last executing test programs: 1m49.555309735s ago: executing program 2 (id=30): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x8c) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, &(0x7f0000000580)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d307830303030303030303030303031303030"]) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0x4a8e) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x804000, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, r2, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x40000, 0x73) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 1m48.161055971s ago: executing program 2 (id=33): r0 = socket$inet6(0xa, 0x2, 0x3a) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@ipv6_newaddrlabel={0x1c, 0x48, 0x300, 0x70bd2a, 0x25dfdbff, {0xa, 0x0, 0x1f, 0x0, r2, 0x7}}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) (async) r3 = getpid() (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/apparmor/.access\x00', 0x2, 0x0) write(r4, &(0x7f00000002c0)="70726f66696c6500fc", 0xfef) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140)) kcmp(r3, r3, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) (async) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000080)=0x7fff, 0x4) sendto$inet6(r0, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x4000, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r5, 0x0) (async) r6 = openat$cgroup_ro(r5, &(0x7f0000000200)='cgroup.kill\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@bloom_filter={0x1e, 0x0, 0x401, 0xe7, 0x22, r5, 0x10000, '\x00', r2, r5, 0x5, 0x5, 0x3, 0x3}, 0x50) (async) openat$sw_sync_info(0xffffff9c, &(0x7f0000000440), 0x100, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r6, 0x58, &(0x7f0000000240)={0x0, 0x0}}, 0x10) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={r7}, 0xc) bpf$BPF_GET_PROG_INFO(0x4, &(0x7f0000000000)={r8, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b, 0x1, 0x8, 0xfffffffffffffcbf, 0x0}}, 0x10) (async) signalfd(r0, &(0x7f00000002c0)={[0x79b, 0xd]}, 0x8) (async) fallocate(r6, 0x0, 0x8000, 0xffffffff) recvmmsg(r0, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x10102, 0x0) (async) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x1, 0x9}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES8=r9, @ANYRES32, @ANYRES8=0x0, @ANYBLOB="5fe52f147bc63ec641d4b2df0ae80f3221c56a041029cf05a22e1c892ec60a5c0afaa88102cefb04dba06baea0319015a863524a6ff97672963364435ad54a3f5f1722c92773fff10c9c4d3e1aad5dc486c55d09da630049eeb423e3ed15b4c1215cd7afcdd502a0550ce5a99da83906124b93dc700a47bd113b427946de4200598330e9a9467fce80470d56718f11228c1ab50f061cb12cf28fa9cb901d513b47c112d06478eedb8340fac707a2c5b9f1565c06bbdbc478c9dde135478a84cb19d5", @ANYRES32=r10, @ANYBLOB="010000000300000000"], 0x50) 1m47.034280987s ago: executing program 2 (id=40): syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0xf, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffff7}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x50}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x48885) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) getpid() mkdirat(0xffffffffffffffff, &(0x7f0000000400)='./sys/bus/pci/rescan\x00', 0x1f7) r4 = syz_open_dev$usbfs(0x0, 0x80, 0x113201) read$usbfs(r4, &(0x7f0000000600)=""/234, 0xea) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r3) write(r5, &(0x7f00000000c0)='1\x00', 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r6, &(0x7f0000000700)="3100d90daaa91f198d99db922334963f621e49a6ca0b870113948d1bd6e243e5da22cf2ba7bca0e3865eaa6666cca12e329a784c6e63a08e7d57f2e2a6fa1f85d8a30f16645140e37208d917f43c0e86486bb3e9fd67f758c7f029fcbacd68c67fd996ba190681103b5cb8dbd189543ac4d64867e39469625a900852b3220d4788d9f52245fb79fec8cffbcf9a5d9764a4d5c3af2d283279ca35f820d073a1f7a0e134b89c8a9433c78e6698004ab5f3584de90135190d323bf6d75843821518979868ae7c7734c0", 0xc8) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000008c0), 0x103000, 0x0) ioctl$KVM_GET_MSRS_sys(r7, 0xc008ae88, &(0x7f00000003c0)={0x1, 0x0, [{0x8b, 0x0, 0x8}]}) 1m46.110466661s ago: executing program 2 (id=42): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x8c) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, &(0x7f0000000580)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d307830303030303030303030303031303030"]) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0x4a8e) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x804000, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, r2, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x40000, 0x73) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 1m45.905132077s ago: executing program 3 (id=43): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x2}) r1 = syz_io_uring_setup(0x29d7, &(0x7f0000000540)={0x0, 0x8552, 0x3100, 0xfffffffd, 0x31c}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_WAITID={0x32, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x1, 0x1, 0x61, 0x0, 0x0) io_uring_enter(r1, 0x64f1, 0xb673, 0x1, &(0x7f0000000240)={[0x9, 0x80000005]}, 0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_int(r5, 0x1, 0x12, 0x0, &(0x7f0000000040)) socket(0x10, 0x3, 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r6 = getpgrp(0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f00007bf000/0x4000)=nil, 0x4000, 0xb635773f06ebbee7, 0x1010, 0xffffffffffffffff, 0x1b5c9000) r7 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x40d00) ioctl$FE_DISEQC_RECV_SLAVE_REPLY(r7, 0x800c6f40, &(0x7f00000000c0)={""/4, 0x4}) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) r9 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000013c0)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x24, 0x3, "d67a8527f76ec1d39e537c4c3060c6a405106c72848aa8bcb429b3a20d532452"}, @NFTA_MATCH_NAME={0xe, 0x1, 'connlimit\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa8}}, 0x4048010) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r11, 0xffffffffffffffff, 0x0) 1m45.322829124s ago: executing program 3 (id=49): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) clock_gettime(0xffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) capset(&(0x7f00000009c0)={0x20071026}, &(0x7f0000000a00)={0x2, 0x40000002, 0x8, 0x8, 0x1}) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/nullb0/queue/scheduler\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='kyber', 0x5) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x175a978679bbbe1d, 0x80a0a1240160183d) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x4) renameat(r2, &(0x7f0000000080)='./file0\x00', r3, &(0x7f0000000180)='./file1\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') r4 = fsopen(&(0x7f0000000040)='hpfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, 0x0, 0x0) chdir(&(0x7f00000000c0)='./file1\x00') r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) mmap$snddsp(&(0x7f0000556000/0x2000)=nil, 0x2000, 0x1000007, 0x12, r1, 0x3000) pwrite64(r5, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 1m45.193880004s ago: executing program 2 (id=52): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000cc0), r1) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0xa25, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x2000000}, 0x8000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x13, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000fef7ffff000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000040000000850000007300000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000a8000000850000000500000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="37ec000000000000140012800b0001006970766c616e00000400028008003f00ff01"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0xc000802) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x2d, 0x107, 0x0, 0x25dfdbff, {0x8, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) socket$inet6(0xa, 0x4, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee688a100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1e00000006000000030000000700000001000000021c97bc1f4b6a447750217ead2c8da29bac68565c7a9d5ea36cda011362878d88e47b7daaec047ea3fd4c248ffe5e9c687843f9b42afcef1be9f976c7ff6411ee54830eabbccf4958dd7062e87e79e8578c0991", @ANYRES32=0x1, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000003000000010000000700"/28], 0x50) 1m43.870973532s ago: executing program 3 (id=57): timer_settime(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mremap(&(0x7f000049f000/0x3000)=nil, 0x3000, 0x2000, 0xd3c28bec76034d2a, &(0x7f0000452000/0x2000)=nil) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(0xffffffffffffffff, 0x8) connect$inet(r0, &(0x7f0000000010)={0x2, 0x4620, @loopback}, 0x10) openat$yama_ptrace_scope(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) preadv(r1, &(0x7f0000000500)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x529043, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000000)={0x3, 'tunl0\x00', {0x1}, 0x7}) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) munmap(&(0x7f0000000000/0x1000)=nil, 0x1000) socket$inet(0x2, 0x3, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mmap(&(0x7f0000f79000/0x3000)=nil, 0x3000, 0x300000c, 0x2010, 0xffffffffffffffff, 0x3165c000) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) prctl$PR_SCHED_CORE(0x3e, 0x2, r3, 0x3, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000b44000/0x1000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 1m43.716543634s ago: executing program 2 (id=60): timer_create(0x4, &(0x7f0000000200)={0x0, 0x34, 0x0, @thr={&(0x7f0000000000)="0b54a99b9dba86524b8cb87ee126b38ea6dfa6594a86bdc3fd09e695d66173959f9811d69c0a9265781e6251b99afc45883b914df61f99a6f15683dd54e91e022afab1269f460f8d9f2227a932c063e90a9d36439c6838f4d3db2e8118b4c88650334d8054d46fc6064cb22bf2afad6b6ef5d9ee023b352f551608e493cc6ddbf250623ca9b4fe1fb95fe023b983b28553a83e6d4fa92100aaef3df9beec6faa3aa923599486ce7271335a7fc1b45aa59095e3374943de3d2838c1fa3a99df0817b012642bfb717aaa2fd4a16e", &(0x7f0000000100)="871825747c6392578178866b6c8b09a8c605483ab638c6de00b01612d0f2e5a93ae698d589c168ccfbac8b396bdb8875d03fa896f4ddefd8ee95021df5972a4c9f2f5c698ec13cda16452505ed77009f5b8f12a4d6f3b54da694e37bb6cec71744e6abba0f5322910fe3d137714da7d04057c8890178ba89bf4db5026b41753cff577ffdd5e55d92546e9198799f13651a0a11c120f636f584bad186798c0ba517174aa01b582861b88e9d0eb881ef8f4295bdaf3dfbce71a1168d754b6c004415b750b472aed403"}}, &(0x7f0000000240)=0x0) timer_settime(r0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}}, &(0x7f00000002c0)) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$vnet(0xffffff9c, &(0x7f0000000300), 0x2, 0x0) r3 = openat$nmem0(0xffffff9c, &(0x7f0000000340), 0x840, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000380)={0x3, r3}) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000580)={0x18, &(0x7f00000003c0)={0x40, 0x23, 0x1c, {0x1c, 0x24, "86232c2214d698b8a0773da817e317734e0b15637dd36b90ebd5"}}, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x140a}}, &(0x7f0000000440)={0x0, 0xf, 0x9b, {0x5, 0xf, 0x9b, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x12, 0x2, 0xd, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0x10, "29bc724aa518538dabe1efe071ebcb42"}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "9aefbe3479d397a641e4487994c60a3b"}, @ptm_cap={0x3}, @generic={0x64, 0x10, 0x2, "dde1270f799f53a20bf9b16a0ca7b3faf38da1675cdaffa045af28213c25ea8edad6f1efc7527d34177d260aa65c957562f89a6ac9358b036e0f687753b8be61a22c30569076251b2c063b8219bb7aad70589464a9296ff722e17d337e96c18441"}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x18, 0x6, 0x6, "aea51334", "cd64fe2f"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x1, 0x0, 0x1d, 0x5, 0x6, 0x5266}}}, &(0x7f0000000a40)={0x44, &(0x7f00000005c0)={0x20, 0x18, 0x7e, "6117017287a1be601cc75cc56df6cf375d9c6656416e93a117420f72044dfaba774b95a71690d674dad3851b97fdfcc79179c46a3253973e082036521ea6428bd998542856c37095d7e6656e2cf156da72a4bd90dcd76983f503e615877a3faf311d9e875ec2f45a8ed608573523f24487f06938745eb6fa72ab0d623c6f"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0xff}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xf2}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000740)={0x20, 0x0, 0x8, {0x5c0, 0x10, [0x0]}}, &(0x7f0000000780)={0x40, 0x7, 0x2, 0x2}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000800)={0x40, 0xb, 0x2, "49db"}, &(0x7f0000000840)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000880)={0x40, 0x13, 0x6, @remote}, &(0x7f00000008c0)={0x40, 0x17, 0x6, @random="f8e346fac99b"}, &(0x7f0000000900)={0x40, 0x19, 0x2, "5282"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0xfff9}, &(0x7f0000000980)={0x40, 0x1c, 0x1}, &(0x7f00000009c0)={0x40, 0x1e, 0x1}, &(0x7f0000000a00)={0x40, 0x21, 0x1, 0xf7}}) ioctl$F2FS_IOC_DEFRAGMENT(r2, 0xc010f508, &(0x7f0000000ac0)={0x3, 0x4}) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) write$FUSE_INIT(r3, &(0x7f0000000b00)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x80, 0x6000000, 0x6, 0x7, 0x5, 0x3, 0x0, 0x0, 0x10, 0x2}}, 0x50) mq_notify(r3, &(0x7f0000000cc0)={0x0, 0x16, 0x1, @thr={&(0x7f0000000b80)="4c8298ccfb772527fc7c29677beb420a21fb687fd1ebb1ccd97b21aac3cfd33368615403b7b94bf659ee2b2ff80a127cc059dbbf29a2cb9d3cacc10fe781bade5c08a7cdc96028f4f7433e484a46e63ad7a9d4032c4aa48c09a83ae9ef551436378ebebe7635d15005cd489c587c5d3def4a0e776e89e2aaefa7c119d2fd38aa4317027011e34b496db48e27b4b24c9e12531ba1ae59a20d0cc0b0ef921cec857c4c738f4470ba075a38982faed4be2390738041f603ddb93cd9619d69f2cc6d556bca979bd04a9c7593d7d571", &(0x7f0000000c80)="1ed332e7a762b8900516eb13eff6e0e8067f118bb7787c59fd1fc51f1154ba58a56f9a281f1b3e643aa3f2df057252c07c5a"}}) timer_settime(r0, 0x1, &(0x7f0000000d00)={{}, {0x0, 0x989680}}, &(0x7f0000000d40)) setsockopt$IP_VS_SO_SET_EDITDEST(r3, 0x0, 0x489, &(0x7f0000000d80)={{0x8, @private=0xa010100, 0x4e23, 0x3, 'wlc\x00', 0x8, 0x1, 0x5}, {@loopback, 0x4e21, 0x2, 0x10, 0xfffffff8, 0x7}}, 0x44) openat$kvm(0xffffff9c, &(0x7f0000000e00), 0x80000, 0x0) rt_sigtimedwait(&(0x7f0000000e40)={[0x10, 0x5]}, &(0x7f0000000e80), &(0x7f0000000f00)={0x77359400}, 0x8) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000f40)={[0x9, 0x8001, 0x72, 0x9, 0xfffffffffffffffb, 0x6, 0x401, 0x8, 0x8001, 0x7, 0x22, 0x0, 0x5, 0x4, 0x6, 0x8], 0x100000, 0x100100}) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x38, 0x1411, 0x400, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004860}, 0x40000) epoll_pwait(r3, &(0x7f0000001100)=[{}, {}], 0x2, 0x3, &(0x7f0000001140)={[0x3, 0x6]}, 0x8) sendmsg$kcm(r3, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001180)="abc34c5ff578e92fb0333a73f7b5f739ca8c2503a0bbd450", 0x18}, {&(0x7f00000011c0)="d24d50570e8967d0406d5bd2ab8c489921bb1ea35248c17339f259a0af10841e7ecf318c037b5d284dd82041a775ed4fa7b539bc6ae6d548bbcc2dc9197145518e466cbf549b9232a5003b19a098c3141a4b62330efb172ef0f0b32ae6d886a8067de781cf8fac1b277397a124be47dd6eb978fe0b573f8c65589ed0680a308378c817422dcfa236686f0aec5f7533cd7548b81a620c3ecacaeec315dc7b261967928c25095534e95166c87d9fc4e4a63c187e85c5aac3287bd67d0759a4621139341f4730", 0xc5}], 0x2}, 0x4000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001340)={'batadv_slave_1\x00', 0x0}) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000001380)={@loopback, r5}, 0x14) write$UHID_INPUT(r3, &(0x7f00000013c0)={0x8, {"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", 0x1000}}, 0x1006) r6 = open(&(0x7f0000002400)='./file0\x00', 0x200800, 0x110) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r4) pipe(&(0x7f0000002440)={0xffffffffffffffff}) ioctl$XFS_IOC_GETPARENTS(r7, 0xc028583e, &(0x7f0000002640)={{[0x5, 0x3, 0x9, 0x1]}, 0x0, 0x3, 0x7f, 0x0, &(0x7f0000002480)=[{{@_ha_fsid={[0xab, 0x9]}, {0xa532, 0xdf9, 0xea3, 0x4}}, 0xfffffffe, 0x0, '\xaa\xaa\xaa\xaa\xaa'}, {{@_ha_fsid={[0x200, 0x2]}, {0xc, 0x6, 0xe8483a50, 0xffff}}, 0x4a5, 0x0, '\xaa\xaa\xaa\xaa\xaa'}, {{@_ha_fsid={[0xb0, 0x1]}, {0x2, 0x4, 0x3, 0x80000001}}, 0x0, 0x0, '!@\x00'}, {{@_ha_fsid={[0x10001, 0x93]}, {0x400, 0xa8e, 0x6, 0x1ad}}, 0xbc, 0x0, '\x00'}, {{@align=0x800, {0x0, 0x1, 0xfffffff8, 0x2}}, 0x8, 0x0, '^\x00'}, {{@_ha_fsid={[0x5, 0x5]}, {0x8, 0xc7, 0x9, 0x858a}}, 0xc, 0x0, ':+-+/[r!#\x00'}, {{@align=0x2, {0x9, 0x4e0d, 0x5, 0x4}}, 0xffff8001, 0x0, '-$#^!-/\xfc-\x00'}, {{@_ha_fsid={[0x4, 0x7]}, {0x0, 0x34, 0x3, 0x6}}, 0x4, 0x0, '}@-#.@-&-!]\\.(\xdc\x00'}, {{@align=0xe717, {0x401, 0x1, 0x200, 0x4}}, 0x84d, 0x0, '\xaa\xaa\xaa\xaa\xaa'}, {{@align=0x9, {0x2, 0x7, 0x2f, 0x6}}, 0x9, 0x0, '&&,h%,{\x00'}]}) openat$cgroup_ro(r7, &(0x7f0000002680)='memory.current\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x6, 0x1, 0x11, r7, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000002a00)={0x18, &(0x7f0000002700)={0xc8920a8f294ff3f8, 0x21, 0xc2, {0xc2, 0x4, "8051819200877f16ab94b78518941602cc1b31de8f21578f044ddc1ce48fb9c228d400d648b9878b269b657986a0eea649e00e98024e5fb789d52f2df2a7d0accce8a7791eab2b9e0df45c7bc22536f13da409a78b665ae8276a5ac04e0c35dd84496d056df198e0c5cc14513e6c8c0886ff8ef0a54bcddf2f80e2624fc7a90e74b2b67bc7e7d8775289960bcc09d91f7d5d6462f52d8ad6a5c112d829e688912dd4fdc14f9e84a4230057e14126c44b0fae72d0a9e841b62d9266ccc2a00b63"}}, &(0x7f0000002800)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1809}}, &(0x7f0000002840)={0x0, 0xf, 0x109, {0x5, 0xf, 0x109, 0x5, [@generic={0xd8, 0x10, 0xb, "4aacc839ae3a33b7bcdc5cd7332672cf3f0b053bd84946f2fb1fee53461b933bff25bc87aa7d4af5b9c5ef0626b2e3b6baa3dd9f01d5ab145daaedd367c02fc6077a9a60fa4181705a8436826533dca5fcde94b3fed88cc1a4552370ae3cae1b4fdea1338fa32516100bddca0ff3e0ec53f5eed6ad4cbf5b5803425f7d7d6a3693552d37c98772523980fc20213ed16576750c95a5fd70d5145d5cc9621da28515c7c3e9c068b14338300478585b7accc0d5e772acb254c314e1a01a43c51044c17b234e1830d9439e135c72bfc9ec40ad7cc70f7d"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x7, 0xe6}, @ext_cap={0x7, 0x10, 0x2, 0x1e, 0x5, 0x1, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "e2bb1d22db4192e82e0cfa16400ebbeb"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x6, 0x8, 0x9}]}}, &(0x7f0000002980)={0x20, 0x29, 0xf, {0xf, 0x29, 0xf1, 0x18, 0x8, 0x0, "7108da46", "f4ab5e23"}}, &(0x7f00000029c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x3, 0xb8, 0x6, 0x0, 0x401, 0x9}}}, &(0x7f0000002f00)={0x44, &(0x7f0000002a40)={0x60, 0x19, 0xd6, "ce6de9c10c69de98440e93c21471dd2c69f541fa44cee637fb8e1e97f5ba29e5b6235375d87576a012603a429f88ea8456809e1c19e912ca6ee2d054f4aca784ed084a908317bd7c1409b05d439a269923f1da04ac2a610cc30fa2f52401c39f2084cb29aeefed1d1b0cdac844af50af3e5438cc909f3a41659c2cd9771d2ff2955b473034c96656e10f40ec93577ce929fd6fd0a9e612c9e4f3952c39ec692c5b3f2bfe80ea1b7dcde00e6ca170e6ffb099fca93cdb45f466cb9c2ace1856ed72b7ee57c64099355744914a412151ee5ce385455958"}, &(0x7f0000002b40)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000002b80)={0x0, 0x8, 0x1}, &(0x7f0000002bc0)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000002c00)={0x20, 0x0, 0x8, {0x160, 0x20, [0xfff]}}, &(0x7f0000002c40)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000002c80)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000002cc0)={0x40, 0xb, 0x2, "4b05"}, &(0x7f0000002d00)={0x40, 0xf, 0x2, 0x81}, &(0x7f0000002d40)={0x40, 0x13, 0x6, @random="5c695b319ef2"}, &(0x7f0000002d80)={0x40, 0x17, 0x6}, &(0x7f0000002dc0)={0x40, 0x19, 0x2, "fddc"}, &(0x7f0000002e00)={0x40, 0x1a, 0x2, 0xfbb7}, &(0x7f0000002e40)={0x40, 0x1c, 0x1, 0x7f}, &(0x7f0000002e80)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000002ec0)={0x40, 0x21, 0x1, 0x88}}) 1m43.542059136s ago: executing program 32 (id=60): timer_create(0x4, &(0x7f0000000200)={0x0, 0x34, 0x0, @thr={&(0x7f0000000000)="0b54a99b9dba86524b8cb87ee126b38ea6dfa6594a86bdc3fd09e695d66173959f9811d69c0a9265781e6251b99afc45883b914df61f99a6f15683dd54e91e022afab1269f460f8d9f2227a932c063e90a9d36439c6838f4d3db2e8118b4c88650334d8054d46fc6064cb22bf2afad6b6ef5d9ee023b352f551608e493cc6ddbf250623ca9b4fe1fb95fe023b983b28553a83e6d4fa92100aaef3df9beec6faa3aa923599486ce7271335a7fc1b45aa59095e3374943de3d2838c1fa3a99df0817b012642bfb717aaa2fd4a16e", &(0x7f0000000100)="871825747c6392578178866b6c8b09a8c605483ab638c6de00b01612d0f2e5a93ae698d589c168ccfbac8b396bdb8875d03fa896f4ddefd8ee95021df5972a4c9f2f5c698ec13cda16452505ed77009f5b8f12a4d6f3b54da694e37bb6cec71744e6abba0f5322910fe3d137714da7d04057c8890178ba89bf4db5026b41753cff577ffdd5e55d92546e9198799f13651a0a11c120f636f584bad186798c0ba517174aa01b582861b88e9d0eb881ef8f4295bdaf3dfbce71a1168d754b6c004415b750b472aed403"}}, &(0x7f0000000240)=0x0) timer_settime(r0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}}, &(0x7f00000002c0)) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$vnet(0xffffff9c, &(0x7f0000000300), 0x2, 0x0) r3 = openat$nmem0(0xffffff9c, &(0x7f0000000340), 0x840, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000380)={0x3, r3}) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000580)={0x18, &(0x7f00000003c0)={0x40, 0x23, 0x1c, {0x1c, 0x24, "86232c2214d698b8a0773da817e317734e0b15637dd36b90ebd5"}}, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x140a}}, &(0x7f0000000440)={0x0, 0xf, 0x9b, {0x5, 0xf, 0x9b, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x12, 0x2, 0xd, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0x10, "29bc724aa518538dabe1efe071ebcb42"}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "9aefbe3479d397a641e4487994c60a3b"}, @ptm_cap={0x3}, @generic={0x64, 0x10, 0x2, "dde1270f799f53a20bf9b16a0ca7b3faf38da1675cdaffa045af28213c25ea8edad6f1efc7527d34177d260aa65c957562f89a6ac9358b036e0f687753b8be61a22c30569076251b2c063b8219bb7aad70589464a9296ff722e17d337e96c18441"}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x18, 0x6, 0x6, "aea51334", "cd64fe2f"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x1, 0x0, 0x1d, 0x5, 0x6, 0x5266}}}, &(0x7f0000000a40)={0x44, &(0x7f00000005c0)={0x20, 0x18, 0x7e, "6117017287a1be601cc75cc56df6cf375d9c6656416e93a117420f72044dfaba774b95a71690d674dad3851b97fdfcc79179c46a3253973e082036521ea6428bd998542856c37095d7e6656e2cf156da72a4bd90dcd76983f503e615877a3faf311d9e875ec2f45a8ed608573523f24487f06938745eb6fa72ab0d623c6f"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0xff}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xf2}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000740)={0x20, 0x0, 0x8, {0x5c0, 0x10, [0x0]}}, &(0x7f0000000780)={0x40, 0x7, 0x2, 0x2}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000800)={0x40, 0xb, 0x2, "49db"}, &(0x7f0000000840)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000880)={0x40, 0x13, 0x6, @remote}, &(0x7f00000008c0)={0x40, 0x17, 0x6, @random="f8e346fac99b"}, &(0x7f0000000900)={0x40, 0x19, 0x2, "5282"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0xfff9}, &(0x7f0000000980)={0x40, 0x1c, 0x1}, &(0x7f00000009c0)={0x40, 0x1e, 0x1}, &(0x7f0000000a00)={0x40, 0x21, 0x1, 0xf7}}) ioctl$F2FS_IOC_DEFRAGMENT(r2, 0xc010f508, &(0x7f0000000ac0)={0x3, 0x4}) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) write$FUSE_INIT(r3, &(0x7f0000000b00)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x80, 0x6000000, 0x6, 0x7, 0x5, 0x3, 0x0, 0x0, 0x10, 0x2}}, 0x50) mq_notify(r3, &(0x7f0000000cc0)={0x0, 0x16, 0x1, @thr={&(0x7f0000000b80)="4c8298ccfb772527fc7c29677beb420a21fb687fd1ebb1ccd97b21aac3cfd33368615403b7b94bf659ee2b2ff80a127cc059dbbf29a2cb9d3cacc10fe781bade5c08a7cdc96028f4f7433e484a46e63ad7a9d4032c4aa48c09a83ae9ef551436378ebebe7635d15005cd489c587c5d3def4a0e776e89e2aaefa7c119d2fd38aa4317027011e34b496db48e27b4b24c9e12531ba1ae59a20d0cc0b0ef921cec857c4c738f4470ba075a38982faed4be2390738041f603ddb93cd9619d69f2cc6d556bca979bd04a9c7593d7d571", &(0x7f0000000c80)="1ed332e7a762b8900516eb13eff6e0e8067f118bb7787c59fd1fc51f1154ba58a56f9a281f1b3e643aa3f2df057252c07c5a"}}) timer_settime(r0, 0x1, &(0x7f0000000d00)={{}, {0x0, 0x989680}}, &(0x7f0000000d40)) setsockopt$IP_VS_SO_SET_EDITDEST(r3, 0x0, 0x489, &(0x7f0000000d80)={{0x8, @private=0xa010100, 0x4e23, 0x3, 'wlc\x00', 0x8, 0x1, 0x5}, {@loopback, 0x4e21, 0x2, 0x10, 0xfffffff8, 0x7}}, 0x44) openat$kvm(0xffffff9c, &(0x7f0000000e00), 0x80000, 0x0) rt_sigtimedwait(&(0x7f0000000e40)={[0x10, 0x5]}, &(0x7f0000000e80), &(0x7f0000000f00)={0x77359400}, 0x8) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000f40)={[0x9, 0x8001, 0x72, 0x9, 0xfffffffffffffffb, 0x6, 0x401, 0x8, 0x8001, 0x7, 0x22, 0x0, 0x5, 0x4, 0x6, 0x8], 0x100000, 0x100100}) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x38, 0x1411, 0x400, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004860}, 0x40000) epoll_pwait(r3, &(0x7f0000001100)=[{}, {}], 0x2, 0x3, &(0x7f0000001140)={[0x3, 0x6]}, 0x8) sendmsg$kcm(r3, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001180)="abc34c5ff578e92fb0333a73f7b5f739ca8c2503a0bbd450", 0x18}, {&(0x7f00000011c0)="d24d50570e8967d0406d5bd2ab8c489921bb1ea35248c17339f259a0af10841e7ecf318c037b5d284dd82041a775ed4fa7b539bc6ae6d548bbcc2dc9197145518e466cbf549b9232a5003b19a098c3141a4b62330efb172ef0f0b32ae6d886a8067de781cf8fac1b277397a124be47dd6eb978fe0b573f8c65589ed0680a308378c817422dcfa236686f0aec5f7533cd7548b81a620c3ecacaeec315dc7b261967928c25095534e95166c87d9fc4e4a63c187e85c5aac3287bd67d0759a4621139341f4730", 0xc5}], 0x2}, 0x4000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001340)={'batadv_slave_1\x00', 0x0}) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000001380)={@loopback, r5}, 0x14) write$UHID_INPUT(r3, &(0x7f00000013c0)={0x8, {"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", 0x1000}}, 0x1006) r6 = open(&(0x7f0000002400)='./file0\x00', 0x200800, 0x110) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r4) pipe(&(0x7f0000002440)={0xffffffffffffffff}) ioctl$XFS_IOC_GETPARENTS(r7, 0xc028583e, &(0x7f0000002640)={{[0x5, 0x3, 0x9, 0x1]}, 0x0, 0x3, 0x7f, 0x0, &(0x7f0000002480)=[{{@_ha_fsid={[0xab, 0x9]}, {0xa532, 0xdf9, 0xea3, 0x4}}, 0xfffffffe, 0x0, '\xaa\xaa\xaa\xaa\xaa'}, {{@_ha_fsid={[0x200, 0x2]}, {0xc, 0x6, 0xe8483a50, 0xffff}}, 0x4a5, 0x0, '\xaa\xaa\xaa\xaa\xaa'}, {{@_ha_fsid={[0xb0, 0x1]}, {0x2, 0x4, 0x3, 0x80000001}}, 0x0, 0x0, '!@\x00'}, {{@_ha_fsid={[0x10001, 0x93]}, {0x400, 0xa8e, 0x6, 0x1ad}}, 0xbc, 0x0, '\x00'}, {{@align=0x800, {0x0, 0x1, 0xfffffff8, 0x2}}, 0x8, 0x0, '^\x00'}, {{@_ha_fsid={[0x5, 0x5]}, {0x8, 0xc7, 0x9, 0x858a}}, 0xc, 0x0, ':+-+/[r!#\x00'}, {{@align=0x2, {0x9, 0x4e0d, 0x5, 0x4}}, 0xffff8001, 0x0, '-$#^!-/\xfc-\x00'}, {{@_ha_fsid={[0x4, 0x7]}, {0x0, 0x34, 0x3, 0x6}}, 0x4, 0x0, '}@-#.@-&-!]\\.(\xdc\x00'}, {{@align=0xe717, {0x401, 0x1, 0x200, 0x4}}, 0x84d, 0x0, '\xaa\xaa\xaa\xaa\xaa'}, {{@align=0x9, {0x2, 0x7, 0x2f, 0x6}}, 0x9, 0x0, '&&,h%,{\x00'}]}) openat$cgroup_ro(r7, &(0x7f0000002680)='memory.current\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x6, 0x1, 0x11, r7, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000002a00)={0x18, &(0x7f0000002700)={0xc8920a8f294ff3f8, 0x21, 0xc2, {0xc2, 0x4, "8051819200877f16ab94b78518941602cc1b31de8f21578f044ddc1ce48fb9c228d400d648b9878b269b657986a0eea649e00e98024e5fb789d52f2df2a7d0accce8a7791eab2b9e0df45c7bc22536f13da409a78b665ae8276a5ac04e0c35dd84496d056df198e0c5cc14513e6c8c0886ff8ef0a54bcddf2f80e2624fc7a90e74b2b67bc7e7d8775289960bcc09d91f7d5d6462f52d8ad6a5c112d829e688912dd4fdc14f9e84a4230057e14126c44b0fae72d0a9e841b62d9266ccc2a00b63"}}, &(0x7f0000002800)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1809}}, &(0x7f0000002840)={0x0, 0xf, 0x109, {0x5, 0xf, 0x109, 0x5, [@generic={0xd8, 0x10, 0xb, "4aacc839ae3a33b7bcdc5cd7332672cf3f0b053bd84946f2fb1fee53461b933bff25bc87aa7d4af5b9c5ef0626b2e3b6baa3dd9f01d5ab145daaedd367c02fc6077a9a60fa4181705a8436826533dca5fcde94b3fed88cc1a4552370ae3cae1b4fdea1338fa32516100bddca0ff3e0ec53f5eed6ad4cbf5b5803425f7d7d6a3693552d37c98772523980fc20213ed16576750c95a5fd70d5145d5cc9621da28515c7c3e9c068b14338300478585b7accc0d5e772acb254c314e1a01a43c51044c17b234e1830d9439e135c72bfc9ec40ad7cc70f7d"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x2, 0x7, 0xe6}, @ext_cap={0x7, 0x10, 0x2, 0x1e, 0x5, 0x1, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "e2bb1d22db4192e82e0cfa16400ebbeb"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x6, 0x8, 0x9}]}}, &(0x7f0000002980)={0x20, 0x29, 0xf, {0xf, 0x29, 0xf1, 0x18, 0x8, 0x0, "7108da46", "f4ab5e23"}}, &(0x7f00000029c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x3, 0xb8, 0x6, 0x0, 0x401, 0x9}}}, &(0x7f0000002f00)={0x44, &(0x7f0000002a40)={0x60, 0x19, 0xd6, "ce6de9c10c69de98440e93c21471dd2c69f541fa44cee637fb8e1e97f5ba29e5b6235375d87576a012603a429f88ea8456809e1c19e912ca6ee2d054f4aca784ed084a908317bd7c1409b05d439a269923f1da04ac2a610cc30fa2f52401c39f2084cb29aeefed1d1b0cdac844af50af3e5438cc909f3a41659c2cd9771d2ff2955b473034c96656e10f40ec93577ce929fd6fd0a9e612c9e4f3952c39ec692c5b3f2bfe80ea1b7dcde00e6ca170e6ffb099fca93cdb45f466cb9c2ace1856ed72b7ee57c64099355744914a412151ee5ce385455958"}, &(0x7f0000002b40)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000002b80)={0x0, 0x8, 0x1}, &(0x7f0000002bc0)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000002c00)={0x20, 0x0, 0x8, {0x160, 0x20, [0xfff]}}, &(0x7f0000002c40)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000002c80)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000002cc0)={0x40, 0xb, 0x2, "4b05"}, &(0x7f0000002d00)={0x40, 0xf, 0x2, 0x81}, &(0x7f0000002d40)={0x40, 0x13, 0x6, @random="5c695b319ef2"}, &(0x7f0000002d80)={0x40, 0x17, 0x6}, &(0x7f0000002dc0)={0x40, 0x19, 0x2, "fddc"}, &(0x7f0000002e00)={0x40, 0x1a, 0x2, 0xfbb7}, &(0x7f0000002e40)={0x40, 0x1c, 0x1, 0x7f}, &(0x7f0000002e80)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000002ec0)={0x40, 0x21, 0x1, 0x88}}) 1m43.49134121s ago: executing program 3 (id=62): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x8c) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, &(0x7f0000000580)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d307830303030303030303030303031303030"]) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0x4a8e) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x804000, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, r2, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x40000, 0x73) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f00000063c0)="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", 0x2000, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0xb0, 0x0, 0xfffffffffffffff9, [{{0x5, 0x2, 0x100000000, 0xbc, 0x6, 0xfffffffb, {0x1, 0x8000000000000000, 0x99c, 0xc, 0x9, 0xffffffff80000000, 0x9, 0x33d, 0x8001, 0xc000, 0x401, r3, 0xffffffffffffffff, 0x7ff, 0x6}}, {0x2, 0x4, 0x2, 0x81, 'fd'}}]}, 0x0, 0x0, 0x0}) getdents64(r4, &(0x7f0000000100)=""/134, 0x86) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x5c, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) syz_fuse_handle_req(r1, &(0x7f000000a3c0)="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", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pwritev2(r0, &(0x7f0000000740)=[{&(0x7f0000000440)='o', 0x1}], 0x1, 0x6, 0xfb6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 1m42.551372032s ago: executing program 3 (id=64): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r3, &(0x7f0000000280)='0', 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000140)={0x2000, 0x10a000}) 1m42.014979307s ago: executing program 3 (id=65): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = syz_clone(0x81000000, 0x0, 0x0, 0x0, 0x0, 0x0) setns(0xc9, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="77ba00000000000000001f000000080001000000000008000300", @ANYRES32=r3], 0x48}}, 0x0) r4 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r4], 0xe0}, 0x1, 0x0, 0x0, 0x40028d0}, 0x850) r5 = syz_pidfd_open(r0, 0x0) process_madvise(r5, 0x0, 0x0, 0x66, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) prlimit64(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x4, 0xbc}, 0x0) 1m41.980579714s ago: executing program 33 (id=65): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = syz_clone(0x81000000, 0x0, 0x0, 0x0, 0x0, 0x0) setns(0xc9, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="77ba00000000000000001f000000080001000000000008000300", @ANYRES32=r3], 0x48}}, 0x0) r4 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r4], 0xe0}, 0x1, 0x0, 0x0, 0x40028d0}, 0x850) r5 = syz_pidfd_open(r0, 0x0) process_madvise(r5, 0x0, 0x0, 0x66, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) prlimit64(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x4, 0xbc}, 0x0) 1m40.28473222s ago: executing program 4 (id=61): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x8c) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, &(0x7f0000000580)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d307830303030303030303030303031303030"]) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0x4a8e) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x804000, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, r2, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x40000, 0x73) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 1m39.257403368s ago: executing program 4 (id=74): ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x560f, &(0x7f0000000040)={0x1, 0x1, 0x7, 0x2, 0x3effffff, 0x0}) 1m38.773746967s ago: executing program 0 (id=78): syz_io_uring_setup(0x24, &(0x7f0000000040)={0x0, 0x0, 0x800, 0x0, 0xfffffffe}, 0x0, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="0100000011020f580000000000000100", @ANYRES64=r2, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}, 0x1, 0x0, 0x0, 0x881}, 0x0) r3 = epoll_create1(0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xff40}, 0x7}], 0x1, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000100)={0x20000014}) r6 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r6, &(0x7f0000000180)={&(0x7f00000006c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10, 0x0}, 0x400c804) close_range(r3, r5, 0x0) 1m38.554287368s ago: executing program 0 (id=79): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x1c8983, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, 0x0}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x2b}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1a7) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r1 = open$dir(&(0x7f0000000040)='./mnt\x00', 0x0, 0x2) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0x40046607, &(0x7f00000003c0)={@id, 0x10, 0x0, '\x00', @d}) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r2, 0xc138fd09, &(0x7f0000000300)="0400000000000000000000009001000038010000010000000000000000100000000000000000000000000000000000006d70617468300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000580000006d756c74697061746800000000000000322071756575655f6d6f64652062696f20302031203120726f756e642d726f62696e20302031203120373a302031") socket(0x40000000015, 0x5, 0x0) 1m38.553859279s ago: executing program 4 (id=80): syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0xf, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffff7}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x50}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80e00, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x48885) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) getpid() mkdirat(0xffffffffffffffff, &(0x7f0000000400)='./sys/bus/pci/rescan\x00', 0x1f7) r3 = syz_open_dev$usbfs(0x0, 0x80, 0x113201) read$usbfs(r3, &(0x7f0000000600)=""/234, 0xea) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r2) write(r4, &(0x7f00000000c0)='1\x00', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r5, &(0x7f0000000700)="3100d90daaa91f198d99db922334963f621e49a6ca0b870113948d1bd6e243e5da22cf2ba7bca0e3865eaa6666cca12e329a784c6e63a08e7d57f2e2a6fa1f85d8a30f16645140e37208d917f43c0e86486bb3e9fd67f758c7f029fcbacd68c67fd996ba190681103b5cb8dbd189543ac4d64867e39469625a900852b3220d4788d9f52245fb79fec8cffbcf9a5d9764a4d5c3af2d283279ca35f820d073a1f7a0e134b89c8a9433c78e6698004ab5f3584de90135190d323bf6d75843821518979868ae7c7734c0", 0xc8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000008c0), 0x103000, 0x0) ioctl$KVM_GET_MSRS_sys(r6, 0xc008ae88, &(0x7f00000003c0)={0x1, 0x0, [{0x8b, 0x0, 0x8}]}) 1m38.096594166s ago: executing program 34 (id=80): syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0xf, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffff7}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x50}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80e00, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x48885) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) getpid() mkdirat(0xffffffffffffffff, &(0x7f0000000400)='./sys/bus/pci/rescan\x00', 0x1f7) r3 = syz_open_dev$usbfs(0x0, 0x80, 0x113201) read$usbfs(r3, &(0x7f0000000600)=""/234, 0xea) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r2) write(r4, &(0x7f00000000c0)='1\x00', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r5, &(0x7f0000000700)="3100d90daaa91f198d99db922334963f621e49a6ca0b870113948d1bd6e243e5da22cf2ba7bca0e3865eaa6666cca12e329a784c6e63a08e7d57f2e2a6fa1f85d8a30f16645140e37208d917f43c0e86486bb3e9fd67f758c7f029fcbacd68c67fd996ba190681103b5cb8dbd189543ac4d64867e39469625a900852b3220d4788d9f52245fb79fec8cffbcf9a5d9764a4d5c3af2d283279ca35f820d073a1f7a0e134b89c8a9433c78e6698004ab5f3584de90135190d323bf6d75843821518979868ae7c7734c0", 0xc8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000008c0), 0x103000, 0x0) ioctl$KVM_GET_MSRS_sys(r6, 0xc008ae88, &(0x7f00000003c0)={0x1, 0x0, [{0x8b, 0x0, 0x8}]}) 1m37.924195302s ago: executing program 0 (id=83): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)={0x4c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1e1c"}]}, @NFTA_SET_ELEM_KEY_END={0xc, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "57b8"}]}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 1m37.74204218s ago: executing program 0 (id=84): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x8c) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, &(0x7f0000000580)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d307830303030303030303030303031303030"]) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0x4a8e) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x804000, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, r2, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 1m37.425381057s ago: executing program 0 (id=88): ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x560f, &(0x7f0000000040)={0x1, 0x1, 0x7, 0x2, 0x3effffff, 0x0}) 1m37.192648441s ago: executing program 1 (id=91): iopl(0x3) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[]) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat$autofs(0xffffff9c, &(0x7f0000000240), 0x8082, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f00001d5000/0x2000)=nil, 0x2000, 0x300000f, 0x204031, 0xffffffffffffffff, 0xec777000) chdir(&(0x7f0000000100)='./file0\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) pwritev2(r4, &(0x7f0000000980)=[{&(0x7f0000000500)="be", 0x20013}], 0x1, 0x5, 0xa, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) ioctl$KDGKBSENT(r4, 0x4b48, &(0x7f0000000640)={0x1, "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"}) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x804000, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c006505aa4a7274b3d38814d4a5cd36deb47d6e4f9753ddc8b6931c438b38691432232c9a0e901cc274a6401c7791decfded1c697f938cbdec4695d4e5f052bf4030044d8fdd2bc40ab9a4210c29c7c5d75cdcb66698f7b92c9b21a5878131f8e331d458837ca4d708332f46be54e"]) read$FUSE(r3, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2021) write$FUSE_INIT(r5, &(0x7f0000000080)={0x50, 0x0, r6, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x40000, 0x73) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1000, 0x0, &(0x7f0000006680)) r10 = socket(0x10, 0x803, 0x0) getpeername$packet(r10, 0x0, &(0x7f0000000100)) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1a41, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x8130}) syz_fuse_handle_req(r5, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f00000063c0)="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", 0x2000, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="b000000000000000f9ffffffffff000000000000000000000000000001fcffffffffffff1603000000000016ea7fb6000300000001000000000000000180ffffffffffffff000000000000007f050000000000007f000000000000000500000000000001100000000300000009000000006000000100008000000000", @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="0008000000000000000000000400000000000000050000000000000001000000060000002e00000000000000"], 0x0, 0x0, 0x0}) getdents64(r9, &(0x7f0000000100)=""/134, 0x86) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3) 1m37.026198938s ago: executing program 1 (id=92): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(r1, 0xc08c5114, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000003c0), 0x9, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) r4 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={0x0}) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000200)={'ni_daq_700\x00', [0x80000005, 0xe00, 0xffff, 0x4, 0x3, 0x4, 0x3ff, 0x3, 0x2, 0x21, 0x0, 0x2, 0x36683147, 0x3800000, 0x8, 0x100, 0x80000000, 0x401, 0x1, 0x81, 0x1, 0x9, 0xc, 0x9, 0x40, 0x7, 0x6, 0x2, 0x7, 0x6, 0xbc, 0x5]}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000011) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000011) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000e40), 0x40001, 0x0) (async) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000e40), 0x40001, 0x0) syz_clone(0x20000000, &(0x7f00000009c0)="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", 0x2bf, 0x0, &(0x7f0000000040), &(0x7f0000000640)="87f86ad54ee0261301c23b3c8746c90026a82e48e738afbf01f000474531bc881eb05a34e6ddfb6b9a44be6c94ab176e64797e02eb61203b8e89efc641304045fc2cfef3fb56b318d331d08a196c150a9f4f508cc6b8f30008cc377ba5fe42a36b0be39cc1736a26f4130b9615fa058e95a600ad94253d2187c33875128327fda7d26723f9404e0c3f6f612437e0dcdbea61d05cb8bebeb5b2733b6392f0af08be") (async) r5 = syz_clone(0x20000000, &(0x7f00000009c0)="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", 0x2bf, 0x0, &(0x7f0000000040), &(0x7f0000000640)="87f86ad54ee0261301c23b3c8746c90026a82e48e738afbf01f000474531bc881eb05a34e6ddfb6b9a44be6c94ab176e64797e02eb61203b8e89efc641304045fc2cfef3fb56b318d331d08a196c150a9f4f508cc6b8f30008cc377ba5fe42a36b0be39cc1736a26f4130b9615fa058e95a600ad94253d2187c33875128327fda7d26723f9404e0c3f6f612437e0dcdbea61d05cb8bebeb5b2733b6392f0af08be") ioctl(r0, 0xfff, &(0x7f0000000300)="6c778a0c0816532ad5f46abe5135f1aaec8ec8f82c9b24e12b28d54fe74a47f7f15f5a502c23fc2dc8af9e94643af80131d76ac8404348206f6e4b475290097ed7365534c5d0") write$6lowpan_control(0xffffffffffffffff, &(0x7f00000001c0)='connect aa:aa:aa:aa:aa:10 1', 0x1b) syz_open_procfs(r5, &(0x7f0000000700)='net/netfilter\x00') (async) syz_open_procfs(r5, &(0x7f0000000700)='net/netfilter\x00') ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0xc0603d06, 0x0) (async) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0xc0603d06, 0x0) unshare(0x26020480) (async) unshare(0x26020480) r6 = fsmount(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_int(r6, &(0x7f0000000180)='cgroup.max.depth\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/tcm.0\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/tcm.0\x00', 0x1ff) rmdir(&(0x7f0000000140)='./config/usb_gadget/g1/functions/tcm.0\x00') 1m36.936815217s ago: executing program 0 (id=93): r0 = syz_open_dev$video(&(0x7f0000000000), 0x800, 0x80003) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000040)={0xa, 0x2, 0x5, {0x0, 0xffffffff, 0x400, 0x3}}) 1m36.936522594s ago: executing program 1 (id=94): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)={0x4c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1e1c"}]}, @NFTA_SET_ELEM_KEY_END={0xc, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "57b8"}]}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 1m36.737231309s ago: executing program 35 (id=93): r0 = syz_open_dev$video(&(0x7f0000000000), 0x800, 0x80003) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000040)={0xa, 0x2, 0x5, {0x0, 0xffffffff, 0x400, 0x3}}) 1m36.691984032s ago: executing program 1 (id=96): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x8c) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, &(0x7f0000000580)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d307830303030303030303030303031303030"]) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0x4a8e) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x804000, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2020) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 1m36.278042318s ago: executing program 1 (id=97): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000100)) r2 = syz_open_pts(r1, 0x8000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl(r3, 0x8914, &(0x7f0000000400)="736c300000000000000000000000000001") write(r1, &(0x7f0000000140)='vd\n', 0x3) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000803)=0xc0) fchown(r0, 0x0, 0xee01) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000f8ff00000000000001000100811200000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0xb, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x407}, 0x94) 1m35.60921106s ago: executing program 1 (id=98): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1\x00', &(0x7f0000000040)='configfs\x00', 0x40, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000000102050c00000000000000000200000624000280f6ff008008000100ac14141447000200640101020c0002800500010088000000"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x20000000) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/target/core/rd_mcp_0/ramdisk0\x00', 0x1ed) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000180)={0x2001}) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000300)={[{0xf8000000, 0x1ff, 0x4, 0x7, 0x0, 0x4, 0x8, 0xf8, 0x9, 0xe1, 0x8, 0xc, 0x5}, {0x5, 0x3, 0xa7, 0x6a, 0x81, 0x7a, 0xb2, 0x8, 0x5, 0x40, 0x1, 0x8, 0xe6a2}, {0x2, 0x0, 0x11, 0x11, 0x1, 0xd, 0x8, 0x8, 0x7, 0xcf, 0x2, 0x80, 0x3}], 0xaed}) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000240)={[{0x2, 0x8, 0x93, 0x1, 0x0, 0x5f, 0x3, 0x23, 0xa6, 0x2, 0x8, 0x10, 0xffff}, {0xfffffff9, 0xfffd, 0x0, 0x4, 0xf8, 0x4, 0xce, 0x8, 0x4, 0xff, 0x4, 0xa6, 0x800000000000000}, {0xffffff01, 0x35, 0x0, 0x0, 0x4, 0x1, 0xb, 0xfe, 0x7, 0x8, 0xfe, 0x4, 0x1000000000000004}], 0xcc78}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/target/core/rd_mcp_0/ramdisk0/control\x00', 0x1, 0x0) write(r3, &(0x7f0000000180)='rd_pages=1024\n', 0xe) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/target/core/rd_mcp_0/ramdisk0/enable\x00', 0x1, 0x0) write(r4, &(0x7f0000000180)='1\n', 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000540)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000fee000/0x12000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000fee000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, 0x0}, 0x64) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1/uac2.usb0\x00', 0x1bf) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000000480)='usbip-vudc.0', 0xc) write(r5, &(0x7f00000004c0)='\n', 0x1) 1m35.521882888s ago: executing program 36 (id=98): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1\x00', &(0x7f0000000040)='configfs\x00', 0x40, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000000102050c00000000000000000200000624000280f6ff008008000100ac14141447000200640101020c0002800500010088000000"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x20000000) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/target/core/rd_mcp_0/ramdisk0\x00', 0x1ed) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000180)={0x2001}) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000300)={[{0xf8000000, 0x1ff, 0x4, 0x7, 0x0, 0x4, 0x8, 0xf8, 0x9, 0xe1, 0x8, 0xc, 0x5}, {0x5, 0x3, 0xa7, 0x6a, 0x81, 0x7a, 0xb2, 0x8, 0x5, 0x40, 0x1, 0x8, 0xe6a2}, {0x2, 0x0, 0x11, 0x11, 0x1, 0xd, 0x8, 0x8, 0x7, 0xcf, 0x2, 0x80, 0x3}], 0xaed}) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000240)={[{0x2, 0x8, 0x93, 0x1, 0x0, 0x5f, 0x3, 0x23, 0xa6, 0x2, 0x8, 0x10, 0xffff}, {0xfffffff9, 0xfffd, 0x0, 0x4, 0xf8, 0x4, 0xce, 0x8, 0x4, 0xff, 0x4, 0xa6, 0x800000000000000}, {0xffffff01, 0x35, 0x0, 0x0, 0x4, 0x1, 0xb, 0xfe, 0x7, 0x8, 0xfe, 0x4, 0x1000000000000004}], 0xcc78}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/target/core/rd_mcp_0/ramdisk0/control\x00', 0x1, 0x0) write(r3, &(0x7f0000000180)='rd_pages=1024\n', 0xe) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/target/core/rd_mcp_0/ramdisk0/enable\x00', 0x1, 0x0) write(r4, &(0x7f0000000180)='1\n', 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000540)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000fee000/0x12000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000fee000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, 0x0}, 0x64) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1/uac2.usb0\x00', 0x1bf) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000000480)='usbip-vudc.0', 0xc) write(r5, &(0x7f00000004c0)='\n', 0x1) 2.233374449s ago: executing program 7 (id=1238): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000001010102000000000000000002000000240002800c000280040001003a00000014000180080001cd4bde2a0192000000000000000c00198008"], 0x44}, 0x1, 0x0, 0x0, 0x40080}, 0x0) 2.229617731s ago: executing program 7 (id=1239): syz_usb_connect$uac1(0x0, 0x72, &(0x7f0000000300)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x1235, 0x1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x5, 0x10, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x1, 0xb9, 0x6, {0x7, 0x25, 0x1, 0x4, 0xff, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0xf, 0x7, 0x3c, {0x7, 0x25, 0x1, 0x4, 0x9, 0x7}}}}}}}}]}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x109001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000100)=0xbffe) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x0, 0x34, 0x1, '\x00', 0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.974500757s ago: executing program 6 (id=1253): r0 = syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x103d, 0x100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x3, 0x1, 0xd8, 0x10, 0xc, {0x8, 0xb, 0x1, 0x2, 0x1, 0x1, 0x30, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xe, 0x0, 0x3, {0xa, 0x25, 0x25, 0x7fffffff, 0xc, 0x180}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x6, 0x8000, 0x7, 0x2, 0x6, 0x4a, 0x9, 0x10}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7f, 0x4, 0x0, {0xa, 0x25, 0x25, 0x400, 0x8f, 0x2}}}}}}}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f00000002c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_usb_control_io$uac3(r0, &(0x7f0000000140)={0x14, &(0x7f0000000240)=ANY=[], 0x0}, 0x0) 1.46962479s ago: executing program 8 (id=1249): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x6, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x7391, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x48010}, 0x44040) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0xb, 0xfff3}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x8000, 0x20000000, 0x6, 0x77}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0xa5}}]}, 0x94}, 0x1, 0x0, 0x0, 0x24040894}, 0x0) 1.451071863s ago: executing program 5 (id=1250): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000140)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) gettid() timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x39000, 0x0) r4 = memfd_create(&(0x7f0000000180)='J=\t\xeb\xf8\xa7\x04\x9f\xe1hO\x8e\xd7\xb5\x93}\x8d\xed\x01L`\x93\xcd^2P\x00$x\"\xda\xf1Az\xfe_\xc5\xb3\x9b`;\x1c\xfc\xaf9\x98\x91\xe7', 0x1) splice(r2, 0x0, r4, 0x0, 0x2, 0x5) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffe3e) 1.44886299s ago: executing program 6 (id=1262): r0 = fsopen(&(0x7f0000000140)='pipefs\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 481.844002ms ago: executing program 5 (id=1251): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r1 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, 0x0, &(0x7f0000000380)) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x0, 0x100000b, 0x4018831, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/mapper/control\x00', 0x2, 0xa) ioctl(r3, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d") ioctl(r3, 0xc138fd0f, &(0x7f0000000000)="0400000000000000000000006001000038013200"/42) 480.323351ms ago: executing program 7 (id=1264): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x8000, 0x20000000, 0x6, 0x77}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0xa5}}]}, 0x94}, 0x1, 0x0, 0x0, 0x24040894}, 0x0) 477.178745ms ago: executing program 8 (id=1254): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="03031b003a003200060063000000004429ff00000000000000ff0000ffffac141419ff020000000000000000000000000001"], 0x76) 477.041922ms ago: executing program 6 (id=1256): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000240)={@multicast2, @remote, 0x0, 0x4, [@empty, @broadcast, @multicast1, @multicast2]}, 0x20) 445.519705ms ago: executing program 6 (id=1258): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="09000000040000000400000007"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) 445.188615ms ago: executing program 7 (id=1259): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, &(0x7f0000002a00)) 441.769632ms ago: executing program 5 (id=1260): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0x1d6b\n', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/bcdUSB\x00', 0x1, 0x0) write(r2, 0x0, 0x0) write(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) write(r3, &(0x7f0000000380)='0123456789\n', 0xb) write(0xffffffffffffffff, &(0x7f0000000400)='syzkaller\n', 0xa) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x1, 0x0) write(r4, &(0x7f0000000480)='HID Gadget\n', 0xb) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/hid.usb0/no_out_endpoint\x00', 0x1, 0x0) write(r5, &(0x7f00000006c0)='1\n', 0x2) write(0xffffffffffffffff, &(0x7f00000007c0)='1\n', 0x2) write(0xffffffffffffffff, &(0x7f0000000840)='8\n', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000880)='./config/usb_gadget/g1/functions/hid.usb0/report_desc\x00', 0x1, 0x0) symlinkat(&(0x7f0000000900)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000980)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r6, &(0x7f0000000a40)='dummy_udc.0\n', 0xc) 359.425293ms ago: executing program 8 (id=1261): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42000, 0x0) ptrace$ARCH_MAP_VDSO_32(0x1e, 0x0, 0x8001, 0x2002) ioctl$TIOCSCTTY(r3, 0x540e, 0xfffffffffffffffe) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'pimreg\x00'}) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x6f4c}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x141}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) 359.303866ms ago: executing program 6 (id=1263): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0xd8, 0x30, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [{0xc4, 0x1, [@m_simple={0xc0, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x91, 0x6, "d45d2bdac3720e78f7a00600600ba353d33968aeb3e0e1850a48bc89e888e4379a1db6140aa0f8bd85aad045336d143d22dbba666a77cde1d7cc24fc0ae19e216e89958f998609a010dade2ea29c188896c5f4f816234a1fe2cec561c355c386d55ec08032a3ead385643e8fdde23ef9c3b2f26b1b5e6183ca53974974237571a4bd2f4fc4742cf1bd7393dc51"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4000880}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 359.247706ms ago: executing program 7 (id=1265): unshare(0x60040000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="03031b003a003200060063000000004429ff00000000000000000000ffffac141419ff020000000000000000000000000001"], 0x76) 312.210227ms ago: executing program 6 (id=1266): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000140)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) gettid() timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x39000, 0x0) r4 = memfd_create(&(0x7f0000000180)='J=\t\xeb\xf8\xa7\x04\x9f\xe1hO\x8e\xd7\xb5\x93}\x8d\xed\x01L`\x93\xcd^2P\x00$x\"\xda\xf1Az\xfe_\xc5\xb3\x9b`;\x1c\xfc\xaf9\x98\x91\xe7', 0x1) splice(r2, 0x0, r4, 0x0, 0x2, 0x5) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffe3e) 312.010463ms ago: executing program 5 (id=1267): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"9622a2b519d172c6ae164f9fa9aabfbb316ed8a41b167446f8ac52ae48053c78108a8664cca3becb72dc1df80cf781ac23352658138d021258c47c6ad16e684a877183525a0742eb3be9dd95098aebd658ed20c2c629e0614bd9b2f6aaae5d8845122b466e5fe3b3324660bdbfcf1b58a2100be8df65e97bed0cdb5ae8789716a652085d695eeb53935a7a697ae6a8976c1367a757fe3a9af95b88137cfb51c7edda333b11367e0566595b5d67a91c79f3b0310fba63d12740ea458228d2d5c5ce30978550502bb67292dc2f5b3707115af058ccfd47d7ed99031c97456d51f6c0c5d5fb563e9e79b2061e2fed26b3e3f961116c0d61626ca6dea844e5fbcaa20ebc79f695850912583fb51754d7b06ce1185c436936523468066ca7d528f26879379f7b58ff136c212d50f7c1dc0a34834348e75ab465a00ccf950a964dfac34bafc85a232829473363fa646ecc539b1f98524c5f888b4d189349826f57451a2836c9c6f652f6e0365d025bad954f51100a05d79edfcdb3fb95c2673c3b01259acf65c79869b0fdd34a15852773bdb4aca70ed2b7a9726d25361c80cd64bc97bb98c00592c253de5bf3eade3998424225dcb89b079d5b9ac667b89e0e793114b87630048c135f5c3de77131b4f94d4d9f08a5692ce477335fcb7c9e171bb30c3a32e08fc82dfe78ff182a7d63a76453ea4a2058ba508cf09107a6b327c7a39cf2d711688e50e736b716cf77823544aff77b0004e667bfecfc00bc1f110397127e63892ec63b848ccbaa0aa79e39b50136fd863b822d4e9b18f8529a57aaf0902f2b473376a8cdc40d76fddbdac9c12404a3a1c15f8cf5d51e9f4a57a147544d001f9a9f02d0de79a6a147d3bc2d3bfdf7f25ab5c3b887e381f633c30f6af444ded230d930b2c20f25303ff758125e7e7ec8a6f07cc0834254c47a6962aaacce1d830ce97cbd47917acbab1d7334f63774b8d1d43b766ef9c4d7272b97ae5e0220bbc2043f01f7057e83d8c10f0d50643dd189c90bf0c1b94790f9a9b7a87321f1d87d4cf4ed1e8e84fb6a7f436dbe272a68da0141f7ce68438e02ff05594ef67de4e708000000dc3b35e46b71b37e8d0309b0a5c26398692d1a2a723397e29b6157d1a0851638104bfb0f3152f8577d57898866eb9a376f1167e8747a5816371e33f777380ba82e07621dc7871982f61d9f5361c740c7f0f991bb84db258a1ba387f26398ff2a4b1783d4de6a571f563fff7f0000f71b3a33f4cbb6419ce0f3cf60847ec7882f9709f14d78de38a1be0ad52527ba6710c46ad3c58f49681d64551fa773a3785546a991ff7c8efc791296b6edbde750075c16a13f68d21fdb040900"}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) getpid() ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000e80)={"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"}) 207.167679ms ago: executing program 5 (id=1268): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) splice(r0, &(0x7f0000000040)=0x10, r1, 0x0, 0x807, 0x0) 206.911768ms ago: executing program 5 (id=1269): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0x1d6b\n', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/bcdUSB\x00', 0x1, 0x0) write(r2, 0x0, 0x0) write(r0, &(0x7f0000000b40)="a75f3e8763810fb65db27b093ce625d61034fd6f81992cbace7584a0463a17a53bd51219be4c462a52591512f0901461910a999bff9cac267b67b04c786921a9b7730ccc20ca181bdcfd994246f794823814ba667bdd9f2fd0f25ee266", 0x5d) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) write(r3, &(0x7f0000000380)='0123456789\n', 0xb) write(0xffffffffffffffff, &(0x7f0000000400)='syzkaller\n', 0xa) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x1, 0x0) write(r4, &(0x7f0000000480)='HID Gadget\n', 0xb) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/hid.usb0/no_out_endpoint\x00', 0x1, 0x0) write(r5, &(0x7f00000006c0)='1\n', 0x2) write(0xffffffffffffffff, &(0x7f00000007c0)='1\n', 0x2) write(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000880)='./config/usb_gadget/g1/functions/hid.usb0/report_desc\x00', 0x1, 0x0) symlinkat(&(0x7f0000000900)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000980)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r6, &(0x7f0000000a40)='dummy_udc.0\n', 0xc) nanosleep(&(0x7f0000000b00)={0x0, 0x1dcd6500}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x2) 148.881495ms ago: executing program 8 (id=1270): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x8000, 0x20000000, 0x6, 0x77}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0xa5}}]}, 0x94}, 0x1, 0x0, 0x0, 0x24040894}, 0x0) 83.57447ms ago: executing program 8 (id=1271): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@delsa={0x28, 0x11, 0x1, 0x70bd2a, 0x25dfdbfb, {@in6=@empty, 0x4d5, 0xa, 0x32}}, 0x28}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) 122.682µs ago: executing program 7 (id=1272): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000040)) 0s ago: executing program 8 (id=1273): r0 = socket$inet6(0xa, 0x3, 0x7) sendmmsg$inet6(r0, &(0x7f00000004c0)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00'], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[], 0x18}}], 0x2, 0x0) kernel console output (not intermixed with test programs): er_thread+0x5ef/0xe50 [ 72.193486][ T65] ? kthread+0x13a/0x450 [ 72.193505][ T65] ? __pfx_worker_thread+0x10/0x10 [ 72.193524][ T65] kthread+0x373/0x450 [ 72.193543][ T65] ? __pfx_kthread+0x10/0x10 [ 72.193563][ T65] ret_from_fork+0x730/0xd60 [ 72.193582][ T65] ? __pfx_ret_from_fork+0x10/0x10 [ 72.193602][ T65] ? __switch_to+0x800/0x10f0 [ 72.193626][ T65] ? __pfx_kthread+0x10/0x10 [ 72.193648][ T65] ret_from_fork_asm+0x1a/0x30 [ 72.193680][ T65] [ 72.194362][ T65] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 72.194394][ T65] Bluetooth: hci0: failed to register connection device [ 72.202323][ T6803] syz_tun: left allmulticast mode [ 72.212579][ T6807] netlink: 4 bytes leftover after parsing attributes in process `syz.5.124'. [ 72.314695][ T6807] hsr_slave_1 (unregistering): left promiscuous mode [ 72.443391][ T6829] Console: switching to colour dummy device 80x25 [ 72.594236][ T6840] syzkaller0: entered promiscuous mode [ 72.594259][ T6840] syzkaller0: entered allmulticast mode [ 72.602980][ T6840] tipc: Started in network mode [ 72.603006][ T6840] tipc: Node identity fe44f4ec92d8, cluster identity 4711 [ 72.603186][ T6840] tipc: Enabled bearer , priority 0 [ 72.610268][ T6840] tipc: Resetting bearer [ 72.645415][ T6835] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 72.835140][ T6835] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 72.835244][ T6835] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 72.835426][ T6835] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 72.835762][ T6835] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 72.995371][ T65] Bluetooth: hci3: command tx timeout [ 72.996763][ T6835] pci 0000:00:01.0: Adding to iommu group 1 [ 73.015597][ T6835] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 73.015612][ T6835] pci 0000:00:01.0: vgaarb: bridge control possible [ 73.015619][ T6835] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 73.025417][ T6835] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 73.025824][ T6835] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 73.029311][ T6835] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 73.038583][ T6835] [drm] Found bochs VGA, ID 0xb0c5. [ 73.038593][ T6835] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 73.062923][ T6835] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 73.425570][ T6839] tipc: Resetting bearer [ 73.478373][ T6839] tipc: Disabling bearer [ 73.823335][ T6835] Console: switching to colour frame buffer device 160x50 [ 74.068058][ T6835] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 74.195053][ T65] Bluetooth: hci2: command tx timeout [ 74.382135][ T6894] bond0: invalid ARP target specified [ 74.644554][ T1157] nvmet: Created nvm controller 1 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:c42a2fe5-83bd-47a3-96ba-a3acfe3ba441. [ 74.667028][ T6911] nvme nvme0: creating 4 I/O queues. [ 74.681883][ T6911] nvme nvme0: new ctrl: "testsubsys" [ 75.257776][ T6919] bond0: invalid ARP target specified [ 75.298040][ T6924] Console: switching to colour dummy device 80x25 [ 75.399046][ T6925] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 75.428311][ T6925] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 75.428448][ T6925] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 75.428623][ T6925] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 75.428966][ T6925] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 75.442772][ T6925] pci 0000:00:01.0: Adding to iommu group 1 [ 75.448930][ T6925] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 75.448949][ T6925] pci 0000:00:01.0: vgaarb: bridge control possible [ 75.448964][ T6925] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 75.480310][ T6925] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 75.480479][ T6925] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 75.487417][ T6925] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 75.502849][ T6925] [drm] Found bochs VGA, ID 0xb0c5. [ 75.502861][ T6925] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 75.524021][ T6925] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 75.903254][ T6925] Console: switching to colour frame buffer device 160x50 [ 75.947577][ T6925] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 76.962622][ T6965] team0 (unregistering): Port device team_slave_0 removed [ 76.967992][ T6965] team0 (unregistering): Port device team_slave_1 removed [ 77.311050][ T6979] EXT4-fs warning (device sda1): ext4_group_extend:1861: can't shrink FS - resize aborted [ 77.572189][ T6986] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 77.782317][ T6997] syzkaller0: entered promiscuous mode [ 77.782339][ T6997] syzkaller0: entered allmulticast mode [ 78.993789][ T7027] FAULT_INJECTION: forcing a failure. [ 78.993789][ T7027] name failslab, interval 1, probability 0, space 0, times 0 [ 78.993809][ T7027] CPU: 1 UID: 0 PID: 7027 Comm: syz.8.163 Not tainted syzkaller #0 PREEMPT(full) [ 78.993821][ T7027] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 78.993834][ T7027] Call Trace: [ 78.993838][ T7027] [ 78.993843][ T7027] dump_stack_lvl+0x100/0x190 [ 78.993909][ T7027] should_fail_ex.cold+0x5/0xa [ 78.993924][ T7027] should_failslab+0xc2/0x120 [ 78.993958][ T7027] __kvmalloc_node_noprof+0x113/0x9b0 [ 78.993973][ T7027] ? __pfx_net_ctl_permissions+0x10/0x10 [ 78.994006][ T7027] ? proc_sys_call_handler+0x2c7/0x5a0 [ 78.994025][ T7027] proc_sys_call_handler+0x2c7/0x5a0 [ 78.994041][ T7027] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 78.994061][ T7027] vfs_write+0x6af/0x1050 [ 78.994073][ T7027] ? __pfx_proc_sys_write+0x10/0x10 [ 78.994089][ T7027] ? __pfx_vfs_write+0x10/0x10 [ 78.994100][ T7027] ? find_held_lock+0x2b/0x80 [ 78.994121][ T7027] ksys_write+0x12a/0x250 [ 78.994133][ T7027] ? __pfx_ksys_write+0x10/0x10 [ 78.994145][ T7027] ? trace_hardirqs_off+0x70/0x170 [ 78.994159][ T7027] do_int80_emulation+0x166/0x650 [ 78.994173][ T7027] asm_int80_emulation+0x1a/0x20 [ 78.994184][ T7027] RIP: 0023:0xf704efec [ 78.994197][ T7027] Code: Unable to access opcode bytes at 0xf704efc2. [ 78.994202][ T7027] RSP: 002b:00000000f543d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 78.994214][ T7027] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 78.994220][ T7027] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 78.994226][ T7027] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 78.994232][ T7027] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 78.994238][ T7027] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 78.994252][ T7027] [ 79.245746][ T7036] syz.8.164 uses obsolete (PF_INET,SOCK_PACKET) [ 79.894493][ T7032] tipc: Started in network mode [ 79.894509][ T7032] tipc: Node identity 0010000000000000002, cluster identity 1 [ 80.188717][ T7065] EXT4-fs warning (device sda1): ext4_group_extend:1861: can't shrink FS - resize aborted [ 80.207193][ T7064] input: syz0 as /devices/virtual/input/input7 [ 80.492523][ T5822] hid-generic 0005:10CF:0005.0002: unknown main item tag 0x0 [ 80.492559][ T5822] hid-generic 0005:10CF:0005.0002: unknown main item tag 0x0 [ 80.492577][ T5822] hid-generic 0005:10CF:0005.0002: unknown main item tag 0x0 [ 80.492595][ T5822] hid-generic 0005:10CF:0005.0002: unknown main item tag 0x0 [ 80.492613][ T5822] hid-generic 0005:10CF:0005.0002: unknown main item tag 0x0 [ 80.492632][ T5822] hid-generic 0005:10CF:0005.0002: unknown main item tag 0x0 [ 80.492650][ T5822] hid-generic 0005:10CF:0005.0002: unknown main item tag 0x0 [ 80.492668][ T5822] hid-generic 0005:10CF:0005.0002: unknown main item tag 0x0 [ 80.492686][ T5822] hid-generic 0005:10CF:0005.0002: unknown main item tag 0x0 [ 80.492704][ T5822] hid-generic 0005:10CF:0005.0002: unknown main item tag 0x0 [ 80.529013][ T7068] Console: switching to colour dummy device 80x25 [ 80.535054][ T5822] hid-generic 0005:10CF:0005.0002: hidraw1: BLUETOOTH HID v0.05 Device [syz0] on aa:aa:aa:aa:aa:aa [ 80.670392][ T7072] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 80.707744][ T7072] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 80.707853][ T7072] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 80.708027][ T7072] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 80.708912][ T7072] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 80.723569][ T7072] pci 0000:00:01.0: Adding to iommu group 1 [ 80.732198][ T7072] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 80.732211][ T7072] pci 0000:00:01.0: vgaarb: bridge control possible [ 80.732219][ T7072] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 80.746260][ T7072] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 80.746437][ T7072] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 80.751547][ T7072] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 80.773587][ T7072] [drm] Found bochs VGA, ID 0xb0c5. [ 80.773604][ T7072] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 80.794637][ T7072] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 81.051615][ T7072] Console: switching to colour frame buffer device 160x50 [ 81.075842][ T7072] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 81.222985][ T7080] pci 0000:00:03.0: [1af4:1005] type 00 class 0x00ff00 conventional PCI endpoint [ 81.228388][ T7080] pci 0000:00:03.0: BAR 0 [io 0xc0a0-0xc0bf] [ 81.228471][ T7080] pci 0000:00:03.0: BAR 1 [mem 0xfeaf5000-0xfeaf5fff] [ 81.228665][ T7080] pci 0000:00:03.0: BAR 4 [mem 0xfe200000-0xfe203fff 64bit pref] [ 81.233797][ T7098] block nbd8: shutting down sockets [ 81.240336][ T7080] pci 0000:00:03.0: Adding to iommu group 3 [ 81.244281][ T7098] FAULT_INJECTION: forcing a failure. [ 81.244281][ T7098] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 81.244309][ T7098] CPU: 0 UID: 0 PID: 7098 Comm: syz.8.176 Not tainted syzkaller #0 PREEMPT(full) [ 81.244331][ T7098] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 81.244342][ T7098] Call Trace: [ 81.244349][ T7098] [ 81.244357][ T7098] dump_stack_lvl+0x100/0x190 [ 81.244449][ T7098] should_fail_ex.cold+0x5/0xa [ 81.244474][ T7098] _copy_to_user+0x32/0xd0 [ 81.244528][ T7098] simple_read_from_buffer+0xcb/0x170 [ 81.244554][ T7098] proc_fail_nth_read+0x1af/0x230 [ 81.244578][ T7098] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 81.244602][ T7098] ? rw_verify_area+0xce/0x6d0 [ 81.244621][ T7098] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 81.244642][ T7098] vfs_read+0x1e4/0xb40 [ 81.244663][ T7098] ? lock_acquire+0x1d1/0x380 [ 81.244690][ T7098] ? __fget_files+0x34/0x3d0 [ 81.244712][ T7098] ? __pfx_vfs_read+0x10/0x10 [ 81.244730][ T7098] ? find_held_lock+0x2b/0x80 [ 81.244752][ T7098] ? __fget_files+0x215/0x3d0 [ 81.244785][ T7098] ? __fget_files+0x21f/0x3d0 [ 81.244815][ T7098] ksys_read+0x12a/0x250 [ 81.244835][ T7098] ? __pfx_ksys_read+0x10/0x10 [ 81.244864][ T7098] do_int80_emulation+0x166/0x650 [ 81.244912][ T7098] asm_int80_emulation+0x1a/0x20 [ 81.244929][ T7098] RIP: 0023:0xf71875ab [ 81.244957][ T7098] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 81.244975][ T7098] RSP: 002b:00000000f543d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 81.244992][ T7098] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f543d5d0 [ 81.245004][ T7098] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 81.245015][ T7098] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 81.245025][ T7098] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 81.245036][ T7098] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 81.245060][ T7098] [ 81.258821][ T7080] pci 0000:00:03.0: BAR 4 [mem 0x580000000-0x580003fff 64bit pref]: assigned [ 81.269389][ T7080] pci 0000:00:03.0: BAR 1 [mem 0x81001000-0x81001fff]: assigned [ 81.270343][ T7080] pci 0000:00:03.0: BAR 0 [io 0x2000-0x201f]: assigned [ 81.676278][ T7120] netlink: 'syz.8.182': attribute type 7 has an invalid length. [ 81.957310][ T7128] FAULT_INJECTION: forcing a failure. [ 81.957310][ T7128] name failslab, interval 1, probability 0, space 0, times 0 [ 81.957339][ T7128] CPU: 3 UID: 0 PID: 7128 Comm: syz.7.185 Not tainted syzkaller #0 PREEMPT(full) [ 81.957359][ T7128] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 81.957369][ T7128] Call Trace: [ 81.957375][ T7128] [ 81.957382][ T7128] dump_stack_lvl+0x100/0x190 [ 81.957411][ T7128] should_fail_ex.cold+0x5/0xa [ 81.957434][ T7128] should_failslab+0xc2/0x120 [ 81.957457][ T7128] kmem_cache_alloc_noprof+0x92/0x6a0 [ 81.957479][ T7128] ? __up_read+0x333/0x980 [ 81.957495][ T7128] ? prepare_creds+0x2c/0x950 [ 81.957522][ T7128] prepare_creds+0x2c/0x950 [ 81.957546][ T7128] lookup_user_key+0x5d0/0x1300 [ 81.957574][ T7128] ? __pfx_lookup_user_key+0x10/0x10 [ 81.957598][ T7128] ? lockdep_hardirqs_on+0x7d/0x110 [ 81.957617][ T7128] ? irqentry_exit+0x24d/0xa10 [ 81.957640][ T7128] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 81.957671][ T7128] ? _copy_from_user+0x93/0xd0 [ 81.957697][ T7128] __do_sys_add_key+0x2a6/0x460 [ 81.957721][ T7128] ? __pfx___do_sys_add_key+0x10/0x10 [ 81.957742][ T7128] ? fput+0x7c/0x100 [ 81.957765][ T7128] ? __pfx_ksys_write+0x10/0x10 [ 81.957793][ T7128] __do_fast_syscall_32+0x13a/0x8b0 [ 81.957812][ T7128] ? lockdep_hardirqs_on+0x7d/0x110 [ 81.957832][ T7128] do_fast_syscall_32+0x32/0x70 [ 81.957852][ T7128] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 81.957874][ T7128] RIP: 0023:0xf7f15fec [ 81.957893][ T7128] Code: Unable to access opcode bytes at 0xf7f15fc2. [ 81.957899][ T7128] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 000000000000011e [ 81.957917][ T7128] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000080000280 [ 81.957929][ T7128] RDX: 00000000800002c0 RSI: 000000000000fe3a RDI: 00000000fffffffe [ 81.957940][ T7128] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 81.957950][ T7128] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 81.957961][ T7128] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 81.957984][ T7128] [ 82.286164][ T7133] jffs2: notice: (7133) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 82.313826][ T7129] ublk0: read batch cmd buffer failed [ 82.313916][ T7129] ublk0: read batch cmd buffer failed [ 82.321852][ T7129] ublk0: read batch cmd buffer failed [ 82.321903][ T7129] ublk0: read batch cmd buffer failed [ 82.341353][ T7133] tipc: Enabling of bearer rejected, failed to enable media [ 82.344660][ T7133] jffs2: error: (7133) jffs2_do_read_inode: requested to read a nonexistent ino 0 [ 85.852718][ C2] nvme nvme0: long keepalive RTT (1490 ms) [ 86.157816][ T7185] netlink: 28 bytes leftover after parsing attributes in process `syz.6.193'. [ 86.717750][ T7175] Console: switching to colour dummy device 80x25 [ 87.421858][ T7179] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 87.453232][ T7179] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 87.453498][ T7179] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 87.453676][ T7179] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 87.454015][ T7179] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 87.479096][ T7179] pci 0000:00:01.0: Adding to iommu group 1 [ 87.498487][ T7179] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 87.498509][ T7179] pci 0000:00:01.0: vgaarb: bridge control possible [ 87.498522][ T7179] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 87.519038][ T7179] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 87.519192][ T7179] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 87.534022][ T7179] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 87.551429][ T7179] [drm] Found bochs VGA, ID 0xb0c5. [ 87.551440][ T7179] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 87.560188][ T7179] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 87.769129][ T7179] Console: switching to colour frame buffer device 160x50 [ 87.796222][ T7179] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 87.800803][ T7195] device-mapper: table: 248:2: integrity: Error reading superblock (-EIO) [ 87.800858][ T7195] device-mapper: ioctl: error adding target to table [ 88.120672][ T7240] netlink: 4 bytes leftover after parsing attributes in process `syz.7.202'. [ 88.124590][ T7240] veth0_macvtap: left promiscuous mode [ 88.197316][ T65] Bluetooth: hci0: Opcode 0x0c24 failed: -110 [ 88.197424][ T5744] Bluetooth: hci0: command 0x0c24 tx timeout [ 88.329377][ T7248] Console: switching to colour dummy device 80x25 [ 89.037021][ T42] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 89.194049][ T7250] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 89.225165][ T42] usb 12-1: Using ep0 maxpacket: 8 [ 89.226843][ T42] usb 12-1: descriptor type invalid, skip [ 89.226872][ T42] usb 12-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 89.227678][ T42] usb 12-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 89.227693][ T42] usb 12-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 89.230995][ T42] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.231013][ T42] usb 12-1: Product: Ф [ 89.231024][ T42] usb 12-1: Manufacturer: ⽿懟䓏ᅐ쒶᣾䯴ᤶꎙޟ৚遟胩列簵垉ㄤ鮙퇓䍡ళ롍軜뒇䐉퇊䃊螈㸃峜 [ 89.231039][ T42] usb 12-1: SerialNumber: syz [ 89.239011][ T7250] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 89.239163][ T7250] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 89.239413][ T7250] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 89.239992][ T7250] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 89.290803][ T7250] pci 0000:00:01.0: Adding to iommu group 1 [ 89.301994][ T7250] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 89.302008][ T7250] pci 0000:00:01.0: vgaarb: bridge control possible [ 89.302028][ T7250] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 89.326507][ T7250] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 89.326620][ T7250] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 89.327724][ T7250] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 89.350656][ T7250] [drm] Found bochs VGA, ID 0xb0c5. [ 89.350670][ T7250] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 89.371550][ T7250] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 89.635181][ T43] audit: type=1326 audit(1790219196.942:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7273 comm="syz.6.209" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 89.636362][ T7250] Console: switching to colour frame buffer device 160x50 [ 89.636902][ T43] audit: type=1326 audit(1790219196.952:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7273 comm="syz.6.209" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 89.637399][ T43] audit: type=1326 audit(1790219196.952:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7273 comm="syz.6.209" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf705efec code=0x7ffc0000 [ 89.637438][ T43] audit: type=1326 audit(1790219196.952:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7273 comm="syz.6.209" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 89.637585][ T43] audit: type=1326 audit(1790219196.952:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7273 comm="syz.6.209" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 89.637913][ T43] audit: type=1326 audit(1790219196.952:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7273 comm="syz.6.209" exe="/syz-executor" sig=0 arch=40000003 syscall=151 compat=1 ip=0xf705efec code=0x7ffc0000 [ 89.637948][ T43] audit: type=1326 audit(1790219196.952:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7273 comm="syz.6.209" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 89.638075][ T43] audit: type=1326 audit(1790219196.952:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7273 comm="syz.6.209" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 89.638525][ T43] audit: type=1326 audit(1790219196.952:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7273 comm="syz.6.209" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf705efec code=0x7ffc0000 [ 89.638728][ T7274] overlayfs: failed to resolve '/sync/sw_sync': -2 [ 89.638904][ T43] audit: type=1326 audit(1790219196.952:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7273 comm="syz.6.209" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 89.653120][ T7271] block nbd5: shutting down sockets [ 89.658704][ T7274] tmpfs: Bad value for 'mpol' [ 89.721746][ T7250] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 89.766083][ T7271] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode [ 89.766116][ T7271] mac80211_hwsim hwsim12 wlan0: entered allmulticast mode [ 89.768123][ T7271] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 89.837793][ T42] cdc_ncm 12-1:1.0: bind() failure [ 89.840716][ T42] cdc_ncm 12-1:1.1: CDC Union missing and no IAD found [ 89.840742][ T42] cdc_ncm 12-1:1.1: bind() failure [ 89.844067][ T42] usb 12-1: USB disconnect, device number 2 [ 89.848435][ T6279] udevd[6279]: setting owner of /dev/bus/usb/012/002 to uid=0, gid=0 failed: No such file or directory [ 89.955458][ T25] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 90.115079][ T25] usb 11-1: Using ep0 maxpacket: 32 [ 90.117296][ T25] usb 11-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 90.118150][ T25] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.118174][ T25] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.119633][ T25] usb 11-1: config 0 descriptor?? [ 90.325612][ T7302] netlink: 'syz.5.215': attribute type 1 has an invalid length. [ 90.382476][ T6650] usb 11-1: USB disconnect, device number 2 [ 90.387818][ T1046] IPVS: starting estimator thread 0... [ 90.468639][ T7310] FAULT_INJECTION: forcing a failure. [ 90.468639][ T7310] name failslab, interval 1, probability 0, space 0, times 0 [ 90.468661][ T7310] CPU: 3 UID: 0 PID: 7310 Comm: syz.7.217 Tainted: G L syzkaller #0 PREEMPT(full) [ 90.468677][ T7310] Tainted: [L]=SOFTLOCKUP [ 90.468682][ T7310] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 90.468689][ T7310] Call Trace: [ 90.468693][ T7310] [ 90.468699][ T7310] dump_stack_lvl+0x100/0x190 [ 90.468774][ T7310] should_fail_ex.cold+0x5/0xa [ 90.468791][ T7310] should_failslab+0xc2/0x120 [ 90.468827][ T7310] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 90.468843][ T7310] ? find_held_lock+0x2b/0x80 [ 90.468856][ T7310] ? sock_alloc_inode+0x26/0x2c0 [ 90.468889][ T7310] ? __pfx_sock_alloc_inode+0x10/0x10 [ 90.468902][ T7310] sock_alloc_inode+0x26/0x2c0 [ 90.468914][ T7310] ? __pfx_sock_alloc_inode+0x10/0x10 [ 90.468929][ T7310] alloc_inode+0x68/0x250 [ 90.468953][ T7310] sock_alloc+0x44/0x280 [ 90.468967][ T7310] ? security_socket_create+0x7f/0x250 [ 90.468997][ T7310] __sock_create+0xc2/0x860 [ 90.469016][ T7310] __sys_socket+0x14d/0x260 [ 90.469034][ T7310] ? xfd_validate_state+0x129/0x190 [ 90.469053][ T7310] ? __pfx___sys_socket+0x10/0x10 [ 90.469072][ T7310] __ia32_sys_socket+0x72/0xb0 [ 90.469085][ T7310] ? lockdep_hardirqs_on+0x7d/0x110 [ 90.469133][ T7310] __do_fast_syscall_32+0x13a/0x8b0 [ 90.469149][ T7310] do_fast_syscall_32+0x32/0x70 [ 90.469163][ T7310] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 90.469179][ T7310] RIP: 0023:0xf7f15fec [ 90.469196][ T7310] Code: Unable to access opcode bytes at 0xf7f15fc2. [ 90.469202][ T7310] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 90.469213][ T7310] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000000080805 [ 90.469220][ T7310] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 90.469226][ T7310] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 90.469233][ T7310] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 90.469240][ T7310] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 90.469254][ T7310] [ 90.469284][ T7310] socket: no more sockets [ 90.479844][ T7305] IPVS: using max 43 ests per chain, 103200 per kthread [ 90.935927][ T7338] PKCS7: Unknown OID: [158] 2.16.840.1.101.3.4.2.13 [ 90.935944][ T7338] Unsupported digest algo: 106 [ 90.964835][ T7341] netlink: 32 bytes leftover after parsing attributes in process `syz.7.227'. [ 91.003703][ T7343] jffs2: notice: (7343) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 91.048014][ T7346] fuse: Unknown parameter '184467440737095516150x0000000000000009' [ 91.169872][ T7352] jffs2: notice: (7352) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 91.243047][ T7357] FAULT_INJECTION: forcing a failure. [ 91.243047][ T7357] name failslab, interval 1, probability 0, space 0, times 0 [ 91.243079][ T7357] CPU: 0 UID: 0 PID: 7357 Comm: syz.5.234 Tainted: G L syzkaller #0 PREEMPT(full) [ 91.243104][ T7357] Tainted: [L]=SOFTLOCKUP [ 91.243111][ T7357] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 91.243130][ T7357] Call Trace: [ 91.243136][ T7357] [ 91.243143][ T7357] dump_stack_lvl+0x100/0x190 [ 91.243173][ T7357] should_fail_ex.cold+0x5/0xa [ 91.243198][ T7357] should_failslab+0xc2/0x120 [ 91.243224][ T7357] __kmalloc_noprof+0xfc/0x840 [ 91.243246][ T7357] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 91.243281][ T7357] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 91.243315][ T7357] genl_family_rcv_msg_doit+0xc7/0x300 [ 91.243346][ T7357] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 91.243372][ T7357] ? genl_get_cmd+0x3e7/0x760 [ 91.243404][ T7357] ? bpf_lsm_capable+0x9/0x10 [ 91.243421][ T7357] ? security_capable+0x80/0x260 [ 91.243446][ T7357] ? ns_capable+0xd2/0xf0 [ 91.243475][ T7357] genl_rcv_msg+0x560/0x800 [ 91.243504][ T7357] ? __pfx_genl_rcv_msg+0x10/0x10 [ 91.243543][ T7357] ? __lock_acquire+0x5c0/0x1f40 [ 91.243566][ T7357] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 91.243596][ T7357] netlink_rcv_skb+0x159/0x420 [ 91.243621][ T7357] ? __pfx_genl_rcv_msg+0x10/0x10 [ 91.243648][ T7357] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 91.243680][ T7357] ? netlink_deliver_tap+0x1ae/0xcc0 [ 91.243708][ T7357] genl_rcv+0x28/0x40 [ 91.243732][ T7357] netlink_unicast+0x585/0x850 [ 91.243760][ T7357] ? __pfx_netlink_unicast+0x10/0x10 [ 91.243782][ T7357] ? aa_sk_perm+0x389/0xab0 [ 91.243805][ T7357] netlink_sendmsg+0x8b0/0xda0 [ 91.243833][ T7357] ? __pfx_netlink_sendmsg+0x10/0x10 [ 91.243861][ T7357] ? apparmor_socket_sendmsg+0x165/0x280 [ 91.243889][ T7357] ____sys_sendmsg+0xa4d/0xbe0 [ 91.243909][ T7357] ? __pfx_netlink_sendmsg+0x10/0x10 [ 91.243936][ T7357] ? __pfx_____sys_sendmsg+0x10/0x10 [ 91.243967][ T7357] ___sys_sendmsg+0x190/0x1e0 [ 91.243990][ T7357] ? __pfx____sys_sendmsg+0x10/0x10 [ 91.244023][ T7357] ? find_held_lock+0x2b/0x80 [ 91.244081][ T7357] __sys_sendmsg+0x160/0x210 [ 91.244110][ T7357] ? __pfx___sys_sendmsg+0x10/0x10 [ 91.244148][ T7357] ? __pfx_ksys_write+0x10/0x10 [ 91.244175][ T7357] __do_fast_syscall_32+0x13a/0x8b0 [ 91.244195][ T7357] ? lockdep_hardirqs_on+0x7d/0x110 [ 91.244217][ T7357] do_fast_syscall_32+0x32/0x70 [ 91.244238][ T7357] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 91.244260][ T7357] RIP: 0023:0xf7f66fec [ 91.244281][ T7357] Code: Unable to access opcode bytes at 0xf7f66fc2. [ 91.244290][ T7357] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 91.244309][ T7357] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 91.244320][ T7357] RDX: 0000000004044094 RSI: 0000000000000000 RDI: 0000000000000000 [ 91.244332][ T7357] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 91.244342][ T7357] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 91.244351][ T7357] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 91.244376][ T7357] [ 92.436256][ T7370] syz.8.239 (7370): drop_caches: 2 [ 92.515939][ T7392] netlink: 216 bytes leftover after parsing attributes in process `syz.8.248'. [ 92.515953][ T7392] netlink: 216 bytes leftover after parsing attributes in process `syz.8.248'. [ 93.385127][ T5523] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 93.535497][ T5523] usb 13-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 93.536306][ T5523] usb 13-1: config 1 interface 1 altsetting 0 endpoint 0x3 has invalid maxpacket 44431, setting to 1024 [ 93.536323][ T5523] usb 13-1: config 1 interface 1 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 93.536340][ T5523] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.675364][ T7409] Console: switching to colour dummy device 80x25 [ 93.727535][ T1127] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 93.733127][ T1127] ata1.00: configured for UDMA/100 [ 93.753474][ T5523] cdc_acm 13-1:1.0: ttyACM0: USB ACM device [ 93.793221][ T7411] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 93.816350][ T7411] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 93.816460][ T7411] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 93.818729][ T7411] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 93.820371][ T7411] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 93.836539][ T7411] pci 0000:00:01.0: Adding to iommu group 1 [ 93.851542][ T7411] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 93.851556][ T7411] pci 0000:00:01.0: vgaarb: bridge control possible [ 93.851565][ T7411] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 93.870942][ T7411] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 93.871090][ T7411] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 93.872150][ T7411] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 93.887741][ T7411] [drm] Found bochs VGA, ID 0xb0c5. [ 93.887752][ T7411] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 93.897871][ T7423] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 93.906467][ T7411] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 94.065448][ T7432] netlink: 8 bytes leftover after parsing attributes in process `syz.5.258'. [ 94.066540][ T7432] EXT4-fs (sda1): resizing filesystem from 262144 to 1 blocks [ 94.066600][ T7432] EXT4-fs warning (device sda1): ext4_resize_fs:2041: can't shrink FS - resize aborted [ 94.089923][ T7411] Console: switching to colour frame buffer device 160x50 [ 94.114433][ T7411] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 95.105464][ T6649] usb 10-1: new low-speed USB device number 3 using dummy_hcd [ 95.235040][ T6649] usb 10-1: device descriptor read/64, error -71 [ 95.373128][ T7455] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 95.485089][ T6649] usb 10-1: new low-speed USB device number 4 using dummy_hcd [ 95.492911][ T7459] jffs2: notice: (7459) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 95.551459][ T7461] netlink: 'syz.6.266': attribute type 1 has an invalid length. [ 95.625046][ T6649] usb 10-1: device descriptor read/64, error -71 [ 95.731927][ T6649] usb usb10-port1: attempt power cycle [ 96.085049][ T6649] usb 10-1: new low-speed USB device number 5 using dummy_hcd [ 96.109296][ T6649] usb 10-1: device descriptor read/8, error -71 [ 96.345136][ T6649] usb 10-1: new low-speed USB device number 6 using dummy_hcd [ 96.365754][ T6649] usb 10-1: device descriptor read/8, error -71 [ 96.475258][ T6649] usb usb10-port1: unable to enumerate USB device [ 97.147916][ T7470] syz.6.269 (7470) used greatest stack depth: 19256 bytes left [ 97.909459][ T7515] XFS (nullb0): Invalid superblock magic number [ 97.965122][ T5840] usb 11-1: new full-speed USB device number 3 using dummy_hcd [ 98.117425][ T5840] usb 11-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice= 0.03 [ 98.118912][ T5840] usb 11-1: config 0 has an invalid interface number: 50 but max is 0 [ 98.118934][ T5840] usb 11-1: config 0 has no interface number 0 [ 98.118965][ T5840] usb 11-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 98.118987][ T5840] usb 11-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 255, setting to 64 [ 98.120982][ T5840] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.121001][ T5840] usb 11-1: Product: syz [ 98.121012][ T5840] usb 11-1: Manufacturer: syz [ 98.121025][ T5840] usb 11-1: SerialNumber: syz [ 98.196388][ T5840] usb 11-1: config 0 descriptor?? [ 98.231721][ T7511] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 98.250154][ T5840] yurex 11-1:0.50: USB YUREX device now attached to Yurex #0 [ 98.382048][ T7523] Console: switching to colour dummy device 80x25 [ 98.429212][ T7524] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 98.437825][ T7524] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 98.437930][ T7524] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 98.438124][ T7524] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 98.438514][ T7524] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 98.444360][ T7524] pci 0000:00:01.0: Adding to iommu group 1 [ 98.448871][ T7524] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 98.448885][ T7524] pci 0000:00:01.0: vgaarb: bridge control possible [ 98.448893][ T7524] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 98.453098][ T7524] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 98.453238][ T7524] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 98.454502][ T7524] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 98.461688][ T7524] [drm] Found bochs VGA, ID 0xb0c5. [ 98.461700][ T7524] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 98.466380][ T7524] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 98.680064][ T7524] Console: switching to colour frame buffer device 160x50 [ 98.712396][ T7524] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 99.510843][ T7541] jffs2: notice: (7541) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 101.019178][ T7583] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 101.046140][ T5103] usb 11-1: USB disconnect, device number 3 [ 101.053861][ T5103] yurex 11-1:0.50: USB YUREX #0 now disconnected [ 101.265155][ T5523] usb 13-1: USB disconnect, device number 2 [ 101.295819][ T7592] netlink: 96 bytes leftover after parsing attributes in process `syz.8.287'. [ 101.297880][ T7592] warning: `syz.8.287' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 101.300934][ T7592] tipc: New replicast peer: 2001:0000:0000:0000:0000:0000:0000:0002 [ 101.301060][ T7592] tipc: Enabled bearer , priority 10 [ 102.173065][ T7602] netlink: 'syz.6.290': attribute type 1 has an invalid length. [ 102.186368][ T7479] IPVS: starting estimator thread 0... [ 102.188874][ T7604] netlink: 4 bytes leftover after parsing attributes in process `syz.8.291'. [ 102.191175][ T7604] netlink: 4 bytes leftover after parsing attributes in process `syz.8.291'. [ 102.194116][ T7604] netlink: 'syz.8.291': attribute type 4 has an invalid length. [ 102.297915][ T7607] ip6gretap1: entered allmulticast mode [ 102.299901][ T7607] batman_adv: batadv0: Adding interface: ip6gretap1 [ 102.299911][ T7607] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.299927][ T7607] batman_adv: batadv0: Interface activated: ip6gretap1 [ 102.302295][ T25] tipc: Node number set to 3145728 [ 102.307657][ T7605] IPVS: using max 43 ests per chain, 103200 per kthread [ 102.456978][ T1350] usb 13-1: new high-speed USB device number 3 using dummy_hcd [ 102.500028][ T7607] syzkaller0: entered promiscuous mode [ 102.500044][ T7607] syzkaller0: entered allmulticast mode [ 102.513170][ T7618] FAULT_INJECTION: forcing a failure. [ 102.513170][ T7618] name failslab, interval 1, probability 0, space 0, times 0 [ 102.513192][ T7618] CPU: 2 UID: 0 PID: 7618 Comm: syz.6.296 Tainted: G L syzkaller #0 PREEMPT(full) [ 102.513209][ T7618] Tainted: [L]=SOFTLOCKUP [ 102.513215][ T7618] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 102.513223][ T7618] Call Trace: [ 102.513227][ T7618] [ 102.513232][ T7618] dump_stack_lvl+0x100/0x190 [ 102.513308][ T7618] should_fail_ex.cold+0x5/0xa [ 102.513331][ T7618] should_failslab+0xc2/0x120 [ 102.513378][ T7618] __kmalloc_node_noprof+0xff/0x880 [ 102.513401][ T7618] ? __pfx___up_read+0x10/0x10 [ 102.513420][ T7618] ? crypto_create_tfm_node+0x8d/0x3b0 [ 102.513443][ T7618] crypto_create_tfm_node+0x8d/0x3b0 [ 102.513459][ T7618] ? __pfx_rsassa_pkcs1_init_tfm+0x10/0x10 [ 102.513485][ T7618] crypto_spawn_tfm2+0x62/0xc0 [ 102.513508][ T7618] rsassa_pkcs1_init_tfm+0x39/0xb0 [ 102.513535][ T7618] crypto_sig_init_tfm+0xba/0xf0 [ 102.513557][ T7618] crypto_create_tfm_node+0x171/0x3b0 [ 102.513580][ T7618] crypto_alloc_tfm_node+0x102/0x260 [ 102.513603][ T7618] public_key_verify_signature+0x21b/0x910 [ 102.513633][ T7618] ? __pfx_public_key_verify_signature+0x10/0x10 [ 102.513669][ T7618] ? asymmetric_key_generate_id+0x7e/0x180 [ 102.513695][ T7618] x509_check_for_self_signed+0x325/0x510 [ 102.513733][ T7618] x509_cert_parse+0x60c/0x910 [ 102.513763][ T7618] x509_key_preparse+0x65/0x9c0 [ 102.513794][ T7618] asymmetric_key_preparse+0xce/0x1d0 [ 102.513815][ T7618] ? __pfx_asymmetric_key_preparse+0x10/0x10 [ 102.513837][ T7618] __key_create_or_update+0x463/0xe30 [ 102.513862][ T7618] ? __pfx___key_create_or_update+0x10/0x10 [ 102.513885][ T7618] ? lookup_user_key+0x3f3/0x1300 [ 102.513927][ T7618] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 102.513964][ T7618] key_create_or_update+0x42/0x60 [ 102.513988][ T7618] __do_sys_add_key+0x2e8/0x460 [ 102.514014][ T7618] ? __pfx___do_sys_add_key+0x10/0x10 [ 102.514049][ T7618] __do_fast_syscall_32+0x13a/0x8b0 [ 102.514119][ T7618] do_fast_syscall_32+0x32/0x70 [ 102.514142][ T7618] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 102.514163][ T7618] RIP: 0023:0xf705efec [ 102.514183][ T7618] Code: Unable to access opcode bytes at 0xf705efc2. [ 102.514191][ T7618] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 000000000000011e [ 102.514209][ T7618] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000000000 [ 102.514218][ T7618] RDX: 0000000080000200 RSI: 0000000000000559 RDI: 00000000ffffffff [ 102.514225][ T7618] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 102.514233][ T7618] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 102.514240][ T7618] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 102.514256][ T7618] [ 102.608848][ T1350] usb 13-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice= 1.00 [ 102.610321][ T1350] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.871557][ T1350] net1080 13-1:1.0 usb0: register 'net1080' at usb-dummy_hcd.8-1, NetChip TurboCONNECT, 7a:da:0c:f2:57:5e [ 103.094752][ T7604] netlink: 76 bytes leftover after parsing attributes in process `syz.8.291'. [ 103.098518][ T7604] netlink: 232 bytes leftover after parsing attributes in process `syz.8.291'. [ 103.098530][ T7604] netlink: 232 bytes leftover after parsing attributes in process `syz.8.291'. [ 103.098988][ T7604] netlink: 4 bytes leftover after parsing attributes in process `syz.8.291'. [ 103.100865][ T7604] netlink: 4 bytes leftover after parsing attributes in process `syz.8.291'. [ 103.103213][ T7604] netlink: 4 bytes leftover after parsing attributes in process `syz.8.291'. [ 103.104552][ T7604] netlink: 4 bytes leftover after parsing attributes in process `syz.8.291'. [ 103.972472][ T7642] block nbd7: shutting down sockets [ 104.038453][ T7647] netlink: 'syz.7.301': attribute type 1 has an invalid length. [ 104.062385][ T37] IPVS: starting estimator thread 0... [ 104.155136][ T7648] IPVS: using max 43 ests per chain, 103200 per kthread [ 105.388928][ T7668] jffs2: notice: (7668) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 108.145824][ T6471] usb 13-1: USB disconnect, device number 3 [ 108.146842][ T6471] net1080 13-1:1.0 usb0: unregister 'net1080' usb-dummy_hcd.8-1, NetChip TurboCONNECT [ 108.280897][ T7689] netlink: 'syz.5.313': attribute type 1 has an invalid length. [ 108.281759][ T7682] ptrace attach of "/syz-executor exec"[7684] was attempted by "/syz-executor exec"[7682] [ 108.563310][ T7704] Console: switching to colour dummy device 80x25 [ 108.575144][ T5822] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 108.608481][ T6471] usb 13-1: new high-speed USB device number 4 using dummy_hcd [ 108.727107][ T7705] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 108.733221][ T7705] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 108.733408][ T7705] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 108.733599][ T7705] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 108.734087][ T7705] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 108.750766][ T7705] pci 0000:00:01.0: Adding to iommu group 1 [ 108.758840][ T7705] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 108.758854][ T7705] pci 0000:00:01.0: vgaarb: bridge control possible [ 108.758863][ T7705] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 108.772168][ T7705] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 108.772288][ T7705] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 108.779117][ T5822] usb 11-1: Using ep0 maxpacket: 8 [ 108.779744][ T6471] usb 13-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 108.780659][ T5822] usb 11-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 108.780825][ T6471] usb 13-1: config index 0 descriptor too short (expected 39, got 27) [ 108.780903][ T6471] usb 13-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 108.780915][ T6471] usb 13-1: config 0 interface 0 has no altsetting 0 [ 108.782066][ T7705] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 108.782097][ T5822] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 108.782114][ T5822] usb 11-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 108.782131][ T5822] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 108.782144][ T5822] usb 11-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 108.782157][ T5822] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 108.782169][ T5822] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 108.782320][ T5822] usb 11-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 108.782334][ T5822] usb 11-1: config 168 interface 0 has no altsetting 0 [ 108.782803][ T6471] usb 13-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 108.782815][ T6471] usb 13-1: Product: syz [ 108.782822][ T6471] usb 13-1: Manufacturer: syz [ 108.782829][ T6471] usb 13-1: SerialNumber: syz [ 108.784506][ T5822] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 108.784523][ T5822] usb 11-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 108.784540][ T5822] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 108.784553][ T5822] usb 11-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 108.784565][ T5822] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 108.784578][ T5822] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 108.784590][ T5822] usb 11-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 108.784603][ T5822] usb 11-1: config 168 interface 0 has no altsetting 0 [ 108.784652][ T6471] usb 13-1: config 0 descriptor?? [ 108.824584][ T5822] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 108.824605][ T5822] usb 11-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 108.824623][ T5822] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 108.824637][ T5822] usb 11-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 108.824649][ T5822] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 108.824738][ T5822] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 108.824752][ T5822] usb 11-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 108.824765][ T5822] usb 11-1: config 168 interface 0 has no altsetting 0 [ 108.842692][ T6471] hub 13-1:0.0: bad descriptor, ignoring hub [ 108.842707][ T6471] hub 13-1:0.0: probe with driver hub failed with error -5 [ 108.895331][ T5822] usb 11-1: string descriptor 0 read error: -22 [ 108.895390][ T5822] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.921441][ T6471] usb 13-1: selecting invalid altsetting 0 [ 108.929006][ T7705] [drm] Found bochs VGA, ID 0xb0c5. [ 108.929017][ T7705] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 108.950907][ T5822] adutux 11-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 108.974575][ T7705] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 109.027901][ T6471] usb 13-1: USB disconnect, device number 4 [ 109.090643][ T5732] udevd[5732]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 109.131324][ T7705] Console: switching to colour frame buffer device 160x50 [ 109.167248][ T7705] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 109.239044][ T5840] usb 11-1: USB disconnect, device number 4 [ 109.431937][ T7711] Console: switching to colour dummy device 80x25 [ 109.497733][ T6471] usb 13-1: new high-speed USB device number 5 using dummy_hcd [ 109.603502][ T7712] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 109.610923][ T7712] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 109.611067][ T7712] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 109.611480][ T7712] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 109.612357][ T7712] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 109.630834][ T7712] pci 0000:00:01.0: Adding to iommu group 1 [ 109.634097][ T7712] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 109.634109][ T7712] pci 0000:00:01.0: vgaarb: bridge control possible [ 109.634116][ T7712] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 109.646164][ T6471] usb 13-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 109.647784][ T7712] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 109.647971][ T7712] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 109.648935][ T6471] usb 13-1: config index 0 descriptor too short (expected 39, got 27) [ 109.648958][ T6471] usb 13-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 109.648969][ T6471] usb 13-1: config 0 interface 0 has no altsetting 0 [ 109.651150][ T6471] usb 13-1: string descriptor 0 read error: -22 [ 109.651204][ T6471] usb 13-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 109.653813][ T7712] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 109.654751][ T6471] usb 13-1: config 0 descriptor?? [ 109.656151][ T6471] hub 13-1:0.0: bad descriptor, ignoring hub [ 109.656166][ T6471] hub 13-1:0.0: probe with driver hub failed with error -5 [ 109.657572][ T6471] usb 13-1: selecting invalid altsetting 0 [ 109.695002][ T7712] [drm] Found bochs VGA, ID 0xb0c5. [ 109.695013][ T7712] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 109.788087][ T7712] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 109.871583][ T7716] input: syz0 as /devices/virtual/input/input8 [ 109.980427][ T5103] usb 13-1: USB disconnect, device number 5 [ 110.183507][ T7712] Console: switching to colour frame buffer device 160x50 [ 110.217186][ T7712] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 110.823089][ T7722] netlink: 16 bytes leftover after parsing attributes in process `syz.6.322'. [ 111.499510][ T7738] ip6t_srh: unknown srh match flags 448C [ 111.581354][ T7740] netlink: 36 bytes leftover after parsing attributes in process `syz.7.329'. [ 112.465578][ T7783] netlink: 4 bytes leftover after parsing attributes in process `syz.5.344'. [ 112.865121][ T25] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 112.955097][ T6649] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 113.017384][ T25] usb 10-1: unable to get BOS descriptor or descriptor too short [ 113.017411][ T25] usb 10-1: New USB device found, idVendor=1111, idProduct=2222, bcdDevice= 1.00 [ 113.018207][ T25] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.234086][ T25] scsi host6: uas [ 113.430751][ C2] usb 10-1: stat urb: status -71 [ 113.430945][ C2] usb 10-1: cmd cmplt err -71 [ 113.432551][ T30] usb 10-1: USB disconnect, device number 7 [ 113.436524][ T30] scsi 6:0:0:0: tag#8 uas_zap_pending 0 uas-tag 1 inflight: CMD [ 113.436686][ T30] scsi 6:0:0:0: tag#8 CDB: Inquiry 12 00 00 00 24 00 [ 113.485173][ T5523] usb 13-1: new high-speed USB device number 6 using dummy_hcd [ 113.645800][ T5523] usb 13-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 113.646738][ T5523] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.646761][ T5523] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.646789][ T5523] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.648811][ T5523] usb 13-1: config 0 descriptor?? [ 114.055499][ T5523] hid_parser_main: 21 callbacks suppressed [ 114.055515][ T5523] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 114.055529][ T5523] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 114.055541][ T5523] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 114.055552][ T5523] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 114.055564][ T5523] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 114.055575][ T5523] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 114.055587][ T5523] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 114.058684][ T5523] cp2112 0003:10C4:EA90.0003: hidraw1: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.8-1/input0 [ 114.185279][ T5822] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 114.245041][ T25] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 114.256719][ T5523] cp2112 0003:10C4:EA90.0003: Part Number: 0x00 Device Version: 0x00 [ 114.346870][ T5822] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 114.347671][ T5822] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 36872, setting to 1024 [ 114.347688][ T5822] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 114.347699][ T5822] usb 11-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 114.349368][ T5822] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 114.349383][ T5822] usb 11-1: Product: syz [ 114.349393][ T5822] usb 11-1: Manufacturer: syz [ 114.349402][ T5822] usb 11-1: SerialNumber: syz [ 114.351781][ T7840] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 114.395080][ T25] usb 10-1: Using ep0 maxpacket: 32 [ 114.395547][ T25] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 114.396346][ T25] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.396361][ T25] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.396378][ T25] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.397589][ T25] usb 10-1: config 0 descriptor?? [ 114.401228][ T25] hub 10-1:0.0: USB hub found [ 114.456596][ T5523] cp2112 0003:10C4:EA90.0003: error requesting SMBus config [ 114.460712][ T5523] cp2112 0003:10C4:EA90.0003: probe with driver cp2112 failed with error -71 [ 114.462392][ T5523] usb 13-1: USB disconnect, device number 6 [ 114.556292][ T5822] usblp 11-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 114.602142][ T25] hub 10-1:0.0: config failed, can't read hub descriptor (err -22) [ 114.759521][ C2] usblp0: nonzero write bulk status received: -71 [ 114.760865][ T5103] usb 11-1: USB disconnect, device number 5 [ 114.766617][ T5103] usblp0: removed [ 114.816074][ T25] hid-generic 0003:046D:C31C.0004: hidraw1: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.5-1/input0 [ 115.125252][ T5523] usb 10-1: USB disconnect, device number 8 [ 115.145524][ T25] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 115.295572][ T25] usb 12-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 115.296379][ T25] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.296402][ T25] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.309189][ T25] cdc_wdm 12-1:1.0: cdc-wdm0: USB WDM device [ 115.309201][ T25] cdc_wdm 12-1:1.0: Unknown control protocol [ 115.345499][ T5822] usb 13-1: new high-speed USB device number 7 using dummy_hcd [ 115.418950][ T7874] netlink: 4 bytes leftover after parsing attributes in process `syz.6.380'. [ 115.495242][ T5822] usb 13-1: Using ep0 maxpacket: 32 [ 115.495703][ T5822] usb 13-1: New USB device found, idVendor=0763, idProduct=0150, bcdDevice= 0.40 [ 115.496516][ T5822] usb 13-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 115.496528][ T5822] usb 13-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 115.497993][ T5822] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.498005][ T5822] usb 13-1: Product: syz [ 115.498013][ T5822] usb 13-1: Manufacturer: syz [ 115.498020][ T5822] usb 13-1: SerialNumber: syz [ 115.505105][ T6471] usb 12-1: USB disconnect, device number 4 [ 115.648999][ T7882] netlink: 24 bytes leftover after parsing attributes in process `syz.5.383'. [ 115.706039][ T5822] usb 13-1: 0:1 : does not exist [ 115.706053][ T5822] usb 13-1: 0:2 : does not exist [ 115.706060][ T5822] usb 13-1: 0:3 : does not exist [ 115.706068][ T5822] usb 13-1: 0:4 : does not exist [ 115.706099][ T5822] usb 13-1: unit 6 not found! [ 115.706107][ T5822] usb 13-1: unit 7 not found! [ 115.726071][ T5822] usb 13-1: USB disconnect, device number 7 [ 115.741814][ T6279] udevd[6279]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb13/13-1/13-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 115.765200][ T25] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 115.935839][ T25] usb 11-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 115.937545][ T25] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.937562][ T25] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.937579][ T25] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.938404][ T7889] serio: Serial port ptm0 [ 115.939048][ T25] usb 11-1: config 0 descriptor?? [ 116.140765][ T7892] netlink: 4 bytes leftover after parsing attributes in process `syz.7.387'. [ 116.303856][ T7909] netlink: 4 bytes leftover after parsing attributes in process `syz.8.393'. [ 116.545419][ T25] hid-led 0003:1D34:000A.0005: probe with driver hid-led failed with error -71 [ 116.552508][ T25] usb 11-1: USB disconnect, device number 6 [ 116.991406][ T7939] netlink: 12 bytes leftover after parsing attributes in process `syz.7.407'. [ 117.075131][ T25] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 117.182830][ T7948] netlink: 288 bytes leftover after parsing attributes in process `syz.7.411'. [ 117.226371][ T25] usb 10-1: New USB device found, idVendor=8086, idProduct=0000, bcdDevice= 0.00 [ 117.227459][ T25] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.227475][ T25] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.227492][ T25] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.470393][ T7975] netlink: 12 bytes leftover after parsing attributes in process `syz.6.422'. [ 117.470409][ T7975] netlink: 20 bytes leftover after parsing attributes in process `syz.6.422'. [ 117.652725][ T25] hid-sensor-hub 0003:8086:0000.0006: hiddev0,hidraw1: USB HID v1.11 Device [HID 8086:0000] on usb-dummy_hcd.5-1/input0 [ 117.858540][ T25] usb 10-1: USB disconnect, device number 9 [ 118.489231][ T8007] netlink: 4 bytes leftover after parsing attributes in process `syz.5.435'. [ 118.595146][ T5744] Bluetooth: hci2: command 0x0406 tx timeout [ 118.605795][ T8000] netlink: 96 bytes leftover after parsing attributes in process `syz.6.432'. [ 119.125218][ T30] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 119.172050][ T43] kauditd_printk_skb: 55 callbacks suppressed [ 119.172065][ T43] audit: type=1326 audit(1790219226.482:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8061 comm="syz.7.460" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f15fec code=0x0 [ 119.175151][ T5822] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 119.275168][ T30] usb 10-1: Using ep0 maxpacket: 8 [ 119.277226][ T30] usb 10-1: unable to get BOS descriptor or descriptor too short [ 119.277250][ T30] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 119.278068][ T30] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 119.278079][ T30] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 119.279722][ T30] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.279734][ T30] usb 10-1: Product: syz [ 119.279741][ T30] usb 10-1: Manufacturer: syz [ 119.279749][ T30] usb 10-1: SerialNumber: syz [ 119.325807][ T5822] usb 11-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 119.326715][ T5822] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.326738][ T5822] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.326765][ T5822] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.328412][ T5822] usb 11-1: config 0 descriptor?? [ 119.486500][ T30] usb 10-1: 0:2 : does not exist [ 119.486535][ T30] usb 10-1: unit 20 not found! [ 119.501669][ T30] usb 10-1: USB disconnect, device number 10 [ 119.515341][ T6279] udevd[6279]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 119.585096][ T6650] usb 13-1: new high-speed USB device number 8 using dummy_hcd [ 119.734528][ T5822] hid-led 0003:1D34:000A.0007: unknown main item tag 0x0 [ 119.734547][ T5822] hid-led 0003:1D34:000A.0007: unknown main item tag 0x0 [ 119.734559][ T5822] hid-led 0003:1D34:000A.0007: unknown main item tag 0x0 [ 119.745065][ T6650] usb 13-1: Using ep0 maxpacket: 8 [ 119.745876][ T6650] usb 13-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 119.746879][ T6650] usb 13-1: config 3 has an invalid interface number: 45 but max is 0 [ 119.746892][ T6650] usb 13-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 119.746902][ T6650] usb 13-1: config 3 has no interface number 0 [ 119.746923][ T6650] usb 13-1: config 3 interface 45 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 119.746936][ T6650] usb 13-1: config 3 interface 45 has no altsetting 0 [ 119.748520][ T6650] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.748532][ T6650] usb 13-1: Product: syz [ 119.748541][ T6650] usb 13-1: Manufacturer: syz [ 119.748549][ T6650] usb 13-1: SerialNumber: syz [ 119.936012][ T5822] hid-led 0003:1D34:000A.0007: probe with driver hid-led failed with error -71 [ 119.937473][ T5822] usb 11-1: USB disconnect, device number 7 [ 120.052829][ T8076] netlink: 84 bytes leftover after parsing attributes in process `syz.7.465'. [ 120.052852][ T8076] netlink: 84 bytes leftover after parsing attributes in process `syz.7.465'. [ 120.102768][ T6650] usb 13-1: USB disconnect, device number 8 [ 120.133248][ T6279] udevd[6279]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb13/13-1/13-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 120.693160][ T8100] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.693960][ T8100] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.764184][ T8098] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 120.764196][ T8098] IPv6: NLM_F_CREATE should be set when creating new route [ 120.764246][ T8098] IPv6: NLM_F_CREATE should be set when creating new route [ 120.803723][ T8100] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.807228][ T8100] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.885111][ T5546] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.885140][ T5546] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.885157][ T5546] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.885175][ T5546] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.015088][ T6769] usb 11-1: new full-speed USB device number 8 using dummy_hcd [ 121.019412][ T8116] 9p: Bad value for 'dfltgid' [ 121.019439][ T8116] 9p: Bad value for 'dfltgid' [ 121.155612][ T5817] usb 12-1: new full-speed USB device number 5 using dummy_hcd [ 121.165286][ T6769] usb 11-1: device descriptor read/64, error -71 [ 121.307179][ T5817] usb 12-1: New USB device found, idVendor=0856, idProduct=ac33, bcdDevice= 0.f8 [ 121.308565][ T5817] usb 12-1: config 0 has an invalid interface number: 92 but max is 0 [ 121.308584][ T5817] usb 12-1: config 0 has no interface number 0 [ 121.308606][ T5817] usb 12-1: too many endpoints for config 0 interface 92 altsetting 84: 174, using maximum allowed: 30 [ 121.308632][ T5817] usb 12-1: config 0 interface 92 altsetting 84 has 0 endpoint descriptors, different from the interface descriptor's value: 174 [ 121.308654][ T5817] usb 12-1: config 0 interface 92 has no altsetting 0 [ 121.310717][ T5817] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.310736][ T5817] usb 12-1: Product: syz [ 121.310748][ T5817] usb 12-1: Manufacturer: syz [ 121.310760][ T5817] usb 12-1: SerialNumber: syz [ 121.312738][ T5817] usb 12-1: config 0 descriptor?? [ 121.415146][ T6769] usb 11-1: new full-speed USB device number 9 using dummy_hcd [ 121.524650][ T5817] hub 12-1:0.92: bad descriptor, ignoring hub [ 121.524665][ T5817] hub 12-1:0.92: probe with driver hub failed with error -5 [ 121.531928][ T5817] ftdi_sio 12-1:0.92: FTDI USB Serial Device converter detected [ 121.532934][ T5817] usb 12-1: Detected SIO [ 121.534177][ T5817] usb 12-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 121.545095][ T6769] usb 11-1: device descriptor read/64, error -71 [ 121.556266][ T5817] usb 12-1: USB disconnect, device number 5 [ 121.562879][ T5817] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 121.563380][ T5817] ftdi_sio 12-1:0.92: device disconnected [ 121.736370][ T6769] usb usb11-port1: attempt power cycle [ 122.095280][ T6769] usb 11-1: new full-speed USB device number 10 using dummy_hcd [ 122.097055][ T1350] logitech-hidpp-device 0003:046D:C082.0008: hidraw1: USB HID v0.00 Device [syz0] on syz0 [ 122.117026][ T8169] __nla_validate_parse: 2 callbacks suppressed [ 122.117043][ T8169] netlink: 28 bytes leftover after parsing attributes in process `syz.8.506'. [ 122.125714][ T8168] fido_id[8168]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 122.135856][ T6769] usb 11-1: device descriptor read/8, error -71 [ 122.232941][ T6650] logitech-hidpp-device 0003:046D:C082.0009: item fetching failed at offset 0/2 [ 122.233751][ T6650] logitech-hidpp-device 0003:046D:C082.0009: hidpp_probe:parse failed [ 122.233786][ T6650] logitech-hidpp-device 0003:046D:C082.0009: probe with driver logitech-hidpp-device failed with error -22 [ 122.385025][ T6769] usb 11-1: new full-speed USB device number 11 using dummy_hcd [ 122.406111][ T6769] usb 11-1: device descriptor read/8, error -71 [ 122.471212][ T8199] FAULT_INJECTION: forcing a failure. [ 122.471212][ T8199] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 122.471235][ T8199] CPU: 1 UID: 0 PID: 8199 Comm: syz.7.519 Tainted: G L syzkaller #0 PREEMPT(full) [ 122.471251][ T8199] Tainted: [L]=SOFTLOCKUP [ 122.471256][ T8199] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 122.471262][ T8199] Call Trace: [ 122.471266][ T8199] [ 122.471271][ T8199] dump_stack_lvl+0x100/0x190 [ 122.471340][ T8199] should_fail_ex.cold+0x5/0xa [ 122.471355][ T8199] ? prepare_alloc_pages+0x16d/0x5b0 [ 122.471391][ T8199] should_fail_alloc_page+0xeb/0x140 [ 122.471409][ T8199] prepare_alloc_pages+0x1f0/0x5b0 [ 122.471428][ T8199] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 122.471443][ T8199] ? prepare_alloc_pages+0x1b1/0x5b0 [ 122.471461][ T8199] ? rcu_is_watching+0x13/0xc0 [ 122.471477][ T8199] ? __alloc_frozen_pages_noprof+0x56b/0x3300 [ 122.471497][ T8199] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 122.471516][ T8199] ? find_held_lock+0x2b/0x80 [ 122.471532][ T8199] ? is_bpf_text_address+0x8a/0x1a0 [ 122.471555][ T8199] ? is_bpf_text_address+0x8a/0x1a0 [ 122.471580][ T8199] ? bpf_ksym_find+0x124/0x1c0 [ 122.471593][ T8199] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 122.471608][ T8199] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 122.471620][ T8199] ? is_bpf_text_address+0x94/0x1a0 [ 122.471643][ T8199] ? __kernel_text_address+0xd/0x30 [ 122.471669][ T8199] alloc_pages_bulk_noprof+0x5e1/0x13c0 [ 122.471683][ T8199] ? lock_acquire+0x1d1/0x380 [ 122.471702][ T8199] ? policy_nodemask+0xed/0x4f0 [ 122.471721][ T8199] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 122.471743][ T8199] __kasan_populate_vmalloc+0xf0/0x210 [ 122.471761][ T8199] alloc_vmap_area+0x95d/0x2bb0 [ 122.471779][ T8199] ? kasan_save_track+0x14/0x30 [ 122.471810][ T8199] ? __kasan_kmalloc+0xaa/0xb0 [ 122.471825][ T8199] ? __pfx_alloc_vmap_area+0x10/0x10 [ 122.471841][ T8199] ? __get_vm_area_node+0x124/0x350 [ 122.471859][ T8199] __get_vm_area_node+0x1ed/0x350 [ 122.471878][ T8199] __vmalloc_node_range_noprof+0x268/0x1420 [ 122.471914][ T8199] ? kernel_clone+0x176/0x9d0 [ 122.471926][ T8199] ? lock_acquire+0x1d1/0x380 [ 122.471942][ T8199] ? rcu_lock_acquire.constprop.0+0x7/0x30 [ 122.471956][ T8199] ? find_held_lock+0x2b/0x80 [ 122.471969][ T8199] ? rcu_read_unlock+0x17/0x60 [ 122.471982][ T8199] ? kernel_clone+0x176/0x9d0 [ 122.471994][ T8199] ? __memcg_slab_post_alloc_hook+0x71e/0x10c0 [ 122.472009][ T8199] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 122.472028][ T8199] ? rcu_is_watching+0x13/0xc0 [ 122.472041][ T8199] ? trace_kmem_cache_alloc+0xdd/0x100 [ 122.472060][ T8199] ? kernel_clone+0x176/0x9d0 [ 122.472071][ T8199] __vmalloc_node_noprof+0xad/0xf0 [ 122.472087][ T8199] ? kernel_clone+0x176/0x9d0 [ 122.472099][ T8199] copy_process+0x803/0x8370 [ 122.472112][ T8199] ? __pfx___futex_wait+0x10/0x10 [ 122.472138][ T8199] ? __pfx_try_to_wake_up+0x10/0x10 [ 122.472156][ T8199] ? futex_hash+0x311/0x400 [ 122.472177][ T8199] ? __pfx_copy_process+0x10/0x10 [ 122.472187][ T8199] ? futex_wake+0x4ea/0x5e0 [ 122.472206][ T8199] kernel_clone+0x176/0x9d0 [ 122.472218][ T8199] ? __pfx_kernel_clone+0x10/0x10 [ 122.472232][ T8199] ? ksys_write+0x190/0x250 [ 122.472248][ T8199] __do_compat_sys_ia32_clone+0xd4/0x120 [ 122.472266][ T8199] ? __pfx___do_compat_sys_ia32_clone+0x10/0x10 [ 122.472284][ T8199] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 122.472336][ T8199] __do_fast_syscall_32+0x13a/0x8b0 [ 122.472352][ T8199] do_fast_syscall_32+0x32/0x70 [ 122.472366][ T8199] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 122.472381][ T8199] RIP: 0023:0xf7f15fec [ 122.472396][ T8199] Code: Unable to access opcode bytes at 0xf7f15fc2. [ 122.472401][ T8199] RSP: 002b:00000000f53d64bc EFLAGS: 00000202 ORIG_RAX: 0000000000000078 [ 122.472412][ T8199] RAX: ffffffffffffffda RBX: 0000000002000400 RCX: 00000000fffffeb0 [ 122.472420][ T8199] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 122.472427][ T8199] RBP: 00000000f53d65ec R08: 0000000000000000 R09: 0000000000000000 [ 122.472433][ T8199] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 122.472440][ T8199] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 122.472457][ T8199] [ 122.472551][ T8199] syz.7.519: vmalloc error: size 32768, align 0x8000, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 122.472615][ T8199] CPU: 1 UID: 0 PID: 8199 Comm: syz.7.519 Tainted: G L syzkaller #0 PREEMPT(full) [ 122.472637][ T8199] Tainted: [L]=SOFTLOCKUP [ 122.472641][ T8199] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 122.472648][ T8199] Call Trace: [ 122.472653][ T8199] [ 122.472658][ T8199] dump_stack_lvl+0x100/0x190 [ 122.472676][ T8199] warn_alloc.cold+0x9e/0xb2 [ 122.472690][ T8199] ? __pfx_warn_alloc+0x10/0x10 [ 122.472701][ T8199] ? lockdep_hardirqs_on+0x7d/0x110 [ 122.472714][ T8199] ? __get_vm_area_node+0x2f0/0x350 [ 122.472732][ T8199] ? __get_vm_area_node+0x22b/0x350 [ 122.472751][ T8199] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 122.472768][ T8199] ? lock_acquire+0x1d1/0x380 [ 122.472784][ T8199] ? rcu_lock_acquire.constprop.0+0x7/0x30 [ 122.472798][ T8199] ? find_held_lock+0x2b/0x80 [ 122.472811][ T8199] ? rcu_read_unlock+0x17/0x60 [ 122.472823][ T8199] ? kernel_clone+0x176/0x9d0 [ 122.472835][ T8199] ? __memcg_slab_post_alloc_hook+0x71e/0x10c0 [ 122.472848][ T8199] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 122.472866][ T8199] ? rcu_is_watching+0x13/0xc0 [ 122.472877][ T8199] ? trace_kmem_cache_alloc+0xdd/0x100 [ 122.472894][ T8199] ? kernel_clone+0x176/0x9d0 [ 122.472904][ T8199] __vmalloc_node_noprof+0xad/0xf0 [ 122.472920][ T8199] ? kernel_clone+0x176/0x9d0 [ 122.472932][ T8199] copy_process+0x803/0x8370 [ 122.472957][ T8199] ? __pfx___futex_wait+0x10/0x10 [ 122.472971][ T8199] ? __pfx_try_to_wake_up+0x10/0x10 [ 122.472987][ T8199] ? futex_hash+0x311/0x400 [ 122.473009][ T8199] ? __pfx_copy_process+0x10/0x10 [ 122.473019][ T8199] ? futex_wake+0x4ea/0x5e0 [ 122.473038][ T8199] kernel_clone+0x176/0x9d0 [ 122.473050][ T8199] ? __pfx_kernel_clone+0x10/0x10 [ 122.473064][ T8199] ? ksys_write+0x190/0x250 [ 122.473090][ T8199] __do_compat_sys_ia32_clone+0xd4/0x120 [ 122.473110][ T8199] ? __pfx___do_compat_sys_ia32_clone+0x10/0x10 [ 122.473127][ T8199] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 122.473151][ T8199] __do_fast_syscall_32+0x13a/0x8b0 [ 122.473165][ T8199] do_fast_syscall_32+0x32/0x70 [ 122.473178][ T8199] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 122.473192][ T8199] RIP: 0023:0xf7f15fec [ 122.473203][ T8199] Code: Unable to access opcode bytes at 0xf7f15fc2. [ 122.473208][ T8199] RSP: 002b:00000000f53d64bc EFLAGS: 00000202 ORIG_RAX: 0000000000000078 [ 122.473219][ T8199] RAX: ffffffffffffffda RBX: 0000000002000400 RCX: 00000000fffffeb0 [ 122.473226][ T8199] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 122.473232][ T8199] RBP: 00000000f53d65ec R08: 0000000000000000 R09: 0000000000000000 [ 122.473239][ T8199] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 122.473245][ T8199] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 122.473259][ T8199] [ 122.473977][ T8199] Mem-Info: [ 122.473986][ T8199] active_anon:19839 inactive_anon:170 isolated_anon:0 [ 122.473986][ T8199] active_file:1294 inactive_file:34453 isolated_file:0 [ 122.473986][ T8199] unevictable:1000 dirty:791 writeback:0 [ 122.473986][ T8199] slab_reclaimable:7037 slab_unreclaimable:56002 [ 122.473986][ T8199] mapped:36528 shmem:13694 pagetables:1817 [ 122.473986][ T8199] sec_pagetables:301 bounce:0 [ 122.473986][ T8199] kernel_misc_reclaimable:0 [ 122.473986][ T8199] free:22263 free_pcp:13033 free_cma:0 [ 122.474017][ T8199] Node 0 active_anon:604kB inactive_anon:184kB active_file:144kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:4kB writeback:0kB shmem:16kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:10240kB pagetables:2060kB sec_pagetables:1136kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 122.474070][ T8199] Node 1 active_anon:78752kB inactive_anon:496kB active_file:5032kB inactive_file:137808kB unevictable:4000kB isolated(anon):0kB isolated(file):0kB mapped:146084kB dirty:3160kB writeback:0kB shmem:54860kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6088kB pagetables:5208kB sec_pagetables:68kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 122.474100][ T8199] Node 0 DMA free:3120kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:160kB local_pcp:12kB free_cma:0kB [ 122.474137][ T8199] lowmem_reserve[]: 0 278 278 278 278 [ 122.474156][ T8199] Node 0 DMA32 free:16892kB boost:2048kB min:14672kB low:17828kB high:20984kB reserved_highatomic:0kB free_highatomic:0kB active_anon:600kB inactive_anon:184kB active_file:144kB inactive_file:4kB unevictable:0kB writepending:4kB zspages:0kB present:1032196kB managed:284860kB mlocked:0kB bounce:0kB free_pcp:9124kB local_pcp:2056kB free_cma:0kB [ 122.474187][ T8199] lowmem_reserve[]: 0 0 0 0 0 [ 122.474204][ T8199] Node 1 DMA32 free:69040kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0kB free_highatomic:0kB active_anon:78752kB inactive_anon:496kB active_file:5032kB inactive_file:137808kB unevictable:4000kB writepending:3160kB zspages:2436kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:42808kB local_pcp:14672kB free_cma:0kB [ 122.474235][ T8199] lowmem_reserve[]: 0 0 0 0 0 [ 122.474253][ T8199] Node 0 DMA: 158*4kB (UE) 43*8kB (UE) 18*16kB (U) 22*32kB (UE) 10*64kB (U) 4*128kB (UE) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 3120kB [ 122.474323][ T8199] Node 0 DMA32: 9*4kB (ME) 15*8kB (UME) 44*16kB (UME) 45*32kB (UE) 18*64kB (UME) 11*128kB (UME) 11*256kB (UM) 8*512kB (UM) 5*1024kB (UM) 0*2048kB 0*4096kB = 16892kB [ 122.474401][ T8199] Node 1 DMA32: 44*4kB (UM) 67*8kB (UE) 0*16kB 41*32kB (UE) 45*64kB (UME) 27*128kB (UE) 5*256kB (UME) 4*512kB (UE) 4*1024kB (UM) 12*2048kB (UM) 7*4096kB (UM) = 69032kB [ 122.474486][ T8199] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 122.474496][ T8199] Node 0 hugepages_total=1 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 122.474505][ T8199] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 122.474515][ T8199] Node 1 hugepages_total=7 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 122.474523][ T8199] 50079 total pagecache pages [ 122.474527][ T8199] 617 pages in swap cache [ 122.474531][ T8199] Free swap = 117688kB [ 122.474535][ T8199] Total swap = 124996kB [ 122.474540][ T8199] 524155 pages RAM [ 122.474568][ T8199] 0 pages HighMem/MovableOnly [ 122.474573][ T8199] 212048 pages reserved [ 122.474577][ T8199] 0 pages cma reserved [ 122.515754][ T6769] usb usb11-port1: unable to enumerate USB device [ 122.752204][ T8206] netlink: 8 bytes leftover after parsing attributes in process `syz.7.522'. [ 122.754138][ T8206] netlink: 8 bytes leftover after parsing attributes in process `syz.7.522'. [ 122.843435][ T8214] netlink: 4 bytes leftover after parsing attributes in process `syz.7.526'. [ 123.125040][ T6649] usb 12-1: new high-speed USB device number 6 using dummy_hcd [ 123.288271][ T6649] usb 12-1: unable to get BOS descriptor or descriptor too short [ 123.288308][ T6649] usb 12-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 123.289427][ T6649] usb 12-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 123.289444][ T6649] usb 12-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 123.289476][ T6649] usb 12-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 123.290976][ T6649] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 123.290992][ T6649] usb 12-1: Product: syz [ 123.291001][ T6649] usb 12-1: Manufacturer: syz [ 123.375270][ T5817] usb 13-1: new high-speed USB device number 9 using dummy_hcd [ 123.503966][ T6649] uvcvideo 12-1:1.0: Found UVC 1.00 device syz (8086:0ad2) [ 123.504026][ T6649] uvcvideo 12-1:1.0: No streaming interface found for terminal 32770. [ 123.513845][ T6649] usb 12-1: USB disconnect, device number 6 [ 123.525574][ T5817] usb 13-1: Using ep0 maxpacket: 32 [ 123.690094][ T5817] usb 13-1: unable to get BOS descriptor or descriptor too short [ 123.690119][ T5817] usb 13-1: New USB device found, idVendor=1235, idProduct=0001, bcdDevice= 0.40 [ 123.691172][ T5817] usb 13-1: unable to read config index 0 descriptor/start: -71 [ 123.691190][ T5817] usb 13-1: can't read configurations, error -71 [ 123.710686][ T8247] event trace: Could not enable event p [ 123.975103][ T6650] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 124.145084][ T6650] usb 10-1: Using ep0 maxpacket: 8 [ 124.147496][ T6650] usb 10-1: unable to get BOS descriptor or descriptor too short [ 124.147519][ T6650] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 124.148341][ T6650] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 187, changing to 7 [ 124.149924][ T6650] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.149937][ T6650] usb 10-1: Product: syz [ 124.149944][ T6650] usb 10-1: Manufacturer: syz [ 124.149951][ T6650] usb 10-1: SerialNumber: syz [ 124.177475][ T6650] usb 10-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 124.325418][ T8267] device-mapper: ioctl: Invalid geometry supplied. [ 124.368740][ T6650] usb 10-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 124.401445][ T6650] usb 10-1: USB disconnect, device number 11 [ 124.910242][ T8298] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.910599][ T8298] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.965896][ T8298] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.971186][ T8298] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.115340][ T14] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.115377][ T14] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.115400][ T14] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.115427][ T14] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.210895][ T8333] veth1_virt_wifi: mtu less than device minimum [ 125.415277][ T8354] mmap: syz.7.586 (8354): VmData 28983296 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 125.496950][ T8363] netlink: 'syz.6.589': attribute type 3 has an invalid length. [ 125.497638][ T8363] netlink: 'syz.6.589': attribute type 3 has an invalid length. [ 125.987323][ T5523] usb 13-1: new high-speed USB device number 11 using dummy_hcd [ 126.151268][ T5523] usb 13-1: unable to get BOS descriptor or descriptor too short [ 126.151308][ T5523] usb 13-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 126.152068][ T5523] usb 13-1: unable to read config index 0 descriptor/start: -71 [ 126.152093][ T5523] usb 13-1: can't read configurations, error -71 [ 126.691758][ T8422] netlink: 48 bytes leftover after parsing attributes in process `syz.7.611'. [ 127.153870][ T1436] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.153919][ T1436] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.205040][ T6650] usb 12-1: new full-speed USB device number 7 using dummy_hcd [ 127.375635][ T6650] usb 12-1: New USB device found, idVendor=046d, idProduct=c283, bcdDevice= 0.00 [ 127.376523][ T6650] usb 12-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 127.376539][ T6650] usb 12-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 127.376559][ T6650] usb 12-1: config 0 interface 0 has no altsetting 0 [ 127.376579][ T6650] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.377886][ T6650] usb 12-1: config 0 descriptor?? [ 127.378340][ T8442] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 127.719556][ T8476] netlink: 4 bytes leftover after parsing attributes in process `syz.6.633'. [ 127.946428][ T6650] logitech 0003:046D:C283.000A: unknown main item tag 0x0 [ 127.946446][ T6650] logitech 0003:046D:C283.000A: unknown main item tag 0x0 [ 127.946458][ T6650] logitech 0003:046D:C283.000A: unbalanced collection at end of report description [ 127.946766][ T6650] logitech 0003:046D:C283.000A: parse failed [ 127.946805][ T6650] logitech 0003:046D:C283.000A: probe with driver logitech failed with error -22 [ 128.188106][ T8513] netlink: 4 bytes leftover after parsing attributes in process `syz.8.650'. [ 128.226124][ T8517] ip6gretap1: entered promiscuous mode [ 128.226140][ T8517] ip6gretap1: entered allmulticast mode [ 128.478759][ T8536] netlink: 'syz.6.658': attribute type 3 has an invalid length. [ 128.478775][ T8536] netlink: 8 bytes leftover after parsing attributes in process `syz.6.658'. [ 128.513874][ T8540] netlink: 44 bytes leftover after parsing attributes in process `syz.6.663'. [ 128.513893][ T8540] netlink: 43 bytes leftover after parsing attributes in process `syz.6.663'. [ 128.513902][ T8540] netlink: 'syz.6.663': attribute type 5 has an invalid length. [ 128.513909][ T8540] netlink: 43 bytes leftover after parsing attributes in process `syz.6.663'. [ 128.780669][ T8565] binder: 8564:8565 ioctl c00c620f 80000540 returned -22 [ 128.864921][ T8576] FAULT_INJECTION: forcing a failure. [ 128.864921][ T8576] name failslab, interval 1, probability 0, space 0, times 0 [ 128.865081][ T8576] CPU: 2 UID: 0 PID: 8576 Comm: syz.5.679 Tainted: G L syzkaller #0 PREEMPT(full) [ 128.865099][ T8576] Tainted: [L]=SOFTLOCKUP [ 128.865104][ T8576] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 128.865110][ T8576] Call Trace: [ 128.865115][ T8576] [ 128.865120][ T8576] dump_stack_lvl+0x100/0x190 [ 128.865141][ T8576] should_fail_ex.cold+0x5/0xa [ 128.865157][ T8576] should_failslab+0xc2/0x120 [ 128.865175][ T8576] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 128.865192][ T8576] ? __alloc_skb+0x140/0x710 [ 128.865249][ T8576] __alloc_skb+0x140/0x710 [ 128.865267][ T8576] ? __pfx___alloc_skb+0x10/0x10 [ 128.865284][ T8576] ? find_held_lock+0x2b/0x80 [ 128.865298][ T8576] ? futex_unqueue+0x133/0x2c0 [ 128.865312][ T8576] tcp_stream_alloc_skb+0x34/0x660 [ 128.865327][ T8576] tcp_sendmsg_locked+0x13b7/0x4420 [ 128.865345][ T8576] ? __lock_acquire+0x5c0/0x1f40 [ 128.865365][ T8576] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 128.865379][ T8576] ? lock_acquire+0x1d1/0x380 [ 128.865395][ T8576] ? do_raw_spin_lock+0x128/0x260 [ 128.865406][ T8576] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 128.865421][ T8576] ? __local_bh_enable_ip+0xa5/0x120 [ 128.865442][ T8576] tcp_sendmsg+0x2e/0x50 [ 128.865456][ T8576] ? __pfx_tcp_sendmsg+0x10/0x10 [ 128.865477][ T8576] inet6_sendmsg+0xb9/0x140 [ 128.865493][ T8576] __sys_sendto+0x36d/0x4e0 [ 128.865510][ T8576] ? __pfx___sys_sendto+0x10/0x10 [ 128.865530][ T8576] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 128.865554][ T8576] __ia32_sys_sendto+0xdd/0x1b0 [ 128.865570][ T8576] ? __do_fast_syscall_32+0xb3/0x8b0 [ 128.865584][ T8576] ? lockdep_hardirqs_on+0x7d/0x110 [ 128.865596][ T8576] __do_fast_syscall_32+0x13a/0x8b0 [ 128.865611][ T8576] do_fast_syscall_32+0x32/0x70 [ 128.865624][ T8576] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 128.865639][ T8576] RIP: 0023:0xf7f66fec [ 128.865652][ T8576] Code: Unable to access opcode bytes at 0xf7f66fc2. [ 128.865657][ T8576] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000171 [ 128.865669][ T8576] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 128.865676][ T8576] RDX: 00000000ffffff50 RSI: 0000000000000054 RDI: 0000000000000000 [ 128.865683][ T8576] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 128.865689][ T8576] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 128.865696][ T8576] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 128.865710][ T8576] [ 129.195626][ T5103] usb 13-1: new full-speed USB device number 13 using dummy_hcd [ 129.257813][ T8616] netlink: 4 bytes leftover after parsing attributes in process `syz.5.698'. [ 129.340553][ T8618] tipc: Started in network mode [ 129.340569][ T8618] tipc: Node identity 4, cluster identity 4711 [ 129.340576][ T8618] tipc: Node number set to 4 [ 129.355709][ T5103] usb 13-1: New USB device found, idVendor=05ac, idProduct=049c, bcdDevice=40.00 [ 129.356521][ T5103] usb 13-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 129.356542][ T5103] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 129.356555][ T5103] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.356566][ T5103] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 129.357795][ T5103] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=23 [ 129.357808][ T5103] usb 13-1: SerialNumber: syz [ 129.358950][ T5103] usb 13-1: config 0 descriptor?? [ 129.769538][ T5103] usbhid 13-1:0.0: can't add hid device: -71 [ 129.769596][ T5103] usbhid 13-1:0.0: probe with driver usbhid failed with error -71 [ 129.770765][ T5103] usb 13-1: USB disconnect, device number 13 [ 129.974902][ T6769] usb 12-1: USB disconnect, device number 7 [ 130.055932][ T8644] netlink: 4 bytes leftover after parsing attributes in process `syz.7.710'. [ 130.523657][ T8670] VFS: file-max limit 0 reached [ 130.560065][ T8676] tipc: Enabling of bearer rejected, already enabled [ 130.615229][ T5822] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 130.749089][ T1350] logitech-hidpp-device 0003:046D:C082.000B: hidraw1: USB HID v0.00 Device [syz0] on syz0 [ 130.775657][ T5822] usb 10-1: Using ep0 maxpacket: 32 [ 130.776373][ T5822] usb 10-1: New USB device found, idVendor=0582, idProduct=0023, bcdDevice= 0.40 [ 130.778629][ T5822] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.778642][ T5822] usb 10-1: Product: syz [ 130.778649][ T5822] usb 10-1: Manufacturer: syz [ 130.778656][ T5822] usb 10-1: SerialNumber: syz [ 130.781259][ T8696] fido_id[8696]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 130.836126][ T853] usb 13-1: new high-speed USB device number 14 using dummy_hcd [ 130.852446][ T8709] netlink: 4 bytes leftover after parsing attributes in process `syz.7.739'. [ 131.005064][ T853] usb 13-1: Using ep0 maxpacket: 32 [ 131.005613][ T853] usb 13-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 131.006590][ T853] usb 13-1: config 0 has an invalid interface number: 67 but max is 0 [ 131.006604][ T853] usb 13-1: config 0 has no interface number 0 [ 131.008674][ T853] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.008687][ T853] usb 13-1: Product: syz [ 131.008694][ T853] usb 13-1: Manufacturer: syz [ 131.008701][ T853] usb 13-1: SerialNumber: syz [ 131.009941][ T853] usb 13-1: config 0 descriptor?? [ 131.404720][ T5822] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 131.421833][ T853] smsc95xx 13-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 131.421851][ T853] smsc95xx 13-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 131.422328][ T853] smsc95xx 13-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 131.422431][ T853] smsc95xx 13-1:0.67: probe with driver smsc95xx failed with error -71 [ 131.434863][ T5822] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 131.437931][ T853] usb 13-1: USB disconnect, device number 14 [ 131.445410][ T5822] usb 10-1: USB disconnect, device number 12 [ 131.460370][ T8738] netlink: 4 bytes leftover after parsing attributes in process `syz.6.752'. [ 131.466240][ T6279] udevd[6279]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 131.945101][ T853] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 132.063459][ T8758] fuse: fd is not a fuse device [ 132.095096][ T853] usb 10-1: Using ep0 maxpacket: 32 [ 132.096742][ T853] usb 10-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 132.099193][ T853] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.099206][ T853] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 132.100930][ T853] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.100943][ T853] usb 10-1: Product: syz [ 132.100950][ T853] usb 10-1: Manufacturer: syz [ 132.100957][ T853] usb 10-1: SerialNumber: syz [ 132.318362][ T853] usb 10-1: 0:1 : does not exist [ 132.318376][ T853] usb 10-1: 0:2 : does not exist [ 132.318383][ T853] usb 10-1: 0:3 : does not exist [ 132.318391][ T853] usb 10-1: 0:4 : does not exist [ 132.353155][ T853] usb 10-1: USB disconnect, device number 13 [ 132.625084][ T5822] usb 13-1: new high-speed USB device number 15 using dummy_hcd [ 132.735051][ T5103] usb 12-1: new full-speed USB device number 8 using dummy_hcd [ 132.775800][ T5822] usb 13-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 132.776775][ T5822] usb 13-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.776800][ T5822] usb 13-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 132.776820][ T5822] usb 13-1: config 0 interface 0 has no altsetting 0 [ 132.776844][ T5822] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.779959][ T5822] usb 13-1: config 0 descriptor?? [ 132.845294][ T8776] raw_sendmsg: syz.5.768 forgot to set AF_INET. Fix it! [ 132.899981][ T5103] usb 12-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 132.904396][ T5103] usb 12-1: unable to read config index 0 descriptor/start: -71 [ 132.904418][ T5103] usb 12-1: can't read configurations, error -71 [ 133.145268][ T6471] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 133.197648][ T5822] hid-multitouch 0003:0EEF:72C4.000C: hidraw1: USB HID v0.00 Device [HID 0eef:72c4] on usb-dummy_hcd.8-1/input0 [ 133.296631][ T6471] usb 10-1: unable to get BOS descriptor or descriptor too short [ 133.296657][ T6471] usb 10-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 133.297405][ T6471] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 133.297417][ T6471] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 133.297441][ T6471] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 36, changing to 7 [ 133.298929][ T6471] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.298941][ T6471] usb 10-1: Product: syz [ 133.298948][ T6471] usb 10-1: Manufacturer: syz [ 133.298956][ T6471] usb 10-1: SerialNumber: syz [ 133.385943][ T5817] usb 13-1: USB disconnect, device number 15 [ 133.505732][ T6471] usb 10-1: 1:1 : no or invalid class specific endpoint descriptor [ 133.505747][ T6471] usb 10-1: 1:1 : sample bitwidth 62 in over sample bytes 2 [ 133.505761][ T6471] usb 10-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 133.507005][ T6471] usb 10-1: unit 2 not found! [ 133.507016][ T6471] usb 10-1: unit 4: unexpected type 0x0c [ 133.529263][ T6471] usb 10-1: USB disconnect, device number 14 [ 133.569341][ T5732] udevd[5732]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 133.925191][ T43] audit: type=1326 audit(1790219497.231:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8823 comm="syz.8.789" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf704efec code=0x0 [ 134.057388][ T8831] Illegal XDP return value 1911160832 on prog (id 51) dev syz_tun, expect packet loss! [ 134.083496][ T8833] netlink: 4 bytes leftover after parsing attributes in process `syz.5.793'. [ 134.175067][ T5103] usb 12-1: new high-speed USB device number 10 using dummy_hcd [ 134.344361][ T5103] usb 12-1: unable to get BOS descriptor or descriptor too short [ 134.344387][ T5103] usb 12-1: New USB device found, idVendor=046d, idProduct=08c7, bcdDevice=77.e9 [ 134.346306][ T5103] usb 12-1: config 8 has an invalid interface number: 126 but max is 0 [ 134.346320][ T5103] usb 12-1: config 8 has no interface number 0 [ 134.346409][ T5103] usb 12-1: config 8 interface 126 altsetting 6 endpoint 0xF has an invalid bInterval 252, changing to 7 [ 134.346424][ T5103] usb 12-1: config 8 interface 126 has no altsetting 0 [ 134.349061][ T5103] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.349075][ T5103] usb 12-1: Product: syz [ 134.349085][ T5103] usb 12-1: Manufacturer: syz [ 134.349092][ T5103] usb 12-1: SerialNumber: syz [ 134.563508][ T5103] uvcvideo 12-1:8.126: Found UVC 0.00 device syz (046d:08c7) [ 134.563536][ T5103] uvcvideo 12-1:8.126: No valid video chain found. [ 134.566238][ T5103] usb 12-1: USB disconnect, device number 10 [ 134.655075][ T5817] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 134.815989][ T5817] usb 10-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 134.816855][ T5817] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.818039][ T5817] usb 10-1: config 0 descriptor?? [ 134.822378][ T5817] ftdi_sio 10-1:0.0: FTDI USB Serial Device converter detected [ 134.829334][ T5817] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 135.043624][ T8875] netlink: 4 bytes leftover after parsing attributes in process `syz.6.813'. [ 135.122320][ T8883] devpts: Bad value for 'max' [ 135.505122][ T5817] usb 12-1: new full-speed USB device number 11 using dummy_hcd [ 135.655648][ T5817] usb 12-1: New USB device found, idVendor=1235, idProduct=8012, bcdDevice= 0.40 [ 135.656767][ T5817] usb 12-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 135.656782][ T5817] usb 12-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 135.656798][ T5817] usb 12-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 254, changing to 4 [ 135.656811][ T5817] usb 12-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 135.658296][ T5817] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.658309][ T5817] usb 12-1: Product: syz [ 135.658316][ T5817] usb 12-1: Manufacturer: syz [ 135.658323][ T5817] usb 12-1: SerialNumber: syz [ 135.886668][ T5817] usb 12-1: USB disconnect, device number 11 [ 135.899413][ T6279] udevd[6279]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb12/12-1/12-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 136.028161][ T8901] tipc: Enabling of bearer rejected, already enabled [ 136.033501][ T8908] netlink: 8 bytes leftover after parsing attributes in process `syz.6.828'. [ 136.086718][ T8912] netlink: 4 bytes leftover after parsing attributes in process `syz.8.830'. [ 136.137835][ T8916] netlink: 24 bytes leftover after parsing attributes in process `syz.8.832'. [ 136.246194][ T8924] netlink: 440 bytes leftover after parsing attributes in process `syz.8.836'. [ 136.685059][ T6769] usb 13-1: new high-speed USB device number 16 using dummy_hcd [ 136.835560][ T6769] usb 13-1: New USB device found, idVendor=041e, idProduct=0005, bcdDevice= 0.40 [ 136.836368][ T6769] usb 13-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.836381][ T6769] usb 13-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 136.837885][ T6769] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.837897][ T6769] usb 13-1: Product: syz [ 136.837904][ T6769] usb 13-1: Manufacturer: syz [ 136.837911][ T6769] usb 13-1: SerialNumber: syz [ 137.063535][ T6769] snd-usb-audio 13-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 137.064657][ T6769] usb 13-1: USB disconnect, device number 16 [ 137.071436][ T6279] udevd[6279]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb13/13-1/13-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 137.437850][ T6769] usb 10-1: USB disconnect, device number 15 [ 137.447305][ T6769] ftdi_sio 10-1:0.0: device disconnected [ 137.602769][ T8975] netlink: 4 bytes leftover after parsing attributes in process `syz.8.855'. [ 138.153659][ T9032] FAULT_INJECTION: forcing a failure. [ 138.153659][ T9032] name failslab, interval 1, probability 0, space 0, times 0 [ 138.153681][ T9032] CPU: 1 UID: 0 PID: 9032 Comm: syz.5.883 Tainted: G L syzkaller #0 PREEMPT(full) [ 138.153696][ T9032] Tainted: [L]=SOFTLOCKUP [ 138.153701][ T9032] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 138.153707][ T9032] Call Trace: [ 138.153711][ T9032] [ 138.153716][ T9032] dump_stack_lvl+0x100/0x190 [ 138.153736][ T9032] should_fail_ex.cold+0x5/0xa [ 138.153752][ T9032] should_failslab+0xc2/0x120 [ 138.153770][ T9032] kmem_cache_alloc_noprof+0x92/0x6a0 [ 138.153784][ T9032] ? alloc_empty_file+0x5b/0x1c0 [ 138.153803][ T9032] alloc_empty_file+0x5b/0x1c0 [ 138.153820][ T9032] path_openat+0xdb/0x2440 [ 138.153836][ T9032] ? __pfx_path_openat+0x10/0x10 [ 138.153850][ T9032] ? stack_trace_save+0x8e/0xc0 [ 138.153865][ T9032] ? __pfx_stack_trace_save+0x10/0x10 [ 138.153882][ T9032] do_file_open+0x20e/0x430 [ 138.153897][ T9032] ? __pfx_do_file_open+0x10/0x10 [ 138.153910][ T9032] ? __kasan_slab_alloc+0x89/0x90 [ 138.153924][ T9032] ? kmem_cache_alloc_noprof+0x269/0x6a0 [ 138.153937][ T9032] ? do_getname+0x35/0x390 [ 138.153966][ T9032] do_open_execat+0xd1/0x360 [ 138.153978][ T9032] ? __pfx_do_open_execat+0x10/0x10 [ 138.153991][ T9032] ? __might_fault+0xc5/0x140 [ 138.154002][ T9032] ? __might_fault+0xc5/0x140 [ 138.154016][ T9032] alloc_bprm+0x2d/0x9e0 [ 138.154030][ T9032] do_execveat_common.isra.0+0x19c/0x580 [ 138.154053][ T9032] ? do_getname+0x191/0x390 [ 138.154071][ T9032] __ia32_compat_sys_execve+0x9c/0xd0 [ 138.154086][ T9032] __do_fast_syscall_32+0x13a/0x8b0 [ 138.154102][ T9032] do_fast_syscall_32+0x32/0x70 [ 138.154116][ T9032] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 138.154131][ T9032] RIP: 0023:0xf7f66fec [ 138.154146][ T9032] Code: Unable to access opcode bytes at 0xf7f66fc2. [ 138.154151][ T9032] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 000000000000000b [ 138.154163][ T9032] RAX: ffffffffffffffda RBX: 0000000080001380 RCX: 0000000000000000 [ 138.154171][ T9032] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 138.154178][ T9032] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 138.154184][ T9032] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 138.154191][ T9032] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 138.154204][ T9032] [ 138.461509][ T9046] devpts: Bad value for 'max' [ 138.843227][ T6769] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 138.986065][ T6769] usb 10-1: Using ep0 maxpacket: 16 [ 138.986500][ T6769] usb 10-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9 [ 138.987257][ T6769] usb 10-1: config 0 has an invalid interface number: 98 but max is 0 [ 138.987270][ T6769] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.987279][ T6769] usb 10-1: config 0 has no interface number 0 [ 138.987296][ T6769] usb 10-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16 [ 138.987308][ T6769] usb 10-1: config 0 interface 98 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 138.987319][ T6769] usb 10-1: config 0 interface 98 has no altsetting 0 [ 138.988784][ T6769] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.988796][ T6769] usb 10-1: Product: syz [ 138.988803][ T6769] usb 10-1: Manufacturer: syz [ 138.988811][ T6769] usb 10-1: SerialNumber: syz [ 138.990223][ T6769] usb 10-1: config 0 descriptor?? [ 138.990674][ T9057] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 138.990730][ T9057] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 139.186019][ T9057] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 139.186178][ T9057] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 139.488749][ T9092] syzkaller0: entered promiscuous mode [ 139.488762][ T9092] syzkaller0: entered allmulticast mode [ 139.489979][ T9092] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 140.147660][ T6769] asix 10-1:0.98 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 140.147845][ T6769] asix 10-1:0.98: probe with driver asix failed with error -71 [ 140.160355][ T6769] usb 10-1: USB disconnect, device number 16 [ 140.234258][ T9120] tipc: Started in network mode [ 140.234271][ T9120] tipc: Node identity 2000004, cluster identity 4 [ 140.234277][ T9120] tipc: Node number set to 33554436 [ 140.306755][ T9122] netlink: 8 bytes leftover after parsing attributes in process `syz.6.923'. [ 140.707197][ T43] audit: type=1326 audit(2000000001.018:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9136 comm="syz.7.930" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f15fec code=0x0 [ 140.836316][ T9149] netlink: 8 bytes leftover after parsing attributes in process `syz.6.934'. [ 140.881674][ T5103] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 141.502090][ T9194] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 141.502101][ T9194] IPv6: NLM_F_CREATE should be set when creating new route [ 141.502117][ T9194] IPv6: NLM_F_CREATE should be set when creating new route [ 141.576600][ T9203] binder: 9202:9203 ioctl 400c620e 80000040 returned -22 [ 141.607213][ T9209] netlink: 'syz.6.961': attribute type 3 has an invalid length. [ 141.639442][ T9213] FAULT_INJECTION: forcing a failure. [ 141.639442][ T9213] name failslab, interval 1, probability 0, space 0, times 0 [ 141.639464][ T9213] CPU: 2 UID: 0 PID: 9213 Comm: syz.5.963 Tainted: G L syzkaller #0 PREEMPT(full) [ 141.639487][ T9213] Tainted: [L]=SOFTLOCKUP [ 141.639491][ T9213] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 141.639499][ T9213] Call Trace: [ 141.639503][ T9213] [ 141.639507][ T9213] dump_stack_lvl+0x100/0x190 [ 141.639527][ T9213] should_fail_ex.cold+0x5/0xa [ 141.639544][ T9213] should_failslab+0xc2/0x120 [ 141.639561][ T9213] __kmalloc_cache_noprof+0x91/0x6d0 [ 141.639574][ T9213] ? kvm_dev_ioctl+0xb48/0x1b50 [ 141.639589][ T9213] kvm_dev_ioctl+0xb48/0x1b50 [ 141.639605][ T9213] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 141.639619][ T9213] ? __fget_files+0x21f/0x3d0 [ 141.639635][ T9213] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 141.639647][ T9213] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 141.639661][ T9213] __do_fast_syscall_32+0x13a/0x8b0 [ 141.639675][ T9213] do_fast_syscall_32+0x32/0x70 [ 141.639688][ T9213] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 141.639703][ T9213] RIP: 0023:0xf7f66fec [ 141.639716][ T9213] Code: Unable to access opcode bytes at 0xf7f66fc2. [ 141.639721][ T9213] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 141.639733][ T9213] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000000ae01 [ 141.639740][ T9213] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 141.639747][ T9213] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 141.639753][ T9213] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 141.639760][ T9213] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 141.639775][ T9213] [ 141.660425][ T9215] netlink: 8 bytes leftover after parsing attributes in process `syz.6.964'. [ 141.660440][ T9215] netlink: 8 bytes leftover after parsing attributes in process `syz.6.964'. [ 141.786696][ T6471] usb 12-1: new high-speed USB device number 12 using dummy_hcd [ 141.958063][ T6471] usb 12-1: Using ep0 maxpacket: 8 [ 141.959135][ T6471] usb 12-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 141.959881][ T6471] usb 12-1: config 0 has an invalid interface number: 31 but max is 0 [ 141.959895][ T6471] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.959904][ T6471] usb 12-1: config 0 has no interface number 0 [ 141.961671][ T6471] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.961684][ T6471] usb 12-1: Product: syz [ 141.961691][ T6471] usb 12-1: Manufacturer: syz [ 141.961698][ T6471] usb 12-1: SerialNumber: syz [ 141.963039][ T6471] usb 12-1: config 0 descriptor?? [ 141.965424][ T6471] uvcvideo 12-1:0.31: probe with driver uvcvideo failed with error -22 [ 142.160279][ T6650] usb 12-1: USB disconnect, device number 12 [ 142.889619][ T9278] netlink: 16 bytes leftover after parsing attributes in process `syz.7.993'. [ 142.929269][ T9282] netlink: 12 bytes leftover after parsing attributes in process `syz.5.994'. [ 142.929284][ T9282] netlink: 12 bytes leftover after parsing attributes in process `syz.5.994'. [ 142.954496][ T9287] netlink: 288 bytes leftover after parsing attributes in process `syz.7.997'. [ 143.008785][ T9295] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1001'. [ 143.055426][ T9305] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1006'. [ 143.182590][ T9322] batadv_slave_0: entered promiscuous mode [ 143.183421][ T9321] batadv_slave_0: left promiscuous mode [ 143.204617][ T9326] UHID_CREATE from different security context by process 586 (syz.5.1016), this is not allowed. [ 144.163239][ T9357] netlink: 'syz.7.1027': attribute type 4 has an invalid length. [ 144.202712][ T43] audit: type=1326 audit(2000000004.682:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9358 comm="syz.5.1028" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66fec code=0x7ffc0000 [ 144.202863][ T43] audit: type=1326 audit(2000000004.682:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9358 comm="syz.5.1028" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66fec code=0x7ffc0000 [ 144.204251][ T43] audit: type=1326 audit(2000000004.682:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9358 comm="syz.5.1028" exe="/syz-executor" sig=0 arch=40000003 syscall=302 compat=1 ip=0xf7f66fec code=0x7ffc0000 [ 144.204445][ T43] audit: type=1326 audit(2000000004.682:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9358 comm="syz.5.1028" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66fec code=0x7ffc0000 [ 144.204600][ T43] audit: type=1326 audit(2000000004.682:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9358 comm="syz.5.1028" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66fec code=0x7ffc0000 [ 144.404542][ T43] audit: type=1326 audit(2000000004.892:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9360 comm="syz.5.1029" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f66fec code=0x0 [ 144.406490][ T1350] usb 12-1: new high-speed USB device number 13 using dummy_hcd [ 144.549516][ T1350] usb 12-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice= 1.00 [ 144.550322][ T1350] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.763383][ T1350] net1080 12-1:1.0 usb0: register 'net1080' at usb-dummy_hcd.7-1, NetChip TurboCONNECT, 8a:e3:30:d3:ad:4e [ 145.314457][ T9400] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(8) [ 146.135732][ T43] audit: type=1326 audit(2000000006.718:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9403 comm="syz.6.1041" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf705efec code=0x0 [ 149.831751][ T6649] usb 12-1: USB disconnect, device number 13 [ 149.848094][ T6649] net1080 12-1:1.0 usb0: unregister 'net1080' usb-dummy_hcd.7-1, NetChip TurboCONNECT [ 150.064025][ T9443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.068590][ T9443] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.068837][ T43] audit: type=1326 audit(2000000010.844:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9434 comm="syz.8.1052" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf704efec code=0x0 [ 150.071018][ T9443] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.111139][ T9443] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.114945][ T9443] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.118066][ T9443] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 150.118086][ T9443] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 150.124766][ T9443] veth1_vlan: left promiscuous mode [ 150.125638][ T9443] veth0_vlan: left promiscuous mode [ 150.126937][ T9443] veth0_vlan: entered promiscuous mode [ 150.128663][ T9443] veth1_vlan: entered promiscuous mode [ 150.134072][ T9443] veth1_macvtap: left promiscuous mode [ 150.134831][ T9443] veth0_macvtap: left promiscuous mode [ 150.135638][ T9443] veth0_macvtap: entered promiscuous mode [ 150.137142][ T9443] veth1_macvtap: entered promiscuous mode [ 150.141993][ T9443] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 150.142491][ T9443] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 150.142970][ T9443] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 150.143502][ T9443] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 150.148510][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.148557][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.149421][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.149462][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.181062][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.181093][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.181112][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.181130][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.122839][ T9495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.125383][ T9495] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.130041][ T9495] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.130661][ T9494] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3601044736 (3601044736 ns) > initial count (1706808 ns). Using initial count to start timer. [ 151.158330][ T9495] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.159377][ T9495] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.167248][ T9495] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 151.167261][ T9495] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 151.176929][ T9495] veth1_macvtap: left promiscuous mode [ 151.177466][ T9495] veth0_macvtap: left promiscuous mode [ 151.177997][ T9495] veth0_macvtap: entered promiscuous mode [ 151.178503][ T9495] veth1_macvtap: entered promiscuous mode [ 151.192575][ T9495] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 151.193037][ T9495] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 151.193546][ T9495] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 151.194022][ T9495] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 151.221477][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.221524][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.223832][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.223963][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.293357][ T5546] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.293424][ T5546] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.293499][ T5546] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.293515][ T5546] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.293532][ T5546] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.293590][ T5546] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.293656][ T5546] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.293671][ T5546] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.657993][ T9514] 9p: Bad value for 'rfdno' [ 152.112497][ T853] usb 12-1: new high-speed USB device number 14 using dummy_hcd [ 152.142794][ T9547] __nla_validate_parse: 10 callbacks suppressed [ 152.142808][ T9547] netlink: 96 bytes leftover after parsing attributes in process `syz.8.1097'. [ 152.214547][ T9552] overlayfs: failed to clone upperpath [ 152.265987][ T853] usb 12-1: Using ep0 maxpacket: 16 [ 152.266411][ T853] usb 12-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 152.268845][ T853] usb 12-1: config 0 has an invalid interface number: 34 but max is 0 [ 152.268859][ T853] usb 12-1: config 0 has no interface number 0 [ 152.268877][ T853] usb 12-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 152.268889][ T853] usb 12-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 152.270373][ T853] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.270385][ T853] usb 12-1: Product: syz [ 152.270392][ T853] usb 12-1: Manufacturer: syz [ 152.270399][ T853] usb 12-1: SerialNumber: syz [ 152.272688][ T853] usb 12-1: config 0 descriptor?? [ 152.276391][ T9532] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 152.276446][ T9532] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 152.287539][ T9561] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1104'. [ 152.472838][ T9532] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 152.472897][ T9532] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 152.666470][ T853] asix 12-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 152.666586][ T853] asix 12-1:0.34: probe with driver asix failed with error -61 [ 152.825828][ T9577] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1109'. [ 152.866352][ T9596] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1116'. [ 153.868701][ T9618] overlayfs: failed to resolve './bus': -2 [ 153.945426][ T9626] binder: 9625:9626 ioctl c0306201 0 returned -14 [ 153.950646][ T9628] overlayfs: failed to clone upperpath [ 154.232346][ T43] audit: type=1326 audit(2000000015.211:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9637 comm="syz.5.1137" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66fec code=0x7ffc0000 [ 154.232383][ T43] audit: type=1326 audit(2000000015.211:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9637 comm="syz.5.1137" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66fec code=0x7ffc0000 [ 154.232810][ T43] audit: type=1326 audit(2000000015.211:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9637 comm="syz.5.1137" exe="/syz-executor" sig=0 arch=40000003 syscall=236 compat=1 ip=0xf7f66fec code=0x7ffc0000 [ 154.233048][ T43] audit: type=1326 audit(2000000015.211:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9637 comm="syz.5.1137" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66fec code=0x7ffc0000 [ 154.233199][ T43] audit: type=1326 audit(2000000015.211:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9637 comm="syz.5.1137" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66fec code=0x7ffc0000 [ 154.274046][ T9642] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1138'. [ 154.742192][ T6471] usb 12-1: USB disconnect, device number 14 [ 155.766800][ T9701] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 155.766811][ T9701] overlayfs: missing 'lowerdir' [ 156.039601][ T9715] serio: Serial port ptm0 [ 156.204942][ T9745] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 156.204954][ T9745] overlayfs: missing 'lowerdir' [ 156.589575][ T9756] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1186'. [ 156.726709][ T9777] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 156.726720][ T9777] overlayfs: missing 'lowerdir' [ 157.048561][ T5817] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 157.190261][ T5817] usb 10-1: Using ep0 maxpacket: 32 [ 157.194429][ T5817] usb 10-1: New USB device found, idVendor=2b73, idProduct=000a, bcdDevice= 0.40 [ 157.196787][ T5817] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.196800][ T5817] usb 10-1: Product: syz [ 157.196808][ T5817] usb 10-1: Manufacturer: syz [ 157.196815][ T5817] usb 10-1: SerialNumber: syz [ 157.812486][ T9829] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.813117][ T9829] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 158.172833][ T43] audit: type=1326 audit(2000000019.358:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9852 comm="syz.8.1222" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 158.173520][ T43] audit: type=1326 audit(2000000019.358:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9852 comm="syz.8.1222" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 158.174235][ T43] audit: type=1326 audit(2000000019.358:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9852 comm="syz.8.1222" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf704efec code=0x7ffc0000 [ 158.174415][ T43] audit: type=1326 audit(2000000019.358:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9852 comm="syz.8.1222" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 158.174518][ T43] audit: type=1326 audit(2000000019.358:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9852 comm="syz.8.1222" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 158.225960][ T9858] fuse: Bad value for 'fd' [ 158.293436][ T9862] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1226'. [ 158.303156][ T9864] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1233'. [ 158.941018][ T9876] event trace: Could not enable event p [ 159.002867][ T9884] kvm: emulating exchange as write [ 159.128092][ T9888] bridge1: entered promiscuous mode [ 159.294121][ T9904] fuse: fd is not a fuse device [ 159.362532][ T6471] usb 12-1: new high-speed USB device number 15 using dummy_hcd [ 159.513917][ T6471] usb 12-1: Using ep0 maxpacket: 32 [ 159.606595][ T5817] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 159.612767][ T5817] usb 10-1: USB disconnect, device number 18 [ 159.626009][ T6471] usb 12-1: unable to get BOS descriptor or descriptor too short [ 159.626045][ T6471] usb 12-1: New USB device found, idVendor=1235, idProduct=0001, bcdDevice= 0.40 [ 159.626897][ T6471] usb 12-1: unable to read config index 0 descriptor/start: -71 [ 159.626922][ T6471] usb 12-1: can't read configurations, error -71 [ 159.630600][ T9416] udevd[9416]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 159.676867][ T9917] event trace: Could not enable event p [ 160.875823][ T9938] device-mapper: ioctl: Invalid geometry supplied. [ 161.008739][ T9959] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.039597][ T9959] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.041721][ T9959] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.181322][ T5546] netdevsim netdevsim8 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.181357][ T5546] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.181389][ T5546] netdevsim netdevsim8 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.181410][ T5546] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.181430][ T5546] netdevsim netdevsim8 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.181443][ T5546] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.181460][ T5546] netdevsim netdevsim8 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.181473][ T5546] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.199869][ T5103] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 161.342979][ T5103] usb 5-1: New USB device found, idVendor=1d6b, idProduct=5678, bcdDevice= 0.01 [ 161.343466][ T5103] usb 5-1: config 1 interface 2 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 161.347350][ T5103] usb 5-1: Dual-Role OTG device on HNP port [ 161.347629][ T5103] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.347646][ T5103] usb 5-1: Product: HID Gadget [ 161.347657][ T5103] usb 5-1: SerialNumber: 0123456789 [ 161.354433][ C2] ------------[ cut here ]------------ [ 161.354445][ C2] usb_ep_enable: ep134 (ep6in-bulk) has maxpacket 0 [ 161.354460][ C2] WARNING: drivers/usb/gadget/udc/core.c:124 at usb_ep_enable+0x3e6/0x490, CPU#2: syz-executor/6560 [ 161.381510][ C2] Modules linked in: [ 161.383262][ C2] CPU: 2 UID: 0 PID: 6560 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 161.387570][ C2] Tainted: [L]=SOFTLOCKUP [ 161.389381][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 161.393434][ C2] RIP: 0010:usb_ep_enable+0x3f8/0x490 [ 161.395457][ C2] Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 93 00 00 00 48 8d 3d ba 20 76 09 48 8b 4b 08 40 0f b6 d5 4d 89 e0 48 c7 c6 c0 17 da 8c <67> 48 0f b9 3a bd ea ff ff ff e9 8e fd ff ff 49 c7 c4 60 0a da 8c [ 161.402621][ C2] RSP: 0018:ffffc90000548a00 EFLAGS: 00010046 [ 161.404609][ C2] RAX: dffffc0000000000 RBX: ffff8880256a0248 RCX: ffffffff8cda4f20 [ 161.407068][ C2] RDX: 0000000000000086 RSI: ffffffff8cda17c0 RDI: ffffffff9152fe70 [ 161.409610][ C2] RBP: 0000000000000086 R08: ffffffff8cda0aa0 R09: 0000000000000000 [ 161.412099][ C2] R10: 0000000000000000 R11: 0000000000000001 R12: ffffffff8cda0aa0 [ 161.414566][ C2] R13: 0000000000000000 R14: ffff8880256a0248 R15: ffff88804fa93118 [ 161.417042][ C2] FS: 0000000000000000(0000) GS:ffff888096b59000(0063) knlGS:0000000057734480 [ 161.419863][ C2] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 161.421955][ C2] CR2: 00000000f74192f0 CR3: 000000004d34d000 CR4: 0000000000352ef0 [ 161.424451][ C2] Call Trace: [ 161.425514][ C2] [ 161.426434][ C2] hidg_set_alt+0x190/0xa10 [ 161.427892][ C2] composite_setup+0x2ccf/0x9290 [ 161.429457][ C2] ? __lock_acquire+0x5c0/0x1f40 [ 161.431038][ C2] ? __pfx_composite_setup+0x10/0x10 [ 161.432708][ C2] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 161.434378][ C2] ? do_raw_spin_lock+0x128/0x260 [ 161.436003][ C2] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 161.437770][ C2] ? configfs_composite_setup+0xfb/0x130 [ 161.439573][ C2] configfs_composite_setup+0xfb/0x130 [ 161.441297][ C2] dummy_timer+0x2039/0x3700 [ 161.442792][ C2] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 161.444632][ C2] ? debug_object_deactivate+0x2e4/0x3b0 [ 161.446399][ C2] ? __pfx_dummy_timer+0x10/0x10 [ 161.447967][ C2] ? mark_held_locks+0x40/0x70 [ 161.449502][ C2] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 161.451338][ C2] ? __pfx_dummy_timer+0x10/0x10 [ 161.452896][ C2] __hrtimer_run_queues+0x462/0x9c0 [ 161.454528][ C2] hrtimer_run_softirq+0x1ca/0x360 [ 161.456139][ C2] handle_softirqs+0x1e6/0x9d0 [ 161.457659][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 161.459325][ C2] ? _raw_spin_unlock+0x28/0x50 [ 161.460889][ C2] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 161.462642][ C2] __irq_exit_rcu+0x16a/0x210 [ 161.464154][ C2] irq_exit_rcu+0x9/0x30 [ 161.465517][ C2] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 161.467291][ C2] [ 161.468229][ C2] [ 161.469170][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 161.471094][ C2] RIP: 0010:__reset_page_owner+0x43/0x190 [ 161.472899][ C2] Code: 82 ff e8 f0 fc 5a ff 4c 89 e7 49 89 c5 e8 a5 62 01 00 48 85 c0 0f 84 0b 01 00 00 48 89 c3 e8 c4 ce 82 ff 4c 8b 3d 4d 24 7a 0c <48> b8 00 00 00 00 00 fc ff df 49 01 df 49 8d 7f 08 48 89 fa 48 c1 [ 161.478875][ C2] RSP: 0018:ffffc90002d9f590 EFLAGS: 00000293 [ 161.480838][ C2] RAX: 0000000000000000 RBX: ffff8880410014f0 RCX: 0000000000000000 [ 161.483438][ C2] RDX: ffff888026f92580 RSI: ffffffff8288afec RDI: ffff888026f92580 [ 161.485951][ C2] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 161.488474][ C2] R10: 0000000000000000 R11: 0000000000000001 R12: ffffea00016010c0 [ 161.490996][ C2] R13: 00000025913aee6b R14: 0000000000000000 R15: 0000000000000008 [ 161.493493][ C2] ? __reset_page_owner+0x3c/0x190 [ 161.495134][ C2] free_pages_prepare+0x586/0xe00 [ 161.496750][ C2] ? lock_acquire+0x1d1/0x380 [ 161.498247][ C2] __free_contig_range_common+0x14f/0x250 [ 161.500078][ C2] free_pages_bulk+0x12a/0x200 [ 161.501646][ C2] vm_area_free_pages+0xb2/0x2a0 [ 161.503213][ C2] vfree+0xf7/0x6d0 [ 161.504462][ C2] xt_compat_flush_offsets+0x90/0x170 [ 161.506203][ C2] compat_do_ebt_get_ctl+0x663/0xbb0 [ 161.507896][ C2] ? __pfx_compat_do_ebt_get_ctl+0x10/0x10 [ 161.509738][ C2] ? bpf_lsm_capable+0x9/0x10 [ 161.511245][ C2] ? security_capable+0x80/0x260 [ 161.512844][ C2] do_ebt_get_ctl+0x243/0x7a0 [ 161.514355][ C2] ? __pfx_do_ebt_get_ctl+0x10/0x10 [ 161.516064][ C2] ? __sys_socket+0x1c0/0x260 [ 161.517561][ C2] ? nf_sockopt_find.isra.0+0x222/0x290 [ 161.519333][ C2] nf_getsockopt+0x7c/0xe0 [ 161.520766][ C2] ip_getsockopt+0x192/0x1e0 [ 161.522230][ C2] ? __pfx_ip_getsockopt+0x10/0x10 [ 161.523869][ C2] tcp_getsockopt+0xa1/0x110 [ 161.525364][ C2] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 161.527227][ C2] do_sock_getsockopt+0x50a/0x6e0 [ 161.528833][ C2] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 161.530615][ C2] ? lock_acquire+0x1d1/0x380 [ 161.532159][ C2] ? __might_fault+0xc5/0x140 [ 161.533749][ C2] __sys_getsockopt+0x133/0x1d0 [ 161.535316][ C2] ? __ia32_compat_sys_socketcall+0x6af/0x770 [ 161.537226][ C2] __ia32_compat_sys_socketcall+0x6af/0x770 [ 161.539070][ C2] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 161.541122][ C2] ? find_held_lock+0x2b/0x80 [ 161.542621][ C2] ? exc_page_fault+0x6f/0xd0 [ 161.544115][ C2] __do_fast_syscall_32+0x13a/0x8b0 [ 161.545743][ C2] do_fast_syscall_32+0x32/0x70 [ 161.547269][ C2] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 161.549266][ C2] RIP: 0023:0xf704efec [ 161.550619][ C2] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 161.556569][ C2] RSP: 002b:00000000fff702d0 EFLAGS: 00000282 ORIG_RAX: 0000000000000066 [ 161.559147][ C2] RAX: ffffffffffffffda RBX: 000000000000000f RCX: 00000000fff70308 [ 161.561651][ C2] RDX: 00000000f7418ff4 RSI: 00000000fff70390 RDI: 00000000fff7038c [ 161.564110][ C2] RBP: 00000000fff70390 R08: 0000000000000000 R09: 0000000000000000 [ 161.566561][ C2] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 161.568997][ C2] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 161.571455][ C2] [ 161.572444][ C2] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 161.574683][ C2] CPU: 2 UID: 0 PID: 6560 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 161.578052][ C2] Tainted: [L]=SOFTLOCKUP [ 161.579416][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 161.582573][ C2] Call Trace: [ 161.583636][ C2] [ 161.584754][ C2] dump_stack_lvl+0x100/0x190 [ 161.586443][ C2] vpanic+0x553/0x970 [ 161.587708][ C2] ? __pfx_vpanic+0x10/0x10 [ 161.589154][ C2] panic+0xd1/0xe0 [ 161.590370][ C2] ? __pfx_panic+0x10/0x10 [ 161.591781][ C2] check_panic_on_warn.cold+0x19/0x34 [ 161.593479][ C2] ? usb_ep_enable+0x3e6/0x490 [ 161.595021][ C2] __warn.cold+0x191/0x318 [ 161.596445][ C2] __report_bug+0x30f/0x440 [ 161.597895][ C2] ? usb_ep_enable+0x3e6/0x490 [ 161.599427][ C2] ? __pfx___report_bug+0x10/0x10 [ 161.601033][ C2] ? do_raw_spin_lock+0x128/0x260 [ 161.602617][ C2] ? find_held_lock+0x2b/0x80 [ 161.604109][ C2] report_bug_entry+0xe2/0x290 [ 161.605608][ C2] ? usb_ep_enable+0x3f8/0x490 [ 161.607106][ C2] handle_bug+0x1cd/0x2a0 [ 161.608475][ C2] exc_invalid_op+0x17/0x50 [ 161.609916][ C2] asm_exc_invalid_op+0x1a/0x20 [ 161.611490][ C2] RIP: 0010:usb_ep_enable+0x3f8/0x490 [ 161.613172][ C2] Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 93 00 00 00 48 8d 3d ba 20 76 09 48 8b 4b 08 40 0f b6 d5 4d 89 e0 48 c7 c6 c0 17 da 8c <67> 48 0f b9 3a bd ea ff ff ff e9 8e fd ff ff 49 c7 c4 60 0a da 8c [ 161.619090][ C2] RSP: 0018:ffffc90000548a00 EFLAGS: 00010046 [ 161.621006][ C2] RAX: dffffc0000000000 RBX: ffff8880256a0248 RCX: ffffffff8cda4f20 [ 161.623455][ C2] RDX: 0000000000000086 RSI: ffffffff8cda17c0 RDI: ffffffff9152fe70 [ 161.626064][ C2] RBP: 0000000000000086 R08: ffffffff8cda0aa0 R09: 0000000000000000 [ 161.628558][ C2] R10: 0000000000000000 R11: 0000000000000001 R12: ffffffff8cda0aa0 [ 161.631066][ C2] R13: 0000000000000000 R14: ffff8880256a0248 R15: ffff88804fa93118 [ 161.633785][ C2] hidg_set_alt+0x190/0xa10 [ 161.635332][ C2] composite_setup+0x2ccf/0x9290 [ 161.636938][ C2] ? __lock_acquire+0x5c0/0x1f40 [ 161.638519][ C2] ? __pfx_composite_setup+0x10/0x10 [ 161.640194][ C2] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 161.641891][ C2] ? do_raw_spin_lock+0x128/0x260 [ 161.643474][ C2] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 161.645153][ C2] ? configfs_composite_setup+0xfb/0x130 [ 161.646911][ C2] configfs_composite_setup+0xfb/0x130 [ 161.648630][ C2] dummy_timer+0x2039/0x3700 [ 161.650088][ C2] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 161.652033][ C2] ? debug_object_deactivate+0x2e4/0x3b0 [ 161.653793][ C2] ? __pfx_dummy_timer+0x10/0x10 [ 161.655357][ C2] ? mark_held_locks+0x40/0x70 [ 161.656887][ C2] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 161.658722][ C2] ? __pfx_dummy_timer+0x10/0x10 [ 161.660323][ C2] __hrtimer_run_queues+0x462/0x9c0 [ 161.661977][ C2] hrtimer_run_softirq+0x1ca/0x360 [ 161.663597][ C2] handle_softirqs+0x1e6/0x9d0 [ 161.665126][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 161.666795][ C2] ? _raw_spin_unlock+0x28/0x50 [ 161.668337][ C2] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 161.670089][ C2] __irq_exit_rcu+0x16a/0x210 [ 161.671614][ C2] irq_exit_rcu+0x9/0x30 [ 161.673044][ C2] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 161.674815][ C2] [ 161.675769][ C2] [ 161.676707][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 161.678569][ C2] RIP: 0010:__reset_page_owner+0x43/0x190 [ 161.680403][ C2] Code: 82 ff e8 f0 fc 5a ff 4c 89 e7 49 89 c5 e8 a5 62 01 00 48 85 c0 0f 84 0b 01 00 00 48 89 c3 e8 c4 ce 82 ff 4c 8b 3d 4d 24 7a 0c <48> b8 00 00 00 00 00 fc ff df 49 01 df 49 8d 7f 08 48 89 fa 48 c1 [ 161.686442][ C2] RSP: 0018:ffffc90002d9f590 EFLAGS: 00000293 [ 161.688778][ C2] RAX: 0000000000000000 RBX: ffff8880410014f0 RCX: 0000000000000000 [ 161.691549][ C2] RDX: ffff888026f92580 RSI: ffffffff8288afec RDI: ffff888026f92580 [ 161.694027][ C2] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 161.696530][ C2] R10: 0000000000000000 R11: 0000000000000001 R12: ffffea00016010c0 [ 161.699020][ C2] R13: 00000025913aee6b R14: 0000000000000000 R15: 0000000000000008 [ 161.701527][ C2] ? __reset_page_owner+0x3c/0x190 [ 161.703144][ C2] free_pages_prepare+0x586/0xe00 [ 161.704809][ C2] ? lock_acquire+0x1d1/0x380 [ 161.706345][ C2] __free_contig_range_common+0x14f/0x250 [ 161.708141][ C2] free_pages_bulk+0x12a/0x200 [ 161.709667][ C2] vm_area_free_pages+0xb2/0x2a0 [ 161.711231][ C2] vfree+0xf7/0x6d0 [ 161.712457][ C2] xt_compat_flush_offsets+0x90/0x170 [ 161.714156][ C2] compat_do_ebt_get_ctl+0x663/0xbb0 [ 161.716072][ C2] ? __pfx_compat_do_ebt_get_ctl+0x10/0x10 [ 161.717905][ C2] ? bpf_lsm_capable+0x9/0x10 [ 161.719388][ C2] ? security_capable+0x80/0x260 [ 161.720963][ C2] do_ebt_get_ctl+0x243/0x7a0 [ 161.722473][ C2] ? __pfx_do_ebt_get_ctl+0x10/0x10 [ 161.724119][ C2] ? __sys_socket+0x1c0/0x260 [ 161.725657][ C2] ? nf_sockopt_find.isra.0+0x222/0x290 [ 161.727399][ C2] nf_getsockopt+0x7c/0xe0 [ 161.728820][ C2] ip_getsockopt+0x192/0x1e0 [ 161.730281][ C2] ? __pfx_ip_getsockopt+0x10/0x10 [ 161.731902][ C2] tcp_getsockopt+0xa1/0x110 [ 161.733363][ C2] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 161.735337][ C2] do_sock_getsockopt+0x50a/0x6e0 [ 161.737030][ C2] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 161.738761][ C2] ? lock_acquire+0x1d1/0x380 [ 161.740282][ C2] ? __might_fault+0xc5/0x140 [ 161.741786][ C2] __sys_getsockopt+0x133/0x1d0 [ 161.743299][ C2] ? __ia32_compat_sys_socketcall+0x6af/0x770 [ 161.745412][ C2] __ia32_compat_sys_socketcall+0x6af/0x770 [ 161.747356][ C2] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 161.749356][ C2] ? find_held_lock+0x2b/0x80 [ 161.750842][ C2] ? exc_page_fault+0x6f/0xd0 [ 161.752325][ C2] __do_fast_syscall_32+0x13a/0x8b0 [ 161.753971][ C2] do_fast_syscall_32+0x32/0x70 [ 161.755541][ C2] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 161.757521][ C2] RIP: 0023:0xf704efec [ 161.758808][ C2] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 161.764756][ C2] RSP: 002b:00000000fff702d0 EFLAGS: 00000282 ORIG_RAX: 0000000000000066 [ 161.767320][ C2] RAX: ffffffffffffffda RBX: 000000000000000f RCX: 00000000fff70308 [ 161.769782][ C2] RDX: 00000000f7418ff4 RSI: 00000000fff70390 RDI: 00000000fff7038c [ 161.772240][ C2] RBP: 00000000fff70390 R08: 0000000000000000 R09: 0000000000000000 [ 161.774669][ C2] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 161.777321][ C2] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 161.779801][ C2] [ 161.781451][ C2] Kernel Offset: disabled [ 161.782801][ C2] Rebooting in 86400 seconds..