last executing test programs: 10m57.153701602s ago: executing program 2 (id=484): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs_dir/buffer_size_kb\x00', 0x20, 0x124) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000300)=0x2, r1, 0x0, 0x0, 0x1}}, 0x20) 10m56.96461058s ago: executing program 2 (id=487): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', &(0x7f0000000080), 0x42, 0x0) chdir(&(0x7f00000000c0)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) setresuid(0x0, 0xee00, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./sys\x00', 0x0, 0x4000, 0x0) write$P9_RSTATu(r0, &(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYRES32], 0x55) 10m56.904286916s ago: executing program 2 (id=488): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x40202, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000004c0)=0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r1 = socket(0x40000000015, 0x8000f, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r1, &(0x7f0000001740), 0x0, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f00000000c0)=0xfe, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{0x0}], 0x1) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(r1, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="020700"], 0x10}}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) 10m56.416230583s ago: executing program 2 (id=493): syz_emit_ethernet(0x6e, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0) file_getattr(0xffffffffffffffff, 0x0, 0x0, 0x18, 0x100) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xe, 0x0, &(0x7f0000000040)="98e6dccef013dbce26a76d268863", 0x0, 0x81, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x4c) mkdir(&(0x7f0000000000)='./proc\x00', 0x1ff) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000100)={0x4, 0x0, [{0xa, 0xffffffff, 0x1, 0x3667bd05, 0x2, 0x4d, 0x9f}, {0x0, 0xffff, 0x2, 0x5e9, 0xd, 0x32, 0x8}, {0x6, 0x2, 0x0, 0xf, 0xff, 0x6, 0x7}, {0x80000008, 0x2, 0x6, 0x1, 0xfffffffb, 0x0, 0x80000000}]}) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/config.gz\x00', 0x0, 0x0) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000480)={[0x1d]}, 0x8) setxattr$security_ima(&(0x7f0000000040)='./proc\x00', &(0x7f0000000080), &(0x7f00000000c0)=ANY=[@ANYBLOB="041241fb735c49"], 0x7, 0x1) read(r1, 0x0, 0x0) 10m56.415958321s ago: executing program 2 (id=494): bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newchain={0x24, 0x1e, 0x1, 0x0, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xd, 0x1}, {0xffe0, 0xb}}}, 0x24}}, 0x44004) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='auto\x00', 0x4) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d800000021", 0x5}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x33fe0) r2 = userfaultfd(0x80001) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef) mkdir(&(0x7f0000000040)='./myproc\x00', 0x15e) mount(0x0, &(0x7f0000000080)='./myproc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./myproc/scsi/device_info\x00', 0x1, 0x0) write(r5, &(0x7f0000000140)='vendor:model:flag\x00', 0x12) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 10m56.273729967s ago: executing program 2 (id=495): preadv(0xffffffffffffffff, &(0x7f0000001480)=[{&(0x7f0000000300)=""/18, 0x12}], 0x1, 0xf, 0x10001) r0 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f00000000c0)={0x0, 0x4, 0xfffffffe}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f0000005280)={0x0, 0x0, 0x0, 0x0, &(0x7f00000041c0)=[{0x408, 0x1, 0x1, "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"}], 0x408}, 0x80) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000002640)={&(0x7f00000004c0)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, &(0x7f0000002580)=[{&(0x7f0000000100)=""/143, 0x8f}, {&(0x7f00000001c0)=""/163, 0xa3}, {&(0x7f0000000280)=""/1, 0x1}, {&(0x7f0000000340)=""/128, 0x80}, {&(0x7f0000000400)=""/147, 0x93}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/121, 0x79}], 0x7, &(0x7f00000025c0)=""/103, 0x67}, 0x40002000) 10m41.193250203s ago: executing program 32 (id=495): preadv(0xffffffffffffffff, &(0x7f0000001480)=[{&(0x7f0000000300)=""/18, 0x12}], 0x1, 0xf, 0x10001) r0 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f00000000c0)={0x0, 0x4, 0xfffffffe}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f0000005280)={0x0, 0x0, 0x0, 0x0, &(0x7f00000041c0)=[{0x408, 0x1, 0x1, "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"}], 0x408}, 0x80) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000002640)={&(0x7f00000004c0)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, &(0x7f0000002580)=[{&(0x7f0000000100)=""/143, 0x8f}, {&(0x7f00000001c0)=""/163, 0xa3}, {&(0x7f0000000280)=""/1, 0x1}, {&(0x7f0000000340)=""/128, 0x80}, {&(0x7f0000000400)=""/147, 0x93}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/121, 0x79}], 0x7, &(0x7f00000025c0)=""/103, 0x67}, 0x40002000) 8m11.865433448s ago: executing program 4 (id=1355): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x6}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x326d}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r6, &(0x7f00000002c0)="05031664d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) 8m11.616550034s ago: executing program 4 (id=1356): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001740)=ANY=[@ANYBLOB="2c0000002100010000000000000000000a000040000000000000000005001600001b0000080017"], 0x2c}, 0x1, 0x0, 0x0, 0x20000894}, 0x20008000) sendmsg$NFT_BATCH(r0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1f, 0x0, 0x0) r3 = openat$cdrom(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$CDROMREADAUDIO(r3, 0x5392, 0x0) openat2$dir(0xffffff9c, &(0x7f0000000000)='./tracefs_dir/buffer_size_kb\x00', &(0x7f00000000c0)={0x108000, 0x9, 0x20}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/hardlockup_count', 0x800, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, 0x0, 0x20000080) munmap(&(0x7f00002d2000/0x4000)=nil, 0x4000) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r5) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x5, 0x6d}, 0x2c) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) 8m10.524803296s ago: executing program 4 (id=1359): fchdir(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRES32, @ANYRESOCT=0x0, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000540)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') init_module(0x0, 0xa99, &(0x7f0000001800)='GPL\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:1f.0/driver/unbind\x00', 0x1, 0x0) write(r4, &(0x7f0000000200)='0000:00:1f.0\x00', 0xd) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:1f.0/driver_override\x00', 0x1, 0x0) write(r5, &(0x7f0000000400)='xhci_hcd\x00', 0x9) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/drivers/xhci_hcd/bind\x00', 0x1, 0x0) write(r6, &(0x7f0000000600)='0000:00:1f.0\x00', 0xd) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) fstat(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000440)={{{@in6=@private0, @in=@remote, 0x4e20, 0x800, 0x4e20, 0x1, 0xa, 0x0, 0x20, 0x16, 0x0, r8}, {0x8000, 0x1db, 0x7fff, 0x8000, 0xffffffffffffffff, 0x7ff, 0x32, 0x9}, {0x9, 0xffffffffffffffff, 0x8, 0xf}, 0x5, 0x6e6bb0, 0x2, 0x1, 0x1, 0x3}, {{@in=@loopback, 0x4d3, 0xff}, 0x2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x3500, 0x2, 0x2, 0x5, 0x7, 0x8, 0x214}}, 0xe4) sendmmsg$inet6(r7, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1, 0x0, 0x0, 0xff000000}}], 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) 8m8.876190165s ago: executing program 4 (id=1362): fcntl$lock(0xffffffffffffffff, 0x6, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1fa, 0x1, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x2e3}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x3, 0x0, 0x3000, 0x1000, &(0x7f0000fe8000/0x1000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x3, 0x0, 0x3000, 0x1000, &(0x7f0000fe8000/0x1000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket(0x15, 0x2, 0x0) getsockopt(r3, 0x200000000114, 0x7, &(0x7f0000000040)=""/1, &(0x7f0000000000)=0x1) (async) getsockopt(r3, 0x200000000114, 0x7, &(0x7f0000000040)=""/1, &(0x7f0000000000)=0x1) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10a942, 0x9f667fd378a54ed4) (async) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10a942, 0x9f667fd378a54ed4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xffff8000, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x6, &(0x7f0000000300)=0xa) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000003c0)=@abs={0x1, 0x0, 0x9}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) (async) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10119, 0x2, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x9d) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x9d) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x50) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x50) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, 0x0) 8m6.796510425s ago: executing program 4 (id=1370): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) mkdir(&(0x7f0000000400)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./tracefs\x00', &(0x7f0000000480)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./tracefs/events/xhci-hcd/xhci_portsc_writel/format\x00', 0x0, 0x0) read(r2, &(0x7f0000000500)=""/1024, 0x400) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r0, @ANYRES64, @ANYRES16=0x0, @ANYRES16=r2], 0x20}}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x220482, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000140)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_type(r5, &(0x7f0000000100), 0x2, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xe, 0xffffffffffffffff, &(0x7f00000000c0)='-5', 0x2, 0x0, 0x0, 0x4}]) setsockopt$inet_tcp_int(r7, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) write$cgroup_type(r6, &(0x7f0000000280), 0x9) r8 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000c40), 0x12) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r9, &(0x7f0000000240), 0x12) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r4, 0xc018aec0, &(0x7f0000000600)={0x0, 0x7, 0x180, 0x0}) r10 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000040)=0xd) ioctl$TCSETSF2(r10, 0x402c542d, &(0x7f0000000040)={0x7, 0x3, 0x8, 0xffffffaf, 0xc2, "0b066448ef342702154d39ab3d4b4a05742d86", 0x3, 0x4}) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000001c0)=0x3) 8m6.083818673s ago: executing program 4 (id=1374): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[], [], 0x2f}) write(0xffffffffffffffff, &(0x7f0000000080)="2900000014", 0x5) r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000000080)=ANY=[@ANYRES32=r3]) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) write$uinput_user_dev(r4, &(0x7f0000000a00)={'syz0\x00', {0x6ec9, 0x7, 0x5, 0x700}, 0x3e, [0x6, 0x5, 0x8, 0x2, 0x5338, 0x400, 0x80000000, 0x8ef7, 0x8, 0x0, 0x6, 0xf5, 0x8, 0x39, 0x2, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x5, 0x0, 0x0, 0x400001ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0x8001, 0x5, 0x2, 0x200, 0x2, 0x400008, 0x8, 0x4, 0x2, 0x0, 0x8, 0x1009, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0xa, 0x1000, 0x5, 0x40, 0x9, 0x400, 0x5], [0x391, 0x7, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x27, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x104, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x8000006, 0x8000, 0x4, 0x101, 0x0, 0x2, 0xffffffff, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0xb, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x220, 0x3], [0x401, 0xc584, 0x34711b8a, 0xcd4, 0xffff, 0x1000, 0x7, 0x4, 0x8, 0x10, 0x7, 0x2, 0xe8b, 0x5, 0x80000001, 0x8, 0x3, 0x1000, 0x2, 0xe, 0x1, 0xfffffff9, 0xe55, 0x6, 0x80000001, 0x4, 0x4, 0x7, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0xb, 0x1ff, 0x2, 0x3, 0x7, 0x7, 0x104, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x6, 0xa, 0xffffffff, 0x40004, 0x3ff, 0x6, 0x1, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x40, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0x10, 0x7f, 0x5, 0x3fa6, 0x4, 0x8e8, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x0, 0x3, 0x200, 0x1000, 0x3a, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0xf, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0x0, 0x135, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r4, 0x5501) chdir(&(0x7f0000000240)='./file0\x00') r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r5, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b00)={0x18, 0x140d, 0x311, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x2800c080}, 0x4008010) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0/file0\x00'}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000340)=0x0) sendmmsg(r6, &(0x7f0000002040)=[{{&(0x7f0000000400)=@nfc_llcp={0x27, r7, 0xffffffffffffffff, 0x6, 0x5, 0x7, "2208a42cad0ead9dbcbb372e7779057e9a204830d4d5652f88bb0ff809ae7a337e229d6f026783cb3e6c2dd1cbb1dab1b44f27e752675fb99d33b3c561bb56", 0x23}, 0x80, &(0x7f0000001e80)=[{&(0x7f0000000480)="d950eb024f40eb8068e7382f7a7bb36ebbf936c79862", 0x16}, {&(0x7f00000004c0)="fc7103dc0d8922d9cfd1df67792a", 0xe}, {&(0x7f0000000e80)="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", 0x1000}], 0x3, &(0x7f0000001ec0)=[{0x38, 0x3a, 0x401, "ba9e19f1696579e8bc0003471a6b7f4dbf3e0dbaaefa6d54e04bb9d9c7409624c003ef101fc9e5e93880"}, {0x80, 0x88, 0x3, "57f473b792b6b7563aabb09657eca8204342932489c4a28e8204fcbb50a533aaf3db9cc5960d98b5e6f7ca5d7d2c945679777b9c458afa1a08c4e366b343f54ad7a94b6e01e79801dbd70a51a072159fc00cb16686a9a1e286d8430e1e794a54e6cc78f4ea6edb0f5589e76f691d53e37e2879"}, {0xa4, 0x187, 0x4, "5452a5f1df50fbf42dc68a37d3306925e7e7b73ae55d779d07e2bff60f57872b3660f32e4ad8d38cbb2b80871d8e490eaa9ab5369486dcb439d2fdeb3493f194a9524ba077fcd536112a22292c9a15fb2bd02daddb61d348bf51391815d0f135bce3bf66f10881ac828d2f297e35253f52c8fce22c9738281ef1773ad49142494248c8c40cb3a3ea099b5d3cbc4e67bcb1b215e0c8cba19f"}], 0x15c}}], 0x1, 0x28840) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x1c, r8, 0x331, 0x70bd2a, 0x25dfdbfb, {0xb}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2004c0c1}, 0x8004800) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000009c0)={'gre0\x00', &(0x7f0000000900)={'syztnl1\x00', 0x0, 0xe5e9eae34ff093b2, 0x700, 0x100, 0x6, {{0x1b, 0x4, 0x3, 0x5, 0x6c, 0x64, 0x0, 0xdd, 0x29, 0x0, @broadcast, @broadcast, {[@noop, @noop, @ra={0x94, 0x4, 0x1}, @end, @end, @cipso={0x86, 0x1a, 0xffffffffffffffff, [{0x6, 0x5, "cb4236"}, {0x1, 0x3, "85"}, {0x7, 0x5, "e4b15d"}, {0x6, 0x7, "4876ef0f35"}]}, @timestamp_addr={0x44, 0x34, 0x53, 0x1, 0xe, [{@loopback, 0x336511d6}, {@local, 0xd8b2}, {@empty, 0x4}, {@local, 0xfffffffc}, {@dev={0xac, 0x14, 0x14, 0x3f}, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}]}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002340)={r6, 0xe0, &(0x7f0000002240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000020c0)=[0x0, 0x0], &(0x7f00000005c0)=[0x0], 0x0, 0x47, &(0x7f0000002140)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000540), &(0x7f00000021c0), 0x8, 0xc8, 0x8, 0x8, &(0x7f0000002200)}}, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r6, &(0x7f0000002580)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800010}, 0xc, &(0x7f0000002540)={&(0x7f00000025c0)=ANY=[@ANYBLOB="9c010000", @ANYRES16=0x0, @ANYBLOB="100028bd7000fcdbdf2511000000600001801400020069703665727370616e30000000000000140002006e7230000000000000000000000000001400020069705f7674693000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="0800030002000000080001009920bff67a8cb1747a176af67590b7e5d71b4ee291270f15277035fd9c6a6bccc9d61f0dbf973eeafa2e32dc9d916094ade5bcd12acf0120e8417f5678cab6dafbb339879375a9938da2f92b4ab1e88f5a10fb3367a8f4847cbc35429fa54ac2ae7c87844c9177b97174013f4649a5380a4b51838821bd5d263d843f305cb81a0a46b62dec942dae09c478db1ff19ce158c14b2503f2f3e71abaa7dcba624c771162e8ad0daef3", @ANYRES32=0x0, @ANYBLOB="08000300030000002800018014000200626f6e6430000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="14000180080003000700000008000100", @ANYRES32=0x0, @ANYBLOB="2000018008000100", @ANYRES32=0x0, @ANYBLOB="14000200697036677265300000000000000000001c000180080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="0800030003000000540001800800030001000000080003000000000008000300010000001400020069703665727370616e3000000000000008000100", @ANYRES32=r9, @ANYBLOB="140002006e657464657673696d3000000000000008000100", @ANYRES32=r10, @ANYBLOB="5c00018008000100", @ANYRES32=r11, @ANYBLOB="0800030000000000080003000100000008000300030000000800030002000000080003000300000014000200736974300000000000000000000000001400020067656e65766531000000000000000000"], 0x19c}, 0x1, 0x0, 0x0, 0x48804}, 0x800) lsetxattr$security_evm(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000200)=@md5={0x1, "811bcdf69c0e78ecdd4de6122b96770b"}, 0x11, 0x1) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 7m51.027838054s ago: executing program 33 (id=1374): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[], [], 0x2f}) write(0xffffffffffffffff, &(0x7f0000000080)="2900000014", 0x5) r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000000080)=ANY=[@ANYRES32=r3]) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) write$uinput_user_dev(r4, &(0x7f0000000a00)={'syz0\x00', {0x6ec9, 0x7, 0x5, 0x700}, 0x3e, [0x6, 0x5, 0x8, 0x2, 0x5338, 0x400, 0x80000000, 0x8ef7, 0x8, 0x0, 0x6, 0xf5, 0x8, 0x39, 0x2, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x5, 0x0, 0x0, 0x400001ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0x8001, 0x5, 0x2, 0x200, 0x2, 0x400008, 0x8, 0x4, 0x2, 0x0, 0x8, 0x1009, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0xa, 0x1000, 0x5, 0x40, 0x9, 0x400, 0x5], [0x391, 0x7, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x27, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x104, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x8000006, 0x8000, 0x4, 0x101, 0x0, 0x2, 0xffffffff, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0xb, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x220, 0x3], [0x401, 0xc584, 0x34711b8a, 0xcd4, 0xffff, 0x1000, 0x7, 0x4, 0x8, 0x10, 0x7, 0x2, 0xe8b, 0x5, 0x80000001, 0x8, 0x3, 0x1000, 0x2, 0xe, 0x1, 0xfffffff9, 0xe55, 0x6, 0x80000001, 0x4, 0x4, 0x7, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0xb, 0x1ff, 0x2, 0x3, 0x7, 0x7, 0x104, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x6, 0xa, 0xffffffff, 0x40004, 0x3ff, 0x6, 0x1, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x40, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0x10, 0x7f, 0x5, 0x3fa6, 0x4, 0x8e8, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x0, 0x3, 0x200, 0x1000, 0x3a, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0xf, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0x0, 0x135, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r4, 0x5501) chdir(&(0x7f0000000240)='./file0\x00') r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r5, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b00)={0x18, 0x140d, 0x311, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x2800c080}, 0x4008010) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0/file0\x00'}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000340)=0x0) sendmmsg(r6, &(0x7f0000002040)=[{{&(0x7f0000000400)=@nfc_llcp={0x27, r7, 0xffffffffffffffff, 0x6, 0x5, 0x7, "2208a42cad0ead9dbcbb372e7779057e9a204830d4d5652f88bb0ff809ae7a337e229d6f026783cb3e6c2dd1cbb1dab1b44f27e752675fb99d33b3c561bb56", 0x23}, 0x80, &(0x7f0000001e80)=[{&(0x7f0000000480)="d950eb024f40eb8068e7382f7a7bb36ebbf936c79862", 0x16}, {&(0x7f00000004c0)="fc7103dc0d8922d9cfd1df67792a", 0xe}, {&(0x7f0000000e80)="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", 0x1000}], 0x3, &(0x7f0000001ec0)=[{0x38, 0x3a, 0x401, "ba9e19f1696579e8bc0003471a6b7f4dbf3e0dbaaefa6d54e04bb9d9c7409624c003ef101fc9e5e93880"}, {0x80, 0x88, 0x3, "57f473b792b6b7563aabb09657eca8204342932489c4a28e8204fcbb50a533aaf3db9cc5960d98b5e6f7ca5d7d2c945679777b9c458afa1a08c4e366b343f54ad7a94b6e01e79801dbd70a51a072159fc00cb16686a9a1e286d8430e1e794a54e6cc78f4ea6edb0f5589e76f691d53e37e2879"}, {0xa4, 0x187, 0x4, "5452a5f1df50fbf42dc68a37d3306925e7e7b73ae55d779d07e2bff60f57872b3660f32e4ad8d38cbb2b80871d8e490eaa9ab5369486dcb439d2fdeb3493f194a9524ba077fcd536112a22292c9a15fb2bd02daddb61d348bf51391815d0f135bce3bf66f10881ac828d2f297e35253f52c8fce22c9738281ef1773ad49142494248c8c40cb3a3ea099b5d3cbc4e67bcb1b215e0c8cba19f"}], 0x15c}}], 0x1, 0x28840) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x1c, r8, 0x331, 0x70bd2a, 0x25dfdbfb, {0xb}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2004c0c1}, 0x8004800) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000009c0)={'gre0\x00', &(0x7f0000000900)={'syztnl1\x00', 0x0, 0xe5e9eae34ff093b2, 0x700, 0x100, 0x6, {{0x1b, 0x4, 0x3, 0x5, 0x6c, 0x64, 0x0, 0xdd, 0x29, 0x0, @broadcast, @broadcast, {[@noop, @noop, @ra={0x94, 0x4, 0x1}, @end, @end, @cipso={0x86, 0x1a, 0xffffffffffffffff, [{0x6, 0x5, "cb4236"}, {0x1, 0x3, "85"}, {0x7, 0x5, "e4b15d"}, {0x6, 0x7, "4876ef0f35"}]}, @timestamp_addr={0x44, 0x34, 0x53, 0x1, 0xe, [{@loopback, 0x336511d6}, {@local, 0xd8b2}, {@empty, 0x4}, {@local, 0xfffffffc}, {@dev={0xac, 0x14, 0x14, 0x3f}, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}]}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002340)={r6, 0xe0, &(0x7f0000002240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000020c0)=[0x0, 0x0], &(0x7f00000005c0)=[0x0], 0x0, 0x47, &(0x7f0000002140)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000540), &(0x7f00000021c0), 0x8, 0xc8, 0x8, 0x8, &(0x7f0000002200)}}, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r6, &(0x7f0000002580)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800010}, 0xc, &(0x7f0000002540)={&(0x7f00000025c0)=ANY=[@ANYBLOB="9c010000", @ANYRES16=0x0, @ANYBLOB="100028bd7000fcdbdf2511000000600001801400020069703665727370616e30000000000000140002006e7230000000000000000000000000001400020069705f7674693000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="0800030002000000080001009920bff67a8cb1747a176af67590b7e5d71b4ee291270f15277035fd9c6a6bccc9d61f0dbf973eeafa2e32dc9d916094ade5bcd12acf0120e8417f5678cab6dafbb339879375a9938da2f92b4ab1e88f5a10fb3367a8f4847cbc35429fa54ac2ae7c87844c9177b97174013f4649a5380a4b51838821bd5d263d843f305cb81a0a46b62dec942dae09c478db1ff19ce158c14b2503f2f3e71abaa7dcba624c771162e8ad0daef3", @ANYRES32=0x0, @ANYBLOB="08000300030000002800018014000200626f6e6430000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="14000180080003000700000008000100", @ANYRES32=0x0, @ANYBLOB="2000018008000100", @ANYRES32=0x0, @ANYBLOB="14000200697036677265300000000000000000001c000180080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="0800030003000000540001800800030001000000080003000000000008000300010000001400020069703665727370616e3000000000000008000100", @ANYRES32=r9, @ANYBLOB="140002006e657464657673696d3000000000000008000100", @ANYRES32=r10, @ANYBLOB="5c00018008000100", @ANYRES32=r11, @ANYBLOB="0800030000000000080003000100000008000300030000000800030002000000080003000300000014000200736974300000000000000000000000001400020067656e65766531000000000000000000"], 0x19c}, 0x1, 0x0, 0x0, 0x48804}, 0x800) lsetxattr$security_evm(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000200)=@md5={0x1, "811bcdf69c0e78ecdd4de6122b96770b"}, 0x11, 0x1) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 7m16.346324416s ago: executing program 0 (id=1616): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='uid_map\x00') write$FUSE_BMAP(r1, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x39) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000003c0), 0x7500c0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a00000"], 0xa8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ptrace$getregset(0x4204, 0x0, 0x3, &(0x7f0000000340)={&(0x7f0000000280)=""/48, 0x30}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x4008001}, 0x88800) recvmmsg(r3, &(0x7f0000007700), 0x318, 0xfc0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x136) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x3, 0x0, 0x0, 0xb6df4c32c1d5c814, 0x0, '\x00', 0x0, 0x0, r4}, 0x94) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e23, @multicast2}}, [0x9e8, 0x7, 0x0, 0x7, 0x0, 0x5a305173, 0x10ff, 0xfffffffffffffff9, 0x8, 0x0, 0x4, 0x100, 0x6, 0x7, 0x7]}, &(0x7f0000000600)=0xfc) sendfile(r4, r4, 0x0, 0x23) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 7m16.104044427s ago: executing program 0 (id=1625): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000f00000000005", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 7m15.979569523s ago: executing program 0 (id=1618): fchdir(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000540)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') init_module(0x0, 0xa99, &(0x7f0000001800)='GPL\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:1f.0/driver/unbind\x00', 0x1, 0x0) write(r4, &(0x7f0000000200)='0000:00:1f.0\x00', 0xd) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:1f.0/driver_override\x00', 0x1, 0x0) write(r5, &(0x7f0000000400)='xhci_hcd\x00', 0x9) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/drivers/xhci_hcd/bind\x00', 0x1, 0x0) write(r6, &(0x7f0000000600)='0000:00:1f.0\x00', 0xd) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) fstat(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000440)={{{@in6=@private0, @in=@remote, 0x4e20, 0x800, 0x4e20, 0x1, 0xa, 0x0, 0x20, 0x16, 0x0, r8}, {0x8000, 0x1db, 0x7fff, 0x8000, 0xffffffffffffffff, 0x7ff, 0x32, 0x9}, {0x9, 0xffffffffffffffff, 0x8, 0xf}, 0x5, 0x6e6bb0, 0x2, 0x1, 0x1, 0x3}, {{@in=@loopback, 0x4d3, 0xff}, 0x2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x3500, 0x2, 0x2, 0x5, 0x7, 0x8, 0x214}}, 0xe4) sendmmsg$inet6(r7, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1, 0x0, 0x0, 0xff000000}}], 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) 7m15.093841172s ago: executing program 0 (id=1623): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000080) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000007000000850000001b000000b700000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x5e, &(0x7f0000000280)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @mcast2={0xff, 0x5}, @remote}}}}}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x3f) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r2}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f00000000c0)={0x0, 0x80000, r0}) read(r0, &(0x7f00000002c0)=""/153, 0x99) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000caa000/0x3000)=nil, 0x3000}) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) 7m14.336058362s ago: executing program 0 (id=1627): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./tracing/events/kvm/kvm_hv_stimer_cleanup/trigger\x00', 0x1, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x1, 0xb, &(0x7f0000000440)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x27}, @btf_id={0x18, 0xf, 0x3, 0x0, 0x5}, @exit, @jmp={0x5, 0x1, 0x1, 0xb, 0x3, 0x6, 0xfffffffffffffffc}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xffffffffffffffff}, @generic={0x2, 0x6, 0x1, 0x3884, 0x9}]}, &(0x7f0000001400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x80) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r1, &(0x7f0000000280)=[{&(0x7f0000000140)=""/255, 0xff}], 0x1, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f00000005c0), 0x2, 0x0) ioctl$DRM_IOCTL_VERSION(r2, 0xc0406400, 0x0) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@o_path={0x0, r0}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1e000000000000004c452b0006"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r3, 0x0, 0x0}, 0x20) r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffff1fc580000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000002c0003802800008008000340000000021c0002"], 0xbc}, 0x1, 0x0, 0x0, 0x4000840}, 0x40) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="55f407c8f0e2118ed86c072d1d750b86995ef30ab7b009f1cf98f87061179cad969461", 0x23, 0xfffffffffffffff8) r9 = add_key$user(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000280)="7308466f9af2d2a277f53d033f231cf8007bce31c46fec508ce492716c6e12d8e489db7d2ac47d3b3986bf9666697c06034983937e45b3bdada915eac1d05aa1839542e2bcdc795c9cbb5c5c87ee4d6494e7ae27828db2e1912c13db6ff7abc40c82bb0f785d58b7b788307259323d4f801451c99fbff903232c3286da903a88e6641572fea69c73271137efd77924871b4f9686b3205bce89d0f55009619071a20aa2", 0xa3, 0xfffffffffffffffa) keyctl$instantiate(0xc, r8, 0x0, 0x0, 0xfffffffffffffffa) keyctl$dh_compute(0x17, &(0x7f0000000340)={r8, r9}, &(0x7f0000001a40)=""/4096, 0x1000, &(0x7f0000002b80)={&(0x7f0000002a40)={'michael_mic\x00'}, &(0x7f0000002b40)="9954564b9ee0f7e5999bced739a1a24b872d46ee0924acca9b7aa2dd1bc5c60d4ae15d66864d5a395c5346d51d", 0x2d}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000380)=@arm64={0xf8, 0xb6, 0x8c, '\x00', 0x7fff}) 7m14.265293567s ago: executing program 0 (id=1628): socket$nl_netfilter(0x10, 0x3, 0xc) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x701001, 0x0) r0 = shmget$private(0x0, 0x4000, 0x20, &(0x7f0000409000/0x4000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ff9000/0x1000)=nil, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xb6, &(0x7f0000000140)=""/182, 0xbce03132de0a22a, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x971}) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000740)={0x1, 0x0, [{0xfaa, 0x1, 0x0, 0x0, @sint={0xf, 0x7}}]}) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in6=@private2, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x1, 0x0, 0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000}, {0x0, 0x0, 0x0, 0x79}, 0xffffffff, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x33}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe}}, 0xe4) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) socket$nl_route(0x10, 0x3, 0x0) 6m58.641308577s ago: executing program 34 (id=1628): socket$nl_netfilter(0x10, 0x3, 0xc) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x701001, 0x0) r0 = shmget$private(0x0, 0x4000, 0x20, &(0x7f0000409000/0x4000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ff9000/0x1000)=nil, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xb6, &(0x7f0000000140)=""/182, 0xbce03132de0a22a, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x971}) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000740)={0x1, 0x0, [{0xfaa, 0x1, 0x0, 0x0, @sint={0xf, 0x7}}]}) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in6=@private2, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x1, 0x0, 0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000}, {0x0, 0x0, 0x0, 0x79}, 0xffffffff, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x33}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe}}, 0xe4) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) socket$nl_route(0x10, 0x3, 0x0) 6m16.126193777s ago: executing program 6 (id=2054): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20000c40) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xc, 0xfff3}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x0, 0x20000000, 0x6}, 0x5}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x2000e890}, 0x8080) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r3, 0x3c, 0x20}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000300)='\'', 0x1}], 0x1}, 0x4011) 6m15.986153346s ago: executing program 6 (id=2056): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x2730, 0x20, 0x1, 0x51}, &(0x7f0000000180)=0x0, 0x0, &(0x7f0000000240)=0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001640), 0x0, 0x34000, 0x0) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000040)={0x30, 0x0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r3, 0x0, r4, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r2}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r5 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7, 0x100008c}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000b6a000/0x3000)=nil, 0x3000, 0x1000, 0x6, &(0x7f00009dd000/0x1000)=nil) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002380)={0xd, 0x5, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000}, [@func={0x85, 0x0, 0x1, 0x0, 0x7}, @ldst={0x0, 0x0, 0x4, 0x5, 0x9, 0x4}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) pread64(r6, &(0x7f0000000140)=""/15, 0xf, 0x4) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$kcm(0x2, 0x7, 0x2) mbind(&(0x7f00009f5000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x7ffffffc, 0x4) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x7, 0x2, 0x2, 0xffffffffffffffff, 0xb}) r7 = syz_open_dev$swradio(0x0, 0x1, 0x2) ioctl$VIDIOC_S_FREQUENCY(r7, 0x402c5639, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5}, './cgroup.cpu/cgroup.procs\x00'}) 6m15.8090469s ago: executing program 6 (id=2057): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x25dfdbfb, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0xfffffffd, 0x4}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r1, &(0x7f0000000080)='4096\x00', 0x4) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000002e00)='ns/cgroup\x00') syz_usbip_server_init(0x6) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4544f0fffcff30c000"], &(0x7f0000000280)='syzkaller\x00', 0x6, 0x1e, &(0x7f0000000300)=""/30, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000c00)={0x4, 0xb, 0x902c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x7}, 0x94) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r6 = syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x3, 0xffffffffffffffff, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, 0x0, 0x0, 0xf0ee, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0186405, &(0x7f00000001c0)={0x8d6, 0x3, {r6}, {}, 0x8, 0x3}) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r7, 0xc0945662, &(0x7f0000000040)={0xfffffff8, 0x0, '\x00', {0x0, @bt={0x6, 0x9f, 0x0, 0x2, 0x7, 0x8, 0x6, 0x11, 0x1, 0x5, 0x6, 0x983, 0x0, 0x20010, 0x1c, 0x21, {0x5, 0x3}, 0x8, 0x5}}}) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r8, 0x4c80, 0x7000000) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="bd620000", @ANYRES16=0x0, @ANYBLOB="a18300000000000000000500000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900000000025d0000004e000e0088800900080211000001080211000000ec03f3b85ad3000004008181a1ffffffffffffff0400000003010004064a1e05008100060243832a0100720603030303030376060ff4220004000000"], 0x78}, 0x1, 0x0, 0x0, 0x8810}, 0x0) 6m14.107146817s ago: executing program 6 (id=2063): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000a40), r0) sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b00)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x884}, 0x4044802) 6m14.042182416s ago: executing program 6 (id=2065): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) mkdir(&(0x7f0000000400)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./tracefs\x00', &(0x7f0000000480)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./tracefs/events/xhci-hcd/xhci_portsc_writel/format\x00', 0x0, 0x0) read(r2, &(0x7f0000000500)=""/1024, 0x400) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r0, @ANYRES64, @ANYRES16=0x0, @ANYRES16=r2], 0x20}}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x220482, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000140)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_type(r5, &(0x7f0000000100), 0x2, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xe, 0xffffffffffffffff, &(0x7f00000000c0)='-5', 0x2, 0x0, 0x0, 0x4}]) setsockopt$inet_tcp_int(r7, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) write$cgroup_type(r6, &(0x7f0000000280), 0x9) r8 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000c40), 0x12) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r9, &(0x7f0000000240), 0x12) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r4, 0xc018aec0, &(0x7f0000000600)={0x0, 0x7, 0x180, 0x0}) r10 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000040)=0xd) ioctl$TCSETSF2(r10, 0x402c542d, &(0x7f0000000040)={0x7, 0x3, 0x8, 0xffffffaf, 0xc2, "0b066448ef342702154d39ab3d4b4a05742d86", 0x3, 0x4}) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000001c0)=0x3) 6m13.826783555s ago: executing program 6 (id=2066): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x2730, 0x20, 0x1, 0x51}, &(0x7f0000000180)=0x0, 0x0, &(0x7f0000000240)=0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001640), 0x0, 0x34000, 0x0) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000040)={0x30, 0x0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r3, 0x0, r4, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r2}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r5 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7, 0x100008c}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000b6a000/0x3000)=nil, 0x3000, 0x1000, 0x6, &(0x7f00009dd000/0x1000)=nil) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002380)={0xd, 0x5, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000}, [@func={0x85, 0x0, 0x1, 0x0, 0x7}, @ldst={0x0, 0x0, 0x4, 0x5, 0x9, 0x4}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) pread64(r6, &(0x7f0000000140)=""/15, 0xf, 0x4) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$kcm(0x2, 0x7, 0x2) mbind(&(0x7f00009f5000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x7ffffffc, 0x4) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x7, 0x2, 0x2, 0xffffffffffffffff, 0xb}) r7 = syz_open_dev$swradio(0x0, 0x1, 0x2) ioctl$VIDIOC_S_FREQUENCY(r7, 0x402c5639, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5}, './cgroup.cpu/cgroup.procs\x00'}) 5m58.129346408s ago: executing program 35 (id=2066): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x2730, 0x20, 0x1, 0x51}, &(0x7f0000000180)=0x0, 0x0, &(0x7f0000000240)=0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001640), 0x0, 0x34000, 0x0) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000040)={0x30, 0x0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r3, 0x0, r4, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r2}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r5 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7, 0x100008c}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000b6a000/0x3000)=nil, 0x3000, 0x1000, 0x6, &(0x7f00009dd000/0x1000)=nil) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002380)={0xd, 0x5, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000}, [@func={0x85, 0x0, 0x1, 0x0, 0x7}, @ldst={0x0, 0x0, 0x4, 0x5, 0x9, 0x4}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) pread64(r6, &(0x7f0000000140)=""/15, 0xf, 0x4) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$kcm(0x2, 0x7, 0x2) mbind(&(0x7f00009f5000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x7ffffffc, 0x4) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x7, 0x2, 0x2, 0xffffffffffffffff, 0xb}) r7 = syz_open_dev$swradio(0x0, 0x1, 0x2) ioctl$VIDIOC_S_FREQUENCY(r7, 0x402c5639, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5}, './cgroup.cpu/cgroup.procs\x00'}) 2m23.288145469s ago: executing program 1 (id=3274): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x182000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x300, 0x30, 0x30, 0x0, 0x6, 0x0, 0x0, 0x0, {0x10, 0x8, 0xffffffff}, {0x8, 0x9}, {0x0, 0xc}, {0xffff, 0xb, 0xfffffffd}, 0x0, 0x80, 0x100, 0x0, 0x1, 0x0, 0x9, 0x1, 0xfffffffc, 0x400009, 0x6, 0xfffffffc, 0x17, 0x200, 0x1, 0x8}) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYRES32=0x0], 0x1b) r1 = dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x10006, @loopback, 0x3}], 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x2, 0x1000, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0xe50, 0x0, 0x0, 0x1000, 0x2000003, 0x0, 0x0, 0x16}}}, &(0x7f0000000280)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) syz_ublk_setup_queues(r9, r8, &(0x7f0000000200)={0x0, 0x1460, 0x400, 0x3, 0x249, 0x0, r3}, &(0x7f00000002c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x181c, 0x0, 0x2, 0x2ad, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2671, 0x1, 0x9, 0x102, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe0dc, 0x2000, 0x3, 0x102c4, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x1000, 0x2, 0x18b, 0x0, r3}}], 0x4, &(0x7f0000001540)={0x2e, 0x73, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r7, '\x00', {0x1, 0x48a, 0x0, 0x0}}, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x20000040, 0x0, 0x0) memfd_create(&(0x7f0000000100)='.\x88!\x05\'\'\x88\x00', 0x0) 2m23.128621056s ago: executing program 1 (id=3276): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x210}) socket$can_bcm(0x1d, 0x2, 0x2) syz_open_dev$vim2m(&(0x7f0000000200), 0x4000004, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000002c0)={0x0, &(0x7f0000000100)}) unshare(0x24060400) pselect6(0x40, &(0x7f0000000100)={0x1, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffc}, 0x0, &(0x7f00000001c0)={0x1f, 0xfffffffffffffffe, 0x0, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280), 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) prctl$PR_MCE_KILL(0x21, 0x1, 0x2000000) prctl$PR_MCE_KILL_GET(0x22) r2 = syz_io_uring_setup(0x56a7, &(0x7f0000000440)={0x0, 0xcd1d, 0x1000, 0x1000000, 0x20000}, &(0x7f0000000040)=0x0, &(0x7f0000000080), &(0x7f0000000280)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0xc1842, 0x0) syz_usb_disconnect(0xffffffffffffffff) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4, 0x2}, 0x1) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r5 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$6lowpan_enable(r5, &(0x7f00000001c0)='1', 0x1) write$6lowpan_control(r4, &(0x7f0000000280)='connect aa:aa:aa:aa:aa:10 2', 0x1b) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)=ANY=[@ANYBLOB="28000600020303000000000a000000000200000101000200027f800003000000080001"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40004000) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYRESOCT=r1, @ANYRESOCT=r3, @ANYRESDEC], 0x24}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040911) syz_usb_connect(0x3, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="1230146be9040000761810e345770e260a27d292eb7b9e2900"], 0x0) syz_open_dev$sndctrl(0x0, 0x3, 0x1a0a00) 2m19.796394397s ago: executing program 1 (id=3304): r0 = socket$inet(0x2, 0x3, 0x2) r1 = dup(r0) setsockopt$inet_int(r1, 0x0, 0xce, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ed) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x5) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000380)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f0000000140)='hostfs\x00', 0x0, 0x0) r3 = syz_io_uring_setup(0x38, &(0x7f0000000580)={0x0, 0xbbda, 0x13f00}, &(0x7f0000000240), &(0x7f0000000480), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000002840)={&(0x7f0000003000)={[{0x0, 0x0, 0x1}]}, 0x1, 0x3, 0x2}, 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r4, &(0x7f0000000200)='p:my_-robe ./file0:0', 0x14) 2m19.684647832s ago: executing program 1 (id=3305): mkdir(&(0x7f0000000400)='./file0\x00', 0x114) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x14) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/llc/core\x00') fchdir(r1) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, &(0x7f0000000000)) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x76, 0x10bb41) r3 = socket$inet_tcp(0x2, 0x1, 0x0) set_robust_list(&(0x7f00000000c0), 0xc) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdir(&(0x7f0000000800)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x0, 0x10) rmdir(&(0x7f0000000280)='./my_configfs/target/core/rd_mcp_0/dev0\x00') r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x80c01) inotify_add_watch(r4, &(0x7f0000000200)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x400) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) readv(r6, &(0x7f00000001c0)=[{0x0}], 0x1) close(0x3) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r5, 0xc0105303, &(0x7f00000000c0)={0xf7, 0x9, 0x6}) setsockopt$sock_int(r3, 0x1, 0x53, &(0x7f0000000000)=0x20, 0x4) ioctl$USBDEVFS_DROP_PRIVILEGES(r2, 0x4004551e, &(0x7f0000000140)=0x2000003) ioctl$USBDEVFS_RESET(r2, 0x5514) r7 = syz_open_dev$sndpcmp(&(0x7f0000000240), 0xfffffffd, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r7, 0xc25c4110, &(0x7f0000000980)={0x0, [[0x1, 0x0, 0x7ffe], [0x2, 0x0, 0x9], [0x2, 0xfffffff7, 0x0, 0x4, 0x9b]], '\x00', [{0x0, 0xffffffff}, {}, {0x40fffc, 0x5}, {0xffffff6d}, {0x0, 0x1}, {0x2ea, 0x2}, {}, {0x0, 0x20000000}, {}, {0x8}], '\x00', 0x0, 0x0, 0x0, 0x2}) r8 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x4, 0x4000) ioctl$SNDRV_PCM_IOCTL_DELAY(r8, 0x80044121, &(0x7f0000000080)) 2m19.502754449s ago: executing program 1 (id=3307): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)="05000000010001", 0x178) 2m19.209542626s ago: executing program 1 (id=3310): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x610401, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0xfffffffa) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) bind$netlink(r7, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="3400000010000b1e7bbb99b7710f94baf92cc50607fdc0a3233e7034097d61c69882e4185a8aea2f8b0122594c105add54514aa7837e83fbbbea19f15026d06bcc6c2ec7e81da5b2fcf858844a6df9825aae648f98cf9cc3bdcc49729bfea8960689102286c55739f9b23576bde465068870962e586c4d8e340151e4145f0b81d318676c", @ANYRES32=r8, @ANYBLOB="04050500000000001400128009000100626f6e640000000004000280"], 0x34}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r11, @ANYBLOB="6865ae2e13a877581de4af60d2048c99e95ecea1d8d78f87c0ca64e42f711eb9f350dfd82bb0edc4feb262878353383b8f80bd457484e1204bc16e6c58f5ec5135fde17a8cdae806cdde813cf1c2"], 0x44}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x20, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r4, 0x1}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x9}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x0) dup(r1) socket$inet_tcp(0x2, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) socket$inet6(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$kcm(0x2, 0x2, 0x0) 2m19.104209728s ago: executing program 36 (id=3310): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x610401, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0xfffffffa) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) bind$netlink(r7, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="3400000010000b1e7bbb99b7710f94baf92cc50607fdc0a3233e7034097d61c69882e4185a8aea2f8b0122594c105add54514aa7837e83fbbbea19f15026d06bcc6c2ec7e81da5b2fcf858844a6df9825aae648f98cf9cc3bdcc49729bfea8960689102286c55739f9b23576bde465068870962e586c4d8e340151e4145f0b81d318676c", @ANYRES32=r8, @ANYBLOB="04050500000000001400128009000100626f6e640000000004000280"], 0x34}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r11, @ANYBLOB="6865ae2e13a877581de4af60d2048c99e95ecea1d8d78f87c0ca64e42f711eb9f350dfd82bb0edc4feb262878353383b8f80bd457484e1204bc16e6c58f5ec5135fde17a8cdae806cdde813cf1c2"], 0x44}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x20, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r4, 0x1}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x9}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x0) dup(r1) socket$inet_tcp(0x2, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) socket$inet6(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$kcm(0x2, 0x2, 0x0) 3.543330697s ago: executing program 7 (id=4241): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x7, 0x40700) ioctl$USBDEVFS_SUBMITURB(r0, 0x802c550a, &(0x7f0000000100)=@urb_type_bulk={0x3, {0x3}, 0x5, 0xa0, &(0x7f0000000080)="133b165dd0", 0x5, 0xbec, 0x3, 0x1, 0x0, 0xadf, &(0x7f00000000c0)="44c51cd974f32178a74c44a3c942c32a13d2a9af1246f9e74450138f03ad09d3e9eec61d4d112960d47c623b364a62a5ed08753e5cb015ab978e90"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x101c42, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xfffffee2) gettid() connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0xa, 0x4}, 0x20) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x3, &(0x7f0000000100)=[{0x4, 0xff, 0x2}, {0x8, 0x9, 0x5, 0x8001}, {0xb353, 0x0, 0x1, 0x93f}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.26719851s ago: executing program 8 (id=4245): syz_io_uring_setup(0xf00, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000002060110000034e400000000000000000537010006000000050004"], 0x24}}, 0x2) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0x1fd}, {0x2, [{@none, 0x70, 0x80, '\x00', 0x0, 0x0, "a6f50b605ebd575069fec3805eb0c2fc56028b48df11472d5a54e44bb5842c59b4c9482b0cdf6e404c1e2c73b18446d0ae5c7509aa0a8119306eace6db963e652ee46caf0a210168ef3d130e0fa5c72af68bbabfb29b32ec1bc2dbf19123f0d11f5cfe7660b9a566d1bb665e90e5174b16ade4a799bb67b626d41a2e5ad6eaa27738f6d36804a4ce35b29bc15e324ff46f54f69f41d35d27d822b068545b52918f3766c4e9c84e1f27d2c30de23aaddeaeedb421bf3bfb7e3bf919c628605e1c3e21165b6d8ae7c16017be3ba1301c2c900901d2c8a3d94c58d820ff501a4dda5541ee688f7276c5c8669d3afb63a6a4"}, {@none, 0xd, 0x9, "a3dc59", 0x9, 0x47, "2eaad5e0a6398f94c331114556dc27918b2646daa7dbf79abdb7f152e665e26d97e4f677800519b11018c3d4c53a37ba1d574298d2d1509d10842e8377f5afff988f23a7f2abe91d3f18160bdb668be19e497b67e8c4ae7208720b2648076bb3d3d592ba20c6e757fd077f99123219460811779d9242a322070ca41269a2e3b09eeb931a6e8f0834eb28d5913d475a9261681b683e9eebaa6c839c9a750b530e911930dc2aac0b31760494b3ca4eed480a2a4eb54444c8eb1e667ee6fd57e61fcec93dcf53d6cef98aaddd4067e27217653805afeed9c6635e46ac1978b7c8e4d82d9d1ea669ac6579ff8946b5b7457b"}]}}}, 0x200) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000180)=0x20000, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) userfaultfd(0x801) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x0, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, 0x0, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, 0x0, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) sendmsg$NFC_CMD_LLC_SDREQ(r0, &(0x7f0000000a00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000a40)={0x3e4, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_LLC_SDP={0x114, 0x13, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [{0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}]}, {0x34, 0x0, 0x0, 0x1, [{0x7, 0x1, '@[\''}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0x8, 0x1, '!.l*'}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0x5, 0x1, ']'}]}, {0x34, 0x0, 0x0, 0x1, [{0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}]}, {0x10, 0x0, 0x0, 0x1, [{0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}]}, {0x28, 0x0, 0x0, 0x1, [{0x16, 0x1, '+*}#-.$}^\':&i!)*+)'}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}]}, {0x18, 0x0, 0x0, 0x1, [{0x8, 0x1, '.]:%'}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}]}, {0x38, 0x0, 0x0, 0x1, [{0x13, 0x1, '*%.v@%&$:]*{{:^'}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0x5, 0x1, '['}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}]}, {0x10, 0x0, 0x0, 0x1, [{0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}]}]}, @NFC_ATTR_LLC_SDP={0x90, 0x13, 0x0, 0x1, [{0x8c, 0x0, 0x0, 0x1, [{0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0x33, 0x1, '\xe1\xff\xff\xff\xf9\xff\xb3\x1dx\x01\xd6)U\t\xf2;M\x9a\v\xd3\xd6\xd5\x97)\x80\b\x18w\v(\xec\xaa\x9e\xac\xa6FV\xa2h\x88\xed\xecM\xc0\xec\xdf\xe8'}, {0x4}, {0x8, 0x1, '@):]'}, {0x4}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0x6, 0x1, ':/'}]}]}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_LLC_SDP={0x224, 0x13, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [{0x4}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0x5, 0x1, ']'}, {0x8, 0x1, '/%/!'}, {0xc, 0x1, '\\@\'-\'p+-'}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}]}, {0x60, 0x0, 0x0, 0x1, [{0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0xb, 0x1, ',)\xac.]-)'}, {0x11, 0x1, ',&*\',\xfa-]&-%$+'}, {0x8, 0x1, '[-\'^'}, {0x4}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}]}, {0x4c, 0x0, 0x0, 0x1, [{0x14, 0x1, '&+{.)b^+!\xde:$!,!\''}, {0x4}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0x6, 0x1, '{['}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0x4}]}, {0x1c, 0x0, 0x0, 0x1, [{0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}]}, {0x54, 0x0, 0x0, 0x1, [{0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0x4}, {0xa, 0x1, 'W\x91\xb5\xd8\xcc\xff'}, {0x4}]}, {0x2c, 0x0, 0x0, 0x1, [{0xb, 0x1, '$^!%})/'}, {0xe, 0x1, '#@\x88/\\-}\xa6*%'}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}]}, {0x4}, {0x5c, 0x0, 0x0, 0x1, [{0x4}, {0xc, 0x1, '$[\'.]\x97+:'}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0x8, 0x1, '-+++'}, {0xb, 0x1, '\x1e-:\'\x89]('}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0x4}]}, {0xc, 0x0, 0x0, 0x1, [{0x6, 0x1, '{\xdf'}]}, {0x30, 0x0, 0x0, 0x1, [{0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0x4}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0xd, 0x1, '[){\xb9&}:}#'}]}]}]}, 0x3e4}, 0x1, 0x0, 0x0, 0x4048040}, 0x80) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) 3.188715602s ago: executing program 8 (id=4246): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./tracing\x00', 0x0, 0x100) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000880)=ANY=[@ANYBLOB="340000001100050000000001feffffff07000000", @ANYRES32=r2, @ANYBLOB="402000000000000014001a80100004800c000a80080003"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x11, &(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb1) socket$nl_generic(0x11, 0x3, 0x10) socket(0x200000000000011, 0x2, 0x10d) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') r4 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x1, 0x8, 0x7fffffff, 0x2, 0x80007, 0x7f, 0x20000006, 0xca, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x100001, 0x3, 0x0, 0x5, 0x6, 0x2000001, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0xfffffffc, 0x6, 0x7, 0x17, 0xd, 0x3, 0x2, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0x5, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x169432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0x8, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ffe, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1fe, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0x4000a9, 0x5, 0x9, 0xac8, 0x2000af, 0xfffffffe, 0x8, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x2, 0x5, 0x42c2, 0x6, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x57, 0x4, 0x8000003, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x1, 0x1, 0x2, 0x5, 0xe7, 0x8, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x6, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x45, 0x8, 0x30b1d693, 0x5, 0x1f40, 0x7, 0x41, 0x6c1b, 0x0, 0x804, 0xac1, 0xb1e, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000240)=""/49, 0x31}], 0x1, 0x3a, 0x5) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r6 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) ioctl$FICLONE(r3, 0x40049409, r7) setrlimit(0x7, &(0x7f0000000400)) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r5, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r5, 0xffffffffffffffff) syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) r8 = io_uring_setup(0x4053, &(0x7f0000000040)={0x0, 0x2063, 0x0, 0x2, 0x94}) io_uring_register$IORING_REGISTER_FILES2(r8, 0xd, &(0x7f0000000140)={0x62, 0x1, 0x0, 0x0, &(0x7f00000001c0)}, 0x20) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0) write(r0, &(0x7f0000000500)='p:', 0x2) 3.186141359s ago: executing program 7 (id=4247): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000010000000400000008"], 0x48) (async) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x0) ioctl$I2C_PEC(r1, 0x708, 0x2) (async) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f00000000c0)={0x0, 0x2, 0x4, &(0x7f0000000080)={0x0, "90f541a5e64f61909103f1fbbc2bd3c9f144d76e44c7b2986eb5e52829e7cb8393"}}) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4038587a, &(0x7f0000000500)={{r0, &(0x7f0000000080)='\x82\xff\xff\xff', 0x501c0, &(0x7f0000000340)={@_ha_fsid={[0x1, 0x2000]}, {0x4, 0x3, 0x6, 0x100}}, 0x5, &(0x7f0000000380)={@_ha_fsid}, &(0x7f00000003c0)=0x80000000}, {[0x5, 0xffffff19, 0x3, 0x5]}, 0x8, 0xf3, &(0x7f0000000400)=""/243}) (async) close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x48) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x0, 0x101, 0x3f8, 0x0, 0x50}, 0x9c) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0x20f6, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007a00000018110000", @ANYRES32=r0, @ANYRESDEC=r3], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) (async) r7 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) (async) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r8, &(0x7f0000000000)=""/172, 0xac) syz_usb_disconnect(r7) (async) syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f00000005c0)=ANY=[@ANYBLOB="12011000020000202505a1a440000102030109025c0002010500020904000001020d0000052406000105240080000d240f01018000000f0001800406241a0300090905810308000207800904010000020d00000904010102020d000009058202080006bd63090503020800050974191be2412b4942c939b40c9d374fc6be845f9d2609bb98b12fa64124f15d1064b39871590ba27a"], &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x7, 0x0}]}) ioctl$TIOCSTI(r6, 0x5412, &(0x7f00000002c0)=0x7e) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000540)=0x9) (async) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000180)=0xef) (async) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000200)=0x2) r9 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) set_thread_area(&(0x7f0000000000)={0x83, 0x20000000, 0xffffffffffffffff, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1}) (async) ioctl(r9, 0x4400ae8f, &(0x7f0000000000)) (async) ioctl$KVM_IRQ_LINE(r5, 0x4008ae61, &(0x7f0000000280)={0x0, 0x8001}) timer_create(0x2, &(0x7f0000001640)={0x0, 0x21, 0x1, @thr={0x0, 0x0}}, &(0x7f0000001680)=0x0) timer_settime(r10, 0x0, &(0x7f0000001840)={{}, {0x77359400}}, 0x0) 3.054148075s ago: executing program 7 (id=4248): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20040055}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1de0000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000000d0a01030048cdf227000000000000000a0000010900020073797a310000008f0900303cc812f4d13ced7e01"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) recvmsg(r2, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x40000100) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x2, 0x72, 0x0, 0x7e}]}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r5 = dup(r4) mmap(&(0x7f00005fe000/0x2000)=nil, 0x2000, 0x2, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x10) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f00000000c0)={0x600, 0x80600}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x2}) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0xf, 0x10, 0x1, 0x2, 0x8, 0x9, 0xffffffd9, 0x7, 0x9, 0x8, 0x80000000, 0x3, 0x401, 0x1, 0x4, 0x2, {0xf, 0x2}, 0x8, 0x5}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) r7 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r7, &(0x7f0000001740), 0x0, 0xc0012002, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000008, 0x8031, 0xffffffffffffffff, 0x0) r8 = syz_open_dev$swradio(&(0x7f0000000140), 0x1, 0x2) poll(&(0x7f0000000180)=[{r8, 0x3}], 0x1, 0x9) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) 2.963856938s ago: executing program 7 (id=4251): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2}}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xe, 0x1, 'hashlimit\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x3c, 0x3, "6c6f00000000000000000000000000002000000010270000050000001000000010000000e8030000e8030000202000"/56}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd4}}, 0x0) (fail_nth: 11) 2.79329264s ago: executing program 7 (id=4255): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x7, 0x40700) ioctl$USBDEVFS_SUBMITURB(r0, 0x802c550a, &(0x7f0000000100)=@urb_type_bulk={0x3, {0x3}, 0x5, 0xa0, &(0x7f0000000080)="133b165dd0", 0x5, 0xbec, 0x3, 0x1, 0x0, 0xadf, &(0x7f00000000c0)="44c51cd974f32178a74c44a3c942c32a13d2a9af1246f9e74450138f03ad09d3e9eec61d4d112960d47c623b364a62a5ed08753e5cb015ab978e90"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x101c42, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xfffffee2) gettid() connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0xa, 0x4}, 0x20) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x3, &(0x7f0000000100)=[{0x4, 0xff, 0x2}, {0x8, 0x9, 0x5, 0x8001}, {0xb353, 0x0, 0x1, 0x93f}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.557945285s ago: executing program 7 (id=4258): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0) syz_usb_connect(0x0, 0x32, &(0x7f0000000540)=ANY=[@ANYRES64=r0, @ANYBLOB="16cfcc0aa1ac9d520484826c6887eecdba03b660a877f171e9fdcbd01117d95ef7ec88ab268e4facea1ff14ebc1a6d748d89f0e61065a65220a7e5b46fa3b182809be71d7cad380ff8169971cf33de256975379598d98ded0c6935419799003a2e4d133a6301858cb743a2ff29c5871d0122740251dfcdb32548a33ba6bdb4f867f7ce96c9889b6299f683bdf764c6523cefcc013b0ed6bc235dba1868d41551abb4cc1341baddd5c28fad015a35b543953ee8f256beb6e5bfd3204dc3f79f9e380c2d60684f85ea0f80c5935f0f9bdaefe23dd2", @ANYBLOB="a9a262b893d9b79607813a3261486004ccb728fe6c1667d9a41a9425428a", @ANYBLOB="626ad8cb95a619aca4e4aadc0b856e6491331c270d9695d2b8bc7b7cc7507c0244b54e2b835c13b351cc3e211287f400d9b15d884a89cdc02fc600524c8d5069374f879d26a851674b35404d8966135c0f51e76a8e7702a95d456f7b050ba11ebb9dd6c430f39fb19dd8b8d11df6625ca4ba0648085cc80c0677d34e82d993071c038f8a878685e0631d08ed154aada6cb8f3e63073a4f385d3dd2d2e28c91bde61d4c8ed1", @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRESHEX=r0], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='dummy_hcd.0\x00', 0xb) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/platform/drivers/dummy_hcd/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='dummy_hcd.0\x00', 0xb) close(r2) nanosleep(&(0x7f0000000500)={0x2}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write(r0, &(0x7f0000000340)='o', 0x1) 2.400393208s ago: executing program 3 (id=4262): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2.398055182s ago: executing program 3 (id=4264): syz_io_uring_setup(0xf00, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000002060110000034e400000000000000000537010006000000050004"], 0x24}}, 0x2) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0x1fd}, {0x2, [{@none, 0x70, 0x80, '\x00', 0x0, 0x0, "a6f50b605ebd575069fec3805eb0c2fc56028b48df11472d5a54e44bb5842c59b4c9482b0cdf6e404c1e2c73b18446d0ae5c7509aa0a8119306eace6db963e652ee46caf0a210168ef3d130e0fa5c72af68bbabfb29b32ec1bc2dbf19123f0d11f5cfe7660b9a566d1bb665e90e5174b16ade4a799bb67b626d41a2e5ad6eaa27738f6d36804a4ce35b29bc15e324ff46f54f69f41d35d27d822b068545b52918f3766c4e9c84e1f27d2c30de23aaddeaeedb421bf3bfb7e3bf919c628605e1c3e21165b6d8ae7c16017be3ba1301c2c900901d2c8a3d94c58d820ff501a4dda5541ee688f7276c5c8669d3afb63a6a4"}, {@none, 0xd, 0x9, "a3dc59", 0x9, 0x47, "2eaad5e0a6398f94c331114556dc27918b2646daa7dbf79abdb7f152e665e26d97e4f677800519b11018c3d4c53a37ba1d574298d2d1509d10842e8377f5afff988f23a7f2abe91d3f18160bdb668be19e497b67e8c4ae7208720b2648076bb3d3d592ba20c6e757fd077f99123219460811779d9242a322070ca41269a2e3b09eeb931a6e8f0834eb28d5913d475a9261681b683e9eebaa6c839c9a750b530e911930dc2aac0b31760494b3ca4eed480a2a4eb54444c8eb1e667ee6fd57e61fcec93dcf53d6cef98aaddd4067e27217653805afeed9c6635e46ac1978b7c8e4d82d9d1ea669ac6579ff8946b5b7457b"}]}}}, 0x200) r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000180)=0x20000, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) userfaultfd(0x801) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x0, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, 0x0, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, 0x0, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) sendmsg$NFC_CMD_LLC_SDREQ(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000a40)={0x3e4, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_LLC_SDP={0x114, 0x13, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [{0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}]}, {0x34, 0x0, 0x0, 0x1, [{0x7, 0x1, '@[\''}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0x8, 0x1, '!.l*'}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0x5, 0x1, ']'}]}, {0x34, 0x0, 0x0, 0x1, [{0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}]}, {0x10, 0x0, 0x0, 0x1, [{0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}]}, {0x28, 0x0, 0x0, 0x1, [{0x16, 0x1, '+*}#-.$}^\':&i!)*+)'}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}]}, {0x18, 0x0, 0x0, 0x1, [{0x8, 0x1, '.]:%'}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}]}, {0x38, 0x0, 0x0, 0x1, [{0x13, 0x1, '*%.v@%&$:]*{{:^'}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0x5, 0x1, '['}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}]}, {0x10, 0x0, 0x0, 0x1, [{0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}]}]}, @NFC_ATTR_LLC_SDP={0x90, 0x13, 0x0, 0x1, [{0x8c, 0x0, 0x0, 0x1, [{0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0x33, 0x1, '\xe1\xff\xff\xff\xf9\xff\xb3\x1dx\x01\xd6)U\t\xf2;M\x9a\v\xd3\xd6\xd5\x97)\x80\b\x18w\v(\xec\xaa\x9e\xac\xa6FV\xa2h\x88\xed\xecM\xc0\xec\xdf\xe8'}, {0x4}, {0x8, 0x1, '@):]'}, {0x4}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0x6, 0x1, ':/'}]}]}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_LLC_SDP={0x224, 0x13, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [{0x4}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0x5, 0x1, ']'}, {0x8, 0x1, '/%/!'}, {0xc, 0x1, '\\@\'-\'p+-'}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}]}, {0x60, 0x0, 0x0, 0x1, [{0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0xb, 0x1, ',)\xac.]-)'}, {0x11, 0x1, ',&*\',\xfa-]&-%$+'}, {0x8, 0x1, '[-\'^'}, {0x4}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}]}, {0x4c, 0x0, 0x0, 0x1, [{0x14, 0x1, '&+{.)b^+!\xde:$!,!\''}, {0x4}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0x6, 0x1, '{['}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0x4}]}, {0x1c, 0x0, 0x0, 0x1, [{0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}]}, {0x54, 0x0, 0x0, 0x1, [{0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0x4}, {0xa, 0x1, 'W\x91\xb5\xd8\xcc\xff'}, {0x4}]}, {0x2c, 0x0, 0x0, 0x1, [{0xb, 0x1, '$^!%})/'}, {0xe, 0x1, '#@\x88/\\-}\xa6*%'}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}]}, {0x4}, {0x5c, 0x0, 0x0, 0x1, [{0x4}, {0xc, 0x1, '$[\'.]\x97+:'}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0x8, 0x1, '-+++'}, {0xb, 0x1, '\x1e-:\'\x89]('}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0x4}]}, {0xc, 0x0, 0x0, 0x1, [{0x6, 0x1, '{\xdf'}]}, {0x30, 0x0, 0x0, 0x1, [{0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0x4}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0xd, 0x1, '[){\xb9&}:}#'}]}]}]}, 0x3e4}, 0x1, 0x0, 0x0, 0x4048040}, 0x80) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000280)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) 2.2341111s ago: executing program 3 (id=4266): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x80000, &(0x7f0000000580)=ANY=[@ANYBLOB="66643d585bc76c4768cefef0ef067938a9e01cb198a2e1fa2d4c0fa89772d1458abd75c0350d7aaad733f39224322c062935d830e36cefa9ea62c937", @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f000000a380)="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", 0x2000, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x100004, {0x7, 0x28, 0xe, 0x118114, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x100, 0xff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_default\x00') syz_fuse_handle_req(r0, &(0x7f0000006140)="e0332f8f5747b9f778142cc174a9b5f0244b78bb6346cb5fc9135b8220090ee698fddc241870359d32327f299718466d88c89e68097036bb35abfe03e3c02234dcdb2c7d1209c657485ca1aa3f2fb80e71397b80fca6f3cf2367fb19eb95e5b4a0170063374645d9e020099ffd7def3d94cd29412b3d7b7a47bc70121be848cfcecea78d41a93622b134bd06e84dec07a9e5abc29cb02d5b9091e748cffacf48352628822bab7b24a17bdf4b3f3bd9fb17793496aa6490da3f58039ce5b40745dd63f82d93bed80b50ca5742d67d39029a98db95c9392e2d5fd9a35bad30cfe98682b5a069738a12c3cfd25949106cfc839202fd21c2b28e44be73280d5037351ead2dd1c277d9cc9088c6b14365eb0937ea9685f6b26232293803260f2c8cfe176b55df304bc2865b8f52581afc4beed445ae8cc405cb7bcc51103aef812c41437c5b070a3591ad0964677f4f9017bb300727dfab009056bee3671a9694be2e2f2173fcc06ceba5aed0d93a3d7cd88365c5c354788efcc705e90d572e34e9e566fc206a8167970ecb9cbc43f4d9de4d43688582b6600dfcfc7379c831e756a45835647bd87879a3e3942c61b9ea2c2af35d49a4caa9a109b0beb972996ff8924ea371e15dc48efd12b1203a7f1fe354977fcf9e4ee2c8f210387e551ddb55e5f67ee6bb9bc8772649693b0adf24606e8ccc59f020834d8cbfcadfa1770549fe464dfc412308fbaee8d30bd20c002794bfb923bac6b490841248d12ad9a0e54d1d96e3aff5dc4930a6c8b7c75264a46af7a6339725fb84e0363463ebaaaf58d6b9309ae7c87a8df8c68d2487d684011de1fa7645f3f48cf3bb61bee8bcace2f8ef5f967f2765f8086aeaa5dcc34c84e379a7ddd6438cccb5b8098dfbffffffffffffeadbc4ad2b2ef98412a46f74a171ad056429dbb723cdb9ca9f9f03170dba2870e5988b7cb755599d1eb8f7eaf5c8ded4b56022cb479d0bdfae18f69f9ecc42f4c181ea10838229ba5db7f088ad8d5f77e49c1fd93ed6b983c43b23c7eeb1233f0c114885057a27cd3f67a309e3fecba241836bc92308b830b10b04af6c9595b44e859b9ca7ef079e151fdd500060787be3a7a5b3e23b06ec70f087134504f8b8e7b6799ebfe14f698ba7a813a380e6f92cace9230aa8094a2465f7224e2becad469d0aaf0e48b0098eacfb17abdb69bb2ebba97a09d2b739b532d70db91fcb0fcb38bccdc01d7c8113024ea8b619e385e58d31899721416e10b408504a9c4fcf870d21051227440a616cf62f6637b62eceaee09029f88009be02269cb5e5ed090c6f5e6c652c31214aef301bd23ec2504f90991cd27539c1b8b54db51825e951d076cd0e70f56de4b91894ce22049205483a0fe7d7886b36118bebd96d138980e26604b6e70a7275c6b81501143119a8c2c271558202eda196704ef9ae3c33301e1afbe56d069ce4926bf531d960f3df58192f3da558adc169d48d39e24e04e95c406b34b1f4ed2726ef0f6a67dd84c75636984191d019cebfa883fdf99affcdb4c874614a5312455403895891daf7469d6721583ccd1290ab05b14516f22965fc52c4a528f1a5c20cc133fea279d9efc991ec4d51d2654daceda234f6d3b0c635db697aba3eeaf8356319adba42428266ac09a6e6495ca8f60c1c4e052068511696296e88ef86a591948627ba97df634e0063eb5f208df00a069b1213c29e58cf76f591253d60de9d7c01d29992ccc728140299c429fec0df9d90f83fa2467ce00de83b16d10c7edb80ff8d4b1b19eea9bd1e2783a0d41215c9cf23bc3ca1ff414e3f29aadba00c5a8d5b44c28c10e99140e5428278e54bfd880a93fd1b54b560422ab2bfcf120a7902373b6442c6e9867b19aa0a6b77b1634ab6fd1c8a1d90d99ebb9ebcb89d593562b266fbc53c40501f9298690283c45059b3f6ee278e46cb3904c947446c28af8855b2a68e6e0c0da205a6e12fdd15b393d579039b31c1a54230ac2ea13cf1f5540046b4dcccdd731fff7323c4880e5d2d8668d8a7f08920715c17ef9652eb55f224c82a6fdb970dbf1032403f283bd868a23f4785a6ab9c0bcd2308dba1a1f258ae512cf64784e501008db366ab7093a6cc4b6ee86154d44a1a15c10834602dd5ccf730f6d1142ac19d113496dbcb80021cb5733924265d082a8453b5c21e0245e4a2627e8df090da6a129ee49c58c1a7437369acdee15f5e4e5638f05d9f6391572d9890219def702a013a2b05239664dba44feec2a9508a3200b47de03e6a784bca2f3633df534af33da0a95a34ca845b61a22ff55a5a4c04ff9e06e7162f458a8c56e106e75ffb76a921f4057dd73d5f3801aa78ca4c78d6b79bce560404c2fe3d57876287f73e84c27c486ffb997951f9e0b3aa81a5e7804ac7360add11e7851842d0ed8df041c999e50226fef006373bbb53d5d8e9d1653924e60234fd0b6645b821746f3d88591ff66e294e8e958ca425ddbc7d604f7cbbcb9d5fe0d4ad53878eb16bc801def1005e1eb12a6d4924d2179948e7aa542f2600ba3c6c600629d64c529c7326c1f38aa4e1a6cc259e58f86400d65d67856c8f4fffc33ad4c279dc05367307f562f8127f37b03c3cf38a97cfde0c02aad8ac40d347a9e0a496f227c068dc6c666fb2b6a18990f607399b0707d135752d93739e1840b5b4c125c81eeeb318869b408f87778451e49f3ad988a8aa97672989ad367833ff7e7f0e79c37ac794fe466623e122127fb94ebbc01bc775183b26b2dc407b1aa1a55d4ce04dbe1df4fba0377fea4c4bfa5a37c4dd733fd116b9c7f50b11dd512ad68646b9ddca295fe27bee78476901fbb5c8d2856ae0e9e21ab26e3587c1325f1fa28edb4081f2ba309d5fc39f7f54abbd0d5a152c2f7e3a8b3a5ef6e097b109061c91124f41f33055a7bb86706629f614d40346715cf2fe387ef4e4fc6646839824d3ef85eeac85bc5e681320f6fa7057e0a10de8c4678b48510f77b91bb397dd1209eaba8ea1f237c348e9e0d7af1229e2c04b6560e48e3a7491f3066b63a8923becdcfd8594c1c55098a51283b599765b049831cacd9478e5e996c778d524b476f6677218c94886d7548be7617e5796e35bb3c9b13d70e4897867d85f0350e9329985f051fb556b861aef7dead54e6b29b9ad837cb4774f47a5371ef034612aa0c151345546b876b53e9f2c06e3ce0113e67eba8842f4ac5b51a61315bf050078c710dcf14371d9593730b1d0302ef999f488bbf42b7360171da98ad68932bda4937358fd1d0c2bcd04f7dbe2beaffa0d53cccda316cb19270cf4aa56695ef3203b49fe92d1623cc1d714da6b8f94112db1781562ab2ae50bda23debd55da440434299c992f2f8c264310d6d8ccdd042737db0253d6889d8bf36fe99a131b73300c9798b8fd58b5fc681b97e71230cd3094e441fe5cf1294bbc28f41146f06e39d5e19e673dd489dbddfc16fe281160a8008e375025cbf25e84945f2f0a5ffb2cd58273328ea9d7533b2f0861eff95823cea18dc1877183fefab808bda0890f91f1d79b36953b138fd62caea3411900647a4afadfecade2ff6274175f06614d108daaf9821c413a137e33c826957953bb39e2d852097f978c3577abcb71d68b45794247d8e82614979708f6d6d0e469828206b22913d6d320d815d42c0d943640c63196f703f946089f535eac511e26c6a5a529e875eb15aaf65fd50dcbaf37a009f2f9081cdbc744cf7aa2336913e89f1961581ad4bb6aeb1d23a787e2d3f99639871df5842c30581263d5139128f0a3f37ef48bb636d7aae06581de6baa55a12019d3ed831950915fdc1eee819dd01047bda606f2852699529718c99606246a92bb1dd9435d8f3a48646c0e423441bc783be358c0c91e6846419b6c0a81354500cb2721834dc11ba40c3bbe5717e5142922a168ca0e20fc269ea584c7f68ff7cced62c4277385368b4ad596b79c45a9c4575c37f300cab37a5693cb777fabed412934d3a77505b17cb2628119ddff45f3fcbffb50386eb9cfb6f82b37fa852ad4b65bf8e2898b11bf051cb7fb0fa81cbf81b9ceebb05498aeb2691eb15297edd682976d5a4f444cdaa82f063bc4482c28c4e6257c7cf3e5ee5a502c6527b77b12725e7526ff896ee2f8066536dce04d63072a34c19d533d4dbdb93e7185482cbf7510c5eef2f8aebebad011727cd8061a367b7e1868252bb43d9a74c9c6a10539e357d5367fac69a9296fe5a79a2e5b45950ff462e0e882aa32ff7f29b5644e5311f3e0b076c58683de29ad9dd8b2c92a41ca8313ac997e44981e82aec550bbf6c88adf3d54e9fdf93d9dce95289e9086043d888f19d209cbea79f8f5b2c81b2c3889eae1cb5305e282b883c4cfa3798eceeabb442a74ff6a8470020a296ef01d8e32553663c844e67e5a3a44375f0074ce9547a6c489ee86d7652219491f35c6b904d51a26c3d2cc77d8ff97050dd0d0aed4a1ecf1db7ac48673a1dcc70ac16f709dcf4b90148aede5302111ceaa3a81c49b724cfa206283b62513f96c1da77efafe2d2d08a5f391ab690b5d974ceed2e95e85b1039def0e94c79cc0aa1de1f8133e985adfadf4a657710487b265bb6692fd2b91a06ac98d50b052b8a13168e2638b93209238fbe67f4590a81a2cdbcc479ca9178720a6ec05bc9457f27ad2e2fd2f4e9c643ef85b6287a01f7fd597799cce7d6464ed3c95110733d4ba92314ba3dd81e51f541a6e37f8bb14376e41560f9049b4ff349a467defc205f915a345b5f06d090645180ca642c719f03e9813bff7fd635660efe38b022130d42f2cedd792bcba2bfb14385c6d1cbe5ff2e38c22f1f8d5e4d93d296042507e43f24ff904827b16f2a3572d26078d7fdb0cfdbe2e6bee07b94ae441e510681c96f97ef0ddbd7efbd80ce0689f6e2022a189dd2937d3eadd82a154a5fac91b5ef48523706957b8d5f55077973e9a036009d745a6df39ba154dc59c4ef784d62b3f2d782dc508242a1b0e4cc294b6e62e98ef946f0d984c3174cf86b8a0beb615f046ec50dd0c8a9c0f36df60bd162f1130f894085e7c47b6c28ff336f5d75166c1840e7ad07204fc10ce976505f6aece0316d8c65b973f61cea2fe4c6db722717985c25249f041c07a86b878702a8c9ab7c33fe41039041aa38489b02a28f18d69ab34619e9e35514c54592c8059984ace64b5302b5f22d68c35c7ffb23c63ce877a1e1b160dd2c329eabcc0e1e3072021bd811de3c0c7a68af20ddb9e2912b7eecc2a8cf083a252d0fe31629b20559f7b976e4d8625644385c692b8cdc2886a42d750962d0dee10a1546ecb7ef961216cc456d2450a44aab07014fe0be076ca6bcb46b644af844b2ad8b3817f1895a5d579af3dc937541f4b7e9203e7a7af534b406d8f6e3bc555d767603122ab1c4e62de19d6af63be8e39fe45732859d6d92e11f1a847f7d62764b6364aa7f95f03cc7deba467da5be71657ae50ff6bf93c51efb7d19ac9887e92fe5f3c9d545209eff307c9e02073bd3404827e148aa63c135ed668589bdfec38cb47716201a9d02f1b03993f89e96b33b32e52ddffb0580dac45422ba7a3fef76e519a3dc8d12eac60c2d2f8c4303aafa3e80135c403360d51c9cdeba3ffb31e664302f587e0e983ede7f9b2bfe2bc64bd5029cfa88445e043e08f3e9affee25e980e75d2664738726e3d2eade7dce0ece78a514bbbe5a54c121374d079e3b05996052d66889742232b73e950e1a9892e7352c9e546a8cfb48332d2b2be6327208ca51dc2869a562581947f62b0d5bfb3e0911d4854f822d6738b4deb195840d2bbae0b074b8d1e1010c24ec00052dce7d259e3044aab1a99d261fb3b49cf09dfc85473f94db06d49e202ca12182283d48144f8389a5301679901600bf8130d36315b277a99204b85a1598f84bd2d4c4893108f6717bf44234181467d6eeee61e1823268b5c60bf04d0e13e429f411b51adfca20ff1a1b1eee203d59b03da1643c3e9fc474a91470116c6c5275542adb10f3adae2ae87e88b93f334e0ceb6216fc081e8d84d8b0a503196dc50599b22b89b807627b427a815aea0dbca69e5fb215ee996395d8a21a1c67ac295be33c6517504e1f00f579f8c484873cc670b5b9e787b1c30ca1f0b25f8bb8f4bde3b3f4fa730c292cbf97b25068ba9c65f78c555d5f75d52a57958d7111e824f3afa16484f625abf62afc80654c36fd9f8284466422fb18e08274e8febc719d45b784974d50d187ad2349429af3f7930252a4d45997762e9d5f5493d408ca144532aa89aa3d43c46951dafb8f81794e2e9679ce238cfe86e112f4f046d87feec3be04461032819d62f217faa71fa9dc6da8861015567d1f7309090e25b7015dcc6d72a5e7ba53296ab1bc72467ac50831628cf5238155aed3fb189a8b527ebd38771e16454fe51e3edde55cea454414690491207c23f6cf33aaeeda432de2d1ede04e039a16245e66cce6f4e4ea534f290f02a2a81a46d6ffea7967dfbe37461f83d472091156594852823392efc953f4ac099d74e2d0328d9f47bd952352981a34055acd0273309484ab56afa85ff0c22fb53ac5d7cc8e346b4c2f38a4e2451738146b7b90c14f826c7dbc1b2be79d83772a8d629f2dfaf15286a15be1ea22a05d4ee3de6a6bfb7e208dbbcc88e77baac940d6438aeeb77c3a32db08b46e79545b65f7f3c1bd433092bc9116668c338ab35c01cb5871167868c6b61bd4c0ca5f96e5ce2465da06c4a320839f3bb7c0dffd40d5bb9a32fcbc6f691787de7211da062616272c77c62ac83e4cb29fb954ab27d9009877b79be54acd336bfe2a6e087abaab004743f5ea4ec8ddfb8086920e8e458a413adb98077a3cf860513cc8a453eb129556c871be7e7232a6130c4332819ad17b289fdb31f8f8854dffb4cfeca6d792567b444c750820a2a8a2e0f93779e61a4966650909369fc8bd5bd2bad4ff95cc8a14f6cd83ae6411b4bfe1a9b5cdf1fcf32c54cef1731edc47d41fa581376b25006fc859b98805d70a157e501a2cb2ab425340965213adfecdb5addb2b4b2ec5cc6935e4e279bb98283fb20dfcd8a2c91aefda9dc5a57bba4d8803d1eb0f4ba9529de01e39c2aa60a91267c31d036a3f669b9377661837f58c6950fdf38986ea13ff5e9c4d966bf999002da1a854d54aa225b259d91eb88425328e7d13b06dea321a151a8dfc44755214da97168e8acf027d66b7fff45ded94fcde53ff80342d4595644549c4ed827225596e2b30480e94eb049b6cd718fe8424d044bb5098e0206047ddb81755e3cb92131dd47ec754b64c4b78f663e364cf8a74cdd9857c81316dc4ccd5f02a84b310abfbc9d6a23ee6d1eaf6b8fc1544cfeb06002c8a40fb0e49859d2073a7b1cb112713518ad5e007d0a256f901469bfa5cae98841f877faeb584d41bfe695da72ca5700ae085f39c99f769502ea9f43c0b84ca4611441d5adb3e5d0a426297e535258748169cad487f97d171c0630642943508206ce648aad2971297f3d4037d73e5fbc73460ca7401b7dbd7807273ae077a81fd0d4bc90b6068e3ec95afcfeab16619306fb23942a4308e8253b35f4912df392dfc5daf35dd842a5a1f78fc294cbdbd504056f0c7779121b5b3db7461e437347452476f3b0bb22e63aa23cb9d3e797c6c95513058d8fb2c27864ac0e1f5001c988e29c79bfa4236c7be41dee5561d825c1f0fbebc0c06cc4712e88ad5efd94f4eb4e93794af42a9752a2ebc57dc2f3881c75bbb23ad25b69619f9f5b07fe114ba291d2b5b4c1c175e1aa3ee3eda55e6126b3ad1e613bf8e0bbac727b879e7796fa0ad100893677a18b53f5eb31db43a97370d3749afa92fd0291fa96b05daa6beb43b9c1c11d9515976976d1cc1e44f35d317299ceb68ea2545f2a2b92b4e1046f6f92c33aae6995593189bb2611576599fd765b8e6fe2e88674ffd57ee8252287b1904d622c36a502db45c72b0d5fc3d983cc44bc955eb43911404667a4ab147d72b69ff2514dfb820ad75758e85df88499cea94ed658b4c1c2f49fe2bbb8d2dd97f844a6df289296cfb9cd5bc8d17aa235e2c4501b1422b25acd6dbc3a91d03904c545320524f9034955ab02f5d058097c37d23984baf808d28b3e12821eb8919a77c1b6a8bdeceecfcc487c39db592817dd378a7c5127b427e7279b2a82f6b8eec6b3fabe0947e353e7a386475b15011de93e2f2891f772ef90f4aba1ee1c4d7321c81ce4dcaa378daeabb93182c319494436dbe67d252a01291cacb59686ebd53c6df21c083e98fa299cf5e9b59f1ccea95c62b1437c8ff8754a6372b5b879ebc3241f6430871eafe35337d75cb68c42862846df4342ab434f7f0a7b9f66824e1e696e3dbecde179592774b7511e5a7a1a06ba601eb5f2a935c7cef0f83ecd412a84afdd05120fceb1afb6445ebfcdff8fffffffb75dddccc45afb4f5bb1308d39309c92c0b61a322d5229881fa5d598113cce54107036ca9f63fe863d257c706fe89d5c7ae59a459c6f15ba48d80da4aff541797b26418acddb987df3544bc4918cdbbdd8dd1bc2163c89635044e7b4da878457727a667c0146a12b4c46639497243259bfe4aa5ea50eb79f39fa9209256c9a685e3e39d6d8b6a9ca7d3554fbff0908ad6c6ecf68e506c20b16cd4a98e3ada9eb0cb3eb0b75b13b6d80bf99eddf2282da52cec085d3a725b71c29395d605e1eb26143290946a3a0d24347fa46145735dbf4eabc12150b8d5f7eeca804d7ed1fecd0132d1b94ebec65cbc07dfd4d54a5140567e77c646bd92666922c43aca8e482c59b970fa43087eb76d6715e4e8e5ebe54ca391383ef685b133534fcc1e5c5eb56f9d76a888506c4ac8d289c37039e0c4f927b0e11e85c5c7ec1cf4b19bebee6014cb89ee57f2ade8d166005e956d46a0c01f60b58299479e8a59a2e88f1a7ffd08b27d92fc2772b338959bd0a1c9cb95075c3cc17043c818345b29b76c0b8ed41c8c7259cc780c657cb9509daec1558453cfe061f54e08523a55d3223897559d51096b680802140800000000000000322e007c2af0c08867291dd732bfe4b24d1d5ae517a7f5903c369ac6b157d42eb6ca8c0d7b50fd533a56c814e7cf04db3012eebd53ec1b123d65ab1e462dc19182b690d56a88ad5a1f4d89f1749b005e88085505cc6d7de8eeee08def67bc1d1519d44b7a62dc07e491f328f786956d9200f00d78829e6af7c1a5835366201374b9487330920d4c57e2f7073292e173acc2424bb0d5e0e9448b4c02f9cfc99bc408110b6a3e9bc3799e4b178c2871069bc7d9ceba564378f02b2932c36f159478b5facd452b595a86d119216af9d860bd3997305320159a69a70fc62284141d23d2dc1e5394b271d99e5570450f1c55807e96c7cbe1b7c2e3e96f69fecf0f375e36e0d2acf319e37199e98486a8d145ce2d996c1909402744cce63664a75e480b197c345360321e830e5912d1d7bfe5a129a67fa98e6eda5268fa588047859daa11d087d0dbf0ccc7e120e3a5820cb4f5dc06748317e3f866518eb66e39dc8a68a7411b3403fc8eeab8283dee4d767e8e5842ed922e03ae5b3c9c494d5ebc61527ccd1222740fedd9e469ba6b30761cf387d654081c7e63182860e4548748058914a9cea01caf074fe6a78fafa2b45c516f9f20af9ac6773a400fa9661a872f6b55f0ed52a9be9e9c35502604b924f0eb628d6545da322e0713f9a5587e87e4b04fa495423b7c72093b764adfd1430a2e608b7af3d2bf80fef00e5b69abe386618274921ff57621bb99739de2e066ff17e95eba027f6a35170af3a69e93359a9643e155832d45c1aa9a8f71ad35504b99d3d0a1c11ae108664ea36f4dcded083aee17ac9efe7ee3fdf7b63c7c09bcef62caa88708510d45cea79d323083ddbfe7e5d3d9138f206a7af82ef1d26c85015c3e55a285a35d0052546493536b9061db27291a9292033753b7bddac63dac6f6271689240e43523c434a65e1d35299e386c953d0c92f21057e0b7883e049d20961e75069587eb3df6206496f76bbfd96635bb19837ba2ab193d79072ffb8829306b63697ff104a65031b8a38c24cca9ba23d5cdf753169a00fe2b2c3849f234a7029b657b3324c10d553e601aa97d17024f7bf5a99f96392f4a079a83daa27f4e3b512ee8536e764ce4dc36fd0874dfa502a693e55bd9f116202c5e906703e2c43d84448598b7af78aa60a205c152841e75e23436738ccaa6bbcef87e6a237d86d1a5e38e56c162cd6d61a4fb8b410b1643ad557a22348edfa82c23db11c9abdd8141fce263a66537512e93a930a4801ad862a902c7c1e00eb7c7466b1351318b7196c2a9016c55a05e104e124bdb568132f9397e31b10d04e5284bd029ea2f6a3ed11854e09b5871d6a725c21a9ef5d7e729a90a8206d5f61e6e42e47dda3e31b9134d47872a0dd7a576b665ec6ceaa5fd7d85ed7feede9ac9fc23e40241c0318077edda75b62eb271e28fb3705f7b4950c14b721a3a74a7a4e4de02cef5de76a1602b906016c0892ef37db51b0a1dd53f28b3d896f20abbad1ad0e0220960423267fc6e1779d1150fd584dd184bb43278d2d68ff21ac0daeef5408348cb80f4a9e0e606f6048bbaa517289451f084fffb63c5d904788cfc310b5495528a58f4650dafc4e4675b99d35ebab710ac6fefcee6c51a2835510fb6d2dbd8f97c3e53fb7a23c3f3c0283eb2271504581b9c1fa31e35c117e56a5d668a9c57df3b4e1129ca019a8b877fa4a22768dfbdd9d2154e17f4a7755b065090d88982471bfb242d89af5c6782693a6ab1b1be74dfa5655ac3b5ef4ace8dc595803cf4025bdf5c0e9fbe7a12a3a313311809591da08a2cc6cd8480dc960e1f79fa208440a0e589be5756c36d5830a51c4bdc39c2a85c0431bae3a7331b2ffdf23623693d343a7938a8a8a4dd4d523c6450a705bccbb38427f06f4f84a18adf303c0ddecf4ce2b6cdde4e09a4c31816195f0fe9f05fcdc0609f8a75ad2f23d5c24faaf346c13ec0512a5c29477ac561c878085d1a323f6bab08e2fb9ee57d7bb621ef21caf3609d74036c6dc1d7be0b6058d89dcb8d9aa4462fa0a740be66e3fdaa957f27c5a26dc586ac8c927ab2d7cf1b761798ea4191be8f4423cf1a6727d0c5f27a9969a753573afa584dea82678f3471ba36d726c396d68c671e579120f1a11cd50fa66b26fc2d6cb74ba07edbd5d3a288cf58ed1255381df02b2fb8983b7cf833433d1ab8fdef12651c3507e4b69fbc4b234678cca36761e8da434e5f036f204a1400da15277ef27ac140e2d574b89c0fd617da27e6ce862883bbe81c288834b9477d0d440c15dad505b363fcc1cfef8e2e3a96438809505844196acd0af751dedfced67f209c2ffa9c6da842c93ff4b5fd54a67df904f2f31b4236728c99582a667a8461d397770a657ffa7d514b0f076d7f35e9704a836e7882a2acf0a0ec2158ac7234953c3696abdc791c0b163ee76fbcc5adc18b6fa0f51f76f3d313a0d891f1deb69f6e44289b1aa43a768b8d13270959763a2c45129daeea493a5b0d7b36753b223dca9a8037368653400", 0x2000, &(0x7f0000000700)={&(0x7f00000002c0)={0x50, 0xffffffffffffff8c, 0x8000000000000000, {0x7, 0x2b, 0x0, 0x2c000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000100)={0x5, 0x20001000, 0xffffffffffffffff, 0x1}, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_emit_ethernet(0x19, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb00dda054283ba802d4"], 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e23, 0x8000000, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(0xffffffffffffffff, 0x1) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) syz_clone(0x48020100, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x3, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000003c0), 0x3) getsockopt$bt_hci(0xffffffffffffffff, 0x11a, 0x5, 0x0, &(0x7f0000000040)) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000300)=@ccm_128={{0x303}, "fa840e2fa1d09051", "efbf2ffdc02ad333eff00eeeae2c9bfc", "cc04abb3", "0c6dde20dea3b536"}, 0x28) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x40804}, 0x44040) 2.044252977s ago: executing program 3 (id=4268): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1c6) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x2, 0x0) listxattr(&(0x7f0000000040)='./sys\x00', &(0x7f0000000140)=""/76, 0x4c) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/machinecheck/machinecheck0/ignore_ce\x00', 0x1, 0x0) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f00000001c0)={0x7}) write(r0, &(0x7f0000000200)="300ad1", 0x3) 2.043574296s ago: executing program 3 (id=4269): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000e, 0x6c2f2, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r2) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, 0x6001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}]}}}]}, 0x3c}}, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0xfffffffc}, 0xffffffffffffff53) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r7], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x4) r10 = socket$kcm(0x11, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x800}, @TCA_TBF_PARMS={0x28, 0x1, {{0x81, 0x0, 0xe, 0x7f, 0x800, 0x5}, {0x7, 0x2, 0x7, 0x1003, 0x5, 0x20000007}, 0x6db6312a, 0x7, 0x1257}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40008c1}, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0x3}, {0xffff, 0xb}, {0x0, 0xf}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0xc, 0x1, 0x7}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x840c0}, 0x44840) sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r12, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000380)={0x1cc, r8, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @HEADER={0x8c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x942a1f14ce71492d}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x4}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x20000894}, 0x4000040) 1.71396637s ago: executing program 8 (id=4274): syz_io_uring_setup(0xf00, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000002060110000034e400000000000000000537010006000000050004"], 0x24}}, 0x2) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0x1fd}, {0x2, [{@none, 0x70, 0x80, '\x00', 0x0, 0x0, "a6f50b605ebd575069fec3805eb0c2fc56028b48df11472d5a54e44bb5842c59b4c9482b0cdf6e404c1e2c73b18446d0ae5c7509aa0a8119306eace6db963e652ee46caf0a210168ef3d130e0fa5c72af68bbabfb29b32ec1bc2dbf19123f0d11f5cfe7660b9a566d1bb665e90e5174b16ade4a799bb67b626d41a2e5ad6eaa27738f6d36804a4ce35b29bc15e324ff46f54f69f41d35d27d822b068545b52918f3766c4e9c84e1f27d2c30de23aaddeaeedb421bf3bfb7e3bf919c628605e1c3e21165b6d8ae7c16017be3ba1301c2c900901d2c8a3d94c58d820ff501a4dda5541ee688f7276c5c8669d3afb63a6a4"}, {@none, 0xd, 0x9, "a3dc59", 0x9, 0x47, "2eaad5e0a6398f94c331114556dc27918b2646daa7dbf79abdb7f152e665e26d97e4f677800519b11018c3d4c53a37ba1d574298d2d1509d10842e8377f5afff988f23a7f2abe91d3f18160bdb668be19e497b67e8c4ae7208720b2648076bb3d3d592ba20c6e757fd077f99123219460811779d9242a322070ca41269a2e3b09eeb931a6e8f0834eb28d5913d475a9261681b683e9eebaa6c839c9a750b530e911930dc2aac0b31760494b3ca4eed480a2a4eb54444c8eb1e667ee6fd57e61fcec93dcf53d6cef98aaddd4067e27217653805afeed9c6635e46ac1978b7c8e4d82d9d1ea669ac6579ff8946b5b7457b"}]}}}, 0x200) r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000180)=0x20000, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) userfaultfd(0x801) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x0, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, 0x0, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, 0x0, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) sendmsg$NFC_CMD_LLC_SDREQ(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000a40)={0x3e4, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_LLC_SDP={0x114, 0x13, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [{0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}]}, {0x34, 0x0, 0x0, 0x1, [{0x7, 0x1, '@[\''}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0x8, 0x1, '!.l*'}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0x5, 0x1, ']'}]}, {0x34, 0x0, 0x0, 0x1, [{0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}]}, {0x10, 0x0, 0x0, 0x1, [{0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}]}, {0x28, 0x0, 0x0, 0x1, [{0x16, 0x1, '+*}#-.$}^\':&i!)*+)'}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}]}, {0x18, 0x0, 0x0, 0x1, [{0x8, 0x1, '.]:%'}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}]}, {0x38, 0x0, 0x0, 0x1, [{0x13, 0x1, '*%.v@%&$:]*{{:^'}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0x5, 0x1, '['}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}]}, {0x10, 0x0, 0x0, 0x1, [{0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}]}]}, @NFC_ATTR_LLC_SDP={0x90, 0x13, 0x0, 0x1, [{0x8c, 0x0, 0x0, 0x1, [{0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0x33, 0x1, '\xe1\xff\xff\xff\xf9\xff\xb3\x1dx\x01\xd6)U\t\xf2;M\x9a\v\xd3\xd6\xd5\x97)\x80\b\x18w\v(\xec\xaa\x9e\xac\xa6FV\xa2h\x88\xed\xecM\xc0\xec\xdf\xe8'}, {0x4}, {0x8, 0x1, '@):]'}, {0x4}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0x6, 0x1, ':/'}]}]}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_LLC_SDP={0x224, 0x13, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [{0x4}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0x5, 0x1, ']'}, {0x8, 0x1, '/%/!'}, {0xc, 0x1, '\\@\'-\'p+-'}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}]}, {0x60, 0x0, 0x0, 0x1, [{0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0xb, 0x1, ',)\xac.]-)'}, {0x11, 0x1, ',&*\',\xfa-]&-%$+'}, {0x8, 0x1, '[-\'^'}, {0x4}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}]}, {0x4c, 0x0, 0x0, 0x1, [{0x14, 0x1, '&+{.)b^+!\xde:$!,!\''}, {0x4}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0x6, 0x1, '{['}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0x4}]}, {0x1c, 0x0, 0x0, 0x1, [{0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}]}, {0x54, 0x0, 0x0, 0x1, [{0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0x4}, {0xa, 0x1, 'W\x91\xb5\xd8\xcc\xff'}, {0x4}]}, {0x2c, 0x0, 0x0, 0x1, [{0xb, 0x1, '$^!%})/'}, {0xe, 0x1, '#@\x88/\\-}\xa6*%'}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}]}, {0x4}, {0x5c, 0x0, 0x0, 0x1, [{0x4}, {0xc, 0x1, '$[\'.]\x97+:'}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0x8, 0x1, '-+++'}, {0xb, 0x1, '\x1e-:\'\x89]('}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0x4}]}, {0xc, 0x0, 0x0, 0x1, [{0x6, 0x1, '{\xdf'}]}, {0x30, 0x0, 0x0, 0x1, [{0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0x4}, {0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, {0xd, 0x1, '[){\xb9&}:}#'}]}]}]}, 0x3e4}, 0x1, 0x0, 0x0, 0x4048040}, 0x80) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000280)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) 1.634052373s ago: executing program 5 (id=4276): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x6, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f00000000c0)="a109a81b133d", 0x0, 0x0, 0x0, 0x3, 0x0}) ioctl$SG_GET_REQUEST_TABLE(r3, 0x2286, &(0x7f0000000ac0)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x6, &(0x7f0000006680)) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000008000000000000a2c000000050a03000000000000000000020000000c00024000000000000000010900010073797a30000000002c00000003f789bc65fdcdbd56a61a510a0102000000000000004d000000000900010073797a30000000000900030073797a32000000001400000084eb11000100"/139], 0xc2}}, 0x0) r5 = openat$cdrom(0xffffff9c, &(0x7f00000005c0), 0x203, 0x0) ioctl$CDROM_SELECT_SPEED(r5, 0x5322, 0x6) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x0, 0x14032, 0xffffffffffffffff, 0x0) 1.490440305s ago: executing program 5 (id=4277): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061044c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0xffffffffffffffff) r0 = syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000700)=ANY=[@ANYBLOB="12010003000000103d100001400001020301090285000301d8100c080b0102010130020904000000010130000a2401100a00070000000904010000010230000904010101010230000905010920000e00030a2525ffffff7f0c8001090402000001023000090402010101023000172401060080000007000200000000000000064a0900100905820920"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e"], 0x0) r2 = syz_open_dev$swradio(&(0x7f00000000c0), 0x1, 0x2) fsetxattr$security_capability(r2, &(0x7f0000000140), &(0x7f00000001c0)=@v1={0x1000000, [{0x1000, 0x9}]}, 0xc, 0x3) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000009c0)={0x24, &(0x7f0000000640)={0x20, 0x17}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x1}, 0x0, &(0x7f0000000840)={0x20, 0x80, 0x1c, {0x6, 0x1, 0x44b6, 0x4, 0x4, 0x3f9, 0xa3ac, 0x40, 0x0, 0x2, 0x2f, 0x7}}, &(0x7f0000000880)={0x20, 0x85, 0x4, 0x9}, &(0x7f00000008c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000900)={0x20, 0x87, 0x2, 0xd}, 0x0}) ioctl$USBDEVFS_GET_CAPABILITIES(0xffffffffffffffff, 0x8004551a, &(0x7f0000000040)) syz_usb_control_io$uac3(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x0, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r3, 0xc0044dff, &(0x7f0000004000)) 1.074346916s ago: executing program 8 (id=4278): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x7, 0x40700) ioctl$USBDEVFS_SUBMITURB(r0, 0x802c550a, &(0x7f0000000100)=@urb_type_bulk={0x3, {0x3}, 0x5, 0xa0, &(0x7f0000000080)="133b165dd0", 0x5, 0xbec, 0x3, 0x1, 0x0, 0xadf, &(0x7f00000000c0)="44c51cd974f32178a74c44a3c942c32a13d2a9af1246f9e74450138f03ad09d3e9eec61d4d112960d47c623b364a62a5ed08753e5cb015ab978e90"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x101c42, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xfffffee2) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0xfffc}) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0xa, 0x4}, 0x20) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x3, &(0x7f0000000100)=[{0x4, 0xff, 0x2}, {0x8, 0x9, 0x5, 0x8001}, {0xb353, 0x0, 0x1, 0x93f}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.073705958s ago: executing program 3 (id=4279): syz_open_dev$swradio(&(0x7f0000000140), 0x1, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vimc2(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$XFS_IOC_FSGEOMETRY_V1(r1, 0x806c5864, &(0x7f00000002c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='io\x00') pread64(r2, &(0x7f0000000100)=""/48, 0x3c, 0x100000000004) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e131f8104c1302007eac0102030109021b0001000000000904000001098b7500090583", @ANYRES8], 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000240), 0xc0000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="61128c00000000006113300000000000bf300000000000002500070007ffffffbd0201000000000095002000000000006916320000000000bf6700000000000007070000b964b01a4607feff00200000540700000ee60090bf050000000000000c5700000000000065070000d23700002c030000000000001f75000000000000bf54000000000000070000000400f9ffad430100000000007c000000000000000500000000000000950000000000000032ed3c5be95e5db67754bb12dc8c4ed68ecf264e0f84f9f17d3c30e3c7bdd2d17f2f175455000078af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd390700000500000000f18c30907d7bee45a0100000fe9de56c9d05000000c6c60bef0d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cac3f055af65727546e7c955ccefa1f6ab689ffffff7f63ede202fa4e0a2127b8b83c71a51445dc8dfd13ff15f852a39e5b2ab7bcb8f512036a5ba6d04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6901fcecc8158f0200000000c8fb735fd552bdc268694aeb0763f65e439ec1120843e326c819b6cf5c8ac86f8a297dff0445a13d0045fb3cda30a673a6037ed8c85f21ec2c081bdce431e56723888fb126a19bc1172b84b3ebe174aba210d739a018f9bbec63222d20cecac4d03723f1c921b5bbf7949632cacfdd32b3a6aa57f1ad2e99e0e67a993716dbf580469f0f53acbb400001e3abd5dedd3f7d2cf5834f2af97787f696649a46e17e090000000000000045eac1720e83b7838e3eede14308d582685e1becd6f35154bcb400000000000000000000008129277dc467148670ad3e2b26539cebca8f4ddc211bc3ccf0bd9d42ca019dd5d022cf74686e9fbe2562979eaed840a7afaab43176e65ec1118d46d1e827f3472f4445d353887a5ad103649afa1769080584f800031e03a651bb04000000ab04871bc47287cd31cc43ea0ffb567b4040c1458d0320ce7d0000413a0000000000000000005f37983f84e98a523d80bd56a57fa82b82f639601ae899a559944cb9a62a29ab028acfc1cb26a0f6a5480a55d624a0c544ba0dc828c22fe30000aa391598000000437d57fcf8295f63a70837f5cd4e5e77964522dc7ca3aa3476b7f2d851d27fd4de6eabb43e0799dc8d9fb7dc6c523ffbd74a6a40e4acb1ac872ade9d1f2ab779b8dbe843aeeda0426c767c00327b8c95b2bb6ddb55117669d9598c0f3598073f3a921c76beceff7e4fbfea5011db9020823b83abe54346c7af0a99fa077ffe7000feb9e44023a1749eb1d0d572b77d6e0d0fcd74031c8ef2629f5ecff4626746d6abe98a255e92c3c4f79bfcd0d91741380000cfeb73dec68ed56b5d3dfdf0cb8b71ad79000000000000000000000000000000dd434a25e95d0ec29d3adaccf89d0888031ecdfdb4dfbe444673be099ece7e4009c76c7108ef0a7e59fd6d906fbc3c9b412e0478cfee4485f423c63f49db43833c92eeeb647cebd4d7a93a17bcbb6bae5ff876375d4fe39cc2d292691672cc18ca372104ceb83a35ecedd97fc191d8f64d2b1d60c6d12911aada66c26aa4802c3514c3d92ec905000000b13f14c3f2ed6c64ec90000022d600000000000000000000028026b80c3899543223a6079ee96198b9a326db3be3a48af415ca28ca51c502550044ed8e29af8d763ef9b1f31befcad2ce5394601c7cdc233ba3d4ce26ed703dcb9fb3ad650f77e339768924dfdbeead13b88371154d743544a6091ec93e0d3fd5b4dc42911c17d51f964727bfd5cc5ba15370f6e1141d2271eded0b15e4316a1e4623272beb249a0928c417720be14c898f397411c88a7bcf3df46ab3efe7cd5e160c2afd3cc945f75011a102d952c7ad17a58d9be6910023a26faea764fae160cc2260bd028162917807ce89e11b5f261052ee0dde18efa1d802af2b7beecaaa61e7a726571df5cf6f8af41933cea0d0343261bccf64ca1c81045153eafbefdb91fbdff9ee3307d4a1837963b2dc2a3698d90e7915b098f19392e792adaea86052f4e948184001b6494e906925a092483adc7e9c8f7a29d226763c100aecae7f00619c36bceb9fb6dd7e55487d8485e498fdfc377fd3d266d21d46ab2f6b2ce22cd0aebba9b0ffbfe8ec3143c3734967c90b16ebbeeae1ce2baaae05aed6bf0f40c8a323f9235dc99698bd0b800067a901a79daada03cc77e74feb98b1586946b452764ff917a8ecc10e529c5bea49cad70e22df522c2803b6ef65df70223c6e22c3433e322d8dbd6e9b040065a9d6b3d5ae276cffe935d559bea88e1aa36b4e6c19e78457904297e77370e013b705a96548d47c609a93c45f4d1382b39c05dcc07d5b49ad75ddb3ce5b5b9416e03995da046c7aa5e6fc1a6f5d663380967ccef9de49a90ced031335e3219ebd9d06c257a50497ec523f5ff7361261ccfe239d603364a42e2e81fc068fcbb9792b673827fe7018a988fbce55bb74cdb327ce27e134548032a307871cea4c89d4b77b8743fb3cb72cc280b9f62e4f92f46a19600b802cba88b7d0a938d9e0e6cfe5d66b8748d004179e5b6025c0e1050faec7ecd9de190a975db2f8c06a551236278c4766d7e22e3b85168c9851de6266c791252f919b4f8b25055e786734e5142e4666c67aef5b7b2f88c6640995434aa8636993089c73f196c54ae829ad4307132655b075ae534fa7f1ea9a17e62357b0bd2bd1d62d34bfc136464025013665b1cf26a863a5cb3e8acc806611792add8254e705fefd2a44d5b15e3b36f6b75c97c9c04c511d8cf9e24c61c8284a913a381cb1a56c4f3f265a09628878040000000000000017b68afd95d4abd79286692439ee7acca2adc3d83d72b1b778e30c2bf2efbbcd054cf51f5705eb0faa8a0d9f18135cb1d8d567c3436fa697b72c5035d98b9e4f7f3379c0b3339debc78352b2e65299223d7ef2bd540e78167a3ac92a4c4f826f6d0e5c4ebf4f7a70c03e2f5ddbebf168586331eb5995d2288a167b7c6b20b32116b0c528dab6d0c4fe2ee402348104bc5d4012babedee898c6d3e1017be2e9bc759d3ab4d615f5000000000000000000000000000000000000000000007fff0000000000e693e314adf7dc9f517d04f1e6ca367d30d31d3647c6059db6e1e9529eb1623ef99e2d9ac2ab4872f8e784b07a31110bef6d000000a6f9e89e6d50ee06ce716f94da60f1f22db669560d296287c13c92070000ee7553eb2df17a39542fa88d09f000e88a90cf4406b9000000000000000000000000f441d6a6f516c235c6f5863e7f454ee0e16b9aa2593eb31fa3836703e7765aaeb77a8770e518efaa6d3dd85e03b3b133eb749057cea9af75a0e6f633532f2891b8e263cb6eecea691842827bc7c887081c8d320642389f5f0c42dba0ff75a257310f2d92cb1d1e16468949f5675262ee6609cf26ae4a8f5eac0ebf318e735930b01d8f586e34537bcff7d6196f494cdcf3a712078d745db0f5687a78ee6d000b3d171a0f08299b52d207f32e9da311ca090000003a42732808515eec574f892622c5be497fc3d9ca122d7c18b9e54637812c8debc61f0e42d838e44a819b74bce1a56108bb0f72c4a02475920532309c55b2c9ae9f281391ec5cc72a5e94cca1cbf1a706ec201eedfa5fbdb537a0c52bd45a9f966c25616cec30c3ea3246cb8e6aac7cf273638e6656a3e4ccadc348f0172028c99cc5f6d5c6d09ed65aa54549e73c28b7c8ad06ad3c5e3c27eec0eff1a6c84f1189919eefcee8072d1f88cb781e4cdb04af00ac92f1080211c4bee74381a0e31021918f27863fdbafb50f70857d52a1f7df51935a80b1980a4778d35f183ea517f55a98c5a471f3521956f8da6a4ccf2071095305701ab3f3ae43f06e91bc7d85e3800b46926944fba9805a985e63e53a62232fcd3f01dbe1728f300e247a7ebe344f9749818ff3961b2a42664ccd680a90bbb6ab400e286acc8f9febef64594777f848ed1cf980a3da2f0f7745760a05887d0c28060d613dd6539d392fc21fee0b5131609664b821d7a994e6c5965a4fa1ec1790c54e54586907dcc5a071ba22251e2de8bac16e79da9c2444d52facb7ab49420900000000000000f888a94365b99b72796fde1b922fc9ae09b526efca65faf1546c17cbb1d2d2fd12cb1a49cad501a3ca218c595b667b634606c57987ebfb0783a4948e4561d5cda158fe74453ff4a837be14d6a483842c57d6005b544b4f80003386edfd3d4a88a667bd41eefe0d808abed08a29e6bc370a80cc0366fb4080bfbaaa946fd47ab662c79c846e403910bbc3a48bb276cbb08a8eab145c06221ef16a238e3d50ad18aea9a2cec97d3c2d0569caabe2bffe02506bc9cb7294c5d020536dd5e7a6351642112df3b55d0215aaec7e45598995e79699e47567e353e68b03f82be860b188554b734e1192f9c1a867b815ef52cdc3307c0cc9be0000fdde69c350e59f11f1d26a4d04d8c8b2c4a4d23ee931d14bc7807db773a614b670acf46f83f7c65a0f8d43c5f647e1f0d27c46d4b686e867e9b0be76a7978a8f962bb5a070df97f2bf7612115cfe5ebdc7ad0bc5a5f3ace25347d0e5c347279d55aa67a967380000000000000000000000000000000000000000000000ed0942d980c754c6c69ef65c375ad018824f78b260d5f51bc3feba504408a8c8141d84f3f417603b5081680faa8cf38dbe4ae19e936511966965ce268b6345a0001c0f26a32e0a999fc869292e939dcf89b9bfd794f9c12d41959a00688cca43015a9eec58f647796adea520cd2abeb0b55c22949d10e5a05fee4543fdc1e02554a55b5fef2427a6e5708edc38fac53c2f961945a3f83cdf01979939b49bc6b1aef8c733401bbe473de8d64efbe0d123739f387d1c0d9e74f2175c174ada1678c7db79492e8dd0f34e2ccf419cf7f14ffa408b50a52685b36aed14aa22ad928191d5a2697646edc52a1c0c5d720ae690add2b34aed161f51cc1cb424f76098e1e1921e5a405f9d298a8461f2da30e47b7c6ed7c95c84c745f58723e4cddffae3b53b5b947f9435e589f9ae55b30ecd3827b2de5df31976870823da8058c2538c04e397f3d0ef90c11c74da984fa558697ecb57224ce8fa6f79aadbd7dbf3678e74d790bc2ee72769a3ada1dd504f8e4133ce1effd446bc9a2f139e65cc4bd83912af3122352506c7c2191b3705113a5ce1c99193886d6008d3565b00000000000000000000000000000000001c260fc175785ca04e31790f542c0f17b6599e93134792eae9878638b299e1d2b38d367be0d5c99d179c6bde265caebbae48bae74338f9d4f12f"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x101000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff000008000000000000000000000008001c00c9"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) ioctl$XFS_IOC_SCRUB_METADATA(r3, 0xc040583c, &(0x7f0000000080)={0x10, 0x126, 0x7ff, 0x401, 0x8}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0xffffffff, 0x117, 0x0, r2}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02000000000000000000080895"], 0x0}, 0x94) io_uring_register$IORING_REGISTER_FILES(r6, 0x1e, &(0x7f0000000000)=[r6], 0x1) sendmmsg$inet6(r5, &(0x7f00000008c0)=[{{&(0x7f0000000000)={0xa, 0x4e1f, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c, &(0x7f0000001780)=[{&(0x7f0000000040)="a4", 0x1}], 0x1}}, {{&(0x7f00000004c0)={0xa, 0x4e21, 0x0, @remote, 0x1}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000500)='l', 0x1}], 0x1}}], 0x2, 0x4000001) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e25, 0x3, 'fo\x00', 0x1, 0x8000b, 0x6f}, 0x2c) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000020303000000000000000000000000100800010001"], 0x1c}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r9, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x80, 0x1, 0x1, 0xffffffffffffffff}}, 0x40) setsockopt$IP_VS_SO_SET_FLUSH(r7, 0x0, 0x485, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) 724.507236ms ago: executing program 5 (id=4280): syz_emit_ethernet(0x36, &(0x7f0000000500)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010102, @local}, {{0x4001, 0x880b, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x20, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000006000079b005000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 724.290669ms ago: executing program 5 (id=4281): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(r2, &(0x7f0000000100)='./file2\x00', 0x167) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f00000001c0)={0x2, 0x80000001}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x205, 0x0, 0xeeef0000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x4, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x1, 0xc, 0x2, 0x2, 0x41, 0x1, 0xf7}}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x8000000000000005, 0x80000004000080, 0x380000, 0x8, 0x8, 0x4, 0x0, 0x8000], 0x1, 0x3c4210}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000000c0)={0x5}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 677.27391ms ago: executing program 5 (id=4282): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 675.279308ms ago: executing program 5 (id=4283): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="f800000019000100000000000000020000010000000000000000000000000000ac14141500000000000000000000000000000005000000000a00200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ac00000000000000ff0f0000000000000000000000000000fdffffffffffffffffffffffffffffffffffff7f0000000000000000000000000200000000000000f9ffffffffffffff000000000080400000000000000000080000000000000000010000004400050000000000000000000000000000000000000004d23c00000000000000ffffffff00000000000000000000000000000000000300000700"/176], 0xf8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000006800010000000000fddbdf25020000000000000006000700040000000c000880050004000100000008000600f200000008000500", @ANYRES32=0x0, @ANYBLOB="ccb8c22645d77480e79f8cf695e3226c8c465670f8f3c95ecd0ae26a07217ec3b6fe46180886ab2c45dbffc699780900000000000000a068550853"], 0x3c}, 0x1, 0x0, 0x0, 0x4402}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd1400fcdbdf250900020073797a30000000000800410072786500140033006c6f00"/56], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x2c020400) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'ip6gretap0\x00', 0x0}) r9 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r7, r8, 0x25, 0x2, @val=@perf_event={0x11}}, 0x18) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r9, 0xffffffffffffffff, 0x4, r7}, 0x10) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_STOPDAEMON(r10, 0x0, 0x48c, &(0x7f00000011c0)={0x2, 'veth0_to_hsr\x00'}, 0x18) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002a40), r11) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000018140100020000000300000008000300c04aacda0800010002000000"], 0x20}, 0x1, 0x0, 0x0, 0x8}, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) 173.494645ms ago: executing program 8 (id=4284): ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000340)={'pcmmio\x00', [0x1100, 0x1f, 0x1, 0x202, 0x8, 0xfd, 0x3, 0x20000000, 0xa, 0x2000000e, 0x2, 0xb51, 0x1, 0x6, 0x10001, 0x2, 0x200, 0xa, 0x7, 0x402, 0x5, 0x3, 0x7, 0x2, 0x48, 0x9, 0x8, 0x423b, 0x2, 0x7, 0xa]}) 0s ago: executing program 8 (id=4285): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x200, 0xfffffff7) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000002100)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x0, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0x7fffffff, 0x0, 0x6, 0xfffe, 0x6, 0xccca, 0x0, 0x0, 0x1, 0x8001}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) syz_ublk_setup_queues(r2, r7, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffa, 0x8, 0x2000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x40, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x373, 0x0, r3}}], 0x1, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/bus/pci/devices/0000:00:04.0/driver/unbind\x00', 0x1, 0x0) write(r8, &(0x7f00000003c0)='0000:00:04.0', 0xc) r9 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/bus/pci/devices/0000:00:04.0/driver_override\x00', 0x1, 0x0) write(r9, &(0x7f0000000100)='vfio-pci', 0x8) r10 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/drivers/vfio-pci/bind\x00', 0x1, 0x0) write(r10, &(0x7f00000003c0)='0000:00:04.0', 0xc) kernel console output (not intermixed with test programs): iled: -4 [ 685.463017][T18447] syzkaller0: entered promiscuous mode [ 685.464898][T18447] syzkaller0: entered allmulticast mode [ 685.939107][T18462] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3519'. [ 686.463801][T18465] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3520'. [ 686.515590][ T5891] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 686.615693][T12221] Bluetooth: hci3: command 0x0406 tx timeout [ 686.666411][ T5891] usb 8-1: device descriptor read/64, error -71 [ 686.769860][T18483] netlink: 64 bytes leftover after parsing attributes in process `syz.8.3525'. [ 686.916748][ T5891] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 687.065862][ T5891] usb 8-1: device descriptor read/64, error -71 [ 687.191284][ T5891] usb usb8-port1: attempt power cycle [ 687.297202][T12221] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 687.415399][T12221] Bluetooth: hci1: command 0x0c1a tx timeout [ 687.558585][ T5891] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 687.595895][ T5891] usb 8-1: device descriptor read/8, error -71 [ 687.604471][T18496] syzkaller0: entered promiscuous mode [ 687.610831][T18496] syzkaller0: entered allmulticast mode [ 687.835252][ T5891] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 687.854231][T18503] netlink: 'syz.8.3529': attribute type 11 has an invalid length. [ 687.857401][T18503] netlink: 4312 bytes leftover after parsing attributes in process `syz.8.3529'. [ 687.857449][ T5891] usb 8-1: device descriptor read/8, error -71 [ 687.976335][ T5891] usb usb8-port1: unable to enumerate USB device [ 688.000824][T18504] wg2 speed is unknown, defaulting to 1000 [ 688.013485][T18504] wg2 speed is unknown, defaulting to 1000 [ 688.039303][T18504] wg2 speed is unknown, defaulting to 1000 [ 688.353081][ T29] wg2 speed is unknown, defaulting to 1000 [ 688.367422][T18504] infiniband syz2: set active [ 688.391631][T18504] infiniband syz2: added wg2 [ 688.407991][T18504] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 688.412687][T18504] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 688.419332][T18504] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 688.459602][T18504] RDS/IB: syz2: added [ 688.466550][T18504] smc: adding ib device syz2 with port count 1 [ 688.469038][T18504] smc: ib device syz2 port 1 has no pnetid [ 688.515045][T15674] wg2 speed is unknown, defaulting to 1000 [ 688.537159][T18504] wg2 speed is unknown, defaulting to 1000 [ 688.750156][T18504] wg2 speed is unknown, defaulting to 1000 [ 688.839296][T18504] wg2 speed is unknown, defaulting to 1000 [ 688.926075][T18504] wg2 speed is unknown, defaulting to 1000 [ 689.009952][T18534] syzkaller0: entered promiscuous mode [ 689.012890][T18534] syzkaller0: entered allmulticast mode [ 689.077660][T18504] wg2 speed is unknown, defaulting to 1000 [ 689.267821][T18536] syz.5.3538 (18536): attempted to duplicate a private mapping with mremap. This is not supported. [ 689.281979][T18504] wg2 speed is unknown, defaulting to 1000 [ 689.495340][T12221] Bluetooth: hci1: command 0x0c1a tx timeout [ 689.535434][T13841] usb 10-1: new high-speed USB device number 115 using dummy_hcd [ 689.566370][T18540] ieee802154 phy1 wpan1: encryption failed: -22 [ 689.705188][T13841] usb 10-1: Using ep0 maxpacket: 8 [ 689.723923][T13841] usb 10-1: unable to get BOS descriptor set [ 689.728669][T13841] usb 10-1: config 7 has an invalid interface number: 160 but max is 1 [ 689.731271][T13841] usb 10-1: config 7 has an invalid interface number: 176 but max is 1 [ 689.733865][T13841] usb 10-1: config 7 has no interface number 0 [ 689.736123][T13841] usb 10-1: config 7 has no interface number 1 [ 689.738040][T13841] usb 10-1: config 7 interface 160 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 689.741595][T13841] usb 10-1: config 7 interface 160 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 689.744991][T13841] usb 10-1: config 7 interface 176 altsetting 46 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 689.749671][T13841] usb 10-1: config 7 interface 160 has no altsetting 0 [ 689.752255][T13841] usb 10-1: config 7 interface 176 has no altsetting 0 [ 689.769010][T13841] usb 10-1: New USB device found, idVendor=04dd, idProduct=8005, bcdDevice=28.5d [ 689.772413][T13841] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.774979][T13841] usb 10-1: Product: à § [ 689.776593][T13841] usb 10-1: Manufacturer: К [ 689.778284][T13841] usb 10-1: SerialNumber: 맔á§ê‘ꛦ䙎岛炠䎼鄘휗塅኶仢퀙ꉋ鵩仨젬ì‹ì•¥ä§½ä€’ꔄç•é›–êŸå—椥刞辈訪频䔙ñ [ 689.784899][T18536] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 690.087443][T13841] usb 10-1: unsupported MDLM descriptors [ 690.113098][T13841] usb 10-1: USB disconnect, device number 115 [ 690.250447][T18556] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 690.395280][T13836] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 690.535432][T13836] usb 8-1: device descriptor read/64, error -71 [ 690.675255][T18563] syzkaller0: entered promiscuous mode [ 690.676915][T18563] syzkaller0: entered allmulticast mode [ 690.806669][T13836] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 690.975257][T13836] usb 8-1: device descriptor read/64, error -71 [ 690.987475][T18578] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3553'. [ 691.106693][T13836] usb usb8-port1: attempt power cycle [ 691.475184][T13836] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 691.506029][T13836] usb 8-1: device descriptor read/8, error -71 [ 691.575291][T12221] Bluetooth: hci1: command 0x0c1a tx timeout [ 691.740060][T18587] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.745245][T13836] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 691.765821][T13836] usb 8-1: device descriptor read/8, error -71 [ 691.850311][T18591] syzkaller0: entered promiscuous mode [ 691.852094][T18591] syzkaller0: entered allmulticast mode [ 691.875525][T13836] usb usb8-port1: unable to enumerate USB device [ 692.088268][T18599] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3559'. [ 692.364372][T18604] FAULT_INJECTION: forcing a failure. [ 692.364372][T18604] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 692.369456][T18604] CPU: 0 UID: 0 PID: 18604 Comm: syz.8.3562 Tainted: G L syzkaller #0 PREEMPT(full) [ 692.369475][T18604] Tainted: [L]=SOFTLOCKUP [ 692.369480][T18604] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 692.369487][T18604] Call Trace: [ 692.369492][T18604] [ 692.369497][T18604] dump_stack_lvl+0x100/0x190 [ 692.369514][T18604] should_fail_ex.cold+0x5/0xa [ 692.369528][T18604] _copy_to_user+0x32/0xd0 [ 692.369547][T18604] simple_read_from_buffer+0xcb/0x170 [ 692.369566][T18604] proc_fail_nth_read+0x1af/0x230 [ 692.369583][T18604] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 692.369598][T18604] ? rw_verify_area+0xce/0x6d0 [ 692.369615][T18604] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 692.369630][T18604] vfs_read+0x1e4/0xb40 [ 692.369642][T18604] ? __pfx_vfs_read+0x10/0x10 [ 692.369658][T18604] ? find_held_lock+0x2b/0x80 [ 692.369673][T18604] ? __fget_files+0x215/0x3d0 [ 692.369685][T18604] ? __fget_files+0x21f/0x3d0 [ 692.369699][T18604] ksys_read+0x12a/0x250 [ 692.369709][T18604] ? __pfx_ksys_read+0x10/0x10 [ 692.369723][T18604] do_int80_emulation+0x14b/0x720 [ 692.369740][T18604] asm_int80_emulation+0x1a/0x20 [ 692.369752][T18604] RIP: 0023:0xf71f736b [ 692.369762][T18604] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 692.369773][T18604] RSP: 002b:00000000f54ad4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 692.369784][T18604] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f54ad5d0 [ 692.369791][T18604] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 692.369798][T18604] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 692.369804][T18604] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 692.369810][T18604] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 692.369824][T18604] [ 692.487309][T18606] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3563'. [ 693.010537][T18617] syzkaller0: entered promiscuous mode [ 693.012929][T18617] syzkaller0: entered allmulticast mode [ 693.255920][T18619] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 693.280937][T18619] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 693.284573][T18619] pci 0000:00:01.0: BAR 2 [mem 0x81284000-0x81284fff] [ 693.287442][T18619] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 693.291310][T18619] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 693.305999][T18619] pci 0000:00:01.0: Adding to iommu group 1 [ 693.315192][T18619] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 693.318247][T18619] pci 0000:00:01.0: vgaarb: bridge control possible [ 693.320954][T18619] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 693.332131][T18619] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 693.335867][T18619] pci 0000:00:01.0: BAR 2 [mem 0x81284000-0x81284fff]: assigned [ 693.340793][T18619] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 693.358710][T18619] [drm] Found bochs VGA, ID 0xb0c5. [ 693.360915][T18619] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81284000. [ 693.380809][T18619] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 693.428353][T18619] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 693.806800][T18634] Scaler: ================= START STATUS ================= [ 693.809914][T18634] Scaler: ================== END STATUS ================== [ 693.920387][T18584] workqueue: Failed to create a rescuer kthread for wq "dio/fuse": -EINTR [ 694.265270][ T29] usb 13-1: new high-speed USB device number 6 using dummy_hcd [ 694.288389][T18643] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 694.290208][T18643] @0Ù: renamed from bond_slave_1 [ 694.357438][T18643] wg2 speed is unknown, defaulting to 1000 [ 694.395283][ T29] usb 13-1: device descriptor read/64, error -71 [ 694.559756][T18648] syzkaller0: entered promiscuous mode [ 694.561806][T18648] syzkaller0: entered allmulticast mode [ 694.645351][ T29] usb 13-1: new high-speed USB device number 7 using dummy_hcd [ 694.775323][ T29] usb 13-1: device descriptor read/64, error -71 [ 694.885360][ T29] usb usb13-port1: attempt power cycle [ 695.225314][ T29] usb 13-1: new high-speed USB device number 8 using dummy_hcd [ 695.246825][ T29] usb 13-1: device descriptor read/8, error -71 [ 695.485304][ T29] usb 13-1: new high-speed USB device number 9 using dummy_hcd [ 695.506000][ T29] usb 13-1: device descriptor read/8, error -71 [ 695.615568][ T29] usb usb13-port1: unable to enumerate USB device [ 696.447715][T18676] xt_HMARK: proto mask must be zero with L3 mode [ 696.521238][T18680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3586'. [ 696.563106][T18680] vlan2: entered allmulticast mode [ 696.564829][T18680] dummy0: entered allmulticast mode [ 696.572452][T18680] bridge0: port 3(vlan2) entered blocking state [ 696.575007][T18680] bridge0: port 3(vlan2) entered disabled state [ 696.579663][T18680] vlan2: entered promiscuous mode [ 696.581545][T18680] dummy0: entered promiscuous mode [ 697.196216][T18053] usb 10-1: new high-speed USB device number 116 using dummy_hcd [ 697.924521][T18712] syzkaller0: entered promiscuous mode [ 697.926533][T18712] syzkaller0: entered allmulticast mode [ 697.985391][T18053] usb 10-1: device descriptor read/64, error -71 [ 698.235253][T18053] usb 10-1: new high-speed USB device number 117 using dummy_hcd [ 698.385275][T18053] usb 10-1: Using ep0 maxpacket: 8 [ 698.391290][T18053] usb 10-1: config index 0 descriptor too short (expected 5924, got 36) [ 698.394748][T18053] usb 10-1: config 250 has an invalid interface number: 228 but max is -1 [ 698.398492][T18053] usb 10-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 698.402310][T18053] usb 10-1: config 250 has no interface number 0 [ 698.405213][T18053] usb 10-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 698.410105][T18053] usb 10-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 698.413690][T18053] usb 10-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 698.417072][T18053] usb 10-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 698.420237][T18053] usb 10-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 698.424428][T18053] usb 10-1: config 250 interface 228 has no altsetting 0 [ 698.429083][T18053] usb 10-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 698.432047][T18053] usb 10-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 698.434711][T18053] usb 10-1: Product: syz [ 698.436215][T18053] usb 10-1: SerialNumber: syz [ 698.447035][T18053] hub 10-1:250.228: bad descriptor, ignoring hub [ 698.449107][T18053] hub 10-1:250.228: probe with driver hub failed with error -5 [ 698.664254][T18053] usblp 10-1:250.228: usblp0: USB Bidirectional printer dev 117 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 698.715297][ T5891] usb 12-1: new high-speed USB device number 78 using dummy_hcd [ 698.857657][ T5891] usb 12-1: device descriptor read/64, error -71 [ 698.891297][T12221] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 699.115323][ T5891] usb 12-1: new high-speed USB device number 79 using dummy_hcd [ 699.125593][T13841] usb 10-1: USB disconnect, device number 117 [ 699.130062][T13841] usblp0: removed [ 699.155337][T13578] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 699.266965][ T5891] usb 12-1: device descriptor read/64, error -71 [ 699.325479][T13578] usb 8-1: Using ep0 maxpacket: 32 [ 699.330076][T13578] usb 8-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 699.334896][T13578] usb 8-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 699.341335][T13578] usb 8-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 699.349678][T13578] usb 8-1: config 0 interface 0 has no altsetting 0 [ 699.352631][T13578] usb 8-1: New USB device found, idVendor=056a, idProduct=0002, bcdDevice= 0.00 [ 699.356685][T13578] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.363790][T13578] usb 8-1: config 0 descriptor?? [ 699.376014][ T5891] usb usb12-port1: attempt power cycle [ 699.500881][T18749] syzkaller0: entered promiscuous mode [ 699.502777][T18749] syzkaller0: entered allmulticast mode [ 699.721233][T18754] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3610'. [ 699.725190][ T5891] usb 12-1: new high-speed USB device number 80 using dummy_hcd [ 699.768107][ T5891] usb 12-1: device descriptor read/8, error -71 [ 700.015335][ T5891] usb 12-1: new high-speed USB device number 81 using dummy_hcd [ 700.048449][ T5891] usb 12-1: device descriptor read/8, error -71 [ 700.157930][ T5891] usb usb12-port1: unable to enumerate USB device [ 700.567777][T13578] usbhid 8-1:0.0: can't add hid device: -71 [ 700.572303][T13578] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 700.584947][T13578] usb 8-1: USB disconnect, device number 18 [ 701.271344][T18776] syzkaller0: entered promiscuous mode [ 701.273614][T18776] syzkaller0: entered allmulticast mode [ 701.504202][T12221] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 701.721423][T18793] FAULT_INJECTION: forcing a failure. [ 701.721423][T18793] name failslab, interval 1, probability 0, space 0, times 67 [ 701.732195][T18793] CPU: 1 UID: 0 PID: 18793 Comm: syz.5.3622 Tainted: G L syzkaller #0 PREEMPT(full) [ 701.732214][T18793] Tainted: [L]=SOFTLOCKUP [ 701.732219][T18793] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 701.732225][T18793] Call Trace: [ 701.732230][T18793] [ 701.732235][T18793] dump_stack_lvl+0x100/0x190 [ 701.732279][T18793] should_fail_ex.cold+0x5/0xa [ 701.732304][T18793] should_failslab+0xc2/0x120 [ 701.732331][T18793] __kmalloc_cache_noprof+0x91/0x6c0 [ 701.732349][T18793] ? call_usermodehelper_setup+0xaf/0x360 [ 701.732379][T18793] ? __pfx_free_modprobe_argv+0x10/0x10 [ 701.732398][T18793] call_usermodehelper_setup+0xaf/0x360 [ 701.732418][T18793] __request_module+0x3c7/0x6a0 [ 701.732430][T18793] ? __pfx___request_module+0x10/0x10 [ 701.732449][T18793] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 701.732461][T18793] ? nvmf_dev_write+0x179/0xb60 [ 701.732514][T18793] nvmf_dev_write+0x1f5/0xb60 [ 701.732533][T18793] vfs_write+0x2aa/0x1050 [ 701.732549][T18793] ? __pfx_nvmf_dev_write+0x10/0x10 [ 701.732566][T18793] ? __pfx_vfs_write+0x10/0x10 [ 701.732576][T18793] ? find_held_lock+0x2b/0x80 [ 701.732595][T18793] ? __fget_files+0x215/0x3d0 [ 701.732605][T18793] ? __fget_files+0x215/0x3d0 [ 701.732618][T18793] ? __fget_files+0x21f/0x3d0 [ 701.732632][T18793] ksys_write+0x12a/0x250 [ 701.732642][T18793] ? __pfx_ksys_write+0x10/0x10 [ 701.732652][T18793] ? ksys_write+0x1ac/0x250 [ 701.732662][T18793] ? __pfx_ksys_write+0x10/0x10 [ 701.732675][T18793] __do_fast_syscall_32+0xe7/0x970 [ 701.732702][T18793] ? lockdep_hardirqs_on+0x78/0x100 [ 701.732716][T18793] do_fast_syscall_32+0x32/0x70 [ 701.732731][T18793] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 701.732752][T18793] RIP: 0023:0xf700efec [ 701.732766][T18793] Code: Unable to access opcode bytes at 0xf700efc2. [ 701.732771][T18793] RSP: 002b:00000000f53fd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 701.732783][T18793] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 701.732790][T18793] RDX: 0000000000000014 RSI: 0000000000000000 RDI: 0000000000000000 [ 701.732796][T18793] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 701.732803][T18793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 701.732809][T18793] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 701.732823][T18793] [ 701.838320][ T61] nvmet: connect request for invalid subsystem n! [ 701.848601][T18793] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "n" [ 702.207778][T18802] wg2 speed is unknown, defaulting to 1000 [ 702.235969][ T9] usb 13-1: new high-speed USB device number 10 using dummy_hcd [ 702.326661][T18805] syzkaller0: entered promiscuous mode [ 702.328432][T18805] syzkaller0: entered allmulticast mode [ 702.366380][ T9] usb 13-1: device descriptor read/64, error -71 [ 702.605779][ T9] usb 13-1: new high-speed USB device number 11 using dummy_hcd [ 702.745511][ T5849] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 702.748983][T16259] usb 10-1: new high-speed USB device number 118 using dummy_hcd [ 703.052217][ T9] usb 13-1: device descriptor read/64, error -71 [ 703.484954][ T9] usb usb13-port1: attempt power cycle [ 703.616476][ T5849] usb 8-1: device descriptor read/64, error -71 [ 703.697254][T16259] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 703.700122][T16259] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 703.703335][T16259] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 703.706912][T16259] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 703.710380][T16259] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 703.714632][T16259] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 703.717621][T16259] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 703.720226][T16259] usb 10-1: Product: syz [ 703.721581][T16259] usb 10-1: Manufacturer: syz [ 703.725646][T16259] cdc_wdm 10-1:1.0: skipping garbage [ 703.727458][T16259] cdc_wdm 10-1:1.0: skipping garbage [ 703.736756][T16259] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 703.738666][T16259] cdc_wdm 10-1:1.0: Unknown control protocol [ 703.875292][ T5849] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 703.929161][T18811] cdc_wdm 10-1:1.0: Error submitting int urb - -90 [ 703.939551][ T29] usb 10-1: USB disconnect, device number 118 [ 703.975367][ T9] usb 13-1: new high-speed USB device number 12 using dummy_hcd [ 703.995872][ T9] usb 13-1: device descriptor read/8, error -71 [ 704.015305][ T5849] usb 8-1: device descriptor read/64, error -71 [ 704.125522][ T5849] usb usb8-port1: attempt power cycle [ 704.235239][ T9] usb 13-1: new high-speed USB device number 13 using dummy_hcd [ 704.255691][ T9] usb 13-1: device descriptor read/8, error -71 [ 704.365920][ T9] usb usb13-port1: unable to enumerate USB device [ 704.465209][ T5849] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 704.485648][ T5849] usb 8-1: device descriptor read/8, error -71 [ 704.573681][T18823] team0: Device xfrm0 is of different type [ 704.582444][T18823] tipc: Enabled bearer , priority 0 [ 704.692984][T18828] syzkaller0: entered promiscuous mode [ 704.696079][T18828] syzkaller0: entered allmulticast mode [ 704.725378][ T5849] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 704.816088][T12221] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 704.825375][T18834] 9p: Bad value for 'rfdno' [ 704.825778][ T5849] usb 8-1: device descriptor read/8, error -71 [ 704.935501][ T5849] usb usb8-port1: unable to enumerate USB device [ 704.944204][T18835] netlink: 'syz.7.3638': attribute type 4 has an invalid length. [ 704.960490][T12221] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 705.226955][T13841] usb 12-1: new high-speed USB device number 82 using dummy_hcd [ 705.233803][T18851] ubi: mtd0 is already attached to ubi0 [ 705.385314][T13841] usb 12-1: Using ep0 maxpacket: 8 [ 705.412414][T18846] wg2 speed is unknown, defaulting to 1000 [ 705.605406][T13841] usb 12-1: unable to get BOS descriptor or descriptor too short [ 705.608621][T13841] usb 12-1: unable to read config index 0 descriptor/start: -71 [ 705.613059][T13841] usb 12-1: can't read configurations, error -71 [ 705.802035][T18869] syzkaller0: entered promiscuous mode [ 705.804045][T18869] syzkaller0: entered allmulticast mode [ 706.041680][T18874] FAULT_INJECTION: forcing a failure. [ 706.041680][T18874] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 706.045884][T18874] CPU: 2 UID: 0 PID: 18874 Comm: syz.5.3648 Tainted: G L syzkaller #0 PREEMPT(full) [ 706.045907][T18874] Tainted: [L]=SOFTLOCKUP [ 706.045912][T18874] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 706.045918][T18874] Call Trace: [ 706.045924][T18874] [ 706.045928][T18874] dump_stack_lvl+0x100/0x190 [ 706.045946][T18874] should_fail_ex.cold+0x5/0xa [ 706.045960][T18874] strncpy_from_user+0x3b/0x2d0 [ 706.045990][T18874] do_getname+0x78/0x390 [ 706.046007][T18874] user_path_at+0x26/0x60 [ 706.046024][T18874] __ia32_sys_mount+0x1fb/0x310 [ 706.046044][T18874] ? __pfx___ia32_sys_mount+0x10/0x10 [ 706.046057][T18874] ? ksys_write+0x1ac/0x250 [ 706.046068][T18874] ? __pfx_ksys_write+0x10/0x10 [ 706.046081][T18874] __do_fast_syscall_32+0xe7/0x970 [ 706.046115][T18874] ? lockdep_hardirqs_on+0x78/0x100 [ 706.046130][T18874] do_fast_syscall_32+0x32/0x70 [ 706.046144][T18874] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 706.046159][T18874] RIP: 0023:0xf700efec [ 706.046173][T18874] Code: Unable to access opcode bytes at 0xf700efc2. [ 706.046178][T18874] RSP: 002b:00000000f53fd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 706.046189][T18874] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000240 [ 706.046196][T18874] RDX: 00000000800002c0 RSI: 0000000000000000 RDI: 0000000080000500 [ 706.046202][T18874] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 706.046209][T18874] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 706.046215][T18874] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 706.046228][T18874] [ 706.189224][T18881] 9pnet_virtio: no channels available for device syz [ 706.191976][T18881] netlink: 'syz.7.3650': attribute type 2 has an invalid length. [ 706.275186][ T5849] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 706.425673][ T5849] usb 8-1: device descriptor read/64, error -71 [ 706.696454][ T5849] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 706.835272][ T5849] usb 8-1: device descriptor read/64, error -71 [ 706.949902][ T5849] usb usb8-port1: attempt power cycle [ 707.218994][T18900] syzkaller0: entered promiscuous mode [ 707.221145][T18900] syzkaller0: entered allmulticast mode [ 707.315427][ T5849] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 707.349498][ T5849] usb 8-1: device descriptor read/8, error -71 [ 707.435431][T13841] usb 12-1: new high-speed USB device number 84 using dummy_hcd [ 707.569104][T18909] wg2 speed is unknown, defaulting to 1000 [ 707.595357][ T5849] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 707.626633][T13841] usb 12-1: Using ep0 maxpacket: 8 [ 707.628430][ T5849] usb 8-1: device descriptor read/8, error -71 [ 707.634111][T13841] usb 12-1: config index 0 descriptor too short (expected 5924, got 36) [ 707.641041][T13841] usb 12-1: config 250 has an invalid interface number: 228 but max is -1 [ 707.648134][T13841] usb 12-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 707.658532][T13841] usb 12-1: config 250 has no interface number 0 [ 707.660695][T13841] usb 12-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 707.670019][T13841] usb 12-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 707.678333][T13841] usb 12-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 707.686529][T13841] usb 12-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 707.695008][T13841] usb 12-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 707.711709][T13841] usb 12-1: config 250 interface 228 has no altsetting 0 [ 707.718665][T13841] usb 12-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 707.728634][T13841] usb 12-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 707.733376][T13841] usb 12-1: Product: syz [ 707.736771][T13841] usb 12-1: SerialNumber: syz [ 707.745897][ T5849] usb usb8-port1: unable to enumerate USB device [ 707.765392][T13841] hub 12-1:250.228: bad descriptor, ignoring hub [ 707.767488][T13841] hub 12-1:250.228: probe with driver hub failed with error -5 [ 707.901893][T18913] netlink: 'syz.8.3659': attribute type 3 has an invalid length. [ 707.904203][T18913] netlink: 'syz.8.3659': attribute type 1 has an invalid length. [ 707.911522][T18913] netlink: 228 bytes leftover after parsing attributes in process `syz.8.3659'. [ 707.914838][T12221] Bluetooth: hci1: unexpected event for opcode 0x0402 [ 708.077029][T13841] usblp 12-1:250.228: usblp0: USB Bidirectional printer dev 84 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 708.228473][T18922] fuse: Bad value for 'fd' [ 708.350978][T18922] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 708.575407][ T5849] usb 12-1: USB disconnect, device number 84 [ 708.581627][ T5849] usblp0: removed [ 708.642395][T18932] syzkaller0: entered promiscuous mode [ 708.644207][T18932] syzkaller0: entered allmulticast mode [ 708.664811][T18934] FAULT_INJECTION: forcing a failure. [ 708.664811][T18934] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 708.689875][T18934] CPU: 1 UID: 0 PID: 18934 Comm: syz.7.3666 Tainted: G L syzkaller #0 PREEMPT(full) [ 708.689904][T18934] Tainted: [L]=SOFTLOCKUP [ 708.689911][T18934] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 708.689928][T18934] Call Trace: [ 708.689936][T18934] [ 708.689943][T18934] dump_stack_lvl+0x100/0x190 [ 708.689972][T18934] should_fail_ex.cold+0x5/0xa [ 708.689989][T18934] _copy_from_user+0x2e/0xd0 [ 708.690008][T18934] memdup_user+0x6b/0xe0 [ 708.690035][T18934] strndup_user+0x78/0xe0 [ 708.690048][T18934] __do_sys_fsconfig+0x7ec/0xcb0 [ 708.690065][T18934] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 708.690100][T18934] ? ksys_write+0x1ac/0x250 [ 708.690112][T18934] ? __pfx_ksys_write+0x10/0x10 [ 708.690125][T18934] __do_fast_syscall_32+0xe7/0x970 [ 708.690140][T18934] ? lockdep_hardirqs_on+0x78/0x100 [ 708.690154][T18934] do_fast_syscall_32+0x32/0x70 [ 708.690168][T18934] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 708.690184][T18934] RIP: 0023:0xf6fcefec [ 708.690198][T18934] Code: Unable to access opcode bytes at 0xf6fcefc2. [ 708.690203][T18934] RSP: 002b:00000000f53bd50c EFLAGS: 00000292 ORIG_RAX: 00000000000001af [ 708.690214][T18934] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000001 [ 708.690221][T18934] RDX: 0000000080000240 RSI: 0000000080000280 RDI: 0000000000000000 [ 708.690228][T18934] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 708.690234][T18934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 708.690240][T18934] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 708.690253][T18934] [ 709.025431][T18948] netlink: 'syz.7.3670': attribute type 11 has an invalid length. [ 709.028758][T18948] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3670'. [ 709.083960][T18952] FAULT_INJECTION: forcing a failure. [ 709.083960][T18952] name failslab, interval 1, probability 0, space 0, times 66 [ 709.089002][T18952] CPU: 3 UID: 0 PID: 18952 Comm: syz.3.3671 Tainted: G L syzkaller #0 PREEMPT(full) [ 709.089032][T18952] Tainted: [L]=SOFTLOCKUP [ 709.089037][T18952] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 709.089044][T18952] Call Trace: [ 709.089049][T18952] [ 709.089053][T18952] dump_stack_lvl+0x100/0x190 [ 709.089071][T18952] should_fail_ex.cold+0x5/0xa [ 709.089085][T18952] should_failslab+0xc2/0x120 [ 709.089101][T18952] __kmalloc_noprof+0xfc/0x820 [ 709.089128][T18952] ? constrain_params_by_rules+0x175/0xd20 [ 709.089158][T18952] constrain_params_by_rules+0x175/0xd20 [ 709.089169][T18952] ? stack_depot_save_flags+0x27/0x9d0 [ 709.089189][T18952] ? kasan_save_stack+0x3f/0x50 [ 709.089203][T18952] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 709.089214][T18952] ? snd_pcm_oss_change_params_locked+0x81c/0x39f0 [ 709.089226][T18952] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 709.089237][T18952] ? ksys_write+0x12a/0x250 [ 709.089246][T18952] ? __do_fast_syscall_32+0xe7/0x970 [ 709.089262][T18952] ? do_fast_syscall_32+0x32/0x70 [ 709.089284][T18952] ? snd_interval_refine+0x2d0/0x580 [ 709.089301][T18952] snd_pcm_hw_refine+0x82a/0xb40 [ 709.089314][T18952] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 709.089327][T18952] ? __kasan_kmalloc+0xaa/0xb0 [ 709.089341][T18952] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 709.089352][T18952] ? __asan_memset+0x23/0x50 [ 709.089363][T18952] ? snd_pcm_oss_change_params_locked+0x81c/0x39f0 [ 709.089375][T18952] ? snd_interval_refine+0x2d0/0x580 [ 709.089395][T18952] snd_pcm_oss_change_params_locked+0xdb3/0x39f0 [ 709.089413][T18952] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 709.089425][T18952] ? __lock_acquire+0x49f/0x1a40 [ 709.089443][T18952] ? __pfx___mutex_lock+0x10/0x10 [ 709.089461][T18952] ? __pfx___might_resched+0x10/0x10 [ 709.089486][T18952] ? find_held_lock+0x2b/0x80 [ 709.089501][T18952] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 709.089514][T18952] snd_pcm_oss_write+0x4bb/0xa30 [ 709.089527][T18952] ? bpf_lsm_file_permission+0x9/0x10 [ 709.089545][T18952] ? security_file_permission+0x76/0x210 [ 709.089570][T18952] vfs_write+0x2aa/0x1050 [ 709.089581][T18952] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 709.089594][T18952] ? __pfx_vfs_write+0x10/0x10 [ 709.089602][T18952] ? find_held_lock+0x2b/0x80 [ 709.089615][T18952] ? __fget_files+0x215/0x3d0 [ 709.089626][T18952] ? __fget_files+0x215/0x3d0 [ 709.089638][T18952] ? __fget_files+0x21f/0x3d0 [ 709.089652][T18952] ksys_write+0x12a/0x250 [ 709.089666][T18952] ? __pfx_ksys_write+0x10/0x10 [ 709.089679][T18952] ? ksys_write+0x1ac/0x250 [ 709.089693][T18952] ? __pfx_ksys_write+0x10/0x10 [ 709.089712][T18952] __do_fast_syscall_32+0xe7/0x970 [ 709.089732][T18952] ? lockdep_hardirqs_on+0x78/0x100 [ 709.089757][T18952] do_fast_syscall_32+0x32/0x70 [ 709.089778][T18952] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 709.089793][T18952] RIP: 0023:0xf7f94fec [ 709.089806][T18952] Code: Unable to access opcode bytes at 0xf7f94fc2. [ 709.089811][T18952] RSP: 002b:00000000f541450c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 709.089823][T18952] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000500 [ 709.089829][T18952] RDX: 000000000000fdbc RSI: 0000000000000000 RDI: 0000000000000000 [ 709.089836][T18952] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 709.089842][T18952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 709.089848][T18952] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 709.089862][T18952] [ 709.324189][T13836] usb 13-1: new high-speed USB device number 14 using dummy_hcd [ 709.414849][T18955] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3674'. [ 709.495261][T13836] usb 13-1: Using ep0 maxpacket: 8 [ 709.506383][T13836] usb 13-1: config index 0 descriptor too short (expected 5924, got 36) [ 709.510261][T13836] usb 13-1: config 250 has an invalid interface number: 228 but max is -1 [ 709.514522][T13836] usb 13-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 709.520710][T13836] usb 13-1: config 250 has no interface number 0 [ 709.523738][T13836] usb 13-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 709.527985][T13836] usb 13-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 709.533059][T13836] usb 13-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 709.537379][T13836] usb 13-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 709.543257][T13836] usb 13-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 709.548462][T13836] usb 13-1: config 250 interface 228 has no altsetting 0 [ 709.560309][T13836] usb 13-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 709.565838][T13836] usb 13-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 709.569527][T13836] usb 13-1: Product: syz [ 709.571571][T13836] usb 13-1: SerialNumber: syz [ 709.622401][T13836] hub 13-1:250.228: bad descriptor, ignoring hub [ 709.626116][T13836] hub 13-1:250.228: probe with driver hub failed with error -5 [ 709.845749][T13836] usblp 13-1:250.228: usblp0: USB Bidirectional printer dev 14 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 709.899462][T18962] syzkaller0: entered promiscuous mode [ 709.901800][T18962] syzkaller0: entered allmulticast mode [ 710.287905][T18975] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 710.299130][T13841] usb 13-1: USB disconnect, device number 14 [ 710.409588][T13841] usblp0: removed [ 710.745475][T16259] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 710.885710][T16259] usb 8-1: device descriptor read/64, error -71 [ 711.145417][T16259] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 711.275343][T16259] usb 8-1: device descriptor read/64, error -71 [ 711.385548][T16259] usb usb8-port1: attempt power cycle [ 711.725247][T16259] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 711.745999][T16259] usb 8-1: device descriptor read/8, error -71 [ 711.746531][T19005] syzkaller0: entered promiscuous mode [ 711.750817][T19005] syzkaller0: entered allmulticast mode [ 711.985649][T16259] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 712.009264][T16259] usb 8-1: device descriptor read/8, error -71 [ 712.115622][T16259] usb usb8-port1: unable to enumerate USB device [ 712.675288][T18053] usb 13-1: new high-speed USB device number 15 using dummy_hcd [ 712.705219][ T34] usb 12-1: new high-speed USB device number 85 using dummy_hcd [ 712.797088][T19023] syzkaller0: entered promiscuous mode [ 712.799418][T19023] syzkaller0: entered allmulticast mode [ 712.807016][T18053] usb 13-1: device descriptor read/64, error -71 [ 712.856687][ T34] usb 12-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 712.860106][ T34] usb 12-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 712.865532][ T34] usb 12-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 712.869190][ T34] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 712.872475][ T34] usb 12-1: SerialNumber: syz [ 713.046689][T18053] usb 13-1: new high-speed USB device number 16 using dummy_hcd [ 713.095373][ T34] usb 12-1: skipping empty audio interface (v1) [ 713.168993][T19032] syzkaller0: entered promiscuous mode [ 713.170728][T19032] syzkaller0: entered allmulticast mode [ 713.176451][T18053] usb 13-1: device descriptor read/64, error -71 [ 713.257025][ T34] snd-usb-audio 12-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 713.263867][ T34] usb 12-1: USB disconnect, device number 85 [ 713.285389][T18053] usb usb13-port1: attempt power cycle [ 713.341589][T15705] udevd[15705]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb12/12-1/12-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 713.597068][T19041] tipc: Enabling of bearer rejected, failed to enable media [ 713.625376][T18053] usb 13-1: new high-speed USB device number 17 using dummy_hcd [ 713.646165][T18053] usb 13-1: device descriptor read/8, error -71 [ 713.670721][T12221] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 713.885212][T18053] usb 13-1: new high-speed USB device number 18 using dummy_hcd [ 713.905895][T18053] usb 13-1: device descriptor read/8, error -71 [ 713.960382][T19056] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3707'. [ 714.024677][T18053] usb usb13-port1: unable to enumerate USB device [ 714.246624][T16259] usb 10-1: new full-speed USB device number 119 using dummy_hcd [ 714.355398][T18053] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 714.398643][T16259] usb 10-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 714.402465][T16259] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.405745][T16259] usb 10-1: Product: syz [ 714.407105][T16259] usb 10-1: Manufacturer: syz [ 714.408902][T16259] usb 10-1: SerialNumber: syz [ 714.485236][T18053] usb 8-1: device descriptor read/64, error -71 [ 714.735211][T18053] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 714.821159][T16259] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 119 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 714.865286][T18053] usb 8-1: device descriptor read/64, error -71 [ 714.975659][T18053] usb usb8-port1: attempt power cycle [ 715.315234][T18053] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 715.336829][T18053] usb 8-1: device descriptor read/8, error -71 [ 715.398017][ T5820] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.470412][T19081] syzkaller0: entered promiscuous mode [ 715.473138][T19081] syzkaller0: entered allmulticast mode [ 715.575222][T18053] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 715.595905][T18053] usb 8-1: device descriptor read/8, error -71 [ 715.706087][T18053] usb usb8-port1: unable to enumerate USB device [ 716.476107][T19087] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3716'. [ 716.733854][ C3] usblp0: nonzero write bulk status received: -71 [ 716.734203][ T9] usb 10-1: USB disconnect, device number 119 [ 716.747183][ T9] usblp0: removed [ 717.306128][T19094] comedi comedi3: dt2801: I/O port conflict (0x294,2) [ 718.355532][T18053] usb 10-1: new high-speed USB device number 120 using dummy_hcd [ 718.515333][T18053] usb 10-1: device descriptor read/64, error -71 [ 718.765875][T18053] usb 10-1: new high-speed USB device number 121 using dummy_hcd [ 718.895321][T18053] usb 10-1: device descriptor read/64, error -71 [ 719.006782][T18053] usb usb10-port1: attempt power cycle [ 719.079382][T19108] binder: 19107:19108 ioctl c0306201 800001c0 returned -22 [ 719.325344][ T5833] usb 12-1: new low-speed USB device number 86 using dummy_hcd [ 719.345362][T18053] usb 10-1: new high-speed USB device number 122 using dummy_hcd [ 719.366477][T18053] usb 10-1: device descriptor read/8, error -71 [ 719.478828][ T5833] usb 12-1: Invalid ep0 maxpacket: 64 [ 719.615277][T18053] usb 10-1: new high-speed USB device number 123 using dummy_hcd [ 719.618141][ T5833] usb 12-1: new low-speed USB device number 87 using dummy_hcd [ 719.636898][T18053] usb 10-1: device descriptor read/8, error -71 [ 719.745816][T18053] usb usb10-port1: unable to enumerate USB device [ 719.765353][ T5833] usb 12-1: Invalid ep0 maxpacket: 64 [ 719.767799][ T5833] usb usb12-port1: attempt power cycle [ 720.015267][T13841] usb 13-1: new high-speed USB device number 19 using dummy_hcd [ 720.105286][ T5833] usb 12-1: new low-speed USB device number 88 using dummy_hcd [ 720.126118][ T5833] usb 12-1: Invalid ep0 maxpacket: 64 [ 720.145267][T13841] usb 13-1: device descriptor read/64, error -71 [ 720.255406][ T5833] usb 12-1: new low-speed USB device number 89 using dummy_hcd [ 720.276342][ T5833] usb 12-1: Invalid ep0 maxpacket: 64 [ 720.279108][ T5833] usb usb12-port1: unable to enumerate USB device [ 720.385188][T13841] usb 13-1: new high-speed USB device number 20 using dummy_hcd [ 720.515235][T13841] usb 13-1: device descriptor read/64, error -71 [ 720.625673][T13841] usb usb13-port1: attempt power cycle [ 720.965281][T13841] usb 13-1: new high-speed USB device number 21 using dummy_hcd [ 720.986330][T13841] usb 13-1: device descriptor read/8, error -71 [ 721.177961][T19120] syzkaller0: entered promiscuous mode [ 721.180235][T19120] syzkaller0: entered allmulticast mode [ 721.235289][T13841] usb 13-1: new high-speed USB device number 22 using dummy_hcd [ 721.256047][T13841] usb 13-1: device descriptor read/8, error -71 [ 721.367843][T13841] usb usb13-port1: unable to enumerate USB device [ 721.700460][T19126] netlink: 'syz.3.3729': attribute type 4 has an invalid length. [ 722.184123][T12221] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 722.304318][T12221] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 722.572779][T19149] FAULT_INJECTION: forcing a failure. [ 722.572779][T19149] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 722.578981][T19151] overlay: Unknown parameter 'dont_appraise' [ 722.580815][T19149] CPU: 3 UID: 0 PID: 19149 Comm: syz.7.3736 Tainted: G L syzkaller #0 PREEMPT(full) [ 722.580841][T19149] Tainted: [L]=SOFTLOCKUP [ 722.580847][T19149] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 722.580858][T19149] Call Trace: [ 722.580863][T19149] [ 722.580878][T19149] dump_stack_lvl+0x100/0x190 [ 722.580902][T19149] should_fail_ex.cold+0x5/0xa [ 722.580922][T19149] _copy_from_iter+0x1f4/0x1690 [ 722.580955][T19149] ? __pfx__copy_from_iter+0x10/0x10 [ 722.580978][T19149] ? trace_kmalloc+0xeb/0x110 [ 722.581001][T19149] ? __kasan_kmalloc+0xaa/0xb0 [ 722.581023][T19149] ? __kmalloc_noprof+0x343/0x820 [ 722.581044][T19149] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 722.581069][T19149] kernfs_fop_write_iter+0x186/0x5f0 [ 722.581093][T19149] vfs_write+0x6ac/0x1050 [ 722.581111][T19149] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 722.581133][T19149] ? __pfx_vfs_write+0x10/0x10 [ 722.581147][T19149] ? find_held_lock+0x2b/0x80 [ 722.581184][T19149] ksys_write+0x12a/0x250 [ 722.581200][T19149] ? __pfx_ksys_write+0x10/0x10 [ 722.581214][T19149] ? ksys_write+0x1ac/0x250 [ 722.581230][T19149] ? __pfx_ksys_write+0x10/0x10 [ 722.581255][T19149] __do_fast_syscall_32+0xe7/0x970 [ 722.581277][T19149] ? lockdep_hardirqs_on+0x78/0x100 [ 722.581299][T19149] do_fast_syscall_32+0x32/0x70 [ 722.581320][T19149] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 722.581341][T19149] RIP: 0023:0xf6fcefec [ 722.581360][T19149] Code: Unable to access opcode bytes at 0xf6fcefc2. [ 722.581368][T19149] RSP: 002b:00000000f53bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 722.581384][T19149] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000300 [ 722.581391][T19149] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 722.581397][T19149] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 722.581403][T19149] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 722.581409][T19149] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 722.581423][T19149] [ 722.805794][T19163] fuse: Bad value for 'fd' [ 722.823199][T12221] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 723.335365][T13841] usb 12-1: new full-speed USB device number 90 using dummy_hcd [ 723.445241][ T10] usb 13-1: new high-speed USB device number 23 using dummy_hcd [ 723.486661][T13841] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 723.489828][T13841] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 723.493928][T13841] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 723.497967][T13841] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.536191][T19117] workqueue: Failed to create a rescuer kthread for wq "dio/fuse": -EINTR [ 723.575326][ T10] usb 13-1: device descriptor read/64, error -71 [ 723.704762][T13841] usb 12-1: GET_CAPABILITIES returned 0 [ 723.709145][T13841] usbtmc 12-1:16.0: can't read capabilities [ 723.815279][ T10] usb 13-1: new high-speed USB device number 24 using dummy_hcd [ 723.948407][T18053] usb 12-1: USB disconnect, device number 90 [ 723.965247][ T10] usb 13-1: device descriptor read/64, error -71 [ 724.075557][ T10] usb usb13-port1: attempt power cycle [ 724.415333][ T10] usb 13-1: new high-speed USB device number 25 using dummy_hcd [ 724.436050][ T10] usb 13-1: device descriptor read/8, error -71 [ 724.550639][T12221] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 724.685380][ T10] usb 13-1: new high-speed USB device number 26 using dummy_hcd [ 724.717825][ T10] usb 13-1: device descriptor read/8, error -71 [ 724.835494][ T10] usb usb13-port1: unable to enumerate USB device [ 724.903437][T19212] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3757'. [ 724.919634][T19212] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3757'. [ 724.923290][T19212] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3757'. [ 724.926749][T19212] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Register Pid response ret = -22) [ 725.202513][T19224] netlink: 11148 bytes leftover after parsing attributes in process `syz.7.3758'. [ 725.202898][T19226] FAULT_INJECTION: forcing a failure. [ 725.202898][T19226] name failslab, interval 1, probability 0, space 0, times 64 [ 725.217254][T19226] CPU: 2 UID: 0 PID: 19226 Comm: syz.3.3762 Tainted: G L syzkaller #0 PREEMPT(full) [ 725.217275][T19226] Tainted: [L]=SOFTLOCKUP [ 725.217279][T19226] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 725.217286][T19226] Call Trace: [ 725.217291][T19226] [ 725.217296][T19226] dump_stack_lvl+0x100/0x190 [ 725.217314][T19226] should_fail_ex.cold+0x5/0xa [ 725.217328][T19226] should_failslab+0xc2/0x120 [ 725.217345][T19226] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 725.217361][T19226] ? __alloc_skb+0x140/0x710 [ 725.217380][T19226] __alloc_skb+0x140/0x710 [ 725.217393][T19226] ? __alloc_skb+0x5b7/0x710 [ 725.217407][T19226] ? __pfx___alloc_skb+0x10/0x10 [ 725.217422][T19226] ? __mutex_lock+0x26d/0x1bd0 [ 725.217439][T19226] netlink_dump+0x194/0xd00 [ 725.217453][T19226] ? __pfx___mutex_lock+0x10/0x10 [ 725.217466][T19226] ? __pfx_netlink_dump+0x10/0x10 [ 725.217486][T19226] __netlink_dump_start+0x6d6/0x990 [ 725.217500][T19226] nfnl_acct_get+0x453/0x550 [ 725.217517][T19226] ? __pfx_nfnl_acct_get+0x10/0x10 [ 725.217533][T19226] ? __pfx_nfnl_acct_start+0x10/0x10 [ 725.217549][T19226] ? __pfx_nfnl_acct_dump+0x10/0x10 [ 725.217564][T19226] ? __pfx_nfnl_acct_done+0x10/0x10 [ 725.217580][T19226] ? find_held_lock+0x2b/0x80 [ 725.217599][T19226] nfnetlink_rcv_msg+0x9d5/0x11e0 [ 725.217618][T19226] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 725.217633][T19226] ? skb_release_data+0x6ca/0x8e0 [ 725.217649][T19226] ? kfree_skbmem+0x19f/0x210 [ 725.217684][T19226] ? __pfx___dev_queue_xmit+0x10/0x10 [ 725.217705][T19226] netlink_rcv_skb+0x159/0x420 [ 725.217722][T19226] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 725.217751][T19226] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 725.217778][T19226] ? ns_capable+0xd2/0xf0 [ 725.217797][T19226] nfnetlink_rcv+0x1b3/0x440 [ 725.217818][T19226] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 725.217837][T19226] ? netlink_deliver_tap+0x1ae/0xcc0 [ 725.217856][T19226] netlink_unicast+0x585/0x850 [ 725.217877][T19226] ? __pfx_netlink_unicast+0x10/0x10 [ 725.217900][T19226] netlink_sendmsg+0x8b0/0xda0 [ 725.217923][T19226] ? __pfx_netlink_sendmsg+0x10/0x10 [ 725.217945][T19226] ? apparmor_socket_sendmsg+0x15b/0x270 [ 725.217969][T19226] ____sys_sendmsg+0xa4d/0xbe0 [ 725.217987][T19226] ? __pfx_netlink_sendmsg+0x10/0x10 [ 725.218032][T19226] ? __pfx_____sys_sendmsg+0x10/0x10 [ 725.218062][T19226] ___sys_sendmsg+0x190/0x1e0 [ 725.218083][T19226] ? __pfx____sys_sendmsg+0x10/0x10 [ 725.218130][T19226] ? find_held_lock+0x2b/0x80 [ 725.218170][T19226] __sys_sendmsg+0x160/0x210 [ 725.218195][T19226] ? __pfx___sys_sendmsg+0x10/0x10 [ 725.218227][T19226] ? __pfx_ksys_write+0x10/0x10 [ 725.218249][T19226] __do_fast_syscall_32+0xe7/0x970 [ 725.218273][T19226] ? lockdep_hardirqs_on+0x78/0x100 [ 725.218297][T19226] do_fast_syscall_32+0x32/0x70 [ 725.218319][T19226] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 725.218342][T19226] RIP: 0023:0xf7f94fec [ 725.218364][T19226] Code: Unable to access opcode bytes at 0xf7f94fc2. [ 725.218372][T19226] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 725.218390][T19226] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 725.218402][T19226] RDX: 000000000008c800 RSI: 0000000000000000 RDI: 0000000000000000 [ 725.218413][T19226] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 725.218423][T19226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 725.218434][T19226] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 725.218459][T19226] [ 725.553075][T19229] Option ' n€ö¨«­êvbIkÝ»B¾kû/•é [ 725.553075][T19229] VÇ1‡bõè’BÊkü‚~}¯$QŽd[¸ av' to dns_resolver key: bad/missing value [ 726.178587][T19242] FAULT_INJECTION: forcing a failure. [ 726.178587][T19242] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 726.189983][T19242] CPU: 0 UID: 0 PID: 19242 Comm: syz.8.3767 Tainted: G L syzkaller #0 PREEMPT(full) [ 726.190024][T19242] Tainted: [L]=SOFTLOCKUP [ 726.190028][T19242] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 726.190036][T19242] Call Trace: [ 726.190041][T19242] [ 726.190046][T19242] dump_stack_lvl+0x100/0x190 [ 726.190065][T19242] should_fail_ex.cold+0x5/0xa [ 726.190078][T19242] _copy_from_user+0x2e/0xd0 [ 726.190096][T19242] copy_from_buffer+0x7f/0xc0 [ 726.190136][T19242] copy_uabi_to_xstate+0x3bb/0x650 [ 726.190151][T19242] ? __pfx_copy_uabi_to_xstate+0x10/0x10 [ 726.190166][T19242] ? __fpu_restore_sig+0xc06/0x13b0 [ 726.190178][T19242] ? x86_task_fpu+0x5f/0x90 [ 726.190195][T19242] __fpu_restore_sig+0xfeb/0x13b0 [ 726.190208][T19242] ? __pfx___fpu_restore_sig+0x10/0x10 [ 726.190222][T19242] ? rcu_is_watching+0x12/0xc0 [ 726.190240][T19242] ? __might_fault+0xc5/0x140 [ 726.190256][T19242] fpu__restore_sig+0x151/0x190 [ 726.190268][T19242] ia32_restore_sigcontext+0x456/0x620 [ 726.190284][T19242] ? __pfx_ia32_restore_sigcontext+0x10/0x10 [ 726.190304][T19242] ? rcu_is_watching+0x12/0xc0 [ 726.190317][T19242] ? _raw_spin_unlock_irq+0x23/0x50 [ 726.190329][T19242] ? lockdep_hardirqs_on+0x78/0x100 [ 726.190345][T19242] __do_compat_sys_rt_sigreturn+0x18c/0x270 [ 726.190359][T19242] ? __pfx___ia32_compat_sys_rt_sigreturn+0x10/0x10 [ 726.190378][T19242] do_int80_emulation+0x14b/0x720 [ 726.190399][T19242] asm_int80_emulation+0x1a/0x20 [ 726.190416][T19242] RIP: 0023:0xf70befea [ 726.190431][T19242] Code: 19 85 d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 80 5d 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 726.190443][T19242] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 [ 726.190453][T19242] RAX: 00000000000001aa RBX: 0000000000000003 RCX: 00000000fffffdff [ 726.190460][T19242] RDX: 000000000000e875 RSI: 0000000000000027 RDI: 0000000000000000 [ 726.190467][T19242] RBP: 0000000000002000 R08: 0000000000000000 R09: 0000000000000000 [ 726.190474][T19242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 726.190480][T19242] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 726.190494][T19242] [ 726.302600][T19247] binder: 19246:19247 ioctl c018620c 80000140 returned -1 [ 726.358504][T19249] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3776'. [ 726.453705][T19251] 9pnet_virtio: no channels available for device syz [ 726.952248][T19274] futex_wake_op: syz.8.3772 tries to shift op by -1; fix this program [ 727.016164][T12221] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 727.025258][T16259] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 727.185257][T16259] usb 8-1: Using ep0 maxpacket: 16 [ 727.188280][T16259] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 727.191786][T16259] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 727.196247][T16259] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 727.199148][T16259] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.207825][T16259] usb 8-1: config 0 descriptor?? [ 727.417813][T19268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 727.420882][T19268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 727.522452][T19268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 727.528243][T19268] 8021q: adding VLAN 0 to HW filter on device bond2 [ 727.537640][T19268] bridge0: port 3(vlan2) entered blocking state [ 727.539787][T19268] bridge0: port 3(vlan2) entered forwarding state [ 727.560760][T16259] usbhid 8-1:0.0: can't add hid device: -71 [ 727.562732][T16259] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 727.576381][T16259] usb 8-1: USB disconnect, device number 35 [ 727.705374][ T50] usb 13-1: new high-speed USB device number 27 using dummy_hcd [ 727.835263][ T50] usb 13-1: device descriptor read/64, error -71 [ 727.957035][T19295] 9pnet_virtio: no channels available for device syz [ 727.958441][T19296] overlayfs: overlapping lowerdir path [ 728.103161][ T50] usb 13-1: new high-speed USB device number 28 using dummy_hcd [ 728.671712][ T50] usb 13-1: device descriptor read/64, error -71 [ 729.014666][T19309] wg2 speed is unknown, defaulting to 1000 [ 729.337544][T19320] IPVS: Scheduler module ip_vs_ not found [ 729.479715][ T50] usb usb13-port1: attempt power cycle [ 730.562849][T19345] ieee802154 phy1 wpan1: encryption failed: -22 [ 730.632646][T19347] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3793'. [ 731.842528][T19358] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3797'. [ 731.972775][T19362] netlink: 'syz.3.3799': attribute type 1 has an invalid length. [ 732.046868][T19362] 8021q: adding VLAN 0 to HW filter on device bond3 [ 732.047649][T13460] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 732.069666][T13460] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 732.074647][T13460] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 732.084068][T13460] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 732.087932][T13460] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 732.462372][T19365] wg2 speed is unknown, defaulting to 1000 [ 732.795723][T19365] bridge0: port 1(bridge_slave_0) entered blocking state [ 732.798818][T19365] bridge0: port 1(bridge_slave_0) entered disabled state [ 732.801838][T19365] bridge_slave_0: entered allmulticast mode [ 732.805677][T19365] bridge_slave_0: entered promiscuous mode [ 732.810435][T19365] bridge0: port 2(bridge_slave_1) entered blocking state [ 732.813429][T19365] bridge0: port 2(bridge_slave_1) entered disabled state [ 732.816947][T19365] bridge_slave_1: entered allmulticast mode [ 732.820988][T19365] bridge_slave_1: entered promiscuous mode [ 732.847977][T19365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 732.854307][T19365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 732.880018][T19365] team0: Port device team_slave_0 added [ 732.884499][T19365] team0: Port device team_slave_1 added [ 732.907147][T19365] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 732.909848][T19365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 732.920366][T19365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 732.931645][T19365] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 732.934479][T19365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 732.946960][T19365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 732.993773][T19365] hsr_slave_0: entered promiscuous mode [ 732.997029][T19365] hsr_slave_1: entered promiscuous mode [ 733.002809][T19365] debugfs: 'hsr0' already exists in 'hsr' [ 733.025417][T19365] Cannot create hsr debugfs directory [ 734.135639][T12221] Bluetooth: hci2: command tx timeout [ 734.434537][T19365] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.616898][T19365] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.688360][T19365] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.826787][T19365] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.018859][T19365] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 736.030886][T19365] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 736.035023][T19365] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 736.225252][T12221] Bluetooth: hci2: command tx timeout [ 736.305429][T19365] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 736.313579][T19419] tipc: Enabled bearer , priority 0 [ 736.319673][T19365] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 736.350676][T19365] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 736.353613][T19365] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 736.367109][T19365] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 736.483388][T19365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 736.515709][T19365] 8021q: adding VLAN 0 to HW filter on device team0 [ 736.529865][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 736.535574][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 736.570606][ T141] bridge0: port 2(bridge_slave_1) entered blocking state [ 736.573474][ T141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 737.223547][T19365] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 737.428337][T18053] tipc: Node number set to 3244206398 [ 737.500842][T19365] veth0_vlan: entered promiscuous mode [ 737.520440][T19365] veth1_vlan: entered promiscuous mode [ 737.557263][T19365] veth0_macvtap: entered promiscuous mode [ 737.569684][T19365] veth1_macvtap: entered promiscuous mode [ 737.609282][T19365] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 737.627317][T19365] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 737.639052][T19290] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.648770][T19290] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.656415][T19290] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.662870][T19290] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.783233][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 737.794361][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 737.814786][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 737.838025][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 737.959599][T12221] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 738.216110][T18053] usb 13-1: new high-speed USB device number 30 using dummy_hcd [ 738.295686][T12221] Bluetooth: hci2: command tx timeout [ 738.355525][T18053] usb 13-1: device descriptor read/64, error -71 [ 738.535311][ T6394] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 738.595580][T18053] usb 13-1: new high-speed USB device number 31 using dummy_hcd [ 738.665303][ T6394] usb 8-1: device descriptor read/64, error -71 [ 738.725352][T18053] usb 13-1: device descriptor read/64, error -71 [ 738.842193][T18053] usb usb13-port1: attempt power cycle [ 738.905272][ T6394] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 739.035487][ T6394] usb 8-1: device descriptor read/64, error -71 [ 739.145567][ T6394] usb usb8-port1: attempt power cycle [ 739.186027][T18053] usb 13-1: new high-speed USB device number 32 using dummy_hcd [ 739.206084][T18053] usb 13-1: device descriptor read/8, error -71 [ 739.445561][T18053] usb 13-1: new high-speed USB device number 33 using dummy_hcd [ 739.450888][T19491] binder: 19490:19491 ioctl c0306201 800001c0 returned -22 [ 739.472062][T18053] usb 13-1: device descriptor read/8, error -71 [ 739.485370][ T6394] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 739.506863][ T6394] usb 8-1: device descriptor read/8, error -71 [ 739.585814][T18053] usb usb13-port1: unable to enumerate USB device [ 739.705323][ T34] usb 10-1: new low-speed USB device number 124 using dummy_hcd [ 739.745367][ T6394] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 739.765850][ T6394] usb 8-1: device descriptor read/8, error -71 [ 739.855366][ T34] usb 10-1: Invalid ep0 maxpacket: 64 [ 739.875600][ T6394] usb usb8-port1: unable to enumerate USB device [ 739.985229][ T34] usb 10-1: new low-speed USB device number 125 using dummy_hcd [ 740.135464][ T34] usb 10-1: Invalid ep0 maxpacket: 64 [ 740.138687][ T34] usb usb10-port1: attempt power cycle [ 740.375622][T12221] Bluetooth: hci2: command tx timeout [ 740.475269][ T34] usb 10-1: new low-speed USB device number 126 using dummy_hcd [ 740.496284][ T34] usb 10-1: Invalid ep0 maxpacket: 64 [ 740.625239][ T34] usb 10-1: new low-speed USB device number 127 using dummy_hcd [ 740.645878][ T34] usb 10-1: Invalid ep0 maxpacket: 64 [ 740.651008][ T34] usb usb10-port1: unable to enumerate USB device [ 740.959120][T19505] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3827'. [ 742.507754][T13578] usb 13-1: new high-speed USB device number 34 using dummy_hcd [ 742.646539][T13578] usb 13-1: device descriptor read/64, error -71 [ 742.749106][T19549] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3838'. [ 742.895587][T13578] usb 13-1: new high-speed USB device number 35 using dummy_hcd [ 743.022951][T19566] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3846'. [ 743.035522][T19566] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3846'. [ 743.116505][T13578] usb 13-1: device descriptor read/64, error -71 [ 743.158939][T19568] binder: 19567:19568 ioctl c0306201 800001c0 returned -22 [ 743.235572][T13578] usb usb13-port1: attempt power cycle [ 743.287703][T12221] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 743.435333][ T6394] usb 8-1: new low-speed USB device number 40 using dummy_hcd [ 743.585888][T13578] usb 13-1: new high-speed USB device number 36 using dummy_hcd [ 743.596046][ T6394] usb 8-1: Invalid ep0 maxpacket: 64 [ 743.615898][T13578] usb 13-1: device descriptor read/8, error -71 [ 743.745289][ T6394] usb 8-1: new low-speed USB device number 41 using dummy_hcd [ 743.865214][T13578] usb 13-1: new high-speed USB device number 37 using dummy_hcd [ 743.886788][T13578] usb 13-1: device descriptor read/8, error -71 [ 743.905207][ T6394] usb 8-1: Invalid ep0 maxpacket: 64 [ 743.907131][ T6394] usb usb8-port1: attempt power cycle [ 743.995644][T13578] usb usb13-port1: unable to enumerate USB device [ 744.245278][ T6394] usb 8-1: new low-speed USB device number 42 using dummy_hcd [ 744.266206][ T6394] usb 8-1: Invalid ep0 maxpacket: 64 [ 744.395629][ T6394] usb 8-1: new low-speed USB device number 43 using dummy_hcd [ 744.415844][ T6394] usb 8-1: Invalid ep0 maxpacket: 64 [ 744.417754][ T6394] usb usb8-port1: unable to enumerate USB device [ 744.473222][T19589] netlink: 380 bytes leftover after parsing attributes in process `syz.7.3854'. [ 745.511385][T19595] bridge0: port 1(bridge_slave_0) entered disabled state [ 745.514872][T19595] bridge0: port 2(bridge_slave_1) entered disabled state [ 745.569627][T19595] 8021q: adding VLAN 0 to HW filter on device eth0 [ 745.577838][T12588] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 745.965566][T12221] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 746.260816][T16096] ffs_data_put(): freeing [ 746.777588][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 746.835323][ T7143] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 746.965368][ T7143] usb 8-1: device descriptor read/64, error -71 [ 747.012427][T12221] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 747.158106][T19647] netlink: 288 bytes leftover after parsing attributes in process `syz.5.3869'. [ 747.255219][ T7143] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 747.405342][ T7143] usb 8-1: device descriptor read/64, error -71 [ 747.525632][ T7143] usb usb8-port1: attempt power cycle [ 747.875296][ T7143] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 747.906629][ T7143] usb 8-1: device descriptor read/8, error -71 [ 748.165228][ T7143] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 748.185721][ T7143] usb 8-1: device descriptor read/8, error -71 [ 748.299655][ T7143] usb usb8-port1: unable to enumerate USB device [ 749.075228][ T7143] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 749.153105][T12221] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 749.226859][ T7143] usb 10-1: Using ep0 maxpacket: 16 [ 749.232202][ T7143] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 749.247039][ T7143] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 749.251110][ T7143] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 749.253935][ T7143] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.258763][ T7143] usb 10-1: config 0 descriptor?? [ 749.281373][ T29] usb 5-1: USB disconnect, device number 31 [ 749.284627][ T29] rndis_host 5-1:1.0 usb1: unregister 'rndis_host' usb-dummy_hcd.0-1, RNDIS device [ 749.415360][ C2] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 749.483912][T19661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 749.492447][T19661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 749.955464][ T7143] usbhid 10-1:0.0: can't add hid device: -71 [ 749.962130][ T7143] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 749.975856][ T7143] usb 10-1: USB disconnect, device number 2 [ 751.025205][T16259] usb 13-1: new high-speed USB device number 38 using dummy_hcd [ 751.166205][T16259] usb 13-1: device descriptor read/64, error -71 [ 751.408425][T16259] usb 13-1: new high-speed USB device number 39 using dummy_hcd [ 751.519102][T19769] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 751.522385][T19769] ALSA: mixer_oss: invalid index 137438 [ 751.545508][T16259] usb 13-1: device descriptor read/64, error -71 [ 751.576771][ T5849] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 751.666092][T16259] usb usb13-port1: attempt power cycle [ 751.728310][ T5849] usb 10-1: device descriptor read/64, error -71 [ 751.975450][ T5849] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 752.005217][T16259] usb 13-1: new high-speed USB device number 40 using dummy_hcd [ 752.042149][T16259] usb 13-1: device descriptor read/8, error -71 [ 752.116012][ T5849] usb 10-1: device descriptor read/64, error -71 [ 752.231745][ T5849] usb usb10-port1: attempt power cycle [ 752.305652][T16259] usb 13-1: new high-speed USB device number 41 using dummy_hcd [ 752.346983][T16259] usb 13-1: device descriptor read/8, error -71 [ 752.456279][T16259] usb usb13-port1: unable to enumerate USB device [ 752.595715][ T5849] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 752.616090][ T5849] usb 10-1: device descriptor read/8, error -71 [ 752.683142][T19782] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3891'. [ 752.855403][ T5849] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 752.875697][ T5849] usb 10-1: device descriptor read/8, error -71 [ 752.986040][ T5849] usb usb10-port1: unable to enumerate USB device [ 753.145243][T16218] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 753.275318][T16218] usb 8-1: device descriptor read/64, error -71 [ 753.525227][T16218] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 753.665294][T16218] usb 8-1: device descriptor read/64, error -71 [ 753.776620][T16218] usb usb8-port1: attempt power cycle [ 754.137180][T16218] usb 8-1: new high-speed USB device number 50 using dummy_hcd [ 754.164648][T19798] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 754.177944][T16218] usb 8-1: device descriptor read/8, error -71 [ 754.397453][T19802] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 754.402436][T19802] block device autoloading is deprecated and will be removed. [ 754.425535][T16218] usb 8-1: new high-speed USB device number 51 using dummy_hcd [ 754.447535][T16218] usb 8-1: device descriptor read/8, error -71 [ 754.561582][T16218] usb usb8-port1: unable to enumerate USB device [ 755.442872][T19818] i801_smbus 0000:00:1f.3: SMBus is busy, can't use it! [ 756.245277][ T29] usb 8-1: new high-speed USB device number 52 using dummy_hcd [ 756.447091][ T29] usb 8-1: Using ep0 maxpacket: 32 [ 756.527870][ T29] usb 8-1: config 0 has no interfaces? [ 756.635395][ T29] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 756.710066][ T29] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 756.745643][ T29] usb 8-1: Product: syz [ 756.760336][ T29] usb 8-1: Manufacturer: syz [ 756.778301][ T29] usb 8-1: SerialNumber: syz [ 757.025233][ C2] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 757.778229][ T29] usb 8-1: config 0 descriptor?? [ 758.015179][ T29] usb 8-1: USB disconnect, device number 52 [ 758.846904][T12221] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 759.075881][T13841] usb 8-1: new high-speed USB device number 53 using dummy_hcd [ 759.250251][T13841] usb 8-1: device descriptor read/64, error -71 [ 759.526391][T13841] usb 8-1: new high-speed USB device number 54 using dummy_hcd [ 759.706700][T13841] usb 8-1: device descriptor read/64, error -71 [ 759.829070][T13841] usb usb8-port1: attempt power cycle [ 760.152592][ T29] IPVS: starting estimator thread 0... [ 760.170040][T19904] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3921'. [ 760.178474][T19904] batadv0: entered promiscuous mode [ 760.186825][T19904] macsec1: entered promiscuous mode [ 760.188953][T19904] macsec1: entered allmulticast mode [ 760.191136][T19904] batadv0: entered allmulticast mode [ 760.194016][T19904] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 760.198569][T19904] batadv0: left allmulticast mode [ 760.200449][T19904] batadv0: left promiscuous mode [ 760.235305][T13841] usb 8-1: new high-speed USB device number 55 using dummy_hcd [ 760.255437][T19902] IPVS: using max 22 ests per chain, 52800 per kthread [ 760.256825][T13841] usb 8-1: device descriptor read/8, error -71 [ 760.304237][T19912] netlink: 288 bytes leftover after parsing attributes in process `syz.7.3923'. [ 760.505247][T13841] usb 8-1: new high-speed USB device number 56 using dummy_hcd [ 760.515234][T12221] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 760.527244][T13841] usb 8-1: device descriptor read/8, error -71 [ 760.636020][T13841] usb usb8-port1: unable to enumerate USB device [ 760.689421][T12221] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 760.794690][T19926] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3927'. [ 760.899147][T19930] fuse: Bad value for 'fd' [ 761.049309][T19930] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3929'. [ 761.940082][T19955] binder: 19954:19955 ioctl c0306201 800001c0 returned -22 [ 761.992514][T19957] i801_smbus 0000:00:1f.3: SMBus is busy, can't use it! [ 762.515626][T19962] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3948'. [ 763.079285][T19975] netlink: 288 bytes leftover after parsing attributes in process `syz.3.3943'. [ 763.315936][ T6284] usb 13-1: new high-speed USB device number 42 using dummy_hcd [ 763.332228][T12221] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 763.445260][ T6284] usb 13-1: device descriptor read/64, error -71 [ 763.685309][ T6284] usb 13-1: new high-speed USB device number 43 using dummy_hcd [ 763.715065][T19990] FAULT_INJECTION: forcing a failure. [ 763.715065][T19990] name failslab, interval 1, probability 0, space 0, times 61 [ 763.719060][T19990] CPU: 3 UID: 0 PID: 19990 Comm: syz.3.3949 Tainted: G L syzkaller #0 PREEMPT(full) [ 763.719079][T19990] Tainted: [L]=SOFTLOCKUP [ 763.719083][T19990] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 763.719090][T19990] Call Trace: [ 763.719095][T19990] [ 763.719099][T19990] dump_stack_lvl+0x100/0x190 [ 763.719117][T19990] should_fail_ex.cold+0x5/0xa [ 763.719130][T19990] should_failslab+0xc2/0x120 [ 763.719146][T19990] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 763.719162][T19990] ? __alloc_skb+0x140/0x710 [ 763.719186][T19990] __alloc_skb+0x140/0x710 [ 763.719199][T19990] ? __alloc_skb+0x5b7/0x710 [ 763.719213][T19990] ? __pfx___alloc_skb+0x10/0x10 [ 763.719226][T19990] ? kmem_cache_free+0x127/0x6b0 [ 763.719236][T19990] ? consume_skb+0xd1/0x110 [ 763.719252][T19990] ? nlmon_xmit+0xa5/0xe0 [ 763.719273][T19990] tcf_action_add+0x230/0x5c0 [ 763.719290][T19990] ? __pfx_tcf_action_add+0x10/0x10 [ 763.719323][T19990] ? __nla_parse+0x40/0x60 [ 763.719337][T19990] tc_ctl_action+0x2e3/0x470 [ 763.719352][T19990] ? __pfx_tc_ctl_action+0x10/0x10 [ 763.719371][T19990] ? __pfx_tc_ctl_action+0x10/0x10 [ 763.719385][T19990] rtnetlink_rcv_msg+0x3c9/0xe90 [ 763.719403][T19990] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 763.719423][T19990] ? ref_tracker_free+0x37e/0x6c0 [ 763.719435][T19990] netlink_rcv_skb+0x159/0x420 [ 763.719450][T19990] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 763.719467][T19990] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 763.719484][T19990] ? netlink_deliver_tap+0x1ae/0xcc0 [ 763.719498][T19990] netlink_unicast+0x585/0x850 [ 763.719511][T19990] ? __pfx_netlink_unicast+0x10/0x10 [ 763.719522][T19990] ? __build_skb_around+0x278/0x390 [ 763.719535][T19990] ? is_vmalloc_addr+0x86/0xa0 [ 763.719549][T19990] netlink_sendmsg+0x8b0/0xda0 [ 763.719563][T19990] ? __pfx_netlink_sendmsg+0x10/0x10 [ 763.719588][T19990] ? apparmor_socket_sendmsg+0x15b/0x270 [ 763.719603][T19990] sock_write_iter+0x53a/0x5b0 [ 763.719614][T19990] ? __pfx_netlink_sendmsg+0x10/0x10 [ 763.719626][T19990] ? __pfx_sock_write_iter+0x10/0x10 [ 763.719641][T19990] ? bpf_lsm_file_permission+0x9/0x10 [ 763.719653][T19990] ? security_file_permission+0x76/0x210 [ 763.719675][T19990] ? rw_verify_area+0xce/0x6d0 [ 763.719700][T19990] vfs_write+0x6ac/0x1050 [ 763.719715][T19990] ? __pfx_sock_write_iter+0x10/0x10 [ 763.719734][T19990] ? __pfx_vfs_write+0x10/0x10 [ 763.719751][T19990] ? find_held_lock+0x2b/0x80 [ 763.719790][T19990] ksys_write+0x1f8/0x250 [ 763.719807][T19990] ? __pfx_ksys_write+0x10/0x10 [ 763.719822][T19990] ? ksys_write+0x1ac/0x250 [ 763.719837][T19990] ? __pfx_ksys_write+0x10/0x10 [ 763.719859][T19990] __do_fast_syscall_32+0xe7/0x970 [ 763.719885][T19990] ? lockdep_hardirqs_on+0x78/0x100 [ 763.719909][T19990] do_fast_syscall_32+0x32/0x70 [ 763.719931][T19990] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 763.719954][T19990] RIP: 0023:0xf7f94fec [ 763.719974][T19990] Code: Unable to access opcode bytes at 0xf7f94fc2. [ 763.719982][T19990] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 763.719999][T19990] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 763.720010][T19990] RDX: 000000000000fe33 RSI: 0000000000000000 RDI: 0000000000000000 [ 763.720019][T19990] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 763.720029][T19990] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 763.720039][T19990] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 763.720063][T19990] [ 763.866177][ T6284] usb 13-1: device descriptor read/64, error -71 [ 763.986235][ T6284] usb usb13-port1: attempt power cycle [ 764.335380][ T6284] usb 13-1: new high-speed USB device number 44 using dummy_hcd [ 764.355758][ T6284] usb 13-1: device descriptor read/8, error -71 [ 764.408480][T19996] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3952'. [ 764.595394][ T6284] usb 13-1: new high-speed USB device number 45 using dummy_hcd [ 764.625976][ T6284] usb 13-1: device descriptor read/8, error -71 [ 764.735613][ T6284] usb usb13-port1: unable to enumerate USB device [ 766.386929][T20069] wg2 speed is unknown, defaulting to 1000 [ 766.699805][T20078] FAULT_INJECTION: forcing a failure. [ 766.699805][T20078] name failslab, interval 1, probability 0, space 0, times 60 [ 766.717848][T20078] CPU: 3 UID: 0 PID: 20078 Comm: syz.5.3979 Tainted: G L syzkaller #0 PREEMPT(full) [ 766.717876][T20078] Tainted: [L]=SOFTLOCKUP [ 766.717881][T20078] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 766.717890][T20078] Call Trace: [ 766.717896][T20078] [ 766.717902][T20078] dump_stack_lvl+0x100/0x190 [ 766.717923][T20078] should_fail_ex.cold+0x5/0xa [ 766.717941][T20078] should_failslab+0xc2/0x120 [ 766.717961][T20078] __kmalloc_cache_noprof+0x91/0x6c0 [ 766.717977][T20078] ? nf_tables_addchain.constprop.0+0x28e/0x1ca0 [ 766.718006][T20078] nf_tables_addchain.constprop.0+0x28e/0x1ca0 [ 766.718028][T20078] ? nf_tables_delchain+0xc52/0xd80 [ 766.718049][T20078] ? nft_chain_lookup+0x59c/0xa60 [ 766.718066][T20078] ? __kasan_kmalloc+0xaa/0xb0 [ 766.718085][T20078] ? __pfx_nf_tables_addchain.constprop.0+0x10/0x10 [ 766.718126][T20078] ? nla_strcmp+0xff/0x130 [ 766.718143][T20078] ? nft_table_lookup.part.0+0x1e3/0x230 [ 766.718161][T20078] nf_tables_newchain+0x17c3/0x2d30 [ 766.718182][T20078] ? net_generic+0x92/0x2a0 [ 766.718200][T20078] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 766.718237][T20078] ? __nla_validate_parse+0x1e7/0x28b0 [ 766.718255][T20078] ? __pfx_nf_tables_newchain+0x10/0x10 [ 766.718278][T20078] ? __pfx___nla_validate_parse+0x10/0x10 [ 766.718301][T20078] ? __nla_parse+0x40/0x60 [ 766.718319][T20078] nfnetlink_rcv_batch+0x1410/0x2880 [ 766.718350][T20078] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 766.718368][T20078] ? find_held_lock+0x2b/0x80 [ 766.718388][T20078] ? __local_bh_enable_ip+0x9e/0x120 [ 766.718405][T20078] ? lockdep_hardirqs_on+0x78/0x100 [ 766.718423][T20078] ? __dev_queue_xmit+0xa12/0x4970 [ 766.718469][T20078] ? __nla_parse+0x40/0x60 [ 766.718487][T20078] nfnetlink_rcv+0x3bd/0x440 [ 766.718506][T20078] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 766.718548][T20078] netlink_unicast+0x585/0x850 [ 766.718570][T20078] ? __pfx_netlink_unicast+0x10/0x10 [ 766.718592][T20078] netlink_sendmsg+0x8b0/0xda0 [ 766.718611][T20078] ? __pfx_netlink_sendmsg+0x10/0x10 [ 766.718629][T20078] ? apparmor_socket_sendmsg+0x15b/0x270 [ 766.718649][T20078] ____sys_sendmsg+0xa4d/0xbe0 [ 766.718663][T20078] ? __pfx_netlink_sendmsg+0x10/0x10 [ 766.718680][T20078] ? __pfx_____sys_sendmsg+0x10/0x10 [ 766.718705][T20078] ___sys_sendmsg+0x190/0x1e0 [ 766.718721][T20078] ? __pfx____sys_sendmsg+0x10/0x10 [ 766.718747][T20078] ? find_held_lock+0x2b/0x80 [ 766.718780][T20078] __sys_sendmsg+0x160/0x210 [ 766.718804][T20078] ? __pfx___sys_sendmsg+0x10/0x10 [ 766.718831][T20078] ? __pfx_ksys_write+0x10/0x10 [ 766.718851][T20078] __do_fast_syscall_32+0xe7/0x970 [ 766.718872][T20078] ? lockdep_hardirqs_on+0x78/0x100 [ 766.718894][T20078] do_fast_syscall_32+0x32/0x70 [ 766.718917][T20078] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 766.718939][T20078] RIP: 0023:0xf701efec [ 766.718960][T20078] Code: Unable to access opcode bytes at 0xf701efc2. [ 766.718967][T20078] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 766.718984][T20078] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 766.718996][T20078] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 766.719006][T20078] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 766.719016][T20078] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 766.719025][T20078] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 766.719047][T20078] [ 766.834428][ T42] audit: type=1804 audit(1785438470.665:1190): pid=20081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.3980" name="/newroot/161/file0" dev="tmpfs" ino=885 res=1 errno=0 [ 766.841082][ T42] audit: type=1804 audit(1785438470.665:1191): pid=20080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.3980" name="/newroot/161/file0" dev="tmpfs" ino=885 res=1 errno=0 [ 767.005055][T20097] binder: 20095:20097 ioctl c0306201 800001c0 returned -22 [ 767.012847][T20098] 9pnet_virtio: no channels available for device syz [ 767.443924][T20108] netlink: 'syz.5.3988': attribute type 1 has an invalid length. [ 767.469831][T20108] 8021q: adding VLAN 0 to HW filter on device bond1 [ 767.541257][T20112] netlink: 'syz.5.3988': attribute type 10 has an invalid length. [ 767.541882][T20108] bond1: (slave dummy0): Enslaving as a backup interface with an up link [ 767.547252][T20112] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3988'. [ 767.551021][T20112] dummy0: entered promiscuous mode [ 767.562673][T20112] bond1: (slave dummy0): Releasing backup interface [ 767.606336][T20108] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3988'. [ 767.718474][T20119] netlink: 'syz.5.3991': attribute type 1 has an invalid length. [ 767.756892][T20119] 8021q: adding VLAN 0 to HW filter on device bond2 [ 767.800993][T20119] dummy0: left promiscuous mode [ 767.813151][T20119] bond2: (slave dummy0): making interface the new active one [ 767.819586][T20119] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 767.964275][T20122] syz.3.3992: page allocation failure: order:0, mode:0x340cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_THISNODE), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 767.971092][T20122] CPU: 0 UID: 0 PID: 20122 Comm: syz.3.3992 Tainted: G L syzkaller #0 PREEMPT(full) [ 767.971122][T20122] Tainted: [L]=SOFTLOCKUP [ 767.971127][T20122] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 767.971134][T20122] Call Trace: [ 767.971138][T20122] [ 767.971144][T20122] dump_stack_lvl+0x100/0x190 [ 767.971161][T20122] warn_alloc.cold+0x94/0xa8 [ 767.971174][T20122] ? __pfx_warn_alloc+0x10/0x10 [ 767.971191][T20122] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 767.971207][T20122] ? __pfx_get_page_from_freelist+0x10/0x10 [ 767.971224][T20122] __alloc_frozen_pages_noprof+0x159f/0x2dc0 [ 767.971240][T20122] ? __lock_acquire+0x49f/0x1a40 [ 767.971262][T20122] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 767.971277][T20122] ? find_held_lock+0x2b/0x80 [ 767.971290][T20122] ? __free_frozen_pages+0x747/0x1090 [ 767.971307][T20122] ? __free_frozen_pages+0x747/0x1090 [ 767.971325][T20122] ? do_raw_spin_unlock+0x145/0x1e0 [ 767.971339][T20122] ? _raw_spin_unlock+0x28/0x50 [ 767.971352][T20122] ? __pfx_alloc_migration_target+0x10/0x10 [ 767.971376][T20122] __folio_alloc_noprof+0x13/0x260 [ 767.971389][T20122] alloc_migration_target+0x1d7/0x6d0 [ 767.971406][T20122] migrate_pages_batch+0x5dc/0x45c0 [ 767.971424][T20122] ? __pfx_alloc_migration_target+0x10/0x10 [ 767.971443][T20122] ? migrate_pages_sync+0x12c/0x880 [ 767.971460][T20122] ? migrate_pages_sync+0x588/0x880 [ 767.971478][T20122] ? __pfx_migrate_pages_batch+0x10/0x10 [ 767.971498][T20122] ? __pfx_migrate_pages_sync+0x10/0x10 [ 767.971515][T20122] ? register_lock_class+0x40/0x560 [ 767.971533][T20122] ? __lock_acquire+0x49f/0x1a40 [ 767.971549][T20122] ? __css_rstat_updated+0x1ce/0x5a0 [ 767.971569][T20122] migrate_pages+0x1950/0x2850 [ 767.971586][T20122] ? __lock_acquire+0x49f/0x1a40 [ 767.971603][T20122] ? __pfx_alloc_migration_target+0x10/0x10 [ 767.971622][T20122] ? __pfx_migrate_pages+0x10/0x10 [ 767.971642][T20122] ? __lock_acquire+0x49f/0x1a40 [ 767.971660][T20122] ? mtree_load+0x32d/0xa90 [ 767.971676][T20122] move_pages_and_store_status+0xf1/0x230 [ 767.971695][T20122] ? __pfx_move_pages_and_store_status+0x10/0x10 [ 767.971718][T20122] kernel_move_pages+0xc89/0x14a0 [ 767.971739][T20122] ? __pfx_kernel_move_pages+0x10/0x10 [ 767.971760][T20122] ? xfd_validate_state+0x129/0x190 [ 767.971777][T20122] __ia32_sys_move_pages+0xdd/0x1b0 [ 767.971794][T20122] ? __do_fast_syscall_32+0x98/0x970 [ 767.971809][T20122] ? lockdep_hardirqs_on+0x78/0x100 [ 767.971822][T20122] __do_fast_syscall_32+0xe7/0x970 [ 767.971835][T20122] ? lockdep_hardirqs_on+0x78/0x100 [ 767.971849][T20122] do_fast_syscall_32+0x32/0x70 [ 767.971863][T20122] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 767.971877][T20122] RIP: 0023:0xf7f94fec [ 767.971891][T20122] Code: Unable to access opcode bytes at 0xf7f94fc2. [ 767.971896][T20122] RSP: 002b:00000000f541450c EFLAGS: 00000292 ORIG_RAX: 000000000000013d [ 767.971907][T20122] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000002064 [ 767.971914][T20122] RDX: 0000000080000040 RSI: 0000000080001180 RDI: 0000000080000000 [ 767.971921][T20122] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 767.971927][T20122] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 767.971933][T20122] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 767.971946][T20122] [ 767.971967][T20122] Mem-Info: [ 768.084071][T20122] active_anon:2282 inactive_anon:2244 isolated_anon:12 [ 768.084071][T20122] active_file:9106 inactive_file:12940 isolated_file:0 [ 768.084071][T20122] unevictable:1768 dirty:160 writeback:0 [ 768.084071][T20122] slab_reclaimable:7310 slab_unreclaimable:75358 [ 768.084071][T20122] mapped:32793 shmem:1775 pagetables:1614 [ 768.084071][T20122] sec_pagetables:317 bounce:0 [ 768.084071][T20122] kernel_misc_reclaimable:0 [ 768.084071][T20122] free:38237 free_pcp:915 free_cma:0 [ 768.102101][T20122] Node 0 active_anon:1308kB inactive_anon:36kB active_file:40kB inactive_file:624kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:68kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8608kB pagetables:1384kB sec_pagetables:1116kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 768.113763][T20122] Node 1 active_anon:7820kB inactive_anon:8940kB active_file:36384kB inactive_file:51136kB unevictable:5536kB isolated(anon):48kB isolated(file):0kB mapped:131104kB dirty:640kB writeback:0kB shmem:5564kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7560kB pagetables:4948kB sec_pagetables:152kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 768.124696][T20122] Node 0 DMA free:2124kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 768.134409][T20122] lowmem_reserve[]: 0 280 280 280 280 [ 768.136507][T20122] Node 0 DMA32 free:24624kB boost:28732kB min:41504kB low:44696kB high:47888kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1308kB inactive_anon:36kB active_file:40kB inactive_file:624kB unevictable:1536kB writepending:0kB zspages:1220kB present:1032196kB managed:286948kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 768.147141][T20122] lowmem_reserve[]: 0 0 0 0 0 [ 768.149284][T20122] Node 1 DMA32 free:126144kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:5720kB inactive_anon:8940kB active_file:36384kB inactive_file:51136kB unevictable:5536kB writepending:640kB zspages:4312kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:6048kB local_pcp:0kB free_cma:0kB [ 768.163320][T20122] lowmem_reserve[]: 0 0 0 0 0 [ 768.165547][T20122] Node 0 DMA: 2*4kB (U) 20*8kB (U) 13*16kB (UM) 9*32kB (UM) 1*64kB (M) 1*128kB (M) 1*256kB (M) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 2136kB [ 768.172338][T20122] Node 0 DMA32: 337*4kB (UME) 124*8kB (UME) 72*16kB (UME) 221*32kB (UME) 72*64kB (UME) 28*128kB (UME) 7*256kB (UM) 2*512kB (M) 3*1024kB (M) 0*2048kB 0*4096kB = 24644kB [ 768.178695][T20122] Node 1 DMA32: 1958*4kB (UM) 1485*8kB (UM) 545*16kB (UME) 393*32kB (UM) 139*64kB (UME) 90*128kB (UME) 31*256kB (UME) 15*512kB (UME) 10*1024kB (UM) 9*2048kB (UM) 5*4096kB (UM) = 126192kB [ 768.189623][T20122] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 768.192705][T20122] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 768.196283][T20122] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 768.199345][T20122] Node 1 hugepages_total=9 hugepages_free=9 hugepages_surp=0 hugepages_size=2048kB [ 768.202316][T20122] 24600 total pagecache pages [ 768.203834][T20122] 681 pages in swap cache [ 768.205895][T20122] Free swap = 99136kB [ 768.208719][T20122] Total swap = 124996kB [ 768.210738][T20122] 524155 pages RAM [ 768.212325][T20122] 0 pages HighMem/MovableOnly [ 768.214447][T20122] 211525 pages reserved [ 768.216423][T20122] 0 pages cma reserved [ 768.225197][T18053] usb 13-1: new high-speed USB device number 46 using dummy_hcd [ 768.385239][T18053] usb 13-1: Using ep0 maxpacket: 8 [ 768.388563][T18053] usb 13-1: config 0 has an invalid interface number: 55 but max is 0 [ 768.391305][T18053] usb 13-1: config 0 has no interface number 0 [ 768.393315][T18053] usb 13-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 768.397116][T18053] usb 13-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 768.401065][T18053] usb 13-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 768.404574][T18053] usb 13-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 768.408979][T18053] usb 13-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 768.411838][T18053] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.416898][T18053] usb 13-1: config 0 descriptor?? [ 768.428109][T18053] ldusb 13-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 768.685887][T20145] FAULT_INJECTION: forcing a failure. [ 768.685887][T20145] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 768.690349][T20145] CPU: 3 UID: 0 PID: 20145 Comm: syz.5.3998 Tainted: G L syzkaller #0 PREEMPT(full) [ 768.690375][T20145] Tainted: [L]=SOFTLOCKUP [ 768.690381][T20145] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 768.690391][T20145] Call Trace: [ 768.690398][T20145] [ 768.690404][T20145] dump_stack_lvl+0x100/0x190 [ 768.690429][T20145] should_fail_ex.cold+0x5/0xa [ 768.690464][T20145] _copy_from_user+0x2e/0xd0 [ 768.690489][T20145] __ia32_compat_sys_socketcall+0x187/0x770 [ 768.690515][T20145] ? __fget_files+0x21f/0x3d0 [ 768.690532][T20145] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 768.690562][T20145] ? fput+0x79/0x100 [ 768.690579][T20145] ? ksys_write+0x1ac/0x250 [ 768.690589][T20145] ? __pfx_ksys_write+0x10/0x10 [ 768.690603][T20145] do_int80_emulation+0x14b/0x720 [ 768.690620][T20145] asm_int80_emulation+0x1a/0x20 [ 768.690636][T20145] RIP: 0023:0xf715736b [ 768.690651][T20145] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 768.690667][T20145] RSP: 002b:00000000f53ca34c EFLAGS: 00000246 ORIG_RAX: 0000000000000066 [ 768.690685][T20145] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000f53ca3f4 [ 768.690696][T20145] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 768.690703][T20145] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 768.690710][T20145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 768.690716][T20145] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 768.690730][T20145] [ 768.698893][T20146] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4000'. [ 768.717670][T20148] netlink: 'syz.7.4001': attribute type 1 has an invalid length. [ 768.732174][ T6284] usb 13-1: USB disconnect, device number 46 [ 768.733449][ C3] ldusb 13-1:0.55: usb_submit_urb failed (-19) [ 768.781844][T20148] 8021q: adding VLAN 0 to HW filter on device bond4 [ 768.798046][ T6284] ldusb 13-1:0.55: LD USB Device #0 now disconnected [ 768.844229][T20148] bond0: (slave dummy0): Releasing backup interface [ 768.862659][T20148] bond4: (slave dummy0): Enslaving as a backup interface with an up link [ 768.869990][T20153] netlink: 'syz.7.4001': attribute type 10 has an invalid length. [ 768.873188][T20153] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4001'. [ 768.896353][T20153] dummy0: entered promiscuous mode [ 768.900590][T12586] bond4: (slave dummy0): link status up again after 0 ms [ 768.912100][T12586] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 768.920843][T20153] bond4: (slave dummy0): Removing an active aggregator [ 768.923971][T20153] bond4: (slave dummy0): Releasing backup interface [ 769.079757][ T42] audit: type=1326 audit(1785438472.985:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20165 comm="syz.7.4007" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6fcefec code=0x0 [ 769.615291][ T6284] usb 13-1: new high-speed USB device number 47 using dummy_hcd [ 769.775185][ T6284] usb 13-1: Using ep0 maxpacket: 32 [ 769.778742][ T6284] usb 13-1: config 0 has no interfaces? [ 769.782291][ T6284] usb 13-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 769.785231][ T6284] usb 13-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 769.788034][ T6284] usb 13-1: Product: syz [ 769.789416][ T6284] usb 13-1: Manufacturer: syz [ 769.791116][ T6284] usb 13-1: SerialNumber: syz [ 769.795635][ T6284] usb 13-1: config 0 descriptor?? [ 770.026874][T18053] usb 8-1: new high-speed USB device number 57 using dummy_hcd [ 770.088996][T20197] comedi comedi3: dac02: I/O base address or length out of range [ 770.186051][T18053] usb 8-1: Using ep0 maxpacket: 32 [ 770.189705][T18053] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 770.192336][T18053] usb 8-1: config 0 has no interface number 0 [ 770.199732][T18053] usb 8-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 770.202778][T18053] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.205903][T18053] usb 8-1: Product: syz [ 770.207338][T18053] usb 8-1: Manufacturer: syz [ 770.208982][T18053] usb 8-1: SerialNumber: syz [ 770.213318][T18053] usb 8-1: config 0 descriptor?? [ 770.219895][T18053] usb 8-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 770.223776][T18053] usb 8-1: selecting invalid altsetting 1 [ 770.226547][T18053] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 770.231724][T18053] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 770.237396][T18053] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 770.241006][T18053] usb 8-1: media controller created [ 770.263252][T18053] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 770.471149][T12221] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 770.478327][T20189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4010'. [ 770.500183][T20189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4010'. [ 770.514430][T20189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4010'. [ 770.528443][T20189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4010'. [ 770.531786][T20189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4010'. [ 770.623321][T12221] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 771.346782][T18053] usb 8-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 771.359338][T18053] zl10353_read_register: readreg error (reg=127, ret==-110) [ 771.361827][T20182] usb 8-1: dvb_usb_ce6230: I2C read not implemented [ 771.406341][T18053] usb 8-1: USB disconnect, device number 57 [ 771.669696][T20220] wg2 speed is unknown, defaulting to 1000 [ 771.685038][T20222] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4022'. [ 772.056911][T12221] Bluetooth: hci3: command 0x0406 tx timeout [ 772.059610][T20172] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 772.062319][T20172] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 772.138601][T20233] bridge0: port 3(vlan2) entered disabled state [ 772.140788][T20233] bridge0: port 2(bridge_slave_1) entered disabled state [ 772.143270][T20233] bridge0: port 1(bridge_slave_0) entered disabled state [ 772.255778][T20233] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 772.267397][T20233] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 772.375711][ C2] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 772.382549][T20245] Invalid logical block size (73728) [ 772.504944][T20233] bond1: left allmulticast mode [ 772.541341][T20242] syzkaller0: left promiscuous mode [ 772.543610][T20242] syzkaller0: left allmulticast mode [ 772.558011][ T5551] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.560980][ T5551] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.563955][ T5551] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.581954][ T5551] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.586477][T20172] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 772.595664][T20172] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 772.678466][T20172] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 772.678679][T20252] __nla_validate_parse: 3 callbacks suppressed [ 772.678690][T20252] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4034'. [ 772.680448][T20172] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 772.682861][T20257] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Query Mapping response ret = -22) [ 772.700183][T20252] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4034'. [ 772.802064][ T5849] usb 13-1: USB disconnect, device number 47 [ 772.838813][T20269] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.4044'. [ 772.842691][T20269] openvswitch: netlink: Message has 512 unknown bytes. [ 773.182733][T20283] netlink: 'syz.5.4040': attribute type 12 has an invalid length. [ 773.251155][T20287] 9pnet_virtio: no channels available for device syz [ 773.377950][T20296] 9p: Bad value for 'msize' [ 773.721326][T20301] A link change request failed with some changes committed already. Interface sit1 may have been left with an inconsistent configuration, please check. [ 774.668020][T20315] i801_smbus 0000:00:1f.3: SMBus is busy, can't use it! [ 774.782998][T20317] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4052'. [ 774.961007][T20328] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4055'. [ 775.172710][T20340] netlink: 'syz.7.4059': attribute type 1 has an invalid length. [ 775.175915][T20340] netlink: 224 bytes leftover after parsing attributes in process `syz.7.4059'. [ 775.531808][T20346] netlink: 'syz.7.4062': attribute type 4 has an invalid length. [ 776.778021][T20397] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4076'. [ 776.782482][T20397] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 777.944523][T20418] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4086'. [ 778.984435][T20436] syzkaller0: entered promiscuous mode [ 778.986834][T20436] syzkaller0: entered allmulticast mode [ 779.164078][T20443] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4097'. [ 779.358264][T20457] FAULT_INJECTION: forcing a failure. [ 779.358264][T20457] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 779.362431][T20457] CPU: 0 UID: 0 PID: 20457 Comm: syz.7.4100 Tainted: G L syzkaller #0 PREEMPT(full) [ 779.362450][T20457] Tainted: [L]=SOFTLOCKUP [ 779.362455][T20457] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 779.362462][T20457] Call Trace: [ 779.362466][T20457] [ 779.362471][T20457] dump_stack_lvl+0x100/0x190 [ 779.362490][T20457] should_fail_ex.cold+0x5/0xa [ 779.362503][T20457] _copy_from_iter+0x1f4/0x1690 [ 779.362522][T20457] ? __asan_memset+0x23/0x50 [ 779.362535][T20457] ? __pfx__copy_from_iter+0x10/0x10 [ 779.362551][T20457] ? __pfx___alloc_skb+0x10/0x10 [ 779.362572][T20457] netlink_sendmsg+0x808/0xda0 [ 779.362587][T20457] ? __pfx_netlink_sendmsg+0x10/0x10 [ 779.362601][T20457] ? apparmor_socket_sendmsg+0x15b/0x270 [ 779.362616][T20457] ____sys_sendmsg+0xa4d/0xbe0 [ 779.362627][T20457] ? __pfx_netlink_sendmsg+0x10/0x10 [ 779.362640][T20457] ? __pfx_____sys_sendmsg+0x10/0x10 [ 779.362657][T20457] ___sys_sendmsg+0x190/0x1e0 [ 779.362669][T20457] ? __pfx____sys_sendmsg+0x10/0x10 [ 779.362687][T20457] ? find_held_lock+0x2b/0x80 [ 779.362710][T20457] __sys_sendmsg+0x160/0x210 [ 779.362725][T20457] ? __pfx___sys_sendmsg+0x10/0x10 [ 779.362744][T20457] ? __pfx_ksys_write+0x10/0x10 [ 779.362757][T20457] __do_fast_syscall_32+0xe7/0x970 [ 779.362773][T20457] ? lockdep_hardirqs_on+0x78/0x100 [ 779.362787][T20457] do_fast_syscall_32+0x32/0x70 [ 779.362801][T20457] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 779.362816][T20457] RIP: 0023:0xf6fcefec [ 779.362830][T20457] Code: Unable to access opcode bytes at 0xf6fcefc2. [ 779.362836][T20457] RSP: 002b:00000000f53bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 779.362847][T20457] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000440 [ 779.362854][T20457] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 779.362861][T20457] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 779.362867][T20457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 779.362873][T20457] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 779.362897][T20457] [ 779.588922][T20464] sctp: [Deprecated]: syz.8.4102 (pid 20464) Use of struct sctp_assoc_value in delayed_ack socket option. [ 779.588922][T20464] Use struct sctp_sack_info instead [ 779.708765][T20473] openvswitch: netlink: Message has 178 unknown bytes. [ 779.720042][T20473] syzkaller0: entered promiscuous mode [ 779.721803][T20473] syzkaller0: entered allmulticast mode [ 779.974940][T20478] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4107'. [ 780.242128][T20492] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4112'. [ 780.324299][T20499] 9p: Bad value for 'port' [ 780.381055][T20503] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4117'. [ 780.391149][T20505] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4118'. [ 780.579294][T20513] binder: 20511:20513 ioctl c0306201 0 returned -14 [ 781.831835][T20556] 9p: Bad value for 'wfdno' [ 782.672175][T20568] 9pnet_virtio: no channels available for device syz [ 783.440683][T20576] 9p: Bad value for 'wfdno' [ 784.339090][T20614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 784.887133][T20618] comedi comedi3: pcm3724: I/O base address or length out of range [ 784.996881][T20631] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4162'. [ 785.330448][T20642] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4166'. [ 785.565440][T20648] FAULT_INJECTION: forcing a failure. [ 785.565440][T20648] name failslab, interval 1, probability 0, space 0, times 58 [ 785.570711][T20648] CPU: 2 UID: 0 PID: 20648 Comm: syz.7.4169 Tainted: G L syzkaller #0 PREEMPT(full) [ 785.570740][T20648] Tainted: [L]=SOFTLOCKUP [ 785.570746][T20648] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 785.570758][T20648] Call Trace: [ 785.570765][T20648] [ 785.570773][T20648] dump_stack_lvl+0x100/0x190 [ 785.570801][T20648] should_fail_ex.cold+0x5/0xa [ 785.570823][T20648] should_failslab+0xc2/0x120 [ 785.570846][T20648] kmem_cache_alloc_noprof+0x91/0x6a0 [ 785.570868][T20648] ? stack_trace_save+0x8e/0xc0 [ 785.570891][T20648] ? alloc_empty_file+0x5b/0x1c0 [ 785.570917][T20648] alloc_empty_file+0x5b/0x1c0 [ 785.570940][T20648] path_openat+0xe7/0x4280 [ 785.570958][T20648] ? kasan_save_track+0x14/0x30 [ 785.570979][T20648] ? __kasan_slab_alloc+0x89/0x90 [ 785.571001][T20648] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 785.571022][T20648] ? do_getname+0x35/0x390 [ 785.571041][T20648] ? do_sys_openat2+0xc7/0x1e0 [ 785.571060][T20648] ? __ia32_compat_sys_openat+0x12d/0x210 [ 785.571081][T20648] ? __do_fast_syscall_32+0xe7/0x970 [ 785.571113][T20648] ? __pfx_path_openat+0x10/0x10 [ 785.571138][T20648] do_file_open+0x20e/0x430 [ 785.571155][T20648] ? __lock_acquire+0x49f/0x1a40 [ 785.571183][T20648] ? __pfx_do_file_open+0x10/0x10 [ 785.571218][T20648] ? _raw_spin_unlock+0x28/0x50 [ 785.571236][T20648] ? alloc_fd+0x471/0x7a0 [ 785.571258][T20648] do_sys_openat2+0x10f/0x1e0 [ 785.571281][T20648] ? __pfx_do_sys_openat2+0x10/0x10 [ 785.571305][T20648] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 785.571332][T20648] __ia32_compat_sys_openat+0x12d/0x210 [ 785.571359][T20648] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 785.571384][T20648] ? fput+0x79/0x100 [ 785.571404][T20648] ? ksys_write+0x1ac/0x250 [ 785.571421][T20648] ? __pfx_ksys_write+0x10/0x10 [ 785.571443][T20648] __do_fast_syscall_32+0xe7/0x970 [ 785.571466][T20648] ? lockdep_hardirqs_on+0x78/0x100 [ 785.571487][T20648] do_fast_syscall_32+0x32/0x70 [ 785.571509][T20648] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 785.571538][T20648] RIP: 0023:0xf6fcefec [ 785.571559][T20648] Code: Unable to access opcode bytes at 0xf6fcefc2. [ 785.571568][T20648] RSP: 002b:00000000f53bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 785.571585][T20648] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000000 [ 785.571595][T20648] RDX: 0000000000080000 RSI: 0000000000000000 RDI: 0000000000000000 [ 785.571606][T20648] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 785.571617][T20648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 785.571627][T20648] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 785.571650][T20648] [ 785.958905][T20654] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4171'. [ 786.430594][T20673] netlink: 112 bytes leftover after parsing attributes in process `syz.7.4177'. [ 786.460582][T20673] syzkaller0: entered promiscuous mode [ 786.462461][T20673] syzkaller0: entered allmulticast mode [ 787.177782][T20710] 9pnet_virtio: no channels available for device syz [ 787.235180][T13841] usb 13-1: new high-speed USB device number 48 using dummy_hcd [ 787.339201][T20720] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4189'. [ 787.342576][T20720] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4189'. [ 787.347758][T20720] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4189'. [ 787.389805][T13841] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 787.398132][T13841] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 787.398150][T13841] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 787.398179][T13841] usb 13-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 787.398192][T13841] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.399862][T13841] usb 13-1: config 0 descriptor?? [ 787.453216][T20722] mac80211_hwsim hwsim37 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 788.020594][T13841] usbhid 13-1:0.0: can't add hid device: -71 [ 788.022596][T13841] usbhid 13-1:0.0: probe with driver usbhid failed with error -71 [ 788.027675][T13841] usb 13-1: USB disconnect, device number 48 [ 788.684386][T20750] kernel read not supported for file /cpuacct.usage_percpu (pid: 20750 comm: syz.8.4197) [ 788.688020][ T42] audit: type=1800 audit(1785438492.595:1193): pid=20750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.4197" name="cpuacct.usage_percpu" dev="mqueue" ino=90370 res=0 errno=0 [ 789.717948][T20788] openvswitch: netlink: Message has 1 unknown bytes. [ 790.275475][ T29] usb 13-1: new high-speed USB device number 49 using dummy_hcd [ 790.435306][ T29] usb 13-1: Using ep0 maxpacket: 32 [ 790.438894][ T29] usb 13-1: config 0 has no interfaces? [ 790.442320][ T29] usb 13-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 790.445902][ T29] usb 13-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 790.448507][ T29] usb 13-1: Product: syz [ 790.449919][ T29] usb 13-1: Manufacturer: syz [ 790.451610][ T29] usb 13-1: SerialNumber: syz [ 790.455040][ T29] usb 13-1: config 0 descriptor?? [ 790.673534][ T29] usb 13-1: USB disconnect, device number 49 [ 791.021287][T20851] ip6gretap0: entered promiscuous mode [ 791.057023][T20856] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4233'. [ 791.097196][T20858] binder: 20857:20858 unknown command 0 [ 791.098950][T20858] binder: 20857:20858 ioctl c0306201 80000480 returned -22 [ 791.226753][T20868] program syz.8.4238 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 791.435231][T18053] usb 8-1: new full-speed USB device number 58 using dummy_hcd [ 791.597237][T18053] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 791.602112][T18053] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 791.606899][T18053] usb 8-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 791.612344][T18053] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 791.614755][T20882] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4243'. [ 791.619778][T18053] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 791.623633][T18053] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.627329][T18053] usb 8-1: Product: syz [ 791.629109][T18053] usb 8-1: Manufacturer: syz [ 791.631080][T18053] usb 8-1: SerialNumber: syz [ 791.637759][T20865] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 791.841803][T20865] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 791.848107][T20896] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4248'. [ 791.861410][T18053] cdc_ncm 8-1:1.0: bind() failure [ 791.871444][T18053] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 791.873836][T18053] cdc_ncm 8-1:1.1: bind() failure [ 791.879412][T18053] usb 8-1: USB disconnect, device number 58 [ 791.934989][T20902] ci_hdrc ci_hdrc.0: error -EINVAL: invalid resource (null) [ 791.937834][T20902] ci_hdrc ci_hdrc.0: probe with driver ci_hdrc failed with error -22 [ 791.955299][T13578] usb 13-1: new high-speed USB device number 50 using dummy_hcd [ 791.959039][T20904] FAULT_INJECTION: forcing a failure. [ 791.959039][T20904] name failslab, interval 1, probability 0, space 0, times 56 [ 791.963761][T20904] CPU: 1 UID: 0 PID: 20904 Comm: syz.7.4251 Tainted: G L syzkaller #0 PREEMPT(full) [ 791.963788][T20904] Tainted: [L]=SOFTLOCKUP [ 791.963795][T20904] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 791.963805][T20904] Call Trace: [ 791.963812][T20904] [ 791.963819][T20904] dump_stack_lvl+0x100/0x190 [ 791.963846][T20904] should_fail_ex.cold+0x5/0xa [ 791.963862][T20904] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 791.963884][T20904] should_failslab+0xc2/0x120 [ 791.963909][T20904] kmem_cache_alloc_noprof+0x91/0x6a0 [ 791.963933][T20904] ? skb_clone+0x190/0x400 [ 791.963962][T20904] skb_clone+0x190/0x400 [ 791.963985][T20904] netlink_deliver_tap+0xaed/0xcc0 [ 791.964009][T20904] netlink_unicast+0x6a5/0x850 [ 791.964032][T20904] ? __pfx_netlink_unicast+0x10/0x10 [ 791.964052][T20904] ? __pfx_nf_tables_abort+0x10/0x10 [ 791.964075][T20904] netlink_ack+0x655/0xb80 [ 791.964101][T20904] nfnetlink_rcv_batch+0x1d52/0x2880 [ 791.964140][T20904] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 791.964164][T20904] ? find_held_lock+0x2b/0x80 [ 791.964188][T20904] ? __local_bh_enable_ip+0x9e/0x120 [ 791.964207][T20904] ? lockdep_hardirqs_on+0x78/0x100 [ 791.964228][T20904] ? __dev_queue_xmit+0xa12/0x4970 [ 791.964283][T20904] ? __nla_parse+0x40/0x60 [ 791.964307][T20904] nfnetlink_rcv+0x3bd/0x440 [ 791.964330][T20904] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 791.964361][T20904] netlink_unicast+0x585/0x850 [ 791.964383][T20904] ? __pfx_netlink_unicast+0x10/0x10 [ 791.964409][T20904] netlink_sendmsg+0x8b0/0xda0 [ 791.964432][T20904] ? __pfx_netlink_sendmsg+0x10/0x10 [ 791.964455][T20904] ? apparmor_socket_sendmsg+0x15b/0x270 [ 791.964484][T20904] ____sys_sendmsg+0xa4d/0xbe0 [ 791.964501][T20904] ? __pfx_netlink_sendmsg+0x10/0x10 [ 791.964522][T20904] ? __pfx_____sys_sendmsg+0x10/0x10 [ 791.964551][T20904] ___sys_sendmsg+0x190/0x1e0 [ 791.964572][T20904] ? __pfx____sys_sendmsg+0x10/0x10 [ 791.964604][T20904] ? find_held_lock+0x2b/0x80 [ 791.964641][T20904] __sys_sendmsg+0x160/0x210 [ 791.964665][T20904] ? __pfx___sys_sendmsg+0x10/0x10 [ 791.964695][T20904] ? __pfx_ksys_write+0x10/0x10 [ 791.964718][T20904] __do_fast_syscall_32+0xe7/0x970 [ 791.964740][T20904] ? lockdep_hardirqs_on+0x78/0x100 [ 791.964762][T20904] do_fast_syscall_32+0x32/0x70 [ 791.964784][T20904] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 791.964805][T20904] RIP: 0023:0xf6fcefec [ 791.964825][T20904] Code: Unable to access opcode bytes at 0xf6fcefc2. [ 791.964833][T20904] RSP: 002b:00000000f53bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 791.964850][T20904] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 791.964861][T20904] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 791.964871][T20904] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 791.964881][T20904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 791.964891][T20904] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 791.964915][T20904] [ 792.145294][T13578] usb 13-1: Using ep0 maxpacket: 8 [ 792.149359][T13578] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 792.153952][T13578] usb 13-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 792.158367][T13578] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.163911][T13578] usb 13-1: config 0 descriptor?? [ 792.385632][T13578] iowarrior 13-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 792.463077][T20927] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4260'. [ 792.611781][ T5849] usb 13-1: USB disconnect, device number 50 [ 792.676691][T20946] wg2 speed is unknown, defaulting to 1000 [ 792.688484][ T29] usb 12-1: new high-speed USB device number 91 using dummy_hcd [ 792.815213][ T29] usb 12-1: device descriptor read/64, error -71 [ 792.988413][T20960] 9pnet_virtio: no channels available for device syz [ 793.055232][ T29] usb 12-1: new high-speed USB device number 92 using dummy_hcd [ 793.059243][T20963] ieee802154 phy1 wpan1: encryption failed: -22 [ 793.185245][ T29] usb 12-1: device descriptor read/64, error -71 [ 793.209092][T20972] FAULT_INJECTION: forcing a failure. [ 793.209092][T20972] name failslab, interval 1, probability 0, space 0, times 55 [ 793.225198][T20972] CPU: 1 UID: 0 PID: 20972 Comm: syz.5.4275 Tainted: G L syzkaller #0 PREEMPT(full) [ 793.225219][T20972] Tainted: [L]=SOFTLOCKUP [ 793.225223][T20972] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 793.225230][T20972] Call Trace: [ 793.225234][T20972] [ 793.225239][T20972] dump_stack_lvl+0x100/0x190 [ 793.225258][T20972] should_fail_ex.cold+0x5/0xa [ 793.225271][T20972] should_failslab+0xc2/0x120 [ 793.225288][T20972] __kmalloc_noprof+0xfc/0x820 [ 793.225301][T20972] ? __kernel_text_address+0xd/0x30 [ 793.225320][T20972] ? unwind_get_return_address+0x59/0xa0 [ 793.225347][T20972] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 793.225367][T20972] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 793.225385][T20972] genl_family_rcv_msg_doit+0xc7/0x300 [ 793.225400][T20972] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 793.225414][T20972] ? genl_get_cmd+0x3e7/0x760 [ 793.225430][T20972] ? ____sys_sendmsg+0xa4d/0xbe0 [ 793.225441][T20972] ? ___sys_sendmsg+0x190/0x1e0 [ 793.225451][T20972] ? __radix_tree_lookup+0x217/0x2b0 [ 793.225468][T20972] genl_rcv_msg+0x560/0x800 [ 793.225483][T20972] ? __pfx_genl_rcv_msg+0x10/0x10 [ 793.225497][T20972] ? __pfx_devlink_nl_pre_doit_port+0x10/0x10 [ 793.225511][T20972] ? __pfx_devlink_nl_sb_tc_pool_bind_get_doit+0x10/0x10 [ 793.225526][T20972] ? __pfx_devlink_nl_post_doit+0x10/0x10 [ 793.225541][T20972] ? __lock_acquire+0x49f/0x1a40 [ 793.225561][T20972] netlink_rcv_skb+0x159/0x420 [ 793.225573][T20972] ? __pfx_genl_rcv_msg+0x10/0x10 [ 793.225587][T20972] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 793.225604][T20972] ? netlink_deliver_tap+0x1ae/0xcc0 [ 793.225618][T20972] genl_rcv+0x28/0x40 [ 793.225629][T20972] netlink_unicast+0x585/0x850 [ 793.225643][T20972] ? __pfx_netlink_unicast+0x10/0x10 [ 793.225659][T20972] netlink_sendmsg+0x8b0/0xda0 [ 793.225674][T20972] ? __pfx_netlink_sendmsg+0x10/0x10 [ 793.225707][T20972] ? apparmor_socket_sendmsg+0x15b/0x270 [ 793.225724][T20972] ____sys_sendmsg+0xa4d/0xbe0 [ 793.225735][T20972] ? __pfx_netlink_sendmsg+0x10/0x10 [ 793.225748][T20972] ? __pfx_____sys_sendmsg+0x10/0x10 [ 793.225765][T20972] ___sys_sendmsg+0x190/0x1e0 [ 793.225778][T20972] ? __pfx____sys_sendmsg+0x10/0x10 [ 793.225796][T20972] ? find_held_lock+0x2b/0x80 [ 793.225818][T20972] __sys_sendmsg+0x160/0x210 [ 793.225833][T20972] ? __pfx___sys_sendmsg+0x10/0x10 [ 793.225851][T20972] ? __pfx_ksys_write+0x10/0x10 [ 793.225865][T20972] __do_fast_syscall_32+0xe7/0x970 [ 793.225879][T20972] ? lockdep_hardirqs_on+0x78/0x100 [ 793.225898][T20972] do_fast_syscall_32+0x32/0x70 [ 793.225912][T20972] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 793.225927][T20972] RIP: 0023:0xf701efec [ 793.225941][T20972] Code: Unable to access opcode bytes at 0xf701efc2. [ 793.225946][T20972] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 793.225958][T20972] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000a40 [ 793.225965][T20972] RDX: 0000000000040080 RSI: 0000000000000000 RDI: 0000000000000000 [ 793.225971][T20972] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 793.225977][T20972] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 793.225984][T20972] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 793.225997][T20972] [ 793.337274][ T29] usb usb12-port1: attempt power cycle [ 793.675399][ T29] usb 12-1: new high-speed USB device number 93 using dummy_hcd [ 793.698407][ T29] usb 12-1: device descriptor read/8, error -71 [ 793.955402][ T29] usb 12-1: new high-speed USB device number 94 using dummy_hcd [ 793.976305][ T29] usb 12-1: device descriptor read/8, error -71 [ 794.095208][T13841] usb 8-1: new full-speed USB device number 59 using dummy_hcd [ 794.097939][ T29] usb usb12-port1: unable to enumerate USB device [ 794.247268][T13841] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 794.250803][T13841] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 794.255862][T13841] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 794.258745][T13841] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.261237][T13841] usb 8-1: Product: syz [ 794.262646][T13841] usb 8-1: Manufacturer: syz [ 794.264106][T13841] usb 8-1: SerialNumber: syz [ 794.267622][T20996] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4283'. [ 794.268339][T13841] usb 8-1: config 0 descriptor?? [ 794.274399][T13841] hub 8-1:0.0: bad descriptor, ignoring hub [ 794.276803][T13841] hub 8-1:0.0: probe with driver hub failed with error -5 [ 794.283381][T20996] lo speed is unknown, defaulting to 1000 [ 794.287357][T13841] input: syz syz as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input59 [ 794.297553][T20996] lo speed is unknown, defaulting to 1000 [ 794.301105][T20996] lo speed is unknown, defaulting to 1000 [ 794.478731][ T5849] lo speed is unknown, defaulting to 1000 [ 794.480896][T20996] infiniband syz0: set active [ 794.482408][T20996] infiniband syz0: added lo [ 794.494272][T20996] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 794.500245][T20996] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 794.507231][T20996] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 794.528220][T20996] RDS/IB: syz0: added [ 794.530405][T20996] smc: adding ib device syz0 with port count 1 [ 794.532825][T20996] smc: ib device syz0 port 1 has no pnetid [ 794.539830][T16218] lo speed is unknown, defaulting to 1000 [ 794.543927][T20996] lo speed is unknown, defaulting to 1000 [ 794.710496][T20996] lo speed is unknown, defaulting to 1000 [ 794.812500][T20996] lo speed is unknown, defaulting to 1000 [ 794.939725][T20996] lo speed is unknown, defaulting to 1000 [ 795.042008][T21004] ------------[ cut here ]------------ [ 795.043965][T21004] remove_proc_entry: removing non-empty directory 'irq/31', leaking at least 'pcmmio' [ 795.046938][T21004] WARNING: fs/proc/generic.c:747 at remove_proc_entry+0x4e7/0x610, CPU#2: syz.8.4285/21004 [ 795.053350][T21004] Modules linked in: [ 795.055072][T21004] CPU: 2 UID: 0 PID: 21004 Comm: syz.8.4285 Tainted: G L syzkaller #0 PREEMPT(full) [ 795.058955][T21004] Tainted: [L]=SOFTLOCKUP [ 795.060272][T21004] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 795.063405][T21004] RIP: 0010:remove_proc_entry+0x4f5/0x610 [ 795.065357][T21004] Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 c7 00 00 00 48 8d 3d b9 85 6e 0e 49 8b 95 d0 00 00 00 48 c7 c6 c0 f3 e9 8b <67> 48 0f b9 3a e9 2a fe ff ff e8 3c 0b 4f ff 48 8d 7d 18 48 b8 00 [ 795.071386][T21004] RSP: 0018:ffffc90005de7690 EFLAGS: 00010246 [ 795.071744][T20996] lo speed is unknown, defaulting to 1000 [ 795.073309][T21004] RAX: dffffc0000000000 RBX: dffffc0000000000 RCX: ffff88801430dd9c [ 795.081725][T21004] RDX: ffff88801d340adc RSI: ffffffff8be9f3c0 RDI: ffffffff912926c0 [ 795.084207][T21004] RBP: ffff88801430dd78 R08: ffff888025afe85c R09: ffffed1002861b9b [ 795.086775][T21004] R10: ffff88801430dcdb R11: 0000000000000000 R12: ffff88801430dcc0 [ 795.089174][T21004] R13: ffff88801d340a00 R14: ffff888025afe838 R15: dffffc0000000000 [ 795.091738][T21004] FS: 0000000000000000(0000) GS:ffff888096de3000(0063) knlGS:00000000f54adb40 [ 795.094481][T21004] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 795.096621][T21004] CR2: 00000000f74734fc CR3: 000000005bf42000 CR4: 0000000000352ef0 [ 795.099132][T21004] Call Trace: [ 795.100203][T21004] [ 795.101139][T21004] ? __pfx_remove_proc_entry+0x10/0x10 [ 795.102850][T21004] ? mtree_load+0x32d/0xa90 [ 795.104325][T21004] ? __pfx_mtree_load+0x10/0x10 [ 795.105937][T21004] unregister_irq_proc+0x206/0x2a0 [ 795.107590][T21004] ? __pfx_unregister_irq_proc+0x10/0x10 [ 795.109357][T21004] free_desc+0x89/0x330 [ 795.110691][T21004] ? __pfx_free_desc+0x10/0x10 [ 795.112221][T21004] ? irq_domain_free_irqs+0x420/0x5c0 [ 795.113928][T21004] irq_free_descs+0x84/0xc0 [ 795.118507][T21004] irq_domain_free_irqs+0x46a/0x5c0 [ 795.120122][T21004] msi_domain_free_locked.part.0+0x524/0x6b0 [ 795.121970][T21004] ? __pfx_msi_domain_free_locked.part.0+0x10/0x10 [ 795.123994][T21004] ? msi_get_device_domain+0x115/0x1f0 [ 795.125967][T21004] msi_domain_free_irqs_all_locked+0x11d/0x170 [ 795.127903][T21004] ? __pfx_msi_domain_free_irqs_all_locked+0x10/0x10 [ 795.129977][T21004] ? pci_msi_shutdown+0xd2/0x3f0 [ 795.131476][T21004] ? __pfx_pci_msi_shutdown+0x10/0x10 [ 795.133140][T21004] pci_msi_teardown_msi_irqs+0xb3/0xd0 [ 795.134874][T21004] pci_free_msi_irqs+0x1f/0xa0 [ 795.136447][T21004] pci_disable_msi+0xcf/0x100 [ 795.137918][T21004] pcie_portdrv_remove+0x4d/0x90 [ 795.139447][T21004] pci_device_remove+0xb2/0x1d0 [ 795.140950][T21004] ? __pfx_pci_device_remove+0x10/0x10 [ 795.142674][T21004] device_remove+0xcb/0x180 [ 795.144067][T21004] device_release_driver_internal+0x44e/0x620 [ 795.145978][T21004] unbind_store+0xf8/0x110 [ 795.147381][T21004] ? __pfx_unbind_store+0x10/0x10 [ 795.148948][T21004] drv_attr_store+0x74/0xb0 [ 795.150344][T21004] ? __pfx_drv_attr_store+0x10/0x10 [ 795.151907][T21004] sysfs_kf_write+0xf2/0x150 [ 795.153302][T21004] kernfs_fop_write_iter+0x3e0/0x5f0 [ 795.154969][T21004] ? __pfx_sysfs_kf_write+0x10/0x10 [ 795.156689][T21004] vfs_write+0x6ac/0x1050 [ 795.158015][T21004] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 795.159835][T21004] ? __pfx_vfs_write+0x10/0x10 [ 795.161257][T21004] ? find_held_lock+0x2b/0x80 [ 795.162728][T21004] ksys_write+0x12a/0x250 [ 795.164101][T21004] ? __pfx_ksys_write+0x10/0x10 [ 795.165771][T21004] __do_fast_syscall_32+0xe7/0x970 [ 795.167404][T21004] ? lockdep_hardirqs_on+0x78/0x100 [ 795.169012][T21004] do_fast_syscall_32+0x32/0x70 [ 795.170542][T21004] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 795.172658][T21004] RIP: 0023:0xf70befec [ 795.173948][T21004] Code: Unable to access opcode bytes at 0xf70befc2. [ 795.176132][T21004] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 795.178741][T21004] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000800003c0 [ 795.181101][T21004] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000 [ 795.183545][T21004] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 795.186047][T21004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 795.188435][T21004] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 795.190901][T21004] [ 795.191887][T21004] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 795.194142][T21004] CPU: 2 UID: 0 PID: 21004 Comm: syz.8.4285 Tainted: G L syzkaller #0 PREEMPT(full) [ 795.197538][T21004] Tainted: [L]=SOFTLOCKUP [ 795.198902][T21004] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 795.201979][T21004] Call Trace: [ 795.203025][T21004] [ 795.203961][T21004] dump_stack_lvl+0x100/0x190 [ 795.205464][T21004] vpanic+0x552/0x970 [ 795.206739][T21004] ? __pfx_vpanic+0x10/0x10 [ 795.208139][T21004] panic+0xd1/0xe0 [ 795.209309][T21004] ? __pfx_panic+0x10/0x10 [ 795.210698][T21004] check_panic_on_warn.cold+0x19/0x34 [ 795.212380][T21004] ? remove_proc_entry+0x4e7/0x610 [ 795.213924][T21004] __warn.cold+0x191/0x318 [ 795.215282][T21004] __report_bug+0x30f/0x440 [ 795.216670][T21004] ? remove_proc_entry+0x4e7/0x610 [ 795.218224][T21004] ? __pfx___report_bug+0x10/0x10 [ 795.219819][T21004] ? do_raw_spin_lock+0x128/0x260 [ 795.221400][T21004] ? find_held_lock+0x2b/0x80 [ 795.222864][T21004] ? proc_entry_rundown+0x158/0x1e0 [ 795.224482][T21004] ? proc_entry_rundown+0x158/0x1e0 [ 795.226066][T21004] report_bug_entry+0xe1/0x290 [ 795.227542][T21004] ? remove_proc_entry+0x4f5/0x610 [ 795.229019][T21004] handle_bug+0x1cd/0x2a0 [ 795.230307][T21004] exc_invalid_op+0x17/0x50 [ 795.231698][T21004] asm_exc_invalid_op+0x1a/0x20 [ 795.233163][T21004] RIP: 0010:remove_proc_entry+0x4f5/0x610 [ 795.234920][T21004] Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 c7 00 00 00 48 8d 3d b9 85 6e 0e 49 8b 95 d0 00 00 00 48 c7 c6 c0 f3 e9 8b <67> 48 0f b9 3a e9 2a fe ff ff e8 3c 0b 4f ff 48 8d 7d 18 48 b8 00 [ 795.240661][T21004] RSP: 0018:ffffc90005de7690 EFLAGS: 00010246 [ 795.242533][T21004] RAX: dffffc0000000000 RBX: dffffc0000000000 RCX: ffff88801430dd9c [ 795.244904][T21004] RDX: ffff88801d340adc RSI: ffffffff8be9f3c0 RDI: ffffffff912926c0 [ 795.247264][T21004] RBP: ffff88801430dd78 R08: ffff888025afe85c R09: ffffed1002861b9b [ 795.249610][T21004] R10: ffff88801430dcdb R11: 0000000000000000 R12: ffff88801430dcc0 [ 795.251985][T21004] R13: ffff88801d340a00 R14: ffff888025afe838 R15: dffffc0000000000 [ 795.254401][T21004] ? __pfx_remove_proc_entry+0x10/0x10 [ 795.256069][T21004] ? mtree_load+0x32d/0xa90 [ 795.257517][T21004] ? __pfx_mtree_load+0x10/0x10 [ 795.258992][T21004] unregister_irq_proc+0x206/0x2a0 [ 795.260564][T21004] ? __pfx_unregister_irq_proc+0x10/0x10 [ 795.262294][T21004] free_desc+0x89/0x330 [ 795.263664][T21004] ? __pfx_free_desc+0x10/0x10 [ 795.265197][T21004] ? irq_domain_free_irqs+0x420/0x5c0 [ 795.266863][T21004] irq_free_descs+0x84/0xc0 [ 795.268271][T21004] irq_domain_free_irqs+0x46a/0x5c0 [ 795.269916][T21004] msi_domain_free_locked.part.0+0x524/0x6b0 [ 795.271722][T21004] ? __pfx_msi_domain_free_locked.part.0+0x10/0x10 [ 795.273699][T21004] ? msi_get_device_domain+0x115/0x1f0 [ 795.275412][T21004] msi_domain_free_irqs_all_locked+0x11d/0x170 [ 795.277352][T21004] ? __pfx_msi_domain_free_irqs_all_locked+0x10/0x10 [ 795.279450][T21004] ? pci_msi_shutdown+0xd2/0x3f0 [ 795.280999][T21004] ? __pfx_pci_msi_shutdown+0x10/0x10 [ 795.282671][T21004] pci_msi_teardown_msi_irqs+0xb3/0xd0 [ 795.284377][T21004] pci_free_msi_irqs+0x1f/0xa0 [ 795.285861][T21004] pci_disable_msi+0xcf/0x100 [ 795.287332][T21004] pcie_portdrv_remove+0x4d/0x90 [ 795.288884][T21004] pci_device_remove+0xb2/0x1d0 [ 795.290401][T21004] ? __pfx_pci_device_remove+0x10/0x10 [ 795.292071][T21004] device_remove+0xcb/0x180 [ 795.293508][T21004] device_release_driver_internal+0x44e/0x620 [ 795.295385][T21004] unbind_store+0xf8/0x110 [ 795.296792][T21004] ? __pfx_unbind_store+0x10/0x10 [ 795.298395][T21004] drv_attr_store+0x74/0xb0 [ 795.299825][T21004] ? __pfx_drv_attr_store+0x10/0x10 [ 795.301439][T21004] sysfs_kf_write+0xf2/0x150 [ 795.302912][T21004] kernfs_fop_write_iter+0x3e0/0x5f0 [ 795.304572][T21004] ? __pfx_sysfs_kf_write+0x10/0x10 [ 795.306267][T21004] vfs_write+0x6ac/0x1050 [ 795.307603][T21004] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 795.309400][T21004] ? __pfx_vfs_write+0x10/0x10 [ 795.310941][T21004] ? find_held_lock+0x2b/0x80 [ 795.312442][T21004] ksys_write+0x12a/0x250 [ 795.313831][T21004] ? __pfx_ksys_write+0x10/0x10 [ 795.315422][T21004] __do_fast_syscall_32+0xe7/0x970 [ 795.317071][T21004] ? lockdep_hardirqs_on+0x78/0x100 [ 795.318768][T21004] do_fast_syscall_32+0x32/0x70 [ 795.320283][T21004] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 795.322205][T21004] RIP: 0023:0xf70befec [ 795.323515][T21004] Code: Unable to access opcode bytes at 0xf70befc2. [ 795.325627][T21004] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 795.328263][T21004] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000800003c0 [ 795.330800][T21004] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000 [ 795.333278][T21004] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 795.335940][T21004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 795.338763][T21004] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 795.341716][T21004] [ 795.343347][T21004] Kernel Offset: disabled [ 795.344749][T21004] Rebooting in 86400 seconds..