369][T10524] usb 13-1: new high-speed USB device number 16 using dummy_hcd [ 455.125209][T10524] usb 13-1: device descriptor read/64, error -71 [ 455.238659][T10524] usb usb13-port1: attempt power cycle [ 455.290130][T12295] FAULT_INJECTION: forcing a failure. [ 455.290130][T12295] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 455.290155][T12295] CPU: 2 UID: 0 PID: 12295 Comm: syz.6.1640 Tainted: G L syzkaller #0 PREEMPT(full) [ 455.290172][T12295] Tainted: [L]=SOFTLOCKUP [ 455.290176][T12295] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 455.290184][T12295] Call Trace: [ 455.290188][T12295] [ 455.290193][T12295] dump_stack_lvl+0x100/0x190 [ 455.290214][T12295] should_fail_ex.cold+0x5/0xa [ 455.290230][T12295] _copy_from_user+0x2e/0xd0 [ 455.290248][T12295] bpf_ctx_init+0x14e/0x1e0 [ 455.290264][T12295] bpf_prog_test_run_sk_lookup+0x2c6/0x1300 [ 455.290284][T12295] ? lock_acquire+0x1d1/0x380 [ 455.290302][T12295] ? __fget_files+0x34/0x3d0 [ 455.290318][T12295] ? find_held_lock+0x2b/0x80 [ 455.290332][T12295] ? __pfx_bpf_prog_test_run_sk_lookup+0x10/0x10 [ 455.290349][T12295] ? __fget_files+0x215/0x3d0 [ 455.290367][T12295] ? __fget_files+0x21f/0x3d0 [ 455.290385][T12295] ? fput+0x7c/0x100 [ 455.290402][T12295] ? __bpf_prog_get+0x97/0x290 [ 455.290419][T12295] ? __pfx_bpf_prog_test_run_sk_lookup+0x10/0x10 [ 455.290436][T12295] __sys_bpf+0x2265/0x4a30 [ 455.290454][T12295] ? __pfx___sys_bpf+0x10/0x10 [ 455.290467][T12295] ? lock_acquire+0x1d1/0x380 [ 455.290483][T12295] ? get_pid_task+0x2a/0x250 [ 455.290496][T12295] ? find_held_lock+0x2b/0x80 [ 455.290510][T12295] ? get_pid_task+0xfc/0x250 [ 455.290525][T12295] ? get_pid_task+0xfc/0x250 [ 455.290548][T12295] ? proc_fail_nth_write+0x9f/0x220 [ 455.290568][T12295] ? find_held_lock+0x2b/0x80 [ 455.290593][T12295] ? rcu_read_lock_any_held+0x6a/0x90 [ 455.290614][T12295] ? find_held_lock+0x2b/0x80 [ 455.290633][T12295] ? ksys_write+0x190/0x250 [ 455.290652][T12295] ? ksys_write+0x190/0x250 [ 455.290671][T12295] ? lock_acquire+0x1d1/0x380 [ 455.290710][T12295] ? fput+0x7c/0x100 [ 455.290728][T12295] ? __ia32_sys_bpf+0xcc/0x170 [ 455.290742][T12295] __ia32_sys_bpf+0xcc/0x170 [ 455.290756][T12295] ? __do_fast_syscall_32+0xb3/0x8b0 [ 455.290772][T12295] __do_fast_syscall_32+0x13a/0x8b0 [ 455.290787][T12295] ? lockdep_hardirqs_on+0x7d/0x110 [ 455.290802][T12295] do_fast_syscall_32+0x32/0x70 [ 455.290817][T12295] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 455.290833][T12295] RIP: 0023:0xf7fe5fec [ 455.290846][T12295] Code: Unable to access opcode bytes at 0xf7fe5fc2. [ 455.290852][T12295] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 455.290864][T12295] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000700 [ 455.290872][T12295] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 455.290880][T12295] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 455.290887][T12295] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 455.290898][T12295] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 455.290919][T12295] [ 455.291915][T12292] fuse: Bad value for 'fd' [ 455.315223][ T42] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 455.585249][T10524] usb 13-1: new high-speed USB device number 17 using dummy_hcd [ 455.615610][T10524] usb 13-1: device descriptor read/8, error -71 [ 455.855004][T10524] usb 13-1: new high-speed USB device number 18 using dummy_hcd [ 455.969872][T10524] usb 13-1: device descriptor read/8, error -71 [ 455.973101][T12327] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 455.973130][T12327] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 455.973220][T12327] vhci_hcd vhci_hcd.0: Device attached [ 456.075148][T10524] usb usb13-port1: unable to enumerate USB device [ 456.279145][ T9963] usb 38-1: SetAddress Request (3) to port 0 [ 456.279203][ T9963] usb 38-1: new SuperSpeed USB device number 3 using vhci_hcd [ 456.357448][T10524] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 456.426791][ T8947] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 456.505907][T10311] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.507317][ T5819] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.507356][ T5819] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.507388][ T5819] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.527213][T12329] vhci_hcd: connection reset by peer [ 456.530727][ T7733] vhci_hcd vhci_hcd.0: stop threads [ 456.530756][ T7733] vhci_hcd vhci_hcd.0: release socket [ 456.532622][ T7733] vhci_hcd vhci_hcd.0: disconnect device [ 456.559386][T12340] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 456.559405][T12340] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 456.560324][T12340] vhci_hcd vhci_hcd.0: Device attached [ 456.581694][T12340] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1651'. [ 456.735747][T10524] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 456.744956][ T5750] Bluetooth: hci6: command 0x0406 tx timeout [ 456.765534][T12342] vhci_hcd: connection closed [ 456.767158][T10311] vhci_hcd vhci_hcd.6: stop threads [ 456.767181][T10311] vhci_hcd vhci_hcd.6: release socket [ 456.767264][T10311] vhci_hcd vhci_hcd.6: disconnect device [ 456.795001][T10524] usb 49-1: new full-speed USB device number 2 using vhci_hcd [ 456.795066][T10524] usb 49-1: enqueue for inactive port 0 [ 456.865493][T10524] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 457.187866][T12353] FAULT_INJECTION: forcing a failure. [ 457.187866][T12353] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 457.187901][T12353] CPU: 3 UID: 0 PID: 12353 Comm: syz.0.1652 Tainted: G L syzkaller #0 PREEMPT(full) [ 457.187927][T12353] Tainted: [L]=SOFTLOCKUP [ 457.187934][T12353] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 457.187945][T12353] Call Trace: [ 457.187953][T12353] [ 457.187961][T12353] dump_stack_lvl+0x100/0x190 [ 457.188007][T12353] should_fail_ex.cold+0x5/0xa [ 457.188031][T12353] _copy_from_user+0x2e/0xd0 [ 457.188059][T12353] sctp_getsockopt+0x48ff/0x7090 [ 457.188090][T12353] ? aa_inet_opt_perm+0x30d/0x970 [ 457.188120][T12353] ? __pfx_sctp_getsockopt+0x10/0x10 [ 457.188149][T12353] ? _parse_integer_limit+0x1ac/0x220 [ 457.188174][T12353] ? __pfx__kstrtoull+0x10/0x10 [ 457.188195][T12353] ? lock_acquire+0x1d1/0x380 [ 457.188221][T12353] ? __might_fault+0xc5/0x140 [ 457.188257][T12353] ? lock_acquire+0x1d1/0x380 [ 457.188287][T12353] ? aa_sock_opt_perm+0x114/0x1e0 [ 457.188315][T12353] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 457.188341][T12353] do_sock_getsockopt+0x50a/0x6e0 [ 457.188367][T12353] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 457.188395][T12353] ? __fget_files+0x34/0x3d0 [ 457.188420][T12353] ? find_held_lock+0x2b/0x80 [ 457.188448][T12353] ? __fget_files+0x21f/0x3d0 [ 457.188477][T12353] __sys_getsockopt+0x133/0x1d0 [ 457.188513][T12353] ? __ia32_sys_getsockopt+0xbc/0x160 [ 457.188541][T12353] __ia32_sys_getsockopt+0xbc/0x160 [ 457.188568][T12353] ? __do_fast_syscall_32+0xb3/0x8b0 [ 457.188592][T12353] ? lockdep_hardirqs_on+0x7d/0x110 [ 457.188612][T12353] __do_fast_syscall_32+0x13a/0x8b0 [ 457.188634][T12353] ? lockdep_hardirqs_on+0x7d/0x110 [ 457.188661][T12353] do_fast_syscall_32+0x32/0x70 [ 457.188685][T12353] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 457.188708][T12353] RIP: 0023:0xf6fdefec [ 457.188728][T12353] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 457.188737][T12353] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 000000000000016d [ 457.188756][T12353] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000084 [ 457.188768][T12353] RDX: 000000000000006f RSI: 0000000080000140 RDI: 0000000080000180 [ 457.188779][T12353] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 457.188790][T12353] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 457.188802][T12353] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 457.188827][T12353] [ 457.225291][ T292] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 457.244201][T12355] netlink: 'syz.0.1653': attribute type 10 has an invalid length. [ 457.246008][T12355] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.246105][T12355] bridge0: port 2(bridge_slave_1) entered listening state [ 457.246340][T12355] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.246431][T12355] bridge0: port 1(bridge_slave_0) entered listening state [ 457.249862][T12355] .`: (slave bridge0): Enslaving as an active interface with an up link [ 457.434145][T12362] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1656'. [ 457.481526][T12359] syzkaller0: entered promiscuous mode [ 457.481556][T12359] syzkaller0: entered allmulticast mode [ 457.515973][T12359] 0: reclassify loop, rule prio 0, protocol 800 [ 457.880820][T12378] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1663'. [ 458.013728][T12388] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1661'. [ 458.265352][T10524] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 458.418661][T12397] syzkaller0: entered promiscuous mode [ 458.418684][T12397] syzkaller0: entered allmulticast mode [ 458.538022][T12400] gadgetfs: bound to dummy_udc driver [ 458.810182][T12414] Bluetooth: MGMT ver 1.23 [ 458.815228][ T1346] usb 11-1: new high-speed USB device number 10 using dummy_hcd [ 458.819027][T12414] Bluetooth: MGMT ver 1.23 [ 458.819817][T12414] random: crng reseeded on system resumption [ 458.836235][T12414] Restarting kernel threads ... [ 458.839865][T12414] Done restarting kernel threads. [ 458.924654][T12418] FAULT_INJECTION: forcing a failure. [ 458.924654][T12418] name failslab, interval 1, probability 0, space 0, times 0 [ 458.924688][T12418] CPU: 0 UID: 0 PID: 12418 Comm: syz.0.1676 Tainted: G L syzkaller #0 PREEMPT(full) [ 458.924714][T12418] Tainted: [L]=SOFTLOCKUP [ 458.924721][T12418] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 458.924732][T12418] Call Trace: [ 458.924739][T12418] [ 458.924748][T12418] dump_stack_lvl+0x100/0x190 [ 458.924798][T12418] should_fail_ex.cold+0x5/0xa [ 458.924826][T12418] should_failslab+0xc2/0x120 [ 458.924854][T12418] __kmalloc_cache_noprof+0x91/0x6d0 [ 458.924876][T12418] ? sctp_add_bind_addr+0xae/0x3e0 [ 458.924904][T12418] sctp_add_bind_addr+0xae/0x3e0 [ 458.924930][T12418] sctp_do_bind+0x36c/0x760 [ 458.924965][T12418] sctp_connect_new_asoc+0x5e7/0x770 [ 458.924997][T12418] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 458.925032][T12418] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 458.925064][T12418] sctp_sendmsg+0x1743/0x22e0 [ 458.925099][T12418] ? __pfx_sctp_sendmsg+0x10/0x10 [ 458.925141][T12418] ? tomoyo_socket_sendmsg_permission+0x14e/0x3c0 [ 458.925174][T12418] ? aa_sock_msg_perm+0x11e/0x200 [ 458.925202][T12418] ? __pfx_sctp_sendmsg+0x10/0x10 [ 458.925233][T12418] inet_sendmsg+0x11c/0x140 [ 458.925259][T12418] __sys_sendto+0x453/0x4e0 [ 458.925286][T12418] ? __pfx_inet_sendmsg+0x10/0x10 [ 458.925312][T12418] ? __pfx___sys_sendto+0x10/0x10 [ 458.925365][T12418] ? fput+0x7c/0x100 [ 458.925392][T12418] ? ksys_write+0x1ac/0x250 [ 458.925445][T12418] __ia32_sys_sendto+0xdd/0x1b0 [ 458.925476][T12418] ? __do_fast_syscall_32+0xb3/0x8b0 [ 458.925502][T12418] ? lockdep_hardirqs_on+0x7d/0x110 [ 458.925525][T12418] __do_fast_syscall_32+0x13a/0x8b0 [ 458.925548][T12418] ? lockdep_hardirqs_on+0x7d/0x110 [ 458.925573][T12418] do_fast_syscall_32+0x32/0x70 [ 458.925599][T12418] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 458.925624][T12418] RIP: 0023:0xf6fdefec [ 458.925648][T12418] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 458.925658][T12418] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000171 [ 458.925680][T12418] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080847fff [ 458.925693][T12418] RDX: 0000000000000001 RSI: 00000000000000e0 RDI: 000000008005ffe4 [ 458.925707][T12418] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 458.925719][T12418] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 458.925732][T12418] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 458.925760][T12418] [ 458.965251][ T1346] usb 11-1: Using ep0 maxpacket: 8 [ 458.965968][ T1346] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 458.966996][ T1346] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 458.967035][ T1346] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 458.967054][ T1346] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 458.967075][ T1346] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 458.967092][ T1346] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 458.967125][ T1346] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.045187][ T10] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 459.311860][ T42] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 459.627384][ T1159] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 459.736848][ T5829] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 459.749351][T12403] gadgetfs: bound to dummy_udc driver [ 459.770211][ T1346] usb 11-1: GET_CAPABILITIES returned 0 [ 459.770235][ T1346] usbtmc 11-1:16.0: can't read capabilities [ 459.907669][ T5829] usb 5-1: not running at top speed; connect to a high speed hub [ 459.907698][ T5829] usb 5-1: New USB device found, idVendor=8086, idProduct=0b3a, bcdDevice=b9.f0 [ 459.908880][ T5829] usb 5-1: config 1 has an invalid interface number: 102 but max is 2 [ 459.908903][ T5829] usb 5-1: config 1 has an invalid interface number: 37 but max is 2 [ 459.908919][ T5829] usb 5-1: config 1 has an invalid interface number: 3 but max is 2 [ 459.908936][ T5829] usb 5-1: config 1 has no interface number 0 [ 459.908948][ T5829] usb 5-1: config 1 has no interface number 1 [ 459.908961][ T5829] usb 5-1: config 1 has no interface number 2 [ 459.909003][ T5829] usb 5-1: config 1 interface 102 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 459.909022][ T5829] usb 5-1: config 1 interface 102 altsetting 255 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 459.909044][ T5829] usb 5-1: config 1 interface 102 altsetting 255 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 459.909064][ T5829] usb 5-1: config 1 interface 102 altsetting 255 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 459.909084][ T5829] usb 5-1: config 1 interface 102 altsetting 255 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 459.909105][ T5829] usb 5-1: config 1 interface 102 altsetting 255 has a duplicate endpoint with address 0xC, skipping [ 459.909130][ T5829] usb 5-1: config 1 interface 37 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 459.909148][ T5829] usb 5-1: config 1 interface 37 altsetting 255 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 459.909176][ T5829] usb 5-1: config 1 interface 3 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 459.909193][ T5829] usb 5-1: config 1 interface 3 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 459.909209][ T5829] usb 5-1: config 1 interface 3 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 459.909226][ T5829] usb 5-1: config 1 interface 3 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 459.909242][ T5829] usb 5-1: config 1 interface 3 altsetting 0 endpoint 0x4 has an invalid bInterval 112, changing to 4 [ 459.909262][ T5829] usb 5-1: config 1 interface 102 has no altsetting 0 [ 459.909276][ T5829] usb 5-1: config 1 interface 37 has no altsetting 0 [ 459.913469][ T5829] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.913489][ T5829] usb 5-1: Product: syz [ 459.913499][ T5829] usb 5-1: Manufacturer: ఁ [ 459.913509][ T5829] usb 5-1: SerialNumber: syz [ 460.168289][ T5829] uvcvideo 5-1:1.102: Found multiple Units with ID 1 [ 460.169451][ T5829] uvcvideo 5-1:1.102: Found multiple Units with ID 1 [ 460.170258][ T5829] uvcvideo 5-1:1.102: Found UVC 10.08 device syz (8086:0b3a) [ 460.170283][ T5829] uvcvideo 5-1:1.102: No valid video chain found. [ 460.210518][ T5829] usb 5-1: USB disconnect, device number 19 [ 460.313210][ T1346] usb 11-1: USB disconnect, device number 10 [ 460.355343][T10524] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 460.362846][T12449] [U]  [ 460.362860][T12449] [U] K{ [ 460.362870][T12449] [U] t 1ŠFfˊ`GJgo/mC [ 460.362887][T12449] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 460.362903][T12449] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 460.362929][T12449] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 460.362971][T12449] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 460.362992][T12449] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 460.363006][T12449] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 460.363023][T12449] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 460.363123][T12449] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 460.363138][T12449] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 460.363151][T12449] [U] 22Ʃx?0;3u [ 460.363167][T12449] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 460.363187][T12449] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 460.363199][T12449] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 460.363209][T12449] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 460.363220][T12449] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 460.363231][T12449] [U] ec [ 460.363241][T12449] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 460.645378][ T1037] usb 13-1: new high-speed USB device number 19 using dummy_hcd [ 460.817251][ T1037] usb 13-1: Using ep0 maxpacket: 8 [ 460.817994][ T1037] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 460.818979][ T1037] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 460.819004][ T1037] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 460.819024][ T1037] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 460.819043][ T1037] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 460.819076][ T1037] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.040317][ T1037] usb 13-1: GET_CAPABILITIES returned 0 [ 461.040357][ T1037] usbtmc 13-1:16.0: can't read capabilities [ 461.089292][T12467] tipc: Enabling of bearer rejected, already enabled [ 461.089955][T12467] syzkaller0: entered promiscuous mode [ 461.089973][T12467] syzkaller0: entered allmulticast mode [ 461.105808][T12467] syzkaller0: mtu less than device minimum [ 461.269237][ C0] usbtmc 13-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 461.306973][T12473] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1691'. [ 461.308085][T12473] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1691'. [ 461.315008][ T9963] usb 38-1: device descriptor read/8, error -110 [ 461.398314][ T42] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 461.475989][ T1037] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 461.547104][ T8956] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 461.654929][ T1037] usb 5-1: Using ep0 maxpacket: 32 [ 461.657230][ T1037] usb 5-1: New USB device found, idVendor=045e, idProduct=043c, bcdDevice=32.3a [ 461.658649][ T1037] usb 5-1: config 7 has an invalid interface number: 60 but max is 2 [ 461.658672][ T1037] usb 5-1: config 7 has an invalid interface number: 84 but max is 2 [ 461.658688][ T1037] usb 5-1: config 7 has an invalid interface association descriptor of length 7, skipping [ 461.658704][ T1037] usb 5-1: config 7 has an invalid interface number: 224 but max is 2 [ 461.658718][ T1037] usb 5-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 461.658732][ T1037] usb 5-1: config 7 has an invalid interface number: 98 but max is 2 [ 461.658747][ T1037] usb 5-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 461.658761][ T1037] usb 5-1: config 7 has 4 interfaces, different from the descriptor's value: 3 [ 461.658777][ T1037] usb 5-1: config 7 has no interface number 0 [ 461.658789][ T1037] usb 5-1: config 7 has no interface number 1 [ 461.658801][ T1037] usb 5-1: config 7 has no interface number 2 [ 461.658814][ T1037] usb 5-1: config 7 has no interface number 3 [ 461.658859][ T1037] usb 5-1: config 7 interface 60 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 461.658875][ T1037] usb 5-1: config 7 interface 60 altsetting 3 has an endpoint descriptor with address 0xCD, changing to 0x8D [ 461.658894][ T1037] usb 5-1: config 7 interface 60 altsetting 3 endpoint 0x8D has invalid maxpacket 35444, setting to 64 [ 461.658915][ T1037] usb 5-1: config 7 interface 60 altsetting 3 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 461.658934][ T1037] usb 5-1: config 7 interface 60 altsetting 3 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 461.658973][ T1037] usb 5-1: config 7 interface 84 altsetting 8 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 461.659000][ T1037] usb 5-1: config 7 interface 84 altsetting 8 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 461.659021][ T1037] usb 5-1: config 7 interface 84 altsetting 8 has a duplicate endpoint with address 0xA, skipping [ 461.659040][ T1037] usb 5-1: config 7 interface 84 altsetting 8 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 461.659059][ T1037] usb 5-1: config 7 interface 84 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 461.659076][ T1037] usb 5-1: config 7 interface 84 altsetting 8 endpoint 0x7 has an invalid bInterval 198, changing to 7 [ 461.659100][ T1037] usb 5-1: config 7 interface 84 altsetting 8 has a duplicate endpoint with address 0xA, skipping [ 461.659121][ T1037] usb 5-1: config 7 interface 84 altsetting 8 has 10 endpoint descriptors, different from the interface descriptor's value: 16 [ 461.659146][ T1037] usb 5-1: too many endpoints for config 7 interface 224 altsetting 108: 130, using maximum allowed: 30 [ 461.659179][ T1037] usb 5-1: config 7 interface 224 altsetting 108 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 461.659205][ T1037] usb 5-1: config 7 interface 224 altsetting 108 has an invalid descriptor for endpoint zero, skipping [ 461.659225][ T1037] usb 5-1: config 7 interface 224 altsetting 108 has a duplicate endpoint with address 0x3, skipping [ 461.659247][ T1037] usb 5-1: config 7 interface 224 altsetting 108 has an invalid descriptor for endpoint zero, skipping [ 461.659266][ T1037] usb 5-1: config 7 interface 224 altsetting 108 has an invalid descriptor for endpoint zero, skipping [ 461.659286][ T1037] usb 5-1: config 7 interface 224 altsetting 108 has a duplicate endpoint with address 0x4, skipping [ 461.659307][ T1037] usb 5-1: config 7 interface 224 altsetting 108 has 6 endpoint descriptors, different from the interface descriptor's value: 130 [ 461.659342][ T1037] usb 5-1: config 7 interface 98 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 461.659363][ T1037] usb 5-1: config 7 interface 98 altsetting 3 has a duplicate endpoint with address 0x9, skipping [ 461.659385][ T1037] usb 5-1: config 7 interface 98 altsetting 3 has a duplicate endpoint with address 0x2, skipping [ 461.659404][ T1037] usb 5-1: config 7 interface 98 altsetting 3 has a duplicate endpoint with address 0xD, skipping [ 461.659424][ T1037] usb 5-1: config 7 interface 98 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 461.659443][ T1037] usb 5-1: config 7 interface 98 altsetting 3 has a duplicate endpoint with address 0xE, skipping [ 461.659461][ T1037] usb 5-1: config 7 interface 98 altsetting 3 has a duplicate endpoint with address 0x7, skipping [ 461.659477][ T1037] usb 5-1: config 7 interface 98 altsetting 3 has a duplicate endpoint with address 0xE, skipping [ 461.659494][ T1037] usb 5-1: config 7 interface 98 altsetting 3 has a duplicate endpoint with address 0x7, skipping [ 461.659511][ T1037] usb 5-1: config 7 interface 98 altsetting 3 has a duplicate endpoint with address 0x2, skipping [ 461.659535][ T1037] usb 5-1: config 7 interface 60 has no altsetting 0 [ 461.659549][ T1037] usb 5-1: config 7 interface 84 has no altsetting 0 [ 461.659561][ T1037] usb 5-1: config 7 interface 224 has no altsetting 0 [ 461.659574][ T1037] usb 5-1: config 7 interface 98 has no altsetting 0 [ 461.661700][ T1037] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.661717][ T1037] usb 5-1: Product: 䒝쌕趡ㆤ걼斃ꡩ唨쫕鳾憮衹붾얒贗甂ꐬ瑎激᫢䂁隫㇋禬쓍訞椦㑠꯺靕㟩ݑ䧎梛쵭읭㜔嵅金뼅錄䢁媔垃洝廓픿봜╤膫摼褐㋕洛奄镵扱ꄖꥳ껑䉼 [ 461.661735][ T1037] usb 5-1: Manufacturer: ナ䋤ạꇝ﷓孎ꢟ䝿᫕粫倸嫮伍蹁ᨃロ䠾⃊Ⲙ⇍䃸弫톦纅ꐮ꺯钪庰꘻꺎ࡉ㵡ꕊ네ഝ艱묘ᓀ댥ǜ齁ꨄ뀿鼫늹㴧즹葧溵ㆦꪃﾹῤ躅딣凬캷◚鶞ሶ゜耾僃اー뎔⡤︖鷴张氢邇ড়嘚쁊췒鬚 [ 461.661755][ T1037] usb 5-1: SerialNumber: ᐉ [ 461.725928][ T9963] usb usb38-port1: attempt power cycle [ 461.754927][ T5829] usb 11-1: new high-speed USB device number 11 using dummy_hcd [ 461.806939][ T10] usb 13-1: USB disconnect, device number 19 [ 461.839896][T12449] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 461.927105][ T5829] usb 11-1: Using ep0 maxpacket: 32 [ 461.928301][ T5829] usb 11-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 461.930118][ T5829] usb 11-1: config index 0 descriptor too short (expected 29220, got 36) [ 461.930140][ T5829] usb 11-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 461.930157][ T5829] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 461.930244][ T5829] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 461.930263][ T5829] usb 11-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 461.930283][ T5829] usb 11-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 461.930315][ T5829] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.950600][ T5829] usb 11-1: config 0 descriptor?? [ 462.209997][ T5829] usblp 11-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 462.326482][ T9963] usb usb38-port1: unable to enumerate USB device [ 462.417236][T12489] x_tables: duplicate underflow at hook 2 [ 462.427110][ T42] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 462.429815][ T1159] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 463.805204][T10524] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 463.973648][ T1037] usb 5-1: USB disconnect, device number 20 [ 464.582986][ T35] usb 11-1: USB disconnect, device number 11 [ 464.621995][ T35] usblp0: removed [ 464.747843][ T8939] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 464.791911][T12512] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1699'. [ 464.845199][ T42] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 465.386070][ T1037] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 465.466025][T12521] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1702'. [ 465.874154][T10524] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 466.026362][T12537] 9p: Bad value for 'wfdno' [ 466.160563][T12546] sd 0:0:0:0: PR command failed: 1026 [ 466.160609][T12546] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 466.160703][T12546] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 466.164712][T12546] tipc: Started in network mode [ 466.164729][T12546] tipc: Node identity fed3541954c6, cluster identity 4711 [ 466.165308][T12546] tipc: Enabled bearer , priority 0 [ 466.167915][T12546] syzkaller0: entered promiscuous mode [ 466.167933][T12546] syzkaller0: entered allmulticast mode [ 466.201297][T12545] overlayfs: failed lookup in lower (newroot/171, name='file1', err=-40): overlapping layers [ 466.201753][T12545] overlayfs: failed lookup in lower (newroot/171, name='bus', err=-40): overlapping layers [ 466.213892][T12545] overlayfs: failed lookup in lower (newroot/171, name='file1', err=-40): overlapping layers [ 466.213939][T12545] overlayfs: failed to resolve './file1': -40 [ 466.257228][T12546] tipc: Resetting bearer [ 466.316773][T12544] tipc: Resetting bearer [ 466.346200][T12544] tipc: Disabling bearer [ 466.352533][T12556] ieee802154 phy0 wpan0: encryption failed: -22 [ 466.364130][T12557] netlink: 64 bytes leftover after parsing attributes in process `syz.8.1715'. [ 466.440150][T12559] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 466.476184][T12561] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1716'. [ 466.497679][T12561] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 466.506993][ T1346] usb 11-1: new low-speed USB device number 12 using dummy_hcd [ 466.586107][ T8939] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 466.672285][ T9963] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 467.164090][ T1346] usb 11-1: unable to get BOS descriptor or descriptor too short [ 467.184177][ T1346] usb 11-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 467.189554][ T1346] usb 11-1: unable to read config index 0 descriptor/start: -71 [ 467.189911][ T1346] usb 11-1: can't read configurations, error -71 [ 467.195087][T10524] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 467.286964][T12565] comedi comedi0: comedi_bond: 3:2 3:3 attached, 48 channels from 2 devices [ 467.770492][ T5750] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 468.075610][T12575] Cannot find set identified by id 0 to match [ 468.255735][T12581] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1719'. [ 468.276011][T10524] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 468.281507][ T8945] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 468.529453][ T5750] Bluetooth: hci5: unexpected event for opcode 0x200f [ 468.858710][ T5750] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 469.315044][T10524] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 469.796964][ T37] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 470.161454][T10524] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 470.359611][ T42] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 470.376338][T10524] usb 5-1: Using ep0 maxpacket: 32 [ 470.381918][T10524] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 470.383830][T10524] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 470.383939][T10524] usb 5-1: config 0 has no interfaces? [ 470.400355][T10524] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 470.400454][T10524] usb 5-1: Product: syz [ 470.400535][T10524] usb 5-1: Manufacturer: syz [ 470.400607][T10524] usb 5-1: SerialNumber: syz [ 470.443322][T10524] usb 5-1: config 0 descriptor?? [ 471.314235][ T9963] usb 5-1: USB disconnect, device number 21 [ 471.385043][ T854] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 471.791147][ T8945] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 472.128447][T12629] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1731'. [ 472.203346][T12630] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 472.843115][T10524] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 473.705648][ T9963] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 473.710746][ T8939] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 474.470116][T12642] FAULT_INJECTION: forcing a failure. [ 474.470116][T12642] name failslab, interval 1, probability 0, space 0, times 0 [ 474.470220][T12642] CPU: 0 UID: 0 PID: 12642 Comm: syz.0.1742 Tainted: G L syzkaller #0 PREEMPT(full) [ 474.470250][T12642] Tainted: [L]=SOFTLOCKUP [ 474.470258][T12642] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 474.470269][T12642] Call Trace: [ 474.470293][T12642] [ 474.470302][T12642] dump_stack_lvl+0x100/0x190 [ 474.470334][T12642] should_fail_ex.cold+0x5/0xa [ 474.470359][T12642] should_failslab+0xc2/0x120 [ 474.470389][T12642] kmem_cache_alloc_noprof+0x92/0x6a0 [ 474.470416][T12642] ? trace_create_new_event+0x208/0x840 [ 474.470450][T12642] trace_create_new_event+0x208/0x840 [ 474.470476][T12642] ? __register_event.part.0+0xcd/0x1e0 [ 474.470507][T12642] ? __pfx_trace_create_new_event+0x10/0x10 [ 474.470538][T12642] ? up_write+0x2dc/0x5b0 [ 474.470558][T12642] __trace_add_new_event+0x1c/0xf0 [ 474.470581][T12642] trace_add_event_call+0xd7/0x180 [ 474.470603][T12642] trace_probe_register_event_call+0x32a/0x510 [ 474.470637][T12642] __trace_uprobe_create+0x1891/0x2310 [ 474.470668][T12642] ? __pfx___trace_uprobe_create+0x10/0x10 [ 474.470687][T12642] ? trace_kmalloc+0xeb/0x110 [ 474.470711][T12642] ? __kasan_kmalloc+0xaa/0xb0 [ 474.470736][T12642] ? __kmalloc_noprof+0x350/0x840 [ 474.470758][T12642] ? argv_split+0x173/0x420 [ 474.470786][T12642] ? argv_split+0x359/0x420 [ 474.470808][T12642] ? __pfx___trace_uprobe_create+0x10/0x10 [ 474.470831][T12642] trace_probe_create+0xef/0x100 [ 474.470862][T12642] ? __pfx_trace_probe_create+0x10/0x10 [ 474.470914][T12642] dyn_event_create+0x50/0x90 [ 474.470940][T12642] create_or_delete_trace_uprobe+0x5a/0xb0 [ 474.470961][T12642] trace_parse_run_command+0x1ab/0x3b0 [ 474.470989][T12642] ? __pfx_create_or_delete_trace_uprobe+0x10/0x10 [ 474.471012][T12642] vfs_write+0x2aa/0x1050 [ 474.471035][T12642] ? __pfx_probes_write+0x10/0x10 [ 474.471068][T12642] ? lock_acquire+0x1d1/0x380 [ 474.471098][T12642] ? __fget_files+0x34/0x3d0 [ 474.471128][T12642] ? __pfx_vfs_write+0x10/0x10 [ 474.471154][T12642] ? find_held_lock+0x2b/0x80 [ 474.471180][T12642] ? __fget_files+0x215/0x3d0 [ 474.471215][T12642] ? __fget_files+0x21f/0x3d0 [ 474.471250][T12642] ksys_write+0x12a/0x250 [ 474.471277][T12642] ? __pfx_ksys_write+0x10/0x10 [ 474.471313][T12642] __do_fast_syscall_32+0x13a/0x8b0 [ 474.471346][T12642] do_fast_syscall_32+0x32/0x70 [ 474.471375][T12642] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 474.471403][T12642] RIP: 0023:0xf6fdefec [ 474.471429][T12642] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 474.471439][T12642] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 474.471460][T12642] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000500 [ 474.471475][T12642] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 474.471490][T12642] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 474.471505][T12642] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 474.471520][T12642] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 474.471554][T12642] [ 474.745833][T10524] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 475.627419][ T8945] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 475.751024][ C2] hpet_rtc_timer_reinit: 60 callbacks suppressed [ 475.751045][ C2] hpet: Lost 1 RTC interrupts [ 475.785431][ T854] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 477.458798][ T854] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 477.547617][ T8956] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 477.825457][T12673] netlink: 'syz.7.1739': attribute type 1 has an invalid length. [ 477.951475][T12673] 8021q: adding VLAN 0 to HW filter on device bond5 [ 478.093407][T12685] netlink: 256 bytes leftover after parsing attributes in process `syz.8.1740'. [ 478.224444][T12688] syzkaller0: left promiscuous mode [ 478.224473][T12688] syzkaller0: left allmulticast mode [ 478.239562][ T5750] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 478.334992][T10524] usb 13-1: new high-speed USB device number 20 using dummy_hcd [ 478.455291][ T35] usb 12-1: new high-speed USB device number 8 using dummy_hcd [ 478.486254][T10524] usb 13-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 478.487400][T10524] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 478.487427][T10524] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 478.487445][T10524] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 478.487476][T10524] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.489865][T10524] usb 13-1: config 0 descriptor?? [ 478.508847][ T42] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 478.605415][ T35] usb 12-1: Using ep0 maxpacket: 8 [ 478.606194][ T35] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 478.607457][ T35] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 478.607479][ T35] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 478.607498][ T35] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 478.607516][ T35] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 478.607547][ T35] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.855585][ T35] usb 12-1: GET_CAPABILITIES returned 0 [ 478.855612][ T35] usbtmc 12-1:16.0: can't read capabilities [ 478.930771][T10524] plantronics 0003:047F:FFFF.0017: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 479.058523][ C0] usbtmc 12-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 479.058861][ C0] usbtmc 12-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 479.058902][ C0] usbtmc 12-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 479.058939][ C0] usbtmc 12-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 479.064458][ C0] usbtmc 12-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 479.064510][ C0] usbtmc 12-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 479.064557][ C0] usbtmc 12-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 479.064598][ C0] usbtmc 12-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 479.065292][ C0] usbtmc 12-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 479.065354][ C0] usbtmc 12-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 479.065390][ C0] usbtmc 12-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 479.065427][ C0] usbtmc 12-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 479.065797][ C0] usbtmc 12-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 479.065832][ C0] usbtmc 12-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 479.065864][ C0] usbtmc 12-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 479.065896][ C0] usbtmc 12-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 479.140792][ T42] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 479.216785][ T9963] usb 13-1: USB disconnect, device number 20 [ 479.329276][ T35] usb 12-1: USB disconnect, device number 8 [ 479.346111][ T42] usb 5-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00 [ 479.347749][ T42] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 4096, setting to 1024 [ 479.347780][ T42] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 479.349722][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 479.349744][ T42] usb 5-1: Product: syz [ 479.349756][ T42] usb 5-1: Manufacturer: syz [ 479.359289][ T42] iuu_phoenix 5-1:1.0: iuu_phoenix converter detected [ 479.364066][ T42] usb 5-1: iuu_phoenix converter now attached to ttyUSB0 [ 479.465418][ T1159] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 480.108976][T12702] netlink: 'syz.8.1748': attribute type 7 has an invalid length. [ 480.523399][T10524] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 480.630536][ T9963] usb 5-1: USB disconnect, device number 22 [ 480.656472][ T9963] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 480.659511][ T9963] iuu_phoenix 5-1:1.0: device disconnected [ 480.755842][ T1037] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 480.934999][ T5829] usb 11-1: new high-speed USB device number 14 using dummy_hcd [ 481.085663][ T5829] usb 11-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 481.086642][ T5829] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 481.086682][ T5829] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 481.086705][ T5829] usb 11-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 481.086738][ T5829] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.395721][ T37] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 481.447131][T12718] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1752'. [ 481.560208][ T25] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 481.787489][T10524] usb 12-1: new high-speed USB device number 9 using dummy_hcd [ 481.944945][T10524] usb 12-1: Using ep0 maxpacket: 8 [ 481.946419][T10524] usb 12-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 481.947978][T10524] usb 12-1: config 0 has an invalid interface number: 55 but max is 0 [ 481.948002][T10524] usb 12-1: config 0 has no interface number 0 [ 481.948030][T10524] usb 12-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 481.948048][T10524] usb 12-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 481.948066][T10524] usb 12-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 481.948085][T10524] usb 12-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 59256, setting to 1024 [ 481.948105][T10524] usb 12-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 481.948135][T10524] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.008153][T10524] usb 12-1: config 0 descriptor?? [ 482.009081][T12721] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 482.020005][T10524] ldusb 12-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 482.631826][T10524] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 483.226182][ T9963] usb 12-1: USB disconnect, device number 9 [ 483.226338][ C2] ldusb 12-1:0.55: usb_submit_urb failed (-19) [ 483.272961][ T9963] ldusb 12-1:0.55: LD USB Device #0 now disconnected [ 483.278767][T12721] ldusb: No device or device unplugged -19 [ 483.305381][ T1159] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 483.523602][T12738] overlayfs: conflicting lowerdir path [ 483.551563][T12738] ip6t_REJECT: ECHOREPLY is not supported [ 483.660649][T12743] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 483.710815][T10524] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 483.877045][ T5829] cxacru 11-1:1.0: receive of cm 0x90 failed (-104) [ 483.883240][T12746] cxacru 11-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 483.883268][T12746] cxacru 11-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 483.942007][ T5829] usb 11-1: USB disconnect, device number 14 [ 484.610878][ T37] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 485.023911][T12760] syz.8.1760: vmalloc error: size 16384, failed to allocate pages, mode:0x400cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 485.023990][T12760] CPU: 2 UID: 0 PID: 12760 Comm: syz.8.1760 Tainted: G L syzkaller #0 PREEMPT(full) [ 485.024023][T12760] Tainted: [L]=SOFTLOCKUP [ 485.024033][T12760] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 485.024047][T12760] Call Trace: [ 485.024057][T12760] [ 485.024066][T12760] dump_stack_lvl+0x100/0x190 [ 485.024104][T12760] warn_alloc.cold+0x9e/0xb2 [ 485.024132][T12760] ? __pfx_warn_alloc+0x10/0x10 [ 485.024158][T12760] ? policy_nodemask+0xed/0x4f0 [ 485.024193][T12760] ? alloc_pages_mpol+0x260/0x550 [ 485.024229][T12760] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 485.024266][T12760] ? __get_vm_area_node+0x22b/0x350 [ 485.024305][T12760] __vmalloc_node_range_noprof+0x111c/0x1420 [ 485.024349][T12760] ? io_uring_setup.cold+0x1f4/0x1c5e [ 485.024385][T12760] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 485.024419][T12760] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 485.024456][T12760] ? rcu_is_watching+0x13/0xc0 [ 485.024488][T12760] __kvmalloc_node_noprof+0x3da/0x9b0 [ 485.024517][T12760] ? io_uring_setup.cold+0x1f4/0x1c5e [ 485.024550][T12760] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 485.024575][T12760] ? io_uring_setup.cold+0x1f4/0x1c5e [ 485.024614][T12760] io_uring_setup.cold+0x1f4/0x1c5e [ 485.024650][T12760] ? __pfx_signal_setup_done+0x10/0x10 [ 485.024686][T12760] ? __pfx_io_uring_setup+0x10/0x10 [ 485.024722][T12760] ? do_futex+0x190/0x440 [ 485.024747][T12760] ? __pfx_do_futex+0x10/0x10 [ 485.024790][T12760] ? fpu__clear_user_states+0x156/0x330 [ 485.024828][T12760] ? xfd_validate_state+0x129/0x190 [ 485.024874][T12760] __ia32_sys_io_uring_setup+0xc2/0x170 [ 485.024911][T12760] __do_fast_syscall_32+0x13a/0x8b0 [ 485.024944][T12760] do_fast_syscall_32+0x32/0x70 [ 485.024973][T12760] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 485.025000][T12760] RIP: 0023:0xf705efec [ 485.025028][T12760] Code: Unable to access opcode bytes at 0xf705efc2. [ 485.025039][T12760] RSP: 002b:00000000f544d4bc EFLAGS: 00000282 ORIG_RAX: 00000000000001a9 [ 485.025062][T12760] RAX: ffffffffffffffda RBX: 0000000000000f03 RCX: 0000000080000400 [ 485.025076][T12760] RDX: 00000000f71c0fd7 RSI: 0000000000000001 RDI: 00000000f544d53c [ 485.025091][T12760] RBP: 0000000080000100 R08: 0000000000000000 R09: 0000000000000000 [ 485.025106][T12760] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 485.025120][T12760] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 485.025148][T12760] [ 485.042059][T12760] Mem-Info: [ 485.042075][T12760] active_anon:15701 inactive_anon:1810 isolated_anon:0 [ 485.042075][T12760] active_file:5299 inactive_file:14316 isolated_file:0 [ 485.042075][T12760] unevictable:0 dirty:344 writeback:0 [ 485.042075][T12760] slab_reclaimable:7140 slab_unreclaimable:61997 [ 485.042075][T12760] mapped:35040 shmem:15179 pagetables:1905 [ 485.042075][T12760] sec_pagetables:314 bounce:0 [ 485.042075][T12760] kernel_misc_reclaimable:0 [ 485.042075][T12760] free:22125 free_pcp:2150 free_cma:0 [ 485.042126][T12760] Node 0 active_anon:8kB inactive_anon:20kB active_file:56kB inactive_file:80kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:32kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9344kB pagetables:1212kB sec_pagetables:1140kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 485.042180][T12760] Node 1 active_anon:62796kB inactive_anon:7220kB active_file:21140kB inactive_file:57184kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:140128kB dirty:1376kB writeback:0kB shmem:60716kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7384kB pagetables:6408kB sec_pagetables:116kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 485.042232][T12760] Node 0 DMA free:2520kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 485.042290][T12760] lowmem_reserve[]: 0 278 278 278 278 [ 485.042326][T12760] Node 0 DMA32 free:29268kB boost:22528kB min:35152kB low:38308kB high:41464kB reserved_highatomic:2048kB free_highatomic:172kB active_anon:8kB inactive_anon:20kB active_file:56kB inactive_file:80kB unevictable:0kB writepending:0kB zspages:924kB present:1032196kB managed:284792kB mlocked:0kB bounce:0kB free_pcp:5736kB local_pcp:1588kB free_cma:0kB [ 485.042384][T12760] lowmem_reserve[]: 0 0 0 0 0 [ 485.042419][T12760] Node 1 DMA32 free:56712kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0kB free_highatomic:0kB active_anon:62796kB inactive_anon:7220kB active_file:21140kB inactive_file:57184kB unevictable:0kB writepending:1376kB zspages:5724kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:2864kB local_pcp:1000kB free_cma:0kB [ 485.042476][T12760] lowmem_reserve[]: 0 0 0 0 0 [ 485.042510][T12760] Node 0 DMA: 58*4kB (U) 14*8kB (U) 8*16kB (U) 12*32kB (U) 4*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 2520kB [ 485.042656][T12760] Node 0 DMA32: 817*4kB (UMEH) 190*8kB (UEH) 50*16kB (UMEH) 198*32kB (UMEH) 79*64kB (UMEH) 28*128kB (UME) 14*256kB (UM) 6*512kB (UM) 2*1024kB (M) 0*2048kB 0*4096kB = 29268kB [ 485.042805][T12760] Node 1 DMA32: 194*4kB (UE) 198*8kB (UE) 157*16kB (UE) 251*32kB (UME) 145*64kB (UME) 69*128kB (UME) 34*256kB (UME) 7*512kB (UM) 5*1024kB (U) 4*2048kB (U) 0*4096kB = 56616kB [ 485.042958][T12760] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 485.042980][T12760] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 485.042997][T12760] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 485.043012][T12760] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 485.043026][T12760] 36232 total pagecache pages [ 485.043036][T12760] 1398 pages in swap cache [ 485.043042][T12760] Free swap = 80028kB [ 485.043049][T12760] Total swap = 124996kB [ 485.043057][T12760] 524155 pages RAM [ 485.043064][T12760] 0 pages HighMem/MovableOnly [ 485.043072][T12760] 212065 pages reserved [ 485.043079][T12760] 0 pages cma reserved [ 485.325590][T12762] netlink: 'syz.7.1761': attribute type 7 has an invalid length. [ 485.625802][ T25] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 485.898092][ T43] audit: type=1326 audit(1790577699.325:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12770 comm="syz.7.1764" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 485.898428][ T43] audit: type=1326 audit(1790577699.325:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12770 comm="syz.7.1764" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 485.899721][ T43] audit: type=1326 audit(1790577699.325:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12770 comm="syz.7.1764" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 485.900075][ T43] audit: type=1326 audit(1790577699.325:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12770 comm="syz.7.1764" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 485.903403][ T43] audit: type=1326 audit(1790577699.325:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12770 comm="syz.7.1764" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf705efec code=0x7ffc0000 [ 485.904300][ T43] audit: type=1326 audit(1790577699.325:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12770 comm="syz.7.1764" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 485.904899][ T43] audit: type=1326 audit(1790577699.325:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12770 comm="syz.7.1764" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 485.910300][ T43] audit: type=1326 audit(1790577699.335:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12770 comm="syz.7.1764" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 485.910549][ T43] audit: type=1326 audit(1790577699.335:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12770 comm="syz.7.1764" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 486.665135][ T25] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 487.151377][T12785] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1770'. [ 487.155315][ T37] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 487.299470][T12785] IPVS: You probably need to specify IP address on multicast interface. [ 487.299512][T12785] IPVS: Error connecting to the multicast addr [ 487.716444][T10524] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 487.797810][ C3] bridge0: port 1(bridge_slave_0) entered learning state [ 487.798580][ C3] bridge0: port 2(bridge_slave_1) entered learning state [ 487.811159][ T9963] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 488.306758][T12805] netlink: 'syz.6.1776': attribute type 7 has an invalid length. [ 488.755456][ T25] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 489.077089][ T8953] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 489.121156][T12817] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1781'. [ 489.452677][T12817] kAFS: unparsable volume name [ 489.452943][T12817] kAFS: No cell specified [ 489.785176][T10524] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 489.785672][ T8953] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 490.062060][T12797] syz.6.1774 (12797) used greatest stack depth: 17856 bytes left [ 490.167820][T12840] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 490.434239][T12850] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 490.827201][T10524] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 491.865660][ T25] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 491.972985][ T5754] Bluetooth: hci1: SCO packet too small [ 492.915266][ T8956] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 492.947455][T10524] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 494.055631][T10524] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 494.218456][T12916] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1810'. [ 494.289093][T12914] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1810'. [ 494.299034][T12920] netlink: 428 bytes leftover after parsing attributes in process `syz.7.1813'. [ 494.299064][T12920] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1813'. [ 494.323090][T12914] netlink: 124 bytes leftover after parsing attributes in process `syz.8.1810'. [ 494.825718][ T1037] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 494.827255][ T8939] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 495.065449][T10524] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 495.066046][ T37] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 495.221840][T12937] futex_wake_op: syz.6.1814 tries to shift op by 144; fix this program [ 495.222321][T12937] futex_wake_op: syz.6.1814 tries to shift op by 144; fix this program [ 496.105155][T10524] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 496.341616][T12944] tipc: Started in network mode [ 496.341644][T12944] tipc: Node identity 5a90533d829, cluster identity 4711 [ 496.341824][T12944] tipc: Enabled bearer , priority 0 [ 496.370863][T12944] syzkaller0: entered promiscuous mode [ 496.370895][T12944] syzkaller0: entered allmulticast mode [ 496.478929][T12944] FAULT_INJECTION: forcing a failure. [ 496.478929][T12944] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 496.478962][T12944] CPU: 0 UID: 0 PID: 12944 Comm: syz.6.1820 Tainted: G L syzkaller #0 PREEMPT(full) [ 496.478988][T12944] Tainted: [L]=SOFTLOCKUP [ 496.478995][T12944] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 496.479006][T12944] Call Trace: [ 496.479014][T12944] [ 496.479021][T12944] dump_stack_lvl+0x100/0x190 [ 496.479052][T12944] should_fail_ex.cold+0x5/0xa [ 496.479077][T12944] _copy_from_user+0x2e/0xd0 [ 496.479103][T12944] get_user_ifreq+0x116/0x1c0 [ 496.479125][T12944] sock_do_ioctl+0x16e/0x280 [ 496.479146][T12944] ? __pfx_sock_do_ioctl+0x10/0x10 [ 496.479171][T12944] ? do_vfs_ioctl+0x226/0x13e0 [ 496.479193][T12944] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 496.479216][T12944] compat_sock_ioctl+0x568/0x760 [ 496.479243][T12944] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 496.479266][T12944] ? hook_file_ioctl_common+0x140/0x440 [ 496.479292][T12944] ? __fget_files+0x21f/0x3d0 [ 496.479334][T12944] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 496.479359][T12944] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 496.479383][T12944] __do_fast_syscall_32+0x13a/0x8b0 [ 496.479406][T12944] ? lockdep_hardirqs_on+0x7d/0x110 [ 496.479428][T12944] do_fast_syscall_32+0x32/0x70 [ 496.479452][T12944] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 496.479475][T12944] RIP: 0023:0xf7fe5fec [ 496.479496][T12944] Code: Unable to access opcode bytes at 0xf7fe5fc2. [ 496.479521][T12944] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 496.479539][T12944] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000008922 [ 496.479551][T12944] RDX: 0000000080002280 RSI: 0000000000000000 RDI: 0000000000000000 [ 496.479563][T12944] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 496.479573][T12944] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 496.479585][T12944] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 496.479607][T12944] [ 496.701869][T12952] tracefs: Unknown parameter '' [ 496.808367][T12953] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 496.921131][T12926] Set syz1 is full, maxelem 65536 reached [ 497.127010][T12957] tipc: Enabled bearer , priority 0 [ 497.128867][T12957] syzkaller0: entered promiscuous mode [ 497.128888][T12957] syzkaller0: entered allmulticast mode [ 497.145494][ T25] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 497.179283][T12957] tipc: Resetting bearer [ 497.222682][T12956] tipc: Resetting bearer [ 497.251642][T12956] tipc: Disabling bearer [ 497.338250][T10524] tipc: Node number set to 3623899965 [ 497.829379][T12972] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1828'. [ 497.829417][T12972] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1828'. [ 498.185175][ T25] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 498.671889][ T37] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 498.720827][T12983] syzkaller0: entered promiscuous mode [ 498.720976][T12983] syzkaller0: entered allmulticast mode [ 498.785077][T12981] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1831'. [ 498.785153][T12981] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1831'. [ 498.882437][ T43] kauditd_printk_skb: 149 callbacks suppressed [ 498.882453][ T43] audit: type=1326 audit(1790577712.305:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12984 comm="syz.0.1833" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 498.884630][ T43] audit: type=1326 audit(1790577712.305:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12984 comm="syz.0.1833" exe="/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 498.899311][ T43] audit: type=1326 audit(1790577712.315:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12984 comm="syz.0.1833" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 498.899413][ T43] audit: type=1326 audit(1790577712.315:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12984 comm="syz.0.1833" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 499.235671][ T25] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 499.971752][ T8945] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 500.321088][T10524] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 500.323619][ T8951] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 501.237823][ T1438] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.237873][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.940702][ T25] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 501.995259][ T9963] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 502.141674][T12990] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 502.820481][T13029] FAULT_INJECTION: forcing a failure. [ 502.820481][T13029] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 502.820515][T13029] CPU: 2 UID: 0 PID: 13029 Comm: syz.6.1845 Tainted: G L syzkaller #0 PREEMPT(full) [ 502.820543][T13029] Tainted: [L]=SOFTLOCKUP [ 502.820550][T13029] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 502.820562][T13029] Call Trace: [ 502.820570][T13029] [ 502.820579][T13029] dump_stack_lvl+0x100/0x190 [ 502.820611][T13029] should_fail_ex.cold+0x5/0xa [ 502.820636][T13029] _copy_to_user+0x32/0xd0 [ 502.820665][T13029] simple_read_from_buffer+0xcb/0x170 [ 502.820692][T13029] proc_fail_nth_read+0x1af/0x230 [ 502.820717][T13029] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 502.820743][T13029] ? rw_verify_area+0xce/0x6d0 [ 502.820763][T13029] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 502.820786][T13029] vfs_read+0x1e4/0xb40 [ 502.820808][T13029] ? lock_acquire+0x1d1/0x380 [ 502.820834][T13029] ? __fget_files+0x34/0x3d0 [ 502.820861][T13029] ? __pfx_vfs_read+0x10/0x10 [ 502.820879][T13029] ? find_held_lock+0x2b/0x80 [ 502.820900][T13029] ? __fget_files+0x215/0x3d0 [ 502.820925][T13029] ? __fget_files+0x21f/0x3d0 [ 502.820954][T13029] ksys_read+0x12a/0x250 [ 502.820973][T13029] ? __pfx_ksys_read+0x10/0x10 [ 502.821001][T13029] do_int80_emulation+0x166/0x650 [ 502.821027][T13029] asm_int80_emulation+0x1a/0x20 [ 502.821045][T13029] RIP: 0023:0xf71e75ab [ 502.821060][T13029] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 502.821077][T13029] RSP: 002b:00000000f54a64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 502.821096][T13029] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f54a65d0 [ 502.821108][T13029] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 502.821118][T13029] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 502.821129][T13029] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 502.821139][T13029] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 502.821164][T13029] [ 502.940643][T13028] gre1: entered promiscuous mode [ 503.002630][T10524] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 504.028907][T10524] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 504.382064][T13062] netlink: 'syz.8.1852': attribute type 1 has an invalid length. [ 504.427630][ T8938] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 505.067338][ T25] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 506.011953][ T8938] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 506.012338][ T8938] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 506.404223][T13098] syzkaller0: entered promiscuous mode [ 506.404244][T13098] syzkaller0: entered allmulticast mode [ 507.065479][ T25] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 507.183194][T13113] netlink: 'syz.8.1869': attribute type 2 has an invalid length. [ 507.195233][T10524] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 507.306108][ T5754] Bluetooth: hci6: unexpected event for opcode 0x0000 [ 507.335019][T10524] usb 5-1: device descriptor read/64, error -71 [ 507.575155][T10524] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 507.725373][T10524] usb 5-1: device descriptor read/64, error -71 [ 507.838002][T10524] usb usb5-port1: attempt power cycle [ 508.175219][T10524] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 508.216408][T10524] usb 5-1: device descriptor read/8, error -71 [ 508.363780][ T25] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 508.466508][T10524] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 508.497349][T10524] usb 5-1: device descriptor read/8, error -71 [ 508.618099][T10524] usb usb5-port1: unable to enumerate USB device [ 509.064251][T13146] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 509.324520][T13158] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 509.354094][ T5754] Bluetooth: hci5: unexpected event for opcode 0x1004 [ 509.386402][T10524] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 509.547944][ T1037] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 510.053350][T13183] netlink: 'syz.0.1896': attribute type 2 has an invalid length. [ 510.186341][ T8938] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 510.425635][ T25] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 511.069458][T13189] lo: entered allmulticast mode [ 511.075495][ T8956] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 511.309955][ T5754] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 511.310577][ T5754] Bluetooth: hci6: Injecting HCI hardware error event [ 511.312494][ T5754] Bluetooth: hci6: hardware error 0x00 [ 511.445511][ C2] hpet: Lost 1 RTC interrupts [ 511.489778][ T8956] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 512.186584][T13213] FAULT_INJECTION: forcing a failure. [ 512.186584][T13213] name failslab, interval 1, probability 0, space 0, times 0 [ 512.186622][T13213] CPU: 2 UID: 0 PID: 13213 Comm: syz.0.1905 Tainted: G L syzkaller #0 PREEMPT(full) [ 512.186652][T13213] Tainted: [L]=SOFTLOCKUP [ 512.186660][T13213] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 512.186673][T13213] Call Trace: [ 512.186681][T13213] [ 512.186690][T13213] dump_stack_lvl+0x100/0x190 [ 512.186735][T13213] should_fail_ex.cold+0x5/0xa [ 512.186764][T13213] should_failslab+0xc2/0x120 [ 512.186795][T13213] kmem_cache_alloc_noprof+0x92/0x6a0 [ 512.186824][T13213] ? __kernfs_new_node+0xd2/0xa10 [ 512.186860][T13213] __kernfs_new_node+0xd2/0xa10 [ 512.186893][T13213] ? __pfx___kernfs_new_node+0x10/0x10 [ 512.186927][T13213] ? lock_acquire+0x1d1/0x380 [ 512.186957][T13213] ? kernfs_root+0x23/0x2a0 [ 512.186984][T13213] ? find_held_lock+0x2b/0x80 [ 512.187007][T13213] ? kernfs_root+0xee/0x2a0 [ 512.187062][T13213] ? kernfs_root+0xee/0x2a0 [ 512.187096][T13213] kernfs_new_node+0x117/0x150 [ 512.187129][T13213] __kernfs_create_file+0x53/0x350 [ 512.187156][T13213] sysfs_add_file_mode_ns+0x207/0x3c0 [ 512.187188][T13213] internal_create_group+0x593/0xfb0 [ 512.187222][T13213] ? __pfx_internal_create_group+0x10/0x10 [ 512.187255][T13213] ? kernfs_create_link+0x1bd/0x240 [ 512.187283][T13213] internal_create_groups+0x9d/0x150 [ 512.187313][T13213] device_add+0x71a/0x1970 [ 512.187337][T13213] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 512.187367][T13213] ? __pfx_device_add+0x10/0x10 [ 512.187389][T13213] ? lockdep_init_map_type+0x5c/0x250 [ 512.187421][T13213] ? __init_waitqueue_head+0xca/0x150 [ 512.187447][T13213] netdev_register_kobject+0x1df/0x410 [ 512.187479][T13213] register_netdevice+0x15b6/0x25a0 [ 512.187508][T13213] ? __pfx_register_netdevice+0x10/0x10 [ 512.187530][T13213] ? net_generic+0xea/0x2a0 [ 512.187585][T13213] register_netdev+0x34/0x50 [ 512.187609][T13213] ip6_tnl_init_net+0x2ff/0x480 [ 512.187636][T13213] ? __pfx_ip6_tnl_init_net+0x10/0x10 [ 512.187660][T13213] ops_init+0x1e2/0x5f0 [ 512.187685][T13213] setup_net+0x118/0x3a0 [ 512.187716][T13213] ? __pfx_setup_net+0x10/0x10 [ 512.187744][T13213] copy_net_ns+0x345/0x7a0 [ 512.187770][T13213] create_new_namespaces+0x3ea/0xac0 [ 512.187807][T13213] unshare_nsproxy_namespaces+0xf2/0x220 [ 512.187840][T13213] ksys_unshare+0x4a2/0xa70 [ 512.187862][T13213] ? __pfx_ksys_unshare+0x10/0x10 [ 512.187893][T13213] __ia32_sys_unshare+0x30/0x40 [ 512.187915][T13213] __do_fast_syscall_32+0x13a/0x8b0 [ 512.187944][T13213] do_fast_syscall_32+0x32/0x70 [ 512.187970][T13213] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 512.187997][T13213] RIP: 0023:0xf6fdefec [ 512.188021][T13213] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 512.188031][T13213] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 512.188053][T13213] RAX: ffffffffffffffda RBX: 000000006a040000 RCX: 0000000000000000 [ 512.188066][T13213] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 512.188079][T13213] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 512.188092][T13213] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 512.188104][T13213] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 512.188132][T13213] [ 512.344499][T13212] netlink: 'syz.8.1895': attribute type 1 has an invalid length. [ 512.344520][T13212] netlink: 756 bytes leftover after parsing attributes in process `syz.8.1895'. [ 512.358978][T13162] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 512.610321][T13221] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1899'. [ 512.626253][T13221] syzkaller1: entered promiscuous mode [ 512.626277][T13221] syzkaller1: entered allmulticast mode [ 512.859631][T13223] netlink: 'syz.7.1900': attribute type 12 has an invalid length. [ 512.859654][T13223] netlink: 'syz.7.1900': attribute type 29 has an invalid length. [ 512.859667][T13223] netlink: 148 bytes leftover after parsing attributes in process `syz.7.1900'. [ 512.859684][T13223] netlink: 'syz.7.1900': attribute type 1 has an invalid length. [ 512.859696][T13223] netlink: 'syz.7.1900': attribute type 2 has an invalid length. [ 512.859708][T13223] netlink: 11 bytes leftover after parsing attributes in process `syz.7.1900'. [ 512.861060][T13223] netlink: 'syz.7.1900': attribute type 12 has an invalid length. [ 512.861077][T13223] netlink: 'syz.7.1900': attribute type 29 has an invalid length. [ 512.861088][T13223] netlink: 148 bytes leftover after parsing attributes in process `syz.7.1900'. [ 512.861102][T13223] netlink: 'syz.7.1900': attribute type 1 has an invalid length. [ 512.861113][T13223] netlink: 'syz.7.1900': attribute type 2 has an invalid length. [ 512.861124][T13223] netlink: 11 bytes leftover after parsing attributes in process `syz.7.1900'. [ 512.861634][T13223] netlink: 84 bytes leftover after parsing attributes in process `syz.7.1900'. [ 513.319192][T13233] trusted_key: encrypted_key: insufficient parameters specified [ 513.461460][ C2] hpet: Lost 1 RTC interrupts [ 513.472383][ T5754] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 513.654988][ T1037] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 513.814001][T13250] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 513.815274][ T1037] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.03 [ 513.815957][ T1037] usb 5-1: Dual-Role OTG device on HNP port [ 513.816231][ T1037] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.424117][ C2] hpet: Lost 1 RTC interrupts [ 515.119856][ T1037] usb 5-1: No union descriptors [ 515.121321][ T1037] gspca_main: spca501-2.14.0 probing 0000:0000 [ 515.121956][ T1037] gspca_spca501: reg write: error -32 [ 515.121969][ T1037] spca501 5-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 515.122034][ T1037] spca501 5-1:1.0: probe with driver spca501 failed with error -22 [ 515.344364][ T12] ------------[ cut here ]------------ [ 515.344380][ T12] workqueue: cannot queue nci_cmd_work on wq nfc2_nci_cmd_wq [ 515.344411][ T12] WARNING: kernel/workqueue.c:2352 at __queue_work+0xdb7/0x1370, CPU#3: kworker/u32:0/12 [ 515.353800][ T12] Modules linked in: [ 515.357512][ T12] CPU: 3 UID: 0 PID: 12 Comm: kworker/u32:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 515.361850][ T12] Tainted: [L]=SOFTLOCKUP [ 515.363838][ T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 515.367914][ T12] Workqueue: nfc2_nci_rx_wq nci_rx_work [ 515.370204][ T12] RIP: 0010:__queue_work+0xdbb/0x1370 [ 515.372290][ T12] Code: 00 00 00 fc ff df 49 8d 94 24 70 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 84 05 00 00 48 8d 3d 29 43 78 0f 48 8b 75 18 <67> 48 0f b9 3a 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03 [ 515.379181][ T12] RSP: 0000:ffffc900001e7a40 EFLAGS: 00010046 [ 515.381448][ T12] RAX: dffffc0000000000 RBX: ffff888026cc1000 RCX: 1ffff1100f10e022 [ 515.384627][ T12] RDX: ffff8880298be170 RSI: ffffffff8ba2d9c0 RDI: ffffffff91486f90 [ 515.387602][ T12] RBP: ffff8880788700f8 R08: 0000000000000005 R09: 0000000000000000 [ 515.390428][ T12] R10: 0000000000200000 R11: 000000000000761b R12: ffff8880298be000 [ 515.393587][ T12] R13: 1ffff9200003cf52 R14: 0000000000000020 R15: 0000000000000084 [ 515.397000][ T12] FS: 0000000000000000(0000) GS:ffff888096c55000(0000) knlGS:0000000000000000 [ 515.400124][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 515.402187][ T12] CR2: 000000000c3aef55 CR3: 0000000078b7d000 CR4: 0000000000352ef0 [ 515.405030][ T12] Call Trace: [ 515.406431][ T12] [ 515.407639][ T12] ? lockdep_hardirqs_on+0x7d/0x110 [ 515.409928][ T12] ? irqentry_exit+0x24d/0xa10 [ 515.412307][ T12] ? __pfx___queue_work+0x10/0x10 [ 515.414999][ T12] ? queue_work_on+0xea/0x1e0 [ 515.417016][ T12] queue_work_on+0x180/0x1e0 [ 515.419015][ T12] nci_rsp_packet+0x297/0x3420 [ 515.421048][ T12] ? nfc_send_to_raw_sock+0x146/0x280 [ 515.433009][ T12] nci_rx_work+0x29c/0x430 [ 515.435029][ T12] process_one_work+0xac7/0x1b10 [ 515.438838][ T12] ? __pfx_process_one_work+0x10/0x10 [ 515.441119][ T12] ? lock_acquire+0x1d1/0x380 [ 515.443100][ T12] ? __pfx_nci_rx_work+0x10/0x10 [ 515.445188][ T12] worker_thread+0x5ef/0xe50 [ 515.447120][ T12] ? kthread+0x13a/0x450 [ 515.448896][ T12] ? __pfx_worker_thread+0x10/0x10 [ 515.450855][ T12] kthread+0x373/0x450 [ 515.452355][ T12] ? __pfx_kthread+0x10/0x10 [ 515.454429][ T12] ret_from_fork+0x730/0xd60 [ 515.456744][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 515.458982][ T12] ? __switch_to+0x800/0x10f0 [ 515.461054][ T12] ? __pfx_kthread+0x10/0x10 [ 515.462998][ T12] ret_from_fork_asm+0x1a/0x30 [ 515.465307][ T12] [ 515.466892][ T12] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 515.470052][ T12] CPU: 3 UID: 0 PID: 12 Comm: kworker/u32:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 515.475081][ T12] Tainted: [L]=SOFTLOCKUP [ 515.476938][ T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 515.481077][ T12] Workqueue: nfc2_nci_rx_wq nci_rx_work [ 515.483959][ T12] Call Trace: [ 515.485389][ T12] [ 515.486605][ T12] dump_stack_lvl+0x100/0x190 [ 515.488661][ T12] vpanic+0x553/0x970 [ 515.490298][ T12] ? __pfx_vpanic+0x10/0x10 [ 515.492162][ T12] panic+0xd1/0xe0 [ 515.493647][ T12] ? __pfx_panic+0x10/0x10 [ 515.495456][ T12] check_panic_on_warn.cold+0x19/0x34 [ 515.497754][ T12] ? __queue_work+0xdb7/0x1370 [ 515.499756][ T12] __warn.cold+0x191/0x318 [ 515.501616][ T12] __report_bug+0x30f/0x440 [ 515.503374][ T12] ? __queue_work+0xdb7/0x1370 [ 515.505424][ T12] ? __pfx___report_bug+0x10/0x10 [ 515.507580][ T12] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 515.510051][ T12] ? lockdep_hardirqs_on+0x7d/0x110 [ 515.512178][ T12] ? __pfx_nci_cmd_work+0x10/0x10 [ 515.514409][ T12] ? trace_sched_exit_tp+0x120/0x160 [ 515.516512][ T12] ? __schedule+0x126b/0x6920 [ 515.518398][ T12] report_bug_entry+0xe2/0x290 [ 515.520324][ T12] ? __queue_work+0xdbb/0x1370 [ 515.522199][ T12] handle_bug+0x1cd/0x2a0 [ 515.523978][ T12] exc_invalid_op+0x17/0x50 [ 515.526063][ T12] asm_exc_invalid_op+0x1a/0x20 [ 515.528476][ T12] RIP: 0010:__queue_work+0xdbb/0x1370 [ 515.530937][ T12] Code: 00 00 00 fc ff df 49 8d 94 24 70 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 84 05 00 00 48 8d 3d 29 43 78 0f 48 8b 75 18 <67> 48 0f b9 3a 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03 [ 515.539202][ T12] RSP: 0000:ffffc900001e7a40 EFLAGS: 00010046 [ 515.541829][ T12] RAX: dffffc0000000000 RBX: ffff888026cc1000 RCX: 1ffff1100f10e022 [ 515.545271][ T12] RDX: ffff8880298be170 RSI: ffffffff8ba2d9c0 RDI: ffffffff91486f90 [ 515.549048][ T12] RBP: ffff8880788700f8 R08: 0000000000000005 R09: 0000000000000000 [ 515.552659][ T12] R10: 0000000000200000 R11: 000000000000761b R12: ffff8880298be000 [ 515.556095][ T12] R13: 1ffff9200003cf52 R14: 0000000000000020 R15: 0000000000000084 [ 515.559603][ T12] ? __pfx_nci_cmd_work+0x10/0x10 [ 515.561883][ T12] ? lockdep_hardirqs_on+0x7d/0x110 [ 515.564578][ T12] ? irqentry_exit+0x24d/0xa10 [ 515.566836][ T12] ? __pfx___queue_work+0x10/0x10 [ 515.569115][ T12] ? queue_work_on+0xea/0x1e0 [ 515.571254][ T12] queue_work_on+0x180/0x1e0 [ 515.573244][ T12] nci_rsp_packet+0x297/0x3420 [ 515.575271][ T12] ? nfc_send_to_raw_sock+0x146/0x280 [ 515.577352][ T12] nci_rx_work+0x29c/0x430 [ 515.579214][ T12] process_one_work+0xac7/0x1b10 [ 515.581357][ T12] ? __pfx_process_one_work+0x10/0x10 [ 515.583569][ T12] ? lock_acquire+0x1d1/0x380 [ 515.585571][ T12] ? __pfx_nci_rx_work+0x10/0x10 [ 515.587612][ T12] worker_thread+0x5ef/0xe50 [ 515.589543][ T12] ? kthread+0x13a/0x450 [ 515.591298][ T12] ? __pfx_worker_thread+0x10/0x10 [ 515.593618][ T12] kthread+0x373/0x450 [ 515.595636][ T12] ? __pfx_kthread+0x10/0x10 [ 515.597785][ T12] ret_from_fork+0x730/0xd60 [ 515.599740][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 515.601836][ T12] ? __switch_to+0x800/0x10f0 [ 515.603690][ T12] ? __pfx_kthread+0x10/0x10 [ 515.605631][ T12] ret_from_fork_asm+0x1a/0x30 [ 515.607604][ T12] [ 515.609597][ T12] Kernel Offset: disabled [ 515.611319][ T12] Rebooting in 86400 seconds..