last executing test programs: 10m32.905386879s ago: executing program 0 (id=1126): socket(0x10, 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x0, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0xc, 0x7, 0x0, 0x40000005, 0x1, 0x4, 0x2, 0x7}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) ioctl$TCSETSF2(r1, 0x40305828, &(0x7f0000000080)={0x4ae, 0x4, 0x80000005, 0x3, 0xb, "c5da8205ed8c029f78a9030057cd38d3e06635", 0x1, 0x200}) fanotify_mark(r1, 0x1, 0x1000, r1, &(0x7f0000000240)='./file0\x00') socket$tipc(0x1e, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket(0x10, 0x3, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@getchain={0x6c, 0x66, 0x2, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x4, 0xfff1}, {0x1, 0xfff2}, {0xfff1, 0x7}}, [{0x8}, {0x8, 0xb, 0x7fffffff}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x40}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40001}, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), 0xffffffffffffffff) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$kvm(0xffffff9c, &(0x7f0000000280), 0x402000, 0x0) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x803, 0x300, 0x0, 0x101, 0x300}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x6000, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r7, 0x4040534e, &(0x7f0000000080)={0x335, @time={0x80, 0xff}}) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x400032) 10m31.271592178s ago: executing program 1 (id=1135): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1a, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e76, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0xc}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x880}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x10000001) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rt_sigqueueinfo(r0, 0x37, 0x0) mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) socket$nl_netfilter(0x10, 0x3, 0xc) acct(&(0x7f00000001c0)='./file0\x00') ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x6, 0xb, 0x0, 0x0, @str='{\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 10m30.277107309s ago: executing program 1 (id=1137): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x503, 0x70bd27, 0x700, {0x0, 0x0, 0x0, 0x0, 0x6000, 0x1806}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r2}]]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x440b0) (fail_nth: 9) 10m29.643392888s ago: executing program 0 (id=1139): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x0, 0x7}, {0xffff, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x3, 0x3, 0x882e, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x6, 0x7, 0x7fff, 0xffffff40, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x80, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0x8, 0x80000001, 0x8, 0x4, 0x6, 0x8, 0xfffffffd, 0x15, 0x7, 0xc, 0x8, 0x4, 0x3, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x4, 0x0, 0x8, 0x5, 0x8001, 0x5, 0x1, 0x1000, 0x9, 0x3, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff40, 0x1, 0x8, 0xf, 0x6, 0x556, 0x1, 0x2c, 0x5, 0x80000001, 0x1, 0x0, 0x200, 0x3, 0x2, 0x6, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x80, 0xb, 0x0, 0x743, 0x5, 0x3, 0x0, 0x200, 0x5, 0x0, 0x8, 0x3, 0x100, 0x2, 0x8, 0x1, 0x6, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x7, 0xf80, 0x7, 0x1, 0x2302, 0x9, 0x3ff, 0x2, 0x5, 0x1, 0x6, 0x3, 0x4, 0x10001, 0x512d, 0x1, 0x5, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x9, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e5, 0x48, 0x9, 0x7, 0x0, 0x5, 0x6, 0xf, 0xff, 0xd, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x3e1, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x1000000a, 0x8, 0x2, 0x1a, 0x2000000, 0x1ff, 0x844, 0x6, 0x3ff, 0x2, 0x100, 0x6, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x4, 0x7, 0x3565, 0x2, 0x2, 0xebf, 0x9, 0x1000, 0x1, 0x71f, 0x2, 0xc59, 0x6e8, 0x8, 0x101, 0x88000000, 0x6, 0xc, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) syz_open_dev$vim2m(0x0, 0x0, 0x2) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d8b601020301090212000100000000090401"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40402) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000880)='9', 0x1}], 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r2, 0x0, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r4, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 10m29.354721383s ago: executing program 1 (id=1140): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {0xc, 0xc}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x40c, 0x2, [@TCA_BASIC_POLICE={0x408, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x7, 0x62, 0x2, 0x0, 0xc, 0x2, 0x7fff, 0x0, 0xffffff70, 0x19, 0xffffffa9, 0x2, 0x7, 0x80000001, 0x7, 0x3, 0x36, 0xc, 0x6, 0x6, 0x5d0bef1f, 0x400, 0x1, 0x837, 0xffffffff, 0x9fec, 0x401, 0x68, 0x9, 0xdd64, 0x1, 0x104, 0x8001, 0xfffffffe, 0x2, 0x0, 0x201, 0xfff, 0xfffffff1, 0x7, 0x4, 0xf, 0x7, 0x7469, 0xb, 0x2, 0x200, 0xff3a, 0x6, 0xca, 0x46c1, 0x1, 0x9, 0x80, 0x0, 0x10000, 0x0, 0xb4, 0x7, 0x6, 0x0, 0x0, 0x8156b2a, 0x2, 0xd5c, 0x4, 0xa0, 0x2, 0x7, 0x4, 0x3, 0x81, 0xff, 0x6, 0x80000001, 0x9, 0xa, 0xc8c, 0x1, 0xd2a, 0x6, 0xf4e, 0x9, 0x3a0, 0x3, 0x10000, 0x7ff, 0x47, 0x1, 0x2, 0x800, 0x3, 0x8, 0x0, 0x6, 0x922e, 0x0, 0x8, 0x3, 0xf, 0x4, 0x2, 0x2c000, 0x80, 0x5, 0x7, 0x12, 0x5, 0x0, 0x9, 0x6, 0x0, 0x3365, 0x1, 0x5, 0xffffffff, 0x1000, 0x0, 0x4, 0x0, 0x1, 0x1, 0x81, 0x111, 0x2, 0x5c1e, 0x7f, 0x0, 0xe, 0xfffffffb, 0x6, 0x391, 0x0, 0x0, 0x3, 0x9, 0xc95d90e, 0xff, 0x2, 0x7, 0x7fffffff, 0xc7, 0x4, 0x6, 0x0, 0x9, 0xffffffff, 0x9, 0x1, 0x4, 0x3, 0x7, 0xfffffff9, 0x1010, 0x2, 0xfff, 0x2, 0x9, 0x8b4, 0x600000, 0x1, 0x6, 0x0, 0x10000, 0x0, 0x3, 0xc, 0x0, 0x80, 0x6, 0x9, 0x0, 0x1, 0x81, 0x2, 0xffff6c4b, 0x800, 0x7, 0x5, 0x8001, 0x8, 0xffffffff, 0x9, 0x6, 0x0, 0x40, 0x67e1, 0x80000000, 0x2, 0x603c, 0x4, 0x1, 0x0, 0xfffffff8, 0x7, 0x3, 0x10, 0x400, 0xfffffe00, 0x1, 0x3, 0x0, 0xffff, 0x4, 0x6, 0x8, 0x0, 0x400, 0x1, 0x87, 0x10, 0x2, 0x0, 0xfffffffd, 0x3, 0x7, 0x616, 0x2, 0x2, 0xd1, 0x2, 0xfffffffc, 0x8, 0xe, 0x800, 0x1, 0x4, 0xd87, 0x80000001, 0x48e0, 0x8, 0x9, 0x40, 0x400400, 0x5, 0x1020, 0xffff30e7, 0x1, 0x1000, 0x8, 0x4, 0x3, 0x0, 0x2, 0x20a, 0x2, 0x3, 0x10001, 0xffff, 0x4d, 0x10000d, 0x8, 0x2, 0x2, 0x8]}]}]}}]}, 0x43c}}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x28}}, 0x0) 10m29.225549915s ago: executing program 1 (id=1142): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000003c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) (async) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r2, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x2}]) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000140)=ANY=[@ANYRES8=r4, @ANYRES32=0x0], 0x0) (async) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r5, 0xffffffffffffffff, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a05"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d00", 0x6}], 0x1}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{}], 0x1, 0x0, 0x0, 0x7400}, 0x10) (async) r7 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8b0b, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) (async) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x0, 0x2, 0x10001, 0x8, 0xfff, 0xffffff73}) fanotify_init(0xa00, 0x101000) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe33) (async) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0x0, 0x7, r7, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000380)=0x38800000, 0x4) pread64(0xffffffffffffffff, 0x0, 0x0, 0x3) sendmmsg(0xffffffffffffffff, &(0x7f0000001c00), 0x40000000000017a, 0x40840) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 10m29.123199331s ago: executing program 1 (id=1143): r0 = syz_open_dev$vcsn(&(0x7f0000000100), 0x1, 0xd00) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a45323, &(0x7f0000000140)={{0x1, 0x5}, 'port0\x00', 0x58, 0x2, 0x2, 0x592, 0x8, 0x200, 0x5, 0x0, 0x5, 0x5}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) r1 = inotify_init1(0x80000) r2 = dup(r1) read$FUSE(r2, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x4, &(0x7f0000000200)=[{0x6, 0x5, 0x7, 0x7ffc0001}, {0x3, 0x4, 0x7f, 0xda8f}, {0xffff, 0x7, 0xb6}, {0xfbff, 0xb0, 0x8, 0x5af}]}) capget(&(0x7f0000000ac0)={0x20071026}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) capset(&(0x7f0000000080)={0x20071026, r3}, &(0x7f00000000c0)={0xc, 0x100, 0x7ff, 0x4000800, 0x0, 0x6}) r4 = syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0xaa, &(0x7f0000000080)={0x0, 0x91c5, 0x800, 0x2, 0x3, 0x0, r0}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000340)=0x0) listns(0x0, 0x0, 0x0, 0x0) syz_io_uring_modify_offsets$generic(r5, r6, 0x2c, 0x10000) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x1, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000f0ffffffffffffff000700000000000000c9ef7739876984620000000000"], &(0x7f0000001400)='syzkaller\x00'}, 0x80) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@o_path={0x0, r8}, 0x18) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002020000000000000000100095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000980)={r10, 0x0, 0x25, 0x4, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x8, 0x0, 0x0, r4}}, 0x3c) writev(r9, &(0x7f0000000080)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f88", 0x11}, {&(0x7f0000000100)='\x00', 0x1}], 0x2) syz_io_uring_submit$UBLK(r5, r6, r7, &(0x7f0000001480)=@ublk_set_params_sqe={0x2e, 0x45, 0x0, 0xffffffffffffffff, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, '\x00', {0x0, 0xffff, 0x0, 0x0}}) 10m27.015352802s ago: executing program 0 (id=1146): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a0900004001000000000000000000000000ffff0000000000000000000000000000ff"], 0x4c}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07f00000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 10m26.467977667s ago: executing program 0 (id=1147): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x2, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x40}, 0x1, 0x7}, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', 0x0, 0x8c, 0x0) openat(0xffffffffffffff9c, 0x0, 0x4842, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) clock_adjtime(0x0, &(0x7f0000000100)={0x2, 0x6a, 0x5, 0x8000000000000001, 0x48c, 0x5, 0xd, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x7, 0x2, 0x1000000081, 0x5, 0x0, 0x5, 0x0, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x0, 0x5, 0x7}) r6 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x8550, 0xc00, 0x8000001, 0xf}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f0000000280)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x9, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x12022, 0x1}) io_uring_enter(r6, 0x1, 0x1, 0x1, 0x0, 0x0) 10m25.67275972s ago: executing program 1 (id=1149): socket(0x10, 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x0, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0xc, 0x7, 0x0, 0x40000005, 0x1, 0x4, 0x2, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) ioctl$TCSETSF2(r1, 0x40305828, &(0x7f0000000080)={0x4ae, 0x4, 0x80000005, 0x3, 0xb, "c5da8205ed8c029f78a9030057cd38d3e06635", 0x1, 0x200}) fanotify_mark(r1, 0x1, 0x1000, r1, &(0x7f0000000240)='./file0\x00') socket$tipc(0x1e, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket(0x10, 0x3, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@getchain={0x6c, 0x66, 0x2, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x4, 0xfff1}, {0x1, 0xfff2}, {0xfff1, 0x7}}, [{0x8}, {0x8, 0xb, 0x7fffffff}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x40}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40001}, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), 0xffffffffffffffff) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$kvm(0xffffff9c, &(0x7f0000000280), 0x402000, 0x0) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x803, 0x300, 0x0, 0x101, 0x300}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x6000, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r7, 0x4040534e, &(0x7f0000000080)={0x335, @time={0x80, 0xff}}) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x400032) 10m23.026243108s ago: executing program 0 (id=1155): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000090000102505a1a4400000000101090244000101000000090400001202060000052406000005240000000d240f01000000000000000000090581034000000000090582"], 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x20, 0x3) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000380)=@security={'security\x00', 0xe, 0x4, 0x2b4, 0xffffffff, 0xc0, 0xc0, 0x188, 0xffffffff, 0xffffffff, 0x220, 0x220, 0x220, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@uncond, 0x0, 0x9c, 0xc0, 0x0, {}, [@common=@addrtype={{0x2c}, {0x11, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x94, 0xc8, 0x0, {}, [@common=@ttl={{0x24}, {0x2, 0x4}}]}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{0x2, 0x2}, {0xffffffffffffffff, 0x5}, {0xffffffffffffffff, 0x5}, 0x7fc, 0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x3}, {0x2, 0x4, 0x7}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x310) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r5, 0x4068aea3, &(0x7f00000000c0)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d07}]}) syz_usb_ep_write(r1, 0x82, 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x2, 0x17, 0xd6, 0xf, 0x15, 0x0, 0x70bd25, 0x25dfdbff, [@sadb_x_kmaddress={0x7, 0x17, 0x0, @in6={0xa, 0x4e24, 0x4, @loopback, 0x6}, @in={0x2, 0x4e23, @empty}}, @sadb_x_nat_t_type={0x1, 0x14, 0x7}, @sadb_address={0x5, 0x17, 0xff, 0xe0, 0x0, @in6={0xa, 0x4e20, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}}, @sadb_sa={0x2, 0x1, 0x4d4, 0x9, 0x1, 0x83, 0x3, 0x80000001}, @sadb_key={0x4, 0x9, 0xb8, 0x0, "510b6ec0b2881dc005f871be98b9e0ffa616e09abbc1d8"}]}, 0xa8}}, 0x24000004) 10m19.616186166s ago: executing program 0 (id=1158): socket(0x10, 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) ioctl$TCSETSF2(r1, 0x40305828, &(0x7f0000000080)={0x4ae, 0x4, 0x80000005, 0x3, 0xb, "c5da8205ed8c029f78a9030057cd38d3e06635", 0x1, 0x200}) fanotify_mark(r1, 0x1, 0x1000, r1, &(0x7f0000000240)='./file0\x00') socket$tipc(0x1e, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket(0x10, 0x3, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@getchain={0x6c, 0x66, 0x2, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x4, 0xfff1}, {0x1, 0xfff2}, {0xfff1, 0x7}}, [{0x8}, {0x8, 0xb, 0x7fffffff}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x40}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40001}, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), 0xffffffffffffffff) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$kvm(0xffffff9c, &(0x7f0000000280), 0x402000, 0x0) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x803, 0x300, 0x0, 0x101, 0x300}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x6000, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r7, 0x4040534e, &(0x7f0000000080)={0x335, @time={0x80, 0xff}}) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x400032) 10m10.438110368s ago: executing program 32 (id=1149): socket(0x10, 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x0, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0xc, 0x7, 0x0, 0x40000005, 0x1, 0x4, 0x2, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) ioctl$TCSETSF2(r1, 0x40305828, &(0x7f0000000080)={0x4ae, 0x4, 0x80000005, 0x3, 0xb, "c5da8205ed8c029f78a9030057cd38d3e06635", 0x1, 0x200}) fanotify_mark(r1, 0x1, 0x1000, r1, &(0x7f0000000240)='./file0\x00') socket$tipc(0x1e, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket(0x10, 0x3, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@getchain={0x6c, 0x66, 0x2, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x4, 0xfff1}, {0x1, 0xfff2}, {0xfff1, 0x7}}, [{0x8}, {0x8, 0xb, 0x7fffffff}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x40}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40001}, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), 0xffffffffffffffff) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$kvm(0xffffff9c, &(0x7f0000000280), 0x402000, 0x0) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x803, 0x300, 0x0, 0x101, 0x300}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x6000, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r7, 0x4040534e, &(0x7f0000000080)={0x335, @time={0x80, 0xff}}) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x400032) 10m4.593845126s ago: executing program 33 (id=1158): socket(0x10, 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) ioctl$TCSETSF2(r1, 0x40305828, &(0x7f0000000080)={0x4ae, 0x4, 0x80000005, 0x3, 0xb, "c5da8205ed8c029f78a9030057cd38d3e06635", 0x1, 0x200}) fanotify_mark(r1, 0x1, 0x1000, r1, &(0x7f0000000240)='./file0\x00') socket$tipc(0x1e, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket(0x10, 0x3, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@getchain={0x6c, 0x66, 0x2, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x4, 0xfff1}, {0x1, 0xfff2}, {0xfff1, 0x7}}, [{0x8}, {0x8, 0xb, 0x7fffffff}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x40}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40001}, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), 0xffffffffffffffff) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$kvm(0xffffff9c, &(0x7f0000000280), 0x402000, 0x0) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x803, 0x300, 0x0, 0x101, 0x300}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x6000, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r7, 0x4040534e, &(0x7f0000000080)={0x335, @time={0x80, 0xff}}) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x400032) 9m44.466642446s ago: executing program 5 (id=1224): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, 0x0, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012ef", 0x58}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361", 0x35}], 0x3}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) read$alg(r3, &(0x7f0000002300)=""/4128, 0x1020) close(r1) r4 = openat$pfkey(0xffffff9c, &(0x7f00000001c0), 0x10000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'gre0\x00', 0x0, 0x40, 0x399d802816cba6f9, 0x3, 0x9c, {{0x6, 0x4, 0x0, 0x8, 0x18, 0x68, 0x0, 0x3, 0x2f, 0x0, @empty, @multicast2, {[@noop]}}}}}) sendmsg$nl_route(r4, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@getstats={0x1c, 0x5e, 0x10, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, 0x3}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmmsg$alg(r3, &(0x7f0000004740)=[{0x0, 0x0, &(0x7f0000001840)=[{0x0}, {&(0x7f0000000580)="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", 0xf6f}], 0x2, 0x0, 0x0, 0x4}], 0x1, 0x43855) syz_open_dev$usbfs(&(0x7f0000000180), 0x3, 0x101180) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) r6 = openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x54da04, 0x2) getdents64(r6, &(0x7f0000005140)=""/4103, 0x1007) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000001580)={0xffffffffffffffff, 0x2, {0x0, 0x0, 0x0, 0x9, 0x80, 0x0, 0x2, 0x0, 0x4, "fded2f4458fe0147ecdcc85fe4d3d5ec8a6ed12f3719d20c92100b4537a86364cdfe2e60d8361058bb2877f86546689003d68459a21d0def84d32a31ec385f09", "d921323ade6f38ae6a34f3226f80ba4500e453fc7b11287a33c00bd360110e9c103e1f0cbc6452bdf655f42426fafe4bcd8b29a8b6c13f969fb446c891b11ad6", "8045e79077a9564fcae36e2b8b34b109abec9d40ac2532ee2b453d57d05a5006", [0x7ff, 0x5]}}) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1000000, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2b00ad, &(0x7f0000000200)=ANY=[@ANYBLOB="6e6f737761702cfa"]) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 9m43.365414963s ago: executing program 5 (id=1227): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'dummy0\x00'}) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f024}) mmap(&(0x7f00009b4000/0x2000)=nil, 0x2000, 0x2000005, 0x204031, 0xffffffffffffffff, 0x436a6000) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$kcm(0xa, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x98c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x3a7842, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_generic(r5, 0x0, 0x40044) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lblcr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x6e23, 0x10000, 0x1cb, 0x3, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x8, @rand_addr=0x64010100, 0x4e24, 0x6, 'lc\x00', 0x8, 0x323b, 0x53}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x2}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}, 0x40004) 9m42.950755117s ago: executing program 5 (id=1231): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'dummy0\x00'}) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f024}) mmap(&(0x7f00009b4000/0x2000)=nil, 0x2000, 0x2000005, 0x204031, 0xffffffffffffffff, 0x436a6000) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$kcm(0xa, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x98c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x3a7842, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_generic(r5, 0x0, 0x40044) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lblcr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x6e23, 0x10000, 0x1cb, 0x3, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x8, @rand_addr=0x64010100, 0x4e24, 0x6, 'lc\x00', 0x8, 0x323b, 0x53}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x2}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}, 0x40004) 9m42.684555944s ago: executing program 5 (id=1233): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000005b80)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000005bc0), 0x12) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r2) sendmsg$NFC_CMD_ENABLE_SE(r2, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000000)={0x14, r3, 0x1, 0x70bd26, 0x25dfdbfd}, 0x14}}, 0x4844) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000600)={0x54, r5, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0x2}, {0xc}}]}, 0x54}}, 0x0) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='nfs\x00', 0x0, 0x0) 9m42.29488297s ago: executing program 5 (id=1235): syz_open_dev$sndpcmc(&(0x7f0000000180), 0x0, 0xa0000) r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 9m42.103491685s ago: executing program 5 (id=1236): socket$inet6_sctp(0xa, 0x1, 0x84) fallocate(0xffffffffffffffff, 0x20, 0x2, 0xa) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0186405, &(0x7f0000000200)={0x7}) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x80002, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x28, 0x2, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELTABLE={0x8c, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_TABLE_USERDATA={0x69, 0x6, "e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a074e0e46e35eabfb48a4cd2cd8379a97e705b01"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x89}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @typedef={0x4, 0x0, 0x0, 0x8, 0x1}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, 0x0, 0x4e, 0x0, 0x1}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x2e}], 0x1}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x1, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000000380), 0xfffffffb, r3}, 0x38) 9m27.024552691s ago: executing program 34 (id=1236): socket$inet6_sctp(0xa, 0x1, 0x84) fallocate(0xffffffffffffffff, 0x20, 0x2, 0xa) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0186405, &(0x7f0000000200)={0x7}) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x80002, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x28, 0x2, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELTABLE={0x8c, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_TABLE_USERDATA={0x69, 0x6, "e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a074e0e46e35eabfb48a4cd2cd8379a97e705b01"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x89}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @typedef={0x4, 0x0, 0x0, 0x8, 0x1}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, 0x0, 0x4e, 0x0, 0x1}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x2e}], 0x1}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x1, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000000380), 0xfffffffb, r3}, 0x38) 7m4.658605911s ago: executing program 4 (id=1662): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x2, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x40}, 0x1, 0x7}, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x102d) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', 0x0, 0x8c, 0x0) openat(0xffffffffffffff9c, 0x0, 0x4842, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) clock_adjtime(0x0, &(0x7f0000000100)={0x2, 0x6a, 0x5, 0x8000000000000001, 0x48c, 0x5, 0xd, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x7, 0x2, 0x1000000081, 0x5, 0x0, 0x5, 0x0, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x0, 0x5, 0x7}) r6 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x8550, 0xc00, 0x8000001, 0xf}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f0000000280)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x9, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x12022, 0x1}) io_uring_enter(r6, 0x1, 0x1, 0x1, 0x0, 0x0) 7m2.641477117s ago: executing program 4 (id=1668): openat$mice(0xffffffffffffff9c, &(0x7f0000001400), 0x101) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x3d, [0x3, 0xc95a, 0xfffffff3, 0x8, 0x80, 0x2, 0x1, 0x7f, 0xa, 0x4d, 0xffbffbf2, 0x5f, 0x0, 0x0, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x7, 0x7, 0x8, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x3, 0x51e, 0x4, 0x1000007, 0x3, 0x8001, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x0, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3d, 0x8f, 0x6, 0x1, 0x4, 0x5, 0x4, 0x5, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x10002, 0x12b, 0x8000, 0xc, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x3, 0x1ff, 0x2, 0x3, 0x0, 0x7, 0x10000005, 0x2f, 0xe, 0x313, 0x4, 0xea4, 0xb, 0x5, 0x4, 0x80, 0x5, 0x400, 0x1, 0x7, 0x400001, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x29, 0x6, 0x1000007, 0x9, 0x4, 0x9, 0x8, 0x9, 0x7, 0x5, 0xfffffffd, 0x3, 0x8080, 0xffff, 0x2, 0x2007f, 0x9, 0x8, 0x3, 0x4, 0x1, 0x7, 0x6, 0xb, 0x48c93690, 0x2, 0xff], [0x4, 0x1, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d5, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x8, 0x8, 0x86, 0xb, 0x1000000b, 0x3e7, 0x100005, 0x5, 0x4, 0x40002, 0xf, 0x8, 0x84, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x6, 0x53cf697b, 0x5, 0x4, 0x54fe12da, 0xbf, 0x5, 0x3, 0x400000, 0xfffffff9, 0x8, 0x1, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x101, 0x9, 0x4, 0x2], [0xc805, 0xbb31, 0x3, 0xfffffffc, 0x5, 0x938, 0x6, 0xd36b, 0x51bf, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x3, 0x104, 0x80000000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0xffffffff, 0x1, 0xfffff801, 0x8000014c, 0x60a7, 0x6, 0x2, 0xffffffff, 0x80000006, 0x5, 0x8, 0xff, 0x3, 0x2, 0xffff, 0x3, 0x8, 0x4000100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0xfffff001, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c0a, 0x0, 0x2, 0x1005, 0xb1c, 0x1, 0x1ff, 0xfff, 0xfff]}, 0x45c) r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$qrtrtun(0xffffff9c, &(0x7f0000000180), 0x69e2979a18f740d8) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_open_dev$amidi(&(0x7f0000000100), 0x2, 0x181) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000000), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}}) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207513, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x4005}}}, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) connect$unix(r6, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e22}, 0x6e) write$char_usb(r7, &(0x7f0000000040)="e2", 0x918) 7m2.396173602s ago: executing program 4 (id=1669): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100, 0x200ff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000010c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f0000004140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000062c0)="23db5037805f177d136115e6a1a5903469af39c1fb9cb38215fe64cff9f2f0444a57e22b0cc5cb4f74c9792365400d9e1c68539ea5eff0a5ed0864814d39251bee8dfea69aa052d900bc0c792e1c9752b7d3a3222f6a1ad3e44c1f65617b128aea51911861ca36ba7c96b96b2fba0fdaa49ffb2612f3e81fe565327dd9965a60046442c9dcd0d552c6a00388be3b438a08883c7349761531880294ad9887db97d8c2f74921c57910cf1f5cc528e17bd5c3746b6202f26d621535aac5f7872c2cb3295e42524b5acb249b2d1ac1b53a4e31271decfca3fad2e2f740768adf00875c18cb7d115150f83ceb73f77a1f61f1666c2bb9f6bd9f0fb55b3a619446e32bae2a1d99aa49e5f3822e048f8be44b707f2db10d7916ec9a10a695d573d871cf24959c3d15e61344a68309d186956537c6ea8532fc2e1c7649f8409d8dcde4c8ee1530470ac9c870f9f1837574e444ba6addf5ddb2dec67c0e76df79f265b403818dddb4efc27c90985ed69a48b12056e548f9c99edf80d2b195d26acb1127661727a0600257f4b2546513d03930a0638a71bd3223e51fbb75c832ef737907f2f4d3f0505f431ea02783c798b5c4579c99961fb73dc623a0d99c1b306435464d413b537d42c6444851b36482597140b22fbc0ebc7e795b2f96739bf139f5823bc869ede547da4f394fa1b1787836095e1013264042e53d5006ea059d0488cb2f5ccd44b30d25ea53c2dda71d112d7d441dbfc9f8462c99c098b1958c80b237d83c32f2759c9a9c081d7d7666a477cfda59354309b09f2a8b9f6c3077b0df1e8d0c71ac07232de4f437107cb0eb9b47b2267efe31938a337cf11cadad72ced56895bb14763cca5bdadd245d801e829a1eb3bb4ed851a345918efd2dcf8d38f66badc773068e6a2ef59b2bb838abd8b043cf6ac54550f3fde1bbb9e761095e4b8ef1891757d376be1f778142610c0acbbfc697f51fbb7a1602ed46e82813c74f41ee2bae818174809f3692084bea7310ebec3d6166702ae62aad84313e19b4d145167185ea8d53cb21d099fb592d7d7f8bc305dd375b5c0cd73be44f49ff53cee220085d4706bbf50c6f63b02e7e805e8fa4c73046a57a8700886da29ea53e5a316e7b011c44a0f7be5cc5cb5641ba0069ff591eee18966c7f005ef40046a5fe2bf325b2545b009867761264aa9611d184fa372ba3c5c33d9a50717210f7cec7f6dc4418a87a797eb6aaf6ab3892bd3f559547c88d8c29646c8173fad1588f52beb34ff863be65e7ec1598cfb465f270bd5532fa7035aae077eedbc846058fa19f58ffb1cf0f1863f6d33f2e5c454d18b66be766ca369af2cc9656fa34c6c10e4d4da44ce5e2370aaf60c4e130da331d3489e8f44c600246323409fdd35d11da27128c9d64be65dd3a90c1546a6eb9185cb6d3a4a9cfad0e41ea03896fd2346f745eb3563d7a79fd345b037c040e56f0677840bf9b0d295bcfa98b931464c5ce9fcaf745720deac2d8b4edeffc0fe6f089ed7c3880959fcf8e31f7b7054bc4f5c9d3ed3f66c968d0bc20b2d66c374f030f3f1965f43a98519e527caf693362412d523eeb38c8b016ff77f78f833d7513e4b5a53d5ed5143916673f822ceac9967b8788bc6428283181eaf8d99e48286aacf4f658a903e9f08659450f7f9483807c2e013a1d9d199f18886a8cb4e14d41c71e5731455a4394551281eca12a1bb6ae717f5da2949175d0f1f3d718b761dfc1099c7d9d8928c899ac8e936e69d19fcbfcfdee83b68ef8e15eed41a8ac0d54aa92d7d2ee58bb4799f378225ec9ba4709e5ce2b77208ecc85c22c64967a9ef3360c54d311b8917ceb7b432c90cc5e98de9327c1400f8ec89261b1d77d8874b0bbdd2c5eb59df415705de52b08b0e12c07fb7367c6d461c19f282d51e482cb4fb9ceb0249ac2d6400ca170fbd6c0063224179c616bb030a5c10102aa2eea92f1e6f5828590b250b09e6d1a9535c298a68160b7c281fecdd295dc3396c4e6eb3395d5a677d5fa95a732dfdef81f4346545dd1a74bb3aa9b516699bdf0a59165077ab459a5ffe0dbb3ef8afa7a8382a8441e0c36ffabbed8f93f4bbeb97e5f6a704bf63a0de9ccf8fef643ebc530a80920931002003b027014de317c42f861d98ef4fef66d232d9706e6bd263347384dadadaa43a7e106bbb21bd822d468ace171b3f04b996112135b63dcbd612b5888ec40da583ab549c340ddaf5d7406c3e99322c68874214356c1fd9b5f84348e629cc3487a901d1b7a2fa531b1509ac1c93de3da9f1c3773e3a2aba2b29d2419f240ae6d24ed9f14bf0b9b0f1e740a2db06dab64d6386f950bff4e4c94160ef4b832bbde3af4937b7528658b5c16a51cb22193fe99385721ce5b048d9338e289dcb40683140c413eca52c8e4b64b306f47569477379c864cfb3aa3e349262407d3935ab9a0916eb0f6db2be71a7eb8f9968dfac44995d5bff8ef617fceeaa448f5e5f8d4b39e3512fe7ae9ee1d8a0d5912b6148969ab0325f3f76e2340fbd67ce156bdf638140b3ccdb08e5049db15957915cb05db8901249b10c59cc5c3ff836290e3334eee2df387e44c57b4d6198c3749f5dc57f6c3de115ced6b43cbddd762b58f1fb40b2baf3b381febdc073142e30d2e9a1a69e8d86314221e540f195509d223b206173dc5406865d8064817c30c284c034035a63190ab86df3bae4168c58e01d2251748fd5d9d610024129e83a5730fe83cf0918790e6854ab765c78649b91c06655f0cb9e26d8432df78bbadd99583b6a8afcf177ed6f339e08c0b36a16c6d31d8a24cb6f2bc3ba58d7711b6f8b988dc3e3144be619548457d4f40509f17eeb186cb93a2928ecb951593d1907c8bbb9f4c8999caba3059c8e73dce54ad6f87bcd51d559f7759902b14e68d3b845c0b179b38f4e6f0bd3a89cbcd5ebed9972102048647da1eda5c8456442369f4ae871d4037ba26f27d27371ce57e23adca5af8dc93f934f2ef8d69ad3b2db66657b3868dd839c2b522f5461f24407ef091b77242fc70a48b7eec45f3bcbcfbc6bdc36e4b67295020a345233a32a0a0af4d03a53ef67e69716d5ae35342722afbe7558946475a9ebf5b39c18558a0011f68bc8a78590b0cb63618379a512790c42d94bb239dd3ef5b8d1036cf0391aded8802a7a447c38f231ae611aeeab9bba44cd14369473758b64108d0bc9b6bc9e9b497c2d1d2acbae7c620a55c226cf371331688eaddec61fe961c5fcef71dad45820ed0ac8dc7641d82150f1318ac15aa41e7be585b6a50da1b3cd95239ee61cfde15aba80ae8ebc21ba4540883c6f44cd35b6b97da4640c97f5a2b6efa8d184fec823abc754ab8a0db6c45c2293e90d9c154c4a3e0b9ec2b6113ce6583b80f0d234dec9a9815067244733e2134b9ba93bb9692fb44200bb5501bb109f2401e8baaf0115d795bb0346dfafaf953bed8e9a52a5b9b02d490c55fd89daf311ad5e08b070a9571f696d6df4715c8b69b840e4e03d6f361326e20d9546c47b3a63163e7df9bd260621358c166177ee7c69ed63a8c43dd4a78543aa9f922c0ef527f4aa61ff65bb14595f518412ce25a1e103df89cd4b363593da16c11d80a23a9b5ad8e3a7be8f697cecf82c8fbd889a4f743c839b67f7ba5453b10bbf59b1e4f4e821872c061a4125c0c15c1ca5164efe61a58bb54dcedc849800a6021a448d4660c3b85e2362b7cd8ce95156fbf408a09a30a8ccfc3554004e9f9a35382907eec00617e2ae1f8803146bc8c28b4f3bf3c6b183ae9248e7f05c4adce3e0b7ff29252b5be9b19431e3fe612d471f52c5c34cc12c83049189f4d2e5ca516df78766ba3449d07ef9436c68052c986d9dde8802c931194e2ce34acb8cc26663a09348b15c6c145d26306bded0d1f482803ae6dee26562b03fcb183b69ee4a0491e8776ecdadfca395cb4eac2948d4d64321a4e669f2f663eb54f05f12ed9c685835c3e79f982152dbe701073b9a4ab2932b46ee2424a5e18bbe5f25ce0b898ff6937927f4670defe430ac86021226ae055daf39b535cdc0899fcc99d15e67d66bd2dd89bb21b8d2689a8af10a1b0bd44103c469922c36fc0228d7b6febf5e366dceecf8bb1db385c8ab95d86ff09b76c2fa6282de81fd6864c495a4c8295df61a2548e1b81c3e3f30d7a41216801d6c2d1743f66ae2055756083e8bf403d436b8244ac214f4d84a693d13f299ba267401d094f2df70840e8a980622794212f0992ecf5a47980ab2cf7d5a6f12b0a489af3c3c847ac59bc89f36fbb0e08bf283b68213a17de38b3a45eade6f0b198def408f7711c16367bcc0ded794a9a323c7e7f07fad96ea9c4d7344c26e43844a27c21076b8d7cd07677602d91eac825eb5fd0631755c2dd1dbf7bce3eb3c3f7377fc6080ecd0b894e29769845725943e25932d4249abb4ab78d4e2ff2e2df42c8d884cd6bd13886cef080c6491c217abae0eec6e9d4d49eab6657f15cfd38e6cd6d0bd33198c4685ab302d0f46e42f4a5d5bb7d2840a0a8817b98a856700d4de74351896fe7d7d5a0d1bc57fb4c828aa51f9637807aeb905780f239527ed4affd83f68be8b7ad1e10d9e797ba39cdee24f7be0a0ab0ac22ea3968dac61eb4bdd522c9ce570edf63a439abfd9954bf6a16c88d86157d05477200a83255cde279b454979cee4de00e81cb44acdc4295c877566a749ab5b91d250f03d46ecc14210c196700338eea028c930ce104f20a9e7fabb0ad1d314ec1a2d97d1d1b9e09114dee0e3e513eacede01971ff85dc98634156073df4e8acd6c3aadd615adaffa7a81573813bc4ca21886ddd532021bba5c84b34c34665534db48d61903a03c1cca4ed955ca92c1e33b7664b494e3db6d1e637a49e537808a2669ebeca301691acd4fab0af197b9c7db01b7862466b568ab3a4712a25210264fb297a6b679dfc3fceb65bddd1a23d5b507a0d6da83d73b716d971c5179a92e57b9b93451eb943845a549de737f2d082a83682c32649b4941e787758ead9d2c256b2b4ed1e0255952ce83cccecc39e5bbdd38490f1960b26e5379943be3d9a64b5149c84d577e5fd099560baa292befa06ce9065fb03ed432a9e055ca4ad0e952f8368b3d230fd5239726f79f4c98a0b4a9648382b245d324cb61049562f765f923fc657ef36747658494d78590a1e27a2d09856acf50c3b26271c6d5aa96e8ff9bdb9043859665e21ea53a050c335cac414bbf27b0328ac2c7450acb26b093bf232358afd1135ee50ac3fb26b5f0256ccdd37033c8a59740607cfd549d4c6540afe4a6b4425ae1f633872dcfb5da8d0547cf0c4888817b71fbc7c45b2a641e9c1a76b6a6be124402422ada35edc02ed997d6b87b361aee95a16d2c528d89a52fe40dfd83434969bd86f02e63fc1ae72941209af39a08cfbb4c320bc47d853f5dbaf0cd60ec54608aadbc382fa6b5cab3e9cac57bea26609f4c79f6a6b4eb4a9336fa95783b0c0c366f36d5d6b8310b3cfdb800207919a131bc7f984f7fa11fd0bf2c89e060e9d1286e453fe97363ef72bd6eba29a85ffeccdc3bee72e12284333a5a40622c01619558d2750fc45abfa22059ebdf743f8e50ad29770d19f84d8a34232d6918514769b3bb2a1ea5e59e9556332ba669675764458e9349a1835c501a93e91dd3b31018979880a9913f54ec1e8526b8cffcb776b97fbb9424faa5c5eb60d2ac74955bba4b5182571d0d9f84f0df1baa722b20a78c9c0011c667f688b58489c9e450d83e40ac5eb41c5564b6d76a226448abe4a3f499927074125aa9c0e7e704c36df5bb110a0f15f8433a470e81db414827d5ce21ca1da1c8d51d746d1e1ca110127c15e92afd75d3cd05ce0b632cfa03745de3cdd4b57373d46676583c89f045c26c6fc5793e5489555ced08f83ba351135834a2028113c319af30cc85bc01a7f8208822d7d607aed0d2e12c80aa009100441b75beaccfe0adbda7e8bb870edf4963158794c8c3a5baacf6eec7b5efaefb7602dab8409d161beeb281cba21f1da0ccdc092d0433fb940d79699ffeb87ea775829a6e7e3b308a2ee0b7aec8ac5f35eed61be374c7c77196f7119a8882deff68230f461cb917b0ccb2b8597efcbdd1003b7b77b2c601ebd4b45c35b8426f7b9138ab3df0ec00819604ab8e1e64cf2aa2282b1269585af127a268cd207f964edff172e555398a16df44bdc52889538c3a27f8fbfffb61f7aeb55b259952bbfea81d73058d8b0f78ece9dc08e660437d21d4e3ec38b19e5afda7a6e33023f9158db8a1c14dabd9b8b307ddc66927f7b19df5e0da2237d98ddd890b81f1963808977d02198e8ae2e97419dbb1f8e51cad36a3424b955500fbdaab6ff8dbf028708b1f951fe43864b59b6c2368b816c98023d4480a91b3f1059e9c214bf55a7f8c7da907f79ff5568fd787d3aa022ab9d03cde551f7e3295f02c4f3aa37e4cebdd968c0f82f09eb004fbdb1a4ef3a0d426691bde3964c29ea65622f5d3ffd854053545ba1ec164495e4bef4845439c058f9438d13be7922b656db499c246ee6176a15b97e6a68e42f0c703033b699504e1f92b43054c7237199bd013d96faab47433b6b3f91dc66368706439d4ef7da3942ce8b9c1c9a9d0643fc4540e7d3f1c3821267e866cacd3e904be9f9df80381eec09eb2b0d745ff03ffb199b917a14fdd8fbfbffe8bfb0cf7023aa7183301a8a41e7097ff9f5247f8b78f7d08bbfc596a81047807cf0929677222e7e9e921b294e04088c3746d8dc19294645f1c093a21b4c5e6d92e54dd90465b11dd5d9d42af849070edff4ec63970f4088daaa33afdebb28d01df5ee043a8150ab1b25d864ef31e20c84696596cfbea92d02ea29c4a3933c41ec68aee7d68d7eea7f30d8920e14e62be42bcf856d7a58f46fdb2438b023e974f77281c5a462553627e9614504cbd3f1cae6e0fd9f7e89d9bce48946d0508616fbe542303dc542982c61d7bb4afbf3e76bf1fb2381cdc99f2175ef944dcd826aabdca2b7678db5262733c69ce504c38e7deb7adfb9b6d8bb00d8e4251e0438417ea615cde58bd76c2427b3d7a0578bbbff9fde2abbc5d60307aff0050b18176158aaedb34e283886378ff798b4f74e0a0c95d64271f1916280dd247304d9201c67f5e2640d9706add8703cac81795a0190107e2bb2941ed13738595da1c86ba0f68e2283a435cb5f162c74071a13dfe2266d05abaef080dd6b1dade115e883e04f0bb4be4d91f535ae6f822b02e814e65d2b7807d199a23d3f26209f6c9f93602a3a93ccfdebb5f8161b7928059674e15820d1848a980c8d1af5a73aadc5c402fbb6e730ba51227913ca27f0d78d331d6325d0a7926c238296b2a22b10a69cdffeb087dfe175511ed8e2cde8d7dae140e4ce92f892b129d9940e4a30b19f822ef7611b8750eaea8e55502604b7d2358c09a217af8be6c86d67cf6ff6130c971c9765d56631fe6224fbe1e833d497b534fbf6b030af93691f59295279aa1bdfb5d5d9d4668d5aea70e2b8fc117df0042e91c7e6225f27329727ed6e14a87c7943c040dfee4e5c06a20251c39a45ab4865951b0daefb9c05571fdcc21d1761945bd2b8047ccedd6f1e708646fbe61e75bb2728e8cee893d7e6f642119e786155a6cbab057d6d83b77716145119e974ad7355179d2adc3d748fa249cb58e32e6791d646240c05da4427b2f359976c8fd1486c604cb7ee647e24633d8fca8314cf1f85110ca6351156a2b26e44b040f7d2810acd36f45a3969c1fafd1a7e0bc14fd9b26593375be8e750c3f6534ffb85904d15d75fba05dac4a673de97f7543ee931724cd35474cd7ff5cf3e8abaf206f3030e92895633fa9d8499ea763601560260109dad18bd64b990531fc5377e6eaa5da050b98e1c6515ea48c7de1a15b63283d4a694cbad379356bfdac50e6c343879e29f6b9ab425600d51f257ceb35d0ca00f83cf5bd734223de716747614666ba1f1a8fa756e5f3ff0fc94fa4bd4073bddb0098cf565ee40af5732ee9218d262e5b64ad6b8118c54eeaf7072f2e15514a401779b425fa89d8abb1750e56cc3108dffdcf2d3fd86b8af4560d56f7ff0702154211f9949e3992d93e66892b297fa2d4bfe18de3fd74e96c9d30eb14fd458fdbc9e9a34e00f3280dd732520147fa2a8fa83e91dd0687501466a300015bf888c03fc08190c2753d7719acf6f84885c4c5642f466c1984f15a7716a9b608ee5f1b395726bcc8519766667d24d11e396e62ea39640c9e73e4e9e9e5076d7019ca1bebbd7097807f46b3b6fcb96ed4b433b25ec551fb176a5fa252ed1d81b0350cfdfb8069c9916495bef3a262b6668910896c0b37eee40547c663a901e92f41b417ac50e88d058d021a8f9a5783bd936cca4962bec1c9886689cc547970f9215232596392515182e563f720bb79d29baaabf0e2697de6500bc677e346847011ee3450358c0b16ca528368b5cbb8df5ab974a3cef072d20c9906fa585e0f3083ec6d8507b8561f64e65aa1aecf825fc47ad1459c87771549fd5c9a9cc094e7b1179ee1e90eff7158f28f59f029d90e708f4ec50b4f67d8b4bb7140065528354a7e25d63e92977183a0284ec22aa923210f0bfea89cca53547137381e5de0f60bc484bc2daf129b0380244f1ed4bfb674eb2791e76dce33cae684ad36620d5d67cb587f840caed316b7439b0e8c3de0e065e62680f3997369be3466670278168c9a1a644d870e3a8d0a79b2b720e8c3c51bb9133532beee64319e98714bb2e6d5c0b723962d923b0ef454361d4b3cb470bf8c39031ed4a75267f499741be15aacac92d8e6afdcb01a2e7d2dbf549ceb2a2108c4079c620f05ca1bd31d631c2c8d35ca0d73155f56ed020c25e389db356edf510ae088d11b5e4fed51d0dce4d3aa04924b09c28200ede5bec1a8f38cc5f081055e0f28d75afc4d588ca0e828d00085d150beafdda17b8df9e7d9218ea7d81f2e076412901c5ae04d6929d717fea2fcc8e5a1e69dbd7b5258799a2fa5eb108b6cc35dfab599fb27e6d75f1030b83f452af8137830337141f031942eba83123d3f87b5f01623d4613e5a44b4952c300baf3d4d3dbbfb0ad024a19b3810a174ef8453d85a25822f66e45eba2490f29de1077683ccc32e3517f88b51e010672a982f7c8591450c9ab1573143aefb61c17ebb0c92dcb0494d116b970c2a827a6b3608ae10d583d1f7d092263fa873de9f31cd59bc9491ff012059b63a9120af89477f2ccc34eee7bd66de60af64730c879128b49d31da6400c2471e0d5abf707e560574b477b8e20ca45d92182d639eb434e14aea1a3f91ad8fb60e4859b77389753990513181ea3a82884235e8520294359435cfba220502b591fc28ac36ec697442657d290bd7aad7fce53a3f1766f2bf7d55c24d7c0e9c7a71d6f1282ea1478e0a36378b50e4fee281f686bc53f50138036e2a5d6199d40caff084fde7b63b3c0a47da0791107c3218330f7c2e2c7609aba202fae5290243b6033379eb15edc572eee452008e04c9b53efd5f3d88327317b38934745bc3de4c55bd818febc7a7953bf03c4029f77177c2a974310f0485aa46252f1000dc71934947287c38ea5854f29c7b82f630afb8caf1fd880670307b155a6e7feddc019cfbbbdc18f3bc03da3bd371d93ccbf56bcb39eea55c2d113efc148127c30089d21ce6a5088dbfbcf8f8d75c19456bc962c371548634a95382acb5a0886efc46a87bdc111dc0d1e54084cea0d58054f00762c91d7fe0f0fbcf4c280f29f9cd5999a5e8c6f507f8080d7c7ea9a8685be50722cf1a082f3728dec8d6152cdc72f8da6b1805643c042f4f6780ba79cc8a2165d9d7acec8ab2f421bc3e77b51c62c4bbb262b5674ea7d2dcf9acb894d050e91b052364322a5b08bd9667249571c004fb495da7e24fc5620adda3af6848ccf238911a52bdbff766e4e279ac274afa2c2302faba25b5fe98d972a04aa13f77c0c05d7dd82b0a19f1ded8cf5f99c80e392b0aab1264a29e9fbcf0b69f6b0a9f2332e09ab74dea7277106d0883bb264e279c67e5bc69009225bf4fd1a8532f9392a011b55a73a7cf8d16a59d695b2a65b57fad64a2041f8c28804ee1a48845c5dab757d04f1d95520aa9ddb69904d6529c0e14bd789dfe37067073b3e0e136ae2aebb1c34c55b94ce942f786be4b45f801f35f7c768d91a460b92ffa57ff675f0b4b00437a07f871a8650f21b2bf7c722c1d9e860e8955fef5699ee53a5f6fe46fb9e5e17a1c69fe2538af4718b7215ad2c00c3d420589a8653ee511b809945451fb8205b19ce377c8d0253b05493c557cf2bd8ef208e8fc01beceea1acca38d025f328f28d69bcfaa3adc6d9573a3832dc3f3c758fe08cf9cd0c32acfddae81b3682869e8aa9725b64336252aeb2ee8eb78f0721aa3158217a3009948adb297c5ea45ec26cb6d963c7be47ee1b93fa136ebe73a21936df0148fa311206f8bca2e80719aeca8745ff74ddaad5182644762c66333f942d9a93c467d5f9fd5d0dbbe57480362d4bb0f760294f4eba3e1b08047d256dbda157635d21a43aff3a71f6ad574b402bb36e5270d7ed082c6fbae07771721513ae9ddb22d23b00733046c898ee6ac05ef8a51ce41919e1f241cb98e0592ace68214620ba1a748ef81131661f58f1635713ca2873e150a3e848c8d2ebd039769fda112b73050efa4d1c35dbb46ca5a7b7ccbed1dcded36af272f6838b4c1e7e6778e7e9ca3d794f275d49c9e32e768097349118d2337e7c031ada38d0cc5c04c286ff93083f6d58d73a821118c93432fda9a8c76fa2cbcc093a7decac8e4f001ecc9f67faf1c2f102120f0618469cf653bbd5fcefd4ef2bae86dc4f5393b840f9f47140cf7f46a186c21878a43612a71d3b540b9994f010ab623f878264cf46c7366d0bec5d43d481b47846091fd3cda73a9a28ceb7f839eca695c9f084a16c812475f6575ef2368c88cc6655f47663ef69ce4779fe3ccc4dd85a07a9e4c6f39f42690d231f5727f45c247a53fd8df029fcefda4f328658435892519c17205a3c715ad6bb7387d09a5e387c83f008daf626f5977c66203af1143ef7b59ccd8e3c17bb156bca317861f0b9f222ea63c044075a3a74beaf05c23d0a75caa60397d831bbe507234fff154960faf0f02776d3f9038c955bf0c1ec9c92523cf0b855c18d6ac3b35d437796420ba3dfd581dc6adac64315c1cb1a2c3a45ec4655bb2bd6e0b4a3082281ed0697a213d1d93142e96b4fd57431d2f4547451d008ab58bcd9765ccf3ca3297becd5de9e2be0263cfca09935c9334b5e687bc7e7057dc2ed03873be22200c9fe32a9497dd00a336cf4c723ead302340b5cd1fef8cd88330a9089fc93af4ef739295b94407b291bf33f4f39c936736e1166106428f8796a4b92805f4dfcf46d8692b54e40a9e8584c0eaac4caada87bb33f553eafeef5051b889402176ab766936a38ddd7e5205d2c87e133a02e84ab24ba2d889a4c4db8cbe18b271455e84da716f4a32acdbc0a5aaba25a2ec757c73847dd1c4ccb2967c651e5257692a4553dde227846bfe2977021805f46a287c835ea8dc5", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0x7fffffff, 0x19401804, 0x2, 0xfffe, 0x6, 0xcccb, 0x0, 0x0, 0x1, 0x8001}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r2, 0x0) 7m1.36836772s ago: executing program 4 (id=1670): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000a00000005000400020000000900020073797a32000000001400078008001340ffffffff0800060000000000050005000200000005000100060000000d000300686173683a6e6574"], 0x5c}}, 0x80) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r2, 0x0, r2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000040)={0x40000000}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000001c0)={0x10000014}) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r4) ioctl$KDGKBSENT(r4, 0x4b48, &(0x7f0000000280)={0x0, "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"}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000004c0)) sendmsg$can_raw(r4, &(0x7f0000000240)={&(0x7f0000000000), 0x10, &(0x7f0000000200)={&(0x7f00000001c0)=@can={{0x0, 0x1, 0x1}, 0x6, 0x1, 0x0, 0x0, "c20c52b424f61e6f"}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) mmap(&(0x7f0000980000/0x2000)=nil, 0x2000, 0xb, 0x28011, r0, 0x0) 7m1.153593827s ago: executing program 4 (id=1671): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_emit_ethernet(0x1ff, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5080010090780004920f772666cc5f9b580b4c82f2c41702040101220c43f2fa83fe11ab2eb51313125a139e790bab123fd55cf1007b5c45dd05060000000101037d1e03050402003e953ae5ea00b79be7dd29431d518f914391d4d7ab8653fdca1d20151c07c20672186ff058e69cafb5ab1543bc3a8c0d86"], 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0xee01, 0x1000) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7b130000020a0400240012800b00010067656e65766500001400090000000000"], 0x44}}, 0x40800) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) r5 = syz_open_dev$evdev(&(0x7f0000002780), 0x2, 0x0) ioctl$EVIOCGKEYCODE(r5, 0x80084504, &(0x7f0000000000)=""/103) 6m59.138134053s ago: executing program 4 (id=1677): mount$tmpfs(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040), 0x1800040, &(0x7f0000000c80)={[{@noswap}]}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001040)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x844) sendmsg$nl_route(r0, 0x0, 0x55) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f787e272b122ebbff6884b3de82f8a3df9a", 0x48, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r5, 0x4020aed2, &(0x7f0000000080)={0x6000, 0x100000, 0x8}) clock_nanosleep(0xe3a30f1b640fe9a9, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000001800000000002005300000085000000a00000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x20, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6m43.959126751s ago: executing program 35 (id=1677): mount$tmpfs(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040), 0x1800040, &(0x7f0000000c80)={[{@noswap}]}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001040)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x844) sendmsg$nl_route(r0, 0x0, 0x55) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f787e272b122ebbff6884b3de82f8a3df9a", 0x48, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r5, 0x4020aed2, &(0x7f0000000080)={0x6000, 0x100000, 0x8}) clock_nanosleep(0xe3a30f1b640fe9a9, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000001800000000002005300000085000000a00000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x20, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6m34.211788462s ago: executing program 2 (id=1738): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0xffff, @dev={0xac, 0x14, 0x14, 0x17}}}, 0x69) connect$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x3, @remote}}, 0x1e) connect$pptp(r0, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x202, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) write(r1, &(0x7f00000000c0)="af056226", 0x4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$PPPIOCGFLAGS1(r1, 0x8004745a, &(0x7f0000000240)) 6m33.853185669s ago: executing program 2 (id=1739): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, 0x0, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012ef", 0x58}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361", 0x35}], 0x3}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) read$alg(r3, &(0x7f0000002300)=""/4128, 0x1020) close(r1) r4 = openat$pfkey(0xffffff9c, &(0x7f00000001c0), 0x10000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'gre0\x00', 0x0, 0x40, 0x399d802816cba6f9, 0x3, 0x9c, {{0x6, 0x4, 0x0, 0x8, 0x18, 0x68, 0x0, 0x3, 0x2f, 0x0, @empty, @multicast2, {[@noop]}}}}}) sendmsg$nl_route(r4, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@getstats={0x1c, 0x5e, 0x10, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, 0x3}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmmsg$alg(r3, &(0x7f0000004740)=[{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000100)="2326eb3bc485ff633bcd9debcc0e6904c4d49561c4054d1b2d20548f155c7a88bbe137c77bf5b4f8e51fa3c7100816", 0x2f}, {&(0x7f0000000580)="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", 0xf6f}], 0x2, 0x0, 0x0, 0x4}], 0x1, 0x43855) syz_open_dev$usbfs(&(0x7f0000000180), 0x3, 0x101180) mkdirat(0xffffffffffffff9c, 0x0, 0x3a) r6 = openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x54da04, 0x2) getdents64(r6, &(0x7f0000005140)=""/4103, 0x1007) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000001580)={0xffffffffffffffff, 0x2, {0x0, 0x0, 0x0, 0x9, 0x80, 0x0, 0x2, 0x0, 0x4, "fded2f4458fe0147ecdcc85fe4d3d5ec8a6ed12f3719d20c92100b4537a86364cdfe2e60d8361058bb2877f86546689003d68459a21d0def84d32a31ec385f09", "d921323ade6f38ae6a34f3226f80ba4500e453fc7b11287a33c00bd360110e9c103e1f0cbc6452bdf655f42426fafe4bcd8b29a8b6c13f969fb446c891b11ad6", "8045e79077a9564fcae36e2b8b34b109abec9d40ac2532ee2b453d57d05a5006", [0x7ff, 0x5]}}) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1000000, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2b00ad, &(0x7f0000000200)=ANY=[]) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 6m32.925358604s ago: executing program 2 (id=1741): openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x47f}]}, 0x3c}}, 0x0) r1 = socket(0x18, 0x80000, 0x0) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r2, 0x80086f53, &(0x7f0000000100)={0x24, &(0x7f0000000140)=[{0x31, '\x00', @buffer={"fecd1c86a4b825f4d8443e5e5147af7a5c376884927c1e7e2e7e86497b1d7c32", 0x20}, 0x5}]}) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r5, &(0x7f00000003c0)={&(0x7f00000001c0)={0x1d, r6}, 0x10, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="0400"/16, @ANYRES64=0x0, @ANYRES64, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001000000", @ANYRESOCT], 0x48}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_newneigh={0x30, 0x1c, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r4, 0x80, 0x7e, 0xa}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, @NDA_VLAN={0x6, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', 0x0, 0x0, 0x2) r7 = socket$key(0xf, 0x3, 0x2) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b40)=ANY=[@ANYBLOB="4401000010000100feffffbf000100000000000000000000000000000000000000000000000000000000ffffac1414bb000103944e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="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", @ANYRES64=r7, @ANYRES64=r1, @ANYRES8], 0x144}, 0x1, 0x0, 0x0, 0x801}, 0x10) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x134, 0x18, 0x1, 0x70bd27, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@empty, {0x0, 0x4, 0x6, 0xffff, 0x8251c, 0x802, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0x1}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x134}, 0x1, 0x0, 0x0, 0x8801}, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="6605b7c37fc4c0f752b1e4ab1eeabba28599b1ac7ccdaa80149ca38d0ff28ca2e5753cfa8cad62cc7d3754dc2e2e2664e210494638e7c7e5e30c8e50b1a66051aedc1e599b349f79d38c430670f57b9983e83732e7ac964f702fad2c9c5d7022354b98716342d5579e7fed52395eb383a62f6a87e40244f4ef01e1d30518caced3d6a83ef39791b836d7d8b52681914bcae1e72258d4fdbee05ae082ed5ab0d2d712e7a619b12f08b0838d6a9e28cbf3b2497e8b8076e6ce7d5a170895ab4601895a4cdd"], 0x11) 6m31.19749112s ago: executing program 2 (id=1745): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0xfffff02d, 0x2080) syz_emit_ethernet(0x36, &(0x7f0000000200)={@multicast, @random="d8be17d19221", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x23, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2, 0x0, 0xe7}}}}}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9f0901001800000000000000280000002800000004000000020000000000001103000000ffffffff000000000000000200000000020000000000001302000000000061002f08000000b4bb5bebbf2cfa7e7a65754b50f0317a79531b5ccf0bd69a54b07b3a5cba35ba2a7a8f47d99902e07aa07b88e19bcf851041fbe50cd56e988a7ba42c906d67a2ec138ace7b449586"], 0x0, 0x44}, 0x28) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x8108}, {0xffffffffffffffff, 0x441}], 0x2, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r3 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856afe13be00", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x40004, 0x1}) preadv(r3, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0xd) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="d800000019008111e0020f060d8107040a60090000020000000455a1bc00090008000699e3ffffff140005000800000006000567b8b7b940020000090c0016060000000000000074d67f6f9400f7d1d9bbe94fa27100a00774cf93adbb50877c98eba68ff29aa2f7617f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a15007000000000000dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b694138c9f1ac76efb42a9ecbee5de6ccd442", 0xd8}], 0x1}, 0x0) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000300)) ioctl$BLKCRYPTOPREPAREKEY(r1, 0xc040128b, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETENCODER(r5, 0xc01464a6, &(0x7f0000000080)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={&(0x7f0000000040), 0x0, r6}) setsockopt$inet_group_source_req(r5, 0x0, 0x2c, &(0x7f0000000480)={0xc41a, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}}, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}}}, 0x104) 6m30.03928434s ago: executing program 2 (id=1749): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000007000000df7f00006e45000041010000", @ANYRES32, @ANYBLOB="0000c79bda1aee00000000000900000000080000000000000046cf7e0adaefdb985c38861e3b5571e266313d9b3e404ab2860c6a87f6ee06e40d08fbfc9409d19e625c2caf4243e59a7784776b960951b4030578efc6e7b2f9495b6b881be166141d7d8e2d3532ef44f16d475f5472413cf52c49dddff25a6bc8351df533a6c25aec61e9", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000fdffffff00"/28], 0x50) (async) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) (async) setreuid(0xee01, 0xee01) keyctl$setperm(0x5, r1, 0x30925) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) (async) mmap(&(0x7f0000370000/0x1000)=nil, 0x1000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) munmap(&(0x7f0000af2000/0x1000)=nil, 0x1000) (async) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40, 0x0, r0, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x5}, 0x50) (async) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x18}, 0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x24, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @alu={0x4, 0x1, 0x1, 0x4, 0x1, 0x14}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='syzkaller\x00', 0x2, 0x2c, &(0x7f0000000240)=""/44, 0x41000, 0x20, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000002c0)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x1, 0x10, 0x7, 0x6}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000180)=[r0, r3, r0, r0, r0, r4, r3, r0, r4], &(0x7f0000000400)=[{0x1, 0x3, 0xd, 0x5}, {0x5, 0x1, 0xe, 0x4}, {0x3, 0x2, 0xc, 0x4}, {0x2, 0x4, 0xc, 0x3}, {0x1, 0x2, 0xa, 0x6}], 0x10, 0x4}, 0x94) 6m29.741882629s ago: executing program 2 (id=1750): syz_open_dev$video(&(0x7f0000000440), 0x8, 0x800) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$video(&(0x7f00000010c0), 0x8, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x25dfdbfc, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe, 0xfffffffd}, {0x0, 0x1, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffffd, 0x0, 0x20, 0x4}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) getpid() r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f00000025c0)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0xc) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r4, 0x7f}, 0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r5}, 0x18) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) ioctl$USBDEVFS_FORBID_SUSPEND(0xffffffffffffffff, 0x5521) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r5, 0x0, {0x1, 0xff, 0x4}}, 0x18) sendmmsg(r2, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000440), 0x76, 0x160243) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0x10}, {0xffff, 0xffff}, {0xffe0, 0x6}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x80000001}]}, 0x2c}}, 0xc840) 6m14.447063504s ago: executing program 36 (id=1750): syz_open_dev$video(&(0x7f0000000440), 0x8, 0x800) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$video(&(0x7f00000010c0), 0x8, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x25dfdbfc, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe, 0xfffffffd}, {0x0, 0x1, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffffd, 0x0, 0x20, 0x4}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) getpid() r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f00000025c0)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0xc) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r4, 0x7f}, 0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r5}, 0x18) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) ioctl$USBDEVFS_FORBID_SUSPEND(0xffffffffffffffff, 0x5521) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r5, 0x0, {0x1, 0xff, 0x4}}, 0x18) sendmmsg(r2, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000440), 0x76, 0x160243) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0x10}, {0xffff, 0xffff}, {0xffe0, 0x6}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x80000001}]}, 0x2c}}, 0xc840) 4m48.223468266s ago: executing program 3 (id=2003): pipe(0x0) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d888f1d1c4e5ad85ce4966dbd0000002b0e13e735a31847123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004000000000000bf852c8986626691b01b5f44e4ce2d712d2828da0a94"], 0xe0}], 0x1, 0x0, 0x0, 0x80}, 0x0) 4m47.840350559s ago: executing program 3 (id=2005): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a002800726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$kcm(0xa, 0x922000000003, 0x11) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}}, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x4, @loopback, 0xffffffff, 0x1}, 0x80, 0x0}, 0x0) 4m47.56423886s ago: executing program 3 (id=2007): syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x80082) syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x15) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) socket$packet(0x11, 0x3, 0x300) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x7fff, 0x800000000000007d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) set_mempolicy(0x6, 0x0, 0xe0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 4m46.141002851s ago: executing program 3 (id=2008): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x20, 0x0, &(0x7f00000002c0)="b90103616908068c3c270040e700009e0dc5cf1d66fff2fcffff8100632f0806", 0x0, 0x8104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m45.135250374s ago: executing program 3 (id=2010): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) 4m43.359971129s ago: executing program 3 (id=2014): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x5a6, 0x4) bind$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10) syz_emit_ethernet(0xc1, &(0x7f00000004c0)={@empty, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000002", 0x8b, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x2f, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @private2={0xfc, 0x2, '\x00', 0x2}, [@fragment={0x2c, 0x0, 0x80, 0x1, 0x0, 0x17, 0x64}], "e35527a821fd7eb7d1cd1db333b5a3fdcbc01154c69424cd391c6c3959c0436eb0403cc8e7f25d0d1ce444070f634e525d1c0b689b08137c114acba0f968dc35ac0260bdc1b7854689c54529ba5b0a9c000602"}}}}}}}, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r2, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r2, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, 0x0, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$dsp1(0xffffffffffffff9c, 0x0, 0x20080, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) shmctl$SHM_STAT_ANY(0x0, 0xf, 0x0) 4m27.772822667s ago: executing program 37 (id=2014): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x5a6, 0x4) bind$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10) syz_emit_ethernet(0xc1, &(0x7f00000004c0)={@empty, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000002", 0x8b, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x2f, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @private2={0xfc, 0x2, '\x00', 0x2}, [@fragment={0x2c, 0x0, 0x80, 0x1, 0x0, 0x17, 0x64}], "e35527a821fd7eb7d1cd1db333b5a3fdcbc01154c69424cd391c6c3959c0436eb0403cc8e7f25d0d1ce444070f634e525d1c0b689b08137c114acba0f968dc35ac0260bdc1b7854689c54529ba5b0a9c000602"}}}}}}}, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r2, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r2, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, 0x0, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$dsp1(0xffffffffffffff9c, 0x0, 0x20080, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) shmctl$SHM_STAT_ANY(0x0, 0xf, 0x0) 6.831710986s ago: executing program 7 (id=2924): add_key$user(&(0x7f00000000c0), &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000380)="7ccd08", 0x3, 0xfffffffffffffffc) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="10010000", @ANYRES16=r2, @ANYBLOB="050427bd7000fedbdf", @ANYRES32=r3, @ANYRES16], 0x110}, 0x1, 0x0, 0x0, 0x4000401}, 0x2404c080) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)=@deltclass={0x474, 0x29, 0x1, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xc, 0x1}, {0xf, 0xfff1}, {0x3, 0x2}}, [@tclass_kind_options=@c_hfsc={{0x9}, {0x14, 0x2, [@TCA_HFSC_RSC={0x10, 0x1, {0x3f99, 0x70, 0x5}}]}}, @tclass_kind_options=@c_htb={{0x8}, {0x40c, 0x2, [@TCA_HTB_CTAB={0x404, 0x3, [0x8, 0x2, 0x7, 0x5, 0x3, 0x5, 0x5, 0x7, 0x0, 0x2, 0x6, 0x6, 0x2, 0x6, 0x5, 0x0, 0x6, 0x6, 0x80000000, 0x1, 0x6, 0x3, 0x6, 0xc, 0xfffffff6, 0x2, 0x7e, 0x9, 0x1, 0x6, 0xe73, 0x17, 0xfffffff7, 0xc, 0x6, 0x10, 0x4, 0x6, 0x7, 0x5, 0x9, 0x42c, 0x8, 0x4, 0x2, 0x9, 0xff, 0x1, 0x6, 0x2, 0xf, 0xffffffff, 0x5, 0x8, 0x1, 0x0, 0x9, 0xfffffff9, 0x1, 0x9, 0xf, 0xfffffeff, 0x3, 0x0, 0xb72, 0x3, 0xf34e, 0x8, 0x8000, 0x6, 0x81a, 0xe6, 0xa, 0x7, 0x6a83, 0x243, 0x1, 0x3, 0x2, 0x9, 0xffff, 0xe, 0x2, 0x10, 0xd1a7, 0x5, 0x7, 0x3, 0xf71, 0x6, 0x8, 0xd42, 0xffffffff, 0x6, 0x0, 0x0, 0x41da, 0x4, 0x6, 0x400, 0x7, 0x8, 0x8, 0x8, 0xa, 0x8000, 0xd, 0x2, 0x1000, 0x9, 0x0, 0x8, 0x5a4c, 0x4, 0x8, 0x2, 0x8, 0x401, 0x5, 0x1, 0x7b, 0x40, 0x9, 0x1, 0x0, 0x35, 0x2, 0xcd0, 0x1, 0x6, 0xfffffffe, 0x1, 0x4, 0x78800000, 0x1, 0x80000000, 0x2, 0x3000000, 0x6, 0x2, 0x6, 0x875, 0x3, 0x6, 0x3, 0x2, 0x0, 0x401, 0x0, 0x8, 0xe, 0x8001, 0xa19, 0xffff, 0x3, 0xb3, 0x3, 0x9, 0x1000, 0xfffff952, 0x4, 0x8, 0xffff9c87, 0x6, 0x5, 0x8, 0xff, 0x7, 0x2a4943f9, 0x4, 0x101, 0x1, 0x9, 0xfffffffe, 0xa48, 0xfffffff8, 0xe, 0x7fffffff, 0x10001, 0x1, 0x2, 0x6, 0x1, 0x6, 0x8e, 0x9, 0x0, 0xa3, 0x6, 0x4, 0xa4e, 0x800, 0x9, 0x4, 0x9, 0x800, 0x4, 0x7, 0x9, 0x5, 0x0, 0x6, 0xffffffff, 0xdc6, 0x1000, 0x4, 0xfffffffd, 0x3, 0x884, 0x0, 0x1, 0x1ff, 0x1, 0x62, 0x6, 0x80000001, 0x9, 0x7, 0x4, 0x2, 0xcb, 0x2807, 0x1, 0x1, 0xab17, 0x8, 0x1290088a, 0x8, 0x8, 0x7, 0x1, 0x2, 0x3, 0x1, 0x1, 0xffff, 0x0, 0xfff, 0x9f, 0x2, 0x5, 0x6, 0xed4, 0x6, 0x7, 0x100, 0xc4d4c7a, 0x6, 0x3, 0x2, 0x2, 0x9, 0x80000001, 0x40, 0x7, 0xffffffff]}, @TCA_HTB_OFFLOAD={0x4}]}}, @tclass_kind_options=@c_htb={{0x8}, {0x14, 0x2, [@TCA_HTB_RATE64={0xc, 0x6, 0x9ae}, @TCA_HTB_OFFLOAD={0x4}]}}]}, 0x474}, 0x1, 0x0, 0x0, 0x804}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000100004000"/20, @ANYRES32=0x0, @ANYBLOB="041004000000000008000400f90300"], 0x30}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000540)={@ifindex, 0x2e, 0x1, 0x9, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, 0x0, &(0x7f00000003c0), 0x0}, 0x40) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000005c0)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x5) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) getpid() 5.757893344s ago: executing program 7 (id=2926): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000b1e000/0x2000)=nil, 0x2000, 0x100000d, 0x13, r0, 0x19c14000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) 5.31279943s ago: executing program 8 (id=2927): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000640), 0x800, 0x0) ioctl$CDROMREADAUDIO(r0, 0x1268, &(0x7f0000000000)={@msf={0x2, 0xa0, 0x3f}, 0x2, 0x0, 0x0}) 5.108010114s ago: executing program 8 (id=2928): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_GET_THP_DISABLE(0x2a) socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) ftruncate(r3, 0x6000000) copy_file_range(r3, 0x0, r3, &(0x7f00000004c0)=0x100, 0x9, 0x0) sendmmsg$sock(r1, &(0x7f00000005c0)=[{{&(0x7f0000000300)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x40}, 0x80, 0x0, 0x0, &(0x7f0000000540)=[@txtime={{0x14, 0x1, 0x3d, 0xfffffffffffffff3}}], 0x14}}], 0x1, 0x8000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 5.041895206s ago: executing program 8 (id=2929): arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) r0 = add_key$user(&(0x7f0000000240), &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000b80)="ff", 0x1, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000440)='cifs.spnego\x00', &(0x7f0000000140)) keyctl$KEYCTL_MOVE(0x1e, r0, 0xffffffffffffffff, r1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x80000, 0x28c) r3 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0x80, 0x9}) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) syz_open_dev$sndpcmc(&(0x7f0000004240), 0x10000000, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r2, 0x40044103, &(0x7f0000000080)) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101802, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000400)=0x3ffffffe) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000090a010800000000000000000a0000040900010073797a31000000000900020073797a32000000ca33770ee4d1d912000900020073797a300000000008000a40fffffffc08000840000000011400490240b2e29783752600"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$FIONREAD(r6, 0x541b, &(0x7f0000000040)) writev(r5, &(0x7f00000001c0)=[{&(0x7f0000000280)="94e45212cd314c91e0b9b234d349c9542a9ae2c85b46", 0x16}, {0x0}], 0x2) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8000, &(0x7f0000000080)=0x1d6f4194, 0xb, 0x3) mmap(&(0x7f00000db000/0x1000)=nil, 0x1000, 0x2000002, 0x80010, r3, 0x35c4b000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008900), 0x0, 0x2, &(0x7f0000008a80)={0x0, 0x3938700}) mkdir(&(0x7f0000000200)='./file0\x00', 0x183) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, 0x0) 4.923660609s ago: executing program 8 (id=2930): r0 = socket$igmp(0x2, 0x3, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0xa, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x25, &(0x7f0000000100)=[{}, {}], 0x10, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0xf9, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000340)={0x3, 0x4, 0x81, 0x10001, @vifc_lcl_ifindex=r1, @multicast1}, 0x10) syz_emit_ethernet(0xa7, &(0x7f0000000380)={@random="f0b6dae10b25", @remote, @val={@val={0x88a8, 0x0, 0x1, 0x4}, {0x8100, 0x0, 0x0, 0x2}}, {@generic={0x8809, "1b6999e93714770d6faabf109af6814563fe22ebcd535a5f432c444412acc753a4f727b74d3e0fe36e64db75a2b9ae81584571a2c7f9c3795f626431dcbcb01abff5ff43f78c913557e3d46211c94dfe375a562eec140d846451f1b8e6962093ee9ae4c75e8cdba5b0596eaac9521f36b717ed4743307423a37f06149213ad15d82364c4fc74e56ad0bc08c056204d342a"}}}, &(0x7f0000000440)={0x1, 0x3, [0x926, 0x6c7, 0x271, 0xb7f]}) 4.781802346s ago: executing program 7 (id=2931): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r0}) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f00000003c0)=ANY=[], 0x10) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x2}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x6, 0x0, 0x0) 4.673930812s ago: executing program 7 (id=2932): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180)=0x4, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x4) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, 0x0) syz_open_procfs$pagemap(0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000340), 0x2440, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB=';cpu'], 0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000280)) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) setsockopt$IP_VS_SO_SET_TIMEOUT(r3, 0x0, 0x4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000840)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010025bd7000fddbdf256000000008000300", @ANYRES32=r4, @ANYBLOB="1ba0feb3b2764db804b01627c0a154370fb7a7a8ca79fabce20cf2e41825220dec71a73fdddbf9bcede625325ecbc8991bdcf82dc4ee68347579ff8a637fecdd554a"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4810) 4.582775148s ago: executing program 8 (id=2933): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180)=0x4, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x4) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, 0x0) syz_open_procfs$pagemap(0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000340), 0x2440, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB=';cpu'], 0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000280)) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) setsockopt$IP_VS_SO_SET_TIMEOUT(r3, 0x0, 0x4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000840)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010025bd7000fddbdf256000000008000300", @ANYRES32=r4, @ANYBLOB="1ba0feb3b2764db804b01627c0a154370fb7a7a8ca79fabce20cf2e41825220dec71a73fdddbf9bcede625325ecbc8991bdcf82dc4ee68347579ff8a637fecdd554a"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4810) 4.573855294s ago: executing program 6 (id=2934): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', r1, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000a479df"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0xfffffda4) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x30, 0x8008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x2, 0x0, 0x3, 0xffff, 0x1}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x28011, 0xffffffffffffffff, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}, 0xe) sendmmsg$sock(r5, &(0x7f0000004100)=[{{0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x1f}}], 0xffffff80, 0x44800) shutdown(r7, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xd0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_open_dev$mouse(0x0, 0x7f, 0x30180) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) 3.100261611s ago: executing program 6 (id=2938): r0 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x24, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xd, 0xfff3}, {}, {0x7, 0x300}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000814}, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) r1 = syz_open_dev$video(&(0x7f00000010c0), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000000)={0x2, 0x0, 0x1, {0xfffffffe, 0xffffffff, 0x1c9, 0x80000081}}) 2.97191935s ago: executing program 6 (id=2940): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (fail_nth: 10) 2.593113345s ago: executing program 6 (id=2941): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0x8) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r3], 0x1, 0x0, 0x0, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={r1, 0x7}, &(0x7f00000000c0)=0x8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) ioctl$KVM_CAP_MAX_VCPU_ID(r5, 0x4068aea3, &(0x7f0000000500)={0x80, 0x0, 0x1}) 2.257273496s ago: executing program 6 (id=2942): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f00000001c0)={0x0, 0x2, 0x4000003, 0xffffffff}) 1.815475461s ago: executing program 7 (id=2943): open(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(0xffffffffffffffff, 0xfffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_CT_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x4e24, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@remote, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000140)=0x8, 0x4) connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r5, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r7, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.809043001s ago: executing program 8 (id=2944): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5], 0x1c}}, 0x840) write$nci(r4, &(0x7f00000004c0)=ANY=[], 0x102) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) syz_usb_connect(0xed, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b"], 0x0) socket(0x2, 0xa, 0x0) 1.043657918s ago: executing program 9 (id=2946): r0 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5pC\n\x00p\xf0\b\x84\xa2m\x00\v\x18\x004y\xa3y\xdb\xd1\xa7\xf1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=P\x03\xcdJ\x04K\x98\xaeph\xc9?\xa0[\xb1\xc8`\xcc\xd8\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\x06\xb2\xcc~\x95\xdf\xe7\xe5\xaeLl\x86(\xec\xac\xe33\x8a\x11\xd3\xfb\x9b\x1b,C\x05\xa4\x88I\xe1,W\xd7\xfcA\xa0\x06\xc3\xbc0\xf4\xfd\xcc\x8d\x01k|B2{ZVU&\xe8\xfd\xd0\v\xdb\xc8\x98\xd2\xd1\xcf8%d-\n\x971\xa8\xe2\xc1\x9fH\x9e\x8a\xfbSe\x1b\x97\xed\x18\x8f\x1a\xc1s,\xe7\x89\xbb\x1dU\f\xc1\x9682\xa4\x12u\xaa\xb6\xdel\x14\xdap\bA\xa7w\xd9\xff\v\xd0)\xc3\xfb|\xba&\xf5\xe4k\xec7u\xb3\xd1\fv^\x0ei\xd5\xd8\xda0$l\x9b\xc1\x89eu\xba\xfa\xd3/>@\xdb\xaa \a\xe1\x1a\xdc|\xb3\xe8\xa4\x06\x91s\x17{:\xfb\bw\xb0V\x97\xe0j\xee~\xa6eV\x0f\x94|\xdc\x13jQ\xc0`\x90\x80cfW^p]~kL\xcbh\xb4o8\xbe\xc2\x17\xb1\x9d\x1f\b<\x18\xee\xea\xbe\xcbG\xf7H\'f@F\aO\x830&\xab^\xa3\xe0\x1c\xa0\xe2\xf4?\x02!zJ\n\x11\x86\x86\xc9\x16\x10\x16\'Q\x7f\xd3\xd4\xe6\xfe\x89S\x8cw\xca\xce\x00\x00\x00\x00\x00\x00\x00\x00\x00]7\xb7\xc4\x866x2MQ2\xb5\xda\x19\xf8\xc0\xeaT\xc0-\xd3h\xcd', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRESHEX=r0], 0x0, 0xf7fffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) 978.078778ms ago: executing program 9 (id=2947): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_GET_THP_DISABLE(0x2a) socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) ftruncate(r3, 0x6000000) copy_file_range(r3, 0x0, r3, &(0x7f00000004c0)=0x100, 0x9, 0x0) sendmmsg$sock(r1, &(0x7f00000005c0)=[{{&(0x7f0000000300)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x40}, 0x80, 0x0, 0x0, &(0x7f0000000540)=[@txtime={{0x14, 0x1, 0x3d, 0xfffffffffffffff3}}], 0x14}}], 0x1, 0x8000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB, @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 977.636594ms ago: executing program 6 (id=2948): open(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_CT_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x4e24, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@remote, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000140)=0x8, 0x4) connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r5, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r7, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 900.820575ms ago: executing program 9 (id=2949): mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0x1025425, 0x0) mount$binderfs(0x0, &(0x7f0000000700)='./binderfs\x00', 0x0, 0x1020, 0x0) (async, rerun: 32) r0 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071112400000000008510000002000000850000000e00000095000000000000009500a50500e77500"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES32=0x1, @ANYRESHEX=r0, @ANYRES32=0x0, @ANYRES32=r0], 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) openat$binder_debug(0xffffff9c, 0x0, 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_rdma(0x10, 0x3, 0x14) (async) r4 = syz_io_uring_setup(0x80000f00, &(0x7f00000003c0)={0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) io_uring_enter(r4, 0xeed, 0xeed, 0x1, 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/kexec_crash_size', 0x202, 0x0) sendfile(r3, r5, 0x0, 0x6) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r6, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000540)="d9db73fe2edc14f22679fabdb8837434de0c55d0552478f643ebc1f0dca0017cd40b5177029946f0650febb10d162c0866be8fa66c703d1b30bd8121fae89b800a2c7ccda164fd9979e16113a6ce94a67dd84b3efd6eac5026107a9bdf8eaa08860c899f87c9b0ef7d9a8baf4dc33e09aa7d8a39273c5a92b8e8a3e32f6cf963e7190de6c3bc4381aa5cd9576809", 0x8e}], 0x2) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x100000, 0x1, &(0x7f0000006680)) (async) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r7, 0x4) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 533.586127ms ago: executing program 9 (id=2950): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0xf8) 337.174988ms ago: executing program 7 (id=2951): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180)=0x4, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x4) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, 0x0) syz_open_procfs$pagemap(0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000340), 0x2440, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB=';cpu'], 0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000280)) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) setsockopt$IP_VS_SO_SET_TIMEOUT(r3, 0x0, 0x4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000840)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010025bd7000fddbdf256000000008000300", @ANYRES32=r4, @ANYBLOB="1ba0feb3b2764db804b01627c0a154370fb7a7a8ca79fabce20cf2e41825220dec71a73fdddbf9bcede625325ecbc8991bdcf82dc4ee68347579ff8a637fecdd554a"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4810) 193.212053ms ago: executing program 9 (id=2952): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) pread64(r0, &(0x7f0000000200)=""/80, 0x50, 0x40) r1 = socket(0x2b, 0x1, 0x1) bind$xdp(r1, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x4}, 0x10) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000080)=0xe0c, 0x4) syz_emit_ethernet(0x1012, &(0x7f0000000280)={@local, @remote, @void, {@llc_tr={0x11, {@llc={0x5c, 0x1df3db4cea6e7b48, "ff6d", "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"}}}}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa8, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x91}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}]}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x78a}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb3}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20008080}, 0x4011) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) pread64(r0, &(0x7f0000000200)=""/80, 0x50, 0x40) (async) socket(0x2b, 0x1, 0x1) (async) bind$xdp(r1, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x4}, 0x10) (async) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000080)=0xe0c, 0x4) (async) syz_emit_ethernet(0x1012, &(0x7f0000000280)={@local, @remote, @void, {@llc_tr={0x11, {@llc={0x5c, 0x1df3db4cea6e7b48, "ff6d", "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"}}}}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa8, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x91}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}]}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x78a}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb3}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20008080}, 0x4011) (async) 0s ago: executing program 9 (id=2953): syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) clock_adjtime(0x0, &(0x7f0000000100)={0x5fe, 0x6a, 0x5, 0x8000000000000001, 0x48c, 0x5, 0x40000d, 0x426, 0x2, 0xffffffffffffffff, 0x2c1d, 0xfffffffffffffff9, 0xfff, 0x2, 0x40081, 0x9, 0x0, 0x5, 0x0, 0x9220000000000000, 0x3, 0x0, 0x7ffffffe, 0x0, 0x5, 0x1}) clock_adjtime(0x0, &(0x7f0000000200)={0x9, 0x9, 0x8, 0x8001, 0x1, 0xffff26c2, 0x5, 0x1, 0x4, 0x7fff, 0x1ff, 0x7ff, 0x81, 0xfff, 0x3, 0x7, 0x8, 0xf58, 0x5, 0xd29, 0x5, 0x3, 0xffffffff, 0xb3e2, 0x1, 0x8}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYBLOB="a5fdad88000000001c001280"], 0x3c}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0xc) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r5, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) r6 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000080)=0xf7e) read$dsp(r6, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r4, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc01cf509, &(0x7f0000001300)={r5, 0x7, 0x0, 0x2}) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x20) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000300)=@add_del={0x2, &(0x7f0000001340)='veth0_macvtap\x00'}) r10 = dup(r9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r10, 0x2000) kernel console output (not intermixed with test programs): 162] [ 825.547183][T15162] dump_stack_lvl+0x100/0x190 [ 825.547206][T15162] should_fail_ex.cold+0x5/0xa [ 825.547221][T15162] _copy_from_user+0x2e/0xd0 [ 825.547238][T15162] get_compat_msghdr+0xb3/0x4b0 [ 825.547252][T15162] ? __pfx_get_compat_msghdr+0x10/0x10 [ 825.547270][T15162] ___sys_recvmsg+0x193/0x1a0 [ 825.547287][T15162] ? __pfx____sys_recvmsg+0x10/0x10 [ 825.547303][T15162] ? irqentry_exit+0x24d/0x970 [ 825.547319][T15162] ? irqentry_exit+0x24d/0x970 [ 825.547339][T15162] ? do_recvmmsg+0x15a/0x760 [ 825.547356][T15162] do_recvmmsg+0x563/0x760 [ 825.547373][T15162] ? __pfx_do_recvmmsg+0x10/0x10 [ 825.547390][T15162] ? ksys_write+0x190/0x250 [ 825.547408][T15162] ? ksys_write+0x190/0x250 [ 825.547425][T15162] ? __fget_files+0x215/0x3d0 [ 825.547438][T15162] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 825.547457][T15162] __sys_recvmmsg+0x21f/0x270 [ 825.547471][T15162] ? __pfx___sys_recvmmsg+0x10/0x10 [ 825.547485][T15162] ? ksys_write+0x1ac/0x250 [ 825.547499][T15162] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 825.547513][T15162] ? __do_fast_syscall_32+0x98/0x970 [ 825.547530][T15162] ? lockdep_hardirqs_on+0x78/0x100 [ 825.547545][T15162] __do_fast_syscall_32+0xe7/0x970 [ 825.547561][T15162] ? lockdep_hardirqs_on+0x78/0x100 [ 825.547577][T15162] do_fast_syscall_32+0x32/0x70 [ 825.547594][T15162] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 825.547609][T15162] RIP: 0023:0xf707ef7c [ 825.547618][T15162] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 825.547629][T15162] RSP: 002b:00000000f544c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000151 [ 825.547641][T15162] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000840 [ 825.547648][T15162] RDX: 0000000000000414 RSI: 0000000000000406 RDI: 0000000000000000 [ 825.547654][T15162] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 825.547661][T15162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 825.547667][T15162] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 825.547680][T15162] [ 826.480174][T15173] vivid-002: ================= START STATUS ================= [ 826.483037][T15173] vivid-002: RDS Tx I/O Mode: Controls [ 826.485090][T15173] vivid-002: RDS Program ID: 32904 [ 826.486770][T15173] vivid-002: RDS Program Type: 3 [ 826.488471][T15173] vivid-002: RDS PS Name: VIVID-TX [ 826.490070][T15173] vivid-002: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 826.493456][T15173] vivid-002: RDS Stereo: true [ 826.495022][T15173] vivid-002: RDS Artificial Head: false [ 826.496805][T15173] vivid-002: RDS Compressed: false [ 826.498514][T15173] vivid-002: RDS Dynamic PTY: false [ 826.500483][T15173] vivid-002: RDS Traffic Announcement: false [ 826.502530][T15173] vivid-002: RDS Traffic Program: true [ 826.504468][T15173] vivid-002: RDS Music: true [ 826.506100][T15173] vivid-002: ================== END STATUS ================== [ 828.643100][T15182] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 828.651960][T15182] IPVS: set_ctl: invalid protocol: 8 100.1.1.0:20004 [ 828.773964][T15197] lapbether: lapb_data_request error - 4 [ 828.827688][T15200] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2361'. [ 828.955097][T15203] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2363'. [ 828.997587][T15193] overlay: ./file0 is not a directory [ 829.793787][T15210] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2365'. [ 830.061030][T15217] vivid-004: ================= START STATUS ================= [ 830.063624][T15217] vivid-004: RDS Tx I/O Mode: Controls [ 830.065495][T15217] vivid-004: RDS Program ID: 32904 [ 830.067280][T15217] vivid-004: RDS Program Type: 3 [ 830.069008][T15217] vivid-004: RDS PS Name: VIVID-TX [ 830.070772][T15217] vivid-004: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 830.074145][T15217] vivid-004: RDS Stereo: true [ 830.075652][T15217] vivid-004: RDS Artificial Head: false [ 830.077569][T15217] vivid-004: RDS Compressed: false [ 830.079440][T15217] vivid-004: RDS Dynamic PTY: false [ 830.081423][T15217] vivid-004: RDS Traffic Announcement: false [ 830.083425][T15217] vivid-004: RDS Traffic Program: true [ 830.085268][T15217] vivid-004: RDS Music: true [ 830.086877][T15217] vivid-004: ================== END STATUS ================== [ 831.415102][T15223] vivid-004: ================= START STATUS ================= [ 831.417891][T15223] vivid-004: RDS Tx I/O Mode: Controls [ 831.420143][T15223] vivid-004: RDS Program ID: 32904 [ 831.422412][T15223] vivid-004: RDS Program Type: 3 [ 831.424419][T15223] vivid-004: RDS PS Name: VIVID-TX [ 831.426564][T15223] vivid-004: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 831.430095][T15223] vivid-004: RDS Stereo: true [ 831.432116][T15223] vivid-004: RDS Artificial Head: false [ 831.434374][T15223] vivid-004: RDS Compressed: false [ 831.436487][T15223] vivid-004: RDS Dynamic PTY: false [ 831.438797][T15223] vivid-004: RDS Traffic Announcement: false [ 831.441521][T15223] vivid-004: RDS Traffic Program: true [ 831.443624][T15223] vivid-004: RDS Music: true [ 831.445634][T15223] vivid-004: ================== END STATUS ================== [ 831.852703][T15225] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 831.858123][T15225] IPVS: set_ctl: invalid protocol: 8 100.1.1.0:20004 [ 833.237056][ T40] audit: type=1804 audit(2000000103.436:4032): pid=15239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.2374" name="/newroot/144/file0" dev="tmpfs" ino=807 res=1 errno=0 [ 833.268961][T15239] openvswitch: netlink: IP tunnel dst address not specified [ 833.766702][T15246] vivid-002: ================= START STATUS ================= [ 833.769821][T15246] vivid-002: RDS Tx I/O Mode: Controls [ 833.772080][T15246] vivid-002: RDS Program ID: 32904 [ 833.774460][T15246] vivid-002: RDS Program Type: 3 [ 833.776643][T15246] vivid-002: RDS PS Name: VIVID-TX [ 833.778823][T15246] vivid-002: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 833.783015][T15246] vivid-002: RDS Stereo: true [ 833.784962][T15246] vivid-002: RDS Artificial Head: false [ 833.787338][T15246] vivid-002: RDS Compressed: false [ 833.789449][T15246] vivid-002: RDS Dynamic PTY: false [ 833.791634][T15246] vivid-002: RDS Traffic Announcement: false [ 833.794099][T15246] vivid-002: RDS Traffic Program: true [ 833.796368][T15246] vivid-002: RDS Music: true [ 833.798331][T15246] vivid-002: ================== END STATUS ================== [ 833.894598][T15252] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 833.906482][T15252] IPVS: set_ctl: invalid protocol: 8 100.1.1.0:20004 [ 834.394073][ T6180] usb 13-1: new high-speed USB device number 4 using dummy_hcd [ 834.556556][ T6180] usb 13-1: Using ep0 maxpacket: 8 [ 834.563239][ T6180] usb 13-1: config index 0 descriptor too short (expected 301, got 45) [ 834.569630][ T6180] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 834.576443][ T6180] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 834.581872][ T6180] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 834.586543][ T6180] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 834.594781][ T6180] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 834.604603][ T6180] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.907619][ T6180] usb 13-1: usb_control_msg returned -32 [ 834.909967][ T6180] usbtmc 13-1:16.0: can't read capabilities [ 835.256987][T15266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 835.271585][T15266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 835.281250][T15266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 835.289517][T15266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 835.430271][ T34] usb 13-1: USB disconnect, device number 4 [ 835.430578][T15256] usbtmc 13-1:16.0: usb_control_msg returned -71 [ 835.470431][T15265] usbtmc 13-1:16.0: send_request_dev_dep_msg_in returned -19 [ 837.040038][T15283] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2386'. [ 837.537394][T15272] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(7) [ 837.539784][T15272] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 837.566218][T15272] vhci_hcd vhci_hcd.0: Device attached [ 837.738061][T15284] vhci_hcd: connection closed [ 837.738406][ T231] vhci_hcd vhci_hcd.9: stop threads [ 837.741630][ T231] vhci_hcd vhci_hcd.9: release socket [ 837.743584][ T231] vhci_hcd vhci_hcd.9: disconnect device [ 838.360946][ T844] usb usb56-port1: attempt power cycle [ 838.989602][ T844] usb usb56-port1: unable to enumerate USB device [ 840.666068][T15319] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2397'. [ 840.972031][T15324] overlay: Unknown parameter '|2 ' [ 841.031684][T15329] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2399'. [ 841.036906][T15329] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2399'. [ 844.498723][T15358] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2406'. [ 845.633809][T15370] bridge_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 845.671062][T15370] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2410'. [ 845.686220][T15370] netlink: 68 bytes leftover after parsing attributes in process `syz.9.2410'. [ 846.020249][T15374] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2411'. [ 846.380824][T15378] vivid-000: ================= START STATUS ================= [ 846.383791][T15378] vivid-000: RDS Tx I/O Mode: Controls [ 846.386193][T15378] vivid-000: RDS Program ID: 32904 [ 846.388298][T15378] vivid-000: RDS Program Type: 3 [ 846.390137][T15378] vivid-000: RDS PS Name: VIVID-TX [ 846.392191][T15378] vivid-000: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 846.396575][T15378] vivid-000: RDS Stereo: true [ 846.398476][T15378] vivid-000: RDS Artificial Head: false [ 846.400628][T15378] vivid-000: RDS Compressed: false [ 846.402687][T15378] vivid-000: RDS Dynamic PTY: false [ 846.404468][T15378] vivid-000: RDS Traffic Announcement: false [ 846.406743][T15378] vivid-000: RDS Traffic Program: true [ 846.408936][T15378] vivid-000: RDS Music: true [ 846.411468][T15378] vivid-000: ================== END STATUS ================== [ 847.538922][T15385] vivid-004: ================= START STATUS ================= [ 847.542197][T15385] vivid-004: RDS Tx I/O Mode: Controls [ 847.544044][T15385] vivid-004: RDS Program ID: 32904 [ 847.545714][T15385] vivid-004: RDS Program Type: 3 [ 847.547320][T15385] vivid-004: RDS PS Name: VIVID-TX [ 847.548927][T15385] vivid-004: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 847.552356][T15385] vivid-004: RDS Stereo: true [ 847.554112][T15385] vivid-004: RDS Artificial Head: false [ 847.555900][T15385] vivid-004: RDS Compressed: false [ 847.557587][T15385] vivid-004: RDS Dynamic PTY: false [ 847.559226][T15385] vivid-004: RDS Traffic Announcement: false [ 847.561112][T15385] vivid-004: RDS Traffic Program: true [ 847.562978][T15385] vivid-004: RDS Music: true [ 847.564551][T15385] vivid-004: ================== END STATUS ================== [ 848.493849][ T844] usb 14-1: new high-speed USB device number 5 using dummy_hcd [ 848.660280][ T844] usb 14-1: Using ep0 maxpacket: 8 [ 848.665098][ T844] usb 14-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 848.673763][ T844] usb 14-1: config 1 has 0 interfaces, different from the descriptor's value: 7 [ 848.686093][ T844] usb 14-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 848.689577][ T844] usb 14-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 848.695589][ T844] usb 14-1: Product: syz [ 848.698515][ T844] usb 14-1: Manufacturer: syz [ 848.700163][ T844] usb 14-1: SerialNumber: syz [ 850.132013][T15416] bridge_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 850.139156][T15416] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2423'. [ 850.142987][T15416] netlink: 68 bytes leftover after parsing attributes in process `syz.8.2423'. [ 851.499279][T13026] usb 14-1: USB disconnect, device number 5 [ 851.886089][T13026] usb 14-1: new high-speed USB device number 6 using dummy_hcd [ 852.071096][T13026] usb 14-1: Using ep0 maxpacket: 8 [ 852.074347][T13026] usb 14-1: config index 0 descriptor too short (expected 301, got 45) [ 852.077610][T13026] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 852.081532][T13026] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 852.088285][T13026] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 852.095305][T13026] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 852.102064][T13026] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 852.105337][T13026] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.335669][T13026] usb 14-1: usb_control_msg returned -32 [ 852.337853][T13026] usbtmc 14-1:16.0: can't read capabilities [ 852.671538][T15440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 852.689186][T15440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 852.696252][T15440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 852.700653][T15440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 852.827130][T13026] usb 14-1: USB disconnect, device number 6 [ 852.829326][T15425] usbtmc 14-1:16.0: usb_control_msg returned -71 [ 852.834929][T15439] usbtmc 14-1:16.0: send_request_dev_dep_msg_in returned -19 [ 855.191516][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 856.239010][T15465] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2433'. [ 861.163742][T15492] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 861.166427][T15492] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 861.317738][T15492] vhci_hcd vhci_hcd.0: Device attached [ 861.358294][T12467] usb 12-1: new high-speed USB device number 6 using dummy_hcd [ 861.703672][T15513] vivid-004: ================= START STATUS ================= [ 861.703745][T15513] vivid-004: RDS Tx I/O Mode: Controls [ 861.703885][T15513] vivid-004: RDS Program ID: 32904 [ 861.703952][T15513] vivid-004: RDS Program Type: 3 [ 861.704268][T15513] vivid-004: RDS PS Name: VIVID-TX [ 861.704341][T15513] vivid-004: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 861.704467][T15513] vivid-004: RDS Stereo: true [ 861.704597][T15513] vivid-004: RDS Artificial Head: false [ 861.704720][T15513] vivid-004: RDS Compressed: false [ 861.704797][T15513] vivid-004: RDS Dynamic PTY: false [ 861.705029][T15513] vivid-004: RDS Traffic Announcement: false [ 861.705098][T15513] vivid-004: RDS Traffic Program: true [ 861.705172][T15513] vivid-004: RDS Music: true [ 861.705509][T15513] vivid-004: ================== END STATUS ================== [ 861.955696][T12467] usb 12-1: Using ep0 maxpacket: 8 [ 861.964894][T12467] usb 12-1: config index 0 descriptor too short (expected 301, got 45) [ 861.966245][T12467] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 861.966299][T12467] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 861.966375][T12467] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 861.967243][T12467] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 861.967393][T12467] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 861.967444][T12467] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.044689][T15507] vhci_hcd: connection closed [ 862.046567][ T97] vhci_hcd vhci_hcd.6: stop threads [ 862.046593][ T97] vhci_hcd vhci_hcd.6: release socket [ 862.046691][ T97] vhci_hcd vhci_hcd.6: disconnect device [ 862.330390][T12467] usb 12-1: usb_control_msg returned -32 [ 862.330497][T12467] usbtmc 12-1:16.0: can't read capabilities [ 862.629763][ T40] audit: type=1326 audit(2000000130.554:4033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15514 comm="syz.9.2450" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef7c code=0x7ffc0000 [ 862.655414][ T40] audit: type=1326 audit(2000000130.554:4034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15514 comm="syz.9.2450" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef7c code=0x7ffc0000 [ 862.660371][T15519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 862.670870][T15519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 862.685457][ T40] audit: type=1326 audit(2000000130.554:4035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15514 comm="syz.9.2450" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf707ef7c code=0x7ffc0000 [ 862.689886][T15519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 862.701708][T15519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 862.713189][ T40] audit: type=1326 audit(2000000130.554:4036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15514 comm="syz.9.2450" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef7c code=0x7ffc0000 [ 862.731311][ T40] audit: type=1326 audit(2000000130.554:4037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15514 comm="syz.9.2450" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef7c code=0x7ffc0000 [ 862.747512][ T40] audit: type=1326 audit(2000000130.554:4038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15514 comm="syz.9.2450" exe="/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf707ef7c code=0x7ffc0000 [ 862.766646][ T40] audit: type=1326 audit(2000000130.554:4039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15514 comm="syz.9.2450" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef7c code=0x7ffc0000 [ 862.782655][ T40] audit: type=1326 audit(2000000130.554:4040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15514 comm="syz.9.2450" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf707ef7c code=0x7ffc0000 [ 862.800523][ T40] audit: type=1326 audit(2000000130.554:4041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15514 comm="syz.9.2450" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef7c code=0x7ffc0000 [ 862.814508][ T40] audit: type=1326 audit(2000000130.563:4042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15514 comm="syz.9.2450" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf707ef7c code=0x7ffc0000 [ 862.848236][T15498] usbtmc 12-1:16.0: usb_control_msg returned -71 [ 862.848409][ T844] usb 12-1: USB disconnect, device number 6 [ 862.853985][T15517] usbtmc 12-1:16.0: send_request_dev_dep_msg_in returned -19 [ 863.006590][ T2321] usb usb50-port1: attempt power cycle [ 863.023255][T15526] dlm: non-version read from control device 36 [ 863.043197][T15527] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2451'. [ 863.287433][ T5750] usb 13-1: new high-speed USB device number 5 using dummy_hcd [ 863.450887][ T5750] usb 13-1: Using ep0 maxpacket: 8 [ 863.469567][T15526] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2452'. [ 863.473576][T15526] bridge_slave_0: default FDB implementation only supports local addresses [ 863.531609][ T5750] usb 13-1: unable to get BOS descriptor or descriptor too short [ 863.536249][ T5750] usb 13-1: unable to read config index 0 descriptor/start: -71 [ 863.539277][ T5750] usb 13-1: can't read configurations, error -71 [ 863.636883][ T2321] usb usb50-port1: unable to enumerate USB device [ 863.828086][T15539] bridge_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 863.833795][T15539] overlay: Unknown parameter '|2 ' [ 863.849776][T15539] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2455'. [ 863.854981][T15539] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2455'. [ 864.031265][T15543] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(7) [ 864.033933][T15543] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 864.040773][T15543] vhci_hcd vhci_hcd.0: Device attached [ 864.371978][T12467] usb 56-1: SetAddress Request (10) to port 0 [ 864.374829][T12467] usb 56-1: new SuperSpeed USB device number 10 using vhci_hcd [ 865.136160][T15544] vhci_hcd: connection reset by peer [ 865.141921][ T231] vhci_hcd vhci_hcd.9: stop threads [ 865.144472][ T231] vhci_hcd vhci_hcd.9: release socket [ 865.148462][ T231] vhci_hcd vhci_hcd.9: disconnect device [ 865.696242][T11782] Bluetooth: hci4: command 0x0406 tx timeout [ 865.738116][ T5764] Bluetooth: hci3: unexpected event for opcode 0x0c04 [ 865.934755][T15559] netlink: 'syz.7.2460': attribute type 11 has an invalid length. [ 866.218478][T15559] mac80211_hwsim hwsim128 wlan1: entered promiscuous mode [ 866.221240][T15559] mac80211_hwsim hwsim128 wlan1: entered allmulticast mode [ 866.605565][T15571] bridge_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 866.625064][T15571] overlay: Unknown parameter '|2 ' [ 866.633206][T15571] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2462'. [ 866.641864][T15568] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2462'. [ 867.773765][T15578] dlm: non-version read from control device 36 [ 867.936962][ T5764] Bluetooth: hci4: command 0x0406 tx timeout [ 867.952586][T15567] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(7) [ 867.955311][T15567] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 867.959589][T15567] vhci_hcd vhci_hcd.0: Device attached [ 868.056040][ T5750] usb 11-1: new high-speed USB device number 19 using dummy_hcd [ 868.229485][ T5750] usb 11-1: Using ep0 maxpacket: 8 [ 868.262115][ T39] usb 54-1: SetAddress Request (6) to port 0 [ 868.264773][ T39] usb 54-1: new SuperSpeed USB device number 6 using vhci_hcd [ 868.291536][ T5750] usb 11-1: unable to get BOS descriptor or descriptor too short [ 868.295976][ T5750] usb 11-1: unable to read config index 0 descriptor/start: -71 [ 868.303656][ T5750] usb 11-1: can't read configurations, error -71 [ 868.554566][T15588] bridge_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 868.564727][T15588] overlay: Unknown parameter '|2 ' [ 868.571294][T15588] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2466'. [ 868.580231][T15581] vhci_hcd: connection reset by peer [ 868.581284][T15588] netlink: 68 bytes leftover after parsing attributes in process `syz.9.2466'. [ 868.582248][ T97] vhci_hcd vhci_hcd.8: stop threads [ 868.591225][ T97] vhci_hcd vhci_hcd.8: release socket [ 868.599852][ T97] vhci_hcd vhci_hcd.8: disconnect device [ 868.768518][T15590] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 868.770568][T15590] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 868.773664][T15590] vhci_hcd vhci_hcd.0: Device attached [ 869.077190][ T3992] usb 52-1: SetAddress Request (10) to port 0 [ 869.082341][ T3992] usb 52-1: new SuperSpeed USB device number 10 using vhci_hcd [ 869.439559][T15591] vhci_hcd: connection reset by peer [ 869.449330][ T1195] vhci_hcd vhci_hcd.7: stop threads [ 869.451250][ T1195] vhci_hcd vhci_hcd.7: release socket [ 869.457918][ T1195] vhci_hcd vhci_hcd.7: disconnect device [ 869.856553][T12467] usb 56-1: device descriptor read/8, error -110 [ 870.289684][T12467] usb usb56-port1: attempt power cycle [ 870.354656][T15609] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2472'. [ 870.378564][T15607] bridge0: port 2(bridge_slave_1) entered disabled state [ 870.381096][T15607] bridge0: port 1(bridge_slave_0) entered disabled state [ 870.491440][T15607] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 870.503244][T15607] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 871.481447][T12467] usb usb56-port1: unable to enumerate USB device [ 871.560793][ T1264] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 871.564290][ T1264] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 871.591995][ T1264] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 871.598050][ T1264] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 871.642960][T15621] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2474'. [ 871.646495][T15621] FAULT_INJECTION: forcing a failure. [ 871.646495][T15621] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 871.654136][T15621] CPU: 1 UID: 0 PID: 15621 Comm: syz.7.2474 Tainted: G L syzkaller #0 PREEMPT(full) [ 871.654155][T15621] Tainted: [L]=SOFTLOCKUP [ 871.654161][T15621] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 871.654169][T15621] Call Trace: [ 871.654174][T15621] [ 871.654179][T15621] dump_stack_lvl+0x100/0x190 [ 871.654202][T15621] should_fail_ex.cold+0x5/0xa [ 871.654248][T15621] _copy_to_user+0x32/0xd0 [ 871.654270][T15621] simple_read_from_buffer+0xcb/0x170 [ 871.654285][T15621] proc_fail_nth_read+0x1af/0x230 [ 871.654304][T15621] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 871.654323][T15621] ? rw_verify_area+0xce/0x6d0 [ 871.654334][T15621] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 871.654351][T15621] vfs_read+0x1e4/0xb30 [ 871.654366][T15621] ? __pfx_vfs_read+0x10/0x10 [ 871.654377][T15621] ? find_held_lock+0x2b/0x80 [ 871.654392][T15621] ? __fget_files+0x215/0x3d0 [ 871.654408][T15621] ? __fget_files+0x21f/0x3d0 [ 871.654424][T15621] ksys_read+0x12a/0x250 [ 871.654437][T15621] ? __pfx_ksys_read+0x10/0x10 [ 871.654449][T15621] ? rcu_is_watching+0x12/0xc0 [ 871.654463][T15621] ? rcu_is_watching+0x12/0xc0 [ 871.654477][T15621] do_int80_emulation+0x14b/0x720 [ 871.654496][T15621] asm_int80_emulation+0x1a/0x20 [ 871.654508][T15621] RIP: 0023:0xf71561ab [ 871.654518][T15621] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 871.654529][T15621] RSP: 002b:00000000f54164bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 871.654540][T15621] RAX: ffffffffffffffda RBX: 000000000000000d RCX: 00000000f54165d0 [ 871.654547][T15621] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 871.654553][T15621] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 871.654560][T15621] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 871.654567][T15621] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 871.654581][T15621] [ 871.889249][T15629] FAULT_INJECTION: forcing a failure. [ 871.889249][T15629] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 871.893375][T15629] CPU: 3 UID: 0 PID: 15629 Comm: syz.6.2477 Tainted: G L syzkaller #0 PREEMPT(full) [ 871.893393][T15629] Tainted: [L]=SOFTLOCKUP [ 871.893397][T15629] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 871.893404][T15629] Call Trace: [ 871.893409][T15629] [ 871.893413][T15629] dump_stack_lvl+0x100/0x190 [ 871.893435][T15629] should_fail_ex.cold+0x5/0xa [ 871.893450][T15629] _copy_from_user+0x2e/0xd0 [ 871.893467][T15629] generic_map_update_batch+0x4bb/0x800 [ 871.893489][T15629] ? __pfx_generic_map_update_batch+0x10/0x10 [ 871.893510][T15629] ? __pfx_generic_map_update_batch+0x10/0x10 [ 871.893529][T15629] bpf_map_do_batch+0x66f/0x6d0 [ 871.893545][T15629] __sys_bpf+0x302/0x4b90 [ 871.893558][T15629] ? __pfx___sys_bpf+0x10/0x10 [ 871.893568][T15629] ? get_pid_task+0x106/0x250 [ 871.893584][T15629] ? proc_fail_nth_write+0x9f/0x220 [ 871.893602][T15629] ? find_held_lock+0x2b/0x80 [ 871.893620][T15629] ? find_held_lock+0x2b/0x80 [ 871.893633][T15629] ? ksys_write+0x190/0x250 [ 871.893649][T15629] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 871.893665][T15629] ? kernel_write+0x603/0x6c0 [ 871.893684][T15629] ? xfd_validate_state+0x129/0x190 [ 871.893699][T15629] __ia32_sys_bpf+0x79/0xf0 [ 871.893710][T15629] ? lockdep_hardirqs_on+0x78/0x100 [ 871.893725][T15629] __do_fast_syscall_32+0xe7/0x970 [ 871.893741][T15629] ? lockdep_hardirqs_on+0x78/0x100 [ 871.893758][T15629] do_fast_syscall_32+0x32/0x70 [ 871.893775][T15629] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 871.893789][T15629] RIP: 0023:0xf7fc5f7c [ 871.893799][T15629] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 871.893810][T15629] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 871.893822][T15629] RAX: ffffffffffffffda RBX: 000000000000001a RCX: 0000000080000800 [ 871.893829][T15629] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 0000000000000000 [ 871.893835][T15629] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 871.893841][T15629] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 871.893848][T15629] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 871.893861][T15629] [ 872.309777][T15632] bridge_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 872.417753][T15632] overlay: Unknown parameter '|2 ' [ 872.423170][T15632] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2478'. [ 872.427148][T15632] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2478'. [ 872.564830][ T844] usb 14-1: new high-speed USB device number 7 using dummy_hcd [ 872.727142][ T844] usb 14-1: Using ep0 maxpacket: 8 [ 872.730558][ T844] usb 14-1: config index 0 descriptor too short (expected 301, got 45) [ 872.734043][ T844] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 872.737491][ T844] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 872.741768][ T844] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 872.745327][ T844] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 872.749972][ T844] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 872.753138][ T844] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.955274][T15640] bridge_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 872.961201][T15640] overlay: Unknown parameter '|2 ' [ 872.967300][T15640] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2480'. [ 872.972964][T15640] netlink: 68 bytes leftover after parsing attributes in process `syz.8.2480'. [ 872.985064][ T844] usb 14-1: usb_control_msg returned -32 [ 872.988131][ T844] usbtmc 14-1:16.0: can't read capabilities [ 873.325302][T15647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 873.340770][T15647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 873.350679][T15647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 873.354107][T15647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 873.423697][T15634] usbtmc 14-1:16.0: usb_control_msg returned -71 [ 873.424715][T14240] usb 14-1: USB disconnect, device number 7 [ 873.428077][T15646] usbtmc 14-1:16.0: send_request_dev_dep_msg_in returned -19 [ 873.745900][ T39] usb 54-1: device descriptor read/8, error -110 [ 874.169826][ T39] usb usb54-port1: attempt power cycle [ 874.175163][T15667] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2487'. [ 874.251658][T15668] overlay: ./file0 is not a directory [ 874.791615][ T39] usb usb54-port1: unable to enumerate USB device [ 874.975376][T15690] bridge_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 874.977170][T15690] overlay: Unknown parameter '|2 ' [ 875.009254][T15684] netlink: 'syz.6.2491': attribute type 11 has an invalid length. [ 875.031522][T15685] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2490'. [ 875.032025][T15685] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2490'. [ 875.208704][ T3992] usb 52-1: device descriptor read/8, error -110 [ 875.255770][T15684] mac80211_hwsim hwsim103 wlan1: entered promiscuous mode [ 875.261500][T15684] mac80211_hwsim hwsim103 wlan1: entered allmulticast mode [ 875.903530][ T3992] usb usb52-port1: attempt power cycle [ 876.002580][T15701] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2493'. [ 876.093029][T15702] overlayfs: failed to resolve './file1': -2 [ 876.645016][ T3992] usb usb52-port1: unable to enumerate USB device [ 876.898004][T15715] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2499'. [ 876.955307][T15717] overlay: ./file0 is not a directory [ 878.826567][T15730] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2497'. [ 880.103066][T15736] vivid-000: ================= START STATUS ================= [ 880.105507][T15736] vivid-000: RDS Tx I/O Mode: Controls [ 880.107224][T15736] vivid-000: RDS Program ID: 32904 [ 880.109015][T15736] vivid-000: RDS Program Type: 3 [ 880.111065][T15736] vivid-000: RDS PS Name: VIVID-TX [ 880.113184][T15736] vivid-000: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 880.117428][T15736] vivid-000: RDS Stereo: true [ 880.119383][T15736] vivid-000: RDS Artificial Head: false [ 880.121548][T15736] vivid-000: RDS Compressed: false [ 880.124995][T15736] vivid-000: RDS Dynamic PTY: false [ 880.127348][T15736] vivid-000: RDS Traffic Announcement: false [ 880.129937][T15736] vivid-000: RDS Traffic Program: true [ 880.132468][T15736] vivid-000: RDS Music: true [ 880.134429][T15736] vivid-000: ================== END STATUS ================== [ 880.250661][T15738] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2503'. [ 880.364309][T15740] overlay: ./file0 is not a directory [ 880.413967][T15744] bridge_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 880.423678][T15744] overlay: Unknown parameter '|2 ' [ 880.486377][T15749] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2505'. [ 880.492214][T15749] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2505'. [ 880.932652][T15754] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2508'. [ 881.019370][T15752] overlay: ./file0 is not a directory [ 882.477100][T15766] JFS: discard option not supported on device [ 882.484412][T15766] Mount JFS Failure: -22 [ 882.486822][T15766] jfs_mount failed w/return code = -22 [ 884.662665][T15792] bridge_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 884.666190][T15792] overlay: Unknown parameter '|2 ' [ 884.669235][T15792] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2519'. [ 884.673087][T15792] netlink: 68 bytes leftover after parsing attributes in process `syz.9.2519'. [ 885.324571][T15801] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2521'. [ 885.425925][T15799] overlay: ./file0 is not a directory [ 886.545859][ T1435] ieee802154 phy0 wpan0: encryption failed: -22 [ 886.548629][ T1435] ieee802154 phy1 wpan1: encryption failed: -22 [ 887.013429][T15813] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2525'. [ 887.568649][T15828] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(7) [ 887.571274][T15828] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 887.574308][T15828] vhci_hcd vhci_hcd.0: Device attached [ 887.867489][ T2321] usb 56-1: SetAddress Request (14) to port 0 [ 887.871803][ T2321] usb 56-1: new SuperSpeed USB device number 14 using vhci_hcd [ 888.067763][T15833] vivid-000: ================= START STATUS ================= [ 888.070835][T15833] vivid-000: RDS Tx I/O Mode: Controls [ 888.072947][T15833] vivid-000: RDS Program ID: 32904 [ 888.075733][T15833] vivid-000: RDS Program Type: 3 [ 888.078212][T15833] vivid-000: RDS PS Name: VIVID-TX [ 888.080517][T15833] vivid-000: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 888.084751][T15833] vivid-000: RDS Stereo: true [ 888.086754][T15833] vivid-000: RDS Artificial Head: false [ 888.089320][T15833] vivid-000: RDS Compressed: false [ 888.091499][T15833] vivid-000: RDS Dynamic PTY: false [ 888.093710][T15833] vivid-000: RDS Traffic Announcement: false [ 888.096257][T15833] vivid-000: RDS Traffic Program: true [ 888.098455][T15833] vivid-000: RDS Music: true [ 888.100650][T15833] vivid-000: ================== END STATUS ================== [ 888.271939][T15829] vhci_hcd: connection reset by peer [ 888.274761][ T231] vhci_hcd vhci_hcd.9: stop threads [ 888.279372][ T231] vhci_hcd vhci_hcd.9: release socket [ 888.281797][ T231] vhci_hcd vhci_hcd.9: disconnect device [ 888.974240][T15843] syzkaller1: entered promiscuous mode [ 888.976782][T15843] syzkaller1: entered allmulticast mode [ 889.062943][T15845] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2535'. [ 889.134746][T15846] overlay: ./file0 is not a directory [ 889.693870][T15856] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2538'. [ 891.187890][T11782] Bluetooth: hci3: unexpected event for opcode 0x2039 [ 891.246381][T11782] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 891.351964][T15872] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2541'. [ 891.705610][ T5750] usb 12-1: new high-speed USB device number 7 using dummy_hcd [ 891.866581][ T5750] usb 12-1: Using ep0 maxpacket: 8 [ 891.871507][ T5750] usb 12-1: config index 0 descriptor too short (expected 301, got 45) [ 891.878307][ T5750] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 891.885164][ T5750] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 891.892326][ T5750] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 891.902140][ T5750] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 891.910466][ T5750] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 891.915957][ T5750] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.154156][ T5750] usb 12-1: usb_control_msg returned -32 [ 892.156527][ T5750] usbtmc 12-1:16.0: can't read capabilities [ 892.507609][T15883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 892.511812][T15883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 892.634134][T15876] usbtmc 12-1:16.0: usb_control_msg returned -71 [ 892.636864][ T5750] usb 12-1: USB disconnect, device number 7 [ 892.639499][T15882] usbtmc 12-1:16.0: send_request_dev_dep_msg_in returned -19 [ 892.645361][T15874] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(7) [ 892.647443][T15874] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 892.649976][T15874] vhci_hcd vhci_hcd.0: Device attached [ 893.279499][T15890] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2545'. [ 893.506118][T15901] JFS: discard option not supported on device [ 893.506466][T15901] Mount JFS Failure: -22 [ 893.506479][T15901] jfs_mount failed w/return code = -22 [ 893.954306][T15886] vhci_hcd: connection reset by peer [ 893.954757][T12361] vhci_hcd vhci_hcd.9: stop threads [ 893.954781][T12361] vhci_hcd vhci_hcd.9: release socket [ 893.954864][T12361] vhci_hcd vhci_hcd.9: disconnect device [ 893.954920][ T2321] usb 56-1: device descriptor read/8, error -110 [ 894.253155][T15909] vivid-003: ================= START STATUS ================= [ 894.255936][T15909] vivid-003: RDS Tx I/O Mode: Controls [ 894.258380][T15909] vivid-003: RDS Program ID: 32904 [ 894.260848][T15909] vivid-003: RDS Program Type: 3 [ 894.263303][T15909] vivid-003: RDS PS Name: VIVID-TX [ 894.265627][T15909] vivid-003: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 894.270111][T15909] vivid-003: RDS Stereo: true [ 894.272329][T15909] vivid-003: RDS Artificial Head: false [ 894.274864][T15909] vivid-003: RDS Compressed: false [ 894.277211][T15909] vivid-003: RDS Dynamic PTY: false [ 894.279462][T15909] vivid-003: RDS Traffic Announcement: false [ 894.282080][T15909] vivid-003: RDS Traffic Program: true [ 894.284719][T15909] vivid-003: RDS Music: true [ 894.286816][T15909] vivid-003: ================== END STATUS ================== [ 894.383741][ T2321] usb usb56-port1: attempt power cycle [ 895.019913][ T2321] usb usb56-port1: unable to enumerate USB device [ 895.084058][T15922] dlm: non-version read from control device 36 [ 895.345499][T14240] usb 14-1: new high-speed USB device number 8 using dummy_hcd [ 895.444947][T15925] dlm: non-version read from control device 36 [ 895.529807][T14240] usb 14-1: Using ep0 maxpacket: 8 [ 895.543898][T15927] netlink: 212348 bytes leftover after parsing attributes in process `syz.8.2560'. [ 895.546850][T15927] openvswitch: netlink: Message has 5 unknown bytes. [ 895.547398][T14240] usb 14-1: unable to get BOS descriptor or descriptor too short [ 895.563172][T14240] usb 14-1: unable to read config index 0 descriptor/start: -71 [ 895.567378][T14240] usb 14-1: can't read configurations, error -71 [ 895.724957][ T5750] usb 12-1: new high-speed USB device number 8 using dummy_hcd [ 895.805752][T15939] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(7) [ 895.807873][T15939] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 895.811657][T15939] vhci_hcd vhci_hcd.0: Device attached [ 895.919894][ T5750] usb 12-1: Using ep0 maxpacket: 8 [ 895.958413][ T5750] usb 12-1: unable to get BOS descriptor or descriptor too short [ 895.964470][ T5750] usb 12-1: unable to read config index 0 descriptor/start: -71 [ 895.967738][ T5750] usb 12-1: can't read configurations, error -71 [ 896.105996][ T2321] usb 54-1: SetAddress Request (10) to port 0 [ 896.107898][ T2321] usb 54-1: new SuperSpeed USB device number 10 using vhci_hcd [ 896.373652][T15949] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2566'. [ 896.556279][T15942] vhci_hcd: connection reset by peer [ 896.559535][T12361] vhci_hcd vhci_hcd.8: stop threads [ 896.561506][T12361] vhci_hcd vhci_hcd.8: release socket [ 896.564808][T12361] vhci_hcd vhci_hcd.8: disconnect device [ 896.969130][T15963] netlink: 'syz.6.2571': attribute type 21 has an invalid length. [ 896.977607][T15963] IPv6: NLM_F_CREATE should be specified when creating new route [ 896.980961][T15963] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 896.983686][T15963] IPv6: NLM_F_CREATE should be set when creating new route [ 896.986526][T15963] IPv6: NLM_F_CREATE should be set when creating new route [ 896.989479][T15963] IPv6: NLM_F_CREATE should be set when creating new route [ 896.994331][T15963] netlink: 'syz.6.2571': attribute type 21 has an invalid length. [ 896.997807][T15963] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 897.241164][T15973] dlm: non-version read from control device 36 [ 897.253511][T15968] vivid-003: ================= START STATUS ================= [ 897.256282][T15968] vivid-003: RDS Tx I/O Mode: Controls [ 897.258771][T15968] vivid-003: RDS Program ID: 32904 [ 897.260630][T15968] vivid-003: RDS Program Type: 3 [ 897.262233][T15968] vivid-003: RDS PS Name: VIVID-TX [ 897.263891][T15968] vivid-003: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 897.267430][T15968] vivid-003: RDS Stereo: true [ 897.268916][T15968] vivid-003: RDS Artificial Head: false [ 897.270818][T15968] vivid-003: RDS Compressed: false [ 897.272389][T15968] vivid-003: RDS Dynamic PTY: false [ 897.274223][T15968] vivid-003: RDS Traffic Announcement: false [ 897.276205][T15968] vivid-003: RDS Traffic Program: true [ 897.277938][T15968] vivid-003: RDS Music: true [ 897.279409][T15968] vivid-003: ================== END STATUS ================== [ 897.379815][T15976] vivid-000: ================= START STATUS ================= [ 897.379828][T15976] vivid-000: RDS Tx I/O Mode: Controls [ 897.379843][T15976] vivid-000: RDS Program ID: 32904 [ 897.379856][T15976] vivid-000: RDS Program Type: 3 [ 897.380094][T15976] vivid-000: RDS PS Name: VIVID-TX [ 897.380106][T15976] vivid-000: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 897.380161][T15976] vivid-000: RDS Stereo: true [ 897.380174][T15976] vivid-000: RDS Artificial Head: false [ 897.380185][T15976] vivid-000: RDS Compressed: false [ 897.380197][T15976] vivid-000: RDS Dynamic PTY: false [ 897.380507][T15976] vivid-000: RDS Traffic Announcement: false [ 897.380519][T15976] vivid-000: RDS Traffic Program: true [ 897.380761][T15976] vivid-000: RDS Music: true [ 897.380957][T15976] vivid-000: ================== END STATUS ================== [ 897.547088][ T5833] usb 13-1: new high-speed USB device number 7 using dummy_hcd [ 897.747207][ T5833] usb 13-1: Using ep0 maxpacket: 8 [ 898.261902][ T5833] usb 13-1: unable to get BOS descriptor or descriptor too short [ 898.269978][ T5833] usb 13-1: unable to read config index 0 descriptor/start: -71 [ 898.277587][ T5833] usb 13-1: can't read configurations, error -71 [ 899.305846][T15998] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2583'. [ 900.684510][T16014] vivid-000: ================= START STATUS ================= [ 900.687750][T16014] vivid-000: RDS Tx I/O Mode: Controls [ 900.690257][T16014] vivid-000: RDS Program ID: 32904 [ 900.692936][T16014] vivid-000: RDS Program Type: 3 [ 900.695309][T16014] vivid-000: RDS PS Name: VIVID-TX [ 900.697762][T16014] vivid-000: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 900.702157][T16014] vivid-000: RDS Stereo: true [ 900.704162][T16014] vivid-000: RDS Artificial Head: false [ 900.707136][T16014] vivid-000: RDS Compressed: false [ 900.709436][T16014] vivid-000: RDS Dynamic PTY: false [ 900.711958][T16014] vivid-000: RDS Traffic Announcement: false [ 900.714932][T16014] vivid-000: RDS Traffic Program: true [ 900.718176][T16014] vivid-000: RDS Music: true [ 900.720525][T16014] vivid-000: ================== END STATUS ================== [ 901.577317][ T2321] usb 54-1: device descriptor read/8, error -110 [ 901.778480][T16035] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2591'. [ 902.034076][ T2321] usb usb54-port1: attempt power cycle [ 902.533954][T16041] vivid-004: ================= START STATUS ================= [ 902.537077][T16041] vivid-004: RDS Tx I/O Mode: Controls [ 902.539331][T16041] vivid-004: RDS Program ID: 32904 [ 902.541177][T16041] vivid-004: RDS Program Type: 3 [ 902.543110][T16041] vivid-004: RDS PS Name: VIVID-TX [ 902.544842][T16041] vivid-004: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 902.548100][T16041] vivid-004: RDS Stereo: true [ 902.550332][T16041] vivid-004: RDS Artificial Head: false [ 902.555956][T16041] vivid-004: RDS Compressed: false [ 902.557895][T16041] vivid-004: RDS Dynamic PTY: false [ 902.559948][T16041] vivid-004: RDS Traffic Announcement: false [ 902.561999][T16041] vivid-004: RDS Traffic Program: true [ 902.564185][T16041] vivid-004: RDS Music: true [ 902.566119][T16041] vivid-004: ================== END STATUS ================== [ 902.800000][ T2321] usb usb54-port1: unable to enumerate USB device [ 902.857442][T16043] dlm: non-version read from control device 36 [ 902.943549][T16031] overlay: ./file0 is not a directory [ 904.751804][T16065] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2599'. [ 905.055805][T16068] netlink: 'syz.6.2603': attribute type 1 has an invalid length. [ 905.059774][T16068] netlink: 'syz.6.2603': attribute type 1 has an invalid length. [ 905.535735][T16074] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2604'. [ 906.042663][T16091] netlink: 'syz.9.2608': attribute type 39 has an invalid length. [ 906.046197][T16091] netlink: 'syz.9.2608': attribute type 41 has an invalid length. [ 906.074615][T16092] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2611'. [ 906.739747][T16101] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2613'. [ 907.666172][T16117] kvm: pic: level sensitive irq not supported [ 907.667685][T16117] kvm: pic: non byte write [ 907.981546][T16129] bridge_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 907.987039][T16129] overlay: Unknown parameter '|2 ' [ 907.990141][T16129] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2621'. [ 907.994157][T16129] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2621'. [ 908.124560][T16128] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(7) [ 908.126615][T16128] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 908.135396][T16128] vhci_hcd vhci_hcd.0: Device attached [ 908.287596][T16139] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 908.290354][T16139] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 908.299280][T16139] vhci_hcd vhci_hcd.0: Device attached [ 908.406308][T16142] vivid-002: ================= START STATUS ================= [ 908.409648][T16142] vivid-002: RDS Tx I/O Mode: Controls [ 908.412215][T16142] vivid-002: RDS Program ID: 32904 [ 908.414570][T16142] vivid-002: RDS Program Type: 3 [ 908.417048][T16142] vivid-002: RDS PS Name: VIVID-TX [ 908.419568][T16142] vivid-002: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 908.424079][T16142] vivid-002: RDS Stereo: true [ 908.426410][T16142] vivid-002: RDS Artificial Head: false [ 908.426958][ T2321] usb 56-1: SetAddress Request (18) to port 0 [ 908.428952][T16142] vivid-002: RDS Compressed: false [ 908.433627][ T2321] usb 56-1: new SuperSpeed USB device number 18 using vhci_hcd [ 908.433842][T16142] vivid-002: RDS Dynamic PTY: false [ 908.438715][T16142] vivid-002: RDS Traffic Announcement: false [ 908.441221][T16142] vivid-002: RDS Traffic Program: true [ 908.443670][T16142] vivid-002: RDS Music: true [ 908.445657][T16142] vivid-002: ================== END STATUS ================== [ 908.600760][T13026] usb 50-1: SetAddress Request (10) to port 0 [ 908.602948][T13026] usb 50-1: new SuperSpeed USB device number 10 using vhci_hcd [ 909.110747][T16140] vhci_hcd: connection reset by peer [ 909.114454][ T71] vhci_hcd vhci_hcd.6: stop threads [ 909.116729][ T71] vhci_hcd vhci_hcd.6: release socket [ 909.119019][ T71] vhci_hcd vhci_hcd.6: disconnect device [ 909.225181][T16135] vhci_hcd: connection reset by peer [ 909.231888][T12361] vhci_hcd vhci_hcd.9: stop threads [ 909.233913][T12361] vhci_hcd vhci_hcd.9: release socket [ 909.235840][T12361] vhci_hcd vhci_hcd.9: disconnect device [ 909.407823][T16149] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2625'. [ 911.122411][T16174] bridge_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 911.135556][T16174] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2632'. [ 911.139694][T16174] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2632'. [ 911.623300][T16182] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(7) [ 911.625885][T16182] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 911.629862][T16182] vhci_hcd vhci_hcd.0: Device attached [ 912.040363][T16196] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2638'. [ 912.437204][T16183] vhci_hcd: connection closed [ 912.437517][ T71] vhci_hcd vhci_hcd.9: stop threads [ 912.445721][ T71] vhci_hcd vhci_hcd.9: release socket [ 912.451202][ T71] vhci_hcd vhci_hcd.9: disconnect device [ 913.017865][T16206] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2642'. [ 913.026285][T16206] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2642'. [ 913.281189][T16211] vivid-004: ================= START STATUS ================= [ 913.284516][T16211] vivid-004: RDS Tx I/O Mode: Controls [ 913.286885][T16211] vivid-004: RDS Program ID: 32904 [ 913.289210][T16211] vivid-004: RDS Program Type: 3 [ 913.291387][T16211] vivid-004: RDS PS Name: VIVID-TX [ 913.294423][T16211] vivid-004: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 913.298600][T16211] vivid-004: RDS Stereo: true [ 913.300692][T16211] vivid-004: RDS Artificial Head: false [ 913.303143][T16211] vivid-004: RDS Compressed: false [ 913.305410][T16211] vivid-004: RDS Dynamic PTY: false [ 913.307792][T16211] vivid-004: RDS Traffic Announcement: false [ 913.310577][T16211] vivid-004: RDS Traffic Program: true [ 913.312972][T16211] vivid-004: RDS Music: true [ 913.315221][T16211] vivid-004: ================== END STATUS ================== [ 913.899725][ T2321] usb 56-1: device descriptor read/8, error -110 [ 914.062322][T13026] usb 50-1: device descriptor read/8, error -110 [ 914.186822][T16224] random: crng reseeded on system resumption [ 914.334205][ T2321] usb usb56-port1: attempt power cycle [ 914.379901][T16230] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2650'. [ 914.406777][T16231] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(7) [ 914.408962][T16231] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 914.415899][T16231] vhci_hcd vhci_hcd.0: Device attached [ 914.474133][ T2321] usb 56-1: SetAddress Request (20) to port 0 [ 914.476853][ T2321] usb 56-1: new SuperSpeed USB device number 20 using vhci_hcd [ 914.528770][T13026] usb usb50-port1: attempt power cycle [ 914.921411][T16237] netlink: 'syz.8.2651': attribute type 29 has an invalid length. [ 915.176366][T16232] vhci_hcd: connection reset by peer [ 915.179201][ T71] vhci_hcd vhci_hcd.9: stop threads [ 915.180853][ T71] vhci_hcd vhci_hcd.9: release socket [ 915.184679][ T71] vhci_hcd vhci_hcd.9: disconnect device [ 915.326733][T13026] usb usb50-port1: unable to enumerate USB device [ 915.992314][T16251] vivid-000: ================= START STATUS ================= [ 915.995432][T16251] vivid-000: RDS Tx I/O Mode: Controls [ 915.997627][T16251] vivid-000: RDS Program ID: 32904 [ 915.999714][T16251] vivid-000: RDS Program Type: 3 [ 916.001896][T16251] vivid-000: RDS PS Name: VIVID-TX [ 916.004361][T16251] vivid-000: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 916.008623][T16251] vivid-000: RDS Stereo: true [ 916.010626][T16251] vivid-000: RDS Artificial Head: false [ 916.012588][T16251] vivid-000: RDS Compressed: false [ 916.014411][T16251] vivid-000: RDS Dynamic PTY: false [ 916.016201][T16251] vivid-000: RDS Traffic Announcement: false [ 916.018481][T16251] vivid-000: RDS Traffic Program: true [ 916.020267][T16251] vivid-000: RDS Music: true [ 916.022048][T16251] vivid-000: ================== END STATUS ================== [ 916.090257][T16253] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2657'. [ 916.717641][T13026] usb 12-1: new high-speed USB device number 10 using dummy_hcd [ 916.880104][T13026] usb 12-1: Using ep0 maxpacket: 8 [ 916.883616][T13026] usb 12-1: config index 0 descriptor too short (expected 301, got 45) [ 916.886736][T13026] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 916.889984][T13026] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 916.893667][T13026] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 916.897517][T13026] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 916.902891][T13026] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 916.906068][T13026] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.136268][T13026] usb 12-1: usb_control_msg returned -32 [ 917.138676][T13026] usbtmc 12-1:16.0: can't read capabilities [ 917.359268][T16265] usbtmc 12-1:16.0: send_request_dev_dep_msg_in returned -90 [ 917.363510][T16265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 917.370664][T16265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 917.379470][T16265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 917.384858][T16265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 917.390793][T16265] usbtmc 12-1:16.0: send_request_dev_dep_msg_in returned -90 [ 917.395963][ T5833] usb 12-1: USB disconnect, device number 10 [ 918.310050][T16277] bridge_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 918.326565][T16277] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2664'. [ 918.332131][T16277] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2664'. [ 918.581695][T16281] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2665'. [ 919.156288][T16285] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2666'. [ 919.958254][ T2321] usb 56-1: device descriptor read/8, error -110 [ 920.382311][ T2321] usb usb56-port1: unable to enumerate USB device [ 922.945330][T16295] dlm: non-version read from control device 36 [ 923.043036][T16301] overlayfs: failed lookup in lower (newroot/233, name='file0', err=-40): overlapping layers [ 923.220443][ T2321] usb 13-1: new high-speed USB device number 9 using dummy_hcd [ 923.455435][T16311] befs: (nullb0): No write support. Marking filesystem read-only [ 923.462877][T16311] befs: (nullb0): invalid magic header [ 923.542002][ T2321] usb 13-1: Using ep0 maxpacket: 8 [ 923.605597][T16310] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2674'. [ 923.725973][ T2321] usb 13-1: unable to get BOS descriptor or descriptor too short [ 923.729095][ T2321] usb 13-1: unable to read config index 0 descriptor/start: -71 [ 923.734394][ T2321] usb 13-1: can't read configurations, error -71 [ 923.791870][T16318] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2676'. [ 924.163771][T16325] dlm: non-version read from control device 36 [ 924.434032][ T5750] usb 12-1: new high-speed USB device number 11 using dummy_hcd [ 924.596571][ T5750] usb 12-1: Using ep0 maxpacket: 8 [ 924.631702][ T5750] usb 12-1: unable to get BOS descriptor or descriptor too short [ 924.641757][ T5750] usb 12-1: unable to read config index 0 descriptor/start: -71 [ 924.652317][ T5750] usb 12-1: can't read configurations, error -71 [ 924.721958][T16328] bridge_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 924.744165][T16328] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2679'. [ 924.747978][T16328] netlink: 68 bytes leftover after parsing attributes in process `syz.8.2679'. [ 924.814090][T16330] FAULT_INJECTION: forcing a failure. [ 924.814090][T16330] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 924.819283][T16330] CPU: 3 UID: 0 PID: 16330 Comm: syz.6.2680 Tainted: G L syzkaller #0 PREEMPT(full) [ 924.819308][T16330] Tainted: [L]=SOFTLOCKUP [ 924.819314][T16330] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 924.819324][T16330] Call Trace: [ 924.819331][T16330] [ 924.819337][T16330] dump_stack_lvl+0x100/0x190 [ 924.819370][T16330] should_fail_ex.cold+0x5/0xa [ 924.819392][T16330] _copy_to_user+0x32/0xd0 [ 924.819417][T16330] simple_read_from_buffer+0xcb/0x170 [ 924.819438][T16330] proc_fail_nth_read+0x1af/0x230 [ 924.819466][T16330] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 924.819499][T16330] ? rw_verify_area+0xce/0x6d0 [ 924.819516][T16330] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 924.819541][T16330] vfs_read+0x1e4/0xb30 [ 924.819562][T16330] ? __pfx_vfs_read+0x10/0x10 [ 924.819579][T16330] ? find_held_lock+0x2b/0x80 [ 924.819600][T16330] ? __fget_files+0x215/0x3d0 [ 924.819623][T16330] ? __fget_files+0x21f/0x3d0 [ 924.819649][T16330] ksys_read+0x12a/0x250 [ 924.819667][T16330] ? __pfx_ksys_read+0x10/0x10 [ 924.819685][T16330] ? rcu_is_watching+0x12/0xc0 [ 924.819704][T16330] ? rcu_is_watching+0x12/0xc0 [ 924.819726][T16330] do_int80_emulation+0x14b/0x720 [ 924.819754][T16330] asm_int80_emulation+0x1a/0x20 [ 924.819771][T16330] RIP: 0023:0xf71c61ab [ 924.819784][T16330] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 924.819800][T16330] RSP: 002b:00000000f54864bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 924.819816][T16330] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f54865d0 [ 924.819828][T16330] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 924.819837][T16330] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 924.819847][T16330] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 924.819856][T16330] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 924.819878][T16330] [ 925.445518][ T40] kauditd_printk_skb: 50 callbacks suppressed [ 925.445536][ T40] audit: type=1326 audit(2000000188.518:4093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16336 comm="syz.7.2683" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f57f7c code=0x0 [ 925.715182][T16352] ptrace attach of ""[16353] was attempted by "/syz-executor exec"[16352] [ 925.841765][T16358] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2689'. [ 925.903824][T16360] overlay: ./file0 is not a directory [ 926.596348][T16385] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(7) [ 926.598386][T16385] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 926.615567][T16385] vhci_hcd vhci_hcd.0: Device attached [ 926.648350][T16384] vivid-004: ================= START STATUS ================= [ 926.651641][T16384] vivid-004: RDS Tx I/O Mode: Controls [ 926.652804][T16389] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2699'. [ 926.654163][T16384] vivid-004: RDS Program ID: 32904 [ 926.660245][T16384] vivid-004: RDS Program Type: 3 [ 926.662751][T16384] vivid-004: RDS PS Name: VIVID-TX [ 926.665135][T16384] vivid-004: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 926.669619][T16384] vivid-004: RDS Stereo: true [ 926.671911][T16384] vivid-004: RDS Artificial Head: false [ 926.674601][T16384] vivid-004: RDS Compressed: false [ 926.676985][T16384] vivid-004: RDS Dynamic PTY: false [ 926.679547][T16384] vivid-004: RDS Traffic Announcement: false [ 926.682541][T16384] vivid-004: RDS Traffic Program: true [ 926.684743][T16384] vivid-004: RDS Music: true [ 926.686888][T16384] vivid-004: ================== END STATUS ================== [ 926.712951][T16390] overlay: ./file0 is not a directory [ 926.959661][T15780] usb 54-1: SetAddress Request (14) to port 0 [ 926.962563][T15780] usb 54-1: new SuperSpeed USB device number 14 using vhci_hcd [ 927.739668][ T2321] usb 12-1: new high-speed USB device number 13 using dummy_hcd [ 927.851246][T16387] vhci_hcd: connection reset by peer [ 927.853897][ T1264] vhci_hcd vhci_hcd.8: stop threads [ 927.856187][ T1264] vhci_hcd vhci_hcd.8: release socket [ 927.864204][T16397] FAULT_INJECTION: forcing a failure. [ 927.864204][T16397] name failslab, interval 1, probability 0, space 0, times 0 [ 927.869798][T16397] CPU: 3 UID: 0 PID: 16397 Comm: syz.6.2702 Tainted: G L syzkaller #0 PREEMPT(full) [ 927.869816][T16397] Tainted: [L]=SOFTLOCKUP [ 927.869820][T16397] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 927.869827][T16397] Call Trace: [ 927.869831][T16397] [ 927.869836][T16397] dump_stack_lvl+0x100/0x190 [ 927.869860][T16397] should_fail_ex.cold+0x5/0xa [ 927.869875][T16397] should_failslab+0xc2/0x120 [ 927.869889][T16397] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 927.869913][T16397] ? __alloc_skb+0x140/0x710 [ 927.869926][T16397] __alloc_skb+0x140/0x710 [ 927.869936][T16397] ? __alloc_skb+0x5b7/0x710 [ 927.869946][T16397] ? __pfx___alloc_skb+0x10/0x10 [ 927.869957][T16397] ? __lock_acquire+0x4a5/0x2630 [ 927.869977][T16397] skb_copy+0x1ca/0x3a0 [ 927.869988][T16397] tcp_send_synack+0x745/0x17b0 [ 927.870004][T16397] ? __pfx_tcp_set_state+0x10/0x10 [ 927.870021][T16397] ? __pfx_tcp_send_synack+0x10/0x10 [ 927.870034][T16397] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 927.870051][T16397] ? tcp_parse_options+0x201/0x1200 [ 927.870068][T16397] ? tcp_sync_mss+0x2e4/0x600 [ 927.870082][T16397] tcp_rcv_state_process+0x32ef/0x7160 [ 927.870095][T16397] ? lockdep_hardirqs_off+0xc0/0xe0 [ 927.870114][T16397] ? __pfx_tcp_rcv_state_process+0x10/0x10 [ 927.870125][T16397] ? __pfx_tcp_connect+0x10/0x10 [ 927.870144][T16397] ? __pfx_tcp_v4_do_rcv+0x10/0x10 [ 927.870155][T16397] ? tcp_v4_do_rcv+0x691/0x1260 [ 927.870166][T16397] tcp_v4_do_rcv+0x691/0x1260 [ 927.870177][T16397] ? __pfx_tcp_v4_do_rcv+0x10/0x10 [ 927.870188][T16397] __release_sock+0x35a/0x440 [ 927.870203][T16397] release_sock+0x1e5/0x280 [ 927.870214][T16397] __inet_stream_connect+0x5c7/0xfa0 [ 927.870235][T16397] ? __pfx___inet_stream_connect+0x10/0x10 [ 927.870253][T16397] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 927.870266][T16397] ? __pfx_woken_wake_function+0x10/0x10 [ 927.870279][T16397] ? __pfx_inet_stream_connect+0x10/0x10 [ 927.870297][T16397] ? __local_bh_enable_ip+0x9e/0x120 [ 927.870314][T16397] ? __pfx_inet_stream_connect+0x10/0x10 [ 927.870330][T16397] inet_stream_connect+0x57/0xa0 [ 927.870348][T16397] __sys_connect_file+0x141/0x1a0 [ 927.870367][T16397] __sys_connect+0x141/0x170 [ 927.870384][T16397] ? __pfx___sys_connect+0x10/0x10 [ 927.870408][T16397] ? ksys_write+0x1ac/0x250 [ 927.870424][T16397] __ia32_sys_connect+0x71/0xb0 [ 927.870441][T16397] ? lockdep_hardirqs_on+0x78/0x100 [ 927.870456][T16397] __do_fast_syscall_32+0xe7/0x970 [ 927.870474][T16397] ? lockdep_hardirqs_on+0x78/0x100 [ 927.870491][T16397] do_fast_syscall_32+0x32/0x70 [ 927.870508][T16397] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 927.870522][T16397] RIP: 0023:0xf7fc5f7c [ 927.870532][T16397] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 927.870543][T16397] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 000000000000016a [ 927.870553][T16397] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 927.870560][T16397] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 927.870567][T16397] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 927.870573][T16397] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 927.870580][T16397] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 927.870605][T16397] [ 927.891300][ T1264] vhci_hcd vhci_hcd.8: disconnect device [ 927.912960][ T2321] usb 12-1: Using ep0 maxpacket: 8 [ 928.133844][ T2321] usb 12-1: config index 0 descriptor too short (expected 301, got 45) [ 928.137585][ T2321] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 928.149755][ T2321] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 928.156542][ T2321] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 928.164951][ T2321] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 928.172055][ T2321] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 928.179468][ T2321] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 928.410636][ T2321] usb 12-1: usb_control_msg returned -32 [ 928.412432][ T2321] usbtmc 12-1:16.0: can't read capabilities [ 928.634139][T16379] usbtmc 12-1:16.0: send_request_dev_dep_msg_in returned -90 [ 928.639935][T16379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 928.646836][T16379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 928.653986][T16379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 928.659942][T16379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 928.666807][T16379] usbtmc 12-1:16.0: send_request_dev_dep_msg_in returned -90 [ 928.671126][T13026] usb 12-1: USB disconnect, device number 13 [ 928.884824][T16412] 0xfffffffffffffffd-0x000000020000 : "" [ 928.891192][T16412] mtd: partition "" is out of reach -- disabled [ 928.925943][T16412] ftl_cs: FTL header not found. [ 932.454078][T15780] usb 54-1: device descriptor read/8, error -110 [ 934.594162][T15780] usb usb54-port1: attempt power cycle [ 935.206477][T16456] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2719'. [ 936.209949][T15780] usb usb54-port1: unable to enumerate USB device [ 937.027622][T16475] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(7) [ 937.029661][T16475] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 937.038311][T16475] vhci_hcd vhci_hcd.0: Device attached [ 937.341801][T15780] usb 56-1: SetAddress Request (22) to port 0 [ 937.344200][T15780] usb 56-1: new SuperSpeed USB device number 22 using vhci_hcd [ 937.650756][T16476] vhci_hcd: connection reset by peer [ 937.658753][ T1264] vhci_hcd vhci_hcd.9: stop threads [ 937.660931][ T1264] vhci_hcd vhci_hcd.9: release socket [ 937.671691][ T1264] vhci_hcd vhci_hcd.9: disconnect device [ 937.965372][T16487] 9p: Bad value for 'rfdno' [ 937.976737][T16487] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 939.794820][T16493] wg2 speed is unknown, defaulting to 1000 [ 939.801212][T16493] wg2 speed is unknown, defaulting to 1000 [ 939.815168][T16493] wg2 speed is unknown, defaulting to 1000 [ 940.250238][T16493] infiniband syz2: set active [ 940.252235][ T2321] wg2 speed is unknown, defaulting to 1000 [ 940.257584][T16493] infiniband syz2: added wg2 [ 940.267537][T16493] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 940.271786][T16493] infiniband syz2: Couldn't open port 1 [ 940.280496][T16493] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 940.290224][T16493] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 940.300463][T16493] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 940.364632][T16493] RDS/IB: syz2: added [ 940.375758][T16493] smc: adding ib device syz2 with port count 1 [ 940.380942][T16493] smc: ib device syz2 port 1 has no pnetid [ 940.386704][ T2321] wg2 speed is unknown, defaulting to 1000 [ 940.396289][T16493] wg2 speed is unknown, defaulting to 1000 [ 940.845954][T16493] wg2 speed is unknown, defaulting to 1000 [ 940.970414][T16518] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 940.973138][T16518] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 941.079442][T16518] vhci_hcd vhci_hcd.0: Device attached [ 941.131518][T16493] wg2 speed is unknown, defaulting to 1000 [ 941.381776][T16493] wg2 speed is unknown, defaulting to 1000 [ 941.438570][ T5854] usb 50-1: SetAddress Request (14) to port 0 [ 941.443139][ T5854] usb 50-1: new SuperSpeed USB device number 14 using vhci_hcd [ 941.524159][T16521] vhci_hcd: connection reset by peer [ 941.527652][ T12] vhci_hcd vhci_hcd.6: stop threads [ 941.530131][ T12] vhci_hcd vhci_hcd.6: release socket [ 941.532585][ T12] vhci_hcd vhci_hcd.6: disconnect device [ 941.697613][T16493] wg2 speed is unknown, defaulting to 1000 [ 942.074777][T16493] wg2 speed is unknown, defaulting to 1000 [ 942.405465][T16532] dlm: non-version read from control device 36 [ 942.663175][ T1042] usb 11-1: new high-speed USB device number 21 using dummy_hcd [ 942.826226][ T1042] usb 11-1: Using ep0 maxpacket: 8 [ 942.847445][T15780] usb 56-1: device descriptor read/8, error -110 [ 942.863316][ T1042] usb 11-1: unable to get BOS descriptor or descriptor too short [ 942.871926][ T1042] usb 11-1: unable to read config index 0 descriptor/start: -71 [ 942.881578][ T1042] usb 11-1: can't read configurations, error -71 [ 942.953715][T16543] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2742'. [ 942.958433][T16543] tipc: Invalid UDP bearer configuration [ 942.958470][T16543] tipc: Enabling of bearer rejected, failed to enable media [ 943.292594][T15780] usb usb56-port1: attempt power cycle [ 943.344737][T16550] netlink: 428 bytes leftover after parsing attributes in process `syz.8.2743'. [ 943.348910][T16550] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2743'. [ 943.410701][T16553] netlink: 'syz.8.2743': attribute type 4 has an invalid length. [ 943.413896][T16553] netlink: 224 bytes leftover after parsing attributes in process `syz.8.2743'. [ 943.704911][T16562] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2746'. [ 943.709688][T16562] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2746'. [ 943.911156][T15780] usb usb56-port1: unable to enumerate USB device [ 944.445077][T16566] vivid-002: ================= START STATUS ================= [ 944.448795][T16566] vivid-002: RDS Tx I/O Mode: Controls [ 944.451414][T16566] vivid-002: RDS Program ID: 32904 [ 944.453637][T16566] vivid-002: RDS Program Type: 3 [ 944.456409][T16566] vivid-002: RDS PS Name: VIVID-TX [ 944.458836][T16566] vivid-002: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 944.464128][T16566] vivid-002: RDS Stereo: true [ 944.466675][T16566] vivid-002: RDS Artificial Head: false [ 944.469059][T16566] vivid-002: RDS Compressed: false [ 944.471356][T16566] vivid-002: RDS Dynamic PTY: false [ 944.473828][T16566] vivid-002: RDS Traffic Announcement: false [ 944.476558][T16566] vivid-002: RDS Traffic Program: true [ 944.478835][T16566] vivid-002: RDS Music: true [ 944.481087][T16566] vivid-002: ================== END STATUS ================== [ 944.987796][T16575] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2750'. [ 945.201520][T16579] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 945.204308][T16579] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 945.235062][T16579] vhci_hcd vhci_hcd.0: Device attached [ 945.336829][T16588] vivid-003: ================= START STATUS ================= [ 945.340143][T16588] vivid-003: RDS Tx I/O Mode: Controls [ 945.342618][T16588] vivid-003: RDS Program ID: 32904 [ 945.345204][T16588] vivid-003: RDS Program Type: 3 [ 945.347400][T16588] vivid-003: RDS PS Name: VIVID-TX [ 945.349772][T16588] vivid-003: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 945.353325][T16588] vivid-003: RDS Stereo: true [ 945.355283][T16588] vivid-003: RDS Artificial Head: false [ 945.357438][T16588] vivid-003: RDS Compressed: false [ 945.359658][T16588] vivid-003: RDS Dynamic PTY: false [ 945.361446][T16588] vivid-003: RDS Traffic Announcement: false [ 945.363523][T16588] vivid-003: RDS Traffic Program: true [ 945.365307][T16588] vivid-003: RDS Music: true [ 945.367041][T16588] vivid-003: ================== END STATUS ================== [ 945.645101][ T7542] usb 52-1: SetAddress Request (14) to port 0 [ 945.647441][ T7542] usb 52-1: new SuperSpeed USB device number 14 using vhci_hcd [ 945.772503][T16594] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2754'. [ 945.784455][T16594] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2754'. [ 947.618883][ T5854] usb 50-1: device descriptor read/8, error -110 [ 947.859306][T16586] vhci_hcd: connection reset by peer [ 947.862315][ T1195] vhci_hcd vhci_hcd.7: stop threads [ 947.864604][ T1195] vhci_hcd vhci_hcd.7: release socket [ 947.868789][ T1195] vhci_hcd vhci_hcd.7: disconnect device [ 947.887148][ T844] usb 11-1: new high-speed USB device number 23 using dummy_hcd [ 948.060426][ T844] usb 11-1: Using ep0 maxpacket: 8 [ 948.071638][ T844] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 948.077360][ T844] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 948.083452][ T844] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 948.087567][ T844] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 948.091109][ T844] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 948.099614][ T844] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 948.103084][ T844] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 948.227064][ T5854] usb usb50-port1: attempt power cycle [ 948.398229][ T844] usb 11-1: usb_control_msg returned -32 [ 948.402571][T16598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 948.406712][ T844] usbtmc 11-1:16.0: can't read capabilities [ 948.408292][T16598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 948.421551][T16598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 948.439530][T16598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 948.663121][ T844] usb 11-1: USB disconnect, device number 23 [ 948.875839][ T5854] usb usb50-port1: unable to enumerate USB device [ 950.553388][T16634] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2765'. [ 950.680004][T16636] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 950.682187][T16636] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 950.688671][T16636] vhci_hcd vhci_hcd.0: Device attached [ 952.490962][T16643] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2766'. [ 952.540691][T16637] vhci_hcd: connection reset by peer [ 952.552867][ T1195] vhci_hcd vhci_hcd.7: stop threads [ 952.579113][ T1195] vhci_hcd vhci_hcd.7: release socket [ 952.620437][ T7542] usb 52-1: device descriptor read/8, error -110 [ 952.623494][ T1195] vhci_hcd vhci_hcd.7: disconnect device [ 953.081342][ T7542] usb usb52-port1: attempt power cycle [ 953.081930][ T1435] ieee802154 phy0 wpan0: encryption failed: -22 [ 953.090313][ T1435] ieee802154 phy1 wpan1: encryption failed: -22 [ 953.685971][ T7542] usb usb52-port1: unable to enumerate USB device [ 953.793500][T11050] usb 11-1: new high-speed USB device number 24 using dummy_hcd [ 953.833182][T16660] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2772'. [ 953.984083][T11050] usb 11-1: Using ep0 maxpacket: 8 [ 953.990822][T11050] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 953.996244][T11050] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 954.004349][T11050] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 954.519642][ T1042] usb 12-1: new high-speed USB device number 14 using dummy_hcd [ 954.682220][ T1042] usb 12-1: Using ep0 maxpacket: 8 [ 954.686446][ T1042] usb 12-1: config 0 has an invalid interface number: 55 but max is 0 [ 954.690697][ T1042] usb 12-1: config 0 has no interface number 0 [ 954.694514][ T1042] usb 12-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 954.698915][ T1042] usb 12-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 954.704291][ T1042] usb 12-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 954.708816][ T1042] usb 12-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 954.713885][ T1042] usb 12-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 954.718234][ T1042] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 954.724006][ T1042] usb 12-1: config 0 descriptor?? [ 954.744313][ T1042] ldusb 12-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 955.077462][T11050] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 955.083333][T11050] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 955.088487][T11050] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 955.092178][T11050] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 955.323390][T11050] usb 11-1: usb_control_msg returned -32 [ 955.325203][T11050] usbtmc 11-1:16.0: can't read capabilities [ 955.520006][ T40] audit: type=1400 audit(2000000216.264:4094): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=16680 comm="syz.9.2778" [ 955.544398][T16658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 955.551441][T16658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 955.556723][T16658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 955.561714][T16658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 955.567755][T11050] usb 11-1: USB disconnect, device number 24 [ 956.013097][T16685] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2780'. [ 956.074072][T16687] overlay: ./file0 is not a directory [ 956.442545][T16691] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2781'. [ 956.446507][T16691] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2781'. [ 956.518177][T16693] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2782'. [ 957.333669][T16702] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 957.523747][ T34] usb 12-1: USB disconnect, device number 14 [ 957.536364][ T34] ldusb 12-1:0.55: LD USB Device #0 now disconnected [ 957.616237][T16711] fuse: Bad value for 'fd' [ 958.562244][ T39] usb 13-1: new high-speed USB device number 11 using dummy_hcd [ 958.735559][ T39] usb 13-1: Using ep0 maxpacket: 8 [ 958.745151][ T39] usb 13-1: config index 0 descriptor too short (expected 301, got 45) [ 958.752470][ T39] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 958.756827][ T39] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 958.779407][ T39] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 958.808338][ T39] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 958.864833][ T39] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 958.884702][ T39] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 959.225418][ T39] usb 13-1: usb_control_msg returned -32 [ 959.227224][ T39] usbtmc 13-1:16.0: can't read capabilities [ 959.424417][T16729] x_tables: duplicate underflow at hook 1 [ 959.453009][T16729] hub 8-0:1.0: USB hub found [ 959.457514][T16729] hub 8-0:1.0: 1 port detected [ 959.558724][T16735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 959.562373][T16735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 959.566356][T16735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 959.569562][T16735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 959.698672][T16718] usbtmc 13-1:16.0: usb_control_msg returned -71 [ 959.698859][ T1042] usb 13-1: USB disconnect, device number 11 [ 959.703135][T16732] usbtmc 13-1:16.0: send_request_dev_dep_msg_in returned -19 [ 960.404818][T16750] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2797'. [ 961.054884][ T1042] usb 11-1: new high-speed USB device number 25 using dummy_hcd [ 961.219521][ T1042] usb 11-1: Using ep0 maxpacket: 32 [ 961.225488][ T1042] usb 11-1: config index 0 descriptor too short (expected 156, got 27) [ 961.232323][ T1042] usb 11-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 961.239385][ T1042] usb 11-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 961.247030][ T1042] usb 11-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 961.257743][ T1042] usb 11-1: config 0 interface 0 has no altsetting 0 [ 961.262522][ T1042] usb 11-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 961.265401][ T1042] usb 11-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 961.269489][ T1042] usb 11-1: Product: syz [ 961.270799][ T1042] usb 11-1: Manufacturer: syz [ 961.274037][ T1042] usb 11-1: SerialNumber: syz [ 961.277027][ T1042] usb 11-1: config 0 descriptor?? [ 961.281874][ T1042] ldusb 11-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 961.287707][ T1042] ldusb 11-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 961.340818][T16775] 9pnet_fd: Insufficient options for proto=fd [ 961.344755][T16776] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2806'. [ 961.425516][ T40] audit: type=1326 audit(2000000221.717:4095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16771 comm="syz.9.2805" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef7c code=0x7ffc0000 [ 961.436102][ T40] audit: type=1326 audit(2000000221.726:4096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16771 comm="syz.9.2805" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef7c code=0x7ffc0000 [ 961.450540][ T40] audit: type=1326 audit(2000000221.726:4097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16771 comm="syz.9.2805" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf707ef7c code=0x7ffc0000 [ 961.459668][ T40] audit: type=1326 audit(2000000221.726:4098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16771 comm="syz.9.2805" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef7c code=0x7ffc0000 [ 961.467049][ T40] audit: type=1326 audit(2000000221.726:4099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16771 comm="syz.9.2805" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef7c code=0x7ffc0000 [ 961.477449][ T40] audit: type=1326 audit(2000000221.726:4100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16771 comm="syz.9.2805" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef7c code=0x7ffc0000 [ 961.477475][ T40] audit: type=1326 audit(2000000221.726:4101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16771 comm="syz.9.2805" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef7c code=0x7ffc0000 [ 961.477512][ T40] audit: type=1326 audit(2000000221.726:4102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16771 comm="syz.9.2805" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef7c code=0x7ffc0000 [ 961.477546][ T40] audit: type=1326 audit(2000000221.726:4103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16771 comm="syz.9.2805" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf707ef7c code=0x7ffc0000 [ 961.477573][ T40] audit: type=1326 audit(2000000221.726:4104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16771 comm="syz.9.2805" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef7c code=0x7ffc0000 [ 961.630450][T16764] ldusb 11-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 961.630500][T11050] usb 11-1: USB disconnect, device number 25 [ 961.630524][ C2] ldusb 11-1:0.0: usb_submit_urb failed (-19) [ 961.636376][T11050] ldusb 11-1:0.0: LD USB Device #0 now disconnected [ 962.057957][T16783] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2807'. [ 962.058568][T16783] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2807'. [ 962.528820][ T34] usb 14-1: new high-speed USB device number 10 using dummy_hcd [ 962.588963][T16795] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 962.591603][T16795] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 962.595662][T16795] vhci_hcd vhci_hcd.0: Device attached [ 962.691381][ T34] usb 14-1: Using ep0 maxpacket: 8 [ 962.694659][ T34] usb 14-1: config index 0 descriptor too short (expected 301, got 45) [ 962.697742][ T34] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 962.701209][ T34] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 962.704538][ T34] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 962.707585][ T34] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 962.712161][ T34] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 962.715589][ T34] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 962.897337][ T1042] usb 13-1: new low-speed USB device number 12 using dummy_hcd [ 962.929742][T12467] usb 52-1: SetAddress Request (18) to port 0 [ 962.932003][T12467] usb 52-1: new SuperSpeed USB device number 18 using vhci_hcd [ 962.954904][ T34] usb 14-1: usb_control_msg returned -32 [ 962.969335][ T34] usbtmc 14-1:16.0: can't read capabilities [ 963.059731][ T1042] usb 13-1: Invalid ep0 maxpacket: 32 [ 963.200706][ T1042] usb 13-1: new low-speed USB device number 13 using dummy_hcd [ 963.280484][T16803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 963.299114][T16803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 963.311300][T16803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 963.320146][T16803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 963.325388][T16796] vhci_hcd: connection reset by peer [ 963.327907][ T12] vhci_hcd vhci_hcd.7: stop threads [ 963.329537][ T12] vhci_hcd vhci_hcd.7: release socket [ 963.331448][ T12] vhci_hcd vhci_hcd.7: disconnect device [ 963.363203][ T1042] usb 13-1: Invalid ep0 maxpacket: 32 [ 963.366662][ T1042] usb usb13-port1: attempt power cycle [ 963.453656][T16787] usbtmc 14-1:16.0: usb_control_msg returned -71 [ 963.454393][ T34] usb 14-1: USB disconnect, device number 10 [ 963.455754][T16801] usbtmc 14-1:16.0: send_request_dev_dep_msg_in returned -19 [ 963.487366][T16805] x_tables: duplicate underflow at hook 1 [ 963.731937][ T1042] usb 13-1: new low-speed USB device number 14 using dummy_hcd [ 963.754121][ T1042] usb 13-1: Invalid ep0 maxpacket: 32 [ 963.894297][ T1042] usb 13-1: new low-speed USB device number 15 using dummy_hcd [ 963.917403][ T1042] usb 13-1: Invalid ep0 maxpacket: 32 [ 963.919634][ T1042] usb usb13-port1: unable to enumerate USB device [ 964.276570][T16817] openvswitch: netlink: IP tunnel dst address not specified [ 964.280982][T16818] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2816'. [ 965.287087][T16834] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2821'. [ 965.291778][T16834] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2821'. [ 965.584976][ T39] usb 12-1: new high-speed USB device number 15 using dummy_hcd [ 965.747568][ T39] usb 12-1: Using ep0 maxpacket: 16 [ 965.762911][T16833] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 965.768884][T16833] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 965.775969][T16833] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 965.795484][T16833] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 965.942778][T13026] usb 14-1: new high-speed USB device number 11 using dummy_hcd [ 966.117733][T13026] usb 14-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 966.126857][T13026] usb 14-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 966.137778][T13026] usb 14-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 966.144253][T13026] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 966.157914][T16841] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 966.177364][T13026] usb 14-1: Quirk or no altset; falling back to MIDI 1.0 [ 966.289664][ T34] usb 13-1: new high-speed USB device number 16 using dummy_hcd [ 966.430429][ T34] usb 13-1: device descriptor read/64, error -71 [ 966.549651][ T3992] usb 11-1: new high-speed USB device number 26 using dummy_hcd [ 966.690482][ T34] usb 13-1: new high-speed USB device number 17 using dummy_hcd [ 966.831390][ T34] usb 13-1: device descriptor read/64, error -71 [ 966.951700][ T34] usb usb13-port1: attempt power cycle [ 967.319778][ T34] usb 13-1: new high-speed USB device number 18 using dummy_hcd [ 967.342716][ T34] usb 13-1: device descriptor read/8, error -71 [ 967.600903][ T34] usb 13-1: new high-speed USB device number 19 using dummy_hcd [ 967.623086][ T34] usb 13-1: device descriptor read/8, error -71 [ 967.630537][ T3992] usb 11-1: Using ep0 maxpacket: 8 [ 967.743658][ T34] usb usb13-port1: unable to enumerate USB device [ 968.047530][ T3992] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 968.051121][ T3992] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 968.051687][ T844] usb 14-1: USB disconnect, device number 11 [ 968.055100][ T3992] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 968.055125][ T3992] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 968.065038][ T3992] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 968.069399][ T3992] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 968.072380][ T3992] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 968.305583][ T3992] usb 11-1: usb_control_msg returned -32 [ 968.307341][ T3992] usbtmc 11-1:16.0: can't read capabilities [ 968.385732][ T39] usb 12-1: unable to get BOS descriptor or descriptor too short [ 968.393347][ T39] usb 12-1: unable to read config index 0 descriptor/start: -71 [ 968.398021][ T39] usb 12-1: can't read configurations, error -71 [ 968.435842][T12467] usb 52-1: device descriptor read/8, error -110 [ 968.639881][T16854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 968.644744][T16854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 968.650974][T16854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 968.654687][T16854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 968.790883][T16845] usbtmc 11-1:16.0: usb_control_msg returned -71 [ 968.791075][ T3992] usb 11-1: USB disconnect, device number 26 [ 968.797826][T16852] usbtmc 11-1:16.0: send_request_dev_dep_msg_in returned -19 [ 968.869439][T12467] usb usb52-port1: attempt power cycle [ 969.191884][T16871] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2830'. [ 969.605499][T16878] netlink: 'syz.6.2832': attribute type 7 has an invalid length. [ 969.615474][T12467] usb usb52-port1: unable to enumerate USB device [ 969.636298][T16878] : entered promiscuous mode [ 969.711186][T16868] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 969.715603][T16868] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 969.740653][T16868] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 969.743527][T16868] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 969.789738][T16868] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 969.798286][T16868] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 969.824652][T16885] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(7) [ 969.827491][T16885] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 969.839915][T16868] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 969.854418][T16885] vhci_hcd vhci_hcd.0: Device attached [ 969.900432][T16884] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2833'. [ 969.913302][T16884] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2833'. [ 970.067512][T16895] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 970.180188][T12467] usb 54-1: SetAddress Request (18) to port 0 [ 970.182219][T12467] usb 54-1: new SuperSpeed USB device number 18 using vhci_hcd [ 970.717675][T16888] vhci_hcd: connection reset by peer [ 970.719630][ T12] vhci_hcd vhci_hcd.8: stop threads [ 970.721473][ T12] vhci_hcd vhci_hcd.8: release socket [ 970.724019][ T12] vhci_hcd vhci_hcd.8: disconnect device [ 971.113056][T11782] Bluetooth: hci3: command 0x0406 tx timeout [ 971.253218][T13026] usb 14-1: new high-speed USB device number 12 using dummy_hcd [ 971.416033][T13026] usb 14-1: Using ep0 maxpacket: 32 [ 971.421694][T13026] usb 14-1: unable to get BOS descriptor or descriptor too short [ 971.425054][T13026] usb 14-1: config 14 has an invalid interface number: 57 but max is 1 [ 971.427751][T13026] usb 14-1: config 14 has an invalid interface number: 228 but max is 1 [ 971.430318][T13026] usb 14-1: config 14 has no interface number 0 [ 971.432266][T13026] usb 14-1: config 14 has no interface number 1 [ 971.434287][T13026] usb 14-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 971.437691][T13026] usb 14-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 971.441356][T13026] usb 14-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 971.444945][T13026] usb 14-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 971.448610][T13026] usb 14-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 971.452149][T13026] usb 14-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 971.456913][T13026] usb 14-1: config 14 interface 57 has no altsetting 0 [ 971.460157][T13026] usb 14-1: config 14 interface 228 has no altsetting 0 [ 971.463941][T13026] usb 14-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 971.466878][T13026] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.469391][T13026] usb 14-1: Product: syz [ 971.470946][T13026] usb 14-1: Manufacturer: syz [ 971.472538][T13026] usb 14-1: SerialNumber: syz [ 971.597427][T16908] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(7) [ 971.599798][T16908] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 971.603944][T16908] vhci_hcd vhci_hcd.0: Device attached [ 971.870869][ T39] usb 12-1: new high-speed USB device number 17 using dummy_hcd [ 971.915338][T13026] legousbtower 14-1:14.57: interrupt endpoints not found [ 971.979344][T11782] Bluetooth: hci1: command 0x0c1a tx timeout [ 971.981363][T11782] Bluetooth: hci4: command 0x0406 tx timeout [ 972.033425][ T39] usb 12-1: Using ep0 maxpacket: 8 [ 972.036572][ T39] usb 12-1: config index 0 descriptor too short (expected 301, got 45) [ 972.039316][ T39] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 972.042480][ T39] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 972.045666][ T39] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 972.048791][ T39] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 972.053030][ T39] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 972.056256][ T39] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 972.145616][T16914] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2841'. [ 972.275069][T16909] vhci_hcd: connection closed [ 972.275342][T12361] vhci_hcd vhci_hcd.8: stop threads [ 972.279542][T12361] vhci_hcd vhci_hcd.8: release socket [ 972.281903][T12361] vhci_hcd vhci_hcd.8: disconnect device [ 972.284559][ T39] usb 12-1: usb_control_msg returned -32 [ 972.286904][ T39] usbtmc 12-1:16.0: can't read capabilities [ 972.363588][T16900] veth3: entered promiscuous mode [ 972.365247][T16900] veth3: entered allmulticast mode [ 972.371678][T13026] legousbtower 14-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 972.375412][T13026] legousbtower 14-1:14.228: LEGO USB Tower #-159 now attached to major 180 minor 1 [ 972.615085][T16918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 972.619342][T16918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 972.624104][T16918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 972.627887][T16918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 972.755548][T16912] usbtmc 12-1:16.0: usb_control_msg returned -71 [ 972.755823][ T10] usb 12-1: USB disconnect, device number 17 [ 972.764475][T16917] usbtmc 12-1:16.0: send_request_dev_dep_msg_in returned -19 [ 973.315501][T16923] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2842'. [ 973.366841][T11782] Bluetooth: hci3: command 0x0406 tx timeout [ 973.377808][T16927] wg2 speed is unknown, defaulting to 1000 [ 974.233589][T11782] Bluetooth: hci4: command 0x0406 tx timeout [ 974.247635][T11782] Bluetooth: hci1: command 0x0c1a tx timeout [ 974.524844][ T39] usb 14-1: USB disconnect, device number 12 [ 974.538318][ T39] legousbtower 14-1:14.228: LEGO USB Tower #-159 now disconnected [ 975.163809][T16952] netlink: 'syz.6.2850': attribute type 1 has an invalid length. [ 975.707775][T12467] usb 54-1: device descriptor read/8, error -110 [ 975.729268][ T3992] usb 13-1: new high-speed USB device number 20 using dummy_hcd [ 976.086727][ T3992] usb 13-1: Using ep0 maxpacket: 16 [ 976.103645][T16954] siw: device registration error -23 [ 976.305363][T12467] usb usb54-port1: attempt power cycle [ 976.356561][T16952] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 976.465641][T16960] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2851'. [ 976.487726][T11782] Bluetooth: hci1: command 0x0c1a tx timeout [ 976.528135][T16952] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 976.621615][T16952] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 976.723302][T16952] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 976.755517][T16965] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2852'. [ 976.818077][ T6102] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.839940][ T6102] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.864568][ T12] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.874919][ T6102] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.977998][T12467] usb usb54-port1: unable to enumerate USB device [ 977.588531][T16979] dlm: non-version read from control device 36 [ 977.869477][T16981] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 977.871497][T16981] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 977.874614][T16981] vhci_hcd vhci_hcd.0: Device attached [ 977.886509][ T844] usb 14-1: new high-speed USB device number 13 using dummy_hcd [ 977.984665][T16985] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2857'. [ 978.060683][ T844] usb 14-1: Using ep0 maxpacket: 8 [ 978.112820][ T844] usb 14-1: unable to get BOS descriptor or descriptor too short [ 978.120046][ T844] usb 14-1: unable to read config index 0 descriptor/start: -71 [ 978.123688][ T844] usb 14-1: can't read configurations, error -71 [ 978.156878][ T5854] usb 52-1: SetAddress Request (22) to port 0 [ 978.159029][ T5854] usb 52-1: new SuperSpeed USB device number 22 using vhci_hcd [ 978.233069][ T3992] usb 13-1: unable to get BOS descriptor or descriptor too short [ 978.237040][ T3992] usb 13-1: unable to read config index 0 descriptor/start: -71 [ 978.240415][ T3992] usb 13-1: can't read configurations, error -71 [ 978.654370][T16982] vhci_hcd: connection reset by peer [ 978.673340][ T6102] vhci_hcd vhci_hcd.7: stop threads [ 978.675029][ T6102] vhci_hcd vhci_hcd.7: release socket [ 978.680675][ T6102] vhci_hcd vhci_hcd.7: disconnect device [ 978.753146][T16995] dlm: non-version read from control device 36 [ 979.013013][T12467] usb 11-1: new high-speed USB device number 27 using dummy_hcd [ 979.175484][T12467] usb 11-1: Using ep0 maxpacket: 8 [ 979.198136][T12467] usb 11-1: unable to get BOS descriptor or descriptor too short [ 979.205850][T12467] usb 11-1: unable to read config index 0 descriptor/start: -71 [ 979.211998][T12467] usb 11-1: can't read configurations, error -71 [ 981.624219][T17022] Mount JFS Failure: -5 [ 981.666378][T17028] can0: slcan on ttyS3. [ 981.670492][T17028] FAULT_INJECTION: forcing a failure. [ 981.670492][T17028] name fail_futex, interval 1, probability 0, space 0, times 1 [ 981.674432][T17028] CPU: 0 UID: 0 PID: 17028 Comm: syz.6.2869 Tainted: G L syzkaller #0 PREEMPT(full) [ 981.674448][T17028] Tainted: [L]=SOFTLOCKUP [ 981.674453][T17028] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 981.674459][T17028] Call Trace: [ 981.674463][T17028] [ 981.674467][T17028] dump_stack_lvl+0x100/0x190 [ 981.674490][T17028] should_fail_ex.cold+0x5/0xa [ 981.674504][T17028] get_futex_key+0x295/0x1510 [ 981.674525][T17028] ? __pfx_get_futex_key+0x10/0x10 [ 981.674541][T17028] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 981.674555][T17028] ? ktime_add_safe+0x60/0x70 [ 981.674567][T17028] futex_lock_pi+0x1d2/0x7a0 [ 981.674582][T17028] ? __pfx_futex_lock_pi+0x10/0x10 [ 981.674597][T17028] ? __lock_acquire+0x4a5/0x2630 [ 981.674617][T17028] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 981.674637][T17028] ? __pfx_futex_wake_mark+0x10/0x10 [ 981.674653][T17028] ? __might_fault+0xc5/0x140 [ 981.674670][T17028] ? __might_fault+0xc5/0x140 [ 981.674690][T17028] do_futex+0x18a/0x350 [ 981.674702][T17028] ? __pfx_do_futex+0x10/0x10 [ 981.674713][T17028] ? __fget_files+0x215/0x3d0 [ 981.674727][T17028] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 981.674746][T17028] __ia32_sys_futex_time32+0x2f4/0x470 [ 981.674762][T17028] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 981.674778][T17028] ? fput+0x79/0x100 [ 981.674794][T17028] ? ksys_write+0x1ac/0x250 [ 981.674807][T17028] ? rcu_is_watching+0x12/0xc0 [ 981.674822][T17028] __do_fast_syscall_32+0xe7/0x970 [ 981.674839][T17028] ? lockdep_hardirqs_on+0x78/0x100 [ 981.674855][T17028] do_fast_syscall_32+0x32/0x70 [ 981.674872][T17028] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 981.674887][T17028] RIP: 0023:0xf7fc5f7c [ 981.674896][T17028] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 981.674907][T17028] RSP: 002b:00000000f544450c EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 981.674918][T17028] RAX: ffffffffffffffda RBX: 0000000080000040 RCX: 000000000000000d [ 981.674925][T17028] RDX: 0000000000000000 RSI: 0000000080000240 RDI: 0000000000000000 [ 981.674931][T17028] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 981.674938][T17028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 981.674945][T17028] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 981.674958][T17028] [ 981.813468][T17033] overlayfs: failed to resolve './file2': -2 [ 981.822766][T17033] overlayfs: overlapping lowerdir path [ 981.863891][T17019] can0 (unregistered): slcan off ttyS3. [ 981.941718][T17045] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2871'. [ 981.945620][T17045] netlink: 68 bytes leftover after parsing attributes in process `syz.8.2871'. [ 983.158115][T17057] dlm: non-version read from control device 36 [ 983.424182][T11050] usb 13-1: new high-speed USB device number 22 using dummy_hcd [ 983.589079][T11050] usb 13-1: Using ep0 maxpacket: 8 [ 983.610703][T17059] cdrom: dropping to single frame dma [ 983.677918][T11050] usb 13-1: unable to get BOS descriptor or descriptor too short [ 983.690431][T11050] usb 13-1: unable to read config index 0 descriptor/start: -71 [ 983.694912][ T5854] usb 52-1: device descriptor read/8, error -110 [ 983.697108][T11050] usb 13-1: can't read configurations, error -71 [ 984.130893][ T5854] usb usb52-port1: attempt power cycle [ 984.585313][T17080] can0: slcan on ttyS3. [ 984.713913][T17073] can0 (unregistered): slcan off ttyS3. [ 984.758824][ T5854] usb usb52-port1: unable to enumerate USB device [ 984.844005][T11050] usb 13-1: new high-speed USB device number 23 using dummy_hcd [ 985.017307][T11050] usb 13-1: Using ep0 maxpacket: 32 [ 985.030999][T11050] usb 13-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 985.035422][T11050] usb 13-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 985.057327][T11050] usb 13-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 985.070689][T11050] usb 13-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 985.095234][T17098] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2883'. [ 985.098819][T11050] usb 13-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 985.099113][T17098] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2883'. [ 985.102643][T11050] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 985.128836][T11050] usb 13-1: Product: syz [ 985.130647][T11050] usb 13-1: Manufacturer: syz [ 985.132659][T11050] usb 13-1: SerialNumber: syz [ 985.159002][ C0] imon 13-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 985.204426][T11050] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:155.0/input/input24 [ 985.387630][T17101] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2884'. [ 985.397883][T11050] imon 13-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 985.482256][T11050] (id 0x00) [ 985.711007][T11050] rc_core: IR keymap rc-imon-pad not found [ 985.721569][T11050] Registered IR keymap rc-empty [ 985.731074][T11050] imon 13-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 985.742415][T11050] imon 13-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 985.755228][T11050] imon:send_packet: packet tx failed (-71) [ 985.775796][T11050] imon 13-1:155.0: remote input dev register failed [ 985.845932][T11050] imon 13-1:155.0: imon_init_intf0: rc device setup failed [ 986.062942][T17111] netlink: 1624 bytes leftover after parsing attributes in process `syz.6.2887'. [ 986.270088][T11050] imon 13-1:155.0: unable to initialize intf0, err 0 [ 986.273899][T11050] imon:imon_probe: failed to initialize context! [ 986.277699][T11050] imon 13-1:155.0: unable to register, err -19 [ 986.286100][T11050] usb 13-1: USB disconnect, device number 23 [ 986.610518][T17117] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2889'. [ 987.332244][T17135] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2893'. [ 987.462798][T17133] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2892'. [ 988.529090][T17143] netlink: 'syz.8.2894': attribute type 15 has an invalid length. [ 988.533152][T17143] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2894'. [ 988.551205][T17143] bridge_slave_0: left allmulticast mode [ 988.555663][T17143] bridge_slave_0: left promiscuous mode [ 988.557567][T17143] bridge0: port 1(bridge_slave_0) entered disabled state [ 988.642488][T17143] bridge_slave_1: left allmulticast mode [ 988.647168][T17143] bridge_slave_1: left promiscuous mode [ 988.650216][T17143] bridge0: port 2(bridge_slave_1) entered disabled state [ 988.675466][T17143] bond0: (slave bond_slave_0): Releasing backup interface [ 988.693947][T17143] bond0: (slave c): Releasing backup interface [ 988.735832][T17143] team0: Port device team_slave_0 removed [ 988.743376][T17143] team0: Port device team_slave_1 removed [ 988.749225][T17143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 988.758324][T17143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 988.766563][T17143] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 988.785140][T17147] tipc: Started in network mode [ 988.786714][T17147] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 988.790045][T17147] tipc: Enabling of bearer rejected, failed to enable media [ 989.085676][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 989.105576][T17154] netlink: 1624 bytes leftover after parsing attributes in process `syz.7.2897'. [ 989.420853][T17164] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 991.958351][ T40] kauditd_printk_skb: 372 callbacks suppressed [ 991.958367][ T40] audit: type=1326 audit(2000000249.887:4477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17187 comm="syz.8.2905" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcef7c code=0x7ffc0000 [ 991.972516][ T40] audit: type=1326 audit(2000000249.896:4478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17187 comm="syz.8.2905" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcef7c code=0x7ffc0000 [ 991.982142][ T40] audit: type=1326 audit(2000000249.896:4479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17187 comm="syz.8.2905" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcef7c code=0x7ffc0000 [ 991.991417][ T40] audit: type=1326 audit(2000000249.896:4480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17187 comm="syz.8.2905" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcef7c code=0x7ffc0000 [ 992.000404][ T40] audit: type=1326 audit(2000000249.896:4481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17187 comm="syz.8.2905" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf6fcef7c code=0x7ffc0000 [ 992.008937][ T40] audit: type=1326 audit(2000000249.896:4482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17187 comm="syz.8.2905" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcef7c code=0x7ffc0000 [ 992.017446][ T40] audit: type=1326 audit(2000000249.896:4483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17187 comm="syz.8.2905" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcef7c code=0x7ffc0000 [ 992.026174][ T40] audit: type=1326 audit(2000000249.896:4484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17187 comm="syz.8.2905" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6fcef7c code=0x7ffc0000 [ 992.039956][ T40] audit: type=1326 audit(2000000249.896:4485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17187 comm="syz.8.2905" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcef7c code=0x7ffc0000 [ 992.053325][ T40] audit: type=1326 audit(2000000249.896:4486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17187 comm="syz.8.2905" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcef7c code=0x7ffc0000 [ 992.205862][T17194] netlink: 1624 bytes leftover after parsing attributes in process `syz.9.2907'. [ 992.299488][T17202] RDS: rds_bind could not find a transport for fc01::1, load rds_tcp or rds_rdma? [ 992.375374][ T5854] hid (null): global environment stack underflow [ 992.389808][ T5854] hid-generic 616F:20C2607D:F72986D9.0005: global environment stack underflow [ 992.393069][ T5854] hid-generic 616F:20C2607D:F72986D9.0005: item 0 1 1 11 parsing failed [ 992.397249][ T5854] hid-generic 616F:20C2607D:F72986D9.0005: probe with driver hid-generic failed with error -22 [ 992.463228][T13026] usb 13-1: new high-speed USB device number 24 using dummy_hcd [ 992.625187][T13026] usb 13-1: Using ep0 maxpacket: 8 [ 992.628522][T13026] usb 13-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 992.636689][T13026] usb 13-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 992.640645][T13026] usb 13-1: config 0 interface 0 has no altsetting 0 [ 992.642937][T13026] usb 13-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 992.646995][T13026] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 992.652453][T17208] wg2 speed is unknown, defaulting to 1000 [ 992.655965][T13026] usb 13-1: config 0 descriptor?? [ 993.115019][T13026] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 993.123505][T13026] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 993.130704][T13026] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 993.136016][T13026] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 993.141431][T13026] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 993.147991][T13026] mcp2221 0003:04D8:00DD.0006: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.8-1/input0 [ 993.342078][T17196] i2c i2c-2: unsupported multi-msg i2c transaction [ 993.353675][T17196] netlink: 56 bytes leftover after parsing attributes in process `syz.8.2908'. [ 993.390225][T13026] usb 13-1: USB disconnect, device number 24 [ 994.537654][T17236] autofs4:pid:17236:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.1792), cmd(0xc0189375) [ 994.542728][T17236] autofs4:pid:17236:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) [ 994.597264][T17239] netlink: 252 bytes leftover after parsing attributes in process `syz.7.2924'. [ 994.603636][T17239] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2924'. [ 994.604281][T17242] fuse: Bad value for 'user_id' [ 994.608202][T17242] fuse: Bad value for 'user_id' [ 996.371970][T17264] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2929'. [ 996.755688][T17268] pimreg: entered allmulticast mode [ 998.269700][T17288] netlink: 212368 bytes leftover after parsing attributes in process `syz.9.2936'. [ 998.589971][T17299] FAULT_INJECTION: forcing a failure. [ 998.589971][T17299] name failslab, interval 1, probability 0, space 0, times 0 [ 998.594119][T17299] CPU: 1 UID: 0 PID: 17299 Comm: syz.9.2939 Tainted: G L syzkaller #0 PREEMPT(full) [ 998.594150][T17299] Tainted: [L]=SOFTLOCKUP [ 998.594155][T17299] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 998.594161][T17299] Call Trace: [ 998.594166][T17299] [ 998.594171][T17299] dump_stack_lvl+0x100/0x190 [ 998.594194][T17299] should_fail_ex.cold+0x5/0xa [ 998.594209][T17299] should_failslab+0xc2/0x120 [ 998.594224][T17299] __kmalloc_cache_noprof+0x7a/0x6f0 [ 998.594241][T17299] ? sctp_add_bind_addr+0xae/0x3e0 [ 998.594261][T17299] sctp_add_bind_addr+0xae/0x3e0 [ 998.594279][T17299] sctp_copy_local_addr_list+0x349/0x550 [ 998.594293][T17299] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 998.594307][T17299] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 998.594320][T17299] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 998.594344][T17299] sctp_bind_addr_copy+0xe0/0x530 [ 998.594365][T17299] sctp_connect_new_asoc+0x1c9/0x770 [ 998.594380][T17299] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 998.594394][T17299] ? sctp_endpoint_lookup_assoc+0x15c/0x2a0 [ 998.594407][T17299] ? sctp_endpoint_lookup_assoc+0x15c/0x2a0 [ 998.594422][T17299] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 998.594439][T17299] sctp_sendmsg+0x1743/0x22e0 [ 998.594457][T17299] ? __pfx_sctp_sendmsg+0x10/0x10 [ 998.594470][T17299] ? __lock_acquire+0x4a5/0x2630 [ 998.594490][T17299] ? aa_sk_perm+0x309/0xaa0 [ 998.594508][T17299] ? __pfx_aa_sk_perm+0x10/0x10 [ 998.594525][T17299] ? __pfx_sctp_sendmsg+0x10/0x10 [ 998.594540][T17299] inet_sendmsg+0x11c/0x140 [ 998.594559][T17299] ____sys_sendmsg+0x98d/0xb70 [ 998.594573][T17299] ? __pfx_inet_sendmsg+0x10/0x10 [ 998.594592][T17299] ? __pfx_____sys_sendmsg+0x10/0x10 [ 998.594610][T17299] ? __lock_acquire+0x4a5/0x2630 [ 998.594629][T17299] ___sys_sendmsg+0x190/0x1e0 [ 998.594646][T17299] ? __pfx____sys_sendmsg+0x10/0x10 [ 998.594662][T17299] ? lock_acquire+0x1b1/0x370 [ 998.594684][T17299] ? find_held_lock+0x2b/0x80 [ 998.594706][T17299] __sys_sendmsg+0x170/0x220 [ 998.594718][T17299] ? __pfx___sys_sendmsg+0x10/0x10 [ 998.594734][T17299] ? exit_to_user_mode_loop+0xf3/0x670 [ 998.594752][T17299] ? rcu_is_watching+0x12/0xc0 [ 998.594766][T17299] ? rcu_is_watching+0x12/0xc0 [ 998.594780][T17299] __do_fast_syscall_32+0xe7/0x970 [ 998.594797][T17299] ? lockdep_hardirqs_on+0x78/0x100 [ 998.594813][T17299] do_fast_syscall_32+0x32/0x70 [ 998.594830][T17299] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 998.594845][T17299] RIP: 0023:0xf707ef7c [ 998.594854][T17299] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 998.594866][T17299] RSP: 002b:00000000f542b50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 998.594877][T17299] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000800 [ 998.594884][T17299] RDX: 0000000004048043 RSI: 0000000000000000 RDI: 0000000000000000 [ 998.594891][T17299] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 998.594897][T17299] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 998.594904][T17299] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 998.594918][T17299] [ 998.706644][T17299] tmpfs: Unknown parameter 'usrquota' [ 999.857251][T17317] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2943'. [ 1000.176047][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 1000.176065][ T40] audit: type=1326 audit(2000000257.462:4488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17303 comm="syz.6.2942" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5f7c code=0x7fc00000 [ 1000.188607][ T40] audit: type=1326 audit(2000000257.462:4489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17303 comm="syz.6.2942" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fc5f7c code=0x7fc00000 [ 1000.197738][ T40] audit: type=1326 audit(2000000257.462:4490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17303 comm="syz.6.2942" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5f7c code=0x7fc00000 [ 1000.211233][ T40] audit: type=1326 audit(2000000257.462:4491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17303 comm="syz.6.2942" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5f7c code=0x7fc00000 [ 1000.240040][ T40] audit: type=1326 audit(2000000257.462:4492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17303 comm="syz.6.2942" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5f7c code=0x7fc00000 [ 1000.264930][ T40] audit: type=1326 audit(2000000257.462:4493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17303 comm="syz.6.2942" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5f7c code=0x7fc00000 [ 1000.288701][ T40] audit: type=1326 audit(2000000257.462:4494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17303 comm="syz.6.2942" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5f7c code=0x7fc00000 [ 1000.297873][ T40] audit: type=1326 audit(2000000257.462:4495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17303 comm="syz.6.2942" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5f7c code=0x7fc00000 [ 1000.307195][ T40] audit: type=1326 audit(2000000257.462:4496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17303 comm="syz.6.2942" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5f7c code=0x7fc00000 [ 1000.316694][ T40] audit: type=1326 audit(2000000257.462:4497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17303 comm="syz.6.2942" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5f7c code=0x7fc00000 [ 1000.684060][T17342] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2948'. [ 1001.777110][ T12] ref_tracker: reference already released. [ 1001.779159][ T12] ref_tracker: allocated in: [ 1001.780593][ T12] netdev_watchdog_up+0x183/0x210 [ 1001.782135][ T12] netif_carrier_on+0xfc/0x120 [ 1001.783623][ T12] e1000_watchdog.cold+0x2a3/0x449 [ 1001.785221][ T12] process_one_work+0xa0e/0x1980 [ 1001.786693][ T12] worker_thread+0x5ef/0xe50 [ 1001.788056][ T12] kthread+0x370/0x450 [ 1001.789311][ T12] ret_from_fork+0x72b/0xd50 [ 1001.790720][ T12] ret_from_fork_asm+0x1a/0x30 [ 1001.792186][ T12] ref_tracker: freed in: [ 1001.793653][ T12] dev_deactivate_many+0x293/0xff0 [ 1001.795447][ T12] dev_deactivate+0x109/0x1d0 [ 1001.796898][ T12] linkwatch_do_dev+0xd3/0x120 [ 1001.798369][ T12] __linkwatch_run_queue+0x3a9/0x900 [ 1001.799973][ T12] linkwatch_event+0x8f/0xc0 [ 1001.801717][ T12] process_one_work+0xa0e/0x1980 [ 1001.803402][ T12] worker_thread+0x5ef/0xe50 [ 1001.805117][ T12] kthread+0x370/0x450 [ 1001.806599][ T12] ret_from_fork+0x72b/0xd50 [ 1001.808250][ T12] ret_from_fork_asm+0x1a/0x30 [ 1001.810386][ T12] ------------[ cut here ]------------ [ 1001.813771][ T12] 1 [ 1001.813778][ T12] WARNING: lib/ref_tracker.c:322 at ref_tracker_free.cold+0x116/0x154, CPU#3: kworker/u32:0/12 [ 1001.817683][ T12] Modules linked in: [ 1001.819067][ T12] CPU: 3 UID: 0 PID: 12 Comm: kworker/u32:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1001.822344][ T12] Tainted: [L]=SOFTLOCKUP [ 1001.823688][ T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1001.826763][ T12] Workqueue: events_unbound linkwatch_event [ 1001.828578][ T12] RIP: 0010:ref_tracker_free.cold+0x116/0x154 [ 1001.830420][ T12] Code: 48 c1 e0 2a 0f b6 04 02 84 c0 74 04 3c 03 7e 4e 8b 7b 18 e8 96 bb f4 03 e8 c1 84 d0 00 48 8b 34 24 48 89 ef e8 65 ea 51 0a 90 <0f> 0b 90 bb ea ff ff ff e9 b0 e5 f4 03 4c 89 f7 e8 af 70 3d 01 e9 [ 1001.836102][ T12] RSP: 0018:ffffc900001e7880 EFLAGS: 00010202 [ 1001.837850][ T12] RAX: 0000000000000201 RBX: ffff888057c44980 RCX: 0000000000000000 [ 1001.840464][ T12] RDX: 0000000000000202 RSI: ffffffff8df19940 RDI: 0000000000000001 [ 1001.842843][ T12] RBP: ffff888021e4c658 R08: 0000000000000001 R09: 0000000000000000 [ 1001.845276][ T12] R10: 0000000000000001 R11: 0000000000000000 R12: 1ffff9200003cf12 [ 1001.848060][ T12] R13: ffffc900001e78b0 R14: ffff888057c44998 R15: 00000000028805a6 [ 1001.850460][ T12] FS: 0000000000000000(0000) GS:ffff88809748d000(0000) knlGS:0000000000000000 [ 1001.853131][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1001.855277][ T12] CR2: 00000000800002c0 CR3: 000000007962d000 CR4: 0000000000352ef0 [ 1001.857697][ T12] Call Trace: [ 1001.858736][ T12] [ 1001.859689][ T12] ? __pfx_ref_tracker_free+0x10/0x10 [ 1001.861509][ T12] ? dev_deactivate_many+0x293/0xff0 [ 1001.863298][ T12] ? dev_deactivate+0x109/0x1d0 [ 1001.864854][ T12] ? linkwatch_do_dev+0xd3/0x120 [ 1001.866473][ T12] ? __linkwatch_run_queue+0x3a9/0x900 [ 1001.868161][ T12] ? linkwatch_event+0x8f/0xc0 [ 1001.869661][ T12] ? process_one_work+0xa0e/0x1980 [ 1001.871226][ T12] ? worker_thread+0x5ef/0xe50 [ 1001.872711][ T12] ? kthread+0x370/0x450 [ 1001.874037][ T12] ? ret_from_fork+0x72b/0xd50 [ 1001.875502][ T12] ? ret_from_fork_asm+0x1a/0x30 [ 1001.877031][ T12] ? netif_freeze_queues+0x183/0x1f0 [ 1001.878653][ T12] dev_deactivate_many+0x293/0xff0 [ 1001.880414][ T12] ? kfree+0x141/0x6c0 [ 1001.881711][ T12] ? __pfx_dev_deactivate_many+0x10/0x10 [ 1001.883432][ T12] ? ref_tracker_free+0x37e/0x6c0 [ 1001.885004][ T12] ? _raw_spin_unlock_irqrestore+0x51/0x80 [ 1001.887013][ T12] ? __pfx_ref_tracker_free+0x10/0x10 [ 1001.888834][ T12] dev_deactivate+0x109/0x1d0 [ 1001.890271][ T12] ? __pfx_dev_deactivate+0x10/0x10 [ 1001.891895][ T12] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1001.893737][ T12] linkwatch_do_dev+0xd3/0x120 [ 1001.895199][ T12] __linkwatch_run_queue+0x3a9/0x900 [ 1001.896903][ T12] ? __pfx___linkwatch_run_queue+0x10/0x10 [ 1001.898682][ T12] linkwatch_event+0x8f/0xc0 [ 1001.900098][ T12] ? __pfx_linkwatch_event+0x10/0x10 [ 1001.901732][ T12] ? rcu_is_watching+0x12/0xc0 [ 1001.903235][ T12] process_one_work+0xa0e/0x1980 [ 1001.904778][ T12] ? __pfx_process_one_work+0x10/0x10 [ 1001.906388][ T12] ? __pfx_linkwatch_event+0x10/0x10 [ 1001.907989][ T12] worker_thread+0x5ef/0xe50 [ 1001.909414][ T12] ? kthread+0x13a/0x450 [ 1001.910713][ T12] ? __pfx_worker_thread+0x10/0x10 [ 1001.912261][ T12] kthread+0x370/0x450 [ 1001.913616][ T12] ? __pfx_kthread+0x10/0x10 [ 1001.915042][ T12] ret_from_fork+0x72b/0xd50 [ 1001.916467][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 1001.918035][ T12] ? __switch_to+0x800/0x1100 [ 1001.919482][ T12] ? __pfx_kthread+0x10/0x10 [ 1001.921071][ T12] ret_from_fork_asm+0x1a/0x30 [ 1001.922572][ T12] [ 1001.923584][ T12] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1001.925904][ T12] CPU: 3 UID: 0 PID: 12 Comm: kworker/u32:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1001.929391][ T12] Tainted: [L]=SOFTLOCKUP [ 1001.930703][ T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1001.933807][ T12] Workqueue: events_unbound linkwatch_event [ 1001.935598][ T12] Call Trace: [ 1001.936736][ T12] [ 1001.937662][ T12] dump_stack_lvl+0x100/0x190 [ 1001.939108][ T12] vpanic+0x552/0x970 [ 1001.940339][ T12] ? __pfx_vpanic+0x10/0x10 [ 1001.941756][ T12] panic+0xd1/0xe0 [ 1001.942934][ T12] ? __pfx_panic+0x10/0x10 [ 1001.944373][ T12] ? check_panic_on_warn+0x1f/0x90 [ 1001.945940][ T12] check_panic_on_warn.cold+0x19/0x34 [ 1001.947571][ T12] ? ref_tracker_free.cold+0x116/0x154 [ 1001.949229][ T12] __warn.cold+0x191/0x328 [ 1001.950602][ T12] __report_bug+0x296/0x3d0 [ 1001.951995][ T12] ? ref_tracker_free.cold+0x116/0x154 [ 1001.953757][ T12] ? __pfx___report_bug+0x10/0x10 [ 1001.955338][ T12] ? find_held_lock+0x2b/0x80 [ 1001.956808][ T12] ? __hrtimer_rearm_deferred+0x24d/0x740 [ 1001.958550][ T12] ? __hrtimer_rearm_deferred+0x24d/0x740 [ 1001.960278][ T12] ? mark_held_locks+0x40/0x70 [ 1001.961927][ T12] ? ref_tracker_free.cold+0x116/0x154 [ 1001.963611][ T12] report_bug+0xb2/0x220 [ 1001.964919][ T12] ? ref_tracker_free.cold+0x116/0x154 [ 1001.966553][ T12] handle_bug+0x16a/0x2a0 [ 1001.967988][ T12] exc_invalid_op+0x17/0x50 [ 1001.969550][ T12] asm_exc_invalid_op+0x1a/0x20 [ 1001.971030][ T12] RIP: 0010:ref_tracker_free.cold+0x116/0x154 [ 1001.972877][ T12] Code: 48 c1 e0 2a 0f b6 04 02 84 c0 74 04 3c 03 7e 4e 8b 7b 18 e8 96 bb f4 03 e8 c1 84 d0 00 48 8b 34 24 48 89 ef e8 65 ea 51 0a 90 <0f> 0b 90 bb ea ff ff ff e9 b0 e5 f4 03 4c 89 f7 e8 af 70 3d 01 e9 [ 1001.978908][ T12] RSP: 0018:ffffc900001e7880 EFLAGS: 00010202 [ 1001.980757][ T12] RAX: 0000000000000201 RBX: ffff888057c44980 RCX: 0000000000000000 [ 1001.983125][ T12] RDX: 0000000000000202 RSI: ffffffff8df19940 RDI: 0000000000000001 [ 1001.985521][ T12] RBP: ffff888021e4c658 R08: 0000000000000001 R09: 0000000000000000 [ 1001.987887][ T12] R10: 0000000000000001 R11: 0000000000000000 R12: 1ffff9200003cf12 [ 1001.990274][ T12] R13: ffffc900001e78b0 R14: ffff888057c44998 R15: 00000000028805a6 [ 1001.992624][ T12] ? __pfx_ref_tracker_free+0x10/0x10 [ 1001.994285][ T12] ? dev_deactivate_many+0x293/0xff0 [ 1001.995893][ T12] ? dev_deactivate+0x109/0x1d0 [ 1001.997385][ T12] ? linkwatch_do_dev+0xd3/0x120 [ 1001.998906][ T12] ? __linkwatch_run_queue+0x3a9/0x900 [ 1002.000563][ T12] ? linkwatch_event+0x8f/0xc0 [ 1002.002135][ T12] ? process_one_work+0xa0e/0x1980 [ 1002.003727][ T12] ? worker_thread+0x5ef/0xe50 [ 1002.005191][ T12] ? kthread+0x370/0x450 [ 1002.006492][ T12] ? ret_from_fork+0x72b/0xd50 [ 1002.007971][ T12] ? ret_from_fork_asm+0x1a/0x30 [ 1002.009865][ T12] ? netif_freeze_queues+0x183/0x1f0 [ 1002.011456][ T12] dev_deactivate_many+0x293/0xff0 [ 1002.013022][ T12] ? kfree+0x141/0x6c0 [ 1002.014317][ T12] ? __pfx_dev_deactivate_many+0x10/0x10 [ 1002.016002][ T12] ? ref_tracker_free+0x37e/0x6c0 [ 1002.017531][ T12] ? _raw_spin_unlock_irqrestore+0x51/0x80 [ 1002.019344][ T12] ? __pfx_ref_tracker_free+0x10/0x10 [ 1002.020981][ T12] dev_deactivate+0x109/0x1d0 [ 1002.022409][ T12] ? __pfx_dev_deactivate+0x10/0x10 [ 1002.024014][ T12] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1002.025840][ T12] linkwatch_do_dev+0xd3/0x120 [ 1002.027310][ T12] __linkwatch_run_queue+0x3a9/0x900 [ 1002.028927][ T12] ? __pfx___linkwatch_run_queue+0x10/0x10 [ 1002.030698][ T12] linkwatch_event+0x8f/0xc0 [ 1002.032112][ T12] ? __pfx_linkwatch_event+0x10/0x10 [ 1002.033850][ T12] ? rcu_is_watching+0x12/0xc0 [ 1002.035491][ T12] process_one_work+0xa0e/0x1980 [ 1002.037050][ T12] ? __pfx_process_one_work+0x10/0x10 [ 1002.038695][ T12] ? __pfx_linkwatch_event+0x10/0x10 [ 1002.040313][ T12] worker_thread+0x5ef/0xe50 [ 1002.041784][ T12] ? kthread+0x13a/0x450 [ 1002.043161][ T12] ? __pfx_worker_thread+0x10/0x10 [ 1002.044977][ T12] kthread+0x370/0x450 [ 1002.046237][ T12] ? __pfx_kthread+0x10/0x10 [ 1002.047658][ T12] ret_from_fork+0x72b/0xd50 [ 1002.049105][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 1002.050933][ T12] ? __switch_to+0x800/0x1100 [ 1002.052427][ T12] ? __pfx_kthread+0x10/0x10 [ 1002.053872][ T12] ret_from_fork_asm+0x1a/0x30 [ 1002.055344][ T12] [ 1002.057039][ T12] Kernel Offset: disabled [ 1002.058375][ T12] Rebooting in 86400 seconds..