last executing test programs: 8m22.496174998s ago: executing program 32 (id=186): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000400)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x1, 0x2, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8597, 0x1000, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x2, 0x2e9, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367, 0x0, r6}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) r7 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) bind$bt_hci(r7, &(0x7f00000000c0), 0x6) mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x300000f, 0x12, r7, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000004c0)={[0xd3, 0x1, 0x3, 0xffffffffffffffff, 0x401, 0x7fffffffffffffff, 0x0, 0x82e, 0x0, 0x0, 0x3, 0x6, 0x6, 0xffffffff, 0x3, 0x8], 0xf7e49ffb, 0x2001}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2000000d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 8m14.996110945s ago: executing program 4 (id=274): r0 = syz_open_dev$sndctrl(&(0x7f0000000580), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0xffb) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x40081, 0x0) socket$packet(0x11, 0x3, 0x300) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4038587a, &(0x7f00000002c0)={{0xffffffffffffffff, &(0x7f00000005c0)=',}#})$\x00\xca\xe0\x89}\x8f=4K\xdc\xc5I\x86\xc5|\x0e\x9c\xe3\xcbW\x96\x9c\x18\x1e\xf0\xef\x0e\r\x1e~\xdbI[\xc8\xe2\xea\x97\xe3R\xbf\x89-\x81u\xb7\xef\xd5\xe3\x06\xff\xc6\x9d\xa2\xd8\xb3yQ\x19\xa9\xc7U\x06y\xac\x1d', 0x440400, &(0x7f0000000040)={@align=0xffffffffffff3d89, {0x3a, 0x8, 0x5, 0x8000000000000001}}, 0x2, &(0x7f0000000640)={@_ha_fsid}, &(0x7f0000000140)=0x1fe}, {[0xffffffff, 0x5, 0x12000000, 0x5]}, 0x800000, 0xd3, &(0x7f0000000980)=""/211}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000fffbffff0000000000000000850800005200000085000000500000009500000000000000"], &(0x7f0000000680)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="1d1b00ba8d13cdea2aac8a25ec05", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000440)={r2, 0xfffffc00, 0x1, r2}) sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x48, 0x30, 0x12f, 0x0, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x2}}}}]}]}, 0x48}}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000780)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f3b9996c081b569ef3c41e147ebda1fa5279ad753b10ad1e3f5d4de9041495ca9163e74d0329c7fb81851397e9cf14a2ce86ae6583a27e27c653e70eade", 0x6b}], 0x1}, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a", 0x23}], 0x1}, 0x8000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050000000000000000000600170008000300", @ANYRES32=r8, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050000000000fbdbdf252e00000008000300", @ANYRES32=r8, @ANYRES64=0x0], 0x34}, 0x1, 0x0, 0x0, 0x4044044}, 0x4000000) pselect6(0x40, &(0x7f0000000080)={0x9, 0x7, 0xffff, 0x0, 0x6200000000000000, 0x4, 0x8, 0x7ff}, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x1088, 0x4, 0x5, 0x80, 'syz0\x00', 0x200000}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) 8m13.860335314s ago: executing program 4 (id=280): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8003, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x50) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d000000000000"], 0x0, 0x34}, 0x28) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x8, 0x0) sendfile(r5, r6, 0x0, 0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="03cb9c7292870000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x18, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r3, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) write$vga_arbiter(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="6465636f6465871f6e6f6e6500ef4620374cb4b2a56a989f7a151c3c3cee1a96cefcb063d10348597a09905c747154cc089fd3db7185bb7268d749b52f318935d971225192d6c8bfa8446819353a1830cbc97c193899c85293fc178b408be646aa9c784be5f44f1d2d3e269a757d69f2a3a4286c75127ec43c2edfb548ee474ebee04c9a66398605047109f03cfa145974156aca247046b4cb95c255085a8b5bb9efd6510caa7742dcdfd5b38fc85fa1bd17f8e72656426789d246af98626356efb30a57f1a6b74b1e43672c5a87265c73c21cfe5ed2d7bf552e965e5f7a8ac19cb8a7cd58eb84501b153dc3e80206d00afd590b8d"], 0xd) r7 = socket$kcm(0x2, 0xa, 0x2) signalfd4(r7, &(0x7f0000000000)={[0x7, 0xe428]}, 0x8, 0x80000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r9 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/functions/uac1.usb0/c_srate\x00', 0x1, 0x0) write(r9, &(0x7f0000001400)='48', 0x2) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x60, 0x0, r7, 0x0, 0x0, 0x0, 0x8080}) io_uring_enter(0xffffffffffffffff, 0x2000, 0xfffffffd, 0x9, 0x0, 0xfffffffffffffd5e) lsm_get_self_attr(0x69, &(0x7f00000005c0)={0x0, 0x0, 0xd8, 0xb8, ""/184}, &(0x7f00000006c0)=0xd8, 0x0) r10 = socket$inet_smc(0x2b, 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$ARPT_SO_GET_ENTRIES(r10, 0x0, 0x61, 0x0, &(0x7f0000000080)) ioctl$XFS_IOC_EXCHANGE_RANGE(r0, 0x40285881, &(0x7f0000000440)={r7, 0x0, 0x8, 0x4, 0xb, 0x2}) openat$ipvs(0xffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) 8m13.724269371s ago: executing program 4 (id=283): r0 = socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x5) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x90) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x0, 0x0, &(0x7f0000000440)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000}, 0x94) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000200)={0x0, 0x8}, 0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(0x0, 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x68c81, 0x0) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0xc890) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e21, 0x7, @local, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "5303000000000002", "a9df7ccffde8899f914d4f2c3e263509", "3c36a51c", "6775c975b6b15e11"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "88e99ceb498d1098", "7ef32962359cebbefed62c975b336c95", "b6ec2800", "4caf428000000099"}, 0x28) readv(r4, &(0x7f00000006c0)=[{&(0x7f0000001980)=""/4089, 0x4000}], 0x59) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x10008047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000030601040000000000000000020000050500010007000000483938836ef61e43c8a0cd9f467064ae1da6baf3eb1106fc288a2af8adf476d01025cf09b07ce7bf48ecd6abfff4fc1249e7af1311edc025d8ccf7ce85205aa6e84d513529fae8a3174c984f3b2b2a0baa04acbc382fe89f43292f6ffd6f72e123f829e774bb8de2d17f464332789dcde1a4b2e214585da5aac1ed396916335f4363a8cb9c68e1fbcd8f8d26c8928b607a557066f197bf8942b3fc576cc6655e83e84d52030c2d77de96cac915636f168414"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 8m12.17677651s ago: executing program 4 (id=287): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x18d883, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000009000000dfa2bff372df8cdbeb318ab2bec8fc36903c0ec359caa1af3c914019395cc154010c693709800000000000000016a85adef34bf78c76e6222337923e1bea6ef682cc4375f594425d408ccc58187feb0e3d43347f989007a7c63f6dae2acb4af936461f34a8a32a50bbbb69ec85168947b86df9f2609bf93f7a1be259621818c3c75da31290bce645451b851111dd98ac4d8da9317c2c082020e0b2d634086785f3fe41a3053645cc413790faf7e229c782845b5bb774f7f154263178151ea93ff2cac4b181332c9c9a1c7d85616c8100000000000000d8300d19d585000000fc005774b56a7142047326f940e95b8489e1c5650f5c61299a295f39c88456391cffdef93e29f10f4a11f0cfbfc0ff976b20fef6033495b9b94777db9bb9b678ffc1130000009faa798226a080c01e47151268a02dc1a557cfdcf76305fbf6643df66b1b4d2d5e7bf698fc5a18d984ecb91e6683a5f522d536e2f3c43b89823659d1945258fc668950e5aacfffffffffffffff7f7a266c90e64efc8d8f730867202a9ee94e6a00"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) syz_emit_ethernet(0x5a, &(0x7f00000001c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, "9e00", 0x24, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[@hopopts={0x2, 0x0, '\x00', [@generic={0x2, 0x3, "a350b3"}]}], {{0x4e22, 0x4e20, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x2, 0xfffd, 0x0, 0x3}}}}}}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0x800040, 0x403, 0x8}) close(0x3) r4 = socket$alg(0x26, 0x5, 0x0) getresuid(&(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)=0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000440), 0x200000, &(0x7f0000000600)={[{@volatile}, {@verity_require}, {@redirect_dir_on}, {@uuid_off}, {@metacopy_off}, {@uuid_auto}], [{@smackfsdef={'smackfsdef', 0x3d, 'GPL\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x81}}, {@dont_measure}, {@euid_eq={'euid', 0x3d, r5}}, {@subj_type={'subj_type', 0x3d, '(%!F.}^'}}, {@context={'context', 0x3d, 'root'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}]}) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(aegis128-generic)\x00'}, 0x58) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) r7 = dup2(r1, r2) close_range(r7, 0xffffffffffffffff, 0x0) 8m11.988270567s ago: executing program 4 (id=289): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) lseek(r3, 0x87, 0x2) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000feffffff0600000008000300", @ANYRES32=r2, @ANYBLOB="0800050003f900007716b9590033abb284c70000"], 0x24}, 0x1, 0x0, 0x0, 0x20040801}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x54}}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x37, 0xe, {{{}, {}, @device_b, @device_a, @random="314b6c39e47f"}, 0x0, @default, 0x1, @void, @val={0x1, 0x2, [{0x9}, {0x12}]}, @val={0x3, 0x1, 0x64}, @void, @void, @val={0x5, 0x3, {0x8, 0x9c, 0x45}}, @void, @val={0x2a, 0x1}, @void, @void, @void, @void, @void}}], @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7965}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]]}, 0x74}}, 0x4000080) r4 = syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff00000007058102000200070501020002000705820200020007050202000200070583030a"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/ttyUSB0\x00', 0x2, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) r5 = openat2$dir(0xffffff9c, &(0x7f0000000240)='./dev/ttyUSB0\x00', &(0x7f0000000280)={0x10480, 0x108, 0x14}, 0x18) r6 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x1) fchdir(r7) move_mount(r5, &(0x7f00000002c0)='./dev\x00', r7, &(0x7f0000000300)='./file0\x00', 0x27) syz_usb_control_io(r4, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200000300000000000000000000008500000027000000850000000800000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000640)="61ee1a8f06f017636e6a6d2a6cc9", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) 8m11.985231594s ago: executing program 0 (id=297): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8003, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x50) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x8, 0x0) sendfile(r5, r6, 0x0, 0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="03cb9c7292870000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x18, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r3, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) write$vga_arbiter(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="6465636f6465871f6e6f6e6500ef4620374cb4b2a56a989f7a151c3c3cee1a96cefcb063d10348597a09905c747154cc089fd3db7185bb7268d749b52f318935d971225192d6c8bfa8446819353a1830cbc97c193899c85293fc178b408be646aa9c784be5f44f1d2d3e269a757d69f2a3a4286c75127ec43c2edfb548ee474ebee04c9a66398605047109f03cfa145974156aca247046b4cb95c255085a8b5bb9efd6510caa7742dcdfd5b38fc85fa1bd17f8e72656426789d246af98626356efb30a57f1a6b74b1e43672c5a87265c73c21cfe5ed2d7bf552e965e5f7a8ac19cb8a7cd58eb84501b153dc3e80206d00afd590b8d"], 0xd) r7 = socket$kcm(0x2, 0xa, 0x2) signalfd4(r7, &(0x7f0000000000)={[0x7, 0xe428]}, 0x8, 0x80000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r9 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/functions/uac1.usb0/c_srate\x00', 0x1, 0x0) write(r9, &(0x7f0000001400)='48', 0x2) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x60, 0x0, r7, 0x0, 0x0, 0x0, 0x8080}) io_uring_enter(0xffffffffffffffff, 0x2000, 0xfffffffd, 0x9, 0x0, 0xfffffffffffffd5e) lsm_get_self_attr(0x69, &(0x7f00000005c0)={0x0, 0x0, 0xd8, 0xb8, ""/184}, &(0x7f00000006c0)=0xd8, 0x0) r10 = socket$inet_smc(0x2b, 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$ARPT_SO_GET_ENTRIES(r10, 0x0, 0x61, 0x0, &(0x7f0000000080)) ioctl$XFS_IOC_EXCHANGE_RANGE(r0, 0x40285881, &(0x7f0000000440)={r7, 0x0, 0x8, 0x4, 0xb, 0x2}) openat$ipvs(0xffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) 8m11.907140193s ago: executing program 0 (id=290): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x39, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0xa, 0x4000000, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xc, 0xa, 0x0, 0x5}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00 \x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 8m11.816439006s ago: executing program 4 (id=291): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100001, 0x5, 0x5, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x7000000}, 0x50) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r1) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000340)={'tunl0\x00', &(0x7f0000000280)={'sit0\x00', 0x0, 0x7800, 0x1, 0x9, 0x2, {{0x22, 0x4, 0x1, 0x0, 0x88, 0x66, 0x0, 0x4, 0x0, 0x0, @remote, @broadcast, {[@timestamp_addr={0x44, 0x1c, 0xcb, 0x1, 0xe, [{@empty, 0x101}, {@loopback, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}]}, @timestamp_addr={0x44, 0x54, 0xa1, 0x1, 0x0, [{@local, 0x8000}, {@empty, 0x5}, {@multicast1, 0x5}, {@local, 0x5}, {@multicast2, 0x4}, {@empty, 0xb16}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x10001}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x30e2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80000001}, {@local, 0x8000}]}, @end]}}}}}) syz_usb_disconnect(r1) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x8, 0x10, 0x1, "", [{{0x9, 0x4, 0x0, 0x40, 0x2, 0x7, 0x1, 0x3, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x5, 0x4, 0x1a}}}}}]}}]}}, 0x0) r2 = openat$vhost_vsock(0xffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000440)=0x1) ioctl$EVIOCRMFF(r1, 0x4004550d, 0x0) r3 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'macvlan0\x00', 0x0}) bind$packet(r3, &(0x7f0000000080)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x200080d4}, 0x4c014) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r0, 0x0, 0x0}, 0x20) 8m11.736312085s ago: executing program 33 (id=291): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100001, 0x5, 0x5, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x7000000}, 0x50) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r1) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000340)={'tunl0\x00', &(0x7f0000000280)={'sit0\x00', 0x0, 0x7800, 0x1, 0x9, 0x2, {{0x22, 0x4, 0x1, 0x0, 0x88, 0x66, 0x0, 0x4, 0x0, 0x0, @remote, @broadcast, {[@timestamp_addr={0x44, 0x1c, 0xcb, 0x1, 0xe, [{@empty, 0x101}, {@loopback, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}]}, @timestamp_addr={0x44, 0x54, 0xa1, 0x1, 0x0, [{@local, 0x8000}, {@empty, 0x5}, {@multicast1, 0x5}, {@local, 0x5}, {@multicast2, 0x4}, {@empty, 0xb16}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x10001}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x30e2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80000001}, {@local, 0x8000}]}, @end]}}}}}) syz_usb_disconnect(r1) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x8, 0x10, 0x1, "", [{{0x9, 0x4, 0x0, 0x40, 0x2, 0x7, 0x1, 0x3, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x5, 0x4, 0x1a}}}}}]}}]}}, 0x0) r2 = openat$vhost_vsock(0xffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000440)=0x1) ioctl$EVIOCRMFF(r1, 0x4004550d, 0x0) r3 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'macvlan0\x00', 0x0}) bind$packet(r3, &(0x7f0000000080)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x200080d4}, 0x4c014) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r0, 0x0, 0x0}, 0x20) 8m11.695047846s ago: executing program 0 (id=296): r0 = socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x5) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x90) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x0, 0x0, &(0x7f0000000440)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000}, 0x94) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000200)={0x0, 0x8}, 0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x68c81, 0x0) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0xc890) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e21, 0x7, @local, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "5303000000000002", "a9df7ccffde8899f914d4f2c3e263509", "3c36a51c", "6775c975b6b15e11"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "88e99ceb498d1098", "7ef32962359cebbefed62c975b336c95", "b6ec2800", "4caf428000000099"}, 0x28) readv(r4, &(0x7f00000006c0)=[{&(0x7f0000001980)=""/4089, 0x4000}], 0x59) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x10008047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000030601040000000000000000020000050500010007000000483938836ef61e43c8a0cd9f467064ae1da6baf3eb1106fc288a2af8adf476d01025cf09b07ce7bf48ecd6abfff4fc1249e7af1311edc025d8ccf7ce85205aa6e84d513529fae8a3174c984f3b2b2a0baa04acbc382fe89f43292f6ffd6f72e123f829e774bb8de2d17f464332789dcde1a4b2e214585da5aac1ed396916335f4363a8cb9c68e1fbcd8f8d26c8928b607a557066f197bf8942b3fc576cc6655e83e84d52030c2d77de96cac915636f168414"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 8m10.787025072s ago: executing program 0 (id=302): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socket$inet6(0xa, 0x3, 0x2) r0 = accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x2031, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) userfaultfd(0x801) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x9) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000440), 0x3, 0x2) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x800, 0x4) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) chdir(&(0x7f0000000000)='./bus\x00') r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000f80)=""/4096, 0x1000) r3 = syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x5, 0xffffffff, 0x20000000, 0x3ff, 0x4}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x68}}, 0x4882) ptrace(0x10, r3) prctl$PR_SCHED_CORE(0x41, 0x3, r3, 0x0, 0x0) 8m10.349475333s ago: executing program 0 (id=303): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r0, &(0x7f0000000380)="82ffffffff", 0x18, 0x3b00, 0x0, 0x82ff) 8m9.954405559s ago: executing program 0 (id=305): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000002340)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000010000006000000000000850000006c0000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedc0790701757df37538e486dd63"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0xb5a}, 0x48) 8m9.917650932s ago: executing program 34 (id=305): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000002340)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000010000006000000000000850000006c0000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedc0790701757df37538e486dd63"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0xb5a}, 0x48) 8m5.760397207s ago: executing program 2 (id=317): r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_open_dev$radio(&(0x7f0000002100), 0x2, 0x2) ioctl$int_in(r1, 0x5421, &(0x7f0000000100)=0x6) readv(r1, &(0x7f0000000080)=[{&(0x7f0000002c40)=""/4096, 0x1000}], 0x1) readv(r1, &(0x7f0000000280)=[{&(0x7f0000000000)=""/183, 0xb7}], 0x1) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, r4, 0x8, 0x810, r5, 0x0) r6 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r7, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={0xffffffffffffffff, r7, 0x25, 0x0, @val=@netkit}, 0x1c) mkdir(&(0x7f00000001c0)='./file1\x00', 0xb) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, &(0x7f0000000080)={0x8}) fstat(r8, &(0x7f0000000340)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010000304000040000000000000000000", @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r3, @ANYBLOB], 0x3c}}, 0x8000) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000080)=0x7bd, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) r9 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_STD(r9, 0x40085618, &(0x7f0000000100)=0xff) 8m5.499807994s ago: executing program 2 (id=319): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_DELOBJ={0x1c, 0x14, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x8) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@newsa={0x154, 0x10, 0x633, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x32}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x20, {0x0, 0x0, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x154}}, 0x0) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000010002305fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="4b1b02000000000014001280090001007663616e000000000400028008000a00", @ANYRES32=r4, @ANYBLOB="1b02118f462dd29eb94eb3dcd8a106bf26854f8db3c0afe357c229787b72f6b0efddd24f6dfa9beb84b634fc0295d267fcac45e368e51e19689b1f1f97c626f1648fd052339863b66f94c714b85a54a6fca2a19d4eb8377ce1ef618b61cf1599472da238eb6ee9a13608dcc09d7c32560805a966cf92487229891abaacc6b3355c09a7cd3f0a09acb8d177722f75e043ed8e0b6613ad2ce2332d475a39f2b642ed3514bdc13e"], 0x3c}}, 0x0) 8m5.236901998s ago: executing program 2 (id=320): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000002c0)={0x0, 0x800, 0x1, "80"}, 0x9) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) r2 = openat$sndseq(0xffffff9c, &(0x7f0000000200), 0x8000) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a45320, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0xffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x4, 0x0, 0x80}) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000000)=0x1) syz_usbip_server_init(0x6) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f0000000340)}) mount(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000200)='ext2\x00', 0x21000d, 0x0) 7m53.242800715s ago: executing program 2 (id=328): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socket$inet6(0xa, 0x3, 0x2) r0 = accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x2031, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) userfaultfd(0x801) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x9) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000440), 0x3, 0x2) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x800, 0x4) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) chdir(&(0x7f0000000000)='./bus\x00') r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000f80)=""/4096, 0x1000) r3 = syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x5, 0xffffffff, 0x20000000, 0x3ff, 0x4}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x68}}, 0x4882) ptrace(0x10, r3) prctl$PR_SCHED_CORE(0x41, 0x3, r3, 0x0, 0x0) 7m53.182233394s ago: executing program 2 (id=330): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_stall_count', 0x0, 0xa0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r3, 0x0, 0x0}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/ehci-pci/unbind\x00', 0x1, 0x0) write(r5, &(0x7f0000000240)='0000:00:1d.7', 0xc) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pci/drivers/ehci-pci/bind\x00', 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x0, 0x0}) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) write(r6, &(0x7f00000002c0)='0000:00:1d.7', 0xc) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x129a02, 0x41) sendfile(r7, r0, 0x0, 0x8) 7m53.181943639s ago: executing program 2 (id=331): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x40000000, 0x0, 0x0, 0x0, 0x0, 0x80000100], 0x700, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000feffffff00"/63]}, 0x8f) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x23) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000b00)={0x0, 0x0, "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", "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"}) syz_emit_ethernet(0xbe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0) truncate(&(0x7f0000000180)='./cgroup.cpu/cgroup.procs\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="cd2f8a"], 0x1c}, 0x1, 0x0, 0x0, 0x20000890}, 0x40080) socket$nl_route(0x10, 0x3, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(0x0, 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = openat(0xffffffffffffff9c, 0x0, 0x40, 0x1) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000001c0), 0x50000, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x414980, 0x81) mount(&(0x7f0000000240), &(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='ufs\x00', 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r6, r6, 0x0, 0x200000) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x8, 0x3, 0x759400, 0xe3, 0x260, r5, 0x5, '\x00', r2, r3, 0x0, 0x5, 0x5}, 0x50) sendfile(r0, r7, 0x0, 0x0) 7m53.181755854s ago: executing program 35 (id=331): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x40000000, 0x0, 0x0, 0x0, 0x0, 0x80000100], 0x700, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000feffffff00"/63]}, 0x8f) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x23) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000b00)={0x0, 0x0, "0d096821d7bcfa3bf2e727fa1f7c02d86b58dbfa4ec8d04995a4850b47b4f48b4ef5a6c428bba593e707dde45be12593934078a1858f9b3eb78dfb6c37525fd31934df1dd31382824c025b07444a49d857c17f187a0866bf77ef4e0a488bb775087dc5ab1299ac44da8e8fc483a4a2ccc15df85b160429977a125c81d0225013d94f6d567cd2d25059cf7bf9c96973bb14bffc39debb3dd1921197f32e55bdb872d96b4f29ed2156023d0883c5aac00eb525d8121f82c4d35f6dcce9dcc1dc77ec26b20754b4958acab1c00d2d31f999e019fb945419002b5e343d4db97293c0f0185b51dc6b7edb06ddf405282fdb2cc4bfbe4d2f8d7d5f71c39817ab70fb86", "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"}) syz_emit_ethernet(0xbe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0) truncate(&(0x7f0000000180)='./cgroup.cpu/cgroup.procs\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="cd2f8a"], 0x1c}, 0x1, 0x0, 0x0, 0x20000890}, 0x40080) socket$nl_route(0x10, 0x3, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(0x0, 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = openat(0xffffffffffffff9c, 0x0, 0x40, 0x1) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000001c0), 0x50000, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x414980, 0x81) mount(&(0x7f0000000240), &(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='ufs\x00', 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r6, r6, 0x0, 0x200000) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x8, 0x3, 0x759400, 0xe3, 0x260, r5, 0x5, '\x00', r2, r3, 0x0, 0x5, 0x5}, 0x50) sendfile(r0, r7, 0x0, 0x0) 6m58.645338764s ago: executing program 1 (id=562): syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0xa0402) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1c0) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) connect$l2tp6(r0, 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) splice(r2, 0x0, r1, 0x0, 0xfea5, 0xa) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x2}}, './dev/ttyUSB0\x00'}) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0xd35, 0x7263f2c2, 0x2) syz_usb_connect(0x0, 0x47, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040cd0607010001010203010902350001010080fa0904000005ff00000007058102400001070501024000010705830240000107050302"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/ttyUSB0\x00', 0x2, 0x0) syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x2) 6m55.406426114s ago: executing program 1 (id=586): connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x20000000) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x1a1300) poll(&(0x7f0000002100)=[{r0, 0x688}], 0x1, 0x6) r1 = getpid() sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setaffinity(r1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r3, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) shutdown(r3, 0x1) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x40000000, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) 6m55.355655378s ago: executing program 1 (id=587): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x4, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x15}}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) ioctl$BTRFS_IOC_SNAP_DESTROY(r4, 0x40305828, &(0x7f0000000200)={{r0}, "94365e3897f9956a1f4a25101206b90155ada6bcd510f70d5223c2a6c22b8c3b2c625efa5f9ca0da7c0cee3f4d5dcb666aaaef502967f72000938911603036cf35b4510deeac535808a6acca63eb0dce3ca160d3bd6ffb1651c26b8001022aeb2330375e078f81dfa0e663c9992663cf951edd5b2e9591de5e29c1b35d7c8a222ec0fee83e64ff2a8853ed73a0ecde4ae8598ef39c2dac74471cb718df387927cd58827e3ce5cf57dcdf69a29c36ec845106a59f29c840446b2ad9aea0763b12f605e938d6682b804c183af35dbec08ad98f2ef75fdd7e270b83d9a1ee0ff884e54ea2ce610df936c1db1bbfe001c4679b27f816d6abd05d0fe83cc4f7b2d80a97c2d0713016243cfe954da350ccdaffbc90ede40b4dd3e0cda49e98ec645418cffeb60f9d3273a98ff58565a26d0218f3dc41cc3ad3f2e3cd7fbf7175ab3a7081b4289f7aba01ccf8f8109b0f1bc382818c2e06338084f5f27b649fe7dd82e810c4f0dff03ed54f968238ab1bd171eedf96698615483fc8c9fa5b4a334b497d6f4dfb83a5b9047a14897c61b153739596d7884035c976b294ab6e72c8cbd41453af7f34172b84492fe6f6d2c12865ebcfeb8748d8c26c30e2ad88f2908ffa60baffbde4b2a2b4c50c0aa07b1595d6a8d44855bbbaf145ab47cf61c4bdd0507f04f9e100dec3469dbcfd2fca530d776f0baa1e56c5bf0bee12e4f53ac328bc82f76385bd68ab1274866cbebb7a66406dfba6332b610c12fea8ae305eae869c624f218b9f8754e25f531e05c942b8ae7af16cf41b4a4740fa38b48d30473da57e6f648705b9f7caa21aa542f6f1cb32f09e302451b1aeb149abc94e89ac3c3c57b8dfc4c600c9eaa440188b77a6a0dfd795b781c6f0e74c28735829fad6a70d9e513d91c922b523bcd4b839a9a8ffb2b3275e9d24ea9dda040e9e9bdc92e722a94ae7e476ec88217f584176d15dd59910b6b4823ca31342d50c9a67f8d5eb14891c064a8fd85aa20d1646762219f45f907e975bec7a448113efcdbdfdf7a0b80569d231931fba1cceff354302b09c1b38d892ec7e2e8b388dba73160f03cc3545c78d285a3b9516e8cd7b879170b0ac0e889d03af85a8ef7e9e5f1b5f31b6783772e5df09938d8c5e16e3a18e1d6e1075f27e18eb7c057bede22dbff3d83b3c94c9943b5529447d02d553736d310ba441a6687a5eb08a54d98b566a3aa9cad5cab36ea15468d6eab0def96c9f56863cf8e8a6c3d013d3a9b748dfb078dbfab9aed64cc71ef86490db1df8becc68d9c0017a9209cb9c1599f13b9429af54e26f346850fe17deeb69d2fc1e39abf75669a43679ed18f6717e14fbbde15eaedfbeaad4a794737b7963d858444582ca46daf320868c5fd818226b077290aa6e6271cedd791a00a57ebe959c6b2f6e516b364edcf113665d966cb17a6da70bcd85b06fe758c704a9b2d46774b146d83769b804304fd6011ca8c5f995566e18216b10660d4682b5523a6efb883fdb30f5085f4d80c8a099fbd939d42e78a85f5e6dee146fd37ef7aec3a337eb12f7120150aa483fe7ea0015353390e7cb8e3795ee8d9ca52c25e309c2ffda454a12e4a0e937d070e69903607ad4925e0e581a25f2e98c1a73454a24f532fdd54da9f3318a74ab1bcb681166395fc88faa2905090d582f650197c3c266b8b3967e8b1b7b87d30d648ca1b0c59035159c4ba8e6e733ad2283fb3fede1e015bf2c873487ff8eb75461556d855ac7a1d631813f1c29d7e42b31b24faf15fbd4f724411b38a92016992d7a9e059e7f82cc333747c15674158035c168ffef7f16c4f3f13f04e0679567236a956b18ec88e102dba91bc34cf3d40a7bdeae5bbeb5dc400c79870c80fb8ffe6832fcfad34d5dc9453dd3d1ad0dc81fb15cc05318a83909717a58fb79a5c6a75c52ad82e7505eab0221fbdf369572d5674126962c1d010c6e5cfee741fc1639a8dcaa8cf9409d3a60a9449b1821aab650f02d90edd9eb76ff9c75893668db0b325fc2509fe3152a9541812e6e1e3e3f56219256e43b351c03175a10ae4fff97e05f484e1740430a01b834e65051867b06e00a86b040130e08eaff6c242c96c947cb52c18a985d9edd000f82b83c8ea0287466e9eba3bfcfef4ea7f5ead95fbe3b7decc4aeec108c4df1701b19547ee92c927df007527eeb6de23f17c0184bf923d95e716d941181d44feee49e116a0eb8dd11e47bc5e125475e73629e3f135a96dab6c77e2abc4ed0b7e7e97e4fd8081969d87bb869e9c9f8b48e3e07fceaba3317ba56bfc923a6b17d48deace88d1f6e61fc60574ec50ff1da5965973ac6c1ac695ece5b26b3577a867e69f7a70a5cbb5e2fe5faf5c9dd15919f4cfa65a17256e9ec07cac107631e5ffbe2774bd7af8a2a0e85f4d7cf2722a842d2d9b65e25295736c789742300aa3aac499e4af42cbcc3690a4df1868d1de6581e1d21c26d140941845b439e22662310f156b046090e92ef48f3886eab47d1319af7645859093adaa049b43369f8f457b54e193f6156ff40537c62838e17696cf7ef26b90b8bdc580d251ceec99453ca72c5e29c463910bb3f862dc199b65c4e7c9cf372c07b3e38d98652f6626564884b47c970c5aa45efb29b754efe6a09600700187d53a71e0758fd859d2110b90a02538832ab223206396d84bc14e6b55eb073130cf7b5d979e8e83950a1b80c9ea5586c4441a05bc41d843866c0d10193fe6486a6738fb858033257be0e1ae8624d5ac38553cf163c04af03cb78dd775b75883ef2330237adf5d65282d1491d8779674b8cc56750ed63e58a80915ca921ee46b4849d08674f624beb2be7376181713fc8d7125e429a2e5d46b99ebfdbac465a32bb7868d0e28f2c08b203edc9009fb935a3ae7a9b90bedc7ed03680530505044db11fc19e4d5794c06d84474c4fbd4975a1bfec9563094d392bf7b493c0ef9e5babe3128cd246d7e4cc9e99c5de07b92a949b34e228237c4521e6b10c5a7224a687ab43970a9e9eab029cefda25795c7f02a9e6240f0fab7c710a0450d1ca1b9f81558581a474ce7f069164d49afdc1de21c5d5c6bef4adc95e98ff2b6f3ce46bc7db1b5622424741863777b8eb114e3c8fbfdc6733116c1b20b6c3a8276a49447db86b896dfccdd2aa7cf62555075e155d6194fe9705449b6273aba2831eb32d0d382ec61f498998e2fa18da12199550113ffb374c495714c84178d6ad7cd7e13b2efc4a4964f064a9d8febbbe239231e245a37756d766fb30d5ab309bda56175bcd05b1631a33ff7e7b712d9ca44ff9796de22aa99a491a4e8a6a9f6a6dde0ce3b6c82d1abf4cec5c911ac48517a0e565ba7501d4c5ce458f1470ca5fd56b11839dd50f8271d7afaf1adb08c2a88c6307ddaa83ea8701213a1a065cd214a0158a8e863f31342b9946055ecfc397adb7e6bb6641c02aa28f18bcedb25036f0349e9d030d9f4547a42cc4fc8876b605553171210b09beb8963ff040d8c0ec2acb9036dde4c03197093d3170cdab7af27bf0a0eb72c3db808ae7903254d5c91b6b0d123b0ee6803e943d1a804948db8bf86fad93f3e3a381ef59b3fcabd977a03cc3a0f8543b7ea11523e229db23073f5c350a45394ef967bbdd8750593147618565e47d506c2c2ae8cd79f232a90325e2dcc21df21448a5b390db24931be258d39782d5318cf485740185ecec11aa35b61f41f9625c7805058a1c6dc60bdf495b5ece8b589101ce81497dde706a190b0ebffd3966ce5eefa8e6306de10ec7f63d82c87cf8db7f486fa6816656191b8a42d47624ea487f6e5790fa991fbe62f3599bf8473887980e6e2eb182ccba0a6084d0d37f2c311b8a688addd157fa9b5c8d0174092caaa76aba332fca66521c6b2c75765bedf36bad081442824198c71a74d176218fe7915a861b4b64cc5197a73d30e2d8f90393499d2d3d46ef852d4752d48b04b5352be40726d16ce8bd27b430fb9f082c65a79ac2cbe68b50456d4cbc15a094b3351bcc1138d3ada5608f5dbfe6fae21455b0c88c5c791c75515c31331b0b883c3c9de187aea9b637acb1336a1392ba227be4094eb57a5c9a68e88c71e51b8b42c74cddafde88d82bea9d102ba10145e12ff7fdfe56f4ad794ac03066dbc5ae9c80015d6d23575d09855dc16faa64f22592249996f91021d1c3f8286df99da43ea9946bcbe8abbe1e365e47591310fa1bfe56de9e829e7ce2a1251be421a5e3029d08cb3a8265e693ff86fe646bacf8f4b3abc9a4d5398b9d7af332f5bafbb58c211f05f30e731145d9457e002f37b7e2b98920724209feb50341cc46da34f0783e4a3776612ac5bda58b8278c3f5960d74eec223f867a92cd4e7f34467d984c85dfdb1d8f43bb437cb37e93c5c0113578eb5a6b3a26a28826f7cfa6ad22109c994934506a6dcc36451dc55a0e1affe6cdfbd8d3a3baa558fae4dedf60a0ce7f5a11cf92d31df5580a1a745c17b2a54d93c2f07ba362ee209734b2276101e52b20e59e0ca784927567d70a30c28f9b8c3e525b5ee4848ea79ecde3158f180967f1a18999a1ce6fd327cf9ae47aff20000b6af9af6e75571cafd7fbaa5279e698b1dccd7271b600fe6fbad34dbe25b0bb1608db1b16aef46f45bf5c3812ce7a4d473fb1a6f263b8fa4b80535076cdee6fd0c907696eea792d0a7cc9e19f876703f7ac8f84e24c4d5b8bf64c59c1a5a602193c9b3c2543281bf58021984edcc2241b5dea9f552c3cdfc493f1468bac2c677340b05c61a767d4cfee5acbab27e90fae8e83cc1fe0737791a17b92a4dab1b0c5dde317243eccc4991982f292be5653498c4c5b40ba79312b7627de99613384d9c3bdec513bc2f9bedee645b620fde89f50841408ee3d44398d00b0971f233a762d7e63c4495bf79b3aea4bf18b136f460c6ad6397fe7f972b1f4845ebaba2116323674f157880651b086a94623a35c74d935e787fc0815b670eab5ca66d8098831acb2e1cc9da5aa72b1310a090f78cb3befad409c8f9cc521c656ee61f0c37f90c921480470d539ce0732fa4101c8f92775c5e41adc6c92fee25b12af2926e9559677beda0a777dedb48e741fd5dfd2a5f0335273ac6814657668430e6c0d5ed7e827e2fde6048ef7b35ce63704fe89739ff14392cbb57917de6dbf26a604a84095b7fcafdbc3bbae65d945f3e235a569554929d08aa71d41411f21fc2f3d9235ae7bd1cb5d467faaaa6e4c31adc964a4e14d301c7f3fbd3d72bc15c75676c3f9bbbe3aab66643bf923bdd2b7abbc83ba8dd8c1907f91056084e856e171e16b1ee01e80eec8e2de418165351d2a1432e5d50982e6af8220d60c9e6beb61471f7554e95a761c9f4a78a84bb7bf81f8ef263e54377441f57cb4b383c0a5853dcb168ac431df441e6aa837457ef7c9f265092a7aefa7d7a894d4b282221a411d33f2c6d44b4b377c348ea934d50937eaf3a6d8183dcfc87a22413b62a424dafbd8bdb116e256e2e21770ad8936bd5ba34d108eea8babf82194e2582a1ac4a6d5b790dcfedbccbfd62232f97de5262a9db137c587f44a0b57c9f808278efbf5fb7240957a9c51ec80273ed98febf4103a8b7cc503a80eab21da70e1260a6899210a150142f497f13f2e07f91de40ed6f50557c5dbaeae230805a79bd8888478618a66c1a2079e5508ba98532796bd34bb6da76a30d90a2ff458f6102ac678a203d7f0d2264545e05e61072bc2bf69d400a7a3895dd787ba461c4b294f6aeafa08265d8a029d937bdd2066f0a50ed404db4a35ecc4342"}) socket$inet_mptcp(0x2, 0x1, 0x106) write$FUSE_WRITE(r4, 0x0, 0x0) 6m52.217896668s ago: executing program 1 (id=603): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)=""/215, 0xd7}], 0x1, &(0x7f0000002540)=[{&(0x7f00000021c0)=""/233, 0xe9}], 0x1, 0x0) syz_clone3(&(0x7f0000002880)={0x400, &(0x7f0000001680), &(0x7f00000016c0)=0x0, &(0x7f0000001700), {0x2f}, &(0x7f0000001740)=""/196, 0xc4, &(0x7f0000001840)=""/4096, &(0x7f0000002840)=[0x0], 0x1}, 0x58) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000002900)=0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000040)) read$FUSE(0xffffffffffffffff, &(0x7f0000002940)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r6 = getpgid(0xffffffffffffffff) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000004980)={0x5, 0x7f, {0x0}, {}, 0xfffffffc, 0x4}) r8 = fcntl$getown(r0, 0x9) r9 = syz_clone(0x118912000, &(0x7f0000000380)="c42e26e9835654b7bad4ed1eb3b1a6f800330705353eaaf39a8e31c12a6bc92e5c5504edee201134f17074629d66bdeee23d16281806b640b69209fcbbef461a6f8cc8eaf9e88e3f6a024fc7615df99a9b730eca6c5e38d5946050d87a", 0x5d, &(0x7f0000004a40), &(0x7f0000000440), &(0x7f0000004a80)="9c8a52dddc2d3d6ee588de735f144dc5b4187004158a2368939b42afb61dd8a6027d0f1c6aa5aab14c35fa9718775ccc675f80009f1bee46f08e8382e8b9fe0e07bcd4094b99f4e4fc10462ff30a9eaecf049d2afaf85c681e535771cb2542dda0248734fa23817f8da0d0f6d002627e3f565eafaf87b18df1a7860058560d6dc65b699dfc443c913887dcc3133f44827ecd44b318cc0e9629fb3643ff8e9245f260c66f37e7d87b89fb2f") r10 = openat$cgroup_root(0xffffff9c, &(0x7f0000004bc0)='./cgroup.net/syz0\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000004c00)={0x80200, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f00000002c0), {0x12}, &(0x7f00000005c0)=""/4096, 0x1000, &(0x7f00000015c0)=""/132, &(0x7f0000004b80)=[r1, r2, r3, r4, r5, r6, r7, 0xffffffffffffffff, r8, r9], 0xa, {r10}}, 0x58) r11 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x5, 0x50}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0, 0x0) r14 = io_uring_register$IORING_REGISTER_PERSONALITY(r11, 0x9, 0x0, 0x0) syz_io_uring_submit(r12, r13, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x4d2c11947fe9151f, {0x0, r14}}) r15 = mmap$IORING_OFF_SQ_RING(0x0, 0x4, 0x2000003, 0x10, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) r16 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x48800, 0x1c1) ioctl$AUTOFS_IOC_ASKUMOUNT(r16, 0x80049370, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r12, r15, 0x0, &(0x7f0000000300)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000400)={0x3a102, 0x106, 0x10}, &(0x7f00000049c0)='./file0\x00', 0x18, 0x0, 0x23456}) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x4) r17 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000100)={'gre0\x00', 0x0, 0x40, 0x40, 0x0, 0x5, {{0x28, 0x4, 0x3, 0x3, 0xa0, 0x65, 0x0, 0x4, 0x2f, 0x0, @empty, @rand_addr=0x64010102, {[@generic={0x0, 0xe, "9e13537a2bd1eb8335e77ace"}, @timestamp={0x44, 0x8, 0xb2, 0x0, 0x1, [0x3]}, @ssrr={0x89, 0x2b, 0xe, [@multicast1, @multicast2, @multicast2, @private=0xa010101, @remote, @broadcast, @loopback, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102]}, @rr={0x7, 0x7, 0x69, [@broadcast]}, @timestamp_addr={0x44, 0x44, 0xeb, 0x1, 0x5, [{@rand_addr=0x64010101, 0x4}, {@local}, {@dev={0xac, 0x14, 0x14, 0x16}, 0x6}, {@rand_addr=0x64010100, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@local, 0xfffffff8}, {@empty, 0x9}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x3}]}]}}}}}) sendmsg$nl_route(r17, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @gre={{0x8}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_TTL={0x5, 0x8, 0x9}, @IFLA_GRE_LINK={0x8, 0x1, r18}, @IFLA_GRE_TOS={0x5, 0x9, 0x80}, @IFLA_GRE_FWMARK={0x8, 0x14, 0xfb7d}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xae115}]}}}]}, 0x58}, 0x1, 0xba01}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 6m51.906649254s ago: executing program 1 (id=606): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) mount(&(0x7f0000000180)=@sg0, &(0x7f0000000240)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', &(0x7f0000000280)='openpromfs\x00', 0x123008, 0x0) mkdir(&(0x7f0000000a00)='./debug\x00', 0x1b9) mount(0x0, &(0x7f0000000c00)='./debug\x00', 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x129a02, 0x5) sendfile(r1, r0, &(0x7f00000001c0)=0x1, 0x8) openat(r0, &(0x7f0000000140)='./debug\x00', 0x32da01, 0x1b7) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e1c, 0x3, 'wrr\x00', 0x5, 0x80, 0x1b}, 0x2c) r3 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @remote}, 0x80, 0x0, 0xb00, &(0x7f0000000000)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}, 0x40004) 6m51.784487694s ago: executing program 1 (id=609): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000002c0)={0x0, 0x800, 0x1, "80"}, 0x9) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) r2 = openat$sndseq(0xffffff9c, &(0x7f0000000200), 0x8000) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a45320, &(0x7f0000000340)={{0x7, 0x2}, 'port1\x00', 0x12c, 0x31044, 0x7f, 0xb, 0x4, 0xfffffeff, 0x100005, 0x0, 0x5, 0x8}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0xffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000000)=0x1) syz_usbip_server_init(0x6) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f0000000340)}) mount(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000200)='ext2\x00', 0x21000d, 0x0) 6m36.098383156s ago: executing program 36 (id=609): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000002c0)={0x0, 0x800, 0x1, "80"}, 0x9) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) r2 = openat$sndseq(0xffffff9c, &(0x7f0000000200), 0x8000) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a45320, &(0x7f0000000340)={{0x7, 0x2}, 'port1\x00', 0x12c, 0x31044, 0x7f, 0xb, 0x4, 0xfffffeff, 0x100005, 0x0, 0x5, 0x8}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0xffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000000)=0x1) syz_usbip_server_init(0x6) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f0000000340)}) mount(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000200)='ext2\x00', 0x21000d, 0x0) 50.566615385s ago: executing program 7 (id=2174): mkdirat(0xffffffffffffff9c, 0x0, 0x1c1) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/f/dwFrameInterval\x00', 0x1, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r0, 0x4) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs2\x00', 0x0, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB='max=00000000000000000000004,max=00000', @ANYRESDEC=0x0]) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r5, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 49.342752581s ago: executing program 7 (id=2181): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x102, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x259, 0x0, 0x8}]}) r4 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r4, 0x65, 0x6, &(0x7f0000000000), &(0x7f0000000080)=0x4) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000000c0)={@local, @local, 0x0, 0x4, [@dev={0xac, 0x14, 0x14, 0x38}, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}, 0x20) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000e06010800000000000000000a000000"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000100)={0x80800000, 0x80000, r0}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, 0x0, 0x0) madvise(&(0x7f0000529000/0x2000)=nil, 0x2000, 0x16) r7 = syz_open_procfs(0x0, &(0x7f0000000480)='pagemap\x00') preadv(r7, &(0x7f0000000640)=[{&(0x7f0000000b00)=""/152, 0x98}, {&(0x7f0000000500)=""/189, 0x7fffef68}], 0x2, 0x300100, 0x0) ioctl$KVM_GET_FPU(r5, 0x81a0ae8c, &(0x7f0000000140)) 48.669214776s ago: executing program 8 (id=2185): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) socket$can_j1939(0x1d, 0x2, 0x7) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1f}}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x44004) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'ip_vti0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000006800e97802000000000000000a0000000000000008000500", @ANYRES32=r2], 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xffffffff, 0xc3ffffff, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) 48.45615905s ago: executing program 7 (id=2188): prctl$PR_SCHED_CORE(0x41, 0x3, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='my_sys\x00', 0x15) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000002c0)=0x7e) syz_emit_ethernet(0x76, &(0x7f0000000880)={@link_local, @random="0000fc00", @val={@val={0x88a8, 0x3}, {0x8100, 0x3, 0x0, 0x1}}, {@ipv4={0x800, @gre={{0x7, 0x4, 0x1, 0x6, 0x60, 0x64, 0x0, 0x4, 0x2f, 0x0, @multicast1, @multicast1, {[@cipso={0x86, 0x6, 0xffffffffffffffff}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x2}, {0x0, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x3, {{0x3, 0x1, 0xe2, 0x0, 0x1, 0x1, 0x1, 0x8}, 0x1, {0x4}}}, {0x8, 0x22eb, 0x4, {{0xf, 0x2, 0x2, 0x3, 0x0, 0x0, 0x6}, 0x2, {0x9c, 0xbd, 0x0, 0x19, 0x1, 0x1, 0x3, 0x0, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) lseek(0xffffffffffffffff, 0x101, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000004c6fc9ce7cdb06010800"/24], 0x1c}}, 0x0) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x8) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000103000000004800000001"], 0x114}], 0x1}, 0x24044010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=@ipv4_newroute={0x38, 0x18, 0x1, 0x70bd2d, 0x0, {0x2, 0x10, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_TYPE={0x5, 0x2, 0x81}}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040004}, 0x54) socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r3, 0x0) mmap(&(0x7f0000839000/0x4000)=nil, 0x4000, 0x1000001, 0x4000010, 0xffffffffffffffff, 0x0) 48.45542252s ago: executing program 8 (id=2189): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) writev(0xffffffffffffffff, &(0x7f0000000080), 0x0) syz_emit_ethernet(0x6c, &(0x7f0000000400)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb08004500005e0000000000019078ac1e0001ac1414aa0400907800000000409700070067fffd03020000ac1414aa0a010101440416609404000044128d01b1fc6291cfc6e89633504a929e9e890febac1414bbac1414bbac14142d0000006616"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, 0x0, 0xc810) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x800) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000800) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$netlink(0x10, 0x3, 0x10) mkdir(&(0x7f0000000440)='./file1\x00', 0x89) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000900, 0x0, &(0x7f00000000c0)={0xe, 0x0, 0x80000000, 0x0, 0x0, 0x6, 0x0, 0x3ff, 0x10}) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x100, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r6, 0x0, 0x0, 0x40) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r7, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000a00)=ANY=[@ANYRESDEC=r1], 0x0) 48.204946464s ago: executing program 7 (id=2190): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000080), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x221408a, 0x0) chdir(&(0x7f0000000100)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x14, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c000", 0x0, 0x86, 0x0, 0x28, 0x0, &(0x7f00000001c0)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bc", 0x0}, 0x4c) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) mkdir(&(0x7f0000000040)='./mnt\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='sysfs\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='/dev/loop0,', 0xb) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 47.596686887s ago: executing program 7 (id=2192): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xff7fffff, 0x7, &(0x7f0000006680)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) socket(0x28, 0x5, 0x0) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0x6d1, 0x0, 0x0, 0x1000, 0x5}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(r2, r8, &(0x7f0000000540)={0x0, 0x1aa5, 0x80, 0x2, 0x20000}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x1, 0x0, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x200, 0x1, 0x69, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5810, 0x800, 0x10000, 0x400000}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6253, 0x10, 0x3, 0x4, 0x0, r3}}], 0x1, &(0x7f00000003c0)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r7, '\x00', {0x0, 0xdbd, 0x0, 0x0}}, 0x0) (fail_nth: 13) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, 0x94) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c) 47.19511675s ago: executing program 7 (id=2194): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) lseek(r3, 0x87, 0x2) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20040801}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x54}}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x37, 0xe, {{{}, {}, @device_b, @device_a, @random="314b6c39e47f"}, 0x0, @default, 0x1, @void, @val={0x1, 0x2, [{0x9}, {0x12}]}, @val={0x3, 0x1, 0x64}, @void, @void, @val={0x5, 0x3, {0x8, 0x9c, 0x45}}, @void, @val={0x2a, 0x1}, @void, @void, @void, @void, @void}}], @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7965}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]]}, 0x74}}, 0x4000080) r4 = syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff00000007058102000200070501020002000705820200020007050202000200070583030a"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/ttyUSB0\x00', 0x2, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) r5 = openat2$dir(0xffffff9c, &(0x7f0000000240)='./dev/ttyUSB0\x00', &(0x7f0000000280)={0x10480, 0x108, 0x14}, 0x18) r6 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x1) fchdir(r7) move_mount(r5, &(0x7f00000002c0)='./dev\x00', r7, &(0x7f0000000300)='./file0\x00', 0x27) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200000300000000000000000000008500000027000000850000000800000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000640)="61ee1a8f06f017636e6a6d2a6cc9", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) 47.153502086s ago: executing program 37 (id=2194): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) lseek(r3, 0x87, 0x2) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20040801}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x54}}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x37, 0xe, {{{}, {}, @device_b, @device_a, @random="314b6c39e47f"}, 0x0, @default, 0x1, @void, @val={0x1, 0x2, [{0x9}, {0x12}]}, @val={0x3, 0x1, 0x64}, @void, @void, @val={0x5, 0x3, {0x8, 0x9c, 0x45}}, @void, @val={0x2a, 0x1}, @void, @void, @void, @void, @void}}], @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7965}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]]}, 0x74}}, 0x4000080) r4 = syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff00000007058102000200070501020002000705820200020007050202000200070583030a"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/ttyUSB0\x00', 0x2, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) r5 = openat2$dir(0xffffff9c, &(0x7f0000000240)='./dev/ttyUSB0\x00', &(0x7f0000000280)={0x10480, 0x108, 0x14}, 0x18) r6 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x1) fchdir(r7) move_mount(r5, &(0x7f00000002c0)='./dev\x00', r7, &(0x7f0000000300)='./file0\x00', 0x27) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200000300000000000000000000008500000027000000850000000800000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000640)="61ee1a8f06f017636e6a6d2a6cc9", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) 45.801096495s ago: executing program 8 (id=2199): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {0x0, 0xb}, {0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x7}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3243aa52}}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x240048e4}, 0x20000010) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) 45.552783377s ago: executing program 8 (id=2201): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) fsetxattr(r0, &(0x7f0000000480)=@known='user.incfs.metadata\x00', 0x0, 0x0, 0x0) flistxattr(r0, &(0x7f00000001c0)=""/3, 0x3) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@empty, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@initdev}}, &(0x7f0000000380)=0xe4) quotactl$Q_GETFMT(0xffffffff80000402, &(0x7f0000000000)=@sr0, r2, &(0x7f0000000440)) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) fsopen(&(0x7f0000000040)='afs\x00', 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340), 0x0, 0xb0, &(0x7f0000000380), 0x0, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x881, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000300000000000000010000001801000020756c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009002000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r5, r7, 0x25, 0x0, @val=@iter={0x0}}, 0x18) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x1}, 0x50) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc01c5868, &(0x7f0000000900)={r0, &(0x7f0000000800)='\xdb,,\x00', 0x400000, &(0x7f0000000840)={@align=0x3513, {0x400, 0x6, 0x9, 0x8001}}, 0x101, &(0x7f0000000880), &(0x7f00000008c0)=0x2}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000940)={{0x1, 0x1, 0x18, r0, {0x1}}, './bus\x00'}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a00)={{0x1, 0xffffffffffffffff}, &(0x7f0000000980), &(0x7f00000009c0)='%pK \x00'}, 0x1c) r12 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') preadv(r12, &(0x7f00000014c0)=[{&(0x7f0000002140)=""/4096, 0x1000}], 0x1, 0x0, 0x0) r13 = syz_open_dev$vcsu(&(0x7f0000000a40), 0x100, 0x200001) r14 = signalfd4(0xffffffffffffffff, &(0x7f0000000a80)={[0x5, 0x245c1909]}, 0x8, 0x800) r15 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000ac0)={0xffffffffffffffff, 0x6, 0x18}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0xc, 0x1a, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000005000000000000000100008018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085000000c70000001861a8f20b000000000000000800000018430000010000000000000000000000184c0000f9ffffff00000000000000006d540001fcffffff1863000006000000000000000600000085100000f9ffffffbf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000600)='syzkaller\x00', 0x101, 0x9c, &(0x7f0000000640)=""/156, 0x41000, 0x11, '\x00', r1, @fallback=0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x4, 0x4, 0x4, 0x9}, 0x10, r4, r5, 0x9, &(0x7f0000000b00)=[r8, 0xffffffffffffffff, 0xffffffffffffffff, r9, r10, r11, r12, r13, r14, r15], &(0x7f0000000b40)=[{0x1, 0x2, 0x3, 0x2}, {0x5, 0x2, 0xd, 0x1}, {0x1, 0x3, 0x3, 0x7}, {0x5, 0x1}, {0x2, 0x5, 0x4, 0x8}, {0x3, 0x5, 0xf, 0xc}, {0x5, 0x1, 0x8, 0x6}, {0x1, 0x5, 0x2, 0xc}, {0x1, 0x1, 0xf, 0x2}], 0x10, 0x1000}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) 45.169814466s ago: executing program 8 (id=2205): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) mount(&(0x7f0000000180)=@sg0, &(0x7f0000000240)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', &(0x7f0000000280)='openpromfs\x00', 0x123008, 0x0) mkdir(&(0x7f0000000a00)='./debug\x00', 0x1b9) mount(0x0, &(0x7f0000000c00)='./debug\x00', 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x129a02, 0x5) sendfile(r1, r0, &(0x7f00000001c0)=0x1, 0x8) openat(r0, &(0x7f0000000140)='./debug\x00', 0x32da01, 0x1b7) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e1c, 0x3, 'wrr\x00', 0x5, 0x80, 0x1b}, 0x2c) r3 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x11, 0x1, 0x24, 0x3}}], 0x10}, 0x40004) 44.733033826s ago: executing program 8 (id=2208): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {0x0, 0xb}, {0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x7}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3243aa52}}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x240048e4}, 0x20000010) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)}], 0x1}, 0x0) 29.727973426s ago: executing program 38 (id=2208): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {0x0, 0xb}, {0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x7}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3243aa52}}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x240048e4}, 0x20000010) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)}], 0x1}, 0x0) 9.910838905s ago: executing program 6 (id=2342): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) writev(0xffffffffffffffff, &(0x7f0000000080), 0x0) syz_emit_ethernet(0x6c, &(0x7f0000000400)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb08004500005e0000000000019078ac1e0001ac1414aa0400907800000000409700070067fffd03020000ac1414aa0a010101440416609404000044128d01b1fc6291cfc6e89633504a929e9e890febac1414bbac1414bbac14142d0000006616"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, 0x0, 0xc810) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x800) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000800) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$netlink(0x10, 0x3, 0x10) mkdir(&(0x7f0000000440)='./file1\x00', 0x89) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000900, 0x0, &(0x7f00000000c0)={0xe, 0x0, 0x80000000, 0x0, 0x0, 0x6, 0x0, 0x3ff, 0x10}) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, 0x0, 0x1, 0x100, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r5, 0x0, 0x0, 0x40) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r6, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000a00)=ANY=[@ANYRESDEC=r1], 0x0) 8.506886629s ago: executing program 6 (id=2349): connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x20000000) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x1a1300) poll(&(0x7f0000002100)=[{r0, 0x688}], 0x1, 0x6) r1 = getpid() sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setaffinity(r1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r3, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) shutdown(r3, 0x1) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0xfffbff7f, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) 8.254841605s ago: executing program 6 (id=2350): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d000000000000"], 0x0, 0x34}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1800}}, &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1c, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000600000000000000fcffffff9500000000000000"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) r4 = fspick(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0) r5 = fsmount(r4, 0x0, 0x2) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000400)={0x1f, 0x3}, 0x6) write$bt_hci(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="01"], 0x9) r7 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x6}}, 0x20) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in6=@remote, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@private2, 0x4d4, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, 0x192, 0x6, 0x0, 0x8251c, 0x2, 0xfffffffffffffff8, 0xe2e237c}, {0x9, 0x0, 0x20000001f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0xfff}, 0x70bd2a, 0x3504, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000120001000000000000000000e0000002000004000000000000000000000004d50200040014000d"], 0x3c}}, 0x0) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x8001, 0x0, 0x1, 0x9, '\x00', 0x0, r7, 0x1, 0x3, 0x1}, 0x50) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15010000000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r12, @ANYBLOB="080004"], 0x4c}, 0x1, 0x0, 0x0, 0x28815}, 0x8000002) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x1a, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@cb_func={0x18, 0x8, 0x4, 0x0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1602dcc24b511a4a}, {0x85, 0x0, 0x0, 0x18d}}}, &(0x7f0000000840)='GPL\x00', 0x1, 0x0, &(0x7f0000000880), 0x40f00, 0x2a, '\x00', r12, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x5, 0xcb5, 0x1}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000900)=[r5], &(0x7f0000000940)=[{0x5, 0x5, 0xe, 0x8}], 0x10, 0xf8}, 0x94) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r7, &(0x7f0000000100)={0x4, 0x0, 0xfa00, {0xffffffffffffffff, 0xc068}}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x7, 0x5404, 0x204, 0x5, 0x4, 0x1, 0x1, 0x80000001}, 0x20) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc01c5869, &(0x7f0000000480)={r3, &(0x7f00000002c0)='\x00', 0x210042, &(0x7f0000000300)={@_ha_fsid={[0x1000, 0x7520131a]}, {0x72, 0x8, 0x1, 0x7}}, 0x81, &(0x7f00000003c0), &(0x7f0000000440)=0x3}) ioctl$BTRFS_IOC_BALANCE(r13, 0x5000940c, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r7, &(0x7f0000000040)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x10) 8.138937879s ago: executing program 6 (id=2351): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) capget(&(0x7f0000000040)={0x20071026}, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='sys_mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r3 = syz_usb_connect$cdc_ncm(0x2, 0x72, 0x0, 0x0) r4 = fsopen(&(0x7f0000000140)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) syz_usb_ep_write(r3, 0x81, 0x0, &(0x7f0000000080)) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000380)={0x18, &(0x7f00000001c0)={0x20, 0x11, 0x98, {0x98, 0x6, "90bdd54d35e87673a81dfd0437efcf15724e9fbf5bc6ce7d27b00d665e41374af684813c50920e384e42e4e69eb27c5e924b7e5132ee734f5a3787cba394b8015bd8ac45d0d7f1ae8bc5b0bb557a3002570b20b0aa3378af0ea60c61beb8f32b5f87e3733dae2fe8c1e4c86fe673a4d44312383b387120364d79ae2c838d05feb289f5200e730769490d19d38cda76d9bca07f45aabf"}}, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x441}}, 0x0, &(0x7f0000000300)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x4, 0xf9, 0xfa, "f252b551", "8e4b005c"}}, &(0x7f0000000340)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x18, 0x5, 0x7, 0x0, 0x8, 0x8}}}, &(0x7f00000007c0)={0x44, &(0x7f00000003c0)={0x20, 0xd}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x10}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x1d}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x3, 0x801524b53fa7d299}}, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x60, 0x2, [0xf00f]}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000000580)={0x40, 0xb, 0x2, "ad9a"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000600)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, &(0x7f0000000640)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, &(0x7f0000000680)={0x40, 0x19, 0x2, "ecc2"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x40}, 0x0, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0x9}}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='sys_mnt/block/zram0/reset\x00', 0x1, 0x0) write(r5, &(0x7f0000000180)='1', 0x1) r6 = dup3(0xffffffffffffffff, r2, 0x0) recvmmsg(r6, 0x0, 0x0, 0x40000001, 0x0) read$FUSE(r6, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) unshare(0x62040200) r7 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000340), 0xf2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000200)={r7, r7, r7}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={'sha224\x00'}}) 6.201815935s ago: executing program 5 (id=2358): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)={@void, @void, @eth={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@val, {0x8100, 0x0, 0x0, 0x20}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x4000, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @multicast1}, {0x6000, 0x17c1, 0x10, 0x0, @gue={{0x2, 0x1, 0x0, 0x4, 0x100}}}}}}}}, 0x3a) 5.753226543s ago: executing program 5 (id=2359): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05640, &(0x7f0000000340)={0x1, @pix={0x0, 0x0, 0x33565348, 0x0, 0x0, 0x800000, 0x3, 0xfeedcafc, 0x3, 0x2, 0x2, 0x4}}) 5.648159583s ago: executing program 5 (id=2360): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1c, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000600000000000000fcffffff9500000000000000"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) r4 = fspick(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0) r5 = fsmount(r4, 0x0, 0x2) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000400)={0x1f, 0x3}, 0x6) write$bt_hci(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="01"], 0x9) r7 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x6}}, 0x20) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in6=@remote, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@private2, 0x4d4, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, 0x192, 0x6, 0x0, 0x8251c, 0x2, 0xfffffffffffffff8, 0xe2e237c}, {0x9, 0x0, 0x20000001f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0xfff}, 0x70bd2a, 0x3504, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000120001000000000000000000e0000002000004000000000000000000000004d50200040014000d"], 0x3c}}, 0x0) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x8001, 0x0, 0x1, 0x9, '\x00', 0x0, r7, 0x1, 0x3, 0x1}, 0x50) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15010000000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r12, @ANYBLOB="080004"], 0x4c}, 0x1, 0x0, 0x0, 0x28815}, 0x8000002) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x1a, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@cb_func={0x18, 0x8, 0x4, 0x0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1602dcc24b511a4a}, {0x85, 0x0, 0x0, 0x18d}}}, &(0x7f0000000840)='GPL\x00', 0x1, 0x0, &(0x7f0000000880), 0x40f00, 0x2a, '\x00', r12, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x5, 0xcb5, 0x1}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000900)=[r5], &(0x7f0000000940)=[{0x5, 0x5, 0xe, 0x8}], 0x10, 0xf8}, 0x94) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r7, &(0x7f0000000100)={0x4, 0x0, 0xfa00, {0xffffffffffffffff, 0xc068}}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x7, 0x5404, 0x204, 0x5, 0x4, 0x1, 0x1, 0x80000001}, 0x20) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc01c5869, &(0x7f0000000480)={r3, &(0x7f00000002c0)='\x00', 0x210042, &(0x7f0000000300)={@_ha_fsid={[0x1000, 0x7520131a]}, {0x72, 0x8, 0x1, 0x7}}, 0x81, &(0x7f00000003c0), &(0x7f0000000440)=0x3}) ioctl$BTRFS_IOC_BALANCE(r13, 0x5000940c, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r7, &(0x7f0000000040)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x10) 5.355120763s ago: executing program 9 (id=2361): sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x4008804) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000f00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000f40)=ANY=[@ANYBLOB='`@\x00\x00', @ANYRES16=r1], 0x60}, 0x1, 0x0, 0x0, 0x72f6bdb6c358ee04}, 0x4040000) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0xf0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x20940, 0x0) getgroups(0x5, &(0x7f0000006580)=[0x0, 0xee01, 0xffffffffffffffff, 0xee00, 0xee01]) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="23000000081b000002000000"], 0x48) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x1bb0}}, 0x0) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001540)=@bpf_ext={0x1c, 0x21, &(0x7f0000001180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x40}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000012c0)='GPL\x00', 0x8, 0xc1, &(0x7f0000001300)=""/193, 0x41000, 0x71, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001400)={0x0, 0xe, 0x8000, 0xa}, 0x10, 0x4fc6, r0, 0x6, &(0x7f0000001480)=[0xffffffffffffffff, r6, r3], &(0x7f00000014c0)=[{0x2, 0x1, 0x10, 0x8}, {0x2, 0x1, 0x2}, {0x0, 0x3, 0xf, 0x1}, {0x1000001, 0x5, 0x4, 0x9}, {0x0, 0x3, 0x10, 0x2}, {0x1, 0x2, 0x7, 0x2}], 0x10, 0xffff}, 0x94) splice(0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffffc, r8, 0x0, 0x80000001, 0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r8, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x0, 0xffff0000}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/netdevsim/netdevsim0/max_vfs\x00', 0x1, 0x0) write(r9, 0x0, 0x2b) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) 3.905155846s ago: executing program 6 (id=2362): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010000000000000000000100000038000180060001000200000008000500000000000c000700000000000000000008000900000000"], 0x4c}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x8000000004) mkdir(&(0x7f0000000140)='./sys/bus/pci/rescan\x00', 0x8) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r3, &(0x7f00000000c0)='1\x00', 0x1) r4 = syz_open_dev$sg(&(0x7f0000000000), 0xf9ba, 0x501) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f00000003c0)={0xd2, 0x405, 0x87, "757ec1471be8f8f93fd5e142eaf9cfd60c3eeb2be0de6a65860fd51df7bd4ad05d2e47a4311d59ff71b7393433e9fa5814913b02c46958961dab41eaf5ff41f17906ce0883498e542d5689f2f724a3c9346fe51101a197d212796eef655ff935f473d81a011e607a31ec47095549b6e20190e5b9daaecaeb7f7ecfdb47dd6e711ed28f125f5748bd051bb4c2d4ad915259138e07f79a13c528babbdccb83e2c92aa54006e802a791042ff39a41bfde9ba4956a744d2a33b938a9a4c73cb3cca453dd7340fd3e51ac63fbc7636be0027ae0f6"}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r5, &(0x7f00000001c0)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0cc5605, &(0x7f00000000c0)={0x1, @pix_mp={0x0, 0x0, 0x58565559, 0x0, 0x0, [{}, {}, {0x0, 0x8}, {}, {}, {0x7f}, {0x2}], 0x0, 0x0, 0x3}}) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r7, 0x40104d01, &(0x7f0000000a00)="000002001c0000000000020001") 3.902361663s ago: executing program 5 (id=2363): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) fsetxattr(r0, &(0x7f0000000480)=@known='user.incfs.metadata\x00', 0x0, 0x0, 0x0) flistxattr(r0, &(0x7f00000001c0)=""/3, 0x3) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@empty, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@initdev}}, &(0x7f0000000380)=0xe4) quotactl$Q_GETFMT(0xffffffff80000402, &(0x7f0000000000)=@sr0, r2, &(0x7f0000000440)) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) r4 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340), 0x0, 0xb0, &(0x7f0000000380), 0x0, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x881, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYRESDEC=r4], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r5, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000300000000000000010000001801000020756c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009002000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r7, r9, 0x25, 0x0, @val=@iter={0x0}}, 0x18) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x1}, 0x50) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc01c5868, &(0x7f0000000900)={r0, &(0x7f0000000800)='\xdb,,\x00', 0x400000, &(0x7f0000000840)={@align=0x3513, {0x400, 0x6, 0x9, 0x8001}}, 0x101, &(0x7f0000000880), &(0x7f00000008c0)=0x2}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000940)={{0x1, 0x1, 0x18, r0, {0x1}}, './bus\x00'}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a00)={{0x1, 0xffffffffffffffff}, &(0x7f0000000980), &(0x7f00000009c0)='%pK \x00'}, 0x1c) r14 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') preadv(r14, &(0x7f00000014c0)=[{&(0x7f0000002140)=""/4096, 0x1000}], 0x1, 0x0, 0x0) r15 = syz_open_dev$vcsu(&(0x7f0000000a40), 0x100, 0x200001) r16 = signalfd4(0xffffffffffffffff, &(0x7f0000000a80)={[0x5, 0x245c1909]}, 0x8, 0x800) r17 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000ac0)={0xffffffffffffffff, 0x6, 0x18}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0xc, 0x1a, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000005000000000000000100008018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085000000c70000001861a8f20b000000000000000800000018430000010000000000000000000000184c0000f9ffffff00000000000000006d540001fcffffff1863000006000000000000000600000085100000f9ffffffbf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000600)='syzkaller\x00', 0x101, 0x9c, &(0x7f0000000640)=""/156, 0x41000, 0x11, '\x00', r1, @fallback=0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x4, 0x4, 0x4, 0x9}, 0x10, r6, r7, 0x9, &(0x7f0000000b00)=[r10, 0xffffffffffffffff, 0xffffffffffffffff, r11, r12, r13, r14, r15, r16, r17], &(0x7f0000000b40)=[{0x1, 0x2, 0x3, 0x2}, {0x5, 0x2, 0xd, 0x1}, {0x1, 0x3, 0x3, 0x7}, {0x5, 0x1}, {0x2, 0x5, 0x4, 0x8}, {0x3, 0x5, 0xf, 0xc}, {0x5, 0x1, 0x8, 0x6}, {0x1, 0x5, 0x2, 0xc}, {0x1, 0x1, 0xf, 0x2}], 0x10, 0x1000}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) 3.843100025s ago: executing program 9 (id=2364): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x17, 0x0, 0x0) r3 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x1b8, 0x0, 0x124, 0xffffffff, 0xffffffff, 0x2dc, 0x2dc, 0x2dc, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@uncond, 0x0, 0x100, 0x124, 0x0, {}, [@common=@unspec=@physdev={{0x64}, {'ipvlan0\x00', {0xff}, 'vxcan1\x00', {0xff}, 0xe, 0x1}}, @common=@addrtype={{0x2c}, {0x0, 0x28, 0x1}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x5}}}, {{@ip={@empty, @remote, 0xffffff, 0xffffffff, 'veth1_vlan\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0xf9, 0x2, 0xa}, 0x0, 0x70, 0x94}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0x100, 0x124, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x0, 0x1, 0x1}}, @common=@set={{0x40}, {{0x4, [0x1, 0x1, 0x4, 0x0, 0x0, 0x3], 0x2, 0x3}}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1a, 0x9, 0x8}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) r4 = openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000001c0), 0x12) socket$nl_netfilter(0x10, 0x3, 0xc) 3.423012327s ago: executing program 5 (id=2366): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000040)="ad56000081000008000d00000000", 0xe) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed, 0x8}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000000)="3f000000010000", 0x7) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000300)={0x2710, 0x1, 0x30000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x65, 0x7ff, 0x9, 0x0, 0x400, 0x80, 0x89, 0x0, 0x101, 0x7], 0x100000, 0x240046}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi.usb0/in_ports\x00', 0x1, 0x0) write(r4, &(0x7f0000000240)='2', 0x1) ioctl$VIDIOC_DBG_G_REGISTER(r4, 0xc0385650, &(0x7f0000000140)={{0x1, @name="1cdcc75551dea806ae39ab0275196b462bddf1b6750610b3aba8c7d9f80eb229"}, 0x8, 0x100000000, 0x7f}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = syz_open_dev$admmidi(&(0x7f0000000100), 0x800, 0xc040) ioctl$BTRFS_IOC_ADD_DEV(r3, 0x5000940a, &(0x7f0000002a40)={{r5}, "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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r7, 0x4030ae7b, &(0x7f0000000300)={0x80000000, 0x0, 0xada, 0xffffffffffff7fff, 0x4}) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) read$FUSE(r8, &(0x7f0000000a00)={0x2020}, 0x2020) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000060a09040000000000000000020000002c000000080a01030000000000000000020000000900b971cb985c5cb58900000900010073797a3000000000140000001100010000000000000000000000000a"], 0x68}}, 0x0) 3.324749734s ago: executing program 9 (id=2368): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00') r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x200003}, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000002740)=ANY=[], 0x14}], 0x1, 0x0, 0x0, 0x44100}, 0x0) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) ioctl$UFFDIO_REGISTER(r6, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000600)=@security={'security\x00', 0x64, 0x4, 0x31c, 0x100000c, 0x0, 0x1b4, 0xb8, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @rand_addr, 0x0, 0x0, 'veth0_vlan\x00', 'syzkaller1\x00'}, 0x0, 0x94, 0xb8, 0x0, {}, [@common=@inet=@socket1={{0x24}}]}, @common=@unspec=@CONNSECMARK={0x24, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'pim6reg0\x00', 'lo\x00'}, 0x0, 0x9c, 0xfc, 0x0, {}, [@common=@unspec=@connmark={{0x2c}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [], 0x0, 0x5}}}}, {{@uncond, 0x0, 0xb0, 0xd4, 0x0, {}, [@common=@set={{0x40}, {{0x2, [0x6, 0x6, 0x4, 0x0, 0x5, 0x1]}}}]}, @common=@inet=@TCPMSS={0x24}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x378) sendmmsg(0xffffffffffffffff, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86}, 0x80, 0x0}}], 0x1, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r3, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, 0x0, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x18, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x80}, 0x1, 0x0, 0x0, 0x840}, 0x48000) r7 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) tkill(r7, 0xb) pread64(r1, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000001a00)={'pcmmio\x00', [0x2000, 0x0, 0x4, 0x1, 0x25, 0x0, 0x400, 0x7, 0x54c6cff3, 0xfd, 0x2, 0x3, 0xfffffff7, 0x400001, 0x6, 0x5, 0x0, 0x7f, 0x3, 0x40000003, 0x200089, 0x4, 0x4, 0x20001e5b, 0x3, 0xe66, 0x3, 0x6, 0x4006, 0x0, 0x3]}) 3.303363381s ago: executing program 3 (id=2369): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001435010026bd0c333c84df250a4022fe", @ANYRES32, @ANYBLOB="140006000000000005"], 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) quotactl$Q_SYNC(0x8000011f, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_sock_diag(0x10, 0x3, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYRES8=r0], &(0x7f00000000c0)='GPL\x00', 0xf, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x42000004}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() add_key(&(0x7f0000000840)='asymmetric\x00', 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000002c0)={0x9, @pix={0xb, 0x9, 0x32315258, 0x7, 0xe, 0x8, 0x5, 0xa, 0x0, 0x2, 0x0, 0x3}}) r6 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in6=@private2, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe}}, 0xe8) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r2) 2.614944605s ago: executing program 6 (id=2370): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x20, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000006000079b005000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) add_key$fscrypt_v1(0x0, 0x0, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) r2 = openat$vhost_vsock(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r2, 0x8010af78, &(0x7f0000000040)) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d8b601020301090212000100000000090401"], 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40402) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x802) pselect6(0x40, &(0x7f00000030c0)={0x9, 0xc, 0x280, 0x7a, 0x1, 0x2, 0x40007fff, 0x6}, 0x0, 0x0, 0x0, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x141) write$uinput_user_dev(r4, 0x0, 0x0) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000340)={&(0x7f0000000380)=[{0x1e, 0x5011, 0x0, 0x0}], 0x1}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r6, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_SET_GSI_ROUTING(r6, 0x4008ae6a, &(0x7f0000000300)={0x1, 0x0, [{0x0, 0x2, 0x0, 0x0, @adapter={0xfffffffffffffff9, 0x0, 0x100, 0x0, 0x200400}}]}) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_IRQ_LINE_STATUS(r6, 0xc008ae67, &(0x7f00000002c0)={0x0, 0x81}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)='1\x00', 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:02.0/remove\x00', 0x1, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) write(r7, &(0x7f0000000140)='1\x00', 0x1) openat(r7, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:02.0/remove\x00', 0xfc94c54f54391741, 0x188) 2.366328273s ago: executing program 3 (id=2371): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1c, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000600000000000000fcffffff9500000000000000"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) r4 = fspick(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0) r5 = fsmount(r4, 0x0, 0x2) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000400)={0x1f, 0x3}, 0x6) write$bt_hci(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="01"], 0x9) r7 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x6}}, 0x20) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in6=@remote, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@private2, 0x4d4, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, 0x192, 0x6, 0x0, 0x8251c, 0x2, 0xfffffffffffffff8, 0xe2e237c}, {0x9, 0x0, 0x20000001f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0xfff}, 0x70bd2a, 0x3504, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000120001000000000000000000e0000002000004000000000000000000000004d50200040014000d"], 0x3c}}, 0x0) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x8001, 0x0, 0x1, 0x9, '\x00', 0x0, r7, 0x1, 0x3, 0x1}, 0x50) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15010000000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r12, @ANYBLOB="080004"], 0x4c}, 0x1, 0x0, 0x0, 0x28815}, 0x8000002) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x1a, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@cb_func={0x18, 0x8, 0x4, 0x0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1602dcc24b511a4a}, {0x85, 0x0, 0x0, 0x18d}}}, &(0x7f0000000840)='GPL\x00', 0x1, 0x0, &(0x7f0000000880), 0x40f00, 0x2a, '\x00', r12, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x5, 0xcb5, 0x1}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000900)=[r5], &(0x7f0000000940)=[{0x5, 0x5, 0xe, 0x8}], 0x10, 0xf8}, 0x94) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r7, &(0x7f0000000100)={0x4, 0x0, 0xfa00, {0xffffffffffffffff, 0xc068}}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x7, 0x5404, 0x204, 0x5, 0x4, 0x1, 0x1, 0x80000001}, 0x20) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc01c5869, &(0x7f0000000480)={r3, &(0x7f00000002c0)='\x00', 0x210042, &(0x7f0000000300)={@_ha_fsid={[0x1000, 0x7520131a]}, {0x72, 0x8, 0x1, 0x7}}, 0x81, &(0x7f00000003c0), &(0x7f0000000440)=0x3}) ioctl$BTRFS_IOC_BALANCE(r13, 0x5000940c, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r7, &(0x7f0000000040)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x10) 2.301644191s ago: executing program 9 (id=2372): mkdirat(0xffffffffffffff9c, 0x0, 0x1c1) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/f/dwFrameInterval\x00', 0x1, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r0, 0x4) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs2\x00', 0x0, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB='max=00000000000000000000004,max=00000', @ANYRESDEC=0x0]) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r5, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 2.136325223s ago: executing program 3 (id=2373): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg}}}}}, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7c, 0x0, @wg=@data={0x4, 0x0, 0x6000000, '\x00'/100}}}}}}, 0x0) 2.02474053s ago: executing program 3 (id=2374): socket$kcm(0x2, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8000) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000480)="b9ffb2ed6844268cb89e14f0886411e0ff15661aaa50e7369dfbac141416e000004062079f4b", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800}, 0x50) 1.943613272s ago: executing program 3 (id=2375): r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) connect$inet6(r1, &(0x7f0000000800)={0xa, 0x4e20, 0xc0, @local, 0xc58e}, 0x1c) writev(r2, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7108ec50000ffffffffffffffffffe7ee000000000000000002000000", 0x57}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000440)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f00000001c0)={0x3, 0xff00, 0x0, '\x00', 0x0}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x1000000, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "12ad"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 736.649801ms ago: executing program 5 (id=2376): ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000180)=[0x0, 0x0], 0x0, 0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, 0x0) unshare(0x6020400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000040)={0x2, r2}) openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) openat$uinput(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r3, &(0x7f0000000240)="2aaa6e4f510eef0ccf133f47e9c90cff34aab47e3caaa93ce9a3eb594750d465029bb7bfa94c01121aa15b8963623e03e612b1b9377de568cc3d8c71c615a27ee70ec111253e4bcc440c7e5292b09e74097582d19683a874f8a56155d8431a16451be0c610ed75efc2db477f53cf81679ee87227ca21b414af77abfc7f3927c574981869dfbebc5798c578b4b3a6cd0000c2505188c28fa47bf0be328af986fe", 0xa0, 0x800, 0x0, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000), 0x20000328) getsockopt$IP_VS_SO_GET_VERSION(r3, 0x0, 0x30, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2680c0, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'veth0_virt_wifi\x00', &(0x7f0000000080)=@ethtool_sset_info={0x37, 0x4, 0xe6}}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000140)=0x80000) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0xff05, 0x0, 0x3f, {0x0, 0x0, 0x4a00, 0x0, 0x880, 0x1c940}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xfd57, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x6}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e22}, @IFLA_GRE_OKEY={0x0, 0x5, 0x8001}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f00000001c0)) 354.548194ms ago: executing program 9 (id=2377): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom1\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket(0xa, 0x2400000001, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000100)={0x2, @pix={0x712, 0x4e, 0x32315559, 0x4, 0x7, 0x9, 0x0, 0x2, 0x0, 0x6, 0x0, 0x2}}) getrlimit(0xc, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) ioprio_set$uid(0x3, 0x0, 0x0) ioctl$UBLK_U_CMD_GET_DEV_INFO(0xffffffffffffffff, 0x80207502, &(0x7f0000000400)={0x0, 0xffff, 0x40, &(0x7f0000000080)=@ublk_ctrl_dev_info_existing}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="61105c00000000006113380000000000bfa00000000000000700000008ffffffd50301001874004095000600000000006916360000000000bf67000000000000360607000fff07201706000020190000160300000ee60060bf050000000000007b650000000000006507f9ff01000000070700004ddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f17540faf80250aa20c669a5e12814cb1cea5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000400c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10fd7ed6735154beb4000000000000000000000000004000bc00f6746a9709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c1d926a0f6a5480a55c22fe3a5ac00000000000000000000000500002000000000fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e14d90deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b06ff7f0000000000007f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089e0b1c23c0f3cdad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631d22bad050e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0af1cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c29984864961a57ff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee15620789c524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000000000000000000000000000000000001386866b311bd144bc32e059658c9f8342c90c1ade31b78072841b8b5a943d62a44cea6b050c42e3c205fad6a23fb43c93da0f49d911877265e6ee443e37397ecf89021e7f579e8d3a74c12b52938d91e9de07fc8eeeb9505f4a9c26266bf5449484ccc1317c747664e9f7478f8200000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x0, 0x0, 0x9, 0x3}) 134.714183ms ago: executing program 9 (id=2378): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) fsetxattr(r0, &(0x7f0000000480)=@known='user.incfs.metadata\x00', 0x0, 0x0, 0x0) flistxattr(r0, &(0x7f00000001c0)=""/3, 0x3) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@empty, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@initdev}}, &(0x7f0000000380)=0xe4) quotactl$Q_GETFMT(0xffffffff80000402, &(0x7f0000000000)=@sr0, r2, &(0x7f0000000440)) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) r4 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340), 0x0, 0xb0, &(0x7f0000000380), 0x0, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x881, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYRESDEC=r4], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r5, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000300000000000000010000001801000020756c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009002000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r7, r9, 0x25, 0x0, @val=@iter={0x0}}, 0x18) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x1}, 0x50) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc01c5868, &(0x7f0000000900)={r0, &(0x7f0000000800)='\xdb,,\x00', 0x400000, &(0x7f0000000840)={@align=0x3513, {0x400, 0x6, 0x9, 0x8001}}, 0x101, &(0x7f0000000880), &(0x7f00000008c0)=0x2}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000940)={{0x1, 0x1, 0x18, r0, {0x1}}, './bus\x00'}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a00)={{0x1, 0xffffffffffffffff}, &(0x7f0000000980), &(0x7f00000009c0)='%pK \x00'}, 0x1c) r14 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') preadv(r14, &(0x7f00000014c0)=[{&(0x7f0000002140)=""/4096, 0x1000}], 0x1, 0x0, 0x0) r15 = syz_open_dev$vcsu(&(0x7f0000000a40), 0x100, 0x200001) r16 = signalfd4(0xffffffffffffffff, &(0x7f0000000a80)={[0x5, 0x245c1909]}, 0x8, 0x800) r17 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000ac0)={0xffffffffffffffff, 0x6, 0x18}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0xc, 0x1a, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000005000000000000000100008018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085000000c70000001861a8f20b000000000000000800000018430000010000000000000000000000184c0000f9ffffff00000000000000006d540001fcffffff1863000006000000000000000600000085100000f9ffffffbf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000600)='syzkaller\x00', 0x101, 0x9c, &(0x7f0000000640)=""/156, 0x41000, 0x11, '\x00', r1, @fallback=0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x4, 0x4, 0x4, 0x9}, 0x10, r6, r7, 0x9, &(0x7f0000000b00)=[r10, 0xffffffffffffffff, 0xffffffffffffffff, r11, r12, r13, r14, r15, r16, r17], &(0x7f0000000b40)=[{0x1, 0x2, 0x3, 0x2}, {0x5, 0x2, 0xd, 0x1}, {0x1, 0x3, 0x3, 0x7}, {0x5, 0x1}, {0x2, 0x5, 0x4, 0x8}, {0x3, 0x5, 0xf, 0xc}, {0x5, 0x1, 0x8, 0x6}, {0x1, 0x5, 0x2, 0xc}, {0x1, 0x1, 0xf, 0x2}], 0x10, 0x1000}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) 0s ago: executing program 3 (id=2379): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001435010026bd0c333c84df250a4022fe", @ANYRES32, @ANYBLOB="140006000000000005"], 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) quotactl$Q_SYNC(0x8000011f, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_sock_diag(0x10, 0x3, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYRES8=r0], &(0x7f00000000c0)='GPL\x00', 0xf, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x42000004}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() add_key(&(0x7f0000000840)='asymmetric\x00', 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000002c0)={0x9, @pix={0xb, 0x9, 0x32315258, 0x7, 0xe, 0x8, 0x5, 0xa, 0x0, 0x2, 0x0, 0x3}}) r6 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in6=@private2, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe}}, 0xe8) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r2) kernel console output (not intermixed with test programs): ected from ttyUSB3 [ 547.389520][ T5747] ti_usb_3410_5052 12-1:2.0: device disconnected [ 547.404770][T14582] tmpfs: Unknown parameter 'nr_blhcks' [ 547.548345][T14587] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2085'. [ 547.569254][T14587] vlan2: entered promiscuous mode [ 547.611077][T14589] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 547.707427][ T5747] usb 12-1: new high-speed USB device number 33 using dummy_hcd [ 548.079861][ T5747] usb 12-1: too many configurations: 9, using maximum allowed: 8 [ 548.661911][ T5747] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 548.664852][ T5747] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 548.669164][ T5747] usb 12-1: config 0 interface 0 has no altsetting 0 [ 548.677946][ T5747] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 548.680797][ T5747] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 548.684260][ T5747] usb 12-1: config 0 interface 0 has no altsetting 0 [ 548.687824][ T5747] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 548.690681][ T5747] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 548.694303][ T5747] usb 12-1: config 0 interface 0 has no altsetting 0 [ 548.697466][ T5747] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 548.700285][ T5747] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 548.703730][ T5747] usb 12-1: config 0 interface 0 has no altsetting 0 [ 548.710096][ T5747] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 548.712930][ T5747] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 548.716321][ T5747] usb 12-1: config 0 interface 0 has no altsetting 0 [ 548.719878][ T5747] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 548.723413][ T5747] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 548.727891][ T5747] usb 12-1: config 0 interface 0 has no altsetting 0 [ 548.735009][ T5747] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 548.738020][ T5747] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 548.741512][ T5747] usb 12-1: config 0 interface 0 has no altsetting 0 [ 548.747399][ T5747] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 548.750226][ T5747] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 548.753557][ T5747] usb 12-1: config 0 interface 0 has no altsetting 0 [ 548.762803][ T5747] usb 12-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 548.765673][ T5747] usb 12-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 548.768482][ T5747] usb 12-1: Product: syz [ 548.769903][ T5747] usb 12-1: Manufacturer: syz [ 548.771614][ T5747] usb 12-1: SerialNumber: syz [ 548.774490][ T5747] usb 12-1: config 0 descriptor?? [ 548.780164][ T5747] yurex 12-1:0.0: USB YUREX device now attached to Yurex #0 [ 548.983923][T14606] sysfs: cannot create duplicate filename '/class/ieee80211/1ùà^!`lü1&›b¯Þ0xUÐÏ”ÎÜr$åG—•µu‡â' [ 548.998422][T14606] CPU: 2 UID: 0 PID: 14606 Comm: syz.5.2090 Tainted: G L syzkaller #0 PREEMPT(full) [ 548.998456][T14606] Tainted: [L]=SOFTLOCKUP [ 548.998463][T14606] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 548.998471][T14606] Call Trace: [ 548.998477][T14606] [ 548.998483][T14606] dump_stack_lvl+0x100/0x190 [ 548.998504][T14606] sysfs_warn_dup.cold+0x1c/0x28 [ 548.998524][T14606] sysfs_do_create_link_sd+0x113/0x140 [ 548.998557][T14606] sysfs_create_link+0x61/0xc0 [ 548.998577][T14606] device_add+0x675/0x1970 [ 548.998593][T14606] ? __pfx_device_add+0x10/0x10 [ 548.998606][T14606] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 548.998626][T14606] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 548.998663][T14606] wiphy_register+0x2151/0x3110 [ 548.998682][T14606] ? __pfx_wiphy_register+0x10/0x10 [ 548.998697][T14606] ? __asan_memset+0x23/0x50 [ 548.998711][T14606] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 548.998741][T14606] ieee80211_register_hw+0x3053/0x4580 [ 548.998779][T14606] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 548.998804][T14606] ? __pfx___debug_object_init+0x10/0x10 [ 548.998851][T14606] ? find_held_lock+0x2b/0x80 [ 548.998876][T14606] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 548.998903][T14606] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 548.998922][T14606] ? __hrtimer_setup+0x208/0x330 [ 548.998937][T14606] mac80211_hwsim_new_radio+0x2acc/0x64c0 [ 548.998963][T14606] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 548.998981][T14606] ? __asan_memcpy+0x3c/0x60 [ 548.998995][T14606] hwsim_new_radio_nl+0xc6b/0x13f0 [ 548.999012][T14606] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 548.999032][T14606] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 548.999055][T14606] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 548.999079][T14606] genl_family_rcv_msg_doit+0x214/0x300 [ 548.999108][T14606] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 548.999128][T14606] ? genl_get_cmd+0x3e7/0x760 [ 548.999156][T14606] ? bpf_lsm_capable+0x9/0x10 [ 548.999175][T14606] ? security_capable+0x80/0x260 [ 548.999215][T14606] ? ns_capable+0xd2/0xf0 [ 548.999237][T14606] genl_rcv_msg+0x560/0x800 [ 548.999262][T14606] ? __pfx_genl_rcv_msg+0x10/0x10 [ 548.999286][T14606] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 548.999314][T14606] ? __lock_acquire+0x49f/0x1a40 [ 548.999343][T14606] netlink_rcv_skb+0x159/0x420 [ 548.999364][T14606] ? __pfx_genl_rcv_msg+0x10/0x10 [ 548.999388][T14606] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 548.999420][T14606] ? netlink_deliver_tap+0x1ae/0xcc0 [ 548.999444][T14606] genl_rcv+0x28/0x40 [ 548.999464][T14606] netlink_unicast+0x585/0x850 [ 548.999487][T14606] ? __pfx_netlink_unicast+0x10/0x10 [ 548.999515][T14606] netlink_sendmsg+0x8b0/0xda0 [ 548.999538][T14606] ? __pfx_netlink_sendmsg+0x10/0x10 [ 548.999556][T14606] ? apparmor_socket_sendmsg+0x15b/0x270 [ 548.999572][T14606] ____sys_sendmsg+0xa4d/0xbe0 [ 548.999584][T14606] ? __pfx_netlink_sendmsg+0x10/0x10 [ 548.999598][T14606] ? __pfx_____sys_sendmsg+0x10/0x10 [ 548.999639][T14606] ___sys_sendmsg+0x190/0x1e0 [ 548.999661][T14606] ? __pfx____sys_sendmsg+0x10/0x10 [ 548.999683][T14606] ? futex_wait+0x11e/0x370 [ 548.999716][T14606] ? find_held_lock+0x2b/0x80 [ 548.999756][T14606] __sys_sendmsg+0x160/0x210 [ 548.999780][T14606] ? __pfx___sys_sendmsg+0x10/0x10 [ 548.999816][T14606] __do_fast_syscall_32+0xe7/0x970 [ 548.999847][T14606] do_fast_syscall_32+0x32/0x70 [ 548.999869][T14606] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 548.999884][T14606] RIP: 0023:0xf7ff6fec [ 548.999899][T14606] Code: Unable to access opcode bytes at 0xf7ff6fc2. [ 548.999907][T14606] RSP: 002b:00000000f54b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 548.999920][T14606] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 548.999928][T14606] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 548.999934][T14606] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 548.999941][T14606] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 548.999947][T14606] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 548.999964][T14606] [ 549.328591][T14608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 549.349883][T14608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 549.476224][T11844] usb 12-1: USB disconnect, device number 33 [ 549.481418][T11844] yurex 12-1:0.0: USB YUREX #0 now disconnected [ 549.600153][T14610] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 549.801765][T14617] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2093'. [ 549.808935][T14617] vlan2: entered promiscuous mode [ 549.826481][ T9] usb 13-1: new high-speed USB device number 27 using dummy_hcd [ 550.071027][ T9] usb 13-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 550.087560][ T9] usb 13-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 550.095012][ T9] usb 13-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 550.099332][ T9] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.102534][ T9] usb 13-1: Product: syz [ 550.104242][ T9] usb 13-1: Manufacturer: syz [ 550.106134][ T9] usb 13-1: SerialNumber: syz [ 550.115385][ T9] ti_usb_3410_5052 13-1:2.0: TI USB 5052 2 port adapter converter detected [ 550.122163][ T9] usb 13-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 550.170187][ T9] usb 13-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 550.256472][ T5747] usb 11-1: new low-speed USB device number 34 using dummy_hcd [ 550.408307][ T5747] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 550.410815][ T5747] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 550.414343][ T5747] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 550.418360][ T5747] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 550.421846][ T5747] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 550.430417][ T5747] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 550.432806][ T5747] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 550.436046][ T5747] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 550.441840][ T5747] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 550.445264][ T5747] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 550.449787][ T5747] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 550.452413][ T5747] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 550.455823][ T5747] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 550.461688][ T5747] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 550.465433][ T5747] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 550.471596][ T5747] usb 11-1: string descriptor 0 read error: -22 [ 550.473693][ T5747] usb 11-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 550.477004][ T5747] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.488692][ T5747] adutux 11-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 551.048925][T14636] syzkaller0: entered promiscuous mode [ 551.050667][T14636] syzkaller0: entered allmulticast mode [ 551.197945][T14641] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 551.956502][T11844] usb 10-1: new low-speed USB device number 24 using dummy_hcd [ 552.109584][T11844] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 552.112155][T11844] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 552.115542][T11844] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 552.119881][T11844] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 552.123397][T11844] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 552.128138][T11844] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 552.130770][T11844] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 552.134028][T11844] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 552.138032][T11844] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 552.144725][T11844] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 552.156984][T11844] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 552.159355][T11844] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 552.162596][T11844] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 552.166289][T11844] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 552.170031][T11844] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 552.176871][T11844] usb 10-1: string descriptor 0 read error: -22 [ 552.178863][T11844] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 552.181533][T11844] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.194342][T11844] adutux 10-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 552.656536][ T9] usb 12-1: new low-speed USB device number 34 using dummy_hcd [ 552.809683][ T9] usb 12-1: config 168 descriptor has 1 excess byte, ignoring [ 552.812279][ T9] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 552.815676][ T9] usb 12-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 552.819208][ T9] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 552.822627][ T9] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 552.827429][ T9] usb 12-1: config 168 descriptor has 1 excess byte, ignoring [ 552.830346][ T9] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 552.833722][ T9] usb 12-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 552.837397][ T9] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 552.840692][ T9] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 552.845263][ T9] usb 12-1: config 168 descriptor has 1 excess byte, ignoring [ 552.847813][ T9] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 552.850923][ T9] usb 12-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 552.854283][ T9] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 552.859534][ T9] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 552.865661][ T9] usb 12-1: string descriptor 0 read error: -22 [ 552.868216][ T9] usb 12-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 552.870937][ T9] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.913164][ T9] adutux 12-1:168.0: ADU100 now attached to /dev/usb/adutux2 [ 552.913941][ T5747] usb 11-1: USB disconnect, device number 34 [ 553.044541][T14658] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2106'. [ 553.132306][T14660] syzkaller0: entered promiscuous mode [ 553.134141][T14660] syzkaller0: entered allmulticast mode [ 553.260568][T10886] usb 12-1: USB disconnect, device number 34 [ 553.358743][T14663] wg2 speed is unknown, defaulting to 1000 [ 553.468764][T14611] ti_usb_3410_5052_2 ttyUSB0: ti_get_lsr - get port status command failed, -110 [ 553.475680][T14611] ti_usb_3410_5052_2 ttyUSB0: ti_close - cannot send close port command, -32 [ 553.481755][T11843] usb 13-1: USB disconnect, device number 27 [ 553.700357][T11843] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 553.714854][T11843] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 553.729529][T11843] ti_usb_3410_5052 13-1:2.0: device disconnected [ 554.412346][T14681] FAULT_INJECTION: forcing a failure. [ 554.412346][T14681] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 554.428090][T14681] CPU: 0 UID: 0 PID: 14681 Comm: syz.6.2112 Tainted: G L syzkaller #0 PREEMPT(full) [ 554.428111][T14681] Tainted: [L]=SOFTLOCKUP [ 554.428116][T14681] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 554.428123][T14681] Call Trace: [ 554.428127][T14681] [ 554.428132][T14681] dump_stack_lvl+0x100/0x190 [ 554.428151][T14681] should_fail_ex.cold+0x5/0xa [ 554.428167][T14681] _copy_from_user+0x2e/0xd0 [ 554.428187][T14681] get_compat_msghdr+0xb3/0x480 [ 554.428217][T14681] ? __pfx_get_compat_msghdr+0x10/0x10 [ 554.428237][T14681] ? rcu_is_watching+0x12/0xc0 [ 554.428253][T14681] ? ___sys_recvmsg+0x177/0x1a0 [ 554.428265][T14681] ? kfree+0x1e5/0x6c0 [ 554.428276][T14681] ? __lock_acquire+0x49f/0x1a40 [ 554.428296][T14681] ___sys_recvmsg+0x193/0x1a0 [ 554.428320][T14681] ? __pfx____sys_recvmsg+0x10/0x10 [ 554.428344][T14681] ? __pfx___might_resched+0x10/0x10 [ 554.428365][T14681] do_recvmmsg+0x54d/0x740 [ 554.428380][T14681] ? __pfx_do_recvmmsg+0x10/0x10 [ 554.428394][T14681] ? find_held_lock+0x2b/0x80 [ 554.428408][T14681] ? ksys_write+0x190/0x250 [ 554.428419][T14681] ? ksys_write+0x190/0x250 [ 554.428435][T14681] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 554.428454][T14681] __sys_recvmmsg+0x21f/0x270 [ 554.428472][T14681] ? __pfx___sys_recvmmsg+0x10/0x10 [ 554.428490][T14681] ? ksys_write+0x1ac/0x250 [ 554.428502][T14681] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 554.428515][T14681] ? __do_fast_syscall_32+0x98/0x970 [ 554.428532][T14681] ? lockdep_hardirqs_on+0x78/0x100 [ 554.428547][T14681] __do_fast_syscall_32+0xe7/0x970 [ 554.428563][T14681] ? lockdep_hardirqs_on+0x78/0x100 [ 554.428579][T14681] do_fast_syscall_32+0x32/0x70 [ 554.428595][T14681] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 554.428610][T14681] RIP: 0023:0xf7fe2fec [ 554.428623][T14681] Code: Unable to access opcode bytes at 0xf7fe2fc2. [ 554.428629][T14681] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000151 [ 554.428641][T14681] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800004c0 [ 554.428649][T14681] RDX: 0000000000000f02 RSI: 00000000000000f0 RDI: 0000000000000000 [ 554.428656][T14681] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 554.428663][T14681] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 554.428669][T14681] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 554.428683][T14681] [ 554.718175][T14684] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2113'. [ 554.729451][T14684] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2113'. [ 554.738492][T11843] usb 10-1: USB disconnect, device number 24 [ 554.758863][T14684] uhci_hcd 0000:00:1d.0: remove, state 4 [ 554.789405][T14684] usb usb2: USB disconnect, device number 1 [ 554.960663][T14684] uhci_hcd 0000:00:1d.0: USB bus 2 deregistered [ 555.301878][T14693] syzkaller0: entered promiscuous mode [ 555.303816][T14693] syzkaller0: entered allmulticast mode [ 555.482942][T14688] syzkaller0: entered promiscuous mode [ 555.499041][T14688] syzkaller0: entered allmulticast mode [ 555.521961][T14701] ehci-pci 0000:00:1d.7: remove, state 1 [ 555.529756][T14701] usb usb1: USB disconnect, device number 1 [ 555.636938][T14701] usb 1-1: USB disconnect, device number 2 [ 555.783923][T14701] ehci-pci 0000:00:1d.7: USB bus 1 deregistered [ 556.060498][T14713] xt_CT: You must specify a L4 protocol and not use inversions on it [ 556.125560][T14705] ehci-pci 0000:00:1d.7: EHCI Host Controller [ 556.172707][T14705] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 1 [ 556.181442][T14705] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000 [ 556.196756][T14705] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00 [ 556.215820][T14705] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 556.218951][T14705] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 556.221481][T14705] usb usb1: Product: EHCI Host Controller [ 556.223290][T14705] usb usb1: Manufacturer: Linux syzkaller ehci_hcd [ 556.225379][T14705] usb usb1: SerialNumber: 0000:00:1d.7 [ 556.276870][T14705] hub 1-0:1.0: USB hub found [ 556.283619][T14705] hub 1-0:1.0: 6 ports detected [ 556.337301][T11845] usb 11-1: new low-speed USB device number 35 using dummy_hcd [ 556.372293][T14705] hub 3-0:1.0: USB hub found [ 556.375076][T14705] hub 3-0:1.0: 2 ports detected [ 556.428042][T14705] hub 4-0:1.0: USB hub found [ 556.432230][T14705] hub 4-0:1.0: 2 ports detected [ 556.487841][T11845] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 556.492806][T11845] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 556.506619][T11845] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 556.512747][T11845] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 556.526470][T11845] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 556.530712][T11845] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 556.533224][T11845] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 556.542904][T11845] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 556.552280][T11845] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 556.555806][T11845] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 556.560564][T11845] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 556.562918][T11845] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 556.566762][ T5747] usb 1-1: new high-speed USB device number 2 using ehci-pci [ 556.567366][T11845] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 556.573209][T11845] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 556.576993][T11845] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 556.583565][T11845] usb 11-1: string descriptor 0 read error: -22 [ 556.585790][T11845] usb 11-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 556.593839][T11845] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.606295][T11845] adutux 11-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 556.760900][ T5747] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 556.764447][ T5747] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 556.768196][ T5747] usb 1-1: Product: QEMU USB Tablet [ 556.769948][ T5747] usb 1-1: Manufacturer: QEMU [ 556.771988][ T5747] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 556.776497][T10886] usb 13-1: new high-speed USB device number 28 using dummy_hcd [ 556.804304][ T5747] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb1/1-1/1-1:1.0/0003:0627:0001.0078/input/input147 [ 556.872814][ T5747] hid-generic 0003:0627:0001.0078: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 556.941219][T10886] usb 13-1: too many configurations: 9, using maximum allowed: 8 [ 556.955297][T10886] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 556.964733][T10886] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 556.977442][T10886] usb 13-1: config 0 interface 0 has no altsetting 0 [ 556.986889][T10886] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 556.991716][T10886] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 557.002056][T10886] usb 13-1: config 0 interface 0 has no altsetting 0 [ 557.005118][T10886] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 557.009118][T10886] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 557.016544][T10886] usb 13-1: config 0 interface 0 has no altsetting 0 [ 557.021862][T10886] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 557.026092][T10886] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 557.033925][T10886] usb 13-1: config 0 interface 0 has no altsetting 0 [ 557.039045][T10886] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 557.044081][T10886] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 557.052039][T10886] usb 13-1: config 0 interface 0 has no altsetting 0 [ 557.059782][T10886] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 557.062684][T10886] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 557.070242][T10886] usb 13-1: config 0 interface 0 has no altsetting 0 [ 557.073367][T10886] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 557.079516][T10886] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 557.088674][T10886] usb 13-1: config 0 interface 0 has no altsetting 0 [ 557.097400][T10886] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 557.100497][T10886] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 557.110791][T10886] usb 13-1: config 0 interface 0 has no altsetting 0 [ 557.114528][T10886] usb 13-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 557.120712][T10886] usb 13-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 557.126813][T10886] usb 13-1: Product: syz [ 557.128207][T10886] usb 13-1: Manufacturer: syz [ 557.132260][T10886] usb 13-1: SerialNumber: syz [ 557.138282][T10886] usb 13-1: config 0 descriptor?? [ 557.143601][T10886] yurex 13-1:0.0: USB YUREX device now attached to Yurex #1 [ 557.365796][T14716] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.411836][T14718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 557.418185][T14718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 557.433920][T14716] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.485377][T14716] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.533747][T14716] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.626622][ T5829] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.631003][ T5829] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.633663][ T5829] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.646522][ T5829] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.666025][ T5747] usb 13-1: USB disconnect, device number 28 [ 557.670546][ T5747] yurex 13-1:0.0: USB YUREX #1 now disconnected [ 559.157438][T10887] usb 11-1: USB disconnect, device number 35 [ 561.043420][T14754] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 561.250592][T14766] wg2 speed is unknown, defaulting to 1000 [ 561.332724][ T9] usb 12-1: new high-speed USB device number 35 using dummy_hcd [ 561.490088][ T9] usb 12-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 561.517052][ T9] usb 12-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 561.530343][ T9] usb 12-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 561.537998][ T9] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.544988][ T9] usb 12-1: Product: syz [ 561.548678][ T9] usb 12-1: Manufacturer: syz [ 561.551788][ T9] usb 12-1: SerialNumber: syz [ 561.563454][ T9] ti_usb_3410_5052 12-1:2.0: TI USB 5052 2 port adapter converter detected [ 561.579784][ T9] usb 12-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 561.594588][ T9] usb 12-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 561.731398][T14784] netlink: 'syz.6.2138': attribute type 15 has an invalid length. [ 561.734028][T14784] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2138'. [ 561.956073][T14793] syzkaller0: entered promiscuous mode [ 561.958115][T14793] syzkaller0: entered allmulticast mode [ 562.085244][T14795] ehci-pci 0000:00:1d.7: remove, state 1 [ 562.087491][T14795] usb usb1: USB disconnect, device number 1 [ 562.089490][T14795] usb 1-1: USB disconnect, device number 2 [ 562.140869][T14797] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 562.171651][T14795] ehci-pci 0000:00:1d.7: USB bus 1 deregistered [ 562.373680][T14798] ehci-pci 0000:00:1d.7: EHCI Host Controller [ 562.386175][T14798] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 1 [ 562.394560][T14798] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000 [ 562.421260][T14798] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00 [ 562.425224][T14798] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 562.428608][T14798] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 562.431820][T14798] usb usb1: Product: EHCI Host Controller [ 562.439678][T14805] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2144'. [ 562.442742][T14798] usb usb1: Manufacturer: Linux syzkaller ehci_hcd [ 562.444931][T14798] usb usb1: SerialNumber: 0000:00:1d.7 [ 562.466612][T14798] hub 1-0:1.0: USB hub found [ 562.468550][T14798] hub 1-0:1.0: 6 ports detected [ 562.519099][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.521909][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.553509][T14798] hub 3-0:1.0: USB hub found [ 562.557421][T14798] hub 3-0:1.0: 2 ports detected [ 562.601600][T14798] hub 4-0:1.0: USB hub found [ 562.605112][T14798] hub 4-0:1.0: 2 ports detected [ 562.756523][ T9] usb 1-1: new high-speed USB device number 2 using ehci-pci [ 562.827350][T10886] e1000 0000:00:06.0 eth0: Reset adapter [ 562.907820][T14813] program syz.6.2145 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 562.943866][ T9] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 562.954275][ T9] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 562.964880][T14812] vfio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 562.970883][ T9] usb 1-1: Product: QEMU USB Tablet [ 562.977769][ T9] usb 1-1: Manufacturer: QEMU [ 562.986217][ T9] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 563.052565][T14814] base or size exceeds the MTRR width [ 563.203668][ T9] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb1/1-1/1-1:1.0/0003:0627:0001.0079/input/input148 [ 563.382601][ T9] hid-generic 0003:0627:0001.0079: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 563.418436][T14813] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 563.592552][T14813] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 563.615739][T14813] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 563.635760][T14813] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 563.667573][T14813] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 563.702709][T14813] pci 0000:00:01.0: pci_fixup_video+0x0/0x280 took 34481 usecs [ 563.747481][ T24] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 563.853313][T14813] pci 0000:00:01.0: Adding to iommu group 1 [ 563.892463][T14813] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 563.894661][T14813] pci 0000:00:01.0: vgaarb: bridge control possible [ 563.896736][T14813] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 563.921387][T14813] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 563.924023][T14813] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 563.939365][T14813] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 563.952094][T14813] [drm] Found bochs VGA, ID 0xb0c5. [ 563.957123][T14813] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 563.971487][T14813] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 564.034511][T14813] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 564.209360][T14827] netfs: Duplicate cookie detected [ 564.211466][T14827] netfs: O-cookie c=00000002 [fl=4000 na=0 nA=0 s=-] [ 564.213628][T14827] netfs: O-cookie V=00000003 [9p,syz,] [ 564.215458][T14827] netfs: O-key=[8] '2300040500000000' [ 564.217350][T14827] netfs: N-cookie c=00000003 [fl=0 na=0 nA=0 s=-] [ 564.219472][T14827] netfs: N-cookie V=00000003 [9p,syz,] [ 564.221287][T14827] netfs: N-key=[8] '2300040500000000' [ 564.228658][T14831] 9pnet_virtio: no channels available for device syz [ 564.486527][T11843] usb 11-1: new high-speed USB device number 36 using dummy_hcd [ 564.643026][T11843] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 564.653944][T11843] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 564.661007][T11843] usb 11-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 564.673942][T11843] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.694811][T11843] spcp8x5 11-1:1.0: SPCP8x5 converter detected [ 564.716151][T11843] usb 11-1: SPCP8x5 converter now attached to ttyUSB2 [ 564.782076][T14846] syzkaller0: entered promiscuous mode [ 564.785678][T14846] syzkaller0: entered allmulticast mode [ 564.915428][T14851] 9pnet_virtio: no channels available for device syz [ 564.987360][T14759] ti_usb_3410_5052_2 ttyUSB0: ti_get_lsr - get port status command failed, -110 [ 564.991043][T14759] ti_usb_3410_5052_2 ttyUSB0: ti_close - cannot send close port command, -32 [ 564.994682][ T5747] usb 12-1: USB disconnect, device number 35 [ 564.995218][T14827] ti_usb_3410_5052_2 ttyUSB0: ti_open - submit interrupt urb failed, -19 [ 565.016104][ T5747] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 565.039977][ T5747] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 565.045060][ T5747] ti_usb_3410_5052 12-1:2.0: device disconnected [ 566.029041][T10886] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 567.302265][T11843] usb 11-1: USB disconnect, device number 36 [ 567.324938][T11843] SPCP8x5 ttyUSB2: SPCP8x5 converter now disconnected from ttyUSB2 [ 567.332955][T11843] spcp8x5 11-1:1.0: device disconnected [ 567.775390][ T5594] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.860603][ T5594] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.915698][ T5594] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.965156][ T5594] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.120765][ T5594] bridge_slave_1: left allmulticast mode [ 568.122994][ T5594] bridge_slave_1: left promiscuous mode [ 568.125138][ T5594] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.133018][ T5594] bridge_slave_0: left allmulticast mode [ 568.135049][ T5594] bridge_slave_0: left promiscuous mode [ 568.139059][ T5594] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.356063][ T5594] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 568.362028][ T5594] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 568.365978][ T5594] bond0 (unregistering): Released all slaves [ 568.371642][ T5594] bond1 (unregistering): Released all slaves [ 568.604414][ T5455] 8021q: adding VLAN 0 to HW filter on device eth21 [ 568.769371][ T5594] hsr_slave_0: left promiscuous mode [ 568.771623][ T5594] hsr_slave_1: left promiscuous mode [ 568.776313][ T5594] veth1_macvtap: left promiscuous mode [ 568.784567][ T5594] veth0_macvtap: left promiscuous mode [ 568.786975][ T5594] veth1_vlan: left promiscuous mode [ 568.788771][ T5594] veth0_vlan: left promiscuous mode [ 569.021028][ T5594] team0 (unregistering): Port device team_slave_1 removed [ 569.036907][ T5594] team0 (unregistering): Port device team_slave_0 removed [ 569.118898][ T5594] team0 (unregistering): Port device dummy0 removed [ 569.165661][ T5455] 8021q: adding VLAN 0 to HW filter on device eth22 [ 569.406232][ T5455] 8021q: adding VLAN 0 to HW filter on device eth23 [ 569.568955][ T5455] 8021q: adding VLAN 0 to HW filter on device eth24 [ 573.046025][T14907] ehci-pci 0000:00:1d.7: remove, state 1 [ 573.046094][T14907] usb usb1: USB disconnect, device number 1 [ 573.046107][T14907] usb 1-1: USB disconnect, device number 2 [ 573.101089][T13373] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 573.117751][T13373] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 573.129671][T13373] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 573.134651][T13373] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 573.139625][T13373] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 573.153991][T14907] ehci-pci 0000:00:1d.7: USB bus 1 deregistered [ 573.279073][ T24] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 573.403912][T14913] ehci-pci 0000:00:1d.7: EHCI Host Controller [ 573.418823][T14913] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 1 [ 573.457811][T14913] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000 [ 573.467210][ T24] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 573.474857][ T24] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 573.482008][ T24] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 573.487534][T14913] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00 [ 573.496535][ T24] usb 10-1: config 0 interface 0 has no altsetting 0 [ 573.499903][ T24] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 573.502775][ T24] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 573.503489][T14913] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 573.508999][ T24] usb 10-1: config 0 interface 0 has no altsetting 0 [ 573.513865][ T24] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 573.522009][T14913] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 573.526486][ T24] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 573.526506][ T24] usb 10-1: config 0 interface 0 has no altsetting 0 [ 573.527507][ T24] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 573.527532][ T24] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 573.527547][ T24] usb 10-1: config 0 interface 0 has no altsetting 0 [ 573.529236][ T24] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 573.534123][T14913] usb usb1: Product: EHCI Host Controller [ 573.541790][ T24] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 573.544900][T14913] usb usb1: Manufacturer: Linux syzkaller ehci_hcd [ 573.553368][T14913] usb usb1: SerialNumber: 0000:00:1d.7 [ 573.555889][ T24] usb 10-1: config 0 interface 0 has no altsetting 0 [ 573.563939][T14911] wg2 speed is unknown, defaulting to 1000 [ 573.567517][ T24] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 573.570376][ T24] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 573.573719][ T24] usb 10-1: config 0 interface 0 has no altsetting 0 [ 573.586967][ T24] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 573.589838][ T24] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 573.593234][ T24] usb 10-1: config 0 interface 0 has no altsetting 0 [ 573.599767][ T24] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 573.606505][ T24] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 573.610212][T14913] hub 1-0:1.0: USB hub found [ 573.615230][T14913] hub 1-0:1.0: 6 ports detected [ 573.616505][ T24] usb 10-1: config 0 interface 0 has no altsetting 0 [ 573.624179][ T24] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 573.636514][ T24] usb 10-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 573.639941][ T24] usb 10-1: Product: syz [ 573.641766][ T24] usb 10-1: Manufacturer: syz [ 573.643750][ T24] usb 10-1: SerialNumber: syz [ 573.653885][ T24] usb 10-1: config 0 descriptor?? [ 573.679778][ T24] yurex 10-1:0.0: USB YUREX device now attached to Yurex #0 [ 573.711274][T14913] hub 3-0:1.0: USB hub found [ 573.717257][T14913] hub 3-0:1.0: 2 ports detected [ 573.767567][T14913] hub 4-0:1.0: USB hub found [ 573.770052][T14913] hub 4-0:1.0: 2 ports detected [ 573.940490][ T10] usb 1-1: new high-speed USB device number 2 using ehci-pci [ 574.031696][T14939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 574.043867][T14939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 574.108434][ T5820] usb 12-1: new low-speed USB device number 36 using dummy_hcd [ 574.155876][ T10] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 574.164443][ T10] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 574.174148][ T10] usb 1-1: Product: QEMU USB Tablet [ 574.177962][ T10] usb 1-1: Manufacturer: QEMU [ 574.184995][ T10] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 574.219428][ T10] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb1/1-1/1-1:1.0/0003:0627:0001.007A/input/input149 [ 574.276961][T14911] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.278473][ T5820] usb 12-1: config 168 descriptor has 1 excess byte, ignoring [ 574.279401][T14911] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.284415][T14911] bridge_slave_0: entered allmulticast mode [ 574.286017][ T5820] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 574.287579][T14911] bridge_slave_0: entered promiscuous mode [ 574.290196][ T5820] usb 12-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 574.296746][T14911] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.299109][T14911] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.301399][T14911] bridge_slave_1: entered allmulticast mode [ 574.303545][ T5820] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 574.304430][T14911] bridge_slave_1: entered promiscuous mode [ 574.318271][ T10] hid-generic 0003:0627:0001.007A: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 574.325308][ T5820] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 574.334895][ T5820] usb 12-1: config 168 descriptor has 1 excess byte, ignoring [ 574.343500][ T5820] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 574.359874][T14911] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 574.367415][T14911] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 574.368956][ T5820] usb 12-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 574.379559][ T5820] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 574.383079][ T5820] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 574.392170][ T5820] usb 12-1: config 168 descriptor has 1 excess byte, ignoring [ 574.396324][ T5820] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 574.403401][T14911] team0: Port device team_slave_0 added [ 574.405374][ T5820] usb 12-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 574.416843][ T5820] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 574.422984][ T5820] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 574.431218][T14911] team0: Port device team_slave_1 added [ 574.438221][ T5820] usb 12-1: string descriptor 0 read error: -22 [ 574.442806][ T5820] usb 12-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 574.451990][ T5820] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.486095][ T5820] adutux 12-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 574.544911][T14911] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 574.548223][T14911] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 574.556779][T14911] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 574.561419][T14911] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 574.563752][T14911] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 574.572814][T14911] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 574.603243][T14948] syzkaller0: entered promiscuous mode [ 574.605292][T14948] syzkaller0: entered allmulticast mode [ 574.628928][ T5747] usb 10-1: USB disconnect, device number 25 [ 574.632275][ T5747] yurex 10-1:0.0: USB YUREX #0 now disconnected [ 574.652455][T14911] hsr_slave_0: entered promiscuous mode [ 574.654830][T14911] hsr_slave_1: entered promiscuous mode [ 574.657932][T14911] debugfs: 'hsr0' already exists in 'hsr' [ 574.659804][T14911] Cannot create hsr debugfs directory [ 574.916016][ T10] usb 12-1: USB disconnect, device number 36 [ 575.226518][ T5101] Bluetooth: hci0: command tx timeout [ 575.479665][T14972] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 575.974325][T14911] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 575.980889][T14911] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 575.986981][T14911] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 575.992436][T14911] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 576.006739][T14911] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 576.018704][T14911] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 576.021707][T14911] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 576.036208][T14911] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 576.095394][T14911] 8021q: adding VLAN 0 to HW filter on device bond0 [ 576.105624][T14911] 8021q: adding VLAN 0 to HW filter on device team0 [ 576.129692][T14911] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 576.133022][T14911] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 576.236531][T11845] usb 10-1: new full-speed USB device number 26 using dummy_hcd [ 576.263408][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.265748][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 576.351829][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.354482][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 576.415115][T11845] usb 10-1: unable to get BOS descriptor or descriptor too short [ 576.423539][T11845] usb 10-1: not running at top speed; connect to a high speed hub [ 576.432171][T11845] usb 10-1: config 1 has an invalid descriptor of length 231, skipping remainder of the config [ 576.443944][T11845] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 576.458470][T11845] usb 10-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 576.478981][T11845] usb 10-1: string descriptor 0 read error: -22 [ 576.484824][T11845] usb 10-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 576.500068][T11845] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.562147][T11845] usb 10-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 576.581028][T11845] usb 10-1: found format II with max.bitrate = 512, frame size=4095 [ 576.590177][T11845] usb 10-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 576.596114][T11845] usb 10-1: found format II with max.bitrate = 512, frame size=4095 [ 576.822285][T14994] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 576.883867][T14911] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 576.947651][T15035] kvm: requested 38552 ns i8254 timer period limited to 200000 ns [ 576.962194][T15035] kvm: requested 17600 ns i8254 timer period limited to 200000 ns [ 576.971595][T15035] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 576.977949][T15035] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 576.983282][T15035] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 576.989928][T15035] kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 576.995720][T15035] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 577.000832][T15035] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 577.006905][T15035] kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 577.308674][ T5101] Bluetooth: hci0: command tx timeout [ 577.413297][T14911] veth0_vlan: entered promiscuous mode [ 577.445469][T14911] veth1_vlan: entered promiscuous mode [ 577.514335][T14911] veth0_macvtap: entered promiscuous mode [ 577.529198][T14911] veth1_macvtap: entered promiscuous mode [ 577.563757][T14911] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 577.576286][T14911] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 577.596627][ T5594] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.661840][ T5594] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.661871][ T5594] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.661889][ T5594] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.672177][T15059] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2171'. [ 577.805263][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 577.805279][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 577.903097][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 577.920249][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 578.192285][T15070] FAULT_INJECTION: forcing a failure. [ 578.192285][T15070] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 578.197710][T15070] CPU: 0 UID: 0 PID: 15070 Comm: syz.8.2173 Tainted: G L syzkaller #0 PREEMPT(full) [ 578.197729][T15070] Tainted: [L]=SOFTLOCKUP [ 578.197733][T15070] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 578.197746][T15070] Call Trace: [ 578.197758][T15070] [ 578.197763][T15070] dump_stack_lvl+0x100/0x190 [ 578.197846][T15070] should_fail_ex.cold+0x5/0xa [ 578.197868][T15070] _copy_from_iter+0x1f4/0x1690 [ 578.197950][T15070] ? __lock_acquire+0x49f/0x1a40 [ 578.197988][T15070] ? __pfx__copy_from_iter+0x10/0x10 [ 578.198007][T15070] ? _parse_integer_limit+0x1ac/0x220 [ 578.198026][T15070] tun_get_user+0x3ba/0x3c20 [ 578.198069][T15070] ? __pfx_tun_get_user+0x10/0x10 [ 578.198084][T15070] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 578.198108][T15070] ? find_held_lock+0x2b/0x80 [ 578.198122][T15070] ? tun_get+0x191/0x370 [ 578.198134][T15070] ? tun_get+0x191/0x370 [ 578.198153][T15070] tun_chr_write_iter+0xdc/0x200 [ 578.198169][T15070] vfs_write+0x6ac/0x1050 [ 578.198192][T15070] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 578.198208][T15070] ? __pfx_vfs_write+0x10/0x10 [ 578.198217][T15070] ? find_held_lock+0x2b/0x80 [ 578.198241][T15070] ksys_write+0x12a/0x250 [ 578.198252][T15070] ? __pfx_ksys_write+0x10/0x10 [ 578.198262][T15070] ? ksys_write+0x1ac/0x250 [ 578.198272][T15070] ? __pfx_ksys_write+0x10/0x10 [ 578.198286][T15070] __do_fast_syscall_32+0xe7/0x970 [ 578.198309][T15070] ? lockdep_hardirqs_on+0x78/0x100 [ 578.198325][T15070] do_fast_syscall_32+0x32/0x70 [ 578.198341][T15070] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 578.198357][T15070] RIP: 0023:0xf7f73fec [ 578.198375][T15070] Code: Unable to access opcode bytes at 0xf7f73fc2. [ 578.198385][T15070] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 578.198398][T15070] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000000 [ 578.198405][T15070] RDX: 000000000000ffdd RSI: 0000000000000000 RDI: 0000000000000000 [ 578.198412][T15070] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 578.198419][T15070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 578.198426][T15070] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 578.198440][T15070] [ 578.377624][T15076] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 578.482321][T15078] ehci-pci 0000:00:1d.7: remove, state 1 [ 578.484298][T15078] usb usb1: USB disconnect, device number 1 [ 578.486272][T15078] usb 1-1: USB disconnect, device number 2 [ 578.555693][T15078] ehci-pci 0000:00:1d.7: USB bus 1 deregistered [ 578.636867][T15084] syzkaller0: entered promiscuous mode [ 578.640939][T15084] syzkaller0: entered allmulticast mode [ 578.958141][T15080] ehci-pci 0000:00:1d.7: EHCI Host Controller [ 578.974628][T15080] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 1 [ 579.001026][T15080] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000 [ 579.019112][T15080] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00 [ 579.041318][T15080] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 579.044413][T15080] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 579.049117][T15080] usb usb1: Product: EHCI Host Controller [ 579.051089][T15080] usb usb1: Manufacturer: Linux syzkaller ehci_hcd [ 579.053266][T15080] usb usb1: SerialNumber: 0000:00:1d.7 [ 579.139116][T15080] hub 1-0:1.0: USB hub found [ 579.171241][T15080] hub 1-0:1.0: 6 ports detected [ 579.390229][T15080] hub 3-0:1.0: USB hub found [ 579.396627][ T5101] Bluetooth: hci0: command tx timeout [ 579.400185][T15080] hub 3-0:1.0: 2 ports detected [ 579.451505][T15080] hub 4-0:1.0: USB hub found [ 579.468640][T15080] hub 4-0:1.0: 2 ports detected [ 579.526581][ T10] usb 1-1: new high-speed USB device number 2 using ehci-pci [ 579.670867][T11845] usb 10-1: USB disconnect, device number 26 [ 579.673086][ T5842] libceph: connect (1)[c::]:6789 error -101 [ 579.695247][ T5842] libceph: mon0 (1)[c::]:6789 connect error [ 579.713459][T15097] ceph: No mds server is up or the cluster is laggy [ 579.751649][ T10] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 579.774944][ T10] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 579.793816][ T10] usb 1-1: Product: QEMU USB Tablet [ 579.810526][ T10] usb 1-1: Manufacturer: QEMU [ 579.817794][ T10] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 580.006867][T11843] libceph: connect (1)[c::]:6789 error -101 [ 580.019168][T11843] libceph: mon0 (1)[c::]:6789 connect error [ 580.059540][ T10] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb1/1-1/1-1:1.0/0003:0627:0001.007B/input/input150 [ 580.272214][ T10] hid-generic 0003:0627:0001.007B: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 580.348622][T15113] syzkaller0: entered promiscuous mode [ 580.354509][T15113] syzkaller0: entered allmulticast mode [ 580.389002][T15117] ehci-pci 0000:00:1d.7: remove, state 1 [ 580.395453][T15117] usb usb1: USB disconnect, device number 1 [ 580.401880][T15117] usb 1-1: USB disconnect, device number 2 [ 580.533607][T15117] ehci-pci 0000:00:1d.7: USB bus 1 deregistered [ 580.555117][T15122] fido_id[15122]: Failed to open report descriptor at '/sys/devices/pci0000:00/0000:00:1d.7/report_descriptor': No such file or directory [ 580.647294][T11844] usb 13-1: new high-speed USB device number 29 using dummy_hcd [ 580.792733][T15128] ftl_cs: FTL header not found. [ 580.809794][T11844] usb 13-1: too many configurations: 9, using maximum allowed: 8 [ 580.816463][T11844] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 580.828116][T11844] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 580.836404][T11844] usb 13-1: config 0 interface 0 has no altsetting 0 [ 580.848239][T11844] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 580.855455][T11844] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 580.870490][T11844] usb 13-1: config 0 interface 0 has no altsetting 0 [ 580.877921][T11844] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 580.882245][T11844] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 580.889952][T11844] usb 13-1: config 0 interface 0 has no altsetting 0 [ 580.898082][T11844] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 580.903512][T11844] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 580.911294][T11844] usb 13-1: config 0 interface 0 has no altsetting 0 [ 580.920202][T11844] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 580.925458][T11844] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 580.935407][T11844] usb 13-1: config 0 interface 0 has no altsetting 0 [ 580.943805][T11844] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 580.955457][T11844] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 580.964530][T11844] usb 13-1: config 0 interface 0 has no altsetting 0 [ 580.970465][T11844] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 580.975630][T11844] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 580.986081][T11844] usb 13-1: config 0 interface 0 has no altsetting 0 [ 580.999727][T11844] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 581.009743][T15126] ehci-pci 0000:00:1d.7: EHCI Host Controller [ 581.014679][T11844] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 581.028347][T11844] usb 13-1: config 0 interface 0 has no altsetting 0 [ 581.030709][T15126] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 1 [ 581.044111][T11844] usb 13-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 581.048107][T15126] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000 [ 581.052516][T11844] usb 13-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 581.062228][T15128] block2mtd: mtd1: [/dev/loop0] erase_size = 4KiB [4096] [ 581.066940][T11844] usb 13-1: Product: syz [ 581.070331][T11844] usb 13-1: Manufacturer: syz [ 581.074460][T11844] usb 13-1: SerialNumber: syz [ 581.088821][T11844] usb 13-1: config 0 descriptor?? [ 581.090723][T15126] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00 [ 581.105196][T11844] yurex 13-1:0.0: USB YUREX device now attached to Yurex #0 [ 581.107902][T15126] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 581.115548][T15126] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 581.130071][T15126] usb usb1: Product: EHCI Host Controller [ 581.136802][T15126] usb usb1: Manufacturer: Linux syzkaller ehci_hcd [ 581.144505][T15126] usb usb1: SerialNumber: 0000:00:1d.7 [ 581.209280][T15126] hub 1-0:1.0: USB hub found [ 581.214461][T15126] hub 1-0:1.0: 6 ports detected [ 581.325844][T15126] hub 3-0:1.0: USB hub found [ 581.330415][T15119] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.333981][T15126] hub 3-0:1.0: 2 ports detected [ 581.375507][T15136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 581.381139][T15126] hub 4-0:1.0: USB hub found [ 581.386291][T15126] hub 4-0:1.0: 2 ports detected [ 581.389799][T15136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.433540][T15119] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.466615][ T5101] Bluetooth: hci0: command tx timeout [ 581.556544][ T10] usb 1-1: new high-speed USB device number 2 using ehci-pci [ 581.601387][T15119] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.745449][ T42] kauditd_printk_skb: 2 callbacks suppressed [ 581.745470][ T42] audit: type=1804 audit(1785837506.564:439): pid=15144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.2193" name="/newroot/503/file0" dev="tmpfs" ino=2804 res=1 errno=0 [ 581.757275][T15138] macsec1: entered promiscuous mode [ 581.763914][T15138] virt_wifi0: entered promiscuous mode [ 581.779540][T15119] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.812595][T15144] ref_ctr increment failed for inode: 0xaf4 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88801bcc8000 [ 581.821627][T15137] uprobe: syz.5.2193:15137 failed to unregister, leaking uprobe [ 581.839391][T13373] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 581.847449][T13373] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 581.850752][T13373] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 581.855330][T13373] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 581.863602][T13373] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 581.875333][ T10] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 581.882128][ T10] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 581.884666][ T10] usb 1-1: Product: QEMU USB Tablet [ 581.886318][ T10] usb 1-1: Manufacturer: QEMU [ 581.887874][ T10] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 581.920528][ T10] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb1/1-1/1-1:1.0/0003:0627:0001.007C/input/input151 [ 581.994648][T15148] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 581.996756][T15148] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 582.017451][ T10] hid-generic 0003:0627:0001.007C: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 582.026232][T15148] vhci_hcd vhci_hcd.0: Device attached [ 582.045082][ T5594] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.096949][ T5594] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.103043][T15148] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 582.153994][T15150] configfs-gadget.g1 gadget.0: HOST MAC 56:14:f8:32:0a:a0 [ 582.156561][ T5594] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.157294][T15150] configfs-gadget.g1 gadget.0: MAC 8a:2a:8e:f8:46:10 [ 582.201611][ T5594] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.347155][ T10] usb 50-1: SetAddress Request (14) to port 0 [ 582.355836][ T10] usb 50-1: new SuperSpeed USB device number 14 using vhci_hcd [ 582.398651][T11844] usb 13-1: USB disconnect, device number 29 [ 582.406660][ T1489] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 582.435544][T15165] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2198'. [ 582.437647][T11844] yurex 13-1:0.0: USB YUREX #0 now disconnected [ 582.468848][T15165] vlan2: entered promiscuous mode [ 582.545280][T15142] wg2 speed is unknown, defaulting to 1000 [ 582.560728][T15149] vhci_hcd: connection reset by peer [ 582.563096][ T5594] vhci_hcd vhci_hcd.6: stop threads [ 582.568533][ T1489] usb 5-1: Dual-Role OTG device on HNP port [ 582.572514][ T5594] vhci_hcd vhci_hcd.6: release socket [ 582.581287][ T1489] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 582.585352][ T5594] vhci_hcd vhci_hcd.6: disconnect device [ 582.594181][ T1489] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.748177][ T1489] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 56:14:f8:32:0a:a0 [ 583.043669][T15182] syzkaller0: entered promiscuous mode [ 583.051800][T15182] syzkaller0: entered allmulticast mode [ 583.213619][T15142] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.218222][T15142] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.224592][T15142] bridge_slave_0: entered allmulticast mode [ 583.237309][T15142] bridge_slave_0: entered promiscuous mode [ 583.249111][T15142] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.257684][T15142] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.261694][T15190] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2200'. [ 583.264727][T15142] bridge_slave_1: entered allmulticast mode [ 583.268869][T15142] bridge_slave_1: entered promiscuous mode [ 583.338995][T15193] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 583.341612][T15142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 583.351488][T15142] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 583.379603][T15142] team0: Port device team_slave_0 added [ 583.382898][T15142] team0: Port device team_slave_1 added [ 583.399902][T15199] openvswitch: netlink: Key 6 has unexpected len 18 expected 2 [ 583.420317][T15142] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 583.428688][T15142] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 583.447972][T15142] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 583.458416][T15142] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 583.462061][T15142] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 583.486483][T15142] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 583.523410][T15204] 9pnet_virtio: no channels available for device syz [ 583.657187][T15196] overlayfs: failed to resolve './file2': -2 [ 583.717792][T15142] hsr_slave_0: entered promiscuous mode [ 583.720203][T15142] hsr_slave_1: entered promiscuous mode [ 583.722241][T15142] debugfs: 'hsr0' already exists in 'hsr' [ 583.724011][T15142] Cannot create hsr debugfs directory [ 583.799345][T15209] random: crng reseeded on system resumption [ 583.926170][ T5747] IPVS: starting estimator thread 0... [ 583.946552][T13373] Bluetooth: hci2: command tx timeout [ 583.978716][ T42] audit: type=1804 audit(1785837508.794:440): pid=15216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.2206" name="/newroot/509/file1/file0" dev="9p" ino=84148261 res=1 errno=0 [ 584.017787][T15214] IPVS: using max 43 ests per chain, 103200 per kthread [ 584.249278][ T9] usb 11-1: new high-speed USB device number 37 using dummy_hcd [ 584.417825][ T9] usb 11-1: config 1 has an invalid interface number: 7 but max is 0 [ 584.428779][ T9] usb 11-1: config 1 has no interface number 0 [ 584.437941][ T9] usb 11-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 584.454896][ T9] usb 11-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 584.467333][ T9] usb 11-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 584.483357][ T9] usb 11-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 584.495201][ T9] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.509673][ T9] usb 11-1: Product: syz [ 584.513733][ T9] usb 11-1: Manufacturer: syz [ 584.525801][ T9] usb 11-1: SerialNumber: syz [ 584.535076][T15218] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 584.681812][T15142] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 584.696140][T15142] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 584.706293][T15142] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 584.719063][T15142] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 584.732325][T15142] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 584.756696][T15142] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 584.764739][T15142] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 584.783500][T15142] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 585.050339][T15142] 8021q: adding VLAN 0 to HW filter on device bond0 [ 585.115417][T15142] 8021q: adding VLAN 0 to HW filter on device team0 [ 585.166760][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.169509][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 585.230444][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.233340][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 585.725011][T15240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 585.763229][T15240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 586.036606][T13373] Bluetooth: hci2: command tx timeout [ 587.093206][ T9] usb 11-1: Error in usbnet_get_endpoints (-71) [ 587.161675][T15255] qrtr: Invalid version 0 [ 587.177437][T15255] netlink: 2 bytes leftover after parsing attributes in process `syz.6.2210'. [ 587.183740][T15142] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 587.191135][ T9] usb 11-1: USB disconnect, device number 37 [ 587.284497][T15255] syzkaller1: entered promiscuous mode [ 587.292680][T15255] syzkaller1: entered allmulticast mode [ 587.468137][ T10] usb 50-1: device descriptor read/8, error -110 [ 587.539484][T15142] veth0_vlan: entered promiscuous mode [ 587.553678][T15142] veth1_vlan: entered promiscuous mode [ 587.601848][T15142] veth0_macvtap: entered promiscuous mode [ 587.614933][T15142] veth1_macvtap: entered promiscuous mode [ 587.626099][T11845] libceph: connect (1)[c::]:6789 error -101 [ 587.634364][T11845] libceph: mon0 (1)[c::]:6789 connect error [ 587.662580][T15279] netlink: 'syz.6.2216': attribute type 19 has an invalid length. [ 587.662835][T15142] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 587.688443][T15273] ceph: No mds server is up or the cluster is laggy [ 587.704120][T15142] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 587.826987][ T5829] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.830828][ T5829] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.888375][ T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.908501][ T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.922218][ T10] usb usb50-port1: attempt power cycle [ 588.013177][T15283] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 588.039963][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 588.045874][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 588.094867][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 588.100816][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 588.107543][T13373] Bluetooth: hci2: command tx timeout [ 588.442797][ T5101] Bluetooth: hci0: hardware error 0x00 [ 588.538691][ T10] usb usb50-port1: unable to enumerate USB device [ 588.836574][ T60] usb 14-1: new low-speed USB device number 2 using dummy_hcd [ 588.890261][T15294] ehci-pci 0000:00:1d.7: remove, state 1 [ 588.895231][T15294] usb usb1: USB disconnect, device number 1 [ 588.900193][T15294] usb 1-1: USB disconnect, device number 2 [ 589.008906][ T60] usb 14-1: config 168 descriptor has 1 excess byte, ignoring [ 589.017235][ T60] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 589.037568][ T60] usb 14-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 589.043984][T15294] ehci-pci 0000:00:1d.7: USB bus 1 deregistered [ 589.054903][ T60] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 589.073485][ T60] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 589.091272][ T60] usb 14-1: config 168 descriptor has 1 excess byte, ignoring [ 589.100555][ T60] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 589.113890][ T60] usb 14-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 589.129122][ T60] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 589.145815][ T60] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 589.165836][ T60] usb 14-1: config 168 descriptor has 1 excess byte, ignoring [ 589.173813][ T60] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 589.188387][ T60] usb 14-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 589.211984][ T60] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 589.239309][ T60] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 589.259286][ T60] usb 14-1: string descriptor 0 read error: -22 [ 589.265601][ T60] usb 14-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 589.280338][ T60] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.337351][ T60] adutux 14-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 589.735101][T15295] ehci-pci 0000:00:1d.7: EHCI Host Controller [ 589.743206][T15295] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 1 [ 589.763973][T15295] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000 [ 589.790748][T15295] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00 [ 589.813080][T15295] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 589.819516][T15295] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 589.824805][T15295] usb usb1: Product: EHCI Host Controller [ 589.828985][T15295] usb usb1: Manufacturer: Linux syzkaller ehci_hcd [ 589.833768][T15295] usb usb1: SerialNumber: 0000:00:1d.7 [ 589.857189][T15295] hub 1-0:1.0: USB hub found [ 589.861320][T15295] hub 1-0:1.0: 6 ports detected [ 589.928973][T15295] hub 3-0:1.0: USB hub found [ 589.934245][T15295] hub 3-0:1.0: 2 ports detected [ 589.971339][T15295] hub 4-0:1.0: USB hub found [ 589.978053][T15295] hub 4-0:1.0: 2 ports detected [ 590.146485][ T1350] usb 1-1: new high-speed USB device number 2 using ehci-pci [ 590.197314][T13373] Bluetooth: hci2: command tx timeout [ 590.268609][T15310] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2224'. [ 590.280254][T15310] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2224'. [ 590.351937][ T1350] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 590.363064][ T1350] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 590.371610][ T1350] usb 1-1: Product: QEMU USB Tablet [ 590.375164][ T1350] usb 1-1: Manufacturer: QEMU [ 590.381967][ T1350] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 590.419718][ T1350] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb1/1-1/1-1:1.0/0003:0627:0001.007D/input/input152 [ 590.495228][ T1350] hid-generic 0003:0627:0001.007D: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 590.507610][ T5101] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 591.089501][T15317] netlink: 'syz.5.2226': attribute type 12 has an invalid length. [ 591.128640][T15320] random: crng reseeded on system resumption [ 591.297921][ T42] audit: type=1804 audit(1785837516.124:441): pid=15323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.2225" name="/newroot/19/file1/file0" dev="9p" ino=84148261 res=1 errno=0 [ 591.319517][T15322] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2227'. [ 591.327598][T15322] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 591.333497][T15322] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 591.579301][T15326] 9pnet_virtio: no channels available for device syz [ 592.108451][ T9] usb 14-1: USB disconnect, device number 2 [ 592.411459][T15331] 9pnet_virtio: no channels available for device syz [ 592.418969][T15331] netlink: 44 bytes leftover after parsing attributes in process `syz.9.2230'. [ 593.133617][T15339] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 593.185976][T15340] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 593.303213][T15343] binder: 15342:15343 ioctl c00c6211 0 returned -14 [ 594.124996][T15348] syzkaller0: entered promiscuous mode [ 594.132975][T15348] syzkaller0: entered allmulticast mode [ 594.343471][T15349] wg2 speed is unknown, defaulting to 1000 [ 598.963570][T15434] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 599.162143][T13373] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 599.168088][T13373] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 599.172604][T13373] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 599.180028][T13373] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 599.184094][T13373] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 599.502725][T15446] netlink: 'syz.6.2250': attribute type 10 has an invalid length. [ 599.538156][T15446] team0: Port device dummy0 added [ 599.641969][T15446] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2250'. [ 599.811871][T15436] wg2 speed is unknown, defaulting to 1000 [ 600.447116][T15460] Cannot find add_set index 1 as target [ 600.515671][T15436] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.531678][T15436] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.543035][T15436] bridge_slave_0: entered allmulticast mode [ 600.545805][T15464] FAULT_INJECTION: forcing a failure. [ 600.545805][T15464] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 600.552042][T15464] CPU: 2 UID: 0 PID: 15464 Comm: syz.6.2252 Tainted: G L syzkaller #0 PREEMPT(full) [ 600.552061][T15464] Tainted: [L]=SOFTLOCKUP [ 600.552065][T15464] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 600.552073][T15464] Call Trace: [ 600.552078][T15464] [ 600.552083][T15464] dump_stack_lvl+0x100/0x190 [ 600.552103][T15464] should_fail_ex.cold+0x5/0xa [ 600.552117][T15464] _copy_from_iter+0x1f4/0x1690 [ 600.552131][T15436] bridge_slave_0: entered promiscuous mode [ 600.552151][T15464] ? __asan_memset+0x23/0x50 [ 600.552169][T15464] ? __pfx__copy_from_iter+0x10/0x10 [ 600.552189][T15464] ? __pfx___alloc_skb+0x10/0x10 [ 600.552245][T15464] netlink_sendmsg+0x808/0xda0 [ 600.552278][T15464] ? __pfx_netlink_sendmsg+0x10/0x10 [ 600.552298][T15464] ? apparmor_socket_sendmsg+0x15b/0x270 [ 600.552337][T15464] ____sys_sendmsg+0xa4d/0xbe0 [ 600.552362][T15464] ? __pfx_netlink_sendmsg+0x10/0x10 [ 600.552383][T15464] ? __pfx_____sys_sendmsg+0x10/0x10 [ 600.552407][T15464] ___sys_sendmsg+0x190/0x1e0 [ 600.552428][T15464] ? __pfx____sys_sendmsg+0x10/0x10 [ 600.552458][T15464] ? find_held_lock+0x2b/0x80 [ 600.552493][T15464] __sys_sendmsg+0x160/0x210 [ 600.552515][T15464] ? __pfx___sys_sendmsg+0x10/0x10 [ 600.552545][T15464] ? __pfx_ksys_write+0x10/0x10 [ 600.552567][T15464] __do_fast_syscall_32+0xe7/0x970 [ 600.552593][T15464] ? lockdep_hardirqs_on+0x78/0x100 [ 600.552615][T15464] do_fast_syscall_32+0x32/0x70 [ 600.552635][T15464] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 600.552658][T15464] RIP: 0023:0xf700efec [ 600.552685][T15464] Code: Unable to access opcode bytes at 0xf700efc2. [ 600.552693][T15464] RSP: 002b:00000000f53fd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 600.552707][T15464] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 600.552717][T15464] RDX: 0000000000040810 RSI: 0000000000000000 RDI: 0000000000000000 [ 600.552728][T15464] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 600.552738][T15464] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 600.552749][T15464] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 600.552771][T15464] [ 600.628025][T15436] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.630512][T15436] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.632963][T15436] bridge_slave_1: entered allmulticast mode [ 600.638884][T15436] bridge_slave_1: entered promiscuous mode [ 600.701950][ T5594] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.929859][T15436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 600.966210][T15436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 601.048097][ T5594] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.085855][T15436] team0: Port device team_slave_0 added [ 601.114046][T15436] team0: Port device team_slave_1 added [ 601.191601][ T5594] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.228648][ T5101] Bluetooth: hci3: command tx timeout [ 601.394628][T15436] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 601.409983][T15436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 601.447530][T15436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 601.461465][T15436] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 601.490403][T15436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 601.576476][T15436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 601.605411][ T5594] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.689036][T15436] hsr_slave_0: entered promiscuous mode [ 601.696118][T15436] hsr_slave_1: entered promiscuous mode [ 601.703185][T15436] debugfs: 'hsr0' already exists in 'hsr' [ 601.709688][T15436] Cannot create hsr debugfs directory [ 601.907318][ T1489] usb 14-1: new low-speed USB device number 3 using dummy_hcd [ 602.015579][T15493] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2263'. [ 602.072604][ T1489] usb 14-1: config 168 descriptor has 1 excess byte, ignoring [ 602.081109][ T1489] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 602.103184][ T1489] usb 14-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 602.126269][ T1489] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 602.138065][ T1489] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 602.156173][ T1489] usb 14-1: config 168 descriptor has 1 excess byte, ignoring [ 602.167371][ T1489] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 602.179123][ T1489] usb 14-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 602.184350][ T1489] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 602.192814][ T1489] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 602.213997][T15497] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 602.220446][ T1489] usb 14-1: config 168 descriptor has 1 excess byte, ignoring [ 602.238877][ T1489] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 602.251405][ T1489] usb 14-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 602.263316][ T1489] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 602.275193][ T5594] bridge_slave_1: left allmulticast mode [ 602.279274][ T1489] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 602.292713][ T5594] bridge_slave_1: left promiscuous mode [ 602.299116][ T1489] usb 14-1: string descriptor 0 read error: -22 [ 602.301458][ T1489] usb 14-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 602.304560][ T1489] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.305184][ T5594] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.327596][ T5594] bridge_slave_0: left allmulticast mode [ 602.333198][ T1489] adutux 14-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 602.336704][ T5594] bridge_slave_0: left promiscuous mode [ 602.346990][ T5594] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.384624][ T5594] tipc: Disabling bearer [ 602.544473][ T5594] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 602.552384][ T5594] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 602.560192][ T5594] bond0 (unregistering): Released all slaves [ 602.571966][ T5594] bond1 (unregistering): Released all slaves [ 602.604738][ T5455] 8021q: adding VLAN 0 to HW filter on device eth21 [ 602.908429][ T5594] tipc: Left network mode [ 603.308412][ T5101] Bluetooth: hci3: command tx timeout [ 603.334435][ T5455] 8021q: adding VLAN 0 to HW filter on device eth22 [ 603.579534][T15530] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2271'. [ 603.591480][T15530] netlink: 'syz.6.2271': attribute type 7 has an invalid length. [ 603.600490][T15530] netlink: 'syz.6.2271': attribute type 8 has an invalid length. [ 603.611171][T15530] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2271'. [ 604.066911][ T5455] 8021q: adding VLAN 0 to HW filter on device eth23 [ 604.158347][ T5594] hsr_slave_0: left promiscuous mode [ 604.181485][ T5594] hsr_slave_1: left promiscuous mode [ 604.182698][T15543] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 604.184213][ T5594] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 604.217724][ T5594] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 604.371060][ T5594] team0 (unregistering): Port device team_slave_1 removed [ 604.383480][ T5594] team0 (unregistering): Port device team_slave_0 removed [ 604.449832][ T5594] team0 (unregistering): Port device dummy0 removed [ 604.589641][ T60] usb 14-1: USB disconnect, device number 3 [ 605.153133][ T5594] IPVS: stop unused estimator thread 0... [ 605.243658][T15436] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 605.250234][T15436] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 605.253307][T15436] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 605.260889][T15436] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 605.263986][T15436] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 605.273068][T15436] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 605.275944][T15436] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 605.280382][T15436] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 605.378700][T15436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 605.382267][ T5455] 8021q: adding VLAN 0 to HW filter on device eth24 [ 605.387375][ T5101] Bluetooth: hci3: command tx timeout [ 605.403237][T15436] 8021q: adding VLAN 0 to HW filter on device team0 [ 605.411095][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.413422][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 605.416498][ T10] usb 11-1: new high-speed USB device number 38 using dummy_hcd [ 605.428635][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.431167][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 605.589213][ T10] usb 11-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 605.603824][ T10] usb 11-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 605.620908][T15581] syz_tun: entered allmulticast mode [ 605.625678][ T10] usb 11-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 605.635647][T15580] syz_tun: left allmulticast mode [ 605.640554][ T10] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.674745][ T10] usb 11-1: Quirk or no altset; falling back to MIDI 1.0 [ 605.894001][ T10] snd-usb-audio 11-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 605.913862][ T10] usb 11-1: USB disconnect, device number 38 [ 606.100564][T15565] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2279'. [ 606.216639][T10886] usb 14-1: new low-speed USB device number 4 using dummy_hcd [ 606.316684][T15436] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 606.362625][T15436] veth0_vlan: entered promiscuous mode [ 606.371468][T15436] veth1_vlan: entered promiscuous mode [ 606.372087][T10886] usb 14-1: config 168 descriptor has 1 excess byte, ignoring [ 606.379534][T10886] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 606.383653][T10886] usb 14-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 606.391875][T10886] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 606.395328][T15436] veth0_macvtap: entered promiscuous mode [ 606.404200][T10886] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 606.406132][T15436] veth1_macvtap: entered promiscuous mode [ 606.414167][T10886] usb 14-1: config 168 descriptor has 1 excess byte, ignoring [ 606.421233][T15436] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 606.421604][T10886] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 606.427966][T15436] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 606.432789][T10886] usb 14-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 606.440902][T10886] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 606.448520][T10886] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 606.456432][T10886] usb 14-1: config 168 descriptor has 1 excess byte, ignoring [ 606.458848][T10886] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 606.475176][T10886] usb 14-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 606.488144][T10886] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 606.495736][ T5594] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.500606][T10886] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 606.515939][ T5594] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.537369][T10886] usb 14-1: string descriptor 0 read error: -22 [ 606.540124][ T5594] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.545806][T10886] usb 14-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 606.555146][T10886] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.575161][T10886] adutux 14-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 606.633830][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 606.644411][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 606.647398][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.711128][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 606.713719][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 606.926589][T15622] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2248'. [ 607.131292][T15623] openvswitch: netlink: IPv4 tun info is not correct [ 607.466662][ T5101] Bluetooth: hci3: command tx timeout [ 608.313231][T15666] veth1_macvtap: left promiscuous mode [ 608.366652][ T10] usb 10-1: new low-speed USB device number 27 using dummy_hcd [ 608.375236][T15666] veth1_macvtap: entered promiscuous mode [ 608.386508][ T1350] usb 8-1: new low-speed USB device number 5 using dummy_hcd [ 608.520695][ T10] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 608.529322][ T10] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 608.545062][ T1350] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 608.548421][ T10] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 608.553137][ T1350] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 608.555315][T15678] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2289'. [ 608.557810][ T10] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 608.565239][ T1350] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 608.572249][ T10] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 608.578907][ T1350] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 608.588580][ T10] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 608.593232][ T1350] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 608.599835][ T10] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 608.604885][ T10] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 608.610626][ T10] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 608.615094][ T1350] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 608.620393][ T1350] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 608.625794][ T10] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 608.633245][ T1350] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 608.639931][ T1350] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 608.644972][ T1350] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 608.649545][ T10] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 608.652623][ T10] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 608.657485][ T10] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 608.661975][ T10] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 608.666961][ T10] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 608.671330][ T1350] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 608.674179][ T1350] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 608.680091][ T1350] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 608.684712][ T1350] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 608.692637][ T1350] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 608.700157][T15681] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 608.704510][ T10] usb 10-1: string descriptor 0 read error: -22 [ 608.707734][ T10] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 608.712244][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.720041][ T1350] usb 8-1: string descriptor 0 read error: -22 [ 608.723275][ T1350] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 608.732468][ T1350] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.738429][ T10] adutux 10-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 608.766113][ T1350] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux2 [ 609.067480][ T1489] usb 14-1: USB disconnect, device number 4 [ 609.208913][ T1350] usb 8-1: USB disconnect, device number 5 [ 609.260646][T15695] netlink: 'syz.9.2291': attribute type 29 has an invalid length. [ 610.205304][T15719] ehci-pci 0000:00:1d.7: remove, state 1 [ 610.213322][T15719] usb usb1: USB disconnect, device number 1 [ 610.224288][T15719] usb 1-1: USB disconnect, device number 2 [ 610.439074][T15719] ehci-pci 0000:00:1d.7: USB bus 1 deregistered [ 610.631886][T15729] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2297'. [ 610.640884][T15729] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2297'. [ 610.713966][ T1350] hid-generic 0000:0000:0000.007E: unknown main item tag 0x7 [ 610.718483][ T1350] hid-generic 0000:0000:0000.007E: ignoring exceeding usage max [ 610.721339][T15734] vlan2: entered promiscuous mode [ 610.724085][ T1350] hid-generic 0000:0000:0000.007E: unknown main item tag 0x0 [ 610.726536][ T1350] hid-generic 0000:0000:0000.007E: unknown main item tag 0x0 [ 610.729148][ T1350] hid-generic 0000:0000:0000.007E: unknown main item tag 0x0 [ 610.731491][ T1350] hid-generic 0000:0000:0000.007E: unknown main item tag 0x0 [ 610.733846][ T1350] hid-generic 0000:0000:0000.007E: unknown main item tag 0x0 [ 610.736133][ T1350] hid-generic 0000:0000:0000.007E: unknown main item tag 0x0 [ 610.739506][ T1350] hid-generic 0000:0000:0000.007E: unknown main item tag 0x0 [ 610.742285][ T1350] hid-generic 0000:0000:0000.007E: unknown main item tag 0x0 [ 610.744650][ T1350] hid-generic 0000:0000:0000.007E: unknown main item tag 0x0 [ 610.760447][ T1350] hid-generic 0000:0000:0000.007E: hidraw0: HID v0.00 Device [syz0] on syz0 [ 610.826012][ T1350] usb 10-1: USB disconnect, device number 27 [ 610.842547][T15738] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2299'. [ 610.913787][ T42] audit: type=1326 audit(1785837535.734:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15733 comm="syz.3.2298" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x0 [ 610.966469][ T10] usb 14-1: new high-speed USB device number 5 using dummy_hcd [ 611.148330][ T10] usb 14-1: too many configurations: 9, using maximum allowed: 8 [ 611.151795][ T10] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 611.154844][ T10] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 236, changing to 11 [ 611.159303][ T10] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26246, setting to 1024 [ 611.166513][ T10] usb 14-1: config 0 interface 0 has no altsetting 0 [ 611.181118][ T10] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 611.184328][ T10] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 236, changing to 11 [ 611.188014][ T10] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26246, setting to 1024 [ 611.192483][ T10] usb 14-1: config 0 interface 0 has no altsetting 0 [ 611.196007][ T10] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 611.199166][ T10] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 236, changing to 11 [ 611.202775][ T10] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26246, setting to 1024 [ 611.206315][ T10] usb 14-1: config 0 interface 0 has no altsetting 0 [ 611.209592][ T10] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 611.212591][ T10] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 236, changing to 11 [ 611.216253][ T10] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26246, setting to 1024 [ 611.220008][ T10] usb 14-1: config 0 interface 0 has no altsetting 0 [ 611.223078][ T10] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 611.225957][ T10] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 236, changing to 11 [ 611.229790][ T10] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26246, setting to 1024 [ 611.233409][ T10] usb 14-1: config 0 interface 0 has no altsetting 0 [ 611.236471][ T10] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 611.239472][ T10] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 236, changing to 11 [ 611.243030][ T10] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26246, setting to 1024 [ 611.250752][ T10] usb 14-1: config 0 interface 0 has no altsetting 0 [ 611.254291][ T10] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 611.257453][ T10] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 236, changing to 11 [ 611.261078][ T10] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26246, setting to 1024 [ 611.264726][ T10] usb 14-1: config 0 interface 0 has no altsetting 0 [ 611.268115][ T10] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 611.271092][ T10] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 236, changing to 11 [ 611.274650][ T10] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 26246, setting to 1024 [ 611.278359][ T10] usb 14-1: config 0 interface 0 has no altsetting 0 [ 611.282275][ T10] usb 14-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 611.285229][ T10] usb 14-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 611.288259][ T10] usb 14-1: Product: syz [ 611.289815][ T10] usb 14-1: Manufacturer: syz [ 611.291406][ T10] usb 14-1: SerialNumber: syz [ 611.294480][ T10] usb 14-1: config 0 descriptor?? [ 611.297423][T15729] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 611.311611][ T10] yurex 14-1:0.0: USB YUREX device now attached to Yurex #0 [ 611.506548][ T5747] usb 11-1: new low-speed USB device number 39 using dummy_hcd [ 611.635214][T15754] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2303'. [ 611.645769][T15754] vlan3: entered promiscuous mode [ 611.647737][T15754] bond_slave_1: entered promiscuous mode [ 611.658267][ T5747] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 611.664524][ T5747] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 611.672806][ T5747] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 611.676653][ T5747] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 611.687443][ T5747] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 611.702224][ T5747] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 611.713720][ T5747] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 611.726685][ T5747] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 611.730663][ T5747] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 611.740645][ T5747] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 611.745983][ T5747] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 611.749580][ T5747] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 611.755147][ T5747] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 611.759018][ T5747] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 611.762695][ T5747] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 611.769918][ T5747] usb 11-1: string descriptor 0 read error: -22 [ 611.772951][ T5747] usb 11-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 611.786867][ T5747] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.838370][ T5747] adutux 11-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 611.893486][T15759] binder: 15758:15759 ioctl c00c6211 0 returned -14 [ 612.246609][ T10] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 612.330345][T11845] usb 11-1: USB disconnect, device number 39 [ 612.416045][ T10] usb 10-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 612.421779][ T10] usb 10-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 612.428430][ T10] usb 10-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 612.431493][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.434176][ T10] usb 10-1: Product: syz [ 612.435945][ T10] usb 10-1: Manufacturer: syz [ 612.438725][ T10] usb 10-1: SerialNumber: syz [ 612.450235][ T10] ti_usb_3410_5052 10-1:2.0: TI USB 5052 2 port adapter converter detected [ 612.462625][ T10] usb 10-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 612.470101][ T10] usb 10-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 612.897011][T15769] FAULT_INJECTION: forcing a failure. [ 612.897011][T15769] name failslab, interval 1, probability 0, space 0, times 0 [ 612.902329][T15769] CPU: 2 UID: 0 PID: 15769 Comm: syz.3.2308 Tainted: G L syzkaller #0 PREEMPT(full) [ 612.902349][T15769] Tainted: [L]=SOFTLOCKUP [ 612.902354][T15769] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 612.902362][T15769] Call Trace: [ 612.902368][T15769] [ 612.902374][T15769] dump_stack_lvl+0x100/0x190 [ 612.902412][T15769] should_fail_ex.cold+0x5/0xa [ 612.902429][T15769] should_failslab+0xc2/0x120 [ 612.902449][T15769] __kmalloc_cache_noprof+0x91/0x6c0 [ 612.902464][T15769] ? configfs_write_iter+0x388/0x4e0 [ 612.902499][T15769] configfs_write_iter+0x388/0x4e0 [ 612.902513][T15769] vfs_write+0x6ac/0x1050 [ 612.902525][T15769] ? __pfx_configfs_write_iter+0x10/0x10 [ 612.902539][T15769] ? __pfx_vfs_write+0x10/0x10 [ 612.902548][T15769] ? find_held_lock+0x2b/0x80 [ 612.902574][T15769] ksys_write+0x12a/0x250 [ 612.902585][T15769] ? __pfx_ksys_write+0x10/0x10 [ 612.902595][T15769] ? ksys_write+0x1ac/0x250 [ 612.902606][T15769] ? __pfx_ksys_write+0x10/0x10 [ 612.902620][T15769] __do_fast_syscall_32+0xe7/0x970 [ 612.902637][T15769] ? lockdep_hardirqs_on+0x78/0x100 [ 612.902653][T15769] do_fast_syscall_32+0x32/0x70 [ 612.902670][T15769] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 612.902686][T15769] RIP: 0023:0xf70befec [ 612.902702][T15769] Code: Unable to access opcode bytes at 0xf70befc2. [ 612.902708][T15769] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 612.902720][T15769] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800005c0 [ 612.902728][T15769] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000000 [ 612.902735][T15769] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 612.902745][T15769] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 612.902752][T15769] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 612.902767][T15769] [ 613.245219][T15784] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2312'. [ 613.572095][ C0] usb 14-1: yurex_control_callback - control failed: -2 [ 614.126687][ T10] usb 14-1: USB disconnect, device number 5 [ 614.684817][ T10] yurex 14-1:0.0: USB YUREX #0 now disconnected [ 615.027813][ T10] usb 10-1: USB disconnect, device number 28 [ 615.051578][ T10] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 615.070558][ T10] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 615.093499][ T10] ti_usb_3410_5052 10-1:2.0: device disconnected [ 615.160952][T15818] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2321'. [ 615.168291][T15818] vlan2: entered promiscuous mode [ 615.170384][T15818] bond_slave_1: entered promiscuous mode [ 615.275332][T15825] netlink: 'syz.9.2324': attribute type 1 has an invalid length. [ 615.335491][T15825] bond1: entered promiscuous mode [ 615.338390][T15829] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2324'. [ 615.350382][T15825] 8021q: adding VLAN 0 to HW filter on device bond1 [ 615.354384][T15829] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2324'. [ 615.468134][T15825] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2324'. [ 615.472657][ T10] usb 10-1: new full-speed USB device number 29 using dummy_hcd [ 615.777193][T15837] netlink: 'syz.9.2328': attribute type 1 has an invalid length. [ 615.838712][T15837] 8021q: adding VLAN 0 to HW filter on device bond2 [ 616.330323][ T10] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 616.348031][ T10] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 616.355517][ T10] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 616.363159][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.382874][T15852] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2331'. [ 616.546530][ T1489] usb 8-1: new low-speed USB device number 6 using dummy_hcd [ 616.639421][ T10] usb 10-1: usb_control_msg returned -32 [ 616.713520][ T1489] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 616.740862][ T1489] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 616.776859][ T1489] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 616.803827][ T1489] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 616.824191][ T1489] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 616.846798][ T1489] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 616.856043][ T1489] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 616.871576][ T1489] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 616.894954][ T1489] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 616.916607][ T1489] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 616.948239][ T1489] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 616.957718][ T1489] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 616.974298][ T1489] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 617.011536][ T1489] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 617.046872][ T1489] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 617.078995][ T1489] usb 8-1: string descriptor 0 read error: -22 [ 617.086321][ T1489] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 617.097832][ T1489] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.260330][ T10] usbtmc 10-1:16.0: can't read capabilities [ 617.317955][ T1489] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 617.416700][T15873] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(5) [ 617.418830][T15873] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 617.421237][T15873] vhci_hcd vhci_hcd.0: Device attached [ 617.536892][ T5594] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.597919][ T5747] vhci_hcd vhci_hcd.9: vhci_device speed not set [ 617.670532][ T5747] usb 55-1: new full-speed USB device number 2 using vhci_hcd [ 618.038515][T15874] vhci_hcd: connection reset by peer [ 618.042176][ T5594] vhci_hcd vhci_hcd.9: stop threads [ 618.047640][ T5594] vhci_hcd vhci_hcd.9: release socket [ 618.053863][ T5594] vhci_hcd vhci_hcd.9: disconnect device [ 618.143271][T15884] team0: No ports can be present during mode change [ 618.603522][ T1489] usb 10-1: USB disconnect, device number 29 [ 618.664774][T15889] ªªªªªª: renamed from vlan0 (while UP) [ 618.808426][T15896] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2341'. [ 618.842348][T15896] vlan2: entered promiscuous mode [ 618.846512][T15896] bond_slave_1: entered promiscuous mode [ 619.166576][ T1489] usb 11-1: new high-speed USB device number 40 using dummy_hcd [ 619.316968][ T1489] usb 11-1: too many configurations: 9, using maximum allowed: 8 [ 619.320879][ T1489] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 619.323766][ T1489] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 619.328008][ T1489] usb 11-1: config 0 interface 0 has no altsetting 0 [ 619.331500][ T1489] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 619.335265][ T1489] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 619.338879][ T1489] usb 11-1: config 0 interface 0 has no altsetting 0 [ 619.342413][ T1489] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 619.345542][ T1489] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 619.349417][ T1489] usb 11-1: config 0 interface 0 has no altsetting 0 [ 619.353546][ T1489] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 619.357609][ T1489] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 619.361987][ T1489] usb 11-1: config 0 interface 0 has no altsetting 0 [ 619.365789][ T1489] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 619.369562][ T1489] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 619.373232][ T1489] usb 11-1: config 0 interface 0 has no altsetting 0 [ 619.376796][ T1489] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 619.379787][ T1489] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 619.383330][ T1489] usb 11-1: config 0 interface 0 has no altsetting 0 [ 619.387189][ T1489] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 619.391718][ T1489] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 619.395227][ T1489] usb 11-1: config 0 interface 0 has no altsetting 0 [ 619.398559][ T1489] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 619.401548][ T1489] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 619.404999][ T1489] usb 11-1: config 0 interface 0 has no altsetting 0 [ 619.410247][ T1489] usb 11-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 619.413151][ T1489] usb 11-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 619.415812][ T1489] usb 11-1: Product: syz [ 619.422057][ T1489] usb 11-1: Manufacturer: syz [ 619.423786][ T1489] usb 11-1: SerialNumber: syz [ 619.427628][ T1489] usb 11-1: config 0 descriptor?? [ 619.582463][ T1489] yurex 11-1:0.0: USB YUREX device now attached to Yurex #1 [ 619.679503][T15899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 619.691933][T15899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 619.705646][T11845] usb 11-1: USB disconnect, device number 40 [ 619.721195][T11845] yurex 11-1:0.0: USB YUREX #1 now disconnected [ 619.732922][ T10] usb 8-1: USB disconnect, device number 6 [ 619.822028][T15909] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2344'. [ 620.602488][T15927] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2350'. [ 620.894919][T15938] Bluetooth: MGMT ver 1.23 [ 621.036595][ T5850] usb 8-1: new low-speed USB device number 7 using dummy_hcd [ 621.205972][T15936] wg2 speed is unknown, defaulting to 1000 [ 621.225945][ T5850] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 621.238447][ T5850] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 621.254496][ T5850] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 621.266314][ T5850] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 621.276667][ T5850] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 621.294909][ T5850] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 621.304752][ T5850] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 621.318719][ T5850] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 621.335111][ T5850] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 621.349518][ T5850] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 621.375053][ T5850] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 621.383803][ T5850] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 621.405342][ T5850] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 621.417632][ T5850] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 621.431564][ T5850] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 621.450175][ T5850] usb 8-1: string descriptor 0 read error: -22 [ 621.454771][ T5850] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 621.464970][ T5850] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.501093][ T5850] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 622.321651][T15965] overlayfs: failed to resolve './file1': -2 [ 623.097023][ T5747] vhci_hcd vhci_hcd.9: vhci_device speed not set [ 623.232292][T15993] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2360'. [ 623.242446][T15993] vlan2: entered promiscuous mode [ 623.955687][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.002838][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.063530][ T5747] usb 8-1: USB disconnect, device number 7 [ 624.974238][T16002] program syz.6.2362 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 625.363541][T16010] x_tables: duplicate underflow at hook 2 [ 625.592617][T16002] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 625.681665][T16002] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 625.702761][T16002] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 625.718668][T16002] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 625.731319][T16002] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 625.755110][T16002] pci 0000:00:01.0: Adding to iommu group 1 [ 625.782428][T16002] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 625.784613][T16002] pci 0000:00:01.0: vgaarb: bridge control possible [ 625.786689][T16002] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 625.814139][T16002] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 625.820948][T16002] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 625.829652][T11843] libceph: connect (1)[c::]:6789 error -101 [ 626.018006][T11843] libceph: mon0 (1)[c::]:6789 connect error [ 626.031619][T16019] ceph: No mds server is up or the cluster is laggy [ 626.113017][T16002] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 626.132166][T16002] [drm] Found bochs VGA, ID 0xb0c5. [ 626.133791][T16002] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 626.139840][T16002] bochs-drm 0000:00:01.0: probe with driver bochs-drm failed with error -4 [ 626.556578][ T5850] usb 11-1: new high-speed USB device number 41 using dummy_hcd [ 626.599128][T16039] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2371'. [ 626.718256][ T5850] usb 11-1: Using ep0 maxpacket: 32 [ 626.727245][ T5850] usb 11-1: config 0 has an invalid interface number: 1 but max is 0 [ 626.737928][ T5850] usb 11-1: config 0 has no interface number 0 [ 626.749182][ T5850] usb 11-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 626.767821][ T5850] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.777976][ T5850] usb 11-1: Product: syz [ 626.782971][ T5850] usb 11-1: Manufacturer: syz [ 626.789266][ T5850] usb 11-1: SerialNumber: syz [ 626.796812][ T5850] usb 11-1: config 0 descriptor?? [ 626.811458][ T5850] usb 11-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 626.823048][ T5850] usb 11-1: selecting invalid altsetting 1 [ 626.833249][ T5850] usb 11-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 626.850690][ T5850] usb 11-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 626.861280][ T5850] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 626.869299][ T5850] usb 11-1: media controller created [ 626.882039][ T5850] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 627.117775][T16049] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 627.994016][ T5850] usb 11-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 627.997166][ T5850] zl10353_read_register: readreg error (reg=127, ret==-110) [ 628.690510][T16057] overlayfs: failed to resolve './file1': -2 [ 628.841846][T16051] ================================================================== [ 628.842924][T16061] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2376'. [ 628.844298][T16051] BUG: KASAN: slab-use-after-free in __release_resource+0x276/0x2c0 [ 628.849662][T16051] Read of size 8 at addr ffff888000cf9138 by task syz.6.2370/16051 [ 628.852849][T16051] [ 628.854407][T16051] CPU: 2 UID: 0 PID: 16051 Comm: syz.6.2370 Tainted: G L syzkaller #0 PREEMPT(full) [ 628.854437][T16051] Tainted: [L]=SOFTLOCKUP [ 628.854442][T16051] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 628.854459][T16051] Call Trace: [ 628.854473][T16051] [ 628.854479][T16051] dump_stack_lvl+0x100/0x190 [ 628.854520][T16051] print_report+0x13d/0x4b0 [ 628.854547][T16051] ? __virt_addr_valid+0x239/0x430 [ 628.854566][T16051] ? __release_resource+0x276/0x2c0 [ 628.854581][T16051] kasan_report+0xdf/0x1c0 [ 628.854612][T16051] ? __release_resource+0x276/0x2c0 [ 628.854628][T16051] __release_resource+0x276/0x2c0 [ 628.854643][T16051] release_resource+0x26/0x40 [ 628.854658][T16051] pci_remove_bus_device+0x2d3/0x3b0 [ 628.854744][T16051] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 628.854763][T16051] remove_store+0x123/0x140 [ 628.854785][T16051] ? __pfx_remove_store+0x10/0x10 [ 628.854803][T16051] ? find_held_lock+0x2b/0x80 [ 628.854819][T16051] ? sysfs_file_kobj+0xe4/0x290 [ 628.854847][T16051] ? sysfs_file_kobj+0xe4/0x290 [ 628.854862][T16051] ? __pfx_remove_store+0x10/0x10 [ 628.854877][T16051] dev_attr_store+0x58/0x80 [ 628.854935][T16051] ? __pfx_dev_attr_store+0x10/0x10 [ 628.854954][T16051] sysfs_kf_write+0xf2/0x150 [ 628.854971][T16051] kernfs_fop_write_iter+0x3e0/0x5f0 [ 628.854988][T16051] ? __pfx_sysfs_kf_write+0x10/0x10 [ 628.855005][T16051] vfs_write+0x6ac/0x1050 [ 628.855019][T16051] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 628.855033][T16051] ? __pfx_vfs_write+0x10/0x10 [ 628.855043][T16051] ? find_held_lock+0x2b/0x80 [ 628.855060][T16051] ksys_write+0x12a/0x250 [ 628.855073][T16051] ? __pfx_ksys_write+0x10/0x10 [ 628.855085][T16051] __do_fast_syscall_32+0xe7/0x970 [ 628.855162][T16051] do_fast_syscall_32+0x32/0x70 [ 628.855192][T16051] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 628.855216][T16051] RIP: 0023:0xf700efec [ 628.855231][T16051] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 628.855249][T16051] RSP: 002b:00000000f53bb50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 628.855276][T16051] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000080000140 [ 628.855289][T16051] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 628.855298][T16051] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 628.855306][T16051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 628.855313][T16051] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 628.855324][T16051] [ 628.855329][T16051] [ 628.944821][T16051] Allocated by task 9115: [ 628.946124][T16051] kasan_save_stack+0x30/0x50 [ 628.947529][T16051] kasan_save_track+0x14/0x30 [ 628.948921][T16051] __kasan_kmalloc+0xaa/0xb0 [ 628.950293][T16051] __kmalloc_node_track_caller_noprof+0x331/0x830 [ 628.952156][T16051] kmemdup_noprof+0x29/0x60 [ 628.953615][T16051] platform_device_add_resources+0x37/0x100 [ 628.955384][T16051] dwc2_pci_probe+0x1d3/0x360 [ 628.956816][T16051] local_pci_probe+0xdd/0x1b0 [ 628.958236][T16051] pci_call_probe+0x176/0x800 [ 628.959731][T16051] pci_device_probe+0x1cd/0x370 [ 628.961078][T16051] really_probe+0x241/0xa60 [ 628.962410][T16051] __driver_probe_device+0x20e/0x450 [ 628.963965][T16051] device_driver_attach+0xd1/0x220 [ 628.965478][T16051] bind_store+0xf4/0x190 [ 628.966723][T16051] drv_attr_store+0x74/0xb0 [ 628.968049][T16051] sysfs_kf_write+0xf2/0x150 [ 628.969420][T16051] kernfs_fop_write_iter+0x3e0/0x5f0 [ 628.970978][T16051] vfs_write+0x6ac/0x1050 [ 628.972252][T16051] ksys_write+0x12a/0x250 [ 628.973517][T16051] __do_fast_syscall_32+0xe7/0x970 [ 628.975014][T16051] do_fast_syscall_32+0x32/0x70 [ 628.976442][T16051] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 628.978289][T16051] [ 628.979014][T16051] Freed by task 16051: [ 628.980216][T16051] kasan_save_stack+0x30/0x50 [ 628.981606][T16051] kasan_save_track+0x14/0x30 [ 628.982977][T16051] kasan_save_free_info+0x3b/0x70 [ 628.984441][T16051] __kasan_slab_free+0x5f/0x80 [ 628.985855][T16051] kfree+0x22b/0x6c0 [ 628.986992][T16051] platform_device_release+0x8a/0xb0 [ 628.988512][T16051] device_release+0xd2/0x270 [ 628.989892][T16051] kobject_put+0x1f7/0x640 [ 628.991228][T16051] put_device+0x1f/0x30 [ 628.992446][T16051] platform_device_unregister+0x45/0x50 [ 628.994119][T16051] dwc2_pci_remove+0x55/0xd0 [ 628.995470][T16051] pci_device_remove+0xb2/0x1d0 [ 628.996894][T16051] device_remove+0xcb/0x180 [ 628.998235][T16051] device_release_driver_internal+0x44e/0x620 [ 629.000173][T16051] pci_stop_bus_device+0x120/0x160 [ 629.002022][T16051] pci_stop_and_remove_bus_device+0x58/0xa0 [ 629.003787][T16051] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 629.006097][T16051] remove_store+0x123/0x140 [ 629.007722][T16051] dev_attr_store+0x58/0x80 [ 629.009375][T16051] sysfs_kf_write+0xf2/0x150 [ 629.011019][T16051] kernfs_fop_write_iter+0x3e0/0x5f0 [ 629.012898][T16051] vfs_write+0x6ac/0x1050 [ 629.014488][T16051] ksys_write+0x12a/0x250 [ 629.016055][T16051] __do_fast_syscall_32+0xe7/0x970 [ 629.017824][T16051] do_fast_syscall_32+0x32/0x70 [ 629.019246][T16051] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 629.021091][T16051] [ 629.021811][T16051] The buggy address belongs to the object at ffff888000cf9100 [ 629.021811][T16051] which belongs to the cache kmalloc-128 of size 128 [ 629.025782][T16051] The buggy address is located 56 bytes inside of [ 629.025782][T16051] freed 128-byte region [ffff888000cf9100, ffff888000cf9180) [ 629.029515][T16051] [ 629.030217][T16051] The buggy address belongs to the physical page: [ 629.032070][T16051] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0xcf9 [ 629.034566][T16051] flags: 0x7ff00000000000(node=0|zone=0|lastcpupid=0x7ff) [ 629.036606][T16051] page_type: f5(slab) [ 629.037794][T16051] raw: 007ff00000000000 ffff88801bc42a00 dead000000000100 dead000000000122 [ 629.040269][T16051] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 629.042771][T16051] page dumped because: kasan: bad access detected [ 629.044713][T16051] page_owner tracks the page as allocated [ 629.046369][T16051] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5743, tgid 5743 (syz-executor), ts 124486714751, free_ts 113797265080 [ 629.053029][T16051] post_alloc_hook+0xfd/0x120 [ 629.054726][T16051] get_page_from_freelist+0xf48/0x3530 [ 629.056674][T16051] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 629.058806][T16051] new_slab+0xa2/0x640 [ 629.060281][T16051] refill_objects+0xe3/0x410 [ 629.061951][T16051] __pcs_replace_empty_main+0x376/0x680 [ 629.063919][T16051] __kmalloc_cache_noprof+0x479/0x6c0 [ 629.065837][T16051] kernfs_fop_open+0x9fa/0xd50 [ 629.067545][T16051] do_dentry_open+0x6ab/0x14d0 [ 629.069265][T16051] vfs_open+0x82/0x3f0 [ 629.070748][T16051] path_openat+0x2873/0x4280 [ 629.072394][T16051] do_file_open+0x20e/0x430 [ 629.074056][T16051] do_sys_openat2+0x10f/0x1e0 [ 629.075737][T16051] __ia32_compat_sys_openat+0x12d/0x210 [ 629.077720][T16051] do_int80_emulation+0x14b/0x720 [ 629.079533][T16051] asm_int80_emulation+0x1a/0x20 [ 629.081068][T16051] page last free pid 5743 tgid 5743 stack trace: [ 629.082941][T16051] __free_frozen_pages+0x79f/0x1090 [ 629.084489][T16051] qlist_free_all+0x47/0xf0 [ 629.085826][T16051] kasan_quarantine_reduce+0x1a0/0x1f0 [ 629.087400][T16051] __kasan_slab_alloc+0x69/0x90 [ 629.088825][T16051] kmem_cache_alloc_noprof+0x26b/0x6a0 [ 629.090402][T16051] do_getname+0x35/0x390 [ 629.091660][T16051] __ia32_sys_unlink+0x35/0x60 [ 629.093044][T16051] __do_fast_syscall_32+0xe7/0x970 [ 629.094548][T16051] do_fast_syscall_32+0x32/0x70 [ 629.095983][T16051] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 629.097833][T16051] [ 629.098542][T16051] Memory state around the buggy address: [ 629.100174][T16051] ffff888000cf9000: 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc [ 629.102470][T16051] ffff888000cf9080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 629.104798][T16051] >ffff888000cf9100: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 629.107089][T16051] ^ [ 629.108777][T16051] ffff888000cf9180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 629.111072][T16051] ffff888000cf9200: 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc [ 629.113365][T16051] ================================================================== [ 629.116618][T16051] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 629.118755][T16051] CPU: 2 UID: 0 PID: 16051 Comm: syz.6.2370 Tainted: G L syzkaller #0 PREEMPT(full) [ 629.121921][T16051] Tainted: [L]=SOFTLOCKUP [ 629.123199][T16051] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 629.126142][T16051] Call Trace: [ 629.127125][T16051] [ 629.127995][T16051] dump_stack_lvl+0x100/0x190 [ 629.129405][T16051] vpanic+0x552/0x970 [ 629.130585][T16051] ? __pfx_vpanic+0x10/0x10 [ 629.131923][T16051] ? mark_held_locks+0x40/0x70 [ 629.133345][T16051] ? irqentry_exit+0x24d/0xa00 [ 629.134783][T16051] ? __release_resource+0x276/0x2c0 [ 629.136317][T16051] panic+0xd1/0xe0 [ 629.137458][T16051] ? __pfx_panic+0x10/0x10 [ 629.138780][T16051] check_panic_on_warn.cold+0x19/0x34 [ 629.140340][T16051] end_report.part.0+0x3a/0x90 [ 629.141771][T16051] kasan_report.cold+0xe/0x18 [ 629.143171][T16051] ? __release_resource+0x276/0x2c0 [ 629.144712][T16051] __release_resource+0x276/0x2c0 [ 629.146180][T16051] release_resource+0x26/0x40 [ 629.147555][T16051] pci_remove_bus_device+0x2d3/0x3b0 [ 629.149087][T16051] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 629.150984][T16051] remove_store+0x123/0x140 [ 629.152316][T16051] ? __pfx_remove_store+0x10/0x10 [ 629.153799][T16051] ? find_held_lock+0x2b/0x80 [ 629.155164][T16051] ? sysfs_file_kobj+0xe4/0x290 [ 629.156610][T16051] ? sysfs_file_kobj+0xe4/0x290 [ 629.158038][T16051] ? __pfx_remove_store+0x10/0x10 [ 629.159515][T16051] dev_attr_store+0x58/0x80 [ 629.160860][T16051] ? __pfx_dev_attr_store+0x10/0x10 [ 629.162369][T16051] sysfs_kf_write+0xf2/0x150 [ 629.163737][T16051] kernfs_fop_write_iter+0x3e0/0x5f0 [ 629.165264][T16051] ? __pfx_sysfs_kf_write+0x10/0x10 [ 629.166801][T16051] vfs_write+0x6ac/0x1050 [ 629.168178][T16051] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 629.170274][T16051] ? __pfx_vfs_write+0x10/0x10 [ 629.172029][T16051] ? find_held_lock+0x2b/0x80 [ 629.173424][T16051] ksys_write+0x12a/0x250 [ 629.174699][T16051] ? __pfx_ksys_write+0x10/0x10 [ 629.176117][T16051] __do_fast_syscall_32+0xe7/0x970 [ 629.177612][T16051] do_fast_syscall_32+0x32/0x70 [ 629.179024][T16051] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 629.180848][T16051] RIP: 0023:0xf700efec [ 629.182038][T16051] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 629.187534][T16051] RSP: 002b:00000000f53bb50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 629.189988][T16051] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000080000140 [ 629.192262][T16051] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 629.194567][T16051] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 629.196833][T16051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 629.199129][T16051] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 629.201440][T16051] [ 629.202920][T16051] Kernel Offset: disabled [ 629.204181][T16051] Rebooting in 86400 seconds.. VM DIAGNOSIS: 09:59:19 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=1ffff92000f1af69 RCX=ffffc90004ae9000 RDX=0000000000000000 RSI=00000000000000a9 RDI=ffffffff8c3e0960 RBP=0000000000000000 RSP=ffffc900078d7b40 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=ffffffff8c3e0960 R13=00000000000000a9 R14=1ffff92000f1af87 R15=ffffed100a2c3146 RIP=ffffffff8bb88256 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096bdf000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080148000 CR3=000000004b004000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000006 RCX=ffffffff81b51eaa RDX=ffff88801c73a540 RSI=ffffffff81b51ece RDI=ffff88801c73a540 RBP=0000000000000001 RSP=ffffc9000046fdf8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000006 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008dfc4 R15=0000000000000000 RIP=ffffffff81b51ecf RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096cdf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f284aadc CR3=000000000e994000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000010020200 Opmask01=0000000000000410 Opmask02=00000000ffffffff Opmask03=0000000082000020 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005608660538d0 00007effad5f1b40 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0038706f6f6c2f6b 636f6c622f6c6175 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005608660321c0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000056086605b978 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007effad5f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffff0000 ffffffffffffffff ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 54d6abe7193a0634 7373257e75f0a5b2 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737373737152 7373737373737373 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 38706f6f6c2f6b63 6f6c622f6c617574 7269762f73656369 7665642f7379732f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000411 0000000000000000 38706f6f6c2f6b63 6f6c622f6c617574 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 303030302f30303a 303030306963702f 736563697665642f 3d54524f505f544e ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000041 00000000000003c0 00007effad5f1b00 307761726469682f ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000131 0000000000000000 000039316c6c696b 66722fef33af2bf0 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000056086605e3b0 000056086605b030 00007effad5f1c40 00007effad5f1c40 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000131 0000000000000000 000039316c5f1c40 00002fef335f1c40 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000000000d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a0a135 RDI=ffffffff9b9f74e0 RBP=ffffffff9b9f74a0 RSP=ffffc90007857530 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3030383838666666 R12=0000000000000000 R13=000000000000000d R14=ffffffff9b6f71f7 R15=ffffffff85a0a0d0 RIP=ffffffff85a0a15f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096ddf000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7489cec CR3=000000004cb5d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000006 RCX=ffffffff81b51eaa RDX=ffff88801c7f2540 RSI=ffffffff81b51ece RDI=ffff88801c7f2540 RBP=0000000000000003 RSP=ffffc9000048fdf8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000006 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000091fc4 R15=0000000000000000 RIP=ffffffff81b51ecf RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096edf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080009000 CR3=000000000e994000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000