last executing test programs: 6m19.786019691s ago: executing program 3 (id=209): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000140)={&(0x7f0000001680)}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000540)={0x14, 0x0, 0x0}, &(0x7f00000007c0)={0x44, &(0x7f0000000b40)=ANY=[], 0x0, 0x0, &(0x7f0000000680)={0x20, 0x80, 0x1c, {0xfff1, 0x6, 0xfffffffd, 0x0, 0xe414, 0x1, 0x6, 0x10000, 0x1, 0x7, 0x4, 0x4}}, 0x0, 0x0, 0x0, 0x0}) 6m17.617428965s ago: executing program 3 (id=225): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./bus\x00') r0 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) r1 = socket$inet_sctp(0x2, 0x1, 0x84) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x1, 0x0) (async) splice(r3, 0x0, r2, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r4) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x4c, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}]}]}, 0x4c}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001480)={0x70, 0x0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x5000}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4806}, 0x0) fcntl$setpipe(r2, 0x408, 0x7) close_range(r1, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x2000, 0x88, &(0x7f0000001000/0x2000)=nil) (async) r6 = shmget$private(0x0, 0x2000, 0x88, &(0x7f0000001000/0x2000)=nil) r7 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff\xff2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\x10\xf7\xb2\xed\x8a\xdc\xa6\x8fO\xc8\xbay,\xae\xd3\xc5*\x15\xdf_\xb2_`\x92', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff\xff2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\x10\xf7\xb2\xed\x8a\xdc\xa6\x8fO\xc8\xbay,\xae\xd3\xc5*\x15\xdf_\xb2_`\x92', 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=@RTM_DELMDB={0xf8, 0x55, 0x10, 0x70bd26, 0x25dfdbff, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x1, 0x3, {@in6_addr=@mcast1, 0xc00}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x3, {@in6_addr=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0xcdb3}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x1, 0x3, {@ip4=@multicast2}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x3, 0x0, {@in6_addr=@mcast1, 0xcdb3}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x2, 0x1, {@in6_addr=@private2={0xfc, 0x2, '\x00', 0x1}}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x2, {@ip4=@rand_addr=0x64010101, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x4, 0x4, {@in6_addr=@local, 0x86dd}}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r8, 0x0, 0x10) (async) sendmsg$NL80211_CMD_FRAME(r8, 0x0, 0x10) shmat(r6, &(0x7f0000001000/0x3000)=nil, 0x9000) (async) shmat(r6, &(0x7f0000001000/0x3000)=nil, 0x9000) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000000514210626bd7000fcdbdf2508000100"], 0x20}, 0x1, 0x0, 0x0, 0x4000895}, 0x40) 6m17.447336522s ago: executing program 3 (id=226): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip6_tables_matches\x00') preadv(r3, &(0x7f0000000640)=[{&(0x7f0000000480)=""/179, 0xb3}], 0x1, 0x4f, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000140)=0x80000001, 0x4) setsockopt$packet_int(r4, 0x107, 0x7, &(0x7f0000000080), 0x4) unshare(0x200) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@can_newroute={0x13, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8}, @CGW_SRC_IF={0x8}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000a00)={'macsec0\x00', 0x0}) flistxattr(r2, &(0x7f0000000340)=""/203, 0xcb) sendto$packet(r4, &(0x7f0000000040)="5a181e9f51242cb3d81414ef4a74", 0xe, 0x90, &(0x7f0000000000)={0x11, 0x8, r6, 0x1, 0x6}, 0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r9 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff1, 0xffff}, {0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x21f220}]}}]}, 0x3c}}, 0x0) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d800", 0x2}], 0x1}, 0x0) 6m16.667046645s ago: executing program 3 (id=233): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x11) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e04a1f29f656e642c6163638173733d616e792c63616368653d66736361636865"]) chdir(&(0x7f0000000100)='./file0\x00') open(&(0x7f0000000040)='./bus\x00', 0x24040, 0x10) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x40100, 0x0) fcntl$notify(r0, 0x402, 0x80000004) r1 = syz_open_procfs(0x0, &(0x7f0000001180)='attr\x00') readv(r1, 0x0, 0x0) stat(&(0x7f0000000380)='./bus\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f0000000200)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff]) lchown(&(0x7f0000000000)='./file0\x00', r2, r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0xe8}}, 0x4000004) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffff}}, './proc/thread-self/fail-nth\x00'}) r5 = openat(r4, &(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) add_key(&(0x7f00000016c0)='logon\x00', &(0x7f0000001700)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r6 = openat$vcsu(0xffffff9c, 0x0, 0xd3e8f6c8fd92ec51, 0x0) write$P9_RLERROR(r6, &(0x7f00000004c0)=ANY=[@ANYBLOB="130000000702000a002f6465762f7663737500d445bc62bc9e4b5a6f914aea31bb26d62611fd516cf806ac632e0db3ee0b27021cd8887bf1f7898992c6c4bf87b08026b62031d37d9c64b97b559ee268af996b32c813cb725d7b9f2884c1ae5fdb1daf1cee8593bae909c0ab9904c718bafefe04c7901a1cd61f1433975ff48ca273b867db244fe8e3ba9018386328d6f2ec55971fb0ce98d6871a1f1e1bb50c99904c6a61df7b7fdeb71365c93b671264998e3ab2b54e99f0294c778ee49ec8fb199e5b1408e07640a6b2773c5c40ed69d3b4a2de134ffcbcbe27937270179fa273d2cb6ccf22c4d100207bbb7bce89f75ba2580db4654ad365a82f4bda79c030a2b2d956813be0678f6d55a735e0706bc54a62829223cebb9aeaed5ea9e94359ccc603"], 0x13) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000002060108000000000000000000000000050005000a000040050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970"], 0x58}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc0000000000b1000000000000000000060004404e1f0000050007008400000006000540", @ANYBLOB="b54cc2e511cfa93dd2c6f9688cce2cf7727834c73d6b0f42f8bcba80f09a43acc66a39208e959374396830fc7c89c53ad7eded9c07bffbda63e1d308f013b6268494c289e1c05fbaa3f41de17a1d21bbd3079c47965be97ada5a3ad8182748f42f48bf7e3662090067339e176f03b6f3e3957334c72a26cbba9e494c3ca89ba5d2a8a5", @ANYRES8], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r9 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000130706010800000000000000000a0000000000000006000000"], 0x1c}}, 0x0) 6m15.581672083s ago: executing program 3 (id=236): mmap$IORING_OFF_SQ_RING(0x0, 0x9, 0xefecb5067deabb0d, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x6, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000040000"], 0x48) r2 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x13) tkill(r2, 0x12) waitid(0x0, 0x0, 0x0, 0x100000e, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=r1], 0x50) write$rfkill(r0, &(0x7f0000000080)={0x2, 0x0, 0x3, 0x41}, 0x8) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@generic={&(0x7f00000004c0)='./file1\x00', 0x0, 0x10}, 0x14) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000010000000300"/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x23, &(0x7f0000000840)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x7, 0x2a, &(0x7f00000009c0)=""/42, 0x40f00, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000a40)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000a80)={0x5, 0xc, 0x3, 0xfc000000}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0xffffffffffffffff, 0xffffffffffffffff, r4, r3], 0x0, 0x10, 0x1}, 0x94) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4038587a, &(0x7f0000000740)={{r1, &(0x7f0000000500)='),.\']:::\x00', 0x0, &(0x7f0000000540)={@_ha_fsid={[0xa, 0x3]}, {0x6, 0x2, 0x1, 0x2}}, 0x4, &(0x7f0000000580), 0x0}, {[0x9, 0x10000, 0x2, 0x12]}, 0x5, 0xdf, &(0x7f0000000640)=""/223}) ioctl$EVIOCGEFFECTS(r5, 0x80044584, &(0x7f0000000880)=""/30) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r6, &(0x7f0000000100)=[{0x0}], 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000080)={0x800006f0, 0x7, 0xa13, 0x75e, 0x38, "fd25a20d00"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000001140)={0x80000000, &(0x7f0000000200)=[{0x80000000}], &(0x7f00000010c0)}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f000000a300)={{r7, 0x0, 0x2, [0x80000001, 0x8]}, {0x80000000, 0x0, 0x6, [0x2, 0x3]}, 0x0, [0x7d, 0x8]}) setns(0xc9, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r8) sendmsg$DEVLINK_CMD_RATE_GET(r8, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x14, r9, 0x303, 0x0, 0x25dfdbfd, {0x3d}}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x4000000) 6m15.077308048s ago: executing program 3 (id=243): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='smaps_rollup\x00') read$FUSE(r0, &(0x7f0000003040)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x4e142, 0x1) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x4e142, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000b2f0cbaa1f357331000000180001801400020073797a5f74756e000000000000000000080002000f"], 0x34}, 0x1, 0x0, 0x0, 0x400c890}, 0x4080000) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000b2f0cbaa1f357331000000180001801400020073797a5f74756e000000000000000000080002000f"], 0x34}, 0x1, 0x0, 0x0, 0x400c890}, 0x4080000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000007c971452962cace77eae6247e732cdc64527f2280fbe95ffff8ef0979051d593ddd37c37a97ccf4cb383462758adc939c5a59bb0d220e4fadfbd6d8db5beb19e08315af4672bd887b316a684e15821f115eb9ec729d05a448f71bbac2b2230e3694e8369a6dcdb8d706353c1bdaf5a83d05d2f1a4a1d3e9d772328bb0dc74d332f7f8ea143f30a80be1163aa8b5e684a5fe151a83d740d076490aff1c914c083fe39ddc2a747842aef2b0b2a817aced0a7be2a764bbd2550c7b977f91154ecaf9794078c896f51672228982aad38e021ef4aca611f9266ddeeb993b7cb87267902d8", @ANYRES16=0x0, @ANYBLOB="10002dbd7000fddbdf254c0000000f00a9007365636f6e646e616d6500000800030000000000080001007063690011000200303030303a30303a31302e3000000000"], 0x48}, 0x1, 0x0, 0x0, 0x40838}, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r6, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) sendto$inet6(r6, &(0x7f00000004c0)="b0", 0x1, 0x40811, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @loopback, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r6, 0x84, 0x5, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x38}}}}, 0x84) (async) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r6, 0x84, 0x5, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x38}}}}, 0x84) ioctl$KVM_GET_NESTED_STATE(r1, 0xc080aebe, &(0x7f0000001480)=@vmx={0x101, 0x0, 0x2080, {0xfec00000, 0x6000, {}, 0x0, 0x73b4}, {"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", "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"}}) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r6, 0x84, 0x5, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e23, @loopback}}}, 0x84) close_range(r2, r6, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), r4) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000000)=0x8) sendmsg$DEVLINK_CMD_TRAP_GET(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)={0x33, r7, 0x1, 0x0, 0x25dfdbfb, {0x27}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x51}}]}, 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) (async) sendmsg$DEVLINK_CMD_TRAP_GET(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)={0x33, r7, 0x1, 0x0, 0x25dfdbfb, {0x27}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x51}}]}, 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7, 0x0, 0x0, 0x4000}) sendmmsg$unix(r3, &(0x7f00000254c0), 0x0, 0x0) (async) sendmmsg$unix(r3, &(0x7f00000254c0), 0x0, 0x0) 6m15.018589947s ago: executing program 32 (id=243): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='smaps_rollup\x00') read$FUSE(r0, &(0x7f0000003040)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x4e142, 0x1) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x4e142, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000b2f0cbaa1f357331000000180001801400020073797a5f74756e000000000000000000080002000f"], 0x34}, 0x1, 0x0, 0x0, 0x400c890}, 0x4080000) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000b2f0cbaa1f357331000000180001801400020073797a5f74756e000000000000000000080002000f"], 0x34}, 0x1, 0x0, 0x0, 0x400c890}, 0x4080000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000007c971452962cace77eae6247e732cdc64527f2280fbe95ffff8ef0979051d593ddd37c37a97ccf4cb383462758adc939c5a59bb0d220e4fadfbd6d8db5beb19e08315af4672bd887b316a684e15821f115eb9ec729d05a448f71bbac2b2230e3694e8369a6dcdb8d706353c1bdaf5a83d05d2f1a4a1d3e9d772328bb0dc74d332f7f8ea143f30a80be1163aa8b5e684a5fe151a83d740d076490aff1c914c083fe39ddc2a747842aef2b0b2a817aced0a7be2a764bbd2550c7b977f91154ecaf9794078c896f51672228982aad38e021ef4aca611f9266ddeeb993b7cb87267902d8", @ANYRES16=0x0, @ANYBLOB="10002dbd7000fddbdf254c0000000f00a9007365636f6e646e616d6500000800030000000000080001007063690011000200303030303a30303a31302e3000000000"], 0x48}, 0x1, 0x0, 0x0, 0x40838}, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r6, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) sendto$inet6(r6, &(0x7f00000004c0)="b0", 0x1, 0x40811, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @loopback, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r6, 0x84, 0x5, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x38}}}}, 0x84) (async) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r6, 0x84, 0x5, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x38}}}}, 0x84) ioctl$KVM_GET_NESTED_STATE(r1, 0xc080aebe, &(0x7f0000001480)=@vmx={0x101, 0x0, 0x2080, {0xfec00000, 0x6000, {}, 0x0, 0x73b4}, {"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", "ea7700b65225454d01ccb3abf867e8e0ccfabd21696b61cda6b285ac84aa7d28ddc4fc3705e5db1a6fcef9d845bb7b704836a9ce3395365e62651090ebc2fb44c780132d273be332f7aae9e7a2b4cf1e9a8c4f6718495ed53e94d692caef0ee27178fc8cbd1eeba3c3a79552146a36d3df027bfb11b93ac992d8731bcc8065d118158c7359f04714b18baf4cc57c0903a8e73208ceea87ab0c8205d86d67873c369507b874edb7e6e25ccd62f45cb2b5c03ea98a26959937171436e08a09c4a55c25093395124186e964ba2a14c0e5148922408632c621860f14b78d75bdd405c279f99e61698600d9701f9ab8c7c1d30fe7e31e065632cfb48893e1d9f40dad6ab4a89a22eaca4e1544f628db0a14497a86578033f247bfdfb21662867586c2d87398546ab0e7a1f13a34dfeb76815514f7f9df59420f8203ecbc5011c7134afbcc9d63be05e9b60a2f4ee3cd7cc63d124a07ff3c4b7fb0ed34b1e5808407eead632031987709e000add16d15dab542746c2ca25f6caa05b4c9a38aa947aea77620c69df24a76380ecccaa4896cc367ae17bf3560b0607ef0f6e8c81fdc469680f74932ff60c326964a3b828a56143295e349bcfc853bf187b0b04cace5f0d02700174922e5dc7509bcad21c83c1b3f62a2421b128bf1f38c2118bcb135b39540c3ea1fca9fa862bf8c6b2a83e0365650b431c4847d47f35a47ddd6e0c069942f09f68b908cafca8eebea264db8b14fcd2eec27dc9b05dd45169c44f966415b3a55a64b5d15bf7dddca5ab17157d72a18d76e1ac808753b95cf4d0e35b2eab93af491db1d0e0ac739b05a94c83457b35ff1e8959a01f2db8a66b908f25d8bb1b513015a248298807ca0dfaa4d6864d4e86b858a9cf944b092865955189202930670a432873a871ad4aea2e94625b7f7dd20effa3229a8d89e1f5cb56784b18ae7c144e67143e35728dade8a7ceffae022d05e627b5d3501bb6cdd0671983885aa927006dae729ff991c02c5b6e3b9d0d3a3fc28035dae6e4e7dd879a12e0d3354ef169b0c5aa0a27e3b6dde38ba395b7c72cbb909514bb5e5c565d8920a1d6deb576ca5b23b632a4f27aad133937529d3d9931c2029c4c6dfc5cc752f115e0d75d76282391e22ee41ff40b005de7bcb7d7adcd9127f9bce919558cf6e455d99a31275d0834e084eabb46905d5f785f9a01e1297324fdebe4fcc923388d5e1c268088c0a7f654f071f808e941206a605370c93344c6c42783293036620d42b3d4780c0ef3a849b36eac66544cc99e7178bff50fe7496bd8a0790feb4b0596fb3c37b83aeff1cdfb307ed022a322dc2c3d5efc08131f0f4d08bdac05e0f84dda8444301f7d9853e36ae8ddaf2e027daacf2d735cf7385eddec83ca7ac0d658a2ff19a40ef727995bd3b182261e66495bc4a1325764c6cd8919967048dba7f51ba53c6a4cb19cd78e1ff2047ef2fa63cb3503414692bee2cebda007357b623639d2aea23b502fc9ece838ce795b14b50c1b0b8f2750d2b12ae0f5abbf1e6b874bb8e679aa678bae25a5bfdc0dcb0a59bad4dd4d7f94ecb426295898a49c63f8bb50397a9a324e11a6daa3af3dfec3924aff1553069a68442951dbbc588fb5462e15bde58f1490ce920428c4474bdf7fe4414b69b88f8b0c0300538d49bf6b652220b1cdb6e0d7e5ef63b6125c6e8070dcfa5ab101daff1f86a19c0f5f587bddf77d7d64ae503c97071716b850ec77458c613c9cd9ef01e35d0bc07e2f284e3bae11d9709bc09faa0c18c6b25edd2c45c6750e09473181b5233dc97ce89e697ef7d7e8ff996ba2fc3016b77f1807db560738ab12820284ece334ddc27b888682ce746c03aef5055eec508ddc52a3a6ff3374026122612b16bec4b5b0689c3bf7ea4b1c654fecfaecd91ea7d39f4ac2013f02d5a21a4f8c470c720c0d652e6ce128705ba7a8a35b1f5928a3f5abddd3c685f8e96b4c9cce9a8f93276af23f04b479a8653d76a87c87384955d6cca667720e05b37b76b71e4da7bb69b5cb3ba1a91a2578a861ed701fe6ce46e3daa927bb0f3401eb40dbeeb3dadc2cd95ad9bcaca75d831b68f82fff817eba85508fc2ec216846b0b96514542a30574d1a5e2f2b19f47d3b908228c542097224caf8c6cfb45e06e967e53c785a8528b1fd54742781fe2d38e9390f8ce5a21dec100b6a95bc46c3f102b87af004fdc2cd601055a5da4b68ba901a566857dc028cf08df62151fbe7b90ad753d33b602af8ad28fc49fe4d18116859fa86ea6056dbdecee587cc9b8d63da06ba83f66f8ee0bf473fdda66b7d2253a7170a570e868b005f9228163bb1923a678629cd092fe9711e141da9349b24cb7c66bb72b861a0b616e410cf85279c8e5959a7782de514f5382da32ae48f6de3026533f367876770d5856c8df772e84d4e9196394f56fb804e91e31b38be9c2d9eed859e7e8b6ac81e7c07abbcb089b5c14c59416d3b130515c5e0f1ef4dd5c55a23b65852f49e98e9de036c656e25cb2b8e2bc59596cbd4365df8f0662bbdda4fdb1bdc00a775107dd55111dcbf3f13d848862e81b16d449bd9620339bb62514f5f72071ba613a9d755e21706e842a9920db374185a31a54ec9a4433b7c8389aa815ffc021289c5c97ec2cefc566f52ea1f2dc4a3ed3f6a484ddd6fa58b26df7d02eaaaadeea6f88a9d3716518dff24e893fa4f34d0f20386e260ac823f60874fb6628a4ad5828d181d5781ab95bd85f68325802878ca3cf20ece6bebfa6789893622b61001846fb7396cb6008699ad7f4961b60f74ec95edb6addcd9af2b8b986dfabeed3502d9540527dc0493fb38ec296d28b5e97d99dcc2f5a010ea272232587492973407b97c87c3f6b55ac48ce3a7db61b208cfda3a92f838d51dc0034b3b64ea1c8971650be15d3cf2516c99b903a5f808d9f25edd2a8cbe94f8183733d7da04e90701ed17780aca49ea64d775a379b25e68b071c9027fe6844288d4c2574fcce63d152a7c1e7e024a24d468b612dbe514b40fee49e0f0b0fc353f985276f4cfd2900d4ad4de0a2423a69ddf4a6d07e86d6b5eb75e3067828f1c1e197b50ebd651b1c18009b8345c843b4a47eb22e1d2a54372ab89521ba499cd0e17807d6d95d70447991289cb69e94fc46e340d2c924500b0cb9f94dfd82322ea30b479a0603c8a754c2815ccd99e6be98311b23af3eec6a610fd71be5c67296f679fa7ac258a569f847ded927ac7bd78707bd9c0a287bc393fe71fb2b876134dc6e217ab32e92989955fa720ffbbcd5b1ea4e164a4410819b006ff0c85eb9e7efb874e92247363a200dad4c6396f1eade9739d19373ffc1c27b2f869ea181fbfcf0b2c0bcca6fcf1aa5fdc7ed544aa0da452fe2ce553b2114b88650ed42e07ff2443c1eeec8c99c48dc39b02dd702b4917e0d89586713fd4991436e133df95f7dd3ecc74139e8115260d30477e7ac1b5b0173ec4f42093670049bdfb6fc907b4e4d94b2ee3f53f193c2a4c1107fb091fe826ae320173166e9fe6efe970f5001f41612ea7ca80ec093b68d6bb21662257c2d4bec8d5313e9e0c2e88b24f190ef33949844c85c96143ce3e44f369f224af55fac527d49e549381934c597e752f36f1a6ae9fe0a40c1bf06953d5b34f0fb0bd0053cdaaa7d5bf674c0d73fa9ed758f37cafa051e943e17dc52edb0129e6c76b24e477580de0fd8ed3c084d7238640d031f82fb07b37b588bf86ef1f44ecac9366e69dcdd576c73c4d480553e314bd58dfc7e8396ec5172d3ce591f1359a91b827f9b9e7b67ef8a1a8404997c588528cefcaed8e9d832cec112f013b1e447d6d80a87ec28c5f02de387d26cbb0f396781766fbbb3145cdd31eb7b04594ad707af7a52043a8051d531d1afd1d3d2a91726f2b6e14a18051436de1140d1782ef59be79071535dfa3576bc0693a3d844bd323b0851a96f2cea7b452d5368a5346ee5c3b56f1c94c1ccd1049e99d26f04c3fc3585b0ed8e5eda61b6ea642ce399d7afec330d4f154d7bb85493c08e629406536b0c40a252d11d77d18e71266886a6ab5b7938f189f64deef737b322a995e6702c11a01bead757b7c764b4c849bf6bcba02aaa76ca477aca8624f653282a39eab022986e76f0c26d37e37b1214e23623a447c294188752e1c497b8d8fb48628f6ca1e3d5b688fc3866e79a8b66371d61a08f21d7aa9aaefe48b09295ace0378998c7525cf8e0952aaa7526b75cea7f966344c4f6d529146481d9bee5d83c1b44ce681acdd6c92d0fe1fe87d387642824af4b1df548629757a5f14e3a31f601e16228ca5964b05b097a34ed3fbf3345301e8b4b5be0e030855bfc2ae4e4f4820297b2f5c20d27837193151d49646e872de0569ce253775c495f4ef9b52dd8b0e99a69db1b0fa903082307a922b4dfc15140f85f548c32930603f67f01169b1a3eef23d6ce06c5d9313e2dd7d66d9ef492c3a95a856423f18b7c5e4b07bcb9d9d5b49f35eb38894d0f07e258e64e34fb3e278acd15c96c658245768d6987a31a011da96656d33063a4ce74a9574571fbb0d7e122c1e48e753940b459d3ef743a3de39b96d5520225a66d39a4e05f7616a6f274a5a9c86ba46aab00b4570331787b14e7dbb04847fce2bea1ec188ff3bf9be06ce481bc61e3b1137b7bdf59af3224d28834f5271723aa48b8a3338108ce0c694f518f4a9293e2dbe7effd7926b5bb9fda3f5fb7be111b015f5574bceba3fc549bec7514e359542064e8f0f37b9479e3c1a0b5e867ae3b5aa02072e32373977a0bbc3916441fc00fb7ab81677111fd5a92a2cf8076aed934565e25368480ddf45e3f6b8fd397ded0d7ff46db309a2a177396e9e43e84a876e08b2fa19369c609c1ee4b38b342a2a2c871bb7a5588664a682d1fe7e7e43610b79df5ef2e4e757b559aef4d201e5bdc829752ec2be227c277fc0c993c453d9ef57da3925b3fdb688e12611ccccdacca648dcd0b9860c6c88be21b9a8bd9db4d2712c83a3a551cc2d67cf3379a28c0797679e860f1832b3cc3429a09b9994a99ae07e2167711d2b4f45fde90d5166b5ada4d5014b99167d4bbab496fdfbd3e58029f4ce8f8bd190064d01488cb2292f4c0452eb0d82f71656e69c33e42f23b53a83870551ba044c401b6e8177fbf532da9da5168e505d5c0446521e9714e9af4fdf76ab5aca23088a5ed82afb1fb0ad65e3b4219b886188fe9204d9313442af3ee2064b5625e7b80b456ea604188e3f66f95b807517d032fe5ddfdf43cbc66aa4cea259a3ca7c85faabdb9527beee72d90b8b390096d3d985224a1b527525c88b45905f1e1bda5d01dfc61308bc7c29ceafd395d6c30f37a9d794aea6adcd48f234adb0207d7885195a1ac88ff0d1f52db91996c543b72c6282d4f239b3ff63523cebe595ca25a0d5f8527297ff2dafff381f75651b4f46e4bcab1e1b67c83a5ffbbacc62b5f84db796474b41449683e0c59a37d6074d200db14195b85aee133e1d8d4226f730fde49f0262422f406b7ce879120873f73ccf9f6de003a29070bd1dd5c5937f26e2511d4afb37c542982e4fb70916a68420bc705a440c0ccfd6a2bd3f72ebdb5dbb47b5f3530ec67658fdcde13df49dc423c21693e520f7ce28316e279dc7be8f80feb1ef34214fccb1d55ce5297ac39015a027a3d300154223e8bb6ef3711e7619cd8bdb4744c05223488fa34368c0bd4196706e1a0b4333da2271a9ecdc6323ab468e8b2fd2d0d7f9c00dec5318a6e22f07fb588946c361ed6efd080c8bac9b6c861187a7042f71c79cd76ba"}}) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r6, 0x84, 0x5, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e23, @loopback}}}, 0x84) close_range(r2, r6, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), r4) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000000)=0x8) sendmsg$DEVLINK_CMD_TRAP_GET(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)={0x33, r7, 0x1, 0x0, 0x25dfdbfb, {0x27}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x51}}]}, 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) (async) sendmsg$DEVLINK_CMD_TRAP_GET(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)={0x33, r7, 0x1, 0x0, 0x25dfdbfb, {0x27}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x51}}]}, 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7, 0x0, 0x0, 0x4000}) sendmmsg$unix(r3, &(0x7f00000254c0), 0x0, 0x0) (async) sendmmsg$unix(r3, &(0x7f00000254c0), 0x0, 0x0) 4m54.175830922s ago: executing program 4 (id=749): r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141902) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) sendmsg$inet6(r2, &(0x7f0000000400)={&(0x7f0000000040)={0xa, 0x4e21, 0xfffffffb, @private1, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000100)="acb0d1cba8ea8dd8951bca8c4235cdec50f13ae4939e74410386e185df8a60c10ebbe5872b519481a29ba99f305826a80931a0da955f47327fac89687ca890285b8b69d10e6f025efaece96b3298415ca609e045ccc42fdf9a5a64d6797937a19d3ce055f9a5cc6bc5a378d1e20b315d60b3f131d2c375c263c9a2b9188b4dec1f38f2c4e8836b7a198cb15ce8b527f5c88fc6acfae83332dd13613088e02aaa1dd4186a", 0xa4}, {&(0x7f0000000300)="a020610c8d076cc36cdf0a4085e5327a4e0df386da24941f4859338a1e44e4c8295fb59de1fade79ca0f8b1f8c22d0038de96b34506f2a90cd04f8ba4b61cf470b7176dabdb2c52d412a6bc3302ab5d3e6301fdf04ea45c2e43152fc672bc97e0a48117d0baa2ea4fae0663f7efc5dfeabfda9c432ee7863bd9a7a07298fad8c6cfc997682cf8def95fafce8472393cce82653a31b21bdf2955b26bc80c804ef60fa5a4c", 0xa4}], 0x2}, 0x20000840) syz_io_uring_setup(0x564f, &(0x7f00000001c0)={0x0, 0x1fef, 0x1000, 0x801, 0x3c6}, &(0x7f0000000480), &(0x7f0000000500), &(0x7f0000000080)) close_range(r1, r1, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f0000000240)=""/128, &(0x7f0000000440)=0x80) 4m54.108274235s ago: executing program 4 (id=751): ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f00000000c0)={{0x1, 0x6, 0xcb18, 0x400, 'syz1\x00', 0x4}, 0x0, 0x200, 0x6, r0, 0x0, 0xdd2, 'syz0\x00', &(0x7f0000000080)}) capset(&(0x7f0000000200)={0x20071026, r0}, &(0x7f0000000240)={0x2, 0x8, 0x4, 0x3, 0x7fff, 0x1}) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$XFS_IOC_ERROR_INJECTION(r1, 0x40085874, &(0x7f0000000280)={0xffffffffffffffff, 0x7}) close_range(r1, r1, 0x0) r2 = signalfd4(r1, &(0x7f00000002c0)={[0x1, 0x4]}, 0x8, 0x80800) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), r2) ioctl$RTC_IRQP_SET(r2, 0x4004700c, 0x517) r3 = openat$nci(0xffffff9c, &(0x7f0000000340), 0x2, 0x0) mknod(&(0x7f0000000380)='./file0\x00', 0x400, 0x0) r4 = dup2(r2, r1) bind$bt_hci(r4, &(0x7f00000003c0)={0x1f, 0x4, 0x1}, 0x6) r5 = msgget(0x0, 0x8) r6 = geteuid() lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000004c0)={0x0, 0x0, 0x0}, &(0x7f0000000500)=0xc) msgctl$IPC_SET(r5, 0x1, &(0x7f0000000540)={{0x0, r6, 0xee01, r7, r8, 0x17a, 0x9}, 0x0, 0x0, 0xa, 0x4, 0x8, 0x5, 0xffffff1b, 0x3, 0xa, 0x5, r0, r0}) ioctl$FBIOGET_CON2FBMAP(r2, 0x460f, &(0x7f00000005c0)={0x30}) write$P9_RRENAMEAT(r2, &(0x7f0000000600)={0x7, 0x4b, 0x1}, 0x7) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r4, 0x40106e80, &(0x7f0000000640)={0x1, 0x1}) msgctl$IPC_RMID(r5, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f0000000680)={0x7, 0x3, 0x3, 0x3, 0x6, 0x5, 0xa}) r9 = syz_open_dev$evdev(&(0x7f00000006c0), 0x7ff, 0x400000) ioctl$EVIOCSMASK(r9, 0x40104593, &(0x7f0000000800)={0x5, 0xf8, &(0x7f0000000700)="1f799e4a775388f8ed3fd389a4e2af6d0ff6927612ce4ad2a4cc2b845626ff87c78cd5274f798b7afe2b7b256392049ab8497d2ad4c4e94b914c598140217193104fe91fba2204ce0ffea17677d3a20d290dbe252b9dac6b26be75288425acb46d7e051d1082d67c333dd8e72b9e20b1b53d6048e3e529e825ff994be6662b9c06f7624f5e862ad33e80cc8862e55889430a2522d022fa7ed09c5969db38fe71de8e7117759b7607e46ab9727c4dac8740cd45928e76799966ea38e30cff68d8c75ba58dfc64d54f8e4b0112ab9841c4cf96ff392b3efc794626126f68db287f7a68d3d23bb4614ac5e9bb2b7ee074f22aa585cb08a114ac"}) fcntl$setsig(r3, 0xa, 0x37) sched_setscheduler(r0, 0x2, &(0x7f0000000840)=0xadc9) mount$9p_fd(0x0, &(0x7f0000000880)='./file0\x00', &(0x7f00000008c0), 0x484a, &(0x7f0000000900)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'l2tp\x00'}}, {@cache_none}, {@dfltgid={'dfltgid', 0x3d, r8}}, {@access_any}, {@cache_none}], [{@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@obj_role={'obj_role', 0x3d, '#\\&@,:'}}]}}) syz_genetlink_get_family_id$ipvs(&(0x7f00000009c0), r4) capset(&(0x7f0000000a00)={0x20080522}, &(0x7f0000000a40)={0x3, 0xfffffffa, 0x5, 0x0, 0xfffffffd}) 4m53.796266786s ago: executing program 4 (id=752): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) 4m53.731085844s ago: executing program 4 (id=754): r0 = syz_open_dev$loop(&(0x7f0000000080), 0x100d, 0xde8bef52389a5434) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2183}}, './file0\x00'}) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000280)={r1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000000000000004, 0x0, 0x1, 0x12, 0x14, "996a78edc5cac93c3e473f65d9eb5297f0ca82d56dcddb164e29606b4f2cf0b60d9b92b3cf1597f6b7ff9c4fbf4326f66eccdbf05411d4a42e798491c54e3e6f", "3c54d63cef61aa187f941933694c882f4835e79819ddc15edb9ca42b19129e446327fbe58f617cc4617f5347a395cacecf34365db4d55dace1d4e9d56e6fa42e", "fd0000e7744b74eaa231162b99d847fb00", [0x1, 0x4]}}) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c00"/26], 0x1c}], 0x57, 0x0, 0x0, 0x4000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x2f, 0x800000000004, @tid=r4}, 0x0) fcntl$lock(r3, 0x25, &(0x7f0000000000)={0x0, 0x4, 0x8, 0x20000000}) fcntl$lock(r3, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) fcntl$lock(r3, 0x7, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f0000000180)) fcntl$lock(r3, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0x8, 0x73e9}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r6 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) r7 = fsmount(r6, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1df) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r8, 0x40104d02, &(0x7f0000000140)="8c29ac") r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000340)=@o_path={&(0x7f0000000300)='./file0\x00', r9, 0x4000, r7}, 0x18) 4m53.460497478s ago: executing program 4 (id=755): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x2a}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000780)) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0500000004000000020000000700000000000000", @ANYRES32=0x0], 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={0xffffffffffffffff, r4}, 0xc) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mkdir(&(0x7f0000000240)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r5, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 4m51.877963087s ago: executing program 4 (id=760): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0x0, 0x7fff2000}]}) pipe(&(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) pipe(&(0x7f0000000000)) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x20001, 0xcb) syz_open_procfs(0x0, &(0x7f0000001180)='mountinfo\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0x33, &(0x7f0000000040)=0x8001, 0x4) listen(r3, 0x198) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000080)=ANY=[@ANYRES16=r2], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r4, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_dev$ndb(&(0x7f0000000200), 0x0, 0x100) fsetxattr$trusted_overlay_origin(r6, &(0x7f0000000280), 0x0, 0x0, 0x1) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f00000000c0)) ioctl$TIOCL_GETKMSGREDIRECT(r5, 0x541c, &(0x7f0000000000)) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a010400000000000000000200ffff48000480440001800b000100657874686472000034000280050002009400000008000340000000f5080004400000000108000639f1ef2802080001400000001308000540000000010900010073797a30000000000900020073797a32"], 0x9c}}, 0x0) 4m51.77639693s ago: executing program 33 (id=760): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0x0, 0x7fff2000}]}) pipe(&(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) pipe(&(0x7f0000000000)) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x20001, 0xcb) syz_open_procfs(0x0, &(0x7f0000001180)='mountinfo\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0x33, &(0x7f0000000040)=0x8001, 0x4) listen(r3, 0x198) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000080)=ANY=[@ANYRES16=r2], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r4, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_dev$ndb(&(0x7f0000000200), 0x0, 0x100) fsetxattr$trusted_overlay_origin(r6, &(0x7f0000000280), 0x0, 0x0, 0x1) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f00000000c0)) ioctl$TIOCL_GETKMSGREDIRECT(r5, 0x541c, &(0x7f0000000000)) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a010400000000000000000200ffff48000480440001800b000100657874686472000034000280050002009400000008000340000000f5080004400000000108000639f1ef2802080001400000001308000540000000010900010073797a30000000000900020073797a32"], 0x9c}}, 0x0) 4m34.190542264s ago: executing program 5 (id=881): syz_usb_connect(0xb, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000097ff82085820021200010000000009048f0000bf575a00"/36], 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xf, 0x204031, 0xffffffffffffffff, 0x2d5c000) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) io_uring_setup(0x476d, &(0x7f0000000040)={0x0, 0x96c, 0x1, 0x0, 0x2309}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0xb, 0x2) r1 = socket(0x40000000015, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x0, 0x96, 0x0, 0x1}, 0x28) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x7f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) chdir(0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r4, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt(r1, 0x200000000114, 0x271c, &(0x7f0000000580)=""/102393, 0x0) ioctl$USBDEVFS_FORBID_SUSPEND(r0, 0x5521) close(r0) unshare(0x26020480) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r5 = fsopen(&(0x7f0000000240)='exfat\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r5, 0x2, &(0x7f0000000040)='utf8', &(0x7f00000000c0)="6f57ff3ce6f97a00016925c4ef2165a6", 0x10) 4m33.343968505s ago: executing program 5 (id=883): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) openat$rfkill(0xffffffffffffff9c, 0x0, 0x40002, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ffff200000000001000aac14140ce000006a49e832f0", 0x0, 0x28a, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) recvfrom$inet_nvme(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000008500000a20000000000a01030000000034000000070000000900010073797a300000000088000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000002f4400128014000180090001006c6173740000000004000280200001800e000100636f6e6e6c696d69740000000c00028008000140000000060c000180080001006475700008000340000001"], 0xd0}}, 0x804) syz_init_net_socket$x25(0x9, 0x5, 0x0) 4m33.193821395s ago: executing program 5 (id=884): setns(0xc9, 0x0) r0 = openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat(r0, &(0x7f0000001040)='net/atm/devices\x00', 0x0, 0x0) read(r1, &(0x7f0000001080)=""/4096, 0x1000) 4m33.137966954s ago: executing program 5 (id=885): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@timestamping={{0x10, 0x1, 0x25, 0x4}}], 0x10}}], 0x1, 0x0) (fail_nth: 4) 4m33.058979057s ago: executing program 5 (id=886): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001d00010000000000000000000a001000c3"], 0x1c}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r2, 0x4068aea3, &(0x7f0000000340)={0x80, 0x0, 0x7fffffffffffffff}) r3 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0x2, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r5, {0xb, 0x9}, {0xfff2, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x1c, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x9}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x6}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x3}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {}, {}, {0xa, 0xfff2}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffff1b65}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4040) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff\xff2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\x10\xf7\xb2\xed\x8a\xdc\xa6\x8fO\xc8\xbay,\xae\xd3\xc5*\x15\xdf_\xb2_`\x92', 0x0) 4m32.46186939s ago: executing program 5 (id=891): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94) r2 = syz_open_dev$vbi(&(0x7f0000000540), 0x3, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc0f8565c, &(0x7f0000000040)={0x10000077, 0x401, 0x2, {0x5, @win={{0x5, 0x6b, 0x7}, 0x7, 0x456, &(0x7f0000000280)={{0x8, 0xab, 0x8, 0x7}}, 0x8, 0x0, 0x40}}, 0x1}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000700850000002d"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e074f0220"], 0xa) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) write(r0, &(0x7f0000000400)='transport=loop,nqn=testsubsys,disable_sqflow', 0x2c) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000200), 0x0, 0x1, 0xffffffffffffffac, 0x0, r5}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000001500)={0x2020}, 0xfffffe23) 4m15.784600358s ago: executing program 34 (id=891): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94) r2 = syz_open_dev$vbi(&(0x7f0000000540), 0x3, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc0f8565c, &(0x7f0000000040)={0x10000077, 0x401, 0x2, {0x5, @win={{0x5, 0x6b, 0x7}, 0x7, 0x456, &(0x7f0000000280)={{0x8, 0xab, 0x8, 0x7}}, 0x8, 0x0, 0x40}}, 0x1}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000700850000002d"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e074f0220"], 0xa) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) write(r0, &(0x7f0000000400)='transport=loop,nqn=testsubsys,disable_sqflow', 0x2c) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000200), 0x0, 0x1, 0xffffffffffffffac, 0x0, r5}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000001500)={0x2020}, 0xfffffe23) 7.379902185s ago: executing program 2 (id=2324): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000540)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fee000/0x12000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000fea000/0x7000)=nil, 0x0}, 0x68) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/uac2.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000000480)='usbip-vudc.0', 0xc) write(r1, &(0x7f00000004c0)='\n', 0x1) (fail_nth: 1) 7.288093398s ago: executing program 2 (id=2325): setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0xffffffff, 0x0, 0x3a5d, 0x18}) sched_setscheduler(r0, 0x1, &(0x7f0000000140)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='127.0.0.1:/\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt\x00', 0x1ff) mount(&(0x7f0000001100)=@filename='127.0.0.1:/\x00', &(0x7f0000001000)='./mnt\x00', &(0x7f0000001200)='nfs\x00', 0x0, &(0x7f0000001300)='nolock,v3,addr=127.0.0.1\x00') socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) fchownat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/cgroup.procs\x00', 0xee01, 0x0, 0x400) 5.63885233s ago: executing program 1 (id=2331): syz_usb_connect(0x2, 0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000094d9d4084e080110aeed010203010902220001000000000904000001437b6a00", @ANYRES16], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000200), 0x107c00) 5.414630151s ago: executing program 2 (id=2332): mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='jffs2\x00', 0x180c090, &(0x7f00000001c0)='\b') mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./myconfig\x00', 0x1ff) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000004c0)=ANY=[@ANYRES8=r0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f00000005c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000002e80)=[{{&(0x7f0000001b40)=@qipcrtr, 0x80, &(0x7f0000000700)=[{&(0x7f00000006c0)=""/17, 0x11}], 0x1, &(0x7f0000000740)=""/226, 0xe2}, 0x9}, {{&(0x7f0000000900)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4}}}, 0x80, &(0x7f0000001980)=[{&(0x7f0000002f80)=""/4101, 0x1005}], 0x1, &(0x7f00000019c0)=""/166, 0xa6}}, {{0x0, 0x0, &(0x7f0000001b80)}, 0x8}, {{&(0x7f0000001bc0)=@x25, 0x80, &(0x7f0000001f00)=[{&(0x7f0000001c40)=""/96, 0x60}, {&(0x7f0000001cc0)=""/153, 0x99}, {&(0x7f0000000640)=""/82, 0x52}, {&(0x7f0000001e00)=""/196, 0xc4}], 0x4, &(0x7f0000001f40)=""/153, 0x99}, 0x8}, {{&(0x7f0000002000)=@caif=@util, 0x80, &(0x7f0000002140)=[{&(0x7f0000000540)=""/22, 0x16}, {&(0x7f0000000440)=""/99, 0x63}], 0x2}}, {{&(0x7f0000002180)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000002840)=[{&(0x7f0000000980)=""/238, 0xee}, {&(0x7f0000002300)=""/127, 0x7f}, {&(0x7f0000002380)=""/184, 0xb8}, {&(0x7f0000002480)=""/95, 0x5f}, {&(0x7f00000025c0)=""/209, 0xd1}, {&(0x7f0000001a80)=""/166, 0xa6}, {&(0x7f0000002780)=""/127, 0x7f}], 0x7, &(0x7f0000002880)=""/159, 0x9f}}, {{&(0x7f0000002940)=@un=@abs, 0x80, &(0x7f0000002b80)=[{&(0x7f00000029c0)=""/152, 0x98}, {&(0x7f0000002a80)=""/6, 0x6}, {&(0x7f0000002ac0)=""/152, 0x98}], 0x3, &(0x7f0000002bc0)=""/144, 0x90}, 0xfffffff8}, {{&(0x7f0000002c80)=@nl=@unspec, 0x80, &(0x7f0000002d80)=[{&(0x7f0000002d00)=""/125, 0x7d}], 0x1, &(0x7f0000002dc0)=""/155, 0x9b}, 0xffff556b}], 0x8, 0x2, 0x0) r6 = creat(&(0x7f0000000000)='./file0\x00', 0xc9a9c042ad77c5e5) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x0) close(r6) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000400)=0x110, 0xfffffffffffffc9c) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="3d52f5f00400ebaf83fad7ad60c700", @ANYRES32=r1, @ANYRES32=r2, @ANYRESDEC=r2], 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt(r7, 0x111, 0x3, 0x0, &(0x7f0000000080)) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000380)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x810) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, 0x0) r8 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f00000003c0)=@delchain={0x2c, 0x65, 0x200, 0x70bd2a, 0x25dffbfd, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xfff1}, {0x9, 0xfff1}, {0xfff1, 0xe}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x3}}]}, 0x2c}}, 0x0) add_key$keyring(&(0x7f0000000340), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) 5.266651817s ago: executing program 6 (id=2334): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="08001b0000000000"], 0x30}}, 0x0) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000080), &(0x7f00000000c0)=0x30) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000001c0)={r1, r1, 0x5, 0xdb, &(0x7f00000000c0)="a604083cd3453741f80e02ff9a0174b628252c0f2422d46dd23159206ed7b5cd96a81831d81cf708e9d87543aab4629dcaf332e71705ffa3bac5bdd9cc21cfb3a7490fd102647a5436567966108f6738f5eb0b7a9c1d0c28352b8cd3e4594a8f901f1b6d3d5e503316c79e725015a1f790778028af176cf93464ed8b8d502f2699017a89be45a99183b9b849b9cd2da97992d113bc5d9ca60a1c8cf029c3056571b452631f1e35fa828594a1f9cf98b37836e47dd23e648e1b3e1b3017a427a7687d7f7b1fd4a502e70e0c0a085b909e7c65108447068e33b8139a", 0x6f, 0xa, 0xff61, 0x1, 0x1, 0x0, 0x1, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000780)={0x0, &(0x7f0000000500)}) 5.217834601s ago: executing program 6 (id=2335): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0e0000000400"], 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000780)) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0500000004000000020000000700000000000000", @ANYRES32=0x0], 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={0xffffffffffffffff, r0}, 0xc) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 5.216428952s ago: executing program 2 (id=2336): r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='0.0.0.0:0:/\x00', 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000019080)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x8a, &(0x7f00000190c0)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=r0, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRES64=r0, @ANYRESHEX, @ANYRES16=r0, @ANYRESOCT], 0x0) readv(r1, &(0x7f0000004000)=[{&(0x7f0000002f80)=""/4096, 0x1000}], 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r7, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000013000100"/20, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00\x00', @ANYRES32=r6, @ANYBLOB], 0x28}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/net/bridge0/bridge/multicast_igmp_version\x00', 0x1, 0x0) write(r8, &(0x7f0000000340)='3', 0x1) syz_emit_ethernet(0x3a, &(0x7f0000019180)=ANY=[@ANYBLOB="01005e00001600112233445508004600002c01004000018f940000a8010ae0000016940410002200020000eaf3d4ca70f9abead11266864003557a0211c8de2a49b7e02b4f84914008196a71ec6adb76cad3056b2cf4b400617958c3783e7da07aadc1b57654449ea9bb83d4e47220c2267401ad3d2598a728e90919a44126eea1ccfa58cb44c88a14c05deac94707d73d141ca07ae17a9cab026c33481badb0d55d2d3a31d1b08f2344bde159fd9688dd2ea3693ade4434828cd04cde23d913352e7d5c78602ee5158e22436d5f7c97fc8bec03b5462bd76a9a70c61b472ce0f8b7", @ANYRESHEX=r2], 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000700)=ANY=[@ANYBLOB="01005e00001600112233445508004600002c0000400001024303c0a8010ae0000016940400002200ddf90000000106000001ef0101010a000001"], 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) r9 = openat$cgroup_freezer_state(r2, &(0x7f00000002c0), 0x2, 0x0) sendfile(r9, r9, 0x0, 0x8000002) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='mount_timeout\x00', &(0x7f0000000180)='1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 4.909763843s ago: executing program 6 (id=2337): r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='0.0.0.0:0:/\x00', 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000019080)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x8a, &(0x7f00000190c0)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=r0, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRES64=r0, @ANYRESHEX, @ANYRES16=r0, @ANYRESOCT], 0x0) readv(r1, &(0x7f0000004000)=[{&(0x7f0000002f80)=""/4096, 0x1000}], 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r7, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000013000100"/20, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00\x00', @ANYRES32=r6, @ANYBLOB], 0x28}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/net/bridge0/bridge/multicast_igmp_version\x00', 0x1, 0x0) write(r8, &(0x7f0000000340)='3', 0x1) syz_emit_ethernet(0x3a, &(0x7f0000019180)=ANY=[@ANYBLOB="01005e00001600112233445508004600002c01004000018f940000a8010ae0000016940410002200020000eaf3d4ca70f9abead11266864003557a0211c8de2a49b7e02b4f84914008196a71ec6adb76cad3056b2cf4b400617958c3783e7da07aadc1b57654449ea9bb83d4e47220c2267401ad3d2598a728e90919a44126eea1ccfa58cb44c88a14c05deac94707d73d141ca07ae17a9cab026c33481badb0d55d2d3a31d1b08f2344bde159fd9688dd2ea3693ade4434828cd04cde23d913352e7d5c78602ee5158e22436d5f7c97fc8bec03b5462bd76a9a70c61b472ce0f8b7", @ANYRESHEX=r2], 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000700)=ANY=[@ANYBLOB="01005e00001600112233445508004600002c0000400001024303c0a8010ae0000016940400002200ddf90000000106000001ef0101010a000001"], 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) r9 = openat$cgroup_freezer_state(r2, &(0x7f00000002c0), 0x2, 0x0) sendfile(r9, r9, 0x0, 0x8000002) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='mount_timeout\x00', &(0x7f0000000180)='1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 4.382829203s ago: executing program 0 (id=2339): openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$ptmx(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) close(0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x8102) writev(r0, &(0x7f0000000080)=[{&(0x7f00000001c0)="47ad3d32240000000000000080f7c342cc2c008d3ec3c2d2d5bbf6a4e41419ec3dc11a4f851a0084665ea561e52d97fbe9e829a0", 0x34}], 0x1) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0x0, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, r6, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000007, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x80000, 0xfffffffe, 0x146, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x0, 0x0, 0x1f0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7f0d, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r5, '\x00', {0xfffd, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 4.382172981s ago: executing program 0 (id=2340): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x80000001, @empty, 0x2}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x5, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000500)="88", 0x1}], 0x1}, 0x0) write$P9_RSETATTR(r1, &(0x7f0000000100)={0x7, 0x1b, 0x2}, 0x7) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x1}}, 0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106, 0xb}}, 0x20) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000740)={0x0, @in6={{0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, '\x00', 0x17}, 0x3}}}, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0x4, @empty, 0x6}}, 0x0, 0x9, 0xffff1896, 0x104, 0x25, 0x7fff, 0x9}, 0x9c) 4.291974576s ago: executing program 1 (id=2341): openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) ptrace(0x10, 0x0) ptrace$setregs(0xd, 0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0xabd7, 0x0) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f0000000140)={0x11}) close(0x3) 3.991480633s ago: executing program 0 (id=2342): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) close(0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x8031, 0xffffffffffffffff, 0xffffd000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x20040, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110c230007) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="b702000024000000bfa30000000000000703000000feffff7a0af0fff8bffffd79a4f0ff00000000b7060000ffffffff2d640500000000006502040001001f000404000001007d60b7030000000000006a0a00fefdff00008500000026000000b7000000000000009500000000000000c743a0c8e3ebbadc20e5a7efcc9ac1467fb2ea80dbcf8df265e1b40e4c8afd5c0c000000008da68076774bbcdb2c769937000090af27db5b56024db96bcbbbd2cb2000ce03000000000000007e357754508535766c80114604a86fe569b05614eab9297eb290a248a120c9c6e39f403ff065fd3052aae80675eeba68562eaeaea5fecf298ca20f274233106eab63ecf772de7b265040b6c50b7420b48a93fe94c756108afcd0b2eb78040000005f02a5a6474ae549070004000000001294fba0ed5020e6474ac921fee1f6d8ad6a80c0947cd6d4a561ced21a0b4a902be6af7ec2d1ba002e57f301000000000000000000000000100000aaf25343063e6581f9e6de14ad72e5ad84309f47f96a576cd20cef7ed951a73ea73d7c7f14e306f1f1d1377e57abb1af00f0077e9d0000b93eb0f2c6f8141e350dc68147e5958128d22d586270f9dba211bfff9c3709c9b134625d3d2369f516a49eeeb1a662c8dfb875bdf5c6ba73cccdfacb202994c40d322717faff03323dce8a34ee0ca2cf61efb4b30000642735d6d482ba98d252f36c54333aab1aa736369392b9067665339820f5f1557b0bf7cc06a5a13c714e0b1a1f000000ff3283076cda3d0b1a2905cfc3d04f1db264b530abcbe44bc405f600807970727fb819afa1907228fa9e83433eedb4ac88d0285594ffb0d14c09d5c77f33702822b02488ea570204c8441ced81cacf945dcb2486c9e3600e916ae6307bd8325a442095bc9a8b0c95905979f34adddbb26f0d24425c8ab9d937d84b521914f92eed3d3e9de82942a952e86b567aff5bc2e3c1fcc00f618363df5d0d181ee8f4b8fd356c9eb365adc037e443820c05c5db16ff07a9cf471e2ebf91ab00a05f88c1cd55f8c81f5eb1f8d615ca27efb2193bb61665a1ce37f30c2efc9c3b5a4a5d95479fac471ba60fbd0e50225563cd37343d09da72472efc2b2877fbab12a891513e5f0763ae06c0610a2869747c143d75007606000000b2310e19ac58bf29d7f178d09a9f634a3ae492f54649589e3692768a0f3a082c5242c8fa7f01e0873c9c5c604108ad85950d8e08465fa1067ea8f383b3e7a7ddf5977d46f4bc38f914b4a496426d8468f9ba618b6b2218b50c8fc9efbce3ba799cf70de7e13be871aa7eb402e2b11f440361e18d4e334bfc6ae54e62e67a0338c756c544189e4519a029674e2a2bbbc7f6600000000000800000e5e30b70b198246d3a62660600000030a0af132e680510811d3ab71af5d98e2d3d928a749e8b9402d14655612bd58fb40b4625cb69bf6cea97b447f2d970d99100000000086000001b881afb2cc500003a73562af4878f75b4c98274eeb666aa1f5fcf91990cf0dcfef9540057b8a3fff2bc02c5941626d2015f414546e87835ba18e91017343e3dc6955fc6b9a25fe2a3dd8bab7f21beccba5493a164c663eceed401737c12c65804712236a9a29a43b1e27e9b6816f2328ea8423121f12b7b35aa721fef26934ccafde573bee5c33ef15309f43cbd5d61aa679a9c402d337ebf57a5eacb569401c1df7b9c45b09743c61d1db37f0000000000020000000000de00d23dd63b7761d7d6818db785d8ba13dc577fe61a68eb365de5661f43d4c789bb117a3d208ae44a38e7868dc32e132124ecf52327631b718b3157e218959156ff8e92b7e92bc275d2c9114547351a0d0f1370d13be0194b6cb68b03000000000000004f153bbc7f52861e4e5df0d19e4e40ac44cfda6f87807e5b5ed7072c04da88afd3d4b79f060e004a0e2f00b9e726ac75d2ac0691314c627e9a8a07bdd607919fd48f01ad6d2f7621d9a75b134f1bc25ed7c33d411a5baa4daa3add16afc502b2b7629541d722e91d631e5ffb9d4beb5aa5a2c4e490a5bd038c1817f0d4652a29353b05b16b3c5cf4538ba310b8cbc221af38ea842d4cb908bcd574f794459fd54b58c6a791e6df625a47bade4ba41ee014184395a479544619f749ff70088b0fd115077f7eff7c5a3315ca604d110df1c54407f191a78d8362e4dc6e1138391c2a65246779bb76c9f1daea4f085f38810edef6dd047937c231cba791a4e7713c5b3b0a0b6ba37db5016e02d114d714459d065a79609fea4efebad04eda001aac0e53dd094827453144fa419ee81823d00a90a9058ba740d2f4125377960604f521df5e325efe395a4e3b7ca8d01a8c1a7265a084e30ad10d412aee8170a7111d62473e7bd8f3d64fb7ebdd32aada331900000000000000000000000084ef49dd020000000000000000000000d9dcb285038ec38d5f4969ed0e98a71ac7bf8159a234833a5241722b2d24aa2fa4965d4eb7966fb27d118b6ef3308627e67d42f1041d5e92da28e0a7724ce715854775cbe06c5166f1dac0745f1373156a536cb6394c2c4473e2050cacf693fdf8e305080000001a901ecd90a5f53b8327a485557bc2a147b036477915e600000000034258ebbb6099b597d17ee2fc97ca850b8580b1337016a40566814594c13052b9d2b0741326825f19a244609ac04a0c29691a7c8f7a78c1a7590a293c561f304533c638ae635f5ce026f7fa034d8cfe0e11831d4829692beab26891ef583cfcb713a4d3a2d8b958c0875d7e4bdcf98802db086ebcbb9d82fa569a18f06facc2ffe1ea9ae4231e1e7a5dd7503faa2de7f898c97788c4b9c61c70ff92abdf7476cc351156d11c0ada7614f315f4c6cca119d16827d4e864f5a7a9b690272a510c451dc07f391309d02e31e53b2bf0b5f86e776b1bcfe6c85ccd7ddf8a9559d58bb5603895f265685f0400000000000000ccec1b0d45a47a89b8237cbbdab14e4ca6dc76b2c41e071b93a065c0f5aa718e1cfab29beea78a6bd9a3114f0f6f03160ec875b92be9a5862627b4bd99db2c08e4636e43f05f33535d5d1f9bb40e1fd8e5125a3d29b31dd94a6744bbc21722222b976089f073a4d3fcafc6d06518cf0c4fc6c8e3da0000000000000000000000007d3b60775243f2143d9f54804b11102cf0e4c641db1ba8bf75e46ab3a8fdece6562e7ebb3e407f3c7504dfa3da3aecbd49af3d1edeea11cc970416fadeedc8423bfdc85041ac4d8243a1130e6f4cb5bbfed9d095e18c98c7d690e4c491a7ddcd5635bc61dbed719ca28e8ca3f1fbbe588913ed057f1d6e34a79f4dc10df54d1993a5bc5f9ef6dbd339ee4b0b5764169f305e284ef82cc23e9366d4bc7eb45c7230b13433e5240657cb8eba33260147be8620b6d98cc48b000000000000000000000000c1ce872b18984f080100000000000000bd3fded92547d41809b398f36749083a147eb09ff1ed601bd36b873d3947fb223da647052528e0466cb917db7800f7c7000b593fca1903991cca1343882e3a1f60044f11c081dae4fc5bcf20efacdd2c577f4bcda2eea6f75a31dc90eebb6135b6fb824052181b0ad8a49ebf03ccf61d7e39bf6b0762d24d19796016301d1415b5110ba9df7f204aedb2a2e4e621c0553d312b309db67192f98ef7800000d629c04e216afc8fc66616bbf304e452373aa927c2ad6f5417f1b9bc322b802c1c42112a92a331cdc113b9ace3ff52ede7a853f9a89002ba070bac2f635a03db3375e5564f1a798bf9c0f8c72725d2eca9b0ec7e453d78ea20eca61530fe574299b393ca144adcb06108dfbb934065a87972739150a8752ac111c4d9062ccb95c54034fbdee131d94dfbaab1854d55665746fb7b47d25e54070b0d14c0a29c57bc4930075e1761913b036d43852c6df9f10e15105b2a18668298a3577943514db0dce953dcec62139ff3f16066efec5d8cbc0600000000007289be5883aab951ea67cf2ff691d05c1ea91dd569ed9897fe8d88a0a6977dc8955be17e8026aff11c61fa5cc76196c14233d597345253baa1537eb6962a3ce1fe5d5ab46938e8fb23fa7047bc59c4345e912585a9adb5fe2ff51b64a326321b594e3f2d339f4090bdae6b30b62064bacbc155d3c930576f506b093ca7c60957bdfdd6536baaa871cf6a603c736b78761e6463b8ac503e219cc3d98f649602ad24d5667368290ee926fba76ee482a201a03efece3b236f4ee2ffcd5d90d92a2f0c5cb2791add8279c491fa48c87f27c2f1e92988a6508c12f6b7755cc48eb10edafca92cb0260c72295a27a24846d3a2334bd60e94c0fd07e5db0a4964a7fc4e89f11a300510776934e87bb3c21394f46954a012b2a3b0760f1bad1dbd6b466e0000000000000000008e5f9004e01fe2b177c5f443d09de4ba8f72d534405f9e7807c864bbca5893376420e38cf47a3660a2ab17b20baa271aa9eaffc19b50f291f51a7cc935023382bd80d7bca313636f3aaa6b788b233097bd545d9bf9715fbf"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe7d}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000004c0)='\x00'/14, 0x0, 0x6500, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETOFFLOAD(r4, 0x4004743d, 0x110e22fff6) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000002f00090025bd7000000000000400000008000800020000000b001f402a7b26217b7d0000"], 0x28}, 0x1, 0x0, 0x0, 0x42014}, 0x4080040) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x44) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, 0x0, 0x4040000) sendmsg$NFT_BATCH(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24004080) 3.99130355s ago: executing program 1 (id=2343): symlinkat(&(0x7f0000000100)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x5d480, &(0x7f0000000440)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@index_on}, {@workdir={'workdir', 0x3d, './file2'}}], [{@smackfsdef={'smackfsdef', 0x3d, '{*\'\xa9'}}, {@obj_role={'obj_role', 0x3d, '#-]'}}]}) r0 = syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x0) ioctl$FE_GET_FRONTEND(r0, 0x80246f4d, &(0x7f0000000000)) chdir(&(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/ncm.usb0\x00') mkdirat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x1ac) r1 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x22000003, @local, 0x4}, 0x1c) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f00000006c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config\x00', 0x1c0) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1c0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) close(r2) r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000ac0)="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", 0x120) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/ncm.usb0\x00', 0x1c0) symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/configs/c.1/../../functions/ncm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/ncm.usb0\x00') write(r2, 0x0, 0x0) close(0xffffffffffffffff) write(0xffffffffffffffff, &(0x7f0000000500)='0x40\n\x00', 0x5) close(0xffffffffffffffff) write(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) symlinkat(&(0x7f00000005c0)='./config/usb_gadget/g1/os_desc/../configs/c.1\x00', 0xffffffffffffffff, &(0x7f0000000280)='./config/usb_gadget/g1/os_desc/../configs/c.1\x00') openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/ncm.usb0/os_desc/interface.ncm/compatible_id\x00', 0x1, 0x0) 3.981155367s ago: executing program 1 (id=2344): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.empty_time\x00', 0x26e1, 0x0) close(0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000009, 0x200000005c832, 0xffffffffffffffff, 0x0) write$UHID_INPUT(r0, 0x0, 0x0) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000001780)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x3, 0xc0, 0xa4, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x3a, {{0x5}, {0x5, 0x24, 0x0, 0xa}, {0xd, 0x24, 0xf, 0x1, 0x200, 0xd, 0xffff, 0x5c}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x5, 0x4, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x4a, 0x3, 0x9}}}}}]}}]}}, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0}) 3.430867032s ago: executing program 0 (id=2345): r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x3}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0) (async) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x900, 0x0) (async) syz_emit_vhci(&(0x7f0000002900)=ANY=[@ANYBLOB="043e0c04"], 0xf) (async) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e"], 0x22) (async) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) (async) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') openat(r2, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) getitimer(0x1, &(0x7f00000000c0)) (async) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r3, 0xc00464af, &(0x7f0000000440)) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x4) (async) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x10000) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x1, 0x0, &(0x7f00000000c0), &(0x7f0000001100)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.921266119s ago: executing program 0 (id=2346): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) socket$kcm(0x11, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000200), 0x20000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0100000042000000060000000800000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0c00000004000000040000000180000000000000", @ANYRES32=r6, @ANYBLOB="0004000000000000000000000000f59cdd2ce4380000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) r9 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000001180)) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r7}, 0x38) socket$inet6_sctp(0xa, 0x1, 0x84) r10 = socket$packet(0x11, 0x2, 0x300) r11 = syz_genetlink_get_family_id$smc(&(0x7f0000000480), r1) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x74, r11, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x8880}, 0x24004845) setsockopt$packet_int(r10, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) 1.920157557s ago: executing program 2 (id=2347): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001740)=@newtfilter={0x23a4, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xa}, {0x6, 0xfff3}, {0x2, 0xa}}, [@filter_kind_options=@f_fw={{0x7}, {0x2378, 0x2, [@TCA_FW_ACT={0x2374, 0x4, [@m_connmark={0x164, 0x6, 0x0, 0x0, {{0xd}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3ff, 0xffff, 0x20000000, 0x3, 0x5}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xf480, 0x5e4, 0x4, 0x0, 0x8000}, 0x9b}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffb23, 0xbc, 0x8, 0x5, 0x8}, 0x992}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1a, 0x101, 0x3, 0x8, 0x5}, 0xfff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x3, 0x5, 0x1, 0x1}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4e0c, 0x0, 0x0, 0x401, 0x54}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xe, 0x20000000, 0x30, 0x3}, 0xfffe}}]}, {0x6e, 0x6, "4b7ba064670214585288d7b767fd7c96e5b92d9e154d4d605487dee1bef21eb65b5d3b8f07130ab32c811b99961a4168c5cff01e9853110b28c0990b8a0da0be68cfc39ea2c292413d2d59706a7b7eba6d80fe0fc6aadf44ea8518a974b994d7572f245eb1296623c90e"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_xt={0x1b8, 0x20, 0x0, 0x0, {{0x7}, {0xa8, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_INDEX={0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}]}, {0xeb, 0x6, "548e885cb46322f2fbde21c7b19e40a5b932ee0d8b350f3e971c92ea2f1d26504bf3cefb3ae0aa9eebd7f770472cb3b2610404d61d9f86d8268221ac9b19691b28305b41bfcf4002de9b286f3c4a364c0294b9fbddda4873a143af96ac972454eff0b371a6b869e39b498a8e5483b881c89699a58f20dc33b9a677ba6df495667619a6033fa80637a1bb5f252522ffd3794c70f988e5b395a645045212e036a8361bb29f463bdf3949d36a7017b25299784495f8bf0763afba6919745d0c707e45799cd60587d7d6d97afc04660f6c283d928763685b40139213b63da6dd36b53f99b31790168e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_pedit={0x1dcc, 0x13, 0x0, 0x0, {{0xa}, {0x1d94, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xeb0, 0x2, {{{0x4, 0xd, 0x3, 0x6, 0x46}, 0xf7, 0x7, [{0x5, 0x5c, 0x1000, 0x9, 0x63, 0x3}, {0x4, 0x80, 0x9, 0x81, 0x7fffffff, 0x5}, {0x5, 0x5, 0x7, 0x5, 0x5}, {0x4000, 0xfffffe01, 0x40, 0xc7, 0x3, 0x9}, {0x2, 0xe469, 0x80000001, 0x2, 0x9, 0x4}, {0x8, 0x9, 0x6, 0x1af, 0xffff, 0x1}]}, [{0x7, 0x57e9, 0xc65a, 0xc52, 0xf82, 0x35f25610}, {0x3ff, 0xfc2, 0x80000000, 0x400, 0x81, 0x9}, {0x94, 0x3, 0x4, 0x3, 0x6, 0xca}, {0x2, 0x4f8, 0x9bbf, 0x5, 0x4bac, 0xffff7fff}, {0x6, 0xecc, 0x6, 0x22, 0x6}, {0x9, 0x4, 0x1, 0x200, 0x101, 0x4}, {0x5, 0x100, 0x2, 0x2, 0x3, 0x9}, {0x3ff, 0x0, 0x5, 0x8, 0xb8, 0x401}, {0x4, 0x0, 0x43, 0x80000, 0x8, 0x7}, {0x9f7, 0x1, 0x3, 0x0, 0x0, 0x2}, {0x7fff, 0x5, 0x8, 0x8, 0xffff, 0x26d8}, {0x5, 0xfffffff9, 0x5, 0x7, 0x400, 0x8}, {0xaf23, 0x3ff, 0x8, 0xfffffff4, 0x6, 0xfffffffa}, {0x8, 0x5, 0x1, 0x49, 0x3, 0x7f}, {0x0, 0x45e6, 0x2, 0x6, 0x6, 0x401}, {0x3, 0x2, 0x9, 0x1000, 0x9b, 0x2}, {0xfffffff7, 0xf, 0x9, 0x8, 0x3, 0xf}, {0x205, 0x400, 0x6, 0xf3ee, 0x8e40, 0x8c5c}, {0x0, 0xffff, 0xff, 0x8, 0x1, 0x8b59}, {0x7, 0x1, 0x2, 0x2, 0xffff2c88, 0x1}, {0x0, 0x8, 0xbc, 0x2, 0x0, 0x6}, {0x7, 0x4, 0x1, 0x555, 0x6, 0x9}, {0xfffffffd, 0x2, 0x5, 0x4, 0xb6}, {0x7, 0x9, 0x8, 0x7, 0xfffffff9, 0x3}, {0x4, 0x0, 0x8, 0x74c8, 0x4, 0x1c6}, {0x4, 0x8, 0x5e51, 0x7, 0xffffffff, 0x7}, {0x3, 0xa5, 0x80000001, 0xfffffffa, 0xb8, 0x9}, {0x9, 0x3, 0x101, 0xfffffff7, 0x1, 0x4}, {0x9, 0x0, 0xfff, 0x6de2, 0x2, 0x800}, {0x10001, 0x10, 0x898e, 0x2, 0x6, 0x8}, {0xffff7fff, 0x6, 0x200, 0x9, 0x9, 0x9}, {0x5, 0xfffff9c3, 0x9, 0x7, 0x1000, 0x3ff}, {0x5, 0x7, 0x65, 0x9, 0x0, 0x4}, {0x2bf, 0x8, 0x2, 0x1, 0x8000, 0xd}, {0x712, 0x0, 0x5, 0x6, 0x8, 0x2}, {0x2, 0x4, 0x9, 0xffffffff, 0x7, 0x9}, {0x8, 0x0, 0x4, 0x6, 0x2, 0x2}, {0x7f, 0x2, 0x3, 0x380000, 0x0, 0x6}, {0x6, 0x0, 0x7, 0x800, 0x80, 0x7}, {0x5, 0x1, 0x0, 0x40, 0x7, 0x2}, {0x5, 0x4, 0x401, 0x7cc0, 0x200, 0x3ff}, {0x8, 0x60000, 0xe, 0x57, 0xfffffffd, 0xa318}, {0x43933aa5, 0x7fffffff, 0x400, 0x3c5, 0x4, 0x51}, {0x7, 0x40, 0x2, 0x8, 0x5, 0x7569}, {0x1, 0x3, 0xc20, 0x1, 0x1, 0x6}, {0x5, 0x3, 0x9, 0x7, 0x6, 0x188}, {0xafc8, 0x400, 0x100, 0x7, 0x7, 0x4}, {0x6, 0x5, 0x7fffffff, 0x7fff, 0x6, 0x7}, {0x4, 0x9, 0x3, 0x0, 0x8b60, 0x4}, {0x8, 0xffff8000, 0x2, 0x8, 0x7fff, 0x7}, {0x8, 0x5, 0x89e, 0x5, 0x36f, 0x5}, {0x7, 0x63, 0x4, 0x8583, 0x8001, 0xe14}, {0xfffffff7, 0xfffff000, 0xb9, 0x3, 0x2}, {0x480, 0x5, 0x0, 0x1, 0x2a84, 0xfffffff9}, {0x4, 0xffffff7f, 0xa, 0x81, 0x4, 0x1}, {0x9, 0x186, 0x10001, 0xffffffff, 0x38, 0x9}, {0xfff, 0x580, 0x7ff, 0x9, 0x3d21, 0x2}, {0x2, 0x2, 0x6, 0xfff, 0x7, 0x9}, {0x2404675b, 0x5, 0x0, 0x4, 0xa, 0x4}, {0x80, 0xd, 0x9, 0x1, 0x6, 0x8000}, {0x7, 0x2, 0x9, 0x3, 0x1, 0x8}, {0x7, 0x7, 0xfffffff8, 0x6, 0x5391, 0xfff}, {0x0, 0x9, 0xffffffff, 0xf0, 0x7, 0x5}, {0x89f, 0x100, 0x3ff, 0x1, 0x96, 0x3ff}, {0x5, 0x80000000, 0xae, 0x400, 0x6, 0x80000000}, {0x8000, 0x5, 0x1, 0xb57, 0x100}, {0x6, 0x0, 0x2, 0x7fffffff, 0x6467, 0x7}, {0x7, 0xe00, 0xc, 0xd19c, 0x100, 0x2}, {0x3c, 0x8, 0xef8, 0x9, 0x83, 0x24}, {0x1, 0x85, 0x6, 0xff, 0xfffffff2, 0x3}, {0x9a, 0x8, 0xc8d7, 0xf0, 0x8, 0x80000001}, {0x8, 0x80000, 0x200, 0x6, 0x2, 0x6}, {0x27, 0x7ed9, 0x1, 0x80000001, 0x2, 0xd1}, {0x80, 0x7fffffff, 0x6, 0x7ff, 0xffff, 0x84b2}, {0x7, 0x3, 0x9, 0x1, 0x401, 0x1680}, {0x401, 0x401, 0x4, 0x7, 0x7, 0x8}, {0x1, 0x8, 0x6, 0x8, 0x5, 0xf}, {0xfffffffc, 0x4, 0xfffffff5, 0x6, 0x8000}, {0x240, 0x2, 0x8, 0x200, 0x401, 0x40}, {0x8000, 0x2, 0x54, 0xb4bd, 0x22, 0x8}, {0xd1, 0x4, 0x4, 0x9, 0x0, 0x7ef}, {0x6, 0x2, 0xfff, 0xe5a, 0x9}, {0x9, 0x1, 0xf, 0x3, 0x86, 0x629b}, {0x40, 0x0, 0x8, 0x2, 0x2, 0x6}, {0x400, 0xfffffffb, 0x5, 0x80}, {0x2, 0x100, 0x1, 0x0, 0x3ff, 0xffff}, {0x275, 0x3, 0x0, 0x5, 0x8df00000, 0x4}, {0x1, 0xe, 0x3, 0x8, 0xb, 0xd}, {0x0, 0x4, 0xc20d, 0x3, 0x4, 0x2}, {0x3, 0x400, 0x1, 0x8, 0xffffff7f, 0x8}, {0x1, 0xef, 0xfc79, 0x10000000, 0x7f, 0x9}, {0xc, 0x5, 0x1fe00, 0x7, 0x6, 0x7}, {0x0, 0x4, 0x31, 0x7, 0x1, 0x4}, {0x715c, 0x401, 0xffffc7bd, 0x1, 0x9, 0x9}, {0xe, 0xfffffffe, 0x10, 0x0, 0x7, 0xe}, {0x4, 0x3ff, 0x8, 0x615f, 0x9, 0x3c61}, {0x4b23, 0x7, 0xffffffff, 0x2, 0x6, 0x10000}, {0xffff, 0x0, 0x80000001, 0x6, 0x5, 0x101}, {0x0, 0x7eb, 0xb8, 0x4, 0x8, 0x9}, {0x5, 0x3, 0x4, 0x5, 0x9, 0xa52}, {0x5, 0x2, 0x9, 0x6, 0xfffffc01, 0x80000000}, {0x1, 0x1, 0x401, 0x2, 0xc, 0xffffff1e}, {0x3, 0x7ff, 0x5, 0x2, 0x7, 0x6}, {0x43, 0x4, 0x5, 0x2, 0x6, 0x8}, {0x3, 0x8, 0x80000000, 0x0, 0x2, 0x2fd}, {0x4, 0xfffffffd, 0xdbc, 0x4, 0xfffffffa, 0x1}, {0xb, 0x2, 0x1, 0x9, 0x2, 0x7}, {0x9, 0x7af, 0xffffffff, 0x3, 0x3, 0x7}, {0x4, 0x5, 0x0, 0x1, 0x80, 0x80}, {0x7, 0x5, 0x8, 0x4, 0x2, 0x6}, {0x5, 0x1, 0x5, 0xfd9, 0x2, 0x6}, {0x0, 0x8, 0x4e9, 0x80, 0x200, 0x3}, {0x2, 0x6, 0x3, 0x0, 0x0, 0x7}, {0x8, 0x3, 0xfffffffa, 0x2, 0x5, 0x4400000}, {0x7, 0x8, 0x7, 0x3, 0xc, 0x7}, {0x4, 0x7fffffff, 0xc3d, 0x2, 0x9, 0xb}, {0x2, 0x0, 0x6, 0x7, 0x8b6, 0xdcb8}, {0xfffffffa, 0x2, 0xfff, 0x8, 0x3ff, 0x6}, {0x6, 0x81, 0x2, 0x25, 0x400, 0xfffffff8}, {0x2, 0xe, 0x1e, 0x1, 0x6, 0xe3e}, {0x4, 0x3ff, 0x1ff, 0x4, 0x6, 0x4}, {0x3, 0x6, 0x10, 0x7fffffff, 0x3, 0x5}, {0x3, 0x5, 0x5, 0xcafe, 0x1, 0x9}, {0x57f2, 0xfffffffe, 0xfffffffc, 0x67, 0x1000, 0xfffffffb}, {0x8c, 0x5, 0x4, 0x101, 0x7, 0x2}, {0x1000, 0x3, 0x0, 0x2, 0x7, 0xeae9}, {0x8, 0x5, 0x0, 0x5, 0xd, 0x6}, {0x7, 0x2, 0x6, 0x4, 0x1759af79, 0xffff}], [{0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x4}, {0x2, 0xa5443f1a9b471eef}, {0x2, 0x1}, {}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x5}, {0x4}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {0x5}, {0x4, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {}, {}, {0x5, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x5}, {0x4}, {0x4, 0x1}, {0x5}, {}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x4}, {0x1}, {0x5}, {0x1}, {0x1}, {0x1}, {0x5}, {0x0, 0x1}, {}, {0x4}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x2}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2}, {}, {0x4, 0x1}, {0x5}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x1}, {0x1, 0x1}, {0x4}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x5}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x1}]}}, @TCA_PEDIT_PARMS_EX={0xee0, 0x4, {{{0x4, 0x6e25942e, 0x3, 0x10000}, 0x3, 0x5, [{0x5, 0x0, 0x3, 0x6c, 0x80000001, 0x8}, {0x5, 0x4, 0xae, 0x7, 0x4, 0x929}, {0x2, 0xab6e, 0x7, 0x800, 0x7, 0x8001}, {0x9, 0x5, 0x3, 0x3, 0x8, 0x8}, {0x200, 0x2, 0x800, 0x43d, 0x400, 0x80000000}, {0x77, 0x401, 0x3, 0x80000001, 0x9, 0x10000}, {0xe, 0x8001, 0x5, 0x514b, 0x4, 0x6}, {0x80, 0x400, 0x400, 0x10, 0x2, 0x35a}]}, [{0x1000, 0x5, 0x8e, 0x5, 0x847, 0x775a}, {0x1, 0x7, 0x0, 0x5, 0xfff, 0xf865}, {0xffffffff, 0xffffffff, 0x80000001, 0x7, 0x6, 0x4}, {0xed1, 0xe, 0xffff, 0x2, 0xa2, 0xffffffff}, {0x2, 0x8, 0x9, 0x4, 0xff, 0x59}, {0x1, 0x10, 0x7, 0x1, 0xc000, 0x1000}, {0x8, 0x6, 0x1000, 0x6, 0x300000, 0x4}, {0xe6, 0x600000, 0x1, 0x1, 0x9, 0xd}, {0x8, 0x5, 0xff, 0x9, 0x9, 0x7f}, {0xf158, 0x8, 0x47ca, 0x2, 0x7, 0xa3}, {0x0, 0x2, 0x100, 0xffff, 0x33f41930, 0x2}, {0x3, 0x1, 0xffff0000, 0x4, 0x3, 0x32}, {0x1ff, 0x3, 0x6, 0x0, 0x5, 0x6}, {0x6, 0x1, 0xfffffffd, 0x1, 0x33c, 0x8}, {0x2, 0x2, 0x6, 0x3ff, 0xff, 0x8}, {0x7, 0x8, 0x0, 0x2, 0x1, 0x8000}, {0x10001, 0x9, 0x0, 0x7fff, 0x1, 0x100}, {0x6, 0x9, 0x4, 0x3, 0xfffffffb, 0xa}, {0x3, 0xcf, 0x4, 0x74, 0x7}, {0x10000, 0x7, 0x5, 0xd, 0x1, 0x9}, {0x7, 0xec7, 0x9, 0x80000000, 0xbd2, 0x9}, {0x80000000, 0x84, 0x2, 0x7, 0x6, 0x3}, {0xe9, 0x10000, 0x7, 0x3ff, 0x2, 0x9}, {0x400, 0xae, 0x8f, 0x0, 0x0, 0x6}, {0x2, 0xc77, 0x401, 0x4b7, 0xe336, 0x1}, {0x200, 0x10, 0x3, 0x1, 0x5}, {0x100, 0x2, 0x93d9, 0x3800000, 0x3, 0x200}, {0x6, 0xfff, 0x3, 0x9, 0x1c7ea1b8, 0x9}, {0xa2, 0x8, 0x2, 0x100, 0x7, 0xffff}, {0x2, 0x9, 0xfff, 0x9, 0x1, 0x4}, {0x0, 0x6, 0x2, 0x7fff, 0x4, 0x7ff}, {0x1, 0x0, 0x7e9eb756, 0xd47, 0x7f, 0x7}, {0x32, 0x9, 0x1, 0x9, 0x1, 0x7fffffff}, {0xffff8001, 0x796d, 0x7, 0x4, 0x2, 0x3}, {0x80, 0x7, 0x80, 0x2, 0x800, 0x200000}, {0x2, 0xffff931b, 0x7, 0x9, 0x10000, 0x2}, {0x6, 0x1, 0x2, 0x1, 0xffffffc0, 0x5}, {0x6, 0x9, 0x100, 0x10, 0x7ff}, {0x100, 0x1, 0x7, 0x2, 0x4, 0x7}, {0x100, 0x5e4, 0xffffffff, 0xa, 0x2234, 0x9}, {0x3, 0x3, 0x101, 0x80000000, 0x10001, 0x3}, {0xb, 0x2, 0x0, 0x378, 0xff, 0xffffff65}, {0x2, 0x9b, 0x10000, 0x4, 0x1000, 0xff}, {0xfffffff9, 0x0, 0x5d, 0x0, 0xeb1, 0x4}, {0x9, 0x7, 0x2, 0x81, 0x7fffffff}, {0x8, 0xf, 0x3, 0x80, 0x7, 0x80000001}, {0xc, 0x5, 0x4, 0x1, 0x101}, {0x40, 0x6, 0x7, 0xcbc, 0xffff0001, 0xfffffffe}, {0x4, 0x0, 0xa, 0x0, 0x6, 0xf}, {0x5, 0x57c, 0xd, 0x2, 0x2, 0x100}, {0x4, 0x52, 0x9, 0x5, 0x4, 0x1}, {0x3, 0xfffffffc, 0x14df, 0x65e, 0x2, 0x1}, {0x28, 0xd, 0x4, 0x5, 0x8, 0xd}, {0xffff, 0x5, 0x0, 0x3, 0x9, 0x5}, {0x94, 0x6, 0x1, 0x5, 0x4}, {0x5, 0x1, 0x3, 0x9, 0x1, 0x62232fc0}, {0xffff125c, 0x6, 0x4, 0x4, 0xffff0000, 0x1}, {0x200, 0xfffff801, 0x1, 0x80, 0xff}, {0x8000, 0x30, 0x9, 0x9, 0x4, 0x1}, {0xd1, 0x9, 0x0, 0x2, 0x10, 0x1}, {0x8, 0x3, 0x0, 0xffffffc8, 0x7f, 0xc}, {0xd45, 0x0, 0x3, 0x1ff, 0x6, 0x81}, {0xfffffff1, 0x9, 0x9, 0x800, 0x1, 0xe}, {0x7ff, 0xffff, 0xffff, 0x40, 0x1, 0x10001}, {0x80, 0xd, 0x100, 0x8, 0x0, 0x4}, {0x7fff, 0x5, 0x9, 0x6ab, 0x7, 0x3}, {0x4, 0x5ffd, 0x7f, 0x5, 0x8001, 0x7}, {0x6, 0x5, 0xffffffff, 0xffffffff, 0x3, 0x322}, {0x3, 0x9, 0x8, 0x40, 0xfffffe01, 0x5b46}, {0xfffffffd, 0x9, 0x3ff, 0x3, 0x6, 0x5}, {0x8dc5, 0x4, 0x7, 0x1, 0x5, 0x8}, {0x81, 0x3, 0x10001, 0xff, 0x3f, 0x80}, {0x6, 0x0, 0x5, 0x9, 0x10001, 0x3}, {0x80000000, 0x6, 0x5, 0x4, 0x2, 0x5}, {0xa3, 0x9, 0x5, 0x40, 0x9, 0x4}, {0x0, 0x743, 0x0, 0x3, 0x101, 0x94a}, {0x0, 0x1, 0x2, 0x6, 0x9, 0x6}, {0x0, 0x1ff, 0x6, 0x7, 0x101, 0x6}, {0x4471, 0x6, 0x6, 0x1, 0x4, 0x33}, {0x0, 0x2, 0x5b, 0x4, 0xd0000000, 0x2b}, {0x7ff, 0x8, 0x1000000, 0x9a0f, 0xbf, 0x8}, {0x9, 0x0, 0x0, 0x5, 0x2, 0x3}, {0x7, 0x4, 0x81, 0x7, 0x7, 0x9}, {0x0, 0x50, 0x5, 0x8, 0x7, 0x7}, {0x1, 0x7, 0x0, 0xe629, 0x2f, 0x2}, {0x3, 0x2, 0x5, 0xa6, 0x3, 0x3}, {0x2, 0x1, 0x772, 0x81, 0x9, 0x4}, {0x7, 0x8000, 0x9, 0x5287c640, 0x22f6, 0x5}, {0x1, 0x4, 0x2, 0x6, 0x190, 0x3}, {0x4, 0x2, 0x2, 0x1, 0x87ea, 0x10000}, {0x1, 0x3, 0x1, 0xa4, 0x521a, 0x9}, {0x10, 0xfffffffb, 0x40, 0x9b, 0x5, 0x7}, {0xfffffff9, 0x3, 0x7, 0x5, 0x4, 0x56ea}, {0xffffd344, 0x7, 0x7, 0xfffffeff, 0x5, 0xfffffff8}, {0x7, 0x1ff, 0xfffffff8, 0x9, 0xea1, 0xba}, {0x5, 0xffffffff, 0xffffa512, 0xad68, 0x9, 0x5}, {0x8, 0x4, 0x0, 0x400, 0x8c, 0x43}, {0x9, 0x2, 0x40, 0xffffffff, 0x8, 0xbc9}, {0x7, 0x401, 0x7, 0xe, 0x2, 0x9}, {0x4, 0x2, 0x7, 0x40, 0x6, 0x7}, {0x0, 0x2, 0x1, 0x0, 0x5}, {0x1, 0x6dec, 0x3, 0x8, 0x1, 0xff}, {0x7fffffff, 0x8, 0x4, 0x939, 0x6, 0xa71f}, {0x3, 0xfff, 0x6, 0x1, 0x6, 0x80000001}, {0x1000, 0x1, 0x800000, 0xc17a, 0x7fffffff, 0x606ef53f}, {0x7fff, 0xa65, 0xb, 0xc, 0xffffff0c, 0x5}, {0x3, 0xc5d, 0x0, 0x9, 0x401, 0x6f}, {0x0, 0x3, 0xd7, 0xd3c, 0xfffffffc, 0x1}, {0x5393, 0x4, 0x9c9, 0x8, 0x800, 0x3}, {0x2, 0xfffff801, 0xffff, 0x6, 0x9, 0x8}, {0x5, 0x9, 0x91, 0x7, 0x2, 0x1}, {0x8001, 0x5, 0x6b9b, 0x6, 0xc697, 0x3}, {0x3, 0x5, 0xfffffffa, 0x73c, 0x5, 0xe9}, {0x2, 0x6, 0x3ec0, 0x6, 0x0, 0x16}, {0x8, 0x10001, 0x4, 0xffffffff, 0x1000, 0xffffffff}, {0x0, 0x9, 0x81, 0x5, 0xe3e8}, {0x6, 0xffff, 0x2, 0xf53000, 0x4, 0x1}, {0xff, 0x5, 0x2, 0x4, 0x9, 0xc42}, {0x5, 0x10000, 0x4, 0x1, 0x2, 0xd}, {0xfffffbff, 0x1, 0x8, 0x6, 0x3, 0x80}, {0xffffffff, 0x0, 0x2, 0x5, 0x2a, 0x1}, {0x8, 0x7, 0x9, 0x6, 0xff, 0xe9c}, {0xe, 0x877, 0x8, 0xfffffff8, 0x6caed674, 0x7}, {0x80, 0x80000001, 0x7, 0x9, 0x5, 0x2}, {0x0, 0x5, 0x5, 0x4, 0x0, 0x4}, {0x8, 0x1, 0xf, 0x1000, 0x3, 0x7}, {0x5, 0x600000, 0x0, 0x10001, 0xe, 0x8}, {0x1, 0x9, 0xe, 0x4, 0x9, 0x7}], [{0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x4}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x3}, {0x2, 0x2}, {0x1}, {0x3}, {0x4, 0x1}, {0x5}, {0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {0x4}, {}, {0x4, 0x1}, {0x1, 0x1}, {0x4}, {0x2, 0x1}, {0x1}, {0x3}, {0x3}, {0x5}, {0x4}, {0x1, 0x1}, {0x4}, {0x4}, {0x2}, {0x3}, {0x0, 0x1}, {0x1}, {0x6}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {}, {0x5, 0x1}, {0x0, 0x5102f32a960fb49a}, {0x4}, {0x2}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x0, 0x139683b0c00aeb51}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x2}, {0x0, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x3}, {0x3, 0x1}, {0x3}, {0x1, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x4}, {0x3}, {0x1}, {0x5}, {0x5, 0x1}, {0x3}, {0x4}, {0x3}, {0x2}], 0x1}}]}, {0xf, 0x6, "0e340ebdfdf5b8939a1644"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ct={0xa0, 0xc, 0x0, 0x0, {{0x7}, {0x28, 0x2, 0x0, 0x1, [@TCA_CT_MARK_MASK={0x8, 0x6, 0x200}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @mcast1}, @TCA_CT_ZONE={0x6, 0x4, 0x2}]}, {0x51, 0x6, "417bea0394ee256f8349f5b02311da9166c2aa5c530e45695cc1f1d592bc95923d5ee04a4aa73ef4470b3727d2e73317ebb43a5843302d0d06ece75c83b1090cc77424406113a2008f2e3cef35"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ct={0xec, 0x9, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @rand_addr=0x64010102}, @TCA_CT_ZONE={0x6, 0x4, 0x1}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @loopback}]}, {0xa9, 0x6, "6a4b0c8db46fe42b863d0f32dcccc0ea661e45192dfcf4f9b4ac6b8e33112ddfe4b70597de6127a17c1f8ee9dbb640a6e56222784588f2235611af43228e17ca393d633d8c5b77ae1eea5bed341043c2bf94741de3aaae23a39b94f8760a8083b6c11c8c77e3fea80028eac15e916d5ce6e3bb4c70e9019ff811808117c2f9367965fa51425caeded7f5f7e84608ae9963c2a26226bc84e13f3af5f72c4d040fa49976c7d5"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mirred={0xfc, 0x1f, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xc, 0x200a, 0x0, 0x6, 0x873}, 0x3, r1}}]}, {0xad, 0x6, "7e73247d1013fe6891d335bff55c6b2f21960fcad6b13c53fa8d92bf30e5eab9ebebb0f1bd936e84db8b5f5e649f7fa124125f47e90000e7858c029dfca3d7587e4d2e53e44eeee7a12419c6b429c4f2d056616f3866d5caa3a82ba0a7a3db3735ab3cccacf9ae870151331b47499197cbc50c7d6edd9719a01c1ca24a8a37692dc9db7e98a87379a858e3a42d88586e9d0a2e276159c3eeb04b12abc904b490020524cd777d51affb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x23a4}, 0x1, 0x0, 0x0, 0x20005000}, 0x0) 1.87180449s ago: executing program 2 (id=2348): r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='0.0.0.0:0:/\x00', 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000019080)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x8a, &(0x7f00000190c0)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=r0, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRES64=r0, @ANYRESHEX, @ANYRES16=r0, @ANYRESOCT], 0x0) readv(r1, &(0x7f0000004000)=[{&(0x7f0000002f80)=""/4096, 0x1000}], 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r2) r3 = socket$inet(0x2, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r7, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000013000100"/20, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00\x00', @ANYRES32=r6, @ANYBLOB], 0x28}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/net/bridge0/bridge/multicast_igmp_version\x00', 0x1, 0x0) write(r8, &(0x7f0000000340)='3', 0x1) syz_emit_ethernet(0x3a, &(0x7f0000019180)=ANY=[@ANYBLOB="01005e00001600112233445508004600002c01004000018f940000a8010ae0000016940410002200020000eaf3d4ca70f9abead11266864003557a0211c8de2a49b7e02b4f84914008196a71ec6adb76cad3056b2cf4b400617958c3783e7da07aadc1b57654449ea9bb83d4e47220c2267401ad3d2598a728e90919a44126eea1ccfa58cb44c88a14c05deac94707d73d141ca07ae17a9cab026c33481badb0d55d2d3a31d1b08f2344bde159fd9688dd2ea3693ade4434828cd04cde23d913352e7d5c78602ee5158e22436d5f7c97fc8bec03b5462bd76a9a70c61b472ce0f8b7", @ANYRESHEX=r2], 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000700)=ANY=[@ANYBLOB="01005e00001600112233445508004600002c0000400001024303c0a8010ae0000016940400002200ddf90000000106000001ef0101010a000001"], 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) openat$cgroup_freezer_state(r2, &(0x7f00000002c0), 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='mount_timeout\x00', &(0x7f0000000180)='1\x00', 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 1.509976331s ago: executing program 6 (id=2349): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0e0000000400"], 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000780)) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0500000004000000020000000700000000000000", @ANYRES32=0x0], 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={0xffffffffffffffff, r0}, 0xc) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 797.36378ms ago: executing program 0 (id=2350): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write(r1, &(0x7f0000000200)='connect 11:aa:aa:aa:aa:aa 1', 0x1b) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) write$sndseq(r5, &(0x7f0000000680)=[{0x41, 0x3d, 0x0, 0xfd, @time={0x3, 0xc1}, {}, {0xf, 0xfe}, @addr={0x1b}}, {0x3, 0xf, 0xd3, 0x5, @time={0x6, 0x3}, {0xd, 0x10}, {0x7, 0x61}, @time}, {0x1, 0x1, 0x7, 0x29, @time={0x2, 0x7}, {0xee, 0xb}, {0x3, 0x3}, @control={0x0, 0x385655ff, 0x2}}], 0x54) listen(r4, 0x5) openat$vimc2(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs/binder0\x00', 0x800, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) dup3(r7, r6, 0x0) r8 = syz_usbip_server_init(0x3) write$usbip_server(r8, &(0x7f0000000300)=ANY=[@ANYBLOB="00000002"], 0x30) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r9 = syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff00000007058102000200070501020002000705820200020007050202000200070583030a"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/ttyUSB0\x00', 0x2, 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04040aaaaaaaaaaa1000000000ce1e95973a2f7f21a4b76da5e8a4a5f6dd2cf952165fd2db63ead6f900da84bd0428059beaa8459cadd782205a4c7e285948df13bcb397b5e6608de715da3143db97eb86db2895ab56d841"], 0xd) syz_emit_vhci(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x40000108, 0x0, 0x9b3}]}) 797.109293ms ago: executing program 6 (id=2351): openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$ptmx(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) close(0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x8102) writev(r0, &(0x7f0000000080)=[{&(0x7f00000001c0)="47ad3d32240000000000000080f7c342cc2c008d3ec3c2d2d5bbf6a4e41419ec3dc11a4f851a0084665ea561e52d97fbe9e829a0", 0x34}], 0x1) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0x0, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, r6, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000007, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x80000, 0xfffffffe, 0x146, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x0, 0x0, 0x1f0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7f0d, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r5, '\x00', {0xfffd, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 720.486653ms ago: executing program 6 (id=2352): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0xffffffff, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$unix(r3, &(0x7f00000059c0)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000005940)=[@rights={{0x14, 0x1, 0x1, [r2, r2]}}, @cred={{0x18, 0x1, 0x2, {r1}}}, @cred={{0x18, 0x1, 0x2, {r1, 0xee00}}}], 0x44, 0x4000010}, 0x4840) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x3}, 0x50) mkdir(0x0, 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r5, &(0x7f0000000400), 0x0) chdir(&(0x7f0000000100)='./file0\x00') unlink(&(0x7f00000002c0)='./file0\x00') link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000000)='./file0\x00') openat(0xffffffffffffff9c, 0x0, 0x20846, 0x2d) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xd}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000000680)=ANY=[@ANYBLOB="3bd900000a00462000000407ff0200000000000000000000000000017f00"/84], 0x8c) (fail_nth: 1) socket$packet(0x11, 0x3, 0x300) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 579.443175ms ago: executing program 1 (id=2353): r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, 0x0) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r1, &(0x7f0000000340), 0x2000011a) fsetxattr$security_ima(r1, &(0x7f0000000380), 0x0, 0x0, 0x3) write(r1, &(0x7f0000000180)="b4", 0x1) recvmmsg$unix(r1, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000033240)=""/4096, 0x1000}], 0x1}}], 0x1, 0x121, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff0000/0x10000)=nil, 0xffffff1b, &(0x7f0000000000)='\x00\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000c2b000/0x1000)=nil, 0x1000, &(0x7f00000003c0)='@=-\x00\xa94\xa0\ng\xd2\xc1k\xb2\x11>\x9aB\x14\xe7cp8\xa3W\x7fQb\xec\xff4\xa7\xccG\xa6\xd2\xb9u58Ig\x9cB\xc7\xafUY\xf4\xd4:\x9b\xdcr\x05{\x8c\xb6\xdb\x00~^m\xa5\x8e\xc9\xc1j\xeb\xc8!H}E\xc0C\'B\xa7-\xd7\x9d2\xbf\xcd5\x13\x8dbd\xb4\xfar/\xa7\xfe\xe5\xe2f\xa5.\x83\xf8\xb5{\xf1wN!=4\xb0\xd1\xe2\x8d\x05\x00\x00\x00\x00\x00\x00\x00.\xed\v\x029\xce\xd8\xbf\xb6\xd2\xb5\xb1\xfa\x8c\x1f\v\x00\xea\xa3\xe1\x00'/155) mlock(&(0x7f0000ff8000/0x2000)=nil, 0x2000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setuid(0xee01) syz_usb_connect(0x0, 0x78b, &(0x7f0000000480)={{0x12, 0x1, 0x300, 0xf3, 0xa6, 0xd7, 0x8, 0x572, 0xcb02, 0x535f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x779, 0x3, 0x0, 0x0, 0x40, 0xea, "", [{{0x9, 0x4, 0xb9, 0x1, 0xb, 0xba, 0xb3, 0x37, 0xc0, [@uac_as={[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x0, 0x8, 0x9, "8397d14e7ce34600d3"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x81, 0xfff7, 0x0, '\n'}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x2, 0xfc00, 0x9, 0x4}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x8f, 0x1, 0x7, 0x5, "3649c22020f7ef"}, @as_header={0x7, 0x24, 0x1, 0x9, 0x4, 0x1}]}], [{{0x9, 0x5, 0xb, 0x1, 0x400, 0xa, 0xd2, 0xf8, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x7, 0x1}, @generic={0xa7, 0xd, "b0e501b8c7f87b634c5b84b496b4e7f39e3418c6eb6aa7fb7eff21ea288efb225f2c70fb72bb7dd43dab89ce1acbecd244b152c59b07d06b1507817486508d561ab0628bc5d6ce56a2fd1c5320a75ad7050de4bc5cfc41d068d6b24947d2c6572e0058540d31afef3317bff3f499e4ca9da04d68fd777cffdbfcf24a973dab7070e196ee1ff39bb1fd4a0da39d088847bfab28415aa03ddba5bf1e6234a8ceea696d61cb78"}]}}, {{0x9, 0x5, 0xb, 0x1, 0x8, 0xf8, 0xac, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x3, 0x5}]}}, {{0x9, 0x5, 0x80, 0x10, 0x400, 0x0, 0x4, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x8}]}}, {{0x9, 0x5, 0xd, 0x1, 0x3ff, 0x6, 0x2, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0xe0a}, @generic={0xe4, 0x55, "e3b174394d60289ad0e444635ef56ccd2b4d87f27623fc0f6411eee564268cf8a56903580feac1f20745fb9377a7c47dea518c5beb6f6d384b0adca72d030bd1cd4abdd1fa294e04b3bd7e60f62bdfa0242ce1f351ec5790cf7ecc6a11c95ca73f40f14571c130e664942715e6dd60bb99f9d7370c619684f7a0aec4d9f7deb10902c7c516c348ad86aa3bb4a0230d6e9d285c9f5996c6e01d509b36216c97d1aa8d1271840b403a6a4e323d7f91846563456bcde5cef0082669a5ba51baef789df3933ed76f269af5c5439a3bdf401547988d9e51467d1afe71b8c3ff2db61128f8"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x40, 0x0, 0x4, 0x80, [@generic={0xae, 0x5, "d97ea106d1aa19bef1bcb695296416bc64488f9ae2772abab1f758af22fe2a11f6a0a0e70279f9134fed2aa42704731a80fbbf8e38e5b98938241e4e8ef9f39f13a23860c4536eb09e9109d72ec382f1b66e7bcedf10a40cffeaa784d94ece2658e90fa8c8f7ba0802acbbc2286d3bea926a892deef6ff553068c13d4f1142f4552d08dec4b8615b8558f71b1d4a8e42010a4f26a6adfc33ce696410475e63c7370e8633d190e73fe90855b7"}]}}, {{0x9, 0x5, 0x6, 0x3, 0x40, 0x7, 0xa9, 0x3}}, {{0x9, 0x5, 0xd, 0x0, 0x40, 0x4, 0x7, 0x6}}, {{0x9, 0x5, 0x3, 0x10, 0x10, 0x3, 0x0, 0xc}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x1, 0x4, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xe4, 0xffce}]}}, {{0x9, 0x5, 0x80, 0x0, 0x200, 0x6, 0x1, 0x6}}, {{0x9, 0x5, 0x82, 0x0, 0x20, 0xe}}]}}, {{0x9, 0x4, 0xe2, 0x8, 0x8, 0x43, 0xa6, 0xc0, 0x2, [], [{{0x9, 0x5, 0xc, 0x10f0f2101b13ca63, 0x3ff, 0x80, 0x7, 0x40, [@generic={0xe6, 0x7, "650e42d7571249292f662deb427792048d034d35cf2111ba0a067800cba493c0cda47d306b9e7c0006a2790ea0cc9d140464c46d5f99fca4655012c1284dd1b2c43fbac22403fa09ac569d86b276f3e2410b1456685e576d6691cf5869313236d07fcbd9159733edd96f90bb41860e99713ee0df8c6f17caa84156a7ed51cf07da12f9959e5ff5d961dcd9d3c454f86705b57aff649985875a7bbc650352740d721e0602c40e0eb49b5cd3f875ce01c3b883a3e7a22c0a78301ab44a8cda8277b1b5fdfbc100d20baf8324cbe81cc7e36dc53618ffd14ce19498ac9ed8e56fbdbeabc9bf"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x1, 0x3ff}]}}, {{0x9, 0x5, 0xa, 0x1, 0x200, 0x2, 0x8, 0xf0, [@generic={0x40, 0x7, "9ee1fccb531b9f0378aad20f1df03713f41621c8c35e9bc379603f58d8d96792702ca6fd96cbf2446d2602bd71dcf1fa9359f085e0af2d381d36d6e06e92"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x9, 0xd}]}}, {{0x9, 0x5, 0xc, 0x8, 0x20, 0x0, 0xbe, 0x78, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x7, 0xfff}]}}, {{0x9, 0x5, 0xe, 0x8, 0x8, 0x7, 0x0, 0x6, [@generic={0x5c, 0xe, "c1447d5caedc44c82eab6d1a9faa03b920115a4d674cf6a8287dd1087febb466d071d11a9fa5499d401cc988929437944884e9ee50fba3cbead846d019b9e4adda97d9b4357d2e8a298664071f928e8d404b17396375f6cd6daf"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7}]}}, {{0x9, 0x5, 0x1, 0x10, 0x3ff, 0xf8, 0x4, 0x1, [@generic={0xfb, 0x30, "fa03937fb38f6d118ef1b39b7e33c873e7143c7bf58ee82998c1a438a2e83bc063002afee03f46af81cc261e75e2a6bdbae5179d094021f5b5e9dfe620791d94d40be0829d393ae2f789afeb63ccdb870b2dc8d223a76067a24904ed11a16d25c2f6f33f174f1542a895fd99f9dd9bbe2fb80856f20ab6d81b5c8b91a711fb47b7a7571ad1e0315b4705ef33ebb67f7a74f5b1a39858800733ae4425c96d7c76380d3466b3cb6af759751b62aea09291d6fbb09b3a5956939d89adcf9b40b8da0a899c5dcb4f06a251e44f3178160408dbb8d58f8a4e401d22e9e69ac2b68a76b817165542cc589d0bde7c04826c35b08b1e7bdad24dc2cd20"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x3c, 0xce6}]}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x7, 0x8, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x80, 0x9}]}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0x9, 0x2, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xc0, 0xfffc}]}}, {{0x9, 0x5, 0xf, 0x4, 0x20, 0xa, 0xf8, 0x9}}]}}, {{0x9, 0x4, 0xe7, 0x5, 0xc, 0x95, 0xc9, 0x69, 0xf7, [], [{{0x9, 0x5, 0xa, 0x10, 0x40, 0x8, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x4, 0x6cf}, @generic={0xa, 0x22, "7d44d55eeff3447b"}]}}, {{0x9, 0x5, 0x1, 0x3, 0x40, 0x8, 0x4, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x9}]}}, {{0x9, 0x5, 0x0, 0x8, 0x10, 0x80, 0xfa, 0x4}}, {{0x9, 0x5, 0x6, 0x18, 0x20, 0x40, 0x4, 0x2}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0x7, 0x7, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x4a, 0x3}]}}, {{0x9, 0x5, 0xe, 0x4, 0x8, 0x2, 0x7f, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x40, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0xc, 0x4}]}}, {{0x9, 0x5, 0x9, 0x0, 0x400, 0x2, 0x0, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x5, 0x3ff}]}}, {{0x9, 0x5, 0x7, 0x1, 0x20, 0x2, 0x9, 0x6}}, {{0x9, 0x5, 0xd, 0x28, 0x10, 0x7, 0x5, 0x29, [@generic={0xb6, 0xb, "5735a2c6311c9cacc063e8fd77d79b8566b03dd472c1141714792ca5c3bc217684f9a5338331d2ddc1df600b26c7baa24b4c17cf58201f0f58e9701ca6f9a7b5ea81732a7d9cded568a65afadcbea14d6ea2b389bf70f8b0352bcb9cb56c22aa45543b360e912714ce190fcf435fcb5a4d437101e24b2d63c4abbe9e473910fac0cafd36f7bebddd01fcacede9bbbf86ac7cd0150c6c1efd73e9f20d26dd5d5fcb077df05310416764218bd66a6c83c9b6089a82"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x2}]}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x6, 0x5, 0x5}}, {{0x9, 0x5, 0x8, 0x10, 0x40, 0x7, 0xc, 0xfe}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x8, 0x0, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x6, 0x800}]}}]}}]}}]}}, &(0x7f0000000e40)={0xa, &(0x7f0000000c40)={0xa, 0x6, 0x300, 0xcd, 0x3, 0x4, 0x40, 0x5}, 0x13, &(0x7f0000000c80)={0x5, 0xf, 0x13, 0x2, [@generic={0x3, 0x10, 0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0xff, 0x8, 0x3bb3, 0x2}]}, 0x3, [{0x4, &(0x7f0000000cc0)=@lang_id={0x4, 0x3, 0x816}}, {0x5b, &(0x7f0000000d00)=@string={0x5b, 0x3, "21885986567b9f1f4826f7d6d759b2436e3d4d14f3ac99af8f4ea2c5cd1c9f5898aa9f07582709f80d8a3b4be4f54a5ab3ff1aaec867b8709b13d5b77404611d8dd4e68ec299317c12f1074e8583e3e7109b328690431a34bd"}}, {0x9d, &(0x7f0000000e80)=ANY=[@ANYBLOB="9d03e4688ac66db613d0c3d239c3599a67c852b25cfbfc5572d70f52480c1b846e24d44be7279289d3a2ced86ffba09771c48307c7b08392c2aada94ff2565317888adfb49f0c49fc1c49ca3167174d7e46a6c3b3a593b8f18f6d1b0dcb0a1825da2a01ce98e22bb42299526c473a609904a46a97042597e86ec2c8f5f8b2d7912fb7778d66a13c907fe2953f63a8bc88b20d22754bd92fc4d0f6367af76e08e81759c6c70670c271bef119f24385bbf21fa1a25e4982446fb66cd2eae46c529d7654c44bbc46f1370da8fa73cc61b664019c751e906a63239bb5b964a4712"]}]}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c000000120005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0094000000000000140012800400010076657468000000040400028808000a00", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x2d0, 0xffffffff, 0x168, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x200, 0x200, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x0, 'REJECT\x00', 0x0, {0x4}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x29}, @private=0xa010102, 0xff, 0xff0000ff, 'pimreg\x00', 'veth1_to_team\x00', {}, {}, 0x2, 0x3, 0x76}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x7, 0x1, 0x0, 0x2, 0x3, 0x1], 0x1}, {0x0, [0x3, 0x5, 0x5, 0x2, 0x0, 0x1], 0x1}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @REJECT={0x0, 'REJECT\x00', 0x0, {0x5}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x190) close(0xffffffffffffffff) 0s ago: executing program 1 (id=2354): syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB="040e04023920"], 0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) openat$cdrom(0xffffff9c, &(0x7f0000002340), 0x519000, 0x0) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_open_dev$audion(&(0x7f0000003380), 0x44, 0x400) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000003440)={0x0, 0xa5}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003500)={0x11, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x55d4, 0x0, 0x0, 0x0, 0x5}, [@alu={0x0, 0x0, 0x0, 0xe, 0x2, 0x20, 0xfffffffffffffff0}]}, &(0x7f0000000540)='syzkaller\x00', 0xff, 0x1000, &(0x7f0000002380)=""/4096, 0x0, 0x22, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000033c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000003400)={0x0, 0x9, 0x28, 0x2}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000003480)=[r1, 0xffffffffffffffff], &(0x7f00000034c0)=[{0x2, 0x1, 0xd, 0xc}, {0x4, 0x2, 0x5, 0x9}], 0x10, 0xffffffff}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRESHEX, @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x8854) kernel console output (not intermixed with test programs): w actions attr not present in new flow. [ 351.497693][T12613] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.512679][T12616] tipc: New replicast peer: 255.255.255.255 [ 351.513091][T12616] tipc: Enabled bearer , priority 10 [ 351.855100][T12613] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.062864][T12613] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.162052][ T5724] usb 11-1: new full-speed USB device number 22 using dummy_hcd [ 352.368763][ T5724] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 352.403649][ T5724] usb 11-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 352.403668][ T5724] usb 11-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 352.403682][ T5724] usb 11-1: config 0 interface 0 has no altsetting 0 [ 352.488669][ T5724] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 352.488686][ T5724] usb 11-1: Product: syz [ 352.488693][ T5724] usb 11-1: Manufacturer: syz [ 352.488701][ T5724] usb 11-1: SerialNumber: syz [ 352.620428][ T854] tipc: Node number set to 1413246058 [ 352.638428][ T5724] usb 11-1: config 0 descriptor?? [ 352.644648][ T5724] usb 11-1: selecting invalid altsetting 0 [ 353.047090][ T5724] usb 11-1: USB disconnect, device number 22 [ 353.146701][ T9290] udevd[9290]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/sound/card6/controlC6/../uevent} for writing: No such file or directory [ 353.410275][ T6847] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 353.522892][T12637] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 353.524882][T12637] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 353.560070][ T6847] usb 7-1: device descriptor read/64, error -71 [ 353.852917][ T6847] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 354.005622][ T6847] usb 7-1: device descriptor read/64, error -71 [ 354.124937][ T6847] usb usb7-port1: attempt power cycle [ 354.134509][T12649] FAULT_INJECTION: forcing a failure. [ 354.134509][T12649] name failslab, interval 1, probability 0, space 0, times 0 [ 354.134531][T12649] CPU: 1 UID: 0 PID: 12649 Comm: syz.6.1944 Tainted: G L syzkaller #0 PREEMPT(full) [ 354.134547][T12649] Tainted: [L]=SOFTLOCKUP [ 354.134552][T12649] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 354.134559][T12649] Call Trace: [ 354.134564][T12649] [ 354.134570][T12649] dump_stack_lvl+0x100/0x190 [ 354.134605][T12649] should_fail_ex.cold+0x5/0xa [ 354.134623][T12649] should_failslab+0xc2/0x120 [ 354.134640][T12649] __kmalloc_cache_noprof+0x91/0x6d0 [ 354.134654][T12649] ? snd_card_file_add+0x52/0x320 [ 354.134669][T12649] snd_card_file_add+0x52/0x320 [ 354.134683][T12649] snd_mixer_oss_open+0xaf/0x2f0 [ 354.134700][T12649] ? __pfx_snd_mixer_oss_open+0x10/0x10 [ 354.134717][T12649] soundcore_open+0x2e3/0x5a0 [ 354.134738][T12649] ? __pfx_soundcore_open+0x10/0x10 [ 354.134762][T12649] chrdev_open+0x234/0x6a0 [ 354.134780][T12649] ? __pfx_apparmor_file_open+0x10/0x10 [ 354.134793][T12649] ? __pfx_chrdev_open+0x10/0x10 [ 354.134808][T12649] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 354.134826][T12649] do_dentry_open+0x6ab/0x14d0 [ 354.134840][T12649] ? __pfx_chrdev_open+0x10/0x10 [ 354.134857][T12649] vfs_open+0x82/0x3f0 [ 354.134874][T12649] path_openat+0x19fa/0x2440 [ 354.134891][T12649] ? __pfx_path_openat+0x10/0x10 [ 354.134909][T12649] do_file_open+0x20e/0x430 [ 354.134926][T12649] ? __pfx_do_file_open+0x10/0x10 [ 354.134952][T12649] ? _raw_spin_unlock+0x28/0x50 [ 354.134978][T12649] ? alloc_fd+0x471/0x7a0 [ 354.135000][T12649] do_sys_openat2+0x10f/0x1e0 [ 354.135018][T12649] ? __pfx_do_sys_openat2+0x10/0x10 [ 354.135036][T12649] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 354.135054][T12649] __ia32_compat_sys_openat+0x12d/0x210 [ 354.135072][T12649] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 354.135101][T12649] __do_fast_syscall_32+0x13a/0x8b0 [ 354.135117][T12649] do_fast_syscall_32+0x32/0x70 [ 354.135131][T12649] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 354.135147][T12649] RIP: 0023:0xf701efec [ 354.135162][T12649] Code: Unable to access opcode bytes at 0xf701efc2. [ 354.135167][T12649] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 354.135179][T12649] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000040 [ 354.135186][T12649] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 354.135193][T12649] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 354.135199][T12649] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 354.135206][T12649] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 354.135219][T12649] [ 354.186711][T12651] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(11) [ 354.186736][T12651] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 354.187475][T12651] vhci_hcd vhci_hcd.0: Device attached [ 354.190799][T12652] vhci_hcd: unknown pdu 2 [ 354.191116][ T12] vhci_hcd vhci_hcd.6: stop threads [ 354.191129][ T12] vhci_hcd vhci_hcd.6: release socket [ 354.191142][ T12] vhci_hcd vhci_hcd.6: disconnect device [ 354.470642][ T5810] usb 11-1: new high-speed USB device number 23 using dummy_hcd [ 354.524925][ T6847] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 354.547252][ T6847] usb 7-1: device descriptor read/8, error -71 [ 354.633979][ T5810] usb 11-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 354.635244][ T5810] usb 11-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 354.637756][ T5810] usb 11-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 354.640367][ T5810] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.640385][ T5810] usb 11-1: Product: syz [ 354.640396][ T5810] usb 11-1: Manufacturer: syz [ 354.640407][ T5810] usb 11-1: SerialNumber: syz [ 354.646979][ T5810] ti_usb_3410_5052 11-1:2.0: TI USB 5052 2 port adapter converter detected [ 354.651442][ T5810] usb 11-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 354.655224][ T5810] usb 11-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 354.829655][ T6847] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 354.861155][ T6847] usb 7-1: device descriptor read/8, error -71 [ 355.045265][ T6847] usb usb7-port1: unable to enumerate USB device [ 356.490042][T12695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 356.515685][T12693] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1959'. [ 356.524023][ T854] libceph: connect (1)0.0.0.0:6789 error -22 [ 356.524116][ T854] libceph: mon0 (1)0.0.0.0:6789 connect error [ 356.540803][ T854] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c [ 356.555315][T12695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 356.725092][T12651] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot clear input buffers, -110 [ 356.730096][ T854] usb 11-1: USB disconnect, device number 23 [ 356.747504][ T854] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 356.752576][ T854] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 356.752958][ T854] ti_usb_3410_5052 11-1:2.0: device disconnected [ 356.779513][ T25] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c [ 356.805982][ T25] libceph: connect (1)0.0.0.0:6789 error -22 [ 356.806110][ T25] libceph: mon0 (1)0.0.0.0:6789 connect error [ 357.353443][ T854] libceph: connect (1)0.0.0.0:6789 error -22 [ 357.353584][ T854] libceph: mon0 (1)0.0.0.0:6789 connect error [ 357.496814][T12712] FAULT_INJECTION: forcing a failure. [ 357.496814][T12712] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 357.496835][T12712] CPU: 1 UID: 0 PID: 12712 Comm: syz.6.1966 Tainted: G L syzkaller #0 PREEMPT(full) [ 357.496851][T12712] Tainted: [L]=SOFTLOCKUP [ 357.496855][T12712] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 357.496861][T12712] Call Trace: [ 357.496866][T12712] [ 357.496870][T12712] dump_stack_lvl+0x100/0x190 [ 357.496901][T12712] should_fail_ex.cold+0x5/0xa [ 357.496917][T12712] _copy_from_user+0x2e/0xd0 [ 357.496933][T12712] ? __pfx_binder_ioctl+0x10/0x10 [ 357.496949][T12712] binder_ioctl+0x4cb/0x74a0 [ 357.496967][T12712] ? find_held_lock+0x2b/0x80 [ 357.496981][T12712] ? tomoyo_path_number_perm+0x28f/0x580 [ 357.496998][T12712] ? tomoyo_path_number_perm+0x28f/0x580 [ 357.497018][T12712] ? tomoyo_path_number_perm+0x188/0x580 [ 357.497036][T12712] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 357.497054][T12712] ? __pfx_binder_ioctl+0x10/0x10 [ 357.497074][T12712] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 357.497091][T12712] ? do_vfs_ioctl+0x226/0x13e0 [ 357.497103][T12712] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 357.497123][T12712] ? find_held_lock+0x2b/0x80 [ 357.497135][T12712] ? __fget_files+0x215/0x3d0 [ 357.497148][T12712] ? hook_file_ioctl_common+0x140/0x440 [ 357.497163][T12712] ? __fget_files+0x21f/0x3d0 [ 357.497177][T12712] ? __pfx_binder_ioctl+0x10/0x10 [ 357.497194][T12712] compat_ptr_ioctl+0x6e/0xa0 [ 357.497205][T12712] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 357.497215][T12712] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 357.497229][T12712] __do_fast_syscall_32+0x13a/0x8b0 [ 357.497243][T12712] ? lockdep_hardirqs_on+0x7d/0x110 [ 357.497256][T12712] do_fast_syscall_32+0x32/0x70 [ 357.497269][T12712] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 357.497284][T12712] RIP: 0023:0xf701efec [ 357.497297][T12712] Code: Unable to access opcode bytes at 0xf701efc2. [ 357.497303][T12712] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 357.497314][T12712] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0306201 [ 357.497321][T12712] RDX: 00000000800001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 357.497328][T12712] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 357.497334][T12712] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 357.497341][T12712] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 357.497355][T12712] [ 357.497396][T12712] binder: 12711:12712 ioctl c0306201 800001c0 returned -14 [ 357.545381][T12714] netlink: 'syz.6.1967': attribute type 1 has an invalid length. [ 357.583758][T12714] bond1: (slave geneve2): making interface the new active one [ 357.589472][T12714] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 357.600080][T12714] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1967'. [ 357.606245][T12714] 8021q: adding VLAN 0 to HW filter on device bond1 [ 357.606698][ T5809] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 357.624593][ T7559] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 357.624619][ T7559] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 357.624637][ T7559] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 357.678532][T12693] ceph: No mds server is up or the cluster is laggy [ 358.531578][T12743] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1978'. [ 359.348949][T12755] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1981'. [ 359.835535][T12763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1982'. [ 359.850643][ T5810] libceph: connect (1)0.0.0.0:6789 error -22 [ 359.850766][ T5810] libceph: mon0 (1)0.0.0.0:6789 connect error [ 359.867905][ T5724] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c [ 360.138689][ T6847] libceph: connect (1)0.0.0.0:6789 error -22 [ 360.140611][ T6847] libceph: mon0 (1)0.0.0.0:6789 connect error [ 360.466590][T12755] ceph: No mds server is up or the cluster is laggy [ 360.702324][ T5810] libceph: connect (1)0.0.0.0:6789 error -22 [ 360.702474][ T5810] libceph: mon0 (1)0.0.0.0:6789 connect error [ 360.713211][ T5724] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c [ 360.984063][T12763] ceph: No mds server is up or the cluster is laggy [ 362.073000][T12793] input: syz0 as /devices/virtual/input/input97 [ 362.637558][T12822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.637764][T12822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.174778][ T43] kauditd_printk_skb: 617 callbacks suppressed [ 363.174837][ T43] audit: type=1800 audit(1790479789.118:1498): pid=12839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2011" name="file1" dev="9p" ino=71827641 res=0 errno=0 [ 363.214950][T12837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2012'. [ 364.354611][T12837] ceph: No mds server is up or the cluster is laggy [ 386.496726][T12856] FAULT_INJECTION: forcing a failure. [ 386.496726][T12856] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 386.496759][T12856] CPU: 3 UID: 0 PID: 12856 Comm: syz.6.2019 Tainted: G L syzkaller #0 PREEMPT(full) [ 386.496783][T12856] Tainted: [L]=SOFTLOCKUP [ 386.496790][T12856] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 386.496800][T12856] Call Trace: [ 386.496806][T12856] [ 386.496814][T12856] dump_stack_lvl+0x100/0x190 [ 386.496844][T12856] should_fail_ex.cold+0x5/0xa [ 386.496871][T12856] ? prepare_alloc_pages+0x16d/0x5b0 [ 386.496900][T12856] should_fail_alloc_page+0xeb/0x140 [ 386.496928][T12856] prepare_alloc_pages+0x1f0/0x5b0 [ 386.496955][T12856] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 386.496975][T12856] ? __pfx_get_page_from_freelist+0x10/0x10 [ 386.496996][T12856] ? prepare_alloc_pages+0x1f0/0x5b0 [ 386.497023][T12856] ? rcu_is_watching+0x13/0xc0 [ 386.497043][T12856] ? __alloc_frozen_pages_noprof+0x56b/0x3300 [ 386.497065][T12856] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 386.497088][T12856] ? find_held_lock+0x2b/0x80 [ 386.497108][T12856] ? is_bpf_text_address+0x8a/0x1a0 [ 386.497132][T12856] ? is_bpf_text_address+0x8a/0x1a0 [ 386.497156][T12856] ? bpf_ksym_find+0x124/0x1c0 [ 386.497177][T12856] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 386.497201][T12856] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 386.497219][T12856] ? is_bpf_text_address+0x94/0x1a0 [ 386.497244][T12856] ? __kernel_text_address+0xd/0x30 [ 386.497284][T12856] alloc_pages_bulk_noprof+0x5e1/0x13c0 [ 386.497308][T12856] ? policy_nodemask+0xed/0x4f0 [ 386.497335][T12856] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 386.497358][T12856] ? __do_fast_syscall_32+0x13a/0x8b0 [ 386.497391][T12856] __kasan_populate_vmalloc+0xf0/0x210 [ 386.497418][T12856] alloc_vmap_area+0x95d/0x2bb0 [ 386.497450][T12856] ? kasan_save_track+0x14/0x30 [ 386.497472][T12856] ? __kasan_kmalloc+0xaa/0xb0 [ 386.497493][T12856] ? __pfx_alloc_vmap_area+0x10/0x10 [ 386.497515][T12856] ? __vb2_queue_alloc+0x8d5/0x1160 [ 386.497564][T12856] ? __get_vm_area_node+0x124/0x350 [ 386.497594][T12856] __get_vm_area_node+0x1ed/0x350 [ 386.497625][T12856] __vmalloc_node_range_noprof+0x268/0x1420 [ 386.497652][T12856] ? vb2_vmalloc_alloc+0x135/0x410 [ 386.497686][T12856] ? vb2_vmalloc_alloc+0x135/0x410 [ 386.497717][T12856] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 386.497745][T12856] ? __kasan_kmalloc+0xaa/0xb0 [ 386.497768][T12856] ? vb2_vmalloc_alloc+0x135/0x410 [ 386.497793][T12856] vmalloc_user_noprof+0x9e/0xe0 [ 386.497818][T12856] ? vb2_vmalloc_alloc+0x135/0x410 [ 386.497843][T12856] vb2_vmalloc_alloc+0x135/0x410 [ 386.497876][T12856] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 386.497905][T12856] __vb2_queue_alloc+0x8d5/0x1160 [ 386.497942][T12856] vb2_core_reqbufs+0x899/0xf30 [ 386.497973][T12856] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 386.498003][T12856] ? __vb2_init_fileio+0x18f/0x1000 [ 386.498033][T12856] __vb2_init_fileio+0x32d/0x1000 [ 386.498056][T12856] ? vb2_fop_read+0xe5/0x520 [ 386.498078][T12856] ? __pfx_try_to_wake_up+0x10/0x10 [ 386.498110][T12856] __vb2_perform_fileio+0x9ba/0x1380 [ 386.498142][T12856] ? __pfx___vb2_perform_fileio+0x10/0x10 [ 386.498172][T12856] vb2_fop_read+0x211/0x520 [ 386.498199][T12856] v4l2_read+0x229/0x2c0 [ 386.498219][T12856] ? __pfx_v4l2_read+0x10/0x10 [ 386.498240][T12856] vfs_read+0x1e4/0xb40 [ 386.498260][T12856] ? lock_acquire+0x1d1/0x380 [ 386.498283][T12856] ? __fget_files+0x34/0x3d0 [ 386.498304][T12856] ? __pfx_vfs_read+0x10/0x10 [ 386.498322][T12856] ? find_held_lock+0x2b/0x80 [ 386.498370][T12856] ? __fget_files+0x215/0x3d0 [ 386.498388][T12856] ? __fget_files+0x215/0x3d0 [ 386.498413][T12856] ? __fget_files+0x21f/0x3d0 [ 386.498441][T12856] ksys_read+0x12a/0x250 [ 386.498458][T12856] ? __pfx_ksys_read+0x10/0x10 [ 386.498486][T12856] __do_fast_syscall_32+0x13a/0x8b0 [ 386.498507][T12856] ? lockdep_hardirqs_on+0x7d/0x110 [ 386.498528][T12856] do_fast_syscall_32+0x32/0x70 [ 386.498549][T12856] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 386.498574][T12856] RIP: 0023:0xf701efec [ 386.498594][T12856] Code: Unable to access opcode bytes at 0xf701efc2. [ 386.498604][T12856] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000003 [ 386.498623][T12856] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000040 [ 386.498634][T12856] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 386.498645][T12856] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 386.498656][T12856] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 386.498667][T12856] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 386.498689][T12856] [ 386.498968][T12856] syz.6.2019: vmalloc error: size 32768, align 0x1000, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 386.499048][T12856] CPU: 3 UID: 0 PID: 12856 Comm: syz.6.2019 Tainted: G L syzkaller #0 PREEMPT(full) [ 386.499075][T12856] Tainted: [L]=SOFTLOCKUP [ 386.499082][T12856] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 386.499093][T12856] Call Trace: [ 386.499100][T12856] [ 386.499108][T12856] dump_stack_lvl+0x100/0x190 [ 386.499136][T12856] warn_alloc.cold+0x9e/0xb2 [ 386.499158][T12856] ? __pfx_warn_alloc+0x10/0x10 [ 386.499178][T12856] ? lockdep_hardirqs_on+0x7d/0x110 [ 386.499201][T12856] ? __get_vm_area_node+0x2f0/0x350 [ 386.499229][T12856] ? __get_vm_area_node+0x22b/0x350 [ 386.499258][T12856] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 386.499293][T12856] ? vb2_vmalloc_alloc+0x135/0x410 [ 386.499320][T12856] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 386.499349][T12856] ? __kasan_kmalloc+0xaa/0xb0 [ 386.499373][T12856] ? vb2_vmalloc_alloc+0x135/0x410 [ 386.499397][T12856] vmalloc_user_noprof+0x9e/0xe0 [ 386.499422][T12856] ? vb2_vmalloc_alloc+0x135/0x410 [ 386.499447][T12856] vb2_vmalloc_alloc+0x135/0x410 [ 386.499471][T12856] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 386.499496][T12856] __vb2_queue_alloc+0x8d5/0x1160 [ 386.499532][T12856] vb2_core_reqbufs+0x899/0xf30 [ 386.499561][T12856] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 386.499591][T12856] ? __vb2_init_fileio+0x18f/0x1000 [ 386.499619][T12856] __vb2_init_fileio+0x32d/0x1000 [ 386.499643][T12856] ? vb2_fop_read+0xe5/0x520 [ 386.499664][T12856] ? __pfx_try_to_wake_up+0x10/0x10 [ 386.499694][T12856] __vb2_perform_fileio+0x9ba/0x1380 [ 386.499726][T12856] ? __pfx___vb2_perform_fileio+0x10/0x10 [ 386.499758][T12856] vb2_fop_read+0x211/0x520 [ 386.499783][T12856] v4l2_read+0x229/0x2c0 [ 386.499804][T12856] ? __pfx_v4l2_read+0x10/0x10 [ 386.499825][T12856] vfs_read+0x1e4/0xb40 [ 386.499845][T12856] ? lock_acquire+0x1d1/0x380 [ 386.499877][T12856] ? __fget_files+0x34/0x3d0 [ 386.499900][T12856] ? __pfx_vfs_read+0x10/0x10 [ 386.499919][T12856] ? find_held_lock+0x2b/0x80 [ 386.499939][T12856] ? __fget_files+0x215/0x3d0 [ 386.499958][T12856] ? __fget_files+0x215/0x3d0 [ 386.499984][T12856] ? __fget_files+0x21f/0x3d0 [ 386.500010][T12856] ksys_read+0x12a/0x250 [ 386.500029][T12856] ? __pfx_ksys_read+0x10/0x10 [ 386.500056][T12856] __do_fast_syscall_32+0x13a/0x8b0 [ 386.500077][T12856] ? lockdep_hardirqs_on+0x7d/0x110 [ 386.500098][T12856] do_fast_syscall_32+0x32/0x70 [ 386.500120][T12856] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 386.500143][T12856] RIP: 0023:0xf701efec [ 386.500163][T12856] Code: Unable to access opcode bytes at 0xf701efc2. [ 386.500172][T12856] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000003 [ 386.500190][T12856] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000040 [ 386.500202][T12856] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 386.500214][T12856] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 386.500225][T12856] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 386.500236][T12856] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 386.500258][T12856] [ 386.500266][T12856] Mem-Info: [ 386.500274][T12856] active_anon:5487 inactive_anon:2306 isolated_anon:0 [ 386.500274][T12856] active_file:2485 inactive_file:22339 isolated_file:0 [ 386.500274][T12856] unevictable:997 dirty:256 writeback:0 [ 386.500274][T12856] slab_reclaimable:6840 slab_unreclaimable:65523 [ 386.500274][T12856] mapped:25237 shmem:1032 pagetables:1516 [ 386.500274][T12856] sec_pagetables:311 bounce:0 [ 386.500274][T12856] kernel_misc_reclaimable:0 [ 386.500274][T12856] free:36513 free_pcp:13694 free_cma:0 [ 386.500320][T12856] Node 0 active_anon:48kB inactive_anon:184kB active_file:4kB inactive_file:192kB unevictable:1988kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:4kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9024kB pagetables:1052kB sec_pagetables:1120kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 386.500361][T12856] Node 1 active_anon:21900kB inactive_anon:9040kB active_file:9936kB inactive_file:89164kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:100920kB dirty:1020kB writeback:0kB shmem:2128kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:14336kB kernel_stack:6424kB pagetables:5012kB sec_pagetables:124kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 386.500405][T12856] Node 0 DMA free:2780kB boost:2048kB min:2792kB low:2976kB high:3160kB reserved_highatomic:0kB free_highatomic:0kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:64kB local_pcp:60kB free_cma:0kB [ 386.500452][T12856] lowmem_reserve[]: 0 278 278 278 278 [ 386.500482][T12856] Node 0 DMA32 free:19076kB boost:4096kB min:17904kB low:21356kB high:24808kB reserved_highatomic:0kB free_highatomic:0kB active_anon:36kB inactive_anon:184kB active_file:4kB inactive_file:184kB unevictable:1988kB writepending:4kB zspages:1224kB present:1032196kB managed:284800kB mlocked:0kB bounce:0kB free_pcp:3292kB local_pcp:1060kB free_cma:0kB [ 386.500527][T12856] lowmem_reserve[]: 0 0 0 0 0 [ 386.500556][T12856] Node 1 DMA32 free:124836kB boost:0kB min:45976kB low:57468kB high:68960kB reserved_highatomic:0kB free_highatomic:0kB active_anon:21900kB inactive_anon:9040kB active_file:9936kB inactive_file:89164kB unevictable:2000kB writepending:1020kB zspages:3160kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:51420kB local_pcp:11724kB free_cma:0kB [ 386.500605][T12856] lowmem_reserve[]: 0 0 0 0 0 [ 386.500633][T12856] Node 0 DMA: 91*4kB (UE) 32*8kB (UE) 11*16kB (UE) 10*32kB (UE) 8*64kB (UE) 5*128kB (UE) 0*256kB 1*512kB (E) 0*1024kB 0*2048kB 0*4096kB = 2780kB [ 386.505360][T12856] Node 0 DMA32: 439*4kB (UE) 147*8kB (UE) 23*16kB (UME) 101*32kB (UME) 38*64kB (UME) 21*128kB (UME) 11*256kB (UM) 5*512kB (UM) 2*1024kB (UM) 0*2048kB 0*4096kB = 19076kB [ 386.505488][T12856] Node 1 DMA32: 1609*4kB (UME) 228*8kB (UME) 127*16kB (UME) 30*32kB (UME) 46*64kB (UME) 101*128kB (UME) 82*256kB (UME) 55*512kB (UM) 27*1024kB (ME) 6*2048kB (UM) 2*4096kB (M) = 124404kB [ 386.505620][T12856] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 386.505634][T12856] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 386.505647][T12856] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 386.505661][T12856] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 386.505675][T12856] 26846 total pagecache pages [ 386.505682][T12856] 991 pages in swap cache [ 386.505688][T12856] Free swap = 107752kB [ 386.505695][T12856] Total swap = 124996kB [ 386.505702][T12856] 524155 pages RAM [ 386.505708][T12856] 0 pages HighMem/MovableOnly [ 386.505716][T12856] 212063 pages reserved [ 386.505723][T12856] 0 pages cma reserved [ 386.791850][T12858] syz.1.2017(12858): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 387.260289][T12871] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 387.268651][T12871] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 387.442423][T12874] netlink: 'syz.0.2024': attribute type 11 has an invalid length. [ 387.442473][T12874] netlink: 448 bytes leftover after parsing attributes in process `syz.0.2024'. [ 387.720961][T12879] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 387.720978][T12879] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 387.721079][T12879] vhci_hcd vhci_hcd.0: Device attached [ 387.723396][T12880] vhci_hcd: unknown pdu 2 [ 387.723685][ T7559] vhci_hcd vhci_hcd.1: stop threads [ 387.723695][ T7559] vhci_hcd vhci_hcd.1: release socket [ 387.723706][ T7559] vhci_hcd vhci_hcd.1: disconnect device [ 388.002595][ T6847] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 388.176751][ T6847] usb 6-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 388.177908][ T6847] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 388.178739][ T6847] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 388.180766][ T6847] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.180784][ T6847] usb 6-1: Product: syz [ 388.180795][ T6847] usb 6-1: Manufacturer: syz [ 388.180806][ T6847] usb 6-1: SerialNumber: syz [ 388.204700][ T6847] ti_usb_3410_5052 6-1:2.0: TI USB 5052 2 port adapter converter detected [ 388.209572][ T6847] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 388.211547][ T6847] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 388.457947][ T5724] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 388.515811][T12890] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 388.515828][T12890] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 388.515899][T12890] vhci_hcd vhci_hcd.0: Device attached [ 388.517311][T12891] vhci_hcd: unknown pdu 2 [ 388.517577][ T5809] vhci_hcd vhci_hcd.0: stop threads [ 388.517587][ T5809] vhci_hcd vhci_hcd.0: release socket [ 388.517597][ T5809] vhci_hcd vhci_hcd.0: disconnect device [ 388.518648][T12890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.518856][T12890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.620326][ T5724] usb 7-1: Using ep0 maxpacket: 8 [ 388.620935][ T5724] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 388.621904][ T5724] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 388.621936][ T5724] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 388.621949][ T5724] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 388.621962][ T5724] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 388.621976][ T5724] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 388.622019][ T5724] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.845959][ T5724] usb 7-1: usb_control_msg returned -32 [ 388.845985][ T5724] usbtmc 7-1:16.0: can't read capabilities [ 389.228788][T12897] usbtmc 7-1:16.0: stb usb_control_msg returned -32 [ 389.282560][T12899] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(11) [ 389.282576][T12899] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 389.282929][T12899] vhci_hcd vhci_hcd.0: Device attached [ 389.285276][T12900] vhci_hcd: unknown pdu 2 [ 389.285548][ T7559] vhci_hcd vhci_hcd.6: stop threads [ 389.285560][ T7559] vhci_hcd vhci_hcd.6: release socket [ 389.285570][ T7559] vhci_hcd vhci_hcd.6: disconnect device [ 389.574011][ T5525] usb 11-1: new high-speed USB device number 24 using dummy_hcd [ 389.737325][ T5525] usb 11-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 389.738474][ T5525] usb 11-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 389.739537][ T5525] usb 11-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 389.741597][ T5525] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.741610][ T5525] usb 11-1: Product: syz [ 389.741618][ T5525] usb 11-1: Manufacturer: syz [ 389.741663][ T5525] usb 11-1: SerialNumber: syz [ 389.751520][ T5525] ti_usb_3410_5052 11-1:2.0: TI USB 5052 2 port adapter converter detected [ 389.756640][ T5525] usb 11-1: TI USB 5052 2 port adapter converter now attached to ttyUSB2 [ 389.759586][ T5525] usb 11-1: TI USB 5052 2 port adapter converter now attached to ttyUSB3 [ 390.278778][T12879] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot clear input buffers, -110 [ 390.279833][T12899] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set config on port 0, -32 [ 390.280147][T12899] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -32 [ 390.280167][T12899] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -32 [ 390.280370][T12899] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command, -32 [ 390.280817][T12890] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set config on port 0, -32 [ 390.281037][T12890] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -32 [ 390.281056][T12890] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -32 [ 390.281207][T12890] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command, -32 [ 390.281635][ T5838] usb 6-1: USB disconnect, device number 31 [ 390.286711][ T5838] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 390.288932][ T5838] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 390.291375][ T5838] ti_usb_3410_5052 6-1:2.0: device disconnected [ 391.046568][T12911] FAULT_INJECTION: forcing a failure. [ 391.046568][T12911] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 391.046590][T12911] CPU: 0 UID: 0 PID: 12911 Comm: syz.1.2035 Tainted: G L syzkaller #0 PREEMPT(full) [ 391.046606][T12911] Tainted: [L]=SOFTLOCKUP [ 391.046610][T12911] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 391.046616][T12911] Call Trace: [ 391.046620][T12911] [ 391.046625][T12911] dump_stack_lvl+0x100/0x190 [ 391.046643][T12911] should_fail_ex.cold+0x5/0xa [ 391.046658][T12911] _copy_from_user+0x2e/0xd0 [ 391.046674][T12911] get_user_ifreq+0x116/0x1c0 [ 391.046687][T12911] inet_ioctl+0x381/0x3f0 [ 391.046699][T12911] ? __pfx_inet_ioctl+0x10/0x10 [ 391.046713][T12911] ? kasan_quarantine_put+0x104/0x240 [ 391.046738][T12911] ? tomoyo_path_number_perm+0x188/0x580 [ 391.046765][T12911] sock_do_ioctl+0x118/0x280 [ 391.046778][T12911] ? __pfx_sock_do_ioctl+0x10/0x10 [ 391.046793][T12911] ? do_vfs_ioctl+0x226/0x13e0 [ 391.046805][T12911] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 391.046818][T12911] compat_sock_ioctl+0x568/0x760 [ 391.046834][T12911] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 391.046847][T12911] ? hook_file_ioctl_common+0x140/0x440 [ 391.046862][T12911] ? __fget_files+0x21f/0x3d0 [ 391.046878][T12911] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 391.046892][T12911] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 391.046906][T12911] __do_fast_syscall_32+0x13a/0x8b0 [ 391.046919][T12911] ? lockdep_hardirqs_on+0x7d/0x110 [ 391.046932][T12911] do_fast_syscall_32+0x32/0x70 [ 391.046946][T12911] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 391.046961][T12911] RIP: 0023:0xf6ffefec [ 391.046973][T12911] Code: Unable to access opcode bytes at 0xf6ffefc2. [ 391.046978][T12911] RSP: 002b:00000000f53ed50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 391.046989][T12911] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000000008914 [ 391.046996][T12911] RDX: 0000000080000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 391.047003][T12911] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 391.047009][T12911] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 391.047016][T12911] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 391.047034][T12911] [ 391.468206][ T5879] usb 7-1: USB disconnect, device number 39 [ 391.590013][ T5838] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 391.753156][ T5838] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 391.754093][ T5838] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 391.754131][ T5838] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 391.754151][ T5838] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 391.754173][ T5838] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 391.754195][ T5838] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 391.754226][ T5838] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.756292][ T5838] usb 6-1: config 0 descriptor?? [ 391.756974][T12921] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 391.759737][ T5838] usbhid 6-1:0.0: fixing wrong optional hid class descriptors count [ 392.200425][ T5838] plantronics 0003:047F:FFFF.000D: global environment stack underflow [ 392.200439][ T5838] plantronics 0003:047F:FFFF.000D: item 0 0 1 11 parsing failed [ 392.200708][ T5838] plantronics 0003:047F:FFFF.000D: parse failed [ 392.200747][ T5838] plantronics 0003:047F:FFFF.000D: probe with driver plantronics failed with error -22 [ 392.424959][ T5838] usb 6-1: USB disconnect, device number 32 [ 392.569382][T12936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2040'. [ 392.581622][ T5525] libceph: connect (1)0.0.0.0:6789 error -22 [ 392.581749][ T5525] libceph: mon0 (1)0.0.0.0:6789 connect error [ 392.599016][ T25] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c [ 392.671331][ T854] usb 11-1: USB disconnect, device number 24 [ 392.688641][ T854] ti_usb_3410_5052_2 ttyUSB2: TI USB 5052 2 port adapter converter now disconnected from ttyUSB2 [ 392.690101][ T854] ti_usb_3410_5052_2 ttyUSB3: TI USB 5052 2 port adapter converter now disconnected from ttyUSB3 [ 392.690526][ T854] ti_usb_3410_5052 11-1:2.0: device disconnected [ 392.793044][ T25] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c [ 392.858533][ T5525] libceph: connect (1)0.0.0.0:6789 error -22 [ 392.858668][ T5525] libceph: mon0 (1)0.0.0.0:6789 connect error [ 393.302235][ T5838] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 393.410673][ T5525] libceph: connect (1)0.0.0.0:6789 error -22 [ 393.410797][ T5525] libceph: mon0 (1)0.0.0.0:6789 connect error [ 393.465279][ T5838] usb 6-1: New USB device found, idVendor=056a, idProduct=030c, bcdDevice= 0.00 [ 393.466355][ T5838] usb 6-1: config 0 interface 0 has no altsetting 0 [ 393.466374][ T5838] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.468104][ T5838] usb 6-1: config 0 descriptor?? [ 393.749321][T12936] ceph: No mds server is up or the cluster is laggy [ 394.083674][ T5838] usb 6-1: string descriptor 0 read error: -71 [ 394.087986][ T5838] usbhid 6-1:0.0: can't add hid device: -71 [ 394.088047][ T5838] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 394.089377][ T5838] usb 6-1: USB disconnect, device number 33 [ 394.246758][T12977] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0002 instead [ 394.246775][T12977] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0xee65 instead [ 394.246785][T12977] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000000c: 0x430f instead [ 394.246794][T12977] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0xd53a instead [ 394.246803][T12977] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0x0f55 instead [ 394.246812][T12977] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xcfa2 instead [ 394.246822][T12977] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0xf347 instead [ 394.246830][T12977] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0x9f74 instead [ 394.246839][T12977] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0xef4e instead [ 394.246848][T12977] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000028: 0x8f22 instead [ 394.246857][T12977] jffs2: Further such events for this erase block will not be printed [ 394.246904][T12977] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 394.246908][T12977] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32 [ 394.935356][T12985] fuse: Bad value for 'user_id' [ 394.935374][T12985] fuse: Bad value for 'user_id' [ 395.199018][ T5724] usb 11-1: new low-speed USB device number 25 using dummy_hcd [ 395.339925][ T5724] usb 11-1: device descriptor read/64, error -71 [ 395.600171][ T5724] usb 11-1: new low-speed USB device number 26 using dummy_hcd [ 395.649538][T12993] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 395.740783][ T5724] usb 11-1: device descriptor read/64, error -71 [ 395.860232][ T5724] usb usb11-port1: attempt power cycle [ 395.895100][T13007] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 395.898689][T13007] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 396.012594][T13011] loop8: detected capacity change from 0 to 7 [ 396.028716][T13011] Dev loop8: unable to read RDB block 7 [ 396.028737][T13011] loop8: unable to read partition table [ 396.028876][T13011] loop8: partition table beyond EOD, truncated [ 396.028893][T13011] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 396.164706][T13014] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2067'. [ 396.176193][ T5525] libceph: connect (1)0.0.0.0:6789 error -22 [ 396.176285][ T5525] libceph: mon0 (1)0.0.0.0:6789 connect error [ 396.196149][ T5525] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c [ 396.228496][ T5724] usb 11-1: new low-speed USB device number 27 using dummy_hcd [ 396.250868][ T5724] usb 11-1: device descriptor read/8, error -71 [ 396.466868][ T6847] libceph: connect (1)0.0.0.0:6789 error -22 [ 396.466986][ T6847] libceph: mon0 (1)0.0.0.0:6789 connect error [ 396.474047][T13021] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 396.510530][ T5724] usb 11-1: new low-speed USB device number 28 using dummy_hcd [ 396.532431][ T5724] usb 11-1: device descriptor read/8, error -71 [ 396.651666][ T5724] usb usb11-port1: unable to enumerate USB device [ 396.879608][ T6847] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c [ 397.030779][ T6847] libceph: connect (1)0.0.0.0:6789 error -22 [ 397.030940][ T6847] libceph: mon0 (1)0.0.0.0:6789 connect error [ 397.312370][T13014] ceph: No mds server is up or the cluster is laggy [ 398.122170][T13053] trusted_key: encrypted_key: master key parameter is missing [ 398.941599][T13067] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2094'. [ 398.977253][ T43] audit: type=1326 audit(1790479822.151:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13070 comm="syz.0.2087" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 398.979219][ T43] audit: type=1326 audit(1790479822.151:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13070 comm="syz.0.2087" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 398.981185][ T43] audit: type=1326 audit(1790479822.151:1501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13070 comm="syz.0.2087" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf708efec code=0x7ffc0000 [ 398.981212][ T43] audit: type=1326 audit(1790479822.151:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13070 comm="syz.0.2087" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 398.981321][ T43] audit: type=1326 audit(1790479822.151:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13070 comm="syz.0.2087" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 398.983397][ T43] audit: type=1326 audit(1790479822.160:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13070 comm="syz.0.2087" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf708efec code=0x7ffc0000 [ 398.983423][ T43] audit: type=1326 audit(1790479822.160:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13070 comm="syz.0.2087" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 398.983443][ T43] audit: type=1326 audit(1790479822.160:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13070 comm="syz.0.2087" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 398.986237][ T43] audit: type=1326 audit(1790479822.160:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13070 comm="syz.0.2087" exe="/syz-executor" sig=0 arch=40000003 syscall=255 compat=1 ip=0xf708efec code=0x7ffc0000 [ 398.986379][ T43] audit: type=1326 audit(1790479822.160:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13070 comm="syz.0.2087" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 399.064631][T13071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0002 instead [ 399.064647][T13071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0xee65 instead [ 399.064656][T13071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000000c: 0x430f instead [ 399.064664][T13071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0xd53a instead [ 399.064673][T13071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0x0f55 instead [ 399.064682][T13071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xcfa2 instead [ 399.064692][T13071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0xf347 instead [ 399.064701][T13071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0x9f74 instead [ 399.064710][T13071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0xef4e instead [ 399.064719][T13071] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000028: 0x8f22 instead [ 399.064728][T13071] jffs2: Further such events for this erase block will not be printed [ 399.064774][T13071] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 399.064778][T13071] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32 [ 400.062746][T13082] netlink: 'syz.6.2092': attribute type 10 has an invalid length. [ 400.095658][T13089] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2099'. [ 400.121036][T13082] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 401.300553][T13089] ceph: No mds server is up or the cluster is laggy [ 401.388118][ T5724] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 401.550102][ T5724] usb 7-1: Using ep0 maxpacket: 32 [ 401.550999][ T5724] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 401.552021][ T5724] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 401.552061][ T5724] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 401.552085][ T5724] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 401.552108][ T5724] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 401.554027][ T5724] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.554049][ T5724] usb 7-1: Product: syz [ 401.554063][ T5724] usb 7-1: Manufacturer: syz [ 401.554078][ T5724] usb 7-1: SerialNumber: syz [ 401.586398][ C3] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 401.594162][ T5724] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/input/input98 [ 401.764857][T13127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 401.770705][T13127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 401.775948][T13121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 401.776362][T13121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 401.800974][ T5724] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 401.800987][ T5724] (id 0x00) [ 401.853183][ T5724] rc_core: IR keymap rc-imon-pad not found [ 401.853203][ T5724] Registered IR keymap rc-empty [ 401.853254][ T5724] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 401.853266][ T5724] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 402.016780][ T5724] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/rc/rc0 [ 402.017686][ T5724] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/rc/rc0/input99 [ 402.022330][ T5724] imon 7-1:155.0: iMON device (15c2:ffdc, intf0) on usb<7:40> initialized [ 402.220618][ T5724] usb 7-1: USB disconnect, device number 40 [ 402.537627][T13148] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2113'. [ 403.210454][T13157] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 403.212232][T13157] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 403.500608][ T854] usb 11-1: new high-speed USB device number 29 using dummy_hcd [ 403.674090][ T854] usb 11-1: Using ep0 maxpacket: 32 [ 403.677143][ T854] usb 11-1: unable to get BOS descriptor or descriptor too short [ 403.677182][ T854] usb 11-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 403.678115][ T854] usb 11-1: config 14 has an invalid interface number: 57 but max is 1 [ 403.678134][ T854] usb 11-1: config 14 has an invalid interface number: 228 but max is 1 [ 403.678151][ T854] usb 11-1: config 14 has no interface number 0 [ 403.678165][ T854] usb 11-1: config 14 has no interface number 1 [ 403.678214][ T854] usb 11-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 403.678234][ T854] usb 11-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 403.678255][ T854] usb 11-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 403.678300][ T854] usb 11-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 403.678323][ T854] usb 11-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 403.678344][ T854] usb 11-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 403.678365][ T854] usb 11-1: config 14 interface 57 has no altsetting 0 [ 403.678381][ T854] usb 11-1: config 14 interface 228 has no altsetting 0 [ 403.680532][ T854] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.680552][ T854] usb 11-1: Product: syz [ 403.680565][ T854] usb 11-1: Manufacturer: syz [ 403.680578][ T854] usb 11-1: SerialNumber: syz [ 404.228712][ T854] legousbtower 11-1:14.57: interrupt endpoints not found [ 404.450476][T13180] netlink: 'syz.0.2123': attribute type 30 has an invalid length. [ 404.451540][T13180] netlink: 'syz.0.2123': attribute type 30 has an invalid length. [ 404.466908][T13176] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2122'. [ 404.503511][T13184] netlink: 'syz.0.2125': attribute type 9 has an invalid length. [ 404.546981][T13186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2124'. [ 404.551901][T13187] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 404.554973][ T5525] libceph: connect (1)0.0.0.0:6789 error -22 [ 404.555097][ T5525] libceph: mon0 (1)0.0.0.0:6789 connect error [ 404.556911][T13187] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 404.573643][ T5525] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c [ 404.673431][ T854] legousbtower 11-1:14.228: get version request failed: -121 [ 404.673553][ T854] legousbtower 11-1:14.228: probe with driver legousbtower failed with error -121 [ 404.835179][ T5525] libceph: connect (1)0.0.0.0:6789 error -22 [ 404.835320][ T5525] libceph: mon0 (1)0.0.0.0:6789 connect error [ 405.191390][ T5525] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c [ 405.277500][T13198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.280395][T13198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.329604][T13201] usb usb8: selecting invalid altsetting 1048576 [ 405.383238][T13204] random: crng reseeded on system resumption [ 405.386507][ T5525] libceph: connect (1)0.0.0.0:6789 error -22 [ 405.386592][ T5525] libceph: mon0 (1)0.0.0.0:6789 connect error [ 405.430913][T13204] FAULT_INJECTION: forcing a failure. [ 405.430913][T13204] name failslab, interval 1, probability 0, space 0, times 0 [ 405.430936][T13204] CPU: 2 UID: 0 PID: 13204 Comm: syz.1.2131 Tainted: G L syzkaller #0 PREEMPT(full) [ 405.430951][T13204] Tainted: [L]=SOFTLOCKUP [ 405.430956][T13204] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 405.430962][T13204] Call Trace: [ 405.430967][T13204] [ 405.430971][T13204] dump_stack_lvl+0x100/0x190 [ 405.430991][T13204] should_fail_ex.cold+0x5/0xa [ 405.431012][T13204] should_failslab+0xc2/0x120 [ 405.431028][T13204] __kmalloc_noprof+0xfc/0x840 [ 405.431042][T13204] ? tomoyo_encode2+0xfb/0x3c0 [ 405.431058][T13204] tomoyo_encode2+0xfb/0x3c0 [ 405.431072][T13204] tomoyo_encode+0x29/0x50 [ 405.431085][T13204] tomoyo_realpath_from_path+0x18c/0x690 [ 405.431101][T13204] tomoyo_path_number_perm+0x23c/0x580 [ 405.431119][T13204] ? tomoyo_path_number_perm+0x22e/0x580 [ 405.431137][T13204] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 405.431155][T13204] ? get_pid_task+0x106/0x250 [ 405.431172][T13204] ? __lock_acquire+0x5c0/0x1f40 [ 405.431194][T13204] ? __fget_files+0x34/0x3d0 [ 405.431208][T13204] ? find_held_lock+0x2b/0x80 [ 405.431220][T13204] ? __fget_files+0x215/0x3d0 [ 405.431232][T13204] ? hook_file_ioctl_common+0x140/0x440 [ 405.431243][T13204] ? __fget_files+0x215/0x3d0 [ 405.431259][T13204] ? __fget_files+0x21f/0x3d0 [ 405.431274][T13204] security_file_ioctl_compat+0xd3/0x230 [ 405.431293][T13204] __ia32_compat_sys_ioctl+0xc2/0x360 [ 405.431307][T13204] __do_fast_syscall_32+0x13a/0x8b0 [ 405.431321][T13204] ? lockdep_hardirqs_on+0x7d/0x110 [ 405.431335][T13204] do_fast_syscall_32+0x32/0x70 [ 405.431348][T13204] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 405.431363][T13204] RIP: 0023:0xf6ffefec [ 405.431376][T13204] Code: Unable to access opcode bytes at 0xf6ffefc2. [ 405.431381][T13204] RSP: 002b:00000000f53ed50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 405.431393][T13204] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080083314 [ 405.431400][T13204] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 405.431407][T13204] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 405.431413][T13204] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 405.431420][T13204] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 405.431433][T13204] [ 405.431443][T13204] ERROR: Out of memory at tomoyo_realpath_from_path. [ 405.711480][T13186] ceph: No mds server is up or the cluster is laggy [ 406.148324][T13217] random: crng reseeded on system resumption [ 406.208821][T13222] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 406.212576][T13222] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 406.395770][T13230] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2138'. [ 406.497503][ T5525] usb 11-1: USB disconnect, device number 29 [ 406.523891][T13234] random: crng reseeded on system resumption [ 406.666626][T13239] vcan0: tx address claim with dest, not broadcast [ 406.669522][T13240] vcan0: tx address claim with dest, not broadcast [ 406.669986][T13239] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 406.799941][T13246] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2142'. [ 406.834292][T13249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 406.837246][T13249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 407.434457][T13257] ptp ptp0: new virtual clock ptp2 [ 407.435332][T13257] ptp ptp0: guarantee physical clock free running [ 407.575629][ T5724] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 407.738200][ T5724] usb 6-1: Using ep0 maxpacket: 8 [ 407.738685][ T5724] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 407.739521][ T5724] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 407.739533][ T5724] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 407.739552][ T5724] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 407.739572][ T5724] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.753096][ T5724] hub 6-1:1.0: bad descriptor, ignoring hub [ 407.753111][ T5724] hub 6-1:1.0: probe with driver hub failed with error -5 [ 407.753340][ T5724] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 408.857558][T13282] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2153'. [ 409.057068][T13286] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2152'. [ 409.108039][ T43] kauditd_printk_skb: 72 callbacks suppressed [ 409.108051][ T43] audit: type=1326 audit(1790479831.498:1581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13291 comm="syz.0.2155" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7fc00000 [ 409.550385][ T6847] usb 6-1: USB disconnect, device number 34 [ 409.831400][T13322] netlink: 'syz.2.2157': attribute type 10 has an invalid length. [ 409.833949][T13322] 8021q: adding VLAN 0 to HW filter on device team0 [ 409.834642][T13322] team0: entered allmulticast mode [ 409.834652][T13322] team_slave_0: entered allmulticast mode [ 409.834662][T13322] team_slave_1: entered allmulticast mode [ 409.835019][T13322] bond0: (slave team0): Enslaving as an active interface with an up link [ 409.835046][T13322] team_slave_0: entered promiscuous mode [ 409.835116][T13322] team_slave_1: entered promiscuous mode [ 409.888356][ T43] audit: type=1326 audit(1790479832.218:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13291 comm="syz.0.2155" exe="/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf708efec code=0x7fc00000 [ 409.950574][T13323] pim6reg: entered allmulticast mode [ 410.068751][T13323] pim6reg: left allmulticast mode [ 410.198033][T13331] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2159'. [ 410.311973][T13323] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2158'. [ 411.638151][T13346] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 411.638151][T13346] [ 411.638401][T13346] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 411.638737][T13346] CIFS: Attempting to mount //127.0.0.1/share [ 411.642908][T13345] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 411.642908][T13345] [ 411.642924][T13345] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 411.763278][T13364] 9p: Bad value for 'rfdno' [ 411.819661][T13365] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2168'. [ 412.078918][T13368] comedi comedi0: 8255: I/O port conflict (0x3000000,4) [ 412.566743][T13346] CIFS: VFS: Error connecting to socket. Aborting operation. [ 412.566832][T13346] CIFS: VFS: cifs_mount failed w/return code = -101 [ 412.567544][T13345] CIFS: Attempting to mount //127.0.0.1/share [ 412.568121][T13345] CIFS: VFS: Error connecting to socket. Aborting operation. [ 412.568195][T13345] CIFS: VFS: cifs_mount failed w/return code = -101 [ 412.782523][T13379] input: syz1 as /devices/virtual/input/input100 [ 413.014420][T13394] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2178'. [ 413.048256][ T5724] libceph: connect (1)0.0.0.0:6789 error -101 [ 413.048343][ T5724] libceph: mon0 (1)0.0.0.0:6789 connect error [ 413.196116][T13408] trusted_key: encrypted_key: keyword 'load±|óÊ“.V§í' not recognized [ 413.319737][ T5724] libceph: connect (1)0.0.0.0:6789 error -101 [ 413.319829][ T5724] libceph: mon0 (1)0.0.0.0:6789 connect error [ 413.324787][T13331] ceph: No mds server is up or the cluster is laggy [ 413.872382][ T5724] libceph: connect (1)0.0.0.0:6789 error -101 [ 413.874258][ T5724] libceph: mon0 (1)0.0.0.0:6789 connect error [ 414.209169][T13394] ceph: No mds server is up or the cluster is laggy [ 414.473174][T13430] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 414.477709][T13430] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 414.942169][T13436] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2191'. [ 414.952100][ T854] libceph: connect (1)0.0.0.0:6789 error -22 [ 414.952189][ T854] libceph: mon0 (1)0.0.0.0:6789 connect error [ 414.977925][ T5525] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c [ 415.227807][ T854] libceph: connect (1)0.0.0.0:6789 error -22 [ 415.227908][ T854] libceph: mon0 (1)0.0.0.0:6789 connect error [ 415.628989][ T5525] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c [ 415.780222][ T854] libceph: connect (1)0.0.0.0:6789 error -22 [ 415.780314][ T854] libceph: mon0 (1)0.0.0.0:6789 connect error [ 416.042329][T13444] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 416.042346][T13444] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 416.042870][T13444] vhci_hcd vhci_hcd.0: Device attached [ 416.045080][T13445] vhci_hcd: unknown pdu 2 [ 416.046094][ T12] vhci_hcd vhci_hcd.1: stop threads [ 416.046110][ T12] vhci_hcd vhci_hcd.1: release socket [ 416.046128][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 416.115706][T13436] ceph: No mds server is up or the cluster is laggy [ 416.194379][T13452] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2194'. [ 416.300161][ T5838] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 416.463474][ T5838] usb 6-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 416.464349][ T5838] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 416.465133][ T5838] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 416.466961][ T5838] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.466975][ T5838] usb 6-1: Product: syz [ 416.466982][ T5838] usb 6-1: Manufacturer: syz [ 416.466990][ T5838] usb 6-1: SerialNumber: syz [ 416.470641][ T5838] ti_usb_3410_5052 6-1:2.0: TI USB 5052 2 port adapter converter detected [ 416.472742][ T5838] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 416.474973][ T5838] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 418.543808][T13444] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot clear input buffers, -110 [ 418.553075][ T5838] usb 6-1: USB disconnect, device number 35 [ 418.573999][ T5838] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 418.581252][ T5838] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 418.581641][ T5838] ti_usb_3410_5052 6-1:2.0: device disconnected [ 419.166598][T13475] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 419.168394][T13475] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 419.272545][T13480] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2201'. [ 419.411352][T13464] ceph: No mds server is up or the cluster is laggy [ 419.701786][T13480] lo speed is unknown, defaulting to 1000 [ 419.991898][T13492] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2205'. [ 420.649340][T13500] FAULT_INJECTION: forcing a failure. [ 420.649340][T13500] name fail_futex, interval 1, probability 0, space 0, times 0 [ 420.649364][T13500] CPU: 3 UID: 0 PID: 13500 Comm: syz.1.2207 Tainted: G L syzkaller #0 PREEMPT(full) [ 420.649380][T13500] Tainted: [L]=SOFTLOCKUP [ 420.649390][T13500] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 420.649397][T13500] Call Trace: [ 420.649401][T13500] [ 420.649405][T13500] dump_stack_lvl+0x100/0x190 [ 420.649440][T13500] should_fail_ex.cold+0x5/0xa [ 420.649456][T13500] get_futex_key+0x1d0/0x14f0 [ 420.649475][T13500] ? __pfx_get_futex_key+0x10/0x10 [ 420.649506][T13500] ? __mutex_unlock_slowpath+0x35d/0x930 [ 420.649523][T13500] futex_wake+0xf4/0x5e0 [ 420.649538][T13500] ? __pfx_futex_wake+0x10/0x10 [ 420.649554][T13500] ? detach_task_ctx_data+0x83/0x490 [ 420.649574][T13500] do_futex+0x2b2/0x440 [ 420.649586][T13500] ? __pfx_do_futex+0x10/0x10 [ 420.649596][T13500] ? __might_fault+0xc5/0x140 [ 420.649610][T13500] mm_exit_exec_release+0x256/0x2f0 [ 420.649623][T13500] do_exit+0x707/0x2ae0 [ 420.649637][T13500] ? __pfx_do_exit+0x10/0x10 [ 420.649649][T13500] ? do_raw_spin_lock+0x1e0/0x260 [ 420.649660][T13500] ? find_held_lock+0x2b/0x80 [ 420.649672][T13500] ? get_signal+0x7e0/0x21e0 [ 420.649690][T13500] do_group_exit+0xd5/0x2a0 [ 420.649704][T13500] get_signal+0x1ec7/0x21e0 [ 420.649725][T13500] ? __pfx_get_signal+0x10/0x10 [ 420.649743][T13500] ? do_futex+0x190/0x440 [ 420.649756][T13500] arch_do_signal_or_restart+0x91/0x7a0 [ 420.649772][T13500] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 420.649791][T13500] ? xfd_validate_state+0x129/0x190 [ 420.649810][T13500] exit_to_user_mode_loop+0x139/0x700 [ 420.649827][T13500] ? rcu_is_watching+0x13/0xc0 [ 420.649840][T13500] __do_fast_syscall_32+0x59f/0x8b0 [ 420.649855][T13500] do_fast_syscall_32+0x32/0x70 [ 420.649868][T13500] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 420.649883][T13500] RIP: 0023:0xf6ffefec [ 420.649896][T13500] Code: Unable to access opcode bytes at 0xf6ffefc2. [ 420.649902][T13500] RSP: 002b:00000000f53ab5bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 420.649913][T13500] RAX: fffffffffffffe00 RBX: 00000000f73f50b8 RCX: 0000000000000080 [ 420.649920][T13500] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f73f50bc [ 420.649927][T13500] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 420.649933][T13500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 420.649940][T13500] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 420.649953][T13500] [ 420.920310][T13514] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 420.922251][T13514] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 421.118889][T13516] lo speed is unknown, defaulting to 1000 [ 421.271149][T13525] lo: MTU too low for tipc bearer [ 421.271168][T13525] tipc: Enabling of bearer rejected, failed to enable media [ 421.557408][T13536] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2217'. [ 421.590233][ T5838] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c [ 421.674518][T13545] ftl_cs: FTL header not found. [ 421.686398][T13545] FAULT_INJECTION: forcing a failure. [ 421.686398][T13545] name failslab, interval 1, probability 0, space 0, times 0 [ 421.686421][T13545] CPU: 1 UID: 0 PID: 13545 Comm: syz.6.2221 Tainted: G L syzkaller #0 PREEMPT(full) [ 421.686438][T13545] Tainted: [L]=SOFTLOCKUP [ 421.686442][T13545] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 421.686449][T13545] Call Trace: [ 421.686454][T13545] [ 421.686459][T13545] dump_stack_lvl+0x100/0x190 [ 421.686491][T13545] should_fail_ex.cold+0x5/0xa [ 421.686520][T13545] should_failslab+0xc2/0x120 [ 421.686537][T13545] kmem_cache_alloc_noprof+0x92/0x6a0 [ 421.686552][T13545] ? __kernfs_new_node+0xd2/0xa10 [ 421.686572][T13545] __kernfs_new_node+0xd2/0xa10 [ 421.686591][T13545] ? __pfx___kernfs_new_node+0x10/0x10 [ 421.686609][T13545] ? lock_acquire+0x1d1/0x380 [ 421.686625][T13545] ? kernfs_root+0x23/0x2a0 [ 421.686638][T13545] ? find_held_lock+0x2b/0x80 [ 421.686650][T13545] ? kernfs_root+0xee/0x2a0 [ 421.686664][T13545] ? kernfs_root+0xee/0x2a0 [ 421.686683][T13545] kernfs_new_node+0x117/0x150 [ 421.686701][T13545] __kernfs_create_file+0x53/0x350 [ 421.686716][T13545] sysfs_add_file_mode_ns+0x207/0x3c0 [ 421.686734][T13545] internal_create_group+0x593/0xfb0 [ 421.686751][T13545] ? kernfs_create_dir_ns+0x16f/0x2b0 [ 421.686767][T13545] ? __pfx_internal_create_group+0x10/0x10 [ 421.686783][T13545] ? sysfs_create_dir_ns+0x14c/0x2b0 [ 421.686797][T13545] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 421.686810][T13545] ? sysfs_create_dir_ns+0x14c/0x2b0 [ 421.686825][T13545] internal_create_groups+0x9d/0x150 [ 421.686842][T13545] kobject_add_internal+0x317/0x930 [ 421.686867][T13545] kobject_add+0x16a/0x1e0 [ 421.686883][T13545] ? __pfx_kobject_add+0x10/0x10 [ 421.686901][T13545] ? __pfx_kobject_add+0x10/0x10 [ 421.686923][T13545] blk_register_queue+0x8d/0x630 [ 421.686940][T13545] __add_disk+0x7dd/0xf10 [ 421.686957][T13545] add_disk_fwnode+0x118/0x480 [ 421.686973][T13545] add_mtd_blktrans_dev+0xd0b/0x1520 [ 421.686992][T13545] ? __pfx_add_mtd_blktrans_dev+0x10/0x10 [ 421.687015][T13545] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 421.687028][T13545] ? mtdblock_add_mtd+0x4a/0x270 [ 421.687045][T13545] mtdblock_add_mtd+0x1cc/0x270 [ 421.687060][T13545] blktrans_notify_add+0xa2/0xf0 [ 421.687075][T13545] add_mtd_device+0xb6d/0x1820 [ 421.687088][T13545] ? __pfx_parse_mtd_partitions+0x10/0x10 [ 421.687102][T13545] ? __pfx_add_mtd_device+0x10/0x10 [ 421.687112][T13545] ? lockdep_init_map_type+0x5c/0x250 [ 421.687130][T13545] ? lockdep_init_map_type+0x5c/0x250 [ 421.687150][T13545] mtd_device_parse_register+0x848/0xb60 [ 421.687165][T13545] block2mtd_setup2.isra.0+0x699/0xbd0 [ 421.687184][T13545] ? __pfx_block2mtd_setup2.isra.0+0x10/0x10 [ 421.687202][T13545] ? rcu_is_watching+0x13/0xc0 [ 421.687214][T13545] ? trace_contention_end+0x126/0x160 [ 421.687231][T13545] ? __mutex_lock+0x26c/0x1bd0 [ 421.687244][T13545] ? param_attr_store+0xec/0x300 [ 421.687274][T13545] block2mtd_setup+0xbd/0xd0 [ 421.687293][T13545] param_attr_store+0x199/0x300 [ 421.687311][T13545] ? __pfx_param_attr_store+0x10/0x10 [ 421.687327][T13545] module_attr_store+0x58/0x80 [ 421.687341][T13545] ? __pfx_module_attr_store+0x10/0x10 [ 421.687356][T13545] sysfs_kf_write+0xf2/0x150 [ 421.687370][T13545] kernfs_fop_write_iter+0x3e0/0x5f0 [ 421.687387][T13545] ? __pfx_sysfs_kf_write+0x10/0x10 [ 421.687401][T13545] vfs_write+0x6af/0x1050 [ 421.687414][T13545] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 421.687433][T13545] ? __pfx_vfs_write+0x10/0x10 [ 421.687444][T13545] ? find_held_lock+0x2b/0x80 [ 421.687466][T13545] ksys_write+0x12a/0x250 [ 421.687479][T13545] ? __pfx_ksys_write+0x10/0x10 [ 421.687495][T13545] __do_fast_syscall_32+0x13a/0x8b0 [ 421.687508][T13545] ? lockdep_hardirqs_on+0x7d/0x110 [ 421.687522][T13545] do_fast_syscall_32+0x32/0x70 [ 421.687535][T13545] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 421.687550][T13545] RIP: 0023:0xf701efec [ 421.687565][T13545] Code: Unable to access opcode bytes at 0xf701efc2. [ 421.687570][T13545] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 421.687581][T13545] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000250 [ 421.687588][T13545] RDX: 000000000000000d RSI: 0000000000000000 RDI: 0000000000000000 [ 421.687595][T13545] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 421.687602][T13545] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 421.687608][T13545] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 421.687623][T13545] [ 421.691849][T13545] kobject: kobject_add_internal failed for queue (error: -12 parent: mtdblock3) [ 421.716937][T13551] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2222'. [ 421.754686][T13545] block2mtd: mtd3: [/dev/zram0] erase_size = 0KiB [65] [ 422.105051][T13573] FAULT_INJECTION: forcing a failure. [ 422.105051][T13573] name failslab, interval 1, probability 0, space 0, times 0 [ 422.105073][T13573] CPU: 1 UID: 0 PID: 13573 Comm: syz.1.2225 Tainted: G L syzkaller #0 PREEMPT(full) [ 422.105089][T13573] Tainted: [L]=SOFTLOCKUP [ 422.105094][T13573] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 422.105101][T13573] Call Trace: [ 422.105105][T13573] [ 422.105110][T13573] dump_stack_lvl+0x100/0x190 [ 422.105142][T13573] should_fail_ex.cold+0x5/0xa [ 422.105157][T13573] should_failslab+0xc2/0x120 [ 422.105174][T13573] __kvmalloc_node_noprof+0x113/0x9b0 [ 422.105189][T13573] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 422.105201][T13573] ? nd_ioctl+0xf98/0x1c20 [ 422.105218][T13573] nd_ioctl+0xf98/0x1c20 [ 422.105238][T13573] ? __pfx_nd_ioctl+0x10/0x10 [ 422.105254][T13573] ? find_held_lock+0x2b/0x80 [ 422.105267][T13573] ? __fget_files+0x215/0x3d0 [ 422.105280][T13573] ? hook_file_ioctl_common+0x140/0x440 [ 422.105295][T13573] ? __fget_files+0x21f/0x3d0 [ 422.105310][T13573] ? __pfx_bus_ioctl+0x10/0x10 [ 422.105324][T13573] compat_ptr_ioctl+0x6e/0xa0 [ 422.105336][T13573] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 422.105347][T13573] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 422.105360][T13573] __do_fast_syscall_32+0x13a/0x8b0 [ 422.105374][T13573] ? lockdep_hardirqs_on+0x7d/0x110 [ 422.105387][T13573] do_fast_syscall_32+0x32/0x70 [ 422.105401][T13573] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 422.105415][T13573] RIP: 0023:0xf6ffefec [ 422.105429][T13573] Code: Unable to access opcode bytes at 0xf6ffefc2. [ 422.105434][T13573] RSP: 002b:00000000f53ed50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 422.105446][T13573] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c008640a [ 422.105453][T13573] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 422.105460][T13573] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 422.105466][T13573] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 422.105473][T13573] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 422.105486][T13573] [ 422.396094][T13577] bond1: option mode: unable to set because the bond device has slaves [ 422.446644][ T5838] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c [ 422.494268][T13581] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 422.497090][T13581] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 422.580888][ T5525] libceph: connect (1)0.0.0.0:6789 error -101 [ 422.581007][ T5525] libceph: mon0 (1)0.0.0.0:6789 connect error [ 422.752884][T13592] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2230'. [ 422.752985][T13591] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2230'. [ 422.753170][T13591] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2230'. [ 422.753346][T13591] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2230'. [ 422.753522][T13591] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2230'. [ 422.753699][T13591] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2230'. [ 422.753877][T13591] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2230'. [ 422.754094][T13591] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2230'. [ 422.829806][T13594] 8021q: adding VLAN 0 to HW filter on device bond5 [ 422.857328][ T5525] libceph: connect (1)0.0.0.0:6789 error -101 [ 422.857458][ T5525] libceph: mon0 (1)0.0.0.0:6789 connect error [ 423.225412][ T5879] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c [ 423.410410][ T5525] libceph: connect (1)0.0.0.0:6789 error -101 [ 423.410533][ T5525] libceph: mon0 (1)0.0.0.0:6789 connect error [ 423.757745][T13582] ceph: No mds server is up or the cluster is laggy [ 424.006605][ T5879] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c [ 425.872582][ T5879] libceph: connect (1)0.0.0.0:6789 error -101 [ 425.872665][ T5879] libceph: mon0 (1)0.0.0.0:6789 connect error [ 426.162472][ T5879] libceph: connect (1)0.0.0.0:6789 error -101 [ 426.162608][ T5879] libceph: mon0 (1)0.0.0.0:6789 connect error [ 426.362112][ T66] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 426.363020][ T66] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 426.363884][ T66] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 426.370265][ T66] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 426.371823][ T66] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 426.385838][ T5737] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 426.389351][ T5737] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 426.389618][ T5737] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 426.397924][ T5737] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 426.399459][ T5737] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 426.543444][T13653] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 426.557760][T13653] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 426.678345][T13638] lo speed is unknown, defaulting to 1000 [ 426.715116][ T5879] libceph: connect (1)0.0.0.0:6789 error -101 [ 426.715200][ T5879] libceph: mon0 (1)0.0.0.0:6789 connect error [ 426.829445][T13638] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.829554][T13638] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.829611][T13638] bridge_slave_0: entered allmulticast mode [ 426.830645][T13638] bridge_slave_0: entered promiscuous mode [ 426.835977][T13638] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.836051][T13638] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.836148][T13638] bridge_slave_1: entered allmulticast mode [ 426.837584][T13638] bridge_slave_1: entered promiscuous mode [ 426.864014][T13638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.866087][T13638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 426.888676][T13638] team0: Port device team_slave_0 added [ 426.890609][T13638] team0: Port device team_slave_1 added [ 426.904969][T13638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 426.904986][T13638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 426.905007][T13638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 426.907576][T13638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 426.907590][T13638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 426.907613][T13638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 427.039225][T13638] hsr_slave_0: entered promiscuous mode [ 427.042833][T13619] ceph: No mds server is up or the cluster is laggy [ 427.044633][T13638] hsr_slave_1: entered promiscuous mode [ 427.223228][T13669] __nla_validate_parse: 25 callbacks suppressed [ 427.223241][T13669] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2246'. [ 427.241484][T13656] blktrace: Concurrent blktraces are not allowed on sg0 [ 427.362934][ T5525] libceph: connect (1)0.0.0.0:6789 error -22 [ 427.364653][ T5525] libceph: mon0 (1)0.0.0.0:6789 connect error [ 427.448939][T13638] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.484917][ T5879] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c [ 427.637396][T13638] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.658061][ T5525] libceph: connect (1)0.0.0.0:6789 error -22 [ 427.658217][ T5525] libceph: mon0 (1)0.0.0.0:6789 connect error [ 427.704601][T13638] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.713125][T13676] lo speed is unknown, defaulting to 1000 [ 427.792821][T13638] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.809827][ T5879] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c [ 427.885647][T13638] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 427.887820][T13638] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 427.888347][T13638] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 427.892058][T13638] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 427.893131][T13638] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 427.895551][T13638] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 427.905512][T13638] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 427.913358][T13638] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 427.957720][T13638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 427.968021][T13638] 8021q: adding VLAN 0 to HW filter on device team0 [ 427.971239][ T8310] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.971290][ T8310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.976575][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.976653][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 428.210742][ T5810] libceph: connect (1)0.0.0.0:6789 error -22 [ 428.210874][ T5810] libceph: mon0 (1)0.0.0.0:6789 connect error [ 428.264227][T13638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 428.301362][T13638] veth0_vlan: entered promiscuous mode [ 428.361627][T13638] veth1_vlan: entered promiscuous mode [ 428.387847][T13638] veth0_macvtap: entered promiscuous mode [ 428.389967][T13638] veth1_macvtap: entered promiscuous mode [ 428.408189][T13638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 428.424295][T13638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 428.530589][ T5780] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.530624][ T5780] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.530644][ T5780] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.530664][ T5780] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.534572][T13671] ceph: No mds server is up or the cluster is laggy [ 428.602985][ T66] Bluetooth: hci2: command tx timeout [ 428.646712][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.646733][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 428.691731][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.691752][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 428.764482][T13703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2250'. [ 430.004763][T13724] input: syz0 as /devices/virtual/input/input101 [ 430.029548][T13726] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9) [ 430.029574][T13726] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 430.030414][T13726] vhci_hcd vhci_hcd.0: Device attached [ 430.031935][T13727] vhci_hcd: unknown pdu 2 [ 430.034650][ T5809] vhci_hcd vhci_hcd.6: stop threads [ 430.034666][ T5809] vhci_hcd vhci_hcd.6: release socket [ 430.034684][ T5809] vhci_hcd vhci_hcd.6: disconnect device [ 430.291554][ T5724] usb 11-1: new high-speed USB device number 30 using dummy_hcd [ 430.389152][T13733] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 430.413904][ T43] audit: type=1326 audit(1790479851.161:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13732 comm="syz.0.2255" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 430.414228][ T43] audit: type=1326 audit(1790479851.161:1584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13732 comm="syz.0.2255" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 430.414384][ T43] audit: type=1326 audit(1790479851.161:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13732 comm="syz.0.2255" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 430.414531][ T43] audit: type=1326 audit(1790479851.161:1586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13732 comm="syz.0.2255" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 430.414677][ T43] audit: type=1326 audit(1790479851.161:1587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13732 comm="syz.0.2255" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 430.414989][ T43] audit: type=1326 audit(1790479851.161:1588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13732 comm="syz.0.2255" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 430.415162][ T43] audit: type=1326 audit(1790479851.161:1589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13732 comm="syz.0.2255" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 430.415342][ T43] audit: type=1326 audit(1790479851.161:1590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13732 comm="syz.0.2255" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 430.454901][ T5724] usb 11-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 430.458509][ T5724] usb 11-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 430.459911][ T5724] usb 11-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 430.463516][ T5724] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.463531][ T5724] usb 11-1: Product: syz [ 430.463538][ T5724] usb 11-1: Manufacturer: syz [ 430.463546][ T5724] usb 11-1: SerialNumber: syz [ 430.466822][ T5724] ti_usb_3410_5052 11-1:2.0: TI USB 5052 2 port adapter converter detected [ 430.470750][ T5724] usb 11-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 430.476212][ T5724] usb 11-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 430.480435][ T43] audit: type=1326 audit(1790479851.216:1591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13732 comm="syz.0.2255" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 430.480463][ T43] audit: type=1326 audit(1790479851.216:1592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13732 comm="syz.0.2255" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 430.855401][ T66] Bluetooth: hci2: command tx timeout [ 431.769228][T13755] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2260'. [ 431.902845][T13766] FAULT_INJECTION: forcing a failure. [ 431.902845][T13766] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 431.902904][T13766] CPU: 3 UID: 0 PID: 13766 Comm: syz.2.2263 Tainted: G L syzkaller #0 PREEMPT(full) [ 431.902921][T13766] Tainted: [L]=SOFTLOCKUP [ 431.902925][T13766] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 431.902931][T13766] Call Trace: [ 431.902935][T13766] [ 431.902940][T13766] dump_stack_lvl+0x100/0x190 [ 431.902960][T13766] should_fail_ex.cold+0x5/0xa [ 431.902975][T13766] _copy_to_user+0x32/0xd0 [ 431.902992][T13766] simple_read_from_buffer+0xcb/0x170 [ 431.903008][T13766] proc_fail_nth_read+0x1af/0x230 [ 431.903034][T13766] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 431.903049][T13766] ? rw_verify_area+0xce/0x6d0 [ 431.903060][T13766] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 431.903073][T13766] vfs_read+0x1e4/0xb40 [ 431.903086][T13766] ? lock_acquire+0x1d1/0x380 [ 431.903102][T13766] ? __fget_files+0x34/0x3d0 [ 431.903115][T13766] ? __pfx_vfs_read+0x10/0x10 [ 431.903127][T13766] ? find_held_lock+0x2b/0x80 [ 431.903139][T13766] ? __fget_files+0x215/0x3d0 [ 431.903155][T13766] ? __fget_files+0x21f/0x3d0 [ 431.903172][T13766] ksys_read+0x12a/0x250 [ 431.903184][T13766] ? __pfx_ksys_read+0x10/0x10 [ 431.903200][T13766] do_int80_emulation+0x166/0x650 [ 431.903216][T13766] asm_int80_emulation+0x1a/0x20 [ 431.903227][T13766] RIP: 0023:0xf71975ab [ 431.903236][T13766] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 431.903248][T13766] RSP: 002b:00000000f544d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 431.903259][T13766] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 00000000f544d5d0 [ 431.903267][T13766] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 431.903273][T13766] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 431.903280][T13766] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 431.903286][T13766] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 431.903300][T13766] [ 431.997141][T13774] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2264'. [ 432.087075][T13778] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2267'. [ 432.220715][ T6847] usb 7-1: new full-speed USB device number 41 using dummy_hcd [ 432.386303][ T6847] usb 7-1: unable to get BOS descriptor or descriptor too short [ 432.387171][ T6847] usb 7-1: not running at top speed; connect to a high speed hub [ 432.387227][ T6847] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice=1b.38 [ 432.388900][ T6847] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 432.392001][ T6847] usb 7-1: New USB device strings: Mfr=165, Product=2, SerialNumber=3 [ 432.392055][ T6847] usb 7-1: Product: syz [ 432.392065][ T6847] usb 7-1: Manufacturer: syz [ 432.392074][ T6847] usb 7-1: SerialNumber: syz [ 432.502502][T13726] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot clear input buffers, -110 [ 432.505132][ T5525] usb 11-1: USB disconnect, device number 30 [ 432.516949][ T5525] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 432.519733][ T5525] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 432.523488][ T5525] ti_usb_3410_5052 11-1:2.0: device disconnected [ 433.109482][ T66] Bluetooth: hci2: command tx timeout [ 433.109578][T13774] ceph: No mds server is up or the cluster is laggy [ 433.422068][T13792] bond0: Error: Cannot enslave bond to itself. [ 434.388864][T13799] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2272'. [ 435.243351][ T6847] usb 7-1: USB disconnect, device number 41 [ 435.309831][T13806] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 435.309858][T13806] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 435.311168][T13806] vhci_hcd vhci_hcd.0: Device attached [ 435.311943][T13807] vhci_hcd: unknown pdu 2 [ 435.312140][T11456] vhci_hcd vhci_hcd.2: stop threads [ 435.312155][T11456] vhci_hcd vhci_hcd.2: release socket [ 435.312171][T11456] vhci_hcd vhci_hcd.2: disconnect device [ 435.363829][ T66] Bluetooth: hci2: command tx timeout [ 435.699538][ T6847] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 435.885487][ T6847] usb 7-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 435.886427][ T6847] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 435.887459][ T6847] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 435.889453][ T6847] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.889466][ T6847] usb 7-1: Product: syz [ 435.889475][ T6847] usb 7-1: Manufacturer: syz [ 435.889484][ T6847] usb 7-1: SerialNumber: syz [ 435.897551][ T6847] ti_usb_3410_5052 7-1:2.0: TI USB 5052 2 port adapter converter detected [ 435.900163][ T6847] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 435.902508][ T6847] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 436.372993][T13816] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2278'. [ 436.843289][T13819] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 436.849391][T13819] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 437.164168][T13821] netlink: 'syz.1.2281': attribute type 10 has an invalid length. [ 437.171550][T13821] team0: Port device dummy0 added [ 437.175132][T13821] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.2281'. [ 437.484507][T13829] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2284'. [ 437.492234][ T5879] libceph: connect (1)0.0.0.0:6789 error -101 [ 437.492316][ T5879] libceph: mon0 (1)0.0.0.0:6789 connect error [ 437.769683][ T5879] libceph: connect (1)0.0.0.0:6789 error -101 [ 437.769774][ T5879] libceph: mon0 (1)0.0.0.0:6789 connect error [ 437.809439][T13835] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 437.809468][T13835] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 437.809769][T13835] vhci_hcd vhci_hcd.0: Device attached [ 437.964753][T13806] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot clear input buffers, -110 [ 437.966955][ T5879] usb 7-1: USB disconnect, device number 42 [ 437.972535][ T5879] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 437.973916][ T5879] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 437.974352][ T5879] ti_usb_3410_5052 7-1:2.0: device disconnected [ 438.105770][ T6847] usb 38-1: SetAddress Request (6) to port 0 [ 438.105807][ T6847] usb 38-1: new SuperSpeed USB device number 6 using vhci_hcd [ 438.189375][T13839] nvmet: adding nsid 1 to subsystem test [ 438.194719][T13839] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 438.194737][T13839] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 438.195714][T13839] vhci_hcd vhci_hcd.0: Device attached [ 438.196580][T13840] vhci_hcd: unknown pdu 2 [ 438.196835][ T5809] vhci_hcd vhci_hcd.1: stop threads [ 438.196848][ T5809] vhci_hcd vhci_hcd.1: release socket [ 438.196858][ T5809] vhci_hcd vhci_hcd.1: disconnect device [ 438.322671][ T5879] libceph: connect (1)0.0.0.0:6789 error -101 [ 438.322784][ T5879] libceph: mon0 (1)0.0.0.0:6789 connect error [ 438.516973][T13836] vhci_hcd: connection reset by peer [ 438.517828][ T12] vhci_hcd vhci_hcd.0: stop threads [ 438.517859][ T12] vhci_hcd vhci_hcd.0: release socket [ 438.517934][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 438.669112][T13829] ceph: No mds server is up or the cluster is laggy [ 438.862640][T13847] ubi0: attaching mtd0 [ 438.863592][T13847] ubi0: scanning is finished [ 438.863618][T13847] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 439.021123][T13847] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 439.332133][T13856] FAULT_INJECTION: forcing a failure. [ 439.332133][T13856] name failslab, interval 1, probability 0, space 0, times 0 [ 439.332166][T13856] CPU: 1 UID: 0 PID: 13856 Comm: syz.0.2292 Tainted: G L syzkaller #0 PREEMPT(full) [ 439.332182][T13856] Tainted: [L]=SOFTLOCKUP [ 439.332186][T13856] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 439.332193][T13856] Call Trace: [ 439.332197][T13856] [ 439.332202][T13856] dump_stack_lvl+0x100/0x190 [ 439.332221][T13856] should_fail_ex.cold+0x5/0xa [ 439.332236][T13856] should_failslab+0xc2/0x120 [ 439.332253][T13856] kmem_cache_alloc_noprof+0x92/0x6a0 [ 439.332267][T13856] ? posix_lock_inode+0x42a/0x2760 [ 439.332285][T13856] posix_lock_inode+0x42a/0x2760 [ 439.332300][T13856] ? __pfx_mapping_try_invalidate+0x10/0x10 [ 439.332313][T13856] ? __lock_acquire+0x5c0/0x1f40 [ 439.332333][T13856] ? __pfx_posix_lock_inode+0x10/0x10 [ 439.332348][T13856] ? __pfx___might_resched+0x10/0x10 [ 439.332366][T13856] locks_lock_inode_wait+0x2fb/0x490 [ 439.332382][T13856] ? __pfx_locks_lock_inode_wait+0x10/0x10 [ 439.332398][T13856] ? aa_file_perm+0x7f3/0x14d0 [ 439.332416][T13856] v9fs_file_do_lock+0x16e/0x7d0 [ 439.332432][T13856] ? __pfx_v9fs_file_do_lock+0x10/0x10 [ 439.332449][T13856] ? filemap_check_errors+0xa9/0x150 [ 439.332463][T13856] v9fs_file_flock_dotl+0x12e/0x220 [ 439.332476][T13856] ? __pfx_v9fs_file_flock_dotl+0x10/0x10 [ 439.332490][T13856] __do_sys_flock+0x2dd/0x4d0 [ 439.332506][T13856] ? __pfx___do_sys_flock+0x10/0x10 [ 439.332530][T13856] ? fput+0x7c/0x100 [ 439.332545][T13856] ? ksys_write+0x1ac/0x250 [ 439.332557][T13856] ? __pfx_ksys_write+0x10/0x10 [ 439.332573][T13856] __do_fast_syscall_32+0x13a/0x8b0 [ 439.332587][T13856] ? lockdep_hardirqs_on+0x7d/0x110 [ 439.332600][T13856] do_fast_syscall_32+0x32/0x70 [ 439.332613][T13856] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 439.332628][T13856] RIP: 0023:0xf6fcefec [ 439.332640][T13856] Code: Unable to access opcode bytes at 0xf6fcefc2. [ 439.332645][T13856] RSP: 002b:00000000f53bd50c EFLAGS: 00000292 ORIG_RAX: 000000000000008f [ 439.332657][T13856] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000006 [ 439.332664][T13856] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 439.332670][T13856] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 439.332677][T13856] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 439.332683][T13856] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 439.332697][T13856] [ 439.649933][T13869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2293'. [ 439.895714][T13873] FAULT_INJECTION: forcing a failure. [ 439.895714][T13873] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 439.895736][T13873] CPU: 0 UID: 0 PID: 13873 Comm: syz.2.2299 Tainted: G L syzkaller #0 PREEMPT(full) [ 439.895751][T13873] Tainted: [L]=SOFTLOCKUP [ 439.895755][T13873] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 439.895767][T13873] Call Trace: [ 439.895771][T13873] [ 439.895776][T13873] dump_stack_lvl+0x100/0x190 [ 439.895794][T13873] should_fail_ex.cold+0x5/0xa [ 439.895809][T13873] _copy_from_user+0x2e/0xd0 [ 439.895825][T13873] do_ipv6_setsockopt+0x73d/0x43a0 [ 439.895844][T13873] ? __pfx_begin_current_label_crit_section+0x10/0x10 [ 439.895859][T13873] ? __might_fault+0xc5/0x140 [ 439.895871][T13873] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 439.895889][T13873] ? aa_inet_opt_perm+0x30d/0x970 [ 439.895904][T13873] ? __pfx_aa_inet_opt_perm+0x10/0x10 [ 439.895919][T13873] ? lock_acquire+0x1d1/0x380 [ 439.895934][T13873] ? get_pid_task+0x2a/0x250 [ 439.895946][T13873] ? find_held_lock+0x2b/0x80 [ 439.895958][T13873] ? get_pid_task+0xfc/0x250 [ 439.895969][T13873] ? get_pid_task+0xfc/0x250 [ 439.895985][T13873] ? __lock_acquire+0x5c0/0x1f40 [ 439.896004][T13873] ? ipv6_setsockopt+0xcb/0x170 [ 439.896019][T13873] ipv6_setsockopt+0xcb/0x170 [ 439.896037][T13873] rawv6_setsockopt+0xee/0x5a0 [ 439.896052][T13873] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 439.896066][T13873] ? aa_sock_opt_perm+0x114/0x1e0 [ 439.896094][T13873] ? sock_common_setsockopt+0x2e/0xf0 [ 439.896108][T13873] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 439.896128][T13873] do_sock_setsockopt+0xf3/0x1d0 [ 439.896148][T13873] __sys_setsockopt+0x119/0x190 [ 439.896172][T13873] __ia32_sys_setsockopt+0xbc/0x160 [ 439.896195][T13873] ? __do_fast_syscall_32+0xb3/0x8b0 [ 439.896213][T13873] ? lockdep_hardirqs_on+0x7d/0x110 [ 439.896226][T13873] __do_fast_syscall_32+0x13a/0x8b0 [ 439.896239][T13873] ? lockdep_hardirqs_on+0x7d/0x110 [ 439.896252][T13873] do_fast_syscall_32+0x32/0x70 [ 439.896268][T13873] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 439.896283][T13873] RIP: 0023:0xf705efec [ 439.896297][T13873] Code: Unable to access opcode bytes at 0xf705efc2. [ 439.896302][T13873] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 439.896313][T13873] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000029 [ 439.896321][T13873] RDX: 0000000000000011 RSI: 0000000080000000 RDI: 0000000000000004 [ 439.896328][T13873] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 439.896335][T13873] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 439.896342][T13873] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 439.896359][T13873] [ 440.105048][T13880] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2302'. [ 440.117096][ T5525] libceph: connect (1)[c::]:6789 error -99 [ 440.117235][ T5525] libceph: mon0 (1)[c::]:6789 connect error [ 440.232351][ T5724] usb 5-1: USB disconnect, device number 20 [ 440.283724][T13882] ceph: No mds server is up or the cluster is laggy [ 440.576571][ T5879] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 440.754171][ T5879] usb 6-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 440.755260][ T5879] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 440.756251][ T5879] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 440.758377][ T5879] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.758396][ T5879] usb 6-1: Product: syz [ 440.758407][ T5879] usb 6-1: Manufacturer: syz [ 440.758419][ T5879] usb 6-1: SerialNumber: syz [ 440.764769][ T5879] ti_usb_3410_5052 6-1:2.0: TI USB 5052 2 port adapter converter detected [ 440.768088][ T5879] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 440.771334][ T5879] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 441.562472][T13903] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2306'. [ 441.562506][T13903] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2306'. [ 441.581141][T13903] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2306'. [ 441.581178][T13903] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2306'. [ 441.656844][T13903] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2306'. [ 441.656898][T13903] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2306'. [ 441.712043][T13911] FAULT_INJECTION: forcing a failure. [ 441.712043][T13911] name failslab, interval 1, probability 0, space 0, times 0 [ 441.712075][T13911] CPU: 2 UID: 0 PID: 13911 Comm: syz.2.2309 Tainted: G L syzkaller #0 PREEMPT(full) [ 441.712100][T13911] Tainted: [L]=SOFTLOCKUP [ 441.712106][T13911] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 441.712117][T13911] Call Trace: [ 441.712123][T13911] [ 441.712131][T13911] dump_stack_lvl+0x100/0x190 [ 441.712160][T13911] should_fail_ex.cold+0x5/0xa [ 441.712185][T13911] should_failslab+0xc2/0x120 [ 441.712212][T13911] kmem_cache_alloc_noprof+0x92/0x6a0 [ 441.712232][T13911] ? d_instantiate+0x8a/0xb0 [ 441.712257][T13911] ? alloc_empty_file+0x5b/0x1c0 [ 441.712286][T13911] alloc_empty_file+0x5b/0x1c0 [ 441.712312][T13911] alloc_file_pseudo+0x183/0x290 [ 441.712343][T13911] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 441.712370][T13911] ? _raw_spin_unlock+0x28/0x50 [ 441.712399][T13911] ? alloc_fd+0x471/0x7a0 [ 441.712425][T13911] __anon_inode_getfile+0xe8/0x280 [ 441.712457][T13911] __anon_inode_getfd+0x5c/0xe0 [ 441.712478][T13911] do_inotify_init+0x483/0x5e0 [ 441.712500][T13911] __do_sys_inotify_init+0x10/0x20 [ 441.712520][T13911] __do_fast_syscall_32+0x13a/0x8b0 [ 441.712543][T13911] do_fast_syscall_32+0x32/0x70 [ 441.712563][T13911] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 441.712586][T13911] RIP: 0023:0xf705efec [ 441.712606][T13911] Code: Unable to access opcode bytes at 0xf705efc2. [ 441.712615][T13911] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000123 [ 441.712633][T13911] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 441.712645][T13911] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 441.712657][T13911] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 441.712669][T13911] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 441.712680][T13911] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 441.712704][T13911] [ 441.728567][T13911] 0x000000000000-0x000000010000 : "" [ 441.735415][T13911] ftl_cs: FTL header not found. [ 441.850158][T13914] FAULT_INJECTION: forcing a failure. [ 441.850158][T13914] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 441.850192][T13914] CPU: 3 UID: 0 PID: 13914 Comm: syz.2.2310 Tainted: G L syzkaller #0 PREEMPT(full) [ 441.850233][T13914] Tainted: [L]=SOFTLOCKUP [ 441.850240][T13914] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 441.850251][T13914] Call Trace: [ 441.850258][T13914] [ 441.850266][T13914] dump_stack_lvl+0x100/0x190 [ 441.850297][T13914] should_fail_ex.cold+0x5/0xa [ 441.850322][T13914] save_fsave_header+0x14c/0x2f0 [ 441.850350][T13914] ? __pfx_save_fsave_header+0x10/0x10 [ 441.850384][T13914] ? copy_fpstate_to_sigframe+0x2b8/0xae0 [ 441.850412][T13914] ? __local_bh_enable_ip+0xa5/0x120 [ 441.850445][T13914] copy_fpstate_to_sigframe+0x755/0xae0 [ 441.850470][T13914] ? do_raw_spin_lock+0x128/0x260 [ 441.850495][T13914] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 441.850526][T13914] ? posixtimer_deliver_signal+0x1a0/0x6e0 [ 441.850550][T13914] ? x86_task_fpu+0x5f/0x90 [ 441.850575][T13914] get_sigframe+0x3fb/0x940 [ 441.850605][T13914] ? __pfx_get_sigframe+0x10/0x10 [ 441.850630][T13914] ? rcu_is_watching+0x13/0xc0 [ 441.850652][T13914] ? siginfo_layout+0x156/0x290 [ 441.850683][T13914] ia32_setup_rt_frame+0xe7/0xaf0 [ 441.850709][T13914] ? __pfx_ia32_setup_rt_frame+0x10/0x10 [ 441.850731][T13914] ? clockevents_program_event+0x1ef/0x820 [ 441.850756][T13914] arch_do_signal_or_restart+0x459/0x7a0 [ 441.850783][T13914] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 441.850816][T13914] ? do_raw_spin_unlock+0x145/0x1e0 [ 441.850841][T13914] irqentry_exit+0x402/0xa10 [ 441.850866][T13914] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 441.850887][T13914] RIP: 0023:0xf71975ab [ 441.850902][T13914] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 441.850919][T13914] RSP: 002b:00000000f544d4bc EFLAGS: 00000246 [ 441.850936][T13914] RAX: 0000000000000001 RBX: 0000000000000005 RCX: 00000000f544d5c0 [ 441.850948][T13914] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 441.850959][T13914] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 441.850969][T13914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 441.850980][T13914] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 441.851004][T13914] [ 441.953448][ T5879] usb 11-1: new high-speed USB device number 31 using dummy_hcd [ 442.137709][ T5879] usb 11-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 442.139008][ T5879] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 442.139031][ T5879] usb 11-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 442.140962][ T5879] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.141020][ T5879] usb 11-1: Product: syz [ 442.141029][ T5879] usb 11-1: Manufacturer: syz [ 442.141036][ T5879] usb 11-1: SerialNumber: syz [ 442.399688][T13909] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2307'. [ 442.933284][T13923] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2313'. [ 443.033419][T13886] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2301'. [ 443.262151][T13882] ti_usb_3410_5052_2 ttyUSB0: ti_get_lsr - get port status command failed, -32 [ 443.612283][ T6847] usb 38-1: device descriptor read/8, error -110 [ 443.633623][ T5525] usb 6-1: USB disconnect, device number 36 [ 443.716155][ T5525] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 443.765091][ T5525] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 443.780995][ T5525] ti_usb_3410_5052 6-1:2.0: device disconnected [ 444.346251][ T6847] usb usb38-port1: attempt power cycle [ 444.438221][ T5810] usb 11-1: USB disconnect, device number 31 [ 444.453564][T13941] input: syz1 as /devices/virtual/input/input102 [ 444.674556][T13941] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 444.805904][ T5525] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 444.977589][ T5525] usb 6-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice= 1.00 [ 444.978348][ T6847] usb usb38-port1: unable to enumerate USB device [ 444.978772][ T5525] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.186665][T13954] UDC core: g1: couldn't find an available UDC or it's busy [ 445.189453][T13954] FAULT_INJECTION: forcing a failure. [ 445.189453][T13954] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 445.189480][T13954] CPU: 0 UID: 0 PID: 13954 Comm: syz.2.2324 Tainted: G L syzkaller #0 PREEMPT(full) [ 445.189500][T13954] Tainted: [L]=SOFTLOCKUP [ 445.189506][T13954] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 445.189515][T13954] Call Trace: [ 445.189520][T13954] [ 445.189526][T13954] dump_stack_lvl+0x100/0x190 [ 445.189552][T13954] should_fail_ex.cold+0x5/0xa [ 445.189573][T13954] _copy_from_iter+0x1f4/0x1690 [ 445.189594][T13954] ? __lock_acquire+0x5c0/0x1f40 [ 445.189616][T13954] ? __pfx__copy_from_iter+0x10/0x10 [ 445.189641][T13954] ? lock_acquire+0x1d1/0x380 [ 445.189665][T13954] configfs_write_iter+0xb3/0x4e0 [ 445.189691][T13954] vfs_write+0x6af/0x1050 [ 445.189710][T13954] ? __pfx_configfs_write_iter+0x10/0x10 [ 445.189732][T13954] ? __pfx_vfs_write+0x10/0x10 [ 445.189749][T13954] ? find_held_lock+0x2b/0x80 [ 445.189784][T13954] ksys_write+0x12a/0x250 [ 445.189806][T13954] ? __pfx_ksys_write+0x10/0x10 [ 445.189826][T13954] ? ksys_write+0x1ac/0x250 [ 445.189845][T13954] ? __pfx_ksys_write+0x10/0x10 [ 445.189864][T13954] __do_fast_syscall_32+0x13a/0x8b0 [ 445.189882][T13954] ? lockdep_hardirqs_on+0x7d/0x110 [ 445.189900][T13954] do_fast_syscall_32+0x32/0x70 [ 445.189917][T13954] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 445.189937][T13954] RIP: 0023:0xf705efec [ 445.189955][T13954] Code: Unable to access opcode bytes at 0xf705efc2. [ 445.189962][T13954] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 445.189978][T13954] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800004c0 [ 445.189989][T13954] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 445.189998][T13954] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 445.190007][T13954] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 445.190015][T13954] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 445.190035][T13954] [ 445.306775][ T5525] net1080 6-1:1.0 usb0: register 'net1080' at usb-dummy_hcd.1-1, NetChip TurboCONNECT, 4a:55:91:d1:d6:9b [ 445.690084][ T854] usb 6-1: USB disconnect, device number 37 [ 445.691638][ T854] net1080 6-1:1.0 usb0: unregister 'net1080' usb-dummy_hcd.1-1, NetChip TurboCONNECT [ 446.165196][T13973] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 446.165213][T13973] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 446.165538][T13973] vhci_hcd vhci_hcd.0: Device attached [ 446.324479][T13983] FAULT_INJECTION: forcing a failure. [ 446.324479][T13983] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 446.324535][T13983] CPU: 3 UID: 0 PID: 13983 Comm: syz.6.2328 Tainted: G L syzkaller #0 PREEMPT(full) [ 446.324551][T13983] Tainted: [L]=SOFTLOCKUP [ 446.324567][T13983] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 446.324574][T13983] Call Trace: [ 446.324579][T13983] [ 446.324583][T13983] dump_stack_lvl+0x100/0x190 [ 446.324602][T13983] should_fail_ex.cold+0x5/0xa [ 446.324618][T13983] _copy_from_user+0x2e/0xd0 [ 446.324634][T13983] __sys_bpf+0x2f5/0x4a30 [ 446.324650][T13983] ? __pfx___sys_bpf+0x10/0x10 [ 446.324663][T13983] ? irqentry_exit+0x24d/0xa10 [ 446.324676][T13983] ? kvm_sched_clock_read+0x11/0x20 [ 446.324687][T13983] ? sched_clock+0x3a/0x60 [ 446.324703][T13983] ? sched_clock_cpu+0x6c/0x570 [ 446.324722][T13983] ? __schedule+0x315b/0x6920 [ 446.324733][T13983] ? __schedule+0x315b/0x6920 [ 446.324743][T13983] ? rcu_is_watching+0x13/0xc0 [ 446.324755][T13983] ? trace_sched_exit_tp+0x120/0x160 [ 446.324768][T13983] ? populate_seccomp_data+0x225/0x4d0 [ 446.324790][T13983] ? fput+0x7c/0x100 [ 446.324807][T13983] ? __ia32_sys_bpf+0xcc/0x170 [ 446.324819][T13983] __ia32_sys_bpf+0xcc/0x170 [ 446.324831][T13983] ? __seccomp_permit_syscall+0x1e7/0x2d0 [ 446.324845][T13983] __do_fast_syscall_32+0x13a/0x8b0 [ 446.324858][T13983] ? lockdep_hardirqs_on+0x7d/0x110 [ 446.324871][T13983] do_fast_syscall_32+0x32/0x70 [ 446.324885][T13983] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 446.324899][T13983] RIP: 0023:0xf701efec [ 446.324912][T13983] Code: Unable to access opcode bytes at 0xf701efc2. [ 446.324917][T13983] RSP: 002b:00000000f53ec50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 446.324928][T13983] RAX: ffffffffffffffda RBX: 000000000000001a RCX: 0000000080000140 [ 446.324935][T13983] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 0000000000000000 [ 446.324942][T13983] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 446.324949][T13983] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 446.324955][T13983] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 446.324969][T13983] [ 446.472245][ T6847] usb 42-1: SetAddress Request (6) to port 0 [ 446.472281][ T6847] usb 42-1: new SuperSpeed USB device number 6 using vhci_hcd [ 446.497595][T13975] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 446.498582][ T8136] vhci_hcd vhci_hcd.2: stop threads [ 446.498600][ T8136] vhci_hcd vhci_hcd.2: release socket [ 446.500834][ T8136] vhci_hcd vhci_hcd.2: disconnect device [ 447.205817][T13995] overlayfs: conflicting lowerdir path [ 447.220223][ T42] usb 6-1: new full-speed USB device number 38 using dummy_hcd [ 447.246378][T13997] __nla_validate_parse: 4 callbacks suppressed [ 447.246393][T13997] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2334'. [ 447.384600][ T42] usb 6-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 447.385626][ T42] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 447.385661][ T42] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 447.389117][ T42] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.389142][ T42] usb 6-1: Product: syz [ 447.389154][ T42] usb 6-1: Manufacturer: syz [ 447.389165][ T42] usb 6-1: SerialNumber: syz [ 447.391166][ T42] usb 6-1: config 0 descriptor?? [ 447.451919][T14004] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2336'. [ 447.467145][ T1908] libceph: connect (1)0.0.0.0:6789 error -22 [ 447.467234][ T1908] libceph: mon0 (1)0.0.0.0:6789 connect error [ 447.480401][ T1908] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c [ 447.684036][ T5810] usb 6-1: USB disconnect, device number 38 [ 447.752171][ T1908] libceph: connect (1)0.0.0.0:6789 error -22 [ 447.752324][ T1908] libceph: mon0 (1)0.0.0.0:6789 connect error [ 447.855122][T14012] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2337'. [ 447.870137][ T5525] libceph: connect (1)0.0.0.0:6789 error -101 [ 447.870402][ T5525] libceph: mon0 (1)0.0.0.0:6789 connect error [ 448.152239][ T5810] libceph: connect (1)0.0.0.0:6789 error -101 [ 448.152327][ T5810] libceph: mon0 (1)0.0.0.0:6789 connect error [ 448.152355][ T5879] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c [ 448.276297][T14027] bond0: (slave syz_tun): Releasing backup interface [ 448.292606][T14027] team0: Port device dummy0 removed [ 448.297820][T14027] bond0: (slave bond_slave_0): Releasing backup interface [ 448.301911][T14027] bond0: (slave bond_slave_1): Releasing backup interface [ 448.304180][ T1908] libceph: connect (1)0.0.0.0:6789 error -22 [ 448.304303][ T1908] libceph: mon0 (1)0.0.0.0:6789 connect error [ 448.306168][T14027] team0: Port device team_slave_0 removed [ 448.309389][T14027] team0: Port device team_slave_1 removed [ 448.309692][T14027] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 448.309703][T14027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 448.310572][T14027] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 448.310583][T14027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 448.315835][T14027] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 448.640267][T14004] ceph: No mds server is up or the cluster is laggy [ 448.705043][ T5525] libceph: connect (1)0.0.0.0:6789 error -101 [ 448.705184][ T5525] libceph: mon0 (1)0.0.0.0:6789 connect error [ 448.845712][ T5810] usb 6-1: new full-speed USB device number 39 using dummy_hcd [ 448.986456][T14032] netlink: 'syz.0.2342': attribute type 8 has an invalid length. [ 448.986824][ T5810] usb 6-1: device descriptor read/64, error -71 [ 448.986877][T14012] ceph: No mds server is up or the cluster is laggy [ 449.118182][ T66] Bluetooth: hci2: unexpected subevent 0x18 length: 30 > 19 [ 449.118202][ T66] Bluetooth: hci2: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 449.120589][ T43] audit: type=1326 audit(1790479868.415:1593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14038 comm="syz.0.2345" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 449.120704][ T43] audit: type=1326 audit(1790479868.415:1594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14038 comm="syz.0.2345" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 449.120825][ T43] audit: type=1326 audit(1790479868.415:1595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14038 comm="syz.0.2345" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 449.121306][ T43] audit: type=1326 audit(1790479868.415:1597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14038 comm="syz.0.2345" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71075ab code=0x7ffc0000 [ 449.121332][ T43] audit: type=1326 audit(1790479868.415:1596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14038 comm="syz.0.2345" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 449.121352][ T43] audit: type=1326 audit(1790479868.415:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14038 comm="syz.0.2345" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 449.121371][ T43] audit: type=1326 audit(1790479868.415:1599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14038 comm="syz.0.2345" exe="/syz-executor" sig=0 arch=40000003 syscall=105 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 449.121391][ T43] audit: type=1326 audit(1790479868.415:1600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14038 comm="syz.0.2345" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 449.121411][ T43] audit: type=1326 audit(1790479868.415:1602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14038 comm="syz.0.2345" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 449.121431][ T43] audit: type=1326 audit(1790479868.415:1601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14038 comm="syz.0.2345" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 449.246708][ T5810] usb 6-1: new full-speed USB device number 40 using dummy_hcd [ 449.398506][ T5810] usb 6-1: device descriptor read/64, error -71 [ 449.529174][ T5810] usb usb6-port1: attempt power cycle [ 449.929528][ T5810] usb 6-1: new full-speed USB device number 41 using dummy_hcd [ 449.951889][ T5810] usb 6-1: device descriptor read/8, error -71 [ 450.233007][ T5810] usb 6-1: new full-speed USB device number 42 using dummy_hcd [ 450.255071][ T5810] usb 6-1: device descriptor read/8, error -71 [ 450.374165][ T5810] usb usb6-port1: unable to enumerate USB device [ 450.571524][T14040] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 450.571797][T14040] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 450.575993][T14040] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 450.759041][T14051] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2346'. [ 450.808799][T14052] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2348'. [ 450.850971][ T5810] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c [ 451.197717][ T5810] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c [ 451.403418][ T66] Bluetooth: hci2: command 0x0c1a tx timeout [ 451.795440][T14058] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(12) [ 451.795457][T14058] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 451.796183][T14058] vhci_hcd vhci_hcd.0: Device attached [ 451.905100][T14064] vhci_hcd: unknown pdu 2 [ 451.905239][ T5809] vhci_hcd vhci_hcd.0: stop threads [ 451.905249][ T5809] vhci_hcd vhci_hcd.0: release socket [ 451.905259][ T5809] vhci_hcd vhci_hcd.0: disconnect device [ 451.923650][ T6847] usb 42-1: device descriptor read/8, error -110 [ 452.034128][T14069] FAULT_INJECTION: forcing a failure. [ 452.034128][T14069] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 452.034196][T14069] CPU: 1 UID: 0 PID: 14069 Comm: syz.6.2352 Tainted: G L syzkaller #0 PREEMPT(full) [ 452.034213][T14069] Tainted: [L]=SOFTLOCKUP [ 452.034218][T14069] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 452.034225][T14069] Call Trace: [ 452.034229][T14069] [ 452.034234][T14069] dump_stack_lvl+0x100/0x190 [ 452.034253][T14069] should_fail_ex.cold+0x5/0xa [ 452.034269][T14069] _copy_from_user+0x2e/0xd0 [ 452.034286][T14069] do_ipv6_setsockopt+0x73d/0x43a0 [ 452.034307][T14069] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 452.034324][T14069] ? __pfx_aa_inet_opt_perm+0x10/0x10 [ 452.034344][T14069] ? lock_acquire+0x1d1/0x380 [ 452.034359][T14069] ? finish_task_switch.isra.0+0x149/0x10d0 [ 452.034376][T14069] ? find_held_lock+0x2b/0x80 [ 452.034390][T14069] ? __lock_acquire+0x5c0/0x1f40 [ 452.034407][T14069] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 452.034429][T14069] ? ipv6_setsockopt+0xcb/0x170 [ 452.034444][T14069] ipv6_setsockopt+0xcb/0x170 [ 452.034461][T14069] udpv6_setsockopt+0x64/0xb0 [ 452.034473][T14069] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 452.034489][T14069] do_sock_setsockopt+0xf3/0x1d0 [ 452.034503][T14069] __sys_setsockopt+0x119/0x190 [ 452.034522][T14069] __ia32_sys_setsockopt+0xbc/0x160 [ 452.034538][T14069] ? __do_fast_syscall_32+0xb3/0x8b0 [ 452.034552][T14069] ? lockdep_hardirqs_on+0x7d/0x110 [ 452.034564][T14069] __do_fast_syscall_32+0x13a/0x8b0 [ 452.034578][T14069] ? lockdep_hardirqs_on+0x7d/0x110 [ 452.034591][T14069] do_fast_syscall_32+0x32/0x70 [ 452.034605][T14069] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 452.034621][T14069] RIP: 0023:0xf701efec [ 452.034636][T14069] Code: Unable to access opcode bytes at 0xf701efc2. [ 452.034642][T14069] RSP: 002b:00000000f53cb50c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 452.034655][T14069] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000000029 [ 452.034662][T14069] RDX: 0000000000000030 RSI: 0000000080000680 RDI: 000000000000008c [ 452.034669][T14069] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 452.034676][T14069] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 452.034684][T14069] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 452.034697][T14069] [ 452.183804][ T64] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 452.357762][ T64] usb 5-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 452.358634][ T64] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 452.359399][ T64] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 452.361055][ T64] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.361068][ T64] usb 5-1: Product: syz [ 452.361080][ T64] usb 5-1: Manufacturer: syz [ 452.361092][ T64] usb 5-1: SerialNumber: syz [ 452.366494][ T64] ti_usb_3410_5052 5-1:2.0: TI USB 5052 2 port adapter converter detected [ 452.368520][ T64] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 452.370397][ T64] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 452.433553][ T6847] usb usb42-port1: attempt power cycle [ 452.566937][T14070] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 452.586296][ C2] ================================================================== [ 452.586306][ C2] BUG: KASAN: slab-use-after-free in find_endpoint+0x2a3/0x2c0 [ 452.586324][ C2] Read of size 1 at addr ffff88805ca370e8 by task swapper/2/0 [ 452.586333][ C2] [ 452.586340][ C2] CPU: 2 UID: 0 PID: 0 Comm: swapper/2 Tainted: G L syzkaller #0 PREEMPT(full) [ 452.586377][ C2] Tainted: [L]=SOFTLOCKUP [ 452.586383][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 452.586390][ C2] Call Trace: [ 452.586410][ C2] [ 452.586415][ C2] dump_stack_lvl+0x100/0x190 [ 452.586432][ C2] print_report+0x13d/0x4b0 [ 452.586447][ C2] ? __virt_addr_valid+0x239/0x430 [ 452.586464][ C2] ? find_endpoint+0x2a3/0x2c0 [ 452.586475][ C2] kasan_report+0xdf/0x1c0 [ 452.586492][ C2] ? find_endpoint+0x2a3/0x2c0 [ 452.586505][ C2] find_endpoint+0x2a3/0x2c0 [ 452.586517][ C2] dummy_timer+0x500/0x3700 [ 452.586535][ C2] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 452.586552][ C2] ? debug_object_deactivate+0x2e4/0x3b0 [ 452.586570][ C2] ? __pfx_dummy_timer+0x10/0x10 [ 452.586584][ C2] ? rcu_is_watching+0x13/0xc0 [ 452.586596][ C2] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 452.586621][ C2] ? __pfx_dummy_timer+0x10/0x10 [ 452.586635][ C2] __hrtimer_run_queues+0x462/0x9c0 [ 452.586649][ C2] hrtimer_run_softirq+0x1ca/0x360 [ 452.586662][ C2] handle_softirqs+0x1e6/0x9d0 [ 452.586679][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 452.586695][ C2] ? _raw_spin_unlock+0x28/0x50 [ 452.586711][ C2] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 452.586725][ C2] __irq_exit_rcu+0x16a/0x210 [ 452.586740][ C2] irq_exit_rcu+0x9/0x30 [ 452.586755][ C2] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 452.586785][ C2] [ 452.586789][ C2] [ 452.586794][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 452.586806][ C2] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 452.586819][ C2] Code: 77 95 02 e9 43 50 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 63 66 1b 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 452.586829][ C2] RSP: 0018:ffffc9000048fe00 EFLAGS: 00000202 [ 452.586839][ C2] RAX: 000000000074f20d RBX: ffff88801cf1a580 RCX: ffffffff8bd051c5 [ 452.586847][ C2] RDX: 0000000000000001 RSI: ffffffff8e3918f2 RDI: ffffffff8c623f80 [ 452.586854][ C2] RBP: ffffed10039e34b0 R08: 0000000000000001 R09: ffffed10056867bd [ 452.586861][ C2] R10: ffff88802b433deb R11: 0000000000000001 R12: 0000000000000000 [ 452.586869][ C2] R13: 0000000000000000 R14: 1ffff92000091fc4 R15: dffffc0000000000 [ 452.586877][ C2] ? ct_kernel_exit+0x125/0x180 [ 452.586891][ C2] default_idle+0x9/0x10 [ 452.586903][ C2] default_idle_call+0x6c/0xb0 [ 452.586915][ C2] do_idle+0x3ae/0x5b0 [ 452.586926][ C2] ? __pfx_do_idle+0x10/0x10 [ 452.586936][ C2] ? finish_task_switch.isra.0+0x149/0x10d0 [ 452.586954][ C2] cpu_startup_entry+0x4f/0x60 [ 452.586965][ C2] start_secondary+0x21d/0x2d0 [ 452.586981][ C2] ? __pfx_start_secondary+0x10/0x10 [ 452.586998][ C2] common_startup_64+0x13e/0x158 [ 452.587014][ C2] [ 452.587018][ C2] [ 452.587021][ C2] Allocated by task 9563: [ 452.587027][ C2] kasan_save_stack+0x30/0x50 [ 452.587040][ C2] kasan_save_track+0x14/0x30 [ 452.587052][ C2] __kasan_kmalloc+0xaa/0xb0 [ 452.587063][ C2] __kmalloc_noprof+0x32f/0x840 [ 452.587075][ C2] usb_copy_descriptors+0xcd/0x320 [ 452.587085][ C2] f_midi2_bind+0x1dad/0x2770 [ 452.587094][ C2] usb_add_function+0x219/0x890 [ 452.587105][ C2] configfs_composite_bind+0xd83/0x1960 [ 452.587116][ C2] gadget_bind_driver+0x28c/0xbf0 [ 452.587130][ C2] really_probe+0x241/0xa60 [ 452.587144][ C2] __driver_probe_device+0x210/0x460 [ 452.587159][ C2] driver_probe_device+0x4a/0x140 [ 452.587173][ C2] __driver_attach+0x21f/0x5b0 [ 452.587187][ C2] bus_for_each_dev+0x13e/0x1d0 [ 452.587199][ C2] bus_add_driver+0x305/0x5b0 [ 452.587211][ C2] driver_register+0x1e2/0x360 [ 452.587219][ C2] usb_gadget_register_driver_owner+0x132/0x210 [ 452.587234][ C2] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 452.587244][ C2] configfs_write_iter+0x302/0x4e0 [ 452.587258][ C2] vfs_write+0x6af/0x1050 [ 452.587268][ C2] ksys_write+0x12a/0x250 [ 452.587279][ C2] __do_fast_syscall_32+0x13a/0x8b0 [ 452.587291][ C2] do_fast_syscall_32+0x32/0x70 [ 452.587302][ C2] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 452.587315][ C2] [ 452.587317][ C2] Freed by task 13887: [ 452.587322][ C2] kasan_save_stack+0x30/0x50 [ 452.587334][ C2] kasan_save_track+0x14/0x30 [ 452.587346][ C2] kasan_save_free_info+0x3b/0x70 [ 452.587356][ C2] __kasan_slab_free+0x5f/0x80 [ 452.587369][ C2] kfree+0x22b/0x6d0 [ 452.587377][ C2] usb_free_all_descriptors+0x81/0x1a0 [ 452.587387][ C2] purge_configs_funcs+0x285/0x510 [ 452.587397][ C2] configfs_composite_unbind+0xae/0x210 [ 452.587406][ C2] gadget_unbind_driver+0x20c/0x4f0 [ 452.587420][ C2] device_remove+0xcb/0x180 [ 452.587434][ C2] device_release_driver_internal+0x44e/0x620 [ 452.587449][ C2] driver_detach+0xd8/0x1b0 [ 452.587477][ C2] bus_remove_driver+0x13b/0x2e0 [ 452.587490][ C2] driver_unregister+0x76/0xb0 [ 452.587499][ C2] usb_gadget_unregister_driver+0x49/0x70 [ 452.587515][ C2] gadget_dev_desc_UDC_store+0x170/0x2e0 [ 452.587525][ C2] configfs_write_iter+0x302/0x4e0 [ 452.587539][ C2] vfs_write+0x6af/0x1050 [ 452.587548][ C2] ksys_write+0x12a/0x250 [ 452.587559][ C2] __do_fast_syscall_32+0x13a/0x8b0 [ 452.587570][ C2] do_fast_syscall_32+0x32/0x70 [ 452.587581][ C2] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 452.587594][ C2] [ 452.587596][ C2] The buggy address belongs to the object at ffff88805ca37000 [ 452.587596][ C2] which belongs to the cache kmalloc-512 of size 512 [ 452.587605][ C2] The buggy address is located 232 bytes inside of [ 452.587605][ C2] freed 512-byte region [ffff88805ca37000, ffff88805ca37200) [ 452.587618][ C2] [ 452.587621][ C2] The buggy address belongs to the physical page: [ 452.587625][ C2] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805ca34000 pfn:0x5ca34 [ 452.587635][ C2] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 452.587643][ C2] flags: 0x4fff00000000240(workingset|head|node=1|zone=1|lastcpupid=0x7ff) [ 452.587653][ C2] page_type: f5(slab) [ 452.587663][ C2] raw: 04fff00000000240 ffff88801c042c80 ffffea00010acf10 ffffea000180ce10 [ 452.587672][ C2] raw: ffff88805ca34000 0000000000100003 00000000f5000000 0000000000000000 [ 452.587682][ C2] head: 04fff00000000240 ffff88801c042c80 ffffea00010acf10 ffffea000180ce10 [ 452.587691][ C2] head: ffff88805ca34000 0000000000100003 00000000f5000000 0000000000000000 [ 452.587700][ C2] head: 04fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 452.587709][ C2] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 452.587714][ C2] page dumped because: kasan: bad access detected [ 452.587719][ C2] page_owner tracks the page as allocated [ 452.587723][ C2] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 9563, tgid 9562 (syz.6.987), ts 205947504325 [ 452.587739][ C2] post_alloc_hook+0xfd/0x120 [ 452.587748][ C2] get_page_from_freelist+0x110d/0x35d0 [ 452.587759][ C2] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 452.587770][ C2] new_slab+0xa9/0x6e0 [ 452.587778][ C2] refill_objects+0xe3/0x410 [ 452.587792][ C2] __pcs_replace_empty_main+0x35e/0x650 [ 452.587801][ C2] __kmalloc_cache_noprof+0x4f4/0x6d0 [ 452.587811][ C2] snd_mixer_oss_build_test+0x7a/0x380 [ 452.587826][ C2] snd_mixer_oss_build_test_all+0x54c/0x6e0 [ 452.587841][ C2] snd_mixer_oss_build_input+0x139/0xd50 [ 452.587856][ C2] snd_mixer_oss_notify_handler+0x48d/0x990 [ 452.587866][ C2] snd_card_register+0x2af/0x760 [ 452.587876][ C2] f_midi2_bind+0x1198/0x2770 [ 452.587885][ C2] usb_add_function+0x219/0x890 [ 452.587895][ C2] configfs_composite_bind+0xd83/0x1960 [ 452.587906][ C2] gadget_bind_driver+0x28c/0xbf0 [ 452.587919][ C2] page last free pid 49 tgid 49 ts 197394585379 stack trace: [ 452.587926][ C2] __free_frozen_pages+0x79f/0x10f0 [ 452.587941][ C2] __folio_put+0x3b4/0x5f0 [ 452.587955][ C2] migrate_folio_done+0x3a9/0x4c0 [ 452.587969][ C2] migrate_pages_batch+0x2895/0x4680 [ 452.587983][ C2] migrate_pages_sync+0x12c/0x880 [ 452.587997][ C2] migrate_pages+0x1a83/0x2850 [ 452.588011][ C2] compact_zone+0x2643/0x4640 [ 452.588025][ C2] compact_node+0x17f/0x2c0 [ 452.588038][ C2] kcompactd+0x724/0xde0 [ 452.588050][ C2] kthread+0x373/0x450 [ 452.588061][ C2] ret_from_fork+0x730/0xd60 [ 452.588070][ C2] ret_from_fork_asm+0x1a/0x30 [ 452.588079][ C2] [ 452.588082][ C2] Memory state around the buggy address: [ 452.588087][ C2] ffff88805ca36f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 452.588094][ C2] ffff88805ca37000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 452.588101][ C2] >ffff88805ca37080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 452.588107][ C2] ^ [ 452.588113][ C2] ffff88805ca37100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 452.588120][ C2] ffff88805ca37180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 452.588125][ C2] ================================================================== [ 452.588131][ C2] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 452.873711][ C2] CPU: 2 UID: 0 PID: 0 Comm: swapper/2 Tainted: G L syzkaller #0 PREEMPT(full) [ 452.876947][ C2] Tainted: [L]=SOFTLOCKUP [ 452.878323][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 452.881425][ C2] Call Trace: [ 452.882501][ C2] [ 452.883402][ C2] dump_stack_lvl+0x100/0x190 [ 452.884874][ C2] vpanic+0x553/0x970 [ 452.886129][ C2] ? __pfx_vpanic+0x10/0x10 [ 452.887578][ C2] ? __pfx_vprintk_emit+0x10/0x10 [ 452.889160][ C2] ? find_endpoint+0x2a3/0x2c0 [ 452.890658][ C2] panic+0xd1/0xe0 [ 452.891839][ C2] ? __pfx_panic+0x10/0x10 [ 452.893244][ C2] ? end_report.part.0+0x23/0x90 [ 452.894790][ C2] ? rcu_is_watching+0x13/0xc0 [ 452.896269][ C2] ? end_report.part.0+0x23/0x90 [ 452.897806][ C2] check_panic_on_warn.cold+0x19/0x34 [ 452.899433][ C2] end_report.part.0+0x3a/0x90 [ 452.900905][ C2] kasan_report.cold+0xe/0x18 [ 452.902399][ C2] ? find_endpoint+0x2a3/0x2c0 [ 452.903882][ C2] find_endpoint+0x2a3/0x2c0 [ 452.905333][ C2] dummy_timer+0x500/0x3700 [ 452.906745][ C2] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 452.908573][ C2] ? debug_object_deactivate+0x2e4/0x3b0 [ 452.910309][ C2] ? __pfx_dummy_timer+0x10/0x10 [ 452.911872][ C2] ? rcu_is_watching+0x13/0xc0 [ 452.913354][ C2] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 452.915168][ C2] ? __pfx_dummy_timer+0x10/0x10 [ 452.916710][ C2] __hrtimer_run_queues+0x462/0x9c0 [ 452.918365][ C2] hrtimer_run_softirq+0x1ca/0x360 [ 452.919951][ C2] handle_softirqs+0x1e6/0x9d0 [ 452.921451][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 452.923095][ C2] ? _raw_spin_unlock+0x28/0x50 [ 452.924595][ C2] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 452.926333][ C2] __irq_exit_rcu+0x16a/0x210 [ 452.927829][ C2] irq_exit_rcu+0x9/0x30 [ 452.929161][ C2] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 452.930950][ C2] [ 452.931904][ C2] [ 452.932833][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 452.934672][ C2] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 452.936404][ C2] Code: 77 95 02 e9 43 50 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 63 66 1b 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 452.942325][ C2] RSP: 0018:ffffc9000048fe00 EFLAGS: 00000202 [ 452.944177][ C2] RAX: 000000000074f20d RBX: ffff88801cf1a580 RCX: ffffffff8bd051c5 [ 452.946627][ C2] RDX: 0000000000000001 RSI: ffffffff8e3918f2 RDI: ffffffff8c623f80 [ 452.949082][ C2] RBP: ffffed10039e34b0 R08: 0000000000000001 R09: ffffed10056867bd [ 452.951534][ C2] R10: ffff88802b433deb R11: 0000000000000001 R12: 0000000000000000 [ 452.953978][ C2] R13: 0000000000000000 R14: 1ffff92000091fc4 R15: dffffc0000000000 [ 452.956428][ C2] ? ct_kernel_exit+0x125/0x180 [ 452.957961][ C2] default_idle+0x9/0x10 [ 452.959301][ C2] default_idle_call+0x6c/0xb0 [ 452.960796][ C2] do_idle+0x3ae/0x5b0 [ 452.962101][ C2] ? __pfx_do_idle+0x10/0x10 [ 452.963555][ C2] ? finish_task_switch.isra.0+0x149/0x10d0 [ 452.965398][ C2] cpu_startup_entry+0x4f/0x60 [ 452.966914][ C2] start_secondary+0x21d/0x2d0 [ 452.968406][ C2] ? __pfx_start_secondary+0x10/0x10 [ 452.970065][ C2] common_startup_64+0x13e/0x158 [ 452.971610][ C2] [ 452.973230][ C2] Kernel Offset: disabled [ 452.974583][ C2] Rebooting in 86400 seconds.. VM DIAGNOSIS: 03:31:37 Registers: info registers vcpu 0 CPU#0 RAX=00000000005cd869 RBX=ffffffff8ea91580 RCX=ffffffff8bd051c5 RDX=0000000000000001 RSI=ffffffff8e3918f2 RDI=ffffffff8c623f80 RBP=fffffbfff1d522b0 RSP=ffffffff8ea07cf0 R8 =0000000000000001 R9 =ffffed10056467bd R10=ffff88802b233deb R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=1ffffffff1d40fa2 R15=dffffc0000000000 RIP=ffffffff8bd036ff RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096955000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f71b8c10 CR3=00000000606ea000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000006000000000 0000000100000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000006000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000016580f1 RBX=ffff88801cf1cb00 RCX=ffffffff8bd051c5 RDX=0000000000000001 RSI=ffffffff8e3918f2 RDI=ffffffff8c623f80 RBP=ffffed10039e3960 RSP=ffffc9000047fe00 R8 =0000000000000001 R9 =ffffed10056667bd R10=ffff88802b333deb R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008ffc4 R15=dffffc0000000000 RIP=ffffffff8bd036ff RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096a55000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f72bb004 CR3=00000000607b4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000034 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85afcbd5 RDI=ffffffff9bc624a0 RBP=ffffffff9bc62460 RSP=ffffc900005483c8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000034 R14=0000000000000003 R15=ffffc900005486e0 RIP=ffffffff85afcbff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096b55000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000316f4ff8 CR3=0000000074ac9000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a000000000 0000000300000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000004fe0ad RBX=ffff88801cf18000 RCX=ffffffff8bd051c5 RDX=0000000000000001 RSI=ffffffff8e3918f2 RDI=ffffffff8c623f80 RBP=ffffed10039e3000 RSP=ffffc9000049fe00 R8 =0000000000000001 R9 =ffffed10056a67bd R10=ffff88802b533deb R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000093fc4 R15=dffffc0000000000 RIP=ffffffff8bd036ff RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096c55000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f71b8c10 CR3=0000000060b65000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000