last executing test programs: 1m7.797676221s ago: executing program 2 (id=1117): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) setns(0xc9, 0x0) r2 = socket(0x2a, 0x2, 0x9) mmap$IORING_OFF_SQ_RING(0x0, 0xd00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x8915, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x1, &(0x7f0000000180)=@raw=[@generic={0x67, 0xf, 0x0, 0x1000, 0x5}], &(0x7f0000000200)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x20, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd2e}, 0x94) 1m7.7517446s ago: executing program 2 (id=1118): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000480)=""/235, 0xeb, 0x40) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x8001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) r3 = syz_open_dev$sndpcmc(&(0x7f0000000240), 0x0, 0x0) io_setup(0x1, &(0x7f00000005c0)=0x0) io_submit(r4, 0x1, &(0x7f0000001a40)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}]) ftruncate(r2, 0x6000000) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f00000005c0)='fd', 0x0, r5) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x2) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r8, r8) setpgid(0x0, r8) fchdir(r7) mount$overlay(0x0, &(0x7f00000003c0)='./file1\x00', 0x0, 0x2880c98, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) r9 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) ioctl$AUTOFS_IOC_PROTOSUBVER(r9, 0x40049366, 0x0) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e000000030000000208990037d23432d0dc06009a60cb799f26ec0757f054c5d4e6a4463b46fbfea6e80d5985104d79f1e8d220dfbee471c6d882b31644b6f318732893d66653766544cabd2688e2576ff4aa5f9e3104d7c69677c57809cf99d41b74581cb3ad9439b550e3922c59770f4ca1f3e11b62f892c4fbdd30c0eacd273bc5e48d8421300be1b55b2716913614dd233d6402ffdbce715eec34a5a76d06102be471"], 0xa5) copy_file_range(r2, 0x0, r2, 0x0, 0x89, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00@', @ANYRES16=r11, @ANYBLOB="01002abf7001ffdbdf251400000018000180140002006e657464657673696d300000000000000500180001000000"], 0x34}, 0x1, 0x0, 0x0, 0x4920}, 0x44860) r12 = getpgid(0xffffffffffffffff) fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x2, r12}) fcntl$setsig(r1, 0xa, 0x1d) 1m7.615330039s ago: executing program 2 (id=1122): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)=@gettaction={0xc4, 0x32, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffff7}}]}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @action_gd=@TCA_ACT_TAB={0x40, 0x1, [{0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}]}, 0xc4}}, 0x10) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000001c0)=0xffffffffffffffff) ioctl$MEDIA_REQUEST_IOC_REINIT(r0, 0x7c81, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x4, 0x12) r1 = openat$ttyprintk(0xffffff9c, &(0x7f0000000240), 0x100, 0x0) (async) r2 = openat$autofs(0xffffff9c, &(0x7f0000000280), 0x8000, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1, {0x80000001}}, './file0\x00'}) (async) r4 = syz_open_dev$vivid(&(0x7f0000000300), 0x1, 0x2) ioctl$VIDIOC_S_MODULATOR(r4, 0x40445637, &(0x7f0000000340)={0x4, "942e4479f967cbf4dbad3d7fbb3de7d0681548c0120ffdb26046c82d3b55f637", 0x20, 0x0, 0x9, 0x2, 0x4}) (async) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r3, 0x110, 0x4, &(0x7f00000003c0)=0x2, 0x4) (async) write(r2, &(0x7f0000000400)="39c59820a9", 0x5) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x20, 0x140a, 0x400, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) (async) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000540)={0xffffffffffffffff}) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000600)={r5, r6, 0x7f, 0x63, &(0x7f0000000580)="367c70e8e874134cd7d69bc9d8acfe7e2e1c70480305b1f2ec510b3ed3202c74e6255a3bfd6db7fcff5b1fa71bf894536a17b3efbe1e87ccc0a59248ec53c369bb7475f65b57e126fa843a875f2bdbdb94654084ec4a659791ebfcfe608f5b19b6d1b9", 0x29, 0x57, 0x0, 0x7fff, 0x8, 0x2, 0xd, 'syz1\x00'}) ioctl$VIDIOC_ENUMAUDOUT(r4, 0xc0345642, &(0x7f00000006c0)={0xff, "f3315ebef7545309a43675c9c077fe5915bb8623940628aa007ed01c8542c561", 0x1}) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_XSAVE(r7, 0x5000aea5, &(0x7f0000000700)={[0x89, 0xc, 0x4a8, 0x4, 0x6, 0xfffffffa, 0x100, 0x6, 0x7, 0x8, 0xad9, 0x1, 0x4000, 0x8, 0x4, 0x400, 0xde, 0x6, 0x9, 0x9, 0xcec0, 0x5, 0xffff, 0xa, 0x6, 0x9, 0x1e9, 0x4, 0x9, 0xfffffff1, 0x6, 0x1, 0x3, 0xdd2c, 0x4, 0xa3d, 0xd1, 0x8, 0x80000001, 0x2, 0xd, 0x8, 0x2, 0x5, 0x9, 0xf, 0x7, 0x7f, 0x6, 0x1e31, 0x7, 0x2, 0x7fffffff, 0x51970fa, 0x80000001, 0x1, 0xd6, 0x4, 0x40, 0x8, 0x4bad, 0x1fec834b, 0x10001, 0x3, 0x200, 0x80000000, 0x3, 0xffffffff, 0x7, 0x4, 0x6, 0x0, 0x2, 0x1, 0xfff, 0x3, 0x7, 0xb, 0x4, 0x7, 0x3, 0x100, 0x6, 0x1ff, 0x7, 0x3, 0x958, 0x10, 0x1, 0x30000, 0xe0, 0x80000001, 0x8, 0x58f, 0x0, 0xf, 0xea, 0x7, 0x2, 0x6, 0x0, 0x533, 0x5fa, 0xf, 0x14efb0ba, 0x2, 0x2, 0x9d8, 0xbe, 0x4, 0x7, 0x0, 0x2, 0xcea, 0x4, 0x7f, 0xffffff00, 0xc47, 0x874, 0xffff, 0x6, 0x2, 0x1d, 0x2, 0x0, 0x9, 0x0, 0x3, 0x0, 0x8c, 0x5, 0x1, 0x4, 0x101, 0x936, 0x8, 0x4, 0x7, 0x5b6, 0xfec, 0x4, 0x54d092c0, 0x5, 0x6, 0x4, 0xeef, 0xffffc8ed, 0x80, 0x5, 0x1ff, 0x3, 0xd, 0x10, 0x2, 0x1ff, 0x800, 0x9, 0x5042, 0x100, 0xffff, 0x2, 0x57, 0x7, 0x101, 0x9, 0x80000001, 0xb, 0x42fd, 0x8, 0x7cfd, 0x78, 0x4, 0x2, 0x3, 0x90000000, 0x5, 0xcc, 0x0, 0x9, 0x4a, 0x1ff, 0xe, 0xffff, 0x5, 0x6, 0x2, 0x3, 0x6, 0x3, 0x4, 0xa, 0x9a, 0x97e, 0x2, 0x33, 0x81, 0x1, 0x6, 0xfffffbff, 0x1b5e, 0x9c, 0x7, 0xfffff801, 0xc67, 0x8, 0x9, 0x5, 0x3, 0x7, 0xae, 0x1c58, 0x1, 0x3, 0x4722, 0x8, 0x9, 0x0, 0x4, 0x0, 0x5, 0x3, 0x2, 0x4, 0x400, 0x0, 0xb, 0x0, 0x80000000, 0x1, 0x6, 0x5, 0x200, 0xffffff64, 0xc9, 0x3, 0x2, 0x1, 0x3, 0x3, 0x9b, 0x7, 0x7fffffff, 0x863, 0x3, 0x8d, 0x6, 0xc1a6, 0x200, 0x4, 0x0, 0x7, 0x9, 0xf, 0xca7, 0x60000, 0x6, 0x0, 0x8000, 0x10001, 0x4, 0xd, 0x200, 0x1, 0x8595, 0x1edc, 0x3, 0x1, 0x9, 0x0, 0xfff, 0x7, 0x8, 0x9, 0x0, 0x212, 0x7, 0x7fff, 0xbce, 0x0, 0x7, 0x7, 0x2, 0x8, 0x6, 0x5, 0x3, 0x3, 0x2, 0x200, 0x0, 0xfffffff9, 0xfffffff4, 0x2, 0xf1fc, 0x6, 0x8100, 0x80000000, 0x7, 0x1, 0xb, 0x3, 0x4, 0x8, 0xa0, 0xf24, 0x6, 0xfffffff9, 0x10000, 0x10, 0x8, 0x2533, 0x2f, 0x40, 0x1, 0x6, 0x80000, 0xff, 0x270a, 0x3, 0x1, 0xb, 0x8, 0x3, 0x100, 0xedb, 0x6, 0x9f7, 0xe, 0xb6, 0x8, 0x7fff, 0xe, 0xfffffffd, 0x4, 0x1, 0x1, 0x8, 0x8, 0x8, 0x9, 0x9, 0x0, 0x9, 0xa0, 0xff, 0x9, 0x101, 0x0, 0x4, 0xc8, 0x64734b62, 0x7ff, 0x2, 0xc, 0x1, 0x3, 0xd45a, 0xff, 0x81, 0x0, 0xfff, 0x8, 0x6, 0x1, 0x7, 0x3, 0x2, 0x8, 0xc2, 0x3, 0xda7, 0xe, 0x1317, 0x8, 0x4, 0x6, 0x2, 0xe, 0xc6, 0x800, 0x3, 0xc61, 0x8, 0xc162, 0x10001, 0xfffffffd, 0x3e4, 0xffffffff, 0x5, 0xd791, 0x6, 0x8001, 0x4, 0x9, 0x3, 0x9, 0x2, 0x9, 0x6d05, 0xc31, 0x5, 0x6, 0x5, 0x2, 0x4, 0xf34, 0xa, 0x5, 0x91, 0x7f, 0x3, 0x93, 0x6, 0x8, 0x101, 0x8, 0x800, 0x1, 0x5, 0x3, 0x3, 0xf, 0xb1, 0x5e, 0xffffff1b, 0x10001, 0x3, 0x2, 0x7, 0x5, 0xc, 0x2, 0x8, 0xfffffff0, 0xfffeffff, 0x5, 0x4, 0x6, 0x0, 0x7fffffff, 0x8, 0x9, 0x8, 0x5, 0x9, 0x8, 0x0, 0x10000, 0x870, 0x8, 0xa, 0x9, 0xf5, 0x6, 0x3, 0xa000000, 0x9, 0xcca, 0xffff2f91, 0x3ff, 0x5, 0x2, 0xffffff7f, 0x6, 0x2, 0x5cb, 0xe406, 0xd69, 0xc0, 0x93, 0x5, 0x5, 0x2, 0xd, 0x4, 0x6, 0x7ff, 0x6, 0x9, 0x7, 0x0, 0x9, 0x9, 0xc1b3, 0x2, 0x6, 0x6, 0x80, 0x879, 0x6, 0x7, 0x6, 0x7fff, 0x709, 0x9, 0x2, 0x0, 0x314c, 0x6, 0x1, 0xfff, 0x2, 0x5, 0x15, 0x3ff, 0x0, 0x6, 0x1, 0x6, 0xfffffffc, 0x6, 0xb, 0x5, 0x2, 0x8, 0x6, 0x200, 0x7, 0x7, 0x6ad9, 0x881, 0xbc, 0x7fffffff, 0x1, 0x2461abd5, 0xffff, 0x8, 0x8, 0x10001, 0x2, 0x5, 0x1, 0x1, 0x8, 0x5, 0x10, 0xad6, 0xfda, 0x2, 0x8, 0x0, 0x8, 0x6, 0x7fff, 0x1, 0x388d, 0x140000, 0x1, 0x9, 0x0, 0x3, 0x10001, 0x10000000, 0x5a, 0x100, 0x1, 0x2, 0xe, 0x4b, 0x7, 0x4, 0x1ff, 0x3, 0x66, 0x4, 0x6, 0x2, 0x5, 0x9, 0x4, 0xff7, 0x2, 0x6, 0x7, 0x1, 0x4, 0xa3, 0x2, 0x100, 0x0, 0x5, 0x4, 0x2, 0x2, 0x0, 0x6, 0x6, 0x4, 0x1, 0xc97, 0x3, 0x2, 0x4, 0x0, 0xa, 0x4, 0xc02c, 0x1, 0x401, 0xfffffffb, 0xa692, 0xfff, 0x6754, 0xc0, 0x9, 0x800, 0x1, 0xbd72, 0x2, 0x7fffffff, 0x4, 0xfffffff7, 0x3, 0x0, 0x8, 0x9, 0x7ff, 0x0, 0x8f86, 0x0, 0x8, 0x1a0000, 0x1000, 0x2, 0x6, 0xab, 0x7656, 0x700, 0x1, 0x7, 0x7fff, 0x9, 0x10000, 0x81, 0x4, 0xe, 0xc9, 0x8, 0x4, 0x401, 0x100, 0x4, 0xa, 0x2, 0x80000000, 0x3, 0x0, 0x3, 0x367a000, 0xe34b, 0x80000001, 0x100, 0x2, 0x9840, 0x1, 0xfffffff9, 0x1ff, 0x3, 0x81, 0x9, 0x100, 0x1, 0x80000000, 0x100, 0x7, 0x2, 0x4, 0xfff, 0x20, 0x6, 0x71, 0x3116, 0x0, 0x7, 0x3, 0x7ff, 0xfff, 0x3, 0x6d6, 0x2, 0x0, 0x6, 0x80000001, 0x4, 0x6, 0x9, 0x2, 0xffff8001, 0x0, 0x4, 0x1, 0xffff, 0x1, 0xe73, 0x1, 0x7, 0xfffffffc, 0x6, 0x5, 0x0, 0x7, 0x1ff, 0x17ee, 0x9, 0x3, 0xffffffff, 0x5, 0xc, 0x5, 0x7, 0x82, 0x9, 0x6, 0x3, 0x7fffffff, 0x8, 0x1, 0x4, 0x6, 0x4, 0xf, 0x100, 0x9, 0x2, 0x3, 0x8, 0x4, 0x5, 0x9, 0x3, 0x1584000, 0x8000, 0x7f, 0x6, 0xe0000000, 0xe, 0x7, 0x10, 0x17f20, 0x3, 0x3, 0x0, 0x1000, 0x9, 0xffff, 0x6, 0x4, 0x5, 0x2, 0x4e42, 0x5, 0x9, 0x9, 0x101, 0x9, 0x80, 0x5, 0x7, 0x3, 0x10000, 0x3ff, 0x0, 0xffff, 0xe, 0x4, 0xffffffff, 0x9, 0x8, 0x6, 0xb, 0x4, 0x9, 0xce7c, 0x4, 0x0, 0x74, 0xfffeffff, 0xe46, 0x2cb, 0xe, 0x8000, 0x40c, 0x8, 0xa5, 0xd4, 0x4, 0x7, 0xd, 0x100, 0x7fff, 0x9, 0x100, 0x3ff, 0x3, 0x9, 0x9, 0xfff, 0x9, 0x5, 0x0, 0x5, 0xffffffd6, 0x73, 0x8, 0x7, 0xc000, 0x3, 0x0, 0x8, 0x0, 0x6, 0x80, 0xc1, 0x1, 0x9, 0x7, 0x3, 0xffffffff, 0x7, 0xfffffff2, 0x10000, 0x400, 0x2, 0x0, 0xa, 0x9, 0x6, 0x9, 0x2e1d, 0x400, 0x3, 0x8, 0x9, 0x13dd, 0x46, 0x80000000, 0x7, 0x6, 0x2, 0x7fffffff, 0x8, 0x8, 0x4d, 0x100, 0x3ff, 0x0, 0x8, 0xfffffffd, 0xc, 0x5, 0x7, 0x5, 0x8000, 0xfffffffd, 0x95, 0xe49a, 0x7f, 0x800, 0x6, 0x4, 0x6, 0x9, 0x9, 0x0, 0x9, 0x1, 0xd6, 0x9, 0x9, 0x6, 0x1000, 0x8001, 0xfffffffd, 0x400, 0x7ff, 0x1, 0x194, 0x9, 0x4, 0x4, 0x6, 0x10, 0x3, 0xe, 0xba8, 0x9, 0x9, 0x1, 0x7fff, 0x400, 0x7fffffff, 0x401, 0x7, 0x8000, 0x10, 0x3c, 0x3, 0x4, 0x1, 0xb, 0xffff, 0x2, 0xfffffff7, 0x2, 0x10, 0x1, 0x9, 0xfffffff7, 0xf, 0xc, 0x4, 0x8, 0x4, 0x7fff, 0x2, 0x8000, 0x3, 0x1, 0x8, 0xa5c, 0x6deb, 0x7e, 0x6b9, 0x6, 0x2, 0x2, 0xd, 0x306ba31b, 0xa, 0x5, 0x6, 0x1, 0x1e, 0x2, 0x7, 0x1000, 0x5, 0x8, 0x80, 0x200, 0x2d, 0x7, 0x1, 0xfffffffd, 0x8, 0x7fff, 0x8001, 0x40, 0x8, 0xdb, 0xd, 0x2, 0xfd3a, 0x7ab, 0x2, 0x7, 0x0, 0x8, 0xf450, 0x81, 0xff, 0x4, 0x80, 0x3, 0x496, 0xd1, 0x5, 0x7, 0x401, 0xb, 0x6, 0x40, 0x7a69, 0x6, 0x4, 0x3ff, 0x11, 0x800, 0xee2, 0xbc4e, 0x3, 0x26f5, 0x9, 0x3, 0xb6, 0x2, 0x200, 0x1000, 0x2, 0x4, 0x80000001, 0x8001, 0x80000000, 0x5, 0x2, 0x7fffffff, 0x5, 0x4, 0x3, 0x67ef, 0x6, 0x9, 0x0, 0x1, 0x2, 0xcf12, 0x81, 0xe, 0x6, 0xe, 0x10000, 0x1, 0x5, 0xf, 0x2, 0xa, 0x2, 0x1, 0x0, 0xfff, 0x4, 0x6, 0x3ff, 0xe]}) write$cgroup_int(r3, &(0x7f0000001700)=0xce32, 0x12) ioctl$EVIOCGVERSION(r3, 0x80044501, &(0x7f0000001740)=""/152) (async) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3, 0x4010, r5, 0xe694b000) (async) r8 = creat(&(0x7f0000001800)='./file0\x00', 0x64) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000001840)={0xe2, "c6fc5d6036a7ede2a9cbfe3a6a4276a6f4c00f2162d934094c333354e224552f"}) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000001880)={0x3, [0x0, 0x0, 0x0]}, &(0x7f00000018c0)=0x10) ioctl$KVM_SET_NESTED_STATE(r7, 0x4080aebf, &(0x7f0000001900)=@vmx={0x4, 0x0, 0x2080, {0x0, 0x4, {}, 0x1}, {"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", "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"}}) (async) recvfrom(r6, &(0x7f0000003980)=""/82, 0x52, 0x103, &(0x7f0000003a00)=@sco={0x1f, @none}, 0x80) (async) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000003a80)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x40, 0x0, 0x3, "", [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x7, 0x1, 0x1, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x80, 0x10, 0x7}}}}}]}}]}}, &(0x7f0000003d00)={0xa, &(0x7f0000003ac0)={0xa, 0x6, 0x250, 0x1e, 0xc, 0x3, 0x20, 0xd8}, 0x19, &(0x7f0000003b00)={0x5, 0xf, 0x19, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x81, 0x8, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x9, 0x9, 0x34b5}]}, 0x6, [{0x4, &(0x7f0000003b40)=@lang_id={0x4, 0x3, 0x3856}}, {0x4, &(0x7f0000003b80)=@lang_id={0x4, 0x3, 0x40e}}, {0x69, &(0x7f0000003bc0)=@string={0x69, 0x3, "a585a5ddc4a2d6f24c168b43c995e03a7640165498ef4e5b9a412d13a2453c28c73d4bd9cbdc494b557b076ff52c452f9f4100bd49799950efcda8d96aaf667c118efac18b71ae020cd59baa66aefc92d8e46e750f80d8939429dde2417fbd2861be0517bdda7a"}}, {0x4, &(0x7f0000003c40)=@lang_id={0x4, 0x3, 0x2409}}, {0x4, &(0x7f0000003c80)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f0000003cc0)=@lang_id={0x4, 0x3, 0x807}}]}) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r2, 0xc01064c7, &(0x7f0000003dc0)={0x4, 0x0, &(0x7f0000003d80)=[0x0, 0x0, 0x0, 0x0]}) (async) sendmmsg$alg(r8, &(0x7f00000068c0)=[{0x0, 0x0, &(0x7f0000004e00)=[{&(0x7f0000003e00)="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", 0x1000}], 0x1, &(0x7f0000004e40)=[@iv={0x7c, 0x117, 0x2, 0x69, "bd42594ba4b5c6167dc1a50282f5d64fb7ff3c4424f3122c7871627e14e13b44b826284b636d6f3804cce687e923fc103024e0bbc767f1f50a5db9feb4c901fe210d318516f932a1851e91f4974b0dd2626de486af0a2850a052c32ba910dd5071ce0c1b726bfdfe85"}, @assoc={0x10, 0x117, 0x4, 0x4}, @iv={0xb8, 0x117, 0x2, 0xa8, "c0875d4b5144e5ecf73ce53b569374dcca5bc24170ce076e0d728d1225430e765693ed2ec4369dcde3210c152df63a211950a46e61beeaf49bdbd98d67e81c224708da377057e558fe6dd44cd1e35f3cb446ecf4e6654fe42b6ef915a7d203dc8a825cdc07306b3ac2510005bf789a075f5dfff31bb4141b9e30aedeb909c84f1ba7164fc0d985e582eeb3370939c411765bea3efa734f81369b926a1fc9cdf53e6f460e0570ae46"}, @iv={0x50, 0x117, 0x2, 0x40, "fcc4837df8012ff15fee3aca8e6ee2617d375da8102ec1a409ecb562ecfd6b6b1828b1038943ca89aefa9dddb41e7249fb3b4b7f8f8d67eb94f10f996f320e46"}, @op={0x10}], 0x1a4, 0x10008054}, {0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000005000)="fb1e8e13f60488f9e55bb2783ade007117c40465cef25a7a8ffa0adefa688022511b41ff1f4c7ca7eee062217cf369eb05be8d014313105fa99c29a8147150ce442c4d2d0977a73d56ccb445951d92542e70a2b8fb5504", 0x57}], 0x1, &(0x7f00000050c0)=[@iv={0x7c, 0x117, 0x2, 0x69, "6eea660e700af3aa777a7cd353a7e4033869050ac9735d0e6c528c959c48039da2919d117d6cc7a076dab642918f3d298d31d56d5f33d32a7c1c6d572a4b361d0a332ccee3b29a641c03ba4e17e87b7531f5771ff6885d73c20a54741ed3376923d993a3a54bf28a08"}, @op={0x10}, @assoc={0x10, 0x117, 0x4, 0x3}, @assoc={0x10, 0x117, 0x4, 0x2}, @assoc={0x10, 0x117, 0x4, 0x2f}], 0xbc, 0x24000001}, {0x0, 0x0, &(0x7f0000006640)=[{&(0x7f0000005180)="8d9362017eca963d35e4aa9352706dfb8dc5a53e8208b10f0735acd9a0221a6a2fe85e2a1578ce67cc1468ab151103109cee9fb345b38c0df2afe98b74906c49cd94bbaf31679ede9484df", 0x4b}, {&(0x7f0000005200)="94a612f68d7263ba35666a1f67c5", 0xe}, {&(0x7f0000005240)="8a7b09899014", 0x6}, {&(0x7f0000005280)="6f32ce38e79c0c2470dcf8d99c832f37b9edd110c0826c1ba0064d2617dea053488e6bdd3a0aaac288962c79eb0bd4afbd9821be1dc8ff940ee5304242ac05b789b8d0b3441f319b6cef5f", 0x4b}, {&(0x7f0000005300)="5a6c67f98d3cabf4eface16cb7c920fc48d60eca69b17412eeec7e3e78c3518304fc5357d28be185cb29470a7956625aa9c4e39d9d59347d6e9d4787db3fb8c639358e9946312fe71012094e5f39543155bfc44124f5fc6af114161c024462fb01f3e646126c375b5d235e7ac311a99b306213907877634e1db748e407d17311b319e75ba1d097aa0213a90b20aefab6abf8d3c076c772aef1873b6c9371643259ca62ff8bec6b5164547f6af2ab0076b13aef6404c3772d51e48bec204e957a7aeba6eac1c943c59774a5922e131a9ba27cb360dcb272e2ff5f848c0c0bb41922b364a8380806e21f1b1356db59c618144b57fbefed7362", 0xf8}, {&(0x7f0000005400)}, {&(0x7f0000005440)="e5fba75abb66dd2b4f9a889f86d3fdd0a5bca3d1e7e4cde1e48ff72816e677813c7d0ab5299a6005fa78b0917d1b50f53018247ad60999641a1eae595a1c78d989358425e151f4c7a46a9a79d17355bef2522a553848e85d1aab5d4207806d56c1b2a518ca18b643c834d415eea9bfa790558609abc9104877871d8119c628e5b234bbbc8910d9b7ec8c46225cec0962eadfd25821a9447adb38050a9f031f55", 0xa0}, {&(0x7f0000005500)="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", 0xfd}, {&(0x7f0000005600)="60f168db7462ec4b0e58ff3c748795f6c135408e", 0x14}, {&(0x7f0000005640)="600f9a1ee2d10e3def56d5c17aca38bafbab6cdd365210e3149a49e813a1f40249e065d4ba8a477b7dc8a3a1df2c81dd5a7e3f83f3402a729f7c56a3645dff3366673987b1a170cd1d5bb7c3307f4f7aef089c044cc8b5c6366fe4708238d1565e77c647ff88a3c7c9ee004e52e38a5fd0658baa91c635f652a7bd9b6b667062b02f253b6fc1a8839036fb7c9d7e7d30bf4e8f02035b54155020dd02e53b198b37da1f532b44b62ce9a875bcde54d36f758bda6601b4d95b1da6761ca76a2349336d242740860b5cbfb24e4239c5a206489d6ea45c9d29500f29e3fae270107b9c0b81046ba5c0c581dbf04eee0d78ced4fc01fff51d13537a4da9dac5f61fbf2f528fc656fe272caec0daeb8456fcc1d14eb85ac6722795479a20e609f251563b157294c3e887cca09eaa229fff2e3b25a6cc6e36a56a1ad39f72e81bba6586e7fa825fd833772767bb1522252fa9f9b28204a79aed9ce05ccb6849a08d579c6c0a2d4579ff7a3c7ea60b221568ca69d72a61dd7dc6ec850ec8fd96252d2a609332aad11e586dde8c7e44a9edae459d2fa46f6178e314a03ac87a0f7ab4190562d1ef58411757d495bcdf9da6eab505655e8b137c7822fe4375321481a6b09367f10986005589cdb8dd606aaa0bbbcde262d132b6a062dcaf0347c6dd4a69dd3f704702e05da1f2332321acb10f8bc338dc96e0c0f134add35f8df586d5e37dd53c2d101cac6ad2e5c9132f6d170077fddf11d954a809b0df90f4a516da0e1c1325b5256bf207796fa81876d8d73502bac8a78e1f0444806af9c51430d35a59c9ceddf82f5fca7e7ac4074e5c7da7b0953ff9bfd35fc86ee99dfba4ea12eb0a084da0e778a82b8c37318de314d9475348d8e764978ae38fd6c88e1fc40a6b14493cfe1c68c5416a4eb169dcc2a70a84ded2b59e1249cb0c5be221a806ede1ac04682c2102e9b031fcf18caa8ec92e090dfed53b21f7de8d44792c61d57841137d2ca58a9c2040ebec44c485f80c0681f9f39c9b4d354cdc747579cbd11b6e6cfd079d41f45f23f312aa80e5455a7a292ccf734b5e3573f212102507e8ca9bc39d5830c224761d1e55481b6c4a5a445809afa22fc4f60887795be5bb9a906133e52206515f5f04c8622dd32e6ab9e156ba81ca12c3944317a353a2fbe6e853d20d3bcd1334e0c9c55b5b47b422a8a22e55cacdd31643b244cc239fcd447b3dd60224064fbefa8c772fc48880fbe6d3bd59c1a76659a03d7227571897d5652f8368ba6dab4c1e56832e81eb2e1ff24590ba16aa35c2d2df1409c09a8597282df17e61328ed18a7133c7710447d7b0e6942f0910c60f9fc90dfd653b2c38e6659b133b434e3b9c335d344f9b42c9a0e1183edf09225089a54eb3e9dae9b2226c9ab3a3c5bbf4bb14d95ab81e667917b89d106c68162408005ebc8dbafa995f60dcfb1b27b463b50a08aef1aeccf29ed00021286cac3a46746193875d9d13fbeeac4a1236a2854ec3c065d9c690c6555e4395b655bcf2c23cb4ccaaf4b078d39620c70284aa706487763ac4ff540b72ac8caea31c8d04698d9d25e950ce890526776b83daea808016980de0530ce544f23bb614fd5af8c7ab6b0723699f5b0903e6e30ee71359611aad1a3fcdf06e0a68ea4b10498daf919fc17df4951b02794c0e5f970eda948c5159d9110ef6033ed8c231782005ed9af85bd0c315ef59c3bbefe1cff0896f3a2b003f8b484f067f39ad74fb9fdbd91f2c0925c36f604c34b42b543dfb72e792f3f3001dc59d91bca74b6d6942d804c0c86fbb7c6025535bc3bc063d8d6bffd53afc4f483748c3c8696edad05749ab41424e81da53844433b14e2cc7b308cd7a3161a5580c55a9197ce79fe6ae84d8d22a3835dea597ab34c25b4a33f8491c16b54f5f4d8f390bf3fdc3f03a4ee2e0e357998660cce81ea63549e4df6540042287e3e640559b29cd5e2f260db29fe1880890f3f39bed9d4677d75dbc665dbafd900e99db52d3583c60be68ad21aaa79c78bd00bd3bb4d9c1dd752618237e6d7856fb1cc4a8b8c4a4a8a1d92d6b241e47d01e7d78de52714015dbe737c8df007a11271f584311d52c8114b089364a29adad525857221db53602a268e2a6ecfa2fa35a8a10f18e5291c56e41ff73be45c6a6fdb49aa25dc5beae25ac9ff7136275f38fe0c0c438d539eff2c616039c0ac9e238618a756f2e29637da91e1f93e5df9e779e1d1c1d24254bf02d36e9039173c9e54a8042bf7816b4308b65a1a33fecab85f053441fae63d2d3c8b34a1c521c7472dc194728996bd0f8de18eeb197eaec058b352cbe86eea75772508ba08779831b6a44de68961779a8425db038eda4486d6aba846143fc890d8eb379581ff7b15db88d8bcaa7ee5d27c1ec58910f2e12b38200114626864d8c1942a628e8fa167ce46d9331beeb1b1325b417eba434dfdefed185c497647bcbefe492c1a6ace5194b88f89e1ad9136423989c8fab435ac892254891281d214eb2b270557d99f0204e202cf3089fa024064fda074b9720800fc391a59b9e81e09ecda4e5ae5bd0c353f6af1dfc9129d1c2b79f72d736ca21c4aada7bef68d7d87848f9f8b211e8c33a0d7d6952d951a02e29a9d1958466ca03101dd37c1f612199cd3da663075c67025179987b7220d810561e4af28d18c4ba14610bf102d9aac936619af3da396de0deb971f2383cd41e2559591bb9da2873779a878212fe198ff1e1880a18dd7d4b0f522f960558d44186fc956fd54611aa48c797bea4b24d610fcf387566c898134ee830ed5ccf326b7f83aa4b6fdefcbd3a08bcfe1c1a4221d853f873acc4d3d299be230a0f3cd98855424cbe36ba7ff49d5c50db7b987c124442442c24005a85ceda215306934767d630ddced4950ce5f6d8f097b04079517174f84e1bb59ef8ee1603e6b179681867aca55fbf83f01c9707854a7da5d95af902c92084892279e7c78fb2f20b3fbb1f35f327556c73d42b9cd0fa174792a0a1e7ee983c821b64a66de3922b450ec091e19f1c56973c27c68a4fd26a65e7ee13f32913d5c67a4e2f849034547f82c9e8c9477a9251d78bfdfcde963e296a0a0829eacce59f24a8b537129e37428a7e31942075b69ecdd1902f019368d820878ca34fb1e347232af17160028e9d906550c16723626c53ce400d6f1e95b34283f7200b23ce8b48409ba39ed478c55d9fd110419dbb1a2e8d56fb021f941cca8c02ae61437093720d8068033f38a259686ad652723ed7825b971501a7a193ac8a0dff19d8e5507a79792897dbb3c4662d695c192d2efab36f7eb2ad67617d684daa28535145d8ce781435225f5de1c872f689ad0c7a4c1c48c178f0add340bdf22b75b28d1876bb93001fa46f9a3c4ee27ba83285b9bc91def64c0881130be4dc65768ffbed1aea33d7e386e0fb3b279e8e86ca5fdef78a2428ab73f90b2df7cbc2e17c5863568be408664eb7e8df5793b4dabf6f33afa234c688b3320058dc58bbd7f727d11da01f4b28aa74b340e976a5d696ddcaa802388cfd6263db3966c7c7ebb4415ccf4d3187b1ffa75b69d268dc503bc4fdf7fec0da2326b1d391544e815a1b5a7a39653ee085910777695e5189971d378a813ebbd41726a8f186046838a34cb93bd7ead144c7025d77d3fe2c0eb74a88b6e10db4823526b3f6f5e53e8162d0c5f201cc4c2da1bdbca33a05be8ff7e6890cc4cd6cd564119df7d9f40db53ab5d20dd5d2ea22e3cbf6401ba8942308438722255bb16cf1b755b0148ec05673f74e3b57b57ff4f932bafa7c234b890ad64e7edd36813a5c2e0385d59621a057a74fe9007071ebb85e66044be81700b608d1c5d62ab781d96166ff7a80f87ba272fbf14e1449a1a91bde770e186d395bf34ebe0e4467a99afb14d99b2ffd6acfea6ba344f631bc1d31b7e25e024e900e654693335b4b2d65483ed0c574da91c71d2064219fb4f7edc15df35d1085e2a1d0d1f8480bf56de119f9e098f0eaf4d949017faeac302c351ab54582ec552a9fc6ae268ea52adfb3e69711ba57f64c19da1813ff22a958200a9f795395b74ec2008cdf218f22472fc051d96ec7076cf13b571d7ed24dd4d9a4494050425ee407adf4a990306aff238b6c8aeda6b5933ce128d89c9fd4da03cd6a191641f71d6fa12649eec63332a160943763c9ce73dc5c1c274d564ab75dbb8be54e478caa4e64219c054831eadc6632a7c23e138cb3432148806a2ad72548fca24d5dfba1ae282bb7832c0a95aa2b2eea5beb7ee4c857e168a9411b4b307af7500139bd83342ec8622e681fdd30163de4da2ac5300d66c89c1f1863b27c1c301d285928b4503650d00656663daa1fc1b5cfb5cc5ddac9a2ee9868561e1755cc39ca0f96c08ab613a981e6382d8e99f5eeac49b340dfe1237e74c02cdbdf5b4201e322344787ded70f12c0fdcc7ed2dd31cda116116a1c7ac6455f6fa8d93738bb37c0519f8928c6d95b39a765fb8195d045b97b0230c0e8cb94617431028102408819b46cdec4970ae651210a00b7c35fff55c25aed359327153bf4d4ef5e04cf3d2159c55a6668e0f4b92bafc8fab265da5bfcc7602071f76eef6b14b6d3a64d4f56611cd03a6646a332d71c8e7af911300eb46f99fc63836c032003c86525aa0da67488ba17d5be9e2a7c78793400cce722da152a8417c9d2a054d83b961b89cdf12a7c39df2c9fc7d7993d14e21baa9d20d4ca274c289ee450f810588997d0ce3def27512888b0320011f01a2c2e6868c77965abf65a58a0b2a2565f457b54f1fbdac1a6257457d9bfee92231d2c0875bdb4fc64a842f9afc7b7ea8edcc53b415384b8e13b14c3d13bcd51c1d218d0ac21b42ae88aa774858b66dc7fb1c717bc9ae31ac8dfe67771be4028189a92bd987f65ce47f7d8972c8fa94215a03017f5b6a3855a7915b4b73883239541377396448d4a01b183e7b2428e0454123b03a83840047554c90228d8ef8e9f235d94f404ea9dfdf91302e5780cdae9f8941052282b2410bf4551499f35c2645c9c8974dc1a50e5d63e2315e9e1d933051a4e1474cc297a4c201c11048b313e6d3dddc7e07edebf5a27ac09f2aebf851085690898c182f35203accbefe6a33b8773f2bc4c21b77e329031f24e4b426b117d30a2264aae94735888c0bf8fd36d9c2a567eb62be7286fc294703d716aaf543b54619d720533b579494f1604620a4f9295f10db05e818329ad2b285ae4a68e0ce2df43e23fe0fc34295abeb9f47675a0746170dbc2fbec5d5b379d9a1f835a9b75e0cdc6edac1f07eb572a5b2814f2d1fdb90bc70ea1d53f5a1326e15c5bcdfc6f33e7e41772c78adf2159a88a86e9e280bc233a71c45e1f5e639d0af20fa264e6ada971c9629504f95406830d92ad5893651583185aa3e75b8d3d742420692bdaaacda275b74eb733dc4099aad4e66af4aa113b2d49eb438f0c7c194104e5bb8c3428fd4e1926a0cbdee00e3c397f21b577bc085a7f56d570afebf3ae086132819930d5dccf54f12f5c6ec6c4766bde64527c3c7532ac3c2b291598cb6a8825f748a93264c6540e896b0a7a864dcafed874366899515c535e9947265deba12061d3e03501860a345cad3d187411d5f775a958a98d363a54d4dbfd14183af1ca916f3b3282e87043371a2530be3daf62103294c92a96ee18b6b20e14ea05da2e12513dc3a949b6981196e178a32e749da891e812cda21a3b106b8736283b4e019f1ba03d0350abd5901da4c5228ca160fc651377b8c03b2c3088fe4998adc2c44d4909", 0x1000}], 0xa, &(0x7f00000066c0)=[@iv={0xb0, 0x117, 0x2, 0x9e, "941061096558dcc21f3817a3273b356a766b45edbc0fe9122dea15b08113ed6c68fc0bb9646179af911fc5fa482c298643eabbf834ce8f74dea2e0181ac5a81f10e5ad580ba5eaa65db481bbb30d7706183e48fac991b9f2d81fa6b6c253c94e30b446d638a766edd8c687f2beed01177b19c90096d234077136b95bec54081e4d7fea61e45f94ddaef498b334173b27abf97f84858e06999cf4063d018e"}, @assoc={0x10, 0x117, 0x4, 0x9}], 0xc0, 0x40}, {0x0, 0x0, &(0x7f0000006840)=[{&(0x7f0000006780)="b4758c90", 0x4}, {&(0x7f00000067c0)="03c4aea599fcdf0f3768cdb7711f39976f1f20019b452d7264c339f0c51f323b567dec7428f2c9d64396ce247cad9ddbc2620ff76339f0ae060c2eb7c4497d281740c92b0123d7c726845ae4265d8b7ec07e5811173db3d2ca6bc5756dbdd662c710aa034f8a6ab21a57c41ff6ccd79f90a636675bda0fa0", 0x78}], 0x2, &(0x7f0000006880)=[@op={0x10}], 0x10, 0x20000000}], 0x4, 0x24000090) (async) fsmount(r3, 0x0, 0x4) 1m7.469890777s ago: executing program 2 (id=1124): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, r1) setpgid(0x0, r1) r2 = syz_open_dev$vcsa(&(0x7f0000000140), 0xcdd, 0x109800) stat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000000440)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x100010, &(0x7f0000002480)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x600}}], [{@obj_role={'obj_role', 0x3d, '#'}}, {@euid_gt={'euid>', r4}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}}) write$sysctl(r0, &(0x7f0000000000)='2\x00', 0x2) setuid(0xee00) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0x9362, 0x0) 1m7.469119056s ago: executing program 2 (id=1125): setns(0xc9, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x7, 0xba, &(0x7f0000000300)=""/186, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) socket$alg(0x26, 0x5, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004f40)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}}, 0x0) (async) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0xfffffffd, 0x7, 0x0, 0x0, 0x2000000003, 0x0, 0x82a, 0x0, 0x81, 0x7}) (async) syz_clone3(0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8880, 0x85) lseek(r4, 0x2, 0x1) (async) getdents64(r4, 0x0, 0x4f) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x40014}, 0x4000) (async) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000002000000b705000008000000850000006900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) 1m7.056449021s ago: executing program 2 (id=1126): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000204000a28000000000a050000000000000000000300000308000240000000050900010073797a300000000028000000000a010400000000000000000300008a0900010073797a3000000000080002400000000614"], 0x78}, 0x1, 0x0, 0x0, 0x24040010}, 0x20004040) syz_open_dev$dvb_frontend(0x0, 0x0, 0x202) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$dvb_frontend(0x0, 0x6, 0x20282) syz_open_procfs(0x0, 0x0) pipe(&(0x7f00000001c0)) r2 = fsopen(&(0x7f0000000080)='qnx6\x00', 0x0) openat$cdrom(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x180000000, 0xd8, 0x2d02}) write$tun(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="fe805e616dd03cf2fe2093c0c0b0abd9ede2eb76b8efc7235e23064f9c683c42cda670d588619e32ee8ec1fcd9bea882fb2c0ce2b5ddcf339f52eb76345f520da24842a1d679eea27e0db04a3c3f0c205439", @ANYRESHEX=r1], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r2, 0x0, 0x2) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r5, r5) setpgid(0x0, r5) fchdir(r4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x1e, 0x2, @thr={&(0x7f0000000380)="a04f812fef47945bd931995e89ba2d06191e483fe03ef3bf5ef2906d5f30262279a9f5d7c29b26cf77c95de7a2192d095672267eb98e33ab351f4ba48e9d5b7363d27f1209959a13b14737988a42753783a4b778a91f7e10fd1b43b416a123d39b8d8f9f6ad1a6140e33bc924ffe334d00e37362f29a137255e46c933958863317496b11ccfec921c28f234736dae35beb37941303fe35730c592af8e22fea92b35f37fd2b6722d54ec8", &(0x7f0000000440)="5bd54e105cbcf076ec9639a38cd1e240fcbb6d400454aabecabbb79ea8466139e9ec40b789cf504276d59140c504ddcd556de26c616471527310dfe0d9d02a618fb011e0260dc2d8e9b8aa60b7bfce63312fbf7ba5fa74ed5360094da287f0d2f821cd1f6b604492c7639a41419b08a38e5f35281cf591ed282c9f8ba4ab3cea9494ea97eb325a76d10f7d6019f47a14be42bed7ed684d0f35eaa03ecfaf9c7031adce2b9fd2ad975aa40238389d9e667c10330ecaa62f00e88e0ca7a4934276c9303aba85dc48f12b3363a97e5cfa994a9ab5a2c05684"}}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r6, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xd5d7a000) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) syz_open_procfs(0x0, 0x0) mount$binderfs(0x0, &(0x7f0000000700)='./binderfs\x00', 0x0, 0x20, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r7, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[], 0x58}}, 0x0) 1m7.056139067s ago: executing program 32 (id=1126): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000204000a28000000000a050000000000000000000300000308000240000000050900010073797a300000000028000000000a010400000000000000000300008a0900010073797a3000000000080002400000000614"], 0x78}, 0x1, 0x0, 0x0, 0x24040010}, 0x20004040) syz_open_dev$dvb_frontend(0x0, 0x0, 0x202) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$dvb_frontend(0x0, 0x6, 0x20282) syz_open_procfs(0x0, 0x0) pipe(&(0x7f00000001c0)) r2 = fsopen(&(0x7f0000000080)='qnx6\x00', 0x0) openat$cdrom(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x180000000, 0xd8, 0x2d02}) write$tun(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="fe805e616dd03cf2fe2093c0c0b0abd9ede2eb76b8efc7235e23064f9c683c42cda670d588619e32ee8ec1fcd9bea882fb2c0ce2b5ddcf339f52eb76345f520da24842a1d679eea27e0db04a3c3f0c205439", @ANYRESHEX=r1], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r2, 0x0, 0x2) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r5, r5) setpgid(0x0, r5) fchdir(r4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x1e, 0x2, @thr={&(0x7f0000000380)="a04f812fef47945bd931995e89ba2d06191e483fe03ef3bf5ef2906d5f30262279a9f5d7c29b26cf77c95de7a2192d095672267eb98e33ab351f4ba48e9d5b7363d27f1209959a13b14737988a42753783a4b778a91f7e10fd1b43b416a123d39b8d8f9f6ad1a6140e33bc924ffe334d00e37362f29a137255e46c933958863317496b11ccfec921c28f234736dae35beb37941303fe35730c592af8e22fea92b35f37fd2b6722d54ec8", &(0x7f0000000440)="5bd54e105cbcf076ec9639a38cd1e240fcbb6d400454aabecabbb79ea8466139e9ec40b789cf504276d59140c504ddcd556de26c616471527310dfe0d9d02a618fb011e0260dc2d8e9b8aa60b7bfce63312fbf7ba5fa74ed5360094da287f0d2f821cd1f6b604492c7639a41419b08a38e5f35281cf591ed282c9f8ba4ab3cea9494ea97eb325a76d10f7d6019f47a14be42bed7ed684d0f35eaa03ecfaf9c7031adce2b9fd2ad975aa40238389d9e667c10330ecaa62f00e88e0ca7a4934276c9303aba85dc48f12b3363a97e5cfa994a9ab5a2c05684"}}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r6, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xd5d7a000) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) syz_open_procfs(0x0, 0x0) mount$binderfs(0x0, &(0x7f0000000700)='./binderfs\x00', 0x0, 0x20, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r7, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[], 0x58}}, 0x0) 4.65705972s ago: executing program 0 (id=1507): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0x6, 0x4) (async) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0x6, 0x4) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) (async) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r3) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) (async) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) unshare(0x13060100) sendto$inet6(r1, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 4.457075031s ago: executing program 0 (id=1511): r0 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r0, 0x40109441, &(0x7f0000000000)={0x6, 0x1, 0x59708ed7}) r1 = syz_open_dev$dri(&(0x7f00000001c0), 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f0000000380)={0x0, 0x4, 0x0, 0x0, 0x10, 0x10}) ioctl$sock_ifreq(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'bond0\x00', @ifru_names='netdevsim0\x00'}) 4.274437702s ago: executing program 0 (id=1513): bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r0, 0x0, 0x1) fchdir(r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xd, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYBLOB="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", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x3100, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.087018077s ago: executing program 0 (id=1515): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) writev(r1, &(0x7f0000001c00)=[{&(0x7f0000000140)="ba", 0x1}], 0x1) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) sendmmsg(r1, 0x0, 0x0, 0x24008094) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa9525000) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) socket$unix(0x1, 0x2, 0x0) 3.389256177s ago: executing program 1 (id=1517): r0 = socket(0x26, 0x4, 0x3bcf8000) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x2}, 0xffffffffffffff9f) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x13, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x50}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa}, 0x94) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1002, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x8, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc044560f, &(0x7f00000001c0)=@mmap={0x0, 0x2, 0x0, 0x700, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2063569a"}, 0x700}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000340)={@mcast1}, &(0x7f0000000380)=0x14) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000000000085000000bc00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, r7, 0x25, 0x0, @val=@iter={0x0}}, 0x20) socket$kcm(0x11, 0x3, 0x0) r8 = socket(0x400000000010, 0x2, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0x1, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newtfilter={0x70, 0x2c, 0xf3f, 0x70bd2a, 0x25dddbbd, {0x0, 0x0, 0x0, 0x0, {0x2, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x2, 0x3, 0x5}, {0x9, 0xfffffff9, 0x0, 0x3}}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x1, 0x2, 0x1}, {0x7}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x200058c0}, 0x4880) openat$sndseq(0xffffff9c, &(0x7f0000000100), 0x80000) getpid() syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) 3.22672072s ago: executing program 1 (id=1519): socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe3a}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) socket$nl_rdma(0x10, 0x3, 0x14) (async) r2 = socket$nl_rdma(0x10, 0x3, 0x14) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x161d02) (async) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x161d02) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) (async) syz_usbip_server_init(0x6) setgroups(0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58) (async) r7 = syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58) ioctl$TIOCSERGETLSR(r6, 0x5459, &(0x7f00000001c0)) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000000280)=ANY=[@ANYRES16=r2, @ANYRESHEX=r2, @ANYRES64=r6, @ANYRESHEX=r1], 0x24}, 0x1, 0x0, 0x0, 0x24048454}, 0x0) ptrace$peekuser(0x3, r7, 0x7) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000000314230c2dbd7000ffdbdf250900020073797a32000f00000800410072786500140033007767320000000000000000000000000066129cbdaaf92ea305126427a766b1c085924cd6ad57b03cfe9655f622d77d2aeea86454e08d702ca2d6392ca31ef21b722d78da5d90886bb0db32b0e33c89a5e901bb4e0379f25665d395238e6730ad37288567b268fe7f1586d588e526e7d727ec73b81279a75e879dd960e5107507609756ec582a8032a0ae41beb16ed972c66cc59029b79ace6666660cde28316ee23ff7ea64e39ae6d39b5f45f5ccf2adaffee80cc44776710ba5c2a2e806dcb0a1fd133d11902dea4f"], 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x5514, 0x0) 2.315398008s ago: executing program 1 (id=1522): ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f0000000000)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000000e00)={0xfc, {"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", 0x1000}}, 0x1006) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x13) r2 = socket(0x10, 0x3, 0x0) r3 = mq_open(&(0x7f0000000040)='%\x00', 0xcd36fb5e059b934f, 0x100, 0x0) mq_timedreceive(r3, 0x0, 0x0, 0xffffffffffffff7f, 0x0) dup3(r1, r2, 0x0) r4 = epoll_create1(0x0) dup3(r2, r4, 0x0) read(r4, &(0x7f0000000340)=""/130, 0x82) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x683, 0x48) sendmsg$SMC_PNETID_DEL(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0x4) write$cgroup_devices(r6, &(0x7f0000000440)=ANY=[@ANYBLOB='b'], 0x9) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd2c, 0x25dedbff, {0x0, 0x0, 0x0, 0x0, 0x56d09, 0x41025}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e24}, @IFLA_GENEVE_UDP_CSUM={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x14000000}, 0x40040) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000240)=""/230) 2.315126465s ago: executing program 4 (id=1523): syz_open_dev$video4linux(&(0x7f0000001600), 0x5, 0xe0c61) r0 = io_uring_setup(0x1ddd, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0xe) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x28) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{0x5, 0x9, 0x7, 0x7}, {0x5, 0x2, 0x3}, {0x1400, 0x1, 0x7, 0x3}, {0x0, 0x9, 0x8, 0x58cb}, {0x4342, 0x7, 0xa, 0x5}, {0x8, 0x7, 0xfc, 0xb}]}) r4 = socket$inet6(0x10, 0x2, 0x0) write(r4, &(0x7f00000007c0)="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", 0xfc) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000100)={{0xdddd1000, 0x0, 0x0, 0x6, 0x7, 0x10, 0x3, 0x7, 0x0, 0x2, 0x9, 0x80}, {0x50000, 0x10000, 0xc, 0x1, 0x2, 0x0, 0xfd, 0x0, 0x7, 0xff, 0x2}, {0xb000, 0xf066ce738b004ad5, 0xc, 0x0, 0x27, 0xc5, 0x0, 0x0, 0x8, 0x3, 0x40, 0x3}, {0xeeef0000, 0x41000, 0x3, 0x9, 0x9, 0x9, 0x9, 0x7, 0x8, 0xf, 0x4}, {0x80a0000, 0x8080000, 0xe, 0x0, 0x0, 0x6, 0x0, 0x40, 0x8, 0x3f, 0x6}, {0xdddd1000, 0x0, 0x9, 0x1, 0x2, 0x1, 0x2, 0x80, 0x10, 0xff, 0x6}, {0x6e000, 0xeeee0000, 0x3, 0x4, 0x3, 0x0, 0xa1, 0x20, 0x0, 0x5, 0x4}, {0xffffffff, 0x50000, 0xc, 0x3, 0x0, 0x7, 0x9, 0x40, 0x26, 0x0, 0x1, 0x2}, {0x6000, 0x8cc}, {0xdddd1000}, 0xddf8ffd3, 0x0, 0x0, 0x6118, 0xe, 0xf801, 0x3000, [0x80000004, 0x0, 0x1, 0xfffffffffffdffff]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) madvise(&(0x7f000064b000/0x13000)=nil, 0x13000, 0x19) io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0x17, &(0x7f0000000300)={0x0}, 0x1) 1.988880881s ago: executing program 4 (id=1525): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0x20d, 0x0, 0x3ff}]}) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc2c45512, &(0x7f0000000640)={{0xd, 0x2, 0x81, 0x5, 'syz1\x00', 0x9}, 0x0, [0x380, 0xe8af, 0x1, 0xcc0, 0xe, 0x101, 0x80, 0xa6da, 0x2, 0x1, 0x9, 0x8, 0xb, 0xfffffff7, 0x8, 0x10, 0x5, 0x4, 0x40f, 0x80, 0x962, 0x2, 0x1, 0x400, 0x7fffffff, 0x9c, 0x80000001, 0x3, 0x60e3, 0xa12, 0x8, 0x10000, 0x7, 0x9, 0x7430, 0x2, 0x5, 0x609, 0x1, 0x3, 0x6, 0x5, 0x8001, 0x8, 0x9, 0x1, 0x1, 0x0, 0xffff1688, 0x2, 0x0, 0x4, 0x1000, 0xe93, 0x4, 0x7ff, 0x7, 0x6, 0x50a, 0x0, 0x6, 0x7ff, 0x1000, 0xffffffff, 0x4, 0x5, 0x7a, 0x2, 0xd, 0x2, 0x3, 0x7, 0xac, 0x7, 0x7, 0x4, 0x8000, 0x9, 0x4, 0x7, 0xd, 0x7, 0x7, 0x0, 0x0, 0x40, 0x2, 0x8000, 0xfff, 0x3, 0x3b9, 0x6, 0x4, 0x4660917f, 0x3, 0x8000, 0x1, 0x5, 0x3, 0x0, 0x5, 0x4, 0xe, 0x1, 0x7, 0x9, 0x10c, 0x4, 0x1, 0x1, 0x3ce, 0xa, 0x8, 0x9, 0x0, 0x6, 0xfffffff7, 0xffffbf90, 0x0, 0x7, 0x2, 0x0, 0x7, 0xa, 0x809, 0xc960, 0x73938332, 0x7763]}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x109181, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r7, 0x9000aea4, &(0x7f0000002300)) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4024587b, &(0x7f0000000940)={{r4, &(0x7f0000000080)='\x00', 0x210600, &(0x7f0000000100)={@_ha_fsid={[0x0, 0x9]}, {0x0, 0xc, 0x4, 0x2}}, 0x2, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000200)=0x2}, 0x4, &(0x7f00000005c0)=[{0x1, 0x4800000, &(0x7f0000000280)='\x00', &(0x7f00000002c0)="421a15079707a01f017e694e68bebe826f6490bc97a38402b7a6001def3bdc84e3d4562c9d7b82e86a19e9145c8924ae7457b7825119cabb0dab40a381ff585bae62e85e671fe52e8c05b2083c72aecb6a443caddfecd75ad6c9dd6300b8a9d54137e85d0c8654ff428bbb85fc0d426c950cf7690955eb57248157b79dc5acab9a97d82d4a55298d1074f30355620712a56010be00b4df27f22af40a8121d09ae9632dc0b3dc0dfc396b4aad90b874a21229efd4d54d9e704d19fb2b8c19d5344c077cb82ed6ef9aef89", 0xca, 0x2}, {0x2, 0x5, &(0x7f00000003c0)='/dev/kvm\x00', &(0x7f0000000400)="4fd089a5c3fde61af8905d8666a4c227031965554a047abd5174ce3223c6", 0x1e, 0x8}, {0x0, 0x401, &(0x7f0000000440)='/dev/snd/controlC#\x00', &(0x7f0000000480)="67f9b10124c570a27d3bded0d27ecda63d476c7ae4c424d3302448ebe3e06d7b5823dc6705e230054385e3e578d8dff181083880f2d901fb56259d35503a2713493a97f2f96181d2d200aae52383aeece5d72463e1bd131c58a01caa7422545a860f9c29697c7abac3f9c081a91cfd4a7b0cb4840c5f607dae81320716fb02e524f0ec6a20", 0x85, 0x5a}, {0x2, 0x1ff, &(0x7f0000000540)='\x00', &(0x7f0000000580)="8144fab9e0e45e5fab2874994838a89107980c1fbcb8296492f3e910215204e838fbd78f", 0x24, 0x11}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0xc}, 0x48) bpf$PROG_LOAD(0x4, &(0x7f0000000680)={0x3, 0x3, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ppoll(&(0x7f0000001200)=[{r8, 0x9}, {r0}, {r9, 0x4}, {r3, 0xe011}, {r5}, {r0, 0xc421}, {r1, 0xc220}, {r4, 0x8000}, {r10, 0x20}, {r5, 0xb0f4}], 0xa, &(0x7f0000001280)={0x77359400}, &(0x7f00000012c0)={[0xffff, 0x200]}, 0x8) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000050000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000002a97850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r12}, 0xc) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r9, 0x84, 0x19, &(0x7f0000000040)={r11}, 0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f0000000980)={r11, @in6={{0xa, 0x4e24, 0xc542, @loopback, 0x3}}, 0x1, 0x37e}, &(0x7f0000000a40)=0x88) 1.869634228s ago: executing program 1 (id=1526): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x24, &(0x7f0000000040)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x44005}, 0x0) r0 = epoll_create1(0x80000) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) write(r2, &(0x7f0000000100)="88a96c864653156bc81f0d51131cf90d056c26f9bc6dbea9cf3e8933cd9550e8fae9e4688070d97f50f7e1e959b6411e171bd9708386cb030000c17b510db0c6a3eba3786c75c953f5b5fbe4847f46eb3ef68724a912000000372a360060e3fd5bd34c18f74b2a3b19da94b50e639c957e1d45faeb182e192dfcf93a57cc1da493981dba1639551626185e1546e26a10157fdb825f5ff6ab936e560749b021b1d4e52345c9029b3016c78835f2f8d8249c1e0c2f22372836cb1d4cd2c602750616f99b31315d34", 0xc7) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0xc0000011}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4000) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000540)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) rmdir(&(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.usb0\x00') ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f00000000c0)={0x0, @aes256, 0x0, @desc2}) 1.676722979s ago: executing program 0 (id=1528): openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = msgget$private(0x0, 0x1c0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) keyctl$negate(0xd, r3, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x200, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0xe, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x8}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x4, 0x2}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x20000000) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc044565d, &(0x7f0000000100)=@mmap={0x2008, 0x1, 0x4, 0x1000, 0x8d44, {}, {0x4, 0x2, 0x5, 0x48, 0x0, 0xe, "f0ffffff"}, 0x5, 0x1, {}, 0x3}) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x1, 0x8000000, r2, 0x0) msgctl$IPC_SET(r1, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x5}}, 0x10) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f00000056c0)=[{&(0x7f0000001240)="80349c0d9e8fcc9f44658138dc4a3c4ad42f918348474a5bc38ff0e0571fc22c8eb5cb22fdf30ced1a4c1ccb5e5b35fed7db48c1a8a7132adc5623d146ddfe2254dd2579b4284b53d1cea6206864473d31bdb00c9d1462458b678827e80c94d88099e7471a58b1463086f9cdd1ccc19fa2fc4a9dd5a56fe782d15e66648c7630f1aaa7e9820460c46e292dbb8fa6f6701048ff17f46097b1ee0750ed038f18b81b2ba014bf866062c9a6f88b5d07e13b7eddd968ba9c7a53609c7b61471a51fd85bceebc0a92b2cd7c45a7f4571e693abebc3c5ff16c8128d92476", 0xdb}, {&(0x7f0000000280)="5b4ea50f20d7212327afde5e7a457cde2dff791c69fbc3", 0x17}, {&(0x7f00000002c0)="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", 0x1e0}, {0x0}, {&(0x7f0000002440)="253c10cd0a56ebbb9e8b465670109c340c95f1d27d36cbeb7fa948545e9b18da346b70b5dc6ea12ad1a30e4f7038336f1af1d61b04de988f1755e9b3ba9919b2a4952ceda920a7f0e22dd239d4a74f2d1c854bc64f09f979aa3e9f5c25ff8ec189e5d809483583f648cd8870291200e428", 0x71}, {&(0x7f00000024c0)="2ba671ae8107530b978dd82841597ed8f4275ed9e6b9f7b73ee6324ddf688ad9d88125b82afd2e28aef7183086ce0dd4ee880fc56a2ca8b52ef8f5b5f3e475f49b0bcd201fe612703d680fdd1151dd32535b04d4697d472c7750d6c4c197162e9f872253b611b1ca20e79dcf40d1faf58a453f8db9a03fdd351b54ad4e77fa0fda7990bb281079ae7ba3994aef7380e1d6342305e2d12c57379fd12e784f48e4e832171df4576c8724e3bfd70ebc92fc11914cd4", 0xb4}, {&(0x7f00000025c0)="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", 0xa9b}], 0x7}}], 0x1, 0x0) 1.602231529s ago: executing program 4 (id=1529): request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000080601080000000000000000010000010500010007000076"], 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x48040) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x972, 0x1f480, 0x2, 0x325}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracefs_dir/trace\x00', 0x0, 0x0) close(r2) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) syz_open_dev$radio(&(0x7f0000000040), 0x3, 0x2) 1.494929031s ago: executing program 4 (id=1531): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) rmdir(&(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.usb0\x00') (fail_nth: 4) 1.299486659s ago: executing program 4 (id=1534): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) writev(r1, &(0x7f0000001c00)=[{&(0x7f0000000140)="ba", 0x1}], 0x1) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) sendmmsg(r1, &(0x7f0000000100), 0x0, 0x24008094) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa9525000) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) socket$unix(0x1, 0x2, 0x0) 1.299019345s ago: executing program 3 (id=1535): socket$kcm(0x10, 0x2, 0x4) setns(0xc9, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00'}) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d001d"], 0x1c}], 0x1, 0x0, 0x0, 0x44800}, 0x4004810) recvmmsg(r0, 0x0, 0x0, 0x60, 0x0) 959.472876ms ago: executing program 3 (id=1536): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x5c, 0x0, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x40000000}]}]}, 0x5c}}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/mdstat\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100003000010003000000fbdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDSKBLED(r3, 0x4b65, 0x6) 959.044643ms ago: executing program 1 (id=1537): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0e00000004000000080000000c00000000000000d6e6db46a2c726f182830d", @ANYRES32, @ANYBLOB="ffffffff000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x19d740, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r4 = socket(0x2, 0x80805, 0x0) connect$l2tp6(r4, &(0x7f0000000100)={0xa, 0x0, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x3}, 0x20) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) modify_ldt$write2(0x11, &(0x7f0000000200)={0x15e1, 0xffffffffffffffff, 0x400, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1}, 0x10) syz_clone(0xc001200, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) r6 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r6, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0) sendfile(r5, r6, 0x0, 0x8000fb00) 958.656323ms ago: executing program 3 (id=1538): r0 = socket(0x26, 0x4, 0x3bcf8000) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x2}, 0xffffffffffffff9f) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x13, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x50}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa}, 0x94) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1002, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x8, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc044560f, &(0x7f00000001c0)=@mmap={0x0, 0x2, 0x0, 0x700, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2063569a"}, 0x700}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000340)={@mcast1}, &(0x7f0000000380)=0x14) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000000000085000000bc00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, r7, 0x25, 0x0, @val=@iter={0x0}}, 0x20) socket$kcm(0x11, 0x3, 0x0) r8 = socket(0x400000000010, 0x2, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0x1, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newtfilter={0x70, 0x2c, 0xf3f, 0x70bd2a, 0x25dddbbd, {0x0, 0x0, 0x0, 0x0, {0x2, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x2, 0x3, 0x5}, {0x9, 0xfffffff9, 0x0, 0x3}}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x1, 0x2, 0x1}, {0x7}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x200058c0}, 0x4880) openat$sndseq(0xffffff9c, &(0x7f0000000100), 0x80000) getpid() syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) 887.870367ms ago: executing program 3 (id=1539): request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000080601080000000000000000010000010500010007000076"], 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x48040) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x972, 0x1f480, 0x2, 0x325}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracefs_dir/trace\x00', 0x0, 0x0) close(r2) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) syz_open_dev$radio(&(0x7f0000000040), 0x3, 0x2) 815.590285ms ago: executing program 3 (id=1540): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000000) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={r2, 0xd7}, &(0x7f00000000c0)=0x8) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x132) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0xc0041}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) r7 = syz_init_net_socket$llc(0x1a, 0x803, 0x0) bind$llc(r7, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) getsockname$llc(r7, 0x0, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$sock(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@mark={{0x10, 0x1, 0x4f, 0x3}}], 0x10}, 0x8040) openat(0xffffffffffffff9c, 0x0, 0x40, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r7, {0x2, 0x4e22, @empty}, 0x4, 0x3, 0x1}}, 0x8c) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e) 498.022883ms ago: executing program 3 (id=1541): socket$netlink(0x10, 0x3, 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x3200006, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) getpid() syz_open_procfs(0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000000), 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') lseek(r2, 0x2000, 0x0) r3 = syz_usbip_server_init(0x5) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x80, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x40}}, 0x0) writev(r3, &(0x7f0000000000), 0x0) r5 = socket(0x8000000010, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001300050027bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000001060400140003007665746830000000000000000089f6001400168053"], 0x48}}, 0x48000) write(r5, &(0x7f00000002c0)="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", 0xfc) r7 = socket(0x840000000002, 0x3, 0x100) connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r7, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r8, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty=0x7000000}, {0x20000010304, @local}, 0x6, {0x2, 0x4e20, @rand_addr=0x64010101}}) 497.791816ms ago: executing program 0 (id=1542): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000500), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000240)=0x3) r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYRES32=r2], 0x0) syz_usb_connect$uac3(0x0, 0xb5, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x582, 0x75, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa3, 0x3, 0x1, 0x2, 0x80, 0x9, {0x8, 0xb, 0xff, 0xfd, 0x1, 0x24, 0x30, 0x4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xd, 0x3f, 0x10}, [@output_terminal={0x13, 0x24, 0x3, 0x2, 0x100, 0x6, 0x6, 0x4, 0x7, 0x2378, 0xfffb, 0x8}, @extension_unit={0x9, 0x24, 0xa, 0x1, 0x3, [0x3]}, @mixer_unit={0x5, 0x24, 0x5, 0x6, 0x2}, @input_terminal={0x14, 0x24, 0x2, 0x4, 0x200, 0x3, 0x5, 0xe, 0xf04, 0xd, 0xff, 0x4d7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x6, 0x10, 0x4e, {0xa, 0x25, 0x25, 0x3, 0x7, 0x9f59}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x8, 0x5, 0x1, {0xa, 0x25, 0x25, 0x1e00, 0xac, 0x2}}}}}}}}]}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001"], 0x50}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080001006400000008000300c8"], 0x2c}}, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x4}, 0x64) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000340)=0x8) read$dsp(r1, 0x0, 0x0) read$dsp(r1, &(0x7f00000001c0)=""/62, 0x3e) 497.493583ms ago: executing program 4 (id=1543): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000500), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000240)=0x3) r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYRES32=r2], 0x0) syz_usb_connect$uac3(0x0, 0xb5, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x582, 0x75, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa3, 0x3, 0x1, 0x2, 0x80, 0x9, {0x8, 0xb, 0xff, 0xfd, 0x1, 0x24, 0x30, 0x4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xd, 0x3f, 0x10}, [@output_terminal={0x13, 0x24, 0x3, 0x2, 0x100, 0x6, 0x6, 0x4, 0x7, 0x2378, 0xfffb, 0x8}, @extension_unit={0x9, 0x24, 0xa, 0x1, 0x3, [0x3]}, @mixer_unit={0x5, 0x24, 0x5, 0x6, 0x2}, @input_terminal={0x14, 0x24, 0x2, 0x4, 0x200, 0x3, 0x5, 0xe, 0xf04, 0xd, 0xff, 0x4d7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x6, 0x10, 0x4e, {0xa, 0x25, 0x25, 0x3, 0x7, 0x9f59}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x8, 0x5, 0x1, {0xa, 0x25, 0x25, 0x1e00, 0xac, 0x2}}}}}}}}]}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001"], 0x50}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080001006400000008000300c8"], 0x2c}}, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x4}, 0x64) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000340)=0x8) read$dsp(r1, 0x0, 0x0) read$dsp(r1, &(0x7f00000001c0)=""/62, 0x3e) 0s ago: executing program 1 (id=1544): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x45) write(r0, &(0x7f00000000c0)='on', 0x2) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/pid\x00') ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r3, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r3, 0xc008551c, &(0x7f00000000c0)={0x1, 0x24, [0x8000, 0x5, 0x1, 0x3ff, 0x7, 0x9, 0xd, 0x4, 0x9]}) ioctl$USBDEVFS_IOCTL(r1, 0x80045505, &(0x7f0000000140)=@usbdevfs_driver={0x400, 0x8, 0x0}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) socket$nl_route(0x10, 0x3, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d4e, 0x103) r5 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) symlink(&(0x7f00000001c0)='.\x00', &(0x7f00000059c0)='./file0\x00') name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000180), 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1000000, 0x0) syz_fuse_handle_req(r5, &(0x7f0000009b40)="de98ee653502c564abeb97fc678bde22efebcf99c2d89952950acc703a3c6268a54c8b1bd1ee165c82980cd315b55a070dc41deeb2d4c1842d936a0bcde5fd7ed6031fdd9cb58ebfe8261528f097f309813b5722c24a1af8e6bc6ddaef7e85d2659690154bc5e6ee73c3fe7176509ad7b30e1098fc9873db91d3c1816825e710374de8d40693578b598922d9c523cfff93a630f121251d17ad40bce021d7fd57945fe2a186618a40b5f3995a9f0ceaa3e22b57e4f68e53fffeb5474fb83afaf5cde6b0aaf5cf0313ede442ddf1df6c280921e43d80dddfd005969272e1719b37fd8f749fcde83f8201826b4cf5b1c1da394568aa7d8833dd11309f46422b0152ede5ab29b17bc1ae80147346155b20a98d6fc2650bec3fe73327c45cad1b38f7c983cd070556a8f8ed5d58e1052f6436fad905099d18fb3e62c2c36a1c2209a94c820e30e5234e77be3beb4cd183015d281e7bf39cdcf0f1e541211c75d64a49b55ba4c2c444bef36d98df66bea814bab91ed65386d6a491a6295c24dbaf752a5e7a856e0dfe46a6f9e718ca3919c6f8978b0fd65c9e389114e5afd8e9e2a575b854463b63f46d08795f0f1d0d48d6d610fd74e9238de32ee3fa2ffef550336341803c083ac1d749be6c5440bbe4bd3bc3015bcde2b4e2160ba266d281a9641f74d9348fb6fa8550d1e8a8362999452e40b75c412cfa77ab8e1aaf1a9e83c855ec9b7ada38690f0d2e59f67a1f3babbcda8011595ea720816c24726b833beaca0a9d11e7b99373601d27d18c9e29940503d3a12149fdc4fe0065c3d023d6e7712eb853df19f2b4b886e08d61629288ff16c2597d7fae5bfc8b41f92fc325ffe0f61683b1f661409bdd7c3d88a854f8393484f4669b5d9654fd3a0819a32110b9064539a7419c332629b3fc71da35b783ef7c693842ce83733a63f2e6af37989cfcb768ab8cea5d21b82a0e9f6fdcec26b0107708867dec54c4e739fe9b931b3c6da013bfae097c57f1e16ba54f9028e672511938a0ad9d681d7feebc65a2f5f588abd66261393f3ba02d7b2cf650a9f7c6a4ca55b4d41132908dc9c90e26f0da8e2259e3a2b63b2d9e27754e278827ab80438070698c690ec375a9aeb4193079a28a2a062961ba0e65af01644af063f3ebefda92c4986379f7b099b2fd3960929578736f09887fc5816cb1b982e5b121b79662d1674dd0c6e82627cf8c63e576e5c1eb0af9415ddc10ff880e8ae3ce8c4fb87b8f9d364974c2a1d8eba4e04bc2bc018bfabc435683b2551c0e4908570b930c4fd7c03ddb95e9ec1d1994e3df0305fdac4e5b914641ae25b0c469b194c0bb78ab04887cdc4262da468475b926a18254d23b4c44705aeca34ef8a7b04dd55a43f39996529a23804e054655c5ba8661f7c02737e7539650364928d62b9b8d80988232009acb54214f06640e9bc6614c0ce02e4a22dc8b91a0aad711e4fd01d7020b7c7185e41e27ce266b9f5aec682cbd4bba3240d6277b17b564937254f37afe580cba0b78c6b0cc81830eaf10d7cc1f7e918d49e935629fe6c24b4368a04af1b99f6981340ee031874f3d4b3a9ebc31719b3b775bfe1fdfa0460a3820bff6f61b49b11ac2ca00836a0c4a74aed92a619f34231196669b942e761538e64f965d23d4f7814256e876263fe5307985c4e6eb69c974f66276764e80ab1de3f5c55e7b2cfdb78dd183a85473e968918ad73f29a266c818b9bf9f62eed86df25b2577bb6d98e3996e94f5bdf119b869541a94eb3536c979c3d77cc0df7c0c48a902ca2f03f5ba5a8ef9431cf95f6fc89744e8440e1d5ebb837e30ef7541fbc27672c31566ac3676a173cb9e466a2d206ba1ebc2b985eddcd6ff937375fbc8415eba46f5ec68cfa9f3a669d41b078867dd9f5160ba45fa4719f32cf877d4b7a6d77c977533659f7c7ac22c68f5e93c1df6c2a3d45b55a4afd3355680aed864f6bbe13da2da28a4851f73c88e555f3bb1c34a21fc45ab6c28287902e8b5fcae6899c804f364cd878a8d1734462bb075cb7bc709cc2c5d7747c4c29a2fa9259752301c26b852b7993adf889d45dbe39094c9b7b168756e5b939ed10bb6df57b8f5e14352cfc7d8b03cda5b978b06cf2430af5db17177b1ef664bc4b00307f970c4fc606a6bab72125f62b0f59655c35b104da7af188a953cfc09b3aa0785abf330830fefedcc8bf9a11d5dc4b5642f679d45cb44fe61ab1d906345c1c345f6b8027bae9585580c20115d2504d9c83ab54ea2557b6d2dd3bc65fa29f091aa46a215e77621836154104e6969fa9107139a19f2e45cc6bf55422a0e1a6d037ad9e63df5f9cd2045e13ac2d6a15bc12008c4cd23782df7d41bfecc0037292d22c7b42f2cc1a22db7502332d9f4fa85f7640c8635b9469681adb6bcec2dfdf6926f1815156d80a835ae918527f549ea6df45f350f618dc1f3ca139759be28e35013034f8bbfd3fa1a8f302594213c18015305911f42e287f2d86f17d76f8a0ea03fb574c60c808669f9f4454fc2eaf0e93873f688e34bd3341f6874d5d8fe754172a751d6ab23dc1642220e7fb1071df0ee3c7e07c338915494a3b360bdc0b38ed221c2c2bc86b29744448b255802b3ddfe600c1d0f9acabb2185e4e9dae5e456d5825f516c857f63e72e4a5f3d45eaf11a0e3a5ad0ba30a0bf0f94cc99586fd202d6118bb6f9c272f6cbe39dd9b8b36ea7fa51dfe0bb87a633be11c16a14d1bce8492387696e195fa3c5f172690b4434aa2e91ce7d225d73b1983d2605ec725aae0ae402cd2f79fc202a307f1896f3dfcf8c0fd8b841dcfeda5d65bb7d76f7c2d2eb1b164c0368e9984f320a224d7d438bc5c699acbc18a587b7589e960af114afbc9f59243646557962fc2e0cb5b5bf160a313bcfd9ade3e140b808e9f19415808aa312ae9c9e8bcd5a47fc721eda59d10670088714984a71d5c0df8b68e675a8e31ec15a92ff6a04d17e0ef849c782b302d11f742efe6486ab904fd65c0aac4ec25c6d877b453dce80e894de703aa8b1e5d00701850f149fe437fd0944cb95e54a924a49bd86bb9a602cf2904fbd9e399f1cdcd0b45b6d8f872e285f9dfeaa26aa760074651393c6451b36c643dd0b7236ec7803d69cec1b09bf1b63fbb68ad7c01507f00083b184ff01a62096f386f4c8fdc85e93eecf3f4b384aec1c10ccc60d8109a6d887bd389c3406163f9600879f0e944443d783e8644f69344f6f44f7bbf1883cda7369c9b9904d991c01552135f158a0bbb7f40c354f292c034824d82c209ebc770f5b756768ae51d45f8875b59904a07090689e65b40625566eed5d209130db812f287b966ae21ba46a3a7a3a0360a4e284d8d91ba9ed9806ea063827c8dda0fa98f758cbfa523ac645421f444a40b95bb065a64256c19354b1ad5002bb7b2add9b5236ad64e9052734b9d263515683db121b5e4dc1eab244dd8fc0fc62d962834ba0b21aad872b127afc0a33c7869a3f213519aa2ef51bab9ab28ed18859fd8239841a6668fc614dedd099121ae6c220a143c119cb9bff9068f65d0554b4c12105e59a22e91203a08ab8c718ec62c42d7ebb7b495e9e1be8fb7e4aab2777025da37b48d9d7b97578841a73898a6eab994e250106e096390c77b0600537be881ab7d81e3cb468bf1fe318b1e804d8df9875e9b8da22e6244997317391cce608085a28b8d070d654a29afab324ba3eecf427b6dfd43501ec0db919f71a932897eb37fe3bd64ab5a34ec60011696298b74ddd7a3710d3e444cedcc5cdc357f9dd58e67dc0ed3fc8df6dad82b3c00b4290c3280c28f78df052ec9cdd9df025abe8834616eddd5bb93379c69092911cd60761e7d14b426a83e335bfc8bf67a14e01df7cefb6023f0c6556534b975ed889de0d96d968526372402ce3d21a2c5c64a449dc3ba4ee0b5ceabc2fa29679e225681c8e946dc94b48af024bb1633e1860c7d8c14500967f24e2f8f46db537232a4e9f4abf8408f53bb52b035bdb89917a6f2f4bd22403ad002c2d936b785ecd965177e9f6235787a185d0eca92532f1aab16756ae86ece13925ba4a1fd08125102ae08c428d073aa426c4e792b5a4acf618605df1707021ce1eed62da4ee87334e34edf43338a0076b8ec739e2c31071e10c6a853e19fbf25b8a356527a67c8f7696dc184e374f4641f4e5b0aa345f1e6c4bfeba3a392d9a994bc271717a051c98d6c5b1f3296caf4c01d80ffb75b6fbdd0a0583f9d4695a44a2878df0c09a85aaab14522320cc3d2611603a34e52da03677a60cc87cc3c689975e5b5366c82e040b6643b8865d8bea0c84cef9ff85245a8b4bc41af1a50775b29fe55e42ac4b29fe80ddaf02e8c9bd07cab823f3d9021ac88236525ec045688a2fc9c6df66f549b10720cebf09ead919524f071cd128fb7575c84190c698b420f89b3c11195b5d83022d1f7e48afc21203995caf8f9286dcd5bd51b65c1af1caadf5a1b3f12579066855ff851075adb959dc3e086a7fb4e9a27fe80e8f3c0959b042486310ae7b785b0612e0385e36f50d4cae3474dd000c3957955534b4907b9480e2e5d83dedbeb76cb78d893c5b64dd51e31abc8e8b4c56b96f67c4b6e43861d91681af3270aae1a8f50712bd97326ee46a2640285b2902f051071d5a3400e99b76459956ac6908688c314bd8e54365383a65b186a6386cc5218e41e0b386759de81bccf5aa68f8608831a9d33ad1af2bdbd8579c5921cd8c3dd2f3bf1f123c742e118c76e2f43618bb7885e44826b7417c9ca5a139d774c16fbf74c8969c038ba6a54f27bab46ecc94d6455188d8dc1edf1da715c8d9976226877096df4158eeecced2248c7b88de0dd11a076db1f06bae4adba8286dc39aa62a55233886e011622ae1cf97238914a55078a78908145295777dbbc4e0d34364e0f3daa9eba6fa54c085777b18c0523818ff8710dee4bfeb3db549c3f38dde73b99a7b1b219282407a4e0ab3794089e21f6f2045ab6254ac3703903edb302fb2f0f97e47cca7969ad6b5b6cf27314137a04d5f4f29c193cfc5540592ab1342a1a9cbd514a7b4d6b23f724a5d7bfa6ffe8e3d9de29b8661139f179a0fafecf234f19bee75c25faffc765e02377d83e0ad0a0029c08f5c71595bc1b2fe88f0fe958f3f1f8ba6821ab834cab9bc902b2d47bd4b5ed52b5b0d7b3bc999b2f68879be39ddcb0428ce3a617b68c11459b746651f413d9e9a098cd2b5c0fcfd0ea1db2cde1672818d7bc73b053015692f9e9259a0153e3c9ac5e73e3343dd350cfbcaa57be93cc881a35063aec2db4ed71df2b1bd90b5ecbd84f399d4530c5450d622188423e151cec49673dc633e503c497d53843f4824750dc09abae9f2f465e92888715b6879f5edbab7bcd58f0899e1430ffb5f3063450945cb0fb3b5c3088ed6966c54dddae3aab489a80341b45a17cac02ae62749f209a7e16ecdfd86b43569c7b34511c65474acf2b2c18834e158e20957bf2320e4a6b9d63caea93b3a7dd4f7ba54443aba1ac2b6f2b27e1bf6f17d3fd1582462e0debc7069bb70e219654cbb99adfed54ab94329382163f2ab6710bb581d189cb3449a02c917c1f2d1d5f51958ce605fdb0e37ae5f3cb3f123276d43b2c26ea948dee863e0b679ecddf0fe41ce78bbca30167c9c7d6b0e9193c98090facd7205a490727e1ac49bb4d639348a32546007459c61c27bf8df87dd2ed3f3228b8193422a72d15f848bac13c6ffa7b8a767cf04866feb7c7a81267d7a8e890128d4709e4873223578aa7febdd562403c6092c0a3f6e0650772ede935ab6ef95e375bcbfa395e23ef1d73532388b845a95f158dc845a123f798176c73e177926d39abd38a910d40653006375110be2f2c5f6efc87b31908be36dd07c8ba5853519a37dfc4dea981af855293f49a3270bb67cdc17b780fbf2a418fcec8953dae927909a6bbbdce230d23113efad9c02474682dafc63311050cb4f3f86c282ff29728eefac5c678360122b4ce221bcec82d24e053b63972d2e9a631a180b48bb8d2d4de7254d91a856071df51a1d87ca7eb5d19ac3def1fdd6ebd8f57c2c9e43cb6ff2fa00d27f279368f5ee29a84ba219a51d1f0f1965781164edbb3aa6209fbce6d40284fbb4a33f59bf9e1248100a623de16613eebc11f510b7718dde9f13b4c9b2b6a10dd932696cdb7fa4b5733b0377453471462762457d42038ebf8c0fb392ca7656ad1f050c326de75fffc698c48f5d809ae360ddb9856b9a54b811073233294bf91e46414441b6665f432201da12e49718b0d7929b6cbcbf310a09ce0d22f07ee5cfa8ffb9f03acd224641171ffafdf50f18be8fa3c907226cc1a6f3b16a776781a6396dbf09f689ad6bba4d537dad490a6f036a45ee3e224e6f519e44b7352ee3e7d3f0d89f8c7c8f54b6d2698c0298a07866c9d9ca09c96c2ac8efd7974294df6dd1bb0598debadb6135e7123bbfddf84870de54476a291586fc0e64784e65fdf78d462e8b51cbac38e7ff1878b11418f188220e3deb5367a2d90ad7d44395f6965cc6d680c59daac268c16814d1085302d0453b48e4a8ae78b8a5b6951a875ef42776f6d11955da7e5734a72b61cefcc6889b8f8d58db51ee78d7b1a8ffebd90e15a64654054767aaec24dd3b5f338b572496c8731049c10622b7f54fdfa43aaea316946291fee7bc9e64640e8bccf33fd1e8693b67020b49cf77faaaa8269e2fecc4e2b43c8c3378a4a9b9b85a4fe2c346c5512cda631542e0ff5706eba996f4f72e629b076d6be1966d44b1835ce664e3c6a4f18c68f5e32f900a0a167e547d5aa79c0aede966f83d00366a623ef8107e328654c8558d5e606f69a12b6c2a6fcbe0e08f945c4ad2738ed0b28d79c98514abe0819569c6e4f4751c665fd651aaa9ee392c330560ef6d57c0a97f0764f88433b2bf7641ba391634316b0ee1dac23a63be21270e50ea1ac24ac3b429a0b46c38dbd48c540bfb1e141b8b3df6caa179c7e54f2b7b1371e8eb05a30f13da95200ab70dc58325f6bea0ee9fe1f04154998df393f2b4ff4431363f3a7450fa5210e883d67620ae63cc41f72e74e26a0244de1ac722b6f1c1d293f7483b331a0efda65a4e4e9144547fe6dce2f4535e29048b07079329b63754bb124b9e046a6e97929b1f4a387765bf93804530791c9f649db6efbebebf46fa4f9af7ff2587130d0e70a32d4aab1dfbee6aadd1f3e5317e3d4c8cde75b1479bc3dd16ea35db3dca11cf1eb1d2bbac60b83605e171619d85fd4b6d0e24be8db76df12efef05eb87473b832e59f3039df44ef034e5e7546b399cc817a41b2f020286ff139072a5b909ebb185a3c955cf88f4a9929b2112e0a9ab43da0288ce3ea268ccc9f46f852d387f5d0a2831dfc8cb0bf593905ba376c069b8c9b70558ec826c5bf9835031199c4c6d84c913da7e9e7db49c1d34511d917b9ad3c40af0598737d58fd61b8f2adc46b73a284957a99943cf73414412fa5440a5f85b63c20794d122c267fba72bfcd0e2741642fd8ff5a0ae1ffd8b30d852c053d0e31f505ca13a21c0223a8ee77cdd92de1b9f87ebee4ea332e9d4573d7efb2ad3f50c35fb7a596c4edb4b72bf6df5a16ffe3c8a236f2cab8c0712ac26c2cbcc68c1dc45209b579c952c7d645642aeed7d60407ee2dc168179d536da950108e962c5c976d3a05bf5142466ee38939ee94e707a0135f99c99b5d6376f63c711e4f64950f08dbc931c812f34735d9eb1c5997770d8159068cdca2e0f192311ca438d613728b544d6a3e50ae0e4e6b1eb611ce55a96bb2f991d49173073d8547f5ede69d8b587a34bb8f637297a15ab4fc45f1384bbd19b3feab5fb81322ba831386eeb6067e55af374c1b1eb9613a6c41dfe2bbbcfad157dd042c67c44400b350f0dc40a8611f2e947f32ea3ac3f609027b5dbc95b157c13216fe7c35edcc82950bd4e38bcb02b63d2576489c331a222e013e73b5333694889b184bedbbb6fdd6fd40a62b1d5d494e68cd2aefc264f74bf70ef38373e599faaa326f574ae32b1aad86854af22db8c9673d14666aa7c0c3bbe0d76a835ba4b391552777ed20c5c6cd0aa84f3be73ca0a3c128914107fb8fc02220317fb111cf13398480cd3325582a7e55f4c4ef5a258bcd01a97615e95f89c8064d41d04340b88cd5f4b1d827a030637145d98422facadbbbce97dc3060402a7bfa73d7b4dde53184a0923c0ee29c6e8e2c35e396808df2481af6aab053b619fcb2833f14f87051c5461567c5f8dd40383a7521971775493f896e18c78bad8219f88258ea686652780c03ebafb63ecbfcb23e24d52a2f88a77ed3b2280637807a5e155f4fad7149b76841772471a3b77aa42e8058c0af1ac2be9d88b5152851708f1a77582b3e31702864ee6a244a38f3f95d9797a60cddeb5ddf08cc48fc677f03f9e717ebe7f472883e5a6a7df31ca4272228f26991460c537ebc8aecb6a0c34a763eb1f57124fbfafd6db4c21bedf6723b252aeb21eb1fd9f4f811fd3e2e764422964761b2ef3aaaf986a48f7be66f6387578f9492feebc97dfbc6bc97380394a5635dbe582e52a1fb18ea8fc4e53974c63d198cf0d878ba8a8d58688a037c0f753c7073337ef3da4c134ef939c98c8806d09943591e6013a1342de7c722f993fd7eb36ba8e8407d1ea60eb5724b0d6262c70469dbd8ea1956b8d7f5a77707a9cbe2137079e7abda3966c5bee4fd86e8a3c4969bc88ff328a2adc8f4546f647575866d5ced16df06bf40d9a5f178f9d19e490bd76e187c441e7de0e571f6cea5512ec9bea48903d91a519dc82defe34a06b0244d623090b5a250786bbc66c1e76db6b18d81ed33c81a7c93782d5cdbe0a7cf7d1ab29c04be6ff4a9bbc10f716a67d52fd52d91425abd2002cf83c3797861db5fbeaec745a552ca4a50604340f2cf2c1b10e9ba76c8ea43b283c73f774f8be213f17f70cf93b9f6a8bab1f516a935e80c3cc6756945edafd572e6e00840eedf61fc40351869f03562d8c13006de585a1141c02f1311fbc8e45e4b3878c32810698e4764a6e8495f165eefee35714a1794f9ab50897c5565ab745425933d9d6272a172c1f2a274f9ca7bc8e1b01a27b8bd06fd9dc61880789696348c99e9a70c9dd2a62ca04d1f86dc87380b618c2a78b16229d614702fce242fa17ea90cda2648f9375bf7e78b4267d558983e08a9566d95871998d23cc6d22c23370ae067b677609844abc140df81cbd9addbf657fffaab5c22c479acca18f3e4b508cf01ff7b2ca308ff116389790f26f2c7635f89c747a5bc66f61de575653069349a89fd7e3dd785266b7bccf16eb8b4a8a86751de60d33e17d64f6e4e0f9d13a16d243ad7364114db7ad011f094c4debf20a39e35e7eeb440bbe8811db2857b965edd1e2675ceb1bc9a1691f123dedb341962fbbe539485d2241b0409adce2587d035187a0dd5a62076ac4eb5c3e2f4455569b6eac0fc16155da1774cbe505dc92e2087585a7846bae699bef32e3c5ec2356dd4433ed29d4b03ff7b38f7b3cb96b92874eefda6c2e0e326214e40f14cc2ef80e1cd3fe226257a423b8ff5bb368b87ac7066c5136487775b5b122a858334c37f6a3f53d758c3c866e2e79daf9aeab36a59eddbae2fa5b6d20973014196ef0a4cde1373c7297833e6f1e46828f4a42eebd829dd4f17999abe285218ed5dc6007b21bceb588a213b29dbb1ab1a79b41a12df26fe35f0cf6a310c9e50cf10d71ad5960626e4efec211032ec4ae52512001362ba4108d86eb774d2d4d0364cbb1dae68f03a774e328c2dc09899ee80c05ac2a8e3ba905b0b3b7a08a3df20b505901123e7dc0a15db48d09c84189ca4345c23c2010c12cc35287fad30211cab9631e148a7c1e8bfab61ced30e098d1c3cf7b6a7fbd8288dfdc48044d0d47c17f129f6b5d751af1984d395ab1b08ccca3e7309a89a8a36dfc3fb82d2a4269bffc32571438d04a7b98137b46ae1fea1bd9ea64f99e2f0c5f12ed84886b10bbd511993b0447036c4e57b9dae6d5bdad6aa3f2d12e62471194e43111613b8b6944c2baf1f539ea14dd76c356bfef7e3d4b6fb91f6d321a796a4bce5a4c6a5caaf0f3eccd914dea21ae909be7ba486075ff6139e7e351fdd7e98013ba51ff0248852398c734f245ffd7fde8cacfa4805496ad7350b1c96d7bf9da9be492f2f414e973937ac9109b6e8b8315aa9b81840f2c21239caf85a28f0e590bb6ad12148e75bd4d7ea69a9ffb053781db98d5fb5aca30a734017be7683a559c203c006ecd4b135afe3650b906e0aa208c889f2af09f3f8263260c3bd07cf8021124b6f0e0d021f9839e47996905c3d7562df810484552de3bcc9ae054b62a01af6a7991e4d63f30c7a92d8b58e01052e53818e64d7540a3208af321709a5d891ceecae5d27a999b00ed01616a73ec8854ca61973ed1fd3d82f8628b215c55eb7908e297d77098a7b0c362709005a7d13c89c54556589b2a926c6e08cc1c0afebc7eeb5d7ae4ef0507c91b8e706e6dbf83d898819192c812554ad1c6377871a8ca50f1325630f7b5266b807ef61d0c8d399fada49cb02a14c16d39f4fa7b81272573808e761c9dce7cfd12f4f18dd06b0ee471c166e095bf84aa4aaa2d82f1afcf09e5d960257c0a8dc404225b4b62187829c59e57da50bf848d72fabfb69362c117c6913541f84095a2a4ccdd2d30860cd96640bb2315e435a4af08c62c584ad129300adb02a871f3c548b96c4f6c47efdf4a1163a8a5ba9b4766b01437bc5957324660a8cd87df0f7e000d1309e896e3ce9f57b17562c9368a95a4cf66b3a5b57f0cca563b045452bbc8ad07b96fd0322728ccb3b05bfda14ef36ecfa2f32c5aa899811a67f2d62ed970db5723d6e4e4913c98c81ed6c03469112c23549f7e20be6401c6544db9078f34e6a4ad3cc868bace2e7ec6ea17225986f9e941ec67d9a3fc57958f9df8a60f585aa38b1769e26ed3f68dd85685b2cefae9dd72a18abc0de6b94689785df377ef4a812a6abc7f738a396f0e99ccbc5731801c36e746ab6b1dda88ca6ecb899528e18543cb3dfd439cd5be566594f01a4533da3638e6331fedf5b67870938ad044aa0dfdae33e3a6258ad40baadd726eacb1f3c1eb8d83ef4e185d7603a4f1eb006d90bf5849e2f65d37ffe750eb061bbad08a0c0cfabb9abf7f27d36ee5687d23feaa923e09d2ae905410a9193f21ed9b1d6331bb1f3babb90da2f2e023a6ceda4b4fe0f5d864738ee7f65a0b136021fbe076b4adf2d3af760e1361bad7ae35cb7ca010ddf4488255a2d3c492d0b26a1a5643f998b5d04a52a59f176d9bda85c916ff901329f09fe953b030b92f6415172476ad89d3e8cdcb4eda7dde5d4fcd5d6a584a312563558e784b0f9bcea7c53d26c3f2d3350c70a5e06a67c4c0373dd6279e29c320e6580fba8ab2df3039c289235c066af1b07dd112f25b25e292020f36c1aba246cba4e054d64b38f53ed57a712dffad7d3dc97f86af511638a2779107fc55da63b6498ea5f3ae36883163e5bf2324211a61a9889278f828e58daae797fdba9218d322da7aa23db7a48a00", 0x1412, &(0x7f0000007a80)={&(0x7f0000000300)={0x50, 0x0, 0x1ff, {0x7, 0x29, 0x1, 0x24ff871999e0dde7, 0xdcf, 0x4005, 0x2000000b, 0x800, 0x0, 0x0, 0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0xfffffffffffffffe, 0x1, {0x0, 0x54, 0x0, {0x5, 0xfffffffffffffffc, 0x200003, 0x9, 0x0, 0xfffffffffffffffb, 0x9e9, 0x2, 0x3f, 0x6000, 0x5, 0xffffffffffffffff, 0xee01, 0x3c, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) kernel console output (not intermixed with test programs): to 1024 [ 227.393586][ T9] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 227.396874][ T9] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 227.399761][ T9] usb 6-1: Product: syz [ 227.401637][ T9] usb 6-1: Manufacturer: syz [ 227.425257][ T9] cdc_wdm 6-1:1.0: skipping garbage [ 227.435676][ T9] cdc_wdm 6-1:1.0: skipping garbage [ 227.455579][ T9] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 227.458798][ T9] cdc_wdm 6-1:1.0: Unknown control protocol [ 227.462226][ T9101] block device autoloading is deprecated and will be removed. [ 227.477214][ T9100] fuse: Unknown parameter '0x0000000000000006' [ 227.690259][ T5835] usb 6-1: USB disconnect, device number 13 [ 228.093187][ T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 228.243257][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 228.261716][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0075, bcdDevice= 0.40 [ 228.268962][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.275184][ T9] usb 5-1: Product: syz [ 228.279335][ T9] usb 5-1: Manufacturer: syz [ 228.283420][ T9] usb 5-1: SerialNumber: syz [ 228.499111][ T9117] FAULT_INJECTION: forcing a failure. [ 228.499111][ T9117] name failslab, interval 1, probability 0, space 0, times 0 [ 228.503507][ T9117] CPU: 3 UID: 0 PID: 9117 Comm: syz.3.885 Tainted: G L syzkaller #0 PREEMPT(full) [ 228.503525][ T9117] Tainted: [L]=SOFTLOCKUP [ 228.503529][ T9117] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 228.503536][ T9117] Call Trace: [ 228.503540][ T9117] [ 228.503544][ T9117] dump_stack_lvl+0x100/0x190 [ 228.503563][ T9117] should_fail_ex.cold+0x5/0xa [ 228.503576][ T9117] should_failslab+0xc2/0x120 [ 228.503593][ T9117] __kmalloc_noprof+0xfc/0x820 [ 228.503607][ T9117] ? blk_rq_map_user_iov+0x2a5/0x1440 [ 228.503641][ T9117] blk_rq_map_user_iov+0x2a5/0x1440 [ 228.503663][ T9117] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 228.503683][ T9117] ? __lock_acquire+0x49f/0x1a40 [ 228.503702][ T9117] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 228.503717][ T9117] ? lockdep_hardirqs_on+0x78/0x100 [ 228.503731][ T9117] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 228.503745][ T9117] ? import_ubuf+0x1b6/0x220 [ 228.503763][ T9117] blk_rq_map_user+0x11d/0x180 [ 228.503781][ T9117] ? __pfx_blk_rq_map_user+0x10/0x10 [ 228.503798][ T9117] ? apparmor_capable+0x1d7/0x4d0 [ 228.503811][ T9117] ? __might_fault+0xc5/0x140 [ 228.503824][ T9117] ? bpf_lsm_capable+0x9/0x10 [ 228.503838][ T9117] ? security_capable+0x80/0x260 [ 228.503850][ T9117] ? capable+0xd3/0xf0 [ 228.503863][ T9117] scsi_bsg_sg_io_fn+0x8dc/0xb30 [ 228.503892][ T9117] ? __pfx_scsi_bsg_sg_io_fn+0x10/0x10 [ 228.503905][ T9117] bsg_sg_io+0x1b4/0x2a0 [ 228.503921][ T9117] ? __pfx_bsg_sg_io+0x10/0x10 [ 228.503941][ T9117] ? find_held_lock+0x2b/0x80 [ 228.503954][ T9117] ? __fget_files+0x215/0x3d0 [ 228.503965][ T9117] ? hook_file_ioctl_common+0x140/0x440 [ 228.503983][ T9117] bsg_ioctl+0x39f/0x5b0 [ 228.503998][ T9117] ? __pfx_bsg_ioctl+0x10/0x10 [ 228.504012][ T9117] compat_ptr_ioctl+0x6e/0xa0 [ 228.504028][ T9117] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 228.504043][ T9117] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 228.504065][ T9117] __do_fast_syscall_32+0xe7/0x970 [ 228.504081][ T9117] ? lockdep_hardirqs_on+0x78/0x100 [ 228.504096][ T9117] do_fast_syscall_32+0x32/0x70 [ 228.504112][ T9117] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 228.504127][ T9117] RIP: 0023:0xf704efec [ 228.504142][ T9117] Code: Unable to access opcode bytes at 0xf704efc2. [ 228.504147][ T9117] RSP: 002b:00000000f543d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 228.504158][ T9117] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000002285 [ 228.504165][ T9117] RDX: 0000000080000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 228.504172][ T9117] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 228.504178][ T9117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 228.504185][ T9117] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 228.504198][ T9117] [ 228.617952][ T9113] wg2 speed is unknown, defaulting to 1000 [ 231.412871][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 231.425347][ T9] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 231.445141][ T9] usb 5-1: USB disconnect, device number 19 [ 231.450120][ T9156] netlink: 24 bytes leftover after parsing attributes in process `syz.2.894'. [ 231.630542][ T9159] use of bytesused == 0 is deprecated and will be removed in the future, [ 231.636979][ T9159] use the actual size instead. [ 231.645453][ T9159] netlink: 36 bytes leftover after parsing attributes in process `syz.0.895'. [ 231.650506][ T9159] netlink: 16 bytes leftover after parsing attributes in process `syz.0.895'. [ 231.654392][ T9159] netlink: 36 bytes leftover after parsing attributes in process `syz.0.895'. [ 231.695938][ T9160] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 231.698066][ T9160] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 231.701617][ T9160] vhci_hcd vhci_hcd.0: Device attached [ 231.720544][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.733137][ T9165] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma? [ 231.740118][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.809108][ T9166] erofs (device sr0): cannot find valid erofs superblock [ 231.893294][ T55] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 231.962871][ T55] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 232.335942][ T9162] vhci_hcd: connection reset by peer [ 232.339796][ T5792] vhci_hcd vhci_hcd.2: stop threads [ 232.341885][ T5792] vhci_hcd vhci_hcd.2: release socket [ 232.343866][ T5792] vhci_hcd vhci_hcd.2: disconnect device [ 232.576037][ T9178] netlink: 56 bytes leftover after parsing attributes in process `syz.0.899'. [ 233.514848][ T9184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.901'. [ 233.656334][ T9193] netlink: 56 bytes leftover after parsing attributes in process `syz.2.902'. [ 233.721647][ T9196] binder: 9194:9196 ioctl 4018620d 0 returned -22 [ 233.991714][ T9202] fuse: Bad value for 'group_id' [ 233.993982][ T9202] fuse: Bad value for 'group_id' [ 234.387461][ T9214] netlink: 8 bytes leftover after parsing attributes in process `syz.0.912'. [ 234.429085][ T9215] netlink: 56 bytes leftover after parsing attributes in process `syz.3.911'. [ 234.555242][ T9220] overlayfs: failed to resolve './file0': -2 [ 234.619713][ T9222] Bluetooth: MGMT ver 1.23 [ 234.638962][ T9220] netlink: 64 bytes leftover after parsing attributes in process `syz.0.914'. [ 237.103014][ T55] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 237.309266][ T9275] C: renamed from veth1_to_team (while UP) [ 237.322989][ T9275] netlink: 'syz.3.933': attribute type 2 has an invalid length. [ 237.325743][ T9275] __nla_validate_parse: 1 callbacks suppressed [ 237.325754][ T9275] netlink: 128 bytes leftover after parsing attributes in process `syz.3.933'. [ 237.333165][ T9275] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 238.847971][ T9309] netlink: 20 bytes leftover after parsing attributes in process `syz.0.943'. [ 238.945767][ T9315] netlink: 12 bytes leftover after parsing attributes in process `syz.0.946'. [ 238.976518][ T9318] binder: 9317:9318 ioctl c0306201 0 returned -14 [ 239.034065][ T9323] netlink: 8 bytes leftover after parsing attributes in process `syz.3.949'. [ 239.983268][ T9349] netlink: 20 bytes leftover after parsing attributes in process `syz.0.954'. [ 240.182174][ T9360] binder: 9359:9360 ioctl c0306201 0 returned -14 [ 240.815258][ T9375] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input28 [ 240.984693][ T9373] can0: slcan on ttyS3. [ 241.179910][ T9386] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 241.191168][ T9386] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 241.610666][ T9371] can0 (unregistered): slcan off ttyS3. [ 241.769385][ T9406] netlink: 8 bytes leftover after parsing attributes in process `syz.0.968'. [ 241.918840][ T9417] netlink: 48 bytes leftover after parsing attributes in process `syz.0.971'. [ 242.059276][ T9420] usbip-vudc usbip-vudc.0: gadget not bound [ 242.066973][ T9420] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 242.283035][ T42] audit: type=1326 audit(1785793047.839:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9423 comm="syz.3.974" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 242.313242][ T42] audit: type=1326 audit(1785793047.839:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9423 comm="syz.3.974" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 242.337108][ T42] audit: type=1326 audit(1785793047.839:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9423 comm="syz.3.974" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf71873eb code=0x7ffc0000 [ 242.375278][ T42] audit: type=1326 audit(1785793047.839:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9423 comm="syz.3.974" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 242.382903][ T42] audit: type=1326 audit(1785793047.839:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9423 comm="syz.3.974" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 242.389518][ T42] audit: type=1326 audit(1785793047.839:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9423 comm="syz.3.974" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf704efec code=0x7ffc0000 [ 242.397519][ T42] audit: type=1326 audit(1785793047.839:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9423 comm="syz.3.974" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 242.404485][ T42] audit: type=1326 audit(1785793047.839:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9423 comm="syz.3.974" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 242.411465][ T42] audit: type=1326 audit(1785793047.849:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9423 comm="syz.3.974" exe="/syz-executor" sig=0 arch=40000003 syscall=242 compat=1 ip=0xf704efec code=0x7ffc0000 [ 242.418241][ T42] audit: type=1326 audit(1785793047.849:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9423 comm="syz.3.974" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 243.060321][ T9448] netlink: 48 bytes leftover after parsing attributes in process `syz.2.981'. [ 243.076808][ T9451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.979'. [ 243.123291][ T9443] gadgetfs: bound to dummy_udc driver [ 243.169857][ T9459] netlink: 8 bytes leftover after parsing attributes in process `syz.0.985'. [ 243.229945][ T9466] openvswitch: netlink: IPv4 tunnel dst address is zero [ 243.260892][ T9470] FAULT_INJECTION: forcing a failure. [ 243.260892][ T9470] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.315731][ T9470] CPU: 0 UID: 0 PID: 9470 Comm: syz.3.989 Tainted: G L syzkaller #0 PREEMPT(full) [ 243.315751][ T9470] Tainted: [L]=SOFTLOCKUP [ 243.315755][ T9470] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 243.315762][ T9470] Call Trace: [ 243.315767][ T9470] [ 243.315771][ T9470] dump_stack_lvl+0x100/0x190 [ 243.315790][ T9470] should_fail_ex.cold+0x5/0xa [ 243.315804][ T9470] _copy_from_iter+0x1f4/0x1690 [ 243.315824][ T9470] ? __asan_memset+0x23/0x50 [ 243.315837][ T9470] ? __pfx__copy_from_iter+0x10/0x10 [ 243.315854][ T9470] ? __pfx___alloc_skb+0x10/0x10 [ 243.315876][ T9470] netlink_sendmsg+0x808/0xda0 [ 243.315895][ T9470] ? __pfx_netlink_sendmsg+0x10/0x10 [ 243.315909][ T9470] ? apparmor_socket_sendmsg+0x15b/0x270 [ 243.315925][ T9470] ____sys_sendmsg+0xa4d/0xbe0 [ 243.315936][ T9470] ? __pfx_netlink_sendmsg+0x10/0x10 [ 243.315950][ T9470] ? __pfx_____sys_sendmsg+0x10/0x10 [ 243.315967][ T9470] ___sys_sendmsg+0x190/0x1e0 [ 243.315981][ T9470] ? __pfx____sys_sendmsg+0x10/0x10 [ 243.315999][ T9470] ? find_held_lock+0x2b/0x80 [ 243.316022][ T9470] __sys_sendmsg+0x160/0x210 [ 243.316038][ T9470] ? __pfx___sys_sendmsg+0x10/0x10 [ 243.316058][ T9470] ? __pfx_ksys_write+0x10/0x10 [ 243.316074][ T9470] __do_fast_syscall_32+0xe7/0x970 [ 243.316096][ T9470] ? lockdep_hardirqs_on+0x78/0x100 [ 243.316116][ T9470] do_fast_syscall_32+0x32/0x70 [ 243.316137][ T9470] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 243.316156][ T9470] RIP: 0023:0xf704efec [ 243.316172][ T9470] Code: Unable to access opcode bytes at 0xf704efc2. [ 243.316177][ T9470] RSP: 002b:00000000f543d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 243.316188][ T9470] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 243.316195][ T9470] RDX: 0000000000000084 RSI: 0000000000000000 RDI: 0000000000000000 [ 243.316201][ T9470] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 243.316208][ T9470] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 243.316214][ T9470] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 243.316228][ T9470] [ 244.273171][ T9488] netlink: 8 bytes leftover after parsing attributes in process `syz.3.993'. [ 244.416698][ T9494] netlink: 4 bytes leftover after parsing attributes in process `syz.0.995'. [ 244.422893][ T9494] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 244.591146][ T9498] netlink: 'syz.3.997': attribute type 10 has an invalid length. [ 244.613246][ T9498] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.617022][ T9498] team0: Port device bond0 added [ 245.409303][ T9510] bond2 (unregistering): Released all slaves [ 245.769555][ T9532] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 245.795138][ T5849] IPVS: starting estimator thread 0... [ 245.892933][ T9536] IPVS: using max 43 ests per chain, 103200 per kthread [ 247.223663][ T9557] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1016'. [ 247.593041][ T5849] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 247.744757][ T5849] usb 5-1: config index 0 descriptor too short (expected 11556, got 36) [ 247.748487][ T5849] usb 5-1: config 244 has too many interfaces: 217, using maximum allowed: 32 [ 247.752300][ T5849] usb 5-1: config 244 has an invalid descriptor of length 63, skipping remainder of the config [ 247.757443][ T5849] usb 5-1: config 244 has 0 interfaces, different from the descriptor's value: 217 [ 247.761406][ T5849] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 247.762859][ T5827] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 247.765765][ T5849] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.874798][ T9569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1019'. [ 247.897326][ T9571] Cannot find set identified by id 0 to match [ 247.909014][ T9573] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1021'. [ 247.912865][ T5827] usb 7-1: Using ep0 maxpacket: 32 [ 247.919464][ T5827] usb 7-1: New USB device found, idVendor=0582, idProduct=0075, bcdDevice= 0.40 [ 247.922580][ T5827] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.925205][ T5827] usb 7-1: Product: syz [ 247.926619][ T5827] usb 7-1: Manufacturer: syz [ 247.930507][ T5827] usb 7-1: SerialNumber: syz [ 247.979484][ T9560] Cannot find add_set index 1 as target [ 247.985384][ T5849] usb 5-1: string descriptor 0 read error: -71 [ 247.991987][ T5849] usb 5-1: USB disconnect, device number 20 [ 248.177348][ T9566] wg2 speed is unknown, defaulting to 1000 [ 248.265584][ T9586] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1025'. [ 248.436295][ T9590] udc usbip-vudc.0: soft-connect without a gadget driver [ 248.922865][ T34] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 249.040070][ T9599] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1030'. [ 249.092978][ T34] usb 5-1: Using ep0 maxpacket: 32 [ 249.096752][ T34] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 249.099832][ T34] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 249.104854][ T34] usb 5-1: config 0 has no interface number 0 [ 249.108025][ T34] usb 5-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 249.116218][ T34] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 249.119389][ T34] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.123728][ T34] usb 5-1: Product: syz [ 249.125576][ T34] usb 5-1: Manufacturer: syz [ 249.127728][ T34] usb 5-1: SerialNumber: syz [ 249.134677][ T34] usb 5-1: config 0 descriptor?? [ 249.139836][ T34] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 249.340202][ T9595] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1029'. [ 249.349638][ T34] usb 5-1: qt2_attach - failed to power on unit: -71 [ 249.355571][ T34] quatech2 5-1:0.51: probe with driver quatech2 failed with error -71 [ 249.367156][ T34] usb 5-1: USB disconnect, device number 21 [ 250.099414][ T9621] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 250.101626][ T9621] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 250.104774][ T9621] vhci_hcd vhci_hcd.0: Device attached [ 250.125228][ T9621] netlink: 'syz.3.1037': attribute type 12 has an invalid length. [ 250.403846][ T1044] usb 44-1: SetAddress Request (6) to port 0 [ 250.406557][ T1044] usb 44-1: new SuperSpeed USB device number 6 using vhci_hcd [ 250.519784][ T5827] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 250.528331][ T5827] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 250.564167][ T5827] usb 7-1: USB disconnect, device number 12 [ 251.060422][ T9628] loop9: detected capacity change from 0 to 2640 [ 251.064299][ T9628] Buffer I/O error on dev loop9, logical block 0, async page read [ 251.067109][ T9628] Buffer I/O error on dev loop9, logical block 0, async page read [ 251.069682][ T9628] Buffer I/O error on dev loop9, logical block 0, async page read [ 251.072187][ T9628] Buffer I/O error on dev loop9, logical block 0, async page read [ 251.076679][ T9628] Buffer I/O error on dev loop9, logical block 0, async page read [ 251.079207][ T9628] Buffer I/O error on dev loop9, logical block 0, async page read [ 251.081645][ T9628] Buffer I/O error on dev loop9, logical block 0, async page read [ 251.084291][ T9628] Buffer I/O error on dev loop9, logical block 0, async page read [ 251.086968][ T9628] ldm_validate_partition_table(): Disk read failed. [ 251.089067][ T9628] Buffer I/O error on dev loop9, logical block 0, async page read [ 251.091495][ T9628] Buffer I/O error on dev loop9, logical block 0, async page read [ 251.094033][ T9628] Dev loop9: unable to read RDB block 0 [ 251.096459][ T9628] loop9: unable to read partition table [ 251.098399][ T9628] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾‚³˜) failed (rc=-5) [ 251.123188][ T9622] vhci_hcd: connection reset by peer [ 251.128514][ T5842] vhci_hcd vhci_hcd.3: stop threads [ 251.130268][ T5842] vhci_hcd vhci_hcd.3: release socket [ 251.134827][ T9636] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1040'. [ 251.136061][ T5842] vhci_hcd vhci_hcd.3: disconnect device [ 251.483589][ T9649] Invalid ELF header magic: != ELF [ 252.225236][ T9664] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1050'. [ 253.084737][ T5827] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 253.378244][ T9695] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1059'. [ 253.383510][ T5850] e1000 0000:00:06.0 eth0: Reset adapter [ 253.592898][ T5827] usb 6-1: Using ep0 maxpacket: 32 [ 253.599625][ T5827] usb 6-1: New USB device found, idVendor=0582, idProduct=0075, bcdDevice= 0.40 [ 253.604166][ T5827] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.607898][ T5827] usb 6-1: Product: syz [ 253.609855][ T5827] usb 6-1: Manufacturer: syz [ 253.611967][ T5827] usb 6-1: SerialNumber: syz [ 253.673545][ T9684] e1000e 0000:00:02.0: Some CPU C-states have been disabled in order to enable jumbo frames [ 253.821435][ T60] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 254.046020][ T9707] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1061'. [ 254.106486][ T5835] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 254.142338][ T5850] e1000: eth0 NIC Link is Down [ 254.257432][ T9704] wg2 speed is unknown, defaulting to 1000 [ 255.198479][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.201285][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.513099][ T1044] usb 44-1: device descriptor read/8, error -110 [ 255.875228][ T5827] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 255.879926][ T5827] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 255.904262][ T5827] usb 6-1: USB disconnect, device number 14 [ 255.914435][ T1044] usb usb44-port1: attempt power cycle [ 256.244406][ T5849] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 256.493782][ T1044] usb usb44-port1: unable to enumerate USB device [ 275.278578][ T9781] openvswitch: netlink: Missing key (keys=40, expected=100) [ 275.544729][ T9790] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1069'. [ 275.552365][ T9790] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1069'. [ 276.311233][ T9789] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1065'. [ 276.814746][ T9805] block nbd3: shutting down sockets [ 277.576554][ T9794] syz.1.1070 (9794): drop_caches: 2 [ 277.680959][ T9816] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1075'. [ 278.894470][ C1] select_fallback_rq: 34 callbacks suppressed [ 278.894492][ C1] process 9817 (syz.0.1077) no longer affine to cpu1 [ 279.652252][ T9827] smpboot: CPU 1 is now offline [ 280.093388][ T9843] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 280.095510][ T9843] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 280.098175][ T9843] vhci_hcd vhci_hcd.0: Device attached [ 280.130302][ T9843] netlink: 'syz.0.1082': attribute type 12 has an invalid length. [ 280.914271][ T9845] vhci_hcd: connection closed [ 280.914516][ T5842] vhci_hcd vhci_hcd.0: stop threads [ 280.924908][ T5842] vhci_hcd vhci_hcd.0: release socket [ 280.933619][ T5842] vhci_hcd vhci_hcd.0: disconnect device [ 280.943439][ T5832] usb 38-1: SetAddress Request (18) to port 0 [ 280.947386][ T5832] usb 38-1: new SuperSpeed USB device number 18 using vhci_hcd [ 280.994287][ T5832] usb 38-1: enqueue for inactive port 0 [ 281.391389][ T5832] usb usb38-port1: attempt power cycle [ 281.685520][ T9859] syzkaller0: entered promiscuous mode [ 281.690076][ T9859] syzkaller0: entered allmulticast mode [ 281.965436][ T5832] usb usb38-port1: unable to enumerate USB device [ 282.024337][ T9869] wg2 speed is unknown, defaulting to 1000 [ 282.266761][ T9875] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1092'. [ 282.281816][ T9875] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 282.458852][ T9880] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1093'. [ 283.287753][ T9892] ima: Unable to open file: / (-22) [ 283.322475][ T9891] ima: policy update failed [ 283.356813][ T42] audit: type=1802 audit(1785793344.958:107): pid=9891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.1096" res=0 errno=0 [ 283.493764][ T9900] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1097'. [ 283.578953][ T9901] retu-mfd 0-0001: could not read Retu revision: -6 [ 283.583705][ T9901] i2c i2c-0: new_device: Instantiated device retu at 0x01 [ 283.591525][ T9901] retu-mfd 0-0002: could not read Tahvo revision: -6 [ 283.606623][ T9901] i2c i2c-0: new_device: Instantiated device tahvo at 0x02 [ 283.616042][ T9904] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1100'. [ 283.619435][ T9904] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1100'. [ 283.622464][ T9904] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1100'. [ 283.682711][ T9910] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma? [ 283.846820][ T9915] syzkaller0: entered promiscuous mode [ 283.848643][ T9915] syzkaller0: entered allmulticast mode [ 284.727751][ T9931] udc usbip-vudc.0: soft-connect without a gadget driver [ 284.886951][ T9933] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 285.239602][ T9966] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1111'. [ 285.244184][ T9966] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1111'. [ 285.247280][ T9966] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1111'. [ 285.299963][ T9966] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 285.861161][ T9984] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1113'. [ 285.913357][ C3] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 286.328656][ T9994] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 286.334367][ T9994] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 286.339432][ T9994] bond0 (unregistering): Released all slaves [ 286.388991][T10002] udc usbip-vudc.0: soft-connect without a gadget driver [ 286.422947][ T60] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 286.612963][ T60] usb 5-1: Using ep0 maxpacket: 32 [ 286.617928][ T60] usb 5-1: New USB device found, idVendor=0582, idProduct=0075, bcdDevice= 0.40 [ 286.620897][ T60] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.624154][ T60] usb 5-1: Product: syz [ 286.625660][ T60] usb 5-1: Manufacturer: syz [ 286.627408][ T60] usb 5-1: SerialNumber: syz [ 286.762939][ T5827] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 286.865609][ T9988] wg2 speed is unknown, defaulting to 1000 [ 287.057807][ T5842] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 287.064316][ T5842] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.066087][ T5748] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 287.079984][ T5748] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 287.083605][ T5748] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 287.087751][ T5748] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 287.090523][ T5748] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 287.092846][ T5827] usb 8-1: Using ep0 maxpacket: 32 [ 287.099302][ T5827] usb 8-1: New USB device found, idVendor=0582, idProduct=0075, bcdDevice= 0.40 [ 287.102225][ T5827] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.104859][ T5827] usb 8-1: Product: syz [ 287.106192][ T5827] usb 8-1: Manufacturer: syz [ 287.107899][ T5827] usb 8-1: SerialNumber: syz [ 287.166781][ T5842] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 287.170846][ T5842] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.270037][ T5842] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 287.273578][ T5842] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.359904][T10022] wg2 speed is unknown, defaulting to 1000 [ 287.394194][ T5842] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 287.398901][ T5842] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.470270][T10004] wg2 speed is unknown, defaulting to 1000 [ 287.921278][ T5842] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 287.927410][ T5842] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 287.931479][ T5842] bond0 (unregistering): Released all slaves [ 287.948004][ T5454] 8021q: adding VLAN 0 to HW filter on device eth2 [ 288.118983][T10051] udc usbip-vudc.0: soft-connect without a gadget driver [ 288.155202][T10022] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.157704][T10022] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.160188][T10022] bridge_slave_0: entered allmulticast mode [ 288.164750][T10022] bridge_slave_0: entered promiscuous mode [ 288.190669][T10022] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.195555][T10022] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.198368][T10022] bridge_slave_1: entered allmulticast mode [ 288.202888][T10022] bridge_slave_1: entered promiscuous mode [ 288.270074][T10022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 288.363274][T10022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.427936][ T5454] 8021q: adding VLAN 0 to HW filter on device eth3 [ 288.445453][T10022] team0: Port device team_slave_0 added [ 288.467563][T10022] team0: Port device team_slave_1 added [ 288.491348][T10022] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 288.493678][T10022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 288.501779][T10022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 288.507589][T10022] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 288.510120][T10022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 288.520135][T10022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 288.590996][T10022] hsr_slave_0: entered promiscuous mode [ 288.599557][T10022] hsr_slave_1: entered promiscuous mode [ 288.605425][T10022] debugfs: 'hsr0' already exists in 'hsr' [ 288.609993][T10022] Cannot create hsr debugfs directory [ 288.726165][ T5454] 8021q: adding VLAN 0 to HW filter on device eth4 [ 288.738809][ T5842] hsr_slave_0: left promiscuous mode [ 288.741631][ T5842] hsr_slave_1: left promiscuous mode [ 288.744331][ T5842] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 288.747021][ T5842] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 288.750200][ T5842] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 288.752748][ T5842] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 288.778334][ T5842] veth1_macvtap: left promiscuous mode [ 288.780490][ T5842] veth0_macvtap: left promiscuous mode [ 288.784048][ T5842] veth1_vlan: left promiscuous mode [ 288.786007][ T5842] veth0_vlan: left promiscuous mode [ 289.041891][ T5842] team0 (unregistering): Port device team_slave_1 removed [ 289.056249][ T5842] team0 (unregistering): Port device team_slave_0 removed [ 289.065931][T10072] __nla_validate_parse: 2 callbacks suppressed [ 289.065942][T10072] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1132'. [ 289.181801][T10073] geneve2: entered allmulticast mode [ 289.186564][T10073] team0: Port device geneve2 added [ 289.203670][ T5748] Bluetooth: hci0: command tx timeout [ 289.271022][ T60] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 289.278698][ T60] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 289.314716][ T60] usb 5-1: USB disconnect, device number 22 [ 289.542809][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 289.556174][T10083] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1134'. [ 289.559219][T10083] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1134'. [ 289.562052][T10083] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1134'. [ 289.709539][ T5827] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 289.715322][ T5827] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 289.718588][T10088] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma? [ 289.734413][ T5827] usb 8-1: USB disconnect, device number 17 [ 289.755282][ T5842] IPVS: stop unused estimator thread 0... [ 289.785045][T10022] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 289.796110][T10022] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 289.801621][T10022] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 289.814522][T10022] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 289.819574][T10022] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 289.850216][T10022] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 289.859556][T10022] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 289.876947][T10022] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 289.955248][T10100] udc usbip-vudc.0: soft-connect without a gadget driver [ 289.973757][ T5454] 8021q: adding VLAN 0 to HW filter on device eth5 [ 290.005696][T10022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.018217][T10022] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.026952][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.029283][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.857497][T10111] infiniband syz0: set active [ 290.859094][T10111] infiniband syz0: added bond_slave_1 [ 290.882486][T10111] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 290.887386][T10111] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 290.892831][T10111] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 290.947416][T10111] RDS/IB: syz0: added [ 290.948839][T10111] smc: adding ib device syz0 with port count 1 [ 290.950827][T10111] smc: ib device syz0 port 1 has no pnetid [ 290.988206][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.990512][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.273182][ T5748] Bluetooth: hci0: command tx timeout [ 291.958613][T10022] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.966084][T10152] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1142'. [ 291.984228][T10152] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1142'. [ 291.994127][T10152] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1142'. [ 292.033917][T10146] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 292.036057][T10146] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 292.047428][T10146] vhci_hcd vhci_hcd.0: Device attached [ 292.056584][T10160] vhci_hcd: connection closed [ 292.056998][ T5792] vhci_hcd vhci_hcd.1: stop threads [ 292.060234][ T5792] vhci_hcd vhci_hcd.1: release socket [ 292.061915][ T5792] vhci_hcd vhci_hcd.1: disconnect device [ 292.082010][ T5748] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 292.241563][T10022] veth0_vlan: entered promiscuous mode [ 292.259210][T10022] veth1_vlan: entered promiscuous mode [ 292.296710][T10022] veth0_macvtap: entered promiscuous mode [ 292.306305][T10022] veth1_macvtap: entered promiscuous mode [ 292.328333][T10022] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 292.341261][T10022] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 292.392871][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.398626][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.422561][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.480610][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.484570][ T5842] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.489121][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.521711][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.526739][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.563039][T10183] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1144'. [ 292.721292][T10196] syzkaller0: entered promiscuous mode [ 292.723143][T10196] syzkaller0: entered allmulticast mode [ 293.353168][ T5748] Bluetooth: hci0: command tx timeout [ 293.435537][T10212] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1151'. [ 293.449626][T10212] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1151'. [ 293.548160][ T5748] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 293.553035][ T5748] CPU: 2 UID: 0 PID: 5748 Comm: kworker/u34:3 Tainted: G S L syzkaller #0 PREEMPT(full) [ 293.553056][ T5748] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 293.553062][ T5748] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 293.553070][ T5748] Workqueue: hci2 hci_rx_work [ 293.553114][ T5748] Call Trace: [ 293.553119][ T5748] [ 293.553124][ T5748] dump_stack_lvl+0x100/0x190 [ 293.553143][ T5748] sysfs_warn_dup.cold+0x1c/0x28 [ 293.553161][ T5748] sysfs_create_dir_ns+0x24b/0x2b0 [ 293.553180][ T5748] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 293.553197][ T5748] ? find_held_lock+0x2b/0x80 [ 293.553214][ T5748] ? kobject_add_internal+0x25f/0x930 [ 293.553228][ T5748] ? kobject_add_internal+0x25f/0x930 [ 293.553240][ T5748] ? do_raw_spin_unlock+0x145/0x1e0 [ 293.553254][ T5748] kobject_add_internal+0x2c8/0x930 [ 293.553272][ T5748] kobject_add+0x16a/0x1e0 [ 293.553283][ T5748] ? __pfx_kobject_add+0x10/0x10 [ 293.553293][ T5748] ? class_to_subsys+0x10f/0x150 [ 293.553318][ T5748] ? kobject_put+0xb9/0x640 [ 293.553334][ T5748] ? _raw_spin_unlock+0x28/0x50 [ 293.553350][ T5748] device_add+0x294/0x1970 [ 293.553370][ T5748] ? __pfx_dev_set_name+0x10/0x10 [ 293.553383][ T5748] ? __pfx_device_add+0x10/0x10 [ 293.553409][ T5748] ? mgmt_send_event_skb+0x2fb/0x460 [ 293.553436][ T5748] hci_conn_add_sysfs+0x1a3/0x260 [ 293.553454][ T5748] le_conn_complete_evt+0x11eb/0x1f60 [ 293.553473][ T5748] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 293.553488][ T5748] ? hci_event_packet+0x186/0xcd0 [ 293.553506][ T5748] hci_le_conn_complete_evt+0x23c/0x3a0 [ 293.553521][ T5748] ? skb_pull_data+0x15f/0x1e0 [ 293.553550][ T5748] hci_le_meta_evt+0x34a/0x5f0 [ 293.553566][ T5748] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 293.553582][ T5748] hci_event_packet+0x51c/0xcd0 [ 293.553596][ T5748] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 293.553611][ T5748] ? __pfx_hci_event_packet+0x10/0x10 [ 293.553626][ T5748] ? kcov_remote_start+0x384/0x670 [ 293.553644][ T5748] ? lockdep_hardirqs_on+0x78/0x100 [ 293.553662][ T5748] hci_rx_work+0x451/0xfc0 [ 293.553679][ T5748] process_one_work+0xa23/0x1940 [ 293.553702][ T5748] ? __pfx_process_one_work+0x10/0x10 [ 293.553722][ T5748] ? __pfx_hci_rx_work+0x10/0x10 [ 293.553737][ T5748] worker_thread+0x5ef/0xe50 [ 293.553758][ T5748] ? kthread+0x13a/0x450 [ 293.553773][ T5748] ? __pfx_worker_thread+0x10/0x10 [ 293.553787][ T5748] kthread+0x370/0x450 [ 293.553806][ T5748] ? __pfx_kthread+0x10/0x10 [ 293.553822][ T5748] ret_from_fork+0x72b/0xd50 [ 293.553846][ T5748] ? __pfx_ret_from_fork+0x10/0x10 [ 293.553859][ T5748] ? rcu_is_watching+0x12/0xc0 [ 293.553873][ T5748] ? __switch_to+0x800/0x10f0 [ 293.553892][ T5748] ? __pfx_kthread+0x10/0x10 [ 293.553908][ T5748] ret_from_fork_asm+0x1a/0x30 [ 293.553933][ T5748] [ 293.554809][ T5748] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 293.648085][ T5748] Bluetooth: hci2: failed to register connection device [ 295.386021][T10262] __nla_validate_parse: 1 callbacks suppressed [ 295.386083][T10262] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1163'. [ 295.392408][T10262] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1163'. [ 295.399504][T10262] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1163'. [ 295.432917][ T5753] Bluetooth: hci0: command tx timeout [ 295.479308][ T5753] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 295.486519][ T5753] CPU: 2 UID: 0 PID: 5753 Comm: kworker/u34:5 Tainted: G S L syzkaller #0 PREEMPT(full) [ 295.486544][ T5753] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 295.486549][ T5753] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 295.486558][ T5753] Workqueue: hci0 hci_rx_work [ 295.486578][ T5753] Call Trace: [ 295.486583][ T5753] [ 295.486588][ T5753] dump_stack_lvl+0x100/0x190 [ 295.486604][ T5753] sysfs_warn_dup.cold+0x1c/0x28 [ 295.486623][ T5753] sysfs_create_dir_ns+0x24b/0x2b0 [ 295.486642][ T5753] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 295.486659][ T5753] ? find_held_lock+0x2b/0x80 [ 295.486673][ T5753] ? kobject_add_internal+0x25f/0x930 [ 295.486686][ T5753] ? kobject_add_internal+0x25f/0x930 [ 295.486698][ T5753] ? do_raw_spin_unlock+0x145/0x1e0 [ 295.486711][ T5753] kobject_add_internal+0x2c8/0x930 [ 295.486725][ T5753] kobject_add+0x16a/0x1e0 [ 295.486735][ T5753] ? __pfx_kobject_add+0x10/0x10 [ 295.486745][ T5753] ? class_to_subsys+0x10f/0x150 [ 295.486760][ T5753] ? kobject_put+0xb9/0x640 [ 295.486776][ T5753] ? _raw_spin_unlock+0x28/0x50 [ 295.486792][ T5753] device_add+0x294/0x1970 [ 295.486803][ T5753] ? __pfx_dev_set_name+0x10/0x10 [ 295.486816][ T5753] ? __pfx_device_add+0x10/0x10 [ 295.486827][ T5753] ? mgmt_send_event_skb+0x2fb/0x460 [ 295.486845][ T5753] hci_conn_add_sysfs+0x1a3/0x260 [ 295.486862][ T5753] le_conn_complete_evt+0x11eb/0x1f60 [ 295.486879][ T5753] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 295.486893][ T5753] ? hci_event_packet+0x186/0xcd0 [ 295.486909][ T5753] hci_le_conn_complete_evt+0x23c/0x3a0 [ 295.486924][ T5753] ? skb_pull_data+0x15f/0x1e0 [ 295.486938][ T5753] hci_le_meta_evt+0x34a/0x5f0 [ 295.486954][ T5753] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 295.486970][ T5753] hci_event_packet+0x51c/0xcd0 [ 295.486983][ T5753] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 295.486998][ T5753] ? __pfx_hci_event_packet+0x10/0x10 [ 295.487014][ T5753] ? kcov_remote_start+0x384/0x670 [ 295.487030][ T5753] ? lockdep_hardirqs_on+0x78/0x100 [ 295.487048][ T5753] hci_rx_work+0x451/0xfc0 [ 295.487065][ T5753] process_one_work+0xa23/0x1940 [ 295.487088][ T5753] ? __pfx_process_one_work+0x10/0x10 [ 295.487108][ T5753] ? __pfx_hci_rx_work+0x10/0x10 [ 295.487123][ T5753] worker_thread+0x5ef/0xe50 [ 295.487144][ T5753] ? kthread+0x13a/0x450 [ 295.487158][ T5753] ? __pfx_worker_thread+0x10/0x10 [ 295.487173][ T5753] kthread+0x370/0x450 [ 295.487187][ T5753] ? __pfx_kthread+0x10/0x10 [ 295.487203][ T5753] ret_from_fork+0x72b/0xd50 [ 295.487218][ T5753] ? __pfx_ret_from_fork+0x10/0x10 [ 295.487231][ T5753] ? native_load_gs_index+0x1e/0xc0 [ 295.487247][ T5753] ? __switch_to+0x800/0x10f0 [ 295.487264][ T5753] ? __pfx_kthread+0x10/0x10 [ 295.487279][ T5753] ret_from_fork_asm+0x1a/0x30 [ 295.487302][ T5753] [ 295.487318][ T5753] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 295.597105][ T5753] Bluetooth: hci0: failed to register connection device [ 296.023609][T10269] NILFS (loop4): device size too small [ 296.266344][ T42] audit: type=1326 audit(1785793357.868:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10272 comm="syz.1.1165" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 296.282513][ T42] audit: type=1326 audit(1785793357.868:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10272 comm="syz.1.1165" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 296.297741][ T42] audit: type=1326 audit(1785793357.868:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10272 comm="syz.1.1165" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 296.306676][ T42] audit: type=1326 audit(1785793357.868:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10272 comm="syz.1.1165" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 296.317753][ T42] audit: type=1326 audit(1785793357.868:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10272 comm="syz.1.1165" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 296.328476][ T42] audit: type=1326 audit(1785793357.868:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10272 comm="syz.1.1165" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 296.342845][ T42] audit: type=1326 audit(1785793357.868:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10272 comm="syz.1.1165" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 296.354041][ T42] audit: type=1326 audit(1785793357.868:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10272 comm="syz.1.1165" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 296.368422][ T42] audit: type=1326 audit(1785793357.868:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10272 comm="syz.1.1165" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 296.382153][ T42] audit: type=1326 audit(1785793357.868:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10272 comm="syz.1.1165" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 296.496110][T10293] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1172'. [ 296.633698][ T5753] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 297.954289][T10321] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1180'. [ 298.023358][T10322] loop4: detected capacity change from 0 to 7 [ 298.049642][T10322] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 298.051605][T10322] loop4: partition table partially beyond EOD, truncated [ 298.061048][T10322] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 298.166658][T10070] udevd[10070]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 298.251141][T10326] overlayfs: failed lookup in lower (newroot/299, name='file0', err=-40): overlapping layers [ 298.256574][T10326] overlayfs: failed lookup in lower (newroot/299, name='file0', err=-40): overlapping layers [ 298.262278][T10326] overlayfs: failed lookup in lower (newroot/299, name='file0', err=-40): overlapping layers [ 298.441875][T10330] bridge_slave_0: default FDB implementation only supports local addresses [ 298.655916][ T5832] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 298.834878][ T5832] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.848190][ T5832] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.863503][ T5832] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 298.871691][ T5832] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.888087][ T5832] usb 5-1: config 0 descriptor?? [ 299.397265][ T5832] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 299.400013][ T5832] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 299.469957][ T5832] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:0D8C:0022.0003/input/input32 [ 299.911766][T10360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.939376][ T5832] cm6533_jd 0003:0D8C:0022.0003: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 299.949953][T10360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.001261][ T5832] usb 5-1: USB disconnect, device number 23 [ 300.041978][T10361] fido_id[10361]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb5/5-1/report_descriptor': No such file or directory [ 300.320788][T10372] syz_tun: entered allmulticast mode [ 300.330526][T10371] syz_tun: left allmulticast mode [ 301.505278][T10400] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1204'. [ 301.509014][T10400] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1204'. [ 301.512483][T10400] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1204'. [ 301.812856][ T60] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 301.972884][ T60] usb 5-1: Using ep0 maxpacket: 16 [ 301.998103][ T60] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 302.010269][ T60] usb 5-1: config 0 has no interface number 0 [ 302.031176][ T60] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 302.052701][ T60] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 302.150660][ T60] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 302.162228][ T60] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 302.173958][ T60] usb 5-1: Product: syz [ 302.181725][ T60] usb 5-1: SerialNumber: syz [ 302.318239][ T60] usb 5-1: config 0 descriptor?? [ 302.805173][ T60] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 302.829261][ T60] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.8/input/input33 [ 303.043402][ T10] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 303.193795][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 303.197433][ T10] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 303.200937][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 303.204754][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 303.207936][ T10] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 303.211076][ T10] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 303.216298][ T10] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 303.219396][ T10] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 303.222117][ T10] usb 8-1: Manufacturer: syz [ 303.226136][ T10] usb 8-1: config 0 descriptor?? [ 303.482883][ T10] rc_core: IR keymap rc-hauppauge not found [ 303.485569][ T10] Registered IR keymap rc-empty [ 303.488253][ T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 303.503013][ T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 303.524095][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 303.529635][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input34 [ 303.539694][ T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 303.563016][ T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 303.582954][ T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 303.603413][ T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 303.622928][ T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 303.646102][ T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 303.672969][ T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 303.693069][ T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 303.713027][ T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 303.732929][ T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 303.758518][ T10] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 303.762639][ T10] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 303.770480][T10414] syzkaller0: entered promiscuous mode [ 303.779389][T10414] syzkaller0: entered allmulticast mode [ 303.782003][ T10] usb 8-1: USB disconnect, device number 18 [ 303.813953][T10416] syzkaller1: entered promiscuous mode [ 303.819237][T10416] syzkaller1: entered allmulticast mode [ 304.876023][ C2] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 304.881798][ C2] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 304.884492][ C2] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 304.887250][ C2] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 304.889903][ C2] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 304.892472][ C2] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 304.895415][ C2] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 304.898153][ C2] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 304.900945][ C2] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 304.903784][ C2] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 304.914750][ T60] usb 5-1: USB disconnect, device number 24 [ 304.917188][ C2] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 304.954911][ T60] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 304.972413][T10476] netlink: 'syz.0.1217': attribute type 2 has an invalid length. [ 305.192148][T10483] 9p: Bad value for 'port' [ 305.194047][ T42] kauditd_printk_skb: 5 callbacks suppressed [ 305.194056][ T42] audit: type=1326 audit(1785793366.788:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10475 comm="syz.4.1218" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 305.209802][ T42] audit: type=1326 audit(1785793366.788:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10475 comm="syz.4.1218" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 305.231439][ T42] audit: type=1326 audit(1785793366.788:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10475 comm="syz.4.1218" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 305.256148][ T42] audit: type=1326 audit(1785793366.798:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10475 comm="syz.4.1218" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 305.279727][ T42] audit: type=1326 audit(1785793366.798:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10475 comm="syz.4.1218" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 305.297999][ T42] audit: type=1326 audit(1785793366.798:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10475 comm="syz.4.1218" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 305.317491][ T42] audit: type=1326 audit(1785793366.798:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10475 comm="syz.4.1218" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 305.330050][ T42] audit: type=1326 audit(1785793366.798:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10475 comm="syz.4.1218" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 305.338797][ T42] audit: type=1326 audit(1785793366.798:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10475 comm="syz.4.1218" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 305.349529][ T42] audit: type=1326 audit(1785793366.808:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10475 comm="syz.4.1218" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 305.461360][T10488] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 306.453780][T10518] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1230'. [ 307.316755][T10546] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1241'. [ 308.422898][T10574] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1251'. [ 308.561314][T10577] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 308.566160][T10577] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 308.599707][T10577] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 308.606969][T10577] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 308.626545][T10577] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 308.638446][T10577] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 308.659463][T10577] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 308.676136][T10577] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 308.683774][T10577] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 308.685837][T10577] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 308.700512][T10577] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 308.777225][T10577] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 308.985153][T10588] netlink: 'syz.1.1255': attribute type 13 has an invalid length. [ 309.238626][T10596] FAULT_INJECTION: forcing a failure. [ 309.238626][T10596] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 309.247197][T10596] CPU: 3 UID: 0 PID: 10596 Comm: syz.0.1256 Tainted: G S L syzkaller #0 PREEMPT(full) [ 309.247217][T10596] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 309.247222][T10596] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 309.247229][T10596] Call Trace: [ 309.247233][T10596] [ 309.247237][T10596] dump_stack_lvl+0x100/0x190 [ 309.247261][T10596] should_fail_ex.cold+0x5/0xa [ 309.247277][T10596] _copy_from_iter+0x1f4/0x1690 [ 309.247301][T10596] ? __asan_memset+0x23/0x50 [ 309.247317][T10596] ? __pfx__copy_from_iter+0x10/0x10 [ 309.247335][T10596] ? __pfx___alloc_skb+0x10/0x10 [ 309.247358][T10596] netlink_sendmsg+0x808/0xda0 [ 309.247376][T10596] ? __pfx_netlink_sendmsg+0x10/0x10 [ 309.247390][T10596] ? apparmor_socket_sendmsg+0x15b/0x270 [ 309.247406][T10596] ____sys_sendmsg+0xa4d/0xbe0 [ 309.247418][T10596] ? __pfx_netlink_sendmsg+0x10/0x10 [ 309.247432][T10596] ? __pfx_____sys_sendmsg+0x10/0x10 [ 309.247450][T10596] ___sys_sendmsg+0x190/0x1e0 [ 309.247463][T10596] ? __pfx____sys_sendmsg+0x10/0x10 [ 309.247482][T10596] ? find_held_lock+0x2b/0x80 [ 309.247505][T10596] __sys_sendmsg+0x160/0x210 [ 309.247521][T10596] ? __pfx___sys_sendmsg+0x10/0x10 [ 309.247541][T10596] ? __pfx_ksys_write+0x10/0x10 [ 309.247556][T10596] __do_fast_syscall_32+0xe7/0x970 [ 309.247574][T10596] ? lockdep_hardirqs_on+0x78/0x100 [ 309.247590][T10596] do_fast_syscall_32+0x32/0x70 [ 309.247606][T10596] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 309.247621][T10596] RIP: 0023:0xf704efec [ 309.247635][T10596] Code: Unable to access opcode bytes at 0xf704efc2. [ 309.247639][T10596] RSP: 002b:00000000f543d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 309.247651][T10596] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 309.247658][T10596] RDX: 0000000000000090 RSI: 0000000000000000 RDI: 0000000000000000 [ 309.247665][T10596] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 309.247671][T10596] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 309.247677][T10596] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 309.247691][T10596] [ 309.449475][T10604] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1261'. [ 309.478152][T10606] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1262'. [ 309.606596][T10615] overlayfs: conflicting options: userxattr,redirect_dir=on [ 309.619882][T10615] netlink: 'syz.1.1266': attribute type 2 has an invalid length. [ 309.623975][T10615] syz_tun: entered allmulticast mode [ 309.673714][ T5892] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 309.780423][T10621] xt_HMARK: proto mask must be zero with L3 mode [ 309.923178][ T5892] usb 8-1: Using ep0 maxpacket: 32 [ 309.931675][ T5892] usb 8-1: New USB device found, idVendor=0582, idProduct=0075, bcdDevice= 0.40 [ 309.942734][ T5892] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.948264][ T5892] usb 8-1: Product: syz [ 309.950067][ T5892] usb 8-1: Manufacturer: syz [ 309.952557][ T5892] usb 8-1: SerialNumber: syz [ 310.203758][ T42] kauditd_printk_skb: 129 callbacks suppressed [ 310.203832][ T42] audit: type=1326 audit(1785793371.808:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10618 comm="syz.1.1267" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71273eb code=0x7ffc0000 [ 310.217701][ T42] audit: type=1326 audit(1785793371.818:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10618 comm="syz.1.1267" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71273eb code=0x7ffc0000 [ 310.228682][ T42] audit: type=1326 audit(1785793371.828:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10618 comm="syz.1.1267" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71273eb code=0x7ffc0000 [ 310.242444][ T42] audit: type=1326 audit(1785793371.838:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10618 comm="syz.1.1267" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71273eb code=0x7ffc0000 [ 310.255464][ T42] audit: type=1326 audit(1785793371.858:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10618 comm="syz.1.1267" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71273eb code=0x7ffc0000 [ 310.265738][ T42] audit: type=1326 audit(1785793371.858:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10618 comm="syz.1.1267" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71273eb code=0x7ffc0000 [ 310.274032][ T42] audit: type=1326 audit(1785793371.878:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10618 comm="syz.1.1267" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71273eb code=0x7ffc0000 [ 310.285022][ T42] audit: type=1326 audit(1785793371.878:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10618 comm="syz.1.1267" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71273eb code=0x7ffc0000 [ 310.295857][ T42] audit: type=1326 audit(1785793371.898:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10618 comm="syz.1.1267" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71273eb code=0x7ffc0000 [ 310.325189][ T42] audit: type=1326 audit(1785793371.908:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10618 comm="syz.1.1267" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71273eb code=0x7ffc0000 [ 310.325721][T10601] wg2 speed is unknown, defaulting to 1000 [ 310.665223][ T5748] Bluetooth: hci2: command 0x0c1a tx timeout [ 310.667371][ T5753] Bluetooth: hci3: command 0x0c1a tx timeout [ 310.667392][ T5102] Bluetooth: hci1: command 0x0c1a tx timeout [ 310.712935][ T5102] Bluetooth: hci0: command 0x0c1a tx timeout [ 310.946376][T10649] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1276'. [ 311.001886][T10645] faux_driver vgem: [drm] Unknown color mode 7; guessing buffer size. [ 311.008389][T10652] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1277'. [ 312.050895][T10666] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 312.068342][T10666] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 312.713062][ T5102] Bluetooth: hci1: command 0x0c1a tx timeout [ 312.715480][ T5748] Bluetooth: hci2: command 0x0c1a tx timeout [ 312.715483][ T5102] Bluetooth: hci3: command 0x0c1a tx timeout [ 312.780033][ T5892] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 312.793215][ T5753] Bluetooth: hci0: command 0x0c1a tx timeout [ 312.797056][ T5892] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 312.837943][ T5892] usb 8-1: USB disconnect, device number 19 [ 313.171877][T10682] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1287'. [ 313.391870][T10684] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1288'. [ 313.630979][T10691] dlm: plock device version mismatch: kernel (1.2.0), user (2227959591.3024829116.1683162433) [ 314.064410][ T9] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 314.142191][T10709] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1297'. [ 314.223085][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 314.230701][ T9] usb 6-1: New USB device found, idVendor=0582, idProduct=0075, bcdDevice= 0.40 [ 314.241703][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.248918][ T9] usb 6-1: Product: syz [ 314.250262][ T9] usb 6-1: Manufacturer: syz [ 314.258643][ T9] usb 6-1: SerialNumber: syz [ 314.490833][T10697] wg2 speed is unknown, defaulting to 1000 [ 314.792984][ T5748] Bluetooth: hci2: command 0x0c1a tx timeout [ 314.872997][ T5748] Bluetooth: hci0: command 0x0c1a tx timeout [ 316.024762][T10731] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1304'. [ 316.510767][T10744] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1308'. [ 316.642861][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.644988][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.857988][ T9] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 316.861651][ T9] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 316.873183][ T5748] Bluetooth: hci2: command 0x0c1a tx timeout [ 316.890851][ T9] usb 6-1: USB disconnect, device number 15 [ 316.952926][ T5748] Bluetooth: hci0: command 0x0c1a tx timeout [ 317.550307][T10748] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1310'. [ 317.559022][T10748] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1310'. [ 317.565732][T10748] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1310'. [ 317.590137][T10713] Set syz1 is full, maxelem 65536 reached [ 318.165163][T10760] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 318.352375][T10726] Set syz1 is full, maxelem 65536 reached [ 318.462883][ T10] usb 8-1: new full-speed USB device number 20 using dummy_hcd [ 318.666349][ T10] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 318.670187][ T10] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 318.674504][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.701983][T10764] 9p: Bad value for 'port' [ 318.883718][ T10] usb 8-1: config 0 descriptor?? [ 319.165199][T10760] bond1: Removing last ns target with arp_interval on [ 319.542845][ T9] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 319.692864][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 319.698612][ T9] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 319.702103][ T9] usb 5-1: config 0 has no interface number 0 [ 319.705529][ T9] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 319.709957][ T9] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 319.714990][ T9] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 319.719303][ T9] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 319.729733][ T9] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 319.733677][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.739670][ T9] usb 5-1: config 0 descriptor?? [ 319.756885][ T9] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 319.914062][ T10] ath6kl: Failed to submit usb control message: -110 [ 319.916206][ T10] ath6kl: unable to send the bmi data to the device: -110 [ 319.918474][ T10] ath6kl: Unable to send get target info: -110 [ 319.935961][ T10] ath6kl: Failed to init ath6kl core: -110 [ 319.940034][ T10] ath6kl_usb 8-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 320.057133][ T10] usb 8-1: USB disconnect, device number 20 [ 320.422915][ T9] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 320.572862][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 320.578972][ T9] usb 9-1: New USB device found, idVendor=0582, idProduct=0075, bcdDevice= 0.40 [ 320.582633][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.586283][ T9] usb 9-1: Product: syz [ 320.587919][ T9] usb 9-1: Manufacturer: syz [ 320.590034][ T9] usb 9-1: SerialNumber: syz [ 320.781287][T10775] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1318'. [ 320.853124][T10773] wg2 speed is unknown, defaulting to 1000 [ 321.514394][T10792] overlay: Unknown parameter 'obj_user' [ 322.484899][ T10] usb 5-1: USB disconnect, device number 25 [ 322.503418][ T10] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 322.581958][T10803] udc usbip-vudc.0: soft-connect without a gadget driver [ 323.140388][T10809] Invalid ELF header magic: != ELF [ 323.464220][T10806] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 323.527219][ T9] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 323.534657][ T9] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 323.553527][ T9] usb 9-1: USB disconnect, device number 2 [ 323.620478][T10812] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1328'. [ 323.912358][T10825] Invalid ELF header magic: != ELF [ 323.916395][T10825] overlayfs: failed to resolve 'smackfsfloor=()': -2 [ 324.037188][T10827] Device name cannot be null; rc = [-22] [ 324.281470][T10816] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 324.343405][T10816] kvm: pic: non byte read [ 324.660723][T10851] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1338'. [ 324.663920][T10851] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1338'. [ 324.666907][T10851] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1338'. [ 324.743405][ T5748] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 324.799129][T10856] udc usbip-vudc.0: soft-connect without a gadget driver [ 325.153196][T10889] udc usbip-vudc.0: soft-connect without a gadget driver [ 325.423116][T10900] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2761322500 (353449280000 ns) > initial count (313845741312 ns). Using initial count to start timer. [ 326.307675][T10920] syz_tun: entered allmulticast mode [ 326.311744][T10919] syz_tun: left allmulticast mode [ 326.387470][T10922] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 326.389662][T10922] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 326.406446][T10922] vhci_hcd vhci_hcd.0: Device attached [ 326.413487][T10923] udc usbip-vudc.0: soft-connect without a gadget driver [ 326.454018][T10927] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1360'. [ 326.684225][ T5892] usb 38-1: SetAddress Request (22) to port 0 [ 326.698363][ T5892] usb 38-1: new SuperSpeed USB device number 22 using vhci_hcd [ 326.720624][T10936] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1362'. [ 326.853161][ T40] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 326.987553][ T40] usb 8-1: device descriptor read/64, error -71 [ 327.094838][T10924] vhci_hcd: connection reset by peer [ 327.096838][ T5792] vhci_hcd vhci_hcd.0: stop threads [ 327.098560][ T5792] vhci_hcd vhci_hcd.0: release socket [ 327.102478][ T5792] vhci_hcd vhci_hcd.0: disconnect device [ 327.109950][T10933] syz.4.1362 (10933): drop_caches: 2 [ 327.242932][ T40] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 327.302528][ T5753] Bluetooth: hci0: command 0x0c1a tx timeout [ 327.393445][ T40] usb 8-1: device descriptor read/64, error -71 [ 327.415538][T10943] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 327.417670][T10943] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 327.428727][T10943] vhci_hcd vhci_hcd.0: Device attached [ 327.528068][ T40] usb usb8-port1: attempt power cycle [ 327.692878][ T10] usb 40-1: SetAddress Request (6) to port 0 [ 327.697460][ T10] usb 40-1: new SuperSpeed USB device number 6 using vhci_hcd [ 327.893061][ T40] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 327.955123][ T40] usb 8-1: device descriptor read/8, error -71 [ 327.977540][T10944] vhci_hcd: connection reset by peer [ 327.979634][ T5792] vhci_hcd vhci_hcd.1: stop threads [ 327.981289][ T5792] vhci_hcd vhci_hcd.1: release socket [ 327.988200][ T5792] vhci_hcd vhci_hcd.1: disconnect device [ 328.203081][ T40] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 328.234859][ T40] usb 8-1: device descriptor read/8, error -71 [ 328.256178][T10948] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1365'. [ 328.288372][T10950] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1366'. [ 328.333263][T10951] FAULT_INJECTION: forcing a failure. [ 328.333263][T10951] name failslab, interval 1, probability 0, space 0, times 0 [ 328.337205][T10951] CPU: 0 UID: 0 PID: 10951 Comm: syz.0.1365 Tainted: G S L syzkaller #0 PREEMPT(full) [ 328.337224][T10951] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 328.337229][T10951] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 328.337236][T10951] Call Trace: [ 328.337240][T10951] [ 328.337244][T10951] dump_stack_lvl+0x100/0x190 [ 328.337263][T10951] should_fail_ex.cold+0x5/0xa [ 328.337276][T10951] should_failslab+0xc2/0x120 [ 328.337293][T10951] __kmalloc_cache_node_noprof+0x94/0x6c0 [ 328.337310][T10951] ? __get_vm_area_node+0x101/0x330 [ 328.337328][T10951] __get_vm_area_node+0x101/0x330 [ 328.337346][T10951] __vmalloc_node_range_noprof+0x228/0x1630 [ 328.337364][T10951] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 328.337381][T10951] ? find_held_lock+0x2b/0x80 [ 328.337395][T10951] ? process_measurement+0x4c8/0x2350 [ 328.337410][T10951] ? process_measurement+0x4c8/0x2350 [ 328.337425][T10951] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 328.337444][T10951] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 328.337463][T10951] ? tomoyo_check_open_permission+0x1db/0x3c0 [ 328.337484][T10951] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 328.337499][T10951] __vmalloc_node_noprof+0xad/0xf0 [ 328.337516][T10951] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 328.337533][T10951] __vmalloc_noprof+0xa3/0x120 [ 328.337549][T10951] ? __pfx___vmalloc_noprof+0x10/0x10 [ 328.337567][T10951] ? rcu_is_watching+0x12/0xc0 [ 328.337581][T10951] ? apparmor_capable+0x1d7/0x4d0 [ 328.337596][T10951] bpf_prog_alloc_no_stats+0x58/0x640 [ 328.337611][T10951] ? security_capable+0x80/0x260 [ 328.337624][T10951] bpf_prog_alloc+0x3b/0x200 [ 328.337638][T10951] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 328.337655][T10951] bpf_prog_load+0x4a9/0x2fa0 [ 328.337670][T10951] ? __pfx_bpf_prog_load+0x10/0x10 [ 328.337682][T10951] ? __lock_acquire+0x49f/0x1a40 [ 328.337711][T10951] __sys_bpf+0x18dc/0x4e80 [ 328.337727][T10951] ? __pfx___sys_bpf+0x10/0x10 [ 328.337739][T10951] ? find_held_lock+0x2b/0x80 [ 328.337752][T10951] ? get_pid_task+0xfc/0x250 [ 328.337767][T10951] ? get_pid_task+0xfc/0x250 [ 328.337799][T10951] ? proc_fail_nth_write+0x9f/0x220 [ 328.337818][T10951] ? find_held_lock+0x2b/0x80 [ 328.337835][T10951] ? rcu_read_lock_any_held+0x6a/0xa0 [ 328.337850][T10951] ? find_held_lock+0x2b/0x80 [ 328.337863][T10951] ? ksys_write+0x190/0x250 [ 328.337873][T10951] ? ksys_write+0x190/0x250 [ 328.337893][T10951] ? fput+0x79/0x100 [ 328.337907][T10951] ? __ia32_sys_bpf+0xcc/0x170 [ 328.337918][T10951] __ia32_sys_bpf+0xcc/0x170 [ 328.337931][T10951] ? __do_fast_syscall_32+0x98/0x970 [ 328.337949][T10951] __do_fast_syscall_32+0xe7/0x970 [ 328.337964][T10951] ? lockdep_hardirqs_on+0x78/0x100 [ 328.337979][T10951] do_fast_syscall_32+0x32/0x70 [ 328.337995][T10951] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 328.338010][T10951] RIP: 0023:0xf704efec [ 328.338023][T10951] Code: Unable to access opcode bytes at 0xf704efc2. [ 328.338033][T10951] RSP: 002b:00000000f541c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 328.338044][T10951] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000640 [ 328.338051][T10951] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 328.338058][T10951] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 328.338064][T10951] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 328.338071][T10951] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 328.338084][T10951] [ 328.338090][T10951] syz.0.1365: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 328.363061][ T40] usb usb8-port1: unable to enumerate USB device [ 328.390129][T10951] ,cpuset=/,mems_allowed=0-1 [ 328.454106][T10951] CPU: 0 UID: 0 PID: 10951 Comm: syz.0.1365 Tainted: G S L syzkaller #0 PREEMPT(full) [ 328.454125][T10951] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 328.454130][T10951] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 328.454136][T10951] Call Trace: [ 328.454141][T10951] [ 328.454145][T10951] dump_stack_lvl+0x100/0x190 [ 328.454162][T10951] warn_alloc.cold+0x94/0xa8 [ 328.454175][T10951] ? __pfx_warn_alloc+0x10/0x10 [ 328.454187][T10951] ? __kasan_kmalloc+0x8a/0xb0 [ 328.454207][T10951] ? __get_vm_area_node+0x208/0x330 [ 328.454230][T10951] __vmalloc_node_range_noprof+0xccd/0x1630 [ 328.454249][T10951] ? find_held_lock+0x2b/0x80 [ 328.454263][T10951] ? process_measurement+0x4c8/0x2350 [ 328.454278][T10951] ? process_measurement+0x4c8/0x2350 [ 328.454293][T10951] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 328.454313][T10951] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 328.454332][T10951] ? tomoyo_check_open_permission+0x1db/0x3c0 [ 328.454352][T10951] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 328.454367][T10951] __vmalloc_node_noprof+0xad/0xf0 [ 328.454384][T10951] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 328.454401][T10951] __vmalloc_noprof+0xa3/0x120 [ 328.454418][T10951] ? __pfx___vmalloc_noprof+0x10/0x10 [ 328.454436][T10951] ? rcu_is_watching+0x12/0xc0 [ 328.454450][T10951] ? apparmor_capable+0x1d7/0x4d0 [ 328.454464][T10951] bpf_prog_alloc_no_stats+0x58/0x640 [ 328.454479][T10951] ? security_capable+0x80/0x260 [ 328.454492][T10951] bpf_prog_alloc+0x3b/0x200 [ 328.454506][T10951] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 328.454523][T10951] bpf_prog_load+0x4a9/0x2fa0 [ 328.454539][T10951] ? __pfx_bpf_prog_load+0x10/0x10 [ 328.454561][T10951] ? __lock_acquire+0x49f/0x1a40 [ 328.454593][T10951] __sys_bpf+0x18dc/0x4e80 [ 328.454609][T10951] ? __pfx___sys_bpf+0x10/0x10 [ 328.454622][T10951] ? find_held_lock+0x2b/0x80 [ 328.454635][T10951] ? get_pid_task+0xfc/0x250 [ 328.454649][T10951] ? get_pid_task+0xfc/0x250 [ 328.454667][T10951] ? proc_fail_nth_write+0x9f/0x220 [ 328.454682][T10951] ? find_held_lock+0x2b/0x80 [ 328.454699][T10951] ? rcu_read_lock_any_held+0x6a/0xa0 [ 328.454713][T10951] ? find_held_lock+0x2b/0x80 [ 328.454726][T10951] ? ksys_write+0x190/0x250 [ 328.454737][T10951] ? ksys_write+0x190/0x250 [ 328.454757][T10951] ? fput+0x79/0x100 [ 328.454771][T10951] ? __ia32_sys_bpf+0xcc/0x170 [ 328.454782][T10951] __ia32_sys_bpf+0xcc/0x170 [ 328.454795][T10951] ? __do_fast_syscall_32+0x98/0x970 [ 328.454813][T10951] __do_fast_syscall_32+0xe7/0x970 [ 328.454828][T10951] ? lockdep_hardirqs_on+0x78/0x100 [ 328.454845][T10951] do_fast_syscall_32+0x32/0x70 [ 328.454861][T10951] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 328.454875][T10951] RIP: 0023:0xf704efec [ 328.454889][T10951] Code: Unable to access opcode bytes at 0xf704efc2. [ 328.454894][T10951] RSP: 002b:00000000f541c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 328.454904][T10951] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000640 [ 328.454911][T10951] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 328.454918][T10951] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 328.454924][T10951] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 328.454931][T10951] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 328.454945][T10951] [ 328.455001][T10951] Mem-Info: [ 328.498485][T10955] block2mtd: error: cannot open device #! [ 328.500362][T10951] active_anon:12747 inactive_anon:3905 isolated_anon:0 [ 328.500362][T10951] active_file:1387 inactive_file:33266 isolated_file:0 [ 328.500362][T10951] unevictable:1768 dirty:396 writeback:0 [ 328.500362][T10951] slab_reclaimable:6368 slab_unreclaimable:61226 [ 328.500362][T10951] mapped:28176 shmem:8641 pagetables:1353 [ 328.500362][T10951] sec_pagetables:305 bounce:0 [ 328.500362][T10951] kernel_misc_reclaimable:0 [ 328.500362][T10951] free:35219 free_pcp:15231 free_cma:0 [ 328.575462][T10951] Node 0 active_anon:32kB inactive_anon:180kB active_file:16kB inactive_file:116kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:4kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8960kB pagetables:1604kB sec_pagetables:1120kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 328.586125][T10951] Node 1 active_anon:39260kB inactive_anon:15440kB active_file:5532kB inactive_file:132948kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:97104kB dirty:1580kB writeback:0kB shmem:19604kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:6144kB kernel_stack:4896kB pagetables:3808kB sec_pagetables:100kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 328.596871][T10951] Node 0 DMA free:2064kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:496kB local_pcp:312kB free_cma:0kB [ 328.606316][T10951] lowmem_reserve[]: 0 280 280 280 280 [ 328.608051][T10951] Node 0 DMA32 free:15720kB boost:0kB min:12768kB low:15960kB high:19152kB reserved_highatomic:2048KB free_highatomic:1628KB active_anon:32kB inactive_anon:180kB active_file:16kB inactive_file:116kB unevictable:3536kB writepending:4kB zspages:0kB present:1032196kB managed:286920kB mlocked:0kB bounce:0kB free_pcp:11412kB local_pcp:2876kB free_cma:0kB [ 328.619376][T10951] lowmem_reserve[]: 0 0 0 0 0 [ 328.620929][T10951] Node 1 DMA32 free:133080kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:39328kB inactive_anon:15440kB active_file:5532kB inactive_file:132948kB unevictable:3536kB writepending:1580kB zspages:4012kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:51444kB local_pcp:7836kB free_cma:0kB [ 328.630824][T10959] udc usbip-vudc.0: soft-connect without a gadget driver [ 328.631640][T10951] lowmem_reserve[]: 0 0 0 0 0 [ 328.636403][T10951] Node 0 DMA: 36*4kB (UM) 24*8kB (U) 4*16kB (UM) 6*32kB (UM) 5*64kB (UM) 1*128kB (M) 0*256kB 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 2064kB [ 328.648958][T10951] Node 0 DMA32: 10*4kB (EH) 30*8kB (EH) 7*16kB (UH) 39*32kB (UEH) 62*64kB (UMEH) 27*128kB (UMH) 12*256kB (UMEH) 5*512kB (UMEH) 1*1024kB (M) 0*2048kB 0*4096kB = 15720kB [ 328.654646][T10951] Node 1 DMA32: 1892*4kB (UME) 451*8kB (UME) 248*16kB (UME) 253*32kB (UME) 70*64kB (UME) 83*128kB (UME) 84*256kB (UME) 18*512kB (UME) 20*1024kB (UM) 1*2048kB (U) 10*4096kB (U) = 132552kB [ 328.660380][T10951] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 328.663549][T10951] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 328.666448][T10951] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 328.669482][T10951] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 328.672356][T10951] 41217 total pagecache pages [ 328.674103][T10951] 782 pages in swap cache [ 328.675775][T10951] Free swap = 68052kB [ 328.676087][T10961] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1370'. [ 328.677099][T10951] Total swap = 124996kB [ 328.681203][T10951] 524155 pages RAM [ 328.685410][T10951] 0 pages HighMem/MovableOnly [ 328.686937][T10951] 211532 pages reserved [ 328.689430][T10951] 0 pages cma reserved [ 329.352981][ T5748] Bluetooth: hci0: command 0x0c1a tx timeout [ 329.737630][T10979] batadv0: entered promiscuous mode [ 330.594370][T10989] udc usbip-vudc.0: soft-connect without a gadget driver [ 330.630940][T10994] syzkaller0: entered promiscuous mode [ 330.646518][T10994] syzkaller0: entered allmulticast mode [ 330.706316][T10999] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1382'. [ 330.709159][T10999] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1382'. [ 330.711846][T10999] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1382'. [ 330.727391][T10997] tipc: Enabled bearer , priority 10 [ 330.746747][T10995] tipc: Resetting bearer [ 330.774897][T10995] tipc: Disabling bearer [ 331.095104][T11016] siw: device registration error -23 [ 331.101726][T11016] smc: removing ib device syz2 [ 331.135515][T11016] smbdirect: ib_dev[syz2] removed [ 331.753270][ T5892] usb 38-1: device descriptor read/8, error -110 [ 331.822889][T11026] FAULT_INJECTION: forcing a failure. [ 331.822889][T11026] name failslab, interval 1, probability 0, space 0, times 0 [ 331.827013][T11026] CPU: 0 UID: 0 PID: 11026 Comm: syz.1.1389 Tainted: G S L syzkaller #0 PREEMPT(full) [ 331.827033][T11026] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 331.827038][T11026] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 331.827044][T11026] Call Trace: [ 331.827049][T11026] [ 331.827054][T11026] dump_stack_lvl+0x100/0x190 [ 331.827073][T11026] should_fail_ex.cold+0x5/0xa [ 331.827085][T11026] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 331.827100][T11026] should_failslab+0xc2/0x120 [ 331.827117][T11026] kmem_cache_alloc_noprof+0x91/0x6a0 [ 331.827132][T11026] ? skb_clone+0x190/0x400 [ 331.827151][T11026] skb_clone+0x190/0x400 [ 331.827167][T11026] netlink_deliver_tap+0xaed/0xcc0 [ 331.827183][T11026] netlink_unicast+0x6a5/0x850 [ 331.827198][T11026] ? __pfx_netlink_unicast+0x10/0x10 [ 331.827215][T11026] netlink_ack+0x655/0xb80 [ 331.827243][T11026] netlink_rcv_skb+0x333/0x420 [ 331.827258][T11026] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 331.827277][T11026] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 331.827296][T11026] ? ns_capable+0xd2/0xf0 [ 331.827310][T11026] nfnetlink_rcv+0x1b3/0x440 [ 331.827327][T11026] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 331.827342][T11026] ? netlink_deliver_tap+0x1ae/0xcc0 [ 331.827357][T11026] netlink_unicast+0x585/0x850 [ 331.827371][T11026] ? __pfx_netlink_unicast+0x10/0x10 [ 331.827388][T11026] netlink_sendmsg+0x8b0/0xda0 [ 331.827403][T11026] ? __pfx_netlink_sendmsg+0x10/0x10 [ 331.827418][T11026] ? apparmor_socket_sendmsg+0x15b/0x270 [ 331.827434][T11026] ____sys_sendmsg+0xa4d/0xbe0 [ 331.827445][T11026] ? __pfx_netlink_sendmsg+0x10/0x10 [ 331.827459][T11026] ? __pfx_____sys_sendmsg+0x10/0x10 [ 331.827473][T11026] ? run_posix_cpu_timers+0x16f/0x820 [ 331.827496][T11026] ___sys_sendmsg+0x190/0x1e0 [ 331.827509][T11026] ? __pfx____sys_sendmsg+0x10/0x10 [ 331.827529][T11026] ? find_held_lock+0x2b/0x80 [ 331.827552][T11026] __sys_sendmsg+0x160/0x210 [ 331.827572][T11026] ? __pfx___sys_sendmsg+0x10/0x10 [ 331.827596][T11026] __do_fast_syscall_32+0xe7/0x970 [ 331.827615][T11026] do_fast_syscall_32+0x32/0x70 [ 331.827631][T11026] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 331.827646][T11026] RIP: 0023:0xf6feefec [ 331.827661][T11026] Code: Unable to access opcode bytes at 0xf6feefc2. [ 331.827666][T11026] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 331.827689][T11026] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 331.827696][T11026] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 331.827702][T11026] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 331.827708][T11026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 331.827714][T11026] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 331.827728][T11026] [ 331.949693][T11028] Invalid logical block size (16777216) [ 332.010526][T11032] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1392'. [ 332.014023][T11032] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1392'. [ 332.016928][T11032] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1392'. [ 332.075713][ T5748] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 332.175734][ T5892] usb usb38-port1: attempt power cycle [ 332.743213][ T9] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 332.793198][ T10] usb 40-1: device descriptor read/8, error -110 [ 332.894209][ T9] usb 5-1: config 0 has an invalid interface number: 205 but max is 0 [ 332.896968][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 332.904606][ T9] usb 5-1: config 0 has no interface number 0 [ 332.906585][ T9] usb 5-1: config 0 interface 205 has no altsetting 0 [ 332.920373][ T9] usb 5-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 332.931108][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.945678][ T9] usb 5-1: Product: syz [ 332.947033][ T9] usb 5-1: Manufacturer: syz [ 332.957589][ T9] usb 5-1: SerialNumber: syz [ 332.970801][ T9] usb 5-1: config 0 descriptor?? [ 332.985747][ T9] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 332.999106][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 333.139722][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 333.143185][ T9] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 333.148176][ T9] usb 5-1: media controller created [ 333.151192][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 333.183739][ T10] usb usb40-port1: attempt power cycle [ 333.188818][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 333.200390][ T9] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 333.215551][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb5/5-1/input/input35 [ 333.226569][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 333.240094][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 333.262894][ T9] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 333.323518][ T5892] usb usb38-port1: unable to enumerate USB device [ 333.401231][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 333.403820][ T9] dvb-usb: error while querying for an remote control event. [ 333.562922][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 333.570455][ T9] dvb-usb: error while querying for an remote control event. [ 333.732849][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 333.734769][ T9] dvb-usb: error while querying for an remote control event. [ 333.744148][ T10] usb usb40-port1: unable to enumerate USB device [ 333.903645][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 333.907853][ T10] dvb-usb: error while querying for an remote control event. [ 333.926746][T11058] FAULT_INJECTION: forcing a failure. [ 333.926746][T11058] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 333.930880][T11058] CPU: 2 UID: 0 PID: 11058 Comm: syz.3.1398 Tainted: G S L syzkaller #0 PREEMPT(full) [ 333.930899][T11058] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 333.930903][T11058] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 333.930910][T11058] Call Trace: [ 333.930914][T11058] [ 333.930919][T11058] dump_stack_lvl+0x100/0x190 [ 333.930940][T11058] should_fail_ex.cold+0x5/0xa [ 333.930954][T11058] _copy_from_user+0x2e/0xd0 [ 333.930973][T11058] snd_ctl_elem_add_compat+0x72/0x3e0 [ 333.931019][T11058] snd_ctl_ioctl_compat+0x98d/0xbb0 [ 333.931037][T11058] ? __pfx_snd_ctl_ioctl_compat+0x10/0x10 [ 333.931054][T11058] ? find_held_lock+0x2b/0x80 [ 333.931069][T11058] ? __fget_files+0x215/0x3d0 [ 333.931079][T11058] ? hook_file_ioctl_common+0x140/0x440 [ 333.931098][T11058] ? __fget_files+0x21f/0x3d0 [ 333.931110][T11058] ? __pfx_snd_ctl_ioctl_compat+0x10/0x10 [ 333.931128][T11058] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 333.931147][T11058] __do_fast_syscall_32+0xe7/0x970 [ 333.931164][T11058] ? lockdep_hardirqs_on+0x78/0x100 [ 333.931180][T11058] do_fast_syscall_32+0x32/0x70 [ 333.931196][T11058] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 333.931211][T11058] RIP: 0023:0xf704efec [ 333.931225][T11058] Code: Unable to access opcode bytes at 0xf704efc2. [ 333.931230][T11058] RSP: 002b:00000000f543d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 333.931242][T11058] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c1105517 [ 333.931249][T11058] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 333.931255][T11058] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 333.931262][T11058] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 333.931268][T11058] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 333.931282][T11058] [ 334.056502][T11067] FAULT_INJECTION: forcing a failure. [ 334.056502][T11067] name failslab, interval 1, probability 0, space 0, times 0 [ 334.063096][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 334.067237][ T9] dvb-usb: error while querying for an remote control event. [ 334.069776][T11067] CPU: 0 UID: 0 PID: 11067 Comm: syz.4.1399 Tainted: G S L syzkaller #0 PREEMPT(full) [ 334.069795][T11067] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 334.069799][T11067] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 334.069806][T11067] Call Trace: [ 334.069810][T11067] [ 334.069814][T11067] dump_stack_lvl+0x100/0x190 [ 334.069833][T11067] should_fail_ex.cold+0x5/0xa [ 334.069846][T11067] should_failslab+0xc2/0x120 [ 334.069863][T11067] kmem_cache_alloc_noprof+0x91/0x6a0 [ 334.069878][T11067] ? do_getname+0x35/0x390 [ 334.069896][T11067] do_getname+0x35/0x390 [ 334.069911][T11067] __ia32_sys_mkdirat+0x77/0xc0 [ 334.069924][T11067] __do_fast_syscall_32+0xe7/0x970 [ 334.069941][T11067] ? lockdep_hardirqs_on+0x78/0x100 [ 334.069957][T11067] do_fast_syscall_32+0x32/0x70 [ 334.069973][T11067] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 334.069987][T11067] RIP: 0023:0xf70aefec [ 334.070002][T11067] Code: Unable to access opcode bytes at 0xf70aefc2. [ 334.070007][T11067] RSP: 002b:00000000f547c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000128 [ 334.070018][T11067] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000800001c0 [ 334.070025][T11067] RDX: 00000000000001ff RSI: 0000000000000000 RDI: 0000000000000000 [ 334.070031][T11067] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 334.070038][T11067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 334.070045][T11067] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 334.070058][T11067] [ 334.075729][T11069] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1401'. [ 334.082276][T11067] devpts: Bad value for 'gid' [ 334.085012][T11069] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1401'. [ 334.085570][T11067] devpts: Bad value for 'gid' [ 334.087076][T11069] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1401'. [ 334.180020][T11076] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1402'. [ 334.181724][ T5748] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 334.233938][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 334.235819][ T9] dvb-usb: error while querying for an remote control event. [ 334.402912][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 334.404785][ T10] dvb-usb: error while querying for an remote control event. [ 334.512631][T11083] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1403'. [ 334.734539][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 334.738331][ T10] dvb-usb: error while querying for an remote control event. [ 334.904126][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 334.906009][ T10] dvb-usb: error while querying for an remote control event. [ 335.082251][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 335.085166][ T10] dvb-usb: error while querying for an remote control event. [ 335.108271][ T10] usb 5-1: USB disconnect, device number 26 [ 335.188863][T11091] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1407'. [ 335.192903][T11091] FAULT_INJECTION: forcing a failure. [ 335.192903][T11091] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 335.198592][T11091] CPU: 3 UID: 0 PID: 11091 Comm: syz.3.1407 Tainted: G S L syzkaller #0 PREEMPT(full) [ 335.198612][T11091] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 335.198618][T11091] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 335.198624][T11091] Call Trace: [ 335.198629][T11091] [ 335.198634][T11091] dump_stack_lvl+0x100/0x190 [ 335.198653][T11091] should_fail_ex.cold+0x5/0xa [ 335.198666][T11091] _copy_from_iter+0x1f4/0x1690 [ 335.198702][T11091] ? __pfx__copy_from_iter+0x10/0x10 [ 335.198719][T11091] ? kasan_save_track+0x14/0x30 [ 335.198734][T11091] ? __kasan_kmalloc+0xaa/0xb0 [ 335.198748][T11091] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 335.198760][T11091] ? configfs_write_iter+0x388/0x4e0 [ 335.198776][T11091] configfs_write_iter+0xb3/0x4e0 [ 335.198789][T11091] vfs_write+0x6ac/0x1050 [ 335.198801][T11091] ? __pfx_configfs_write_iter+0x10/0x10 [ 335.198813][T11091] ? __pfx_vfs_write+0x10/0x10 [ 335.198822][T11091] ? find_held_lock+0x2b/0x80 [ 335.198847][T11091] ksys_write+0x12a/0x250 [ 335.198857][T11091] ? __pfx_ksys_write+0x10/0x10 [ 335.198867][T11091] ? ksys_write+0x1ac/0x250 [ 335.198876][T11091] ? __pfx_ksys_write+0x10/0x10 [ 335.198890][T11091] __do_fast_syscall_32+0xe7/0x970 [ 335.198906][T11091] ? lockdep_hardirqs_on+0x78/0x100 [ 335.198922][T11091] do_fast_syscall_32+0x32/0x70 [ 335.198938][T11091] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 335.198953][T11091] RIP: 0023:0xf704efec [ 335.198968][T11091] Code: Unable to access opcode bytes at 0xf704efc2. [ 335.198973][T11091] RSP: 002b:00000000f53fb50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 335.198985][T11091] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800004c0 [ 335.198992][T11091] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 335.198998][T11091] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 335.199004][T11091] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 335.199010][T11091] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 335.199025][T11091] [ 335.563391][ T10] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 335.931004][T11103] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1411'. [ 337.040123][T11140] __nla_validate_parse: 3 callbacks suppressed [ 337.040135][T11140] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1423'. [ 337.047065][T11141] Bluetooth: MGMT ver 1.23 [ 338.066648][T11163] FAULT_INJECTION: forcing a failure. [ 338.066648][T11163] name failslab, interval 1, probability 0, space 0, times 0 [ 338.075977][T11163] CPU: 2 UID: 0 PID: 11163 Comm: syz.0.1430 Tainted: G S L syzkaller #0 PREEMPT(full) [ 338.075998][T11163] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 338.076003][T11163] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 338.076010][T11163] Call Trace: [ 338.076014][T11163] [ 338.076019][T11163] dump_stack_lvl+0x100/0x190 [ 338.076037][T11163] should_fail_ex.cold+0x5/0xa [ 338.076048][T11163] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 338.076068][T11163] should_failslab+0xc2/0x120 [ 338.076084][T11163] kmem_cache_alloc_noprof+0x91/0x6a0 [ 338.076100][T11163] ? skb_clone+0x190/0x400 [ 338.076123][T11163] skb_clone+0x190/0x400 [ 338.076140][T11163] netlink_deliver_tap+0xaed/0xcc0 [ 338.076157][T11163] netlink_unicast+0x62b/0x850 [ 338.076172][T11163] ? __pfx_netlink_unicast+0x10/0x10 [ 338.076190][T11163] netlink_sendmsg+0x8b0/0xda0 [ 338.076206][T11163] ? __pfx_netlink_sendmsg+0x10/0x10 [ 338.076221][T11163] ? apparmor_socket_sendmsg+0x15b/0x270 [ 338.076237][T11163] ____sys_sendmsg+0xa4d/0xbe0 [ 338.076249][T11163] ? __pfx_netlink_sendmsg+0x10/0x10 [ 338.076264][T11163] ? __pfx_____sys_sendmsg+0x10/0x10 [ 338.076279][T11163] ? _kstrtoull+0x13c/0x1f0 [ 338.076293][T11163] ? __pfx__kstrtoull+0x10/0x10 [ 338.076308][T11163] ___sys_sendmsg+0x190/0x1e0 [ 338.076322][T11163] ? __pfx____sys_sendmsg+0x10/0x10 [ 338.076334][T11163] ? __lock_acquire+0x49f/0x1a40 [ 338.076370][T11163] __sys_sendmmsg+0x309/0x440 [ 338.076388][T11163] ? __pfx___sys_sendmmsg+0x10/0x10 [ 338.076405][T11163] ? find_held_lock+0x2b/0x80 [ 338.076423][T11163] ? __mutex_unlock_slowpath+0x35d/0x930 [ 338.076448][T11163] ? fput+0x79/0x100 [ 338.076462][T11163] ? ksys_write+0x1ac/0x250 [ 338.076475][T11163] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 338.076488][T11163] ? lockdep_hardirqs_on+0x78/0x100 [ 338.076503][T11163] __do_fast_syscall_32+0xe7/0x970 [ 338.076519][T11163] ? lockdep_hardirqs_on+0x78/0x100 [ 338.076534][T11163] do_fast_syscall_32+0x32/0x70 [ 338.076550][T11163] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 338.076565][T11163] RIP: 0023:0xf704efec [ 338.076579][T11163] Code: Unable to access opcode bytes at 0xf704efc2. [ 338.076584][T11163] RSP: 002b:00000000f543d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 338.076595][T11163] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800002c0 [ 338.076602][T11163] RDX: 000000000000009f RSI: 0000000000000000 RDI: 0000000000000000 [ 338.076608][T11163] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 338.076615][T11163] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 338.076621][T11163] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 338.076635][T11163] [ 338.083235][T11161] syzkaller0: entered promiscuous mode [ 338.173208][T11165] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1429'. [ 338.212894][T11161] syzkaller0: entered allmulticast mode [ 338.240994][T11166] netlink: 'syz.4.1431': attribute type 1 has an invalid length. [ 338.261630][T11166] 8021q: adding VLAN 0 to HW filter on device bond1 [ 338.294729][T11166] 8021q: adding VLAN 0 to HW filter on device bond1 [ 338.296970][T11166] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 338.303782][T11166] bond1: (slave gre1): Error -95 calling set_mac_address [ 338.306692][T11171] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1433'. [ 338.338580][T11172] gretap1: entered promiscuous mode [ 338.360106][T11172] bond1: (slave gretap1): making interface the new active one [ 338.374470][T11172] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 338.466148][T11166] 8021q: adding VLAN 0 to HW filter on device bond2 [ 338.476911][T11166] bond1: (slave bond2): Enslaving as an active interface with a down link [ 338.753084][ T5892] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 338.902843][ T5892] usb 8-1: Using ep0 maxpacket: 32 [ 338.910220][ T5892] usb 8-1: New USB device found, idVendor=0582, idProduct=0075, bcdDevice= 0.40 [ 338.914461][ T5892] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.917859][ T5892] usb 8-1: Product: syz [ 338.919207][ T5892] usb 8-1: Manufacturer: syz [ 338.921850][ T5892] usb 8-1: SerialNumber: syz [ 339.338494][T11197] pim6reg: entered allmulticast mode [ 339.493159][T11183] pim6reg: left allmulticast mode [ 339.789535][T11204] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1442'. [ 341.213963][ T10] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 341.382829][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 341.386022][ T10] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 341.391832][ T10] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 341.398319][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 341.405213][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 341.411651][ T10] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 341.420354][ T10] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 341.427680][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.584587][ T5892] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 341.591156][ T5892] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 341.615805][ T5892] usb 8-1: USB disconnect, device number 25 [ 341.641030][ T10] usb 6-1: usb_control_msg returned -32 [ 341.651624][ T10] usbtmc 6-1:16.0: can't read capabilities [ 341.833997][T11233] FAULT_INJECTION: forcing a failure. [ 341.833997][T11233] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 341.852080][T11233] CPU: 3 UID: 0 PID: 11233 Comm: syz.4.1454 Tainted: G S L syzkaller #0 PREEMPT(full) [ 341.852116][T11233] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 341.852124][T11233] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 341.852134][T11233] Call Trace: [ 341.852141][T11233] [ 341.852149][T11233] dump_stack_lvl+0x100/0x190 [ 341.852176][T11233] should_fail_ex.cold+0x5/0xa [ 341.852199][T11233] _copy_from_iter+0x1f4/0x1690 [ 341.852232][T11233] ? __asan_memset+0x23/0x50 [ 341.852255][T11233] ? __pfx__copy_from_iter+0x10/0x10 [ 341.852283][T11233] ? __pfx___alloc_skb+0x10/0x10 [ 341.852320][T11233] netlink_sendmsg+0x808/0xda0 [ 341.852349][T11233] ? __pfx_netlink_sendmsg+0x10/0x10 [ 341.852374][T11233] ? apparmor_socket_sendmsg+0x15b/0x270 [ 341.852398][T11233] ____sys_sendmsg+0xa4d/0xbe0 [ 341.852413][T11233] ? __pfx_netlink_sendmsg+0x10/0x10 [ 341.852431][T11233] ? __pfx_____sys_sendmsg+0x10/0x10 [ 341.852460][T11233] ___sys_sendmsg+0x190/0x1e0 [ 341.852481][T11233] ? __pfx____sys_sendmsg+0x10/0x10 [ 341.852516][T11233] ? find_held_lock+0x2b/0x80 [ 341.852581][T11233] __sys_sendmsg+0x160/0x210 [ 341.852610][T11233] ? __pfx___sys_sendmsg+0x10/0x10 [ 341.852638][T11233] ? __pfx_ksys_write+0x10/0x10 [ 341.852660][T11233] __do_fast_syscall_32+0xe7/0x970 [ 341.852685][T11233] ? lockdep_hardirqs_on+0x78/0x100 [ 341.852710][T11233] do_fast_syscall_32+0x32/0x70 [ 341.852735][T11233] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 341.852757][T11233] RIP: 0023:0xf70aefec [ 341.852779][T11233] Code: Unable to access opcode bytes at 0xf70aefc2. [ 341.852787][T11233] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 341.852805][T11233] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 341.852816][T11233] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 341.852827][T11233] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 341.852836][T11233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 341.852847][T11233] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 341.852870][T11233] [ 342.154547][T11244] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1457'. [ 342.360038][T11251] usbtmc 6-1:16.0: usb_control_msg returned -32 [ 342.570256][ T34] usb 6-1: USB disconnect, device number 16 [ 343.344974][T11266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1463'. [ 343.455934][T11271] dlm: no local IP address has been set [ 343.460877][T11271] dlm: cannot start dlm midcomms -107 [ 343.476721][T11271] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.703305][ T10] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 343.852872][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 343.857190][ T10] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 343.862950][ T10] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 343.867760][ T10] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 343.872855][ T10] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 343.877809][ T10] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 343.884168][ T10] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 343.890727][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.100117][ T10] usb 9-1: GET_CAPABILITIES returned 0 [ 344.101907][ T10] usbtmc 9-1:16.0: can't read capabilities [ 344.163609][ T42] kauditd_printk_skb: 5 callbacks suppressed [ 344.163620][ T42] audit: type=1804 audit(1785793405.758:277): pid=11285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1471" name="bus" dev="ramfs" ino=35998 res=1 errno=0 [ 344.182462][ T42] audit: type=1804 audit(1785793405.768:278): pid=11285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1471" name="bus" dev="ramfs" ino=35998 res=1 errno=0 [ 344.199163][T11287] loop8: detected capacity change from 0 to 8 [ 344.213866][T11287] loop8: [CUMANA/ADFS] p1 [ADFS] p1 [ 344.215583][T11287] loop8: partition table partially beyond EOD, truncated [ 344.219259][T11287] loop8: p1 size 2645487272 extends beyond EOD, truncated [ 344.255596][T10070] udevd[10070]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 344.778110][T11293] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 344.784445][T11293] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 344.790130][T11293] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 344.795721][T11293] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 344.867340][T11293] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 344.872181][T11293] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 344.877904][T11293] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 344.882562][T11293] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 344.888179][T11293] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 344.893238][T11293] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 345.088450][ T5850] usb 9-1: USB disconnect, device number 3 [ 345.834232][T11307] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1477'. [ 345.839505][T11307] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1477'. [ 345.845458][T11307] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1477'. [ 346.205647][T11322] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.1482'. [ 346.388163][T11329] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1483'. [ 346.391112][T11329] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1483'. [ 346.395358][T11329] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1483'. [ 346.434377][ T5748] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 346.510196][T11335] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1485'. [ 346.602636][T11338] tipc: Enabled bearer , priority 0 [ 346.605784][T11339] tipc: Enabling of bearer rejected, already enabled [ 346.831417][T11346] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 346.833517][T11346] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 346.840211][T11346] vhci_hcd vhci_hcd.0: Device attached [ 346.850478][T11347] vhci_hcd: connection closed [ 346.854613][ T5792] vhci_hcd vhci_hcd.1: stop threads [ 346.865885][ T5792] vhci_hcd vhci_hcd.1: release socket [ 346.867856][ T5792] vhci_hcd vhci_hcd.1: disconnect device [ 347.011713][T11352] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 347.014416][T11352] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 347.282355][T11361] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1493'. [ 347.289093][T11361] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1493'. [ 347.291928][T11361] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1493'. [ 347.360540][ T5753] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 347.617790][ T34] tipc: Node number set to 1819847590 [ 347.687931][T11374] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 348.579792][T11401] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1505'. [ 348.589191][T11401] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1505'. [ 348.597849][T11401] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1505'. [ 348.741479][ T5753] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 349.489974][T11408] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1507'. [ 349.505254][T11409] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1507'. [ 349.530465][T11408] af_packet: tpacket_rcv: packet too big, clamped from 64521 to 3956. macoff=92 [ 350.313102][ T5748] Bluetooth: hci0: command 0x0c1a tx timeout [ 350.699372][T11442] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1517'. [ 350.728177][T11442] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1517'. [ 350.760982][ T5748] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 351.067784][T11454] FAULT_INJECTION: forcing a failure. [ 351.067784][T11454] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 351.095767][T11454] CPU: 3 UID: 0 PID: 11454 Comm: syz.4.1518 Tainted: G S L syzkaller #0 PREEMPT(full) [ 351.095789][T11454] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 351.095793][T11454] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 351.095800][T11454] Call Trace: [ 351.095815][T11454] [ 351.095822][T11454] dump_stack_lvl+0x100/0x190 [ 351.095844][T11454] should_fail_ex.cold+0x5/0xa [ 351.095858][T11454] strncpy_from_user+0x3b/0x2d0 [ 351.095877][T11454] do_getname+0x78/0x390 [ 351.095894][T11454] __ia32_sys_rmdir+0x35/0x60 [ 351.095907][T11454] __do_fast_syscall_32+0xe7/0x970 [ 351.095924][T11454] ? lockdep_hardirqs_on+0x78/0x100 [ 351.095939][T11454] do_fast_syscall_32+0x32/0x70 [ 351.095956][T11454] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 351.095971][T11454] RIP: 0023:0xf70aefec [ 351.095985][T11454] Code: Unable to access opcode bytes at 0xf70aefc2. [ 351.095990][T11454] RSP: 002b:00000000f545b50c EFLAGS: 00000292 ORIG_RAX: 0000000000000028 [ 351.096001][T11454] RAX: ffffffffffffffda RBX: 0000000080000200 RCX: 0000000000000000 [ 351.096008][T11454] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 351.096015][T11454] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 351.096021][T11454] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 351.096027][T11454] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 351.096041][T11454] [ 351.719587][T11459] netlink: 'syz.4.1523': attribute type 12 has an invalid length. [ 352.059327][ T13] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 352.073219][ T5792] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 352.073248][ T5792] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 352.073267][ T5792] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 352.145801][ T5753] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 352.148896][ T5753] CPU: 0 UID: 0 PID: 5753 Comm: kworker/u34:5 Tainted: G S L syzkaller #0 PREEMPT(full) [ 352.148917][ T5753] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 352.148922][ T5753] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 352.148931][ T5753] Workqueue: hci2 hci_rx_work [ 352.148952][ T5753] Call Trace: [ 352.148957][ T5753] [ 352.148962][ T5753] dump_stack_lvl+0x100/0x190 [ 352.148979][ T5753] sysfs_warn_dup.cold+0x1c/0x28 [ 352.148997][ T5753] sysfs_create_dir_ns+0x24b/0x2b0 [ 352.149017][ T5753] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 352.149032][ T5753] ? find_held_lock+0x2b/0x80 [ 352.149053][ T5753] ? kobject_add_internal+0x25f/0x930 [ 352.149065][ T5753] ? kobject_add_internal+0x25f/0x930 [ 352.149077][ T5753] ? do_raw_spin_unlock+0x145/0x1e0 [ 352.149092][ T5753] kobject_add_internal+0x2c8/0x930 [ 352.149106][ T5753] kobject_add+0x16a/0x1e0 [ 352.149118][ T5753] ? __pfx_kobject_add+0x10/0x10 [ 352.149128][ T5753] ? class_to_subsys+0x10f/0x150 [ 352.149144][ T5753] ? kobject_put+0xb9/0x640 [ 352.149160][ T5753] ? _raw_spin_unlock+0x28/0x50 [ 352.149175][ T5753] device_add+0x294/0x1970 [ 352.149187][ T5753] ? __pfx_dev_set_name+0x10/0x10 [ 352.149200][ T5753] ? __pfx_device_add+0x10/0x10 [ 352.149211][ T5753] ? mgmt_send_event_skb+0x2fb/0x460 [ 352.149230][ T5753] hci_conn_add_sysfs+0x1a3/0x260 [ 352.149246][ T5753] le_conn_complete_evt+0x11eb/0x1f60 [ 352.149264][ T5753] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 352.149277][ T5753] ? hci_event_packet+0x186/0xcd0 [ 352.149294][ T5753] hci_le_conn_complete_evt+0x23c/0x3a0 [ 352.149308][ T5753] ? skb_pull_data+0x15f/0x1e0 [ 352.149322][ T5753] hci_le_meta_evt+0x34a/0x5f0 [ 352.149337][ T5753] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 352.149353][ T5753] hci_event_packet+0x51c/0xcd0 [ 352.149367][ T5753] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 352.149382][ T5753] ? __pfx_hci_event_packet+0x10/0x10 [ 352.149396][ T5753] ? kcov_remote_start+0x384/0x670 [ 352.149412][ T5753] ? lockdep_hardirqs_on+0x78/0x100 [ 352.149430][ T5753] hci_rx_work+0x451/0xfc0 [ 352.149447][ T5753] process_one_work+0xa23/0x1940 [ 352.149470][ T5753] ? __pfx_process_one_work+0x10/0x10 [ 352.149490][ T5753] ? __pfx_hci_rx_work+0x10/0x10 [ 352.149504][ T5753] worker_thread+0x5ef/0xe50 [ 352.149525][ T5753] ? kthread+0x13a/0x450 [ 352.149539][ T5753] ? __pfx_worker_thread+0x10/0x10 [ 352.149554][ T5753] kthread+0x370/0x450 [ 352.149568][ T5753] ? __pfx_kthread+0x10/0x10 [ 352.149583][ T5753] ret_from_fork+0x72b/0xd50 [ 352.149599][ T5753] ? __pfx_ret_from_fork+0x10/0x10 [ 352.149613][ T5753] ? native_load_gs_index+0x1e/0xc0 [ 352.149630][ T5753] ? __switch_to+0x800/0x10f0 [ 352.149647][ T5753] ? __pfx_kthread+0x10/0x10 [ 352.149663][ T5753] ret_from_fork_asm+0x1a/0x30 [ 352.149713][ T5753] [ 352.149730][ T5753] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 352.248935][ T5753] Bluetooth: hci2: failed to register connection device [ 352.382341][T11475] __nla_validate_parse: 4 callbacks suppressed [ 352.382352][T11475] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1527'. [ 352.394959][T11475] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1527'. [ 352.398766][T11475] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1527'. [ 352.418177][ T5753] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 352.604888][T11485] FAULT_INJECTION: forcing a failure. [ 352.604888][T11485] name failslab, interval 1, probability 0, space 0, times 0 [ 352.615293][T11485] CPU: 0 UID: 0 PID: 11485 Comm: syz.4.1531 Tainted: G S L syzkaller #0 PREEMPT(full) [ 352.615314][T11485] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 352.615319][T11485] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 352.615326][T11485] Call Trace: [ 352.615331][T11485] [ 352.615336][T11485] dump_stack_lvl+0x100/0x190 [ 352.615356][T11485] should_fail_ex.cold+0x5/0xa [ 352.615370][T11485] should_failslab+0xc2/0x120 [ 352.615387][T11485] __kmalloc_noprof+0xfc/0x820 [ 352.615401][T11485] ? rcu_is_watching+0x12/0xc0 [ 352.615415][T11485] ? tomoyo_encode2+0xfb/0x3c0 [ 352.615435][T11485] tomoyo_encode2+0xfb/0x3c0 [ 352.615454][T11485] tomoyo_encode+0x29/0x50 [ 352.615470][T11485] tomoyo_realpath_from_path+0x18c/0x690 [ 352.615490][T11485] tomoyo_path_perm+0x276/0x460 [ 352.615505][T11485] ? tomoyo_path_perm+0x262/0x460 [ 352.615520][T11485] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 352.615535][T11485] ? mntput+0x70/0xa0 [ 352.615568][T11485] ? __d_lookup+0x25c/0x4a0 [ 352.615589][T11485] tomoyo_path_rmdir+0x91/0xe0 [ 352.615600][T11485] ? __pfx_tomoyo_path_rmdir+0x10/0x10 [ 352.615612][T11485] ? lookup_dcache+0x66/0x170 [ 352.615628][T11485] security_path_rmdir+0x145/0x2b0 [ 352.615642][T11485] filename_rmdir+0x29d/0x5c0 [ 352.615656][T11485] ? __pfx_filename_rmdir+0x10/0x10 [ 352.615674][T11485] ? do_getname+0x191/0x390 [ 352.615689][T11485] __ia32_sys_rmdir+0x45/0x60 [ 352.615702][T11485] __do_fast_syscall_32+0xe7/0x970 [ 352.615718][T11485] ? lockdep_hardirqs_on+0x78/0x100 [ 352.615735][T11485] do_fast_syscall_32+0x32/0x70 [ 352.615751][T11485] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 352.615766][T11485] RIP: 0023:0xf70aefec [ 352.615780][T11485] Code: Unable to access opcode bytes at 0xf70aefc2. [ 352.615785][T11485] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000028 [ 352.615797][T11485] RAX: ffffffffffffffda RBX: 0000000080000200 RCX: 0000000000000000 [ 352.615804][T11485] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 352.615810][T11485] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 352.615817][T11485] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 352.615823][T11485] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 352.615837][T11485] [ 352.615849][T11485] ERROR: Out of memory at tomoyo_realpath_from_path. [ 353.089738][ T9] kernel read not supported for file /vcs (pid: 9 comm: kworker/0:0) [ 353.095451][T11500] netlink: 252 bytes leftover after parsing attributes in process `syz.3.1536'. [ 353.144360][T11504] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1538'. [ 353.147634][T11504] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1538'. [ 353.150775][T11504] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1538'. [ 353.157892][ T5748] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 353.913125][ T40] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 353.974855][T11523] netlink: 'syz.3.1541': attribute type 12 has an invalid length. [ 354.033240][T11522] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 354.035920][T11522] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 354.048400][T11522] vhci_hcd vhci_hcd.0: Device attached [ 354.102882][ T9] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 354.163389][ T40] usb 9-1: Using ep0 maxpacket: 32 [ 354.174872][ T40] usb 9-1: New USB device found, idVendor=0582, idProduct=0075, bcdDevice= 0.40 [ 354.177564][T11528] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.1544' sets config #1024 [ 354.178079][ T40] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.184732][T11527] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 354.185999][T11528] netlink: 'syz.1.1544': attribute type 10 has an invalid length. [ 354.186900][ T40] usb 9-1: Product: syz [ 354.189589][T11528] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.190826][ T40] usb 9-1: Manufacturer: syz [ 354.193274][T11528] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.197986][ T0] Disabled fast string operations [ 354.198861][ T40] usb 9-1: SerialNumber: syz [ 354.200178][ T0] ------------[ cut here ]------------ [ 354.203930][ T0] alternatives_patched [ 354.203941][ T0] WARNING: arch/x86/kernel/cpu/cpuid-deps.c:127 at do_clear_cpu_cap+0x356/0x440, CPU#1: swapper/1/0 [ 354.210051][ T0] Modules linked in: [ 354.211787][ T0] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G S L syzkaller #0 PREEMPT(full) [ 354.214305][T11528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1544'. [ 354.216199][ T0] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 354.216210][ T0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 354.216221][ T0] RIP: 0010:do_clear_cpu_cap+0x356/0x440 [ 354.219143][T11528] bridge_slave_1: left allmulticast mode [ 354.221642][ T0] Code: 2a 38 d0 7c 08 84 d2 0f 85 ea 00 00 00 8b 2d 31 5d 72 0f 31 ff 89 ee e8 48 6b 59 00 85 ed 0f 84 7d fd ff ff e8 cb 70 59 00 90 <0f> 0b 90 e9 6f fd ff ff 48 89 54 24 18 89 14 24 e8 b5 70 59 00 8b [ 354.221687][ T0] RSP: 0000:ffffc9000046fc98 EFLAGS: 00010093 [ 354.225440][T11528] bridge_slave_1: left promiscuous mode [ 354.227699][ T0] RAX: 0000000000000000 RBX: 0000000000000070 RCX: ffffffff81b03d68 [ 354.227717][ T0] RDX: ffff88801c73a540 RSI: ffffffff81b03d75 RDI: ffff88801c73a540 [ 354.227729][ T0] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 354.227740][ T0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000070 [ 354.227751][ T0] R13: 0000000000000601 R14: ffffc9000046fce0 R15: ffffc9000046fd80 [ 354.227763][ T0] FS: 0000000000000000(0000) GS:ffff888096cdf000(0000) knlGS:0000000000000000 [ 354.230231][T11528] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.238254][ T0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 354.238274][ T0] CR2: 0000000000000000 CR3: 000000000e994000 CR4: 0000000000350eb0 [ 354.238286][ T0] Call Trace: [ 354.238294][ T0] [ 354.238303][ T0] ? __pfx_do_clear_cpu_cap+0x10/0x10 [ 354.238330][ T0] ? _printk+0xcf/0x110 [ 354.252871][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 354.253404][ T0] ? __pfx_cpu_parse_topology+0x10/0x10 [ 354.260171][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0075, bcdDevice= 0.40 [ 354.263049][ T0] ? early_init_intel.cold+0x129/0x1eb [ 354.263078][ T0] early_init_intel.cold+0x13f/0x1eb [ 354.263100][ T0] init_intel+0x1c/0x7b0 [ 354.263118][ T0] identify_cpu+0x8b0/0x1c30 [ 354.263131][ T0] ? __pfx_cpu_init+0x10/0x10 [ 354.266533][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.268726][ T0] identify_secondary_cpu+0x178/0x270 [ 354.268761][ T0] start_secondary+0xcf/0x2d0 [ 354.271833][ T9] usb 5-1: Product: syz [ 354.273203][ T0] ? __pfx_start_secondary+0x10/0x10 [ 354.273226][ T0] common_startup_64+0x13e/0x158 [ 354.273250][ T0] [ 354.273257][ T0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 354.273268][ T0] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G S L syzkaller #0 PREEMPT(full) [ 354.273284][ T0] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 354.273290][ T0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 354.273297][ T0] Call Trace: [ 354.273302][ T0] [ 354.273306][ T0] dump_stack_lvl+0x100/0x190 [ 354.273320][ T0] vpanic+0x552/0x970 [ 354.273331][ T0] ? __pfx_vpanic+0x10/0x10 [ 354.273345][ T0] panic+0xd1/0xe0 [ 354.273355][ T0] ? __pfx_panic+0x10/0x10 [ 354.273369][ T0] ? check_panic_on_warn+0x1f/0x90 [ 354.273388][ T0] check_panic_on_warn.cold+0x19/0x34 [ 354.273400][ T0] ? do_clear_cpu_cap+0x356/0x440 [ 354.273416][ T0] __warn.cold+0x191/0x318 [ 354.273433][ T0] __report_bug+0x30f/0x440 [ 354.273448][ T0] ? do_clear_cpu_cap+0x356/0x440 [ 354.273464][ T0] ? __pfx___report_bug+0x10/0x10 [ 354.273482][ T0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 354.273498][ T0] ? tick_nohz_tick_stopped+0x6c/0xa0 [ 354.273517][ T0] ? do_clear_cpu_cap+0x356/0x440 [ 354.273533][ T0] report_bug+0xb2/0x220 [ 354.273547][ T0] ? do_clear_cpu_cap+0x356/0x440 [ 354.273562][ T0] handle_bug+0x16a/0x2a0 [ 354.273579][ T0] exc_invalid_op+0x17/0x50 [ 354.273595][ T0] asm_exc_invalid_op+0x1a/0x20 [ 354.273607][ T0] RIP: 0010:do_clear_cpu_cap+0x356/0x440 [ 354.273623][ T0] Code: 2a 38 d0 7c 08 84 d2 0f 85 ea 00 00 00 8b 2d 31 5d 72 0f 31 ff 89 ee e8 48 6b 59 00 85 ed 0f 84 7d fd ff ff e8 cb 70 59 00 90 <0f> 0b 90 e9 6f fd ff ff 48 89 54 24 18 89 14 24 e8 b5 70 59 00 8b [ 354.273635][ T0] RSP: 0000:ffffc9000046fc98 EFLAGS: 00010093 [ 354.273644][ T0] RAX: 0000000000000000 RBX: 0000000000000070 RCX: ffffffff81b03d68 [ 354.273652][ T0] RDX: ffff88801c73a540 RSI: ffffffff81b03d75 RDI: ffff88801c73a540 [ 354.273659][ T0] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 354.273687][ T0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000070 [ 354.273694][ T0] R13: 0000000000000601 R14: ffffc9000046fce0 R15: ffffc9000046fd80 [ 354.273704][ T0] ? do_clear_cpu_cap+0x348/0x440 [ 354.273720][ T0] ? do_clear_cpu_cap+0x355/0x440 [ 354.273737][ T0] ? do_clear_cpu_cap+0x355/0x440 [ 354.273753][ T0] ? __pfx_do_clear_cpu_cap+0x10/0x10 [ 354.273768][ T0] ? _printk+0xcf/0x110 [ 354.273782][ T0] ? __pfx_cpu_parse_topology+0x10/0x10 [ 354.273799][ T0] ? early_init_intel.cold+0x129/0x1eb [ 354.273819][ T0] early_init_intel.cold+0x13f/0x1eb [ 354.273839][ T0] init_intel+0x1c/0x7b0 [ 354.273857][ T0] identify_cpu+0x8b0/0x1c30 [ 354.273869][ T0] ? __pfx_cpu_init+0x10/0x10 [ 354.273882][ T0] identify_secondary_cpu+0x178/0x270 [ 354.273895][ T0] start_secondary+0xcf/0x2d0 [ 354.273908][ T0] ? __pfx_start_secondary+0x10/0x10 [ 354.273923][ T0] common_startup_64+0x13e/0x158 [ 354.273947][ T0] [ 354.275010][ T0] Kernel Offset: disabled