last executing test programs: 12m43.664839795s ago: executing program 2 (id=990): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="441f0803", 0x1f) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x4c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 12m43.664553382s ago: executing program 2 (id=991): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x20, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x6, 0x7, 0x5, 0x8, 0x4c74, 0xffff7fff, 0x7, 0x3, 0xe, 0x3, 0x80008071, 0x7, 0x17, 0xffffffff, 0x7, 0x5, 0x80003e, 0x18e, 0x6, 0x6, 0x0, 0x8, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2009, 0xfffffffc, 0x573a, 0x0, 0x0, 0x5, 0x2f, 0x8, 0x312, 0x66abcbd2, 0xea4, 0x5, 0x4, 0x1007, 0x7, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x6c, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4000004, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x200009, 0x3, 0x3, 0x4000009, 0x8, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x6, 0x40a, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0x7, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x1000515, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6cff, 0x6, 0x38, 0x200, 0x1fd, 0x80, 0x7, 0x4, 0x2950bfaf, 0x3000, 0xa2, 0x8, 0xcc, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ef, 0x2006, 0x80a2cd, 0x4, 0x25], [0xc, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x6, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffc, 0xa620, 0x1, 0x5, 0x801, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0x10000, 0xf, 0x7e, 0x9, 0x9622, 0x6, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0xe1c4, 0x6, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x4, 0x11) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mount$cgroup(0x0, 0x0, 0x0, 0x2008000, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000200)={0xfffa, [0x0, 0xfffffffc], 0x4}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = memfd_create(&(0x7f0000000080)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x84\x14n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x4, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000240)={'raw\x00', 0x0, [0x8, 0x3, 0xfd, 0xe, 0x5]}, &(0x7f0000000000)=0x54) openat$mice(0xffffffffffffff9c, &(0x7f0000000880), 0x41) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r5, 0x5452, &(0x7f0000000000)=0x5) readv(r5, &(0x7f0000000700)=[{&(0x7f0000000400)=""/38, 0x26}], 0x1) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r6, &(0x7f0000000040)="e2", 0x918) 12m40.22970535s ago: executing program 2 (id=998): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="dc91005f00"}) syz_open_procfs(0x0, &(0x7f0000000240)='net/rt_cache\x00') socket$can_raw(0x1d, 0x3, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0xfffffffe, @loopback, 0x5}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="91", 0x1}], 0x1}, 0x48043) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000100001000000000000000071ff9aee24", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2a}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r5, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r4, 0x0, r1, 0x0, 0x317e, 0x4) write$P9_RREAD(r2, &(0x7f0000000300)=ANY=[], 0xb) write$tun(r2, &(0x7f0000000840)=ANY=[], 0x11b0) 12m39.235660756s ago: executing program 2 (id=999): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a7000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x19}, 0x94) (async) r2 = fsopen(&(0x7f0000000200)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000040)='source', &(0x7f0000001bc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x99\xef\x8b0x0}) r6 = socket(0x400000000010, 0x3, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e04015b0c"], 0x7) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r9, &(0x7f00000011c0)={0xfc, {"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", 0x1000}}, 0xffbc) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r10, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sendmsg$nl_route_sched(r6, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x15c4, 0x2c, 0xd27, 0x70bd25, 0x255fdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0x6}, {}, {0x7}}, [@filter_kind_options=@f_fw={{0x7}, {0x1598, 0x2, [@TCA_FW_POLICE={0x8e0, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x2, 0x2, 0xfffffffc, 0xf5, {0x9, 0x1, 0x4, 0x79cb, 0x9, 0xffff0ab7}, {0x7, 0x2, 0x9, 0x0, 0x0, 0x5}, 0x7, 0x4, 0x8000}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x386d79fa, 0x1, 0xffffffff, 0x0, 0x40, 0x9, 0x6, 0x0, 0x5, 0x8, 0x3, 0xc000, 0x7fffffff, 0x1, 0xa5, 0xf6d4, 0x200, 0x7, 0x8, 0x800, 0x9, 0x5, 0xfffffffe, 0x2b, 0xf, 0x400, 0x297, 0x3, 0x6, 0x4, 0xfe, 0x4, 0xd12, 0x3, 0xee5b, 0x0, 0x6, 0x14d, 0x9, 0x1, 0x1, 0x0, 0x667d, 0x7, 0x80000000, 0xff, 0xd, 0x177, 0x1, 0xf11, 0x5, 0x6, 0xccc4, 0x1000000, 0x3, 0x7fff, 0x4, 0x1, 0x8, 0x10000, 0x5, 0x3, 0x3ff, 0xec1d, 0x0, 0x5, 0x6, 0x7, 0x3, 0x7, 0x6, 0x1, 0x6, 0x1ff, 0x7, 0x9, 0xa, 0x1, 0x6, 0x8, 0x81, 0x594, 0xfffffff7, 0x9, 0x3, 0xa5, 0x53c, 0x7f9a8, 0x7fffffff, 0x55, 0x2, 0x6, 0xf0, 0x40, 0x2372, 0x5, 0x8, 0x7, 0x0, 0x9, 0x6d799c47, 0x1, 0x9, 0x7, 0xa7e3, 0x99d, 0x7, 0x4, 0x6, 0x10000, 0x78c0, 0x4, 0x8001, 0xcd, 0xc91, 0x6, 0x3ff, 0xfffffffe, 0x2, 0x900000, 0x2, 0x6, 0xfffffffa, 0x6, 0xf9, 0x4, 0x2, 0x4, 0x8, 0x9, 0x9, 0xc0b0, 0x2, 0xb672, 0x4, 0xe, 0x2, 0xfffff0f7, 0x4, 0x1000, 0x6, 0x10000471, 0x1, 0xb, 0x3, 0x2, 0x180000, 0x10000, 0x1, 0x6, 0x8, 0x2, 0x6, 0xffffffff, 0x6f, 0x6, 0x4, 0x3, 0x7, 0x400, 0x7, 0x0, 0x9, 0x9, 0x9, 0x7, 0x60, 0x80000004, 0xfff6, 0x1, 0x2, 0x400, 0x3ff, 0x6465, 0x3, 0x62c5, 0x2588, 0x80000000, 0x7, 0x3, 0x377, 0x7, 0x0, 0x5, 0x7, 0x4, 0x3, 0x211, 0x1, 0xffffffc0, 0x0, 0x0, 0x25, 0x200, 0x69e, 0x9, 0xfff, 0x3, 0xf, 0xc, 0x0, 0xc70, 0x10000, 0x8, 0x0, 0xfffff7e2, 0x9, 0x8, 0x1, 0x9, 0x53, 0x4, 0x0, 0x76d, 0x4, 0xf08, 0xac76, 0x22187a91, 0x6, 0x2, 0x0, 0x10, 0xc, 0x86f6, 0x8240, 0x2, 0x8, 0x80000001, 0x7fffffff, 0x6, 0x0, 0x2, 0x8, 0x1, 0x8b8, 0x7, 0x3, 0x3ff, 0x8, 0x87, 0x3, 0x0, 0x7fffffff, 0x7fffffff, 0xffff4062, 0x1, 0x81, 0x4, 0x0, 0x81, 0x200, 0x4, 0x8, 0x200, 0x8, 0x6]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xa1}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x2, 0x2, 0x2, 0x8, 0x7, 0x8, 0x5, 0x4, 0x2, 0x5, 0x1, 0x80000000, 0x7, 0x8001, 0xd79, 0x9fa, 0xb1ac, 0xfffffff8, 0x5, 0xfffffffb, 0x5, 0x1, 0x0, 0xfffffc01, 0x2, 0x2, 0x7a78, 0x4, 0x3, 0xffffffff, 0x0, 0x0, 0x3, 0x3d12, 0x2003, 0x3, 0x8001, 0x7ff, 0xfff, 0x3, 0x3, 0x7, 0x40, 0xfffffffc, 0xb, 0x4, 0x800, 0x2, 0x910d, 0x2, 0x6, 0x10000a, 0xbe0, 0xfffffffa, 0x9, 0x9, 0x9, 0x401, 0xfffffff7, 0x280, 0x3, 0xe00000, 0xce77, 0xfffffffc, 0xd3d, 0x1, 0xaab, 0x1, 0x400, 0x5, 0xf639, 0x0, 0x7, 0x1, 0xfffffff1, 0x4, 0x5, 0x0, 0x1ff, 0x7, 0x6, 0x9, 0x0, 0x764, 0x8, 0x1, 0x4, 0x6, 0xa0eb, 0x101, 0xfff, 0x6, 0x3, 0x3, 0x6, 0x10, 0x3, 0x16, 0x1, 0x9, 0xb2, 0x8, 0x5, 0x7, 0xd, 0x80000001, 0x4, 0xfb, 0x800, 0x3, 0x7, 0x2ff, 0x8001, 0x80000000, 0x6, 0x6, 0x8, 0xec0, 0xff9, 0xedb, 0xbb, 0x8, 0x10, 0x7, 0x4, 0x1ff, 0x2ffff, 0x4, 0x10001, 0x7c1, 0x32d4, 0x5, 0xec, 0x52, 0x4, 0x7, 0x5, 0x7, 0x0, 0xc, 0x4, 0x3, 0x0, 0x9, 0x0, 0x3, 0xffff, 0x0, 0x1, 0x5, 0x168661e9, 0x2, 0x24, 0x1, 0x8, 0x8, 0x8, 0x200, 0x515a, 0x9, 0x9, 0x68c9cfb1, 0x8, 0x6, 0x9, 0x40, 0x5, 0x1b, 0x8, 0x1, 0x0, 0x7ff, 0x2d, 0x2, 0x8, 0x6, 0x32, 0x6, 0x6, 0x10000, 0x5f1, 0xf, 0x0, 0xa8a, 0x16, 0xc48c, 0x6449, 0x7, 0x3, 0x6, 0x8001, 0xfff, 0x3f, 0xa, 0x6, 0xffff0000, 0x9, 0x3, 0xd, 0x0, 0x1, 0x81, 0x0, 0x7, 0x9, 0x61, 0x8, 0x47, 0x6, 0x5, 0x7, 0x8, 0x8, 0x8001, 0x6, 0x400000, 0x8000, 0x1, 0x2, 0xffff, 0x7, 0x5, 0x4, 0x8f, 0x6, 0x7, 0x10000, 0x9, 0x3, 0xfff, 0xc, 0x257, 0x3, 0x1, 0x9, 0x6, 0x7, 0x8001, 0x8, 0xfffffff8, 0x5, 0x9, 0x4, 0x4, 0xffff0000, 0x7ff, 0x200, 0x3, 0xb8, 0x3, 0x9, 0x6, 0xe5, 0x7, 0x40]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x1, 0x4, 0x400, 0x2, {0xa, 0x2, 0x1, 0x6, 0x81, 0x40}, {0xe5, 0x0, 0x1, 0x800, 0xe53d, 0x8}, 0xe, 0x1ff, 0x4}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x5, 0x2, 0x10001, 0x2, {0x9, 0x2, 0x7, 0x400, 0x5, 0x9}, {0x5, 0x0, 0x9, 0x5, 0xf, 0xffff}, 0x1ff, 0x6, 0x2}}]}, @TCA_FW_POLICE={0xcb0, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_RATE={0x404, 0x2, [0x34c, 0x7, 0x7, 0xffffffff, 0x4, 0x7, 0x4, 0x4, 0xf, 0x1, 0x80000000, 0x8, 0x80, 0x1, 0xa89, 0xffff5ebe, 0xa5, 0x0, 0x7ff, 0x9, 0x0, 0xb, 0x2, 0xc2b4, 0xf, 0x6, 0xf5, 0xe, 0x10, 0x0, 0xe, 0x3, 0xffff, 0x3, 0x8, 0x2, 0x6, 0x7, 0x10, 0x2, 0x2, 0x7ff, 0xdfc, 0x0, 0x1, 0x6, 0x7, 0x0, 0x1, 0xff, 0x6a0, 0x6, 0x6, 0x5, 0x800, 0x3, 0x8, 0x7, 0x5, 0x5, 0x1, 0x4, 0x28, 0xb, 0xfffffff8, 0x1000, 0x1, 0x4, 0x5, 0x4, 0x1, 0x0, 0x8, 0x7, 0xa8, 0x0, 0xa0000000, 0x4, 0xc, 0x6, 0xb, 0x6, 0x6, 0x8000, 0x4, 0x2, 0xfffffffb, 0x0, 0x3, 0xfffffffc, 0x5, 0xc5, 0x7, 0x7, 0x9, 0x1, 0x7, 0xfffffff7, 0x5, 0x9, 0x6117, 0x8, 0x80000001, 0x4, 0xf, 0x81, 0x4a, 0x1, 0x3, 0x3, 0x10, 0xb, 0x9, 0xb285d10f, 0x8, 0x3, 0x10001, 0x5, 0x8001, 0x6, 0x7, 0x8791, 0x2, 0xb, 0x75, 0x9, 0x5, 0x8, 0x5, 0x2, 0xba4, 0x3, 0x3, 0xb, 0x6, 0x10, 0x9, 0x8, 0x80000001, 0x4, 0x8, 0xf20a48f, 0xd, 0x5, 0x8, 0x1ff, 0x7, 0x9, 0x60, 0xe4d4, 0x0, 0x8001, 0xc, 0x1, 0x6, 0x4, 0x3, 0x5, 0x1517, 0x8, 0x0, 0x0, 0xffff, 0xd0e6, 0x5, 0x0, 0x4, 0xffffffc0, 0x3, 0xbc, 0x5, 0x3, 0xc9e, 0xe18, 0x2, 0x5, 0x352e, 0x8, 0x8, 0x8, 0x7, 0x80000000, 0x5, 0x9, 0xfffffe00, 0x1, 0x2215, 0x956, 0xa, 0xfffffff9, 0xa8b6, 0x5, 0xa8f, 0x6, 0xc7, 0x7ff, 0x23, 0x8, 0x4, 0x1, 0x0, 0xa, 0x8, 0x10000005, 0x80000001, 0x6, 0xa69, 0x8, 0x100, 0x7, 0x2, 0x1e46, 0x8, 0xfffffffc, 0x8, 0x4, 0x7, 0x3, 0xe, 0x3, 0xffffffff, 0x4, 0xc32d, 0x6, 0x10000, 0xd, 0xc79, 0x8cce, 0xd, 0x9, 0x100, 0x7, 0x3, 0x9, 0x7fffffff, 0x0, 0x9, 0x0, 0x8000, 0x7f, 0x5, 0x3, 0x0, 0x7ff, 0xa, 0x1, 0x2, 0x9311, 0x101, 0x6, 0x5, 0x7ff, 0x8, 0x3, 0x5, 0x4]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x0, 0xff, 0x7, 0x7, 0x6, 0x1, 0x0, 0x8, 0x7, 0x6, 0x1, 0x800, 0x9, 0x45, 0x9, 0x3c, 0x80000000, 0x7, 0x61fa, 0x44, 0x7f, 0x3, 0x4, 0x2, 0x5, 0x7, 0x10, 0xc1a4, 0x4, 0x3, 0x2, 0x0, 0x40, 0x8, 0x2, 0x3, 0x8, 0xd76, 0x5, 0x2, 0x8000, 0x5, 0x3, 0x1000, 0x3, 0x5, 0x8, 0xfffffffc, 0x2, 0x800, 0xfffff000, 0x3ff, 0x6, 0x8, 0x8, 0x0, 0xce94, 0x6, 0x11e6, 0xe, 0x1, 0x9, 0x7, 0x3, 0x9, 0x240, 0x2, 0xc9, 0x1000, 0xe8d, 0xcc, 0x6254, 0x6, 0x9, 0x101, 0xfffff81c, 0x10, 0x2, 0x6, 0xb, 0xfffffc01, 0x9, 0x1, 0x9, 0x9, 0xe1b7, 0x2, 0xffffffff, 0x3, 0x7, 0x4, 0x7, 0xaf, 0x3, 0x8000, 0x5, 0x1, 0xfffffffb, 0x5, 0x9, 0x3, 0x8, 0x0, 0xc4d, 0x4, 0x216b, 0x1, 0x800, 0x6, 0x8, 0x80, 0x3ff, 0x0, 0x2, 0x6, 0x8001, 0x2, 0x1, 0x7, 0x5, 0x8, 0x2, 0xce69, 0x6, 0x1000, 0x1000, 0x4b24, 0x5, 0x8, 0x4, 0xffff, 0x400, 0x9, 0x9, 0x54b9f38f, 0x5, 0x3, 0x5, 0x8, 0x3, 0x8, 0x7, 0x9, 0x5, 0x81, 0x1, 0x8, 0x0, 0x8, 0x8, 0x10000, 0x4164, 0x7ebcdab, 0x10000, 0x6, 0x8000, 0x0, 0x120, 0xb8, 0xf391, 0x5, 0x4, 0xfffffc00, 0xd7c8, 0x2, 0x2, 0x8, 0x7, 0x7, 0x7f, 0xbcb3, 0xfa6, 0x2, 0x9c23, 0x2b1c0, 0xf3, 0xf, 0x400, 0x8, 0x7ff, 0x9, 0x1, 0x3ff, 0x0, 0x6, 0x90a, 0x4, 0x3, 0x1, 0xffff, 0x3, 0x5, 0x26f, 0x3, 0xffffffff, 0x5, 0xb21, 0x4, 0x100, 0xafe, 0x8, 0x9, 0x5, 0x2, 0x5, 0x3ff, 0x3ff, 0x3, 0x401, 0x0, 0x9, 0x2, 0x8001, 0xfffffffe, 0x7, 0x35cd, 0x7, 0x5, 0x4, 0xfffffff9, 0x4, 0xfffffc00, 0x80, 0x8, 0x8, 0x8, 0x7, 0x101, 0x10, 0x0, 0x6, 0x6, 0x5, 0x8, 0x80000000, 0x8001, 0x5, 0xe, 0x4, 0x9, 0x644e, 0x4, 0x401, 0x5, 0x2, 0x40000, 0x401, 0x2, 0x24, 0x9, 0x7, 0x7, 0x33, 0x600000, 0x4]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xf9b}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8000, 0x3, 0x780000, 0x1, 0x9, {0x9, 0x1, 0x1, 0x3, 0x2, 0x1}, {0x5, 0x1, 0x6, 0x3, 0x0, 0x10000}, 0x3ff, 0x2, 0x3}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x6, 0x70, 0x5, 0x101, {0xf7, 0x1, 0x800, 0xfff2, 0x3, 0x7fffffff}, {0x4, 0x0, 0xf, 0xe15, 0xb}, 0x8, 0x5cb1, 0x1}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3ff}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x2, 0x5, 0x9, 0x1, 0x7, 0xa, 0x97, 0x5, 0x7, 0x4, 0x3, 0x89c, 0x6, 0xffffff51, 0x6, 0x7, 0x80, 0x400, 0xc3, 0xfffffe01, 0x1ff, 0x9, 0x5, 0x7, 0x4, 0x7, 0x8, 0x1, 0x3, 0x3, 0x2, 0x1, 0x4, 0x400, 0x6, 0x3a, 0x5, 0x6, 0x1, 0xa, 0x4, 0x1, 0xb, 0x8, 0x6, 0x8, 0x5, 0x2, 0x2, 0x7, 0x6, 0x1, 0x6, 0xfffffff9, 0x200, 0x7, 0x2, 0x5, 0x0, 0xaa99, 0xfffffc01, 0xe, 0x5, 0x4, 0x3, 0x1cb6, 0x9, 0x4, 0x10001, 0x7, 0x40, 0x1, 0x0, 0x3ff, 0x8000, 0x1, 0x0, 0x7cf, 0x3, 0x0, 0x150, 0x447, 0x8, 0x6, 0x8, 0x3, 0x8, 0x1, 0x2, 0x1ff, 0x80000001, 0x4, 0x9, 0xfb0e, 0x2, 0x0, 0x1, 0x404, 0xfffffffd, 0x0, 0x8001, 0x8, 0xdf, 0xb64, 0x0, 0x200, 0x0, 0xb4, 0x200, 0x1, 0x6, 0xdf2, 0x6, 0x3, 0x4, 0xfffffff7, 0x10, 0x9, 0x800000, 0x4, 0x1, 0xfffffffc, 0x1000, 0x40, 0x9, 0x8, 0x9, 0x6, 0x7, 0x7ff, 0x8, 0x80000000, 0x800, 0x3, 0x3, 0x3, 0x9, 0x2400000, 0x6, 0xc, 0x9ca, 0x2, 0x4, 0x80, 0x800000, 0x8, 0x8, 0x4, 0xd85, 0x5, 0x8b, 0x1c635ecf, 0x400, 0x100, 0x19f, 0x0, 0x7ff, 0x2, 0x1, 0x0, 0xe000000, 0x9, 0x8, 0x6, 0xff, 0x7, 0xffffffff, 0x8, 0x0, 0x7, 0x1000, 0x10001, 0x1, 0x5, 0x1, 0x0, 0x0, 0xfffffc01, 0x4, 0x4, 0x6, 0xf, 0xfff, 0xfffffffa, 0x1000, 0x8, 0x9, 0x4, 0x9704, 0x8, 0x21, 0x0, 0x3, 0x200, 0x0, 0x4, 0x4, 0x8, 0x3, 0x80000001, 0x0, 0xfffffff7, 0x0, 0xfffffff7, 0x67, 0x2, 0xea3, 0x6, 0x2, 0x7, 0x51, 0x8, 0x200, 0x7, 0x1, 0x8fcb, 0x3, 0x8, 0x401, 0x401, 0x1, 0x2, 0x7fffffff, 0x5, 0x1, 0x0, 0x2d58, 0x3, 0x80000000, 0x9, 0x3, 0x4, 0x2855, 0xffff0000, 0x5, 0x9, 0x5, 0x4262, 0x1, 0x3, 0x1, 0xf2, 0x80000000, 0x7, 0xd8c5, 0x6, 0x9496, 0x80000001, 0x4, 0x5, 0x6, 0x3, 0xfffffffa, 0x10001, 0x1]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xe}]}, @TCA_FW_POLICE={0x4}]}}]}, 0x15c4}, 0x1, 0x0, 0x0, 0x10}, 0x4480) (async) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) (async) r12 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000002c0), 0x149181, 0x0) write$proc_mixer(r12, 0x0, 0x5) (async) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYRES32, @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000002f000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r5, @fallback, r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000000)=r13, 0x4) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002ec0)={&(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000240)="cbae5383a4b0617b37c2", 0xa}, {&(0x7f0000000600)="5da428f25c2121284f4d892d629c8c609c347d7144dfbbc61927958872f9ab13f976577da8ff6c549a7f62a2b3c9d16e80547e9b61b555ccaa4a103c47c1748e3f0fa4cf6c10c4c9b6bd6f6912458994cacc06000019e869868d892795d0991c8e409aff9e73eb38fa44f36a5782f1247e015304a0f60873852634329dfee2537f0818d0cfa0f72b423938b7137f296b97bf475b6ebe6431789d4c0c", 0xfffffffffffffe76}], 0x2, &(0x7f0000002e80)}, 0x4000891) 12m38.878107878s ago: executing program 2 (id=1000): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r3, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@delchain={0x6c, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, 0x0, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0x40, 0x2, [@TCA_U32_SEL={0x34, 0x5, {0xa, 0xb, 0x2, 0x6, 0x80, 0x7, 0x2, 0x2, [{0x7, 0x1, 0x9, 0x7}, {0xb, 0x2, 0x6, 0x8}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0xffff, 0x14}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0xfffc, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f00000000c0)={0xfd, 0x0, 0xfe, 0x22, 0x0, 0x7, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3}, 0xe) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') preadv(r5, &(0x7f0000000340)=[{&(0x7f0000000180)=""/112, 0x70}], 0x1, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc010643a, &(0x7f0000000200)={0x0, 0x3, 0x401}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r7, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMK(r5, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x40, r7, 0x409, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x8, 0x6}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008014}, 0x2000050) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="0c010000", @ANYRES16, @ANYBLOB="00032cbd7000fedbdf256500010008000300", @ANYRES32=r8, @ANYBLOB="0c009900ffff00004300000004000380d8000380d4000080ce000200cae673503a8a959370d7de17bb74186584cf4c738fa107a4d91aaf2924f926596dba3c4f74e456f604ea92d3414359ca799492a253e59a9e96c8bb0999964b09e72cfbbae328bad34cd6365a391b8a36c8d8572a2d5bca293264864a2cad592098ba373e7d2b8dfc222cb3d16cf8fb5e8b20fa7508dc6dd110a9226615c7379c33eeba1dc7587345aa2459de83059b970aa7888fc28970592ccc019f920638f001ab4527530fc1a65645b70b867d727230e731af8feee56bf289c12ebf3fd87234aa79c92ccda0c41041000008000100ff000000"], 0x10c}, 0x1, 0x0, 0x0, 0x40004}, 0x4000000) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f00000001c0)={0x0, 0x20000, 0x9, 0x2, 0x200, &(0x7f0000003c40)="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"}) 12m37.617826313s ago: executing program 2 (id=1002): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) socket$inet(0x2, 0x4000000000000001, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/29, 0x17}, 0x6}], 0x636, 0x40010003, 0x0) madvise(&(0x7f0000001000/0x7000)=nil, 0x7000, 0x19) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) timer_create(0xb3b54c18e0590239, 0x0, &(0x7f0000bbdffc)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000007"], 0x50) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0xfc7f000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/target/dbroot\x00', 0x88040, 0x81) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000002000010025bf7000fbdbdf250a000040000000070600000008000d000200000008000e"], 0x2c}, 0x1, 0x0, 0x0, 0x24048860}, 0x0) getrlimit(0x4, &(0x7f0000000180)) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)=@o_path={&(0x7f00000000c0)='./my_configfs\x00', r2, 0x4000, r5}, 0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) 12m22.476842999s ago: executing program 32 (id=1002): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) socket$inet(0x2, 0x4000000000000001, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/29, 0x17}, 0x6}], 0x636, 0x40010003, 0x0) madvise(&(0x7f0000001000/0x7000)=nil, 0x7000, 0x19) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) timer_create(0xb3b54c18e0590239, 0x0, &(0x7f0000bbdffc)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000007"], 0x50) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0xfc7f000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/target/dbroot\x00', 0x88040, 0x81) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000002000010025bf7000fbdbdf250a000040000000070600000008000d000200000008000e"], 0x2c}, 0x1, 0x0, 0x0, 0x24048860}, 0x0) getrlimit(0x4, &(0x7f0000000180)) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)=@o_path={&(0x7f00000000c0)='./my_configfs\x00', r2, 0x4000, r5}, 0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) 9m59.084782564s ago: executing program 0 (id=1477): r0 = socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000240)="bc30a071d8bcb8794f5d8e1334b133b0cc64874f1a44052e038135a56412a20d4363f5df408fc6441639e75c7470bb11", 0x30, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000380)={0x1, 0x6, 0xc, 0x7b06e6a4, 0x2fd}) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) listen(r0, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x4) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x0) accept4(r0, &(0x7f0000000280)=@xdp, &(0x7f00000001c0)=0x80, 0x80800) socket(0x28, 0x801, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000000c0)=0x11) 9m57.608705605s ago: executing program 0 (id=1481): bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_open_dev$I2C(&(0x7f00000007c0), 0x0, 0x40) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000140)={'some'}, 0x2f) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x88c3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x47) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000300)={0x0, 'veth1_to_batadv\x00', {0x3}, 0x7}) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000004c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x534, 0x3e8, 0x288, 0x0, 0x354, 0x354, 0x4cc, 0x4cc, 0x4cc, 0x4cc, 0x4cc, 0x6, &(0x7f0000000200), {[{{@uncond, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0x1c4, 0x1f4, 0x0, {}, [@common=@inet=@policy={{0x154}, {[{@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xffffff00, 0xff, 0xff, 0xffffffff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x2a}, [0xffffffff, 0xffffff00, 0xffffffff, 0xffffffff], 0x4d2, 0x34ff, 0x4, 0x1, 0xf301d94a6ccd76a1, 0x1}, {@ipv4=@empty, [0xff, 0xff000000, 0xff, 0xffffff00], @ipv4=@loopback, [0xff000000, 0xff, 0x0, 0xffffffff], 0x4d6, 0x34ff, 0x2c, 0x1, 0x6}, {@ipv6=@mcast2, [0x13139661c108bed2, 0xffffffff], @ipv6=@local, [0xffffffff, 0x0, 0x0, 0xff], 0x9, 0x3502, 0x0, 0x1, 0x0, 0xb}, {@ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], @ipv4=@loopback, [0x0, 0xff000000, 0xffffff00, 0xff000000], 0x4d6, 0x3503, 0x6cab86d5531856f4, 0x0, 0x8, 0xc}]}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x5, 0x3, @remote, 0x4e24}}}, {{@uncond, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, 0x3, 0x7, [0x23, 0x40, 0x6, 0x26, 0x25, 0x14, 0x2e, 0xd, 0xf, 0x6, 0xd, 0x25, 0xd, 0x3c, 0x2e, 0x2d], 0x1, 0xa50, 0xfffffffc}}}, {{@ip={@private=0xa010102, @broadcast, 0xffffffff, 0x0, 'macvlan1\x00', 'erspan0\x00', {}, {0xff}, 0x2f, 0x1, 0x8}, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0x94, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x7}}]}, @unspec=@CHECKSUM={0x24}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x590) r4 = openat$cdrom(0xffffff9c, &(0x7f0000000280), 0x301180, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)) ioctl$CDROMPLAYBLK(r4, 0x5317, &(0x7f0000000000)={0x5, 0x9}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2b01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000be850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) 9m53.89043445s ago: executing program 0 (id=1490): add_key(0x0, 0x0, &(0x7f00000001c0)="bcfdc195f8b8fff0d7d38cebc3ab0a281077b472f633f263e6cec7a46ae5a30d3b4a34df3f57560217ec82ad86f90bcdc0538fb8d3974e4345d3653747b5e8e4effd9e38b7d65a6e70ead21cf7dfda1f078866875d57cfd0e398fe", 0x5b, 0xfffffffffffffffe) socket(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffe89, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d00070f000200000000000007000000", @ANYRES32=r1], 0x24}, 0x1, 0x0, 0x0, 0x4008055}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x8841}, 0x4008041) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r6, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x34, r7, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x20}, 0xd) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x24, r4, 0x3c1ef5685f8d0157, 0x0, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f00000001c0)=@newtaction={0x48, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbmod={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000024c0)=@newtaction={0xb4, 0x30, 0x58f, 0x0, 0x0, {}, [{0xa0, 0x1, [@m_ctinfo={0x48, 0x2, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x80, 0x5, 0x5, 0x1, 0x2}}]}, {}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, @local, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0xa00) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000100)={0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffe}, 0x0, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x42100}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0xfffffff8, 0x9}}]}]}]}, 0x48}}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r11, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r11, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r11, &(0x7f0000000040)={0x50, 0x0, r12, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r11, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) 9m50.387947815s ago: executing program 0 (id=1498): socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x11, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYRESHEX=r0, @ANYRES8=r2], 0x3c}, 0x1, 0x0, 0x0, 0x2400c881}, 0x10) 9m49.825156231s ago: executing program 0 (id=1502): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b5b00073f861a88f1c600000000000000", 0x12}, {&(0x7f0000000380)="b7000018", 0x4}], 0x2) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000ff0300000000000000000000850000001100000085000000a000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f0000000300)="e02742e8680d85ff978276fcf294", 0x0, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) listxattr(&(0x7f0000000080)='./cgroup\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r9 = syz_open_dev$mtd(&(0x7f0000000100), 0x48a99fbe, 0x10b241) ioctl$MTDFILEMODE(r9, 0x4d13, 0x2) r10 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x700) ioctl$DVB_DEMUX_DMX_SET_BUFFER_SIZE(r10, 0x6f2d, 0x400000002000) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r11 = dup3(r4, r3, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 9m48.064137789s ago: executing program 0 (id=1506): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) syz_emit_ethernet(0x1684, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x5, 0x7fff7ffc}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0xa4, 0x30, 0x1, 0x1, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x102, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7f, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x40881) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x1c, &(0x7f0000000240)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000340)=0x3) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xa) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x5) setreuid(0xee00, 0x0) write$sequencer(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_NAPI(r3, 0x1c, &(0x7f00000000c0), 0x1) mount$9p_virtio(&(0x7f00000001c0), 0x0, &(0x7f00000004c0), 0x1200004, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0xf000, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0x13) chdir(0x0) open(0x0, 0x80242, 0x1df2a23c5997fa5f) syz_io_uring_setup(0x4b5, 0x0, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000180)={0x0, 0x1, r1, 0x5, 0x80000}) unshare(0x6a040000) socket$nl_netfilter(0x10, 0x3, 0xc) 9m32.204325857s ago: executing program 33 (id=1506): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) syz_emit_ethernet(0x1684, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x5, 0x7fff7ffc}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0xa4, 0x30, 0x1, 0x1, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x102, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7f, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x40881) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x1c, &(0x7f0000000240)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000340)=0x3) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xa) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x5) setreuid(0xee00, 0x0) write$sequencer(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_NAPI(r3, 0x1c, &(0x7f00000000c0), 0x1) mount$9p_virtio(&(0x7f00000001c0), 0x0, &(0x7f00000004c0), 0x1200004, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0xf000, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0x13) chdir(0x0) open(0x0, 0x80242, 0x1df2a23c5997fa5f) syz_io_uring_setup(0x4b5, 0x0, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000180)={0x0, 0x1, r1, 0x5, 0x80000}) unshare(0x6a040000) socket$nl_netfilter(0x10, 0x3, 0xc) 8m34.477123297s ago: executing program 1 (id=1647): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x40081, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) sendto$inet6(r1, &(0x7f00000004c0)="b0", 0x1, 0x4008050, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, 0x3f000000}, 0x1c) 8m33.435959229s ago: executing program 1 (id=1650): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed, 0x7}]}) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_emit_ethernet(0x5e, &(0x7f00000001c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, @link_local, @val={@val={0x88a8, 0x0, 0x1}, {0x8100, 0x2, 0x0, 0x4}}, {@canfd={0xd, {{0x1, 0x0, 0x1}, 0x34, 0x3, 0x0, 0x0, "81e5693b2994bef9c7f9196b39e5d40d976931deab9fee8278a30112114892e907c9375b681587aa385a150579aa73b63b4a877464408e0f063b9d900882570a"}}}}, &(0x7f0000000380)={0x0, 0x2, [0x4c1, 0x650, 0x80d, 0x2cc]}) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = getpgrp(0xffffffffffffffff) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x8000]}, 0x8, 0x800) r4 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000010ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x17d, 0x5}) preadv(r4, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0xd) ioctl$DVB_DEMUX_DMX_ADD_PID(r4, 0x40026f33, &(0x7f0000000080)=0x8) fcntl$setownex(r3, 0xf, &(0x7f00000002c0)={0x1, r2}) fcntl$getownex(r3, 0x10, &(0x7f0000000000)) close_range(r1, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x40000000) ioctl$FS_IOC_GETVERSION(r5, 0xc0145b0e, &(0x7f0000000000)) 8m31.223578323s ago: executing program 1 (id=1653): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r0, 0x1, 0x50, &(0x7f0000000100)={0x0, 0x57}, 0x8) 8m31.207145012s ago: executing program 1 (id=1654): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fgetxattr(r1, &(0x7f0000000000)=@known='system.sockprotoname\x00', &(0x7f0000000040)=""/111, 0xfffffffffffffd73) sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000780)=@migrate={0xd8, 0x21, 0x213, 0x70bd29, 0x25dfdbfd, {{@in=@multicast1, @in6=@empty, 0x4e22, 0x5, 0x4e21, 0x9, 0x8, 0x20, 0x80, 0x84}, 0x6e6bb2, 0x1}, [@user_kmaddress={0x2c, 0x13, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty, 0x0, 0xa}}, @migrate={0x50, 0x11, [{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@ipv4={'\x00', '\xff\xff', @empty}, @in6=@local, @in=@broadcast, 0x33, 0x0, 0x0, 0x34ff, 0xa, 0x2}]}, @policy_type={0xa}]}, 0xd8}, 0x1, 0x0, 0x0, 0x841}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x84) r2 = creat(&(0x7f00000000c0)='./file1\x00', 0x1) ioctl$IOC_PR_PREEMPT_ABORT(r2, 0x401870cc, &(0x7f0000000100)={0xc57a, 0x2, 0x7, 0xa}) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x20080, 0x2880}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_ADDRESS={0xa}]}, 0x48}}, 0x40000) statx(0xffffffffffffffff, &(0x7f0000000080)='my_sys\x00', 0x400, 0x8, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f0000000300)=[0xee01, 0xee01, 0x0, 0xffffffffffffffff, 0xee01, 0xee00]) chown(&(0x7f0000000000)='./file1\x00', r6, r7) chdir(&(0x7f0000000140)='./file0\x00') r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000580)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000010000100040808004149004001040800", 0x58}], 0x1) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) ioctl$NILFS_IOCTL_GET_SUINFO(r8, 0x80186e84, &(0x7f0000000380)={&(0x7f0000000340)=[{0x4, 0x80000001, 0x2}, {0x36c, 0x7, 0x2}, {0xa7c, 0xf4}, {0x1, 0x7, 0x1}], 0x4, 0x10, 0x8, 0x8c}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource0\x00', 0x2, 0x0) pwrite64(r9, &(0x7f0000000600)='U', 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r10 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r11, r12, r13, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x18}) io_uring_enter(r10, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r14 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14d842, 0x39) read$FUSE(r14, &(0x7f0000000800)={0x2020}, 0x2020) 8m30.271198457s ago: executing program 1 (id=1660): socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0xfffffffe, @loopback, 0x5}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="91", 0x1}], 0x1}, 0x48043) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000100001000000000000000071ff9aee24", @ANYRES32=0x0, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2a}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0x317e, 0x4) write$P9_RREAD(r1, &(0x7f0000000300)=ANY=[], 0xb) write$tun(r1, &(0x7f0000000840)=ANY=[], 0x11b0) 8m2.211410977s ago: executing program 1 (id=1664): r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000940)=ANY=[@ANYBLOB="04ff0002"], 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x10, 0x20, 0xf99, 0x6f403a, {{0xc, 0x4, 0x1, 0x3, 0x30, 0x65, 0x0, 0x9, 0x29, 0x0, @empty, @broadcast, {[@noop, @ssrr={0x89, 0x1b, 0xe0, [@dev={0xac, 0x14, 0x14, 0x34}, @private=0xa010101, @local, @broadcast, @empty, @remote]}]}}}}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x1c, 0x17, 0x1, 0x70bd26, 0x25dfdbff, {0xb}, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@multicast1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48c1}, 0x40010) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xf8, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x4e24, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, r2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@mcast2, 0x0, 0x4}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000140)=0x8, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4e22, @broadcast}, 0x10) r4 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000000300), &(0x7f0000000340)=0x4) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r5, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4840}, 0x40000) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 8m2.211169453s ago: executing program 34 (id=1664): r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000940)=ANY=[@ANYBLOB="04ff0002"], 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x10, 0x20, 0xf99, 0x6f403a, {{0xc, 0x4, 0x1, 0x3, 0x30, 0x65, 0x0, 0x9, 0x29, 0x0, @empty, @broadcast, {[@noop, @ssrr={0x89, 0x1b, 0xe0, [@dev={0xac, 0x14, 0x14, 0x34}, @private=0xa010101, @local, @broadcast, @empty, @remote]}]}}}}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x1c, 0x17, 0x1, 0x70bd26, 0x25dfdbff, {0xb}, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@multicast1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48c1}, 0x40010) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xf8, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x4e24, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, r2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@mcast2, 0x0, 0x4}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000140)=0x8, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4e22, @broadcast}, 0x10) r4 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000000300), &(0x7f0000000340)=0x4) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r5, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4840}, 0x40000) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 5.969779389s ago: executing program 5 (id=3968): r0 = socket(0x2, 0x3, 0x6) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000002400)={0x2, 0x0, @multicast2}, 0x10) 5.964877861s ago: executing program 5 (id=3969): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/direction\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='1', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1/first_group\x00', 0x1, 0x0) write(r1, &(0x7f0000000600)='2', 0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r2, 0x80845663, &(0x7f0000000000)={0x0, @reserved}) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="160000000000000004000000"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=[r3]}, 0x80) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0c00000004000000040000001500000000000000", @ANYRES32=r3], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2, r4}, 0x38) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000140)={r4, 0x58, &(0x7f0000000300)}, 0x10) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) add_key$user(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)='e', 0x1, 0xfffffffffffffffe) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="4000000010000304fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000232000002000128008000100677470001400028008000200", @ANYRES32, @ANYBLOB="08006c5c4d94250100", @ANYRES32, @ANYBLOB], 0x40}, 0x1, 0xba01}, 0x0) request_key(&(0x7f0000000280)='user\x00', 0x0, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000340)={0xffffffff, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000041000000850000007d00000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0xf, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0}, 0x94) 5.713763661s ago: executing program 5 (id=3970): syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d4"]) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000040), 0xe09) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0xff2e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$vicodec0(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0185648, &(0x7f0000000100)={0x0, 0x400, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r4 = getpid() sched_setattr(r4, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7ffd, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x118f, 0x8000}, 0x0) keyctl$read(0xb, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) socket$kcm(0xa, 0x1, 0x106) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r8, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x4006, r7, 0x0}]) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="186091709ad9c51e610d58b34dc308f7ffffffffffffff00"/35, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x52, '\x00', 0x0, @fallback=0x9af8dba271b76fd5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.946905255s ago: executing program 4 (id=3979): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mlockall(0x5) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$packet(r0, &(0x7f0000000180)={0x11, 0x3, r2, 0x1, 0xf4, 0x6, @remote}, 0xfffffffffffffd26) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001040)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x1d, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000feffffffb7080000000000007b8af8ff00000000b7080000080000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a5000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000810000085000000a700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6}, 0xc) sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="10000000151401"], 0x10}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)=0x0) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="020114007cff18000e3580009f000114600000060600ac141414e0000003808a8972bd0b72e4a139697dd206"], 0xdd12}, {&(0x7f0000000600)={0x244, 0x19, 0x20, 0x70bd2d, 0x25dfdbfb, "", [@generic="62f1a6534a48a52a210751b9e7b59ec13fc2b7607085b3b22e9a4ad5e65e12b8de82453c", @typed={0x8, 0x116, 0x0, 0x0, @pid=r7}, @generic="cb43bcb0a71bf04cee0e483d45b17c6207493cb3e3debd98355a3cf4659e2d3417e9eb86aa29ab33cf213b", @generic="1ac04198adb79d135e3372a779660c2fea218bb58b728af33c93ed052b6f3ca2b8374e0e693eca2ecbef74bd0a5d3087720f235806ca3015846b270370e382d8543a09dea84f6c94eef1ff4106d625a09345eda68c2b88913881790c9ed2d2838612fc4c", @generic="ab95de6d6c369b89686198dd75701450952fd0a81bab8fedbc116424d94d2b8c13fefa49b596ad162da6429ab0c473d628711047ded34b57bfde9fbc594407d2b2a0b9c9df9db742989157ca82f77c678f29716f523fa50224d9745e1019c615b7422a0b6b67a8e61b480eba8a172d5cded7f1011555", @generic="787faf841b7d6cc157507760444d2aaf53198c84c662a2e605aa960feef4e861c8fd26880a", @generic="e204329b46ff7147d2a4292ad44a1d6b14305ade163e8ead2980a2caaa29346338f10277bb2ee961aee569bb0617cbd232e0c4b2dea4f9a60852880d08ab65b862299eca37822538ea60fbea25dec8cf0660bd5dfe16c5915676a6247873e68f6cd0719b80f06b7ec5c0620fd110971cb71b3fe478fd840810f82b79c50bd703f61fcb3a3e6636cb3019b91adbbccce9987275c23191981a161b0b65177e5da6ae317b407dc7f9399c685797278be9a1f7248444c0a3a6fb8b4d71462dabee5e2e993445d9db496e0034cb5cc23feb344d1271b46cd51acefe555ad206"]}, 0x244}], 0x2}, 0x20040041) r8 = openat$nmem0(0xffffff9c, &(0x7f0000000200), 0x10000, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r11) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r12, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005880)=@newtfilter={0x30, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {}, {0xd}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c040}, 0x4000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl2\x00', r12, 0x29, 0x47, 0x8, 0xe, 0x57, @mcast2, @private2, 0x10, 0x20, 0x7, 0x5}}) 4.821227778s ago: executing program 4 (id=3980): mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_volume_present\x00', 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0d00000004000000040000000c00000000000000", @ANYRES32=r2], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$dri(0x0, 0x606824f5, 0x191100) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x441c2, 0x0) ftruncate(r4, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r6, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4, 0xf01b0020}}], 0x40000000000013c, 0x700, 0x0) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0x15, 0x0, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdir(&(0x7f00000020c0)='./file0\x00', 0xc) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) unlink(&(0x7f0000000080)='./file0/../file0/file0\x00') rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f00000000c0)='./file0/../file0/file0\x00') close_range(r7, 0xffffffffffffffff, 0x0) sendfile(r5, r4, 0x0, 0x578410eb) 4.611349912s ago: executing program 4 (id=3981): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x70, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9}}, @TCA_ACT_BPF_FD={0x8, 0x5, r3}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x0) 3.851107645s ago: executing program 6 (id=3985): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./myconfig\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'syz', 0x20, 0x1000}, 0x2d, 0xfffffffffffffff9) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r2 = add_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0x3c0a, r1) r3 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc2c45512, &(0x7f0000000340)={{0x7}, 0x0, [0x0, 0x0, 0x0, 0x1, 0x0, 0x100000, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x4, 0x0, 0x0, 0x6, 0x0, 0x1000000, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb8fd, 0x0, 0x0, 0x0, 0xfffffd80, 0x0, 0x9, 0x0, 0x9, 0x0, 0x0, 0x0, 0xc13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0xff, 0x0, 0x2, 0x0, 0x2, 0xfffffffc]}) keyctl$reject(0x13, r2, 0x2, 0x39, r1) mount(0x0, &(0x7f0000000200)='./myconfig\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="1400000038002508dc9500000000000005000000"], 0x14}, 0x1, 0x0, 0x0, 0x4044050}, 0x40010) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fcffffff0000000003000000850000002700000018010000786c6c2500000000002020765c0000ff00000000bfa109004000000007010000f8ffffffb702000008000000b70300000000000085000000060000507abe4df831161900"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000140)="e0b900000000dbe9abc89b2b1259", 0x0, 0xe00, 0x0, 0xfffffffffffffed6, 0x0, 0x0, 0x0, 0x4}, 0x50) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000009968810524711004f320102030109021b0001000000000904000001ff01320009050d0353"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r6, 0xa) r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./myconfig/usb_gadget/g1/functions/SourceSink.0/pattern\x00', 0x1, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000000180)={0x1c, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0xfe, 0x2, 0x0, 0x93}, 0xe) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xa, 0x4c831, 0xffffffffffffffff, 0x3000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x1) pselect6(0x40, &(0x7f0000000100)={0x9, 0x0, 0x4000000000, 0x0, 0xa48f, 0x0, 0x800010100000}, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r8, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r8, 0x1) write(r7, &(0x7f0000000700)='1\x00', 0x2) 3.779597075s ago: executing program 4 (id=3986): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./myconfig\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'syz', 0x20, 0x1000}, 0x2d, 0xfffffffffffffff9) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r2 = add_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0x3c0a, r1) r3 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc2c45512, &(0x7f0000000340)={{0x7}, 0x0, [0x0, 0x0, 0x0, 0x1, 0x0, 0x100000, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x4, 0x0, 0x0, 0x6, 0x0, 0x1000000, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb8fd, 0x0, 0x0, 0x0, 0xfffffd80, 0x0, 0x9, 0x0, 0x9, 0x0, 0x0, 0x0, 0xc13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0xff, 0x0, 0x2, 0x0, 0x2, 0xfffffffc]}) keyctl$reject(0x13, r2, 0x2, 0x39, r1) mount(0x0, &(0x7f0000000200)='./myconfig\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="1400000038002508dc9500000000000005000000"], 0x14}, 0x1, 0x0, 0x0, 0x4044050}, 0x40010) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fcffffff0000000003000000850000002700000018010000786c6c2500000000002020765c0000ff00000000bfa109004000000007010000f8ffffffb702000008000000b70300000000000085000000060000507abe4df831161900"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000140)="e0b900000000dbe9abc89b2b1259", 0x0, 0xe00, 0x0, 0xfffffffffffffed6, 0x0, 0x0, 0x0, 0x4}, 0x50) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000009968810524711004f320102030109021b0001000000000904000001ff01320009050d0353"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r6, 0xa) r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./myconfig/usb_gadget/g1/functions/SourceSink.0/pattern\x00', 0x1, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000000180)={0x1c, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0xfe, 0x2, 0x0, 0x93}, 0xe) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xa, 0x4c831, 0xffffffffffffffff, 0x3000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x1) pselect6(0x40, &(0x7f0000000100)={0x9, 0x0, 0x4000000000, 0x0, 0xa48f, 0x0, 0x800010100000}, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r8, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r8, 0x1) write(r7, &(0x7f0000000700)='1\x00', 0x2) 3.711524997s ago: executing program 3 (id=3987): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e26, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000380)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000240)={r1, 0x8a, 0x20, 0x8, 0x3ffffffc}, &(0x7f0000000200)=0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024001000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03000000000000000000020000000900020073797a30000000000900010073797a30000000002c0003800800024000000000080001400000000018000380140001006d61630400633000000000000000000014000000110001"], 0x80}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r4, 0x10e, 0xa, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r6, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0xfffc, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) r7 = openat$sndseq(0xffffff9c, &(0x7f0000000540), 0x8080) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r7, 0x40a45321, &(0x7f0000000600)={{0x5, 0xd9}, 'port0\x00', 0x41, 0x20048, 0x58a, 0x0, 0x5, 0x18, 0x1, 0x0, 0x6, 0x80}) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f00000000c0)={0xfd, 0x0, 0xfe, 0x22, 0x0, 0x7, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3}, 0xe) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') preadv(r8, &(0x7f0000000340)=[{&(0x7f0000000180)=""/112, 0x70}], 0x1, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r8, 0xc010643a, &(0x7f0000000200)={0x0, 0x3, 0x401}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100003000010003000000fbdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x14, r11, 0x421, 0x709d2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x0, 0x8, 0x4010, r8, 0x0) sendmsg$NL80211_CMD_DEL_PMK(r8, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="090424bd707766dbdf257c00000008000300", @ANYRES32=r12, @ANYBLOB="0c00990008000000060000000a00060008021100000100000a0006000802110000000000"], 0x40}, 0x1, 0x0, 0x0, 0x20008014}, 0x2000050) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000425bd7000ffdbdf251200000008000300", @ANYRES32=r12, @ANYBLOB="2100130003a8212e25f8f5d5186e13aefcbb8683338101830406364802026016b68b1b2cde051b98868598b698a4000000050013010000000006001a01040000000600ab00fd0000000a00bd0003000300060000000600ed00dd050000"], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x4010) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="20000000170a0101"], 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x800) 2.789929927s ago: executing program 3 (id=3988): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0xf000, 0x3, &(0x7f0000009000/0xf000)=nil) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @loopback}}, 0x0, 0x0, 0x13, 0x0, "e83ae75240d9d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0208df8e61740b7cf2d4e499d586ed9fcf0fa0ce1f930c3079cffcfd0000000000db7291f100"}, 0xd8) syz_emit_ethernet(0x4a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa4386dd600a3ff200140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="2f95000090780000"], 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='numa_maps\x00') init_module(&(0x7f0000000d40)=ANY=[], 0xa99, &(0x7f0000001800)='GPL\x00') chdir(&(0x7f0000000280)='./file0\x00') setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$SEG6(&(0x7f0000000fc0), 0xffffffffffffffff) 2.460437956s ago: executing program 6 (id=3989): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e24, 0xf, @mcast1, 0x2}], 0x1c) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) socket(0x2, 0x3, 0xff) syz_emit_ethernet(0x22, &(0x7f00000001c0)={@broadcast, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x3, 0xc, 0x14, 0x64, 0x0, 0x3, 0xff, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}}}}}}, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x8, r3, 0x1}) r6 = socket(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x18, 0x2, {{0x0, 0x0, 0x20, 0x80, 0xffffffff}, 0x0, 0x0, 0x4, 0x6, 0x2e, 0x14, 0x0, 0x0, 0x4, 0x0, {0x0, 0x3, 0x8, 0x0, 0x3}}}}]}, 0x78}}, 0x0) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e23, 0x9, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x1}, 0x1c) ioctl$DMA_BUF_SET_NAME_A(r5, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xe, [0x6, 0x1, 0x7fff, 0x1, 0x4, 0x40, 0xcc26, 0xffb, 0xae, 0xb69, 0xc1, 0x81, 0x1, 0x3, 0x5, 0xa1, 0xffc, 0x9, 0x701, 0x3, 0x40001, 0xfffffffa, 0x4, 0x6, 0x9, 0x4, 0x4, 0x5, 0x100000, 0x762, 0x3, 0xf, 0xe, 0x2b12, 0xb6, 0x6, 0x1c00, 0xb, 0x8, 0xbed4, 0x2000008, 0x8000100, 0x3, 0x0, 0x8, 0x8, 0x5, 0x79b, 0xfffffff7, 0x1, 0x5, 0x4, 0x7, 0x7, 0x10, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xfc55, 0x81, 0x2, 0x180001, 0x4007, 0x80002, 0x2, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x6, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x0, 0x401, 0x752, 0x0, 0x3, 0x0, 0x401, 0x2, 0x0, 0x6, 0x3, 0x3, 0x80000001, 0xfdffffff, 0x5a3, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x6, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8000, 0x200ada0, 0x1fc, 0x3, 0x4]}}) fsmount(r5, 0x1, 0x82) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'wg1\x00'}) 2.460056041s ago: executing program 6 (id=3990): socket$nl_generic(0x10, 0x3, 0x10) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x404c03, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x9}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x810}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f62726964676500140001007767"], 0xa8}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c697000140007800800064000000200080008"], 0x60}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r6], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)={0x1c, 0x44, 0x107, 0xfffffffe, 0x25dfdbfc, {0x3, 0x7c}, [@nested={0x4, 0x145}, @nested={0x4, 0x1}]}, 0x1c}}, 0xc000) socket$igmp6(0xa, 0x3, 0x2) 1.861323164s ago: executing program 3 (id=3991): r0 = syz_open_dev$cec(0x0, 0x0, 0x0) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000280)={0x40000000001, 0x1, 0x100004, 0xfff, 0xfffffff5, 0x5, "0fa000", 0x0, 0x5, 0x0, 0x4, 0x0, 0x4, 0xff}) 1.860952126s ago: executing program 3 (id=3992): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x1a8043, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000010010401040000000000000000000000080500010003000000"], 0x1c}}, 0x24008880) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r3, 0x4020aed2, &(0x7f0000000300)={0x80a0000, 0x3000}) ioctl$KVM_IOEVENTFD(r1, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0xfec00000}) r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0xb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x5, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000500a8000600200006400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r7, &(0x7f0000000480)={0x2, 0x4e27, @broadcast}, 0x10) sendmmsg$sock(r7, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}}, {{&(0x7f0000000c80)=@ieee802154={0x24, @short={0x2, 0x2, 0xfffe}}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000600)="cc4e84e601b469014be5d596704fe1a6a1cc6e601c15b01c8c9ea9c2f388973d27d013a3d87edbd76dad00e81754c087e35df1508914bf4aebffd5d7ab5db9e1033db716e640c16011fae5defd8c6d9eb12ffc22b821dc5821fe91941f9d004d1e5d27964037c1c9b512541af7de37b9c6ab4d65f84464a14d04b022521def68364e33b77249a0cfc7302c706b9b216fe2a5494d9de275f814", 0x99}, {&(0x7f00000006c0)="483ce570ae21854433b4869d6404c7cf40004a405ababe2a221b0138e9e25b7e01dc59e23fa416069560ba23319ab6cf511cab33aab0708d4ed23cc8ba8c27585d968ebe4e7a9869c0fa2065f72a5d25bdeb852ab28b3c29520975808451ebb9130f4574b8697514b862f1008e8e3d5c5287a4a42ae74f57b1cb26f681a04d2bfda67f088708b76d7405bfbcd98bd18afda2df4ecb7814c10cda6a", 0x9b}, {&(0x7f0000000780)="ddc568d165a75e56807895eb696545ba59c660f020446d2a03e22940425f4b5527b8d7167e764e19cd570fc136a084ded274e133816e3cf77fb9990c24a0709e1270f48e24aeedbc94cd4257c463a690d8435e5ce89ea1e379cb34a1dd6cd6bbba740a773c98ebd8e6da2a98809e1369521b9f938a9a4f8c2ba2b9f972f508d4615ddf8d35e7d0514876fb817848e49184b3b6fd7279", 0x96}, {&(0x7f0000000840)="ed9eb26b24e46ddbb5f261cadefe59242358a5ed91e3a3b2031906b3142d057137705e2892d85fb7e6f922e5f655ad7a727b042c41adc6c6737a30507a6ac2ddf1c4dadd545465f5a0447b83350e445a6bf95c3764b853ef94b0fd90f13fc176765a629cda19beced97ade2ecffa49a9738f47d045acac0dc70d682c2aabd68d1713d361366c5e57", 0x88}, {&(0x7f0000000900)="3fa42b6edf6ce3742617f5bba5095f78e3edd66a2e7e749b60df62786669b10804941115755a9006ba258888f2", 0x2d}, {&(0x7f00000010c0)="eb15fe77d053182d57993a51ed9224619a9fb488243b2b469bc24ad4472812bca639baa4fac2324b96113333075269bdf1b1308fc3ed6b6f0bc71000b29817a539824cc895ad184886296a36af731cec4ca5311e2b29bc65e398955009fc24d407132c9c3c9a1c6cf69fba823efa40fe766135b34aa5ebf7fb8d96a02ef7e744623fb013d79d8e7c3d15230945c84fd4138f1f80c972527efe0fee0a3546bcefae2de57ed2a83e3525f2f0e0ab4c2b3ebcdf6cd72a37707bc7930477e48bc4ff08e05b3773fc7d05c75496986620d752dde49420ea4679", 0xd7}, {&(0x7f0000000a80)="c5a9bbaa1407d1698b7ac69138096ba7b843e7a2b0de806af68dd7a2833457396b3402640c9157cf0d25d68234fa9e44bb664e5ba45d7f496c7ff0653f81939c5494184e8245a508cab76a4e7b6ea6e618718c1f3e9132f55288fb0a8469eb1bef05a7e986ea2c2ea9af485dfa900f7b652270a7263b53273fe096d804dcac2cb9437a0ed0048aee89abe960ca9ad1b9544fc41374606cf2ec127666339d0b09080d9ede8eca99c5ed6155039e5eec0461f7fe0e851c2c3390f98ad31f06c422a7a8bdfcc5c24dbf72a86e6725bea3e27cc9c027a886cead870aa22a4e2cc70996a3e3c552de52eae4dd0e9a96980d", 0xef}], 0x7, &(0x7f0000000440)=[@mark={{0x10, 0x1, 0x24, 0x2}}, @txtime={{0x14, 0x1, 0x3d, 0x4}}, @txtime={{0x14, 0x1, 0x3d, 0x15}}], 0x38}}, {{&(0x7f0000000c00)=@llc={0x1a, 0x4, 0x0, 0x6, 0xf6, 0x1, @broadcast}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000fc0)="2855ba49ff25973cdfade5e6bfed706d23fba7d897a040cfc02b6d0332051f0e71f8390d7c423b615118b79966ca053f4b00000000c3d0882a1ffa960338a0b8fffaab217b7bc1e9d076aa244ec2a28e9ba1be7beb97217f09d28e74733199f8ca7b96f658e415736ef7e1fc62844d4c758e1abab668020fecaf92f159139ee59f44e4f9e6f2c8ad25789c0f485282268a1f74bbb75108e6de5992feaa7ec8d3ea72d365ebdd7300f12ac7fe9cc59ec2aa88f7993a4568a2870cc12ad85ba24ed3902ab42bed5d8e2de9f33221587f95889c40", 0xd3}, {&(0x7f0000000d00)="6fa5e4494e93", 0x6}, {&(0x7f0000000d40)="f28a7e3e431f0ad864b4b6980458f5687f1251529e0f34af055b76e67ea7d59f6f6ba33f76ade615a7665c1c8d9b77d7cf1a992797e7d4a9b2c9af3f3d1060079c7f7bc954b14ec172aa25fd04149015b4bf9f78fc26a6a21c", 0x59}, {&(0x7f0000000dc0)="59571bd9e812677fde9dd12bcc0856383385c6e4fbaf9afa4ac3a5be9744cb828bd59d23c4c93f889d2e82fa929126", 0x2f}], 0x4, &(0x7f0000000e40)=[@timestamping={{0x10}}], 0x10}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000580)="3fbf6a7e61255cb564b7ecc870e4642e1f6748328a0106efd3c5215e7f8e24f513635e03a7f403d55c1f3c9756a573aecdb313e8dcc5d27c4a1bbd888bb3166c925ad6e457e905aea1b51c4a0a4010080c907ea8b55635824d2b754b3c3b5d572d4a3edf88612bca188c", 0x6a}], 0x1}}], 0x4, 0x20000000) ioctl$vim2m_VIDIOC_STREAMON(r5, 0x40045612, &(0x7f0000000080)=0x2) r8 = socket$inet6(0xa, 0x1, 0x568) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000400)=0x9) bind$inet6(r8, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000080)="0000000000000001ff690000000000010000000000000002010200861fa72e5b01504104bfeacdd5a9007d167c71e3b8a90400000000000000c833020a6da8881fb79e110483bfadf224a22c76ecc7a56843a85f7df51293f0eb84ef8f0f07342db3b0e5a5647b7bed1fbf069ca713670adf7d9fb6d2600fd9c1981fe9f095cfe9d2fe1e1e34f6096bf02543747b2c792890f07c0da0fa25e6fe1062e6c9176a70e4163711764f88495994cfd8a57c1e12f6b5298e7ab3a2bfb58ddf34d58536633c27882e51ced17d67999b00094461", 0xd0, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x9, 0x0, 0x0) recvmsg(r8, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x51}, 0x40000040) ioctl$VIDIOC_DECODER_CMD(r5, 0xc0485660, &(0x7f0000000380)={0x1, 0x2, @raw_data=[0x7ff, 0x0, 0x5, 0xf5088d3e, 0x3, 0x100, 0x4, 0x0, 0xffff, 0x4, 0x549, 0x8, 0x5, 0x9, 0x0, 0x6]}) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r10, &(0x7f0000000200)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @rand_addr=' \x01\x00'}, {0xa, 0xfffb, 0xfffffffd, @loopback}, r11}}, 0x48) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000000)={0xffff1000, 0x10000, 0x8}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000140)={0xffff0000, 0x106000}) mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, 0x0) 1.628344845s ago: executing program 3 (id=3993): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x70, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9}}, @TCA_ACT_BPF_FD={0x8, 0x5, r3}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.295281555s ago: executing program 5 (id=3984): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x0) memfd_create(&(0x7f0000000300)='%.T\x00', 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) mkdir(&(0x7f0000000100)='./config\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1, 0x0) write(r3, &(0x7f0000000a00)='2', 0x1) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f00000000c0)=0x101) write$tun(r2, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], 0x45a) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000180)=0xc, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x9, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000600000000000000074daf00181100006c0668d84f03ea4106bb165fe9af8cce496ee85c54beb26a4eabf828946b6884e7faa5288a14fac938eaf8860925c849fce003b1985a5e664753b377bad37f99604aaf5b5b7c0074cac75861ce3091f18f8efa2fc4e19173f09c152f474e3242908ddc1c876ad20a566c37e32ef4248db50e97c81e4cdecc3dfda53a13188b1a47773aa70969ca053747f6d5aaba", @ANYRES8=0x0, @ANYBLOB="0000000000000000b702000014000000b7190000000700008555090100000000009500000000000000bf91000003000000850000002a000000b7000000000000009500"/88], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x6}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x6, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x8100, 0x22) ioctl$USBDEVFS_RELEASE_PORT(r8, 0x80045519, &(0x7f00000004c0)=0x2b) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=ANY=[@ANYBLOB=',\x00 \x00', @ANYRES16=r6, @ANYBLOB="010026bd7000fbdbdf2501000000050006000800000008000300070000000500050002000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4044}, 0x24004004) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x12, 0xffffffffffffffff, 0x42795000) r9 = socket(0xa, 0x2, 0x0) setsockopt$sock_int(r9, 0x1, 0x2e, &(0x7f0000000040)=0x4, 0x4) readv(r9, &(0x7f0000003600)=[{&(0x7f0000002340)=""/138, 0x8a}], 0x1) landlock_restrict_self(0xffffffffffffffff, 0xc) sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2d0000b5808d264164886c3814f11584a00fe7028712033e6a12a064141819eae826cc1bca76213495fd0d42e0ad701cd4e46fa36d41a6b0edebf5fd7cee0fef603c396b6443793037c811b0e14c88b367b86595da922b32383bec5426c513d89dc9c93f652b0df5d8fe9e0f7691a822acd0ee87c572cd515cf543a1c5c34ccbe368ed87ea5d56c7ff71fbdd24c1c2c73380c8a4d4deb043373e2bbb67bfa1ae80060035f5a21757f9ba5aa63ac10bd5ae46bb2c726af6", @ANYRES16=r6, @ANYBLOB="000127bd7000fcdbdf2501000000050005000600000008000200000000000500050002000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x44010) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) 1.005439208s ago: executing program 5 (id=3994): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000000a0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000a0)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000004c0)='./config/usb_gadget/g1\x00', 0x208) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/idVendor\x00', 0x101001, 0x40) openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x22) write(r3, &(0x7f0000000700)='dummy_udc.0', 0xb) r4 = openat(r2, &(0x7f0000000540)='./dev/ttyGS0\x00', 0x101202, 0xc0) nanosleep(&(0x7f0000000900)={0x1}, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000a00)) read(r4, &(0x7f0000000b00)=""/256, 0x100) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000ac0)={0x0, 0x2d}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000006ee62bc907009f7047ef9a0f9dbd67e042ce101e0335fd5aa2ce1fcc3ed695bbd66a7b06c1b6d3f374ea9ea7c6023e7a051d87baad07728a2d9f736a3421f7d302a69c19a2a1a1b44cb51aad3bd5cf52ec57582e6e7a55af37825148b563571849efe56d326d0fe1fe1722400c1189ea033134c1a160a596f67bd0cc2ea822d0e871e66ea593bd563e3a19b78c1793840df30d75", @ANYRES16=r6, @ANYBLOB="010028bd7000fedbdf251200000006001201400000000600120109000000"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20004010) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x4050000}, 0x20064000) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0xffffffffffffffe6, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYRES64=r5, @ANYRES64=r4], 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4060) 737.488682ms ago: executing program 6 (id=3995): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) memfd_create(0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x404c03, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x9}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x810}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f62726964676500140001007767"], 0xa8}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c697000140007800800064000000200080008"], 0x60}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r6], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)={0x1c, 0x44, 0x107, 0xfffffffe, 0x25dfdbfc, {0x3, 0x7c}, [@nested={0x4, 0x145}, @nested={0x4, 0x1}]}, 0x1c}}, 0xc000) socket$igmp6(0xa, 0x3, 0x2) 647.398141ms ago: executing program 4 (id=3996): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x10000, @loopback, 0x1}, 0x1c) listen(r0, 0x4) 646.88341ms ago: executing program 3 (id=3997): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x8000) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x0, {0x3, 0x8, 0x3003, 0x4, 0x2, 0x6, 0xfffffffffffffffc, 0x770264644c2dca25}}) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000440), &(0x7f0000000380)='./file0\x00', &(0x7f0000000400), 0x1004000, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="0b00000070000100000000000000000019000000", @ANYRES32=r3, @ANYBLOB="100002800c00048008000100c0ffffff"], 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x20040014) chdir(&(0x7f0000000100)='./file0\x00') ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000340)={0x2, 0xff, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x400, 0x10001}) lchown(&(0x7f0000000300)='./file0\x00', r4, 0xee01) open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) getresgid(&(0x7f00000002c0), &(0x7f0000000240), &(0x7f0000000280)) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f00000005c0)='fd', 0x0, r5) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x2) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r8, r8) setpgid(0x0, r8) fchdir(r7) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x2880c98, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) r9 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) ioctl$AUTOFS_IOC_PROTOSUBVER(r9, 0x40049366, 0x0) r10 = socket$inet6(0xa, 0x3, 0x6) getsockopt$inet6_buf(r10, 0x29, 0xd2, 0x0, 0x0) 569.756811ms ago: executing program 4 (id=3998): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0xf000, 0x3, &(0x7f0000009000/0xf000)=nil) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @loopback}}, 0x0, 0x0, 0x13, 0x0, "e83ae75240d9d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0208df8e61740b7cf2d4e499d586ed9fcf0fa0ce1f930c3079cffcfd0000000000db7291f100"}, 0xd8) syz_emit_ethernet(0x4a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa4386dd600a3ff200140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="2f95000090780000"], 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='numa_maps\x00') init_module(&(0x7f0000000d40)=ANY=[], 0xa99, &(0x7f0000001800)='GPL\x00') chdir(&(0x7f0000000280)='./file0\x00') setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$SEG6(&(0x7f0000000fc0), 0xffffffffffffffff) 491.594898ms ago: executing program 6 (id=3999): r0 = syz_open_dev$cec(0x0, 0x0, 0x0) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000280)={0x40000000001, 0x1, 0x100004, 0xfff, 0xfffffff5, 0x5, "0fa000", 0x0, 0x5, 0x0, 0x4, 0x0, 0x4, 0xff}) 491.271916ms ago: executing program 6 (id=4000): mount(&(0x7f0000000100)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='romfs\x00', 0x4004, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x1, 0xfffff168) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="13000000428d0459704c82e700010f00000000fd"], 0x14}, 0x1, 0x0, 0x0, 0x24040000}, 0x400ccc0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) writev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="5c00800a496310e596ace9aeac5fd20b97c19b44d5b22b9c179f6ed0937bd653f3044264979cdb87fe29fa45aa8501213622d67768e9ae001cd8b0d3ad29ede9dd9aa971a911c96c26ebe8ec239e02e723", @ANYRES16, @ANYBLOB="03002bbd7000fbdbdf2531000000080001004d00000008000300", @ANYRES32=r4, @ANYBLOB="0c009900d0080000500000000c00990001000000340000000800db00", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32=r5, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x80c0}, 0x20000000) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703110000001f03000003000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84d0f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4014) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) statx(0xffffffffffffffff, &(0x7f00000005c0)='./cgroup\x00', 0x400, 0x400, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)={{0x1, 0x1, 0x18, r6, {0xee01, 0xee01}}, './cgroup\x00'}) mount$9p_virtio(&(0x7f00000002c0), &(0x7f00000003c0)='./cgroup\x00', &(0x7f0000000440), 0x800, &(0x7f00000007c0)={'trans=virtio,', {[{@access_any}, {@dfltgid}, {@noxattr}], [{@fsname={'fsname', 0x3d, '/sys/kernel/debug/sync/sw_sync\x00'}}, {@subj_role={'subj_role', 0x3d, '(-'}}, {@euid_lt}, {@uid_eq={'uid', 0x3d, r8}}, {@uid_eq={'uid', 0x3d, r9}}]}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000000000009, 0x8e}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) 0s ago: executing program 5 (id=4001): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a74000000060a010400000000000000000200000048000480440001800c0001007061796c6f616400340002800800044000000000080005400000000008000340000000570800024000000001080006402000000208000840000000000900010073797a30000000000900020073797a32"], 0x9c}}, 0x4) r1 = socket$inet6(0xa, 0x3, 0x3) r2 = socket(0x29, 0x80805, 0x0) getsockopt$bt_hci(r2, 0x119, 0x1, 0x0, &(0x7f0000000540)) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = socket$inet(0x2b, 0x801, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$dsp(0xffffffffffffffff, 0x0, 0x0) r5 = openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x20940, 0x0) ioctl$SNDCTL_SEQ_RESET(r5, 0x5100) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="23000000081b000002000000ffff000005"], 0x48) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000a80)={0x0, 0x0, &(0x7f00000003c0), &(0x7f00000009c0), 0x5b0, r6}, 0x38) syz_usb_connect(0x0, 0x24, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000080)="cd6af57f8fd39b6e7c742c5c0ce5f3c0", 0x10) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@loopback, @in=@empty, 0x4f23, 0x0, 0x4e23, 0x2, 0xa, 0x2a11bad3d5f03f04, 0x120, 0x2f}, {0x100000000, 0x2, 0xffffff7ffffffffe, 0x100000000, 0xfffffffffffffffb, 0x3, 0x8, 0x7fff}, {0x4, 0xfffffffffffffffe, 0x4, 0x9}, 0x10001, 0x0, 0x1, 0x0, 0x2, 0x3}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x33}, 0xa, @in=@remote, 0xfffffffe, 0x0, 0x0, 0x17, 0x0, 0x0, 0xfffffffb}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0xffe0) kernel console output (not intermixed with test programs): interface 203 has no altsetting 0 [ 916.429614][T20520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 916.439615][T13012] usb 10-1: New USB device found, idVendor=0df6, idProduct=002c, bcdDevice=c5.27 [ 916.445476][T20520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 916.448407][T13012] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.451455][T13012] usb 10-1: Product: 㔩鼟〦ʙ᠔愷谼៦鰪ï¼ì“¥î¬‚㦰ìµì¶ƒà¶‚ㄬ콹׈ꯪ龗郛㣠 [ 916.461387][T13012] usb 10-1: Manufacturer: 歃穚è«å¹™ç§•ë–ᨵ鬕æ¸çŒè±¿êž£ë¤‡æ©„꡶á¶í·ê¥¯ç‡ží– æŠ´ë»¾é’¦í˜§é“­Òžé¨¢ë¾±áœ¥ä½¡ã¾žìžì† î’€à¸¡è¶—á€î‡¸ç‰­á¤›ï¶¡Ò¥îŠ®ï²€äŽì“žâŠãª¬ãƒ‰î¢œê««á˜Œë†­ã„뙢嗧蛎Ⴂ凋ሲ鲬⌟ã¶ë© è‡í¾Õ©æ¦ä¥²ã©•ê ‡é¾•ê…„ì°Œî†ê™æ¢°í€Šãˆ£ï¼¢ê§­ã›¨á¤â”Œæ©¥ï¤£â‰›ê—¬à¶Œï°»êš¦å¡²ä€¿æ‹˜á±°åŒžäƒ†ì‹ â’ƒå¯¸ãŠ‚峃꽕뜰映앨ç á­• [ 916.496595][T13012] usb 10-1: SerialNumber: 뗓旧뻊䅵ᴙ橿᳈㸖ࡥåˆêŸ«á’譗ꨧ䡼藖鉮쮠籢낅槡å´è˜—⨣ï›çƒŸèŽ—脂飪ﲺæ¬ã£¦ë­¿éµ”â©·å‘Šæšî‹™â¨‰á£ºë²­ç¥‘å…蘌뚕勷椉솤ꇡបå¨çµ€å³ê¹¸î«¾ë«Žé¯°î§§ì¢‡ã“«êŒ²ì«ˆê­ˆã»ã¡¶ì¸‰æµšè¿«é¬¾ì·‘慈麥쨿韟á£ïšºæ²†ç ¤ê½µë “ç¤˜ë„°î¡±ã¢¾ã¦´å‘°è¹ [ 916.511133][T20520] team0: Port device team_slave_0 added [ 916.519917][T20520] team0: Port device team_slave_1 added [ 916.604374][ T5826] dummy0: left allmulticast mode [ 916.613335][ T5826] dummy0: left promiscuous mode [ 916.617276][ T5826] bridge0: port 3(dummy0) entered disabled state [ 916.631449][ T5826] bridge_slave_1: left allmulticast mode [ 916.633857][ T5826] bridge_slave_1: left promiscuous mode [ 916.636373][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 916.642069][ T5826] bridge_slave_0: left allmulticast mode [ 916.644349][ T5826] bridge_slave_0: left promiscuous mode [ 916.646318][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 916.904971][ T5826] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 916.926193][ T5826] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 916.931041][ T5826] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 916.934781][ T5826] bond0 (unregistering): Released all slaves [ 916.939840][ T5826] bond1 (unregistering): Released all slaves [ 916.947259][T20520] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 916.956093][T20520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 916.965388][T20520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 916.972989][T20520] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 916.975302][T20520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 916.985812][T20520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 917.010460][T20520] hsr_slave_0: entered promiscuous mode [ 917.012834][T20520] hsr_slave_1: entered promiscuous mode [ 917.015099][T20520] debugfs: 'hsr0' already exists in 'hsr' [ 917.016931][T20520] Cannot create hsr debugfs directory [ 917.092208][ T5826] tipc: Left network mode [ 917.144847][ T5461] 8021q: adding VLAN 0 to HW filter on device eth5 [ 917.489403][ T5461] 8021q: adding VLAN 0 to HW filter on device eth14 [ 917.629920][ T5756] Bluetooth: hci3: command tx timeout [ 917.681654][ T5826] hsr_slave_0: left promiscuous mode [ 917.690602][ T5826] hsr_slave_1: left promiscuous mode [ 917.693325][ T5826] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 917.695705][ T5826] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 917.698980][ T5826] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 917.702417][ T5826] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 917.710583][ T5826] veth1_macvtap: left promiscuous mode [ 917.712332][ T5826] veth0_macvtap: left promiscuous mode [ 917.714345][ T5826] veth1_vlan: left promiscuous mode [ 917.715980][ T5826] veth0_vlan: left promiscuous mode [ 917.894694][ T5826] team0 (unregistering): Port device team_slave_1 removed [ 917.904832][ T5826] team0 (unregistering): Port device team_slave_0 removed [ 918.054653][T20582] lo speed is unknown, defaulting to 1000 [ 918.098270][T20587] FAULT_INJECTION: forcing a failure. [ 918.098270][T20587] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 918.109267][T20587] CPU: 1 UID: 0 PID: 20587 Comm: syz.6.3442 Tainted: G L syzkaller #0 PREEMPT(full) [ 918.109288][T20587] Tainted: [L]=SOFTLOCKUP [ 918.109292][T20587] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 918.109299][T20587] Call Trace: [ 918.109304][T20587] [ 918.109310][T20587] dump_stack_lvl+0x100/0x190 [ 918.109326][T20587] should_fail_ex.cold+0x5/0xa [ 918.109339][T20587] _copy_to_user+0x32/0xd0 [ 918.109358][T20587] simple_read_from_buffer+0xcb/0x170 [ 918.109392][T20587] proc_fail_nth_read+0x1af/0x230 [ 918.109408][T20587] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 918.109424][T20587] ? rw_verify_area+0xce/0x6d0 [ 918.109440][T20587] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 918.109455][T20587] vfs_read+0x1e4/0xb40 [ 918.109475][T20587] ? __pfx_vfs_read+0x10/0x10 [ 918.109495][T20587] ? find_held_lock+0x2b/0x80 [ 918.109510][T20587] ? __fget_files+0x215/0x3d0 [ 918.109522][T20587] ? __fget_files+0x21f/0x3d0 [ 918.109537][T20587] ksys_read+0x12a/0x250 [ 918.109547][T20587] ? __pfx_ksys_read+0x10/0x10 [ 918.109561][T20587] do_int80_emulation+0x14b/0x720 [ 918.109579][T20587] asm_int80_emulation+0x1a/0x20 [ 918.109590][T20587] RIP: 0023:0xf71572eb [ 918.109600][T20587] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 918.109611][T20587] RSP: 002b:00000000f54164bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 918.109622][T20587] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54165d0 [ 918.109629][T20587] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 918.109636][T20587] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 918.109642][T20587] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 918.109649][T20587] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 918.109663][T20587] [ 918.248543][T20582] lo speed is unknown, defaulting to 1000 [ 918.431301][T20520] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 918.438502][T20520] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 918.441445][T20520] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 918.461625][T20520] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 918.474876][T20520] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 918.486571][T20520] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 918.491296][T20520] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 918.503316][T20520] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 918.507591][ T5826] IPVS: stop unused estimator thread 0... [ 918.603441][T20520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 918.618141][T20520] 8021q: adding VLAN 0 to HW filter on device team0 [ 918.624214][ T6308] bridge0: port 1(bridge_slave_0) entered blocking state [ 918.626523][ T6308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 918.632837][ T6308] bridge0: port 2(bridge_slave_1) entered blocking state [ 918.635236][ T6308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 918.959822][T13012] usb 10-1: USB disconnect, device number 34 [ 918.959876][T20520] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 919.151412][T20520] veth0_vlan: entered promiscuous mode [ 919.160739][T20520] veth1_vlan: entered promiscuous mode [ 919.183242][T20520] veth0_macvtap: entered promiscuous mode [ 919.189304][T20520] veth1_macvtap: entered promiscuous mode [ 919.202386][T20520] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 919.213463][T20520] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 919.223459][ T5829] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.226780][ T5829] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.232790][ T5829] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.236214][ T5829] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.281006][ T6308] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 919.284862][ T6308] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 919.327742][ T6299] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 919.332147][ T6299] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 919.699394][ T5756] Bluetooth: hci3: command tx timeout [ 921.779323][ T5756] Bluetooth: hci3: command tx timeout [ 922.193856][T20643] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 922.211127][T20644] : entered promiscuous mode [ 922.407481][T20656] Invalid ELF header magic: != ELF [ 922.453620][T20650] netlink: 'syz.3.3446': attribute type 10 has an invalid length. [ 922.457251][T20650] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3446'. [ 922.516015][T20658] 9pnet_virtio: no channels available for device syz [ 923.456838][T20648] Process accounting resumed [ 923.488847][T20660] binder: 20659:20660 ioctl c08c5102 80000240 returned -22 [ 923.606616][T20663] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3448'. [ 923.859309][ T5756] Bluetooth: hci3: command tx timeout [ 925.131593][T20681] lo speed is unknown, defaulting to 1000 [ 925.332475][T20681] lo speed is unknown, defaulting to 1000 [ 925.603447][T20697] Invalid ELF header magic: != ELF [ 925.889111][T20706] siw: device registration error -23 [ 926.339333][T20713] Invalid ELF header magic: != ELF [ 927.159358][T13667] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 927.184979][T20720] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3464'. [ 927.288884][T20723] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3465'. [ 927.309332][T13667] usb 9-1: Using ep0 maxpacket: 16 [ 927.312408][T13667] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 927.319113][T13667] usb 9-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 927.322486][T13667] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.325047][T13667] usb 9-1: Product: syz [ 927.326455][T13667] usb 9-1: Manufacturer: syz [ 927.327954][T13667] usb 9-1: SerialNumber: syz [ 927.381136][T13667] usb 9-1: config 0 descriptor?? [ 927.384174][T13667] hub 9-1:0.0: bad descriptor, ignoring hub [ 927.385997][T13667] hub 9-1:0.0: probe with driver hub failed with error -5 [ 927.392413][T13667] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 927.566284][T20728] Invalid ELF header magic: != ELF [ 927.686708][T13667] usb 9-1: USB disconnect, device number 41 [ 927.921580][T18535] udevd[18535]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 928.190832][T20739] input: syz0 as /devices/virtual/input/input71 [ 928.268032][T20742] input: syz0 as /devices/virtual/input/input72 [ 928.355474][T20747] siw: device registration error -23 [ 928.398133][T20740] lo speed is unknown, defaulting to 1000 [ 928.419669][T20750] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3474'. [ 928.443092][T20753] overlayfs: missing 'workdir' [ 928.568879][T20740] lo speed is unknown, defaulting to 1000 [ 928.589766][T20761] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 928.659675][ T5849] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 928.732215][T20764] Invalid ELF header magic: != ELF [ 928.784706][T20765] netlink: 'syz.3.3479': attribute type 10 has an invalid length. [ 928.787855][T20765] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3479'. [ 928.794563][T20765] 9pnet_virtio: no channels available for device syz [ 929.550146][ T5849] usb 10-1: Using ep0 maxpacket: 16 [ 929.575235][ T5849] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 929.613180][ T5849] usb 10-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 929.631725][ T5849] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.649483][ T5849] usb 10-1: Product: syz [ 929.651516][ T5849] usb 10-1: Manufacturer: syz [ 929.653524][ T5849] usb 10-1: SerialNumber: syz [ 929.692242][ T5849] usb 10-1: config 0 descriptor?? [ 929.738570][ T5849] hub 10-1:0.0: bad descriptor, ignoring hub [ 929.742038][ T5849] hub 10-1:0.0: probe with driver hub failed with error -5 [ 929.760044][ T5849] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 930.027440][T20776] input: syz0 as /devices/virtual/input/input73 [ 930.127610][ T5849] usb 10-1: USB disconnect, device number 35 [ 930.846889][T20789] overlayfs: missing 'workdir' [ 931.020375][T20784] bond0: (slave bridge0): Releasing backup interface [ 931.022761][ T5897] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 931.036978][T20784] bridge0: port 3(dummy0) entered disabled state [ 931.039081][T20784] bridge0: port 2(bridge_slave_1) entered disabled state [ 931.041383][T20784] bridge0: port 1(bridge_slave_0) entered disabled state [ 931.046053][T20806] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 931.051760][T20784] dummy0: left allmulticast mode [ 931.053489][T20784] dummy0: left promiscuous mode [ 931.055119][T20784] bridge0: port 3(dummy0) entered disabled state [ 931.060941][T20784] bridge_slave_0: left allmulticast mode [ 931.062805][T20784] bridge_slave_0: left promiscuous mode [ 931.064614][T20784] bridge0: port 1(bridge_slave_0) entered disabled state [ 931.068512][T20784] bridge_slave_1: left allmulticast mode [ 931.070929][T20784] bridge_slave_1: left promiscuous mode [ 931.072779][T20784] bridge0: port 2(bridge_slave_1) entered disabled state [ 931.077707][T20784] bond0: (slave bond_slave_0): Releasing backup interface [ 931.084644][T20784] bond0: (slave bond_slave_1): Releasing backup interface [ 931.094011][T20784] team0: Port device team_slave_0 removed [ 931.098586][T20784] team0: Port device team_slave_1 removed [ 931.107030][T20784] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 931.110242][T20784] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 931.119954][T20784] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 931.124437][T20784] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 931.135141][T20808] syz_tun: entered allmulticast mode [ 931.139741][T20806] lo: entered allmulticast mode [ 931.143991][T20805] syz_tun: left allmulticast mode [ 931.251320][T20811] overlayfs: missing 'workdir' [ 931.358260][T20814] input: syz0 as /devices/virtual/input/input74 [ 932.021012][ T5828] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 932.051194][T20837] overlayfs: missing 'workdir' [ 932.125055][T20840] Invalid ELF header magic: != ELF [ 932.159473][ T5849] usb 11-1: new high-speed USB device number 29 using dummy_hcd [ 932.509328][ T5849] usb 11-1: Using ep0 maxpacket: 32 [ 932.518890][ T5849] usb 11-1: config 0 has an invalid interface number: 1 but max is 0 [ 932.522003][ T5849] usb 11-1: config 0 has no interface number 0 [ 932.531417][ T5849] usb 11-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 932.534737][ T5849] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.538068][ T5849] usb 11-1: Product: syz [ 932.541086][ T5849] usb 11-1: Manufacturer: syz [ 932.543760][ T5849] usb 11-1: SerialNumber: syz [ 932.554213][ T5849] usb 11-1: config 0 descriptor?? [ 932.571526][ T5849] usb 11-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 932.575323][ T5849] usb 11-1: selecting invalid altsetting 1 [ 932.577897][ T5849] usb 11-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 932.591501][ T5849] usb 11-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 932.596560][ T5849] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 932.599581][ T5849] usb 11-1: media controller created [ 932.634606][ T5849] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 933.022526][T20851] binder: 20850:20851 ioctl c08c5102 80000240 returned -22 [ 933.116932][T20853] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3506'. [ 933.122559][T20853] binder: 20850:20853 unknown command 0 [ 933.125101][T20853] binder: 20850:20853 ioctl c0306201 800004c0 returned -22 [ 933.859729][ T5849] usb 11-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 933.861940][ T5849] zl10353_read_register: readreg error (reg=127, ret==-110) [ 933.933807][ T5849] usb 11-1: USB disconnect, device number 29 [ 933.993814][T20864] overlayfs: missing 'workdir' [ 934.087408][T20866] lo: entered allmulticast mode [ 934.090496][T20866] tunl0: entered allmulticast mode [ 934.093392][T20866] gre0: entered allmulticast mode [ 934.096208][T20866] gretap0: entered allmulticast mode [ 934.098540][T20866] erspan0: entered allmulticast mode [ 934.100978][T20866] ip_vti0: entered allmulticast mode [ 934.103239][T20866] ip6_vti0: entered allmulticast mode [ 934.105716][T20866] sit0: entered allmulticast mode [ 934.108511][T20866] ip6tnl0: entered allmulticast mode [ 934.111126][T20866] ip6gre0: entered allmulticast mode [ 934.113737][T20866] syz_tun: entered allmulticast mode [ 934.115840][T20866] ip6gretap0: entered allmulticast mode [ 934.118375][T20866] bridge0: entered allmulticast mode [ 934.905866][T20881] 9pnet_virtio: no channels available for device syz [ 934.986394][T20883] netlink: 'syz.5.3517': attribute type 21 has an invalid length. [ 934.988942][T20883] netlink: 128 bytes leftover after parsing attributes in process `syz.5.3517'. [ 934.992630][T20883] netlink: 'syz.5.3517': attribute type 5 has an invalid length. [ 934.995212][T20883] netlink: 'syz.5.3517': attribute type 6 has an invalid length. [ 934.997643][T20883] netlink: 3 bytes leftover after parsing attributes in process `syz.5.3517'. [ 935.098158][T20881] lo speed is unknown, defaulting to 1000 [ 935.395937][T20889] overlayfs: missing 'lowerdir' [ 935.528228][T20881] lo speed is unknown, defaulting to 1000 [ 935.896645][T20896] lapbether: lapb_data_request error - 4 [ 935.990797][T20905] binder: 20903:20905 ioctl c08c5102 80000240 returned -22 [ 936.134503][T20912] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3522'. [ 936.148735][T20912] binder: 20903:20912 unknown command 0 [ 936.151205][T20912] binder: 20903:20912 ioctl c0306201 800004c0 returned -22 [ 936.212544][T20912] binder: 20903:20912 ioctl c0306201 0 returned -14 [ 936.241426][T20904] overlayfs: missing 'lowerdir' [ 936.386554][T20918] Invalid ELF header magic: != ELF [ 936.960805][ T5897] usb 11-1: new high-speed USB device number 30 using dummy_hcd [ 937.109423][ T5897] usb 11-1: Using ep0 maxpacket: 32 [ 937.114493][ T5897] usb 11-1: config 0 has an invalid interface number: 1 but max is 0 [ 937.117246][ T5897] usb 11-1: config 0 has no interface number 0 [ 937.122802][ T5897] usb 11-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 937.127672][ T5897] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.132138][ T5897] usb 11-1: Product: syz [ 937.133855][ T5897] usb 11-1: Manufacturer: syz [ 937.135361][ T5897] usb 11-1: SerialNumber: syz [ 937.139524][ T5897] usb 11-1: config 0 descriptor?? [ 937.144749][ T5897] usb 11-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 937.148438][ T5897] usb 11-1: selecting invalid altsetting 1 [ 937.150950][ T5897] usb 11-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 937.155505][ T5897] usb 11-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 937.159796][ T5897] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 937.163140][ T5897] usb 11-1: media controller created [ 937.174544][ T5897] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 937.357597][T20929] netlink: 'syz.5.3528': attribute type 21 has an invalid length. [ 937.360525][T20929] netlink: 128 bytes leftover after parsing attributes in process `syz.5.3528'. [ 937.363733][T20929] netlink: 'syz.5.3528': attribute type 5 has an invalid length. [ 937.366399][T20929] netlink: 'syz.5.3528': attribute type 6 has an invalid length. [ 937.369251][T20929] netlink: 3 bytes leftover after parsing attributes in process `syz.5.3528'. [ 937.507744][T20931] lo speed is unknown, defaulting to 1000 [ 937.727387][T20931] lo speed is unknown, defaulting to 1000 [ 938.029089][T20941] overlayfs: missing 'lowerdir' [ 938.269525][ T5897] usb 11-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 938.274588][ T5897] zl10353_read_register: readreg error (reg=127, ret==-110) [ 938.287679][T20946] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3532'. [ 938.703481][T20952] Invalid ELF header magic: != ELF [ 938.804808][T20954] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 938.944143][T20957] netlink: 'syz.5.3534': attribute type 10 has an invalid length. [ 938.947095][T20957] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3534'. [ 938.962861][T20957] 9pnet_virtio: no channels available for device syz [ 939.141816][ T5897] usb 11-1: USB disconnect, device number 30 [ 939.545551][T20963] 9pnet_virtio: no channels available for device syz [ 939.593575][T20965] binder_alloc: binder_alloc_mmap_handler: 20958 80ffc000-81000000 already mapped failed -16 [ 939.618766][ T42] audit: type=1804 audit(2000000519.959:598): pid=20963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3536" name="/newroot/29/cgroup.controllers" dev="tmpfs" ino=219 res=1 errno=0 [ 939.631896][ T42] audit: type=1800 audit(2000000519.959:599): pid=20963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3536" name="cgroup.controllers" dev="tmpfs" ino=219 res=0 errno=0 [ 939.749570][T20967] netlink: 'syz.4.3537': attribute type 21 has an invalid length. [ 939.752159][T20967] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3537'. [ 939.755056][T20967] netlink: 'syz.4.3537': attribute type 5 has an invalid length. [ 939.759305][T20967] netlink: 'syz.4.3537': attribute type 6 has an invalid length. [ 939.762006][T20967] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3537'. [ 939.840358][T20969] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 939.843110][T20969] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 939.971032][T20973] lo speed is unknown, defaulting to 1000 [ 939.971872][T20972] tmpfs: Bad value for 'mpol' [ 940.322414][T20973] lo speed is unknown, defaulting to 1000 [ 940.870275][T20982] overlay: Unknown parameter '/' [ 941.162157][T20992] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3544'. [ 941.165625][T20992] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 941.269282][ T5897] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 941.384869][T20997] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 941.439311][ T5897] usb 10-1: Using ep0 maxpacket: 32 [ 941.467004][T20998] Invalid ELF header magic: != ELF [ 941.476127][ T5897] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 941.482464][ T5897] usb 10-1: config 0 has no interface number 0 [ 941.495038][ T5897] usb 10-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 941.503246][ T5897] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 941.509229][ T5897] usb 10-1: Product: syz [ 941.513552][ T5897] usb 10-1: Manufacturer: syz [ 941.518056][ T5897] usb 10-1: SerialNumber: syz [ 941.529504][ T5897] usb 10-1: config 0 descriptor?? [ 941.541000][ T5897] usb 10-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 941.550517][ T5897] usb 10-1: selecting invalid altsetting 1 [ 941.559239][ T5897] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 941.567709][ T5897] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 941.576806][ T5897] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 941.585634][ T5897] usb 10-1: media controller created [ 941.603528][ T5897] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 941.793798][T21001] netlink: 'syz.3.3546': attribute type 10 has an invalid length. [ 941.798304][ T5756] Bluetooth: hci3: ACL packet for unknown connection handle 1481 [ 941.800190][T21001] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3546'. [ 941.817485][T21001] 9pnet_virtio: no channels available for device syz [ 942.309676][T21007] lo speed is unknown, defaulting to 1000 [ 942.419209][T21007] lo speed is unknown, defaulting to 1000 [ 942.662860][ T5897] usb 10-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 942.676067][ T5897] zl10353_read_register: readreg error (reg=127, ret==-110) [ 942.824273][T21011] siw: device registration error -23 [ 943.086796][ T5897] usb 10-1: USB disconnect, device number 36 [ 943.101118][T13667] usb 11-1: new high-speed USB device number 31 using dummy_hcd [ 943.254816][T21018] lo speed is unknown, defaulting to 1000 [ 943.269347][T13667] usb 11-1: Using ep0 maxpacket: 16 [ 943.273349][T13667] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 943.284822][T13667] usb 11-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 943.288796][T13667] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.294080][T13667] usb 11-1: Product: syz [ 943.296868][T13667] usb 11-1: Manufacturer: syz [ 943.300541][T13667] usb 11-1: SerialNumber: syz [ 943.308646][T13667] usb 11-1: config 0 descriptor?? [ 943.318221][T13667] hub 11-1:0.0: bad descriptor, ignoring hub [ 943.324035][T13667] hub 11-1:0.0: probe with driver hub failed with error -5 [ 943.336001][T13667] usb 11-1: Quirk or no altset; falling back to MIDI 1.0 [ 943.343485][T21022] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 943.346941][T21021] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 943.349992][T21021] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 943.521443][T21026] netlink: 'syz.3.3551': attribute type 10 has an invalid length. [ 943.524215][T21026] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3551'. [ 943.547719][T21026] 9pnet_virtio: no channels available for device syz [ 944.366871][T16556] usb 11-1: USB disconnect, device number 31 [ 944.726509][T21042] overlay: Unknown parameter '/' [ 945.106648][T21047] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3558'. [ 945.262324][T21018] lo speed is unknown, defaulting to 1000 [ 945.477757][T21054] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 945.722520][T21056] netlink: 'syz.5.3560': attribute type 10 has an invalid length. [ 945.725122][T21056] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3560'. [ 945.744486][T21056] 9pnet_virtio: no channels available for device syz [ 946.058700][T21065] IPv6: syztnl0: Disabled Multicast RS [ 946.064181][T21064] input: syz0 as /devices/virtual/input/input75 [ 946.067505][T21067] netlink: 1053 bytes leftover after parsing attributes in process `syz.4.3565'. [ 946.169651][T21068] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 946.182991][T21068] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 946.185626][T21068] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff] [ 946.187824][T21068] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 946.192374][T21068] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 946.202212][T21068] pci 0000:00:01.0: Adding to iommu group 1 [ 946.207020][T21068] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 946.209152][T21068] pci 0000:00:01.0: vgaarb: bridge control possible [ 946.211176][T21068] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 946.218465][T21068] pci 0000:00:02.0: [8086:10d3] type 00 class 0x020000 PCIe Root Complex Integrated Endpoint [ 946.226814][T21068] pci 0000:00:02.0: BAR 0 [mem 0x81040000-0x8105ffff] [ 946.228994][T21068] pci 0000:00:02.0: BAR 1 [mem 0x81060000-0x8107ffff] [ 946.231699][T21068] pci 0000:00:02.0: BAR 2 [io 0x2000-0x201f] [ 946.233642][T21068] pci 0000:00:02.0: BAR 3 [mem 0x81080000-0x81083fff] [ 946.235870][T21068] pci 0000:00:02.0: ROM [mem 0xfea00000-0xfea3ffff pref] [ 946.238908][T21068] pci 0000:00:02.0: enabling Extended Tags [ 946.249312][T21068] pci 0000:00:02.0: Adding to iommu group 2 [ 946.261170][T21068] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 946.264169][T21068] pci 0000:00:02.0: ROM [mem 0x81000000-0x8103ffff pref]: assigned [ 946.266604][T21068] pci 0000:00:02.0: BAR 0 [mem 0x81040000-0x8105ffff]: assigned [ 946.270222][T21068] pci 0000:00:02.0: BAR 1 [mem 0x81060000-0x8107ffff]: assigned [ 946.273475][T21068] pci 0000:00:02.0: BAR 3 [mem 0x81080000-0x81083fff]: assigned [ 946.276561][T21068] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff]: assigned [ 946.282560][T21068] pci 0000:00:02.0: BAR 2 [io 0x2000-0x201f]: assigned [ 946.287831][T21068] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 946.311115][T21068] [drm] Found bochs VGA, ID 0xb0c5. [ 946.314770][T21068] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81084000. [ 946.343213][T21071] netlink: 'syz.3.3567': attribute type 21 has an invalid length. [ 946.347280][T21068] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 946.350061][T21071] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3567'. [ 946.355084][T21071] netlink: 'syz.3.3567': attribute type 5 has an invalid length. [ 946.359695][T21071] netlink: 'syz.3.3567': attribute type 6 has an invalid length. [ 946.364542][T21071] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3567'. [ 946.414929][T21068] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 946.455414][T21068] e1000e 0000:00:02.0: Interrupt Throttling Rate (ints/sec) set to dynamic conservative mode [ 946.524363][T21068] e1000e 0000:00:02.0 0000:00:02.0 (uninitialized): registered PHC clock [ 946.616977][T21083] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3570'. [ 946.627012][T21068] e1000e 0000:00:02.0 eth5: (PCI Express:2.5GT/s:Width x1) 52:54:00:12:34:56 [ 946.630409][T21068] e1000e 0000:00:02.0 eth5: Intel(R) PRO/1000 Network Connection [ 946.633933][T21068] e1000e 0000:00:02.0 eth5: MAC: 3, PHY: 8, PBA No: 000000-000 [ 946.729602][T21089] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3571'. [ 947.347617][ T5461] 8021q: adding VLAN 0 to HW filter on device eth5 [ 947.546251][T21105] syzkaller0: entered promiscuous mode [ 947.552871][T21105] syzkaller0: entered allmulticast mode [ 947.627645][T21109] input: syz0 as /devices/virtual/input/input76 [ 947.753856][T21116] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 947.759431][T21117] 9pnet_virtio: no channels available for device syz [ 947.806445][T20622] e1000e 0000:00:02.0 eth5: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 947.963588][T21119] netlink: 'syz.3.3576': attribute type 10 has an invalid length. [ 947.966581][T21119] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3576'. [ 947.992566][T21119] 9pnet_virtio: no channels available for device syz [ 948.011045][T21118] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 948.227556][T21127] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3579'. [ 948.531535][T21133] Invalid ELF header magic: != ELF [ 948.720764][T21128] random: crng reseeded on system resumption [ 949.305018][T21146] 9pnet_virtio: no channels available for device syz [ 949.918595][T21165] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 949.995078][T21167] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3589'. [ 951.994884][T21190] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 952.000535][T21188] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3595'. [ 952.004584][T21188] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3595'. [ 952.012258][T21188] sit0: entered promiscuous mode [ 952.022541][T21188] netlink: 'syz.6.3595': attribute type 1 has an invalid length. [ 952.028224][T21188] netlink: 1 bytes leftover after parsing attributes in process `syz.6.3595'. [ 952.075043][T21191] netlink: 'syz.4.3594': attribute type 10 has an invalid length. [ 952.077580][T21191] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3594'. [ 952.081125][T21191] bridge0: port 3(dummy0) entered blocking state [ 952.083241][T21191] bridge0: port 3(dummy0) entered disabled state [ 952.085921][T21191] dummy0: entered allmulticast mode [ 952.094511][T21191] dummy0: entered promiscuous mode [ 952.100576][T21191] bridge0: port 3(dummy0) entered blocking state [ 952.102779][T21191] bridge0: port 3(dummy0) entered forwarding state [ 952.123997][T21191] 9pnet_virtio: no channels available for device syz [ 952.379531][T21192] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3595'. [ 952.912023][T21206] Invalid ELF header magic: != ELF [ 953.261559][T21212] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3599'. [ 953.266101][T21212] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3599'. [ 953.271121][T21212] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3599'. [ 953.396688][T21212] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3599'. [ 953.806501][T21220] lo speed is unknown, defaulting to 1000 [ 953.895608][T21220] lo speed is unknown, defaulting to 1000 [ 954.108193][T21225] siw: device registration error -23 [ 954.369239][T16556] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 954.539254][T16556] usb 10-1: Using ep0 maxpacket: 16 [ 954.728988][T21234] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 954.803141][T21235] netlink: 'syz.4.3605': attribute type 10 has an invalid length. [ 954.805726][T21235] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3605'. [ 954.816798][T21235] 9pnet_virtio: no channels available for device syz [ 955.076677][T16556] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 955.180664][T16556] usb 10-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 955.183745][T16556] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 955.186253][T16556] usb 10-1: Product: syz [ 955.187674][T16556] usb 10-1: Manufacturer: syz [ 955.189694][T16556] usb 10-1: SerialNumber: syz [ 955.210715][T16556] usb 10-1: config 0 descriptor?? [ 955.215548][T16556] hub 10-1:0.0: bad descriptor, ignoring hub [ 955.218117][T16556] hub 10-1:0.0: probe with driver hub failed with error -5 [ 955.223392][T16556] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 955.899268][T16556] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 956.079177][T16556] usb 9-1: Using ep0 maxpacket: 32 [ 956.082745][T16556] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 956.085444][T16556] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 956.088332][T16556] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 956.091268][T16556] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 956.094322][T16556] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 956.097338][T16556] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 956.101519][T16556] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 956.104458][T16556] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 956.108695][T16556] usb 9-1: config 0 descriptor?? [ 956.322228][T16556] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 42 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 956.333905][T16556] usb 9-1: USB disconnect, device number 42 [ 956.343656][T16556] usblp0: removed [ 956.759280][T16556] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 956.909220][T16556] usb 9-1: Using ep0 maxpacket: 32 [ 956.912864][T16556] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 956.915611][T16556] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 956.918450][T16556] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 956.921285][T16556] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 956.924193][T16556] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 956.927074][T16556] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 956.931245][T16556] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 956.934058][T16556] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 956.938218][T16556] usb 9-1: config 0 descriptor?? [ 957.141423][ T3998] usb 10-1: USB disconnect, device number 37 [ 957.150281][T16556] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 43 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 957.225021][T21254] syzkaller0: entered promiscuous mode [ 957.227382][T21254] syzkaller0: entered allmulticast mode [ 957.365085][T21239] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 957.369215][T13272] usb 9-1: USB disconnect, device number 43 [ 957.379509][T13272] usblp0: removed [ 957.396931][T21263] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3611'. [ 957.402313][T21263] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3611'. [ 957.402908][T21265] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3612'. [ 957.407880][T21263] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3611'. [ 957.457134][T21266] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 957.566195][T21270] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3611'. [ 957.864935][T21277] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3616'. [ 957.922803][T21280] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3616'. [ 957.926264][T21280] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3616'. [ 957.988841][T21282] netlink: 'syz.4.3617': attribute type 21 has an invalid length. [ 957.991684][T21282] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3617'. [ 957.994771][T21282] netlink: 'syz.4.3617': attribute type 5 has an invalid length. [ 957.997119][T21282] netlink: 'syz.4.3617': attribute type 6 has an invalid length. [ 958.000501][T21282] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3617'. [ 958.314978][T21296] input: syz0 as /devices/virtual/input/input77 [ 958.389649][T21291] lo speed is unknown, defaulting to 1000 [ 958.430273][T21299] dummy0: left allmulticast mode [ 958.431956][T21299] dummy0: left promiscuous mode [ 958.433800][T21299] bridge0: port 3(dummy0) entered disabled state [ 958.446226][T21299] bridge_slave_1: left allmulticast mode [ 958.449354][T21299] bridge_slave_1: left promiscuous mode [ 958.453514][T21299] bridge0: port 2(bridge_slave_1) entered disabled state [ 958.474208][T21303] binder: 21302:21303 ioctl c08c5102 80000240 returned -22 [ 958.487587][T21299] bridge_slave_0: left allmulticast mode [ 958.489528][T21299] bridge_slave_0: left promiscuous mode [ 958.491776][T21299] bridge0: port 1(bridge_slave_0) entered disabled state [ 958.543734][T21291] lo speed is unknown, defaulting to 1000 [ 958.573731][T21309] binder: 21302:21309 unknown command 0 [ 958.584569][T21309] binder: 21302:21309 ioctl c0306201 800004c0 returned -22 [ 959.504519][T21337] netlink: 'syz.5.3631': attribute type 21 has an invalid length. [ 959.507827][T21337] netlink: 'syz.5.3631': attribute type 5 has an invalid length. [ 959.515607][T21337] netlink: 'syz.5.3631': attribute type 6 has an invalid length. [ 959.565324][T21335] program syz.6.3630 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 959.814272][T21345] input: syz0 as /devices/virtual/input/input78 [ 959.833247][T21348] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 960.043015][T21351] netlink: 'syz.3.3634': attribute type 10 has an invalid length. [ 960.093450][T21351] 9pnet_virtio: no channels available for device syz [ 960.389616][T13667] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 960.390954][T13012] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 960.539282][T13667] usb 10-1: Using ep0 maxpacket: 32 [ 960.542913][T13667] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 960.546408][T13667] usb 10-1: config 0 has no interface number 0 [ 960.552620][T13667] usb 10-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 960.556183][T13667] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 960.559315][T13667] usb 10-1: Product: syz [ 960.560722][T13667] usb 10-1: Manufacturer: syz [ 960.562889][T13667] usb 10-1: SerialNumber: syz [ 960.566916][T13667] usb 10-1: config 0 descriptor?? [ 960.571523][T13667] usb 10-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 960.575354][T13667] usb 10-1: selecting invalid altsetting 1 [ 960.577605][T13667] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 960.581723][T13667] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 960.585568][T13667] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 960.588119][T13667] usb 10-1: media controller created [ 960.594526][T13667] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 960.631547][T21363] binder: 21362:21363 ioctl c08c5102 80000240 returned -22 [ 960.639235][T13012] usb 9-1: Using ep0 maxpacket: 8 [ 960.645397][T13012] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 960.648892][T13012] usb 9-1: config 179 has no interface number 0 [ 960.651962][T13012] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 960.656496][T13012] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 960.661146][T13012] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 960.665028][T13012] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 960.668489][T13012] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 960.672574][T13012] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 960.675461][T13012] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 960.687357][T21358] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 960.710110][T21365] binder: 21362:21365 unknown command 0 [ 960.711857][T21365] binder: 21362:21365 ioctl c0306201 800004c0 returned -22 [ 960.860100][T21366] e1000e 0000:00:02.0 eth5: removed PHC [ 960.992062][T21366] e1000e 0000:00:02.0 eth5: NIC Link is Down [ 961.046870][ C0] Unknown status report in ack skb [ 961.224298][T21392] syzkaller0: entered promiscuous mode [ 961.226634][T21392] syzkaller0: entered allmulticast mode [ 961.641291][ T5828] usb 9-1: USB disconnect, device number 44 [ 961.641304][ C1] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 961.705389][T21407] input: syz0 as /devices/virtual/input/input79 [ 961.718044][T13667] usb 10-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 961.732723][T13667] zl10353_read_register: readreg error (reg=127, ret==-110) [ 961.845058][T13667] usb 10-1: USB disconnect, device number 38 [ 961.872818][T21409] siw: device registration error -23 [ 962.149315][T13012] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 962.309306][T13012] usb 9-1: Using ep0 maxpacket: 16 [ 962.313773][T13012] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 962.320927][T13012] usb 9-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 962.325060][T13012] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 962.328654][T13012] usb 9-1: Product: syz [ 962.330586][T13012] usb 9-1: Manufacturer: syz [ 962.332677][T13012] usb 9-1: SerialNumber: syz [ 962.337454][T13012] usb 9-1: config 0 descriptor?? [ 962.341707][T13012] hub 9-1:0.0: bad descriptor, ignoring hub [ 962.344463][T13012] hub 9-1:0.0: probe with driver hub failed with error -5 [ 962.349587][T13012] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 962.986041][T21420] Invalid ELF header magic: != ELF [ 963.162599][T13012] usb 9-1: USB disconnect, device number 45 [ 963.574467][T21422] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 963.648939][T21423] netlink: 'syz.5.3649': attribute type 10 has an invalid length. [ 963.658661][T21423] __nla_validate_parse: 16 callbacks suppressed [ 963.658680][T21423] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3649'. [ 963.716676][T21426] 9pnet_virtio: no channels available for device syz [ 964.019240][T14121] Bluetooth: hci2: command 0x0406 tx timeout [ 964.863433][T21438] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 964.929467][T21443] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3655'. [ 965.006844][T21446] netlink: 'syz.3.3654': attribute type 10 has an invalid length. [ 965.009470][T21446] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3654'. [ 965.031454][T21448] IPv6: NLM_F_CREATE should be specified when creating new route [ 965.038834][T21448] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3653'. [ 965.066905][T21446] 9pnet_virtio: no channels available for device syz [ 965.204143][T21433] syz.4.3653 (21433): drop_caches: 2 [ 965.619654][T13667] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 965.660836][T21455] netlink: 'syz.6.3656': attribute type 12 has an invalid length. [ 965.892552][T21488] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3661'. [ 965.959823][T21493] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 966.026015][T21494] Invalid ELF header magic: != ELF [ 966.095275][T21498] netlink: 'syz.4.3663': attribute type 10 has an invalid length. [ 966.097716][T21498] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3663'. [ 966.101613][T21498] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 966.112990][T21498] 9pnet_virtio: no channels available for device syz [ 966.429810][T21502] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 966.677970][T21504] netlink: 'syz.5.3666': attribute type 12 has an invalid length. [ 966.752053][T21508] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3667'. [ 966.755258][T21508] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3667'. [ 966.808691][T21508] block nbd4: shutting down sockets [ 966.851815][T21514] netlink: 'syz.4.3669': attribute type 11 has an invalid length. [ 966.901980][T21514] A link change request failed with some changes committed already. Interface s may have been left with an inconsistent configuration, please check. [ 967.021599][T21517] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3670'. [ 967.037883][T21517] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3670'. [ 967.139521][ T3998] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 967.260191][T21525] raw_sendmsg: syz.4.3673 forgot to set AF_INET. Fix it! [ 967.290104][ T3998] usb 10-1: Using ep0 maxpacket: 32 [ 967.322667][ T3998] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 967.325321][ T3998] usb 10-1: config 0 has no interface number 0 [ 967.342709][ T3998] usb 10-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 967.349445][ T3998] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 967.355561][ T3998] usb 10-1: Product: syz [ 967.362764][ T3998] usb 10-1: Manufacturer: syz [ 967.364462][ T3998] usb 10-1: SerialNumber: syz [ 967.388164][ T3998] usb 10-1: config 0 descriptor?? [ 967.441548][ T3998] usb 10-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 967.444474][ T3998] usb 10-1: selecting invalid altsetting 1 [ 967.450001][ T3998] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 967.483642][ T3998] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 967.494995][ T3998] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 967.500428][ T3998] usb 10-1: media controller created [ 967.530773][T13012] libceph: connect (1)[c::]:6789 error -101 [ 967.554660][T13012] libceph: mon0 (1)[c::]:6789 connect error [ 967.585439][ T3998] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 967.605824][T13012] libceph: connect (1)[c::]:6789 error -101 [ 967.626839][T13012] libceph: mon0 (1)[c::]:6789 connect error [ 967.749361][T21530] kvm: apic: phys broadcast and lowest prio [ 967.894862][T13012] libceph: connect (1)[c::]:6789 error -101 [ 967.899986][T13012] libceph: mon0 (1)[c::]:6789 connect error [ 968.030766][T21525] ceph: No mds server is up or the cluster is laggy [ 968.133388][ T3998] usb 10-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 968.135796][ T3998] zl10353_read_register: readreg error (reg=127, ret==-71) [ 968.138297][ T3998] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 968.160948][ T3998] usb 10-1: USB disconnect, device number 39 [ 968.409316][ T56] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 968.497512][T21536] loop8: detected capacity change from 0 to 7 [ 968.506535][T21536] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 968.509695][T21536] loop8: partition table partially beyond EOD, truncated [ 968.513129][T21536] loop8: p1 size 1905483274 extends beyond EOD, truncated [ 968.516986][T21536] loop8: p2 start 121280928 is beyond EOD, truncated [ 968.553108][T17870] udevd[17870]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 968.579866][ T56] usb 9-1: Using ep0 maxpacket: 8 [ 968.584332][ T56] usb 9-1: config index 0 descriptor too short (expected 5924, got 36) [ 968.588208][ T56] usb 9-1: config 250 has an invalid interface number: 228 but max is -1 [ 968.592587][ T56] usb 9-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 968.596268][ T56] usb 9-1: config 250 has no interface number 0 [ 968.598934][ T56] usb 9-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 968.602632][T21538] netlink: 'syz.6.3676': attribute type 12 has an invalid length. [ 968.607115][ T56] usb 9-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 968.611895][ T56] usb 9-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 968.616193][ T56] usb 9-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 968.620502][ T56] usb 9-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 968.627055][ T56] usb 9-1: config 250 interface 228 has no altsetting 0 [ 968.631851][ T56] usb 9-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 968.635574][ T56] usb 9-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 968.636350][T21540] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 968.639442][ T56] usb 9-1: Product: syz [ 968.645838][ T56] usb 9-1: SerialNumber: syz [ 968.660693][ T56] hub 9-1:250.228: bad descriptor, ignoring hub [ 968.666250][ T56] hub 9-1:250.228: probe with driver hub failed with error -5 [ 968.814095][T21541] netlink: 'syz.6.3677': attribute type 10 has an invalid length. [ 968.817416][T21541] __nla_validate_parse: 1 callbacks suppressed [ 968.817430][T21541] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3677'. [ 968.826901][T21541] bridge0: port 1(dummy0) entered blocking state [ 968.829833][T21541] bridge0: port 1(dummy0) entered disabled state [ 968.832655][T21541] dummy0: entered allmulticast mode [ 968.861213][ T56] usblp 9-1:250.228: usblp0: USB Bidirectional printer dev 46 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 968.868179][T21542] 9pnet_virtio: no channels available for device syz [ 968.878833][T21541] dummy0: entered promiscuous mode [ 969.088697][T21544] siw: device registration error -23 [ 969.170256][T16556] usb 9-1: USB disconnect, device number 46 [ 969.175767][T16556] usblp0: removed [ 969.391215][T21550] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3680'. [ 969.559267][T13663] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 969.710866][T13663] usb 10-1: Using ep0 maxpacket: 8 [ 969.717000][T13663] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 969.723973][T13663] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 969.727560][T13663] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 969.731857][T13663] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 969.736830][T13663] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 969.740579][T13663] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 969.891579][T21560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3683'. [ 969.895464][T21560] dummy0: left allmulticast mode [ 969.897623][T21560] dummy0: left promiscuous mode [ 969.900362][T21560] bridge0: port 3(dummy0) entered disabled state [ 969.905913][T21560] bridge_slave_1: left allmulticast mode [ 969.908222][T21560] bridge_slave_1: left promiscuous mode [ 969.911143][T21560] bridge0: port 2(bridge_slave_1) entered disabled state [ 969.917055][T21560] bridge_slave_0: left allmulticast mode [ 969.920002][T21560] bridge_slave_0: left promiscuous mode [ 969.922681][T21560] bridge0: port 1(bridge_slave_0) entered disabled state [ 969.955724][T13663] usb 10-1: GET_CAPABILITIES returned 0 [ 969.957815][T13663] usbtmc 10-1:16.0: can't read capabilities [ 970.114443][T21564] Invalid ELF header magic: != ELF [ 970.161037][ T42] audit: type=1326 audit(2000000550.509:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21547 comm="syz.5.3679" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x0 [ 970.265531][T21566] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 970.653643][T21560] bridge0 (unregistering): left allmulticast mode [ 970.751533][T16556] usb 10-1: USB disconnect, device number 40 [ 970.928526][T21576] random: crng reseeded on system resumption [ 971.063040][T21580] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3689'. [ 971.121013][T21586] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 971.229240][T16556] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 971.379229][T16556] usb 10-1: Using ep0 maxpacket: 32 [ 971.382451][T16556] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 971.387902][T16556] usb 10-1: config 0 has no interface number 0 [ 971.391530][T16556] usb 10-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 971.394675][T16556] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.397196][T16556] usb 10-1: Product: syz [ 971.398505][T16556] usb 10-1: Manufacturer: syz [ 971.400052][T16556] usb 10-1: SerialNumber: syz [ 971.405221][T16556] usb 10-1: config 0 descriptor?? [ 971.409738][T16556] usb 10-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 971.412621][T16556] usb 10-1: selecting invalid altsetting 1 [ 971.414507][T16556] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 971.418765][T16556] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 971.422418][T16556] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 971.425604][T16556] usb 10-1: media controller created [ 971.432325][T16556] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 971.685035][T21598] kvm: apic: phys broadcast and lowest prio [ 971.818662][T21600] netlink: 'syz.3.3697': attribute type 12 has an invalid length. [ 972.002968][T21604] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 972.005054][T21604] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 972.007928][T21604] vhci_hcd vhci_hcd.0: Device attached [ 972.030568][T21606] vhci_hcd: connection closed [ 972.030880][ T5829] vhci_hcd vhci_hcd.3: stop threads [ 972.038388][ T5829] vhci_hcd vhci_hcd.3: release socket [ 972.041304][ T5829] vhci_hcd vhci_hcd.3: disconnect device [ 972.161113][T21612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3700'. [ 972.197744][T21597] 9pnet_virtio: no channels available for device syz [ 972.211827][T21614] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3701'. [ 972.423090][T21623] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 972.453838][T21618] gre1: entered allmulticast mode [ 972.512512][T16556] usb 10-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 972.517516][T16556] zl10353_read_register: readreg error (reg=127, ret==-110) [ 972.550460][T21625] siw: device registration error -23 [ 972.598964][T16556] usb 10-1: USB disconnect, device number 41 [ 972.641559][T21631] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 972.722261][T21634] 9pnet_virtio: no channels available for device syz [ 972.785385][T21633] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.871498][T13272] usb 11-1: new high-speed USB device number 32 using dummy_hcd [ 972.883919][T21633] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.974463][T21633] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.040130][T13272] usb 11-1: Using ep0 maxpacket: 16 [ 973.102571][T21633] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.104060][T13272] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 973.140635][T13272] usb 11-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 973.145499][T13272] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 973.149375][T13272] usb 11-1: Product: syz [ 973.151687][T13272] usb 11-1: Manufacturer: syz [ 973.154434][T13272] usb 11-1: SerialNumber: syz [ 973.196476][T13272] usb 11-1: config 0 descriptor?? [ 973.220187][T13272] hub 11-1:0.0: bad descriptor, ignoring hub [ 973.225257][T13272] hub 11-1:0.0: probe with driver hub failed with error -5 [ 973.243446][T13272] usb 11-1: Quirk or no altset; falling back to MIDI 1.0 [ 973.318426][ T5829] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.531229][ T5829] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.556333][T13667] usb 11-1: USB disconnect, device number 32 [ 973.585689][ T5829] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.623747][ T5829] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.521456][T21661] Invalid ELF header magic: != ELF [ 975.477345][T21677] Invalid ELF header magic: != ELF [ 975.509218][T16556] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 975.588432][T21681] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3721'. [ 975.631507][T21678] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 975.669224][T16556] usb 10-1: Using ep0 maxpacket: 32 [ 975.674908][T16556] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 975.679695][T16556] usb 10-1: config 0 has no interface number 0 [ 975.684496][T16556] usb 10-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 975.687402][T16556] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 975.690294][T16556] usb 10-1: Product: syz [ 975.691617][T16556] usb 10-1: Manufacturer: syz [ 975.693162][T16556] usb 10-1: SerialNumber: syz [ 975.696876][T16556] usb 10-1: config 0 descriptor?? [ 975.704884][T16556] usb 10-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 975.707758][T16556] usb 10-1: selecting invalid altsetting 1 [ 975.711248][T16556] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 975.715756][T16556] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 975.719635][T16556] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 975.722199][T16556] usb 10-1: media controller created [ 975.732716][T16556] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 975.976636][T21690] kvm: apic: phys broadcast and lowest prio [ 976.265501][T21705] nfs: Unknown parameter 'ntext' [ 976.268356][T21705] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3730'. [ 976.469353][ T34] usb 11-1: new high-speed USB device number 33 using dummy_hcd [ 976.566708][T21716] Invalid ELF header magic: != ELF [ 976.629423][ T34] usb 11-1: Using ep0 maxpacket: 8 [ 976.637824][ T34] usb 11-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 976.646208][ T34] usb 11-1: config 0 interface 0 has no altsetting 0 [ 976.649002][ T34] usb 11-1: New USB device found, idVendor=06a3, idProduct=0cd0, bcdDevice= 0.00 [ 976.653420][ T34] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 976.659023][ T34] usb 11-1: config 0 descriptor?? [ 976.761859][T21713] Cannot find add_set index 1 as target [ 976.829580][T16556] usb 10-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 976.835344][T16556] zl10353_read_register: readreg error (reg=127, ret==-110) [ 976.976591][T16556] usb 10-1: USB disconnect, device number 42 [ 977.207550][ T34] saitek 0003:06A3:0CD0.000E: unknown main item tag 0x2 [ 977.214621][ T34] saitek 0003:06A3:0CD0.000E: unknown main item tag 0x0 [ 977.216976][ T34] saitek 0003:06A3:0CD0.000E: unknown main item tag 0x0 [ 977.219422][ T34] saitek 0003:06A3:0CD0.000E: unknown main item tag 0x0 [ 977.221747][ T34] saitek 0003:06A3:0CD0.000E: unknown main item tag 0x0 [ 977.224204][ T34] saitek 0003:06A3:0CD0.000E: unknown main item tag 0x0 [ 977.470252][T21722] netlink: 'syz.6.3728': attribute type 12 has an invalid length. [ 977.472728][T21722] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3728'. [ 977.556967][ T34] saitek 0003:06A3:0CD0.000E: hidraw1: USB HID v0.04 Device [HID 06a3:0cd0] on usb-dummy_hcd.6-1/input0 [ 977.562656][ T34] usb 11-1: USB disconnect, device number 33 [ 977.613588][T21725] Invalid ELF header magic: != ELF [ 978.743018][T21759] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 978.924120][T21769] input: syz1 as /devices/virtual/input/input81 [ 979.147435][T21779] input: syz1 as /devices/virtual/input/input82 [ 980.122464][T21795] vivid-000: ================= START STATUS ================= [ 980.127805][T21795] vivid-000: Test Pattern: 75% Colorbar [ 980.134498][T21795] vivid-000: Fill Percentage of Frame: 100 [ 980.137169][T21795] vivid-000: Horizontal Movement: Move Right Slow [ 980.139492][T21795] vivid-000: Vertical Movement: Move Up Fast [ 980.141408][T21795] vivid-000: OSD Text Mode: Counters Only [ 980.143222][T21795] vivid-000: Show Border: false [ 980.144776][T21795] vivid-000: Show Square: false [ 980.146278][T21795] vivid-000: Sensor Flipped Horizontally: false [ 980.148542][T21795] vivid-000: Sensor Flipped Vertically: false [ 980.153367][T21795] vivid-000: Insert SAV Code in Image: true [ 980.155931][T21795] vivid-000: Insert EAV Code in Image: false [ 980.158257][T21795] vivid-000: Insert Video Guard Band: false [ 980.161413][T21795] vivid-000: Reduced Framerate: false [ 980.163753][T21795] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 980.166867][T21795] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 980.171200][T21795] vivid-000: Enable Capture Cropping: true [ 980.174053][T21795] vivid-000: Enable Capture Composing: false [ 980.176704][T21795] vivid-000: Enable Capture Scaler: false [ 980.179369][T21795] vivid-000: Timestamp Source: End of Frame [ 980.182130][T21795] vivid-000: Colorspace: sRGB [ 980.184168][T21795] vivid-000: Transfer Function: Default [ 980.186588][T21795] vivid-000: Y'CbCr Encoding: xvYCC 709 [ 980.189085][T21795] vivid-000: HSV Encoding: Hue 0-179 [ 980.198573][T21795] vivid-000: Quantization: Default [ 980.201202][T21795] vivid-000: Apply Alpha To Red Only: false [ 980.203835][T21795] vivid-000: Standard Aspect Ratio: 4x3 [ 980.206234][T21795] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 980.210976][T21795] vivid-000: DV Timings: 640x480p59 inactive [ 980.213605][T21795] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 980.216775][T21795] vivid-000: Maximum EDID Blocks: 2 [ 980.219073][T21795] vivid-000: Limited RGB Range (16-235): false [ 980.222458][T21795] vivid-000: Rx RGB Quantization Range: RGB Full Range (0-255) [ 980.225706][T21795] vivid-000: Power Present: 0x00000001 [ 980.228093][T21795] tpg source WxH: 320x240 (HSV) [ 980.231469][T21795] tpg field: 1 [ 980.233050][T21795] tpg crop: (0,0)/320x240 [ 980.235006][T21795] tpg compose: (0,0)/320x240 [ 980.237049][T21795] tpg colorspace: 8 [ 980.238756][T21795] tpg transfer function: 0/0 [ 980.241775][T21795] tpg HSV encoding: 4/0 [ 980.243431][T21795] tpg quantization: 0/0 [ 980.245262][T21795] tpg RGB range: 0/2 [ 980.247042][T21795] vivid-000: ================== END STATUS ================== [ 980.326893][T21799] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3763'. [ 980.332489][T21799] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3763'. [ 980.484172][T13663] IPVS: starting estimator thread 0... [ 980.569281][T21808] IPVS: using max 44 ests per chain, 105600 per kthread [ 980.790655][T21823] gadgetfs: bound to dummy_udc driver [ 980.923165][T21832] input: syz0 as /devices/virtual/input/input83 [ 980.954897][T21830] lo speed is unknown, defaulting to 1000 [ 981.009239][T13012] usb 11-1: new high-speed USB device number 34 using dummy_hcd [ 981.049222][ T3998] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 981.051938][ C1] gadgetfs: connected [ 981.054042][ T3998] gadgetfs: disconnected [ 981.066888][T21830] lo speed is unknown, defaulting to 1000 [ 981.172217][T13012] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 981.177333][T13012] usb 11-1: config 0 has no interfaces? [ 981.181842][T13012] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 981.185143][T13012] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 981.190109][T13012] usb 11-1: config 0 descriptor?? [ 981.200657][ C1] gadgetfs: connected [ 981.203866][ T3998] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 981.207072][ T3998] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 981.212778][ T3998] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 981.217324][ C1] gadgetfs: configuration #1 [ 981.424123][T13272] usb 11-1: USB disconnect, device number 34 [ 981.426906][T21822] gadgetfs: suspended from state 3 [ 981.429532][T21840] msdos: Unknown parameter 'táB' [ 981.434812][ T5828] usb 5-1: USB disconnect, device number 21 [ 981.437740][T21822] gadgetfs: disconnected [ 981.443689][T21840] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3777'. [ 982.040025][T13663] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 982.135308][T21850] netlink: zone id is out of range [ 982.171692][T21852] netlink: 'syz.3.3782': attribute type 10 has an invalid length. [ 982.189433][T13663] usb 9-1: Using ep0 maxpacket: 8 [ 982.198033][T13663] usb 9-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 982.205108][T13663] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 982.207613][T13663] usb 9-1: Product: syz [ 982.209298][T13663] usb 9-1: Manufacturer: syz [ 982.212979][T13663] usb 9-1: SerialNumber: syz [ 982.216426][T13663] usb 9-1: config 0 descriptor?? [ 982.225875][T13663] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 982.229497][T13663] pctv452e: pctv452e_power_ctrl: 1 [ 982.229497][T13663] [ 982.232658][T13663] usb 9-1: selecting invalid altsetting 3 [ 982.235146][T13663] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 982.235146][T13663] [ 982.238689][T13663] dvb-usb: bulk message failed: -22 (5/0) [ 982.247182][T13663] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 982.251183][T13663] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 982.254107][T13663] usb 9-1: media controller created [ 982.264990][T13663] dvb-usb: bulk message failed: -22 (8/0) [ 982.269256][T13663] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 982.273741][T13663] dvb-usb: MAC address reading failed. [ 982.280685][T13663] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 982.325162][T13663] DVB: Unable to find symbol stb0899_attach() [ 982.327103][T13663] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 982.389882][T13663] rc_core: IR keymap rc-tt-1500 not found [ 982.392313][T13663] Registered IR keymap rc-empty [ 982.395590][T13663] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0 [ 982.401348][T13663] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0/input84 [ 982.408456][T13663] dvb-usb: schedule remote query interval to 100 msecs. [ 982.412757][T13663] pctv452e: pctv452e_power_ctrl: 0 [ 982.412757][T13663] [ 982.415824][T13663] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 982.445409][T21844] dvb-usb: bulk message failed: -22 (7/0) [ 982.460451][T21844] pctv452e: I2C error -22; AA 02 12 00 00 -> aa 02 31 03 12 00 00 [ 982.481187][T21844] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3778'. [ 982.484520][T21844] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3778'. [ 982.492619][T16556] usb 9-1: USB disconnect, device number 47 [ 982.534135][T16556] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 982.539367][T21865] netlink: 'syz.5.3781': attribute type 11 has an invalid length. [ 982.586491][T21865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 982.592290][T21865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 982.615502][T21865] tipc: Resetting bearer [ 982.621021][T21865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 982.625331][T21865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 982.632157][T21865] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 982.635531][T21865] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 982.641766][T21865] veth1_vlan: left promiscuous mode [ 982.644244][T21865] veth0_vlan: left promiscuous mode [ 982.646626][T21867] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 982.646706][T21865] veth0_vlan: entered promiscuous mode [ 982.655634][T21865] veth1_vlan: entered promiscuous mode [ 982.665869][T21865] veth1_macvtap: left promiscuous mode [ 982.673244][T21865] veth0_macvtap: left promiscuous mode [ 982.676942][T21865] veth0_macvtap: entered promiscuous mode [ 982.679625][T21865] veth1_macvtap: entered promiscuous mode [ 982.688775][T21865] 8021q: adding VLAN 0 to HW filter on device eth0 [ 982.692298][T21865] 8021q: adding VLAN 0 to HW filter on device eth1 [ 982.696007][T21865] 8021q: adding VLAN 0 to HW filter on device eth2 [ 982.699071][T21865] 8021q: adding VLAN 0 to HW filter on device eth3 [ 982.716243][ T6282] bridge0: port 1(bridge_slave_0) entered blocking state [ 982.718502][ T6282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 982.722066][ T6282] bridge0: port 2(bridge_slave_1) entered blocking state [ 982.724270][ T6282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 982.770407][T18586] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.772937][T18586] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.779397][T18586] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.786478][T18586] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 983.091404][T21871] syzkaller0: entered promiscuous mode [ 983.096749][T21871] syzkaller0: entered allmulticast mode [ 983.296293][T21875] lo speed is unknown, defaulting to 1000 [ 983.581199][T21883] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 983.710737][T21887] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 983.806011][T21894] Invalid ELF header magic: != ELF [ 984.313488][T21875] lo speed is unknown, defaulting to 1000 [ 984.530119][T21907] batadv_slave_1: entered promiscuous mode [ 984.537377][T21907] macvlan2: entered allmulticast mode [ 984.539933][T21907] batadv_slave_1: entered allmulticast mode [ 984.543448][T21907] batman_adv: batadv0: Adding interface: macvlan2 [ 984.545732][T21907] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 984.557875][T21907] batman_adv: batadv0: Interface activated: macvlan2 [ 984.825331][T21919] siw: device registration error -23 [ 985.069384][ T5828] usb 11-1: new high-speed USB device number 35 using dummy_hcd [ 985.229406][ T5828] usb 11-1: Using ep0 maxpacket: 16 [ 985.235043][ T5828] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 985.243439][ T5828] usb 11-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 985.247651][ T5828] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 985.255289][ T5828] usb 11-1: Product: syz [ 985.257044][ T5828] usb 11-1: Manufacturer: syz [ 985.258940][ T5828] usb 11-1: SerialNumber: syz [ 985.266166][ T5828] usb 11-1: config 0 descriptor?? [ 985.284551][ T5828] hub 11-1:0.0: bad descriptor, ignoring hub [ 985.295830][ T5828] hub 11-1:0.0: probe with driver hub failed with error -5 [ 985.320705][ T5828] usb 11-1: Quirk or no altset; falling back to MIDI 1.0 [ 985.584323][T21926] smpboot: CPU 1 is now offline [ 985.691879][ T5828] usb 11-1: USB disconnect, device number 35 [ 985.712818][T21927] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 986.089245][T13667] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 986.152119][T21939] Invalid ELF header magic: != ELF [ 986.599333][T13667] usb 10-1: Using ep0 maxpacket: 32 [ 986.603126][T13667] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 986.606536][T13667] usb 10-1: config 0 has no interface number 0 [ 986.612279][T13667] usb 10-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 986.616130][T13667] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 986.619536][T13667] usb 10-1: Product: syz [ 986.621338][T13667] usb 10-1: Manufacturer: syz [ 986.623473][T13667] usb 10-1: SerialNumber: syz [ 986.627715][T13667] usb 10-1: config 0 descriptor?? [ 986.637223][T13667] usb 10-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 986.642009][T13667] usb 10-1: selecting invalid altsetting 1 [ 986.644494][T13667] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 986.652052][T13667] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 986.656480][T13667] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 986.660034][T13667] usb 10-1: media controller created [ 986.670932][T13667] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 986.952636][T21952] kvm: apic: phys broadcast and lowest prio [ 987.528021][T21957] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3808'. [ 987.724863][T21960] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3808'. [ 987.781004][T13667] usb 10-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 987.785675][T13667] zl10353_read_register: readreg error (reg=127, ret==-110) [ 988.192805][T13667] usb 10-1: USB disconnect, device number 43 [ 988.569927][T21967] netlink: 'syz.6.3811': attribute type 1 has an invalid length. [ 988.649650][T21969] siw: device registration error -23 [ 988.841882][T21977] Invalid ELF header magic: != ELF [ 989.016471][T21974] input: syz0 as /devices/virtual/input/input85 [ 989.069396][T13667] usb 11-1: new high-speed USB device number 36 using dummy_hcd [ 989.243332][T13667] usb 11-1: Using ep0 maxpacket: 16 [ 989.284903][T21983] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3816'. [ 989.290796][T21983] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3816'. [ 989.295881][T21983] afs: Unknown parameter 'd' [ 989.626851][T21987] siw: device registration error -23 [ 989.807322][T13667] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 989.889331][T16556] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 990.059241][T16556] usb 9-1: Using ep0 maxpacket: 16 [ 990.074077][T13667] usb 11-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 990.076950][T13667] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.079502][T13667] usb 11-1: Product: syz [ 990.079918][T16556] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 990.080886][T13667] usb 11-1: Manufacturer: syz [ 990.085683][T13667] usb 11-1: SerialNumber: syz [ 990.088389][T13667] usb 11-1: config 0 descriptor?? [ 990.091512][T13667] hub 11-1:0.0: bad descriptor, ignoring hub [ 990.093913][T13667] hub 11-1:0.0: probe with driver hub failed with error -5 [ 990.094862][T16556] usb 9-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 990.098662][T13667] usb 11-1: Quirk or no altset; falling back to MIDI 1.0 [ 990.113428][T16556] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.116014][T16556] usb 9-1: Product: syz [ 990.117493][T16556] usb 9-1: Manufacturer: syz [ 990.125236][T16556] usb 9-1: SerialNumber: syz [ 990.136296][T16556] usb 9-1: config 0 descriptor?? [ 990.141593][T16556] hub 9-1:0.0: bad descriptor, ignoring hub [ 990.144329][T16556] hub 9-1:0.0: probe with driver hub failed with error -5 [ 990.162164][T16556] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 990.453571][T13667] usb 11-1: USB disconnect, device number 36 [ 990.600433][T22000] netlink: 'syz.5.3821': attribute type 12 has an invalid length. [ 991.013229][T22006] siw: device registration error -23 [ 992.603195][ T5849] usb 9-1: USB disconnect, device number 48 [ 992.665665][T22009] siw: device registration error -23 [ 992.909397][T16556] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 992.925043][T22013] 9pnet_virtio: no channels available for device syz [ 992.949269][T13667] usb 11-1: new high-speed USB device number 37 using dummy_hcd [ 993.069264][T16556] usb 10-1: Using ep0 maxpacket: 16 [ 993.074193][T16556] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 993.081136][T16556] usb 10-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 993.084792][T16556] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 993.087332][T16556] usb 10-1: Product: syz [ 993.088859][T16556] usb 10-1: Manufacturer: syz [ 993.091017][T16556] usb 10-1: SerialNumber: syz [ 993.099286][T13667] usb 11-1: Using ep0 maxpacket: 16 [ 993.102938][T13667] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 993.105869][T16556] usb 10-1: config 0 descriptor?? [ 993.108066][T13667] usb 11-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 993.111384][T13667] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 993.112869][T16556] hub 10-1:0.0: bad descriptor, ignoring hub [ 993.114244][T13667] usb 11-1: Product: syz [ 993.116878][T16556] hub 10-1:0.0: probe with driver hub failed with error -5 [ 993.117952][T13667] usb 11-1: Manufacturer: syz [ 993.122683][T16556] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 993.122791][T13667] usb 11-1: SerialNumber: syz [ 993.137031][T13667] usb 11-1: config 0 descriptor?? [ 993.140308][T13667] hub 11-1:0.0: bad descriptor, ignoring hub [ 993.142227][T13667] hub 11-1:0.0: probe with driver hub failed with error -5 [ 993.214143][T13667] usb 11-1: Quirk or no altset; falling back to MIDI 1.0 [ 993.590072][T13272] usb 10-1: USB disconnect, device number 44 [ 994.329620][T22027] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 994.404245][T22028] netlink: 'syz.5.3829': attribute type 10 has an invalid length. [ 994.408140][T22028] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3829'. [ 994.442111][T22028] 9pnet_virtio: no channels available for device syz [ 994.442488][ T34] usb 11-1: USB disconnect, device number 37 [ 994.879072][T22043] netlink: 'syz.3.3835': attribute type 21 has an invalid length. [ 994.882233][T22043] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3835'. [ 994.885936][T22043] netlink: 'syz.3.3835': attribute type 5 has an invalid length. [ 994.889018][T22043] netlink: 'syz.3.3835': attribute type 6 has an invalid length. [ 994.892124][T22043] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3835'. [ 994.895702][T22044] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 994.966598][T22047] netlink: 'syz.6.3833': attribute type 10 has an invalid length. [ 994.969908][T22047] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3833'. [ 994.974412][T22047] 9pnet_virtio: no channels available for device syz [ 995.027689][T22048] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3836'. [ 996.112101][T22066] netlink: 'syz.3.3842': attribute type 4 has an invalid length. [ 996.283808][T22070] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3844'. [ 996.573678][T22072] usbip-vudc usbip-vudc.0: gadget not bound [ 996.580828][T22076] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3847'. [ 996.629969][T22078] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 996.717014][T22079] netlink: 'syz.6.3848': attribute type 10 has an invalid length. [ 996.720307][T22079] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3848'. [ 996.742926][T22079] 9pnet_virtio: no channels available for device syz [ 996.930795][T22089] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3852'. [ 997.220587][T22096] input: syz0 as /devices/virtual/input/input86 [ 997.390145][T22101] netlink: 'syz.5.3856': attribute type 21 has an invalid length. [ 997.393181][T22101] netlink: 128 bytes leftover after parsing attributes in process `syz.5.3856'. [ 997.396635][T22101] netlink: 'syz.5.3856': attribute type 5 has an invalid length. [ 997.401950][T22101] netlink: 'syz.5.3856': attribute type 6 has an invalid length. [ 997.504314][T22090] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 997.507065][T22090] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 997.534233][T22090] vhci_hcd vhci_hcd.0: Device attached [ 997.601364][T22108] FAULT_INJECTION: forcing a failure. [ 997.601364][T22108] name failslab, interval 1, probability 0, space 0, times 0 [ 997.601389][T22108] CPU: 2 UID: 0 PID: 22108 Comm: syz.5.3858 Tainted: G L syzkaller #0 PREEMPT(full) [ 997.601405][T22108] Tainted: [L]=SOFTLOCKUP [ 997.601409][T22108] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 997.601416][T22108] Call Trace: [ 997.601420][T22108] [ 997.601424][T22108] dump_stack_lvl+0x100/0x190 [ 997.601495][T22108] should_fail_ex.cold+0x5/0xa [ 997.601506][T22108] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 997.601540][T22108] should_failslab+0xc2/0x120 [ 997.601555][T22108] kmem_cache_alloc_noprof+0x91/0x6a0 [ 997.601570][T22108] ? skb_clone+0x190/0x400 [ 997.601620][T22108] skb_clone+0x190/0x400 [ 997.601637][T22108] netlink_deliver_tap+0xaed/0xcc0 [ 997.601660][T22108] netlink_unicast+0x62b/0x850 [ 997.601674][T22108] ? __pfx_netlink_unicast+0x10/0x10 [ 997.601690][T22108] netlink_sendmsg+0x8b0/0xda0 [ 997.601704][T22108] ? __pfx_netlink_sendmsg+0x10/0x10 [ 997.601719][T22108] ? apparmor_socket_sendmsg+0x15b/0x270 [ 997.601733][T22108] ____sys_sendmsg+0xa4d/0xbe0 [ 997.601744][T22108] ? __pfx_netlink_sendmsg+0x10/0x10 [ 997.601756][T22108] ? __pfx_____sys_sendmsg+0x10/0x10 [ 997.601774][T22108] ___sys_sendmsg+0x190/0x1e0 [ 997.601792][T22108] ? __pfx____sys_sendmsg+0x10/0x10 [ 997.601811][T22108] ? find_held_lock+0x2b/0x80 [ 997.601835][T22108] __sys_sendmsg+0x160/0x210 [ 997.601850][T22108] ? __pfx___sys_sendmsg+0x10/0x10 [ 997.601870][T22108] ? __pfx_ksys_write+0x10/0x10 [ 997.601884][T22108] __do_fast_syscall_32+0xe7/0x970 [ 997.601898][T22108] ? lockdep_hardirqs_on+0x78/0x100 [ 997.601913][T22108] do_fast_syscall_32+0x32/0x70 [ 997.601927][T22108] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 997.601942][T22108] RIP: 0023:0xf703efec [ 997.601956][T22108] Code: Unable to access opcode bytes at 0xf703efc2. [ 997.601961][T22108] RSP: 002b:00000000f542d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 997.601972][T22108] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 997.601979][T22108] RDX: 0000000000004080 RSI: 0000000000000000 RDI: 0000000000000000 [ 997.601985][T22108] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 997.601992][T22108] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 997.601999][T22108] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 997.602013][T22108] [ 997.789424][ C3] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 997.819814][ T5849] usb 46-1: SetAddress Request (10) to port 0 [ 997.824827][ T5849] usb 46-1: new SuperSpeed USB device number 10 using vhci_hcd [ 997.829387][T22124] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 997.861891][T22126] FAULT_INJECTION: forcing a failure. [ 997.861891][T22126] name failslab, interval 1, probability 0, space 0, times 0 [ 997.866939][T22126] CPU: 3 UID: 0 PID: 22126 Comm: syz.5.3866 Tainted: G L syzkaller #0 PREEMPT(full) [ 997.866969][T22126] Tainted: [L]=SOFTLOCKUP [ 997.866975][T22126] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 997.866986][T22126] Call Trace: [ 997.866993][T22126] [ 997.867001][T22126] dump_stack_lvl+0x100/0x190 [ 997.867027][T22126] should_fail_ex.cold+0x5/0xa [ 997.867048][T22126] should_failslab+0xc2/0x120 [ 997.867072][T22126] __kmalloc_cache_noprof+0x91/0x6c0 [ 997.867089][T22126] ? rcu_is_watching+0x12/0xc0 [ 997.867112][T22126] ? __request_module+0x2b7/0x6a0 [ 997.867136][T22126] __request_module+0x2b7/0x6a0 [ 997.867162][T22126] ? __pfx___request_module+0x10/0x10 [ 997.867189][T22126] ? rcu_is_watching+0x12/0xc0 [ 997.867210][T22126] ? apparmor_capable+0x1d7/0x4d0 [ 997.867234][T22126] ? dev_load+0x1c5/0x240 [ 997.867260][T22126] dev_load+0x22b/0x240 [ 997.867282][T22126] dev_ioctl+0x62c/0x1070 [ 997.867308][T22126] compat_sock_ioctl+0x4f9/0x760 [ 997.867332][T22126] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 997.867351][T22126] ? hook_file_ioctl_common+0x140/0x440 [ 997.867379][T22126] ? __fget_files+0x21f/0x3d0 [ 997.867401][T22126] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 997.867421][T22126] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 997.867451][T22126] __do_fast_syscall_32+0xe7/0x970 [ 997.867474][T22126] ? lockdep_hardirqs_on+0x78/0x100 [ 997.867497][T22126] do_fast_syscall_32+0x32/0x70 [ 997.867519][T22126] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 997.867541][T22126] RIP: 0023:0xf703efec [ 997.867563][T22126] Code: Unable to access opcode bytes at 0xf703efc2. [ 997.867570][T22126] RSP: 002b:00000000f542d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 997.867588][T22126] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008946 [ 997.867599][T22126] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 997.867610][T22126] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 997.867620][T22126] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 997.867630][T22126] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 997.867654][T22126] [ 997.931709][T22128] 9pnet_virtio: no channels available for device syz [ 999.031874][T22102] vhci_hcd: connection reset by peer [ 999.034447][T18593] vhci_hcd vhci_hcd.4: stop threads [ 999.037374][T18593] vhci_hcd vhci_hcd.4: release socket [ 999.041830][T18593] vhci_hcd vhci_hcd.4: disconnect device [ 999.265461][T22153] comedi comedi3: pcl818: I/O base address or length out of range [ 999.720155][T22155] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 999.787115][T22156] validate_nla: 4 callbacks suppressed [ 999.787192][T22156] netlink: 'syz.4.3876': attribute type 10 has an invalid length. [ 999.793129][T22156] __nla_validate_parse: 9 callbacks suppressed [ 999.793144][T22156] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3876'. [ 999.801709][T22156] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 999.815241][T22156] 9pnet_virtio: no channels available for device syz [ 1000.040001][T22160] netlink: 'syz.5.3879': attribute type 21 has an invalid length. [ 1000.042983][T22160] netlink: 128 bytes leftover after parsing attributes in process `syz.5.3879'. [ 1000.045978][T22160] netlink: 'syz.5.3879': attribute type 5 has an invalid length. [ 1000.048654][T22160] netlink: 'syz.5.3879': attribute type 6 has an invalid length. [ 1000.051263][T22160] netlink: 3 bytes leftover after parsing attributes in process `syz.5.3879'. [ 1000.394455][T22170] CUSE: unknown device info "" [ 1000.396099][T22170] CUSE: unknown device info "Ö" [ 1000.397964][T22170] CUSE: unknown device info "" [ 1000.403047][T22170] CUSE: unknown device info "" [ 1000.404792][T22170] CUSE: unknown device info "" [ 1000.406265][T22170] CUSE: unknown device info "" [ 1000.407765][T22170] CUSE: unknown device info "ðÿÿÿ" [ 1000.409754][T22170] CUSE: unknown device info "" [ 1000.411560][T22170] CUSE: unknown device info "" [ 1000.413046][T22170] CUSE: unknown device info "" [ 1000.414705][T22170] CUSE: unknown device info "" [ 1000.416311][T22170] CUSE: unknown device info "r" [ 1000.417799][T22170] CUSE: unknown device info "ýÿÿÿÿÿÿÿ#Û" [ 1000.420313][T22170] CUSE: unknown device info "ÿÿÿÿ" [ 1000.421958][T22170] CUSE: unknown device info "" [ 1000.423452][T22170] CUSE: unknown device info "€" [ 1000.425014][T22170] CUSE: DEVNAME unspecified [ 1000.463142][T22166] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1000.789268][T16556] usb 10-1: new high-speed USB device number 45 using dummy_hcd [ 1000.940809][T16556] usb 10-1: Using ep0 maxpacket: 32 [ 1000.944531][T16556] usb 10-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1000.953668][T16556] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.965952][T16556] usb 10-1: config 0 descriptor?? [ 1000.978928][T16556] as10x_usb: device has been detected [ 1000.982079][T22192] netlink: 'syz.4.3891': attribute type 21 has an invalid length. [ 1000.982093][T22192] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3891'. [ 1000.982127][T22192] netlink: 'syz.4.3891': attribute type 5 has an invalid length. [ 1000.982136][T22192] netlink: 'syz.4.3891': attribute type 6 has an invalid length. [ 1000.982143][T22192] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3891'. [ 1001.017280][T16556] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1001.026935][T22193] FAULT_INJECTION: forcing a failure. [ 1001.026935][T22193] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1001.038163][T16556] usb 10-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1001.038466][T22193] CPU: 0 UID: 0 PID: 22193 Comm: syz.6.3890 Tainted: G L syzkaller #0 PREEMPT(full) [ 1001.038485][T22193] Tainted: [L]=SOFTLOCKUP [ 1001.038489][T22193] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1001.038496][T22193] Call Trace: [ 1001.038501][T22193] [ 1001.038506][T22193] dump_stack_lvl+0x100/0x190 [ 1001.038535][T22193] should_fail_ex.cold+0x5/0xa [ 1001.038548][T22193] _copy_from_user+0x2e/0xd0 [ 1001.038566][T22193] get_user_ifreq+0x116/0x1c0 [ 1001.038584][T22193] compat_sock_ioctl+0x4c1/0x760 [ 1001.038603][T22193] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 1001.038615][T22193] ? hook_file_ioctl_common+0x140/0x440 [ 1001.038633][T22193] ? __fget_files+0x21f/0x3d0 [ 1001.038646][T22193] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 1001.038659][T22193] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 1001.038678][T22193] __do_fast_syscall_32+0xe7/0x970 [ 1001.038692][T22193] ? lockdep_hardirqs_on+0x78/0x100 [ 1001.038706][T22193] do_fast_syscall_32+0x32/0x70 [ 1001.038721][T22193] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1001.038735][T22193] RIP: 0023:0xf7f57fec [ 1001.038749][T22193] Code: Unable to access opcode bytes at 0xf7f57fc2. [ 1001.038754][T22193] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 1001.038766][T22193] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000008946 [ 1001.038773][T22193] RDX: 00000000800002c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1001.038779][T22193] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1001.038786][T22193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1001.038792][T22193] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1001.038807][T22193] [ 1001.124757][T16556] as10x_usb: error during firmware upload part1 [ 1001.127916][T16556] Registered device nBox DVB-T Dongle [ 1001.180558][T16556] usb 10-1: USB disconnect, device number 45 [ 1001.219648][T16556] Unregistered device nBox DVB-T Dongle [ 1001.221248][T16556] as10x_usb: device has been disconnected [ 1001.914566][T22212] Invalid ELF header magic: != ELF [ 1002.020822][T22214] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 1002.081652][T22215] netlink: 'syz.3.3895': attribute type 10 has an invalid length. [ 1002.084391][T22215] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3895'. [ 1002.087866][T22215] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1002.094782][T22215] 9pnet_virtio: no channels available for device syz [ 1002.607845][T22210] overlayfs: maximum fs stacking depth exceeded [ 1002.909943][ T5849] usb 46-1: device descriptor read/8, error -110 [ 1003.360093][ T5849] usb usb46-port1: attempt power cycle [ 1003.447760][T22235] netlink: 'syz.3.3898': attribute type 12 has an invalid length. [ 1003.451806][T22235] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3898'. [ 1003.463316][T22237] FAULT_INJECTION: forcing a failure. [ 1003.463316][T22237] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1003.474245][T22237] CPU: 0 UID: 0 PID: 22237 Comm: syz.6.3901 Tainted: G L syzkaller #0 PREEMPT(full) [ 1003.474275][T22237] Tainted: [L]=SOFTLOCKUP [ 1003.474282][T22237] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1003.474294][T22237] Call Trace: [ 1003.474300][T22237] [ 1003.474308][T22237] dump_stack_lvl+0x100/0x190 [ 1003.474334][T22237] should_fail_ex.cold+0x5/0xa [ 1003.474354][T22237] _copy_from_iter+0x1f4/0x1690 [ 1003.474384][T22237] ? __asan_memset+0x23/0x50 [ 1003.474404][T22237] ? __pfx__copy_from_iter+0x10/0x10 [ 1003.474430][T22237] ? __pfx___alloc_skb+0x10/0x10 [ 1003.474464][T22237] netlink_sendmsg+0x808/0xda0 [ 1003.474489][T22237] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1003.474512][T22237] ? apparmor_socket_sendmsg+0x15b/0x270 [ 1003.474536][T22237] ____sys_sendmsg+0xa4d/0xbe0 [ 1003.474553][T22237] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1003.474574][T22237] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1003.474603][T22237] ___sys_sendmsg+0x190/0x1e0 [ 1003.474623][T22237] ? __pfx____sys_sendmsg+0x10/0x10 [ 1003.474655][T22237] ? find_held_lock+0x2b/0x80 [ 1003.474694][T22237] __sys_sendmsg+0x160/0x210 [ 1003.474718][T22237] ? __pfx___sys_sendmsg+0x10/0x10 [ 1003.474749][T22237] ? __pfx_ksys_write+0x10/0x10 [ 1003.474771][T22237] __do_fast_syscall_32+0xe7/0x970 [ 1003.474794][T22237] ? lockdep_hardirqs_on+0x78/0x100 [ 1003.474816][T22237] do_fast_syscall_32+0x32/0x70 [ 1003.474838][T22237] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1003.474861][T22237] RIP: 0023:0xf7f57fec [ 1003.474902][T22237] Code: Unable to access opcode bytes at 0xf7f57fc2. [ 1003.474911][T22237] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1003.474929][T22237] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 1003.474940][T22237] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1003.474950][T22237] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1003.474960][T22237] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1003.474971][T22237] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1003.474994][T22237] [ 1003.510244][T22239] netlink: 'syz.3.3902': attribute type 21 has an invalid length. [ 1003.567631][T22239] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3902'. [ 1003.571391][T22239] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3902'. [ 1004.445085][T22266] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1004.445390][ T5849] usb usb46-port1: unable to enumerate USB device [ 1004.630434][T22270] FAULT_INJECTION: forcing a failure. [ 1004.630434][T22270] name failslab, interval 1, probability 0, space 0, times 0 [ 1004.636423][T22270] CPU: 3 UID: 0 PID: 22270 Comm: syz.6.3911 Tainted: G L syzkaller #0 PREEMPT(full) [ 1004.636442][T22270] Tainted: [L]=SOFTLOCKUP [ 1004.636446][T22270] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1004.636453][T22270] Call Trace: [ 1004.636458][T22270] [ 1004.636463][T22270] dump_stack_lvl+0x100/0x190 [ 1004.636494][T22270] should_fail_ex.cold+0x5/0xa [ 1004.636508][T22270] should_failslab+0xc2/0x120 [ 1004.636524][T22270] __kmalloc_noprof+0xfc/0x820 [ 1004.636537][T22270] ? rcu_is_watching+0x12/0xc0 [ 1004.636551][T22270] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1004.636571][T22270] tomoyo_realpath_from_path+0xb6/0x690 [ 1004.636592][T22270] tomoyo_path_perm+0x276/0x460 [ 1004.636606][T22270] ? tomoyo_path_perm+0x262/0x460 [ 1004.636621][T22270] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 1004.636636][T22270] ? look_up_lock_class+0x64/0x120 [ 1004.636654][T22270] ? __lock_acquire+0x49f/0x1a40 [ 1004.636681][T22270] ? rcu_is_watching+0x12/0xc0 [ 1004.636696][T22270] security_inode_getattr+0x116/0x280 [ 1004.636711][T22270] vfs_getattr+0x25/0x60 [ 1004.636724][T22270] loop_query_min_dio_size.isra.0+0x117/0x250 [ 1004.636739][T22270] ? __pfx_loop_query_min_dio_size.isra.0+0x10/0x10 [ 1004.636765][T22270] loop_configure+0x6e4/0x15b0 [ 1004.636787][T22270] ? __lock_acquire+0x49f/0x1a40 [ 1004.636805][T22270] ? __pfx_loop_configure+0x10/0x10 [ 1004.636831][T22270] lo_ioctl+0xcf3/0x1bc0 [ 1004.636848][T22270] ? __pfx_lo_ioctl+0x10/0x10 [ 1004.636866][T22270] ? blk_get_meta_cap+0xd4/0x6c0 [ 1004.636883][T22270] ? lockdep_hardirqs_on+0x78/0x100 [ 1004.636896][T22270] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 1004.636915][T22270] ? tomoyo_path_number_perm+0x28f/0x580 [ 1004.636929][T22270] ? tomoyo_path_number_perm+0x28f/0x580 [ 1004.636965][T22270] lo_compat_ioctl+0xf3/0x160 [ 1004.636979][T22270] ? __pfx_lo_compat_ioctl+0x10/0x10 [ 1004.636992][T22270] compat_blkdev_ioctl+0x682/0x7b0 [ 1004.637005][T22270] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 1004.637019][T22270] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 1004.637031][T22270] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 1004.637049][T22270] __do_fast_syscall_32+0xe7/0x970 [ 1004.637068][T22270] ? lockdep_hardirqs_on+0x78/0x100 [ 1004.637082][T22270] do_fast_syscall_32+0x32/0x70 [ 1004.637096][T22270] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1004.637111][T22270] RIP: 0023:0xf7f57fec [ 1004.637124][T22270] Code: Unable to access opcode bytes at 0xf7f57fc2. [ 1004.637130][T22270] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 1004.637141][T22270] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000004c0a [ 1004.637148][T22270] RDX: 00000000800002c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1004.637155][T22270] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1004.637161][T22270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1004.637168][T22270] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1004.637182][T22270] [ 1004.637329][T22270] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1004.746197][T22270] loop5: detected capacity change from 0 to 6 [ 1004.773191][T22270] Dev loop5: unable to read RDB block 6 [ 1004.775039][T22270] loop5: unable to read partition table [ 1004.776946][T22270] loop5: partition table beyond EOD, truncated [ 1004.778971][T22270] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1004.833330][T22277] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1004.978052][T22287] input: syz0 as /devices/virtual/input/input88 [ 1005.025161][T22277] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1005.109623][T22277] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1005.204042][T20622] lo speed is unknown, defaulting to 1000 [ 1005.204083][T22281] tipc: Enabling of bearer rejected, failed to enable media [ 1005.206007][T20622] syz0: Port: 1 Link DOWN [ 1005.220459][ T5829] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1005.229659][ T5829] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1005.236841][ T5829] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1005.243434][T22292] syzkaller0: entered promiscuous mode [ 1005.245685][T22292] syzkaller0: entered allmulticast mode [ 1005.252934][ T5829] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1005.314687][T22294] lo speed is unknown, defaulting to 1000 [ 1005.403772][T22299] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3918'. [ 1005.492538][T22294] lo speed is unknown, defaulting to 1000 [ 1005.634229][T22306] Invalid ELF header magic: != ELF [ 1005.651890][T22311] Invalid logical block size (18) [ 1005.691963][T22307] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3921'. [ 1006.224475][T22328] Bluetooth: MGMT ver 1.23 [ 1006.607627][T22331] tipc: Enabled bearer , priority 0 [ 1006.612287][T22331] syzkaller0: entered promiscuous mode [ 1006.614837][T22331] syzkaller0: entered allmulticast mode [ 1006.620660][T22331] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1006.645691][T22331] tipc: Resetting bearer [ 1006.650452][T22330] tipc: Resetting bearer [ 1006.671378][T22330] tipc: Disabling bearer [ 1006.725964][T22335] trusted_key: encrypted_key: master key parameter 'user:' is invalid [ 1007.011099][T22342] Invalid ELF header magic: != ELF [ 1007.438487][T22370] Invalid ELF header magic: != ELF [ 1007.998560][T22382] dummy0: left allmulticast mode [ 1008.001689][T22382] dummy0: left promiscuous mode [ 1008.003828][T22382] bridge0: port 3(dummy0) entered disabled state [ 1008.009416][T22382] bridge_slave_0: left allmulticast mode [ 1008.011312][T22382] bridge_slave_0: left promiscuous mode [ 1008.013198][T22382] bridge0: port 1(bridge_slave_0) entered disabled state [ 1008.017448][T22382] bridge_slave_1: left allmulticast mode [ 1008.020720][T22382] bridge_slave_1: left promiscuous mode [ 1008.022661][T22382] bridge0: port 2(bridge_slave_1) entered disabled state [ 1008.028150][T22382] bond0: (slave bond_slave_0): Releasing backup interface [ 1008.033968][T22382] bond0: (slave bond_slave_1): Releasing backup interface [ 1008.040252][T22382] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1008.043274][T22382] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1008.047443][T22382] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1008.050482][T22382] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1008.054920][T22382] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1008.174597][T22388] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 1008.204039][T22382] vlan0: entered promiscuous mode [ 1008.207996][T22382] tipc: Enabling of bearer rejected, failed to enable media [ 1008.212533][T22382] overlayfs: failed to resolve './file0': -2 [ 1008.238497][T22390] validate_nla: 2 callbacks suppressed [ 1008.238510][T22390] netlink: 'syz.6.3950': attribute type 10 has an invalid length. [ 1008.243084][T22390] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3950'. [ 1008.249011][T22390] 9pnet_virtio: no channels available for device syz [ 1008.350741][T22392] tipc: Enabled bearer , priority 0 [ 1008.354542][T22392] syzkaller0: entered promiscuous mode [ 1008.356875][T22392] syzkaller0: entered allmulticast mode [ 1008.366071][T22392] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1008.395058][T22392] tipc: Resetting bearer [ 1008.405422][T22391] tipc: Resetting bearer [ 1008.428211][T22391] tipc: Disabling bearer [ 1009.002161][T22403] Invalid logical block size (18) [ 1009.041752][T22405] FAULT_INJECTION: forcing a failure. [ 1009.041752][T22405] name failslab, interval 1, probability 0, space 0, times 0 [ 1009.045826][T22405] CPU: 2 UID: 0 PID: 22405 Comm: syz.4.3956 Tainted: G L syzkaller #0 PREEMPT(full) [ 1009.045845][T22405] Tainted: [L]=SOFTLOCKUP [ 1009.045850][T22405] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1009.045857][T22405] Call Trace: [ 1009.045861][T22405] [ 1009.045866][T22405] dump_stack_lvl+0x100/0x190 [ 1009.045883][T22405] should_fail_ex.cold+0x5/0xa [ 1009.045893][T22405] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1009.045908][T22405] should_failslab+0xc2/0x120 [ 1009.045928][T22405] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1009.045943][T22405] ? skb_clone+0x190/0x400 [ 1009.045962][T22405] skb_clone+0x190/0x400 [ 1009.045978][T22405] netlink_deliver_tap+0xaed/0xcc0 [ 1009.046000][T22405] netlink_unicast+0x62b/0x850 [ 1009.046014][T22405] ? __pfx_netlink_unicast+0x10/0x10 [ 1009.046030][T22405] netlink_sendmsg+0x8b0/0xda0 [ 1009.046045][T22405] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1009.046059][T22405] ? apparmor_socket_sendmsg+0x15b/0x270 [ 1009.046073][T22405] ____sys_sendmsg+0xa4d/0xbe0 [ 1009.046083][T22405] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1009.046096][T22405] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1009.046114][T22405] ___sys_sendmsg+0x190/0x1e0 [ 1009.046126][T22405] ? __pfx____sys_sendmsg+0x10/0x10 [ 1009.046145][T22405] ? find_held_lock+0x2b/0x80 [ 1009.046169][T22405] __sys_sendmsg+0x160/0x210 [ 1009.046184][T22405] ? __pfx___sys_sendmsg+0x10/0x10 [ 1009.046209][T22405] ? __pfx_ksys_write+0x10/0x10 [ 1009.046223][T22405] __do_fast_syscall_32+0xe7/0x970 [ 1009.046237][T22405] ? lockdep_hardirqs_on+0x78/0x100 [ 1009.046251][T22405] do_fast_syscall_32+0x32/0x70 [ 1009.046266][T22405] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1009.046280][T22405] RIP: 0023:0xf70befec [ 1009.046293][T22405] Code: Unable to access opcode bytes at 0xf70befc2. [ 1009.046299][T22405] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1009.046310][T22405] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 1009.046317][T22405] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1009.046324][T22405] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1009.046330][T22405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1009.046337][T22405] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1009.046351][T22405] [ 1009.163161][T22407] netlink: 'syz.4.3957': attribute type 3 has an invalid length. [ 1009.166640][T22407] netlink: 'syz.4.3957': attribute type 1 has an invalid length. [ 1009.195797][T22407] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3957'. [ 1009.243537][T22412] FAULT_INJECTION: forcing a failure. [ 1009.243537][T22412] name failslab, interval 1, probability 0, space 0, times 0 [ 1009.251213][T22412] CPU: 0 UID: 0 PID: 22412 Comm: syz.5.3959 Tainted: G L syzkaller #0 PREEMPT(full) [ 1009.251233][T22412] Tainted: [L]=SOFTLOCKUP [ 1009.251237][T22412] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1009.251244][T22412] Call Trace: [ 1009.251248][T22412] [ 1009.251253][T22412] dump_stack_lvl+0x100/0x190 [ 1009.251270][T22412] should_fail_ex.cold+0x5/0xa [ 1009.251283][T22412] should_failslab+0xc2/0x120 [ 1009.251299][T22412] __kmalloc_cache_noprof+0x91/0x6c0 [ 1009.251311][T22412] ? ip6_setup_cork+0x9dd/0x14c0 [ 1009.251328][T22412] ip6_setup_cork+0x9dd/0x14c0 [ 1009.251345][T22412] ip6_append_data+0x1aa/0x410 [ 1009.251358][T22412] ? __pfx_raw6_getfrag+0x10/0x10 [ 1009.251371][T22412] rawv6_sendmsg+0x169c/0x4420 [ 1009.251389][T22412] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 1009.251407][T22412] ? __pfx___might_resched+0x10/0x10 [ 1009.251428][T22412] ? aa_sk_perm+0x309/0xaa0 [ 1009.251450][T22412] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1009.251462][T22412] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 1009.251475][T22412] ? inet_sendmsg+0x11c/0x140 [ 1009.251488][T22412] inet_sendmsg+0x11c/0x140 [ 1009.251504][T22412] sock_write_iter+0x4ea/0x5b0 [ 1009.251515][T22412] ? __pfx_inet_sendmsg+0x10/0x10 [ 1009.251529][T22412] ? __pfx_sock_write_iter+0x10/0x10 [ 1009.251543][T22412] ? bpf_lsm_file_permission+0x9/0x10 [ 1009.251554][T22412] ? security_file_permission+0x76/0x210 [ 1009.251571][T22412] ? rw_verify_area+0xce/0x6d0 [ 1009.251588][T22412] vfs_write+0x6ac/0x1050 [ 1009.251599][T22412] ? __pfx_sock_write_iter+0x10/0x10 [ 1009.251611][T22412] ? __pfx_vfs_write+0x10/0x10 [ 1009.251620][T22412] ? find_held_lock+0x2b/0x80 [ 1009.251644][T22412] ksys_write+0x1f8/0x250 [ 1009.251658][T22412] ? __pfx_ksys_write+0x10/0x10 [ 1009.251668][T22412] ? ksys_write+0x1ac/0x250 [ 1009.251678][T22412] ? __pfx_ksys_write+0x10/0x10 [ 1009.251691][T22412] __do_fast_syscall_32+0xe7/0x970 [ 1009.251706][T22412] ? lockdep_hardirqs_on+0x78/0x100 [ 1009.251720][T22412] do_fast_syscall_32+0x32/0x70 [ 1009.251735][T22412] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1009.251749][T22412] RIP: 0023:0xf703efec [ 1009.251762][T22412] Code: Unable to access opcode bytes at 0xf703efc2. [ 1009.251768][T22412] RSP: 002b:00000000f542d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 1009.251779][T22412] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000500 [ 1009.251789][T22412] RDX: 0000000000000018 RSI: 0000000000000000 RDI: 0000000000000000 [ 1009.251796][T22412] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1009.251802][T22412] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1009.251808][T22412] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1009.251823][T22412] [ 1009.400267][T22421] netlink: 'syz.5.3962': attribute type 21 has an invalid length. [ 1009.403571][T22421] netlink: 128 bytes leftover after parsing attributes in process `syz.5.3962'. [ 1009.407217][T22421] netlink: 'syz.5.3962': attribute type 5 has an invalid length. [ 1009.410240][T22421] netlink: 'syz.5.3962': attribute type 6 has an invalid length. [ 1009.413187][T22421] netlink: 3 bytes leftover after parsing attributes in process `syz.5.3962'. [ 1009.446249][T22418] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3960'. [ 1009.619731][T13667] usb 11-1: new high-speed USB device number 38 using dummy_hcd [ 1009.789395][T13667] usb 11-1: Using ep0 maxpacket: 32 [ 1009.796223][T13667] usb 11-1: config 0 has an invalid interface number: 1 but max is 0 [ 1009.807861][T13667] usb 11-1: config 0 has no interface number 0 [ 1009.812776][T13667] usb 11-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1009.816791][T13667] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.822666][T13667] usb 11-1: Product: syz [ 1009.824498][T13667] usb 11-1: Manufacturer: syz [ 1009.829547][T13667] usb 11-1: SerialNumber: syz [ 1009.836194][T13667] usb 11-1: config 0 descriptor?? [ 1009.843573][T13667] usb 11-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1009.852086][T13667] usb 11-1: selecting invalid altsetting 1 [ 1009.853787][T13667] usb 11-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1009.857710][T13667] usb 11-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1009.862877][T13667] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1009.865554][T13667] usb 11-1: media controller created [ 1009.872539][T13667] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1009.906936][T22434] syzkaller0: entered promiscuous mode [ 1009.908705][T22434] syzkaller0: entered allmulticast mode [ 1010.258834][T22440] kvm: apic: phys broadcast and lowest prio [ 1010.461739][T22451] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1010.467455][T22451] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1010.470671][T22451] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1010.474178][T22451] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1010.477304][T22451] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1010.480425][T22451] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1010.483742][T22451] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1010.487303][T22451] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1010.490349][T22451] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1010.913475][T22464] loop5: detected capacity change from 0 to 6 [ 1010.919662][T22464] Dev loop5: unable to read RDB block 6 [ 1010.929395][T22464] loop5: unable to read partition table [ 1010.932009][T22464] loop5: partition table beyond EOD, truncated [ 1010.934558][T22464] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1010.947320][T22460] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3975'. [ 1010.989664][T13667] usb 11-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1010.993421][T13667] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1011.073484][T13667] usb 11-1: USB disconnect, device number 38 [ 1011.075133][T22466] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3979'. [ 1011.101081][T22467] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3435572954 (219876669056 ns) > initial count (59054907904 ns). Using initial count to start timer. [ 1011.700919][T22478] netlink: 'syz.6.3983': attribute type 21 has an invalid length. [ 1011.703631][T22478] netlink: 128 bytes leftover after parsing attributes in process `syz.6.3983'. [ 1011.707824][T22478] netlink: 'syz.6.3983': attribute type 5 has an invalid length. [ 1011.714299][T22478] netlink: 'syz.6.3983': attribute type 6 has an invalid length. [ 1011.717861][T22478] netlink: 3 bytes leftover after parsing attributes in process `syz.6.3983'. [ 1012.246992][T14121] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1012.257305][T14121] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1012.265285][T14121] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1012.282061][T14121] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1012.290166][T14121] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1012.409318][ T5849] usb 11-1: new high-speed USB device number 39 using dummy_hcd [ 1012.413996][T22495] netlink: 260 bytes leftover after parsing attributes in process `syz.3.3987'. [ 1012.442988][T22495] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3987'. [ 1012.480081][T16556] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 1012.484208][T22484] lo speed is unknown, defaulting to 1000 [ 1012.565602][T22484] lo speed is unknown, defaulting to 1000 [ 1012.569230][ T5849] usb 11-1: Using ep0 maxpacket: 16 [ 1012.572227][ T5849] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 1012.578572][ T5849] usb 11-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 1012.582428][ T5849] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.584950][ T5849] usb 11-1: Product: syz [ 1012.586273][ T5849] usb 11-1: Manufacturer: syz [ 1012.587638][ T5849] usb 11-1: SerialNumber: syz [ 1012.592425][ T5849] usb 11-1: config 0 descriptor?? [ 1012.597818][ T5849] hub 11-1:0.0: bad descriptor, ignoring hub [ 1012.602881][ T5849] hub 11-1:0.0: probe with driver hub failed with error -5 [ 1012.609653][ T5849] usb 11-1: Quirk or no altset; falling back to MIDI 1.0 [ 1012.629383][T16556] usb 9-1: Using ep0 maxpacket: 16 [ 1012.633434][T16556] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 1012.640135][T16556] usb 9-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 1012.643994][T16556] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.647166][T16556] usb 9-1: Product: syz [ 1012.648783][T16556] usb 9-1: Manufacturer: syz [ 1012.651021][T16556] usb 9-1: SerialNumber: syz [ 1012.662192][T16556] usb 9-1: config 0 descriptor?? [ 1012.667146][T16556] hub 9-1:0.0: bad descriptor, ignoring hub [ 1012.670065][T16556] hub 9-1:0.0: probe with driver hub failed with error -5 [ 1012.674941][T16556] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1012.761478][T15433] syz_tun (unregistering): left allmulticast mode [ 1012.886412][T22484] bridge0: port 1(bridge_slave_0) entered blocking state [ 1012.889534][T22484] bridge0: port 1(bridge_slave_0) entered disabled state [ 1012.892460][T22484] bridge_slave_0: entered allmulticast mode [ 1012.896888][T22484] bridge_slave_0: entered promiscuous mode [ 1012.904868][T22484] bridge0: port 2(bridge_slave_1) entered blocking state [ 1012.907616][T22484] bridge0: port 2(bridge_slave_1) entered disabled state [ 1012.910796][T22484] bridge_slave_1: entered allmulticast mode [ 1012.914983][T22484] bridge_slave_1: entered promiscuous mode [ 1012.940303][T22484] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1012.948498][T16556] usb 11-1: USB disconnect, device number 39 [ 1012.949034][T22484] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1012.994585][T22484] team0: Port device team_slave_0 added [ 1012.999654][T22484] team0: Port device team_slave_1 added [ 1013.025832][T22484] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1013.028706][T22484] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1013.040033][T22484] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1013.046475][T22484] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1013.049724][T22484] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1013.061555][T22484] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1013.102427][T22484] hsr_slave_0: entered promiscuous mode [ 1013.105768][T22484] hsr_slave_1: entered promiscuous mode [ 1013.108742][T22484] debugfs: 'hsr0' already exists in 'hsr' [ 1013.111400][T22484] Cannot create hsr debugfs directory [ 1013.291379][T22484] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.352910][T22509] Invalid ELF header magic: != ELF [ 1013.376941][T22484] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.464468][T22484] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.504243][T22513] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3989'. [ 1013.557522][T22484] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.734145][T22484] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1013.744593][T22484] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1013.747279][T22516] netlink: 'syz.6.3990': attribute type 12 has an invalid length. [ 1013.751272][T22484] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1013.758028][T22484] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1013.762252][T22484] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1013.768407][T22484] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1013.771644][T22484] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1013.775736][T22484] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1013.823092][T22484] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1013.835835][T22484] 8021q: adding VLAN 0 to HW filter on device team0 [ 1013.841570][ T6308] bridge0: port 1(bridge_slave_0) entered blocking state [ 1013.843951][ T6308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1013.853490][ T6308] bridge0: port 2(bridge_slave_1) entered blocking state [ 1013.855760][ T6308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1014.141810][T22537] netlink: 'syz.3.3992': attribute type 21 has an invalid length. [ 1014.142599][T22484] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1014.144433][T22537] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3992'. [ 1014.150816][T22537] netlink: 'syz.3.3992': attribute type 5 has an invalid length. [ 1014.153322][T22537] netlink: 'syz.3.3992': attribute type 6 has an invalid length. [ 1014.155833][T22537] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3992'. [ 1014.287175][T22484] veth0_vlan: entered promiscuous mode [ 1014.292630][T22484] veth1_vlan: entered promiscuous mode [ 1014.308540][T22484] veth0_macvtap: entered promiscuous mode [ 1014.312867][T22484] veth1_macvtap: entered promiscuous mode [ 1014.322539][T22484] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1014.328466][T22484] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1014.335540][T18586] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1014.339077][T18586] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1014.342127][ T5756] Bluetooth: hci4: command tx timeout [ 1014.343753][T18586] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1014.347320][T18586] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1014.461088][ T6271] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1014.464447][ T6271] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1014.495401][ T6299] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1014.498520][ T6299] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1015.105394][T22552] configfs-gadget.g1 gadget.0: HOST MAC c2:ae:07:cf:c5:fc [ 1015.111385][T22552] configfs-gadget.g1 gadget.0: MAC 92:e0:b8:64:9c:d9 [ 1015.233119][ T8030] usb 9-1: USB disconnect, device number 49 [ 1015.349338][T22552] configfs-gadget.g1 gadget.0: HOST MAC fe:c3:af:a8:2e:4f [ 1015.358645][T22552] configfs-gadget.g1 gadget.0: MAC 66:89:f5:73:ba:87 [ 1015.398432][T22557] netlink: 'syz.6.3995': attribute type 12 has an invalid length. [ 1015.480434][ T42] audit: type=1800 audit(2000000595.829:601): pid=22561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3997" name="file0" dev="9p" ino=78643795 res=0 errno=0 [ 1015.513510][T22576] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 1015.626805][T22577] Invalid ELF header magic: != ELF [ 1015.641483][T22581] netlink: 'syz.6.4000': attribute type 10 has an invalid length. [ 1015.644183][T22581] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4000'. [ 1015.658376][T22581] 9pnet_virtio: no channels available for device syz [ 1015.699304][ T3998] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1015.860971][ T3998] usb 5-1: Dual-Role OTG device on HNP port [ 1015.863286][ T3998] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 1015.866236][ T3998] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1016.007447][ T3998] cdc_ether 5-1:1.0 usb1: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, c2:ae:07:cf:c5:fc [ 1016.035324][ C1] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000e6: 0000 [#1] SMP KASAN NOPTI [ 1016.038899][ C1] KASAN: null-ptr-deref in range [0x0000000000000730-0x0000000000000737] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1016.041441][ C1] CPU: 1 UID: 0 PID: 3998 Comm: kworker/1:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 1016.044782][ C1] Tainted: [L]=SOFTLOCKUP [ 1016.046136][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1016.049137][ C1] Workqueue: usb_hub_wq hub_event [ 1016.050650][ C1] RIP: 0010:f_midi2_free_ep_reqs+0x56/0x2b0 [ 1016.052418][ C1] Code: 85 6a 02 00 00 49 8b 45 00 48 89 44 24 18 48 05 30 07 00 00 48 89 c2 48 89 44 24 20 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e b5 01 00 00 48 8b 44 24 18 31 [ 1016.058344][ C1] RSP: 0000:ffffc900005909e8 EFLAGS: 00010002 [ 1016.060220][ C1] RAX: dffffc0000000000 RBX: ffff888079b58000 RCX: ffffffff87e52019 [ 1016.062592][ C1] RDX: 00000000000000e6 RSI: ffffffff87e51e56 RDI: ffff888079b58128 [ 1016.064986][ C1] RBP: ffff888079b58128 R08: 0000000000000004 R09: 0000000000000020 [ 1016.067360][ C1] R10: 0000000000000020 R11: 000000000000756b R12: ffff888079b580f0 [ 1016.069714][ C1] R13: ffff888079b58128 R14: ffff888079b58740 R15: 0000000000000001 [ 1016.072077][ C1] FS: 0000000000000000(0000) GS:ffff888096ce5000(0000) knlGS:0000000000000000 [ 1016.074727][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1016.076713][ C1] CR2: 0000000080024000 CR3: 000000006b0f6000 CR4: 0000000000352ef0 [ 1016.079089][ C1] Call Trace: [ 1016.080125][ C1] [ 1016.081031][ C1] f_midi2_set_alt+0x444/0x5f0 [ 1016.082509][ C1] composite_setup+0x16f8/0x9290 [ 1016.084023][ C1] ? __lock_acquire+0x49f/0x1a40 [ 1016.085487][ C1] ? print_lock_name+0x43/0x140 [ 1016.086992][ C1] ? __pfx_composite_setup+0x10/0x10 [ 1016.088775][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1016.090419][ C1] ? do_raw_spin_lock+0x128/0x260 [ 1016.091970][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1016.093628][ C1] ? configfs_composite_setup+0xfb/0x130 [ 1016.095365][ C1] configfs_composite_setup+0xfb/0x130 [ 1016.097041][ C1] dummy_timer+0x2062/0x36c0 [ 1016.098466][ C1] ? do_raw_spin_lock+0x128/0x260 [ 1016.100133][ C1] ? find_held_lock+0x2b/0x80 [ 1016.101579][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1016.103343][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 1016.105042][ C1] ? __pfx_debug_object_deactivate+0x10/0x10 [ 1016.106840][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1016.108325][ C1] ? mark_held_locks+0x40/0x70 [ 1016.109778][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1016.111552][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1016.113050][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 1016.114654][ C1] hrtimer_run_softirq+0x17d/0x2c0 [ 1016.116206][ C1] handle_softirqs+0x1ea/0x9b0 [ 1016.117632][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1016.119223][ C1] ? _raw_spin_unlock+0x28/0x50 [ 1016.120720][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 1016.122452][ C1] __irq_exit_rcu+0x162/0x210 [ 1016.123905][ C1] irq_exit_rcu+0x9/0x30 [ 1016.125193][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1016.126916][ C1] [ 1016.127824][ C1] [ 1016.128727][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1016.130519][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 1016.132462][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 16 39 2a f6 48 89 df e8 9e 88 2a f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 75 98 19 f6 65 8b 05 ee 88 a8 08 85 c0 74 16 5b [ 1016.138171][ C1] RSP: 0000:ffffc9002881e928 EFLAGS: 00000246 [ 1016.140004][ C1] RAX: 0000000000000002 RBX: ffff888029c74000 RCX: 0000000000000040 [ 1016.142384][ C1] RDX: 0000000000000000 RSI: ffffffff8e1a7e36 RDI: ffffffff8c400980 [ 1016.144721][ C1] RBP: 0000000000000246 R08: 0000000000000001 R09: 0000000000000000 [ 1016.146988][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000080000000 [ 1016.149226][ C1] R13: ffff888024958478 R14: 0000000000000000 R15: ffff888024958400 [ 1016.151571][ C1] dummy_urb_enqueue+0x56c/0x880 [ 1016.153037][ C1] ? bus_for_each_drv+0xe1/0x1e0 [ 1016.154539][ C1] usb_hcd_submit_urb+0x268/0x2150 [ 1016.156074][ C1] ? __device_attach+0x1e4/0x4d0 [ 1016.157509][ C1] ? device_initial_probe+0xaf/0xd0 [ 1016.159078][ C1] ? bus_probe_device+0x64/0x160 [ 1016.160580][ C1] ? device_add+0x121d/0x1970 [ 1016.162004][ C1] ? usb_new_device.cold+0x685/0x115c [ 1016.163645][ C1] ? hub_event+0x30a3/0x4a60 [ 1016.165055][ C1] ? process_one_work+0xa23/0x1940 [ 1016.166627][ C1] usb_submit_urb+0x827/0x19b0 [ 1016.168087][ C1] ? __init_swait_queue_head+0xca/0x150 [ 1016.169747][ C1] usb_start_wait_urb+0x10e/0x580 [ 1016.171280][ C1] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1016.172946][ C1] ? trace_kmalloc+0xeb/0x110 [ 1016.174390][ C1] ? __asan_memset+0x23/0x50 [ 1016.175795][ C1] usb_control_msg+0x328/0x4b0 [ 1016.177238][ C1] ? __pfx_usb_control_msg+0x10/0x10 [ 1016.178845][ C1] usb_control_msg_send+0xca/0x130 [ 1016.180403][ C1] usb_set_interface+0x9b6/0xe20 [ 1016.181923][ C1] snd_usb_midi_v2_create+0x629/0x4070 [ 1016.183516][ C1] ? irqentry_exit+0x24d/0xa00 [ 1016.184945][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 1016.186494][ C1] ? __pfx_snd_usb_midi_v2_create+0x10/0x10 [ 1016.188297][ C1] ? usb_ifnum_to_if+0x16f/0x1d0 [ 1016.189781][ C1] snd_usb_create_stream.isra.0+0x386/0x4d0 [ 1016.191592][ C1] usb_audio_probe+0xf05/0x3b10 [ 1016.193075][ C1] ? __pfx_usb_audio_probe+0x10/0x10 [ 1016.194673][ C1] ? do_raw_spin_lock+0x128/0x260 [ 1016.196212][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1016.197817][ C1] ? mark_held_locks+0x40/0x70 [ 1016.199297][ C1] ? _raw_spin_lock_irqsave+0x52/0x60 [ 1016.200945][ C1] ? mark_held_locks+0x40/0x70 [ 1016.202397][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1016.204141][ C1] usb_probe_interface+0x303/0x8f0 [ 1016.205627][ C1] ? __pfx_usb_probe_interface+0x10/0x10 [ 1016.207272][ C1] really_probe+0x241/0xa60 [ 1016.208614][ C1] __driver_probe_device+0x20e/0x450 [ 1016.210152][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1016.211850][ C1] driver_probe_device+0x4a/0x140 [ 1016.213308][ C1] __device_attach_driver+0x1df/0x320 [ 1016.214897][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 1016.216612][ C1] bus_for_each_drv+0x159/0x1e0 [ 1016.218045][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1016.219617][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 1016.221167][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1016.222892][ C1] __device_attach+0x1e4/0x4d0 [ 1016.224320][ C1] ? __pfx___device_attach+0x10/0x10 [ 1016.225863][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 1016.227427][ C1] device_initial_probe+0xaf/0xd0 [ 1016.229108][ C1] bus_probe_device+0x64/0x160 [ 1016.230864][ C1] device_add+0x121d/0x1970 [ 1016.232499][ C1] ? __pfx_device_add+0x10/0x10 [ 1016.234191][ C1] ? usb_create_ep_devs+0x1f7/0x2b0 [ 1016.236044][ C1] ? create_intf_ep_devs.isra.0+0x19f/0x200 [ 1016.238160][ C1] usb_set_configuration+0xd97/0x1c60 [ 1016.240085][ C1] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 1016.242240][ C1] usb_generic_driver_probe+0xa1/0xe0 [ 1016.244124][ C1] usb_probe_device+0xef/0x400 [ 1016.245887][ C1] ? __pfx_usb_probe_device+0x10/0x10 [ 1016.247816][ C1] really_probe+0x241/0xa60 [ 1016.249500][ C1] __driver_probe_device+0x20e/0x450 [ 1016.251342][ C1] driver_probe_device+0x4a/0x140 [ 1016.253144][ C1] __device_attach_driver+0x1df/0x320 [ 1016.255115][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 1016.257161][ C1] bus_for_each_drv+0x159/0x1e0 [ 1016.258973][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1016.260813][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 1016.262360][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1016.264321][ C1] __device_attach+0x1e4/0x4d0 [ 1016.265817][ C1] ? __pfx___device_attach+0x10/0x10 [ 1016.267400][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 1016.268956][ C1] device_initial_probe+0xaf/0xd0 [ 1016.270437][ C1] bus_probe_device+0x64/0x160 [ 1016.272163][ C1] device_add+0x121d/0x1970 [ 1016.273601][ C1] ? __pfx_device_add+0x10/0x10 [ 1016.275035][ C1] ? usb_detect_static_quirks+0x335/0x3e0 [ 1016.276689][ C1] usb_new_device.cold+0x685/0x115c [ 1016.278278][ C1] ? _mutex_trylock_nest_lock+0x2e1/0x310 [ 1016.280404][ C1] ? __pfx_usb_new_device+0x10/0x10 [ 1016.282250][ C1] ? mark_held_locks+0x40/0x70 [ 1016.284052][ C1] hub_event+0x30a3/0x4a60 [ 1016.285695][ C1] ? __pfx_hub_event+0x10/0x10 [ 1016.287290][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 1016.289250][ C1] ? rcu_is_watching+0x12/0xc0 [ 1016.291028][ C1] process_one_work+0xa23/0x1940 [ 1016.292902][ C1] ? __pfx_process_one_work+0x10/0x10 [ 1016.294917][ C1] ? __pfx_hub_event+0x10/0x10 [ 1016.296710][ C1] worker_thread+0x5ef/0xe50 [ 1016.298407][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1016.300300][ C1] ? kthread+0x13a/0x450 [ 1016.301769][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1016.303658][ C1] kthread+0x370/0x450 [ 1016.305228][ C1] ? __pfx_kthread+0x10/0x10 [ 1016.306913][ C1] ret_from_fork+0x72b/0xd50 [ 1016.308640][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1016.310546][ C1] ? __switch_to+0x800/0x10f0 [ 1016.312314][ C1] ? __pfx_kthread+0x10/0x10 [ 1016.314064][ C1] ret_from_fork_asm+0x1a/0x30 [ 1016.315716][ C1] [ 1016.316690][ C1] Modules linked in: [ 1016.317869][ C1] ---[ end trace 0000000000000000 ]--- [ 1016.319710][ C1] RIP: 0010:f_midi2_free_ep_reqs+0x56/0x2b0 [ 1016.321844][ C1] Code: 85 6a 02 00 00 49 8b 45 00 48 89 44 24 18 48 05 30 07 00 00 48 89 c2 48 89 44 24 20 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e b5 01 00 00 48 8b 44 24 18 31 [ 1016.328357][ C1] RSP: 0000:ffffc900005909e8 EFLAGS: 00010002 [ 1016.330460][ C1] RAX: dffffc0000000000 RBX: ffff888079b58000 RCX: ffffffff87e52019 [ 1016.333163][ C1] RDX: 00000000000000e6 RSI: ffffffff87e51e56 RDI: ffff888079b58128 [ 1016.335931][ C1] RBP: ffff888079b58128 R08: 0000000000000004 R09: 0000000000000020 [ 1016.338591][ C1] R10: 0000000000000020 R11: 000000000000756b R12: ffff888079b580f0 [ 1016.341371][ C1] R13: ffff888079b58128 R14: ffff888079b58740 R15: 0000000000000001 [ 1016.344110][ C1] FS: 0000000000000000(0000) GS:ffff888096ce5000(0000) knlGS:0000000000000000 [ 1016.347111][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1016.349659][ C1] CR2: 0000000080024000 CR3: 000000006b0f6000 CR4: 0000000000352ef0 [ 1016.352715][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 1016.356138][ C1] Kernel Offset: disabled [ 1016.357799][ C1] Rebooting in 86400 seconds..