last executing test programs: 2m30.218045887s ago: executing program 0 (id=6410): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffff8000, 0x0) close(0xffffffffffffffff) write$cgroup_int(0xffffffffffffffff, &(0x7f0000001480)=0x2, 0x12) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1100000000f336, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x101) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x8880, 0x85) getdents(r1, &(0x7f0000000480)=""/89, 0x59) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f00000001c0)={0x0, 0x1, "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"}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x38f9, 0x0) 2m30.09892877s ago: executing program 0 (id=6411): syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) mount(0x0, 0x0, 0x0, 0x800041, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x3fffc, 0x180, 0x2, 0x0, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x8, 0x0, 0x45, 0xfffffffffffffffd, 0xbdb], 0xdddd0000, 0x1c6017}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m29.973431935s ago: executing program 0 (id=6412): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000002, 0x200000005c831, 0xffffffffffffffff, 0xd2d6f000) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="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"], 0x270}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000008c0)={0xa, 0x4e22, 0xfffffffc, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000040)=0x40, 0x4) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000100)=0x20a, 0x4) sendmmsg$inet6(r4, &(0x7f0000004cc0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000048c0)="04e9", 0x2}], 0x1}}], 0x1, 0x4000001) r5 = dup(r4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r5) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r5) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r6, 0x0, 0x33, &(0x7f0000000000)=0x80000005, 0x4) sendmsg$inet_sctp(r6, &(0x7f0000000040)={&(0x7f00000000c0)=@in={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000080)}], 0x1, 0x0, 0x0, 0x80}, 0xc051) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x10, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x9}, [@jmp={0x5, 0x1, 0x8, 0xb, 0x7, 0x40, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x78}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @jmp={0x5, 0x1, 0x7, 0x7, 0x5, 0x50, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @jmp={0x5, 0x0, 0xce26b5a1f29b9d7e, 0x1, 0x4, 0xfffffffffffffffc}]}, &(0x7f0000000340)='syzkaller\x00', 0x10000, 0x1d, &(0x7f0000000380)=""/29, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x4, 0x10, 0x1ff, 0x5a8}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000440)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000480)=[{0x1, 0x3, 0x8, 0x7}, {0x4, 0x5, 0x8, 0xa}, {0x2, 0x1, 0x9, 0x8}, {0x2, 0x1, 0x8, 0xa}, {0x1, 0x1, 0xf, 0xb}, {0x1, 0x1, 0x4, 0x4}, {0x3, 0x4, 0x6, 0x8}, {0x4, 0x3, 0xe, 0x1}], 0x10, 0xffff}, 0x94) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000600)=@o_path={&(0x7f00000005c0)='./file0\x00', 0x0, 0x4010, r0}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xb, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0xa6}]}, &(0x7f0000000100)='syzkaller\x00', 0xbecc, 0x0, 0x0, 0x41000, 0x4, '\x00', r3, @fallback=0x27, r5, 0x8, &(0x7f0000000140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000180)={0x4, 0x6, 0x9, 0x8}, 0x10, 0xffffffffffffffff, r7, 0x7, &(0x7f0000000640)=[r8], &(0x7f0000000680)=[{0x0, 0x5, 0x9, 0x1}, {0x0, 0x4, 0x4, 0xa}, {0x1, 0x3, 0x7, 0x3}, {0x2, 0x3, 0x7}, {0x4, 0x4, 0xb, 0x2}, {0x5, 0x2, 0x1, 0x8}, {0x0, 0x2, 0xe, 0x3}], 0x10, 0x9}, 0x94) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r1, @ANYBLOB="14005e800800060084630000080005005b00d342"], 0x30}, 0x1, 0x0, 0x0, 0x811}, 0x80) pipe2(&(0x7f0000000000), 0x4000) 2m29.091344826s ago: executing program 0 (id=6414): r0 = syz_open_dev$rtc(&(0x7f0000000000), 0xfffffff7, 0x5210c3) ioctl$RTC_PLL_GET(r0, 0x801c7011, &(0x7f0000000040)) r1 = open(&(0x7f0000000080)='./file0\x00', 0x402000, 0xc9) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x28, 0x18, 0x107, 0x70bd25, 0x0, {0x4f, 0x7c, 0x3f}, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x5}]}, @typed={0xc, 0xb8, 0x0, 0x0, @u64=0x1000006}]}, 0x28}, 0x1, 0x0, 0x0, 0x40811}, 0xc000) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f00000000c0)=@generic={0x3, 0x7, 0x5}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') r3 = openat$comedi(0xffffff9c, &(0x7f000001ee40)='/dev/comedi4\x00', 0x32600, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)={0x24, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0xa}]}, 0x24}}, 0x0) ioctl$COMEDI_CHANINFO(r3, 0x80206403, &(0x7f000002da40)={0x0, 0x0, &(0x7f000001ee00), 0x0}) 2m28.995724745s ago: executing program 0 (id=6416): r0 = io_uring_setup(0x2a8d, &(0x7f0000000240)={0x0, 0x86a1, 0x2, 0x3, 0x1fb}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f0000000140)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @empty, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002fc0)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}], 0x1, 0x20080058) close_range(r0, 0xffffffffffffffff, 0x0) 2m28.842532044s ago: executing program 0 (id=6418): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/4082, 0xff2, 0x0, 0x0}, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcdf, 0x1, 0x0}, &(0x7f00000000c0)=0x40) 2m28.793875008s ago: executing program 32 (id=6418): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/4082, 0xff2, 0x0, 0x0}, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcdf, 0x1, 0x0}, &(0x7f00000000c0)=0x40) 10.283192522s ago: executing program 4 (id=7035): openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGREPORT(r2, 0x400c4807, &(0x7f0000000140)={0x2, 0x100, 0x310144df}) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000180), r0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)={0x14, r3, 0x724256964f3a5743, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000180)={0x1}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_GET_PIT2(r5, 0x8070ae9f, &(0x7f0000000480)) 8.358902924s ago: executing program 4 (id=7043): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000100), 0x82, 0x602) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x28, 0x1e, 0x221, 0x70bd2d, 0x0, {0x7}, [@nested={0x14, 0x144, 0x0, 0x1, [@nested={0x10, 0xf3, 0x0, 0x1, [@nested={0xc, 0x28, 0x0, 0x1, [@nested={0x8, 0xa, 0x0, 0x1, [@nested={0x4, 0x11d}]}]}]}]}]}, 0x28}}, 0x4000080) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000000200)='qnx6\x00', 0x8000, 0x0) write$hidraw(r1, &(0x7f0000001380)='\x00+', 0x2) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000600), 0x0, 0x202) syz_usb_control_io$hid(r0, 0x0, 0x0) 4.845306587s ago: executing program 4 (id=7059): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x3, 0x180, 0x2, 0x0, 0xf1, 0x100000001, 0x10, 0x5, 0x0, 0x29, 0x0, 0x5, 0x0, 0xbd9], 0x4000, 0x43180}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x6, 0x4, 0x200000000000043, 0x2000004, 0x0, 0x2004cb, 0x0, 0xa7c, 0x9, 0x8, 0x8000000009, 0x803, 0x0, 0x9, 0x9], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0xeeee3001, 0x8, 0x0, 0xb, 0xe6, 0x40, 0x0, 0x3, 0x81, 0x80}, {0x100000, 0x33000, 0x3, 0x0, 0x2, 0x5, 0x9, 0x6, 0x36, 0x10, 0x6, 0x89}, {0x0, 0xe000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x0, 0xeeee0000, 0x9, 0x6, 0x5, 0x8, 0xb, 0x0, 0x8, 0x7, 0xe, 0x1f}, {0xf000, 0x1000, 0xf, 0x3, 0x16, 0x7, 0x9, 0x8, 0x7, 0x9, 0xf7, 0x97}, {0xeeefa000, 0x0, 0xb, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x54000, 0x10000, 0xa, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xdddd0000, 0x4000, 0xa, 0x5, 0xba, 0x7, 0xff, 0x9, 0x2, 0xc, 0xb0, 0x83}, {0xeeee0000, 0x30}, {0xf000, 0x7}, 0x80000021, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0x200000, [0x6800000000000000, 0x5, 0x2, 0x20008]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x1) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="31032abd7000fbdbdf250b00000008000300", @ANYRES32=r7], 0x1c}, 0x1, 0x0, 0x0, 0x2004c0c1}, 0x8004800) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x1b}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x10, 0xcd, [0x17bb, 0x9, 0x1124, 0x8, 0x0, 0x6]}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xe, 0xcd, [0x9, 0x1ff, 0x6, 0x6, 0x0]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004041}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4eaa000003000000711096000000d6009500000000000001"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f00000001c0)={0x2009}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xffffff81}]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 3.774119087s ago: executing program 3 (id=7066): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}]}}}, {0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x98}, 0x1, 0x0, 0x0, 0x840}, 0x0) close(0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:05.0/remove\x00', 0x1, 0x0) r1 = getuid() r2 = socket$xdp(0x2c, 0x3, 0x0) recvfrom(r2, 0x0, 0x0, 0x22162, 0x0, 0x0) lstat(&(0x7f0000000080)='./sys/bus/pci/devices/0000:00:05.0/remove\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f0000000040)='./sys/bus/pci/devices/0000:00:05.0/remove\x00', r1, r3, 0x1000) 3.645497759s ago: executing program 3 (id=7067): r0 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x80000) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r3 = socket$kcm(0x2, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='ocfs2\x00', 0x100000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/netdevsim/devices/netdevsim10/sriov_numvfs\x00', 0x1, 0x0) write(r4, &(0x7f0000000600)='1\x00', 0x2) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000000)={0x57, 0xe, 0xfffe, {0x4, 0x7}, {0x7f, 0x8000}, @cond=[{0xfff7, 0x6, 0x8, 0x7, 0x1, 0x5}, {0x100, 0x100, 0x7fff, 0x4, 0x1, 0x2}]}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/tomoyo/query\x00', 0x2, 0x0) ppoll(&(0x7f0000000140)=[{r5, 0x4}], 0x1, 0x0, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f00000003c0)={&(0x7f0000000740)=@in={0x2, 0x4621, @loopback=0x7f000082}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000000880)='\r', 0x1}], 0x1}, 0x40) recvmsg(r3, &(0x7f0000002c80)={0x0, 0x0, 0x0}, 0x40) 3.412186819s ago: executing program 2 (id=7070): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002900)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000002a00)={0x0, 0x0, &(0x7f00000029c0)={&(0x7f0000002940)={0x2c, r1, 0xbb34a96d50fa80b5, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x6}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40041}, 0x40004) (fail_nth: 3) 3.351165176s ago: executing program 2 (id=7071): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setrlimit(0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000280)='net/route\x00') rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) io_submit(r2, 0x1, &(0x7f0000000700)=[&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x8, 0x4, r1, 0x0}]) 3.187532542s ago: executing program 2 (id=7072): openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r0, &(0x7f0000000900)='nfsd \\x7.0.0.1 2000000000 test', 0x1e) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getpgid(0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000140)={0x2, r3}) sendmmsg$unix(r1, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="11", 0x1}], 0x1}}], 0x1, 0x40015) execveat(r0, &(0x7f0000000000)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x0, 0x0, 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x2000}}) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000080)={0x50, 0x0, r5, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r7, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r7, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) unshare(0x22020400) fcntl$lock(r7, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x25, 0x5}) fcntl$lock(r7, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0x8, 0x73e9}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_fuse_handle_req(r4, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket(0x28, 0x5, 0x0) 2.694912109s ago: executing program 3 (id=7073): mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000000) 2.6945644s ago: executing program 3 (id=7074): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) listen(0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvmmsg(r1, &(0x7f0000001e80), 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000002c0)={0x0, 0x4, 0x3, 0xf, 0x81, 0x1000, 0x883, 0xa, {0x0, @in={{0x2, 0x4e21, @empty}}, 0x83, 0x0, 0x0, 0x4, 0x1000}}, &(0x7f0000000380)=0xb0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000003c0)={r3, @in={{0x2, 0x4e24, @multicast1}}, 0x3, 0x5}, 0x88) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a010800000000000000000100000b0900030073797a32000000000900010073797a300000000060000000060a010400000000000000000100000008000b40000000000900010073797a300000000038000480340001800a0001006d61746368000000240002800c000300b07346e358c219250b0001006367726f75700000080002"], 0xd4}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) io_uring_setup(0x549c, &(0x7f0000000000)={0x0, 0x70e6, 0x2, 0x2, 0xf2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="f572c10000a88c43c226f0a6380778c72739a0", @ANYRESOCT=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs(0xffffffffffffffff, 0x0) chdir(&(0x7f0000000180)='./file0\x00') mmap(&(0x7f00005f7000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r5 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) pwrite64(r5, &(0x7f0000000000)="a5", 0xfffffe8c, 0x2) write$binfmt_format(0xffffffffffffffff, &(0x7f0000000040)='1\x00', 0x2) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x3c4, 0x10, 0x2, 0xa, 0x14000000, 0x1, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x1, 0x723, 0x400, 0x2, 0x3562bc0d, 0x100, 0xffffffa7, 0x5, 0x34d, 0x1, 0x3ff, 0x9, 0x200, 0xe2df, 0x4aa14, 0x1, 0x4, 0x0, 0x6, 0xf58, 0x1]}) ioctl$COMEDI_BUFCONFIG(r0, 0x8020640d, 0x0) 2.658103945s ago: executing program 1 (id=7075): socket$pppoe(0x18, 0x1, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x800) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a140000000e0a01020000000000000000010000000000000000000100000a7fc2e4bb7a3f8d67bf5609d58197f9eba851a450478a728e"], 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r3 = accept4(r1, 0x0, 0x0, 0x800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) userfaultfd(0x80001) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0xc) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000000)={r5, 0x1, 0x30}, &(0x7f0000000140)=0xc) connect$llc(r4, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r4, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="89d56a6fc2ff6a07", 0x8, 0x10, 0x0, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x14, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x10) 1.558689718s ago: executing program 4 (id=7076): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x4a243) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x2, 0x0, [{0x40000001, 0x4, 0x1, 0x31237648, 0x6, 0x2, 0x80}, {0x40000000, 0x1, 0x1, 0x1, 0x624, 0x7, 0x8001}]}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000000)=0x80000001) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x7, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc004}, 0x80c0) sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001080)={0x20, 0x0, 0x7, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000019}, 0x8080) sendmsg$NFNL_MSG_ACCT_DEL(r4, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000001500)={0x14, 0x3, 0x7, 0x201, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x80) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x4}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000a40), r5) openat$ptp0(0xffffff9c, &(0x7f0000000180), 0x10c81, 0x0) sendmsg$NFC_CMD_ENABLE_SE(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b00)={0x24, r6, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x884}, 0x4044802) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) iopl(0x3) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0xf61cb000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000000e000/0x1000)=nil, 0x1000, &(0x7f00000001c0)='\x00') syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) ioctl$FS_IOC_RESVSP(r0, 0x402c5828, &(0x7f0000000100)={0x0, 0x1, 0x101, 0x9}) openat$full(0xffffff9c, &(0x7f00000002c0), 0x401, 0x0) 1.445855934s ago: executing program 1 (id=7077): r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) r1 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15f19d0a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) preadv(r1, &(0x7f0000000480)=[{&(0x7f0000000100)=""/15, 0xf}], 0x1, 0x1, 0xaadd) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000000080)={0x6, {"7fb13911afb5ea7f027063aa876dd358", "cfe484e50900", "d9ca451d96249a1dee77476cc87f7d0a"}, 0x6}) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x0, r2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x80101) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x8, 0x20132, 0xffffffffffffffff, 0xb2993000) socketpair$unix(0x1, 0x1, 0x0, 0x0) unshare(0xc040480) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x54, 0x0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000140)}, {&(0x7f0000000280)}, {&(0x7f0000000380)="09c447113c8ce8a46b6c00e21404de2feac1f9acb06b7944405513592ce939afe2d9c0f50533dc615830a157181377a274f24e337e9c799d5b141c534d79e77ffa270980dea5fb4b77837097b2bbd44bdf658b6b7e47503f774a199fa353b5c75f608645b9f0d3192aeb29553c3ac128857e9eb977f538e65cc1519329b6f965dc4b1e04f325045eb8d0983cdd59a8989249dab4c274fd2541168954b551118b097ed0841751e9c3c1f1933a4c36951920cb108fa7b0036a40", 0xb9}, {&(0x7f0000000540)="8d830042141dad3cedf409ee8d520b0cab22b489e662db965e765ad5960693f7bab5caac21a85e13ea20a53739d37a0d35964d372318c6e4060744faf42aa76e9fd4f4f0be9daec57217e25090264a115106a02dfbc128e7e7", 0x59}, {&(0x7f00000005c0)}, {&(0x7f0000000680)}, {0x0}], 0x7) setsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f00000001c0)=0xa5, 0x4) 1.356735544s ago: executing program 2 (id=7078): r0 = socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = syz_ublk_setup_io_uring(0x77fd, &(0x7f00000004c0)={0x0, 0xaff3, 0x4000, 0x3, 0x212}, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)) r2 = syz_io_uring_setup(0x208c, &(0x7f0000000200)={0x0, 0x362f, 0xc0d2128cce1dfc8d, 0x6, 0xa2, 0x0, r1}, &(0x7f0000000040), &(0x7f0000000000), &(0x7f0000000640)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000580)=[{&(0x7f0000000380)=""/113, 0x71}], 0x1) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="28000080190001000000008080ab000000030005002c08e1e781023b9af349abd31c7ece398e4b0b6c44f3008a4f793a83accce5534e863ebf267b571abf4eebfedf6019b0ddf34050fe682e6a994fcf260a1907455aa268ed21a6df5440aa271ffcc1d6398f4ef24cecffb3694d6f3196be6492e6208ebaaf9f955d30437469417e24da41ce3d64", @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x0) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) prlimit64(0x0, 0x7, &(0x7f0000000200), 0x0) mq_open(&(0x7f0000000340)='&:\'\x00', 0x40, 0x0, 0x0) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r6, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r5, 0x0}]) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'vlan1\x00', 0x0}) getpeername$packet(r4, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r3, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x68, r7, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x8010}, 0x1) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000032001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4006, &(0x7f0000000000)=0x4, 0x7, 0x2) r10 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r10, 0xc0145608, &(0x7f0000000100)={0x10001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_S_FMT(r10, 0xc0d05605, &(0x7f0000000940)={0x2, @win={{0x0, 0x4, 0xba, 0xe0000000}, 0x3, 0x80000000, 0x0, 0x6, 0x0, 0x6b}}) r11 = socket(0x0, 0x1, 0x100006) sendmsg$DEVLINK_CMD_RATE_SET(r11, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, 0x0, 0x400, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 617.583191ms ago: executing program 2 (id=7079): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat$hwrng(0xffffff9c, &(0x7f0000000140), 0x8880, 0x0) sendto$inet(r0, &(0x7f0000000180)="1444880d8f7b562a879f28d4f551d3a753d022448268afc97656b95d59c76aa07f6903d17b5c9c58d65fec7aa1f6cf2c0cd219422b7f0ae8721f9705be3518e385e17c89c76e2c0f4ccc171523868050f57f53b18d6fd9957ae3c35124b86fc574b2a34515e64605739c3d064154d509bb005f3d54585bca399e0c26dce3d6b7949f5082b6be30b8071b3a413fc2364e2761f7cdb8bf41b8e959604cce", 0x9d, 0x2000000, &(0x7f0000000240)={0x2, 0x4e22, @multicast2}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='tcp 2', 0x5) 501.194427ms ago: executing program 4 (id=7080): openat(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setrlimit(0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000280)='net/route\x00') rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) io_submit(r2, 0x1, &(0x7f0000000700)=[&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x8, 0x4, r1, 0x0}]) 493.570453ms ago: executing program 1 (id=7081): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) (fail_nth: 11) 288.365863ms ago: executing program 1 (id=7082): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) (fail_nth: 11) 275.571628ms ago: executing program 2 (id=7083): memfd_create(&(0x7f0000000040)='\x00\x00@Z\x82\x1f\xd7\xdc\xe8\x01\x17\xf4\xd6z\xfeJ\xd4k\x01\x00\x00\x00\xb4\xa4\xc4\x85s\xedz\xef\x96\xe4:\xec\xb4ZB\x9elG\xfa+q\xa2w\x8d\x991\xc7\xef\x91\xcbZ\xd4\x0f\"U\xbc\x02k\xf4m\x9fXr\x1a\xb9\xc3\xfdaf\xec\xa7\xc2W]\xd8\x1d\xdel\x94\xfd\xd7\xde\x84\xf1n\xc5G\x89\x0e\xa1$6\x06*\x16\xc7\xf6i\xd6r\xcb\xe7Z\xdc\x82\x97\x89\xd3\x80i\xc00\x90\xee\xd6\xc4%,\xaa\f\xf0ra\x98\xca\xc6\x87\xb3\x85\xcc\xe3\x06\xc9\xcc\xe7do\xd8 8\x04\xe1\xa9R\xa0\xe1M\x10\xaa4!\x8f\xcez\x81F\x81\xcd\xdd\x1b\xa7\x85\b\xad)3s\x9f\x90\x85\x82\x1d\xc7\x80h\x87\xa2N\x80\xbf\xf5\xfe\xb9\'QC\xe7d\xc1\x16$\xb1\xd6\x85\xb9[\x16!\xf7{r\x01\x00\x00\x00\x00\x00\x00\x00\xb9#\xe0\xe0\r\x84\xa5\xb5\xe3U\xb3B\x84-\xce\x18!z\xe7\xcd\x93\x9e\xb9#\x8d\x8d\r\x1bD\x05#\xf3$A\xd1\xf5i\x87\x05\xedCo\x92\x84\xfe\x11$p\xab\xbb\n\x19\xe4\xf5t-x\xf3\a\x05n\x13\xe3X\x03\xe2\x04Y9/br\xb0\\\xdcDY\xd9\r\n\xe3Y}\x97,G\xf2\tC\xf3*\x9e\x8c]\x03\x9bt\x85{v3\xdd\x9f\xbc\a\x9eo5\xa2\xe3%\xcd\x19C\xbd*\xdb\xd8\xfe\x9f\xf2%~\xafH\v\x7fh\x88P?\xb8\x94\x8f\x9a\x87\x1c\xfb\x10\x032\xec\x0e\"\xc9\x89\xbd*\xf7\xfd\x17\xbb!\xebN\xe5\x17\xc4\xc7$\x11\xf0\x00G4\n\f\x95\x04\xae}\x81\xc5d\x17\xe4)\xd8\x12\xe6; ,\x0e7\xc1\x81lx', 0x1) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r1, &(0x7f0000000900)='nfsd \\x7.0.0.1 2000000000 test\n', 0x1f) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getpgid(0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000140)={0x2, r3}) execveat(r1, &(0x7f0000000000)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x0, 0x0, 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x2000}}) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000080)={0x50, 0x0, r5, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r6, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r6, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) unshare(0x22020400) fcntl$lock(r6, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x25, 0x5}) fcntl$lock(r6, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0x8, 0x73e9}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_fuse_handle_req(r4, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket(0x28, 0x5, 0x0) 145.202322ms ago: executing program 4 (id=7084): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) dup(r1) pselect6(0x40, &(0x7f0000000040)={0x9, 0xffffffffffff7fff, 0xa38, 0xdd43, 0x2, 0x800, 0x4a, 0x5}, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x24c4436d5a174b6d, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4004000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003480)={0x2020}, 0x2020) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x16, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x42000, 0x2}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x12, @private1}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40680c5}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 106.982456ms ago: executing program 3 (id=7085): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xc, 0xa, 0x0, 0x5}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x69ad283380a3f340, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x9841, 0x1303}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}, @IFLA_BOND_MIIMON={0x8, 0x3, 0x1}, @IFLA_BOND_PRIMARY={0x8, 0xb, r2}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20048011}, 0x0) 103.44307ms ago: executing program 1 (id=7086): io_uring_setup(0x70c3, &(0x7f0000000280)={0x0, 0x2c3f, 0x800, 0x20001, 0x2ab}) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000180)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) r2 = inotify_init() r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCDELRT(r3, 0x890c, &(0x7f0000000080)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}, 0x9, 'veth1_to_hsr\x00'}) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000040)=0x90000) sched_setaffinity(0x0, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), r5) sendmsg$NLBL_CALIPSO_C_ADD(r5, &(0x7f0000000100)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f0000000400)={0x24, r6, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(r5, &(0x7f0000000500)={&(0x7f0000000600), 0xc, &(0x7f0000000700)={&(0x7f0000000800)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x1c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x400c010) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x4c0, 0x258, 0x258, 0x0, 0xc8, 0x0, 0x3f8, 0x3f8, 0x3f8, 0x3f8, 0x3f8, 0x6, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, [], [], 'ipvlan1\x00', 'veth1_vlan\x00'}, 0x0, 0xa4, 0xc8, 0x0, {0x0, 0x3a010000}}, @HL={0x24}}, {{@ipv6={@private1, @loopback, [0x0, 0xff, 0xff000000], [], 'tunl0\x00', 'bridge_slave_1\x00', {}, {}, 0x0, 0x0, 0x0, 0x30}, 0x0, 0xa4, 0xc8}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0x258}}, {{@ipv6={@private0, @remote, [0xff000000], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x0, 0x3, 0x44}, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0xa4, 0xc8}, @common=@inet=@SYNPROXY={0x24}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa4, 0xd8}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x5, 0x2}, {0x4, 0x3}, {0x3, 0x6, 0x4}, 0x2, 0x8}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x51c) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f0000000540)={{@local, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x7}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x81, 0xfffffffffffffff9, 0x0, 0x0, 0x3}) close_range(r2, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000300)='1', 0x1) 728.806µs ago: executing program 3 (id=7087): socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_emit_ethernet(0xde, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60f900f500a80600fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a021d399ae820002907800001ef899843294cb6664e7c26d3b910854d6d40714a3287030a9d35819924cab04d570fc79d90945f32861294fbb312ae6fd7af6a4c84e76f10ca9eb8657c63f3686526b3cda54d1e4d843041974b5974935122d95e62c6d80cab970eb6dc3ecfcd728a93a5d57fb560f11568c1a5bcbb16115bdb12caf0e1e30433ecbbbe6ba9beb0416cc231fbdd4090c6bc89cbb874c275f"], 0x0) faccessat2(0xffffffffffffffff, 0x0, 0x44, 0x1000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, {0xfffff5d4}}, './file0\x00'}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000003c0)=0x4) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r3 = socket$unix(0x1, 0x2, 0x0) listen(r3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x7, 0xd44, 0x6}) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000440)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg2\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80c9}, 0x14000810) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r5, 0x100000) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000080)={0x5, 0x3, 0x248, 0x5d92, 0x9, 0x1ce, 0x7fff, 0x2}, 0x0, &(0x7f0000000140)={0x3ff, 0x80, 0x5, 0x0, 0x101, 0xafc2, 0x5, 0x1}, &(0x7f00000001c0)={r7, r8+60000000}, &(0x7f0000000280)={&(0x7f0000000240)={[0x1000, 0x8]}, 0x8}) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r9 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=7088): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000a40)={0x54, r1, 0x1, 0x470bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x2a, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x6}, @device_a, @device_a, @initial, {0x2, 0xfff}}, 0x600, 0x8b1, {0x0, 0x6, @default_ibss_ssid}, @val, @void}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x54}, 0x1, 0x0, 0x0, 0x20040040}, 0x8800) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r4, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r9 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r9, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f000004c000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x8, 0x0, 0x0, 0x1c3, 0x0, 0x0, 0x38, 0x16}) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4c050) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) r11 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'veth1_macvtap\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r11, &(0x7f0000000100)={0x1d, r12, 0x0, {}, 0xfd}, 0x18) sendmmsg(r10, &(0x7f00000046c0)=[{{&(0x7f0000000140)=@ll={0x11, 0x2, r12, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000001c0)="85b4a3b35140e303e418fb12cc3e9987546d28b4123427cd4754f892afb713a9e3ed86cf2371b645", 0x28}, {&(0x7f0000000300)="8f40070038deebb426fe2b040e1a743ba87b8555cbe26d7a9c77016bedea98fa03c72279a417e302e8dd70bcf9c8a077171db84ace2aca2b5806c41a496b00fffc431cd12f9d7187b2e292da20c930a1aa54de601d1c7c363d1b54ea6894144ca69c07016dd09ddab89d6cca7add089dd24e00167d7ffd86e8c7fe0c638ee2fe2a7056b09ac7e1418b252637", 0x8c}, {&(0x7f00000003c0)="c5f0f51a9927619d20dde993f1198b7c381e5b4a248eb69b37a843d9e9dc4d5e59ae4d36dd619a346591e45a903ec20d94a03af44d9d941975cb403cbe7160fdd4d1ef11fe268f0fef280f30e9237b4eec8588e44b2d7cb31b33190b3cf804a0fd37dfc628511dfdbf5c13", 0x6b}, {&(0x7f0000000440)="53485fa408da6a26b0cce83c55", 0xd}, {&(0x7f0000000480)="24be845f647ee3acee491ae582d77e758941bc92355c67df04cf35291da07a1a1b1a9c3624842ac2805271f518db8adf539c29b44655240f1898f6b6554de0b3bec4d991c654a2201eaedaa26ca71cdc85e8e64ef931990e58c06b49128df5f16631363a16f33f07a83230d8e35b047bcadf2e4a22003e356447044a97ab4c9b1ec90f066793ea26b69567e1408cc8d4f9c418d609cc1750", 0x98}, {&(0x7f0000000540)="eee3b2910dda7b997eb7d3173be0784c0cfbeeafdfb07cf9229c10bc33ed4f4a8c527ef6a5809147965853b2cbeb2e2830f00f7e4f8975bc8ea89d79380631b3bfc48ae1bb3dd8fdf0f10aee6f7c2317c54cb4f801a5de001c292a97d629a0ded8da565ef1dbda591fa26b376e5f611830a359595bade424ba7a15899b9bca214e663c880a77746771917b84ec94a782", 0x90}], 0x6, &(0x7f0000000700)=[{0xb8, 0x0, 0x1000, "06842a40a9d2344b2ed96c59ff08fd9e681a280c93b38c4b541999c78d800cd3d4d9cd71b63651c09062d44ffc7c7cd35de24b7d7adf8a6135fe5d8f9756eaaa1b0d499f55cd1b42f74c026cce68ff8f9f0a0eb2f5b79b1dc6522239c387973d4849741bac91059b6f6db469e934ccec7fab42cd1b252226213685b841e7d8ba31ea78c5688de84d4e4723b38d3c317438128b5ee184877ebbb7ec09ee79ac2cb94d57279c85ba4f65"}, {0x44, 0x114, 0x14, "75f6583b1699a40ab4cc5b9e36904560ff8d4e52068b320a8f31c3326a9420fe6f7b9413ef09cb87d42d596d61cab95981b513cb783b19ab"}, {0x64, 0x116, 0x75, "dca901a0afda9c92a6f9a8ff304e0b2e9d102a7bef061a5fd14dfd1b93f037b3d680afd4e5dbbdd65ea5b77210aab8987c747bc926b957b04ce73f770d53c6bf3b2e004bb1fc7a83c59896f926975983875118a95c"}, {0x4c, 0x6, 0x6, "a1277ce601f646f558ee65b37c74af8da7c45ae23571dfb4f190f73179ece9689f4e7841f53836913937bf825659613829c5bfea19099214457d41326d"}, {0x100c, 0x10f, 0x1, "cfbdd8faff4d9685234bd62fa40f140ef9da1ffc954ad2256e7dc193791c6515f24fe4c37ee8d1f4ad2c5251791d57c0c7494e1640c15921295e0e3a7981551c8341280f14b14605d4e8c5baf5f9b0051d69ebb0542e150f5eb045b1414a5e4ab6bb600b9ddc5555ecfb434c2625b87527508aa89e87004c7736c6733aca5ac7e070bdc228d875b292a3eb44e010ed167e162fba529c96cb24cd22180f46eb751f9439575fb4df7fe4424428c2a8ce38677c2625caad268e0b188f0681c1b0e1ca7493a6b3f3981d6397a12f798569106e01eba2f2fed08e4854344566b60a4bad26a8c748f20a4fbeb79bcaf414521a810eb31749e38b57bec7c01baa953517dcb39a4a5c7564649bdd16cae8822340cc82b28f951d14e9a85c0f5ec6e2575e821586b10231b940dad867f560659b1157c06a0ae6a40a077a656d392a334e41388db1dcff8e0fa144ddec4a6bedb967a8e223ac97926dfdf2ddd63f6721b3fe5c4505716ba394c6b8a0752086685afb9e6c5ecd4413d2ae900294e856daf213135de1cf089d144e9e7ec2f87dc9fb1dfa4b04dec1985409c681acb6ccb43e4783e0e1e913d351aa979d093bc39a381cf46ff33dafc4afcfd5c1ec45c872836bca0e75ce24fbfc32bda829b98270c8ca409bc191c147e4cfd1391750035f6127e7cda6a31403a88826c5c8b00f8d6f62fbfa0de83e5645d10ff9e69c16a611cd9d47a649106f7ae5da4619d9c507356801b03243b4a16ca206c259fccbdec81999bbe8650b0acca1906db7f19338c20c4f120cb82aef1b21df2850a9eb989b2d4a8f7fec613f0642303f25575333c66387b5cee449162680e8a6c5decea1ab892480dd22fa2d189049c80c7b4f7b30add87c429abb3dc903447933ee3dec7d4c4a8230dcb6160780dae2540d05ae9ab95d6273219062bf3dacadb83b7ad2e67f5f225b198f079e28f18c3ca1b07cba5bb06e91361828e3b05adc4e4b8622e5eed7547b911a05199bca180d126b81e7aabb55b6145625477468831c6384dd38a83bfe5de96a36fa7673bc7df761f075df3e1788f840aacecd5649ded8f6fb028ff635516c9c1ed529135322a945e5de7949c46c71f737fd86fe6a4d9a9b75e8ffdc9456e6374dbfcf3aa7f1d28234ef371a855ddb64dc9915f6c5b21da89d837032f8d955ab353ed9d97af345bd3db21d3bfea6c8d0ed96c409f15bd0ec894aa21622002b59ae7bc15dff70ae61f2e2780cd710723f0f16c0ed5826d35da6d9b2c25e2d45cc757da3dcac6f9354d9fed50cb58d1681c01d81e6481c7f4054efd3470e3e72b0a003041a99f82428343a8e6282cff2abfd059005c8cba3c3637a17a1b5e0fcdaacef9b50d0fdd5b3e01e835b3622bfa4edb3aa9e5f0164ec5d94fb089c24bfb16a73e6f22a7c992d7ffb32f43fdc1f82be3fc0f81f734aac9f38f9c01f009bcc9154666a6084a2732f17f6ffea7300304bedaaeb0098eb1bc850a987bf93916cf469ba2f2724cf0b6340289a9e26172d1b1c910852f7f531e35bd705c12972df0c64c0dbbf76c2ab17007f6a40e018abf0064dd3bf170aebcf0b5064e247b7384ad2710b23ca21d721f14b524965b5cdc6518183b7fc3b8c290c7b34f43d1c7d0cb0a72da44aba0b20b329c5cf175734e7965dcc2c555a2bf00648648ca2ee5587024ec10c9f70b207b7778916f38789d621ecaae078c7c5d4bd5f0e3fa5ca20c48d4e5912431a1ff3105293e4509b3aa3b0341584bf3ac2312d69068b13d9d5ac6d8d8df36c07128717f15d7cbeb52171a72093ab65f66c13fe5a5550586c2720e6314c35c123c667fbe868515618c4af42af42b9ab0bc5581eee4b7a7b8d054ae7b8c3f812036c02730cff3dd3e9b6b369d23e4b8aa8ad440c7b27f888904d28928f4e864a59e6a7c399ee8db9691caed9bb09b9976dbdada6f6b4bbad7d36801a1aa1f5685cf0ca495415d1533fef36d1d0dc58bd6596c021cee0a8309d028c958b2874897e707c61260191cfa1f81621a76de0c2f2588e90e6219e24c28d73c070d7c0711398de0e41460b5472dbec4c0c401ddd8cf9fda9ce9989424d3604977feb1a8ed9baa84cc9361eb2e5d937847ba680e5a0c1f8a6d2b1c1291c11b8478ce085171314c0063a1e93a19599f32e54d5a972ad5c025a5e009bef6e562575c2b98ccf8e2ba6a260dd254204692cb0ecf918d88586407f9d9e484e30c5b44b927f408f5febe3dc79256e3a1f7ab9f48517c45cff6100fe7ca923fd8553299a5cfcbbe5b828a87600bb03170a4f8de98bafc1d0f6f81ea083b9ef2886fb7114441b8e5b0a9cd4a4a5e028bcdec8242a051a3ae183254174d014a862bf3458f000f80028c9c9d7e9bb6d07c05eb81f1e9ede2069bb61cc5366e72a03afae5cd7fc66e3a26d09580efa2602b7cfb393c1932fefcb5de3a42f72238ec38dbcae5d572f0a3eb4aeeb48fc18ff3f0f1387861b36e7561b03c62380be743b2ff18adeb11ff03af0c075226ba1c8185e04a81513b935e043041a096bc6c181f61c9c42ef60751a24b4137ae375f323794577111fa231539562e806b09f82ef63c9f77b09fe3c33f87897921281eee488d476e860163e7b5190184de204384710cbe846817884cc6f8678f25bf867d91ff6fb4a2d0762b252cc2602cc50146f3e2a36be35c071e4975ef40608d51007ed353d2156fec7992163bac3ef205bb6c228b0ddedfe2d3e4d86994e730ee79219739d2a2f4c83a9d50dd55210b3f5970e864baf6c25287a5063256642f3a193205d8818e0b6fe505f1bb04ec3b6d47fee4fcdad6289974cbc272cf9444477ceb2c38e7e3ab0ed70d575cfba29a4489c419ca913af90c066c79764ed25128e16334612314b92e2e3927f505b440ac68ba5d1c418edd42b487922125c4f761b335ce369a8820d3d0114225ee2136db7415a7edcf7fc3a310b0d3dafb23dcf5167c99a4d72228ae3ddf4f01f6944d3ab0bf5411b03c9e62e528f1296526c76a6cde103f93c1c2bea322872e0d6f2f7e8d62f446bbd03b9d7f1ddf96e87dff19319d86bdb22b84e99f66bd7dd91a5512440cda180cfa0978e2684043f34e85e5a7b307b1d35f5b25b2c9f4e8416f7970b6de5430df927ea323bd17d84d50e13cbffe69b6fd65e2df61e736e03a820311c278e9271cc346e1208ec33bf562feb72b248137ad3c89c6a1b72fd9bfc0deca637020bb48f773bd8b639ac5e8b273064a75561ba48f1d0fa7bc893ebcad44f163dc48f1d0f982e344fedeb8d4b8246c1953e39935847dc9f882b1d518580de3aa8f00a41c1d88d4bf2b0006b5afb12acc755e204f72de4914c0ed3613070b10a81585478ff9113c4d49d69138a0b0cec090f9d562fbcfec67257aa1b01192df79dea7d45e99d91460fe73cecc34ce61b611ba7558b60350d6d53c5ff1f2762e1f6e2d0e7e521f481916f026af0139335ac15448ae1e6df12dfb69d51223821a56b4719c29eae797ecab31740e00f5e702a63e18d3b01899c8407f880502622830a2a1c5aa597d0128d7d67750c7e30390a5dccb3c8cbfb07336ca7f7af778aa135dbf8f068d1f5dbb8a10c4b0f0af57ebfaba035e3dbfae5aec30fff6e3f1cc8722da010266d1a4a4adeedfa2dbe76e2379a4ca8fdc6967f936b9d3a500156c5b0e40ce7f5e2de295bb0571695c9f7acec6b7e897b71c5fe216880bb94ff44afee63fef6b387ee4a59e472c08642fec73ec86b85c49174f65753eec55794d19892dad4b54403e8473f9569066b78346054805426c8f6db935b31451eff31032875dff89f52c692401bab03773cef79c9aa902f42096f05d176828e6caec4be9f2aee304753c71532a2f24df0bd98dfef876e4056dec999aba63d94ed33d7f735a06ecf9f91f5d87a797d76806041ba3b5b76063f12f330c67d655af91a5ea27106abdd9c545f59228c38abdbe00dd206d2b0f82ee61a2d227a06262242a616626403b9995dce0d36b72c47e50d820a1caf0e9d776f546439beb8e2961a5edb9e71c90b19dc6cd89f6cc72af4693b74090ec45fe0af924dfa9b594c542382702eaff71f0d01b64a7b37cec60be3c564eb044f1e46e784816913edd03d95d6593b8bcee57b1ef3c6c3e342e03a479d5667d6cc6d2dfc21a270735ce6ef8649b2dd505fc115fe5542ce435b9ca01a12ddcb7d57e3efcd3658df4fef0c33e8edfafb22fe092fd41c34d96fe0951878bbb0c7afc8445f04528e87894c0d4e09eb907cd905b42af46f10a992e329583919f2585048c45b00c70345ce3f7c95a8c222b01d2b5dec600775c13580cf4a0cae934f864a36bf82337239d82a8ace1401b33d4dec7396dd5f99f8d691460631a11740c54690f49ae66a923eafad970b2f051547cc69420e3f66f1b6252def144a97e5fb3e7cd3e4d8730b0b13bfda6bf4dda9e406b5c7b2a46e059ca8a45b5e190130da4f2d03e9fb9bf83f47cd354aff8dd718a56044b402cfcb4800e7fefb0cb990d6d876e341b4725a2f817d313b9e63074ce3b36310db4afe20cb737cb87ef69f48cfe93d86c3536436c417319f5ec2cb2e7b4d9777bb81b1c4c1b09376e6b538c38d84cdc048138b2d5da5edad4a5343a2837d8962ec9acd1cf35279c73e4be5fd2d2b7d21d0036bdbd80229893d42683848e7162192081ef0d1b7b884218ccd414d6e665b65d8eb44c3ec7e0ecb4dbe3db69289879766142b251a4866f3f03aac8e425160760b40356a7f7ade28d6b8af95e521ea7361e40fb4300dd9c56b618b4d0b7b363e06e456111f474db6bc9e90d9dad0333dfa0043b7ef9fe73dfab05adc359be2dfc7e80bc2cae702757b653393e98ad1f7325324872cdab7551c3de5b61cd099183b8d842b96015cd6aa2a59e1f153501953df215976e66db0a771cbabc362f65dd5e6576d2097fe28ada69768ddeaf4d03f8b32fdcffaf70449c61b4dc2351cf925949e94fe4669cf224106a908a2c1870cf7ce0d98ec8a03b12a0f0fb17aaa055c0d2a03e2d9c27a1b9c44be422ad2639e47c777781c3c6608bfc01c38b44d7a72570dfd059fa67f1caecc4b7c4283903f48cbd9dc6539bf92fd86821696db151ff06039742433f770ca4061b836c170209e235fc2b993d081270073f0e5e9edb92f238b49d8d0fc76888de9396c83ab003b65265b2cf6e10642e9c7985c04a576d32acd8503a09b7b479ccd7312fb7bd79d7952c9fc8919b540abc38784713c897002d11e370abd6b63094ff82b0fff0af1b2b11aaa4cf4bca669d6b5d52bc3255ef2e133e2da4a598b78807275076462728efcc87eb0ff5887f5c46bc7e68fc87ed2ff331afa85db616c7b917637ebc56d958692fa522360f9197c8d495733e13b784b3fd38aee0bfd0dc273c156f4037dd99d7f9a58b919636c2efcc9ed26c7d50bdea9187afe32373b0eb4b06fce2b3618be917c865bb7df3c51183d8a971c6ca670c689af8d033481040b798276e23ce3b3b23c627fdc6df76bded907c4dcfb7725894bf6d539ba70e7891278f10caa01da44cefa5dc9b8d6fb5095d25c9644ff52a46af743a043f97b501ff46bb9a2f94415ebf790d527d6de1ed48907bb0d07f9cca72460d165d591e572f8d220992433dff8fd751ef7b014cb2f6916e46102d2f9686109924c7f43a7e81326c46815e1801b20d4fab468ae1b5454ce4c6e3459e3caf32b658c1adf4f3dbe18e3ed05fedaea7016c2c118894b2b8f73784a992b87efd1fd4dbadb0bd0dd63aa120394ef32ac833260d6a9d125691e2cdb5beaf9347dc305"}, {0x108, 0x117, 0x4, "d3dbd8a01cc3c54d84fd44d0aa9463cacb1704fb4ca89dbd8945f4dac4968eeb7a3e5d518d60b71244327fb57edf830d40c68d75b77d1b212c3a95b13da50ba373f041c5b2ff95f9d6a99cd78cea481aa80779eb4d170b9503523ed32511a4621edcb7de2a8a4127c50f112c34145b1adb6e6849e2685a16888e15e044a9a5de6ccab26078a687d2d9c677ce60b10244256e0cb0f474feabe0ea804eda6a5149875efeef49674b7c1317a0ac8d8af9ee369be521b69b1c9781dcc117d02c6cc6c1fd556de4a96c114fa263c0794889e6bf2436e4a8dc7acb1010b45b2a99642bfbb3d6d4e48da3b69190e1fca1880905e4c8d10cf6ddbdd956"}], 0x12c0}}, {{&(0x7f00000019c0)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000001a40)="1c8c55753811008062ab84f906f6d325f82531c916747cbb7002f9505e12561eaca2b63a168e4b0da5d20736b912e840985ec5d5b8f4d5aa825d5daabf61e52ed0e1884f280483d7057b16811c09bbc4e437d0078a590ba6b82061d83983004605f748e71b90c86a417e4bd2e566666b2dbfc22bd18893a217513fcd8e", 0x7d}], 0x1, &(0x7f0000001b00)=[{0x10, 0x10c, 0x401, "f516a936"}, {0x68, 0x10b, 0x0, "031f693d070dbd2cd4a7307f53aa71ae519b2cc9f633e9ab45f764379417472df2324c86dcb28cc2f276a0b04a1e8b3973bf8da57acdb60f42a235145b929ae1ad199e1c335ac6d32be0db401e710ffb66fdf51c38dd77da23fa3879"}, {0xf0, 0x29, 0x3, "f191268772709bfb1bf0d2c33b7e6c0fe2a8a734c475cf196350b182d3f166e9e8b93dba154104ef33ba9b24d84de4546c677dc10af3f1f620a867f66865951aa16f0796fb22120186de4857de3d24eb8d82aed269189eb089ff4ff15abd257f8a32bcce4b5a04a00a83eb79dc35cfa8e3c2808ddbf5555ff92cf8892f36f3c7224004f4aa870773262491055b036149e4e0028d1718a6c2afc4170d45bbc8a9cbaa37a1553a65d90986040b99558b1e19532f27e504a5644fd3cd2d520af3817410715509916ca9736109609b9569440da24b818b80f5f4c46aa63e72ee1d2155"}], 0x168}}, {{&(0x7f0000001c80)=@isdn={0x22, 0x9, 0xc0, 0x5, 0xff}, 0x80, &(0x7f0000001f40)=[{&(0x7f0000001d00)="fce565a029f3ee3b9ae4077f1c5327bacc859a8dfe881302498940c767e1b1d018a963167bf3f8499885ee18a2490fd5b8b8994363b3c94e6f716c9d535eb54ffbad3272f823f80ea3079479ff268d2fc7755b73d87ac623dd27f0949ff036fbcfc3ba4178e3f7e6e36a98015c0df855e82de31ea4bbfcd342c71574a203d34a8c33537c4b9afd961c2603fb320063b19b17778c25e816bce87f328ad083ce50674132322b6c302b919befab3ec64634160180ade09cb2c1fb61e01dfa6a5e3e8e999b9015", 0xc5}, {&(0x7f0000001e00)="b7ae6fe7e39aa6b293b9752140363c42de9d3383fab22f970b675e291a5f24b2eaa8251699e16f9b541b24ce814d424be009c4e06998fe70592d5bcfd32d1ae495b4d48d3714f4af8ef319", 0x4b}, {&(0x7f0000001e80)="eb53722ffb4eac0f867441a9382750f0feb3b293a8cc01dba13f7593761925bd952d5ef41789f94f62aef2ec1260168f94a58e8de37c98ba5cab6b338ba94d1b1d30879829fa6a1e0df214b9564d04fe02389479230b8472b4717a3cd39ce91f17bc5bb283fb510d8fcc464f17cbd7", 0x6f}, {&(0x7f0000001f00)="1447b6492e3e28ac987087c0e3c85c088a", 0x11}], 0x4}}, {{&(0x7f0000001f80)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e21, 0x9, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x20000000}}, 0x80, &(0x7f00000021c0)=[{&(0x7f0000002000)="8db8a0f13c800adf9c6afe1cff01eaa1e6e33a735e427f5395ee16410d0e6814db23d6e987809861452be7c9e5105aa78cb88a9b6db042091ded3bca906bd4dab0efb4571cc4f079b9ee988546e2cd676ea497c5e44b74230354ffe93a192460044247ba82748e60bcc4f4e4ded86eafb570220aabee45c99b728a34a8886c37a719132d92b4cba20ec6af31d201ac68006b88fc03946ad2caa4f5ceaa16a6d51b7f5891d1d3b49c3c56b7", 0xab}, {&(0x7f00000020c0)="464d92d9da78ae4654d518014bc2d5408aed3642cd1bdd", 0x17}, {&(0x7f0000002100)="e169af424acb254461e34884e0927b7fa130e68281e40aa8e48d2359cae37fe3dbd6ff0f1e871c4b31c8be4273a40a92c1505c39ce9020a99e13aa7148cda4a3acbf2104dc30a885a4e2a0ced55b25c6dc6fadc53274a4ed75306f6dc7da8d1a502c0b3c45084068778dbfee6013a58177011466fb70e0de76dd1fcbcd9fdbae3a487ed6ba3ca99b21e506b6d7c9a5", 0x8f}], 0x3, &(0x7f0000002200)=[{0x6c, 0x10b, 0xffffc18e, "4e0cae5821fcbe07b7d50130a3b5c59cffa2921862d321de4d7b8968d409a5ee4d5c3359be214da6436d2f52613618e459a7b8f6b36b456670c4b658d36897ecaf39aaa3374dbbcacb0e4baa211f24888fc9e610dcc455d4061a84b0d5"}, {0x74, 0x1, 0x5, "8f75b86091f6780c250fc7a45ad3c575a70fd5359740a90a1346bf7366fd7dc40490f957e473309a000b5d973919f23b5923dd7799c0a90995fae4d55cda15925d108ee644e4b7c4bb691ad487d882b5157029efe5a132073ded84f47c7ba2e21521c8e0f5"}, {0x6c, 0x1, 0x1a, "44a4f020790fd20089df0fe8b4d8f9b9246babf88d54b4edd48cae2233e73753c1d74237e1a941f72a97eafc5005c31b00209072e1c7f7c5738f19bdc135d8e2dda05d81c904faf083c888a2730a5fd968e8e839aadd26922918ed9e2e99d2"}, {0xfc, 0x103, 0x10001, "9bc41adaeafd36a901cdf66becec9874c3c79852fd118590c03881dbe87c74a8bf7f8b7ac5f610c573f59f32b85e005c67d6d9e97fa2a24a155d9886d2d44199a5073cc5e1300cd9c9011273ae091569890cd299445c21ca2b99106df1b820ecaf7f678514349b8bbeed96c10ae0bdb916e6c84bd52b2b6b399374992d6bab65a0ad1de3995ef509816020d438237005d986238770397b93c3746a992b7768d5a175b5dda21d8618952b0cd0225dc2ae9f095d760c6495b3799d3000740fd868decab98b1af390ac9d5ca785b1a5f0c95ea03d7af48b6ee76bfffc1823d0b0d421fd2aad65a1cb0170264a7cfb"}, {0x48, 0x0, 0x4, "f934b5881559176f1000d22948c9bab74211715498d0076af277455178fce0871c2d971d63a453b9f89bf196c0859f0ad312b53375fe1eda8a0e8d0a"}, {0xa8, 0x107, 0x3, "8d8015915a1b88247f2cedd1f4ac4b767de0798d374d114ca236a6e665ad3199ff23e8b3b8a1d7c79c6553a8cbec4abd98fdba9f31c873d43b8b2eb94b6155336a8ebfc0275b584c57c08d8bbc61b29f99a9f40f05386523c4f36e938c492b6b341af896d603574b271769916006f40f6ba5890fa1ee94b10e017f951fd83f34a1ca07321e89b49bbb879a4bd9973162eb6a8ee460416180cefc"}, {0x100c, 0x10f, 0x8, "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"}, {0x80, 0x10c, 0x8, "f811c1574c6c66782c45837d0179141f52ebd530040915dee7da64d0584aeb29806fdd7e8717924926754cae0ac291aba346f4dbac222f3cb2ce2b98d31d23189bec9df988dc9de2ff836a578c730cc9442e4993cdbbacdbe3895dbb5f1d28e9019fb169661dfa74fe9d80aa4afb57a51a03"}], 0x13c4}}, {{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000003600)="fe4224e64491d8ac617f51b8fe1113", 0xf}], 0x1, &(0x7f0000003680)=[{0x100c, 0x102, 0x2, "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"}], 0x100c}}], 0x5, 0x2c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) kernel console output (not intermixed with test programs): USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1229.422293][ T5919] usb 9-1: Product: syz [ 1229.424981][ T5919] usb 9-1: Manufacturer: syz [ 1229.429160][ T5919] usb 9-1: SerialNumber: syz [ 1229.434323][ T5919] usb 9-1: config 0 descriptor?? [ 1229.444608][ T5919] usb 9-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1229.449100][ T5919] usb 9-1: selecting invalid altsetting 1 [ 1229.451823][ T5919] usb 9-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1229.475543][ T5919] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1229.483111][ T5919] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1229.495022][ T5919] usb 9-1: media controller created [ 1229.528630][ T5919] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1229.597101][ T50] usb 40-1: SetAddress Request (10) to port 0 [ 1229.599308][ T50] usb 40-1: new SuperSpeed USB device number 10 using vhci_hcd [ 1229.920964][T31482] lo speed is unknown, defaulting to 1000 [ 1229.924706][T31482] wg2 speed is unknown, defaulting to 1000 [ 1230.186256][ C1] sr 2:0:0:0: [sr0] tag#1 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1230.189700][ C1] sr 2:0:0:0: [sr0] tag#1 CDB: Test Unit Ready [ 1230.707417][ T5919] usb 9-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1231.231714][T31473] rdma_rxe: rxe_newlink: failed to add wg2 [ 1231.619369][ T5919] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1231.750736][ T5919] usb 9-1: USB disconnect, device number 2 [ 1231.946360][T31492] comedi comedi3: pcmmio: I/O base address not correctly aligned [ 1231.951582][T31492] ip6_tunnel: non-ECT from fc04:0000:0000:0000:0000:0000:0000:0000 with DS=0xf [ 1232.183335][T31499] veth0: entered promiscuous mode [ 1232.191330][T31494] veth0: left promiscuous mode [ 1233.618977][T31523] overlayfs: missing 'lowerdir' [ 1233.626127][T31522] siw: device registration error -23 [ 1233.766937][T31526] lo speed is unknown, defaulting to 1000 [ 1233.775423][T31526] wg2 speed is unknown, defaulting to 1000 [ 1233.919919][ C1] sr 2:0:0:0: [sr0] tag#3 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1233.923237][ C1] sr 2:0:0:0: [sr0] tag#3 CDB: Test Unit Ready [ 1234.963909][T31474] vhci_hcd: connection reset by peer [ 1234.987374][T17526] vhci_hcd vhci_hcd.1: stop threads [ 1234.991953][T17526] vhci_hcd vhci_hcd.1: release socket [ 1235.001095][ T50] usb 40-1: device descriptor read/8, error -110 [ 1235.006718][T17526] vhci_hcd vhci_hcd.1: disconnect device [ 1235.138207][T31543] lo speed is unknown, defaulting to 1000 [ 1235.200888][T31543] wg2 speed is unknown, defaulting to 1000 [ 1235.266808][ C2] sr 2:0:0:0: [sr0] tag#7 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1235.271112][ C2] sr 2:0:0:0: [sr0] tag#7 CDB: Test Unit Ready [ 1235.327121][ T5919] usb 8-1: new full-speed USB device number 127 using dummy_hcd [ 1235.388649][ T50] usb usb40-port1: attempt power cycle [ 1235.631435][ T5919] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1235.637392][ T5919] usb 8-1: not running at top speed; connect to a high speed hub [ 1235.657520][ T5919] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1235.668839][ T5919] usb 8-1: config 14 has an invalid interface number: 57 but max is 1 [ 1235.687118][ T5919] usb 8-1: config 14 has an invalid interface number: 228 but max is 1 [ 1235.717788][ T5919] usb 8-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 1235.742879][ T5919] usb 8-1: config 14 has no interface number 0 [ 1235.746744][ T5919] usb 8-1: config 14 has no interface number 1 [ 1235.769340][ T5919] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1235.775115][ T5919] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1235.790927][ T5919] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1235.799917][ T5919] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 1235.804410][ T5919] usb 8-1: config 14 interface 57 has no altsetting 0 [ 1235.818625][ T5919] usb 8-1: config 14 interface 228 has no altsetting 0 [ 1235.936194][ T5919] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1235.945383][ T5919] usb 8-1: Product: syz [ 1235.947247][ T5919] usb 8-1: Manufacturer: syz [ 1235.949063][ T5919] usb 8-1: SerialNumber: syz [ 1235.955765][ T50] usb usb40-port1: unable to enumerate USB device [ 1236.787965][T31552] comedi comedi3: pcmmio: I/O base address not correctly aligned [ 1236.937620][T31550] CIFS: iocharset name too long [ 1237.020272][T31555] veth0: entered promiscuous mode [ 1237.023597][T31555] veth0: left promiscuous mode [ 1237.142431][T31557] siw: device registration error -23 [ 1237.184802][ T5919] legousbtower 8-1:14.57: interrupt endpoints not found [ 1237.203456][ T5919] legousbtower 8-1:14.228: get version request failed: -71 [ 1237.217259][ T5919] legousbtower 8-1:14.228: probe with driver legousbtower failed with error -71 [ 1237.239180][ T5919] usb 8-1: USB disconnect, device number 127 [ 1237.346299][T31558] ib_srp: QP creation failed for dev syz0: -2 [ 1237.353653][T31565] rdma_rxe: rxe_newlink: failed to add wg2 [ 1237.519739][T31572] trusted_key: encrypted_key: insufficient parameters specified [ 1237.532308][T31573] overlayfs: missing 'lowerdir' [ 1237.619926][T31574] syz0: rxe_newlink: already configured on wg2 [ 1237.815374][T31574] trusted_key: encrypted_key: insufficient parameters specified [ 1237.817657][T31576] lo speed is unknown, defaulting to 1000 [ 1237.823570][T31576] wg2 speed is unknown, defaulting to 1000 [ 1238.194940][ C0] sr 2:0:0:0: [sr0] tag#15 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1238.199450][ C0] sr 2:0:0:0: [sr0] tag#15 CDB: Test Unit Ready [ 1238.262864][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.848316][T31590] ib_srp: QP creation failed for dev syz0: -2 [ 1239.308948][T31588] siw: device registration error -23 [ 1239.594988][T31602] rdma_rxe: rxe_newlink: failed to add wg2 [ 1239.700631][T31603] trusted_key: encrypted_key: insufficient parameters specified [ 1239.736641][T31599] veth0: entered promiscuous mode [ 1239.739865][T31599] veth0: left promiscuous mode [ 1239.931932][T31605] comedi comedi3: pcmmio: I/O base address not correctly aligned [ 1239.946110][T31605] ip6_tunnel: non-ECT from fc04:0000:0000:0000:0000:0000:0000:0000 with DS=0xf [ 1241.489167][T31617] CIFS: iocharset name too long [ 1241.649311][T31624] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6554'. [ 1241.777297][T24175] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1241.824401][T31628] overlayfs: missing 'lowerdir' [ 1241.965852][T24175] usb 9-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 1241.969889][T24175] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1241.973725][T24175] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1242.398783][T31634] block nbd1: NBD_DISCONNECT [ 1242.401847][T31634] block nbd1: Send disconnect failed -32 [ 1242.456896][ T42] kauditd_printk_skb: 74 callbacks suppressed [ 1242.456910][ T42] audit: type=1326 audit(1242.348:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31633 comm="syz.1.6557" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x0 [ 1242.478864][T24175] usb 9-1: USB disconnect, device number 3 [ 1243.090719][T31643] block nbd2: shutting down sockets [ 1243.359998][T31650] FAULT_INJECTION: forcing a failure. [ 1243.359998][T31650] name failslab, interval 1, probability 0, space 0, times 0 [ 1243.364051][T31650] CPU: 1 UID: 0 PID: 31650 Comm: syz.2.6562 Tainted: G L syzkaller #0 PREEMPT(full) [ 1243.364070][T31650] Tainted: [L]=SOFTLOCKUP [ 1243.364074][T31650] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1243.364081][T31650] Call Trace: [ 1243.364086][T31650] [ 1243.364091][T31650] dump_stack_lvl+0x100/0x190 [ 1243.364111][T31650] should_fail_ex.cold+0x5/0xa [ 1243.364126][T31650] should_failslab+0xc2/0x120 [ 1243.364142][T31650] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1243.364157][T31650] ? get_random_u64+0x434/0x7c0 [ 1243.364202][T31650] ? alloc_task_exec_state+0x23/0x300 [ 1243.364221][T31650] alloc_task_exec_state+0x23/0x300 [ 1243.364237][T31650] task_exec_state_copy+0x70/0x150 [ 1243.364252][T31650] copy_process+0xf0d/0x8030 [ 1243.364268][T31650] ? __lock_acquire+0x49f/0x1a40 [ 1243.364282][T31650] ? __pfx_copy_process+0x10/0x10 [ 1243.364297][T31650] ? get_pid_task+0xfc/0x250 [ 1243.364315][T31650] ? get_pid_task+0xfc/0x250 [ 1243.364332][T31650] kernel_clone+0x176/0x9d0 [ 1243.364344][T31650] ? proc_fail_nth_write+0x9f/0x220 [ 1243.364362][T31650] ? __pfx_kernel_clone+0x10/0x10 [ 1243.364378][T31650] ? find_held_lock+0x2b/0x80 [ 1243.364391][T31650] ? ksys_write+0x190/0x250 [ 1243.364402][T31650] ? ksys_write+0x190/0x250 [ 1243.364414][T31650] __do_compat_sys_ia32_clone+0xd4/0x120 [ 1243.364429][T31650] ? __pfx___do_compat_sys_ia32_clone+0x10/0x10 [ 1243.364447][T31650] ? fput+0x79/0x100 [ 1243.364460][T31650] ? arch_syscall_is_vdso_sigreturn+0x19b/0x200 [ 1243.364478][T31650] ? syscall_user_dispatch+0x76/0x130 [ 1243.364494][T31650] __do_fast_syscall_32+0xe7/0x970 [ 1243.364514][T31650] ? lockdep_hardirqs_on+0x78/0x100 [ 1243.364534][T31650] do_fast_syscall_32+0x32/0x70 [ 1243.364554][T31650] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1243.364578][T31650] RIP: 0023:0xf7f25fec [ 1243.364598][T31650] Code: Unable to access opcode bytes at 0xf7f25fc2. [ 1243.364607][T31650] RSP: 002b:00000000f53e64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 1243.364623][T31650] RAX: ffffffffffffffda RBX: 0000000000000011 RCX: 0000000000000000 [ 1243.364634][T31650] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1243.364644][T31650] RBP: 00000000f73e4f80 R08: 0000000000000000 R09: 0000000000000000 [ 1243.364655][T31650] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1243.364666][T31650] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1243.364687][T31650] [ 1243.598166][T31663] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1243.769277][T31669] overlayfs: missing 'lowerdir' [ 1244.554504][T31672] overlayfs: missing 'lowerdir' [ 1244.720192][T31678] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6573'. [ 1245.075741][T31683] siw: device registration error -23 [ 1245.232921][T31685] ib_srp: QP creation failed for dev syz0: -2 [ 1245.944224][T27570] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 1246.103546][T31715] overlayfs: missing 'lowerdir' [ 1246.198681][T27570] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 1247.083567][T31726] syz0: rxe_newlink: already configured on wg2 [ 1247.227231][T31729] trusted_key: encrypted_key: insufficient parameters specified [ 1248.424300][T31736] Invalid ELF header magic: != ELF [ 1249.004181][T31755] NILFS (loop1): device size too small [ 1249.073315][T31756] rdma_rxe: rxe_newlink: failed to add wg2 [ 1249.294184][T31761] trusted_key: encrypted_key: insufficient parameters specified [ 1250.488663][T31774] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6598'. [ 1250.579115][T31775] pim6reg: entered allmulticast mode [ 1250.591247][T31775] pim6reg: left allmulticast mode [ 1251.579800][T31788] lo speed is unknown, defaulting to 1000 [ 1251.584144][T31788] wg2 speed is unknown, defaulting to 1000 [ 1251.811095][ C1] sr 2:0:0:0: [sr0] tag#19 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1251.814385][ C1] sr 2:0:0:0: [sr0] tag#19 CDB: Test Unit Ready [ 1252.159363][T31793] siw: device registration error -23 [ 1252.438652][T31800] ib_srp: QP creation failed for dev syz0: -2 [ 1252.638230][T31805] openvswitch: netlink: Flow actions attr not present in new flow. [ 1253.037233][T31817] syz0: rxe_newlink: already configured on wg2 [ 1253.279281][T31820] trusted_key: encrypted_key: insufficient parameters specified [ 1253.510802][T31827] syzkaller1: entered promiscuous mode [ 1253.512885][T31827] syzkaller1: entered allmulticast mode [ 1253.999008][T31835] tmpfs: Unknown parameter 'h9孱H{dxi80Zl |w?VHC\W4tC|A [ 1253.999008][T31835] 5' [ 1254.045834][T10793] Bluetooth: hci4: Frame reassembly failed (-84) [ 1254.054602][T10793] Bluetooth: hci4: Frame reassembly failed (-84) [ 1255.093195][T31850] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6620'. [ 1255.496741][T31854] comedi comedi3: pcmmio: I/O base address not correctly aligned [ 1255.582302][T31856] lo speed is unknown, defaulting to 1000 [ 1255.584967][T31856] wg2 speed is unknown, defaulting to 1000 [ 1255.744721][ C2] sr 2:0:0:0: [sr0] tag#12 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1255.748029][ C2] sr 2:0:0:0: [sr0] tag#12 CDB: Test Unit Ready [ 1256.102659][T21220] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1256.453407][T31863] rdma_rxe: rxe_newlink: failed to add wg2 [ 1256.532854][T31864] trusted_key: encrypted_key: insufficient parameters specified [ 1258.482264][T31891] siw: device registration error -23 [ 1258.572724][T31896] ib_srp: QP creation failed for dev syz0: -2 [ 1258.582440][T31900] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6633'. [ 1258.746991][ C1] sl0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 20480 ms [ 1258.749796][ C1] sl0: transmit timed out, driver error? [ 1258.810356][T31894] siw: device registration error -23 [ 1258.872651][T31902] ib_srp: QP creation failed for dev syz0: -2 [ 1259.324107][T31910] comedi comedi3: pcmmio: I/O base address not correctly aligned [ 1259.777404][T31921] binder: 31920:31921 unknown command 4294967295 [ 1259.782696][T31921] binder: 31920:31921 ioctl c0306201 80004a40 returned -22 [ 1260.235961][T31928] syzkaller0: entered promiscuous mode [ 1260.237906][T31928] syzkaller0: entered allmulticast mode [ 1262.534513][T31957] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6646'. [ 1263.740783][T31967] comedi comedi3: pcmmio: I/O base address not correctly aligned [ 1263.929835][T31975] rdma_rxe: rxe_newlink: failed to add wg2 [ 1264.063133][T31979] trusted_key: encrypted_key: insufficient parameters specified [ 1264.158270][T26512] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1264.212471][T31977] siw: device registration error -23 [ 1264.282759][T31984] ib_srp: QP creation failed for dev syz0: -2 [ 1264.657176][T31991] rdma_rxe: rxe_newlink: failed to add wg2 [ 1264.658258][T31992] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 1264.661557][T31992] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1264.690088][T31992] vhci_hcd vhci_hcd.0: Device attached [ 1264.878150][T31991] trusted_key: encrypted_key: insufficient parameters specified [ 1264.889026][T31995] syz0: rxe_newlink: already configured on wg2 [ 1264.997218][ T5819] usb 42-1: SetAddress Request (10) to port 0 [ 1264.999491][ T5819] usb 42-1: new SuperSpeed USB device number 10 using vhci_hcd [ 1265.497149][T32004] veth0: entered promiscuous mode [ 1265.508765][T32004] veth0: left promiscuous mode [ 1265.917089][T31059] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1266.067181][T31059] usb 9-1: Using ep0 maxpacket: 8 [ 1266.072650][T31059] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1266.080166][T31059] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 1266.084416][T31059] usb 9-1: config 179 has no interface number 0 [ 1266.088767][T31059] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1266.096194][T31059] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1266.106405][T31059] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1266.112375][T31059] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1266.118136][T31059] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1266.128561][T31059] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1266.140628][T31993] vhci_hcd: connection reset by peer [ 1266.144083][T32010] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1266.146076][ T7841] vhci_hcd vhci_hcd.2: stop threads [ 1266.149182][ T7841] vhci_hcd vhci_hcd.2: release socket [ 1266.153916][ T7841] vhci_hcd vhci_hcd.2: disconnect device [ 1266.194267][T32015] comedi comedi3: pcmmio: I/O base address not correctly aligned [ 1266.625306][T32010] syzkaller1: entered promiscuous mode [ 1266.628676][T32010] syzkaller1: entered allmulticast mode [ 1266.660745][T32010] lo speed is unknown, defaulting to 1000 [ 1266.663832][T32010] wg2 speed is unknown, defaulting to 1000 [ 1267.232297][T32030] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6664'. [ 1267.266660][ T42] audit: type=1326 audit(1267.158:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32025 comm="syz.1.6665" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf706efec code=0x0 [ 1267.290484][T26512] Bluetooth: hci1: unexpected event for opcode 0x0809 [ 1267.311539][T32031] input: syz1 as /devices/virtual/input/input116 [ 1267.335670][T32031] db_root: cannot open: ./my_ [ 1267.493923][T32044] comedi comedi3: pcmmio: I/O base address not correctly aligned [ 1267.747578][T31059] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 1267.930117][T31059] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1267.936365][T31059] usb 8-1: not running at top speed; connect to a high speed hub [ 1267.939194][T31059] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1267.943311][T31059] usb 8-1: config 14 has an invalid interface number: 57 but max is 1 [ 1267.945968][T31059] usb 8-1: config 14 has an invalid interface number: 228 but max is 1 [ 1267.949184][T31059] usb 8-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 1267.952439][T31059] usb 8-1: config 14 has no interface number 0 [ 1267.954535][T31059] usb 8-1: config 14 has no interface number 1 [ 1267.956560][T31059] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1267.960407][T31059] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1267.964317][T31059] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1267.968273][T31059] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 1267.971781][T31059] usb 8-1: config 14 interface 57 has no altsetting 0 [ 1267.973963][T31059] usb 8-1: config 14 interface 228 has no altsetting 0 [ 1267.980194][T31059] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1267.982959][T31059] usb 8-1: Product: syz [ 1267.984386][T31059] usb 8-1: Manufacturer: syz [ 1267.985971][T31059] usb 8-1: SerialNumber: syz [ 1269.072060][T32063] rdma_rxe: rxe_newlink: failed to add wg2 [ 1269.173048][T32064] trusted_key: encrypted_key: insufficient parameters specified [ 1269.303863][T31059] legousbtower 8-1:14.57: interrupt endpoints not found [ 1269.351169][T31059] legousbtower 8-1:14.228: get version request failed: -71 [ 1269.354216][T31059] legousbtower 8-1:14.228: probe with driver legousbtower failed with error -71 [ 1269.384543][ T5780] usb 9-1: USB disconnect, device number 4 [ 1269.384628][ C3] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1269.390675][ C3] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1269.394169][T31059] usb 8-1: USB disconnect, device number 2 [ 1269.887880][T32072] veth0: entered promiscuous mode [ 1269.891972][T32072] veth0: left promiscuous mode [ 1270.058208][T32080] comedi comedi3: pcmmio: I/O base address not correctly aligned [ 1270.104679][ T5819] usb 42-1: device descriptor read/8, error -110 [ 1270.147109][ T24] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1270.307224][ T24] usb 8-1: Using ep0 maxpacket: 32 [ 1270.309364][ T24] usb 8-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 1270.335728][ T24] usb 8-1: config 2 has an invalid interface number: 88 but max is 0 [ 1270.339922][ T24] usb 8-1: config 2 has no interface number 0 [ 1270.342002][ T24] usb 8-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 1270.357455][ T24] usb 8-1: config 2 interface 88 has no altsetting 0 [ 1270.364763][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 1270.367905][ T24] usb 8-1: Product: syz [ 1270.369740][ T24] usb 8-1: Manufacturer: syz [ 1270.371255][ T24] usb 8-1: SerialNumber: syz [ 1270.379856][T32075] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1270.498073][ T5819] usb usb42-port1: attempt power cycle [ 1270.569671][T26512] Bluetooth: hci0: link tx timeout [ 1270.571918][T26512] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1270.624087][T32100] vcan1: entered promiscuous mode [ 1270.626250][T32100] vcan1: entered allmulticast mode [ 1270.658633][ T24] asix 8-1:2.88: probe with driver asix failed with error -71 [ 1270.690421][ T24] usb 8-1: USB disconnect, device number 3 [ 1270.852493][T32108] veth0: entered promiscuous mode [ 1270.855344][T32108] veth0: left promiscuous mode [ 1271.067809][ T5819] usb usb42-port1: unable to enumerate USB device [ 1271.209541][T32116] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6692'. [ 1271.561027][T32120] comedi comedi3: pcmmio: I/O base address not correctly aligned [ 1271.967260][T26512] Bluetooth: hci0: link tx timeout [ 1271.973431][T26512] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1272.051881][T32129] sysfs: Unknown parameter 'euid<' [ 1273.147284][T32135] veth0: entered promiscuous mode [ 1273.160099][T32135] veth0: left promiscuous mode [ 1273.169418][T26512] Bluetooth: hci0: command 0x0406 tx timeout [ 1273.842609][T32130] infiniband syz1: set active [ 1273.854196][T32130] infiniband syz1: added bond0 [ 1273.911046][T32130] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1273.922113][T32130] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1273.934402][T32130] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1273.974824][T32130] RDS/IB: syz1: added [ 1273.976449][T32130] smc: adding ib device syz1 with port count 1 [ 1273.979689][T32130] smc: ib device syz1 port 1 has no pnetid [ 1274.324544][T32156] trusted_key: encrypted_key: insufficient parameters specified [ 1275.906228][T21220] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1275.930434][T32151] lo speed is unknown, defaulting to 1000 [ 1275.933960][T32151] wg2 speed is unknown, defaulting to 1000 [ 1276.142569][T32147] rdma_rxe: rxe_newlink: failed to add wg2 [ 1276.259651][T32180] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6708'. [ 1276.297426][T24175] usb 7-1: new high-speed USB device number 120 using dummy_hcd [ 1276.327555][T13674] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1276.477101][T24175] usb 7-1: Using ep0 maxpacket: 32 [ 1276.494993][T24175] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1276.498113][T24175] usb 7-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 1276.507709][T13674] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1276.510835][T13674] usb 9-1: too many configurations: 13, using maximum allowed: 8 [ 1276.513722][T24175] usb 7-1: config 1 interface 2 has no altsetting 1 [ 1276.541523][T24175] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1276.547772][T24175] usb 7-1: Product: syz [ 1276.553111][T24175] usb 7-1: Manufacturer: syz [ 1276.556306][T24175] usb 7-1: SerialNumber: syz [ 1277.075583][T13674] usb 9-1: config 0 has no interfaces? [ 1277.115847][T13674] usb 9-1: config 0 has no interfaces? [ 1277.119086][T13674] usb 9-1: config 0 has no interfaces? [ 1277.127525][T13674] usb 9-1: config 0 has no interfaces? [ 1277.130453][T13674] usb 9-1: config 0 has no interfaces? [ 1277.133320][T13674] usb 9-1: config 0 has no interfaces? [ 1277.136366][T13674] usb 9-1: config 0 has no interfaces? [ 1277.142265][T13674] usb 9-1: config 0 has no interfaces? [ 1277.146080][T13674] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1277.149676][T13674] usb 9-1: Product: syz [ 1277.151460][T13674] usb 9-1: Manufacturer: syz [ 1277.153386][T13674] usb 9-1: SerialNumber: syz [ 1277.157752][T13674] usb 9-1: config 0 descriptor?? [ 1277.365568][ T5880] usb 9-1: USB disconnect, device number 5 [ 1277.374915][T24175] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1277.405494][T24175] usb 7-1: USB disconnect, device number 120 [ 1278.040221][T24175] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1278.199131][T24175] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1278.202045][T24175] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 1278.205869][T24175] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1278.209027][T24175] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1278.214318][T24175] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1278.220705][T24175] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1278.224027][T24175] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1278.228180][T24175] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1278.233030][T24175] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1278.235952][T24175] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1278.240075][T24175] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1278.243345][T24175] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1278.246263][T24175] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1278.250636][T24175] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1278.254209][T24175] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1278.258974][T24175] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1278.262830][T24175] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1278.265968][T24175] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1278.269339][T24175] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1278.272910][T24175] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1278.276273][T24175] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1278.279615][T24175] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1278.283192][T24175] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1278.286538][T24175] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1278.290202][T24175] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1278.293991][T24175] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1278.298640][T24175] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1278.301378][T24175] usb 9-1: Product: syz [ 1278.302713][T24175] usb 9-1: Manufacturer: syz [ 1278.304408][T24175] usb 9-1: SerialNumber: syz [ 1278.337703][T24175] usb 9-1: config 0 descriptor?? [ 1278.348150][T24175] yurex 9-1:0.0: USB YUREX device now attached to Yurex #0 [ 1279.317253][ T9395] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 1279.477162][ T9395] usb 6-1: Using ep0 maxpacket: 8 [ 1279.480172][ T9395] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1279.483923][ T9395] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1279.487549][ T9395] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1279.490470][ T9395] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1279.494799][ T9395] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1279.499027][ T9395] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1279.508330][ T9395] hub 6-1:1.0: bad descriptor, ignoring hub [ 1279.511107][ T9395] hub 6-1:1.0: probe with driver hub failed with error -5 [ 1279.513691][ T9395] cdc_wdm 6-1:1.0: skipping garbage [ 1279.515443][ T9395] cdc_wdm 6-1:1.0: skipping garbage [ 1279.527472][ T9395] cdc_wdm 6-1:1.0: cdc-wdm1: USB WDM device [ 1279.529389][ T9395] cdc_wdm 6-1:1.0: Unknown control protocol [ 1279.537106][ T24] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 1279.690113][ T24] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1279.711772][ T24] usb 8-1: not running at top speed; connect to a high speed hub [ 1279.714887][ T24] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1279.721530][ T24] usb 8-1: config 14 has an invalid interface number: 57 but max is 1 [ 1279.726837][ T24] usb 8-1: config 14 has an invalid interface number: 228 but max is 1 [ 1279.732622][ T24] usb 8-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 1279.737974][ T24] usb 8-1: config 14 has no interface number 0 [ 1279.742499][ T24] usb 8-1: config 14 has no interface number 1 [ 1279.746270][ T24] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1279.750143][ T24] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1279.753673][ T24] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1279.757114][ T24] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 1279.759599][T32219] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6718'. [ 1279.760713][ T24] usb 8-1: config 14 interface 57 has no altsetting 0 [ 1279.765377][ T24] usb 8-1: config 14 interface 228 has no altsetting 0 [ 1279.769503][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1279.771830][ T24] usb 8-1: Product: syz [ 1279.773051][ T24] usb 8-1: Manufacturer: syz [ 1279.774420][ T24] usb 8-1: SerialNumber: syz [ 1280.027477][ T9395] usb 6-1: USB disconnect, device number 123 [ 1280.367215][T13645] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 1280.499072][T22908] usb 9-1: USB disconnect, device number 6 [ 1280.518112][T22908] yurex 9-1:0.0: USB YUREX #0 now disconnected [ 1280.527084][T13645] usb 6-1: Using ep0 maxpacket: 8 [ 1280.531963][T13645] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1280.536012][T13645] usb 6-1: config 1 has an invalid descriptor of length 121, skipping remainder of the config [ 1280.540397][T13645] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1280.543332][T13645] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1280.547794][T13645] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1280.555595][T13645] hub 6-1:1.0: bad descriptor, ignoring hub [ 1280.559238][T13645] hub 6-1:1.0: probe with driver hub failed with error -5 [ 1280.562111][T13645] cdc_wdm 6-1:1.0: skipping garbage [ 1280.563862][T13645] cdc_wdm 6-1:1.0: skipping garbage [ 1280.565942][T13645] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1280.616480][T32224] veth0: entered promiscuous mode [ 1280.620482][T32224] veth0: left promiscuous mode [ 1280.805035][T32230] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 1280.807460][T32230] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1280.825239][T32230] vhci_hcd vhci_hcd.0: Device attached [ 1280.855910][T32231] vhci_hcd: connection closed [ 1280.856387][T24395] vhci_hcd vhci_hcd.2: stop threads [ 1280.860984][T24395] vhci_hcd vhci_hcd.2: release socket [ 1280.863053][T24395] vhci_hcd vhci_hcd.2: disconnect device [ 1280.915277][ T24] legousbtower 8-1:14.57: interrupt endpoints not found [ 1280.934804][ T24] legousbtower 8-1:14.228: get version request failed: -71 [ 1280.938327][ T5780] usb 6-1: USB disconnect, device number 124 [ 1280.945908][ T24] legousbtower 8-1:14.228: probe with driver legousbtower failed with error -71 [ 1280.969378][ T24] usb 8-1: USB disconnect, device number 4 [ 1281.009245][T32237] lo speed is unknown, defaulting to 1000 [ 1281.013191][T32237] wg2 speed is unknown, defaulting to 1000 [ 1281.037585][T32238] comedi comedi0: pcmda12: I/O base address not correctly aligned [ 1281.062787][T32238] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 1282.658957][T32256] netlink: 'syz.1.6729': attribute type 1 has an invalid length. [ 1282.661705][T32256] netlink: 84 bytes leftover after parsing attributes in process `syz.1.6729'. [ 1282.665015][T32256] netlink: 'syz.1.6729': attribute type 2 has an invalid length. [ 1282.676346][T32256] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6729'. [ 1282.760861][T32257] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6729'. [ 1283.222032][T32260] veth0: entered promiscuous mode [ 1283.225782][T32260] veth0: left promiscuous mode [ 1283.442157][T32264] random: crng reseeded on system resumption [ 1283.525324][T32269] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6734'. [ 1283.547234][ T73] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 1283.730189][ T73] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1283.738639][ T73] usb 8-1: not running at top speed; connect to a high speed hub [ 1283.746182][ T73] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1283.754327][ T73] usb 8-1: config 14 has an invalid interface number: 57 but max is 1 [ 1283.760128][ T73] usb 8-1: config 14 has an invalid interface number: 228 but max is 1 [ 1283.763188][ T73] usb 8-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 1283.766678][ T73] usb 8-1: config 14 has no interface number 0 [ 1283.769138][ T73] usb 8-1: config 14 has no interface number 1 [ 1283.771358][ T73] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1283.774832][ T73] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1283.780151][ T73] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1283.784974][ T73] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 1283.789378][ T73] usb 8-1: config 14 interface 57 has no altsetting 0 [ 1283.793661][ T73] usb 8-1: config 14 interface 228 has no altsetting 0 [ 1283.799401][ T73] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1283.802341][ T73] usb 8-1: Product: syz [ 1283.803563][T32282] veth0: entered promiscuous mode [ 1283.804025][ T73] usb 8-1: Manufacturer: syz [ 1283.810636][T32282] veth0: left promiscuous mode [ 1283.812721][ T73] usb 8-1: SerialNumber: syz [ 1283.848251][T32285] rdma_rxe: rxe_newlink: failed to add wg2 [ 1283.865342][T32287] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6741'. [ 1283.912749][T32289] trusted_key: encrypted_key: insufficient parameters specified [ 1284.071585][T32287] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1284.372117][T32287] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1284.538749][T32287] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1284.916188][T32287] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1285.102643][T32300] FAULT_INJECTION: forcing a failure. [ 1285.102643][T32300] name failslab, interval 1, probability 0, space 0, times 0 [ 1285.107021][T32300] CPU: 3 UID: 0 PID: 32300 Comm: syz.1.6743 Tainted: G L syzkaller #0 PREEMPT(full) [ 1285.107046][T32300] Tainted: [L]=SOFTLOCKUP [ 1285.107050][T32300] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1285.107057][T32300] Call Trace: [ 1285.107063][T32300] [ 1285.107068][T32300] dump_stack_lvl+0x100/0x190 [ 1285.107089][T32300] should_fail_ex.cold+0x5/0xa [ 1285.107104][T32300] should_failslab+0xc2/0x120 [ 1285.107120][T32300] __kmalloc_cache_noprof+0x91/0x6c0 [ 1285.107133][T32300] ? tcf_block_get_ext+0x94d/0x1950 [ 1285.107150][T32300] tcf_block_get_ext+0x94d/0x1950 [ 1285.107166][T32300] tcf_block_get+0xa8/0x100 [ 1285.107178][T32300] ? __pfx_tcf_block_get+0x10/0x10 [ 1285.107190][T32300] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 1285.107206][T32300] ? __pfx_qdisc_watchdog+0x10/0x10 [ 1285.107219][T32300] ? __hrtimer_setup+0x208/0x330 [ 1285.107236][T32300] cake_init+0x306/0xac0 [ 1285.107254][T32300] ? lockdep_rtnl_is_held+0x26/0x40 [ 1285.107268][T32300] ? __pfx_cake_init+0x10/0x10 [ 1285.107284][T32300] qdisc_create+0x47b/0x1060 [ 1285.107298][T32300] ? do_raw_read_unlock+0x3f/0x70 [ 1285.107313][T32300] tc_modify_qdisc+0xdcf/0x2120 [ 1285.107328][T32300] ? __mutex_lock+0x82c/0x1bd0 [ 1285.107344][T32300] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 1285.107371][T32300] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 1285.107386][T32300] rtnetlink_rcv_msg+0x3c9/0xe90 [ 1285.107406][T32300] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1285.107425][T32300] ? __lock_acquire+0x49f/0x1a40 [ 1285.107438][T32300] netlink_rcv_skb+0x159/0x420 [ 1285.107452][T32300] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1285.107470][T32300] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1285.107488][T32300] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1285.107503][T32300] netlink_unicast+0x585/0x850 [ 1285.107518][T32300] ? __pfx_netlink_unicast+0x10/0x10 [ 1285.107535][T32300] netlink_sendmsg+0x8b0/0xda0 [ 1285.107550][T32300] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1285.107565][T32300] ? apparmor_socket_sendmsg+0x15b/0x270 [ 1285.107583][T32300] ____sys_sendmsg+0xa4d/0xbe0 [ 1285.107595][T32300] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1285.107609][T32300] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1285.107627][T32300] ___sys_sendmsg+0x190/0x1e0 [ 1285.107641][T32300] ? __pfx____sys_sendmsg+0x10/0x10 [ 1285.107660][T32300] ? find_held_lock+0x2b/0x80 [ 1285.107683][T32300] __sys_sendmsg+0x160/0x210 [ 1285.107699][T32300] ? __pfx___sys_sendmsg+0x10/0x10 [ 1285.107718][T32300] ? __pfx_ksys_write+0x10/0x10 [ 1285.107733][T32300] __do_fast_syscall_32+0xe7/0x970 [ 1285.107747][T32300] ? lockdep_hardirqs_on+0x78/0x100 [ 1285.107761][T32300] do_fast_syscall_32+0x32/0x70 [ 1285.107776][T32300] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1285.107789][T32300] RIP: 0023:0xf706efec [ 1285.107805][T32300] Code: Unable to access opcode bytes at 0xf706efc2. [ 1285.107810][T32300] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1285.107821][T32300] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001200 [ 1285.107828][T32300] RDX: 0000000004000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 1285.107834][T32300] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1285.107841][T32300] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1285.107847][T32300] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1285.107860][T32300] [ 1285.544158][ T73] legousbtower 8-1:14.57: interrupt endpoints not found [ 1285.587171][T17526] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1285.590637][T17526] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1285.592613][ T73] legousbtower 8-1:14.228: get version request failed: -71 [ 1285.593965][T17526] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1285.610088][T17526] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1285.614480][ T73] legousbtower 8-1:14.228: probe with driver legousbtower failed with error -71 [ 1285.769265][ T73] usb 8-1: USB disconnect, device number 5 [ 1286.013855][T32321] veth0: entered promiscuous mode [ 1286.060457][T32321] veth0: left promiscuous mode [ 1287.333340][T32339] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6753'. [ 1287.860961][T32346] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1287.888417][T32346] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1288.132072][T32350] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1288.160026][T32350] bond1 (unregistering): Released all slaves [ 1288.504729][T32352] block device autoloading is deprecated and will be removed. [ 1290.273993][T32390] tmpfs: Bad value for 'mpol' [ 1290.303943][ T42] audit: type=1326 audit(1290.198:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32389 comm="syz.1.6766" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 1290.326870][ T42] audit: type=1326 audit(1290.198:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32389 comm="syz.1.6766" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 1290.345176][ T42] audit: type=1326 audit(1290.208:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32389 comm="syz.1.6766" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 1290.355416][ T42] audit: type=1326 audit(1290.208:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32389 comm="syz.1.6766" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 1290.374484][ T42] audit: type=1326 audit(1290.218:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32389 comm="syz.1.6766" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf706efec code=0x7ffc0000 [ 1290.397824][ T42] audit: type=1326 audit(1290.218:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32389 comm="syz.1.6766" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 1290.418520][ T42] audit: type=1326 audit(1290.218:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32389 comm="syz.1.6766" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 1290.436789][ T42] audit: type=1326 audit(1290.218:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32389 comm="syz.1.6766" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 1290.457184][ T42] audit: type=1326 audit(1290.218:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32389 comm="syz.1.6766" exe="/syz-executor" sig=0 arch=40000003 syscall=394 compat=1 ip=0xf706efec code=0x7ffc0000 [ 1290.477138][ T42] audit: type=1326 audit(1290.218:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32389 comm="syz.1.6766" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 1291.037301][ T73] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1291.097054][ T5819] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1291.195530][T32404] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6770'. [ 1291.210959][ T73] usb 8-1: New USB device found, idVendor=08e9, idProduct=0100, bcdDevice=7f.b9 [ 1291.226221][ T73] usb 8-1: config 0 has an invalid interface number: 121 but max is 0 [ 1291.241711][ T73] usb 8-1: config 0 has no interface number 0 [ 1291.254223][ T73] usb 8-1: config 0 interface 121 has no altsetting 0 [ 1291.264724][ T73] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1291.294142][ T73] usb 8-1: config 0 descriptor?? [ 1291.317043][ T5819] usb 9-1: Using ep0 maxpacket: 8 [ 1291.320626][ T5819] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1291.329040][ T5819] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1291.340890][ T5819] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1291.351033][ T5819] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1291.357046][ T5819] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1291.446237][T32408] syz0: rxe_newlink: already configured on wg2 [ 1291.537537][T32409] trusted_key: encrypted_key: insufficient parameters specified [ 1291.749197][ T5819] usb 9-1: config 0 descriptor?? [ 1292.192182][T32411] bridge1: entered promiscuous mode [ 1292.217736][T32411] bridge1: entered allmulticast mode [ 1292.433588][ T73] usb 8-1: string descriptor 0 read error: -71 [ 1292.671926][ T5819] mcp2221 0003:04D8:00DD.013C: unknown main item tag 0x0 [ 1292.674897][ T5819] mcp2221 0003:04D8:00DD.013C: unknown main item tag 0x0 [ 1292.682969][ T5819] mcp2221 0003:04D8:00DD.013C: unknown main item tag 0x0 [ 1292.685253][ T5819] mcp2221 0003:04D8:00DD.013C: unknown main item tag 0x0 [ 1292.687694][ T5819] mcp2221 0003:04D8:00DD.013C: unknown main item tag 0x0 [ 1292.698222][ T5819] mcp2221 0003:04D8:00DD.013C: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 1292.921147][ T5819] usb 9-1: USB disconnect, device number 7 [ 1293.101696][T32422] veth0: entered promiscuous mode [ 1293.107896][T32422] veth0: left promiscuous mode [ 1293.163634][ T73] ir_usb 8-1:0.121: required endpoints missing [ 1293.167694][ T73] usb 8-1: USB disconnect, device number 6 [ 1293.229995][T32427] fuse: Bad value for 'fd' [ 1293.287873][T32417] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 1293.291189][T32418] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1293.295816][T32418] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1293.299016][T32418] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1293.301024][T32418] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1293.303126][T32418] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1293.557051][ T5819] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 1293.657117][T13645] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1293.707067][ T5819] usb 6-1: Using ep0 maxpacket: 16 [ 1293.710395][ T5819] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1293.716913][ T5819] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 1293.721892][ T5819] usb 6-1: config 0 has no interface number 0 [ 1293.725339][ T5819] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1293.728971][ T5819] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1293.735626][ T5819] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1293.741019][ T5819] usb 6-1: Product: syz [ 1293.742391][ T5819] usb 6-1: SerialNumber: syz [ 1293.749652][ T5819] usb 6-1: config 0 descriptor?? [ 1293.755736][ T5819] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 1293.761216][ T5819] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.8/input/input117 [ 1293.818302][T13645] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1293.823035][T13645] usb 9-1: config index 0 descriptor too short (expected 45, got 36) [ 1293.831038][T13645] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1293.841173][T13645] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1293.848218][T13645] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1293.853378][T13645] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1293.860410][T13645] usb 9-1: config 0 descriptor?? [ 1293.959004][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 1294.507089][T21220] Bluetooth: hci1: command 0x0406 tx timeout [ 1295.297068][T21220] Bluetooth: hci2: command 0x0c1a tx timeout [ 1295.387102][T21220] Bluetooth: hci0: command 0x0406 tx timeout [ 1295.389265][T26512] Bluetooth: hci3: command 0x0c1a tx timeout [ 1295.784513][T32447] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6781'. [ 1296.425945][T13645] usbhid 9-1:0.0: can't add hid device: -71 [ 1296.428841][T13645] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1296.436262][T13645] usb 9-1: USB disconnect, device number 8 [ 1296.724065][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1296.724181][ T5819] usb 6-1: USB disconnect, device number 125 [ 1296.726290][ C0] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1296.756036][ T5819] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1296.793210][T32458] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1296.799371][T32457] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 1296.800595][T32458] @0: renamed from bond_slave_1 (while UP) [ 1296.826663][T32457] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1296.838883][T32454] veth0: entered promiscuous mode [ 1296.843059][T32454] veth0: left promiscuous mode [ 1296.894434][T32452] Console: switching to colour dummy device 80x25 [ 1296.992219][T32457] vhci_hcd vhci_hcd.0: Device attached [ 1297.007204][T32463] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1297.028615][T32463] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6788'. [ 1297.034400][T32466] deleting an unspecified loop device is not supported. [ 1297.036661][T32463] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6788'. [ 1297.042419][T32463] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6788'. [ 1297.049809][T32463] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6788'. [ 1297.079396][T32464] mac80211_hwsim hwsim48 syzkaller1: entered promiscuous mode [ 1297.091763][T32464] mac80211_hwsim hwsim48 syzkaller1: entered allmulticast mode [ 1297.177090][ T9395] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 1297.457065][T21220] Bluetooth: hci0: command 0x0406 tx timeout [ 1297.813215][T32473] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6790'. [ 1297.882685][T32475] nvme_tcp: malformed address passed: 127trsvcid=8009:8009 [ 1297.896064][T32475] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6791'. [ 1297.962091][T32478] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6793'. [ 1298.207756][T32459] vhci_hcd: connection reset by peer [ 1298.213600][T24608] vhci_hcd vhci_hcd.1: stop threads [ 1298.216104][T24608] vhci_hcd vhci_hcd.1: release socket [ 1298.219963][T24608] vhci_hcd vhci_hcd.1: disconnect device [ 1298.446713][T32491] veth0: entered promiscuous mode [ 1298.455128][T32490] veth0: left promiscuous mode [ 1298.757199][ T5780] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1298.907229][ T5780] usb 9-1: Using ep0 maxpacket: 32 [ 1298.917859][ T5780] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1298.933964][ T5780] usb 9-1: config 0 has no interfaces? [ 1298.941121][ T5780] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1298.943811][ T5780] usb 9-1: Product: syz [ 1298.952163][ T5780] usb 9-1: Manufacturer: syz [ 1298.961270][ T5780] usb 9-1: SerialNumber: syz [ 1299.015620][ T5780] usb 9-1: config 0 descriptor?? [ 1299.075456][T32504] rdma_rxe: rxe_newlink: failed to add wg2 [ 1299.257534][T32509] rdma_rxe: rxe_newlink: failed to add wg2 [ 1299.401456][T32510] trusted_key: encrypted_key: insufficient parameters specified [ 1299.581091][T32509] trusted_key: encrypted_key: insufficient parameters specified [ 1299.725296][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.103407][T32518] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6802'. [ 1300.221822][T32524] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6804'. [ 1301.178837][ T5819] usb 9-1: USB disconnect, device number 9 [ 1301.514263][T32546] rdma_rxe: rxe_newlink: failed to add wg2 [ 1301.797241][T32550] trusted_key: encrypted_key: insufficient parameters specified [ 1302.327166][ T9395] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 1302.843079][T32564] rdma_rxe: rxe_newlink: failed to add wg2 [ 1302.913144][T32565] trusted_key: encrypted_key: insufficient parameters specified [ 1303.189148][T32567] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6815'. [ 1303.264148][ T42] kauditd_printk_skb: 165 callbacks suppressed [ 1303.264206][ T42] audit: type=1326 audit(1303.158:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32569 comm="syz.4.6816" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 1303.285513][ T42] audit: type=1326 audit(1303.158:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32569 comm="syz.4.6816" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 1303.293493][T32570] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6816'. [ 1303.301077][T32570] netlink: 'syz.4.6816': attribute type 2 has an invalid length. [ 1303.305998][ T42] audit: type=1326 audit(1303.158:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32569 comm="syz.4.6816" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 1303.312698][T32570] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6816'. [ 1303.325738][ T42] audit: type=1326 audit(1303.158:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32569 comm="syz.4.6816" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 1303.339576][ T42] audit: type=1326 audit(1303.158:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32569 comm="syz.4.6816" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf706efec code=0x7ffc0000 [ 1303.351255][ T42] audit: type=1326 audit(1303.158:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32569 comm="syz.4.6816" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 1303.358218][ T42] audit: type=1326 audit(1303.158:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32569 comm="syz.4.6816" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 1303.366795][ T42] audit: type=1326 audit(1303.158:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32569 comm="syz.4.6816" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 1303.380253][ T42] audit: type=1326 audit(1303.158:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32569 comm="syz.4.6816" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 1303.393163][ T42] audit: type=1326 audit(1303.158:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32569 comm="syz.4.6816" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf706efec code=0x7ffc0000 [ 1303.403850][T32570] tmpfs: Unknown parameter 'fowner' [ 1303.658011][T32576] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6819'. [ 1304.242246][T32584] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 1304.271686][T32584] gadgetfs: bound to dummy_udc driver [ 1304.274137][T32586] lo speed is unknown, defaulting to 1000 [ 1304.274955][T32586] wg2 speed is unknown, defaulting to 1000 [ 1304.457062][ T73] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 1304.517136][ T9395] usb 7-1: new full-speed USB device number 121 using dummy_hcd [ 1304.524122][ C2] gadgetfs: connected [ 1304.525968][ T9395] gadgetfs: disconnected [ 1304.677426][ C2] gadgetfs: connected [ 1304.681457][ T9395] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 1304.693292][ T9395] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1304.707444][ T9395] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1304.755667][ C2] gadgetfs: configuration #1 [ 1304.927379][ T73] usb 6-1: Using ep0 maxpacket: 8 [ 1305.185770][ T73] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1305.190696][ T73] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1305.197017][ T73] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1305.200554][ T73] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1305.206566][ T73] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1305.211285][ T73] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1305.238475][T32580] gadgetfs: suspended from state 3 [ 1305.240770][T32580] gadgetfs: disconnected [ 1305.260473][ T9395] usb 7-1: USB disconnect, device number 121 [ 1305.262849][ T73] hub 6-1:1.0: bad descriptor, ignoring hub [ 1305.267082][ T73] hub 6-1:1.0: probe with driver hub failed with error -5 [ 1305.269743][ T73] cdc_wdm 6-1:1.0: skipping garbage [ 1305.271384][ T73] cdc_wdm 6-1:1.0: skipping garbage [ 1305.317338][ T73] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1305.322013][ T73] cdc_wdm 6-1:1.0: Unknown control protocol [ 1305.490109][T13674] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 1305.657885][T13674] usb 9-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1305.663381][T13674] usb 9-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1305.682869][T13674] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1305.686456][T13674] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1305.693003][T13674] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1305.696795][T13674] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1305.709772][T13674] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1305.713810][T13674] usb 9-1: Product: syz [ 1305.717051][T13674] usb 9-1: Manufacturer: syz [ 1305.725285][T13674] usb 9-1: SerialNumber: syz [ 1305.741839][T13674] usb 9-1: config 0 descriptor?? [ 1305.754649][T13674] input: KB Gear Tablet as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input119 [ 1306.098162][ T5819] usb 9-1: USB disconnect, device number 10 [ 1306.496270][T32611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1306.508423][T32611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1306.668524][T32614] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6831'. [ 1306.737183][T13674] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1306.805538][T32620] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6834'. [ 1306.909784][T13674] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1306.919050][T13674] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1306.927018][T32623] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6835'. [ 1306.927168][T13674] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1306.939268][T13674] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1306.946554][T13674] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1306.957858][T13674] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1306.980403][T13674] usb 8-1: config 0 descriptor?? [ 1306.992876][T32612] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1307.507639][T13674] plantronics 0003:047F:FFFF.013D: unknown main item tag 0x0 [ 1307.610043][ T73] usb 6-1: USB disconnect, device number 126 [ 1307.613293][T13674] plantronics 0003:047F:FFFF.013D: unknown main item tag 0x0 [ 1307.643555][T13674] plantronics 0003:047F:FFFF.013D: unknown main item tag 0x0 [ 1307.654640][T13674] plantronics 0003:047F:FFFF.013D: unknown main item tag 0x0 [ 1307.685046][T13674] plantronics 0003:047F:FFFF.013D: unknown main item tag 0x0 [ 1307.930508][T13674] plantronics 0003:047F:FFFF.013D: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1308.218601][ T5819] usb 8-1: USB disconnect, device number 7 [ 1308.620581][T13645] usb 7-1: new full-speed USB device number 122 using dummy_hcd [ 1308.871144][T13645] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1308.904192][T13645] usb 7-1: not running at top speed; connect to a high speed hub [ 1308.921018][T13645] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1308.960869][T13645] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 1308.972562][T13645] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 1308.994754][T13645] usb 7-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 1309.022764][T13645] usb 7-1: config 14 has no interface number 0 [ 1309.036287][T13645] usb 7-1: config 14 has no interface number 1 [ 1309.056536][T13645] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1309.074037][T32653] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6845'. [ 1309.085708][T13645] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1309.108388][T13645] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1309.132564][T13645] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 1309.158750][T13645] usb 7-1: config 14 interface 57 has no altsetting 0 [ 1309.162630][T13645] usb 7-1: config 14 interface 228 has no altsetting 0 [ 1309.257847][T13645] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1309.269453][T13645] usb 7-1: Product: syz [ 1309.270894][T13645] usb 7-1: Manufacturer: syz [ 1309.275235][T13645] usb 7-1: SerialNumber: syz [ 1310.137406][ T5833] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1310.299032][ T5833] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1310.309065][ T5833] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1310.313060][ T5833] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1310.327038][ T5833] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1310.335358][T32664] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1310.343573][ T5833] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1310.458534][T13645] legousbtower 7-1:14.57: interrupt endpoints not found [ 1310.476109][T13645] legousbtower 7-1:14.228: get version request failed: -71 [ 1310.486720][T13645] legousbtower 7-1:14.228: probe with driver legousbtower failed with error -71 [ 1310.502393][T13645] usb 7-1: USB disconnect, device number 122 [ 1310.531095][T32693] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6858'. [ 1311.799227][ T42] kauditd_printk_skb: 114 callbacks suppressed [ 1311.799247][ T42] audit: type=1800 audit(1311.688:781): pid=32699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6859" name="file0" dev="9p" ino=81002643 res=0 errno=0 [ 1311.813225][T32704] pim6reg: entered allmulticast mode [ 1312.175543][T32704] geneve2: entered promiscuous mode [ 1312.207552][T12914] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 37517 - 0 [ 1312.211601][T12914] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 37517 - 0 [ 1312.216637][T12914] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 37517 - 0 [ 1312.222566][T12914] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 37517 - 0 [ 1312.627096][T24175] usb 7-1: new high-speed USB device number 123 using dummy_hcd [ 1312.665805][T32720] mac80211_hwsim hwsim48 syzkaller1: left promiscuous mode [ 1312.672426][T32720] mac80211_hwsim hwsim48 syzkaller1: left allmulticast mode [ 1312.750875][T32718] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 1312.754771][T32718] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1312.767091][T24175] usb 7-1: device descriptor read/64, error -71 [ 1312.983272][ T73] usb 9-1: USB disconnect, device number 11 [ 1313.037449][T24175] usb 7-1: new high-speed USB device number 124 using dummy_hcd [ 1313.139186][T32725] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6868'. [ 1313.167652][T24175] usb 7-1: device descriptor read/64, error -71 [ 1313.282724][T24175] usb usb7-port1: attempt power cycle [ 1313.637588][T24175] usb 7-1: new high-speed USB device number 125 using dummy_hcd [ 1313.661048][T24175] usb 7-1: device descriptor read/8, error -71 [ 1313.856600][T32729] pimreg: entered allmulticast mode [ 1313.866865][T32729] CIFS: Attempting to mount //127.0.0.1/share [ 1313.897262][T24175] usb 7-1: new high-speed USB device number 126 using dummy_hcd [ 1313.919731][T24175] usb 7-1: device descriptor read/8, error -71 [ 1314.027869][T24175] usb usb7-port1: unable to enumerate USB device [ 1314.503128][T32748] netlink: 'syz.4.6875': attribute type 13 has an invalid length. [ 1314.509016][T32748] gretap0: refused to change device tx_queue_len [ 1314.512127][T32748] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1314.692807][T32729] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1314.695644][T32729] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1314.751936][T32754] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6878'. [ 1314.757791][ T73] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1314.927268][ T73] usb 8-1: Using ep0 maxpacket: 8 [ 1314.931224][ T73] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1314.940755][ T73] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1314.945066][ T73] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1314.949307][ T73] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1314.953259][ T73] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1314.959332][ T73] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1315.087761][ T73] hub 8-1:1.0: bad descriptor, ignoring hub [ 1315.097418][ T73] hub 8-1:1.0: probe with driver hub failed with error -5 [ 1315.103735][ T73] cdc_wdm 8-1:1.0: skipping garbage [ 1315.112397][ T73] cdc_wdm 8-1:1.0: skipping garbage [ 1315.171709][ T73] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 1315.179702][ T73] cdc_wdm 8-1:1.0: Unknown control protocol [ 1315.724812][T32765] veth0: entered promiscuous mode [ 1315.726809][T32765] veth0: left promiscuous mode [ 1315.729282][ T73] usb 8-1: USB disconnect, device number 8 [ 1315.810571][ T301] FAULT_INJECTION: forcing a failure. [ 1315.810571][ T301] name failslab, interval 1, probability 0, space 0, times 0 [ 1315.818833][ T301] CPU: 1 UID: 0 PID: 301 Comm: syz.2.6883 Tainted: G L syzkaller #0 PREEMPT(full) [ 1315.818854][ T301] Tainted: [L]=SOFTLOCKUP [ 1315.818858][ T301] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1315.818865][ T301] Call Trace: [ 1315.818871][ T301] [ 1315.818876][ T301] dump_stack_lvl+0x100/0x190 [ 1315.818898][ T301] should_fail_ex.cold+0x5/0xa [ 1315.818915][ T301] should_failslab+0xc2/0x120 [ 1315.818933][ T301] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1315.818948][ T301] ? lock_acquire+0x1b9/0x370 [ 1315.818959][ T301] ? radix_tree_node_alloc.constprop.0+0x66/0x340 [ 1315.818974][ T301] radix_tree_node_alloc.constprop.0+0x66/0x340 [ 1315.818989][ T301] idr_get_free+0x52e/0xa00 [ 1315.819014][ T301] idr_alloc_u32+0x1ac/0x320 [ 1315.819035][ T301] ? __pfx_idr_alloc_u32+0x10/0x10 [ 1315.819054][ T301] ? tcf_idr_check_alloc+0x598/0x7a0 [ 1315.819076][ T301] ? tcf_idr_check_alloc+0x598/0x7a0 [ 1315.819093][ T301] tcf_idr_check_alloc+0x136/0x7a0 [ 1315.819109][ T301] ? __pfx_tcf_idr_check_alloc+0x10/0x10 [ 1315.819124][ T301] ? __nla_parse+0x40/0x60 [ 1315.819142][ T301] tcf_ct_init+0x394/0x44e0 [ 1315.819155][ T301] ? netlink_sendmsg+0x8b0/0xda0 [ 1315.819167][ T301] ? ____sys_sendmsg+0xa4d/0xbe0 [ 1315.819182][ T301] ? ___sys_sendmsg+0x190/0x1e0 [ 1315.819193][ T301] ? __sys_sendmsg+0x160/0x210 [ 1315.819207][ T301] ? __do_fast_syscall_32+0xe7/0x970 [ 1315.819221][ T301] ? do_fast_syscall_32+0x32/0x70 [ 1315.819234][ T301] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1315.819253][ T301] ? __pfx_tcf_ct_init+0x10/0x10 [ 1315.819276][ T301] ? __kasan_kmalloc+0xaa/0xb0 [ 1315.819291][ T301] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 1315.819302][ T301] ? tcf_action_init_1+0x2d8/0x6c0 [ 1315.819316][ T301] ? __asan_memcpy+0x3c/0x60 [ 1315.819330][ T301] ? tcf_action_init_1+0x466/0x6c0 [ 1315.819343][ T301] tcf_action_init_1+0x466/0x6c0 [ 1315.819359][ T301] ? __pfx_tcf_action_init_1+0x10/0x10 [ 1315.819373][ T301] ? tc_action_load_ops+0x1f5/0x3e0 [ 1315.819395][ T301] ? __nla_parse+0x40/0x60 [ 1315.819412][ T301] tcf_action_init+0x43f/0xa60 [ 1315.819432][ T301] ? __pfx_tcf_action_init+0x10/0x10 [ 1315.819457][ T301] ? __kernel_text_address+0xd/0x30 [ 1315.819474][ T301] ? unwind_get_return_address+0x59/0xa0 [ 1315.819491][ T301] ? arch_stack_walk+0xa6/0xf0 [ 1315.819517][ T301] ? kfree_skbmem+0x19a/0x210 [ 1315.819528][ T301] ? kasan_save_stack+0x3f/0x50 [ 1315.819541][ T301] ? kasan_save_stack+0x30/0x50 [ 1315.819554][ T301] ? kasan_save_track+0x14/0x30 [ 1315.819566][ T301] ? kasan_save_free_info+0x3b/0x70 [ 1315.819577][ T301] ? __kasan_slab_free+0x5f/0x80 [ 1315.819591][ T301] ? kmem_cache_free+0x127/0x6b0 [ 1315.819601][ T301] ? kfree_skbmem+0x19a/0x210 [ 1315.819612][ T301] ? consume_skb+0xd1/0x110 [ 1315.819627][ T301] ? nlmon_xmit+0xa5/0xe0 [ 1315.819660][ T301] tcf_action_add+0xed/0x5c0 [ 1315.819677][ T301] ? __pfx_tcf_action_add+0x10/0x10 [ 1315.819712][ T301] ? __nla_parse+0x40/0x60 [ 1315.819726][ T301] tc_ctl_action+0x2e3/0x470 [ 1315.819741][ T301] ? __pfx_tc_ctl_action+0x10/0x10 [ 1315.819761][ T301] ? __pfx_tc_ctl_action+0x10/0x10 [ 1315.819777][ T301] rtnetlink_rcv_msg+0x3c9/0xe90 [ 1315.819795][ T301] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1315.819816][ T301] ? ref_tracker_free+0x37e/0x6c0 [ 1315.819829][ T301] netlink_rcv_skb+0x159/0x420 [ 1315.819842][ T301] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1315.819866][ T301] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1315.819891][ T301] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1315.819913][ T301] netlink_unicast+0x585/0x850 [ 1315.819935][ T301] ? __pfx_netlink_unicast+0x10/0x10 [ 1315.819962][ T301] netlink_sendmsg+0x8b0/0xda0 [ 1315.819986][ T301] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1315.820010][ T301] ? apparmor_socket_sendmsg+0x15b/0x270 [ 1315.820034][ T301] ____sys_sendmsg+0xa4d/0xbe0 [ 1315.820052][ T301] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1315.820068][ T301] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1315.820086][ T301] ___sys_sendmsg+0x190/0x1e0 [ 1315.820099][ T301] ? __pfx____sys_sendmsg+0x10/0x10 [ 1315.820119][ T301] ? find_held_lock+0x2b/0x80 [ 1315.820141][ T301] __sys_sendmsg+0x160/0x210 [ 1315.820157][ T301] ? __pfx___sys_sendmsg+0x10/0x10 [ 1315.820177][ T301] ? __pfx_ksys_write+0x10/0x10 [ 1315.820192][ T301] __do_fast_syscall_32+0xe7/0x970 [ 1315.820206][ T301] ? lockdep_hardirqs_on+0x78/0x100 [ 1315.820221][ T301] do_fast_syscall_32+0x32/0x70 [ 1315.820235][ T301] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1315.820250][ T301] RIP: 0023:0xf7f25fec [ 1315.820266][ T301] Code: Unable to access opcode bytes at 0xf7f25fc2. [ 1315.820271][ T301] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1315.820283][ T301] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000140 [ 1315.820289][ T301] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 1315.820296][ T301] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1315.820302][ T301] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1315.820308][ T301] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1315.820321][ T301] [ 1316.058238][ T73] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1316.129506][ T304] siw: device registration error -23 [ 1316.209069][ T307] ib_srp: QP creation failed for dev syz0: -2 [ 1316.227887][ T73] usb 8-1: Using ep0 maxpacket: 8 [ 1316.233181][ T73] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1316.241650][ T73] usb 8-1: config 1 has an invalid descriptor of length 121, skipping remainder of the config [ 1316.250563][ T73] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1316.255759][ T73] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1316.272665][ T73] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1316.312107][ T73] hub 8-1:1.0: bad descriptor, ignoring hub [ 1316.317370][ T73] hub 8-1:1.0: probe with driver hub failed with error -5 [ 1316.325653][ T73] cdc_wdm 8-1:1.0: skipping garbage [ 1316.330576][ T73] cdc_wdm 8-1:1.0: skipping garbage [ 1316.332371][ T73] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1316.582621][ T312] siw: device registration error -23 [ 1316.629726][ T314] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6887'. [ 1316.647935][T24175] usb 8-1: USB disconnect, device number 9 [ 1316.690727][ T315] ib_srp: QP creation failed for dev syz0: -2 [ 1317.287154][T24175] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1317.370105][ T334] veth0: entered promiscuous mode [ 1317.372060][ T334] veth0: left promiscuous mode [ 1317.457867][T24175] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 1317.464928][ T336] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6893'. [ 1317.466309][T24175] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1317.697472][T24175] cdc_acm 9-1:1.0: ttyACM0: USB ACM device [ 1317.851577][ T347] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6897'. [ 1317.927867][ T351] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6898'. [ 1317.932457][ T351] netlink: 'syz.2.6898': attribute type 7 has an invalid length. [ 1317.937552][ T351] netlink: 'syz.2.6898': attribute type 8 has an invalid length. [ 1317.942703][ T351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6898'. [ 1317.948032][T24175] usb 9-1: USB disconnect, device number 12 [ 1317.964594][ T351] max out of range [ 1318.091000][ T358] veth0: entered promiscuous mode [ 1318.093018][ T358] veth0: left promiscuous mode [ 1318.149015][ T360] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6902'. [ 1318.400231][ T5819] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 1318.457121][ T9395] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1318.607927][ T9395] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 1318.618188][ T9395] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1318.837424][T21220] Bluetooth: hci0: unexpected event for opcode 0x0c5b [ 1319.015266][ T5819] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1319.019831][ T5819] usb 8-1: not running at top speed; connect to a high speed hub [ 1319.023594][ T5819] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1319.027656][ T5819] usb 8-1: config 14 has an invalid interface number: 57 but max is 1 [ 1319.030394][ T5819] usb 8-1: config 14 has an invalid interface number: 228 but max is 1 [ 1319.033012][ T5819] usb 8-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 1319.036919][ T5819] usb 8-1: config 14 has no interface number 0 [ 1319.038988][ T5819] usb 8-1: config 14 has no interface number 1 [ 1319.040962][ T5819] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1319.044821][ T5819] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1319.048614][ T5819] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1319.052116][ T5819] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 1319.055517][ T5819] usb 8-1: config 14 interface 57 has no altsetting 0 [ 1319.057728][ T5819] usb 8-1: config 14 interface 228 has no altsetting 0 [ 1319.061460][ T5819] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1319.064147][ T5819] usb 8-1: Product: syz [ 1319.065490][ T5819] usb 8-1: Manufacturer: syz [ 1319.067064][ T5819] usb 8-1: SerialNumber: syz [ 1319.426484][ T372] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 1319.428462][ T372] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1319.433242][ T372] vhci_hcd vhci_hcd.0: Device attached [ 1319.717149][ T5880] usb 42-1: SetAddress Request (14) to port 0 [ 1319.719815][ T5880] usb 42-1: new SuperSpeed USB device number 14 using vhci_hcd [ 1319.909324][ T373] vhci_hcd: connection reset by peer [ 1319.911865][T17526] vhci_hcd vhci_hcd.2: stop threads [ 1319.913634][T17526] vhci_hcd vhci_hcd.2: release socket [ 1319.916061][T17526] vhci_hcd vhci_hcd.2: disconnect device [ 1319.973092][ T9395] cdc_acm 9-1:1.0: ttyACM0: USB ACM device [ 1319.993943][ T9395] usb 9-1: USB disconnect, device number 13 [ 1320.017695][ T382] FAULT_INJECTION: forcing a failure. [ 1320.017695][ T382] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1320.021930][ T382] CPU: 1 UID: 0 PID: 382 Comm: syz.1.6908 Tainted: G L syzkaller #0 PREEMPT(full) [ 1320.021949][ T382] Tainted: [L]=SOFTLOCKUP [ 1320.021954][ T382] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1320.021972][ T382] Call Trace: [ 1320.021978][ T382] [ 1320.021983][ T382] dump_stack_lvl+0x100/0x190 [ 1320.022004][ T382] should_fail_ex.cold+0x5/0xa [ 1320.022019][ T382] _copy_from_iter+0x1f4/0x1690 [ 1320.022040][ T382] ? _copy_from_iter+0x270/0x1690 [ 1320.022057][ T382] ? __pfx__copy_from_iter+0x10/0x10 [ 1320.022076][ T382] ? __pfx__copy_from_iter+0x10/0x10 [ 1320.022096][ T382] copy_page_from_iter+0x238/0x300 [ 1320.022115][ T382] skb_copy_datagram_from_iter+0x399/0x720 [ 1320.022135][ T382] tun_get_user+0x1889/0x3c20 [ 1320.022156][ T382] ? __pfx_tun_get_user+0x10/0x10 [ 1320.022170][ T382] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1320.022186][ T382] ? find_held_lock+0x2b/0x80 [ 1320.022202][ T382] ? tun_get+0x191/0x370 [ 1320.022213][ T382] ? tun_get+0x191/0x370 [ 1320.022228][ T382] tun_chr_write_iter+0xdc/0x200 [ 1320.022242][ T382] vfs_write+0x6ac/0x1050 [ 1320.022255][ T382] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1320.022269][ T382] ? __pfx_vfs_write+0x10/0x10 [ 1320.022278][ T382] ? find_held_lock+0x2b/0x80 [ 1320.022300][ T382] ksys_write+0x12a/0x250 [ 1320.022311][ T382] ? __pfx_ksys_write+0x10/0x10 [ 1320.022326][ T382] do_int80_emulation+0x14b/0x720 [ 1320.022343][ T382] asm_int80_emulation+0x1a/0x20 [ 1320.022354][ T382] RIP: 0023:0xf71a74eb [ 1320.022364][ T382] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1320.022375][ T382] RSP: 002b:00000000f545d44c EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 1320.022387][ T382] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000200 [ 1320.022394][ T382] RDX: 000000000000fef3 RSI: 0000000000000000 RDI: 0000000000000000 [ 1320.022400][ T382] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1320.022406][ T382] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1320.022413][ T382] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1320.022426][ T382] [ 1320.212968][ T5819] legousbtower 8-1:14.57: interrupt endpoints not found [ 1320.215529][ T5819] legousbtower 8-1:14.228: get version request failed: -71 [ 1320.222504][ T5819] legousbtower 8-1:14.228: probe with driver legousbtower failed with error -71 [ 1320.232619][ T5819] usb 8-1: USB disconnect, device number 10 [ 1320.351992][ T396] tipc: Enabling of bearer rejected, failed to enable media [ 1320.464070][ T399] nvme nvme0: rdma connection establishment failed (-104) [ 1320.587186][ T5819] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1320.757224][ T5819] usb 8-1: Using ep0 maxpacket: 32 [ 1320.761436][ T5819] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1320.764071][ T5819] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1320.773620][ T5819] usb 8-1: config 14 has an invalid interface number: 57 but max is 1 [ 1320.779312][ T5819] usb 8-1: config 14 has an invalid interface number: 228 but max is 1 [ 1320.787160][ T5819] usb 8-1: config 14 has no interface number 0 [ 1320.789362][ T5819] usb 8-1: config 14 has no interface number 1 [ 1320.791337][ T5819] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1320.794742][ T5819] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1320.817009][ C1] sl0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 21070 ms [ 1320.819534][ C1] sl0: transmit timed out, driver error? [ 1320.821466][ T5819] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1320.825668][ T5819] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1320.830438][ T5819] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1320.835088][ T5819] usb 8-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1320.842591][ T5819] usb 8-1: config 14 interface 57 has no altsetting 0 [ 1320.847791][ T5819] usb 8-1: config 14 interface 228 has no altsetting 0 [ 1320.855112][ T5819] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1320.867030][ T5819] usb 8-1: Product: syz [ 1320.868801][ T5819] usb 8-1: Manufacturer: syz [ 1320.870830][ T5819] usb 8-1: SerialNumber: syz [ 1321.286944][ T5819] legousbtower 8-1:14.57: interrupt endpoints not found [ 1321.417105][T22908] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1321.569419][T22908] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1321.577679][T22908] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1321.582665][T22908] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1321.588336][T22908] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1321.597137][T22908] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1321.605981][T22908] usb 9-1: Product: syz [ 1321.607313][T22908] usb 9-1: Manufacturer: syz [ 1321.608874][T22908] usb 9-1: SerialNumber: syz [ 1321.627160][ T73] usb 6-1: new full-speed USB device number 127 using dummy_hcd [ 1321.689496][ T5819] legousbtower 8-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 1321.695897][ T5819] legousbtower 8-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1321.789755][ T73] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1321.793545][ T73] usb 6-1: not running at top speed; connect to a high speed hub [ 1321.796286][ T73] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1321.801173][ T73] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 1321.804490][ T73] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 1321.807728][ T73] usb 6-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 1321.811735][ T73] usb 6-1: config 14 has no interface number 0 [ 1321.814177][ T73] usb 6-1: config 14 has no interface number 1 [ 1321.816321][ T73] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1321.821633][ T73] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1321.826562][ T73] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1321.830741][ T73] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 1321.830798][T22908] usblp 9-1:1.0: usblp1: USB Unidirectional printer dev 14 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1321.834861][ T73] usb 6-1: config 14 interface 57 has no altsetting 0 [ 1321.841627][ T73] usb 6-1: config 14 interface 228 has no altsetting 0 [ 1321.845403][ T73] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1321.848876][ T73] usb 6-1: Product: syz [ 1321.850587][ T73] usb 6-1: Manufacturer: syz [ 1321.852644][ T73] usb 6-1: SerialNumber: syz [ 1322.252016][ T5780] usb 8-1: USB disconnect, device number 11 [ 1322.281225][ T5780] legousbtower 8-1:14.228: LEGO USB Tower #-160 now disconnected [ 1322.481474][ T438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1322.487579][ T438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1323.003753][ T73] legousbtower 6-1:14.57: interrupt endpoints not found [ 1323.018310][ T73] legousbtower 6-1:14.228: get version request failed: -71 [ 1323.021917][ T73] legousbtower 6-1:14.228: probe with driver legousbtower failed with error -71 [ 1323.034796][ T73] usb 6-1: USB disconnect, device number 127 [ 1323.169734][ T443] sysfs: Unknown parameter 'eui18446744073709551615' [ 1323.306861][ T445] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input121 [ 1323.782628][ T452] siw: device registration error -23 [ 1323.867844][ T456] ib_srp: QP creation failed for dev syz0: -2 [ 1324.088511][ T463] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6932'. [ 1324.214802][T31059] usb 9-1: USB disconnect, device number 14 [ 1324.223389][T31059] usblp1: removed [ 1324.447095][T22908] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 1324.586906][ T478] syz0: rxe_newlink: already configured on wg2 [ 1324.631657][T22908] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1324.636074][T22908] usb 6-1: not running at top speed; connect to a high speed hub [ 1324.640067][T22908] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1324.646431][T22908] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 1324.650438][T22908] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 1324.653870][T22908] usb 6-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 1324.659225][T22908] usb 6-1: config 14 has no interface number 0 [ 1324.662220][T22908] usb 6-1: config 14 has no interface number 1 [ 1324.664913][T22908] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1324.670413][ T479] trusted_key: encrypted_key: insufficient parameters specified [ 1324.673716][T22908] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1324.680107][T22908] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1324.683696][T22908] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 1324.687284][T22908] usb 6-1: config 14 interface 57 has no altsetting 0 [ 1324.689755][T22908] usb 6-1: config 14 interface 228 has no altsetting 0 [ 1324.695106][T22908] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1324.698700][T22908] usb 6-1: Product: syz [ 1324.700806][T22908] usb 6-1: Manufacturer: syz [ 1324.703139][T22908] usb 6-1: SerialNumber: syz [ 1324.827127][ T5880] usb 42-1: device descriptor read/8, error -110 [ 1324.966124][ T481] veth0: entered promiscuous mode [ 1324.968207][ T481] veth0: left promiscuous mode [ 1325.003892][ T485] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6939'. [ 1325.048182][ T487] netlink: 'syz.3.6941': attribute type 1 has an invalid length. [ 1325.062300][ T487] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1325.101212][ T487] bond3: (slave gretap0): making interface the new active one [ 1325.105657][ T487] bond3: (slave gretap0): Enslaving as an active interface with an up link [ 1325.145181][ T487] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 1325.157615][ T487] netlink: 'syz.3.6941': attribute type 10 has an invalid length. [ 1325.160599][ T487] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6941'. [ 1325.163677][ T487] dummy0: entered promiscuous mode [ 1325.166849][ T487] bond3: (slave dummy0): Releasing active interface [ 1325.244897][ T492] lo speed is unknown, defaulting to 1000 [ 1325.247638][ T492] wg2 speed is unknown, defaulting to 1000 [ 1325.337781][ T5880] usb usb42-port1: attempt power cycle [ 1325.734722][T31059] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1325.895642][T22908] legousbtower 6-1:14.57: interrupt endpoints not found [ 1325.911686][T22908] legousbtower 6-1:14.228: get version request failed: -71 [ 1325.916682][T22908] legousbtower 6-1:14.228: probe with driver legousbtower failed with error -71 [ 1325.918102][ T5880] usb usb42-port1: unable to enumerate USB device [ 1325.944788][T22908] usb 6-1: USB disconnect, device number 2 [ 1325.948958][T31059] usb 8-1: Using ep0 maxpacket: 8 [ 1325.951939][T31059] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1325.958172][T31059] usb 8-1: config 0 has no interfaces? [ 1325.960007][T31059] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1325.968049][T31059] usb 8-1: config 0 descriptor?? [ 1326.205163][ T511] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6947'. [ 1326.329441][T22908] usb 8-1: USB disconnect, device number 12 [ 1326.447775][ T492] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6942'. [ 1327.417111][T22908] usb 8-1: new full-speed USB device number 13 using dummy_hcd [ 1327.571209][T22908] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1327.574626][T22908] usb 8-1: not running at top speed; connect to a high speed hub [ 1327.577680][T22908] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1327.582093][T22908] usb 8-1: config 14 has an invalid interface number: 57 but max is 1 [ 1327.585162][T22908] usb 8-1: config 14 has an invalid interface number: 228 but max is 1 [ 1327.600195][T22908] usb 8-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 1327.604836][T22908] usb 8-1: config 14 has no interface number 0 [ 1327.610816][T22908] usb 8-1: config 14 has no interface number 1 [ 1327.612883][T22908] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1327.616244][T22908] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1327.620556][T22908] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1327.624073][T22908] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 1327.627563][T22908] usb 8-1: config 14 interface 57 has no altsetting 0 [ 1327.629741][T22908] usb 8-1: config 14 interface 228 has no altsetting 0 [ 1327.634227][T22908] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1327.636843][T22908] usb 8-1: Product: syz [ 1327.638205][T22908] usb 8-1: Manufacturer: syz [ 1327.639717][T22908] usb 8-1: SerialNumber: syz [ 1328.027055][ T549] FAULT_INJECTION: forcing a failure. [ 1328.027055][ T549] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1328.047379][ T549] CPU: 2 UID: 0 PID: 549 Comm: syz.2.6957 Tainted: G L syzkaller #0 PREEMPT(full) [ 1328.047415][ T549] Tainted: [L]=SOFTLOCKUP [ 1328.047424][ T549] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1328.047434][ T549] Call Trace: [ 1328.047442][ T549] [ 1328.047450][ T549] dump_stack_lvl+0x100/0x190 [ 1328.047484][ T549] should_fail_ex.cold+0x5/0xa [ 1328.047509][ T549] strncpy_from_user+0x3b/0x2d0 [ 1328.047542][ T549] path_setxattrat+0x127/0x3b0 [ 1328.047567][ T549] ? __pfx_path_setxattrat+0x10/0x10 [ 1328.047592][ T549] ? rcu_read_lock_any_held+0x6a/0xa0 [ 1328.047620][ T549] ? find_held_lock+0x2b/0x80 [ 1328.047666][ T549] ? fput+0x79/0x100 [ 1328.047690][ T549] ? ksys_write+0x1ac/0x250 [ 1328.047713][ T549] __ia32_sys_fsetxattr+0xc4/0x140 [ 1328.047736][ T549] ? __do_fast_syscall_32+0x98/0x970 [ 1328.047764][ T549] ? lockdep_hardirqs_on+0x78/0x100 [ 1328.047788][ T549] __do_fast_syscall_32+0xe7/0x970 [ 1328.047812][ T549] ? lockdep_hardirqs_on+0x78/0x100 [ 1328.047838][ T549] do_fast_syscall_32+0x32/0x70 [ 1328.047863][ T549] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1328.047888][ T549] RIP: 0023:0xf7f25fec [ 1328.047913][ T549] Code: Unable to access opcode bytes at 0xf7f25fc2. [ 1328.047923][ T549] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 00000000000000e4 [ 1328.047941][ T549] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 1328.047954][ T549] RDX: 0000000080000740 RSI: 000000000000fce7 RDI: 0000000000000003 [ 1328.047965][ T549] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1328.047976][ T549] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1328.047988][ T549] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1328.048011][ T549] [ 1328.801542][T22908] legousbtower 8-1:14.57: interrupt endpoints not found [ 1328.814904][T22908] legousbtower 8-1:14.228: get version request failed: -71 [ 1328.818094][T22908] legousbtower 8-1:14.228: probe with driver legousbtower failed with error -71 [ 1328.825222][T22908] usb 8-1: USB disconnect, device number 13 [ 1329.679043][ T584] rdma_rxe: rxe_newlink: failed to add wg2 [ 1329.804868][ T575] Process accounting resumed [ 1329.816471][ T585] trusted_key: encrypted_key: insufficient parameters specified [ 1330.358637][ T586] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 1330.906047][ T613] siw: device registration error -23 [ 1330.917184][ T5833] usb 7-1: new full-speed USB device number 127 using dummy_hcd [ 1330.972303][ T622] ib_srp: QP creation failed for dev syz0: -2 [ 1331.088940][ T5833] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1331.105106][ T5833] usb 7-1: not running at top speed; connect to a high speed hub [ 1331.109004][ T5833] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1331.116232][ T5833] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 1331.119595][ T5833] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 1331.122991][ T5833] usb 7-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 1331.129266][ T5833] usb 7-1: config 14 has no interface number 0 [ 1331.134222][ T5833] usb 7-1: config 14 has no interface number 1 [ 1331.138339][ T5833] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1331.143511][ T5833] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1331.149786][ T5833] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1331.155901][ T5833] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 1331.170634][ T5833] usb 7-1: config 14 interface 57 has no altsetting 0 [ 1331.174326][ T5833] usb 7-1: config 14 interface 228 has no altsetting 0 [ 1331.182289][ T5833] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1331.186859][ T5833] usb 7-1: Product: syz [ 1331.189423][ T5833] usb 7-1: Manufacturer: syz [ 1331.191607][ T5833] usb 7-1: SerialNumber: syz [ 1331.550061][ T636] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 1331.783086][ T646] netlink: 512 bytes leftover after parsing attributes in process `syz.3.6980'. [ 1332.195164][ T643] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1332.264996][ T652] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1332.286274][ T652] block device autoloading is deprecated and will be removed. [ 1332.712240][ T5833] legousbtower 7-1:14.57: interrupt endpoints not found [ 1332.722615][ T5833] legousbtower 7-1:14.228: get version request failed: -71 [ 1332.727574][ T5833] legousbtower 7-1:14.228: probe with driver legousbtower failed with error -71 [ 1332.736356][ T5833] usb 7-1: USB disconnect, device number 127 [ 1333.220710][ T674] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 1333.325273][ T684] loop8: detected capacity change from 0 to 7 [ 1333.338662][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1333.341854][ C3] buffer_io_error: 320 callbacks suppressed [ 1333.341871][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 1333.352492][ C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1333.356581][ C2] Buffer I/O error on dev loop8, logical block 0, async page read [ 1333.367443][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1333.370802][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 1333.375164][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1333.379287][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 1333.391281][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1333.395496][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 1333.402819][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1333.406832][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 1333.412327][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1333.415168][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 1333.418079][ T684] ldm_validate_partition_table(): Disk read failed. [ 1333.425332][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1333.429435][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 1333.433052][ C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1333.437151][ C2] Buffer I/O error on dev loop8, logical block 0, async page read [ 1333.441035][ C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1333.445111][ C2] Buffer I/O error on dev loop8, logical block 0, async page read [ 1333.455303][ T684] Dev loop8: unable to read RDB block 0 [ 1333.462026][ T684] loop8: unable to read partition table [ 1333.470119][ T684] loop8: partition table beyond EOD, truncated [ 1333.474153][ T684] loop_reread_partitions: partition scan of loop8 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 1333.875613][ T679] syz.2.6990 (679) used greatest stack depth: 18464 bytes left [ 1333.891732][ T694] 8021q: VLANs not supported on vcan0 [ 1335.442129][T10862] Bluetooth: hci4: Frame reassembly failed (-90) [ 1335.787228][T31059] usb 9-1: new full-speed USB device number 15 using dummy_hcd [ 1335.959412][T31059] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1335.962879][T31059] usb 9-1: not running at top speed; connect to a high speed hub [ 1335.965769][T31059] usb 9-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1335.970878][T31059] usb 9-1: config 14 has an invalid interface number: 57 but max is 1 [ 1335.974108][T31059] usb 9-1: config 14 has an invalid interface number: 228 but max is 1 [ 1335.977392][T31059] usb 9-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 1335.981608][T31059] usb 9-1: config 14 has no interface number 0 [ 1335.984168][T31059] usb 9-1: config 14 has no interface number 1 [ 1335.986794][T31059] usb 9-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1335.991030][T31059] usb 9-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1335.995529][T31059] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1336.000274][T31059] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 1336.004218][T31059] usb 9-1: config 14 interface 57 has no altsetting 0 [ 1336.007266][T31059] usb 9-1: config 14 interface 228 has no altsetting 0 [ 1336.012399][T31059] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1336.015739][T31059] usb 9-1: Product: syz [ 1336.017581][T31059] usb 9-1: Manufacturer: syz [ 1336.019361][T31059] usb 9-1: SerialNumber: syz [ 1336.563263][ T717] gadgetfs: bound to dummy_udc driver [ 1336.700830][ T725] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7000'. [ 1336.702066][ T723] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7002'. [ 1336.703961][ T725] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7000'. [ 1337.163860][T31059] legousbtower 9-1:14.57: interrupt endpoints not found [ 1337.186449][T31059] legousbtower 9-1:14.228: get version request failed: -71 [ 1337.194818][T31059] legousbtower 9-1:14.228: probe with driver legousbtower failed with error -71 [ 1337.221237][T31059] usb 9-1: USB disconnect, device number 15 [ 1337.308061][ T740] pimreg3: entered allmulticast mode [ 1337.457325][T21220] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 1337.464742][T26512] Bluetooth: hci4: command 0xfc11 tx timeout [ 1338.641787][ T762] veth1_to_hsr: left promiscuous mode [ 1338.840171][ T755] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 1338.877201][ T5780] usb 8-1: new full-speed USB device number 14 using dummy_hcd [ 1339.034676][ T774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7019'. [ 1339.158743][ T778] comedi comedi2: comedi_config --init_data is deprecated [ 1339.204354][ T5780] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1339.710911][ T5780] usb 8-1: not running at top speed; connect to a high speed hub [ 1339.715250][ T5780] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1339.721141][ T5780] usb 8-1: config 14 has an invalid interface number: 57 but max is 1 [ 1339.734755][ T5780] usb 8-1: config 14 has an invalid interface number: 228 but max is 1 [ 1339.738675][ T5780] usb 8-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 1339.742039][ T5780] usb 8-1: config 14 has no interface number 0 [ 1339.744035][ T5780] usb 8-1: config 14 has no interface number 1 [ 1339.745979][ T5780] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1339.749889][ T5780] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1339.753793][ T5780] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1339.758631][ T5780] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 1339.762570][ T781] FAULT_INJECTION: forcing a failure. [ 1339.762570][ T781] name failslab, interval 1, probability 0, space 0, times 0 [ 1339.763051][ T5780] usb 8-1: config 14 interface 57 has no altsetting 0 [ 1339.763066][ T5780] usb 8-1: config 14 interface 228 has no altsetting 0 [ 1339.764754][ T5780] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1339.767762][ T781] CPU: 3 UID: 0 PID: 781 Comm: syz.1.7021 Tainted: G L syzkaller #0 PREEMPT(full) [ 1339.767781][ T781] Tainted: [L]=SOFTLOCKUP [ 1339.767785][ T781] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1339.767793][ T781] Call Trace: [ 1339.767798][ T781] [ 1339.767803][ T781] dump_stack_lvl+0x100/0x190 [ 1339.767836][ T781] should_fail_ex.cold+0x5/0xa [ 1339.767850][ T781] should_failslab+0xc2/0x120 [ 1339.767868][ T781] __kmalloc_cache_noprof+0x91/0x6c0 [ 1339.767881][ T781] ? x509_cert_parse+0x162/0x910 [ 1339.767903][ T781] x509_cert_parse+0x162/0x910 [ 1339.767922][ T781] x509_key_preparse+0x65/0x9c0 [ 1339.767936][ T781] asymmetric_key_preparse+0xce/0x1d0 [ 1339.767951][ T781] ? __pfx_asymmetric_key_preparse+0x10/0x10 [ 1339.767967][ T781] __key_create_or_update+0x463/0xe30 [ 1339.767999][ T781] ? __pfx___key_create_or_update+0x10/0x10 [ 1339.768015][ T781] ? lookup_user_key+0x3f3/0x1300 [ 1339.768036][ T781] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 1339.768053][ T781] key_create_or_update+0x42/0x60 [ 1339.768071][ T781] __do_sys_add_key+0x2e8/0x460 [ 1339.768083][ T781] ? __pfx___do_sys_add_key+0x10/0x10 [ 1339.768093][ T781] ? fput+0x79/0x100 [ 1339.768107][ T781] ? __pfx_ksys_write+0x10/0x10 [ 1339.768121][ T781] __do_fast_syscall_32+0xe7/0x970 [ 1339.768136][ T781] ? lockdep_hardirqs_on+0x78/0x100 [ 1339.768151][ T781] do_fast_syscall_32+0x32/0x70 [ 1339.768165][ T781] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1339.768179][ T781] RIP: 0023:0xf706efec [ 1339.768197][ T781] Code: Unable to access opcode bytes at 0xf706efc2. [ 1339.768203][ T781] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 000000000000011e [ 1339.768213][ T781] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000000000 [ 1339.768220][ T781] RDX: 0000000080000200 RSI: 0000000000000559 RDI: 00000000ffffffff [ 1339.768227][ T781] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1339.768233][ T781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1339.768239][ T781] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1339.768253][ T781] [ 1339.866362][ T5780] usb 8-1: Product: syz [ 1339.868223][ T5780] usb 8-1: Manufacturer: syz [ 1339.870234][ T5780] usb 8-1: SerialNumber: syz [ 1340.070537][ T793] siw: device registration error -23 [ 1340.169717][ T794] ib_srp: QP creation failed for dev syz0: -2 [ 1340.414540][ T807] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7030'. [ 1340.418723][ T807] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7030'. [ 1340.422673][ T807] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7030'. [ 1340.486340][ T811] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7031'. [ 1340.581812][ T812] veth0_vlan: entered allmulticast mode [ 1341.029738][ T5780] legousbtower 8-1:14.57: interrupt endpoints not found [ 1341.045947][ T5780] legousbtower 8-1:14.228: get version request failed: -71 [ 1341.049400][ T5780] legousbtower 8-1:14.228: probe with driver legousbtower failed with error -71 [ 1341.067894][ T5780] usb 8-1: USB disconnect, device number 14 [ 1341.234171][ T825] bridge0: port 1(bridge_slave_0) entered disabled state [ 1341.272638][ T825] bridge0: port 2(bridge_slave_1) entered disabled state [ 1341.477159][ T5833] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1341.589710][ T825] 8021q: adding VLAN 0 to HW filter on device eth0 [ 1341.617559][ T825] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1341.627949][ T5833] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1341.632490][ T5833] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1341.639503][ T5833] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1341.643332][ T5833] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1341.647686][ T825] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1341.648803][ T5833] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1341.651935][ T825] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1341.656162][ T5833] usb 9-1: config 0 descriptor?? [ 1341.688586][ T825] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1341.717411][T24608] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1341.723245][T24608] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1341.744910][T24608] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1341.754046][T24608] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1341.955085][ T837] siw: device registration error -23 [ 1342.038582][ T838] ib_srp: QP creation failed for dev syz0: -2 [ 1342.569115][ T5833] usbhid 9-1:0.0: can't add hid device: -71 [ 1342.573560][ T5833] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1342.591667][ T5833] usb 9-1: USB disconnect, device number 16 [ 1342.897096][ T5880] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 1343.049327][ T5880] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1343.054856][ T5880] usb 6-1: not running at top speed; connect to a high speed hub [ 1343.067054][ T5880] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1343.072025][ T5880] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 1343.077405][ T5880] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 1343.083110][ T5880] usb 6-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 1343.097070][ T5880] usb 6-1: config 14 has no interface number 0 [ 1343.099766][ T5880] usb 6-1: config 14 has no interface number 1 [ 1343.102446][ T5880] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1343.106895][ T5880] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1343.127065][ T5880] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1343.132563][ T5880] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 1343.147050][ T5880] usb 6-1: config 14 interface 57 has no altsetting 0 [ 1343.150003][ T5880] usb 6-1: config 14 interface 228 has no altsetting 0 [ 1343.157363][ T5880] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1343.161001][ T5880] usb 6-1: Product: syz [ 1343.162939][ T5880] usb 6-1: Manufacturer: syz [ 1343.177105][ T5880] usb 6-1: SerialNumber: syz [ 1343.468005][ T73] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1343.737814][ T73] usb 9-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1344.241917][ T73] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1344.410292][ T5880] legousbtower 6-1:14.57: interrupt endpoints not found [ 1344.489472][ T5880] legousbtower 6-1:14.228: get version request failed: -71 [ 1344.500804][ T5880] legousbtower 6-1:14.228: probe with driver legousbtower failed with error -71 [ 1344.583343][ T5880] usb 6-1: USB disconnect, device number 3 [ 1344.764127][ T73] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1344.768262][ T73] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1344.777245][ T73] usb 9-1: config 0 descriptor?? [ 1344.909338][ T880] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7048'. [ 1344.914596][ T884] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7048'. [ 1344.924400][ T880] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7048'. [ 1344.929344][ T884] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7048'. [ 1344.936348][ T880] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7048'. [ 1344.945310][ T884] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7048'. [ 1344.953905][ T880] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7048'. [ 1344.961002][ T884] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7048'. [ 1344.968014][ T880] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7048'. [ 1344.973855][ T884] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7048'. [ 1345.058359][ T887] siw: device registration error -23 [ 1345.120413][ T5880] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1345.138087][ T893] ib_srp: QP creation failed for dev syz0: -2 [ 1345.212438][ T73] playstation 0003:054C:0DF2.013E: unknown main item tag 0x0 [ 1345.246388][ T73] playstation 0003:054C:0DF2.013E: unknown main item tag 0x0 [ 1345.252077][ T73] playstation 0003:054C:0DF2.013E: unknown main item tag 0x0 [ 1345.267062][ T73] playstation 0003:054C:0DF2.013E: unknown main item tag 0x0 [ 1345.270124][ T73] playstation 0003:054C:0DF2.013E: unknown main item tag 0x0 [ 1345.307783][ T73] playstation 0003:054C:0DF2.013E: hidraw1: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.4-1/input0 qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x8f000) [ 1345.448367][ T1124] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 1345.453284][ T1124] ata1: failed to read log page 10h (errno=-5) [ 1345.457427][ T1124] ata1.00: exception Emask 0x1 SAct 0x40000000 SErr 0x0 action 0x0 [ 1345.465253][ T1124] ata1.00: irq_stat 0x41000000 [ 1345.467677][ T1124] ata1.00: failed command: READ FPDMA QUEUED [ 1345.469933][ T1124] ata1.00: cmd 60/78:f0:de:84:03/04:00:00:00:00/40 tag 30 ncq dma 585728 in [ 1345.469933][ T1124] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 1345.476319][ T1124] ata1.00: status: { DRDY } [ 1345.478716][ T1124] ata1.00: error: { ABRT } [ 1345.481420][ T1124] ata1.00: configured for UDMA/100 [ 1345.483662][ T1124] sd 0:0:0:0: [sda] tag#30 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 1345.487882][ T1124] sd 0:0:0:0: [sda] tag#30 Sense Key : Aborted Command [current] [ 1345.490900][ T1124] sd 0:0:0:0: [sda] tag#30 Add. Sense: No additional sense information [ 1345.493543][ T1124] sd 0:0:0:0: [sda] tag#30 CDB: Read(10) 28 00 00 03 84 de 00 04 78 00 [ 1345.496749][ T1124] blk_print_req_error: 10 callbacks suppressed [ 1345.496761][ T1124] I/O error, dev sda, sector 230622 op 0x0:(READ) flags 0x80700 phys_seg 12 prio class 2 [ 1345.498853][ T904] qnx6: unable to read the first superblock [ 1345.504977][ T1124] ata1: EH complete [ 1345.540948][ T73] playstation 0003:054C:0DF2.013E: Failed to retrieve feature with reportID 9: -32 [ 1345.548883][ T73] playstation 0003:054C:0DF2.013E: Failed to retrieve DualSense pairing info: -32 [ 1345.560145][ T73] playstation 0003:054C:0DF2.013E: Failed to get MAC address from DualSense [ 1345.586460][ T73] playstation 0003:054C:0DF2.013E: Failed to create dualsense. [ 1345.617715][ T73] playstation 0003:054C:0DF2.013E: probe with driver playstation failed with error -32 [ 1346.381920][ T899] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 1346.404523][ T916] FAULT_INJECTION: forcing a failure. [ 1346.404523][ T916] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1346.410921][ T916] CPU: 3 UID: 0 PID: 916 Comm: syz.1.7055 Tainted: G L syzkaller #0 PREEMPT(full) [ 1346.410951][ T916] Tainted: [L]=SOFTLOCKUP [ 1346.410958][ T916] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1346.410983][ T916] Call Trace: [ 1346.410991][ T916] [ 1346.410999][ T916] dump_stack_lvl+0x100/0x190 [ 1346.411031][ T916] should_fail_ex.cold+0x5/0xa [ 1346.411052][ T916] _copy_from_iter+0x1f4/0x1690 [ 1346.411086][ T916] ? __pfx__copy_from_iter+0x10/0x10 [ 1346.411110][ T916] ? trace_kmalloc+0xeb/0x110 [ 1346.411136][ T916] ? __kasan_kmalloc+0xaa/0xb0 [ 1346.411163][ T916] ? __kmalloc_noprof+0x343/0x820 [ 1346.411186][ T916] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 1346.411213][ T916] kernfs_fop_write_iter+0x186/0x5f0 [ 1346.411238][ T916] vfs_write+0x6ac/0x1050 [ 1346.411256][ T916] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1346.411280][ T916] ? __pfx_vfs_write+0x10/0x10 [ 1346.411298][ T916] ? find_held_lock+0x2b/0x80 [ 1346.411339][ T916] ksys_write+0x12a/0x250 [ 1346.411361][ T916] ? __pfx_ksys_write+0x10/0x10 [ 1346.411376][ T916] ? ksys_write+0x1ac/0x250 [ 1346.411402][ T916] ? __pfx_ksys_write+0x10/0x10 [ 1346.411423][ T916] __do_fast_syscall_32+0xe7/0x970 [ 1346.411448][ T916] ? lockdep_hardirqs_on+0x78/0x100 [ 1346.411475][ T916] do_fast_syscall_32+0x32/0x70 [ 1346.411498][ T916] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1346.411519][ T916] RIP: 0023:0xf706efec [ 1346.411537][ T916] Code: Unable to access opcode bytes at 0xf706efc2. [ 1346.411545][ T916] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 1346.411563][ T916] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000000 [ 1346.411573][ T916] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 0000000000000000 [ 1346.411582][ T916] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1346.411593][ T916] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1346.411604][ T916] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1346.411630][ T916] [ 1346.626553][ T5819] usb 9-1: USB disconnect, device number 17 [ 1347.263429][ T948] netlink: 'syz.3.7063': attribute type 14 has an invalid length. [ 1347.315645][ T951] netlink: 'syz.3.7063': attribute type 14 has an invalid length. [ 1347.329256][T12914] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1347.334994][T12914] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1347.357113][T12914] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1347.361246][T12914] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1349.141264][T21220] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1350.367119][T22908] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1350.521088][T22908] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1350.531875][ T1035] __nla_validate_parse: 122 callbacks suppressed [ 1350.531898][ T1035] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7078'. [ 1350.537240][T22908] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1350.551716][T22908] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1350.562692][T22908] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1350.565955][ T1035] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7078'. [ 1350.577283][ T1031] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1350.577560][ T1035] tc_dump_action: action bad kind [ 1350.588701][T22908] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1350.942396][T22908] usb 9-1: USB disconnect, device number 18 [ 1351.058833][ T1052] FAULT_INJECTION: forcing a failure. [ 1351.058833][ T1052] name failslab, interval 1, probability 0, space 0, times 0 [ 1351.088126][ T1052] CPU: 1 UID: 0 PID: 1052 Comm: syz.1.7081 Tainted: G L syzkaller #0 PREEMPT(full) [ 1351.088149][ T1052] Tainted: [L]=SOFTLOCKUP [ 1351.088153][ T1052] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1351.088160][ T1052] Call Trace: [ 1351.088164][ T1052] [ 1351.088169][ T1052] dump_stack_lvl+0x100/0x190 [ 1351.088190][ T1052] should_fail_ex.cold+0x5/0xa [ 1351.088205][ T1052] should_failslab+0xc2/0x120 [ 1351.088223][ T1052] __kmalloc_cache_noprof+0x91/0x6c0 [ 1351.088241][ T1052] ? vhost_worker_create+0xf4/0x300 [ 1351.088287][ T1052] vhost_worker_create+0xf4/0x300 [ 1351.088304][ T1052] ? __pfx_vhost_worker_create+0x10/0x10 [ 1351.088323][ T1052] ? vhost_dev_set_owner+0x190/0xa30 [ 1351.088347][ T1052] vhost_dev_set_owner+0x719/0xa30 [ 1351.088375][ T1052] vhost_net_ioctl+0xfa3/0x1910 [ 1351.088399][ T1052] ? do_vfs_ioctl+0x226/0x13e0 [ 1351.088419][ T1052] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 1351.088432][ T1052] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1351.088451][ T1052] ? find_held_lock+0x2b/0x80 [ 1351.088466][ T1052] ? __fget_files+0x215/0x3d0 [ 1351.088477][ T1052] ? hook_file_ioctl_common+0x140/0x440 [ 1351.088496][ T1052] ? __fget_files+0x21f/0x3d0 [ 1351.088508][ T1052] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 1351.088521][ T1052] compat_ptr_ioctl+0x6e/0xa0 [ 1351.088536][ T1052] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 1351.088551][ T1052] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 1351.088569][ T1052] __do_fast_syscall_32+0xe7/0x970 [ 1351.088585][ T1052] ? lockdep_hardirqs_on+0x78/0x100 [ 1351.088600][ T1052] do_fast_syscall_32+0x32/0x70 [ 1351.088614][ T1052] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1351.088629][ T1052] RIP: 0023:0xf706efec [ 1351.088644][ T1052] Code: Unable to access opcode bytes at 0xf706efc2. [ 1351.088649][ T1052] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 1351.088661][ T1052] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000af01 [ 1351.088668][ T1052] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1351.088674][ T1052] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1351.088680][ T1052] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1351.088686][ T1052] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1351.088700][ T1052] [ 1351.225105][ T1054] FAULT_INJECTION: forcing a failure. [ 1351.225105][ T1054] name failslab, interval 1, probability 0, space 0, times 0 [ 1351.230456][ T1054] CPU: 3 UID: 0 PID: 1054 Comm: syz.1.7082 Tainted: G L syzkaller #0 PREEMPT(full) [ 1351.230485][ T1054] Tainted: [L]=SOFTLOCKUP [ 1351.230492][ T1054] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1351.230502][ T1054] Call Trace: [ 1351.230510][ T1054] [ 1351.230518][ T1054] dump_stack_lvl+0x100/0x190 [ 1351.230563][ T1054] should_fail_ex.cold+0x5/0xa [ 1351.230585][ T1054] should_failslab+0xc2/0x120 [ 1351.230610][ T1054] __kmalloc_noprof+0xfc/0x820 [ 1351.230631][ T1054] ? trace_kmem_cache_alloc+0xdd/0x100 [ 1351.230654][ T1054] ? lsm_blob_alloc+0x68/0x90 [ 1351.230685][ T1054] lsm_blob_alloc+0x68/0x90 [ 1351.230711][ T1054] security_sk_alloc+0x2d/0x290 [ 1351.230731][ T1054] sk_prot_alloc+0x1d1/0x2a0 [ 1351.230751][ T1054] sk_alloc+0x36/0xe80 [ 1351.230775][ T1054] unix_create1+0xa6/0x700 [ 1351.230796][ T1054] unix_create+0x11e/0x240 [ 1351.230816][ T1054] __sock_create+0x339/0x860 [ 1351.230839][ T1054] __sys_socketpair+0x1e4/0x5b0 [ 1351.230861][ T1054] ? __pfx___sys_socketpair+0x10/0x10 [ 1351.230885][ T1054] ? ksys_write+0x1ac/0x250 [ 1351.230906][ T1054] __ia32_sys_socketpair+0x95/0x100 [ 1351.230926][ T1054] ? lockdep_hardirqs_on+0x78/0x100 [ 1351.230947][ T1054] __do_fast_syscall_32+0xe7/0x970 [ 1351.230969][ T1054] ? lockdep_hardirqs_on+0x78/0x100 [ 1351.230990][ T1054] do_fast_syscall_32+0x32/0x70 [ 1351.231012][ T1054] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1351.231034][ T1054] RIP: 0023:0xf706efec [ 1351.231055][ T1054] Code: Unable to access opcode bytes at 0xf706efc2. [ 1351.231062][ T1054] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000168 [ 1351.231080][ T1054] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000000002 [ 1351.231090][ T1054] RDX: 0000000000000000 RSI: 0000000080000140 RDI: 0000000000000000 [ 1351.231100][ T1054] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1351.231109][ T1054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1351.231119][ T1054] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1351.231141][ T1054] [ 1351.326841][T23873] svc: failed to register nfsdv3 RPC service (errno 111). [ 1351.359529][T23873] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1351.362944][T23873] failed to unregister tcp with rpcbind [ 1351.365272][T23873] svc: failed to register nfsdv3 RPC service (errno 97). [ 1351.368455][T23873] svc: failed to register nfsaclv3 RPC service (errno 97). [ 1351.403623][T23873] failed to unregister tcp with rpcbind [ 1351.500833][T22908] [ 1351.502060][T22908] ============================================ [ 1351.504882][T22908] WARNING: possible recursive locking detected [ 1351.507221][T22908] syzkaller #0 Tainted: G L [ 1351.510103][T22908] -------------------------------------------- [ 1351.512747][T22908] kworker/3:0/22908 is trying to acquire lock: [ 1351.515363][T22908] ffff88804a740928 (&grp->list_lock){.+.+}-{3:3}, at: snd_seq_deliver_event+0x230/0x860 [ 1351.519220][T22908] [ 1351.519220][T22908] but task is already holding lock: [ 1351.522187][T22908] ffff8880001fa128 (&grp->list_lock){.+.+}-{3:3}, at: snd_seq_deliver_event+0x230/0x860 [ 1351.526250][T22908] [ 1351.526250][T22908] other info that might help us debug this: [ 1351.529521][T22908] Possible unsafe locking scenario: [ 1351.529521][T22908] [ 1351.532632][T22908] CPU0 [ 1351.534068][T22908] ---- [ 1351.535508][T22908] lock(&grp->list_lock); [ 1351.537416][T22908] lock(&grp->list_lock); [ 1351.539354][T22908] [ 1351.539354][T22908] *** DEADLOCK *** [ 1351.539354][T22908] [ 1351.542729][T22908] May be due to missing lock nesting notation [ 1351.542729][T22908] [ 1351.546158][T22908] 3 locks held by kworker/3:0/22908: [ 1351.548395][T22908] #0: ffff88801bcaa940 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 1351.552750][T22908] #1: ffffc9002563fd08 ((work_completion)(&runtime->event_work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 1351.557795][T22908] #2: ffff8880001fa128 (&grp->list_lock){.+.+}-{3:3}, at: snd_seq_deliver_event+0x230/0x860 [ 1351.562012][T22908] [ 1351.562012][T22908] stack backtrace: [ 1351.564317][T22908] CPU: 3 UID: 0 PID: 22908 Comm: kworker/3:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1351.564340][T22908] Tainted: [L]=SOFTLOCKUP [ 1351.564345][T22908] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1351.564357][T22908] Workqueue: events snd_rawmidi_input_event_work [ 1351.564377][T22908] Call Trace: [ 1351.564382][T22908] [ 1351.564389][T22908] dump_stack_lvl+0x100/0x190 [ 1351.564407][T22908] print_deadlock_bug.cold+0xbd/0xca [ 1351.564430][T22908] __lock_acquire+0x1256/0x1a40 [ 1351.564448][T22908] lock_acquire+0x1b9/0x370 [ 1351.564460][T22908] ? snd_seq_deliver_event+0x230/0x860 [ 1351.564476][T22908] ? do_raw_read_unlock+0x3f/0x70 [ 1351.564492][T22908] _raw_read_lock+0x5f/0x70 [ 1351.564507][T22908] ? snd_seq_deliver_event+0x230/0x860 [ 1351.564521][T22908] snd_seq_deliver_event+0x230/0x860 [ 1351.564535][T22908] ? do_raw_spin_lock+0x128/0x260 [ 1351.564551][T22908] ? __pfx_snd_seq_deliver_event+0x10/0x10 [ 1351.564565][T22908] ? mark_held_locks+0x40/0x70 [ 1351.564586][T22908] ? lockdep_hardirqs_on+0x78/0x100 [ 1351.564602][T22908] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1351.564617][T22908] ? client_use_ptr+0x107/0x4b0 [ 1351.564638][T22908] snd_seq_kernel_client_dispatch+0x16f/0x1b0 [ 1351.564654][T22908] queue_broadcast_event.isra.0+0x143/0x1b0 [ 1351.564672][T22908] ? __pfx_queue_broadcast_event.isra.0+0x10/0x10 [ 1351.564689][T22908] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1351.564703][T22908] ? snd_seq_timer_start+0x1f0/0x2a0 [ 1351.564726][T22908] snd_seq_control_queue+0x709/0xb70 [ 1351.564744][T22908] ? __pfx_event_input_timer+0x10/0x10 [ 1351.564764][T22908] __snd_seq_deliver_single_event+0x127/0x1c0 [ 1351.564781][T22908] snd_seq_deliver_single_event+0x31f/0x8c0 [ 1351.564796][T22908] ? __pfx_snd_seq_deliver_single_event+0x10/0x10 [ 1351.564811][T22908] ? __lock_acquire+0x49f/0x1a40 [ 1351.564826][T22908] snd_seq_deliver_event+0x44b/0x860 [ 1351.564839][T22908] ? do_raw_spin_lock+0x128/0x260 [ 1351.564856][T22908] ? __pfx_snd_seq_deliver_event+0x10/0x10 [ 1351.564870][T22908] ? mark_held_locks+0x40/0x70 [ 1351.564890][T22908] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1351.564905][T22908] ? lockdep_hardirqs_on+0x78/0x100 [ 1351.564921][T22908] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1351.564937][T22908] ? client_use_ptr+0x107/0x4b0 [ 1351.564958][T22908] snd_seq_kernel_client_dispatch+0x16f/0x1b0 [ 1351.564974][T22908] send_timer_event.isra.0+0x130/0x190 [ 1351.564988][T22908] ? __pfx_send_timer_event.isra.0+0x10/0x10 [ 1351.565003][T22908] ? lockdep_hardirqs_on+0x78/0x100 [ 1351.565019][T22908] ? snd_seq_queue_timer_set_tempo+0x199/0x510 [ 1351.565038][T22908] snd_seq_oss_timer_start+0x1db/0x320 [ 1351.565053][T22908] ? __pfx_snd_seq_oss_timer_start+0x10/0x10 [ 1351.565068][T22908] ? snd_seq_oss_readq_put_timestamp+0xd1/0x260 [ 1351.565088][T22908] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1351.565103][T22908] ? find_slot+0x166/0x1b0 [ 1351.565121][T22908] snd_seq_oss_midi_input+0x467/0xa30 [ 1351.565140][T22908] ? __pfx_snd_seq_oss_midi_input+0x10/0x10 [ 1351.565169][T22908] ? find_held_lock+0x2b/0x80 [ 1351.565187][T22908] ? snd_seq_port_use_ptr+0x128/0x190 [ 1351.565209][T22908] snd_seq_oss_event_input+0x194/0x250 [ 1351.565225][T22908] ? __pfx_snd_seq_oss_event_input+0x10/0x10 [ 1351.565241][T22908] __snd_seq_deliver_single_event+0x127/0x1c0 [ 1351.565257][T22908] snd_seq_deliver_single_event+0x31f/0x8c0 [ 1351.565273][T22908] ? __pfx_snd_seq_deliver_single_event+0x10/0x10 [ 1351.565288][T22908] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1351.565302][T22908] ? lockdep_hardirqs_on+0x78/0x100 [ 1351.565318][T22908] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1351.565333][T22908] ? snd_seq_timer_get_cur_tick+0x50/0x70 [ 1351.565354][T22908] snd_seq_deliver_event+0x2c1/0x860 [ 1351.565369][T22908] ? __pfx_snd_seq_deliver_event+0x10/0x10 [ 1351.565384][T22908] ? mark_held_locks+0x40/0x70 [ 1351.565405][T22908] ? lockdep_hardirqs_on+0x78/0x100 [ 1351.565421][T22908] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1351.565437][T22908] ? client_use_ptr+0x107/0x4b0 [ 1351.565491][T22908] snd_seq_kernel_client_dispatch+0x16f/0x1b0 [ 1351.565508][T22908] snd_midi_input_event+0x32f/0x470 [ 1351.565530][T22908] ? __pfx_snd_midi_input_event+0x10/0x10 [ 1351.565551][T22908] ? lock_acquire+0x5e/0x370 [ 1351.565564][T22908] ? __pfx_snd_midi_input_event+0x10/0x10 [ 1351.565584][T22908] snd_rawmidi_input_event_work+0x61/0x80 [ 1351.565600][T22908] process_one_work+0xa23/0x1940 [ 1351.565624][T22908] ? __pfx_process_one_work+0x10/0x10 [ 1351.565646][T22908] ? __pfx_snd_rawmidi_input_event_work+0x10/0x10 [ 1351.565663][T22908] worker_thread+0x5ef/0xe50 [ 1351.565686][T22908] ? __pfx_worker_thread+0x10/0x10 [ 1351.565705][T22908] ? kthread+0x13a/0x450 [ 1351.565723][T22908] ? __pfx_worker_thread+0x10/0x10 [ 1351.565742][T22908] kthread+0x370/0x450 [ 1351.565760][T22908] ? __pfx_kthread+0x10/0x10 [ 1351.565778][T22908] ret_from_fork+0x72b/0xd50 [ 1351.565798][T22908] ? __pfx_ret_from_fork+0x10/0x10 [ 1351.565814][T22908] ? __switch_to+0x800/0x10f0 [ 1351.565827][T22908] ? __pfx_kthread+0x10/0x10 [ 1351.565845][T22908] ret_from_fork_asm+0x1a/0x30 [ 1351.565869][T22908] [ 1351.940928][ T1073] rdma_rxe: rxe_newlink: failed to add wg2 [ 1352.042801][ T1075] trusted_key: encrypted_key: insufficient parameters specified [ 1361.148706][ T1432] ieee802154 phy1 wpan1: encryption failed: -22