last executing test programs: 5m0.820899054s ago: executing program 3 (id=214): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0xa, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 5m0.634356256s ago: executing program 3 (id=218): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000200000040341278560001010203010902270001010080320904000003fe0300000705810200020007050202"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r2, 0x5b03, 0x0) 4m58.132199535s ago: executing program 3 (id=230): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000440)="b47b693fb8be1e856e", 0x9}], 0x1) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000040), 0x10, &(0x7f0000000480)=""/230}, 0x10000000}], 0x2, 0x0, 0x0) sendmsg$can_j1939(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)="381a54130b1e0ab100", 0x9}, 0x1, 0x0, 0x0, 0x4004}, 0x8010) 4m58.042286893s ago: executing program 3 (id=231): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000d40)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x18f883, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x14) 4m58.042131212s ago: executing program 3 (id=232): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000006c0)={0x1, 0x0, [{0x40000021, 0x0, 0x3}]}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4m57.721666689s ago: executing program 3 (id=235): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x185042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000240), 0x47dfffc, 0x105381) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x2000, {0x0, 0x0, 0x0, 0x0, 0x14a1fa, 0x0, 0x0, 0x17, 0x4, "339f020bbe82b398000001000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1cac3f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f050500000000e354b98ef0000000000000000000004000", [0x0, 0x3fd]}}) r2 = dup(r1) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x185202, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r3, 0x0) write$UHID_INPUT(r2, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) 4m57.708232769s ago: executing program 32 (id=235): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x185042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000240), 0x47dfffc, 0x105381) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x2000, {0x0, 0x0, 0x0, 0x0, 0x14a1fa, 0x0, 0x0, 0x17, 0x4, "339f020bbe82b398000001000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1cac3f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f050500000000e354b98ef0000000000000000000004000", [0x0, 0x3fd]}}) r2 = dup(r1) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x185202, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r3, 0x0) write$UHID_INPUT(r2, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) 4m57.477225053s ago: executing program 2 (id=243): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb20d}}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 4m57.431385195s ago: executing program 2 (id=245): sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000340)=0x26) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000180)={0x2, 0x6, 0xffffff71, 0x1000, 0x5, "0d418107050088b76acb33223fe5b9d56b00", 0x80fff, 0x140223}) syz_emit_ethernet(0x22, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, 0x0) symlink(0x0, &(0x7f0000000300)='./file0/file0\x00') r4 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) read$FUSE(r4, &(0x7f0000001180)={0x2020}, 0x2020) 4m56.4745476s ago: executing program 2 (id=252): r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0], 0x1}) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000840)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000880)={0x0, 0x0, r3, r4, 0x4, 0x0, 0x4, 0x101, {0xfffffff1, 0x5, 0x8, 0x1, 0x1, 0x1ff, 0xffff, 0x6, 0x0, 0x9, 0x400, 0x1, 0x2, 0x400, "475895cd3efeb192a725905323e5cc3f43a3837a754daa6f20d0345dc944d90d"}}) 4m56.390509742s ago: executing program 2 (id=253): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x24040014, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000400)='veth1_to_hsr\x00', 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 4m56.390331974s ago: executing program 2 (id=254): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./rpc_pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./rpc_pipefs\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./rpc_pipefs/gssd/clntXX/gssd\x00', 0x1a1280, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac3) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 4m56.198975311s ago: executing program 2 (id=255): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000040)=0x1) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000640)=""/201, 0xc9}], 0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000280)={{0x1, 0x1}}) read(r0, &(0x7f0000000740)=""/4096, 0x1000) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 4m46.198344737s ago: executing program 4 (id=346): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000740), 0x0}, 0x20) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c"], 0x4a) 4m46.028416395s ago: executing program 4 (id=347): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendto$inet(r0, &(0x7f0000000280)="02", 0x1, 0x14, 0x0, 0x0) shutdown(r0, 0x1) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x7ffff000, 0x0) 4m46.028230756s ago: executing program 4 (id=349): io_setup(0x4, &(0x7f00000014c0)=0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') io_submit(r0, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0xfffe, r1, 0x0}]) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x9100, &(0x7f0000000140)={0x6, 0x8a, 0x40000}, 0x37) 4m45.811171158s ago: executing program 4 (id=350): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing\x00', 0x1fb) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x49, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x3, 0x0, 0x9, 0xb5e}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 4m45.691285929s ago: executing program 4 (id=351): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100), 0x48) close(r0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, 0x0, 0x0) getsockopt(r3, 0x111, 0x3, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x50) syz_usb_connect$uac3(0x2, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x100, 0x0, 0x0, 0x0, 0x8, 0x18d1, 0x2d04, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0xc, 0x0, 0x6, {0x8, 0xb, 0x0, 0x2, 0x1, 0xf0cec0b1beb5cba6, 0x30, 0x5b}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0xb}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x5e, 0x2, 0x0, {0xa, 0x25, 0x25, 0x9, 0xa7, 0x5e}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x0, 0x9, 0x9, {0xa, 0x25, 0x25, 0x3, 0x6, 0x4}}}}}}}}]}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a400000010000104080000000300000000000000", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a70001280110001006272696467655f736c6176650000000058000580050019a103000000050005000000000005000c0000000000050007000000000005000a00000000000500080000000000040018000500060001000000060002000100000005001e00000000000500010003000000140003006272696467655f736c6176655f30"], 0xa4}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) r5 = openat$sequencer2(0xffffff9c, &(0x7f00000011c0), 0x143240, 0x0) syz_usb_connect(0x1, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000046365608b40413868f95010203010902120001000000000904"], &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) ioctl$SNDCTL_SEQ_NRMIDIS(r5, 0xc0045103, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000140), 0xfffffffffffffffa, 0x88002) ioctl$EVIOCGSW(r6, 0x8040451b, &(0x7f0000000340)=""/159) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r7 = openat$mice(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd2a, 0x2, {0x7, r9}, [@MDBA_SET_ENTRY={0x20, 0x1, {r9, 0x0, 0x2, 0x2, {@ip4=@multicast2, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x40080c0) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r8, 0x7a5, &(0x7f00000000c0)={{@hyper, 0xfffffffc}, 0x1, 0x1, 0x4}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r8, 0x7b1, &(0x7f0000000040)={&(0x7f0000000780)=[0x3, 0x0, 0xe, 0x40, 0x4, 0x7f, 0x6000, 0x5, 0x7, 0x493, 0x7, 0x8000, 0x101, 0x3, 0x6, 0x8, 0x9, 0x7fff, 0x7, 0x7, 0x40, 0xfffffffb, 0x7, 0x6584, 0xb, 0xfffff000, 0x401, 0x5506, 0x9, 0x9, 0x3795, 0x6, 0x101, 0x81, 0x81, 0x8, 0x9, 0x20009, 0x10, 0x3, 0x6, 0x9, 0x401, 0xfffffff9, 0x35, 0xc, 0x0, 0xb0b6, 0x4, 0x20000, 0x6f, 0x5, 0x5, 0x0, 0xe, 0x0, 0x401, 0xc, 0x10001, 0x10e, 0xd64, 0x6, 0x6, 0x1ff, 0x7fffffff, 0x10, 0x9, 0x8, 0x11, 0x6, 0x9, 0x9fcb, 0xfffffffc, 0x0, 0x596, 0xd, 0x3, 0x412c, 0x101, 0x6, 0x7, 0x6, 0xb, 0x4, 0x7fffffff, 0x154, 0x9, 0x6, 0x6, 0x8, 0xe, 0x9, 0x8, 0x38, 0x4, 0x5, 0x9, 0x100, 0x10001, 0x9, 0x28000, 0x3, 0xffffff3e, 0x2, 0x6, 0x8, 0x7, 0x8, 0x8, 0x7, 0x8, 0x10000, 0x2, 0xbc3, 0xfff, 0x4d57, 0xeffffffa, 0x2, 0x3ff, 0x4, 0x100, 0x5, 0x0, 0xd, 0xa843, 0x7, 0x2, 0x6f5, 0x7fffffff, 0x7, 0x1, 0x2, 0x10001, 0x0, 0xfffffffd, 0x9, 0xc, 0x7fff, 0x1, 0x8, 0x10, 0x5, 0x8, 0x8001, 0x7, 0x6, 0xdf1, 0xfffffff9, 0x8, 0x0, 0x6, 0xffffff80, 0x1, 0x7f, 0x4, 0x3, 0x6, 0x2, 0x30, 0x6, 0x0, 0x6, 0x80000001, 0x2, 0x5, 0x0, 0xffff0001, 0x57c, 0x3, 0x7, 0x5, 0x2, 0x3, 0x0, 0xcd, 0x2, 0x3472, 0xf23b, 0x7, 0xec33, 0x81, 0x3, 0x4, 0x7, 0x10000, 0x54af, 0x800, 0x8c25, 0x3, 0x1, 0xf7f, 0xffff, 0x1376, 0x3, 0x4, 0x9, 0x0, 0x180, 0x2, 0x3, 0x6, 0x0, 0x6, 0x3, 0xed, 0xffffffff, 0x5, 0x6, 0xbfb, 0x80000001, 0xa5b, 0x280, 0x5, 0x1, 0x0, 0x2022, 0xb, 0x80000000, 0x8, 0x7, 0x80000001, 0x8, 0x4, 0x1, 0x3, 0x4, 0x5, 0x7ff, 0x9, 0x2, 0x11d, 0x9, 0x8, 0x5, 0x0, 0x2, 0x180000, 0xfffffff3, 0xfffffff9, 0x789e, 0xf0000000, 0x4, 0x8, 0x1, 0xeef, 0x7, 0x0, 0x0, 0xaa1, 0xffa00000, 0x80000001, 0x6, 0x9, 0xe, 0x1, 0x4, 0xfffffff4, 0x10000, 0xfc, 0x6, 0x4, 0x9d4d, 0xada, 0x5, 0xcab, 0x8f5, 0x80, 0x2, 0x2, 0x3, 0x1c000, 0xe, 0x1, 0x2, 0x5, 0x8, 0x6, 0x5, 0xfffffff3, 0x2, 0x3, 0xa, 0x80000001, 0x35, 0x80000001, 0x4, 0x1, 0x1, 0xfffffffb, 0x7, 0x40, 0xf, 0x1, 0x3, 0xae, 0xc53, 0x3, 0x1, 0x0, 0x4, 0xffff, 0x10, 0x6, 0x5, 0x0, 0xb9e6, 0x1, 0x8, 0xffffffff, 0xc, 0x1, 0x9, 0x200e8bf, 0x80, 0x1, 0x5, 0x9, 0x5, 0xffffff81, 0xb, 0x5, 0x4a19, 0x9, 0x0, 0xe2, 0x7, 0x6, 0x6, 0x0, 0x4, 0x0, 0x0, 0x1, 0xa0000, 0x7, 0x0, 0x6, 0x5, 0x7, 0x5, 0x65f, 0x6, 0x572, 0x200, 0xa2, 0x7fffffff, 0x0, 0x4, 0x2, 0x6, 0x7fffffff, 0xfffffff7, 0x2, 0x0, 0x8001, 0x9, 0x4, 0x0, 0x8000, 0x200, 0x3, 0x8000, 0x70, 0x1000, 0x4, 0x9, 0xfffffffa, 0x1, 0x0, 0x7fffffff, 0x5, 0xffffffff, 0xfffffffe, 0x401, 0x5e9b, 0x1, 0x8, 0x1, 0x800, 0xb2, 0x4, 0x5, 0x1000, 0x5d4, 0xe, 0x7, 0x6, 0x1ff, 0x400, 0x4, 0x7, 0x3, 0x5, 0x3, 0x4, 0x9, 0xdfe, 0x6, 0x9, 0x6, 0x3, 0x6, 0x97, 0x80, 0x40, 0x8, 0x4, 0x5, 0x6, 0x3, 0x9, 0x8bd5, 0x80, 0x10000, 0xa189, 0x10001, 0xad, 0x6, 0x401, 0x9, 0xfffffffe, 0x6, 0x5, 0xfffffff8, 0x1, 0x4ff80107, 0x25c3, 0x3, 0x3, 0x7fffffff, 0x5, 0x282c22c9, 0x1, 0x200, 0x6, 0x3, 0x1, 0xde, 0x7, 0x10001, 0x7, 0x10001, 0x6, 0x0, 0xb, 0x6, 0x3, 0x9, 0x11a2, 0x8001, 0x5, 0x5, 0x6, 0x5, 0x6, 0x6, 0xf, 0x80000000, 0x7, 0x7, 0xe, 0x4, 0x9, 0x0, 0x6, 0x500, 0x10001, 0x2, 0x8c, 0x3, 0x4, 0x720, 0x7, 0x8, 0x10000, 0x6, 0xfffffff8, 0x8, 0x9, 0x9, 0xff56, 0x1, 0x9, 0x0, 0x3, 0x0, 0x40, 0x8001, 0xffffffff, 0x1, 0xeb7d, 0x5, 0x6, 0x7, 0x5, 0x100f5ac1, 0xfff, 0x7fff, 0x0, 0x800, 0x8, 0xc34d, 0xf, 0x401, 0x0, 0x1, 0x7, 0x2b8, 0x1, 0x7f, 0x9, 0x310b0c73, 0x7fffffff, 0xb365, 0xfff, 0x929b, 0x7, 0x8, 0x8, 0x4, 0x8, 0x8001, 0x143, 0x7, 0x7f, 0x4, 0xf, 0x3, 0x31c, 0x1ff, 0x6, 0xfffffffa, 0x3ff, 0xbd60, 0x9, 0x7, 0x4, 0x80, 0x1002, 0x4, 0x4, 0x1, 0x7, 0x5, 0xe, 0x8, 0xfff, 0xfffffff8, 0x200, 0x5, 0xfe, 0x6, 0x2, 0x5, 0x800, 0x0, 0x10000, 0x8, 0x4, 0x2, 0x6, 0x7, 0xff, 0x1, 0x0, 0x9, 0x7fff, 0x4f, 0xc9e, 0xffff, 0x3, 0x9, 0x9, 0x0, 0x80, 0x0, 0x6, 0x8, 0xfff, 0x1000, 0x1, 0xc, 0x7e, 0x0, 0x5, 0x4, 0xe71, 0xffff8001, 0x81, 0x1, 0x5, 0x5, 0x4, 0xa07, 0x2, 0x1, 0x6, 0x3, 0x1, 0x2, 0x4, 0x6, 0x5, 0x5, 0x6, 0xf1, 0x80, 0x0, 0x1, 0x0, 0x9, 0x5, 0x3450, 0x7f, 0x2, 0x80, 0x0, 0x9, 0x7fffffff, 0x40, 0x8, 0xfff, 0x6, 0x7, 0x6, 0x2, 0x7, 0x1, 0x7ff, 0x3, 0x3ff, 0x23c3, 0x0, 0x6, 0x40, 0x6, 0x7, 0x7, 0x7, 0xed, 0x1, 0x3, 0x1ff, 0x80000000, 0x3, 0x3, 0x1, 0x10, 0xfffffffe, 0x0, 0xa7, 0xe, 0x80, 0x5, 0x2, 0x1, 0x8, 0x7a, 0x0, 0xc4b, 0x24, 0x63, 0x9, 0x800, 0x3, 0xfed40, 0x3, 0x11e, 0x7ff, 0x5, 0x32, 0x6, 0xffff, 0x3, 0xa4b, 0x1, 0x5, 0xb23, 0xfff, 0x1, 0x1, 0x9, 0x4, 0x8, 0x8, 0x7, 0x401, 0x9, 0x4, 0x6, 0x6, 0x70, 0x660, 0x3, 0xd5f, 0x8, 0x3, 0x200, 0x3, 0x0, 0x3, 0x3, 0x10001, 0xa5, 0x3, 0x80000000, 0x8, 0xffffffff, 0x5, 0x0, 0x1, 0x7f, 0x4cb3, 0x6, 0x1, 0x0, 0x6, 0x3a85, 0x7, 0xa, 0x1, 0x6, 0x9, 0xe, 0x5, 0x23, 0x5, 0x96, 0x0, 0x9e, 0x80000000, 0x4080000, 0x1000, 0x4, 0x0, 0x10, 0x7, 0x401, 0xf046, 0x19, 0x5, 0x2, 0x4, 0x9, 0xfffffff5, 0xfffffff1, 0xffffffff, 0x1, 0xab7fbaaf, 0x2, 0xb4, 0xffff, 0x80, 0x2, 0x3, 0x6, 0x20000000, 0x7, 0xa, 0xfffff2ea, 0x3800, 0x0, 0xf, 0x80, 0x2, 0x3, 0xfffffff7, 0x6, 0x4, 0x8000, 0x7fff, 0x8, 0x2, 0x0, 0x4, 0x1, 0x401, 0x7, 0x329, 0x4, 0xff, 0x4, 0x3, 0x6, 0x0, 0x1, 0xa, 0xfffffffd, 0x3, 0x6c99, 0x2, 0x3, 0x2, 0x89fd, 0x7, 0x68c109f7, 0x5, 0xfffffffa, 0x0, 0x39a703cd, 0x3, 0x0, 0x800, 0x4, 0x1, 0x0, 0x8, 0x7f, 0x4, 0xe, 0x7f53, 0x1ff, 0x5, 0xffffffff, 0xd, 0x8, 0x2c69e094, 0x800, 0xffff3ec3, 0x3, 0x3f9f, 0x0, 0xedb1, 0xb, 0x8, 0x0, 0x4, 0xb, 0x3, 0x8, 0x1ff, 0x1, 0x4, 0x8, 0xe, 0x10, 0xffffffff, 0x9, 0xe44, 0x2, 0xda, 0x5, 0x0, 0xfffffff7, 0x0, 0x0, 0xc9, 0x7, 0x10000, 0xd75, 0x80000001, 0x7, 0x400, 0x5e, 0x7fff, 0x4, 0x7, 0x800, 0x4, 0x3, 0x6, 0x1, 0x4, 0xfffffffa, 0xffffffff, 0x7c, 0x2, 0x9, 0x9, 0x9, 0x7, 0x1, 0x5c8b0e92, 0x3ff, 0x40, 0x9, 0x5, 0xfffffff9, 0x80, 0x7ff, 0x2d, 0x0, 0x8001, 0x7, 0x101, 0x1, 0x5, 0x6, 0x2, 0x5, 0xb72, 0xfff, 0x9, 0x80000000, 0x100, 0x6, 0x1, 0x15, 0x2, 0xff, 0xbb, 0xa55, 0x2, 0x4, 0x3, 0x2, 0x800, 0xf, 0x6, 0x7, 0xe4c1, 0x0, 0x1, 0x5, 0x7, 0x2210, 0x6, 0xda, 0xd, 0x958d, 0x8, 0x7, 0xffc, 0x2000000, 0x9, 0x3, 0x67a7bb72, 0x5, 0x9, 0xda800000, 0x9, 0xfffffff1, 0x3b1a, 0x2, 0x9, 0xb, 0xffff, 0x4, 0x1, 0x6, 0x2, 0x10000, 0x5, 0x4e3f, 0x9, 0x4, 0xa3, 0x7, 0xbe66, 0xfffffff9, 0xfa, 0x8, 0x5, 0x7, 0x0, 0x5, 0x8, 0x8, 0x3, 0x8, 0x80000000, 0x7fffffff, 0x7, 0x80000000, 0x6, 0x8ea, 0x101, 0x8, 0x1, 0x3, 0x4, 0x9, 0x80, 0x1, 0x4, 0x5, 0xbd5d, 0x0, 0x2, 0x2, 0x6, 0x80, 0x7fffffff, 0x9fe2, 0x4, 0x2, 0x3, 0x400, 0xfffffff9, 0x371c, 0x6, 0x3, 0x3e, 0x20, 0x8, 0x4, 0x100, 0x5, 0x3, 0x6, 0x4, 0x1, 0x3, 0x2, 0x1, 0x0, 0xc, 0x0, 0x8, 0x200, 0x2, 0x200, 0x0, 0x1, 0x4, 0x80000001, 0x0, 0x7, 0x5, 0x4, 0x7, 0x4d40, 0x4, 0x80000001], 0x6, 0x400}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "ef"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xc0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 4m45.392197216s ago: executing program 4 (id=352): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newtclass={0x68, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x34, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x1000, 0x1000}}]}}, @TCA_RATE={0x6, 0x5, {0xfe, 0x1}}]}, 0x68}}, 0x0) 4m45.342561354s ago: executing program 33 (id=352): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newtclass={0x68, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x34, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x1000, 0x1000}}]}}, @TCA_RATE={0x6, 0x5, {0xfe, 0x1}}]}, 0x68}}, 0x0) 4m40.938233845s ago: executing program 34 (id=255): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000040)=0x1) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000640)=""/201, 0xc9}], 0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000280)={{0x1, 0x1}}) read(r0, &(0x7f0000000740)=""/4096, 0x1000) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 4m12.938931678s ago: executing program 6 (id=627): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xc, 0x7}, {}, {0x2, 0xffff}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x803}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x1}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x14004880}, 0x2000d8d0) 4m12.84722605s ago: executing program 6 (id=628): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x3, 0xbde, 0x0, &(0x7f0000000180)="a1984ec3aec3fc2e025f90eda6dbc903939aac644fd36f1e65174cae030c42cbacc392851a695f247112e91f059460a2c031929dc0515ac7cd20775ff9da9c2b6cb48968dcd6d8d982c492932c572f084d3af58650d207eec0794b3e47c5678c36b99eed61e1dbac68ce8a79aa21a51202018bdc4a51489844f785887083841d65c129992bbe5a51c71b95a9847d2bdede66c6e3184c386faf938fd6db888e73a5c0dcc69c3de7458e68ed33226a8d1c8e17", 0x0, 0xb2}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0x10, 0x0, 0x8, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m12.724608974s ago: executing program 6 (id=629): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000380)="ec24", 0x2}], 0x1, 0x0, 0x0, 0x40001}, 0x881) r1 = dup(r0) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="04", 0x1}], 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000002c0)={0x0, 0x207, 0x4, 0x81}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0xffffff95, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) 4m12.687000074s ago: executing program 6 (id=630): signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1f3) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0) write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) r1 = syz_io_uring_setup(0x34b9, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x5, 0x50}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) 4m11.780439593s ago: executing program 6 (id=637): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x457) ioperm(0x3, 0x9, 0x80) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) write$tun(r1, &(0x7f0000000380)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x0, 0x0, 0x4, 0x2, {0xa, 0x4e21, 0xcad, @ipv4={'\x00', '\xff\xff', @local}, 0x9}}}, 0x32) r4 = fsmount(r2, 0x0, 0x2) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r5, r5) setpgid(0x0, r5) r6 = syz_ublk_setup_io_uring(0x20, &(0x7f00000013c0), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r10 = syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x104}}}, &(0x7f0000000300)) syz_open_dev$ublk_chdev(&(0x7f0000002000), r10, 0x2) r11 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r11, 0x7) wait4(r11, 0x0, 0x0, 0x0) tkill(r11, 0x3) ioctl$UBLK_U_CMD_START_DEV(r4, 0xc0207506, &(0x7f0000000200)={r10, 0xffff, 0x0, 0x0, r11}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) fchdir(r4) llistxattr(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1200000004000000080000000280000018000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32, @ANYBLOB="3cddbc6800000000000000000000008500"/26], 0x50) 4m11.531982916s ago: executing program 6 (id=639): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/serio/devices/serio1/protocol\x00', 0x1, 0x0) write(r1, &(0x7f00000000c0)='alps', 0x4) 4m11.491411953s ago: executing program 35 (id=639): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/serio/devices/serio1/protocol\x00', 0x1, 0x0) write(r1, &(0x7f00000000c0)='alps', 0x4) 13.977874751s ago: executing program 5 (id=2038): sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="000128bd7000fedbdf25090000002800028008000200020056370080080001020000000014000380080002000700000008000100080000008a2c289c75a3418affed036a69c7f3a45d3a563400"/89], 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x24040821) capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000001c0)={0x200000, 0x200004, 0x0, 0x0, 0x0, 0x5}) r0 = syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x8041) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "4cf90fba85c830e42a3ca4b10f01bbcb15f3806c4853e7c44a6974759d9f643905a56baa4195fb396d9bfa306999f1586e5d1ca49add100a36b751a7d9fe0b182ebf2c8a0e66f72c1c08260030752f07cd4089473e52885a3c85bacf3ccfac5bb9435fe036dcfccd7254bbd8bce90e2284d29e1f17d6652270fd0abcb8729f16ff602b438bd122a9e09984e2799d0dbfef7533d1a930ea4f4b57605ace45f5815450693650ae122d34aa0c5ca5e793516d156e5a5b34d6c17c40d753426a3d8e15e726d0f2622e873e0cbe63751bb62c68594d4cb0a21b92ad2e80f24a9b290a87ee6779022a0b7f5223e4e8c9f53f501ec8c439724078fdc076a51d50760566"}) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) setsockopt$sock_attach_bpf(r3, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r3) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x80049367, &(0x7f0000000000)) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$F2FS_IOC_GET_FEATURES(r1, 0xff06, 0x0) socket$packet(0x11, 0x2, 0x300) socket(0x11, 0x2, 0x0) 10.415404264s ago: executing program 5 (id=2046): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='base=', 0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x24c4436d5a174b6d, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4004000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r6 = epoll_create1(0x80000) r7 = epoll_create1(0x0) socket(0xa, 0x3, 0x3a) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1f4, r6, &(0x7f0000000000)={0xa0000001}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7f}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20020800}, 0x0) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x4c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004040}, 0x40) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, 0x0, &(0x7f00000001c0)) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000540)={r5, 0x0, 0x25, 0x5, @val=@netfilter={0xa, 0x0, 0xd}}, 0x20) 8.834758041s ago: executing program 0 (id=2051): madvise(&(0x7f000000f000/0x4000)=nil, 0x4000, 0xa) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_TTL={0x5, 0x7, 0xe}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000500)={0x0, 0x0, 0x1000, 0x2000, &(0x7f0000010000/0x2000)=nil}) ioctl(r4, 0x4048aec9, &(0x7f0000000600)="010000000000000001") ioctl(r5, 0x4048aecb, &(0x7f0000000700)="000000002efcaff8f01ecc") ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x7800, 0x20, 0x9, 0x6, {{0x6, 0x4, 0x1, 0x36, 0x18, 0x64, 0x0, 0xea, 0x2f, 0x0, @broadcast, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0x4, 0xbe, 0x1, 0x4}]}}}}}) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7c, 0x10000, 0x8000, 0x4, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0x8, 0x40080000006, 0xb06c}, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) r6 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x2000002, 0x2, 0x2, 0x0, 0x3}) ioctl$PTP_SYS_OFFSET_PRECISE(0xffffffffffffffff, 0x3d13, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r6, 0xc04c5609, &(0x7f0000000580)=@multiplanar_userptr={0x9, 0x2, 0x4, 0x400, 0x6, {}, {0x3, 0xc, 0x0, 0x2, 0x80, 0xeb, "106f7df7"}, 0xffe00, 0x2, {0x0}}) 8.828985766s ago: executing program 1 (id=2052): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@upd={0xe0, 0x12, 0x1, 0x0, 0x0, {{'sha384\x00'}, '\x00', '\x00', 0x0, 0x2000}}, 0xe0}}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x1c}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r2 = accept4$unix(0xffffffffffffffff, &(0x7f0000000480), &(0x7f0000000500)=0x6e, 0x0) sendto$unix(r2, &(0x7f0000000540)="3b21117d825a5f175291384c395b92068030fe4593e0b6d48863fd6049450f023f06525b87391fadf0d1369e55b9b983ad6d11ff78b895cc4f372101aa735b04184deef92e9794ebad3fdc6d527d8ab09e62975a3e61db70b58d489fe5171cafff00dd68", 0x64, 0x24040070, &(0x7f00000005c0)=@file={0x1, './file0\x00'}, 0x6e) syz_io_uring_setup(0x38fa, &(0x7f0000000200)={0x0, 0x9943, 0x1000, 0x0, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000), 0x0) ioctl$UFFDIO_POISON(r1, 0xc020aa08, &(0x7f0000000380)={{&(0x7f0000f4c000/0x1000)=nil, 0x1000}}) mkdir(&(0x7f0000000040)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./mysys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./mysys/bus/pci/devices/0000:00:02.0/config\x00', 0x2, 0x0) pwrite64(r3, &(0x7f0000000400)="ffffffffffffff030000ffffffffffffffffffffffffffff0030bb0b590133408dfc219d9b3480f09daae239f9b12b2922f5a767f3c8d84d82a954d92e5e46b5a1c4eb5a3f9ea538e1f1ac92e201b93b2739c35b306f842f2ee20abd17a64ccddccbbfac46f06cf3a8b7dd12c0e5fea9b41a940b4119e3bf01010000000000005bdcc620cc0f5efe4da6ef2629877bf3dbdc03473ef8baa34ee83d472e4fdf1ab844cb38b58b645fa8e780d6200f40b9efca6d111a1307ff0b1bafe598f9fee55e18db7c6ccca178bad39eef902059f6f78d9ae69f3947c21cb49d7f2337fd8b106f89b4f0bb67e35e798fe65dfcde141076b0340faf5d77d57d111a74198fff5657732c363b85707e6618304667df", 0x10f, 0x10) r4 = syz_io_uring_setup(0x141c, &(0x7f00000001c0)={0x0, 0x91c1, 0x3400, 0x1, 0x8}, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r8, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r8, &(0x7f000000a280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r8, &(0x7f0000002140)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x2, {0x3, 0x3, 0x0, 0x400000000000000, 0xfffffffd, 0x4, {0x2, 0x8, 0x0, 0x1, 0x10000, 0x0, 0x5, 0x0, 0x9, 0xc000, 0x0, r9, r10, 0x0, 0x100}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000640)='./mysys\x00', 0x0, r10) syz_io_uring_modify_offsets$generic(r5, r6, 0x2c, 0x10000) syz_io_uring_submit$UBLK(r5, r6, r7, &(0x7f0000001480)=@ublk_io_commit_and_fetch_sqe={0x2e, 0x18, 0x0, 0xffffffffffffffff, 0xc0107521, 0x0, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x0, '\x00', {0x3, 0xd83, 0x9, 0x0}}) io_uring_enter(r4, 0x20, 0x20, 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r11 = openat$panthor(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$DRM_IOCTL_VERSION(r11, 0xc0246400, &(0x7f00000003c0)={0x0, 0x8, 0x7fffffff, 0x42, &(0x7f00000000c0)=""/66, 0xa3, &(0x7f0000000240)=""/163, 0x92, &(0x7f0000000300)=""/146}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x2) madvise(&(0x7f000038b000/0x7000)=nil, 0x7000, 0x15) 8.340006648s ago: executing program 5 (id=2054): setresgid(0xee00, 0x0, 0xffffffffffffffff) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x49940, 0x0) close(0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f00000006c0)=ANY=[@ANYRES32=r0, @ANYRESOCT, @ANYRESDEC, @ANYRES32, @ANYRES32=r2, @ANYRES8=r1, @ANYBLOB="b8e172ed5045a61f51450fafb34928e4f8b1b69738b28aeea1909b7c3b60567e73941f0c027623cf89f55569c8151b84ad30de6f", @ANYRESHEX=r2], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r6 = openat$bsg(0xffffff9c, &(0x7f0000000040)='/dev/bsg/0:0:0:0\x00', 0x80000, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, &(0x7f00000005c0)={0xe2, 0x9, 0x2c, "f7119e3cb0295aaae15dfcb4e7af69984c7786bf13cc0ec3a51fc0265a753ade51c5e95da33666ec58af3867b8fb5d06f59d58d13bd42f7579d30ad8e9ffb9925f030ba471d4927ad6482961a0d79dd21cabf60934f537dc1786290a0548d1de48c541571b311449a6c2e8c0a7cf36d9d968b49edfd393c7dbb4600e8fbf47422de35479572a11b25b2ee8ddbb82736dd5c1bb105f24bf99a989780965c0c60ce517a32b8b7704e32502849e75f7a3bf0f00d5b9103579cb7626da3bec82055f5480d39801ba4d06e64c979861d67b05dbad4c4f2ffa11be28f00fffcb4df9275914"}) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_pscan_rep_mode={{0x20, 0x7}, {@any, 0x10}}}, 0xa) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) pselect6(0x40, &(0x7f00000000c0)={0x3, 0x4, 0x7, 0x8000000000000001, 0x1, 0x8001, 0x1, 0x5}, &(0x7f0000000540)={0x7, 0x4, 0xfffffffffffffffb, 0x8000000000000000, 0xa9, 0xd, 0xfffffffffffffff8, 0x7ff}, &(0x7f0000000580)={0xc33, 0x4, 0x3, 0x1, 0x5, 0xc, 0x9, 0x7}, &(0x7f00000007c0), &(0x7f0000000840)={&(0x7f0000000800)={[0x100, 0xe4]}, 0x8}) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r7 = syz_open_procfs(0x0, &(0x7f0000000500)='net/mcfilter\x00') bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xe, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r7}, 0x50) bpf$PROG_LOAD(0x2, &(0x7f0000000300)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) read$midi(r7, &(0x7f00000001c0)=""/70, 0xffffffd8) 7.875095269s ago: executing program 1 (id=2055): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x40081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000b00)={0x4, 0x0, [{0x10000, 0xfc, &(0x7f0000000700)=""/252}, {0x100000, 0x80, &(0x7f0000000880)=""/128}, {0x4000, 0x25, &(0x7f0000000900)=""/37}, {0x58000, 0x4a, &(0x7f0000000a80)=""/74}]}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000001500)={@my=0x1}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001"], 0x64}}, 0x40110) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000001540)=""/4092}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$dma_heap(0xffffffffffffff9c, 0x0, 0xa2003, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 7.410765141s ago: executing program 5 (id=2057): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0x1, @mcast2, 0x4}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000001, 0x401d031, r1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) r6 = openat$audio1(0xffffffffffffff9c, &(0x7f00000001c0), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000140)=0x2000) ppoll(&(0x7f0000000040)=[{r6, 0x20}, {r6, 0x13}], 0x2, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x3000007, 0x110, r6, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000000)=0x4000) r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000340)={0xe8, 0x3ff, 0x4, "098ee42621b50c2d4e95a4197b1d2056ed757aebaa86ecdfb92ebb6294a50f54fc8c513af4a0167e3317f4e2f4fc066804fce6437048fe87ed07bf22e52ca776cc4d4be3bdb24ad6947fd85072c1d6cb16b253f915296055e9a06a59a4f81566cc1c1d32d493a60d41a98655f4811f0dbebcea0398a4b98a72e516f5e84b9cc471f8297d7c6188e402910817db84412b578acd08287f8bdfa2551d5529e46cccc2f940b0c5b6f68a507f978762fef76eb6720ec8a9080a96a60804503c5a4d739ee553796d333859d3a5e1eaaf9f02eafaf0d58ee66e45ce1a1f38b2692a06cfc8fcc6d29abc8810"}) r8 = syz_open_dev$vim2m(&(0x7f0000000500), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r8, 0xc0f8565c, &(0x7f0000000000)={0x0, 0x1000, 0x2, {0x2, @sliced={0x0, [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1001]}}}) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r9, 0x4008ae90, &(0x7f0000000180)={0x1, 0x0, [{0x40000001, 0x0, 0x0, 0x0, 0x0, 0x1200000}]}) 5.680085356s ago: executing program 1 (id=2061): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x4c, 0x0, "01deaba05ccc4fa00711be66bd584ecd190428efc9e569f4b222158b227692cebc00924f2deea371bafa061b8f2959b4b696b22e4881f40a0d8f4c2fdea78893bc2c160df3e41db4153cfd9221d01c79"}, 0xd8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(0x0, r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x80) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0xffffffff}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002940), 0x40000000000017d, 0x888) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_opts(r4, 0x29, 0x39, &(0x7f0000000280)=ANY=[@ANYBLOB="1b0204"], 0x18) sendto$inet6(r4, 0x0, 0x0, 0x400c0, &(0x7f0000000040)={0xa, 0x4e24, 0xffffff7c, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x9}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000001140012800c0001006d6163766c616e00dbff028008000500", @ANYRES32=r5, @ANYBLOB="080004007f00"], 0x50}}, 0x0) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r6 = socket$kcm(0x11, 0x200000000000002, 0x300) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300000004000000040000000a000000000000", @ANYRES32=0x0, @ANYBLOB="480deed3000000000000000000000000369b0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000140)=r8, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 5.149319699s ago: executing program 0 (id=2062): r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x34d403) socket$nl_generic(0x10, 0x3, 0x10) r1 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000000)={0xa0000001}) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x2c00c014) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) unshare(0x22020400) r7 = memfd_create(&(0x7f00000001c0)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\v\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\xd5)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) execveat(r7, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r8 = dup(r6) write$UHID_INPUT(r8, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, &(0x7f0000000340)=@x86={0x7, 0x3, 0x6, 0x0, 0x8, 0x7, 0x6, 0x0, 0x4, 0x9, 0x8, 0x9, 0x0, 0x7, 0x401, 0xa, 0x1, 0x40, 0x10, '\x00', 0x4d, 0x55}) epoll_pwait(r2, &(0x7f00000000c0)=[{}, {}], 0x2, 0xfe, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="080000001000010404000000fdffffff00000000", @ANYRES32=0x0, @ANYBLOB="38410000440b00002400128009000100626f6e640000000014000280050001000100000008000200", @ANYBLOB="f7"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$TUNGETSNDBUF(r8, 0x800454d3, &(0x7f0000000040)) r10 = epoll_create1(0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r9, 0x40045010, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000000)={0x10000001}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fef000/0xe000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000fee000/0x4000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0}, 0x64) 5.148646275s ago: executing program 5 (id=2063): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x80047437, &(0x7f00000010c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setns(0xffffffffffffffff, 0x2000000) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, 0x0, &(0x7f0000000000)) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(0xffffffffffffffff, 0x3b87, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "25fd25990fe381b9", "f511161d94f179ecf85eb61b6a4762eb", "1e59ddbe", "06ed010001809f9b"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) sendto$inet6(r1, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x15) writev(r1, &(0x7f0000000640), 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) 4.941064117s ago: executing program 7 (id=2064): r0 = socket(0x18, 0x5, 0x1046) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x4002, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x6}, 0x1c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='illinois', 0x8) r2 = openat$vcs(0xffffff9c, &(0x7f0000000100), 0x40000, 0x0) ioctl$SNAPSHOT_UNFREEZE(r2, 0x3302) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x20000, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$int_in(r7, 0x5421, &(0x7f00000000c0)=0x9735) accept4$bt_l2cap(r7, 0x0, 0x0, 0x800) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000580)={'erspan0\x00', &(0x7f0000000500)={'sit0\x00', 0x0, 0x700, 0x7800, 0x0, 0x0, {{0xe, 0x4, 0x2, 0x1, 0x38, 0x68, 0x0, 0x7f, 0x4, 0x0, @remote, @empty, {[@ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x1f, 0xad, [@multicast1, @empty, @remote, @local, @multicast1, @dev={0xac, 0x14, 0x14, 0x2e}, @broadcast]}]}}}}}) getsockname$packet(r5, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000600)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000640)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000680)={'team0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f00000006c0)=0x0, &(0x7f0000000700)=0x4) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000000c00)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000400}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="f4020000", @ANYRES16=0x0, @ANYBLOB="000227bd7000ffdbdf2502000000080001", @ANYRES32=0x0, @ANYBLOB="3401028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004004200000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000000010040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000080000008000700000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="9c0102803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r9, @ANYBLOB="40697479000000000000000000000000000000000000000000000000050003000e000000080004000800000008000600000000", @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008", @ANYRES32=r12, @ANYBLOB], 0x2f4}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x1c}}, 0x1) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f03446b000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) 4.683546109s ago: executing program 1 (id=2065): socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_emit_ethernet(0xde, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60f900f500a80600fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a021d399ae820002907800001ef899843294cb6664e7c26d3b910854d6d40714a3287030a9d35819924cab04d570fc79d90945f32861294fbb312ae6fd7af6a4c84e76f10ca9eb8657c63f3686526b3cda54d1e4d843041974b5974935122d95e62c6d80cab970eb6dc3ecfcd728a93a5d57fb560f11568c1a5bcbb16115bdb12caf0e1e30433ecbbbe6ba9beb0416cc231fbdd4090c6bc89cbb874c275f0bb81f33bd540b16a9ef"], 0x0) faccessat2(0xffffffffffffffff, 0x0, 0x44, 0x1000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, {0xfffff5d4}}, './file0\x00'}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000003c0)=0x4) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r3 = socket$unix(0x1, 0x1, 0x0) listen(r3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x7, 0xd44, 0x6}) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000440)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg2\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80c9}, 0x14000810) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x100000) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000080)={0x5, 0x3, 0x248, 0x5d92, 0x9, 0x1ce, 0x7fff, 0x2}, 0x0, &(0x7f0000000140)={0x3ff, 0x80, 0x5, 0x0, 0x101, 0xafc2, 0x5, 0x1}, &(0x7f00000001c0)={r6, r7+60000000}, &(0x7f0000000280)={&(0x7f0000000240)={[0x1000, 0x8]}, 0x8}) mount(&(0x7f0000000300), &(0x7f0000000040)='.\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x2200cd0, 0x0) r8 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) 3.936787413s ago: executing program 7 (id=2066): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x248}}, 0x0) r1 = syz_open_procfs(0x0, 0x0) symlinkat(&(0x7f0000001900)='./file0\x00', r1, &(0x7f0000001940)='./file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e24}, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd67da7120001868e37d9c080cf76cc666cfa6c9c61101fc02000000000000000000000000000100000000000000000000ffff000000004e23080000ff0700"/92], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x7, 0x4000, 0x0, 0x20000004288, 0xffffffffffff9d5c, 0xb319, 0x6}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x7400}, 0x0) syz_open_dev$dri(&(0x7f0000000280), 0x8, 0x16000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x2, @empty, 0x8ac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x303}, "d88ba953d840b6f9", "b808398e7f01953cacd5ed068051f44b", "8cfdf591", "4b56b7c27150faec"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) r6 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x11, @remote, 0x4e20, 0x3, 'wrr\x00', 0x1a, 0x40c, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000200)={{0x84, @empty, 0x4e21, 0x3, 'rr\x00', 0xc, 0x5, 0x63}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4623, 0x3, 0x100000cd, 0x12d5f, 0x3}}, 0x44) sendmmsg$sock(r5, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}}], 0x1, 0x20000000) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1f8) 2.71424254s ago: executing program 7 (id=2067): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000002480)=0x5, 0x4) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0x11) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff5000/0xb000)=nil, 0x1000, 0x3, 0x2}) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x4, 0x1, 0x10000, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/net/ipv6/conf/all/disable_ipv6\x00', 0x1, 0x0) write(r4, &(0x7f0000000400)='1', 0x1) 2.429494677s ago: executing program 7 (id=2068): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) symlink(&(0x7f0000000340)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x28, 0x7fffffff, 0x40020104, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0xcaab}}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000000040), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r5, &(0x7f00000007c0)=ANY=[@ANYBLOB='gretap0 8'], 0xa) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x90, 0x0, 0x2, {0x0, 0x3, 0xbd18, 0x5cd3f9da, 0x7, 0x7f, {0x1, 0x5, 0x7, 0x6, 0x0, 0xf, 0xa734, 0x200, 0x7, 0xc890c63e415ce913, 0x101, r2, r3, 0xffff0000, 0x10}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000006200)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x90, 0x0, 0xe00, {0x6, 0x3, 0xa, 0x101, 0xc5b, 0x2, {0x4, 0x7, 0x8, 0x2, 0x8000000000000007, 0x3, 0x7, 0x0, 0x7, 0x1000, 0x6, r2, 0x0, 0x7, 0x1aeb9df5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x48}}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newsa={0x198, 0x10, 0x1, 0x70bc2c, 0x8000000, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0xecdf, 0x0, 0x0, 0x2}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, @in6=@empty, {0xfffffffffffffffe, 0xfffffffffffffffe, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x9}, {0x1, 0x400800, 0x9, 0x292}, {0x1000}, 0x0, 0x3507, 0x2, 0x4, 0x0, 0x2c}, [@algo_crypt={0x60, 0x2, {{'cbc(twofish)\x00'}, 0xc0, "6e000b000000002000000000000000007ffffffe00001818"}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x60}}]}, 0x198}}, 0x44050) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) r9 = syz_io_uring_setup(0x18da, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x3, 0xb5}, &(0x7f00000000c0), &(0x7f0000ffe000), &(0x7f0000000000)) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0xc080661a, &(0x7f0000000400)={@desc={0x1, 0x0, @desc4}}) io_uring_register$IORING_REGISTER_NAPI(r9, 0x1b, &(0x7f0000000240)={0x7fffffff, 0x1, 0x0, '\x00', 0x0, 0x1000000}, 0x1) r10 = syz_open_dev$sndpcmc(&(0x7f00000007c0), 0x0, 0x0) mmap$snddsp_control(&(0x7f0000ffc000/0x2000)=nil, 0x1000, 0x0, 0xb853, r10, 0x83000000) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'hsr0\x00', 0x0}) rename(&(0x7f0000000300)='./file0/../file0/file0\x00', &(0x7f0000000480)='./file0/../file0/file0\x00') sendmsg$IPVS_CMD_GET_DAEMON(r7, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="010028bd7000fcdbdf250b000000080005000e00000014000280080004000f000000080003000700000008000600040000000c000180070006006468000014000380060007004e2100000800030003000000080006000f000000"], 0x60}, 0x1, 0x0, 0x0, 0x24000041}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="8b18010000000000240012800b0001006d61637365630000140002800500080000000000050007000000000008000500", @ANYRES32=r11], 0x4c}}, 0x0) r12 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000780), r7) sendmsg$L2TP_CMD_TUNNEL_DELETE(r7, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x38, r12, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x55a3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0x4040004) 2.241068474s ago: executing program 0 (id=2069): r0 = socket(0x10, 0x80002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x17, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bf8200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe89}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x14, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket(0x200000000000011, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000540)="e3006b670002ec67838717bd88a8", 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x182000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000040)={0x80, 0xa0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8, 0x4008}, {0x0, 0x8}, {0x0, 0x40000000, 0xfffffffd}, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb, 0x400009, 0x6, 0x0, 0xd, 0x0, 0x1, 0x2}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) r6 = openat$nvram(0xffffff9c, &(0x7f0000000080), 0x1, 0x0) write$P9_RWSTAT(r6, &(0x7f0000000100)={0x7, 0x7f, 0x1}, 0x7) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r7 = syz_create_resource$binfmt(&(0x7f00000002c0)='./file0\x00') r8 = openat$binfmt(0xffffffffffffff9c, r7, 0x41, 0x1ff) fcntl$setlease(r8, 0x400, 0x1) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) close(0x3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) get_mempolicy(0x0, &(0x7f00000009c0), 0x6, &(0x7f0000ffe000/0x2000)=nil, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010400000000000000000a0000000900010073797a31000000000900030073797a310000000034000000030a010400000000000000000a0000000900010073797a31000000000900030073797a320000000008000a000000000440000000060a010400000000000000000a0000000900010073797a31000000000900020073797a320000000014000480100001800c000100636f756e746572406c000000060a010400000000000000010a000000090001"], 0x15c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0) 2.074799971s ago: executing program 7 (id=2070): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') symlinkat(&(0x7f0000001900)='./file0\x00', r0, &(0x7f0000001940)='./file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e24}, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd67da7120001868e37d9c080cf76cc666cfa6c9c61101fc02000000000000000000000000000100000000000000000000ffff000000004e23080000ff0700"/92], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x7, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a87080211000000040000a118000200e000000000000e1208000f0100810401a80016ea1f000940032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b4", 0xcb}], 0x1, 0x0, 0x0, 0x7400}, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x6000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x2, @empty, 0x8ac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000000180), 0x4) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) r6 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x10}, 0x4e20, 0x3, 'lblc\x00', 0x1a, 0x40c, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000200)={{0x84, @empty, 0x4e21, 0x3, 'rr\x00', 0xc, 0x5, 0x63}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4623, 0x3, 0x100000cd, 0x12d5f, 0x3}}, 0x44) sendmmsg$sock(r5, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}}], 0x1, 0x20000000) ioctl$int_in(r4, 0x5421, &(0x7f0000000140)=0xffff) socket$nl_netfilter(0x10, 0x3, 0xc) writev(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 1.536859749s ago: executing program 5 (id=2071): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='127.0.0.1:/\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt\x00', 0x1ff) mount(&(0x7f0000001100)=@filename='127.0.0.1:/\x00', &(0x7f0000001000)='./mnt\x00', &(0x7f0000001200)='nfs\x00', 0x0, &(0x7f0000001300)='nolock,v3,addr=127.0.0.1\x00') socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r1, &(0x7f0000004d80)={0x0, 0x0, &(0x7f0000004d40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400039b275cc645fbd8f5000007000000b2aa030073797a32bf0500f40800020073797a2400000000cb06b29abcc705b254b41b002fe35491cbdcb53e6b99a7c9a8297a7251053b5c4b4ef75b397588535e5c1038d35a42d1ecadaae1c9a552e32b2d7a21d4692a560877f299d8cc7d90fc4ce6874aa81c80a587bd65e48d911efc75c6f7f598704446"], 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0x8000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0xee01, 0x1000) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7b137b2e020a07fffff300000000567e15e37d464a136569c275a5cd5030365e6fcf18ad00e8b03d67c97ce892225928ff0057fe441513d7f79d89e62b34d93b1de4a87ad43def2bb88d26fbaac8fa27b4cdf7f739f953bf50c54c459cef50a78ccab0def75ec2e3fa549583df4578c15145bdfb4b452664c3eb5f71bfc9a9fec909815571ec88c00b357a2adb0da57aa3d69ae7e1713713e2edd814230b452c1f6bcc367fcf93fa74d35e99cb0b4c346c452f"], 0x20}}, 0x40800) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 1.429863628s ago: executing program 1 (id=2072): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100), 0x48) close(r0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2, 0x2, 0xfffffffe}}, 0x2e) getsockopt(r3, 0x111, 0x3, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x50) syz_usb_connect$uac3(0x2, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x100, 0x0, 0x0, 0x0, 0x8, 0x18d1, 0x2d04, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0xc, 0x0, 0x6, {0x8, 0xb, 0x0, 0x2, 0x1, 0xf0cec0b1beb5cba6, 0x30, 0x5b}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0xb}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x5e, 0x2, 0x0, {0xa, 0x25, 0x25, 0x9, 0xa7, 0x5e}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x0, 0x9, 0x9, {0xa, 0x25, 0x25, 0x3, 0x6, 0x4}}}}}}}}]}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a400000010000104080000000300000000000000", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a70001280110001006272696467655f736c6176650000000058000580050019a103000000050005000000000005000c0000000000050007000000000005000a00000000000500080000000000040018000500060001000000060002000100000005001e00000000000500010003000000140003006272696467655f736c6176655f30"], 0xa4}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) r5 = openat$sequencer2(0xffffff9c, &(0x7f00000011c0), 0x143240, 0x0) syz_usb_connect(0x1, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000046365608b40413868f95010203010902120001000000000904"], &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0}) ioctl$SNDCTL_SEQ_NRMIDIS(r5, 0xc0045103, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000140), 0xfffffffffffffffa, 0x88002) ioctl$EVIOCGSW(r6, 0x8040451b, &(0x7f0000000340)=""/159) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r7 = openat$mice(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd2a, 0x2, {0x7, r9}, [@MDBA_SET_ENTRY={0x20, 0x1, {r9, 0x0, 0x2, 0x2, {@ip4=@multicast2, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x40080c0) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r8, 0x7a5, &(0x7f00000000c0)={{@hyper, 0xfffffffc}, 0x1, 0x1, 0x4}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r8, 0x7b1, &(0x7f0000000040)={&(0x7f0000000780)=[0x3, 0x0, 0xe, 0x40, 0x4, 0x7f, 0x6000, 0x5, 0x7, 0x493, 0x7, 0x8000, 0x101, 0x3, 0x6, 0x8, 0x9, 0x7fff, 0x7, 0x7, 0x40, 0xfffffffb, 0x7, 0x6584, 0xb, 0xfffff000, 0x401, 0x5506, 0x9, 0x9, 0x3795, 0x6, 0x101, 0x81, 0x81, 0x8, 0x9, 0x20009, 0x10, 0x3, 0x6, 0x9, 0x401, 0xfffffff9, 0x35, 0xc, 0x0, 0xb0b6, 0x4, 0x20000, 0x6f, 0x5, 0x5, 0x0, 0xe, 0x0, 0x401, 0xc, 0x10001, 0x10e, 0xd64, 0x6, 0x6, 0x1ff, 0x7fffffff, 0x10, 0x9, 0x8, 0x11, 0x6, 0x9, 0x9fcb, 0xfffffffc, 0x0, 0x596, 0xd, 0x3, 0x412c, 0x101, 0x6, 0x7, 0x6, 0xb, 0x4, 0x7fffffff, 0x154, 0x9, 0x6, 0x6, 0x8, 0xe, 0x9, 0x8, 0x38, 0x4, 0x5, 0x9, 0x100, 0x10001, 0x9, 0x28000, 0x3, 0xffffff3e, 0x2, 0x6, 0x8, 0x7, 0x8, 0x8, 0x7, 0x8, 0x10000, 0x2, 0xbc3, 0xfff, 0x4d57, 0xeffffffa, 0x2, 0x3ff, 0x4, 0x100, 0x5, 0x0, 0xd, 0xa843, 0x7, 0x2, 0x6f5, 0x7fffffff, 0x7, 0x1, 0x2, 0x10001, 0x0, 0xfffffffd, 0x9, 0xc, 0x7fff, 0x1, 0x8, 0x10, 0x5, 0x8, 0x8001, 0x7, 0x6, 0xdf1, 0xfffffff9, 0x8, 0x0, 0x6, 0xffffff80, 0x1, 0x7f, 0x4, 0x3, 0x6, 0x2, 0x30, 0x6, 0x0, 0x6, 0x80000001, 0x2, 0x5, 0x0, 0xffff0001, 0x57c, 0x3, 0x7, 0x5, 0x2, 0x3, 0x0, 0xcd, 0x2, 0x3472, 0xf23b, 0x7, 0xec33, 0x81, 0x3, 0x4, 0x7, 0x10000, 0x54af, 0x800, 0x8c25, 0x3, 0x1, 0xf7f, 0xffff, 0x1376, 0x3, 0x4, 0x9, 0x0, 0x180, 0x2, 0x3, 0x6, 0x0, 0x6, 0x3, 0xed, 0xffffffff, 0x5, 0x6, 0xbfb, 0x80000001, 0xa5b, 0x280, 0x5, 0x1, 0x0, 0x2022, 0xb, 0x80000000, 0x8, 0x7, 0x80000001, 0x8, 0x4, 0x1, 0x3, 0x4, 0x5, 0x7ff, 0x9, 0x2, 0x11d, 0x9, 0x8, 0x5, 0x0, 0x2, 0x180000, 0xfffffff3, 0xfffffff9, 0x789e, 0xf0000000, 0x4, 0x8, 0x1, 0xeef, 0x7, 0x0, 0x0, 0xaa1, 0xffa00000, 0x80000001, 0x6, 0x9, 0xe, 0x1, 0x4, 0xfffffff4, 0x10000, 0xfc, 0x6, 0x4, 0x9d4d, 0xada, 0x5, 0xcab, 0x8f5, 0x80, 0x2, 0x2, 0x3, 0x1c000, 0xe, 0x1, 0x2, 0x5, 0x8, 0x6, 0x5, 0xfffffff3, 0x2, 0x3, 0xa, 0x80000001, 0x35, 0x80000001, 0x4, 0x1, 0x1, 0xfffffffb, 0x7, 0x40, 0xf, 0x1, 0x3, 0xae, 0xc53, 0x3, 0x1, 0x0, 0x4, 0xffff, 0x10, 0x6, 0x5, 0x0, 0xb9e6, 0x1, 0x8, 0xffffffff, 0xc, 0x1, 0x9, 0x200e8bf, 0x80, 0x1, 0x5, 0x9, 0x5, 0xffffff81, 0xb, 0x5, 0x4a19, 0x9, 0x0, 0xe2, 0x7, 0x6, 0x6, 0x0, 0x4, 0x0, 0x0, 0x1, 0xa0000, 0x7, 0x0, 0x6, 0x5, 0x7, 0x5, 0x65f, 0x6, 0x572, 0x200, 0xa2, 0x7fffffff, 0x0, 0x4, 0x2, 0x6, 0x7fffffff, 0xfffffff7, 0x2, 0x0, 0x8001, 0x9, 0x4, 0x0, 0x8000, 0x200, 0x3, 0x8000, 0x70, 0x1000, 0x4, 0x9, 0xfffffffa, 0x1, 0x0, 0x7fffffff, 0x5, 0xffffffff, 0xfffffffe, 0x401, 0x5e9b, 0x1, 0x8, 0x1, 0x800, 0xb2, 0x4, 0x5, 0x1000, 0x5d4, 0xe, 0x7, 0x6, 0x1ff, 0x400, 0x4, 0x7, 0x3, 0x5, 0x3, 0x4, 0x9, 0xdfe, 0x6, 0x9, 0x6, 0x3, 0x6, 0x97, 0x80, 0x40, 0x8, 0x4, 0x5, 0x6, 0x3, 0x9, 0x8bd5, 0x80, 0x10000, 0xa189, 0x10001, 0xad, 0x6, 0x401, 0x9, 0xfffffffe, 0x6, 0x5, 0xfffffff8, 0x1, 0x4ff80107, 0x25c3, 0x3, 0x3, 0x7fffffff, 0x5, 0x282c22c9, 0x1, 0x200, 0x6, 0x3, 0x1, 0xde, 0x7, 0x10001, 0x7, 0x10001, 0x6, 0x0, 0xb, 0x6, 0x3, 0x9, 0x11a2, 0x8001, 0x5, 0x5, 0x6, 0x5, 0x6, 0x6, 0xf, 0x80000000, 0x7, 0x7, 0xe, 0x4, 0x9, 0x0, 0x6, 0x500, 0x10001, 0x2, 0x8c, 0x3, 0x4, 0x720, 0x7, 0x8, 0x10000, 0x6, 0xfffffff8, 0x8, 0x9, 0x9, 0xff56, 0x1, 0x9, 0x0, 0x3, 0x0, 0x40, 0x8001, 0xffffffff, 0x1, 0xeb7d, 0x5, 0x6, 0x7, 0x5, 0x100f5ac1, 0xfff, 0x7fff, 0x0, 0x800, 0x8, 0xc34d, 0xf, 0x401, 0x0, 0x1, 0x7, 0x2b8, 0x1, 0x7f, 0x9, 0x310b0c73, 0x7fffffff, 0xb365, 0xfff, 0x929b, 0x7, 0x8, 0x8, 0x4, 0x8, 0x8001, 0x143, 0x7, 0x7f, 0x4, 0xf, 0x3, 0x31c, 0x1ff, 0x6, 0xfffffffa, 0x3ff, 0xbd60, 0x9, 0x7, 0x4, 0x80, 0x1002, 0x4, 0x4, 0x1, 0x7, 0x5, 0xe, 0x8, 0xfff, 0xfffffff8, 0x200, 0x5, 0xfe, 0x6, 0x2, 0x5, 0x800, 0x0, 0x10000, 0x8, 0x4, 0x2, 0x6, 0x7, 0xff, 0x1, 0x0, 0x9, 0x7fff, 0x4f, 0xc9e, 0xffff, 0x3, 0x9, 0x9, 0x0, 0x80, 0x0, 0x6, 0x8, 0xfff, 0x1000, 0x1, 0xc, 0x7e, 0x0, 0x5, 0x4, 0xe71, 0xffff8001, 0x81, 0x1, 0x5, 0x5, 0x4, 0xa07, 0x2, 0x1, 0x6, 0x3, 0x1, 0x2, 0x4, 0x6, 0x5, 0x5, 0x6, 0xf1, 0x80, 0x0, 0x1, 0x0, 0x9, 0x5, 0x3450, 0x7f, 0x2, 0x80, 0x0, 0x9, 0x7fffffff, 0x40, 0x8, 0xfff, 0x6, 0x7, 0x6, 0x2, 0x7, 0x1, 0x7ff, 0x3, 0x3ff, 0x23c3, 0x0, 0x6, 0x40, 0x6, 0x7, 0x7, 0x7, 0xed, 0x1, 0x3, 0x1ff, 0x80000000, 0x3, 0x3, 0x1, 0x10, 0xfffffffe, 0x0, 0xa7, 0xe, 0x80, 0x5, 0x2, 0x1, 0x8, 0x7a, 0x0, 0xc4b, 0x24, 0x63, 0x9, 0x800, 0x3, 0xfed40, 0x3, 0x11e, 0x7ff, 0x5, 0x32, 0x6, 0xffff, 0x3, 0xa4b, 0x1, 0x5, 0xb23, 0xfff, 0x1, 0x1, 0x9, 0x4, 0x8, 0x8, 0x7, 0x401, 0x9, 0x4, 0x6, 0x6, 0x70, 0x660, 0x3, 0xd5f, 0x8, 0x3, 0x200, 0x3, 0x0, 0x3, 0x3, 0x10001, 0xa5, 0x3, 0x80000000, 0x8, 0xffffffff, 0x5, 0x0, 0x1, 0x7f, 0x4cb3, 0x6, 0x1, 0x0, 0x6, 0x3a85, 0x7, 0xa, 0x1, 0x6, 0x9, 0xe, 0x5, 0x23, 0x5, 0x96, 0x0, 0x9e, 0x80000000, 0x4080000, 0x1000, 0x4, 0x0, 0x10, 0x7, 0x401, 0xf046, 0x19, 0x5, 0x2, 0x4, 0x9, 0xfffffff5, 0xfffffff1, 0xffffffff, 0x1, 0xab7fbaaf, 0x2, 0xb4, 0xffff, 0x80, 0x2, 0x3, 0x6, 0x20000000, 0x7, 0xa, 0xfffff2ea, 0x3800, 0x0, 0xf, 0x80, 0x2, 0x3, 0xfffffff7, 0x6, 0x4, 0x8000, 0x7fff, 0x8, 0x2, 0x0, 0x4, 0x1, 0x401, 0x7, 0x329, 0x4, 0xff, 0x4, 0x3, 0x6, 0x0, 0x1, 0xa, 0xfffffffd, 0x3, 0x6c99, 0x2, 0x3, 0x2, 0x89fd, 0x7, 0x68c109f7, 0x5, 0xfffffffa, 0x0, 0x39a703cd, 0x3, 0x0, 0x800, 0x4, 0x1, 0x0, 0x8, 0x7f, 0x4, 0xe, 0x7f53, 0x1ff, 0x5, 0xffffffff, 0xd, 0x8, 0x2c69e094, 0x800, 0xffff3ec3, 0x3, 0x3f9f, 0x0, 0xedb1, 0xb, 0x8, 0x0, 0x4, 0xb, 0x3, 0x8, 0x1ff, 0x1, 0x4, 0x8, 0xe, 0x10, 0xffffffff, 0x9, 0xe44, 0x2, 0xda, 0x5, 0x0, 0xfffffff7, 0x0, 0x0, 0xc9, 0x7, 0x10000, 0xd75, 0x80000001, 0x7, 0x400, 0x5e, 0x7fff, 0x4, 0x7, 0x800, 0x4, 0x3, 0x6, 0x1, 0x4, 0xfffffffa, 0xffffffff, 0x7c, 0x2, 0x9, 0x9, 0x9, 0x7, 0x1, 0x5c8b0e92, 0x3ff, 0x40, 0x9, 0x5, 0xfffffff9, 0x80, 0x7ff, 0x2d, 0x0, 0x8001, 0x7, 0x101, 0x1, 0x5, 0x6, 0x2, 0x5, 0xb72, 0xfff, 0x9, 0x80000000, 0x100, 0x6, 0x1, 0x15, 0x2, 0xff, 0xbb, 0xa55, 0x2, 0x4, 0x3, 0x2, 0x800, 0xf, 0x6, 0x7, 0xe4c1, 0x0, 0x1, 0x5, 0x7, 0x2210, 0x6, 0xda, 0xd, 0x958d, 0x8, 0x7, 0xffc, 0x2000000, 0x9, 0x3, 0x67a7bb72, 0x5, 0x9, 0xda800000, 0x9, 0xfffffff1, 0x3b1a, 0x2, 0x9, 0xb, 0xffff, 0x4, 0x1, 0x6, 0x2, 0x10000, 0x5, 0x4e3f, 0x9, 0x4, 0xa3, 0x7, 0xbe66, 0xfffffff9, 0xfa, 0x8, 0x5, 0x7, 0x0, 0x5, 0x8, 0x8, 0x3, 0x8, 0x80000000, 0x7fffffff, 0x7, 0x80000000, 0x6, 0x8ea, 0x101, 0x8, 0x1, 0x3, 0x4, 0x9, 0x80, 0x1, 0x4, 0x5, 0xbd5d, 0x0, 0x2, 0x2, 0x6, 0x80, 0x7fffffff, 0x9fe2, 0x4, 0x2, 0x3, 0x400, 0xfffffff9, 0x371c, 0x6, 0x3, 0x3e, 0x20, 0x8, 0x4, 0x100, 0x5, 0x3, 0x6, 0x4, 0x1, 0x3, 0x2, 0x1, 0x0, 0xc, 0x0, 0x8, 0x200, 0x2, 0x200, 0x0, 0x1, 0x4, 0x80000001, 0x0, 0x7, 0x5, 0x4, 0x7, 0x4d40, 0x4, 0x80000001], 0x6, 0x400}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "ef"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xc0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1.359857651s ago: executing program 0 (id=2073): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$I2C(&(0x7f00000007c0), 0x0, 0x40) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x88c3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000300)={0x0, 'veth1_to_batadv\x00', {0x3}, 0x7}) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000a40), r2) sendmsg$NFC_CMD_ENABLE_SE(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd7000fedbdf251100000008000100", @ANYRES32=0x0, @ANYBLOB="deee0d5716dc6d4318f52d0c203d58da55d31a34c782345807c3da68c470d3c7862c3ffcf818f58f26c02212f4043c7625a9f514c1d084372770269cc78ddd313c80c17be050d21ded1c5c2cdfefd9044103208919f99592df39c8f82f790408caf0e176983bbbf50925bc69ffcbefebd4305dbc0200ed6ad6f1921e83b54cee10a8958b18131221360d0b"], 0x1c}, 0x1, 0x0, 0x0, 0x884}, 0x4044802) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r4 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x24483) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0x2, 0xfffffffc}, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x9, 0x0, r5, 0xffff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x5}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x5, 0x2, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x23, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000008000000000000000100000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000000575080000010000185100000b00000000000000000000001841000008000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="00000000000000000c0603820000000019110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000005bbfcfff0ffffff18000000060000000000000004000000bf91000000000000b7020000000000008500000084000000b70000000000000095000000000000"], 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) 340.102732ms ago: executing program 0 (id=2074): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x20) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300044d, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0xffffffffffefffff, 0x0, 0x106, 0x3}}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0186405, &(0x7f0000000040)={0xbdf8, 0x0, {}, {0xee00}, 0x6, 0x980a}) r2 = open$dir(&(0x7f0000000200)='./file0/file0\x00', 0x80200, 0x80) openat(r2, &(0x7f0000000280)='./file0\x00', 0x640c00, 0x18) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, r1, &(0x7f00000000c0)='./file0/file0\x00') write$cgroup_int(r0, &(0x7f0000000300)=0x7f, 0xfdef) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = epoll_create1(0x0) pselect6(0x40, &(0x7f0000000100)={0x7f0, 0x0, 0xffff, 0x2, 0x0, 0x0, 0x0, 0x400}, 0x0, &(0x7f0000000240)={0x4, 0x3, 0x0, 0x10000000000, 0x1000000002, 0x0, 0x0, 0x6}, 0x0, 0x0) r5 = timerfd_create(0x0, 0x0) timerfd_settime(r5, 0x3, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r5, 0x0) syz_emit_ethernet(0x37, &(0x7f00000001c0)={@local, @random="86082b9827c1", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "0400", 0x1, 0x2c, 0x0, @private2={0xfc, 0x2, '\x00', 0x4}, @local, {[], "9c"}}}}}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x40, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x2200, 0x1) unlink(&(0x7f0000000040)='./file0\x00') mknod$loop(&(0x7f0000000000)='./file0\x00', 0x208c, 0x1) read(r5, &(0x7f0000000380)=""/162, 0xa2) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000300)={0x20000002}) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r6, 0x7) wait4(r6, 0x0, 0x0, 0x0) sched_setscheduler(r6, 0x0, &(0x7f0000000180)=0x6) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) request_key(&(0x7f00000011c0)='big_key\x00', &(0x7f0000001200)={'syz', 0x1}, &(0x7f0000001240)='\x00', 0x0) add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000980)='G', 0x1, 0xfffffffffffffffb) 339.558755ms ago: executing program 7 (id=2075): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x22, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xfffffffffffffea1, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x9}, 0x80}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x9, 0x3, 0x2e4, 0x130, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x21c, 0xffffffff, 0xffffffff, 0x21c, 0xffffffff, 0x3, &(0x7f0000000300), {[{{@ipv6={@local, @mcast2, [0x0, 0xff000000, 0xff, 0xff], [0x0, 0xff000000, 0xffffff00, 0xffffff], 'syzkaller0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x23, 0x7, 0x1, 0x1}, 0x0, 0xc8, 0x130, 0x0, {}, [@common=@ipv6header={{0x24}, {0x90, 0x83}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x9, 0x57dd, 0x200, 0x10000, 'snmp_trap\x00', 'syz1\x00', {0x10}}}}, {{@ipv6={@private0, @dev={0xfe, 0x80, '\x00', 0x19}, [0xff000000, 0x0, 0xffffffff], [0xff000000, 0xffffffff, 0xffffffff, 0xff000000], 'hsr0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x8, 0x3, 0x0, 0x21}, 0x0, 0xa4, 0xec}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x8, 0x2, 0x200, 'snmp_trap\x00', {0xc685}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x340) sendto$inet6(r3, 0x0, 0x0, 0x22004801, &(0x7f0000b63fe4)={0xa, 0x4, 0xffffffff, @empty}, 0x1c) mknod(&(0x7f0000000080)='./bus\x00', 0x4, 0x6) mount(&(0x7f0000000040)=@filename='./bus\x00', &(0x7f0000000100)='./bus\x00', &(0x7f0000000340)='msdos\x00', 0x8080, &(0x7f00000001c0)='discard') r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414"], 0x1c) sendto$inet6(r3, &(0x7f0000000540)="d2643718f60bc48de06164649966d3dbcdb81e04000000000000003a85bc749d3194b38ff5ea36f6aae15f46d64a9d7ed36d943671e7437426768f5a7e3650bd26ba58ee5348c01f3c724f7eb6f6ce656b8bcb81d7015b138edec188e4699a29496f4bd1ef1154f17e94ee48254ec1e9daaf86c1e25f9a2cc51241fda8164b0a0d7720fc61ebbeb178c00f999bf9141685cac2443159e14af92767afd5cafe4ec32c", 0xa2, 0x4000, 0x0, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) sendmsg$can_bcm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x7, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x3, 0x2}}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) 73.161301ms ago: executing program 0 (id=2076): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000002480)=0x5, 0x4) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0x11) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff5000/0xb000)=nil, 0x1000, 0x3, 0x2}) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x4, 0x1, 0x10000, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/net/ipv6/conf/all/disable_ipv6\x00', 0x1, 0x0) write(r4, &(0x7f0000000400)='1', 0x1) 0s ago: executing program 1 (id=2077): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3, &(0x7f0000002480)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$get_security(0x11, r1, &(0x7f0000000080)=""/132, 0x84) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) lremovexattr(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) chdir(&(0x7f0000000b00)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00') r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9040, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000380)={0x50, 0x0, r4, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0x2}}, 0x50) write$FUSE_INIT(r2, &(0x7f0000000140)={0x50, 0x0, r4, {0x7, 0x2d, 0x9, 0x2, 0xe54, 0x2, 0x0, 0x400, 0x0, 0x0, 0x80, 0x7}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='streaming/header/h\x00', 0x1ff) symlink(&(0x7f0000001600)='streaming/header/h\x00', &(0x7f0000001700)='streaming/class/fs/h\x00') symlink(&(0x7f0000001800)='streaming/header/h\x00', &(0x7f0000001900)='streaming/class/hs/h\x00') symlink(&(0x7f00000000c0)='streaming/class/hs/h\x00', &(0x7f0000001b00)='./my_configfs\x00') openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000a00)='- ', 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r5) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x14, r6, 0x800, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004014}, 0x4000040) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) getsockopt$nfc_llcp(r7, 0x118, 0x2, &(0x7f0000000040)=""/239, 0xef) kernel console output (not intermixed with test programs): [ 180.149063][ T9] usb 10-1: Manufacturer: syz [ 180.149070][ T9] usb 10-1: SerialNumber: syz [ 180.352936][ T9771] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1199'. [ 180.370954][ T9771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.371279][ T9771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.437945][ T9] usb 10-1: Unsupported UAC3 BADD profile [ 180.456441][ T9] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 180.462667][ T9] usb 10-1: USB disconnect, device number 24 [ 180.468963][ T7205] udevd[7205]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 180.732314][ C1] usb 5-1: tower_interrupt_in_callback: usb_submit_urb failed (-1) [ 180.733913][ T6700] usb 5-1: USB disconnect, device number 29 [ 180.742258][ T6700] legousbtower 5-1:14.228: LEGO USB Tower #-160 now disconnected [ 181.007714][ T9782] netfs: Cache "CacheFiles" added (type cachefiles) [ 181.007763][ T9782] CacheFiles: File cache on CacheFiles registered [ 181.009121][ T9781] CacheFiles: File cache on CacheFiles unregistering [ 181.009139][ T9781] netfs: Withdrawing cache "CacheFiles" (0 objs) [ 181.496167][ T30] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 181.648313][ T30] usb 6-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 0.00 [ 181.649230][ T30] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 181.649247][ T30] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 181.654162][ T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 181.654179][ T30] usb 6-1: Product: syz [ 181.654187][ T30] usb 6-1: Manufacturer: syz [ 181.658657][ T9792] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 181.658757][ T9792] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 181.659944][ T30] i2c-diolan-u2c 6-1:1.0: Diolan U2C at USB bus 006 address 033 speed 100000 Hz [ 181.663525][ T30] i2c-diolan-u2c 6-1:1.0: failed to initialize adapter [ 181.663559][ T30] i2c-diolan-u2c 6-1:1.0: probe with driver i2c-diolan-u2c failed with error -71 [ 181.696168][ T5838] usb 12-1: new high-speed USB device number 15 using dummy_hcd [ 181.846859][ T5838] usb 12-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 181.849195][ T5838] usb 12-1: config 0 has no interfaces? [ 181.850810][ T5838] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.850824][ T5838] usb 12-1: Product: syz [ 181.850832][ T5838] usb 12-1: Manufacturer: syz [ 181.850839][ T5838] usb 12-1: SerialNumber: syz [ 181.852495][ T5838] usb 12-1: config 0 descriptor?? [ 181.926192][ T30] usb 10-1: new full-speed USB device number 25 using dummy_hcd [ 181.969454][ T9822] overlayfs: invalid redirect ((null)) [ 182.006216][ T9825] input: syz0 as /devices/virtual/input/input17 [ 182.042670][ T9818] ucsi_ccg 1-0008: ucsi_ccg_init failed - -110 [ 182.047246][ T9818] ucsi_ccg 1-0008: probe with driver ucsi_ccg failed with error -110 [ 182.050983][ T9818] i2c i2c-1: new_device: Instantiated device ccgx-ucsi at 0x08 [ 182.076962][ T30] usb 10-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 182.078529][ T30] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 94, changing to 4 [ 182.078562][ T30] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 182.082799][ T30] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.082820][ T30] usb 10-1: Product: syz [ 182.082832][ T30] usb 10-1: Manufacturer: syz [ 182.082844][ T30] usb 10-1: SerialNumber: syz [ 182.099897][ T6700] usb 12-1: USB disconnect, device number 15 [ 182.312611][ T9814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.312879][ T9814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.377123][ T30] usb 10-1: Unsupported UAC3 BADD profile [ 182.394299][ T30] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 182.398498][ T30] usb 10-1: USB disconnect, device number 25 [ 182.407776][ T7205] udevd[7205]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 182.725883][ T9840] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.727477][ T9840] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.774189][ T9840] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.776980][ T9840] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.846187][ T5783] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.851358][ T5783] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.851399][ T5783] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.851456][ T5783] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.869198][ T6700] usb 6-1: USB disconnect, device number 33 [ 184.126326][ T5738] Bluetooth: hci0: command 0x4000 tx timeout [ 185.486118][ T35] usb 12-1: new full-speed USB device number 16 using dummy_hcd [ 185.588673][ T43] audit: type=1800 audit(1787968500.294:15): pid=9920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1246" name="(" dev="sda1" ino=2044 res=0 errno=0 [ 185.639021][ T35] usb 12-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 185.642917][ T35] usb 12-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 94, changing to 4 [ 185.642978][ T35] usb 12-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 185.654550][ T35] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.654584][ T35] usb 12-1: Product: syz [ 185.655411][ T35] usb 12-1: Manufacturer: syz [ 185.655438][ T35] usb 12-1: SerialNumber: syz [ 185.914589][ T9912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.915521][ T9912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.997930][ T35] usb 12-1: Unsupported UAC3 BADD profile [ 186.025831][ T35] snd-usb-audio 12-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 186.032927][ T35] usb 12-1: USB disconnect, device number 16 [ 186.051594][ T7205] udevd[7205]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb12/12-1/12-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 186.597114][ T9962] kvm: emulating exchange as write [ 186.753729][ T9] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 186.765461][ T9] hid-generic 0000:0000:0000.000B: hidraw1: HID v0.00 Device [syz1] on syz0 [ 186.852910][ T9975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1261'. [ 187.128738][ T9] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 187.277430][ T9] usb 5-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 187.279202][ T9] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 94, changing to 4 [ 187.279229][ T9] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 187.280835][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.280849][ T9] usb 5-1: Product: syz [ 187.280857][ T9] usb 5-1: Manufacturer: syz [ 187.280864][ T9] usb 5-1: SerialNumber: syz [ 187.506867][ T9983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.510620][ T9983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.587442][ T9] usb 5-1: Unsupported UAC3 BADD profile [ 187.608899][ T9] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 187.615353][ T9] usb 5-1: USB disconnect, device number 30 [ 187.627098][ T7205] udevd[7205]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 188.525960][T10009] gadgetfs: bound to dummy_udc driver [ 188.766672][ T30] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 188.766962][ C1] gadgetfs: connected [ 188.767093][ T30] gadgetfs: disconnected [ 190.386525][ T43] audit: type=1800 audit(1787968505.094:16): pid=10061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1293" name="file0" dev="fuse" ino=18446744073709551613 res=0 errno=0 [ 190.489694][T10065] pci 0000:00:00.0: [8086:29c0] type 00 class 0x060000 conventional PCI endpoint [ 190.504676][T10065] pci 0000:00:00.0: Adding to iommu group 0 [ 190.711713][T10087] FAULT_INJECTION: forcing a failure. [ 190.711713][T10087] name failslab, interval 1, probability 0, space 0, times 0 [ 190.715736][T10087] CPU: 3 UID: 0 PID: 10087 Comm: syz.5.1297 Tainted: G L syzkaller #0 PREEMPT(full) [ 190.715754][T10087] Tainted: [L]=SOFTLOCKUP [ 190.715758][T10087] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 190.715765][T10087] Call Trace: [ 190.715770][T10087] [ 190.715775][T10087] dump_stack_lvl+0x100/0x190 [ 190.715795][T10087] should_fail_ex.cold+0x5/0xa [ 190.715810][T10087] should_failslab+0xc2/0x120 [ 190.715826][T10087] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 190.715840][T10087] ? alloc_vmap_area+0x640/0x2bb0 [ 190.715857][T10087] alloc_vmap_area+0x640/0x2bb0 [ 190.715873][T10087] ? kasan_save_track+0x14/0x30 [ 190.715886][T10087] ? __kasan_kmalloc+0xaa/0xb0 [ 190.715898][T10087] ? __pfx_alloc_vmap_area+0x10/0x10 [ 190.715911][T10087] ? __lock_acquire+0x4c5/0x1ec0 [ 190.715927][T10087] ? __get_vm_area_node+0x124/0x350 [ 190.715941][T10087] __get_vm_area_node+0x1ed/0x350 [ 190.715973][T10087] __vmalloc_node_range_noprof+0x268/0x1420 [ 190.715989][T10087] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 190.716004][T10087] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 190.716025][T10087] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 190.716042][T10087] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 190.716061][T10087] ? __lock_acquire+0x4c5/0x1ec0 [ 190.716075][T10087] ? __lock_acquire+0x4c5/0x1ec0 [ 190.716093][T10087] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 190.716106][T10087] __vmalloc_node_noprof+0xad/0xf0 [ 190.716121][T10087] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 190.716137][T10087] __vmalloc_noprof+0xa3/0x120 [ 190.716152][T10087] ? __pfx___vmalloc_noprof+0x10/0x10 [ 190.716166][T10087] ? rcu_is_watching+0x13/0xc0 [ 190.716178][T10087] ? rcu_is_watching+0x13/0xc0 [ 190.716190][T10087] ? apparmor_capable+0x1d7/0x4d0 [ 190.716205][T10087] bpf_prog_alloc_no_stats+0x58/0x690 [ 190.716218][T10087] ? security_capable+0x80/0x260 [ 190.716232][T10087] bpf_prog_alloc+0x3b/0x200 [ 190.716245][T10087] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 190.716260][T10087] bpf_prog_load+0x49e/0x2a80 [ 190.716275][T10087] ? __lock_acquire+0x4c5/0x1ec0 [ 190.716294][T10087] ? __pfx_bpf_prog_load+0x10/0x10 [ 190.716308][T10087] ? lock_acquire+0x1d1/0x380 [ 190.716333][T10087] __sys_bpf+0x1f46/0x4a30 [ 190.716347][T10087] ? __pfx___sys_bpf+0x10/0x10 [ 190.716357][T10087] ? find_held_lock+0x2b/0x80 [ 190.716368][T10087] ? futex_wake+0x4ea/0x5e0 [ 190.716390][T10087] ? rcu_read_lock_any_held+0x6a/0x90 [ 190.716413][T10087] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 190.716424][T10087] ? __ia32_sys_futex_time32+0x2fd/0x470 [ 190.716436][T10087] ? fdget_pos+0x2c0/0x380 [ 190.716449][T10087] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 190.716461][T10087] ? ksys_write+0x1ac/0x250 [ 190.716473][T10087] ? __ia32_sys_bpf+0xcc/0x170 [ 190.716484][T10087] __ia32_sys_bpf+0xcc/0x170 [ 190.716495][T10087] ? __do_fast_syscall_32+0xb3/0x8b0 [ 190.716512][T10087] __do_fast_syscall_32+0x13a/0x8b0 [ 190.716526][T10087] ? lockdep_hardirqs_on+0x7d/0x110 [ 190.716541][T10087] do_fast_syscall_32+0x32/0x70 [ 190.716558][T10087] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 190.716572][T10087] RIP: 0023:0xf708efec [ 190.716586][T10087] Code: Unable to access opcode bytes at 0xf708efc2. [ 190.716591][T10087] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 190.716602][T10087] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000140 [ 190.716610][T10087] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 190.716617][T10087] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 190.716625][T10087] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 190.716632][T10087] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 190.716646][T10087] [ 190.717479][T10087] syz.5.1297: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 190.717563][T10087] CPU: 3 UID: 0 PID: 10087 Comm: syz.5.1297 Tainted: G L syzkaller #0 PREEMPT(full) [ 190.717579][T10087] Tainted: [L]=SOFTLOCKUP [ 190.717583][T10087] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 190.717590][T10087] Call Trace: [ 190.717594][T10087] [ 190.717598][T10087] dump_stack_lvl+0x100/0x190 [ 190.717615][T10087] warn_alloc.cold+0x9e/0xb2 [ 190.717627][T10087] ? __pfx_warn_alloc+0x10/0x10 [ 190.717645][T10087] ? lockdep_hardirqs_on+0x7d/0x110 [ 190.717660][T10087] ? __get_vm_area_node+0x2f0/0x350 [ 190.717677][T10087] ? __get_vm_area_node+0x22b/0x350 [ 190.717693][T10087] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 190.717708][T10087] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 190.717729][T10087] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 190.717746][T10087] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 190.717760][T10087] ? __lock_acquire+0x4c5/0x1ec0 [ 190.717776][T10087] ? __lock_acquire+0x4c5/0x1ec0 [ 190.717794][T10087] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 190.717809][T10087] __vmalloc_node_noprof+0xad/0xf0 [ 190.717823][T10087] ? bpf_prog_alloc_no_stats+0x58/0x690 [ 190.717858][T10087] __vmalloc_noprof+0xa3/0x120 [ 190.717874][T10087] ? __pfx___vmalloc_noprof+0x10/0x10 [ 190.717888][T10087] ? rcu_is_watching+0x13/0xc0 [ 190.717902][T10087] ? rcu_is_watching+0x13/0xc0 [ 190.717913][T10087] ? apparmor_capable+0x1d7/0x4d0 [ 190.717929][T10087] bpf_prog_alloc_no_stats+0x58/0x690 [ 190.717944][T10087] ? security_capable+0x80/0x260 [ 190.717957][T10087] bpf_prog_alloc+0x3b/0x200 [ 190.717971][T10087] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 190.717987][T10087] bpf_prog_load+0x49e/0x2a80 [ 190.718002][T10087] ? __lock_acquire+0x4c5/0x1ec0 [ 190.718019][T10087] ? __pfx_bpf_prog_load+0x10/0x10 [ 190.718033][T10087] ? lock_acquire+0x1d1/0x380 [ 190.718064][T10087] __sys_bpf+0x1f46/0x4a30 [ 190.718080][T10087] ? __pfx___sys_bpf+0x10/0x10 [ 190.718091][T10087] ? find_held_lock+0x2b/0x80 [ 190.718102][T10087] ? futex_wake+0x4ea/0x5e0 [ 190.718125][T10087] ? rcu_read_lock_any_held+0x6a/0x90 [ 190.718150][T10087] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 190.718162][T10087] ? __ia32_sys_futex_time32+0x2fd/0x470 [ 190.718176][T10087] ? fdget_pos+0x2c0/0x380 [ 190.718190][T10087] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 190.718202][T10087] ? ksys_write+0x1ac/0x250 [ 190.718214][T10087] ? __ia32_sys_bpf+0xcc/0x170 [ 190.718225][T10087] __ia32_sys_bpf+0xcc/0x170 [ 190.718236][T10087] ? __do_fast_syscall_32+0xb3/0x8b0 [ 190.718251][T10087] __do_fast_syscall_32+0x13a/0x8b0 [ 190.718266][T10087] ? lockdep_hardirqs_on+0x7d/0x110 [ 190.718280][T10087] do_fast_syscall_32+0x32/0x70 [ 190.718294][T10087] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 190.718308][T10087] RIP: 0023:0xf708efec [ 190.718320][T10087] Code: Unable to access opcode bytes at 0xf708efc2. [ 190.718325][T10087] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 190.718335][T10087] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000140 [ 190.718342][T10087] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 190.718348][T10087] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 190.718355][T10087] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 190.718361][T10087] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 190.718375][T10087] [ 190.750447][T10087] Mem-Info: [ 190.750459][T10087] active_anon:34624 inactive_anon:173 isolated_anon:0 [ 190.750459][T10087] active_file:3783 inactive_file:35210 isolated_file:0 [ 190.750459][T10087] unevictable:1000 dirty:294 writeback:0 [ 190.750459][T10087] slab_reclaimable:6719 slab_unreclaimable:58691 [ 190.750459][T10087] mapped:24095 shmem:28153 pagetables:1572 [ 190.750459][T10087] sec_pagetables:301 bounce:0 [ 190.750459][T10087] kernel_misc_reclaimable:0 [ 190.750459][T10087] free:22811 free_pcp:10773 free_cma:0 [ 190.750489][T10087] Node 0 active_anon:2636kB inactive_anon:76kB active_file:72kB inactive_file:76kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:36kB dirty:8kB writeback:0kB shmem:4608kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9024kB pagetables:1300kB sec_pagetables:1132kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 190.750564][T10087] Node 1 active_anon:135860kB inactive_anon:616kB active_file:15060kB inactive_file:140764kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:96344kB dirty:1168kB writeback:0kB shmem:108004kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6740kB pagetables:4988kB sec_pagetables:72kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 190.750594][T10087] Node 0 DMA free:1932kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0kB free_highatomic:0kB active_anon:212kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:636kB local_pcp:196kB free_cma:0kB [ 190.750627][T10087] lowmem_reserve[]: 0 278 278 278 278 [ 190.750647][T10087] Node 0 DMA32 free:14740kB boost:0kB min:12628kB low:15784kB high:18940kB reserved_highatomic:0kB free_highatomic:0kB active_anon:2424kB inactive_anon:76kB active_file:72kB inactive_file:76kB unevictable:2000kB writepending:8kB zspages:0kB present:1032196kB managed:284688kB mlocked:0kB bounce:0kB free_pcp:14044kB local_pcp:3852kB free_cma:0kB [ 190.750681][T10087] lowmem_reserve[]: 0 0 0 0 0 [ 190.750700][T10087] Node 1 DMA32 free:74572kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0kB free_highatomic:0kB active_anon:135860kB inactive_anon:616kB active_file:15060kB inactive_file:140764kB unevictable:2000kB writepending:1168kB zspages:1596kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:28424kB local_pcp:9444kB free_cma:0kB [ 190.750734][T10087] lowmem_reserve[]: 0 0 0 0 0 [ 190.750751][T10087] Node 0 DMA: 93*4kB (U) 37*8kB (U) 5*16kB (UM) 11*32kB (UM) 3*64kB (UM) 1*128kB (M) 0*256kB 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 1932kB [ 190.750864][T10087] Node 0 DMA32: 71*4kB (UME) 47*8kB (UE) 52*16kB (UME) 118*32kB (UME) 38*64kB (UE) 11*128kB (UM) 2*256kB (UE) 4*512kB (UME) 3*1024kB (UM) 0*2048kB 0*4096kB = 14740kB [ 190.750964][T10087] Node 1 DMA32: 745*4kB (UME) 279*8kB (UME) 99*16kB (UME) 131*32kB (UME) 120*64kB (UME) 75*128kB (UME) 29*256kB (UME) 26*512kB (UME) 7*1024kB (UME) 3*2048kB (U) 3*4096kB (M) = 74604kB [ 190.751056][T10087] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 190.751065][T10087] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 190.751073][T10087] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 190.751081][T10087] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 190.751089][T10087] 67380 total pagecache pages [ 190.751093][T10087] 238 pages in swap cache [ 190.751097][T10087] Free swap = 122700kB [ 190.751100][T10087] Total swap = 124996kB [ 190.751104][T10087] 524155 pages RAM [ 190.751108][T10087] 0 pages HighMem/MovableOnly [ 190.751111][T10087] 212091 pages reserved [ 190.751115][T10087] 0 pages cma reserved [ 190.804629][T10093] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 190.804642][T10093] IPv6: NLM_F_CREATE should be set when creating new route [ 190.896216][ T50] usb 12-1: new full-speed USB device number 17 using dummy_hcd [ 191.031774][T10104] mmap: syz.5.1304 (10104) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 191.048371][ T50] usb 12-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 191.055931][ T50] usb 12-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 94, changing to 4 [ 191.055975][ T50] usb 12-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 191.057988][ T50] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.058001][ T50] usb 12-1: Product: syz [ 191.058008][ T50] usb 12-1: Manufacturer: syz [ 191.058015][ T50] usb 12-1: SerialNumber: syz [ 191.211356][T10115] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 191.301532][T10084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.301852][T10084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.401481][ T50] usb 12-1: Unsupported UAC3 BADD profile [ 191.420791][ T50] snd-usb-audio 12-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 191.427232][ T50] usb 12-1: USB disconnect, device number 17 [ 191.440329][ T7205] udevd[7205]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb12/12-1/12-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 192.017333][T10120] netfs: Duplicate cookie detected [ 192.017380][T10120] netfs: O-cookie c=00000004 [fl=4008 na=0 nA=0 s=-] [ 192.017412][T10120] netfs: O-cookie V=00000002 [9p,syz,] [ 192.017432][T10120] netfs: O-key=[8] 'd539ac0400000000' [ 192.017452][T10120] netfs: N-cookie c=00000005 [fl=8 na=0 nA=0 s=-] [ 192.017474][T10120] netfs: N-cookie V=00000002 [9p,syz,] [ 192.017493][T10120] netfs: N-key=[8] 'd539ac0400000000' [ 192.207502][ T3268] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 192.224175][T10107] Set syz1 is full, maxelem 65536 reached [ 192.356595][ T3268] usb 5-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 192.357492][ T3268] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 94, changing to 4 [ 192.357514][ T3268] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 192.359031][ T3268] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.359045][ T3268] usb 5-1: Product: syz [ 192.359052][ T3268] usb 5-1: Manufacturer: syz [ 192.359060][ T3268] usb 5-1: SerialNumber: syz [ 192.448020][ T43] audit: type=1326 audit(1787968507.144:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10140 comm="syz.1.1319" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf702efec code=0x0 [ 192.595924][T10124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.597192][T10124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.663941][ T3268] usb 5-1: Unsupported UAC3 BADD profile [ 192.679962][ T3268] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 192.684788][ T3268] usb 5-1: USB disconnect, device number 32 [ 192.694566][ T7205] udevd[7205]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 192.716152][ T50] usb 12-1: new high-speed USB device number 18 using dummy_hcd [ 192.866150][ T50] usb 12-1: Using ep0 maxpacket: 32 [ 192.872335][ T50] usb 12-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 192.876528][ T50] usb 12-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 192.881428][ T50] usb 12-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 192.884074][ T50] usb 12-1: Product: syz [ 192.884085][ T50] usb 12-1: Manufacturer: syz [ 192.884092][ T50] usb 12-1: SerialNumber: syz [ 192.889599][ T50] usb 12-1: config 0 descriptor?? [ 192.892450][T10143] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 192.895588][ T50] hub 12-1:0.0: bad descriptor, ignoring hub [ 192.897653][ T50] hub 12-1:0.0: probe with driver hub failed with error -5 [ 193.257462][T10155] netlink: 'syz.0.1323': attribute type 13 has an invalid length. [ 193.384193][T10160] jffs2: notice: (10160) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 193.415272][ T50] usb 12-1: USB disconnect, device number 18 [ 193.491257][T10166] sch_tbf: burst 15 is lower than device syzkaller0 mtu (1514) ! [ 193.495137][T10166] netlink: 164 bytes leftover after parsing attributes in process `syz.5.1327'. [ 193.856223][ T2157] usb 12-1: new full-speed USB device number 19 using dummy_hcd [ 194.016746][ T2157] usb 12-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 194.020566][ T2157] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 194.027020][ T2157] usb 12-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 194.029716][ T2157] usb 12-1: Product: syz [ 194.031184][ T2157] usb 12-1: Manufacturer: syz [ 194.032780][ T2157] usb 12-1: SerialNumber: syz [ 194.039119][ T2157] usb 12-1: config 0 descriptor?? [ 194.043512][T10143] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 194.047568][ T2157] hub 12-1:0.0: bad descriptor, ignoring hub [ 194.047604][ T2157] hub 12-1:0.0: probe with driver hub failed with error -5 [ 194.357899][ T2157] usb 12-1: USB disconnect, device number 19 [ 194.430057][T10189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1334'. [ 194.498915][T10191] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 194.498942][T10191] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 194.501917][T10191] vhci_hcd vhci_hcd.0: Device attached [ 194.543895][T10193] vhci_hcd: connection closed [ 194.552509][ T5810] vhci_hcd vhci_hcd.0: stop threads [ 194.553546][ T5810] vhci_hcd vhci_hcd.0: release socket [ 194.553580][ T5810] vhci_hcd vhci_hcd.0: disconnect device [ 195.633756][ T43] audit: type=1800 audit(1787968510.334:18): pid=10224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1344" name=08 dev="sda1" ino=2043 res=0 errno=0 [ 195.826209][ T5946] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 195.915008][T10234] create_pit_timer: 7 callbacks suppressed [ 195.915078][T10234] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 195.930915][T10234] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 195.935549][T10234] kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 195.938476][T10234] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 195.943294][T10234] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 195.943800][T10234] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 195.947920][T10234] kvm: requested 100571 ns i8254 timer period limited to 200000 ns [ 195.949466][T10234] kvm: requested 10895 ns i8254 timer period limited to 200000 ns [ 195.949596][T10234] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 195.949733][T10234] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 195.976898][ T5946] usb 6-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 195.981620][ T5946] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 94, changing to 4 [ 195.981781][ T5946] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 195.993668][ T5946] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.998395][ T5946] usb 6-1: Product: syz [ 196.000246][ T5946] usb 6-1: Manufacturer: syz [ 196.002205][ T5946] usb 6-1: SerialNumber: syz [ 196.216928][ T5738] Bluetooth: hci0: command 0x4000 tx timeout [ 196.240212][T10222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.240484][T10222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.328895][ T5946] usb 6-1: Unsupported UAC3 BADD profile [ 196.354991][ T5946] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 196.369423][ T5946] usb 6-1: USB disconnect, device number 34 [ 196.380702][ T7205] udevd[7205]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 196.854152][T10274] binder: 10273:10274 ioctl c0306201 80000640 returned -14 [ 197.586555][ T43] audit: type=1800 audit(1787968512.284:19): pid=10288 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1367" name="(" dev="sda1" ino=2044 res=0 errno=0 [ 197.749020][T10292] kvm [10291]: vcpu0, guest rIP: 0x1a2 Unhandled WRMSR(0xc2) = 0xea00000f010e [ 198.219551][T10292] kvm [10291]: vcpu0, guest rIP: 0x1a2 Unhandled WRMSR(0x11e) = 0xd00000f010e [ 198.542612][T10285] Set syz1 is full, maxelem 65536 reached [ 198.819615][T10311] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1376'. [ 199.737347][T10331] syzkaller0: entered promiscuous mode [ 199.737404][T10331] syzkaller0: entered allmulticast mode [ 200.026160][ T5946] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 200.186144][ T5946] usb 10-1: Using ep0 maxpacket: 8 [ 200.188974][ T5946] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 200.194460][ T5946] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 200.198114][ T5946] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 200.198166][ T5946] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 200.198203][ T5946] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 200.198238][ T5946] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 200.198286][ T5946] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.434329][ T5946] usb 10-1: usb_control_msg returned -32 [ 200.434372][ T5946] usbtmc 10-1:16.0: can't read capabilities [ 200.553839][ C3] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 200.707627][ T6700] usb 12-1: new high-speed USB device number 20 using dummy_hcd [ 200.856771][ T6700] usb 12-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 200.857646][ T6700] usb 12-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 200.857662][ T6700] usb 12-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 200.857673][ T6700] usb 12-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 200.857694][ T6700] usb 12-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 200.857709][ T6700] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 200.857723][ T6700] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 200.860558][ T6700] usb 12-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 200.860571][ T6700] usb 12-1: Product: syz [ 200.860578][ T6700] usb 12-1: Manufacturer: syz [ 200.862840][T10337] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 200.863567][ T6700] cdc_wdm 12-1:1.0: skipping garbage [ 200.863576][ T6700] cdc_wdm 12-1:1.0: skipping garbage [ 200.864788][ T6700] cdc_wdm 12-1:1.0: cdc-wdm1: USB WDM device [ 200.864798][ T6700] cdc_wdm 12-1:1.0: Unknown control protocol [ 201.090769][ T6700] usb 12-1: USB disconnect, device number 20 [ 201.667348][T10355] binder: 10352:10355 ioctl c0306201 0 returned -14 [ 202.526188][T10338] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 202.527209][ T1346] usb 10-1: USB disconnect, device number 26 [ 202.829815][T10367] loop0: detected capacity change from 0 to 2049 [ 202.884943][T10367] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 202.885016][T10367] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 202.885045][T10367] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 202.885089][T10367] loop0: [ 202.911598][T10369] lo: Caught tx_queue_len zero misconfig [ 202.934375][T10373] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1392'. [ 202.934448][T10373] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1392'. [ 203.076675][T10382] binder: 10381:10382 ioctl c0306201 800006c0 returned -14 [ 203.141462][T10386] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1399'. [ 203.142619][T10386] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1399'. [ 203.145139][T10386] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1399'. [ 203.147213][T10386] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1399'. [ 203.512499][T10399] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 203.941575][T10424] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 203.941691][T10424] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 203.964608][T10424] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 203.970776][T10424] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 203.970907][T10424] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 203.977405][T10424] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 204.689141][T10461] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.689507][T10461] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.746451][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 204.794590][T10461] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.798443][T10461] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.805713][T10467] futex_wake_op: syz.7.1423 tries to shift op by 144; fix this program [ 205.026160][ T5810] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.026241][ T5810] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.026486][ T5810] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.026506][ T5810] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.078606][T10470] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 205.089450][T10473] binder: 10472:10473 ioctl c0306201 80000680 returned -14 [ 205.371445][T10487] syzkaller0: entered promiscuous mode [ 205.371511][T10487] syzkaller0: entered allmulticast mode [ 205.626799][T10498] binder: 10497:10498 ioctl c0306201 80000380 returned -22 [ 205.966288][ T5738] Bluetooth: hci1: command 0x0406 tx timeout [ 206.056408][ T5738] Bluetooth: hci2: command 0x0406 tx timeout [ 206.330435][T10512] syzkaller0: entered promiscuous mode [ 206.330501][T10512] syzkaller0: entered allmulticast mode [ 206.390427][T10517] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1438'. [ 206.453698][T10519] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1438'. [ 206.489411][T10525] futex_wake_op: syz.0.1441 tries to shift op by 144; fix this program [ 206.951706][T10546] jffs2: notice: (10546) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 207.313175][T10560] futex_wake_op: syz.1.1453 tries to shift op by 144; fix this program [ 208.046467][ T5738] Bluetooth: hci1: command 0x0406 tx timeout [ 208.126595][ T5738] Bluetooth: hci2: command 0x0406 tx timeout [ 208.355534][T10605] kvm: pic: level sensitive irq not supported [ 208.886212][T10624] overlayfs: failed to clone lowerpath [ 208.889851][T10625] futex_wake_op: syz.5.1474 tries to shift op by 144; fix this program [ 208.893529][T10624] overlayfs: failed to clone lowerpath [ 208.945154][T10622] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 208.999306][T10628] create_pit_timer: 7 callbacks suppressed [ 208.999378][T10628] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 209.037552][T10628] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 209.038010][T10628] kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 209.038198][T10628] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 209.038773][T10628] kvm: requested 100571 ns i8254 timer period limited to 200000 ns [ 209.039182][T10628] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 209.039243][T10628] kvm: requested 170133 ns i8254 timer period limited to 200000 ns [ 209.039505][T10628] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 209.040328][T10628] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 209.040432][T10628] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 209.341613][T10651] syzkaller0: entered promiscuous mode [ 209.341677][T10651] syzkaller0: entered allmulticast mode [ 209.428766][T10654] syzkaller0: entered promiscuous mode [ 209.430935][T10654] syzkaller0: entered allmulticast mode [ 209.817551][T10667] Console: switching to colour dummy device 80x25 [ 210.136219][ T5738] Bluetooth: hci1: command 0x0406 tx timeout [ 210.207608][ T5738] Bluetooth: hci2: command 0x0406 tx timeout [ 210.261170][T10686] fuse: root generation should be zero [ 210.418945][T10699] ptrace attach of "/syz-executor exec"[7945] was attempted by "/syz-executor exec"[10699] [ 211.206930][ T35] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 211.215053][T10747] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1514'. [ 211.268768][T10750] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1514'. [ 211.356658][ T35] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 211.360938][ T35] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 211.364541][ T35] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 211.364618][ T35] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.376384][T10729] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 211.382387][ T35] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 211.588433][ T2157] usb 6-1: USB disconnect, device number 35 [ 211.748659][ T43] audit: type=1326 audit(1787968526.454:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10759 comm="syz.0.1519" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x0 [ 212.024680][T10767] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1521'. [ 212.156427][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 212.366425][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 212.546603][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 212.773144][T10791] syzkaller0: entered promiscuous mode [ 212.773210][T10791] syzkaller0: entered allmulticast mode [ 212.798347][T10791] TC_ACT_REPEAT abuse ? [ 213.166510][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 213.508541][ T1346] usb 10-1: new full-speed USB device number 27 using dummy_hcd [ 213.583565][T10801] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1534'. [ 213.677780][ T1346] usb 10-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 213.683655][ T1346] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 94, changing to 4 [ 213.689177][ T1346] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 213.696691][ T1346] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.700504][ T1346] usb 10-1: Product: syz [ 213.702665][ T1346] usb 10-1: Manufacturer: syz [ 213.704580][ T1346] usb 10-1: SerialNumber: syz [ 213.922368][T10794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.922718][T10794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.025388][ T1346] usb 10-1: Unsupported UAC3 BADD profile [ 214.070629][ T1346] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 214.079815][ T1346] usb 10-1: USB disconnect, device number 27 [ 214.094055][ T7205] udevd[7205]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 214.861846][T10811] syzkaller0: entered promiscuous mode [ 214.861894][T10811] syzkaller0: entered allmulticast mode [ 214.868730][T10818] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1539'. [ 215.141850][T10829] jffs2: notice: (10829) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 216.537148][T10849] syzkaller0: entered promiscuous mode [ 216.537203][T10849] syzkaller0: entered allmulticast mode [ 216.651051][T10865] binder_alloc: 10857: binder_alloc_buf, no vma [ 216.843433][ T43] audit: type=1800 audit(1787968531.544:21): pid=10882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1555" name="memory_backed" dev="configfs" ino=47690 res=0 errno=0 [ 216.844430][ T43] audit: type=1800 audit(1787968531.544:22): pid=10882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1555" name="zoned" dev="configfs" ino=47691 res=0 errno=0 [ 216.846002][T10882] netlink: 'syz.1.1555': attribute type 1 has an invalid length. [ 216.846013][T10882] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1555'. [ 216.846021][T10882] netlink: 'syz.1.1555': attribute type 2 has an invalid length. [ 216.846027][T10882] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1555'. [ 217.772951][T10913] syzkaller0: entered promiscuous mode [ 217.773015][T10913] syzkaller0: entered allmulticast mode [ 217.813580][ T43] audit: type=1326 audit(1787968532.514:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10914 comm="syz.1.1564" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x0 [ 217.975144][T10923] mac80211_hwsim hwsim17 wlan1: entered allmulticast mode [ 218.082841][T10934] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_vlan, syncid = 0, id = 0 [ 218.686777][T10954] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1576'. [ 219.985295][ T43] audit: type=1800 audit(1787968534.684:24): pid=10993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1583" name="memory_backed" dev="configfs" ino=50179 res=0 errno=0 [ 219.991827][ T43] audit: type=1800 audit(1787968534.694:25): pid=10993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1583" name="zoned" dev="configfs" ino=50180 res=0 errno=0 [ 219.998476][T10993] netlink: 'syz.1.1583': attribute type 1 has an invalid length. [ 219.998489][T10993] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1583'. [ 219.998497][T10993] netlink: 'syz.1.1583': attribute type 2 has an invalid length. [ 219.998504][T10993] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1583'. [ 220.023529][T10994] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1580'. [ 220.340072][T11003] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 220.340381][T11003] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 220.349026][T11003] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 220.349469][T11003] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 220.352128][T11003] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 220.355394][T11003] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 220.356464][T11003] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 220.356752][T11003] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 220.356835][T11003] UDF-fs: warning (device loop5): udf_fill_super: No partition found (1) [ 221.266463][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 221.401748][T11011] input: syz1 as /devices/virtual/input/input18 [ 221.513114][T11008] netlink: 'syz.1.1588': attribute type 1 has an invalid length. [ 222.163727][T11038] syzkaller0: entered promiscuous mode [ 222.163788][T11038] syzkaller0: entered allmulticast mode [ 222.226139][ T35] usb 6-1: new full-speed USB device number 36 using dummy_hcd [ 222.334063][T11046] syzkaller0: entered promiscuous mode [ 222.334109][T11046] syzkaller0: entered allmulticast mode [ 222.386898][ T35] usb 6-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 222.387840][ T35] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 94, changing to 4 [ 222.387862][ T35] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 222.389442][ T35] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.389455][ T35] usb 6-1: Product: syz [ 222.389463][ T35] usb 6-1: Manufacturer: syz [ 222.389471][ T35] usb 6-1: SerialNumber: syz [ 222.477494][T11053] netlink: 'syz.0.1594': attribute type 8 has an invalid length. [ 222.562669][T11055] bridge0: port 3(syz_tun) entered blocking state [ 222.566757][T11055] bridge0: port 3(syz_tun) entered disabled state [ 222.571110][T11055] syz_tun: entered allmulticast mode [ 222.574876][T11055] syz_tun: entered promiscuous mode [ 222.575365][T11055] bridge0: port 3(syz_tun) entered blocking state [ 222.575436][T11055] bridge0: port 3(syz_tun) entered forwarding state [ 222.601585][T11030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.605708][T11030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.703727][ T35] usb 6-1: Unsupported UAC3 BADD profile [ 222.735764][ T35] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 222.758834][ T35] usb 6-1: USB disconnect, device number 36 [ 222.780647][ T7205] udevd[7205]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 222.794077][T11060] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1597'. [ 222.843897][ C0] vxcan1: j1939_session_tx_dat: 0xffff888013361c00: queue data error: -100 [ 223.066797][T11062] syzkaller0: entered promiscuous mode [ 223.066870][T11062] syzkaller0: entered allmulticast mode [ 223.353269][T11075] netlink: 'syz.1.1600': attribute type 1 has an invalid length. [ 223.726223][ T5738] Bluetooth: hci1: command 0x0406 tx timeout [ 223.745126][ T9] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 223.748199][ T9] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 224.764975][T11075] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 224.803898][T11097] bond0: Error: CAN devices cannot be enslaved [ 224.842424][T11099] syzkaller0: entered promiscuous mode [ 224.842487][T11099] syzkaller0: entered allmulticast mode [ 224.852409][T11099] tipc: Started in network mode [ 224.852460][T11099] tipc: Node identity 5222c4f2aec8, cluster identity 4711 [ 224.852644][T11099] tipc: Enabled bearer , priority 0 [ 224.862657][T11098] tipc: Resetting bearer [ 224.878177][T11098] tipc: Disabling bearer [ 225.266222][ T35] usb 6-1: new full-speed USB device number 37 using dummy_hcd [ 225.296240][ T5838] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 225.426654][ T35] usb 6-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 225.427506][ T35] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 94, changing to 4 [ 225.427529][ T35] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 225.429038][ T35] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.429051][ T35] usb 6-1: Product: syz [ 225.429059][ T35] usb 6-1: Manufacturer: syz [ 225.429068][ T35] usb 6-1: SerialNumber: syz [ 225.456786][ T5838] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 225.457985][ T5838] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.458001][ T5838] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.458011][ T5838] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 225.458031][ T5838] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.460353][ T5838] usb 5-1: config 0 descriptor?? [ 225.499181][T11115] syzkaller0: entered promiscuous mode [ 225.499267][T11115] syzkaller0: entered allmulticast mode [ 225.647855][T11111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.650841][T11111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.722869][ T35] usb 6-1: Unsupported UAC3 BADD profile [ 225.742934][ T35] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 225.752237][ T35] usb 6-1: USB disconnect, device number 37 [ 225.781956][ T7205] udevd[7205]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 225.806177][ T5738] Bluetooth: hci2: command 0x0406 tx timeout [ 225.809281][ T9] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 225.809326][ T9] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 225.948252][ T5838] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 226.259519][ T35] usb 5-1: USB disconnect, device number 33 [ 226.356419][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 226.386505][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 227.665905][T11144] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.697781][T11144] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.699864][T11144] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.976466][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 228.025236][ T43] audit: type=1800 audit(1787968542.724:26): pid=11154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1618" name="trace" dev="tracefs" ino=6363 res=0 errno=0 [ 228.061630][T11154] kvm: failed to shrink bus, removing it completely [ 228.099710][T11160] syzkaller0: entered promiscuous mode [ 228.102061][T11160] syzkaller0: entered allmulticast mode [ 228.124565][T11158] create_pit_timer: 1 callbacks suppressed [ 228.124643][T11158] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 228.140197][T11158] kvm: pic: non byte read [ 228.145973][T11158] kvm: pic: level sensitive irq not supported [ 228.148855][T11158] kvm: pic: non byte read [ 228.162602][T11158] kvm: pic: level sensitive irq not supported [ 228.163931][T11158] kvm: pic: non byte read [ 228.167771][T11158] kvm: pic: level sensitive irq not supported [ 228.168116][T11158] kvm: pic: non byte read [ 228.231694][T11164] tipc: Enabled bearer , priority 0 [ 228.232420][T11164] syzkaller0: entered promiscuous mode [ 228.232433][T11164] syzkaller0: entered allmulticast mode [ 228.245388][T11164] tipc: Resetting bearer [ 228.251083][T11163] tipc: Resetting bearer [ 228.269548][T11163] tipc: Disabling bearer [ 228.326447][T11166] tipc: Started in network mode [ 228.326513][T11166] tipc: Node identity 12b1ec3248ce, cluster identity 4711 [ 228.326652][T11166] tipc: Enabled bearer , priority 0 [ 228.327764][T11166] syzkaller0: entered promiscuous mode [ 228.327776][T11166] syzkaller0: entered allmulticast mode [ 228.339318][T11166] tipc: Resetting bearer [ 228.348147][T11165] tipc: Resetting bearer [ 228.365547][T11165] tipc: Disabling bearer [ 228.474761][T11176] syzkaller0: entered promiscuous mode [ 228.474797][T11176] syzkaller0: entered allmulticast mode [ 228.636173][ T50] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 228.786317][ T50] usb 5-1: Using ep0 maxpacket: 8 [ 228.788551][ T50] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 228.792682][ T50] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 228.792726][ T50] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.800910][ T50] usb 5-1: config 0 descriptor?? [ 229.015361][ T50] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 229.392414][T11190] bond0: Error: CAN devices cannot be enslaved [ 229.565442][ T35] usb 5-1: USB disconnect, device number 34 [ 229.671740][T11201] tipc: Enabling of bearer rejected, failed to enable media [ 229.752437][T11207] tipc: Enabling of bearer rejected, failed to enable media [ 229.836508][T11212] file system registered [ 229.845258][T11212] read descriptors [ 229.867497][ T7002] ffs_data_put(): freeing [ 229.903550][T11215] MTDSB: Device #1 doesn't appear to exist [ 229.903550][T11215] [ 230.286365][T11225] tc action pedit unable to extract header offset for header type (0x4) [ 230.286406][T11225] tc action pedit unable to extract header offset for header type (0x4) [ 230.286436][T11225] tc action pedit unable to extract header offset for header type (0x4) [ 230.286456][T11225] tc action pedit unable to extract header offset for header type (0x4) [ 230.286476][T11225] tc action pedit unable to extract header offset for header type (0x4) [ 230.286496][T11225] tc action pedit unable to extract header offset for header type (0x4) [ 230.286516][T11225] tc action pedit unable to extract header offset for header type (0x4) [ 230.286536][T11225] tc action pedit unable to extract header offset for header type (0x4) [ 230.286556][T11225] tc action pedit unable to extract header offset for header type (0x4) [ 230.286576][T11225] tc action pedit unable to extract header offset for header type (0x4) [ 230.286602][T11225] 0: reclassify loop, rule prio 0, protocol 800 [ 230.563552][T11234] bridge0: port 3(syz_tun) entered disabled state [ 230.572257][T11234] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.572837][T11234] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.648152][T11234] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.653096][T11234] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.716162][ T5810] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.716214][ T5810] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.716270][ T5810] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.716304][ T5810] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.362761][T11247] fuse: Bad value for 'user_id' [ 231.362821][T11247] fuse: Bad value for 'user_id' [ 231.368457][T11247] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 231.607344][T11257] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1651'. [ 232.037856][T11274] pci_bus 0000:01: busn_res: [bus 01] is released [ 232.765054][T11282] input: syz0 as /devices/virtual/input/input19 [ 232.806481][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 233.259160][ T43] audit: type=1800 audit(1787968547.964:27): pid=11302 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1664" name="zone_nr_conv" dev="configfs" ino=52626 res=0 errno=0 [ 233.478284][ T5450] veth1_vlan: left promiscuous mode [ 233.568899][T11313] kAFS: unable to lookup cell 'ÿ' [ 233.596498][T11313] kAFS: unable to lookup cell '(,c¾Ì' [ 233.734541][ T5450] veth1_vlan: entered promiscuous mode [ 233.916823][T11331] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 233.929334][T11331] pci 0000:00:01.0: BAR 0 [mem 0xfd000000-0xfdffffff pref] [ 233.929453][T11331] pci 0000:00:01.0: BAR 2 [mem 0xfeaf4000-0xfeaf4fff] [ 233.929630][T11331] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 233.930073][T11331] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 233.934378][T11331] pci 0000:00:01.0: Adding to iommu group 1 [ 233.938600][T11331] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 233.938615][T11331] pci 0000:00:01.0: vgaarb: bridge control possible [ 233.938624][T11331] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 233.940003][T11331] pci 0000:00:04.0: [8086:3420] type 01 class 0x060400 PCIe Root Port [ 233.943310][T11331] pci 0000:00:04.0: PCI bridge to [bus 01] [ 233.943477][T11331] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 233.943584][T11331] pci 0000:00:04.0: bridge window [mem 0xfe800000-0xfe9fffff] [ 233.945053][T11331] pci 0000:00:04.0: bridge window [mem 0xfe000000-0xfe1fffff 64bit pref] [ 233.945637][T11331] pci 0000:00:04.0: enabling Extended Tags [ 233.952557][T11331] pci 0000:00:04.0: Adding to iommu group 4 [ 233.959482][T11331] pci 0000:00:04.0: PCI bridge to [bus 01] [ 233.961755][T11331] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 01] add_size 200000 add_align 100000 [ 233.961801][T11331] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff] to [bus 01] add_size 200000 add_align 100000 [ 233.962017][T11331] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 233.964345][T11331] pci 0000:00:04.0: bridge window [mem 0x81000000-0x811fffff]: assigned [ 233.964367][T11331] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref]: assigned [ 233.964417][T11331] pci 0000:00:01.0: BAR 2 [mem 0x81200000-0x81200fff]: assigned [ 233.965604][T11331] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff]: assigned [ 233.966555][T11331] pci 0000:00:04.0: PCI bridge to [bus 01] [ 233.966622][T11331] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 233.968358][T11331] pci 0000:00:04.0: bridge window [mem 0x81000000-0x811fffff] [ 233.969520][T11331] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 233.973820][T11331] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 233.982177][T11331] [drm] Found bochs VGA, ID 0xb0c5. [ 233.982189][T11331] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81200000. [ 234.000883][T11331] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 234.101973][T11331] Console: switching to colour frame buffer device 160x50 [ 234.125221][T11331] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 234.166455][T11331] pcieport 0000:00:04.0: PME: Signaling with IRQ 25 [ 234.174169][T11331] pcieport 0000:00:04.0: AER: enabled with IRQ 26 [ 234.272309][T11343] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1671'. [ 234.327473][T11339] syzkaller0: entered promiscuous mode [ 234.329482][T11339] syzkaller0: entered allmulticast mode [ 235.016219][ T3268] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 235.176171][ T3268] usb 10-1: Using ep0 maxpacket: 8 [ 235.178526][ T3268] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 235.185669][ T3268] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 235.185751][ T3268] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 235.185777][ T3268] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 235.185806][ T3268] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 235.185832][ T3268] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 235.185866][ T3268] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.687587][ T3268] usb 10-1: usb_control_msg returned -71 [ 235.687634][ T3268] usbtmc 10-1:16.0: can't read capabilities [ 235.698414][ T3268] usb 10-1: USB disconnect, device number 28 [ 235.773754][T11374] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 235.773784][T11374] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 235.774994][T11374] vhci_hcd vhci_hcd.0: Device attached [ 236.046293][ T1346] usb 40-1: SetAddress Request (2) to port 0 [ 236.046429][ T1346] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 236.059607][T11376] vhci_hcd: connection closed [ 236.061300][ T5783] vhci_hcd vhci_hcd.1: stop threads [ 236.061365][ T5783] vhci_hcd vhci_hcd.1: release socket [ 236.062497][ T5783] vhci_hcd vhci_hcd.1: disconnect device [ 236.066260][ T1346] usb 40-1: enqueue for inactive port 0 [ 236.141168][T11383] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1680'. [ 236.307669][T11387] tc action pedit offset must be on 32 bit boundaries [ 236.307711][T11387] tc action pedit offset must be on 32 bit boundaries [ 236.307752][T11387] tc action pedit offset must be on 32 bit boundaries [ 236.307770][T11387] tc action pedit offset must be on 32 bit boundaries [ 236.307793][T11387] tc action pedit offset must be on 32 bit boundaries [ 236.307812][T11387] tc action pedit offset must be on 32 bit boundaries [ 236.307830][T11387] tc action pedit offset must be on 32 bit boundaries [ 236.307849][T11387] tc action pedit offset must be on 32 bit boundaries [ 236.307868][T11387] tc action pedit offset must be on 32 bit boundaries [ 236.307887][T11387] tc action pedit offset must be on 32 bit boundaries [ 236.307912][T11387] 0: reclassify loop, rule prio 0, protocol 800 [ 236.455236][T11391] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1682'. [ 236.476757][ T1346] usb usb40-port1: attempt power cycle [ 236.676142][ T50] usb 10-1: new full-speed USB device number 29 using dummy_hcd [ 236.889296][ T50] usb 10-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 236.896254][ T50] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 94, changing to 4 [ 236.896521][ T50] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 236.931313][ T50] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.931922][ T50] usb 10-1: Product: syz [ 236.932122][ T50] usb 10-1: Manufacturer: syz [ 236.932156][ T50] usb 10-1: SerialNumber: syz [ 237.088786][ T1346] usb usb40-port1: unable to enumerate USB device [ 237.393215][T11389] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1683'. [ 237.467056][T11389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.488286][T11389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.574175][T11408] syzkaller0: entered promiscuous mode [ 237.574217][T11408] syzkaller0: entered allmulticast mode [ 237.873647][ T50] usb 10-1: Unsupported UAC3 BADD profile [ 238.425515][ T50] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 238.435878][ T50] usb 10-1: USB disconnect, device number 29 [ 238.518129][ T7205] udevd[7205]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 238.714028][T11422] tipc: Enabling of bearer rejected, failed to enable media [ 238.996180][ T2157] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 239.146588][ T2157] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 239.147530][ T2157] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 239.147554][ T2157] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 239.149046][ T2157] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.149059][ T2157] usb 10-1: Product: syz [ 239.149066][ T2157] usb 10-1: Manufacturer: syz [ 239.149073][ T2157] usb 10-1: SerialNumber: syz [ 239.650768][T11440] syz.5.1693 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 239.742808][T11449] netlink: 'syz.0.1698': attribute type 1 has an invalid length. [ 239.772798][T11449] 8021q: adding VLAN 0 to HW filter on device bond2 [ 239.810642][T11449] 8021q: adding VLAN 0 to HW filter on device bond2 [ 239.813972][T11449] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 239.824400][T11449] bond2: (slave gre1): Error -95 calling set_mac_address [ 240.076153][ T3268] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 240.226638][ T3268] usb 5-1: Using ep0 maxpacket: 8 [ 240.228670][ T3268] usb 5-1: unable to get BOS descriptor or descriptor too short [ 240.228733][ T3268] usb 5-1: New USB device found, idVendor=1e0e, idProduct=9200, bcdDevice=f9.9d [ 240.229627][ T3268] usb 5-1: config 106 has an invalid interface number: 220 but max is 0 [ 240.229640][ T3268] usb 5-1: config 106 has no interface number 0 [ 240.231216][ T3268] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.231229][ T3268] usb 5-1: Product: syz [ 240.231236][ T3268] usb 5-1: Manufacturer: syz [ 240.231244][ T3268] usb 5-1: SerialNumber: syz [ 240.462184][ T5879] usb 10-1: USB disconnect, device number 30 [ 240.472766][T11449] gretap1: entered promiscuous mode [ 240.475066][T11449] bond2: (slave gretap1): making interface the new active one [ 240.477601][T11449] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 240.526187][ T1346] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 240.540803][T11449] macvlan2: entered promiscuous mode [ 240.540855][T11449] macvlan2: entered allmulticast mode [ 240.541147][T11449] bond2: entered promiscuous mode [ 240.543877][T11449] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 240.551009][T11449] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 240.557009][T11449] bond2: left promiscuous mode [ 240.654590][ T3268] usb 5-1: USB disconnect, device number 35 [ 240.686186][ T1346] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 240.687163][ T1346] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 240.687201][ T1346] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.687226][ T1346] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.687248][ T1346] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 240.688057][ T1346] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 240.688071][ T1346] usb 6-1: Manufacturer: syz [ 240.690689][ T1346] usb 6-1: config 0 descriptor?? [ 241.040285][T11460] tc action pedit 'at' offset 1235 out of bounds [ 241.105352][ T1346] appleir 0003:05AC:8243.000D: unknown main item tag 0x0 [ 241.114741][ T1346] appleir 0003:05AC:8243.000D: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 241.201336][T11464] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1702'. [ 241.376982][ T43] audit: type=1800 audit(1787968556.074:28): pid=11468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.7.1703" name="/newroot/302/file0" dev="tmpfs" ino=1656 res=0 errno=0 [ 241.449757][ T1346] usb 6-1: USB disconnect, device number 38 [ 242.089718][T11482] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1708'. [ 242.158795][T11480] tipc: Enabled bearer , priority 0 [ 242.159382][T11480] syzkaller0: entered promiscuous mode [ 242.159393][T11480] syzkaller0: entered allmulticast mode [ 242.161992][T11480] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 242.179171][T11480] tipc: Resetting bearer [ 242.187011][T11477] tipc: Resetting bearer [ 244.157362][T11477] tipc: Disabling bearer [ 244.284635][T11498] team0: No ports can be present during mode change [ 244.507057][ T1136] sr 2:0:0:0: [sr0] tag#6 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 244.507160][ T1136] sr 2:0:0:0: [sr0] tag#6 Sense Key : Illegal Request [current] [ 244.507224][ T1136] sr 2:0:0:0: [sr0] tag#6 Add. Sense: Invalid command operation code [ 244.507253][ T1136] sr 2:0:0:0: [sr0] tag#6 CDB: Rezero Unit/Rewind 01 00 00 00 00 00 00 [ 244.578154][T11512] syzkaller0: entered promiscuous mode [ 244.578211][T11512] syzkaller0: entered allmulticast mode [ 244.616250][ T35] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 244.689063][T11514] tipc: Enabled bearer , priority 0 [ 244.692116][T11514] syzkaller0: entered promiscuous mode [ 244.692182][T11514] syzkaller0: entered allmulticast mode [ 244.712152][T11514] tipc: Resetting bearer [ 244.718056][T11514] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 244.726326][T11513] tipc: Resetting bearer [ 244.745348][T11513] tipc: Disabling bearer [ 244.766158][ T35] usb 5-1: Using ep0 maxpacket: 32 [ 244.766718][ T35] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 244.767626][ T35] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 244.769455][ T35] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 244.769472][ T35] usb 5-1: Product: syz [ 244.769479][ T35] usb 5-1: Manufacturer: syz [ 244.769487][ T35] usb 5-1: SerialNumber: syz [ 244.771987][ T35] usb 5-1: config 0 descriptor?? [ 244.775146][T11503] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 244.776196][ T35] hub 5-1:0.0: bad descriptor, ignoring hub [ 244.776211][ T35] hub 5-1:0.0: probe with driver hub failed with error -5 [ 244.935666][T11519] syzkaller0: entered promiscuous mode [ 244.935735][T11519] syzkaller0: entered allmulticast mode [ 244.943000][T11519] tipc: Enabled bearer , priority 0 [ 244.952640][T11519] tipc: Resetting bearer [ 244.965961][T11518] tipc: Resetting bearer [ 244.982616][T11518] tipc: Disabling bearer [ 245.388787][T11503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.389164][T11503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.445878][T11534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.454040][T11534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.500616][ T6236] IPVS: starting estimator thread 0... [ 245.587556][T11536] IPVS: using max 41 ests per chain, 98400 per kthread [ 245.636158][ T50] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 245.786246][ T50] usb 6-1: Using ep0 maxpacket: 8 [ 245.787099][ T50] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 245.787992][ T50] usb 6-1: config 0 has no interfaces? [ 245.788027][ T50] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.790548][ T50] usb 6-1: config 0 descriptor?? [ 246.036115][ T1346] usb 6-1: USB disconnect, device number 39 [ 247.019201][T11589] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1731'. [ 247.296391][T11594] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1733'. [ 247.626306][ T3268] usb 10-1: new full-speed USB device number 31 using dummy_hcd [ 247.776625][ T3268] usb 10-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 247.780746][ T3268] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 94, changing to 4 [ 247.784756][ T3268] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 247.790859][ T3268] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.793674][ T3268] usb 10-1: Product: syz [ 247.795255][ T3268] usb 10-1: Manufacturer: syz [ 247.797410][ T3268] usb 10-1: SerialNumber: syz [ 248.039244][T11597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.046564][T11597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.047765][T11597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.117683][ T3268] usb 10-1: Unsupported UAC3 BADD profile [ 248.142558][ T3268] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 248.153020][ T3268] usb 10-1: USB disconnect, device number 31 [ 248.153391][T11608] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1737'. [ 248.178249][ T7205] udevd[7205]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 248.935902][T11618] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 248.935932][T11618] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 248.936366][T11618] vhci_hcd vhci_hcd.0: Device attached [ 249.110359][ T50] usb 5-1: USB disconnect, device number 36 [ 249.236402][ T6853] usb 40-1: SetAddress Request (6) to port 0 [ 249.237073][ T6853] usb 40-1: new SuperSpeed USB device number 6 using vhci_hcd [ 249.382997][T11633] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1742'. [ 250.306240][ T2157] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 250.458826][ T2157] usb 10-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 250.464154][ T2157] usb 10-1: config 0 has no interfaces? [ 250.466335][ T2157] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.481029][ T2157] usb 10-1: config 0 descriptor?? [ 250.505545][T11645] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1747'. [ 251.334103][T11641] kvm: pic: single mode not supported [ 251.336533][T11641] kvm: pic: non byte read [ 251.349391][T11641] kvm: pic: non byte read [ 251.359373][T11641] kvm: pic: single mode not supported [ 251.359403][T11641] kvm: pic: level sensitive irq not supported [ 251.359716][T11641] kvm: pic: non byte read [ 251.369504][T11641] kvm: pic: non byte read [ 251.373867][T11641] kvm: pic: non byte read [ 251.378497][T11641] kvm: pic: non byte read [ 251.382273][T11641] kvm: pic: single mode not supported [ 251.385934][T11641] kvm: pic: non byte read [ 251.392515][T11641] kvm: pic: non byte read [ 251.399387][T11641] kvm: pic: non byte read [ 251.679826][T11619] vhci_hcd: connection reset by peer [ 251.689581][ T5783] vhci_hcd vhci_hcd.1: stop threads [ 251.689634][ T5783] vhci_hcd vhci_hcd.1: release socket [ 251.689747][ T5783] vhci_hcd vhci_hcd.1: disconnect device [ 253.079118][ T3268] usb 10-1: USB disconnect, device number 32 [ 253.227265][T11661] bridge1: entered promiscuous mode [ 253.228644][T11661] bridge1: entered allmulticast mode [ 253.693735][T11670] tipc: Enabling of bearer rejected, failed to enable media [ 254.047452][ T3268] usb 5-1: new low-speed USB device number 37 using dummy_hcd [ 254.286258][ T6853] usb 40-1: device descriptor read/8, error -110 [ 254.610476][ T3268] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 254.666977][ T3268] usb 5-1: config 168 has an invalid descriptor of length 95, skipping remainder of the config [ 254.667032][ T3268] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 254.667094][ T3268] usb 5-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 254.667109][ T3268] usb 5-1: config 168 interface 0 has no altsetting 0 [ 254.670017][ T3268] usb 5-1: config 168 has an invalid descriptor of length 95, skipping remainder of the config [ 254.670036][ T3268] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 254.670055][ T3268] usb 5-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 254.670068][ T3268] usb 5-1: config 168 interface 0 has no altsetting 0 [ 254.671888][ T3268] usb 5-1: config 168 has an invalid descriptor of length 95, skipping remainder of the config [ 254.671905][ T3268] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 254.671949][ T3268] usb 5-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 254.671964][ T3268] usb 5-1: config 168 interface 0 has no altsetting 0 [ 254.676851][ T3268] usb 5-1: string descriptor 0 read error: -22 [ 254.676909][ T3268] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.677455][ T6853] usb usb40-port1: attempt power cycle [ 254.912828][ T1346] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 255.066815][ T1346] usb 6-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 255.067886][ T1346] usb 6-1: config 2 has an invalid interface number: 43 but max is 0 [ 255.067901][ T1346] usb 6-1: config 2 has no interface number 0 [ 255.067916][ T1346] usb 6-1: config 2 interface 43 has no altsetting 0 [ 255.069558][ T1346] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.069572][ T1346] usb 6-1: Product: syz [ 255.069580][ T1346] usb 6-1: Manufacturer: syz [ 255.069589][ T1346] usb 6-1: SerialNumber: syz [ 255.264890][ T6853] usb usb40-port1: unable to enumerate USB device [ 255.292492][T11693] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1759'. [ 255.308444][ T1346] ums-usbat 6-1:2.43: USB Mass Storage device detected [ 255.318760][ T1346] ums-usbat 6-1:2.43: Quirks match for vid 0781 pid 0005: 1 [ 255.385559][ T1346] usb 6-1: USB disconnect, device number 40 [ 255.463895][ T3268] adutux 5-1:168.0: interrupt endpoints not found [ 255.803081][T11685] Set syz1 is full, maxelem 65536 reached [ 255.864324][T11699] netlink: 'syz.1.1761': attribute type 1 has an invalid length. [ 256.201530][ T1346] usb 5-1: USB disconnect, device number 37 [ 256.226652][T11699] 8021q: adding VLAN 0 to HW filter on device bond1 [ 256.302389][T11702] 8021q: adding VLAN 0 to HW filter on device bond1 [ 256.302594][T11702] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 256.302903][T11702] bond1: (slave gre1): Error -95 calling set_mac_address [ 256.317735][T11704] gretap1: entered promiscuous mode [ 256.320860][T11704] bond1: (slave gretap1): making interface the new active one [ 256.324223][T11704] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 256.348005][T11705] 8021q: adding VLAN 0 to HW filter on device bond2 [ 256.354511][T11705] bond1: (slave bond2): Enslaving as an active interface with a down link [ 256.372482][T11706] bond1 (unregistering): (slave gretap1): Releasing active interface [ 256.384171][T11706] bond1 (unregistering): (slave bond2): Releasing active interface [ 256.395706][T11706] bond1 (unregistering): Released all slaves [ 256.821123][T11720] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1765'. [ 256.873542][T11722] input: syz0 as /devices/virtual/input/input20 [ 257.353707][T11736] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1772'. [ 257.414179][T11738] netlink: zone id is out of range [ 257.414217][T11738] netlink: zone id is out of range [ 257.416100][T11738] netlink: zone id is out of range [ 257.416121][T11738] netlink: zone id is out of range [ 257.416139][T11738] netlink: zone id is out of range [ 257.416156][T11738] netlink: zone id is out of range [ 257.416697][T11738] netlink: zone id is out of range [ 257.416721][T11738] netlink: zone id is out of range [ 257.416738][T11738] netlink: zone id is out of range [ 257.434227][T11739] JFS: discard option not supported on device [ 257.435225][T11739] Mount JFS Failure: -22 [ 257.435233][T11739] jfs_mount failed w/return code = -22 [ 257.557061][T11744] netlink: 'syz.7.1774': attribute type 1 has an invalid length. [ 257.584028][T11744] 8021q: adding VLAN 0 to HW filter on device bond1 [ 257.628939][T11744] 8021q: adding VLAN 0 to HW filter on device bond1 [ 257.631448][T11744] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 257.635316][T11744] bond1: (slave gre1): Error -95 calling set_mac_address [ 257.813604][T11751] gretap1: entered promiscuous mode [ 257.818940][T11751] bond1: (slave gretap1): making interface the new active one [ 257.822031][T11751] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 257.824924][T11754] macvlan2: entered promiscuous mode [ 257.824937][T11754] macvlan2: entered allmulticast mode [ 257.825214][T11754] bond1: entered promiscuous mode [ 257.825712][T11754] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 257.827461][T11754] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 257.827823][T11754] bond1: left promiscuous mode [ 257.828377][T11747] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 257.936134][ T1346] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 258.001442][T11760] can0: slcan on ttyS3. [ 258.086505][ T1346] usb 6-1: Using ep0 maxpacket: 8 [ 258.091107][ T1346] usb 6-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00 [ 258.097783][ T1346] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 258.102213][ T1346] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 258.106124][ T1346] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.562246][ T3268] usb 6-1: USB disconnect, device number 41 [ 258.850039][T11759] can0 (unregistered): slcan off ttyS3. [ 259.059906][T11785] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1781'. [ 259.290002][T11788] can0: slcan on ttyS3. [ 259.315512][T11790] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 259.347637][T11787] can0 (unregistered): slcan off ttyS3. [ 260.624046][T11806] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1786'. [ 260.766890][T11796] tipc: Enabling of bearer rejected, failed to enable media [ 263.719455][T11818] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1789'. [ 263.902945][T11835] PKCS7: Unknown OID: [98] 1.2.10824.113549.1.1.1 [ 263.903005][T11835] Unsupported pkey algo: 106 [ 264.847003][T11841] Console: switching to colour dummy device 80x25 [ 264.872501][T11847] program syz.0.1798 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 265.536748][T11870] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1799'. [ 266.213313][T11877] ffs_data_put(): freeing [ 266.396879][ T6853] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 266.546146][ T6853] usb 5-1: Using ep0 maxpacket: 8 [ 266.553131][ T6853] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 266.559749][ T6853] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 266.559786][ T6853] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 266.559830][ T6853] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 266.559855][ T6853] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 266.559889][ T6853] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.708500][T11887] team0: Device vlan3 is already an upper device of the team interface [ 266.789211][ T6853] usb 5-1: GET_CAPABILITIES returned 0 [ 266.789272][ T6853] usbtmc 5-1:16.0: can't read capabilities [ 266.948530][T11894] netlink: 'syz.5.1806': attribute type 1 has an invalid length. [ 266.969964][T11894] 8021q: adding VLAN 0 to HW filter on device bond2 [ 266.991716][T11894] bond2: (slave gretap1): making interface the new active one [ 266.992632][T11894] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 267.156955][ T5838] usb 5-1: USB disconnect, device number 38 [ 268.249824][T11925] SQUASHFS error: Failed to read block 0x0: -5 [ 268.339572][T11929] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 268.347849][T11929] CIFS mount error: No usable UNC path provided in device string! [ 268.347849][T11929] [ 268.351289][T11929] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 269.542817][T11947] jffs2: notice: (11947) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 270.501654][T11955] can0: slcan on ttyS3. [ 271.116421][T11954] can0 (unregistered): slcan off ttyS3. [ 271.338023][ T6700] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 271.506221][ T6700] usb 10-1: Using ep0 maxpacket: 32 [ 271.507108][ T6700] usb 10-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 271.539058][ T6700] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 271.539117][ T6700] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 271.544849][ T6700] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.544867][ T6700] usb 10-1: Product: syz [ 271.544877][ T6700] usb 10-1: Manufacturer: syz [ 271.544886][ T6700] usb 10-1: SerialNumber: syz [ 271.849041][T11976] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1827'. [ 271.904709][T11961] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1823'. [ 274.370256][T12001] can0: slcan on ttyS3. [ 274.557817][ T6700] usb 10-1: USB disconnect, device number 33 [ 275.402946][T12017] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 275.402946][T12017] [ 275.403181][T12017] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 275.403291][T12017] CIFS: Attempting to mount //127.0.0.1/share [ 275.417591][T12017] CIFS: VFS: Error connecting to socket. Aborting operation. [ 275.417666][T12017] CIFS: VFS: cifs_mount failed w/return code = -101 [ 275.459912][T12011] XFS (mtdblock0): Invalid superblock magic number [ 275.496312][T12000] can0 (unregistered): slcan off ttyS3. [ 275.678216][T12039] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1838'. [ 276.715890][T12059] zonefs (nullb1) ERROR: Not a zoned block device [ 277.792511][ T6241] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 277.811775][T12066] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 277.832075][T12082] netlink: 'syz.5.1845': attribute type 1 has an invalid length. [ 277.867412][T12082] 8021q: adding VLAN 0 to HW filter on device bond3 [ 277.955582][T12082] 8021q: adding VLAN 0 to HW filter on device bond3 [ 277.968468][T12082] bond3: (slave gre1): The slave device specified does not support setting the MAC address [ 277.977034][T12082] bond3: (slave gre1): Error -95 calling set_mac_address [ 278.180292][T12086] can0: slcan on ttyS3. [ 278.186138][ T9] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 278.356743][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 278.363628][ T9] usb 10-1: unable to get BOS descriptor or descriptor too short [ 278.363711][ T9] usb 10-1: New USB device found, idVendor=1e0e, idProduct=9200, bcdDevice=f9.9d [ 278.372942][ T9] usb 10-1: config 106 has an invalid interface number: 220 but max is 0 [ 278.372977][ T9] usb 10-1: config 106 has no interface number 0 [ 278.382537][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.385150][ T9] usb 10-1: Product: syz [ 278.387046][ T9] usb 10-1: Manufacturer: syz [ 278.388807][ T9] usb 10-1: SerialNumber: syz [ 278.422459][T12085] can0 (unregistered): slcan off ttyS3. [ 278.671060][T12082] gretap2: entered promiscuous mode [ 278.675290][T12082] bond3: (slave gretap2): making interface the new active one [ 278.678528][T12082] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 278.698178][T12082] macvlan1: entered promiscuous mode [ 278.700003][T12082] macvlan1: entered allmulticast mode [ 278.702637][T12082] bond3: entered promiscuous mode [ 278.704874][T12082] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 278.736448][T12082] bond3: (slave macvlan1): the slave hw address is in use by the bond; giving it the hw address of gretap2 [ 278.745610][T12111] xt_ipcomp: unknown flags 1D [ 278.752557][T12082] bond3: left promiscuous mode [ 279.827618][ T9] usb 10-1: USB disconnect, device number 34 [ 280.250383][T12139] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1850'. [ 281.993117][T12161] can0: slcan on ttyS3. [ 282.151426][T12160] can0 (unregistered): slcan off ttyS3. [ 282.560946][ T1346] usb 10-1: new full-speed USB device number 35 using dummy_hcd [ 282.718170][ T1346] usb 10-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 282.719371][ T1346] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 94, changing to 4 [ 282.719393][ T1346] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 282.721728][ T1346] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.721741][ T1346] usb 10-1: Product: syz [ 282.721748][ T1346] usb 10-1: Manufacturer: syz [ 282.721755][ T1346] usb 10-1: SerialNumber: syz [ 282.972599][T12173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.005969][T12173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.006256][T12173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.340827][ T1346] usb 10-1: Unsupported UAC3 BADD profile [ 283.454105][ T1346] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 283.465617][ T1346] usb 10-1: USB disconnect, device number 35 [ 283.523279][T11849] udevd[11849]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 283.840369][T12189] overlayfs: failed to clone lowerpath [ 284.135456][T12191] net_ratelimit: 386 callbacks suppressed [ 284.135530][T12191] socket: no more sockets [ 284.496552][ T5838] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 285.120751][T12215] 9p: Bad value for 'rfdno' [ 285.213879][T12220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1864'. [ 285.223741][T12220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1864'. [ 285.231899][T12220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1864'. [ 285.237941][T12220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1864'. [ 285.246249][T12220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1864'. [ 285.395356][T12225] can0: slcan on ttyS3. [ 285.546518][T12224] can0 (unregistered): slcan off ttyS3. [ 286.537513][ T9] usb 6-1: new full-speed USB device number 42 using dummy_hcd [ 286.687121][ T9] usb 6-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 286.691065][ T9] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 94, changing to 4 [ 286.694559][ T9] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 286.702698][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.705307][ T9] usb 6-1: Product: syz [ 286.706808][ T9] usb 6-1: Manufacturer: syz [ 286.708379][ T9] usb 6-1: SerialNumber: syz [ 286.938222][T12234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.938505][T12234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.003204][ T9] usb 6-1: Unsupported UAC3 BADD profile [ 287.025579][ T9] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 287.029791][ T9] usb 6-1: USB disconnect, device number 42 [ 287.038574][T11849] udevd[11849]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 293.443172][T12255] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 296.405251][T12281] Process accounting resumed [ 296.502940][T12283] can0: slcan on ttyS3. [ 296.668944][T12282] can0 (unregistered): slcan off ttyS3. [ 296.712132][T12295] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1881'. [ 296.713137][T12295] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1881'. [ 296.713286][T12295] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1881'. [ 296.713587][T12295] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1881'. [ 296.713678][T12295] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1881'. [ 296.775904][T12301] tunl0: Caught tx_queue_len zero misconfig [ 296.988752][ T5946] usb 6-1: new full-speed USB device number 43 using dummy_hcd [ 297.148560][ T5946] usb 6-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 297.149710][ T5946] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 94, changing to 4 [ 297.149735][ T5946] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 297.151314][ T5946] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.151327][ T5946] usb 6-1: Product: syz [ 297.151335][ T5946] usb 6-1: Manufacturer: syz [ 297.151343][ T5946] usb 6-1: SerialNumber: syz [ 297.406760][T12298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.407110][T12298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.497338][ T5946] usb 6-1: Unsupported UAC3 BADD profile [ 297.552672][ T5946] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 297.567852][ T5946] usb 6-1: USB disconnect, device number 43 [ 297.596508][T12321] udevd[12321]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 299.778097][T12372] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1895'. [ 299.841580][T12376] fuse: Bad value for 'fd' [ 302.386107][ T6700] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 302.551109][ T6700] usb 6-1: Using ep0 maxpacket: 32 [ 302.555820][ T6700] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 302.560688][ T6700] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.564777][ T6700] usb 6-1: config 0 descriptor?? [ 302.784885][ T6700] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 302.815468][ T6700] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 302.819343][ T6700] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 302.833342][ T6700] usb 6-1: media controller created [ 302.867424][ T6700] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 302.987658][T12412] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1905'. [ 302.994465][T12407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.996448][T12407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.005181][T12412] netlink: 140 bytes leftover after parsing attributes in process `syz.7.1905'. [ 303.012153][T12407] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1903'. [ 303.020711][T12407] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1903'. [ 303.098336][T12416] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 303.261043][T12416] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 303.261445][T12416] overlayfs: failed to look up (tracing) for ino (-66) [ 303.334077][ T6700] az6027: usb out operation failed. (-71) [ 303.336166][ T6700] az6027: usb out operation failed. (-71) [ 303.336192][ T6700] stb0899_attach: Driver disabled by Kconfig [ 303.336211][ T6700] az6027: no front-end attached [ 303.336211][ T6700] [ 303.342971][ T6700] az6027: usb out operation failed. (-71) [ 303.348401][ T6700] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 303.353959][ T6700] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb6/6-1/input/input22 [ 303.361338][ T6700] dvb-usb: schedule remote query interval to 400 msecs. [ 303.363745][ T6700] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 303.381339][ T6700] usb 6-1: USB disconnect, device number 44 [ 303.408785][ T6700] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 303.756633][T12409] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1904'. [ 303.792238][T12409] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1904'. [ 303.875208][T12425] bridge1: entered promiscuous mode [ 303.875263][T12425] bridge1: entered allmulticast mode [ 305.447428][T12451] 9p: Bad value for 'version' [ 306.058986][T12457] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1919'. [ 306.722232][ T43] audit: type=1326 audit(1787968621.424:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12460 comm="syz.0.1920" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 306.737535][ T43] audit: type=1326 audit(1787968621.444:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12460 comm="syz.0.1920" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 306.745025][ T43] audit: type=1326 audit(1787968621.444:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12460 comm="syz.0.1920" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 306.752633][ T43] audit: type=1326 audit(1787968621.454:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12460 comm="syz.0.1920" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 306.763226][ T43] audit: type=1326 audit(1787968621.464:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12460 comm="syz.0.1920" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 306.763277][ T43] audit: type=1326 audit(1787968621.464:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12460 comm="syz.0.1920" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 306.763320][ T43] audit: type=1326 audit(1787968621.464:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12460 comm="syz.0.1920" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 306.763355][ T43] audit: type=1326 audit(1787968621.464:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12460 comm="syz.0.1920" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 306.836101][ T43] audit: type=1326 audit(1787968621.534:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12460 comm="syz.0.1920" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 306.836655][ T43] audit: type=1326 audit(1787968621.534:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12460 comm="syz.0.1920" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 307.038998][T12458] bridge_slave_1: left allmulticast mode [ 307.057141][T12458] bridge_slave_1: left promiscuous mode [ 307.060012][T12458] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.065782][T12458] bridge_slave_0: left allmulticast mode [ 307.065842][T12458] bridge_slave_0: left promiscuous mode [ 307.066883][T12458] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.485118][T12467] can0: slcan on ttyS3. [ 307.741441][T12466] can0 (unregistered): slcan off ttyS3. [ 308.746566][T12493] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1926'. [ 308.987439][ T854] Process accounting resumed [ 312.570003][T12519] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 312.570035][T12519] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 312.572485][T12519] vhci_hcd vhci_hcd.0: Device attached [ 312.599964][T12532] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1932'. [ 312.877476][ T5946] usb 38-1: SetAddress Request (2) to port 0 [ 312.877552][ T5946] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 314.602660][T12547] 9p: Bad value for 'wfdno' [ 314.758274][T12530] vhci_hcd: connection reset by peer [ 314.766684][ T5810] vhci_hcd vhci_hcd.0: stop threads [ 314.766753][ T5810] vhci_hcd vhci_hcd.0: release socket [ 314.766834][ T5810] vhci_hcd vhci_hcd.0: disconnect device [ 315.484664][T12558] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1940'. [ 315.508571][T12558] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1940'. [ 315.536674][T12558] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1940'. [ 315.536828][T12558] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1940'. [ 315.597868][T12558] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1940'. [ 315.598003][T12558] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1940'. [ 316.082526][T12572] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 317.882875][T12579] can0: slcan on ttyS3. [ 317.966179][ T5946] usb 38-1: device descriptor read/8, error -110 [ 318.117985][T12577] can0 (unregistered): slcan off ttyS3. [ 318.359105][ T5946] usb usb38-port1: attempt power cycle [ 318.385032][T12595] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1944'. [ 318.410940][T12598] netlink: 'syz.5.1947': attribute type 11 has an invalid length. [ 318.816265][T12593] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 318.967354][ T5946] usb usb38-port1: unable to enumerate USB device [ 319.543714][T12607] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1950'. [ 319.543762][T12607] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1950'. [ 319.543796][T12607] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1950'. [ 319.636122][ T6853] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 319.896710][ T6853] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 319.897209][ T6853] usb 6-1: config 0 has no interfaces? [ 319.905378][ T6853] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.905519][ T6853] usb 6-1: Product: syz [ 319.905535][ T6853] usb 6-1: Manufacturer: syz [ 319.905550][ T6853] usb 6-1: SerialNumber: syz [ 319.934317][ T6853] usb 6-1: config 0 descriptor?? [ 320.313584][T12617] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 322.189807][ T9] usb 6-1: USB disconnect, device number 45 [ 322.508897][ T3268] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 322.657142][ T3268] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 322.657188][ T3268] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 322.664704][ T3268] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 322.664748][ T3268] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 322.664782][ T3268] usb 5-1: config 0 interface 0 has no altsetting 0 [ 322.674501][ T3268] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 322.674583][ T3268] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 322.674622][ T3268] usb 5-1: config 0 interface 0 has no altsetting 0 [ 322.685542][ T3268] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 322.686008][ T3268] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 322.686100][ T3268] usb 5-1: config 0 interface 0 has no altsetting 0 [ 322.696261][ T3268] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 322.696304][ T3268] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 322.696342][ T3268] usb 5-1: config 0 interface 0 has no altsetting 0 [ 322.705428][ T3268] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 322.705469][ T3268] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 322.705497][ T3268] usb 5-1: config 0 interface 0 has no altsetting 0 [ 322.724427][ T3268] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 322.727370][ T3268] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 322.730819][ T3268] usb 5-1: config 0 interface 0 has no altsetting 0 [ 322.736135][ T3268] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 322.736179][ T3268] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 322.736211][ T3268] usb 5-1: config 0 interface 0 has no altsetting 0 [ 322.745532][ T3268] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 322.745577][ T3268] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 322.745624][ T3268] usb 5-1: config 0 interface 0 has no altsetting 0 [ 322.755639][ T3268] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 322.755673][ T3268] usb 5-1: Product: syz [ 322.755712][ T3268] usb 5-1: Manufacturer: syz [ 322.755733][ T3268] usb 5-1: SerialNumber: syz [ 322.765748][ T3268] usb 5-1: config 0 descriptor?? [ 322.815532][ T3268] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 322.958619][T12648] overlayfs: failed to clone lowerpath [ 322.972581][T12645] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1959'. [ 323.213340][T12643] overlayfs: failed to clone lowerpath [ 323.216125][T12652] busy [ 323.241430][T12650] gretap1: left promiscuous mode [ 323.242929][T12650] bridge1: left promiscuous mode [ 323.242966][T12650] bridge1: left allmulticast mode [ 323.390428][ T854] usb 5-1: USB disconnect, device number 39 [ 323.396512][ T854] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 323.574615][T12660] IPVS: lc: SCTP 172.20.20.187:0 - no destination available [ 323.579039][ T7371] IPVS: starting estimator thread 0... [ 323.676208][T12661] IPVS: using max 43 ests per chain, 103200 per kthread [ 323.880806][T12660] Bluetooth: MGMT ver 1.23 [ 323.906183][ T6853] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 324.067000][ T6853] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 324.071902][ T6853] usb 10-1: config 1 has an invalid descriptor of length 128, skipping remainder of the config [ 324.076503][ T6853] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 324.080461][ T6853] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 324.083918][ T6853] usb 10-1: SerialNumber: syz [ 324.267615][T12654] Process accounting resumed [ 324.307201][T12665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.307503][T12665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.326431][ T6853] usb 10-1: 0:2 : does not exist [ 324.346177][ T6853] usb 10-1: USB disconnect, device number 36 [ 324.361771][T12321] udevd[12321]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 324.815735][T12690] jffs2: notice: (12690) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 325.777241][T12698] No such timeout policy "syz1" [ 325.865304][T12700] netlink: 'syz.1.1970': attribute type 2 has an invalid length. [ 325.865368][T12700] netlink: 'syz.1.1970': attribute type 2 has an invalid length. [ 326.153463][ T43] kauditd_printk_skb: 211 callbacks suppressed [ 326.153799][ T43] audit: type=1800 audit(1787968640.854:250): pid=12699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1968" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 326.749716][ T43] audit: type=1326 audit(1787968641.454:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12712 comm="syz.1.1972" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf702efec code=0x0 [ 326.756263][ T1346] syzkaller0: tun_net_xmit 76 [ 326.800992][T12714] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 326.803009][T12714] syzkaller0: Linktype set failed because interface is up [ 326.806390][ T6853] syzkaller0: tun_net_xmit 76 [ 327.265021][T12720] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1974'. [ 327.937942][T12724] random: crng reseeded on system resumption [ 328.077207][T12731] jffs2: notice: (12731) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 328.563340][ T43] audit: type=1326 audit(1787968643.264:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12741 comm="syz.7.1981" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf705efec code=0x0 [ 329.700912][T12766] netlink: 13 bytes leftover after parsing attributes in process `syz.0.1985'. [ 331.113759][T12781] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1987'. [ 331.592633][T12793] gretap3: entered promiscuous mode [ 332.098155][T12798] binder: 12797:12798 ioctl 404c534a 80000500 returned -22 [ 332.753274][T12810] 9p: Bad value for 'wfdno' [ 333.576134][T12824] netlink: 'syz.0.1998': attribute type 1 has an invalid length. [ 333.576172][T12824] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1998'. [ 333.781485][ T43] audit: type=1800 audit(1787968648.484:253): pid=12829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1999" name="ifname" dev="configfs" ino=50945 res=0 errno=0 [ 334.471487][T12839] jffs2: notice: (12839) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 336.510184][T12903] comedi comedi0: comedi_config --init_data is deprecated [ 339.183036][T12917] fuse: fd is not a fuse device [ 339.213534][T12917] fuse: fd is not a fuse device [ 339.219735][T12917] fuse: fd is not a fuse device [ 339.322596][T12920] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 339.370766][T12920] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 339.371557][T12920] overlayfs: failed to look up (tracing) for ino (-66) [ 341.741249][T12938] jffs2: notice: (12938) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 341.750456][T12927] netlink: 13 bytes leftover after parsing attributes in process `syz.7.2016'. [ 341.808663][T12930] fuse: fd is not a fuse device [ 341.909478][T12945] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2018'. [ 341.909778][T12945] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2018'. [ 342.123907][ T6238] IPVS: starting estimator thread 0... [ 342.230230][T12952] IPVS: using max 41 ests per chain, 98400 per kthread [ 342.276083][T12953] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2019'. [ 342.276560][T12953] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2019'. [ 342.323014][T12950] x_tables: duplicate underflow at hook 3 [ 342.339015][T12950] ./bus: Can't lookup blockdev [ 342.596803][T12949] IPVS: lc: SCTP 172.20.20.187:0 - no destination available [ 345.900545][T12984] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 345.918388][T12984] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 345.918615][T12984] pci 0000:00:01.0: BAR 2 [mem 0x81200000-0x81200fff] [ 345.918990][T12984] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 345.920182][T12984] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 345.977051][T12984] pci 0000:00:01.0: Adding to iommu group 1 [ 346.016915][T12984] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 346.016941][T12984] pci 0000:00:01.0: vgaarb: bridge control possible [ 346.016950][T12984] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 346.119222][T12984] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 346.126344][T12984] pci 0000:00:01.0: BAR 2 [mem 0x81200000-0x81200fff]: assigned [ 346.157938][T12984] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 346.207094][T12984] [drm] Found bochs VGA, ID 0xb0c5. [ 346.207154][T12984] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81200000. [ 346.276163][T12984] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 346.295877][T12977] syz.1.2029: page allocation failure: order:1, mode:0xcc1(GFP_KERNEL|GFP_DMA), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 346.319904][T12977] CPU: 2 UID: 0 PID: 12977 Comm: syz.1.2029 Tainted: G L syzkaller #0 PREEMPT(full) [ 346.319936][T12977] Tainted: [L]=SOFTLOCKUP [ 346.319942][T12977] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 346.319949][T12977] Call Trace: [ 346.319992][T12977] [ 346.319997][T12977] dump_stack_lvl+0x100/0x190 [ 346.320055][T12977] warn_alloc.cold+0x9e/0xb2 [ 346.320068][T12977] ? __pfx_warn_alloc+0x10/0x10 [ 346.320109][T12977] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 346.320144][T12977] ? __pfx_get_page_from_freelist+0x10/0x10 [ 346.320167][T12977] __alloc_frozen_pages_noprof+0xcb6/0x3300 [ 346.320193][T12977] ? do_raw_spin_lock+0x128/0x260 [ 346.320214][T12977] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 346.320235][T12977] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 346.320248][T12977] ? lockdep_hardirqs_on+0x7d/0x110 [ 346.320262][T12977] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 346.320275][T12977] ? stack_depot_save_flags+0x49a/0x9f0 [ 346.320294][T12977] ? comedi_isadma_alloc+0xc6/0x620 [ 346.320327][T12977] ? pcl812_attach+0x18f5/0x2300 [ 346.320343][T12977] ? comedi_device_attach+0x40e/0x6b0 [ 346.320359][T12977] ? do_devconfig_ioctl+0x1b3/0x6d0 [ 346.320370][T12977] ? comedi_unlocked_ioctl+0x860/0x3310 [ 346.320391][T12977] alloc_pages_node_noprof+0x93/0x200 [ 346.320410][T12977] ? __pfx_alloc_pages_node_noprof+0x10/0x10 [ 346.320432][T12977] __dma_direct_alloc_pages.isra.0+0x35e/0x540 [ 346.320449][T12977] dma_direct_alloc+0x104/0x8a0 [ 346.320462][T12977] dma_alloc_attrs+0x1b9/0x3e0 [ 346.320474][T12977] ? __pfx_dma_alloc_attrs+0x10/0x10 [ 346.320485][T12977] ? __kmalloc_noprof+0x350/0x840 [ 346.320497][T12977] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 346.320509][T12977] ? dma_direct_supported+0xca/0x220 [ 346.320525][T12977] comedi_isadma_alloc+0x331/0x620 [ 346.320539][T12977] ? __pfx_comedi_isadma_alloc+0x10/0x10 [ 346.320553][T12977] ? request_threaded_irq+0x27b/0x3e0 [ 346.320570][T12977] pcl812_attach+0x18f5/0x2300 [ 346.320591][T12977] comedi_device_attach+0x40e/0x6b0 [ 346.320611][T12977] do_devconfig_ioctl+0x1b3/0x6d0 [ 346.320623][T12977] ? comedi_unlocked_ioctl+0x180/0x3310 [ 346.320638][T12977] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 346.320657][T12977] ? tomoyo_path_number_perm+0x46d/0x580 [ 346.320672][T12977] ? kasan_save_stack+0x3f/0x50 [ 346.320685][T12977] ? kasan_save_stack+0x30/0x50 [ 346.320697][T12977] ? kasan_save_track+0x14/0x30 [ 346.320713][T12977] ? kasan_save_free_info+0x3b/0x70 [ 346.320732][T12977] comedi_unlocked_ioctl+0x860/0x3310 [ 346.320751][T12977] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 346.320776][T12977] ? kasan_quarantine_put+0x104/0x240 [ 346.320790][T12977] ? lockdep_hardirqs_on+0x7d/0x110 [ 346.320805][T12977] ? find_held_lock+0x2b/0x80 [ 346.320816][T12977] ? tomoyo_path_number_perm+0x28f/0x580 [ 346.320831][T12977] ? tomoyo_path_number_perm+0x28f/0x580 [ 346.320848][T12977] ? tomoyo_path_number_perm+0x188/0x580 [ 346.320866][T12977] comedi_compat_ioctl+0x438/0xe20 [ 346.320881][T12977] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 346.320896][T12977] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 346.320913][T12977] ? do_vfs_ioctl+0x226/0x13e0 [ 346.320943][T12977] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 346.320964][T12977] ? __fget_files+0x34/0x3d0 [ 346.320976][T12977] ? find_held_lock+0x2b/0x80 [ 346.320987][T12977] ? __fget_files+0x215/0x3d0 [ 346.320997][T12977] ? hook_file_ioctl_common+0x140/0x440 [ 346.321016][T12977] ? __fget_files+0x21f/0x3d0 [ 346.321030][T12977] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 346.321044][T12977] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 346.321064][T12977] __do_fast_syscall_32+0x13a/0x8b0 [ 346.321082][T12977] do_fast_syscall_32+0x32/0x70 [ 346.321097][T12977] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 346.321112][T12977] RIP: 0023:0xf702efec [ 346.321126][T12977] Code: Unable to access opcode bytes at 0xf702efc2. [ 346.321151][T12977] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 346.321163][T12977] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000040946400 [ 346.321170][T12977] RDX: 00000000800003c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 346.321176][T12977] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 346.321183][T12977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 346.321190][T12977] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 346.321204][T12977] [ 346.335357][T12977] Mem-Info: [ 346.335368][T12977] active_anon:1346 inactive_anon:9142 isolated_anon:0 [ 346.335368][T12977] active_file:9752 inactive_file:12647 isolated_file:0 [ 346.335368][T12977] unevictable:0 dirty:397 writeback:0 [ 346.335368][T12977] slab_reclaimable:6801 slab_unreclaimable:63466 [ 346.335368][T12977] mapped:24208 shmem:4805 pagetables:1642 [ 346.335368][T12977] sec_pagetables:311 bounce:0 [ 346.335368][T12977] kernel_misc_reclaimable:0 [ 346.335368][T12977] free:32463 free_pcp:29 free_cma:0 [ 346.335397][T12977] Node 0 active_anon:0kB inactive_anon:148kB active_file:108kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:32kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9056kB pagetables:1340kB sec_pagetables:1132kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 346.335426][T12977] Node 0 DMA free:2752kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:28kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:20kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB [ 346.335457][T12977] lowmem_reserve[]: 0 278 278 278 278 [ 346.335477][T12977] Node 0 DMA: 106*4kB (UM) 57*8kB (UM) 13*16kB (UM) 24*32kB (UM) 4*64kB (UM) 1*128kB (M) 0*256kB 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 2752kB [ 346.335551][T12977] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 346.335560][T12977] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 346.335569][T12977] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 346.335577][T12977] Node 1 hugepages_total=8 hugepages_free=8 hugepages_surp=0 hugepages_size=2048kB [ 346.335585][T12977] 27999 total pagecache pages [ 346.335589][T12977] 828 pages in swap cache [ 346.335594][T12977] Free swap = 23236kB [ 346.335597][T12977] Total swap = 124996kB [ 346.335602][T12977] 524155 pages RAM [ 346.335605][T12977] 0 pages HighMem/MovableOnly [ 346.335609][T12977] 212091 pages reserved [ 346.335613][T12977] 0 pages cma reserved [ 346.648926][T12984] Console: switching to colour frame buffer device 160x50 [ 346.737856][T12984] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 346.872164][T13012] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2037'. [ 346.992172][T13001] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2033'. [ 347.478054][T13019] usb 1-1: USB disconnect, device number 2 [ 348.065340][T13026] overlayfs: failed to clone lowerpath [ 350.548114][T13051] can0: slcan on ttyS3. [ 350.893736][T13053] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2045'. [ 350.939451][T13050] can0 (unregistered): slcan off ttyS3. [ 352.818722][T13070] tipc: Started in network mode [ 352.818788][T13070] tipc: Node identity ac14140f, cluster identity 4711 [ 352.830316][T13070] tipc: New replicast peer: 172.30.0.8 [ 352.830593][T13070] tipc: Enabled bearer , priority 10 [ 352.834931][T13070] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2050'. [ 352.834949][T13070] tipc: Disabling bearer [ 353.213488][T13088] syz.5.2054: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 354.534932][T13103] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2059'. [ 354.534996][T13103] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2059'. [ 355.780176][T13111] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2061'. [ 355.784561][T13111] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2061'. [ 356.803258][T13124] wg2 speed is unknown, defaulting to 1000 [ 356.814520][T13124] wg2 speed is unknown, defaulting to 1000 [ 356.841710][T13124] wg2 speed is unknown, defaulting to 1000 [ 357.389133][T13124] infiniband syz0: set down [ 357.410313][T13124] infiniband syz0: added wg2 [ 357.429045][ T1346] wg2 speed is unknown, defaulting to 1000 [ 357.567691][T13124] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 357.567794][T13124] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 357.570634][T13124] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 357.915458][T13124] RDS/IB: syz0: added [ 357.931647][T13124] smc: adding ib device syz0 with port count 1 [ 357.941585][T13124] smc: ib device syz0 port 1 has no pnetid [ 357.966797][ T1346] wg2 speed is unknown, defaulting to 1000 [ 358.077652][T13132] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 358.272954][T13124] wg2 speed is unknown, defaulting to 1000 [ 358.924496][T13138] fuse: Unknown parameter 'fd0x0000000000000003' [ 359.240620][T13124] wg2 speed is unknown, defaulting to 1000 [ 359.461132][T13124] wg2 speed is unknown, defaulting to 1000 [ 359.539263][T13152] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 359.549532][T13124] wg2 speed is unknown, defaulting to 1000 [ 359.652568][T13124] wg2 speed is unknown, defaulting to 1000 [ 360.187868][ T3268] usb 6-1: new full-speed USB device number 46 using dummy_hcd [ 360.336959][ T3268] usb 6-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 360.341499][ T3268] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 94, changing to 4 [ 360.346109][ T3268] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 360.352904][ T3268] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.357207][ T3268] usb 6-1: Product: syz [ 360.358968][ T3268] usb 6-1: Manufacturer: syz [ 360.360677][ T3268] usb 6-1: SerialNumber: syz [ 360.730348][T13171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.737496][T13171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.758406][ T3268] usb 6-1: Unsupported UAC3 BADD profile [ 360.780416][ T3268] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 360.800395][ T3268] usb 6-1: USB disconnect, device number 46 [ 360.838880][T12989] udevd[12989]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 360.881865][T13163] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 360.881900][T13163] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 360.882014][T13163] vhci_hcd vhci_hcd.0: Device attached [ 361.098196][ T43] audit: type=1804 audit(1787968674.803:254): pid=13176 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2074" name="/newroot/536/file0/file0" dev="9p" ino=78395863 res=1 errno=0 [ 361.105237][T13173] vhci_hcd: connection closed [ 361.108695][T12262] vhci_hcd vhci_hcd.5: stop threads [ 361.108753][T12262] vhci_hcd vhci_hcd.5: release socket [ 361.108794][T12262] vhci_hcd vhci_hcd.5: disconnect device [ 361.284282][T13183] x_tables: duplicate underflow at hook 3 [ 361.291382][T13183] ./bus: Can't lookup blockdev [ 361.447982][T13185] [ 361.448810][T13185] ====================================================== [ 361.450985][T13185] WARNING: possible circular locking dependency detected [ 361.453238][T13185] syzkaller #0 Tainted: G L [ 361.455335][T13185] ------------------------------------------------------ [ 361.457970][T13185] syz.1.2077/13185 is trying to acquire lock: [ 361.460082][T13185] ffffffff903fc168 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: uvc_func_allow_link+0x76/0x3f0 [ 361.463295][T13185] [ 361.463295][T13185] but task is already holding lock: [ 361.465577][T13185] ffff8880135d8140 (&sb->s_type->i_mutex_key#24){++++}-{4:4}, at: configfs_symlink+0x3c0/0x11f0 [ 361.468941][T13185] [ 361.468941][T13185] which lock already depends on the new lock. [ 361.468941][T13185] [ 361.472237][T13185] [ 361.472237][T13185] the existing dependency chain (in reverse order) is: [ 361.475024][T13185] [ 361.475024][T13185] -> #3 (&sb->s_type->i_mutex_key#24){++++}-{4:4}: [ 361.478045][T13185] lock_acquire+0x1d1/0x380 [ 361.479702][T13185] down_write+0x8b/0x1f0 [ 361.481254][T13185] configfs_depend_item_unlocked+0xf3/0x6a0 [ 361.483377][T13185] usbg_make_tpg+0x251/0x610 [ 361.485013][T13185] target_fabric_make_tpg+0xab/0x8c0 [ 361.486932][T13185] configfs_mkdir+0x525/0xd40 [ 361.488611][T13185] vfs_mkdir+0x364/0x850 [ 361.490415][T13185] filename_mkdirat+0x48b/0x5e0 [ 361.492160][T13185] __ia32_sys_mkdir+0x6a/0x90 [ 361.493800][T13185] __do_fast_syscall_32+0x13a/0x8b0 [ 361.495596][T13185] do_fast_syscall_32+0x32/0x70 [ 361.497374][T13185] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 361.499559][T13185] [ 361.499559][T13185] -> #2 (tpg_instances_lock){+.+.}-{4:4}: [ 361.502378][T13185] lock_acquire+0x1d1/0x380 [ 361.504339][T13185] __mutex_lock+0x1a4/0x1bc0 [ 361.506230][T13185] tcm_alloc_inst+0x5f/0x1e0 [ 361.507978][T13185] try_get_usb_function_instance+0x136/0x1f0 [ 361.510008][T13185] usb_get_function_instance+0x16/0x70 [ 361.511930][T13185] function_make+0x18c/0x3f0 [ 361.513550][T13185] configfs_mkdir+0x525/0xd40 [ 361.515192][T13185] vfs_mkdir+0x364/0x850 [ 361.516700][T13185] filename_mkdirat+0x48b/0x5e0 [ 361.518377][T13185] __ia32_sys_mkdir+0x6a/0x90 [ 361.520028][T13185] __do_fast_syscall_32+0x13a/0x8b0 [ 361.521808][T13185] do_fast_syscall_32+0x32/0x70 [ 361.523513][T13185] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 361.525626][T13185] [ 361.525626][T13185] -> #1 (func_lock){+.+.}-{4:4}: [ 361.527822][T13185] lock_acquire+0x1d1/0x380 [ 361.529397][T13185] __mutex_lock+0x1a4/0x1bc0 [ 361.531015][T13185] try_get_usb_function_instance+0x26/0x1f0 [ 361.533060][T13185] usb_get_function_instance+0x16/0x70 [ 361.534941][T13185] function_make+0x18c/0x3f0 [ 361.536549][T13185] configfs_mkdir+0x525/0xd40 [ 361.538500][T13185] vfs_mkdir+0x364/0x850 [ 361.540094][T13185] filename_mkdirat+0x48b/0x5e0 [ 361.541799][T13185] __ia32_sys_mkdir+0x6a/0x90 [ 361.543530][T13185] __do_fast_syscall_32+0x13a/0x8b0 [ 361.545415][T13185] do_fast_syscall_32+0x32/0x70 [ 361.547138][T13185] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 361.549277][T13185] [ 361.549277][T13185] -> #0 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 361.551860][T13185] check_prev_add+0xeb/0xe60 [ 361.553494][T13185] __lock_acquire+0x1492/0x1ec0 [ 361.555194][T13185] lock_acquire+0x1d1/0x380 [ 361.556782][T13185] __mutex_lock+0x1a4/0x1bc0 [ 361.558404][T13185] uvc_func_allow_link+0x76/0x3f0 [ 361.560158][T13185] configfs_symlink+0x540/0x11f0 [ 361.561883][T13185] vfs_symlink+0x178/0x4d0 [ 361.563486][T13185] filename_symlinkat+0x2a6/0x560 [ 361.565283][T13185] __ia32_sys_symlink+0x78/0xb0 [ 361.567105][T13185] __do_fast_syscall_32+0x13a/0x8b0 [ 361.568965][T13185] do_fast_syscall_32+0x32/0x70 [ 361.570659][T13185] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 361.572730][T13185] [ 361.572730][T13185] other info that might help us debug this: [ 361.572730][T13185] [ 361.576204][T13185] Chain exists of: [ 361.576204][T13185] gadget_subsys.su_mutex --> tpg_instances_lock --> &sb->s_type->i_mutex_key#24 [ 361.576204][T13185] [ 361.580828][T13185] Possible unsafe locking scenario: [ 361.580828][T13185] [ 361.583181][T13185] CPU0 CPU1 [ 361.584853][T13185] ---- ---- [ 361.586777][T13185] lock(&sb->s_type->i_mutex_key#24); [ 361.588554][T13185] lock(tpg_instances_lock); [ 361.590836][T13185] lock(&sb->s_type->i_mutex_key#24); [ 361.593503][T13185] lock(gadget_subsys.su_mutex); [ 361.595195][T13185] [ 361.595195][T13185] *** DEADLOCK *** [ 361.595195][T13185] [ 361.597769][T13185] locks held by syz.1.2077/13185: 2, last CPU#3: [ 361.599742][T13185] #0: ffff888022dcc460 (sb_writers#12){.+.+}-{0:0}, at: filename_create+0x10d/0x400 [ 361.602839][T13185] #1: ffff8880135d8140 (&sb->s_type->i_mutex_key#24){++++}-{4:4}, at: configfs_symlink+0x3c0/0x11f0 [ 361.606222][T13185] [ 361.606222][T13185] stack backtrace: [ 361.608094][T13185] CPU: 3 UID: 0 PID: 13185 Comm: syz.1.2077 Tainted: G L syzkaller #0 PREEMPT(full) [ 361.611462][T13185] Tainted: [L]=SOFTLOCKUP [ 361.612848][T13185] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 361.615963][T13185] Call Trace: [ 361.617078][T13185] [ 361.618024][T13185] dump_stack_lvl+0x100/0x190 [ 361.619533][T13185] print_circular_bug.cold+0x178/0x1be [ 361.621245][T13185] check_noncircular+0x146/0x160 [ 361.622832][T13185] ? putname+0xb1/0x110 [ 361.624148][T13185] check_prev_add+0xeb/0xe60 [ 361.625607][T13185] ? stack_depot_save_flags+0x27/0x9f0 [ 361.627364][T13185] __lock_acquire+0x1492/0x1ec0 [ 361.628902][T13185] ? kern_path+0x41/0x50 [ 361.630259][T13185] ? configfs_symlink+0x2a3/0x11f0 [ 361.631878][T13185] lock_acquire+0x1d1/0x380 [ 361.633346][T13185] ? uvc_func_allow_link+0x76/0x3f0 [ 361.634989][T13185] ? __pfx___might_resched+0x10/0x10 [ 361.636648][T13185] __mutex_lock+0x1a4/0x1bc0 [ 361.638105][T13185] ? uvc_func_allow_link+0x76/0x3f0 [ 361.639749][T13185] ? uvc_func_allow_link+0x76/0x3f0 [ 361.641374][T13185] ? __lock_acquire+0x4c5/0x1ec0 [ 361.642961][T13185] ? __pfx___mutex_lock+0x10/0x10 [ 361.644533][T13185] ? make_vfsuid+0xec/0x140 [ 361.645964][T13185] ? generic_permission+0xae/0x800 [ 361.647573][T13185] ? uvc_func_allow_link+0x76/0x3f0 [ 361.649202][T13185] uvc_func_allow_link+0x76/0x3f0 [ 361.650792][T13185] ? mntput_no_expire+0xe7/0x220 [ 361.652377][T13185] configfs_symlink+0x540/0x11f0 [ 361.653934][T13185] ? bpf_lsm_inode_permission+0x9/0x10 [ 361.655649][T13185] ? security_inode_permission+0xbf/0x250 [ 361.657516][T13185] ? __pfx_configfs_symlink+0x10/0x10 [ 361.659327][T13185] vfs_symlink+0x178/0x4d0 [ 361.660746][T13185] filename_symlinkat+0x2a6/0x560 [ 361.662337][T13185] ? __pfx_filename_symlinkat+0x10/0x10 [ 361.664075][T13185] ? strncpy_from_user+0x19d/0x2d0 [ 361.665700][T13185] ? do_getname+0x191/0x390 [ 361.667169][T13185] __ia32_sys_symlink+0x78/0xb0 [ 361.668721][T13185] __do_fast_syscall_32+0x13a/0x8b0 [ 361.670438][T13185] do_fast_syscall_32+0x32/0x70 [ 361.672000][T13185] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 361.673990][T13185] RIP: 0023:0xf702efec [ 361.675379][T13185] Code: Unable to access opcode bytes at 0xf702efc2. [ 361.677435][T13185] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000053 [ 361.680224][T13185] RAX: ffffffffffffffda RBX: 00000000800000c0 RCX: 0000000080001b00 [ 361.682916][T13185] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 361.685487][T13185] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 361.688018][T13185] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 361.690556][T13185] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 361.693110][T13185] [ 361.789570][T13188] can0: slcan on ttyS3. [ 361.846663][T13187] can0 (unregistered): slcan off ttyS3.