last executing test programs: 7m0.854044054s ago: executing program 3 (id=1004): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000007c0)='children\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r0, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xa, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0xf5, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@deltfilter={0x11ac, 0x2d, 0x400, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x2}, {0x0, 0x9}, {0x21, 0x7}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x62}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x115c, 0x2, [@TCA_BPF_POLICE={0x854, 0x2, [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x101, 0xbe, 0x0, 0x2, 0x9, 0x3, 0x101, 0x1000, 0x7fff, 0x2fe, 0xc0000000, 0xfffffffa, 0x6, 0x4, 0xfa7, 0x10000, 0xa, 0x9, 0x9, 0x8, 0x1ff64b9d, 0x6, 0xfffffffb, 0x8d0b, 0x7f9, 0x2, 0x0, 0x6d, 0x4, 0x9, 0x6, 0x8, 0x53, 0x9, 0x1, 0x0, 0x7, 0x8, 0x9, 0x800, 0x9, 0xf9, 0x9, 0x6524, 0x5, 0x48f, 0x3, 0x2, 0x6, 0x6, 0x8001, 0x0, 0x7, 0x8, 0x5, 0xd794, 0x8, 0x80, 0x7, 0x3, 0x6, 0xfff, 0x7, 0x4, 0x7b8, 0x8, 0x100, 0x3, 0x8000, 0x7ff, 0x502a, 0x80000000, 0x3, 0xb97851b, 0x5b5c, 0x57, 0x5, 0x4, 0x0, 0x3ff, 0x72a, 0x9, 0x10, 0x2, 0x0, 0xfffffff8, 0xe06, 0xe, 0x0, 0x400, 0xf, 0x8, 0x5, 0x2, 0x101, 0x5, 0x4, 0x10000, 0x5, 0x1, 0x7fffffff, 0xf059, 0x6, 0x7ff, 0x5, 0x4, 0x8, 0x6, 0x9, 0x7fffffff, 0x4, 0xdb, 0x3, 0x8001, 0x400, 0x0, 0xfffffffc, 0x80000001, 0x9, 0x7, 0x1, 0x0, 0xff, 0x7, 0xfff, 0x2, 0x0, 0xffffffff, 0x3, 0xc49, 0x3, 0x6, 0x3, 0x0, 0x7, 0x81, 0x80000000, 0x8, 0x7ff, 0x2, 0x4, 0x3, 0xaa0, 0x6, 0xe135, 0x8a, 0x2, 0x81, 0xffff, 0x5, 0x4, 0x81, 0x6, 0xb, 0x3, 0x8, 0x7fffffff, 0xe, 0x50, 0xf0, 0x2, 0x9, 0x8, 0x0, 0x1000, 0x8, 0xbf74, 0x60, 0x0, 0x10000000, 0x7fff, 0x8, 0xd, 0x2, 0x0, 0x9e, 0x800, 0x9718, 0x1, 0x88d, 0xfffffffe, 0x1, 0x777, 0x5, 0xf, 0x3, 0x4, 0x8, 0x100, 0x4, 0x1, 0x5, 0xc, 0x5, 0x5, 0xf4a, 0x8, 0x4, 0xfffff042, 0x9a, 0x1, 0xfffffff7, 0x9, 0x6, 0x2, 0xd, 0x40, 0x9, 0x2, 0x99, 0x7, 0x10000, 0x24c51a59, 0xfffffe00, 0x101, 0x2, 0x0, 0x1000, 0x607, 0x1, 0xb, 0x0, 0x7, 0x7ff, 0xe, 0x3, 0x84, 0x1, 0x987, 0x6, 0x5, 0xc, 0x3e2142, 0x9548, 0x3, 0x80, 0x10000, 0x9, 0x7fffffff, 0x3, 0x7, 0x4, 0x401, 0x6, 0x10a, 0x4, 0x8, 0xec2, 0x7, 0x2, 0x4, 0x7, 0x10001, 0x7, 0x7]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_RESULT={0x8, 0x5, 0x54b2}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffff}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x91b, 0x69e7, 0xfffffff7, 0xffffffff, 0xffff, 0x2, 0x598b2066, 0x3, 0xc4ec, 0x4, 0x1, 0x1, 0x2, 0x10000, 0x3, 0x8000, 0x7, 0x7, 0xffff7fff, 0x4, 0xffff, 0x1, 0x0, 0x0, 0x9, 0xdc94, 0x200, 0x8000, 0x200, 0x7, 0x4, 0x6, 0x9, 0x101, 0x3, 0xc7, 0x8, 0x9, 0x2, 0x241561c9, 0x7918, 0x6, 0x5, 0x2, 0xc88, 0x9, 0x955, 0x1, 0xb16, 0x1000, 0xff, 0x3, 0xff, 0x10001, 0x4, 0x6, 0x7fff, 0x4, 0x4, 0x1000, 0x2, 0x7fffffff, 0x4ede4012, 0x8, 0x1, 0x10001, 0x8, 0x8, 0x2, 0x9, 0x0, 0x5, 0x3, 0x6, 0x0, 0x401, 0x6, 0xf666, 0x1, 0x0, 0xf4, 0x9, 0xcb, 0x4, 0x7, 0xe5, 0x10000, 0x9, 0x0, 0xf, 0x7f, 0x7, 0x3, 0x8, 0x659, 0x9c, 0xfa4, 0x2, 0xa, 0x0, 0x91, 0x0, 0x5, 0x8, 0x5, 0x5, 0x9, 0x4, 0x3, 0x8, 0x100, 0x0, 0x7, 0x4, 0x6, 0x22fc000, 0x4, 0x8, 0x7fffffff, 0x8, 0x2, 0x5, 0x0, 0xa24e, 0x1, 0x5, 0x30, 0xfffffff8, 0x8, 0x7, 0x86, 0x8, 0x1, 0x0, 0x3ff, 0xfffffffc, 0x1000000, 0xa, 0x5, 0x7, 0x9, 0x40000000, 0x3, 0x85, 0xfffff0ba, 0x8, 0xe04, 0x5, 0x3, 0xbb68, 0x10, 0x8001, 0xfff, 0x10001, 0xc, 0x1, 0x5, 0x0, 0xfffffff9, 0xb1, 0x3, 0x7, 0x2, 0x7, 0x8b, 0x1, 0x2, 0x80000001, 0x6, 0x5, 0xfffff81d, 0xfffffff9, 0x8, 0x3, 0x7ff, 0xe, 0x4, 0x5, 0x1, 0x33, 0x101, 0x2, 0xe2cf, 0xffffffff, 0xffffffff, 0x2, 0x3, 0x4, 0x3da, 0x800, 0xffff40c8, 0xcb, 0x7, 0xfffffff9, 0x4, 0x5, 0x3, 0x2, 0x2, 0x80000000, 0x7, 0x1, 0x6, 0x98d7, 0x9, 0x7fff, 0x200, 0x200, 0x3ff, 0x8001, 0x8, 0x6, 0x2, 0x429f, 0x40, 0x4, 0x101, 0x0, 0x9, 0x7, 0xfffffffa, 0x8fd, 0x10, 0x3, 0xffff2baf, 0x71, 0xbda, 0xd, 0x100, 0x7, 0x4, 0x800, 0x6, 0xe, 0x1ff, 0xb, 0xffffffff, 0x80000001, 0x0, 0x7, 0xa9, 0xffff, 0x5, 0x349, 0x1, 0x7, 0x2, 0x6fca79cd, 0x7, 0x4, 0x8001, 0x4, 0x5, 0x4, 0x2]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_OPS={{0x6, 0x4, 0x6}, {0x34, 0x5, [{0x7, 0x5, 0x9, 0x4}, {0x7, 0x5, 0x28}, {0xffff, 0x6, 0x3, 0x40}, {0x7, 0x5, 0x8, 0x9}, {0xb, 0x1, 0x3, 0x1}, {0x82c, 0x8, 0x4, 0xa}]}}, @TCA_BPF_OPS={{0x6, 0x4, 0x5}, {0x2c, 0x5, [{0xa, 0x1, 0x9, 0x10001}, {0x2, 0x7a, 0x58, 0xe}, {0x6, 0x3, 0x81, 0xab}, {0x3, 0xe0, 0xbf, 0x2}, {0x3c, 0xa7, 0x8, 0x8209}]}}, @TCA_BPF_ACT={0x1a8, 0x1, [@m_ife={0xa8, 0xa, 0x0, 0x0, {{0x8}, {0x78, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x2}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x7b, 0x80000001, 0x6, 0x8, 0x4}, 0x1}}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x7fff, 0x6, 0x5}, 0x1}}, @TCA_IFE_TYPE={0x6, 0x5, 0x2}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}]}, {0xb, 0x6, "3b21cbdd23b5bf"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_csum={0xfc, 0x7, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7f, 0x0, 0xffffffffcffffffe, 0xfffffffc, 0x5}, 0x30}}]}, {0xb2, 0x6, "0cbfc09f5351ccbe57beeb874df1af56cafac2cd103a683b04f34c1a53dfaf4e48212384718dcec1396239583c1207a960bcc8601d42966baf884b2c774b00246de2244aae48209e6ff7631b0f22c78cae4ecbbc3f48c78cdf7d29221ac725689312808eb03fde792d3a9f6688adf7c1f1c7b36eed7ce09b6951d7a373152dba2dd8dfd62ea85377044a816a2d06f0edfb9f638a6e539b798bb1526d8578679e45b8fcc667ed7d05ba62091d5ddf"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_BPF_ACT={0x23c, 0x1, [@m_mirred={0xc8, 0x1a, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffa77, 0x3fe6, 0x8, 0x3, 0x80000000}, 0x2, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x1, 0xfffffffffffffffa, 0x401, 0xfffffffd}, 0x2, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x3, 0x0, 0x4, 0xc}, 0x4, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xffffffff, 0x6, 0x2, 0x7}, 0x4, r6}}]}, {0x1c, 0x6, "ba0e7f2ea6ad538bbd015ee24c0f38c5ffea77e7438c9633"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_xt={0x170, 0x13, 0x0, 0x0, {{0x7}, {0x70, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}]}, {0xd9, 0x6, "45e8d53271b2608f2f8a91ebe42c7f0df521f1a1787dc995f05bd303e43377e8bdcb2d9a4a7f46da03b24af73e8dc2d055de672fbfdd1ceb905048f69fa582282183338a55d9c33501f14f9d0a8d803aabbc46806e863699f9b8d0c19152891a1c915a66bcf679b5ff0a39739db135ccd7a11db7433207bb380f8d6df210b074af9cf6b432862ad5c4e504f1cd627b1ba4cdc08fee9c729d2c80df44570fd9abd5329c9329342726523586bf25657f2dc356bd7235eaab01b4e55b97f44662b7c4ff7948d90296b0a803b1038f51e90d274e34c038"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5, 0x2}}}}]}, @TCA_BPF_POLICE={0x4a4, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0xc, 0x0, 0x3, 0x34bc, 0x7, {0x6, 0x0, 0x3, 0x8, 0xb, 0x9}, {0x80, 0x2, 0x401, 0x5}, 0xd, 0x2, 0x6}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x762, 0x0, 0x6045, 0x8, 0xfff, {0xdf, 0x1, 0xe, 0x2, 0x4, 0x1}, {0x6, 0x0, 0xfff8, 0x2, 0xe, 0x3}, 0x6, 0x72fb, 0xffff}}, @TCA_POLICE_RATE={0x404, 0x2, [0x10001, 0x5, 0x8, 0x80, 0x8, 0x2, 0x3, 0x2040000, 0x9, 0xf, 0xfffffe02, 0x4, 0x4, 0x2, 0xa, 0x2, 0x5, 0x8, 0x1, 0xd0ce, 0x41f, 0x7, 0x7, 0x0, 0x9, 0x8000, 0x3, 0x3, 0x3, 0x1, 0x3, 0x5, 0x1, 0x2, 0x6, 0x830, 0x1, 0x9, 0x1, 0x8cc, 0x7, 0x7f, 0x1, 0x7fff, 0x7, 0x7fff, 0x464, 0xfffffff8, 0x9, 0x80, 0x5, 0x7f, 0x5, 0x5, 0xd, 0x2, 0xceea, 0x0, 0x3, 0x2, 0x2, 0xd2a, 0xb1, 0x3, 0x91, 0x9, 0x4, 0x6, 0x2, 0x2, 0x3, 0x9, 0x6, 0x2, 0x6, 0x7, 0x2, 0x9, 0x3ff, 0xcc62, 0x18, 0x3, 0x7ff, 0x8, 0x0, 0xe9f, 0x9, 0x4, 0x5, 0x5, 0x6b, 0x5, 0x6, 0x3, 0xfff, 0x5, 0x4, 0x4, 0x3, 0x6, 0x800, 0x0, 0x3, 0x401, 0x9, 0x1, 0xe, 0x40000000, 0x5, 0x1, 0x9, 0x2f49, 0x8001, 0xc, 0x1, 0x3, 0x1f5, 0x8, 0x6, 0x4, 0x3, 0x9, 0x4841, 0x6, 0x67e, 0x5, 0xe8f2, 0x7, 0x3, 0x78, 0x1, 0x80000001, 0xbe, 0x1f5, 0x40, 0x4, 0x6, 0x3ff, 0x2, 0x7ff, 0x9, 0x0, 0x4, 0x4, 0x9, 0x8, 0x0, 0x7fffffff, 0x80000001, 0x2, 0x4, 0xff, 0xc, 0x2, 0x3, 0xffffffc0, 0xa, 0x0, 0x5, 0x4, 0x1, 0x1e14, 0x0, 0x9, 0x4, 0x7f, 0xf, 0x4, 0x4e, 0x3, 0xcb01, 0x0, 0x0, 0x7fffffff, 0x3, 0x8, 0x80, 0x5, 0x2, 0x0, 0xffffffff, 0xff, 0x0, 0x7fff, 0x0, 0x6, 0x4, 0x0, 0xffffffff, 0x2, 0x3ff, 0x80000001, 0x8000000, 0x3, 0x2, 0x81, 0x8, 0x0, 0xffff7fff, 0x5, 0x4, 0x8, 0x200, 0x7f, 0x0, 0x1, 0x6, 0x0, 0xf, 0x3, 0xf4, 0x4, 0x2, 0x5, 0x7, 0x2000000, 0x100, 0x7, 0xffff, 0x3a2, 0x5, 0x8487, 0x4, 0x1, 0x5, 0x48, 0x80, 0x7f, 0x9, 0x9, 0x2, 0xff, 0x3, 0x9, 0x9, 0x9, 0x2, 0x9, 0xb, 0xc0000000, 0x0, 0x1000, 0x7f, 0x2, 0x9, 0x4, 0x2, 0xb, 0xfffffe00, 0x80000001, 0x6, 0x1, 0x0, 0x1, 0x2, 0x2]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}]}]}}]}, 0x11ac}, 0x1, 0x0, 0x0, 0x2000c040}, 0x20080000) sendmsg$nl_route_sched(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56f41, 0x1070b924, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffe0, 0xb}, {0x9, 0xd}}}, 0x24}}, 0x4008800) r7 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x10, 0x464, 0x800, 0x70bd28, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0xc010}, 0x80) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/121, 0x79}], 0x1, 0x8000004, 0x0) 7m0.66393321s ago: executing program 3 (id=1005): io_uring_setup(0x7d98, &(0x7f00000003c0)={0x0, 0xdf07, 0x4, 0x3}) r0 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) mknodat(0xffffffffffffff9c, 0x0, 0x21c0, 0x103) mount$fuse(0x0, 0x0, &(0x7f0000000080), 0x20000, &(0x7f0000000b00)=ANY=[]) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) getsockname$netrom(0xffffffffffffffff, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r2, &(0x7f0000001800)=[{{0x0, 0x0, 0x0}, 0x669db774}, {{0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0xc316}], 0x2, 0x1832b, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r2, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) r3 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x40000, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000f80)=[{&(0x7f0000001840)=""/4096, 0x1000}], 0x1) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x200100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f0000000140)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0xff7f000000000000, 0x0) r4 = io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0x64b5, 0x10000, 0x3, 0x5}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000280)=[{0x0}], 0x1) syz_clone3(&(0x7f0000000000)={0x285002400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x46) 6m59.734015609s ago: executing program 3 (id=1009): getpid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) r3 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000300)={r4}) close_range(r0, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r5 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) preadv(r5, &(0x7f0000000c00)=[{&(0x7f0000000740)=""/121, 0x79}], 0x1, 0x80000000, 0x4) 6m59.0332446s ago: executing program 3 (id=1014): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000280)='./file0\x00', 0x0, 0x97801, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x112) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400a82, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0884113, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8080, 0x0) r2 = userfaultfd(0x80801) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x38) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000140)={0x1fd, 0x0, 0x25000, 0x1000, &(0x7f0000ee4000/0x1000)=nil}) timer_create(0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) timer_settime(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000001, 0x5d031, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x2, 0x0, &(0x7f00000001c0)) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x7, 0x800000000000008a}, 0x0) r6 = creat(0x0, 0x1) read(0xffffffffffffffff, 0x0, 0x0) writev(r6, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYRESOCT=r5, @ANYRESOCT=r4], 0x14}}, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, 0x0, 0x24000cc4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x30, 0x0, @void}, 0x40) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x5, 0x0, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) 6m58.872929686s ago: executing program 3 (id=1015): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280), 0x6) io_setup(0x8, &(0x7f00000002c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000000)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000000440)="f9ff0000", 0x178}]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x201, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r4], 0x40}}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) close(0x4) r7 = socket$inet6(0xa, 0x1, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000480)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0xc}, {}, 0x0, 0x0, 0x1}, {{@in6=@private0, 0x0, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x4}}, 0xe4) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) socket$key(0xf, 0x3, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) 6m58.623427961s ago: executing program 3 (id=1018): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) userfaultfd(0x1) sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x50, 0x30, 0x400, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0xff03}]}, {0x4}, {0xc, 0x5}, {0xc, 0x9, {0x4c, 0x3}}}}]}]}, 0x50}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001739e6108d90f2c006b060102030109021b000107d445000904"], 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 6m58.545371669s ago: executing program 32 (id=1018): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) userfaultfd(0x1) sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x50, 0x30, 0x400, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0xff03}]}, {0x4}, {0xc, 0x5}, {0xc, 0x9, {0x4c, 0x3}}}}]}]}, 0x50}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001739e6108d90f2c006b060102030109021b000107d445000904"], 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 4m39.858561538s ago: executing program 1 (id=1692): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b85000000ae000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x90) get_mempolicy(0x0, 0x0, 0xdf8, &(0x7f0000ff9000/0x1000)=nil, 0x2) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0xe000, 0x11f) openat(r2, &(0x7f0000000240)='./file0\x00', 0x430800, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x6000}}) write$FUSE_NOTIFY_DELETE(r3, &(0x7f0000000080)={0x2a, 0x6, 0x0, {0x1, 0x200000000004, 0x1, 0x2, '\x00', 0x8}}, 0x2a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r4, 0xc00c620f, &(0x7f00000000c0)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x1e, 0x4, 0x3cc, 0x1e0, 0x2ec, 0x1e0, 0x2ec, 0x2ec, 0x2ec, 0x4, 0x0, {[{{@arp={@dev={0xac, 0x14, 0x14, 0x18}, @empty, 0xffffff00, 0xff000000, 0x6, 0x0, {@empty, {[0xff, 0x0, 0xff, 0xff, 0xff, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x3, 0x2, 0x400, 0x7, 0x5, 0x6, 'dummy0\x00', 'rose0\x00', {0xff}, {0xff}, 0x0, 0x20}, 0xbc, 0xfc}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "717cce7f5d7a0900000000d126aeeb61ad00"}}, {{@arp={@broadcast, @local, 0xff000000, 0xffffff00, 0xd, 0x4, {@mac=@local, {[0xff, 0xff, 0x0, 0xff, 0x0, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, {[0xff, 0xff, 0x0, 0xff]}}, 0x5, 0x8, 0x6, 0x0, 0xe, 0x5, 'veth0\x00', 'pim6reg0\x00', {0xff}, {}, 0x0, 0x2}, 0xbc, 0xe4}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x4, 0x7fff}}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @mac=@local, @remote, @remote, 0x1}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x418) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=ANY=[@ANYBLOB="84000000100003042abd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="b4a5af884000000006000000000000006261746164760000a7ff02800d0001004241544d414e5f49560000000d0001004241544d414e5f49560000000c65c06366e653235c7877b50001004241544d414e5f560d0001004241544d414e5f49560000000c0001004241544d41aa921237c6136e59fbffa5e45d06f28edb7ce0c2624538f6042eaca34ff4ad3adb5d3f45eaa976829bd65cfc942bc51e8420283b40b9604aa82174ae70d2f40637c71e47177674be238ad3e4102c3429ef0a09f28d364fc75451b5c21abf3b3db902fe48447faa5a3dc89feb88e1a6a91f9b645f210ebef402"], 0x84}}, 0x0) 4m39.712574774s ago: executing program 1 (id=1694): syz_emit_ethernet(0x46, &(0x7f00000001c0)=ANY=[@ANYBLOB="0180c2000000ece65fbcee5586dd6001010000101100fe8000000000000000000000000000bbfe8000000000000000000010000000aa00030e2200109078020300000000000010623870daf60810c77b2f0ba7025e0000000048e6d8285b8c1256aa030000000000000000"], 0x0) socket$inet6(0xa, 0x3, 0x3c) r0 = socket$inet6(0xa, 0x80001, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r1, 0x58, &(0x7f0000000000)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={r2, 0xf237, 0x8}, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x40000000, 0x1000, 0x6, 0x0, 0x0, 0x8000002, 0x0, 0x7e150a0b, 0x0, 0x80005, 0x0, 0x0, 0x4, 0x4, 0x0, 0x100000, 0x0, 0x43, 0x0, 0x974, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x10000, 0x5d2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7fffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1007, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1000000, 0x40000000, 0x3, 0x3, 0x6, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xd, 0x7fff, 0x7, 0x2, 0x9, 0x0, 0x3, 0x7, 0xfbfffffd, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x4fd, 0x2000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x7e98263b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x10000000, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2d3, 0x0, 0x0, 0xb2e, 0x0, 0xfffffffe, 0x0, 0x3, 0x0, 0xff, 0x1000, 0x0, 0x0, 0x0, 0x7, 0xfffffffe, 0x400006, 0xc3f3, 0x2, 0x10000, 0x800, 0x9, 0x800, 0x0, 0x8, 0xe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x8001, 0x0, 0xfffffffd, 0x0, 0x0, 0xd819ac9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x1, 0x0, 0x80000001, 0x0, 0x10, 0x20, 0x4, 0x400000b2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x8, 0x0, 0x400, 0x1000, 0x100, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x3, 0x1, 0x1, 0xfffffffe, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x4, 0x0, 0x0, 0x20000041, 0xffffffff, 0x400, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x80, 0x0, 0x0, 0x8000, 0x1ff, 0x20, 0xa59]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0xfffe, 0x0, 0xc0000001}, {0x3, 0x0, 0xf, 0x0, 0x1, 0xffffffff}, 0x7, 0x10, 0x2000000}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x40000000, 0x1000, 0x6, 0x0, 0x0, 0x8000002, 0x0, 0x7e150a0b, 0x0, 0x80005, 0x0, 0x0, 0x4, 0x4, 0x0, 0x100000, 0x0, 0x43, 0x0, 0x974, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x10000, 0x5d2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7fffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1007, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1000000, 0x40000000, 0x3, 0x3, 0x6, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xd, 0x7fff, 0x7, 0x2, 0x9, 0x0, 0x3, 0x7, 0xfbfffffd, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x4fd, 0x2000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x7e98263b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x10000000, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2d3, 0x0, 0x0, 0xb2e, 0x0, 0xfffffffe, 0x0, 0x3, 0x0, 0xff, 0x1000, 0x0, 0x0, 0x0, 0x7, 0xfffffffe, 0x400006, 0xc3f3, 0x2, 0x10000, 0x800, 0x9, 0x800, 0x0, 0x8, 0xe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x8001, 0x0, 0xfffffffd, 0x0, 0x0, 0xd819ac9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x1, 0x0, 0x80000001, 0x0, 0x10, 0x20, 0x4, 0x400000b2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x8, 0x0, 0x400, 0x1000, 0x100, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x3, 0x1, 0x1, 0xfffffffe, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x4, 0x0, 0x0, 0x20000041, 0xffffffff, 0x400, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x80, 0x0, 0x0, 0x8000, 0x1ff, 0x20, 0xa59]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0xfffe, 0x0, 0xc0000001}, {0x3, 0x0, 0xf, 0x0, 0x1, 0xffffffff}, 0x7, 0x10, 0x2000000}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0xfffe, 0x0, @mcast1}}}, 0x88) (async) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0xfffe, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000900)={0x1, {{0xa, 0x3, 0x0, @mcast1}}, 0x0, 0x3, [{{0xa, 0x4e23, 0x5b2, @local, 0x3}}, {{0xa, 0x4e22, 0x0, @local, 0x5}}, {{0xa, 0x4e20, 0x5, @private1, 0x2}}]}, 0x210) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x10}) r4 = syz_open_procfs(0x0, &(0x7f0000000480)='pagemap\x00') preadv(r4, &(0x7f0000000640)=[{&(0x7f0000000b00)=""/152, 0x98}, {&(0x7f0000000500)=""/189, 0x7fffef68}], 0x2, 0x300100, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040e0a0f0d04"], 0xd) 4m39.632826684s ago: executing program 1 (id=1695): io_setup(0x203, &(0x7f0000000140)=0x0) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x8000, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0xa, 0x2, 0x2, "953a23d0cbfbe9ce00eafd00", 0x384c4150}) io_destroy(r0) io_setup(0x202, &(0x7f0000000200)) io_submit(r0, 0x0, 0x0) io_setup(0x203, &(0x7f0000000140)) (async) syz_open_dev$vim2m(&(0x7f00000000c0), 0x8000, 0x2) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0xa, 0x2, 0x2, "953a23d0cbfbe9ce00eafd00", 0x384c4150}) (async) io_destroy(r0) (async) io_setup(0x202, &(0x7f0000000200)) (async) io_submit(r0, 0x0, 0x0) (async) 4m39.362166915s ago: executing program 1 (id=1697): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000006180)="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", 0x2000, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x101, {0x5, 0x2, 0x0, 0xfffffffffffffffd, 0x4, 0x3a1b, {0x40, 0x3, 0xa, 0x10000, 0x1001, 0x7, 0x800, 0x81, 0x120, 0x2000, 0x0, r2, 0x0, 0x440, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f00000002c0)={0x1, 0x7}) 4m38.497911046s ago: executing program 1 (id=1701): openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0x541b, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=@newtaction={0x194, 0x30, 0x2, 0x0, 0x0, {}, [{0x180, 0x1, [@m_skbedit={0x134, 0x7, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x4}, @TCA_SKBEDIT_MARK={0xfffffffffffffde4, 0x5, 0xad}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x2}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x1}]}, {0xde, 0x6, "3e38dd281eea30cce52ea775f3de66e3a529e50157e02c4907d781421f4c2f749c447a16ed56a7c39370d841d35ccdc0ca74199dc3affc641fac98826c445ab7dbb852e12d04d13ff4398deb870570dfb1aba7c846ced1174ae8b735299f0c6d9505ec3532bcaf61151c8e6a2a52eff1e1874ee28a03a843b07ce21f742133123292e065a23f2b1959cf392728d6dbb0315d8ebe3aaf6a48a37c997b72a20f53ecf91570a6e9f58a19de507ca0f128b91fb61fd2f959ccc32d865109a535e48cb4576f204ae1712cc0714d7ca0d5c953f0071de8b65de40b84cc"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c01000010000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb0000fff720000001000000003b000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="02000000"], 0x14c}}, 0x4810) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r5, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r7 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r7, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)="9f", 0x1}], 0x1}, 0x4cbe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000095ea8b18f8893300000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff8}, 0x94) r8 = socket$packet(0x11, 0x3, 0x300) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) recvmmsg(r8, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) openat$ubi_ctrl(0xffffff9c, &(0x7f0000000340), 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x39}, 0x0, 0x1, 0x0, 0x4}, 0x0) 4m36.531278347s ago: executing program 1 (id=1710): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC=0x0], 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x4000021, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000000)=0x0) (async) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r3, &(0x7f00000005c0)=[{&(0x7f0000000a40)="89", 0x1}], 0x1) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_INSN(r4, 0x8020640c, &(0x7f0000000040)={0xc000002, 0x0, 0x0, 0x3, 0x5}) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async, rerun: 32) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = dup(r5) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r7, &(0x7f0000000240)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r7, 0x0) (async) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) (async) recvmsg$qrtr(0xffffffffffffffff, 0x0, 0x0, 0x2000) r8 = openat$comedi(0xffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, &(0x7f0000000300)={'dt2817\x00', [0xffffffff, 0x5, 0xffd3, 0x7, 0x2d6, 0x6, 0x20000004, 0x4, 0xffe, 0x800, 0xc, 0x1001, 0x9, 0x80000000, 0x0, 0x6, 0x8, 0x40000009, 0x830, 0x30000, 0xf9, 0x2, 0x800, 0xe2db, 0x2, 0xd, 0x7, 0x1, 0x4, 0x5, 0xffff]}) (async, rerun: 32) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x44, 0xf, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}}, 0x0) (rerun: 32) close_range(r1, 0xffffffffffffffff, 0x0) (async, rerun: 32) timer_delete(r2) (rerun: 32) 4m32.982395584s ago: executing program 0 (id=1732): r0 = openat$vimc2(0xffffff9c, &(0x7f0000001900), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000001940)={0x3, 0x1, 0x4}) (fail_nth: 5) 4m32.832599989s ago: executing program 0 (id=1733): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x106e) 4m32.69277657s ago: executing program 0 (id=1735): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 64) r2 = fsopen(&(0x7f0000000200)='affs\x00', 0x1) (rerun: 64) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(:2', 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r3 = getpid() (async, rerun: 64) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (rerun: 64) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x21, &(0x7f0000000040)=0x2, 0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f0000000300), 0x0, 0x2, 0x0) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) getsockopt$IP_VS_SO_GET_INFO(r4, 0x0, 0x481, &(0x7f0000000100), &(0x7f0000000280)=0xc) (async, rerun: 32) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) (async, rerun: 64) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (rerun: 64) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async, rerun: 64) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) (rerun: 64) getdents64(r7, &(0x7f0000000400)=""/4096, 0x1000) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x8800) 4m32.432639018s ago: executing program 0 (id=1736): socket(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004e80)=@setlink={0x44, 0x13, 0x1, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2006, 0x300}, [@IFLA_AF_SPEC={0x24, 0x1a, 0x0, 0x1, [@AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_ADDR_GEN_MODE={0x5}]}]}]}, 0x44}}, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', 0x0, 0x8c, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000080)=0x40000) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a14fc29", 0xb) mount$9p_virtio(&(0x7f00000000c0), &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000280), 0x10, &(0x7f0000000300)={'trans=virtio,', {[], [{@appraise_type}, {@subj_role={'subj_role', 0x3d, '\x00'}}]}}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r6, 0x400454ce, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x42200, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'sit0\x00', 0x7101}) accept4(r5, 0x0, 0x0, 0x800) 4m30.243270734s ago: executing program 0 (id=1742): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) lstat(&(0x7f0000000000)='./file0\x00', 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) pwritev(r0, &(0x7f0000000880)=[{&(0x7f00000007c0)="2517", 0x2}], 0x1, 0x0, 0x0) gettid() chdir(&(0x7f0000000100)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) fcntl$lock(r1, 0x24, &(0x7f0000000040)={0x1}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x440, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f00002b2000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000080)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f866c4f80cb8c85f54802ec7442400fe2700000044240200fd0000c7442406000000000f01142466bafc0cc4c2adac170f320f2e2d00000080b9800000c00f32350080000067f20f1afe", 0x63}], 0x1, 0x4a, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r5) sendmsg$NFC_CMD_DEP_LINK_UP(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="0100f2ffffffca08000000cdae90"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r5) ioctl$KVM_SET_GUEST_DEBUG_x86(r0, 0x4048ae9b, &(0x7f0000000b80)={0xe0003, 0x0, {[0x3, 0x1f8, 0x92, 0x57a, 0x2, 0x80000000, 0x9, 0x4]}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r7 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) execveat(r7, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x9) 4m29.73896696s ago: executing program 0 (id=1743): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001180)=@newqdisc={0x138, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}, 0x1, 0x0, 0x0, 0x240400d0}, 0x24008004) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) listen(r2, 0x0) (async) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001180)=@newqdisc={0x138, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}, 0x1, 0x0, 0x0, 0x240400d0}, 0x24008004) (async) 4m21.450201313s ago: executing program 33 (id=1710): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC=0x0], 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x4000021, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000000)=0x0) (async) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r3, &(0x7f00000005c0)=[{&(0x7f0000000a40)="89", 0x1}], 0x1) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_INSN(r4, 0x8020640c, &(0x7f0000000040)={0xc000002, 0x0, 0x0, 0x3, 0x5}) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async, rerun: 32) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = dup(r5) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r7, &(0x7f0000000240)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r7, 0x0) (async) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) (async) recvmsg$qrtr(0xffffffffffffffff, 0x0, 0x0, 0x2000) r8 = openat$comedi(0xffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, &(0x7f0000000300)={'dt2817\x00', [0xffffffff, 0x5, 0xffd3, 0x7, 0x2d6, 0x6, 0x20000004, 0x4, 0xffe, 0x800, 0xc, 0x1001, 0x9, 0x80000000, 0x0, 0x6, 0x8, 0x40000009, 0x830, 0x30000, 0xf9, 0x2, 0x800, 0xe2db, 0x2, 0xd, 0x7, 0x1, 0x4, 0x5, 0xffff]}) (async, rerun: 32) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x44, 0xf, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}}, 0x0) (rerun: 32) close_range(r1, 0xffffffffffffffff, 0x0) (async, rerun: 32) timer_delete(r2) (rerun: 32) 4m14.52444342s ago: executing program 34 (id=1743): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001180)=@newqdisc={0x138, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}, 0x1, 0x0, 0x0, 0x240400d0}, 0x24008004) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) listen(r2, 0x0) (async) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001180)=@newqdisc={0x138, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}, 0x1, 0x0, 0x0, 0x240400d0}, 0x24008004) (async) 5.700396207s ago: executing program 2 (id=2990): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x3, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xfffffffffffffd63}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e24}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008030}, 0x2000000) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) sendto$inet6(r4, &(0x7f0000000280)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r7, 0xc008aec1, &(0x7f0000000140)=@arm64={0x8, 0x80, 0x0, '\x00', 0x5c8d}) r8 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) r9 = socket$pptp(0x18, 0x1, 0x2) setsockopt(r9, 0xfffffffe, 0xcc, &(0x7f0000000300)="ba5746bd702db8369f1f11ade7825c538cb388fc610c81b9e258b4488467a87c9bb994cad512338699559fca99d923c5c5a7a5aaf42c47f32b39512fbff612ed9969e2743f9743096107760cee138deadc419e09566f22048770a1e7d55231481eb32653e1f317a97cbb85c5cd49aa11743600bd32fffe6ded0fbd2b844bebdaad5a74a089197db584872a07579cd0dc398701d8ae6ec11f", 0x98) ioctl$I2C_SMBUS(r8, 0x720, &(0x7f0000000000)={0x0, 0x0, 0x3, &(0x7f00000000c0)={0x19, "90f50180e64f61909103f1fbbc2b81c9f144d76e44c700100000e52829e7cb8393"}}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r11, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010025bd700a00000000000000001c000180060001000a00000008000800cf7100000600010065cbb4ae"], 0x30}}, 0x48040) 5.496512092s ago: executing program 4 (id=2991): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r1 = dup(r0) r2 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x9a52, 0x0, 0x3}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r1, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r2, 0x47f5, 0x0, 0x0, 0x0, 0x0) (fail_nth: 90) 5.318875826s ago: executing program 4 (id=2992): io_uring_setup(0x7d98, &(0x7f00000003c0)={0x0, 0xdf07, 0x4, 0x3}) r0 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) mknodat(0xffffffffffffff9c, 0x0, 0x21c0, 0x103) mount$fuse(0x0, 0x0, &(0x7f0000000080), 0x20000, &(0x7f0000000b00)=ANY=[]) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) getsockname$netrom(0xffffffffffffffff, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r2, &(0x7f0000001800)=[{{0x0, 0x0, 0x0}, 0x669db774}, {{0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0xc316}], 0x2, 0x1832b, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r2, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) r3 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x40000, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000f80)=[{&(0x7f0000001840)=""/4096, 0x1000}], 0x1) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x20000000, 0x200100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f0000000140)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0xff7f000000000000, 0x0) r4 = io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0x64b5, 0x10000, 0x3, 0x5}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000280)=[{&(0x7f0000000240)=""/16, 0x10}], 0x1) syz_clone3(&(0x7f0000000000)={0x285002400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x46) 5.190315904s ago: executing program 6 (id=2993): socket$netlink(0x10, 0x3, 0xf) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x21, 0x2, 0x10000000000002) sendmmsg(r0, &(0x7f0000007840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="10000000100100"], 0x10, 0xe000}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000006e00)=ANY=[@ANYBLOB="0c00008c58f325a37754e65782a8fd9ac1310011"], 0x18}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000073c0)}}], 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) personality(0xbe4e602dc9e6c1d3) uname(&(0x7f0000000040)=""/138) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket(0x28, 0x2, 0x1) r3 = syz_io_uring_setup(0x332e, &(0x7f0000000480)={0x0, 0xaeb7, 0x40, 0x3, 0x2d9}, &(0x7f00000001c0), 0x0) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r3, 0x1e, &(0x7f0000000500)={r2}, 0x1) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, 0x0, 0x0) connect$pppoe(r2, &(0x7f0000000280)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'gre0\x00'}}, 0x1e) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x2c, r5, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x2c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x20, r5, 0xe27, 0x70bd28, 0x0, {0x4, 0x7, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x20}, 0x1, 0x40030000000000}, 0x4000) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x1e3003, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e22, @remote}, 0x10, 0x0}}], 0x1, 0x4000000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000013c0)=ANY=[@ANYRES64=r2, @ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="254e3ff30ba86a3ce4bef53b15ccef3b69b9af0cada38035e4b7aa48aaf583411be2fc2a4ccfcd1ab1553680c02e11a3df9b"], 0x50) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000000180)='squashfs\x00', 0x1000080, 0x0) 4.679680406s ago: executing program 2 (id=2996): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000200)={0x50, 0x0, r3, {0x7, 0x1f, 0xffffc000, 0x8004}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1a5401, 0x0) dup3(r4, r0, 0x0) r5 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x40000) io_uring_enter(r5, 0x6e13, 0xd0aa, 0x8, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x351a, 0x100, 0x0, 0x0, 0x0) 4.679463583s ago: executing program 5 (id=2997): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) (async, rerun: 32) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='mpol=prefer=rele:0']) (async, rerun: 32) mount(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000180)='ecryptfs\x00', 0x2a00000, 0x0) 4.233030319s ago: executing program 4 (id=2998): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x11) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r1 = openat$ttyS3(0xffffff9c, 0x0, 0x131040, 0x0) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000300)=""/120) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) 4.171638766s ago: executing program 5 (id=2999): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, 0x0, 0x90) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_GET_COMMAND_Q(r2, 0x2270, &(0x7f0000000900)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x348, 0x1d0, 0x43, 0xa0, 0x1d0, 0x98, 0x2f8, 0x178, 0x178, 0x2f8, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'geneve1\x00'}, 0x12a, 0x168, 0x188, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x128, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c206000000116d00"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3a8) socket(0x10, 0x3, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) read$alg(r4, &(0x7f00000012c0)=""/4109, 0x100d) sendmsg$alg(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000940)="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", 0x1ab}, {&(0x7f0000003240)="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", 0xe63}], 0x2, 0x0, 0x0, 0x8801}, 0x4000001) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$pppoe(0x18, 0x1, 0x0) symlinkat(&(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r6, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x2}}, './file0\x00'}) connect$pppoe(r5, &(0x7f0000000400)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'macvlan0\x00'}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f00000019c0)={0x12, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000300919aa46a4cad22592da0cd0000000000000000", @ANYRESDEC=r7], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x70, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r8, &(0x7f00000002c0)={0x27, 0x0, 0x0, 0x3, 0x8, 0x4, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x58) getsockopt$inet_buf(r8, 0x118, 0x0, 0x0, &(0x7f00000003c0)=0x14) connect$pppoe(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8401) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x800, 0x5, 0xc, 0xfffffffffffffffd, 0x59c, 0xffffffffffffffff}) ioctl$SG_BLKTRACETEARDOWN(r9, 0x1276, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007a00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0x94) 4.029331868s ago: executing program 6 (id=3000): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)=0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x80000007, 0x1}, 0x1c) r3 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad7, 0x10000, 0x3}, &(0x7f0000000040), &(0x7f0000000280)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000440)={{0x1, 0x1, 0x18, r2, {r3}}, './file0\x00'}) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000080)=[{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5c31ece9ead3459baa5eef2d2c049ac6e53c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93769b", 0x74}, {&(0x7f0000000280)="4a75181b93b02be6d97301eec9f9cb02594eadddd02a1e6125743cea5c1f8a11f6dc7e685f1e7039f47c373cfcf44875755ab8aae7d8f87c99804bdb3fb4cec68380b047d91a49e8f07e22d14c542a93bf36ed2edcae0ee2f04ef05a7021768d9194adf23aeb3dac1ddc43c9f13dc1fb7fbc08703dac3b7b69c4ce709665ca7cfc52c24630b019d0b508de248266a5d69186f0c66df0123340226f0373cd6527456ef0084c5b1706b1c1a0dd9a36baa098f69e5c89d2fdf255cb69f98707ec8f8e5af1c1ae16727185c8f5afceff7358f2f97bb625155b5407931d41d5172f9148de487ef8b5088fb6", 0xe9}, {&(0x7f0000000480)="a64686f5d20ed53bebb987b3c9d80676f2727306577de8de0018179e2c2af19e30dbd8761fe0328c5eeb1f13701c750d3c3ea2dab8aa5c8f59606f672b19df06b68bb47021d3509749103e06d2ce0ca3c44aa88a190934c551266fe1b8800a78bf08a4b09752c2bb0ddbf62ceb62af635eaa921d4e6099cb254394660bf42f1f8f18a6f6f6812ad3a8f4d0e6a1cb35aa401ca9d5383b2620bfdb55103c4c875cca599ef6f9b420477fdc5379b3bafb50e398e9a6cd144abb5a5aae2a673efb38af7f32e50b2cefca3415c408f25d8568fb", 0xd1}, {&(0x7f00000012c0)="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", 0xb60}, {&(0x7f0000000600)="40f6aade9ec13857cff51d064b25b67cbfb11621dc966138d873ceaddc42849e86bb0fd15dbfcc19f10b67cec0ec1e070a1e48ae51d6d054436112eb6510158f3bb28c2eeb2ecff3bb0eb8ce6462172b141a87741df2b548428fc0eeda7821a08216a5d72f6f5f5dc5c46ee2600a7cda7727ae727847fe50f38a730ce059c21562e52b096b2c70407eb1c8da2e367c196c699631bd826374541b92c9f7271a0bf7f989af30442af1239be9e37336b5268412d88617", 0xb5}, {&(0x7f00000006c0)="3026a191beb6f7f411acb15e8e520a76ebb70eb5645aaad287c9706991f372f3daffe00b55e757883d132675d69ba72f3571572b93c28f154cd16860cc8ced04a73d44835b1a126bac132637be3bf2719275d7e108708e06c246269da6608e99737a60fdff246042498d204e950013e16a6af601399b66b8162b3ead081ece24408bfcad572c3b70dd03182cea0cd0c94ce02824bb38f951a32706e55d290c7a7f71fb0105d90764c604ffc910643df0dbbbe3", 0xb3}, {&(0x7f0000000840)="56a5ab4f9880db4e69c30f62048ea4819a7b1eaacc9d7a4aca18a3788d1f982bcb720d869122e88a31eff7fb7f16", 0x2e}], 0x8, 0x0, 0x0, 0x4000080}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) close(r3) io_uring_enter(r3, 0x1f85, 0x40110a, 0x4d, 0x0, 0xa6) recvmmsg$unix(r2, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000005c0)=""/227, 0xe3}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/156, 0x9c}], 0x1}}], 0x2, 0x40000000, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r8 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r8, 0xc0d05640, &(0x7f0000000500)={0xa, @sliced={0x0, [0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x3]}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) 3.940344911s ago: executing program 5 (id=3001): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() (async) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) (async) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r3, &(0x7f0000000980)={0x2020}, 0x2020) (async) read$FUSE(r3, &(0x7f0000000980)={0x2020}, 0x2020) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0xd, 0x5, &(0x7f00000003c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtfilter={0x24, 0x11, 0xd27, 0x2000, 0x0, {0x0, 0x0, 0x74, r5, {0xa}, {0xafabc05531515610, 0xfff3}, {0x9, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x20008004) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000001000010400000100000000000000000067164f96216ebbf49684613aa8a5f38efc307fe03993d69585dd9ac14b341003c22bcc7afbb901990ed6e711d0cb09e12b9e1d0277527582ea3ffa4b1044b9301fb6e64c7cc66dd6a2dd", @ANYRES32=r5], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'macvlan0\x00'}) socket$netlink(0x10, 0x3, 0x0) openat$sysfs(0xffffff9c, &(0x7f0000000500)='/sys/kernel/notes', 0x0, 0x90) fsetxattr$security_capability(r1, &(0x7f0000000040), 0x0, 0x0, 0x1) 3.700388445s ago: executing program 4 (id=3002): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x2000004, &(0x7f0000000500)=ANY=[]) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x20000, 0x40) unlinkat(r0, &(0x7f0000000080)='./file0/file1\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x22, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xfffffffffffffea1, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x9}, 0x80}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) socket$netlink(0x10, 0x3, 0x15) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 3.518778373s ago: executing program 5 (id=3003): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, 0x0, 0xc000) (async) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x7, 0xd, 0x5, 0x1, 0x6}, 0x0) (async) sendmsg$unix(r0, 0x0, 0x4000880) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) (async) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0xfffffffd, 0xb6}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x4601c0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) chdir(&(0x7f00000000c0)='./bus\x00') (async) r5 = creat(&(0x7f0000000440)='./file0\x00', 0x0) open_by_handle_at(r5, 0x0, 0x830200) (async) unshare(0x2a020480) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000001c0)=0x0) connect$nfc_raw(r5, &(0x7f0000000200)={0x27, r6, 0x1, 0x5}, 0x10) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8568}}) (async) io_uring_enter(r2, 0x47f6, 0x0, 0x4, 0x0, 0x0) 3.170273088s ago: executing program 5 (id=3004): io_uring_setup(0x7d98, &(0x7f00000003c0)={0x0, 0xdf07, 0x4, 0x3}) r0 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) mknodat(0xffffffffffffff9c, 0x0, 0x21c0, 0x103) mount$fuse(0x0, 0x0, &(0x7f0000000080), 0x20000, &(0x7f0000000b00)=ANY=[]) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) getsockname$netrom(0xffffffffffffffff, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r2, &(0x7f0000001800)=[{{0x0, 0x0, 0x0}, 0x669db774}, {{0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0xc316}], 0x2, 0x1832b, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r2, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) r3 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x40000, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000f80)=[{&(0x7f0000001840)=""/4096, 0x1000}], 0x1) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x20000000, 0x200100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f0000000140)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0xff7f000000000000, 0x0) r4 = io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0x64b5, 0x10000, 0x3, 0x5}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000280)=[{&(0x7f0000000240)=""/16, 0x10}], 0x1) syz_clone3(&(0x7f0000000000)={0x285002400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x46) 3.051372731s ago: executing program 2 (id=3005): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020) r3 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r3, &(0x7f0000000980)={0x2020}, 0x2020) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x80800) sendmmsg$alg(r6, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x1cba8c72}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x177ffb498171ed1, 0x8040010) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) socket$netlink(0x10, 0x3, 0x10) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) 2.615254818s ago: executing program 6 (id=3006): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r1 = getpid() r2 = openat$cachefiles(0xffffff9c, &(0x7f0000001140), 0x200, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r2, &(0x7f0000001440)={0x20002000}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) wait4(r1, &(0x7f0000000340), 0x8, &(0x7f0000000380)) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001080)=@newtaction={0x14, 0x30, 0x9, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24004005}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x100, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r5, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, 0x0, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_GETINFO(r6, 0xffffffff80000501, 0xee00, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0xfffffffffffffe9e, r0, 0x5, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) 2.129925744s ago: executing program 5 (id=3007): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f00000039c0)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c044) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) wait4(r1, 0x0, 0x40000000, 0x0) (async, rerun: 64) ptrace$getregset(0x4204, r1, 0x1, &(0x7f00000002c0)={&(0x7f0000000ac0)=""/102, 0x66}) (rerun: 64) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x9c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4041}, 0x0) (async, rerun: 64) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0xa0, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0xa0}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f0000000200)={0x8}) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)={0x4c, r6, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xa}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) write$dsp(r5, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r5, 0x5001, 0x0) (async) gettid() (async) timer_settime(0x0, 0x1, 0x0, 0x0) (async) r8 = socket(0x10, 0x3, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0xa}, {0xffff, 0xffff}, {0x1a, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r10, {}, {0xffe0, 0xa}, {0xf, 0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x3}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x55}, 0x4000) (async, rerun: 64) socket(0x840000000002, 0x3, 0xff) (async, rerun: 64) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="8000000002000200080004000000000008001b"], 0x30}}, 0x0) 2.126897179s ago: executing program 2 (id=3008): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r1 = dup(r0) r2 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x9a52, 0x0, 0x3}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r1, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r2, 0x47f5, 0x0, 0x0, 0x0, 0x0) (fail_nth: 92) 2.020140206s ago: executing program 4 (id=3009): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sw_sync(0xffffff9c, 0x0, 0x282201, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() r1 = syz_open_procfs(0x0, 0x0) fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = gettid() r3 = syz_open_procfs(r2, &(0x7f0000000040)='timerslack_ns\x00') write$binfmt_format(r3, &(0x7f0000000180)='0\x00', 0x2) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r0, r4, 0x0, 0x5, &(0x7f00000001c0)=':.#\'\x00'}, 0x30) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x24683, 0x0) 1.850019011s ago: executing program 2 (id=3010): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000100)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0xc) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000000c0)='lowerdir', &(0x7f0000000100)='{\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="5000000008021100000908021100000008021140000100000602020202020200"/44], 0x2c) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) 1.456605199s ago: executing program 6 (id=3011): socket$netlink(0x10, 0x3, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x24c4436d5a174b6d, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4004000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x15) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYRES32=r4], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) socket$alg(0x26, 0x5, 0x0) syz_emit_ethernet(0x82, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)=[{}], 0x1}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0xc8, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x20}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x98}}]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x89}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2a}}, {0x14, 0x4, @mcast1}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x86}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @loopback}}}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x24000801}, 0x4) syz_open_dev$usbfs(0x0, 0x76, 0x160341) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0xfffffffd}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r8, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x0) 609.965016ms ago: executing program 4 (id=3012): r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@mpls_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x14}, [@RTA_DST={0x8, 0x13}]}, 0x24}}, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) tkill(0x0, 0x7) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0x9}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x4, 0x32}, 0x2, @in=@private=0xa010102, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe4) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 518.509833ms ago: executing program 6 (id=3013): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0"], 0x3c}, 0x1, 0x0, 0x0, 0x801}, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 249.128495ms ago: executing program 2 (id=3014): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sw_sync(0xffffff9c, 0x0, 0x282201, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() r1 = syz_open_procfs(0x0, 0x0) fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = gettid() r3 = syz_open_procfs(r2, &(0x7f0000000040)='timerslack_ns\x00') write$binfmt_format(r3, &(0x7f0000000180)='0\x00', 0x2) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r0, r4, 0x0, 0x5, &(0x7f00000001c0)=':.#\'\x00'}, 0x30) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x24683, 0x0) 0s ago: executing program 6 (id=3015): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtaction={0x64, 0x30, 0x709, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x80004}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) mount(&(0x7f0000000400)=@sr0, &(0x7f0000000280)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2a18005, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)={0x34, r2, 0x303, 0x0, 0x0, {0x13}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001280)={{{@in6=@ipv4={""/10, ""/2, @initdev}, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@private0}}, &(0x7f0000001380)=0xe4) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000080)={0x108, 0x1f, 0x1, 0x0, 0x0, "", [@nested={0xf5, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0x8, 0x3, 0x0, 0x0, @uid=r4}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x108}], 0x1}, 0x0) sendmsg$netlink(r0, &(0x7f0000001240)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001200)=[{&(0x7f00000003c0)={0x408, 0x15, 0x400, 0x70bd2a, 0x25dfdbff, "", [@typed={0xa, 0x51, 0x0, 0x0, @binary="2617980ac32f"}, @typed={0x14, 0xd6, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @typed={0x8, 0x12c, 0x0, 0x0, @u32=0x5}, @nested={0x1dc, 0x11, 0x0, 0x1, [@generic="8b26880b4aa9b24ec39b251fae946de7e89c91fad059f3ca21128b035ec0545949aa4ca5764e09fbc0952995a0845e1649ec4b6516dc7b1516456a8aecf61557768c07d9a256545e7c452e3eeb3ba8cd35986696ad097d49e779f886a06e022be69b9f68ef8ca859ee8fd4c12eaa489b9da3dd36dff921cf2c0bbce24edd73b29f839a579f94eb49f5510ce1cbd706bc6d8441b711ce54960f9635ce9e48f69f86a6bdafa1f93fdb4105caf2f5af343bf3595f9f20d483e75da23840556a", @generic="8579a9ababf9c993a2dde63e1904fad60dd52977f3c0b8243a65f6a8459320062995d635b3d2947ebcbd34ac2e9e38094f49da2f95a8a421489668d1b3479a20f91ee6b76d6c5202fd80a1764d7cf33def22afccddaa0052a455bfc8d1bea6f9778833f9c268a8d17ebca709ac3d0beaaabc26f6047a8a1a298c4c273bb38518aad3287c5b05e424651fbee11516ce931993935156a8d9be38ab374bb4ce30d66afdc6b095931ee3c84a0bb63f8a4539078830b7af8ecc517de665c29b4960bd8b81298c15c56b04049d367a69ab873e799cb0e4e5248e13ddbfd32c116e2bf2862e34d6327da2ff6736058b20f48a1fabf05ef9bfc1301b26", @generic="29fce807f11311433de2f2104a431088d9", @nested={0x4, 0xeb}, @typed={0x8, 0xf0, 0x0, 0x0, @ipv4=@multicast2}, @nested={0x4, 0xb1}]}, @generic="67fdb59e77760d9cec7111a9e5d8152bfb48bd3719d131e70642b6da3736aaa60e3be9e0f8712bf19aebc86ef02625d6409bc04a698f9851c6ef", @nested={0x1b0, 0x24, 0x0, 0x1, [@typed={0x4, 0x52}, @typed={0x11, 0x2c, 0x0, 0x0, @binary="d2f76914bc1c497a809b505278"}, @generic="1c24dd3c04a46c75e45859cbb99cb7cc6864cd20a460b4316ecba8cc0a99d4ef86acfe7ec1aa4f627b1286e921b1934d09f19806082adcb06e8f8a2c90c0211345533e063844a1d3421caa0fd4dfa3c3581ddb3d537c641bf8eed6748d4cda26be13dfeba119b0bfefe710e659c4998ce527f30a650c0ffdcc2d92eefb8cfb655d1e989517c2700fb2e3af0b75ea30ec3f8e006d4b8abaa7f417c9642d1361096d2e2234a6d9f6a44168034b21ad0502457736007f2f1bda5212865164a9b05fb1e0555107047d82d558690a9fe69f7cc5509cca0154e584ce8640965910ef804694dc9abdc4360f1e8dd1447e3107773fd183c0", @nested={0x4, 0xd3}, @generic="fb7389b6cd8298d0f4ee6fb0c9119016ccf1bbe704f711caa3202b8a5f962e559b5d90894c3233ee15d5550a16837eabada303f94bc578eec73ac29ca6c93d20316df30bec4e42d02c709f425e543aa6d9a594af1202da7e7a685ede04b60ec01fcd70d1725f2d6503a416fed385e2afefcb8f796e6a2da655aaab30b982250e0fb308d0d010149b", @typed={0x14, 0xa6, 0x0, 0x0, @ipv6=@remote}]}, @typed={0x8, 0x137, 0x0, 0x0, @u32=0x7f}]}, 0x408}, {&(0x7f0000000800)={0x470, 0x3a, 0x1, 0x70bd2a, 0x25dfdbff, "", [@generic="58b20ccecdc5aa7e660ac798cd07e3766a6447907512132eafeabdb471bcbf6e0281fbda4f5c3cac1dbb7943552816e08c6bcdcb7e8c7b136454562877a5df299b2e0aae7397c5f4c3c18fda381fba38b6ed0c8d7b326d87a91b691014e11053d53c868e47dcae8a5804f6cd54310c7ad3d6596024e322", @nested={0x125, 0x2a, 0x0, 0x1, [@generic="73a63ca1baf2604773e452705f8416a9391b87e732d84621fb95d11e728e4071d086a3cef90ed0afafd3c20c8fae6e8c3ac8d0e5402c3ecc5cc3078b16a615bb32ac817fa3253037bcba9710c840153bc25b79196b7896e4a11e6435d4f5b1b8af4f098210b46e303634dff120d9b6c9fba697e4049664d3f0e1969a1d0a612080f16f0d93af5195eba8aac996f14724913dd55d6116153d83fdf322056bd1931b2fb90845794febc8d3c52c9d24b5a2b345007e1521079bf05a2b5c58c26b4cfb9966ce25eaa6bad22705900af18012b3f1199b4d2dcc2ec0d79b808853b70de160b63c0deab2", @nested={0x4, 0x72}, @generic="4875fe5ca84c4c5796aec166168ffd73bc16ef878598da6cc632b4f63e0d95a96210118574693c5140fe", @typed={0x8, 0x42, 0x0, 0x0, @u32=0x200}, @nested={0x4, 0x2b}]}, @nested={0x2c0, 0x1f, 0x0, 0x1, [@nested={0x4, 0x86}, @generic="11f43de96dd4c44ec536f893d3d774e9572c2455a166832a0f7d6f86b5ca6d03bc168ee1eb69303865d33d39ae42958d7306a5a9d11231f191050b113aabea19b61dacd7996f01ca678ca4e371d890dd60b40e966a9ebc81a5529702e863a8a4fbe0bff8c507ab79a76287fb8f4d4fa5a55041b213364ebe3cff8331bf4a53003e9f5e4216c04ed75e6f80a514c59936a44e06e5d0e4", @generic="8f6527cb9e247fdf7364d8e38b269f8f2b0988926d9d9d153c35b71923153a3c7a7be4539c33bccfb120c7e41b3ac97aeb02cf24839b30cbbd2a5649debb301bb8d66ef46319b292e59963405f66a56c8d1296da9cb80bd2ad25451492d54bfbaccebaf9c2836f8305fa65396b0dc7e423a9440c5b3857e88153c200170ee0d5ac69d1d9f5d20aba769fb295123709cedd767e57647940c6c9a53c4f77a3f9084b1469787a9f5895fe1c4bbf8d45de7210a930417268a4b0c6e5ececd5315d4480f71d795579ae4295880447224d0c8a28624b711999dd83ec0099ae8f0252108b661e60633e303c3f6d4c1433b73f2e4a92338255", @typed={0x4, 0xaf}, @typed={0x60, 0x10b, 0x0, 0x0, @binary="dafed5de76b767f8450b10898e863e6ca00e402a8f2d5ef8c87194f722661faea10a9f658a0e6e5bc25fbb1148f6cf2be316382f9b534372cc4b457e0e57c01ce658c5c020b8831d14e9cd4b3b83b2e49139a63cde509b15b41efa7c"}, @typed={0x8, 0x138, 0x0, 0x0, @u32=0x4}, @generic="52a61d6cbdcc51bea402fec53f0d2837bdd5aa7664cfe23070d15fd13ac460c145e2312aac913483d7edb750a33ac7f88e5853edc559bdbca0e4e035c7cdc4bdbdf5b4087999eeb053c1b123f7943c14caf4ee3ed1db66eb296aca4d5d8af9af1816de1d55f311ceec02dfc768264dc51560f5f1b136e1e93e5e46254845395bcddf6d6eec1957dfcfbf8b04b918519e426e4b30a84a385dbd1073e5a5af7101bd411f5b62d80503d6903affe6cf270ad078ded303480a24a8", @nested={0x4, 0x14}, @nested={0x4, 0x45}]}]}, 0x470}, {&(0x7f0000000040)={0x22c, 0x36, 0x200, 0x70bd25, 0x25dfdbfc, "", [@nested={0x212, 0x18, 0x0, 0x1, [@nested={0x4, 0x11a}, @typed={0xc, 0xbb, 0x0, 0x0, @u64=0x10000}, @typed={0x4, 0x12c}, @generic="cf37053ec8d6f69ce29b3dfc5ab77a976ac3024b4f0982f150dcc371cb5322f60bf1a81aea7608c9192e0cf1fbedb0b16acf91f9a3fd0eedc0c7f9f9477a19813ca2d41c3a0178067c8f1ee31e984e1d64a6d8d4b33ab73d90ff4e86b0532ca9cba4259759ef6a9d3f47111fb3fe43cc", @generic="483a106e1897e7fa723ed33ca4e05d8070ce12bd72d7dbfddf4fd99eb265928c0f7236456a34b70f0f43b65639dce5b054a63f58beb5e7d9b9b430702c0c23227be86cf9789f3dccb3ae1444e77a619851b4812af648c63d7d6ea101503715cec45050c552650974b722e6e1f87bbe9f9e9b5643f90b4d068fe077272bbb529118b127385c3119b41983c175b65f43db1439bda3b6e4a50d71f216b481f3821b97786e13d5ed7eb0f21a5433565abe0065d6f94cf90202e8b98cabbb4e622bf5ae0ca4c9afe685ecd843ba91b3af2f0e9e21dbbbe498362bc8db77eaebe00edc987cfc475a38a63c", @generic="703bd5b4491398abc80f917ec5a7446df31189006bf25c16ad5f5248c0aa0d6451047dc8e87d854eda6307d6b9d5d929fca66e2eba0a6a7d2ad450f530f0f11dc5a1912dfab25d374ba560266846f12df4b57f012ef68d010c372c24d3f21194002fb811dc3acd87af68c3cfe517eb0bd2545b5f0747c3b53f6c16a42815827277928a36fb9deb5a203e30380dbdc2478e0f69a01a4dc4d7b6f3d71afa00b08249f9"]}, @typed={0x8, 0xf6, 0x0, 0x0, @fd=r1}]}, 0x22c}, {&(0x7f0000000c80)={0x100, 0x39, 0x2, 0x70bd27, 0x25dfdbfd, "", [@typed={0x4, 0x11f}, @nested={0xe9, 0xb5, 0x0, 0x1, [@nested={0x4, 0x11d}, @generic="5cfdb320c9a11451d7a616a1821c933b3b2e05f14247f68c801235cf99aaa02a45c8b995b5c78abf62be75d8204c25fc289d04124ad088b821c523836a60609431ac8ab151d7315625b75a840aa9a6f1a21b06e16311f34973bf2ab85a95b1fdc17b06", @typed={0x14, 0x128, 0x0, 0x0, @ipv6=@mcast2}, @generic="3bcca7d0d7dd0275423708597d013d2b6799378c3449be05fc7feed935938ffab6349797f6d9dcabe36b0d92d4002470e2670c5db55b991e4259214a37cdc8e3b47bbd489f5fd9f73b21a2f4df29fe349abf", @nested={0x4, 0x33}, @typed={0x8, 0x9, 0x0, 0x0, @u32=0x1}, @nested={0x4, 0x5b}, @typed={0x8, 0x62, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}]}, 0x100}, {&(0x7f0000000d80)={0x364, 0x3a, 0x100, 0x70bd26, 0x25dfdbff, "", [@nested={0x8, 0xf1, 0x0, 0x1, [@nested={0x4, 0xae}]}, @generic="73ccfcf5ebf146527f0165b1c2f70646c1f197e32a5569d3d43f174fe11751842e6de81b15860d1c967a7310ac1c530d60f0b7884fa1f0c1cda7fc4d8d1f4a6fdc6a8dc97f5d85de7200e92932309a0821f367ea216c768d2fa96e8458322e2bd730b8eb025d29e79bbf200da217a6933d0d07bad60bd4f8b8db07574ad451c806098204fec255bb6ef8c22e6a6bf414b7902cbb40b76178999898b6c86188fdaa810f83522e45beba591f5db0665b47d4e3a68f5fddc46ce040f32681e0d56d42ebfc8325036675a57fe1b9a6c7786989ac1631e129a73eec564d1478430123fd5f47f8296a4151322237023592", @generic="6ee3eb1aa86ce1c7476f828710c9366cef9be24e8f8b4fba6bbb619e4c30f52c0316c0bbef25941e9c63c3172fab232f244e95964b1e0be72516be6582996e176aa9172006c8551222fa86457cb6fead8b358041e557b84c8c09bac2663f9795d8922ace91a755672b21af4cb69bfb69b5251374d3bd4dbe86cf25dfdd3cd7d1c8d2d4f1e3c03bdae532df375a713b453ace83c180a9bc174f9d00f7bb68785696dc1f57398efd8b45d6c5a4aca3fc6d359169e7a8509804cee257bcc5e076d6e0159f7e0863dd55b133fc0893d169d9a8e4", @typed={0x8, 0xbf, 0x0, 0x0, @u32=0x5}, @nested={0x8c, 0xc, 0x0, 0x1, [@nested={0x4, 0xa9}, @generic="b470c07b9e3ac4d55e4c57ff36cda691616260620855a4f916d6fb0bc4e6d756d2e5eb0d28cf5224d10a14e8f1faa7513b9690da0b2eca75951c340ba084a30543bcfb78421e2a55316905710725a09a3655ecf9019a43011360d3d45c51a398f4667c637282585ea821b48c", @nested={0x4, 0x144}, @typed={0xc, 0x12f, 0x0, 0x0, @u64=0x7}, @typed={0x8, 0x13a, 0x0, 0x0, @fd=r3}]}, @typed={0x8, 0x1d, 0x0, 0x0, @u32=0x7f}, @nested={0xf0, 0x97, 0x0, 0x1, [@typed={0x14, 0x7d, 0x0, 0x0, @ipv6=@empty}, @generic="11400070b6c969bc7c18bce601ceb6f78ee4c25fb6333b143fabb180ed9052ee4593b208a1deafaa9bb8392ac82e8d80d8926afbfdc78a7296d5f30946edfc0a0ab6c4610c1a758a3054249ecc30a26df7f7d15498458910a9ecb54b78f94c524c5cee0d58a9a30c3c1f27528024cc036cb86181c1937a9d246ad22459c2e2c7021ae374891792e252e3344950cb0fc3f7315aac017dfc7a82c909b3faa60159c53d6d9d17a948ba441ae02f6365a18fc3e7cf6d57f6543a2345e4a7da5f44b464e90714f7a33c79c5c60eb839f903374fa2078c", @nested={0x4, 0x4}]}]}, 0x364}, {&(0x7f0000000280)={0xc0, 0x17, 0x200, 0x70bd25, 0x25dfdbfb, "", [@nested={0x8, 0xe0, 0x0, 0x1, [@typed={0x4, 0x4e}]}, @generic="1d82e89546b29d548547d26f59c80d043d68f3fa3bf144b47f74a7861eeef0b544c203ff8921c49b59df8e93295012fb4ebb73cf3c35edd9bf4b7f7a89605b04383c381bd431a0ec58d88f97144dd6a280bc16edddb882cb8426ecf209690bf097f2a2151192486ae83c1865c188222e108a8da9886c92e2bc2c1cdd2d2954479300df520425fb56fb", @typed={0x14, 0x148, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @nested={0x8, 0x56, 0x0, 0x1, [@nested={0x4, 0xd9}]}]}, 0xc0}, {&(0x7f0000001100)={0xe0, 0x3c, 0x8, 0x70bd2a, 0x25dfdbfc, "", [@nested={0xd0, 0x12, 0x0, 0x1, [@generic="ac15b1a866cdf13c32870dd5ca683af87174c722bace8933512c13f682bf007b2eb9190e9d26f9e395edb49eb7fcca9f9e0850460b3bdc16fab23591692c4f479d9e8da3f1be4e4840355157454bd06acb0692a0786dfdfceb146e8e3f04f13c77a81224243c4f2b2999a6f169f27c3180493f58e9e8fb9bef4e1045df980a587c28663c1c3532c4b7cc8d631d83bd51b52097eae38201ed9fdd9b04de3fdb455f52be922de5d4eb9ac3fef6c237e1cbe80ecf974b3e645577978d36a543b0d28a", @nested={0x4, 0xbe}, @generic="231975", @nested={0x4, 0x82}]}]}, 0xe0}], 0x7, 0x0, 0x0, 0x4040001}, 0x884) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)=@delsa={0x48, 0x11, 0x100, 0x70bd25, 0x25dfdbfd, {@in=@remote, 0x4d4, 0xa, 0x32}, [@replay_val={0x10, 0xa, {0x70bd28, 0x70bd2d, 0x6}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}, @XFRMA_IF_ID={0x8, 0x1f, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8044) 0s ago: executing program 6 (id=3016): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000080)='io.pressure\x00', 0x2, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sendfile64(r4, r3, 0x0, 0x8) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(r7, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="110725bd7000ffdbdf250e"], 0x14}, 0x1, 0x0, 0x0, 0x8048045}, 0x40c0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r6, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r10) getsockname$packet(r10, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@delchain={0x30, 0x2c, 0xf31, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {}, {0xfff2, 0xffff}, {0xfff1, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) kernel console output (not intermixed with test programs): high-speed USB device number 4 using dummy_hcd [ 578.806947][ T5945] usb 10-1: Using ep0 maxpacket: 8 [ 578.810301][ T5945] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 578.814297][ T5945] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 578.818135][ T5945] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 578.821440][ T5945] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 578.824968][ T5945] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 578.832670][ T5945] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 578.836062][ T5945] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.054097][ T5945] usb 10-1: usb_control_msg returned -32 [ 579.060068][ T5945] usbtmc 10-1:16.0: can't read capabilities [ 579.148921][T17267] "syz.6.2633" (17267) uses obsolete ecb(arc4) skcipher [ 579.423520][T17272] usbtmc 10-1:16.0: control status returned 23 [ 579.428004][T17272] netlink: 'syz.5.2631': attribute type 1 has an invalid length. [ 579.468575][T17272] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 579.472738][T17272] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 579.521691][T17274] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 579.525741][T17274] batadv_slave_1: entered promiscuous mode [ 579.532125][T17274] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 579.542617][T17274] bond0: (slave batadv_slave_1): making interface the new active one [ 579.546666][T17274] bond0: (slave batadv_slave_1): Enslaving as an active interface with an up link [ 579.603253][T17272] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2631'. [ 579.622200][T17272] macvlan2: entered promiscuous mode [ 579.628564][T17272] macvlan2: entered allmulticast mode [ 579.634877][T17272] bond0: entered promiscuous mode [ 579.643251][T17272] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 579.655273][T17272] bond0: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of batadv_slave_1 [ 579.667422][T17272] bond0: left promiscuous mode [ 580.831704][T17290] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 580.833915][T17290] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 580.847349][T17290] vhci_hcd vhci_hcd.0: Device attached [ 581.112224][T17291] vhci_hcd: connection closed [ 581.113570][T14163] vhci_hcd vhci_hcd.2: stop threads [ 581.117403][T14163] vhci_hcd vhci_hcd.2: release socket [ 581.119337][T14163] vhci_hcd vhci_hcd.2: disconnect device [ 581.332142][ T5945] usb 10-1: USB disconnect, device number 4 [ 581.800816][T17303] fuse: Bad value for 'fd' [ 582.351992][T17298] lo speed is unknown, defaulting to 1000 [ 582.477863][T17301] lo speed is unknown, defaulting to 1000 [ 582.613679][T17323] "syz.4.2644" (17323) uses obsolete ecb(arc4) skcipher [ 584.045131][T17347] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 584.047372][T17347] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 584.051767][T17347] vhci_hcd vhci_hcd.0: Device attached [ 584.065808][T17351] tipc: Enabled bearer , priority 0 [ 584.069380][T17351] syzkaller0: entered promiscuous mode [ 584.071238][T17351] syzkaller0: entered allmulticast mode [ 584.075428][T17351] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 584.093934][T17351] tipc: Resetting bearer [ 584.097623][T17350] tipc: Resetting bearer [ 584.106552][T17350] tipc: Disabling bearer [ 584.428671][T17355] lo speed is unknown, defaulting to 1000 [ 584.468689][ T6055] usb 46-1: SetAddress Request (62) to port 0 [ 584.470815][ T6055] usb 46-1: new SuperSpeed USB device number 62 using vhci_hcd [ 584.543018][T17361] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2654'. [ 584.548861][T17348] vhci_hcd: connection closed [ 584.551649][T14211] vhci_hcd vhci_hcd.4: stop threads [ 584.557862][T14211] vhci_hcd vhci_hcd.4: release socket [ 584.560465][T14211] vhci_hcd vhci_hcd.4: disconnect device [ 585.026243][ T6055] usb 46-1: enqueue for inactive port 0 [ 585.313905][T17372] fuse: Bad value for 'fd' [ 585.356769][T17365] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 585.437532][ T6055] usb usb46-port1: attempt power cycle [ 585.844999][T17389] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10) [ 585.847200][T17389] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 585.850255][T17389] vhci_hcd vhci_hcd.0: Device attached [ 585.862982][T17393] tipc: Enabled bearer , priority 0 [ 585.865627][T17393] syzkaller0: entered promiscuous mode [ 585.868228][T17393] syzkaller0: entered allmulticast mode [ 585.872993][T17393] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 585.885034][T17393] tipc: Resetting bearer [ 585.888504][T17392] tipc: Resetting bearer [ 585.896180][T17392] tipc: Disabling bearer [ 586.007842][ T6055] usb usb46-port1: unable to enumerate USB device [ 586.117078][ T3560] usb 48-1: SetAddress Request (30) to port 0 [ 586.119390][ T3560] usb 48-1: new SuperSpeed USB device number 30 using vhci_hcd [ 586.461573][T17390] vhci_hcd: connection reset by peer [ 586.463666][ T89] vhci_hcd vhci_hcd.5: stop threads [ 586.465779][ T89] vhci_hcd vhci_hcd.5: release socket [ 586.470987][ T89] vhci_hcd vhci_hcd.5: disconnect device [ 586.748397][T17400] can0: slcan on ttyS3. [ 586.910676][T17405] overlay: ./bus is not a directory [ 587.159358][T17413] can0 (unregistered): slcan off ttyS3. [ 588.038278][T17438] 9pnet_virtio: no channels available for device syz [ 588.317525][T17442] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 588.319747][T17442] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 588.331843][T17442] vhci_hcd vhci_hcd.0: Device attached [ 588.607374][T17439] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 588.609725][T17439] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 588.622952][T17439] vhci_hcd vhci_hcd.0: Device attached [ 588.887048][ T24] usb 42-1: SetAddress Request (74) to port 0 [ 588.889815][ T24] usb 42-1: new SuperSpeed USB device number 74 using vhci_hcd [ 589.111173][T17445] vhci_hcd: connection reset by peer [ 589.121840][ T63] vhci_hcd vhci_hcd.2: stop threads [ 589.124193][ T63] vhci_hcd vhci_hcd.2: release socket [ 589.126614][ T63] vhci_hcd vhci_hcd.2: disconnect device [ 589.326107][T17443] vhci_hcd: connection closed [ 589.326340][ T63] vhci_hcd vhci_hcd.5: stop threads [ 589.329826][ T63] vhci_hcd vhci_hcd.5: release socket [ 589.331655][ T63] vhci_hcd vhci_hcd.5: disconnect device [ 590.112494][T17467] fuse: Bad value for 'fd' [ 590.138274][T17470] lo speed is unknown, defaulting to 1000 [ 590.471740][T17477] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2677'. [ 590.486966][T17477] openvswitch: netlink: Missing key (keys=40, expected=80) [ 591.127031][T17490] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 591.227141][ T3560] usb 48-1: device descriptor read/8, error -110 [ 591.296778][ T40] kauditd_printk_skb: 47 callbacks suppressed [ 591.296791][ T40] audit: type=1326 audit(1766672164.338:1810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17493 comm="syz.5.2682" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 591.313601][ T40] audit: type=1326 audit(1766672164.348:1812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17493 comm="syz.5.2682" exe="/syz-executor" sig=0 arch=40000003 syscall=311 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 591.346949][ T40] audit: type=1326 audit(1766672164.348:1813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17493 comm="syz.5.2682" exe="/syz-executor" sig=0 arch=40000003 syscall=175 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 591.357329][ T40] audit: type=1326 audit(1766672164.348:1814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17493 comm="syz.5.2682" exe="/syz-executor" sig=0 arch=40000003 syscall=245 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 591.364446][ T40] audit: type=1326 audit(1766672164.348:1815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17493 comm="syz.5.2682" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 591.388256][ T40] audit: type=1326 audit(1766672164.348:1816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17493 comm="syz.5.2682" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 591.395187][ T40] audit: type=1326 audit(1766672164.348:1817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17493 comm="syz.5.2682" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 591.407068][ T40] audit: type=1326 audit(1766672164.348:1818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17493 comm="syz.5.2682" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 591.416320][ T40] audit: type=1326 audit(1766672164.338:1811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17493 comm="syz.5.2682" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 591.434749][ T40] audit: type=1326 audit(1766672164.348:1819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17493 comm="syz.5.2682" exe="/syz-executor" sig=0 arch=40000003 syscall=246 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 591.604754][T17505] tipc: Enabled bearer , priority 0 [ 591.608623][T17505] syzkaller0: entered promiscuous mode [ 591.610990][T17505] syzkaller0: entered allmulticast mode [ 591.616356][T17505] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 591.620189][ T3560] usb usb48-port1: attempt power cycle [ 591.623078][T17504] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 591.643848][T17505] FAULT_INJECTION: forcing a failure. [ 591.643848][T17505] name failslab, interval 1, probability 0, space 0, times 0 [ 591.649414][T17505] CPU: 0 UID: 0 PID: 17505 Comm: syz.6.2685 Tainted: G L syzkaller #0 PREEMPT(full) [ 591.649458][T17505] Tainted: [L]=SOFTLOCKUP [ 591.649465][T17505] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 591.649475][T17505] Call Trace: [ 591.649482][T17505] [ 591.649489][T17505] dump_stack_lvl+0x16c/0x1f0 [ 591.649520][T17505] should_fail_ex+0x512/0x640 [ 591.649540][T17505] ? fs_reclaim_acquire+0xae/0x150 [ 591.649568][T17505] should_failslab+0xc2/0x120 [ 591.649592][T17505] __kmalloc_noprof+0xeb/0x910 [ 591.649612][T17505] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 591.649641][T17505] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 591.649662][T17505] tomoyo_realpath_from_path+0xc2/0x6e0 [ 591.649688][T17505] ? tomoyo_profile+0x47/0x60 [ 591.649714][T17505] tomoyo_path_number_perm+0x245/0x580 [ 591.649733][T17505] ? tomoyo_path_number_perm+0x237/0x580 [ 591.649760][T17505] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 591.649803][T17505] ? find_held_lock+0x2b/0x80 [ 591.649825][T17505] ? hook_file_ioctl_common+0x144/0x410 [ 591.649851][T17505] ? __fget_files+0x20e/0x3c0 [ 591.649873][T17505] ? __fput_deferred+0x480/0x480 [ 591.649896][T17505] security_file_ioctl_compat+0x9b/0x240 [ 591.649918][T17505] __ia32_compat_sys_ioctl+0xc3/0x370 [ 591.649943][T17505] __do_fast_syscall_32+0xe8/0x680 [ 591.649972][T17505] do_fast_syscall_32+0x32/0x80 [ 591.649988][T17505] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 591.650008][T17505] RIP: 0023:0xf7fb4579 [ 591.650022][T17505] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 591.650038][T17505] RSP: 002b:00000000f54a655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 591.650055][T17505] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000008922 [ 591.650066][T17505] RDX: 0000000080002280 RSI: 0000000000000000 RDI: 0000000000000000 [ 591.650077][T17505] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 591.650087][T17505] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 591.650096][T17505] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 591.650119][T17505] [ 591.650142][T17505] ERROR: Out of memory at tomoyo_realpath_from_path. [ 591.657296][ T6055] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 591.663535][T17505] tipc: Resetting bearer [ 591.764734][T17503] tipc: Resetting bearer [ 591.780879][T17503] tipc: Disabling bearer [ 591.817050][ T6055] usb 10-1: Using ep0 maxpacket: 32 [ 591.822217][ T6055] usb 10-1: config 1 has an invalid interface number: 3 but max is 2 [ 591.825762][ T6055] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 591.830764][ T6055] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 591.834686][ T6055] usb 10-1: config 1 has no interface number 1 [ 591.837791][ T6055] usb 10-1: too many endpoints for config 1 interface 3 altsetting 9: 140, using maximum allowed: 30 [ 591.841625][ T6055] usb 10-1: config 1 interface 3 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 140 [ 591.846694][ T6055] usb 10-1: config 1 interface 3 has no altsetting 0 [ 591.852135][ T6055] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 591.856035][ T6055] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.859327][ T6055] usb 10-1: Product: ы [ 591.860798][ T6055] usb 10-1: Manufacturer:   [ 591.862364][ T6055] usb 10-1: SerialNumber: й [ 591.877195][T17239] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 592.027027][T17239] usb 9-1: Using ep0 maxpacket: 32 [ 592.031464][T17239] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 592.035206][T17239] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 592.039142][T17239] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 592.043106][T17239] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 592.047414][T17239] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 592.051638][T17239] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 592.055889][T17239] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 592.060265][T17239] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 592.066015][T17239] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 592.070321][T17239] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.080126][ T6055] usb 10-1: 0:2 : does not exist [ 592.082410][T17239] usb 9-1: config 0 descriptor?? [ 592.102893][ T6055] usb 10-1: USB disconnect, device number 5 [ 592.109083][T17513] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 592.111741][T17513] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 592.122316][T17513] vhci_hcd vhci_hcd.0: Device attached [ 592.128731][T17513] random: crng reseeded on system resumption [ 592.129884][T17178] udevd[17178]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 592.200190][ T3560] usb usb48-port1: unable to enumerate USB device [ 592.297466][T17239] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 18 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 592.651120][T17514] vhci_hcd: connection closed [ 592.732570][ T6214] vhci_hcd vhci_hcd.2: stop threads [ 592.798962][ T6214] vhci_hcd vhci_hcd.2: release socket [ 592.801382][ T6214] vhci_hcd vhci_hcd.2: disconnect device [ 592.895328][T17526] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 592.897500][T17526] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 592.908615][T17526] vhci_hcd vhci_hcd.0: Device attached [ 593.146957][ T6055] usb 47-1: new low-speed USB device number 2 using vhci_hcd [ 593.497991][T17527] vhci_hcd: connection reset by peer [ 593.502288][ T6258] vhci_hcd vhci_hcd.5: stop threads [ 593.506437][ T6258] vhci_hcd vhci_hcd.5: release socket [ 593.510267][ T6258] vhci_hcd vhci_hcd.5: disconnect device [ 593.957126][ T24] usb 42-1: device descriptor read/8, error -110 [ 594.092880][T17537] macsec1: entered promiscuous mode [ 594.095257][T17537] macsec0: entered promiscuous mode [ 594.098135][T17537] macsec1: entered allmulticast mode [ 594.100518][T17537] macsec0: entered allmulticast mode [ 594.103255][T17537] veth1_macvtap: entered allmulticast mode [ 594.232663][T17541] fuse: Bad value for 'fd' [ 594.367857][ T24] usb usb42-port1: attempt power cycle [ 594.539938][T17551] FAULT_INJECTION: forcing a failure. [ 594.539938][T17551] name failslab, interval 1, probability 0, space 0, times 0 [ 594.544893][T17551] CPU: 2 UID: 0 PID: 17551 Comm: syz.2.2697 Tainted: G L syzkaller #0 PREEMPT(full) [ 594.544919][T17551] Tainted: [L]=SOFTLOCKUP [ 594.544925][T17551] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 594.544936][T17551] Call Trace: [ 594.544943][T17551] [ 594.544951][T17551] dump_stack_lvl+0x16c/0x1f0 [ 594.544981][T17551] should_fail_ex+0x512/0x640 [ 594.545003][T17551] should_failslab+0xc2/0x120 [ 594.545029][T17551] __kmalloc_noprof+0xeb/0x910 [ 594.545049][T17551] ? io_cache_alloc_new+0x45/0xf0 [ 594.545079][T17551] ? io_cache_alloc_new+0x45/0xf0 [ 594.545104][T17551] io_cache_alloc_new+0x45/0xf0 [ 594.545130][T17551] io_arm_apoll+0x7fc/0x960 [ 594.545154][T17551] ? __pfx_io_arm_apoll+0x10/0x10 [ 594.545182][T17551] ? __io_issue_sqe+0x14a/0x7c0 [ 594.545202][T17551] io_arm_poll_handler+0x223/0x2b0 [ 594.545227][T17551] io_queue_async+0xab/0x130 [ 594.545247][T17551] io_submit_sqes+0x154e/0x28e0 [ 594.545282][T17551] __do_sys_io_uring_enter+0xd6b/0x1630 [ 594.545308][T17551] ? __fget_files+0x20e/0x3c0 [ 594.545332][T17551] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 594.545358][T17551] ? fput+0x70/0xf0 [ 594.545375][T17551] ? ksys_write+0x1ac/0x250 [ 594.545398][T17551] ? __pfx_ksys_write+0x10/0x10 [ 594.545421][T17551] ? do_user_addr_fault+0x843/0x1370 [ 594.545447][T17551] __do_fast_syscall_32+0xe8/0x680 [ 594.545475][T17551] do_fast_syscall_32+0x32/0x80 [ 594.545492][T17551] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 594.545512][T17551] RIP: 0023:0xf70dd579 [ 594.545526][T17551] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 594.545543][T17551] RSP: 002b:00000000f54cd55c EFLAGS: 00000296 ORIG_RAX: 00000000000001aa [ 594.545560][T17551] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000000047f5 [ 594.545571][T17551] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 594.545581][T17551] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 594.545591][T17551] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 594.545601][T17551] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 594.545630][T17551] [ 594.609261][ T34] usb 9-1: USB disconnect, device number 18 [ 594.636272][ T34] usblp0: removed [ 594.762482][T17558] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2700'. [ 594.767567][T17558] netlink: 'syz.4.2700': attribute type 1 has an invalid length. [ 594.882143][T17564] tipc: Enabling of bearer q [ 594.882143][T17564] :syz> rejected, media not registered [ 594.888954][T17564] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 594.997491][ T24] usb usb42-port1: unable to enumerate USB device [ 595.108734][T17570] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 595.111303][T17570] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 595.120419][T17572] fuse: Bad value for 'fd' [ 595.147513][T17570] vhci_hcd vhci_hcd.0: Device attached [ 595.151914][T17570] random: crng reseeded on system resumption [ 595.436983][T17239] usb 42-1: SetAddress Request (78) to port 0 [ 595.439893][T17239] usb 42-1: new SuperSpeed USB device number 78 using vhci_hcd [ 595.526357][T17573] vhci_hcd: connection reset by peer [ 595.529550][ T12] vhci_hcd vhci_hcd.2: stop threads [ 595.531955][ T12] vhci_hcd vhci_hcd.2: release socket [ 595.534576][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 595.890859][T17593] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2711'. [ 595.902009][T17594] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2711'. [ 595.902047][T17594] syz_tun: left allmulticast mode [ 595.902058][T17594] syz_tun: left promiscuous mode [ 595.902168][T17594] bridge0: port 3(syz_tun) entered disabled state [ 595.909071][T17594] bridge_slave_1: left allmulticast mode [ 595.909085][T17594] bridge_slave_1: left promiscuous mode [ 595.909192][T17594] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.916440][T17594] bridge_slave_0: left allmulticast mode [ 595.916452][T17594] bridge_slave_0: left promiscuous mode [ 595.916541][T17594] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.386294][T17599] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2712'. [ 596.573383][T17606] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2714'. [ 596.577977][T17606] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2714'. [ 596.582886][T17606] FAULT_INJECTION: forcing a failure. [ 596.582886][T17606] name failslab, interval 1, probability 0, space 0, times 0 [ 596.588789][T17606] CPU: 0 UID: 0 PID: 17606 Comm: syz.6.2714 Tainted: G L syzkaller #0 PREEMPT(full) [ 596.588815][T17606] Tainted: [L]=SOFTLOCKUP [ 596.588821][T17606] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 596.588832][T17606] Call Trace: [ 596.588838][T17606] [ 596.588846][T17606] dump_stack_lvl+0x16c/0x1f0 [ 596.588878][T17606] should_fail_ex+0x512/0x640 [ 596.588899][T17606] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 596.588940][T17606] should_failslab+0xc2/0x120 [ 596.588969][T17606] kmem_cache_alloc_node_noprof+0x86/0x800 [ 596.588990][T17606] ? __alloc_skb+0x156/0x410 [ 596.589016][T17606] ? __alloc_skb+0x156/0x410 [ 596.589034][T17606] __alloc_skb+0x156/0x410 [ 596.589051][T17606] ? __alloc_skb+0x35d/0x410 [ 596.589068][T17606] ? __pfx___alloc_skb+0x10/0x10 [ 596.589088][T17606] ? unwind_get_return_address+0x59/0xa0 [ 596.589112][T17606] ? __pfx___might_resched+0x10/0x10 [ 596.589142][T17606] netlink_alloc_large_skb+0x69/0x140 [ 596.589167][T17606] netlink_sendmsg+0x698/0xdd0 [ 596.589195][T17606] ? __pfx_netlink_sendmsg+0x10/0x10 [ 596.589223][T17606] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 596.589257][T17606] ____sys_sendmsg+0xa5d/0xc30 [ 596.589285][T17606] ? __pfx_____sys_sendmsg+0x10/0x10 [ 596.589310][T17606] ? get_compat_msghdr+0x11a/0x170 [ 596.589343][T17606] ___sys_sendmsg+0x134/0x1d0 [ 596.589367][T17606] ? __pfx____sys_sendmsg+0x10/0x10 [ 596.589400][T17606] ? find_held_lock+0x2b/0x80 [ 596.589437][T17606] __sys_sendmsg+0x16d/0x220 [ 596.589461][T17606] ? __pfx___sys_sendmsg+0x10/0x10 [ 596.589500][T17606] __do_fast_syscall_32+0xe8/0x680 [ 596.589529][T17606] do_fast_syscall_32+0x32/0x80 [ 596.589545][T17606] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 596.589567][T17606] RIP: 0023:0xf7fb4579 [ 596.589581][T17606] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 596.589599][T17606] RSP: 002b:00000000f54a655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 596.589617][T17606] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 596.589628][T17606] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 596.589636][T17606] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 596.589645][T17606] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 596.589656][T17606] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 596.589680][T17606] [ 596.724005][T17608] tipc: Enabled bearer , priority 0 [ 596.726945][T17608] syzkaller0: entered promiscuous mode [ 596.728863][T17608] syzkaller0: entered allmulticast mode [ 596.866799][T17607] tipc: Resetting bearer [ 596.877135][T17607] tipc: Disabling bearer [ 597.032334][T17610] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2716'. [ 597.036542][T17610] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2716'. [ 597.978963][T17625] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2721'. [ 597.983706][T17625] netlink: 'syz.4.2721': attribute type 21 has an invalid length. [ 598.256922][ T6055] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 598.328304][T17637] tipc: Enabled bearer , priority 0 [ 598.347463][T17637] syzkaller0: entered promiscuous mode [ 598.349239][T17637] syzkaller0: entered allmulticast mode [ 598.355701][T17637] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 598.372695][T17637] tipc: Resetting bearer [ 598.375243][T17635] tipc: Resetting bearer [ 598.383327][T17635] tipc: Disabling bearer [ 598.468650][T17641] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 598.470829][T17641] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 598.473698][T17641] vhci_hcd vhci_hcd.0: Device attached [ 598.480803][T17641] random: crng reseeded on system resumption [ 598.498702][T17645] tipc: Enabling of bearer rejected, failed to enable media [ 598.554735][T17647] new mount options do not match the existing superblock, will be ignored [ 598.558525][T17647] tipc: Enabled bearer , priority 0 [ 598.561213][T17647] syzkaller0: entered promiscuous mode [ 598.563039][T17647] syzkaller0: entered allmulticast mode [ 598.566667][T17647] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 598.578832][T17647] tipc: Resetting bearer [ 598.582224][T17646] tipc: Resetting bearer [ 598.593592][T17646] tipc: Disabling bearer [ 599.096943][ T60] usb 48-1: SetAddress Request (34) to port 0 [ 599.099487][ T60] usb 48-1: new SuperSpeed USB device number 34 using vhci_hcd [ 599.140770][T17642] vhci_hcd: connection reset by peer [ 599.154330][T14163] vhci_hcd vhci_hcd.5: stop threads [ 599.156182][T14163] vhci_hcd vhci_hcd.5: release socket [ 599.158567][T14163] vhci_hcd vhci_hcd.5: disconnect device [ 599.195285][T17663] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 599.198178][T17663] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 599.201898][T17663] vhci_hcd vhci_hcd.0: Device attached [ 599.476919][ T5945] usb 46-1: SetAddress Request (66) to port 0 [ 599.476956][ T5945] usb 46-1: new SuperSpeed USB device number 66 using vhci_hcd [ 599.642926][T17674] FAULT_INJECTION: forcing a failure. [ 599.642926][T17674] name failslab, interval 1, probability 0, space 0, times 0 [ 599.647142][T17674] CPU: 2 UID: 0 PID: 17674 Comm: syz.2.2733 Tainted: G L syzkaller #0 PREEMPT(full) [ 599.647161][T17674] Tainted: [L]=SOFTLOCKUP [ 599.647165][T17674] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 599.647172][T17674] Call Trace: [ 599.647176][T17674] [ 599.647181][T17674] dump_stack_lvl+0x16c/0x1f0 [ 599.647201][T17674] should_fail_ex+0x512/0x640 [ 599.647217][T17674] should_failslab+0xc2/0x120 [ 599.647235][T17674] __kmalloc_noprof+0xeb/0x910 [ 599.647247][T17674] ? __memcg_slab_post_alloc_hook+0x472/0x880 [ 599.647267][T17674] ? io_cache_alloc_new+0x45/0xf0 [ 599.647287][T17674] ? io_cache_alloc_new+0x45/0xf0 [ 599.647304][T17674] io_cache_alloc_new+0x45/0xf0 [ 599.647322][T17674] io_arm_apoll+0x7fc/0x960 [ 599.647338][T17674] ? __pfx_io_arm_apoll+0x10/0x10 [ 599.647356][T17674] ? __io_issue_sqe+0x14a/0x7c0 [ 599.647369][T17674] io_arm_poll_handler+0x223/0x2b0 [ 599.647386][T17674] io_queue_async+0xab/0x130 [ 599.647399][T17674] io_submit_sqes+0x154e/0x28e0 [ 599.647421][T17674] __do_sys_io_uring_enter+0xd6b/0x1630 [ 599.647449][T17674] ? __fget_files+0x20e/0x3c0 [ 599.647465][T17674] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 599.647482][T17674] ? fput+0x70/0xf0 [ 599.647493][T17674] ? ksys_write+0x1ac/0x250 [ 599.647509][T17674] ? __pfx_ksys_write+0x10/0x10 [ 599.647525][T17674] ? do_user_addr_fault+0x843/0x1370 [ 599.647541][T17674] __do_fast_syscall_32+0xe8/0x680 [ 599.647572][T17674] do_fast_syscall_32+0x32/0x80 [ 599.647600][T17674] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 599.647617][T17674] RIP: 0023:0xf70dd579 [ 599.647631][T17674] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 599.647642][T17674] RSP: 002b:00000000f54cd55c EFLAGS: 00000296 ORIG_RAX: 00000000000001aa [ 599.647653][T17674] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000000047f5 [ 599.647660][T17674] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 599.647667][T17674] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 599.647673][T17674] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 599.647680][T17674] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 599.647694][T17674] [ 599.757366][T17677] tipc: Enabled bearer , priority 0 [ 599.762368][T17677] syzkaller0: entered promiscuous mode [ 599.764237][T17677] syzkaller0: entered allmulticast mode [ 599.767922][T17679] tipc: Enabled bearer , priority 0 [ 599.770367][T17677] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 599.780848][T17679] syzkaller0: entered promiscuous mode [ 599.782780][T17679] syzkaller0: entered allmulticast mode [ 599.791044][T17677] tipc: Resetting bearer [ 599.794118][T17676] tipc: Resetting bearer [ 599.803643][T17676] tipc: Disabling bearer [ 599.809628][T17679] tipc: Resetting bearer [ 599.812775][T17678] tipc: Resetting bearer [ 599.821391][T17678] tipc: Disabling bearer [ 599.887439][T17666] vhci_hcd: connection reset by peer [ 599.890030][ T89] vhci_hcd vhci_hcd.4: stop threads [ 599.891971][ T89] vhci_hcd vhci_hcd.4: release socket [ 599.893903][ T89] vhci_hcd vhci_hcd.4: disconnect device [ 599.992625][T17689] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2738'. [ 600.395629][T17698] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 600.397770][T17698] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 600.401381][T17698] vhci_hcd vhci_hcd.0: Device attached [ 600.506978][T17239] usb 42-1: device descriptor read/8, error -110 [ 600.666974][ T6027] usb 50-1: SetAddress Request (39) to port 0 [ 600.669824][ T6027] usb 50-1: new SuperSpeed USB device number 39 using vhci_hcd [ 600.672591][T17704] can0: slcan on ttyS3. [ 600.927331][T17239] usb usb42-port1: attempt power cycle [ 601.035281][T17699] vhci_hcd: connection reset by peer [ 601.037404][T14278] vhci_hcd vhci_hcd.6: stop threads [ 601.039168][T14278] vhci_hcd vhci_hcd.6: release socket [ 601.041166][T14278] vhci_hcd vhci_hcd.6: disconnect device [ 601.089028][T17714] can0 (unregistered): slcan off ttyS3. [ 601.216371][T17726] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 601.218896][T17726] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 601.222184][T17726] vhci_hcd vhci_hcd.0: Device attached [ 601.227375][T17726] random: crng reseeded on system resumption [ 601.297728][T17239] usb 42-1: SetAddress Request (80) to port 0 [ 601.300310][T17239] usb 42-1: new SuperSpeed USB device number 80 using vhci_hcd [ 601.587182][T17730] can0: slcan on ttyS3. [ 601.653874][T17727] vhci_hcd: connection reset by peer [ 601.655826][ T6258] vhci_hcd vhci_hcd.2: stop threads [ 601.658044][ T6258] vhci_hcd vhci_hcd.2: release socket [ 601.660084][ T6258] vhci_hcd vhci_hcd.2: disconnect device [ 601.885257][T17742] fuse: Bad value for 'fd' [ 601.990960][T17748] tipc: Enabled bearer , priority 0 [ 601.994759][T17748] syzkaller0: entered promiscuous mode [ 601.997552][T17748] syzkaller0: entered allmulticast mode [ 602.002782][T17748] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 602.016245][T17748] FAULT_INJECTION: forcing a failure. [ 602.016245][T17748] name failslab, interval 1, probability 0, space 0, times 0 [ 602.022162][T17748] CPU: 2 UID: 0 PID: 17748 Comm: syz.6.2747 Tainted: G L syzkaller #0 PREEMPT(full) [ 602.022191][T17748] Tainted: [L]=SOFTLOCKUP [ 602.022198][T17748] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 602.022210][T17748] Call Trace: [ 602.022217][T17748] [ 602.022225][T17748] dump_stack_lvl+0x16c/0x1f0 [ 602.022257][T17748] should_fail_ex+0x512/0x640 [ 602.022282][T17748] should_failslab+0xc2/0x120 [ 602.022311][T17748] kmem_cache_alloc_node_noprof+0x86/0x800 [ 602.022334][T17748] ? __alloc_skb+0x156/0x410 [ 602.022360][T17748] ? __alloc_skb+0x156/0x410 [ 602.022379][T17748] __alloc_skb+0x156/0x410 [ 602.022398][T17748] ? __alloc_skb+0x35d/0x410 [ 602.022417][T17748] ? __pfx___alloc_skb+0x10/0x10 [ 602.022438][T17748] ? fib6_ifdown+0x880/0x8f0 [ 602.022468][T17748] ? __fib6_drop_pcpu_from.part.0+0xcd/0x510 [ 602.022502][T17748] inet6_rt_notify+0x1e0/0x4b0 [ 602.022533][T17748] fib6_del+0xf8e/0x17a0 [ 602.022570][T17748] ? __pfx_fib6_del+0x10/0x10 [ 602.022598][T17748] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 602.022627][T17748] ? fib6_ifdown+0xcd/0x8f0 [ 602.022660][T17748] fib6_clean_node+0x424/0x5d0 [ 602.022692][T17748] ? __pfx_fib6_clean_node+0x10/0x10 [ 602.022731][T17748] fib6_walk_continue+0x452/0x8d0 [ 602.022763][T17748] fib6_walk+0x182/0x370 [ 602.022789][T17748] ? __pfx_fib6_ifdown+0x10/0x10 [ 602.022816][T17748] fib6_clean_tree+0xd4/0x110 [ 602.022843][T17748] ? __pfx_fib6_clean_tree+0x10/0x10 [ 602.022880][T17748] ? __pfx_fib6_clean_node+0x10/0x10 [ 602.022909][T17748] ? __pfx_fib6_ifdown+0x10/0x10 [ 602.022944][T17748] ? __pfx_fib6_ifdown+0x10/0x10 [ 602.022971][T17748] __fib6_clean_all+0x107/0x2d0 [ 602.023004][T17748] rt6_disable_ip+0x2ec/0x990 [ 602.023027][T17748] ? __pfx___might_resched+0x10/0x10 [ 602.023054][T17748] ? rcu_is_watching+0x12/0xc0 [ 602.023080][T17748] ? __pfx_rt6_disable_ip+0x10/0x10 [ 602.023103][T17748] ? __mutex_lock+0x27b/0x1ca0 [ 602.023138][T17748] addrconf_ifdown.isra.0+0x12c/0x1b90 [ 602.023171][T17748] ? __mutex_unlock_slowpath+0x161/0x790 [ 602.023204][T17748] ? __pfx_addrconf_ifdown.isra.0+0x10/0x10 [ 602.023245][T17748] addrconf_notify+0x89a/0x19f0 [ 602.023266][T17748] ? ip6mr_device_event+0x1bc/0x230 [ 602.023293][T17748] notifier_call_chain+0xbc/0x3e0 [ 602.023322][T17748] ? __pfx_addrconf_notify+0x10/0x10 [ 602.023348][T17748] call_netdevice_notifiers_info+0xbe/0x110 [ 602.023380][T17748] netif_set_mtu_ext+0x563/0x7a0 [ 602.023406][T17748] ? __pfx_netif_set_mtu_ext+0x10/0x10 [ 602.023429][T17748] ? __lock_acquire+0x436/0x2890 [ 602.023454][T17748] ? __lock_acquire+0x436/0x2890 [ 602.023476][T17748] netif_set_mtu+0x98/0x140 [ 602.023499][T17748] ? __pfx_netif_set_mtu+0x10/0x10 [ 602.023533][T17748] ? full_name_hash+0xbc/0x110 [ 602.023555][T17748] dev_set_mtu+0xb2/0x260 [ 602.023607][T17748] dev_ifsioc+0xd1f/0x1ee0 [ 602.023633][T17748] ? __pfx_dev_ifsioc+0x10/0x10 [ 602.023654][T17748] ? __pfx___mutex_lock+0x10/0x10 [ 602.023694][T17748] ? dev_load+0x8e/0x240 [ 602.023722][T17748] dev_ioctl+0x223/0x1060 [ 602.023747][T17748] sock_do_ioctl+0x19d/0x280 [ 602.023774][T17748] ? __pfx_sock_do_ioctl+0x10/0x10 [ 602.023802][T17748] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 602.023834][T17748] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 602.023867][T17748] ? unix_ioctl+0x9f/0x580 [ 602.023897][T17748] compat_sock_ioctl+0x301/0x730 [ 602.023919][T17748] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 602.023936][T17748] ? hook_file_ioctl_common+0x144/0x410 [ 602.023965][T17748] ? __fget_files+0x20e/0x3c0 [ 602.023990][T17748] ? __fput_deferred+0x480/0x480 [ 602.024018][T17748] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 602.024035][T17748] __ia32_compat_sys_ioctl+0x242/0x370 [ 602.024064][T17748] __do_fast_syscall_32+0xe8/0x680 [ 602.024096][T17748] do_fast_syscall_32+0x32/0x80 [ 602.024113][T17748] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 602.024137][T17748] RIP: 0023:0xf7fb4579 [ 602.024152][T17748] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 602.024169][T17748] RSP: 002b:00000000f54a655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 602.024187][T17748] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000008922 [ 602.024199][T17748] RDX: 0000000080002280 RSI: 0000000000000000 RDI: 0000000000000000 [ 602.024210][T17748] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 602.024220][T17748] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 602.024231][T17748] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 602.024257][T17748] [ 602.026413][T17748] tipc: Resetting bearer [ 602.203735][T17747] tipc: Resetting bearer [ 602.216583][T17747] tipc: Disabling bearer [ 602.217234][T17744] can0 (unregistered): slcan off ttyS3. [ 602.347796][T17760] tipc: Enabled bearer , priority 0 [ 602.353162][T17760] tipc: Resetting bearer [ 602.363512][T17759] tipc: Disabling bearer [ 603.773252][T17786] fuse: Bad value for 'fd' [ 603.805139][T17789] fuse: Bad value for 'fd' [ 603.809272][T17789] FAULT_INJECTION: forcing a failure. [ 603.809272][T17789] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 603.813552][T17789] CPU: 3 UID: 0 PID: 17789 Comm: syz.4.2756 Tainted: G L syzkaller #0 PREEMPT(full) [ 603.813570][T17789] Tainted: [L]=SOFTLOCKUP [ 603.813575][T17789] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 603.813582][T17789] Call Trace: [ 603.813587][T17789] [ 603.813591][T17789] dump_stack_lvl+0x16c/0x1f0 [ 603.813612][T17789] should_fail_ex+0x512/0x640 [ 603.813628][T17789] _copy_to_user+0x32/0xd0 [ 603.813646][T17789] simple_read_from_buffer+0xcb/0x170 [ 603.813663][T17789] proc_fail_nth_read+0x197/0x240 [ 603.813683][T17789] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 603.813702][T17789] ? rw_verify_area+0xcf/0x6c0 [ 603.813716][T17789] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 603.813734][T17789] vfs_read+0x1e4/0xcf0 [ 603.813751][T17789] ? __pfx___mutex_lock+0x10/0x10 [ 603.813770][T17789] ? __pfx_vfs_read+0x10/0x10 [ 603.813784][T17789] ? find_held_lock+0x2b/0x80 [ 603.813803][T17789] ? __fget_files+0x20e/0x3c0 [ 603.813823][T17789] ksys_read+0x12a/0x250 [ 603.813839][T17789] ? __pfx_ksys_read+0x10/0x10 [ 603.813854][T17789] ? fput+0x70/0xf0 [ 603.813868][T17789] __do_fast_syscall_32+0xe8/0x680 [ 603.813887][T17789] do_fast_syscall_32+0x32/0x80 [ 603.813897][T17789] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 603.813912][T17789] RIP: 0023:0xf700d579 [ 603.813921][T17789] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 603.813931][T17789] RSP: 002b:00000000f53fd590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 603.813942][T17789] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f53fd620 [ 603.813950][T17789] RDX: 000000000000000f RSI: 00000000f73a6ff4 RDI: 0000000000000000 [ 603.813956][T17789] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 603.813963][T17789] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 603.813969][T17789] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 603.813983][T17789] [ 603.907674][T17793] tipc: Enabled bearer , priority 0 [ 603.910336][T17793] syzkaller0: entered promiscuous mode [ 603.912192][T17793] syzkaller0: entered allmulticast mode [ 603.915685][T17793] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 603.928875][T17793] tipc: Resetting bearer [ 603.931903][T17791] tipc: Resetting bearer [ 603.939799][T17791] tipc: Disabling bearer [ 604.028321][T17796] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 604.030490][T17796] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 604.033297][T17796] vhci_hcd vhci_hcd.0: Device attached [ 604.148256][T17800] fuse: Bad value for 'fd' [ 604.175051][T17805] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2760'. [ 604.179097][T17805] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2760'. [ 604.187516][ T60] usb 48-1: device descriptor read/8, error -110 [ 604.211384][T17807] can0: slcan on ttyS3. [ 604.290215][T17797] vhci_hcd: connection closed [ 604.290408][T14278] vhci_hcd vhci_hcd.6: stop threads [ 604.293864][T14278] vhci_hcd vhci_hcd.6: release socket [ 604.295723][T14278] vhci_hcd vhci_hcd.6: disconnect device [ 604.364710][T17816] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 604.366889][T17816] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 604.370217][T17816] vhci_hcd vhci_hcd.0: Device attached [ 604.440659][ T60] usb 48-1: SetAddress Request (35) to port 0 [ 604.443332][ T60] usb 48-1: new SuperSpeed USB device number 35 using vhci_hcd [ 604.488785][T17819] can0 (unregistered): slcan off ttyS3. [ 604.523654][T17816] random: crng reseeded on system resumption [ 604.531413][ T5945] usb 46-1: device descriptor read/8, error -110 [ 604.825387][T17817] vhci_hcd: connection reset by peer [ 604.830191][ T6214] vhci_hcd vhci_hcd.5: stop threads [ 604.832863][ T6214] vhci_hcd vhci_hcd.5: release socket [ 604.835427][ T6214] vhci_hcd vhci_hcd.5: disconnect device [ 604.947679][ T5945] usb usb46-port1: attempt power cycle [ 605.449386][T17847] tipc: Enabled bearer , priority 0 [ 605.453572][T17847] syzkaller0: entered promiscuous mode [ 605.455970][T17847] syzkaller0: entered allmulticast mode [ 605.471054][T17847] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 605.490331][T17847] syzkaller0: MTU too low for tipc bearer [ 605.492960][T17847] tipc: Disabling bearer [ 605.507748][ T5945] usb usb46-port1: unable to enumerate USB device [ 605.628860][T17849] tipc: Enabled bearer , priority 0 [ 605.631920][T17849] syzkaller0: entered promiscuous mode [ 605.633829][T17849] syzkaller0: entered allmulticast mode [ 605.645023][T17849] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 605.690600][T17849] syzkaller0: MTU too low for tipc bearer [ 605.693280][T17849] tipc: Disabling bearer [ 605.779300][T17852] tipc: Enabled bearer , priority 0 [ 605.781821][T17852] syzkaller0: entered promiscuous mode [ 605.783584][T17852] syzkaller0: entered allmulticast mode [ 605.787197][T17852] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 605.797033][ T6027] usb 50-1: device descriptor read/8, error -110 [ 605.797307][T17852] FAULT_INJECTION: forcing a failure. [ 605.797307][T17852] name failslab, interval 1, probability 0, space 0, times 0 [ 605.803980][T17852] CPU: 3 UID: 0 PID: 17852 Comm: syz.5.2769 Tainted: G L syzkaller #0 PREEMPT(full) [ 605.803997][T17852] Tainted: [L]=SOFTLOCKUP [ 605.804012][T17852] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 605.804020][T17852] Call Trace: [ 605.804025][T17852] [ 605.804030][T17852] dump_stack_lvl+0x16c/0x1f0 [ 605.804051][T17852] should_fail_ex+0x512/0x640 [ 605.804066][T17852] should_failslab+0xc2/0x120 [ 605.804085][T17852] __kmalloc_cache_noprof+0x80/0x800 [ 605.804098][T17852] ? __lock_acquire+0x436/0x2890 [ 605.804108][T17852] ? nsim_fib_event_nb+0x1b6/0xec0 [ 605.804126][T17852] ? nsim_fib_event_nb+0x1b6/0xec0 [ 605.804139][T17852] nsim_fib_event_nb+0x1b6/0xec0 [ 605.804155][T17852] ? lock_acquire+0x179/0x330 [ 605.804166][T17852] notifier_call_chain+0xbc/0x3e0 [ 605.804184][T17852] ? __pfx_nsim_fib_event_nb+0x10/0x10 [ 605.804201][T17852] atomic_notifier_call_chain+0x71/0x1c0 [ 605.804213][T17852] call_fib_notifiers+0x33/0x70 [ 605.804229][T17852] fib6_del+0xeec/0x17a0 [ 605.804251][T17852] ? __pfx_fib6_del+0x10/0x10 [ 605.804270][T17852] ? fib6_ifdown+0xcd/0x8f0 [ 605.804290][T17852] fib6_clean_node+0x424/0x5d0 [ 605.804308][T17852] ? __pfx_fib6_clean_node+0x10/0x10 [ 605.804331][T17852] fib6_walk_continue+0x452/0x8d0 [ 605.804349][T17852] fib6_walk+0x182/0x370 [ 605.804366][T17852] ? __pfx_fib6_ifdown+0x10/0x10 [ 605.804382][T17852] fib6_clean_tree+0xd4/0x110 [ 605.804397][T17852] ? __pfx_fib6_clean_tree+0x10/0x10 [ 605.804415][T17852] ? __pfx_fib6_clean_node+0x10/0x10 [ 605.804433][T17852] ? __pfx_fib6_ifdown+0x10/0x10 [ 605.804454][T17852] ? __pfx_fib6_ifdown+0x10/0x10 [ 605.804471][T17852] __fib6_clean_all+0x107/0x2d0 [ 605.804489][T17852] rt6_disable_ip+0x2ec/0x990 [ 605.804504][T17852] ? __pfx___might_resched+0x10/0x10 [ 605.804520][T17852] ? rcu_is_watching+0x12/0xc0 [ 605.804536][T17852] ? __pfx_rt6_disable_ip+0x10/0x10 [ 605.804554][T17852] ? __mutex_lock+0x27b/0x1ca0 [ 605.804574][T17852] addrconf_ifdown.isra.0+0x12c/0x1b90 [ 605.804594][T17852] ? __mutex_unlock_slowpath+0x161/0x790 [ 605.804613][T17852] ? __pfx_addrconf_ifdown.isra.0+0x10/0x10 [ 605.804637][T17852] addrconf_notify+0x89a/0x19f0 [ 605.804649][T17852] ? ip6mr_device_event+0x1bc/0x230 [ 605.804665][T17852] notifier_call_chain+0xbc/0x3e0 [ 605.804681][T17852] ? __pfx_addrconf_notify+0x10/0x10 [ 605.804696][T17852] call_netdevice_notifiers_info+0xbe/0x110 [ 605.804715][T17852] netif_set_mtu_ext+0x563/0x7a0 [ 605.804735][T17852] ? __pfx_netif_set_mtu_ext+0x10/0x10 [ 605.804749][T17852] ? __lock_acquire+0x436/0x2890 [ 605.804762][T17852] ? __lock_acquire+0x436/0x2890 [ 605.804775][T17852] netif_set_mtu+0x98/0x140 [ 605.804789][T17852] ? __pfx_netif_set_mtu+0x10/0x10 [ 605.804808][T17852] ? full_name_hash+0xbc/0x110 [ 605.804822][T17852] dev_set_mtu+0xb2/0x260 [ 605.804839][T17852] dev_ifsioc+0xd1f/0x1ee0 [ 605.804854][T17852] ? __pfx_dev_ifsioc+0x10/0x10 [ 605.804866][T17852] ? __pfx___mutex_lock+0x10/0x10 [ 605.804889][T17852] ? dev_load+0x8e/0x240 [ 605.804905][T17852] dev_ioctl+0x223/0x1060 [ 605.804920][T17852] sock_do_ioctl+0x19d/0x280 [ 605.804937][T17852] ? __pfx_sock_do_ioctl+0x10/0x10 [ 605.804953][T17852] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 605.804973][T17852] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 605.804990][T17852] ? unix_ioctl+0x9f/0x580 [ 605.805007][T17852] compat_sock_ioctl+0x301/0x730 [ 605.805019][T17852] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 605.805029][T17852] ? hook_file_ioctl_common+0x144/0x410 [ 605.805045][T17852] ? __fget_files+0x20e/0x3c0 [ 605.805060][T17852] ? __fput_deferred+0x480/0x480 [ 605.805075][T17852] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 605.805085][T17852] __ia32_compat_sys_ioctl+0x242/0x370 [ 605.805101][T17852] __do_fast_syscall_32+0xe8/0x680 [ 605.805120][T17852] do_fast_syscall_32+0x32/0x80 [ 605.805130][T17852] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 605.805145][T17852] RIP: 0023:0xf7fe5579 [ 605.805154][T17852] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 605.805165][T17852] RSP: 002b:00000000f54d655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 605.805176][T17852] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000008922 [ 605.805183][T17852] RDX: 0000000080002280 RSI: 0000000000000000 RDI: 0000000000000000 [ 605.805189][T17852] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 605.805196][T17852] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 605.805202][T17852] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 605.805216][T17852] [ 605.971396][T17852] tipc: Resetting bearer [ 606.025448][T17850] tipc: Resetting bearer [ 606.055251][T17850] tipc: Disabling bearer [ 606.227840][ T6027] usb usb50-port1: attempt power cycle [ 606.347112][T17239] usb 42-1: device descriptor read/8, error -110 [ 606.747363][T17239] usb usb42-port1: unable to enumerate USB device [ 606.792072][T17880] netlink: 'syz.6.2779': attribute type 7 has an invalid length. [ 606.794992][T17880] netlink: 'syz.6.2779': attribute type 8 has an invalid length. [ 606.798195][T17880] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2779'. [ 606.807823][ T6027] usb usb50-port1: unable to enumerate USB device [ 607.140419][T17884] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 607.142754][T17884] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 607.145950][T17884] vhci_hcd vhci_hcd.0: Device attached [ 607.150775][T17884] random: crng reseeded on system resumption [ 607.283381][T17888] netlink: 'syz.6.2780': attribute type 1 has an invalid length. [ 607.686906][T17885] vhci_hcd: connection closed [ 607.749073][ T89] vhci_hcd vhci_hcd.5: stop threads [ 607.752725][ T89] vhci_hcd vhci_hcd.5: release socket [ 607.754649][ T89] vhci_hcd vhci_hcd.5: disconnect device [ 607.922322][T17894] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 607.924547][T17894] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 607.927436][T17894] vhci_hcd vhci_hcd.0: Device attached [ 607.930279][T17897] tipc: Enabled bearer , priority 0 [ 607.933924][T17897] syzkaller0: entered promiscuous mode [ 607.935767][T17897] syzkaller0: entered allmulticast mode [ 607.988107][T17897] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 607.988140][T17900] vhci_hcd: connection closed [ 607.991165][ T63] vhci_hcd vhci_hcd.4: stop threads [ 607.995201][ T63] vhci_hcd vhci_hcd.4: release socket [ 607.997438][ T63] vhci_hcd vhci_hcd.4: disconnect device [ 608.009108][T17897] FAULT_INJECTION: forcing a failure. [ 608.009108][T17897] name failslab, interval 1, probability 0, space 0, times 0 [ 608.013022][T17897] CPU: 2 UID: 0 PID: 17897 Comm: syz.2.2783 Tainted: G L syzkaller #0 PREEMPT(full) [ 608.013039][T17897] Tainted: [L]=SOFTLOCKUP [ 608.013043][T17897] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 608.013050][T17897] Call Trace: [ 608.013054][T17897] [ 608.013058][T17897] dump_stack_lvl+0x16c/0x1f0 [ 608.013079][T17897] should_fail_ex+0x512/0x640 [ 608.013094][T17897] should_failslab+0xc2/0x120 [ 608.013112][T17897] __kmalloc_noprof+0xeb/0x910 [ 608.013125][T17897] ? nsim_fib_event_nb+0x44c/0xec0 [ 608.013142][T17897] ? nsim_fib_event_nb+0x44c/0xec0 [ 608.013155][T17897] nsim_fib_event_nb+0x44c/0xec0 [ 608.013170][T17897] ? lock_acquire+0x179/0x330 [ 608.013182][T17897] notifier_call_chain+0xbc/0x3e0 [ 608.013200][T17897] ? __pfx_nsim_fib_event_nb+0x10/0x10 [ 608.013217][T17897] atomic_notifier_call_chain+0x71/0x1c0 [ 608.013229][T17897] call_fib_notifiers+0x33/0x70 [ 608.013245][T17897] fib6_del+0xeec/0x17a0 [ 608.013267][T17897] ? __pfx_fib6_del+0x10/0x10 [ 608.013286][T17897] ? fib6_ifdown+0xcd/0x8f0 [ 608.013306][T17897] fib6_clean_node+0x424/0x5d0 [ 608.013324][T17897] ? __pfx_fib6_clean_node+0x10/0x10 [ 608.013347][T17897] fib6_walk_continue+0x452/0x8d0 [ 608.013365][T17897] fib6_walk+0x182/0x370 [ 608.013381][T17897] ? __pfx_fib6_ifdown+0x10/0x10 [ 608.013397][T17897] fib6_clean_tree+0xd4/0x110 [ 608.013413][T17897] ? __pfx_fib6_clean_tree+0x10/0x10 [ 608.013431][T17897] ? __pfx_fib6_clean_node+0x10/0x10 [ 608.013448][T17897] ? __pfx_fib6_ifdown+0x10/0x10 [ 608.013469][T17897] ? __pfx_fib6_ifdown+0x10/0x10 [ 608.013486][T17897] __fib6_clean_all+0x107/0x2d0 [ 608.013505][T17897] rt6_disable_ip+0x2ec/0x990 [ 608.013519][T17897] ? __pfx___might_resched+0x10/0x10 [ 608.013536][T17897] ? rcu_is_watching+0x12/0xc0 [ 608.013551][T17897] ? __pfx_rt6_disable_ip+0x10/0x10 [ 608.013566][T17897] ? __mutex_lock+0x27b/0x1ca0 [ 608.013586][T17897] addrconf_ifdown.isra.0+0x12c/0x1b90 [ 608.013610][T17897] ? __mutex_unlock_slowpath+0x161/0x790 [ 608.013630][T17897] ? __pfx_addrconf_ifdown.isra.0+0x10/0x10 [ 608.013653][T17897] addrconf_notify+0x89a/0x19f0 [ 608.013665][T17897] ? ip6mr_device_event+0x1bc/0x230 [ 608.013680][T17897] notifier_call_chain+0xbc/0x3e0 [ 608.013697][T17897] ? __pfx_addrconf_notify+0x10/0x10 [ 608.013712][T17897] call_netdevice_notifiers_info+0xbe/0x110 [ 608.013731][T17897] netif_set_mtu_ext+0x563/0x7a0 [ 608.013747][T17897] ? __pfx_netif_set_mtu_ext+0x10/0x10 [ 608.013761][T17897] ? __lock_acquire+0x436/0x2890 [ 608.013774][T17897] ? __lock_acquire+0x436/0x2890 [ 608.013786][T17897] netif_set_mtu+0x98/0x140 [ 608.013800][T17897] ? __pfx_netif_set_mtu+0x10/0x10 [ 608.013819][T17897] ? full_name_hash+0xbc/0x110 [ 608.013832][T17897] dev_set_mtu+0xb2/0x260 [ 608.013848][T17897] dev_ifsioc+0xd1f/0x1ee0 [ 608.013863][T17897] ? __pfx_dev_ifsioc+0x10/0x10 [ 608.013876][T17897] ? __pfx___mutex_lock+0x10/0x10 [ 608.013898][T17897] ? dev_load+0x8e/0x240 [ 608.013914][T17897] dev_ioctl+0x223/0x1060 [ 608.013928][T17897] sock_do_ioctl+0x19d/0x280 [ 608.013946][T17897] ? __pfx_sock_do_ioctl+0x10/0x10 [ 608.013962][T17897] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 608.013981][T17897] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 608.013999][T17897] ? unix_ioctl+0x9f/0x580 [ 608.014016][T17897] compat_sock_ioctl+0x301/0x730 [ 608.014028][T17897] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 608.014038][T17897] ? hook_file_ioctl_common+0x144/0x410 [ 608.014063][T17897] ? __fget_files+0x20e/0x3c0 [ 608.014085][T17897] ? __fput_deferred+0x480/0x480 [ 608.014109][T17897] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 608.014127][T17897] __ia32_compat_sys_ioctl+0x242/0x370 [ 608.014153][T17897] __do_fast_syscall_32+0xe8/0x680 [ 608.014183][T17897] do_fast_syscall_32+0x32/0x80 [ 608.014200][T17897] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 608.014224][T17897] RIP: 0023:0xf70dd579 [ 608.014241][T17897] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 608.014259][T17897] RSP: 002b:00000000f54cd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 608.014278][T17897] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000008922 [ 608.014290][T17897] RDX: 0000000080002280 RSI: 0000000000000000 RDI: 0000000000000000 [ 608.014301][T17897] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 608.014311][T17897] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 608.014322][T17897] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 608.014349][T17897] [ 608.068185][T17897] tipc: Resetting bearer [ 608.188830][T17895] tipc: Resetting bearer [ 608.219868][T17895] tipc: Disabling bearer [ 608.330495][T17912] FAULT_INJECTION: forcing a failure. [ 608.330495][T17912] name failslab, interval 1, probability 0, space 0, times 0 [ 608.334641][T17912] CPU: 1 UID: 0 PID: 17912 Comm: syz.2.2786 Tainted: G L syzkaller #0 PREEMPT(full) [ 608.334659][T17912] Tainted: [L]=SOFTLOCKUP [ 608.334664][T17912] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 608.334670][T17912] Call Trace: [ 608.334675][T17912] [ 608.334680][T17912] dump_stack_lvl+0x16c/0x1f0 [ 608.334702][T17912] should_fail_ex+0x512/0x640 [ 608.334717][T17912] should_failslab+0xc2/0x120 [ 608.334735][T17912] __kmalloc_noprof+0xeb/0x910 [ 608.334748][T17912] ? io_cache_alloc_new+0x45/0xf0 [ 608.334768][T17912] ? io_cache_alloc_new+0x45/0xf0 [ 608.334786][T17912] io_cache_alloc_new+0x45/0xf0 [ 608.334803][T17912] io_arm_apoll+0x7fc/0x960 [ 608.334820][T17912] ? __pfx_io_arm_apoll+0x10/0x10 [ 608.334841][T17912] ? __io_issue_sqe+0x14a/0x7c0 [ 608.334854][T17912] io_arm_poll_handler+0x223/0x2b0 [ 608.334871][T17912] io_queue_async+0xab/0x130 [ 608.334884][T17912] io_submit_sqes+0x154e/0x28e0 [ 608.334906][T17912] __do_sys_io_uring_enter+0xd6b/0x1630 [ 608.334923][T17912] ? __fget_files+0x20e/0x3c0 [ 608.334940][T17912] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 608.334957][T17912] ? fput+0x70/0xf0 [ 608.334968][T17912] ? ksys_write+0x1ac/0x250 [ 608.334983][T17912] ? __pfx_ksys_write+0x10/0x10 [ 608.335000][T17912] ? do_user_addr_fault+0x843/0x1370 [ 608.335017][T17912] __do_fast_syscall_32+0xe8/0x680 [ 608.335036][T17912] do_fast_syscall_32+0x32/0x80 [ 608.335046][T17912] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 608.335060][T17912] RIP: 0023:0xf70dd579 [ 608.335070][T17912] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 608.335081][T17912] RSP: 002b:00000000f54cd55c EFLAGS: 00000296 ORIG_RAX: 00000000000001aa [ 608.335092][T17912] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000000047f5 [ 608.335099][T17912] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 608.335106][T17912] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 608.335112][T17912] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 608.335119][T17912] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 608.335133][T17912] [ 608.444953][T17917] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2788'. [ 608.448915][T17917] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2788'. [ 608.491491][T17919] can0: slcan on ttyS3. [ 608.509674][T17921] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2790'. [ 608.758590][ T6027] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 608.966901][ T6027] usb 10-1: Using ep0 maxpacket: 8 [ 608.969956][ T6027] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 608.973394][ T6027] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 608.976332][ T6027] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 608.983538][ T6027] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 608.987204][T17936] can0 (unregistered): slcan off ttyS3. [ 608.993649][ T6027] usb 10-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 608.996596][ T6027] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.008736][ T6027] hub 10-1:1.0: bad descriptor, ignoring hub [ 609.014585][ T6027] hub 10-1:1.0: probe with driver hub failed with error -5 [ 609.024390][ T6027] cdc_wdm 10-1:1.0: skipping garbage [ 609.030689][ T6027] cdc_wdm 10-1:1.0: skipping garbage [ 609.037457][ T6027] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 609.040765][ T6027] cdc_wdm 10-1:1.0: Unknown control protocol [ 609.467239][ T60] usb 48-1: device descriptor read/8, error -110 [ 609.577776][ T60] usb usb48-port1: attempt power cycle [ 609.960962][T17921] cdc_wdm 10-1:1.0: Error autopm - -16 [ 609.961253][ T6027] usb 10-1: USB disconnect, device number 6 [ 610.096983][ T6027] usb 10-1: new low-speed USB device number 7 using dummy_hcd [ 610.138062][ T60] usb usb48-port1: unable to enumerate USB device [ 610.227044][ T6027] usb 10-1: device descriptor read/64, error -71 [ 610.466923][ T6027] usb 10-1: new low-speed USB device number 8 using dummy_hcd [ 610.796017][ T6027] usb 10-1: device descriptor read/64, error -71 [ 610.918618][ T6027] usb usb10-port1: attempt power cycle [ 611.272503][T17965] fuse: Unknown parameter '01777777777777777777777' [ 611.327113][ T6027] usb 10-1: new low-speed USB device number 9 using dummy_hcd [ 611.357813][ T6027] usb 10-1: device descriptor read/8, error -71 [ 611.541323][T17975] tipc: Enabled bearer , priority 0 [ 611.544582][T17975] syzkaller0: entered promiscuous mode [ 611.546344][T17975] syzkaller0: entered allmulticast mode [ 611.551323][T17975] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 611.583392][T17975] FAULT_INJECTION: forcing a failure. [ 611.583392][T17975] name failslab, interval 1, probability 0, space 0, times 0 [ 611.587616][T17975] CPU: 3 UID: 0 PID: 17975 Comm: syz.6.2798 Tainted: G L syzkaller #0 PREEMPT(full) [ 611.587634][T17975] Tainted: [L]=SOFTLOCKUP [ 611.587638][T17975] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 611.587645][T17975] Call Trace: [ 611.587650][T17975] [ 611.587654][T17975] dump_stack_lvl+0x16c/0x1f0 [ 611.587675][T17975] should_fail_ex+0x512/0x640 [ 611.587690][T17975] should_failslab+0xc2/0x120 [ 611.587709][T17975] kmem_cache_alloc_node_noprof+0x86/0x800 [ 611.587723][T17975] ? __alloc_skb+0x156/0x410 [ 611.587739][T17975] ? __alloc_skb+0x156/0x410 [ 611.587750][T17975] __alloc_skb+0x156/0x410 [ 611.587761][T17975] ? __alloc_skb+0x35d/0x410 [ 611.587773][T17975] ? __pfx___alloc_skb+0x10/0x10 [ 611.587785][T17975] ? fib6_ifdown+0x880/0x8f0 [ 611.587803][T17975] ? find_held_lock+0x2b/0x80 [ 611.587820][T17975] inet6_rt_notify+0x1e0/0x4b0 [ 611.587837][T17975] fib6_del+0xf8e/0x17a0 [ 611.587859][T17975] ? __pfx_fib6_del+0x10/0x10 [ 611.587877][T17975] ? fib6_ifdown+0xcd/0x8f0 [ 611.587897][T17975] fib6_clean_node+0x424/0x5d0 [ 611.587915][T17975] ? __pfx_fib6_clean_node+0x10/0x10 [ 611.587938][T17975] fib6_walk_continue+0x452/0x8d0 [ 611.587956][T17975] fib6_walk+0x182/0x370 [ 611.587972][T17975] ? __pfx_fib6_ifdown+0x10/0x10 [ 611.587988][T17975] fib6_clean_tree+0xd4/0x110 [ 611.588004][T17975] ? __pfx_fib6_clean_tree+0x10/0x10 [ 611.588022][T17975] ? __pfx_fib6_clean_node+0x10/0x10 [ 611.588039][T17975] ? __pfx_fib6_ifdown+0x10/0x10 [ 611.588060][T17975] ? __pfx_fib6_ifdown+0x10/0x10 [ 611.588077][T17975] __fib6_clean_all+0x107/0x2d0 [ 611.588096][T17975] rt6_disable_ip+0x2ec/0x990 [ 611.588110][T17975] ? __pfx___might_resched+0x10/0x10 [ 611.588126][T17975] ? rcu_is_watching+0x12/0xc0 [ 611.588143][T17975] ? __pfx_rt6_disable_ip+0x10/0x10 [ 611.588157][T17975] ? __mutex_lock+0x27b/0x1ca0 [ 611.588178][T17975] addrconf_ifdown.isra.0+0x12c/0x1b90 [ 611.588198][T17975] ? __mutex_unlock_slowpath+0x161/0x790 [ 611.588217][T17975] ? __pfx_addrconf_ifdown.isra.0+0x10/0x10 [ 611.588241][T17975] addrconf_notify+0x89a/0x19f0 [ 611.588253][T17975] ? ip6mr_device_event+0x1bc/0x230 [ 611.588268][T17975] notifier_call_chain+0xbc/0x3e0 [ 611.588286][T17975] ? __pfx_addrconf_notify+0x10/0x10 [ 611.588301][T17975] call_netdevice_notifiers_info+0xbe/0x110 [ 611.588321][T17975] netif_set_mtu_ext+0x563/0x7a0 [ 611.588337][T17975] ? __pfx_netif_set_mtu_ext+0x10/0x10 [ 611.588350][T17975] ? __lock_acquire+0x436/0x2890 [ 611.588364][T17975] ? __lock_acquire+0x436/0x2890 [ 611.588376][T17975] netif_set_mtu+0x98/0x140 [ 611.588390][T17975] ? __pfx_netif_set_mtu+0x10/0x10 [ 611.588409][T17975] ? full_name_hash+0xbc/0x110 [ 611.588422][T17975] dev_set_mtu+0xb2/0x260 [ 611.588438][T17975] dev_ifsioc+0xd1f/0x1ee0 [ 611.588454][T17975] ? __pfx_dev_ifsioc+0x10/0x10 [ 611.588471][T17975] ? __pfx___mutex_lock+0x10/0x10 [ 611.588493][T17975] ? dev_load+0x8e/0x240 [ 611.588509][T17975] dev_ioctl+0x223/0x1060 [ 611.588524][T17975] sock_do_ioctl+0x19d/0x280 [ 611.588541][T17975] ? __pfx_sock_do_ioctl+0x10/0x10 [ 611.588558][T17975] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 611.588576][T17975] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 611.588593][T17975] ? unix_ioctl+0x9f/0x580 [ 611.588611][T17975] compat_sock_ioctl+0x301/0x730 [ 611.588623][T17975] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 611.588633][T17975] ? hook_file_ioctl_common+0x144/0x410 [ 611.588649][T17975] ? __fget_files+0x20e/0x3c0 [ 611.588664][T17975] ? __fput_deferred+0x480/0x480 [ 611.588678][T17975] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 611.588688][T17975] __ia32_compat_sys_ioctl+0x242/0x370 [ 611.588704][T17975] __do_fast_syscall_32+0xe8/0x680 [ 611.588723][T17975] do_fast_syscall_32+0x32/0x80 [ 611.588733][T17975] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 611.588747][T17975] RIP: 0023:0xf7fb4579 [ 611.588756][T17975] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 611.588767][T17975] RSP: 002b:00000000f54a655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 611.588778][T17975] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000008922 [ 611.588785][T17975] RDX: 0000000080002280 RSI: 0000000000000000 RDI: 0000000000000000 [ 611.588792][T17975] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 611.588798][T17975] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 611.588804][T17975] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 611.588818][T17975] [ 611.589581][T17975] tipc: Resetting bearer [ 611.753300][T17974] tipc: Resetting bearer [ 611.783081][T17974] tipc: Disabling bearer [ 611.798346][T17977] tipc: Enabled bearer , priority 0 [ 611.801901][T17977] syzkaller0: entered promiscuous mode [ 611.804084][T17977] syzkaller0: entered allmulticast mode [ 611.840198][T17977] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 611.897044][T17977] syzkaller0: MTU too low for tipc bearer [ 611.898958][T17977] tipc: Disabling bearer [ 611.987751][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 611.987762][ T40] audit: type=1326 audit(1766672185.038:1834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17988 comm="syz.6.2804" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb4579 code=0x0 [ 612.748235][T18021] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2808'. [ 613.218454][T18028] FAULT_INJECTION: forcing a failure. [ 613.218454][T18028] name failslab, interval 1, probability 0, space 0, times 0 [ 613.222757][T18028] CPU: 2 UID: 0 PID: 18028 Comm: syz.5.2810 Tainted: G L syzkaller #0 PREEMPT(full) [ 613.222775][T18028] Tainted: [L]=SOFTLOCKUP [ 613.222779][T18028] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 613.222786][T18028] Call Trace: [ 613.222791][T18028] [ 613.222795][T18028] dump_stack_lvl+0x16c/0x1f0 [ 613.222816][T18028] should_fail_ex+0x512/0x640 [ 613.222832][T18028] should_failslab+0xc2/0x120 [ 613.222850][T18028] __kmalloc_noprof+0xeb/0x910 [ 613.222863][T18028] ? io_cache_alloc_new+0x45/0xf0 [ 613.222883][T18028] ? io_cache_alloc_new+0x45/0xf0 [ 613.222900][T18028] io_cache_alloc_new+0x45/0xf0 [ 613.222918][T18028] io_arm_apoll+0x7fc/0x960 [ 613.222935][T18028] ? __pfx_io_arm_apoll+0x10/0x10 [ 613.222963][T18028] ? __io_issue_sqe+0x14a/0x7c0 [ 613.222982][T18028] io_arm_poll_handler+0x223/0x2b0 [ 613.223005][T18028] io_queue_async+0xab/0x130 [ 613.223025][T18028] io_submit_sqes+0x154e/0x28e0 [ 613.223067][T18028] __do_sys_io_uring_enter+0xd6b/0x1630 [ 613.223084][T18028] ? __fget_files+0x20e/0x3c0 [ 613.223101][T18028] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 613.223118][T18028] ? fput+0x70/0xf0 [ 613.223128][T18028] ? ksys_write+0x1ac/0x250 [ 613.223144][T18028] ? __pfx_ksys_write+0x10/0x10 [ 613.223160][T18028] ? do_user_addr_fault+0x843/0x1370 [ 613.223177][T18028] __do_fast_syscall_32+0xe8/0x680 [ 613.223196][T18028] do_fast_syscall_32+0x32/0x80 [ 613.223206][T18028] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 613.223221][T18028] RIP: 0023:0xf7fe5579 [ 613.223230][T18028] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 613.223241][T18028] RSP: 002b:00000000f54d655c EFLAGS: 00000296 ORIG_RAX: 00000000000001aa [ 613.223252][T18028] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000000047f5 [ 613.223259][T18028] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 613.223265][T18028] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 613.223272][T18028] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 613.223278][T18028] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 613.223292][T18028] [ 613.590477][T18035] tipc: Enabled bearer , priority 0 [ 613.593123][T18035] syzkaller0: entered promiscuous mode [ 613.594922][T18035] syzkaller0: entered allmulticast mode [ 613.598263][T18035] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 613.609437][T18035] tipc: Resetting bearer [ 613.612129][T18034] tipc: Resetting bearer [ 613.619505][T18034] tipc: Disabling bearer [ 613.746179][ T40] audit: type=1326 audit(1766672186.788:1835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18036 comm="syz.6.2813" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 613.753450][ T40] audit: type=1326 audit(1766672186.788:1836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18036 comm="syz.6.2813" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 613.760665][ T40] audit: type=1326 audit(1766672186.788:1837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18036 comm="syz.6.2813" exe="/syz-executor" sig=0 arch=40000003 syscall=385 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 613.762395][T18037] lo speed is unknown, defaulting to 1000 [ 613.769369][ T40] audit: type=1326 audit(1766672186.788:1838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18036 comm="syz.6.2813" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 613.779664][ T40] audit: type=1326 audit(1766672186.798:1839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18036 comm="syz.6.2813" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 613.787285][ T40] audit: type=1326 audit(1766672186.798:1840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18036 comm="syz.6.2813" exe="/syz-executor" sig=0 arch=40000003 syscall=310 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 613.885267][ T40] audit: type=1326 audit(1766672186.928:1841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18036 comm="syz.6.2813" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 613.900407][ T40] audit: type=1326 audit(1766672186.928:1842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18036 comm="syz.6.2813" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 613.913008][ T40] audit: type=1326 audit(1766672186.948:1843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18036 comm="syz.6.2813" exe="/syz-executor" sig=0 arch=40000003 syscall=248 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 615.541256][T18070] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2821'. [ 615.679415][T18070] /dev/sr0: Can't open blockdev [ 615.785423][T18079] tipc: Enabled bearer , priority 0 [ 615.788105][T18079] syzkaller0: entered promiscuous mode [ 615.789873][T18079] syzkaller0: entered allmulticast mode [ 615.793478][T18079] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 615.805141][T18079] FAULT_INJECTION: forcing a failure. [ 615.805141][T18079] name failslab, interval 1, probability 0, space 0, times 0 [ 615.809212][T18079] CPU: 0 UID: 0 PID: 18079 Comm: syz.2.2824 Tainted: G L syzkaller #0 PREEMPT(full) [ 615.809229][T18079] Tainted: [L]=SOFTLOCKUP [ 615.809233][T18079] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 615.809240][T18079] Call Trace: [ 615.809245][T18079] [ 615.809249][T18079] dump_stack_lvl+0x16c/0x1f0 [ 615.809272][T18079] should_fail_ex+0x512/0x640 [ 615.809288][T18079] should_failslab+0xc2/0x120 [ 615.809306][T18079] kmem_cache_alloc_node_noprof+0x86/0x800 [ 615.809320][T18079] ? __alloc_skb+0x156/0x410 [ 615.809336][T18079] ? __alloc_skb+0x156/0x410 [ 615.809347][T18079] __alloc_skb+0x156/0x410 [ 615.809358][T18079] ? __alloc_skb+0x35d/0x410 [ 615.809369][T18079] ? __pfx___alloc_skb+0x10/0x10 [ 615.809382][T18079] ? fib6_ifdown+0x880/0x8f0 [ 615.809399][T18079] ? __fib6_drop_pcpu_from.part.0+0xcd/0x510 [ 615.809419][T18079] inet6_rt_notify+0x1e0/0x4b0 [ 615.809436][T18079] fib6_del+0xf8e/0x17a0 [ 615.809457][T18079] ? __pfx_fib6_del+0x10/0x10 [ 615.809474][T18079] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 615.809492][T18079] ? fib6_ifdown+0xcd/0x8f0 [ 615.809511][T18079] fib6_clean_node+0x424/0x5d0 [ 615.809530][T18079] ? __pfx_fib6_clean_node+0x10/0x10 [ 615.809552][T18079] fib6_walk_continue+0x452/0x8d0 [ 615.809570][T18079] fib6_walk+0x182/0x370 [ 615.809586][T18079] ? __pfx_fib6_ifdown+0x10/0x10 [ 615.809602][T18079] fib6_clean_tree+0xd4/0x110 [ 615.809620][T18079] ? __pfx_fib6_clean_tree+0x10/0x10 [ 615.809638][T18079] ? __pfx_fib6_clean_node+0x10/0x10 [ 615.809655][T18079] ? __pfx_fib6_ifdown+0x10/0x10 [ 615.809680][T18079] ? __pfx_fib6_ifdown+0x10/0x10 [ 615.809697][T18079] __fib6_clean_all+0x107/0x2d0 [ 615.809716][T18079] rt6_disable_ip+0x2ec/0x990 [ 615.809730][T18079] ? __pfx___might_resched+0x10/0x10 [ 615.809746][T18079] ? rcu_is_watching+0x12/0xc0 [ 615.809763][T18079] ? __pfx_rt6_disable_ip+0x10/0x10 [ 615.809777][T18079] ? __mutex_lock+0x27b/0x1ca0 [ 615.809798][T18079] addrconf_ifdown.isra.0+0x12c/0x1b90 [ 615.809818][T18079] ? __mutex_unlock_slowpath+0x161/0x790 [ 615.809838][T18079] ? __pfx_addrconf_ifdown.isra.0+0x10/0x10 [ 615.809861][T18079] addrconf_notify+0x89a/0x19f0 [ 615.809873][T18079] ? ip6mr_device_event+0x1bc/0x230 [ 615.809889][T18079] notifier_call_chain+0xbc/0x3e0 [ 615.809906][T18079] ? __pfx_addrconf_notify+0x10/0x10 [ 615.809919][T18079] ? lock_acquire+0x179/0x330 [ 615.809930][T18079] call_netdevice_notifiers_info+0xbe/0x110 [ 615.809950][T18079] netif_set_mtu_ext+0x563/0x7a0 [ 615.809966][T18079] ? __pfx_netif_set_mtu_ext+0x10/0x10 [ 615.809979][T18079] ? bpf_trace_run2+0x2ab/0x5c0 [ 615.809999][T18079] ? __lock_acquire+0x436/0x2890 [ 615.810012][T18079] netif_set_mtu+0x98/0x140 [ 615.810026][T18079] ? __pfx_netif_set_mtu+0x10/0x10 [ 615.810039][T18079] ? __pfx___bpf_trace_contention_end+0x10/0x10 [ 615.810055][T18079] ? full_name_hash+0xbc/0x110 [ 615.810069][T18079] dev_set_mtu+0xb2/0x260 [ 615.810085][T18079] dev_ifsioc+0xd1f/0x1ee0 [ 615.810101][T18079] ? __pfx_dev_ifsioc+0x10/0x10 [ 615.810113][T18079] ? __pfx___mutex_lock+0x10/0x10 [ 615.810136][T18079] ? dev_load+0x8e/0x240 [ 615.810151][T18079] dev_ioctl+0x223/0x1060 [ 615.810169][T18079] sock_do_ioctl+0x19d/0x280 [ 615.810185][T18079] ? __pfx_sock_do_ioctl+0x10/0x10 [ 615.810202][T18079] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 615.810220][T18079] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 615.810237][T18079] ? unix_ioctl+0x9f/0x580 [ 615.810255][T18079] compat_sock_ioctl+0x301/0x730 [ 615.810267][T18079] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 615.810277][T18079] ? hook_file_ioctl_common+0x144/0x410 [ 615.810293][T18079] ? __fget_files+0x20e/0x3c0 [ 615.810308][T18079] ? __fput_deferred+0x480/0x480 [ 615.810322][T18079] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 615.810332][T18079] __ia32_compat_sys_ioctl+0x242/0x370 [ 615.810348][T18079] __do_fast_syscall_32+0xe8/0x680 [ 615.810367][T18079] do_fast_syscall_32+0x32/0x80 [ 615.810377][T18079] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 615.810391][T18079] RIP: 0023:0xf70dd579 [ 615.810401][T18079] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 615.810411][T18079] RSP: 002b:00000000f54cd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 615.810422][T18079] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000008922 [ 615.810430][T18079] RDX: 0000000080002280 RSI: 0000000000000000 RDI: 0000000000000000 [ 615.810436][T18079] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 615.810443][T18079] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 615.810449][T18079] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 615.810463][T18079] [ 615.811215][T18079] tipc: Resetting bearer [ 615.979368][T18078] tipc: Resetting bearer [ 616.057507][T18078] tipc: Disabling bearer [ 616.191007][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 616.674373][T18096] team0: Port device team_slave_0 removed [ 616.680144][T18096] team0: Port device team_slave_1 removed [ 616.682458][T18096] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 616.685014][T18096] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 616.690843][T18096] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 616.694344][T18096] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 616.708482][T18096] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 616.821174][T18103] tipc: Enabled bearer , priority 0 [ 616.824886][T18103] syzkaller0: entered promiscuous mode [ 616.827422][T18103] syzkaller0: entered allmulticast mode [ 616.832433][T18103] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 616.842940][T18103] syzkaller0: mtu greater than device maximum [ 616.846228][T18102] tipc: Resetting bearer [ 616.861128][T18102] tipc: Disabling bearer [ 617.025943][T18113] tipc: Enabled bearer , priority 0 [ 617.029688][T18113] syzkaller0: entered promiscuous mode [ 617.032213][T18113] syzkaller0: entered allmulticast mode [ 617.037980][T18113] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 617.084051][T18113] tipc: Resetting bearer [ 617.091302][T18112] tipc: Resetting bearer [ 617.100775][T18112] tipc: Disabling bearer [ 618.173069][T18144] can0: slcan on ttyS3. [ 618.246896][ T5945] usb 9-1: new full-speed USB device number 19 using dummy_hcd [ 618.418592][ T5945] usb 9-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x44, changing to 0x4 [ 618.422464][ T5945] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 618.426033][ T5945] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x4 has invalid maxpacket 16706, setting to 64 [ 618.430356][ T5945] usb 9-1: config 0 interface 0 has no altsetting 0 [ 618.434519][ T5945] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 618.437537][ T5945] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 618.440177][ T5945] usb 9-1: Product: syz [ 618.441647][ T5945] usb 9-1: Manufacturer: syz [ 618.443502][ T5945] usb 9-1: SerialNumber: syz [ 618.446237][ T5945] usb 9-1: config 0 descriptor?? [ 618.450499][T18141] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 618.455023][ T5945] usb 9-1: selecting invalid altsetting 0 [ 618.487680][T18154] can0 (unregistered): slcan off ttyS3. [ 618.539268][T18163] tipc: Enabled bearer , priority 0 [ 618.546362][T18163] syzkaller0: entered promiscuous mode [ 618.556026][T18163] syzkaller0: entered allmulticast mode [ 618.559748][T18163] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 618.597337][T18163] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 618.613702][T18163] tipc: Resetting bearer [ 618.618642][T18162] tipc: Resetting bearer [ 618.637320][T18162] tipc: Disabling bearer [ 618.656442][T18141] usb 9-1: BOGUS urb xfer, pipe 0 != type 1 [ 618.760043][ T5945] usb 9-1: USB disconnect, device number 19 [ 619.556797][T18191] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2850'. [ 619.564903][T18191] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2850'. [ 619.744484][T18206] loop7: detected capacity change from 0 to 7 [ 619.752346][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 619.755550][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 619.759385][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 619.762534][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 619.766881][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 619.770070][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 619.773549][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 619.776868][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 619.787083][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 619.791311][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 619.794928][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 619.799354][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 619.803073][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 619.807201][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 619.810514][T18206] ldm_validate_partition_table(): Disk read failed. [ 619.836966][T18210] support for the xor transformation has been removed. [ 619.842715][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 619.846443][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 619.856908][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 619.860545][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 619.864279][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 619.868484][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 619.872490][T18206] Dev loop7: unable to read RDB block 0 [ 619.897501][T18206] loop7: unable to read partition table [ 619.900136][T18206] loop7: partition table beyond EOD, truncated [ 619.906586][T18206] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 620.158862][T18215] comedi comedi0: Minor 47 could not be opened [ 620.161207][T18215] netlink: 'syz.4.2857': attribute type 1 has an invalid length. [ 620.172600][T18215] bond0: entered promiscuous mode [ 620.174444][T18215] 8021q: adding VLAN 0 to HW filter on device bond0 [ 620.241558][T18221] FAULT_INJECTION: forcing a failure. [ 620.241558][T18221] name failslab, interval 1, probability 0, space 0, times 0 [ 620.245858][T18221] CPU: 2 UID: 0 PID: 18221 Comm: syz.4.2859 Tainted: G L syzkaller #0 PREEMPT(full) [ 620.245900][T18221] Tainted: [L]=SOFTLOCKUP [ 620.245904][T18221] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 620.245911][T18221] Call Trace: [ 620.245916][T18221] [ 620.245921][T18221] dump_stack_lvl+0x16c/0x1f0 [ 620.245942][T18221] should_fail_ex+0x512/0x640 [ 620.245958][T18221] should_failslab+0xc2/0x120 [ 620.245976][T18221] __kmalloc_noprof+0xeb/0x910 [ 620.245990][T18221] ? io_cache_alloc_new+0x45/0xf0 [ 620.246010][T18221] ? io_cache_alloc_new+0x45/0xf0 [ 620.246027][T18221] io_cache_alloc_new+0x45/0xf0 [ 620.246045][T18221] io_arm_apoll+0x7fc/0x960 [ 620.246062][T18221] ? __pfx_io_arm_apoll+0x10/0x10 [ 620.246080][T18221] ? __io_issue_sqe+0x14a/0x7c0 [ 620.246093][T18221] io_arm_poll_handler+0x223/0x2b0 [ 620.246109][T18221] io_queue_async+0xab/0x130 [ 620.246123][T18221] io_submit_sqes+0x154e/0x28e0 [ 620.246154][T18221] __do_sys_io_uring_enter+0xd6b/0x1630 [ 620.246181][T18221] ? __fget_files+0x20e/0x3c0 [ 620.246206][T18221] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 620.246233][T18221] ? fput+0x70/0xf0 [ 620.246250][T18221] ? ksys_write+0x1ac/0x250 [ 620.246274][T18221] ? __pfx_ksys_write+0x10/0x10 [ 620.246300][T18221] ? do_user_addr_fault+0x843/0x1370 [ 620.246327][T18221] __do_fast_syscall_32+0xe8/0x680 [ 620.246358][T18221] do_fast_syscall_32+0x32/0x80 [ 620.246375][T18221] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 620.246404][T18221] RIP: 0023:0xf700d579 [ 620.246419][T18221] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 620.246437][T18221] RSP: 002b:00000000f53fd55c EFLAGS: 00000296 ORIG_RAX: 00000000000001aa [ 620.246455][T18221] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000000047f5 [ 620.246466][T18221] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 620.246478][T18221] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 620.246488][T18221] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 620.246498][T18221] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 620.246523][T18221] [ 620.306927][T18229] can0: slcan on ttyS3. [ 620.583931][T18244] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2863'. [ 620.587330][T18244] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2863'. [ 620.628397][T18240] can0 (unregistered): slcan off ttyS3. [ 620.676177][T18251] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2865'. [ 621.383431][T18279] comedi comedi0: pcmda12: I/O port conflict (0x8005,16) [ 621.939092][T18291] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2869'. [ 621.943704][T18291] syzkaller1: entered promiscuous mode [ 621.945556][T18291] syzkaller1: entered allmulticast mode [ 621.951993][T18291] program syz.6.2869 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 622.119440][ T1109] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 622.122047][ T1109] ata1.00: irq_stat 0x40000000 [ 622.123823][ T1109] ata1.00: failed command: ZAC MANAGEMENT OUT [ 622.126065][ T1109] ata1.00: cmd 9f/02:00:00:00:00/00:00:00:00:00/40 tag 26 [ 622.126065][ T1109] res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error) [ 622.131473][ T1109] ata1.00: status: { DRDY ERR } [ 622.133274][ T1109] ata1.00: error: { ABRT } [ 622.134811][ T1109] ata1.00: device reported invalid CHS sector 0 [ 623.010615][T18317] can0: slcan on ttyS3. [ 623.025574][T18301] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 623.027797][T18301] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 623.031040][T18301] vhci_hcd vhci_hcd.0: Device attached [ 623.155116][T18329] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 623.157271][T18329] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 623.161534][T18329] vhci_hcd vhci_hcd.0: Device attached [ 623.207473][T18329] 9p: Bad value for 'rfdno' [ 623.237906][T18329] netlink: 'syz.6.2876': attribute type 1 has an invalid length. [ 623.296939][ T826] usb 46-1: SetAddress Request (70) to port 0 [ 623.301833][ T826] usb 46-1: new SuperSpeed USB device number 70 using vhci_hcd [ 623.357892][T18326] can0 (unregistered): slcan off ttyS3. [ 623.389446][T18319] vhci_hcd: connection reset by peer [ 623.394319][T14075] vhci_hcd vhci_hcd.4: stop threads [ 623.399217][T14075] vhci_hcd vhci_hcd.4: release socket [ 623.403160][T14075] vhci_hcd vhci_hcd.4: disconnect device [ 623.447152][ T3560] usb 50-1: SetAddress Request (43) to port 0 [ 623.449609][ T3560] usb 50-1: new SuperSpeed USB device number 43 using vhci_hcd [ 623.695787][T18330] vhci_hcd: connection reset by peer [ 623.698525][T14163] vhci_hcd vhci_hcd.6: stop threads [ 623.700431][T14163] vhci_hcd vhci_hcd.6: release socket [ 623.702414][T14163] vhci_hcd vhci_hcd.6: disconnect device [ 623.962985][T18347] kAFS: No cell specified [ 624.310469][T18355] tipc: Enabled bearer , priority 0 [ 624.312961][T18355] syzkaller0: entered promiscuous mode [ 624.314993][T18355] syzkaller0: entered allmulticast mode [ 624.319525][T18355] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 624.332099][T18355] tipc: Resetting bearer [ 624.334700][T18354] tipc: Resetting bearer [ 624.343789][T18354] tipc: Disabling bearer [ 624.423343][T18358] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2881'. [ 624.479733][T18366] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2881'. [ 624.481253][T18365] FAULT_INJECTION: forcing a failure. [ 624.481253][T18365] name failslab, interval 1, probability 0, space 0, times 0 [ 624.482637][T18366] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2881'. [ 624.488412][T18365] CPU: 3 UID: 0 PID: 18365 Comm: syz.2.2883 Tainted: G L syzkaller #0 PREEMPT(full) [ 624.488439][T18365] Tainted: [L]=SOFTLOCKUP [ 624.488446][T18365] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 624.488458][T18365] Call Trace: [ 624.488464][T18365] [ 624.488472][T18365] dump_stack_lvl+0x16c/0x1f0 [ 624.488504][T18365] should_fail_ex+0x512/0x640 [ 624.488530][T18365] should_failslab+0xc2/0x120 [ 624.488559][T18365] __kmalloc_noprof+0xeb/0x910 [ 624.488579][T18365] ? io_cache_alloc_new+0x45/0xf0 [ 624.488612][T18365] ? io_cache_alloc_new+0x45/0xf0 [ 624.488646][T18365] io_cache_alloc_new+0x45/0xf0 [ 624.488675][T18365] io_arm_apoll+0x7fc/0x960 [ 624.488702][T18365] ? __pfx_io_arm_apoll+0x10/0x10 [ 624.488732][T18365] ? __io_issue_sqe+0x14a/0x7c0 [ 624.488754][T18365] io_arm_poll_handler+0x223/0x2b0 [ 624.488781][T18365] io_queue_async+0xab/0x130 [ 624.488803][T18365] io_submit_sqes+0x154e/0x28e0 [ 624.488843][T18365] __do_sys_io_uring_enter+0xd6b/0x1630 [ 624.488873][T18365] ? __fget_files+0x20e/0x3c0 [ 624.488899][T18365] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 624.488928][T18365] ? fput+0x70/0xf0 [ 624.488946][T18365] ? ksys_write+0x1ac/0x250 [ 624.488971][T18365] ? __pfx_ksys_write+0x10/0x10 [ 624.488998][T18365] ? do_user_addr_fault+0x843/0x1370 [ 624.489025][T18365] __do_fast_syscall_32+0xe8/0x680 [ 624.489056][T18365] do_fast_syscall_32+0x32/0x80 [ 624.489074][T18365] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 624.489114][T18365] RIP: 0023:0xf70dd579 [ 624.489129][T18365] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 624.489147][T18365] RSP: 002b:00000000f54cd55c EFLAGS: 00000296 ORIG_RAX: 00000000000001aa [ 624.489165][T18365] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000000047f5 [ 624.489178][T18365] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 624.489189][T18365] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 624.489199][T18365] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 624.489212][T18365] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 624.489237][T18365] [ 624.563523][T18366] netlink: 'syz.6.2881': attribute type 19 has an invalid length. [ 624.566077][T18366] netlink: 'syz.6.2881': attribute type 20 has an invalid length. [ 624.608422][T18377] can0: slcan on ttyS3. [ 624.908278][T18386] can0 (unregistered): slcan off ttyS3. [ 625.650221][T18413] tipc: Enabled bearer , priority 0 [ 625.653711][T18413] syzkaller0: entered promiscuous mode [ 625.656067][T18413] syzkaller0: entered allmulticast mode [ 625.664112][T18413] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 625.685755][T18413] FAULT_INJECTION: forcing a failure. [ 625.685755][T18413] name failslab, interval 1, probability 0, space 0, times 0 [ 625.691139][T18413] CPU: 3 UID: 0 PID: 18413 Comm: syz.6.2889 Tainted: G L syzkaller #0 PREEMPT(full) [ 625.691169][T18413] Tainted: [L]=SOFTLOCKUP [ 625.691176][T18413] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 625.691188][T18413] Call Trace: [ 625.691195][T18413] [ 625.691203][T18413] dump_stack_lvl+0x16c/0x1f0 [ 625.691236][T18413] should_fail_ex+0x512/0x640 [ 625.691262][T18413] should_failslab+0xc2/0x120 [ 625.691290][T18413] kmem_cache_alloc_node_noprof+0x86/0x800 [ 625.691313][T18413] ? __alloc_skb+0x156/0x410 [ 625.691338][T18413] ? __alloc_skb+0x156/0x410 [ 625.691379][T18413] __alloc_skb+0x156/0x410 [ 625.691398][T18413] ? __alloc_skb+0x35d/0x410 [ 625.691417][T18413] ? __pfx___alloc_skb+0x10/0x10 [ 625.691437][T18413] ? __timer_delete+0xf5/0x1c0 [ 625.691470][T18413] ? __lock_acquire+0x436/0x2890 [ 625.691491][T18413] __ipv6_ifa_notify+0x1f1/0xfd0 [ 625.691519][T18413] ? __pfx___ipv6_ifa_notify+0x10/0x10 [ 625.691546][T18413] ? do_raw_spin_lock+0x12c/0x2b0 [ 625.691575][T18413] ? addrconf_ifdown.isra.0+0xe9a/0x1b90 [ 625.691610][T18413] addrconf_ifdown.isra.0+0xe9a/0x1b90 [ 625.691648][T18413] ? __pfx_addrconf_ifdown.isra.0+0x10/0x10 [ 625.691686][T18413] addrconf_notify+0x89a/0x19f0 [ 625.691706][T18413] ? ip6mr_device_event+0x1bc/0x230 [ 625.691732][T18413] notifier_call_chain+0xbc/0x3e0 [ 625.691760][T18413] ? __pfx_addrconf_notify+0x10/0x10 [ 625.691784][T18413] call_netdevice_notifiers_info+0xbe/0x110 [ 625.691815][T18413] netif_set_mtu_ext+0x563/0x7a0 [ 625.691841][T18413] ? __pfx_netif_set_mtu_ext+0x10/0x10 [ 625.691862][T18413] ? __lock_acquire+0x436/0x2890 [ 625.691883][T18413] ? __lock_acquire+0x436/0x2890 [ 625.691903][T18413] netif_set_mtu+0x98/0x140 [ 625.691927][T18413] ? __pfx_netif_set_mtu+0x10/0x10 [ 625.691959][T18413] ? full_name_hash+0xbc/0x110 [ 625.691981][T18413] dev_set_mtu+0xb2/0x260 [ 625.692007][T18413] dev_ifsioc+0xd1f/0x1ee0 [ 625.692033][T18413] ? __pfx_dev_ifsioc+0x10/0x10 [ 625.692053][T18413] ? __pfx___mutex_lock+0x10/0x10 [ 625.692091][T18413] ? dev_load+0x8e/0x240 [ 625.692117][T18413] dev_ioctl+0x223/0x1060 [ 625.692141][T18413] sock_do_ioctl+0x19d/0x280 [ 625.692168][T18413] ? __pfx_sock_do_ioctl+0x10/0x10 [ 625.692195][T18413] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 625.692228][T18413] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 625.692255][T18413] ? unix_ioctl+0x9f/0x580 [ 625.692283][T18413] compat_sock_ioctl+0x301/0x730 [ 625.692303][T18413] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 625.692320][T18413] ? hook_file_ioctl_common+0x144/0x410 [ 625.692346][T18413] ? __fget_files+0x20e/0x3c0 [ 625.692369][T18413] ? __fput_deferred+0x480/0x480 [ 625.692395][T18413] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 625.692411][T18413] __ia32_compat_sys_ioctl+0x242/0x370 [ 625.692436][T18413] __do_fast_syscall_32+0xe8/0x680 [ 625.692467][T18413] do_fast_syscall_32+0x32/0x80 [ 625.692484][T18413] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 625.692507][T18413] RIP: 0023:0xf7fb4579 [ 625.692522][T18413] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 625.692539][T18413] RSP: 002b:00000000f54a655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 625.692558][T18413] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000008922 [ 625.692569][T18413] RDX: 0000000080002280 RSI: 0000000000000000 RDI: 0000000000000000 [ 625.692580][T18413] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 625.692596][T18413] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 625.692607][T18413] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 625.692633][T18413] [ 625.693407][T18413] tipc: Resetting bearer [ 625.917155][T18412] tipc: Resetting bearer [ 625.945583][T18412] tipc: Disabling bearer [ 625.957006][ T60] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 626.126972][ T60] usb 10-1: Using ep0 maxpacket: 32 [ 626.137906][ T60] usb 10-1: config 0 interface 0 has no altsetting 0 [ 626.140162][T18424] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2893'. [ 626.141873][ T60] usb 10-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 626.143946][T18424] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2893'. [ 626.146170][ T60] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.152227][ T60] usb 10-1: Product: syz [ 626.153593][ T60] usb 10-1: Manufacturer: syz [ 626.155102][ T60] usb 10-1: SerialNumber: syz [ 626.161691][ T60] usb 10-1: config 0 descriptor?? [ 626.169634][ T60] gs_usb 10-1:0.0: Required endpoints not found [ 626.192416][T18427] FAULT_INJECTION: forcing a failure. [ 626.192416][T18427] name failslab, interval 1, probability 0, space 0, times 0 [ 626.196523][T18427] CPU: 3 UID: 0 PID: 18427 Comm: syz.6.2894 Tainted: G L syzkaller #0 PREEMPT(full) [ 626.196548][T18427] Tainted: [L]=SOFTLOCKUP [ 626.196554][T18427] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 626.196565][T18427] Call Trace: [ 626.196572][T18427] [ 626.196578][T18427] dump_stack_lvl+0x16c/0x1f0 [ 626.196608][T18427] should_fail_ex+0x512/0x640 [ 626.196632][T18427] should_failslab+0xc2/0x120 [ 626.196660][T18427] __kmalloc_noprof+0xeb/0x910 [ 626.196680][T18427] ? io_cache_alloc_new+0x45/0xf0 [ 626.196712][T18427] ? io_cache_alloc_new+0x45/0xf0 [ 626.196739][T18427] io_cache_alloc_new+0x45/0xf0 [ 626.196768][T18427] io_arm_apoll+0x7fc/0x960 [ 626.196794][T18427] ? __pfx_io_arm_apoll+0x10/0x10 [ 626.196842][T18427] ? __io_issue_sqe+0x14a/0x7c0 [ 626.196864][T18427] io_arm_poll_handler+0x223/0x2b0 [ 626.196891][T18427] io_queue_async+0xab/0x130 [ 626.196912][T18427] io_submit_sqes+0x154e/0x28e0 [ 626.196952][T18427] __do_sys_io_uring_enter+0xd6b/0x1630 [ 626.196980][T18427] ? __fget_files+0x20e/0x3c0 [ 626.197005][T18427] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 626.197032][T18427] ? fput+0x70/0xf0 [ 626.197050][T18427] ? ksys_write+0x1ac/0x250 [ 626.197074][T18427] ? __pfx_ksys_write+0x10/0x10 [ 626.197100][T18427] ? do_user_addr_fault+0x843/0x1370 [ 626.197128][T18427] __do_fast_syscall_32+0xe8/0x680 [ 626.197159][T18427] do_fast_syscall_32+0x32/0x80 [ 626.197175][T18427] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 626.197198][T18427] RIP: 0023:0xf7fb4579 [ 626.197212][T18427] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 626.197230][T18427] RSP: 002b:00000000f54a655c EFLAGS: 00000296 ORIG_RAX: 00000000000001aa [ 626.197248][T18427] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000000047f5 [ 626.197260][T18427] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 626.197270][T18427] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 626.197281][T18427] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 626.197292][T18427] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 626.197318][T18427] [ 626.435185][T18425] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2892'. [ 626.722042][T18434] netlink: 'syz.6.2895': attribute type 16 has an invalid length. [ 626.740399][T18434] netlink: 'syz.6.2895': attribute type 17 has an invalid length. [ 626.927939][T18434] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 627.474417][T18442] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2899'. [ 627.488372][T18442] 8021q: adding VLAN 0 to HW filter on device bond3 [ 627.492744][T18442] bond3: (slave vlan0): Opening slave failed [ 627.627598][T18442] bond3 (unregistering): Released all slaves [ 628.176986][ T6027] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 628.279401][T18456] random: crng reseeded on system resumption [ 628.304449][T18456] tipc: Enabled bearer , priority 0 [ 628.310608][T18456] syzkaller0: entered promiscuous mode [ 628.314511][T18456] syzkaller0: entered allmulticast mode [ 628.336897][ T6027] usb 11-1: Using ep0 maxpacket: 8 [ 628.340050][ T6027] usb 11-1: config 0 has an invalid interface number: 55 but max is 0 [ 628.344029][ T6027] usb 11-1: config 0 has no interface number 0 [ 628.347356][ T6027] usb 11-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 628.352896][ T6027] usb 11-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 628.357094][ T826] usb 46-1: device descriptor read/8, error -110 [ 628.359070][ T6027] usb 11-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 628.365808][ T6027] usb 11-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 628.372715][ T6027] usb 11-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 628.377293][ T6027] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.384293][ T6027] usb 11-1: config 0 descriptor?? [ 628.392685][ T6027] ldusb 11-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 628.507039][ T3560] usb 50-1: device descriptor read/8, error -110 [ 628.600349][T18452] tipc: Resetting bearer [ 628.610844][T18452] tipc: Disabling bearer [ 628.657706][ T6025] usb 11-1: USB disconnect, device number 7 [ 628.661118][ T6025] ldusb 11-1:0.55: LD USB Device #0 now disconnected [ 628.685602][T18469] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2904'. [ 628.757154][ T6055] usb 10-1: USB disconnect, device number 11 [ 628.757640][ T826] usb usb46-port1: attempt power cycle [ 628.928609][ T3560] usb usb50-port1: attempt power cycle [ 629.151138][ T1414] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.164311][T18497] can0: slcan on ttyS3. [ 629.327479][ T826] usb usb46-port1: unable to enumerate USB device [ 629.447031][T18497] can0 (unregistered): slcan off ttyS3. [ 629.493601][T18506] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 629.496450][T18506] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 629.501298][T18506] vhci_hcd vhci_hcd.0: Device attached [ 629.657047][ T3560] usb 50-1: SetAddress Request (46) to port 0 [ 629.659191][ T3560] usb 50-1: new SuperSpeed USB device number 46 using vhci_hcd [ 630.042441][T18518] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 630.195512][T18507] vhci_hcd: connection reset by peer [ 630.227537][ T6258] vhci_hcd vhci_hcd.6: stop threads [ 630.229652][ T6258] vhci_hcd vhci_hcd.6: release socket [ 630.231519][ T6258] vhci_hcd vhci_hcd.6: disconnect device [ 630.965702][T18549] tipc: Enabled bearer , priority 0 [ 630.969286][T18549] syzkaller0: entered promiscuous mode [ 630.971576][T18549] syzkaller0: entered allmulticast mode [ 630.983966][T18549] tipc: Resetting bearer [ 630.988130][T18547] tipc: Resetting bearer [ 631.007571][T18547] tipc: Disabling bearer [ 631.207898][T18553] netlink: 'syz.6.2925': attribute type 30 has an invalid length. [ 631.300796][T18557] netlink: 'syz.6.2925': attribute type 30 has an invalid length. [ 632.372023][T18579] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 632.374752][T18579] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 632.378129][T18579] vhci_hcd vhci_hcd.0: Device attached [ 632.418446][T18579] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 632.545870][T18604] fuse: Bad value for 'fd' [ 632.564077][T18605] tipc: Enabled bearer , priority 0 [ 632.570771][T18605] syzkaller0: entered promiscuous mode [ 632.573408][T18605] syzkaller0: entered allmulticast mode [ 632.584039][T18605] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 632.608557][T18605] tipc: Resetting bearer [ 632.617318][T18603] tipc: Resetting bearer [ 632.649812][T18603] tipc: Disabling bearer [ 632.837717][T18590] vhci_hcd: connection closed [ 632.837959][T14278] vhci_hcd vhci_hcd.6: stop threads [ 632.841931][T14278] vhci_hcd vhci_hcd.6: release socket [ 632.844014][T14278] vhci_hcd vhci_hcd.6: disconnect device [ 633.887014][ T5945] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 634.036958][ T5945] usb 9-1: Using ep0 maxpacket: 8 [ 634.040817][ T5945] usb 9-1: config 249 has an invalid interface number: 124 but max is 3 [ 634.044495][ T5945] usb 9-1: config 249 has an invalid descriptor of length 1, skipping remainder of the config [ 634.049713][ T5945] usb 9-1: config 249 has 1 interface, different from the descriptor's value: 4 [ 634.053733][ T5945] usb 9-1: config 249 has no interface number 0 [ 634.056524][ T5945] usb 9-1: config 249 interface 124 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 634.064439][ T5945] usb 9-1: New USB device found, idVendor=0e8d, idProduct=7630, bcdDevice=fa.c0 [ 634.068611][ T5945] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.072119][ T5945] usb 9-1: Product: Ћ [ 634.074013][ T5945] usb 9-1: Manufacturer: ꕕ瀷䩊챗䜿鿧噁梁쵧菄᱋ꯦ摌뙐倨剀ꑁ漫▚匣鍻ꬂꑌ랽둣㩁셝먏䗡奼璣キ얄濼짡訓㯤೫뒤砭ﰘ廬∰馢ྻ믬毄➥઴】ค냮ⷿᎃ힖ؔᄰ㿟弅淋Υ঒ퟥ䑖垭泷䛎䏆楋呀⠔녽뚇῾츠笌ᬹ⫦槈童ꮗ쒿規겻 [ 634.085992][ T5945] usb 9-1: SerialNumber: ⛰扻னⱄ꽺旪뾋鿃㸞 [ 634.308099][ T5945] usb 9-1: USB disconnect, device number 20 [ 634.746991][ T3560] usb 50-1: device descriptor read/8, error -110 [ 634.747004][ T6055] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 634.756657][T18622] netlink: 'syz.6.2938': attribute type 4 has an invalid length. [ 634.768466][T18622] netlink: 'syz.6.2938': attribute type 4 has an invalid length. [ 634.900680][ T6055] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 634.904815][ T6055] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.908742][ T6055] usb 9-1: Product: syz [ 634.910717][ T6055] usb 9-1: Manufacturer: syz [ 634.912738][ T6055] usb 9-1: SerialNumber: syz [ 635.757097][ T3560] usb usb50-port1: unable to enumerate USB device [ 635.766371][T18622] lo speed is unknown, defaulting to 1000 [ 635.771289][ T6055] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 635.799376][ T6055] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 636.005565][T18616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 636.014410][T18616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 636.028662][T18617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 636.032603][T18625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 636.036689][T18625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 636.037383][T18617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 636.057900][ T34] usb 9-1: USB disconnect, device number 21 [ 636.837511][ T6055] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 636.841066][ T6055] ath9k_htc: Failed to initialize the device [ 636.847772][ T34] usb 9-1: ath9k_htc: USB layer deinitialized [ 636.914245][T18653] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2948'. [ 636.917281][T18653] bridge_slave_1: left allmulticast mode [ 636.919157][T18653] bridge_slave_1: left promiscuous mode [ 636.921125][T18653] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.928165][T18653] bridge_slave_0: left allmulticast mode [ 636.930142][T18653] bridge_slave_0: left promiscuous mode [ 636.932172][T18653] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.538599][T18661] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 637.541423][T18661] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 637.564124][T18661] vhci_hcd vhci_hcd.0: Device attached [ 637.567415][T18661] random: crng reseeded on system resumption [ 637.739134][T18669] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 637.741970][T18669] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 637.747700][T18669] vhci_hcd vhci_hcd.0: Device attached [ 637.786463][T18662] vhci_hcd: connection closed [ 637.791748][T14075] vhci_hcd vhci_hcd.2: stop threads [ 637.796640][T14075] vhci_hcd vhci_hcd.2: release socket [ 637.816402][T14075] vhci_hcd vhci_hcd.2: disconnect device [ 637.827749][ T34] usb 42-1: enqueue for inactive port 0 [ 638.016932][ T60] usb 50-1: SetAddress Request (47) to port 0 [ 638.019112][ T60] usb 50-1: new SuperSpeed USB device number 47 using vhci_hcd [ 638.049229][T18670] vhci_hcd: connection reset by peer [ 638.051875][ T6258] vhci_hcd vhci_hcd.6: stop threads [ 638.054781][ T6258] vhci_hcd vhci_hcd.6: release socket [ 638.059569][ T6258] vhci_hcd vhci_hcd.6: disconnect device [ 638.075450][T18682] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 638.077645][T18682] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 638.080650][T18682] vhci_hcd vhci_hcd.0: Device attached [ 638.317871][ T34] usb usb42-port1: attempt power cycle [ 638.347660][ T826] usb 48-1: SetAddress Request (38) to port 0 [ 638.350139][ T826] usb 48-1: new SuperSpeed USB device number 38 using vhci_hcd [ 638.796461][T18683] vhci_hcd: connection reset by peer [ 638.800143][T14163] vhci_hcd vhci_hcd.5: stop threads [ 638.802477][T14163] vhci_hcd vhci_hcd.5: release socket [ 638.807442][T14163] vhci_hcd vhci_hcd.5: disconnect device [ 638.908182][ T34] usb usb42-port1: unable to enumerate USB device [ 639.491722][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 639.491733][ T40] audit: type=1326 audit(1766672212.538:1855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18689 comm="syz.4.2955" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d579 code=0x7fc00000 [ 640.689724][T18721] lo speed is unknown, defaulting to 1000 [ 641.011603][T18713] lo speed is unknown, defaulting to 1000 [ 641.131844][T18727] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 641.134021][T18727] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 641.137698][T18727] vhci_hcd vhci_hcd.0: Device attached [ 641.142411][T18727] random: crng reseeded on system resumption [ 641.513934][T18734] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2964'. [ 641.953544][T18728] vhci_hcd: connection closed [ 641.953995][ T6258] vhci_hcd vhci_hcd.6: stop threads [ 641.959139][ T6258] vhci_hcd vhci_hcd.6: release socket [ 641.963767][ T6258] vhci_hcd vhci_hcd.6: disconnect device [ 643.071989][T18765] netlink: 'syz.6.2972': attribute type 11 has an invalid length. [ 643.074572][T18765] netlink: 'syz.6.2972': attribute type 11 has an invalid length. [ 643.086896][T18765] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2972'. [ 643.131803][ T60] usb 50-1: device descriptor read/8, error -110 [ 643.387242][ T826] usb 48-1: device descriptor read/8, error -110 [ 643.416435][T18775] lo speed is unknown, defaulting to 1000 [ 643.554845][ T60] usb usb50-port1: attempt power cycle [ 643.777695][ T826] usb usb48-port1: attempt power cycle [ 643.839689][T18794] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 643.841852][T18794] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 643.857519][T18794] vhci_hcd vhci_hcd.0: Device attached [ 643.966975][ T60] usb 50-1: SetAddress Request (50) to port 0 [ 643.969643][ T60] usb 50-1: new SuperSpeed USB device number 50 using vhci_hcd [ 644.099718][T18761] lo speed is unknown, defaulting to 1000 [ 644.160394][T18795] vhci_hcd: connection reset by peer [ 644.162370][ T776] vhci_hcd vhci_hcd.6: stop threads [ 644.164820][ T776] vhci_hcd vhci_hcd.6: release socket [ 644.167614][ T776] vhci_hcd vhci_hcd.6: disconnect device [ 644.348601][ T826] usb usb48-port1: unable to enumerate USB device [ 644.498057][T18803] batman_adv: batadv0: Interface deactivated: dummy0 [ 644.500319][T18803] batman_adv: batadv0: Removing interface: dummy0 [ 644.536282][T18803] team0: Port device team_slave_0 removed [ 644.548203][T18803] team0: Port device team_slave_1 removed [ 644.550491][T18803] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 644.552941][T18803] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 644.557478][T18803] bond0: (slave batadv_slave_1): Releasing active interface [ 644.563598][T18803] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 645.055286][T18817] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 645.058130][T18817] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 645.062030][T18817] vhci_hcd vhci_hcd.0: Device attached [ 645.085398][T18819] vhci_hcd: connection closed [ 645.085655][T14211] vhci_hcd vhci_hcd.2: stop threads [ 645.089635][T14211] vhci_hcd vhci_hcd.2: release socket [ 645.091476][T14211] vhci_hcd vhci_hcd.2: disconnect device [ 645.126891][T17239] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 645.278527][T17239] usb 11-1: config index 0 descriptor too short (expected 23569, got 27) [ 645.281952][T17239] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 645.287374][T17239] usb 11-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 645.291221][T17239] usb 11-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 645.294594][T17239] usb 11-1: Manufacturer: syz [ 645.298882][T17239] usb 11-1: config 0 descriptor?? [ 645.449573][T17239] rc_core: IR keymap rc-hauppauge not found [ 645.451934][T17239] Registered IR keymap rc-empty [ 645.454308][T17239] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/rc/rc0 [ 645.459332][T17239] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/rc/rc0/input72 [ 645.519393][T18814] fuse: Bad value for 'fd' [ 645.524029][ T5899] usb 11-1: USB disconnect, device number 8 [ 646.552820][T18853] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2988'. [ 646.556694][T18853] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2988'. [ 646.634297][T18857] can0: slcan on ttyS3. [ 646.642659][T18858] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2987'. [ 646.646761][T18858] xt_cluster: node mask cannot exceed total number of nodes [ 646.919835][T18871] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 646.921983][T18871] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 646.924933][T18871] vhci_hcd vhci_hcd.0: Device attached [ 646.938111][T18857] can0 (unregistered): slcan off ttyS3. [ 647.190286][ T5995] usb 48-1: SetAddress Request (42) to port 0 [ 647.196218][ T5995] usb 48-1: new SuperSpeed USB device number 42 using vhci_hcd [ 647.214914][T18872] vhci_hcd: connection closed [ 647.215863][ T89] vhci_hcd vhci_hcd.5: stop threads [ 647.221617][ T89] vhci_hcd vhci_hcd.5: release socket [ 647.224185][ T89] vhci_hcd vhci_hcd.5: disconnect device [ 647.249248][T18885] FAULT_INJECTION: forcing a failure. [ 647.249248][T18885] name failslab, interval 1, probability 0, space 0, times 0 [ 647.254619][T18885] CPU: 3 UID: 0 PID: 18885 Comm: syz.4.2991 Tainted: G L syzkaller #0 PREEMPT(full) [ 647.254649][T18885] Tainted: [L]=SOFTLOCKUP [ 647.254656][T18885] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 647.254668][T18885] Call Trace: [ 647.254676][T18885] [ 647.254684][T18885] dump_stack_lvl+0x16c/0x1f0 [ 647.254717][T18885] should_fail_ex+0x512/0x640 [ 647.254742][T18885] should_failslab+0xc2/0x120 [ 647.254771][T18885] __kmalloc_noprof+0xeb/0x910 [ 647.254791][T18885] ? __memcg_slab_post_alloc_hook+0x472/0x880 [ 647.254822][T18885] ? io_cache_alloc_new+0x45/0xf0 [ 647.254856][T18885] ? io_cache_alloc_new+0x45/0xf0 [ 647.254884][T18885] io_cache_alloc_new+0x45/0xf0 [ 647.254913][T18885] io_arm_apoll+0x7fc/0x960 [ 647.254941][T18885] ? __pfx_io_arm_apoll+0x10/0x10 [ 647.254972][T18885] ? __io_issue_sqe+0x14a/0x7c0 [ 647.254994][T18885] io_arm_poll_handler+0x223/0x2b0 [ 647.255021][T18885] io_queue_async+0xab/0x130 [ 647.255044][T18885] io_submit_sqes+0x154e/0x28e0 [ 647.255082][T18885] __do_sys_io_uring_enter+0xd6b/0x1630 [ 647.255111][T18885] ? __fget_files+0x20e/0x3c0 [ 647.255137][T18885] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 647.255187][T18885] ? fput+0x70/0xf0 [ 647.255207][T18885] ? ksys_write+0x1ac/0x250 [ 647.255233][T18885] ? __pfx_ksys_write+0x10/0x10 [ 647.255267][T18885] ? do_user_addr_fault+0x843/0x1370 [ 647.255295][T18885] __do_fast_syscall_32+0xe8/0x680 [ 647.255327][T18885] do_fast_syscall_32+0x32/0x80 [ 647.255345][T18885] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 647.255368][T18885] RIP: 0023:0xf700d579 [ 647.255383][T18885] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 647.255402][T18885] RSP: 002b:00000000f53fd55c EFLAGS: 00000296 ORIG_RAX: 00000000000001aa [ 647.255421][T18885] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000000047f5 [ 647.255433][T18885] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 647.255444][T18885] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 647.255455][T18885] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 647.255466][T18885] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 647.255491][T18885] [ 647.696062][T18894] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 647.713586][T18894] Can't find a SQUASHFS superblock on nullb0 [ 647.873152][T18896] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2994'. [ 648.014266][T18898] fuse: Bad value for 'fd' [ 648.016914][T18898] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2995'. [ 648.052479][T18902] tmpfs: Unknown parameter 'ecryptfs' [ 648.054927][T18902] tmpfs: Unknown parameter 'ecryptfs' [ 648.057769][T18903] Device name cannot be null; rc = [-22] [ 648.062416][T18902] tmpfs: Unknown parameter 'ecryptfs' [ 648.065486][T18902] tmpfs: Unknown parameter 'ecryptfs' [ 648.068630][T18902] tmpfs: Unknown parameter 'ecryptfs' [ 648.071140][T18902] tmpfs: Unknown parameter 'ecryptfs' [ 648.073838][T18902] tmpfs: Unknown parameter 'ecryptfs' [ 648.076096][T18902] tmpfs: Unknown parameter 'ecryptfs' [ 648.078363][T18902] tmpfs: Unknown parameter 'ecryptfs' [ 648.080348][T18902] tmpfs: Unknown parameter 'ecryptfs' [ 648.085092][T18902] tmpfs: Unknown parameter 'ecryptfs' [ 648.087883][T18902] tmpfs: Unknown parameter 'ecryptfs' [ 648.090286][T18902] tmpfs: Unknown parameter 'ecryptfs' [ 648.092807][T18902] tmpfs: Unknown parameter 'ecryptfs' [ 648.095171][T18902] tmpfs: Unknown parameter 'ecryptfs' [ 648.097961][T18902] tmpfs: Unknown parameter 'ecryptfs' [ 648.100433][T18902] tmpfs: Unknown parameter 'ecryptfs' [ 648.102935][T18902] tmpfs: Unknown parameter 'ecryptfs' [ 648.105360][T18902] tmpfs: Unknown parameter 'ecryptfs' [ 648.108170][T18902] tmpfs: Unknown parameter 'ecryptfs' [ 648.110597][T18902] tmpfs: Unknown parameter 'ecryptfs' [ 648.113104][T18902] tmpfs: Unknown parameter 'ecryptfs' [ 648.115631][T18902] tmpfs: Unknown parameter 'ecryptfs' [ 648.119561][T18902] tmpfs: Unknown parameter 'ecryptfs' [ 648.121981][T18902] tmpfs: Unknown parameter 'ecryptfs' [ 648.124435][T18902] tmpfs: Unknown parameter 'ecryptfs' [ 648.127246][T18902] tmpfs: Unknown parameter 'ecryptfs' [ 648.129742][T18902] tmpfs: Unknown parameter 'ecryptfs' [ 648.131873][T18902] tmpfs: Unknown parameter 'ecryptfs' [ 648.133797][T18902] tmpfs: Unknown parameter 'ecryptfs' [ 648.135771][T18902] tmpfs: Unknown parameter 'ecryptfs' [ 648.138632][T18902] tmpfs: Unknown parameter 'ecryptfs' [ 648.140622][T18902] tmpfs: Unknown parameter 'ecryptfs' [ 648.629661][T18912] can0: slcan on ttyS3. [ 648.845454][T18912] can0 (unregistered): slcan off ttyS3. [ 649.067013][ T60] usb 50-1: device descriptor read/8, error -110 [ 649.177384][ T60] usb usb50-port1: unable to enumerate USB device [ 649.531828][T18946] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 649.534014][T18946] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 649.536889][T18946] vhci_hcd vhci_hcd.0: Device attached [ 649.821569][ T60] usb 46-1: SetAddress Request (74) to port 0 [ 649.824210][ T60] usb 46-1: new SuperSpeed USB device number 74 using vhci_hcd [ 650.016919][T18947] vhci_hcd: connection closed [ 650.017134][ T89] vhci_hcd vhci_hcd.4: stop threads [ 650.021139][ T89] vhci_hcd vhci_hcd.4: release socket [ 650.023144][ T89] vhci_hcd vhci_hcd.4: disconnect device [ 650.077239][ T60] usb 46-1: enqueue for inactive port 0 [ 650.565522][ T60] usb usb46-port1: attempt power cycle [ 650.608882][T18962] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3007'. [ 650.613909][T18962] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3007'. [ 650.641153][T18966] FAULT_INJECTION: forcing a failure. [ 650.641153][T18966] name failslab, interval 1, probability 0, space 0, times 0 [ 650.645279][T18966] CPU: 3 UID: 0 PID: 18966 Comm: syz.2.3008 Tainted: G L syzkaller #0 PREEMPT(full) [ 650.645297][T18966] Tainted: [L]=SOFTLOCKUP [ 650.645301][T18966] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 650.645309][T18966] Call Trace: [ 650.645313][T18966] [ 650.645317][T18966] dump_stack_lvl+0x16c/0x1f0 [ 650.645338][T18966] should_fail_ex+0x512/0x640 [ 650.645354][T18966] should_failslab+0xc2/0x120 [ 650.645372][T18966] __kmalloc_noprof+0xeb/0x910 [ 650.645385][T18966] ? io_cache_alloc_new+0x45/0xf0 [ 650.645405][T18966] ? io_cache_alloc_new+0x45/0xf0 [ 650.645422][T18966] io_cache_alloc_new+0x45/0xf0 [ 650.645439][T18966] io_arm_apoll+0x7fc/0x960 [ 650.645456][T18966] ? __pfx_io_arm_apoll+0x10/0x10 [ 650.645474][T18966] ? __io_issue_sqe+0x14a/0x7c0 [ 650.645486][T18966] io_arm_poll_handler+0x223/0x2b0 [ 650.645502][T18966] io_queue_async+0xab/0x130 [ 650.645516][T18966] io_submit_sqes+0x154e/0x28e0 [ 650.645538][T18966] __do_sys_io_uring_enter+0xd6b/0x1630 [ 650.645555][T18966] ? __fget_files+0x20e/0x3c0 [ 650.645571][T18966] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 650.645588][T18966] ? fput+0x70/0xf0 [ 650.645598][T18966] ? ksys_write+0x1ac/0x250 [ 650.645614][T18966] ? __pfx_ksys_write+0x10/0x10 [ 650.645630][T18966] ? do_user_addr_fault+0x843/0x1370 [ 650.645647][T18966] __do_fast_syscall_32+0xe8/0x680 [ 650.645666][T18966] do_fast_syscall_32+0x32/0x80 [ 650.645676][T18966] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 650.645690][T18966] RIP: 0023:0xf70dd579 [ 650.645700][T18966] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 650.645710][T18966] RSP: 002b:00000000f54cd55c EFLAGS: 00000296 ORIG_RAX: 00000000000001aa [ 650.645722][T18966] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000000047f5 [ 650.645729][T18966] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 650.645735][T18966] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 650.645742][T18966] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 650.645748][T18966] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 650.645762][T18966] [ 650.944514][T18975] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 650.946709][T18975] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 650.950714][T18975] vhci_hcd vhci_hcd.0: Device attached [ 650.955273][T18975] random: crng reseeded on system resumption [ 651.196984][ T60] usb 46-1: SetAddress Request (77) to port 0 [ 651.199899][ T60] usb 46-1: new SuperSpeed USB device number 77 using vhci_hcd [ 651.340697][T18981] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 651.465957][T18981] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 651.573267][T18976] vhci_hcd: connection reset by peer [ 651.575260][T14278] vhci_hcd vhci_hcd.4: stop threads [ 651.577203][T14278] vhci_hcd vhci_hcd.4: release socket [ 651.579082][T14278] vhci_hcd vhci_hcd.4: disconnect device [ 652.277225][ T5995] usb 48-1: device descriptor read/8, error -110 [ 652.750186][ T5995] usb usb48-port1: attempt power cycle [ 652.838990][T19018] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 652.840901][T19018] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 652.843747][T19018] vhci_hcd vhci_hcd.0: Device attached [ 652.856201][T19018] random: crng reseeded on system resumption [ 652.863512][T19022] [ 652.864525][T19022] ====================================================== [ 652.864920][T19018] PM: hibernation: Marking nosave pages: [mem 0x00000000-0x00000fff] [ 652.867250][T19022] WARNING: possible circular locking dependency detected [ 652.867262][T19022] syzkaller #0 Tainted: G L [ 652.867271][T19022] ------------------------------------------------------ [ 652.867277][T19022] syz.6.3016/19022 is trying to acquire lock: [ 652.867285][T19022] ffff888051f0a8b8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x12d0 [ 652.867328][T19022] [ 652.867328][T19022] but task is already holding lock: [ 652.867333][T19022] ffff888012d34068 (&pipe->mutex){+.+.}-{4:4} [ 652.869670][T19018] PM: hibernation: Marking nosave pages: [mem 0x0009f000-0x000fffff] [ 652.872200][T19022] , at: pipe_lock+0x64/0x80 [ 652.874033][T19018] PM: hibernation: Basic memory bitmaps created [ 652.876303][T19022] [ 652.876303][T19022] which lock already depends on the new lock. [ 652.876303][T19022] [ 652.876310][T19022] [ 652.876310][T19022] the existing dependency chain (in reverse order) is: [ 652.876313][T19022] [ 652.876313][T19022] -> #3 ( [ 652.879053][T19018] PM: hibernation: Basic memory bitmaps freed [ 652.880889][T19022] &pipe->mutex){+.+.}-{4:4}: [ 652.880905][T19022] __mutex_lock+0x1aa/0x1ca0 [ 652.904823][T19022] anon_pipe_write+0x15d/0x1bd0 [ 652.906549][T19022] __kernel_write_iter+0x720/0xb10 [ 652.908462][T19022] __kernel_write+0xf5/0x140 [ 652.910135][T19022] autofs_notify_daemon+0x4db/0xd60 [ 652.911987][T19022] autofs_wait+0x10f3/0x1ac0 [ 652.913682][T19022] autofs_mount_wait+0x132/0x3c0 [ 652.915459][T19022] autofs_d_automount+0x4b2/0x960 [ 652.917243][T19022] __traverse_mounts+0x1b9/0x830 [ 652.919004][T19022] step_into_slowpath+0x772/0xf50 [ 652.920809][T19022] path_lookupat+0x627/0xc40 [ 652.922480][T19022] filename_lookup+0x224/0x5f0 [ 652.924205][T19022] kern_path+0x35/0x50 [ 652.925709][T19022] lookup_bdev+0xd8/0x280 [ 652.927312][T19022] resume_store+0x1d6/0x490 [ 652.928946][T19022] kobj_attr_store+0x58/0x80 [ 652.930581][T19022] sysfs_kf_write+0xf2/0x150 [ 652.932293][T19022] kernfs_fop_write_iter+0x3af/0x570 [ 652.934193][T19022] vfs_write+0x7d3/0x11d0 [ 652.935785][T19022] ksys_write+0x12a/0x250 [ 652.937365][T19022] __do_fast_syscall_32+0xe8/0x680 [ 652.939140][T19022] do_fast_syscall_32+0x32/0x80 [ 652.940866][T19022] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 652.943065][T19022] [ 652.943065][T19022] -> #2 (&sbi->pipe_mutex){+.+.}-{4:4}: [ 652.945535][T19022] __mutex_lock+0x1aa/0x1ca0 [ 652.947200][T19022] autofs_notify_daemon+0x4a6/0xd60 [ 652.949039][T19022] autofs_wait+0x10f3/0x1ac0 [ 652.950695][T19022] autofs_mount_wait+0x132/0x3c0 [ 652.952473][T19022] autofs_d_automount+0x4b2/0x960 [ 652.954287][T19022] __traverse_mounts+0x1b9/0x830 [ 652.956049][T19022] step_into_slowpath+0x772/0xf50 [ 652.957841][T19022] path_lookupat+0x627/0xc40 [ 652.959516][T19022] filename_lookup+0x224/0x5f0 [ 652.961211][T19022] kern_path+0x35/0x50 [ 652.962747][T19022] lookup_bdev+0xd8/0x280 [ 652.964361][T19022] resume_store+0x1d6/0x490 [ 652.966012][T19022] kobj_attr_store+0x58/0x80 [ 652.967713][T19022] sysfs_kf_write+0xf2/0x150 [ 652.969403][T19022] kernfs_fop_write_iter+0x3af/0x570 [ 652.971346][T19022] vfs_write+0x7d3/0x11d0 [ 652.972951][T19022] ksys_write+0x12a/0x250 [ 652.974599][T19022] __do_fast_syscall_32+0xe8/0x680 [ 652.976435][T19022] do_fast_syscall_32+0x32/0x80 [ 652.978141][T19022] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 652.980308][T19022] [ 652.980308][T19022] -> #1 (&of->mutex){+.+.}-{4:4}: [ 652.982618][T19022] __mutex_lock+0x1aa/0x1ca0 [ 652.984321][T19022] kernfs_seq_start+0x4f/0x2a0 [ 652.986062][T19022] seq_read_iter+0x2c1/0x12d0 [ 652.987927][T19022] kernfs_fop_read_iter+0x46c/0x610 [ 652.989787][T19022] copy_splice_read+0x618/0xc20 [ 652.991574][T19022] do_splice_read+0x285/0x370 [ 652.993332][T19022] splice_direct_to_actor+0x2a1/0xa30 [ 652.995326][T19022] do_splice_direct+0x174/0x240 [ 652.997083][T19022] do_sendfile+0xb06/0xe50 [ 652.998758][T19022] __ia32_compat_sys_sendfile+0x1e5/0x220 [ 653.000931][T19022] __do_fast_syscall_32+0xe8/0x680 [ 653.002805][T19022] do_fast_syscall_32+0x32/0x80 [ 653.004551][T19022] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 653.006738][T19022] [ 653.006738][T19022] -> #0 (&p->lock){+.+.}-{4:4}: [ 653.009001][T19022] __lock_acquire+0x1669/0x2890 [ 653.010737][T19022] lock_acquire+0x179/0x330 [ 653.012411][T19022] __mutex_lock+0x1aa/0x1ca0 [ 653.014049][T19022] seq_read_iter+0xe1/0x12d0 [ 653.015732][T19022] kernfs_fop_read_iter+0x46c/0x610 [ 653.017618][T19022] copy_splice_read+0x618/0xc20 [ 653.019362][T19022] do_splice_read+0x285/0x370 [ 653.021038][T19022] splice_file_to_pipe+0x109/0x120 [ 653.022842][T19022] do_sendfile+0x400/0xe50 [ 653.024472][T19022] __ia32_sys_sendfile64+0x1d7/0x220 [ 653.026357][T19022] __do_fast_syscall_32+0xe8/0x680 [ 653.028244][T19022] do_fast_syscall_32+0x32/0x80 [ 653.029985][T19022] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 653.032225][T19022] [ 653.032225][T19022] other info that might help us debug this: [ 653.032225][T19022] [ 653.035537][T19022] Chain exists of: [ 653.035537][T19022] &p->lock --> &sbi->pipe_mutex --> &pipe->mutex [ 653.035537][T19022] [ 653.039470][T19022] Possible unsafe locking scenario: [ 653.039470][T19022] [ 653.041875][T19022] CPU0 CPU1 [ 653.043667][T19022] ---- ---- [ 653.045447][T19022] lock(&pipe->mutex); [ 653.046844][T19022] lock(&sbi->pipe_mutex); [ 653.047186][T19023] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3016'. [ 653.049088][T19022] lock(&pipe->mutex); [ 653.049101][T19022] lock(&p->lock); [ 653.049108][T19022] [ 653.049108][T19022] *** DEADLOCK *** [ 653.049108][T19022] [ 653.049112][T19022] 1 lock held by syz.6.3016/19022: [ 653.049119][T19022] #0: ffff888012d34068 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x64/0x80 [ 653.063174][T19022] [ 653.063174][T19022] stack backtrace: [ 653.065097][T19022] CPU: 2 UID: 0 PID: 19022 Comm: syz.6.3016 Tainted: G L syzkaller #0 PREEMPT(full) [ 653.065114][T19022] Tainted: [L]=SOFTLOCKUP [ 653.065118][T19022] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 653.065125][T19022] Call Trace: [ 653.065130][T19022] [ 653.065135][T19022] dump_stack_lvl+0x116/0x1f0 [ 653.065152][T19022] print_circular_bug+0x275/0x340 [ 653.065171][T19022] check_noncircular+0x146/0x160 [ 653.065189][T19022] __lock_acquire+0x1669/0x2890 [ 653.065201][T19022] ? mark_held_locks+0x49/0x80 [ 653.065211][T19022] lock_acquire+0x179/0x330 [ 653.065221][T19022] ? seq_read_iter+0xe1/0x12d0 [ 653.065235][T19022] ? __pfx___might_resched+0x10/0x10 [ 653.065252][T19022] __mutex_lock+0x1aa/0x1ca0 [ 653.065269][T19022] ? seq_read_iter+0xe1/0x12d0 [ 653.065283][T19022] ? do_sendfile+0x400/0xe50 [ 653.065297][T19022] ? __do_fast_syscall_32+0xe8/0x680 [ 653.065314][T19022] ? do_fast_syscall_32+0x32/0x80 [ 653.065323][T19022] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 653.065337][T19022] ? seq_read_iter+0xe1/0x12d0 [ 653.065351][T19022] ? __pfx___mutex_lock+0x10/0x10 [ 653.065371][T19022] ? alloc_pages_bulk_noprof+0xac5/0x1410 [ 653.065386][T19022] ? seq_read_iter+0xe1/0x12d0 [ 653.065403][T19022] seq_read_iter+0xe1/0x12d0 [ 653.065418][T19022] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 653.065433][T19022] kernfs_fop_read_iter+0x46c/0x610 [ 653.065452][T19022] copy_splice_read+0x618/0xc20 [ 653.065468][T19022] ? __pfx_aa_file_perm+0x10/0x10 [ 653.065484][T19022] ? __pfx_copy_splice_read+0x10/0x10 [ 653.065502][T19022] ? __fget_files+0x204/0x3c0 [ 653.065518][T19022] ? __pfx_copy_splice_read+0x10/0x10 [ 653.065533][T19022] do_splice_read+0x285/0x370 [ 653.065549][T19022] splice_file_to_pipe+0x109/0x120 [ 653.065566][T19022] do_sendfile+0x400/0xe50 [ 653.065582][T19022] ? __pfx_do_sendfile+0x10/0x10 [ 653.065596][T19022] ? do_seccomp+0x333/0x2640 [ 653.065608][T19022] ? __pfx___seccomp_filter+0x10/0x10 [ 653.065622][T19022] __ia32_sys_sendfile64+0x1d7/0x220 [ 653.065633][T19022] ? xfd_validate_state+0x61/0x180 [ 653.065643][T19022] ? __pfx___ia32_sys_sendfile64+0x10/0x10 [ 653.065654][T19022] ? __secure_computing+0x21c/0x320 [ 653.065668][T19022] __do_fast_syscall_32+0xe8/0x680 [ 653.065685][T19022] do_fast_syscall_32+0x32/0x80 [ 653.065695][T19022] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 653.065709][T19022] RIP: 0023:0xf7fb4579 [ 653.065717][T19022] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 653.065728][T19022] RSP: 002b:00000000f54a655c EFLAGS: 00000296 ORIG_RAX: 00000000000000ef [ 653.065739][T19022] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000006 [ 653.065746][T19022] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000000 [ 653.065753][T19022] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 653.065759][T19022] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 653.065766][T19022] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 653.065776][T19022] [ 653.190552][ T5945] usb 42-1: SetAddress Request (86) to port 0 [ 653.192669][ T5945] usb 42-1: new SuperSpeed USB device number 86 using vhci_hcd [ 653.367189][ T5995] usb usb48-port1: unable to enumerate USB device [ 653.399141][T19019] vhci_hcd: connection reset by peer [ 653.401430][T14211] vhci_hcd vhci_hcd.2: stop threads [ 653.403168][T14211] vhci_hcd vhci_hcd.2: release socket [ 653.405402][T14211] vhci_hcd vhci_hcd.2: disconnect device [ 656.267058][ T60] usb 46-1: device descriptor read/8, error -110 [ 656.386996][ T60] usb usb46-port1: unable to enumerate USB device [ 658.266949][ T5945] usb 42-1: device descriptor read/8, error -110 [ 658.657331][ T5945] usb usb42-port1: attempt power cycle [ 659.227754][ T5945] usb usb42-port1: unable to enumerate USB device