last executing test programs: 9m25.044518409s ago: executing program 3 (id=239): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x4}}]}, 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1f4}], 0x1}, 0x4) 9m24.857998716s ago: executing program 3 (id=240): r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_SUBMITURB(r1, 0x802c550a, &(0x7f0000000280)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x0, 0xa3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001100050000000000feffffff07000000", @ANYRES32=r3], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 9m24.85767697s ago: executing program 3 (id=241): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000240)=ANY=[@ANYBLOB="0000010000000000"], 0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket(0x28, 0x5, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) munlock(&(0x7f00002de000/0x8000)=nil, 0x8000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x100, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x4, 0x11e41e7c, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x5, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x7}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x86405cbd4cef1159, 0x5}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, &(0x7f0000000800)={0x1, "c5c2a91e002b1b800000ffe73d5eff0010ffffffe70000ffe700", 0x1, 0xa, 0x1, 0x1000000, 0x4040300, 0x2}) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) (async) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) (async) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x88) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') (async) syz_open_dev$loop(&(0x7f0000000180), 0x3, 0x2) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r6) (async) recvmsg(r6, &(0x7f0000000480)={&(0x7f00000003c0)=@nfc_llcp, 0x80, &(0x7f0000000340)=[{&(0x7f0000000600)=""/160, 0xa0}, {&(0x7f00000006c0)=""/197, 0xc5}, {&(0x7f00000000c0)=""/33, 0x21}, {&(0x7f0000000140)=""/14, 0xe}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000000280)=""/8, 0x8}, {&(0x7f0000001880)=""/221, 0xdd}], 0x7, &(0x7f0000001980)=""/201, 0xc9}, 0x140) (async) socket$inet(0x2, 0x4000000000000001, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="0f00000004000000040000000200020000000000", @ANYRES32=0x1, @ANYBLOB="fdffffff0001000000000073df06aa9500000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"/28], 0x48) syz_open_dev$vim2m(&(0x7f0000000440), 0x4, 0x2) 9m24.6379108s ago: executing program 3 (id=242): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$inet6(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="270302", 0x3}], 0x1}, 0x5) 9m24.425561217s ago: executing program 3 (id=243): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa0, 0x4) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1a8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) r1 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x47) mknodat$loop(r1, &(0x7f0000000200)='./file1\x00', 0x800, 0x1) chdir(&(0x7f0000000140)='./bus\x00') linkat(r1, &(0x7f0000000000)='./file1\x00', r1, &(0x7f00000001c0)='./bus\x00', 0x400) setxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000680)={{}, {0x1f}, [], {}, [], {0x10, 0x1}}, 0x24, 0x3) 9m24.367257462s ago: executing program 3 (id=245): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, 0x0, 0xc800) 9m9.327847052s ago: executing program 32 (id=245): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, 0x0, 0xc800) 7m25.947303258s ago: executing program 0 (id=867): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000000) (fail_nth: 6) 7m25.807026299s ago: executing program 0 (id=868): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x439, 0x0, 0x60000, {0x0, 0x0, 0x0, r3, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_REMOTE={0x8, 0x7, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x840}, 0x8000000) sendto$packet(r0, &(0x7f0000000180)="280320000a0014000000fbf719143baa111f43c851ffab286e16195ecf3d77cc32b6d78839980700e6669d3c865c6b96e84000050016f37fe8c0", 0x3a, 0x840, &(0x7f00000000c0)={0x11, 0x86dd, r3, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2eaaaac15ca67ef2}}, 0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000003c0)={&(0x7f0000000240), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r7, 0x100, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40000d8}, 0x1) sendmsg$SMC_PNETID_FLUSH(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x80, r5, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'macvtap0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'dvmrp1\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x880}, 0x40000) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80a61, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r8, 0x400454d8, &(0x7f0000000140)=0x90) write$tun(r8, &(0x7f0000000280)=ANY=[@ANYRESOCT], 0xfdef) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000009c0)={0x4c, r9, 0x101, 0x70bd2a, 0x80000, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='v'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x1c, 0x51, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "1f36a5ed75a04b91f507422f23"}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x4804) 7m25.64580694s ago: executing program 0 (id=869): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x4, 0x800006}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) syz_open_dev$dri(&(0x7f00000001c0), 0x8, 0x2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) connect$can_bcm(r2, &(0x7f0000000300)={0x1d, r3}, 0x10) sendmsg$can_bcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x2, 0xfc, 0x2, 0x9}, {0x4b, 0x3, 0x2, 0x8}, {0x6, 0x8, 0x7, 0x10000}, {0x0, 0x9, 0x60, 0x1}]}, 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$inet6_mreq(r6, 0x29, 0x1, 0x0, &(0x7f00000004c0)) r7 = socket$kcm(0x29, 0x2, 0x0) r8 = socket$kcm(0x29, 0x7, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x89e1, &(0x7f0000000200)={r8}) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r9, {0x1}, {0x0, 0xb}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 7m24.2272465s ago: executing program 0 (id=879): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) close(0x3) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x111000, 0x0) pidfd_send_signal(r1, 0x0, &(0x7f0000000640)={0x0, 0x0, 0xfffffffa}, 0x2) mmap(&(0x7f000005c000/0x4000)=nil, 0x4000, 0x0, 0x4000010, r0, 0x0) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000080)="e9e8ee3695f1098d235c9bab8eb27f6aa322da1752055ef4a81efecdf69327fafe99131be2f5186c44e51b5ebc75cea47e71f3b1e706704f05b8fbd917104c11a01f77d30626abafc27ae47416bced90fed65bb6b21f6386eb2e68aba853c4d00d9526da107acd66c7e2a9bbd499c6ec3ef688a70e5c7ab1f74e", 0x7a}, {&(0x7f0000000000)="0bf2825a5d6384802fd2", 0xa}, {&(0x7f0000000100)="7fe705a715d3924b0467d631dc763f9ead122fb76e01c53c62a0dd0ddc6580e5c46456", 0x23}, {&(0x7f0000000180)="84e16d3c732d5751ee7464743db7e1f0be0cf88cfdd3241401", 0x19}, {&(0x7f00000001c0)="29a22db8e7ff2f774beda49bb2a9d122e869b78c23241513cc06bca0f8b5b2ff79e0f8f60b16c47b2b5338ecb85b7933f4289e90366b20cff7516359da5b2a57ca800d77427ab8dba4e42c017b9e552d6c05114df2d348138dfd99", 0x5b}, {&(0x7f0000000240)="6886fb4a328796820cb7b229781de16516c6e93ca728ff9a65b55632330644d0232360a70361669fa7307812202540c86f0bb995a9dedb161c72228ede3a8f09e0a71b1c7956ead321d817f18f0368ebd194c196b9f3f9d4fb65ae51669819f8b4e68d0d6742cf97f64146c5e9c64876cd3505d00f68e92aa21cb0d0f6642e1a49336526d7ee", 0x86}], 0x6) openat$cgroup_devices(r0, &(0x7f00000003c0)='devices.deny\x00', 0x2, 0x0) 7m24.226483576s ago: executing program 0 (id=881): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$inet6(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, 0x0}, 0x5) 7m24.164318737s ago: executing program 0 (id=882): futex(&(0x7f000000cffc)=0x2, 0x80000000000b, 0x1, 0x0, &(0x7f0000048000), 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x4) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x800, &(0x7f0000000100)={[{@grpquota_inode_hardlimit={'grpquota_inode_hardlimit', 0x3d, [0x32, 0x35, 0x65]}}]}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000100081", 0x7}], 0x1}, 0x8000) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r0, 0x114, 0x5, 0x0, 0x52) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0402030c"], 0x7) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) r2 = dup(r1) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = socket(0x2a, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000600)={0xa, 0x4e21, 0x10001, @mcast1, 0x7}, 0x1c) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x1) 7m15.156926762s ago: executing program 2 (id=928): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40605414, &(0x7f00000000c0)={0x6, 0xffff81a4, 0x40, 0x0, 0xf}) preadv(r2, &(0x7f0000000c40)=[{&(0x7f00000003c0)=""/153, 0x99}, {&(0x7f0000000140)=""/86, 0x56}, {&(0x7f0000000480)=""/179, 0xb3}, {&(0x7f0000000780)=""/139, 0x8b}, {&(0x7f00000005c0)=""/96, 0x60}, {&(0x7f0000000640)=""/117, 0x75}, {&(0x7f0000000cc0)=""/170, 0xaa}, {&(0x7f0000000900)=""/177, 0xb1}, {&(0x7f00000009c0)=""/155, 0x9b}], 0x9, 0x1fd, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000400}, 0xc, &(0x7f0000000140)={&(0x7f0000000c00)={0x1c, r1, 0x300, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040080}, 0x44040) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000380)=ANY=[@ANYBLOB="d44eec00000000000000000000000000011100f90800020064eb69bad94997ec"], 0x20}, 0x1, 0x0, 0x0, 0x14000004}, 0x20000800) syz_emit_ethernet(0x7a, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd60381f3400442f00fc000000000000000000000000000000ff0221000000000000000001042081000000892f"], 0x0) socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {}, {0x8, 0xa}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_gact={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x3ffc00, 0x6, 0x0, 0x3ff, 0x401}}, @TCA_GACT_PROB={0xc, 0x3, {0x5, 0x388, 0xffffffffffffffff}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x24000010}, 0x20000000) 7m15.026742766s ago: executing program 2 (id=929): socket$pppl2tp(0x18, 0x1, 0x1) r0 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r0, 0x48e9, 0x0, 0x2, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r7, 0x4b2f, 0x4) ftruncate(r6, 0x8800000) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100fdffffff0400d1000800000008000300", @ANYRES32=r5], 0x20}}, 0x0) 7m14.865327394s ago: executing program 2 (id=930): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x1c000) socket$unix(0x1, 0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) writev(0xffffffffffffffff, &(0x7f00000002c0), 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) mount$9p_rdma(&(0x7f0000000140), &(0x7f0000000280)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000001c0), 0x53084, &(0x7f0000000640)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@timeout={'timeout', 0x3d, 0x9}}, {@sq={'sq', 0x3d, 0x4}}, {@rq={'rq', 0x3d, 0x9}}], [{@flag='nomand'}, {@fsmagic={'fsmagic', 0x3d, 0x3}}, {@measure}, {@smackfsdef}]}}) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x138}, 0x1, 0x0, 0x0, 0xc0}, 0x80) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffffffff, 0x0, &(0x7f0000000540)=0x2) lseek(r2, 0xa, 0x4) userfaultfd(0x801) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x82e, 0x101, 0x4}) r4 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r3, 0xc03064b7, &(0x7f0000000440)={r5, 0x0, 0x0, 0x1, 0x8, 0x8, 0x0, 0xf7b4, 0x1000, 0x7, 0x4d, 0x4}) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000240)={0x3, r7, 0x1000002, 0xffff, 0x100, 0xf667, 0x4}) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) 7m14.622493499s ago: executing program 2 (id=931): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000480)={0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff}) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x101, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setns(r1, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3f, 0x38, 0x66, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0xff, 0x0}, @local}, @time_exceeded={0x5, 0xea452954ff7d0934, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0xffff, @empty, @multicast2}, "ffff07718e9bf703"}}}}}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_GET_VCPU_EVENTS(r7, 0x4048aecb, &(0x7f0000000040)) r8 = openat$nvram(0xffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$sock_inet_SIOCDELRT(r8, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x4e21, @local}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3d}}, {0x2, 0x4e20, @local}, 0x38, 0x0, 0x0, 0x0, 0x6, &(0x7f00000000c0)='veth1_to_batadv\x00', 0x1, 0x4, 0x8}) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f045}) ppoll(&(0x7f0000000500)=[{r2, 0xa005}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000bd9000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f0000000180)="66b8ca008ee0b9e50200000f32f32642f67c623d66bad104b000ee6646e200b8010000000f01c166baf80cb81cdb7288ef66bafc0cedc4c1ff2d42d3c40161f5a200000000f367f2400f35", 0x4b}], 0x1, 0x4a, &(0x7f0000000280)=[@cstype0={0x4, 0xc}, @cstype3={0x5, 0x7}], 0x2) 7m14.396552937s ago: executing program 2 (id=936): syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001800110002"], 0x1c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000ff7f0000000000000d0000009500000000000000d9d98c6134fce96ea91d0c4fd44e6695ecb61e65cd593541e12be758a66c051de93c99ebc260844d5c0212cf17bb47395d1d2d0a8493d74f12f52b4fff14ca87c0f597b4a0dee1e88d0a5a90579d3333869ce780d24c8cccf2019d26ca758e178cdab5f957e71dea4937c69db421dd2bb510e37e8da24e0fab2f331cd7173934ca849a3e058b9549f118bfe3611a4956012254da164bd174a5757690ad542a56ce5332a27b336f5d3cffc4e6197694ef518720e2a908"], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='afs_cb_break\x00', r5, 0x0, 0x100000000}, 0x18) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) ioctl$TIOCL_PASTESEL(r4, 0x541c, &(0x7f0000000000)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000000080)={0x8}) fstat(r7, &(0x7f0000000300)) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c010000", @ANYRES16=0x0, @ANYBLOB="01002c76955162dbdf253b00000008000300", @ANYRES32=r8, @ANYBLOB="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"], 0x11c}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000000) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@dellink={0xfffffffffffffeb1, 0x11, 0x1, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x2c78a, 0x50a06}}, 0x20}, 0x1, 0x200000000000000, 0x0, 0x4}, 0x40c40c0) fchdir(r6) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x5f, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid}]}, 0x1c}}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) 7m14.266830357s ago: executing program 2 (id=938): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x2000000}) socketpair$unix(0x1, 0x2, 0x0, 0x0) 7m8.89992764s ago: executing program 33 (id=882): futex(&(0x7f000000cffc)=0x2, 0x80000000000b, 0x1, 0x0, &(0x7f0000048000), 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x4) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x800, &(0x7f0000000100)={[{@grpquota_inode_hardlimit={'grpquota_inode_hardlimit', 0x3d, [0x32, 0x35, 0x65]}}]}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000100081", 0x7}], 0x1}, 0x8000) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r0, 0x114, 0x5, 0x0, 0x52) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0402030c"], 0x7) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) r2 = dup(r1) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = socket(0x2a, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000600)={0xa, 0x4e21, 0x10001, @mcast1, 0x7}, 0x1c) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x1) 6m58.889005874s ago: executing program 34 (id=938): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x2000000}) socketpair$unix(0x1, 0x2, 0x0, 0x0) 2m33.024063449s ago: executing program 4 (id=2349): r0 = socket$packet(0x11, 0x3, 0x300) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000100)='asymmetric\x00', &(0x7f00000003c0)=@secondary) keyctl$get_persistent(0x16, 0x0, r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/pid_for_children\x00') sendmsg$NFT_MSG_GETSET(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000700)={0x29c, 0xa, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_DESC={0x74, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x70, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x574b}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}]}]}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_EXPR={0x68, 0x11, 0x0, 0x1, @dynset={{0xb}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_DYNSET_TIMEOUT={0xc, 0x6, 0x1, 0x0, 0xffffffffffff8001}, @NFTA_DYNSET_TIMEOUT={0xc, 0x6, 0x1, 0x0, 0x7}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0x9}, @NFTA_DYNSET_SET_ID={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz0\x00'}]}}}, @NFTA_SET_EXPRESSIONS={0x118, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", "", "", "", "", "", ""]}}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x4c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_MASQ_REG_PROTO_MAX={0x8}, @NFTA_MASQ_FLAGS={0x8}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0xa6}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x11}]}}}, {0x20, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xc, 0x1, 'comment\x00'}]}}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x94}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xfffff376}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x4}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x3}]}}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_EXPR={0x64, 0x11, 0x0, 0x1, @queue={{0xa}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x5}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x1}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0xff5f}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x7f}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xa}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xe}, @NFTA_QUEUE_FLAGS={0x6}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x9b}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0xc000}]}}}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x4}]}, 0x29c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040000) ioctl$NS_GET_PARENT(r4, 0xb702, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xffffffffffffff6e, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r5, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r2], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x127c8, 0x0, 0xffffffffffffffff, 0x20}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r10, r7, 0x25, 0x2, @val=@netkit={@void, @value=r10}}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000440)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @loopback, @rand_addr=0x640100fe}}}}}}, 0x0) socket$packet(0x11, 0x3, 0x300) sendto$packet(r0, &(0x7f0000000240)="3f6dc38a8d4e715114c3888479ec07", 0xf, 0x8040, &(0x7f0000000180)={0x11, 0x1a, r5, 0x1, 0xa2}, 0x14) 2m32.846556881s ago: executing program 4 (id=2351): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x80000007}]}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) io_setup(0x2e, &(0x7f0000000100)=0x0) io_submit(r5, 0x1, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000140)='^', 0x1}]) r6 = mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x68, 0x0, &(0x7f00000004c0)=[@enter_looper, @free_buffer={0x40086303, r6}, @release={0x40046306, 0x1}, @increfs={0x40046304, 0x3}, @enter_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/190, 0xbe, 0x1, 0x18}, @ptr={0x70742a85, 0x1, &(0x7f00000003c0)=""/69, 0x45, 0x1, 0x1c}, @flat=@handle={0x73682a85, 0x1000}}, &(0x7f0000000200)={0x0, 0x28, 0x50}}}], 0x82, 0x0, &(0x7f0000000540)="cbb489a49e02d3bdc06da2b1624cfcde12442d86ce0566bc9b141a1082e604d0a1a1b51354f700c83bc34230602aaca06046cf3c200a9f62c65345035b3d13a6dc92931b17451c13422d890e7889d22311ff257b1496ac7e79da6a55e97f201f279f6beea322d5d20a336bc2e84eeec9b82a4ad7cd5c2f174354a32d399acf0c2e66"}) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="d80000001c0081054e81f782db44b904021d08040e000000100d10a118000c000600142603600e1208000f0000810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee0800080e408e8d8ef52a98516277ce06ebace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad8099639cace81ed0bffec193e2a9ecbee5de6ccd4d6e4ed6f3d93452a92954b43370e970189", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r7 = fanotify_init(0xf00, 0x0) fanotify_mark(r7, 0x1, 0x5000003a, r2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000540001002bbd7000fdffffff07000000", @ANYRES32=r8, @ANYBLOB="20000100", @ANYRES32=r8, @ANYBLOB="010102000000000000000000000000000000000108"], 0x38}}, 0x0) 2m31.777271279s ago: executing program 4 (id=2356): pipe(&(0x7f0000000180)) r0 = socket(0x1a, 0x4, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x1) (async) ppoll(&(0x7f0000000340)=[{r1, 0x1}], 0x1, 0x0, 0x0, 0x0) (async) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) r2 = socket(0xa, 0x1, 0x38) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) fsetxattr$security_capability(r4, 0x0, 0x0, 0xfffffe04, 0x1) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) (async, rerun: 32) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x80, 0x7ffc1ffb}]}) (async, rerun: 32) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x141, 0x0, 0x4}, 0x18) (async) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000040)={0xf0f002, 0x4}) (async) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x85c68e8ab9c77084, 0x0) (async, rerun: 32) openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) (rerun: 32) socket$nl_xfrm(0x10, 0x3, 0x6) (async) gettid() (async) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000340), 0x4) (async) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc) (async) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}, 0xffffffffffffffff, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}, 0x5c) (async) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) 2m31.354140477s ago: executing program 4 (id=2358): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000180)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r0, &(0x7f0000000780)=ANY=[@ANYBLOB="88461c1cbb0c1240b4e052137ac1e77979efe6088fd3986ca2be57c549d5f1a9987f1236ebac92fcd8e404b4024dfbc991951ce455254400638a82880d54d6ba9960fe8b81eda0ce26952798fe6958f7678cae4a616fe3589686f107d049f2906c38b9e4c9dc95d3348412e4e637b64b6f02"], 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f00000002c0)={0x0, 0x3d, &(0x7f0000000740)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c00000001090101000000000000000000000800782b837c559cdd20dd5b49eb980ca2986ae1a4c011680d89d5341c4595835a03840aaf80ff95d2b6c8c7a9d95137abb08679ae4de92cca8670701c9066f7e5235145604d0272a5d762"], 0x14}}, 0x24000004) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYRES8=r0, @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000380)='efs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') setpgid(r3, r3) setpgid(0x0, r3) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) prlimit64(r4, 0x6, &(0x7f0000000040)={0x5, 0x1}, &(0x7f0000000100)) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r5, 0x0, 0x29, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc300000000c0a010100000000000000000a0000060900020073797a3100000000090001000000000004ea03801400000011000100000000000000000001b22400000a"], 0x94}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000000501010000000000918d8c7c2098ffbb6a4ca78316fcc9b481c922fcd8ab913415f8452f9d63d50d70616d5582209943c6b53d6e2d57f366b0e95aba4b44c972696a69608c994181"], 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x880) socket$igmp6(0xa, 0x3, 0x2) syz_init_net_socket$llc(0x1a, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x5, &(0x7f0000000a00)=@framed={{}, [@jmp={0x6, 0x0, 0xc, 0x0, 0x0, 0x1, 0x8}, @call={0x85, 0x0, 0x0, 0xcc}]}, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd4}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) 2m31.30429025s ago: executing program 4 (id=2359): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) (async) iopl(0x3) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4000) (async) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async, rerun: 32) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) (rerun: 32) tee(r1, r2, 0xffffffffffffffff, 0x0) close(r0) 2m30.921356768s ago: executing program 4 (id=2363): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000c80)={0x24, r0, 0x1, 0x70bd29, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @default=0x9b4}]]}, 0x24}}, 0x0) 2m30.761336136s ago: executing program 35 (id=2363): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000c80)={0x24, r0, 0x1, 0x70bd29, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @default=0x9b4}]]}, 0x24}}, 0x0) 7.552381844s ago: executing program 6 (id=2941): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e78, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x80}}]}, {0x2}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000340), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000000000000000000000000d770300e1ff"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = fsopen(&(0x7f0000000100)='squashfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000000640)={'#! ', './file0', [{}, {0x20, 'rp\xee\xff\xe4'}, {0x20, '\x12~\x85\xecZ@\xb5\x18\xec\x182\xc9L\xdc\xb2\x81\xdam\xa8\xc5{\x92\x14\xce\xf2\xb8\xf7\xa9\xa7\x00X \x93t\x91!%\xff\x13\xdc\aIY\x0e\xb4zh\\\x06\r\xe8^Z\x81\xb8$:P\x83\x98_\xa1\x98\xd6\xd2g-\xefr\x14<\xd1\xb84\x94\xa09\x9f\x12I\xed\xd5dT#f\xb4\xf3\x88\xcf\xde\x00\xd4\x81WN\xca\xb5c\xbf\r\xb0Q\xa9\xbaC\xd2\xa2\x1d~\xc5D(\x92A\x12f\x83fn\xd0\xb6\x02\x116t:|\x94\xc7\xac\xf6\xbc~m\xd6\xd1\xe5\xe0\xdd\xc2\x9cl#\x85\xab\xe7\xa9\xcb\"\xd2\x97\x10\xa5\xa8\xc1\x8d@U\a]Gi^\xd2\xdf\xb0\xa5!\x836\x92\xc9\x92\xe4'}], 0xa, "7bad65c4da5338577feb172ca63250224c76e2027f000000000000007e2ac7fe2e31a2e87e3ee43ed92dfbb6bc0700de24db4ec870b8000000000002002c65e7495fe9afeb28bb60e91e23e104f6dbbf40e1fc2ab1a77fd9f6414e438f03"}, 0xfffffc43) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000100000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010000004400050000000000000000000000000000000000000000003c00000002000000ffffffff00000000000000000000000006000000040100"/176], 0xfc}}, 0x0) 7.122155198s ago: executing program 5 (id=2943): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x442, 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x2, &(0x7f0000000240)=[&(0x7f00008ce000/0x4000)=nil, &(0x7f0000af0000/0x4000)=nil], &(0x7f0000002640), &(0x7f0000000000), 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = gettid() futex(&(0x7f00000002c0)=0x2, 0xb, 0x2, &(0x7f0000000300)={0x77359400}, &(0x7f00000004c0)=0x1, 0x2) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r6 = socket(0x1e, 0x1, 0x0) connect$tipc(r6, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r6, &(0x7f0000000340), 0x2000011a) write$binfmt_elf64(r1, &(0x7f0000001a00)=ANY=[@ANYBLOB="7f454c460d04000c028000000000000003003e"], 0x51) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 4.494088482s ago: executing program 6 (id=2949): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(streebog256-generic)\x00'}, 0x58) openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) r1 = syz_usb_connect$hid(0x0, 0x90, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000105804165000000000000109022400010000c04009040000010300000009210900000122a00009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000000)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x80) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0xfffd, 0x0, @mcast1, 0x2}, 0x1c) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r4, 0x29, 0x32, &(0x7f0000000280)={@ipv4={'\x00', '\xff\xff', @broadcast}, r6}, 0x14) r7 = syz_usb_connect(0x0, 0x2f1, &(0x7f0000000500)={{0x12, 0x1, 0x310, 0xe9, 0xce, 0xae, 0x8, 0x12d1, 0x14f0, 0x2fbd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2df, 0x1, 0xd7, 0x8, 0x10, 0xc, [{{0x9, 0x4, 0xf2, 0xf, 0x9, 0x95, 0x40, 0x82, 0x6, [@uac_as={[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x3, 0x4, 0x10, 0x9, "877671be093c97"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x5, 0x2, 0x9, 0x1, 'N4(', "ee75"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x21, 0x4, 0x3, 0x8, '&'}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x6, 0x3, 0x6, 0x6, "f09875", "bc5e"}]}, @cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, '\\'}, {0x5, 0x24, 0x0, 0x87}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x9c2, 0x800, 0x96}, [@mdlm={0x15, 0x24, 0x12, 0x9}, @mdlm={0x15, 0x24, 0x12, 0x1}]}], [{{0x9, 0x5, 0x5, 0xc, 0x20, 0x3e, 0x4e, 0xfb, [@generic={0x9a, 0x0, "c61d36c837cbc43ef78abc87f5bc33c0b8c56754b0dc9a8955798365a3b5aa82f40e18bc22d001c33116813eeb17907144e81d8637f083d58eb6e39f1e02fd6ce11db0ed283fd5502be72cac329fe5540668198963725a1c4b33599a7b3c813371c4928ceeec6d7223ad5cbe52f4fbe198736b7b641e7db5079d86cace9821dacf60425e9bf4d572af64595b4bf0dc8475e471d8dd8b679d"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x4e, 0x7}]}}, {{0x9, 0x5, 0x2, 0x4, 0x3ff, 0x7, 0x3, 0xa3, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xc}]}}, {{0x9, 0x5, 0x8c, 0x10, 0x40, 0x8, 0x3, 0x1, [@generic={0x27, 0x22, "6f1e46fc1c59e034e962e4fef28ecd4a124036267bd2814258fdfa8c82ca130048f4abecf2"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0x5, 0x6, 0x8, [@generic={0x4b, 0x6, "1a9f9787121015264ee1e4ca8e5966923d95b49f37e0ea45b023c7078db0dbb07cfc4c48d4d9da34ed2fba08c65a3ee931726366b7ebd3664e427f200825099aa65cb31e8c5de18780"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x4}]}}, {{0x9, 0x5, 0xc, 0x2, 0x200, 0x5, 0x9, 0x9, [@generic={0xc4, 0x24, "b24b76cbf456b42c78d773906a835a642b1faab3d36e7c3611fbe9f7d56bcd0cdf81217af02f5232b9162cac0bb5fae510acb4cff8b9e4c4e7f1d0ba9e688d2df23edb659abbf3d763430af0e9d148e3da192bae22081612eb6ab537a05cb0ffcdd0201dd6ae518f4db50a2b80814a03c5eb4538f1d8cb849422fd2bc8ba971b5cfaa0ed5f5a2ac35416f38b4e705c8998414e3f7d34b03f32dfeb67d7d646160be0a831052f8f14199f109957d0276db75c09847b8025e6d9b64e99c8df15f9452f"}]}}, {{0x9, 0x5, 0x0, 0x2, 0x200, 0x7f, 0x9, 0x43, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x40, 0x5f}]}}, {{0x9, 0x5, 0x3, 0x1, 0x20, 0x6, 0x7, 0x6c, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0xf70}]}}, {{0x9, 0x5, 0x5, 0x10, 0x400, 0x6, 0x7, 0x63, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x4, 0xd}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x4}]}}, {{0x9, 0x5, 0x1, 0x0, 0x20, 0x5, 0x1, 0xa5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0xfff8}]}}]}}]}}]}}, &(0x7f0000000a40)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x5, 0x4, 0xfa, 0xff, 0x6}, 0x15, &(0x7f0000000180)={0x5, 0xf, 0x15, 0x1, [@ssp_cap={0x10, 0x10, 0xa, 0x4, 0x1, 0x8, 0xf, 0x0, [0xff0000]}]}, 0xa, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x405}}, {0xca, &(0x7f0000000ec0)=ANY=[@ANYBLOB="ca0316200ab3d7e8585fad9ba6be81471e0b4bbe0ecb8c1a4e2330632e6be20db0c4df1ef62cad18dae3c555b65620e0fa0bf975b14c0104cc294b0962eeff10c73a27b6d971d9b7cc5fbe2d336cc7651d1309011c393ce384306c77713fb6251d51f71766c3ce129130ba31de6d62ae5098c9cd6200b4b24b2299d3d7f572aaea103a730202aa4eef0f1f621e2602b8b45439a974aea63463424d40ecc37b303656b9f08d7e6e38a2a1b3b3dea9110fdc9fadae5b826f499f1432b93b7f9fa2a9ded7c32d89e28e3532"]}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x3468}}, {0x3d, &(0x7f0000000300)=@string={0x3d, 0x3, "fec829f5d2bd53d7ab654edbde7a10cfeed1a6df76aa1b8de491b3ff0db28d0a056ae0836bfcc29998d0af6efa9157abf37c87923e3acb5c606905"}}, {0x4d, &(0x7f0000000880)=@string={0x4d, 0x3, "24864f3ed0d7c6805c9c0f304d64cbee617d1189906b4d9354e9eb800d1cbaed804eb0a828441ce409284f5606ef673e62b4b1968511b71eafb4cf44d6634c81aa8460781e7762dd9430f4"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x44c}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x422}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x814}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x421}}, {0x8b, &(0x7f0000000980)=@string={0x8b, 0x3, "6d5478f1c991158934463865ef92d273af654286f2a5344cc003bc28719ab1877f62c281fb5ee68a4702de92895a7e94820c5c07863a1b0f7a4c0d8d7fbc585b8d1ad1d507d5a345bf9095c35330f85d79c3c109272dc78555f6616a7bfe669994c8d2e51682f387be0c1d0d65db5d2c330c03838132f5a292fcf3b95dd625a528c6c070b51502e95d"}}]}) syz_usb_control_io$uac1(r7, &(0x7f0000000c00)={0xc, &(0x7f0000000ac0)={0x40, 0x9, 0xd4, {0xd4, 0x22, "999b9b4057049843ee354a6a6fbadaab6c90c7ef2c432aaea0610895aa5bc42c62215a39af94099c36a2a6f062dc9d7559212d3176bfcc6986374c3821bd81f1c222946846fe6e1c1f3cdfde8d34b8d711082d39a472c16f344f62e07e7f648fd2c3ab0c59c1702a2745cf64ecb5147458ec51963c2410c719b24e60b7aac8f64fe0b945bedba639d627815726f1a3df144efbb9bf66737c2288f1f9bb181a74cb7476f3680284fd19f00c274bef4c9c158db4a78d177f6ca544217c0a2cfd4919fc7da46bc872b57e572e08f85757606a07"}}, &(0x7f0000000bc0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x401}}}, &(0x7f0000000e80)={0x24, &(0x7f0000000c40)={0x0, 0x1f, 0x40, "2dfa70ca65a1c2273c5075fdb5cfc7ccaec46f062d4fc2c950d692c8ad2a3df2b799bae360a7d375d0f71946ad77f4646d8204a13f4d1bc6d8a9788a7fdb1865"}, &(0x7f0000000cc0)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000d00)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000d40)={0x20, 0x81, 0x2, 'hG'}, &(0x7f0000000d80)={0x20, 0x82, 0x1, "ef"}, &(0x7f0000000dc0)={0x20, 0x83, 0x1, "d7"}, &(0x7f0000000e00)={0x20, 0x84, 0x1, "15"}, &(0x7f0000000e40)={0x20, 0x85, 0x3, "5c5fc4"}}) ioctl$PIO_UNISCRNMAP(r3, 0x5453, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$HIDIOCSUSAGES(r2, 0x501c4814, 0x0) mq_open(&(0x7f000084dff0)='rmdF\x17\x16\xbc\xec', 0x6e93ebbbcc0884f2, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000fc0)={{{@in6=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@dev}}, &(0x7f0000000400)=0xe4) sendmsg$nl_netfilter(r9, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f00000010c0)={0x30c, 0xb, 0x9, 0x101, 0x70bd2a, 0x25dfdbff, {0x1, 0x0, 0x1}, [@nested={0x10, 0x7e, 0x0, 0x1, [@nested={0x4, 0x136}, @nested={0x4, 0x80}, @typed={0x4, 0x119}]}, @generic="de34629a82b0bfdfcacd7ff66dcefa9e1a413a4a445e1f810fc9dfd6638eca27f0180037bb8263252bc5544b105f8f6ec4fea4821c4427fd54800768a48e6a921051b03145abafa54224bba24969bb66023f61bcd7d2ef8e67a1404bf0d9eb5a3b93a5914689f325bfe7494901b1556a947a45cf9940806c07bccac49aaf66f17591189123069e153f43c8c017372753270e83", @typed={0x8, 0x89, 0x0, 0x0, @uid=r10}, @nested={0xc, 0x9f, 0x0, 0x1, [@typed={0x4, 0x35}, @nested={0x4, 0x8d}]}, @nested={0x23d, 0x27, 0x0, 0x1, [@nested={0x4, 0x11f}, @typed={0x8, 0x14e, 0x0, 0x0, @uid=0xee00}, @generic="50844de31fdd6f8e863ed788dd614b1b14bbb32a4cf3d95b95cd021c28891541a013096566", @generic="4a1594c6ae92cd36ea9802484caf78c42015b038c47f8f02ce19364e50263f96b3f6dbe925cd3d9550e462877fd5973538a5211473919632f924d3eaf41baef02e07e7f052b5f1c24fe7dcf72c94bd7c6b62cbeb06fd391e5feea3bb81bc20b6415395ff900356d4b9dc6a7de8bf4d75ca99d4ac7a380a06d4b23cd8cf730e950b5ad542434a386fb5ef7086a4f67b273b40eb440db18aa5ec24b2a74ddc5e573f1a255951f15c7df497309408780a4a1fdc119c94befd07a4b04ff206f3a5d95c4ed8adf8da68cd1f9b2fa201145d7d07d17abe608353c2334959984f6af1ddd7", @nested={0x4, 0x10a}, @generic="ec729480cb5b0a61f8d4ac3b9b25eecb1a84f056e1574ec148c90618e0dece654b29f927a4e3f567b89a58e213192e6f31ef104e5206bada472c38b75e1a0515fa42c102da3dce7550d24788b2452ae245983490d87135194e3e4cd13e75221695bc717a00a3652307fa97823a504f60c5d51d31ed455ff6f632de312322fd6ba71a3fef3a23a9e81a42cf8f3ccf0897777cee3f40f47dda9f1433a9e08c3dd22fbac0c6b7d563c992bc8e86c5e8be3c3f73683e6c1c34da9bf94aec57ba7e9dba856ea91083015910ad5266ffef0d713b29d6", @typed={0x39, 0x48, 0x0, 0x0, @binary="2655449026cfb61aa4ea7591851c59464bb3260eab6c37a7cfff80b71935d7a8128c29ebc13c298e108a3ef717152e63a397a1033d"}, @typed={0x14, 0xe0, 0x0, 0x0, @ipv6=@empty}]}]}, 0x30c}, 0x1, 0x0, 0x0, 0x44080}, 0x4484) 4.363146992s ago: executing program 5 (id=2950): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.freeze\x00', 0x275a, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000002080)=0x3a, 0x23b) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x268}], 0x1}, 0x0) fstat(r2, &(0x7f0000006680)) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000002100)=ANY=[@ANYBLOB="1000ffffffffffffff7f7000fbdb3b33df070000003d629e4adabcdaa0ba63066891429c1fcb142af1aeb232e60c8a9c23db3f1f88fd722a34ae7e414e149f8d00000000000000"], 0x10}, 0x1, 0x0, 0x0, 0x44000}, 0x4048084) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x4}) r6 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'team_slave_0\x00'}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002180)=ANY=[@ANYBLOB="02e70008000020014000d5c81e8100", @ANYRES32=r1, @ANYBLOB='\b\x00'/20, @ANYRES16=0x0, @ANYRES32, @ANYRESHEX], 0x50) r7 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000020c0)='fdinfo/3\x00') read$FUSE(r8, &(0x7f0000000080)={0x2020}, 0x2020) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r8, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000140)=[0x0], 0x1, 0x80000}) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x2, 0x181a06) 4.183314805s ago: executing program 5 (id=2952): syslog(0x2, &(0x7f0000000400)=""/248, 0xf8) (fail_nth: 5) 4.154742024s ago: executing program 7 (id=2953): r0 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000080), 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8280, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x1c5, 0x0, 0x5}]}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r4, 0x8b2a, &(0x7f0000000040)) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x106f) ioctl$SG_GET_ACCESS_COUNT(r5, 0x2289, &(0x7f0000000000)) ioctl$BSG_GET_RESERVED_SIZE(r5, 0x2272, &(0x7f0000000040)) 3.91182377s ago: executing program 5 (id=2954): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f01726a067818b990b13bfddb7e78270010720596bb3b4d821d976f5843061cc2e3afbae82d7932d192321fa3b3042f100"/187], &(0x7f0000000340)='syzkaller\x00'}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0x2, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2], 0x1, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x3]}}]}}]}, 0x8c}}, 0x4000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000001040)={r3, 0x1, 0x3, 0x7fff}, &(0x7f0000001080)=0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = dup(r6) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000000008001240"], 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_io_uring_setup(0x10d, 0x0, &(0x7f0000000340), 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='numa_maps\x00') read$FUSE(r8, &(0x7f0000004180)={0x2020}, 0x2020) 3.752927401s ago: executing program 7 (id=2955): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x50, r1, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x50}, 0x4, 0x700000000000000}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6, 0x0, 0x0, 0x6}]}) socket$inet6(0xa, 0x1, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000040)={{0x1}}) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000180)={{0x1, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r7, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r6, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r8, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) 3.242999799s ago: executing program 1 (id=2956): ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x2c0, 0x300, &(0x7f0000000180)=[0x6bd1a312, 0xec63, 0xd, 0x8, 0x98b9, 0x80000000000000c, 0x0, 0x100000000000004, 0x10000, 0x100, 0xfe51, 0x0, 0x3, 0x5, 0x5, 0x49, 0x3fc, 0x4, 0x0, 0x9, 0x8, 0x7, 0x1c1, 0x1000000003, 0x2, 0x2, 0x6, 0x7, 0x96, 0x1, 0xffffffff00000000, 0x0, 0x4, 0x7, 0x23b, 0x10000000003, 0x2, 0x3, 0x4, 0x8, 0x6, 0x6, 0x8000003, 0xa3de, 0x4e, 0x8, 0x5c3e, 0x400, 0x3, 0xfffffffffffffff3, 0xfffffffffffffff8, 0x2, 0xe, 0x7, 0x0, 0xe6, 0x200000000000101, 0x5, 0x100004, 0x63, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0xc, 0xd, 0x5929, 0xe8, 0x80000000, 0xfffffffffffffc00, 0x2, 0x4, 0x2, 0xcdc, 0x7, 0x2, 0x3, 0x2, 0x8, 0xffffffff, 0x101, 0x4, 0x6, 0xab6, 0x4, 0x4, 0x1, 0x80000007, 0xb, 0xff, 0x6, 0xe, 0x5, 0x400000000008061d, 0x3, 0x8, 0xf6, 0x4, 0x4, 0x200, 0xfffffffffffffffc, 0xe53e, 0x2c, 0x8, 0x2293332f, 0x6, 0x5, 0x0, 0xd, 0x3, 0x5, 0x1, 0x2, 0x7, 0xdfd4, 0xfffd, 0x10, 0x4cb, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb690, 0x3ffc00000, 0x8, 0x3]}) memfd_create(&(0x7f00000001c0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0\xbc]\x12\xc0D\x9f\x80\x8f\xfe\xf2\xc2)\xccm\xacz\xc1\xad\xe4\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, &(0x7f0000000300)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x13c, r5, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0xf0, 0x8, 0x0, 0x1, [{0x9c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x50, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db717"}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x4}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) syz_clone(0x1010000, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x6) ioctl$KVM_SET_CPUID(r8, 0x4008ae8a, &(0x7f00000002c0)={0xe5, 0x0, [{0x80000001, 0x2, 0x4, 0x8001}]}) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r9, r9, 0x0, 0x40008) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000005c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x1}}]}}) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x109202) 3.000258023s ago: executing program 5 (id=2957): r0 = socket$kcm(0x29, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000140)=@caif=@util={0x25, "769b8b015097f5190a3c90b80e28c2a7"}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="187294a7b88f99dd36f647f1a166ea1f2cfbd5ab5b3f92e57f523362067c205dfe8f08c4cdee22f2ccb5b644b88a52935a63008d70009b3a93c17a9e8888bb69abd192efe06db0ecff9c2b61f2538fcf87f534b411f485", 0x57}, {&(0x7f00000000c0)="50a8f99d3c25d185429b0a6dbe61face5757a447020a3cecaf7bf5895de2cf18b1b3fcc9e4d3d1e1ebd9abea32f140", 0x2f}, {&(0x7f00000005c0)="9161d837de0d0ad61ef306c31d14ace1f728eb8571c3fe239f1cd23f13d17fe4bcdce1d1637ff4cc31049a81e87796390e10565a42197665dfc6a7ff5016034a797a36aa87a6569777df6cf5ae6e1d55dae1b1a4ca25d9550cc042b034777295e4a193c416f220480df20d362af298fb7b09cafcd35afb1e720ba659f9063310d81703bf8aa7e2c24dd1a37de657778021657e14d06940c34403e83c8fd34dd5d535cca2b80b73e8167127762f331434c19eac6034b82fddeff269a325d1b250f2791a034eac5c1344b7b763c750a1dc4d8ff24b994fa81309c93b1d1a4bdbdee2a005e156a3", 0xe6}], 0x3}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r2}, 0x10) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r3, 0x29, 0x24, &(0x7f0000000040), 0xc) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x40) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xa, 0x2) syz_usb_disconnect(r4) r5 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io(r5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) 2.890434464s ago: executing program 7 (id=2958): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, 0x0, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x5e}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffc}}, 0x44) socket$inet(0x2, 0x4000000000000001, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0xc01) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r4, r4, 0x15, 0x0, @void}, 0x10) openat2$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000140)={0x474203, 0x5d4}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = socket(0x2b, 0x1, 0x0) r6 = syz_io_uring_setup(0x10f, &(0x7f0000000480)={0x0, 0xfad6, 0x800, 0x2, 0xcd}, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) close_range(r9, r6, 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r10 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r10, &(0x7f0000004340)=""/102376, 0x18fe8) io_uring_enter(r6, 0xdb4, 0x0, 0x0, 0x0, 0x0) 1.925422284s ago: executing program 7 (id=2959): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000000c0)={'gretap0\x00', &(0x7f0000000280)={'gretap0\x00', 0x0, 0x20, 0x20, 0x8, 0x800, {{0x1d, 0x4, 0x0, 0x9, 0x74, 0x64, 0x0, 0x8, 0x29, 0x0, @multicast1, @rand_addr=0x64010102, {[@lsrr={0x83, 0x17, 0x47, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @local, @private=0xa010100]}, @ssrr={0x89, 0x2b, 0x65, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x1a}, @private=0xa010101, @remote, @remote, @empty, @private=0xa010102, @rand_addr=0x64010101, @remote]}, @timestamp={0x44, 0x10, 0x67, 0x0, 0x8, [0x800, 0x5, 0x8]}, @generic={0x83, 0xe, "2c84d3680b1526558694a91c"}]}}}}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x8, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 1.918178692s ago: executing program 1 (id=2960): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.freeze\x00', 0x275a, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000002080)=0x3a, 0x23b) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="680200002500010001000000000000005502b1800c00010002000000000000006501fc80aacb078fbe8fcbd3844064688b2b4f72c8b118a6a90ed572e0926e98ff65077497ecdfa2dd0b5be86a30b081592ea9aee28a5b9348e4309e890e00a64b80b2f24c4e21bbf0e68a8e654b69e6ffbeb86cad20e8b308763f888071387b6411d1d7a3daf18fa5b322cf482b526b0a09ec57b041b4725cdc1a60af0c680b1c0876c75d014155cffa2183cb7b0cef3d0fb8771666304bb326ae16138cf54860b3b23ea42b6d60982de3c6ad7bddef702a654f13fff71f05637e0a13e0534ac5ddf248333a135ad7629cff78c318eefec08d0d3b67eb20d03f38eb4ac5ec825788c56d07a5ef39bdbc3913dd175f1b1f1fc98ec55124715319fae644f50596f81d9ad9081d397c66b15f5eaf36bc9703590fcaed387df8a1852954f8892f18315574824837ae0ffbd6ee87e5a331e118cfdbd0ea0cb2c9afbcc6c7f301d71f0a16bff8718e908545b6008dd320da4618006dccda8c1c3249c67738b4e6ecd1164f16d2ad00000050bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0df7fff9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd000000"], 0x268}], 0x1}, 0x0) fstat(r2, &(0x7f0000006680)) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000002100)=ANY=[@ANYBLOB="1000ffffffffffffff7f7000fbdb3b33df070000003d629e4adabcdaa0ba63066891429c1fcb142af1aeb232e60c8a9c23db3f1f88fd722a34ae7e414e149f8d00000000000000"], 0x10}, 0x1, 0x0, 0x0, 0x44000}, 0x4048084) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x4}) r6 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'team_slave_0\x00'}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002180)=ANY=[@ANYBLOB="02e70008000020014000d5c81e8100", @ANYRES32=r1, @ANYBLOB='\b\x00'/20, @ANYRES16=0x0, @ANYRES32, @ANYRESHEX], 0x50) r7 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000020c0)='fdinfo/3\x00') read$FUSE(r8, &(0x7f0000000080)={0x2020}, 0x2020) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r8, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000140)=[0x0], 0x1, 0x80000}) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x2, 0x181a06) 1.783196019s ago: executing program 1 (id=2961): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) shmget$private(0x3f00, 0x4000, 0x10, &(0x7f0000ffa000/0x4000)=nil) 1.782748045s ago: executing program 7 (id=2962): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e78, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x80}}]}, {0x2}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000340), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000300)='./file0\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000000000000000000000000d770300e1ff"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000380)={r5, 0xffffffffffffffff, 0x33, 0x0, @void}, 0x10) mknodat$loop(r4, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) r6 = fsopen(&(0x7f0000000100)='squashfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000640)={'#! ', './file0', [{}, {0x20, 'rp\xee\xff\xe4'}, {0x20, '\x12~\x85\xecZ@\xb5\x18\xec\x182\xc9L\xdc\xb2\x81\xdam\xa8\xc5{\x92\x14\xce\xf2\xb8\xf7\xa9\xa7\x00X \x93t\x91!%\xff\x13\xdc\aIY\x0e\xb4zh\\\x06\r\xe8^Z\x81\xb8$:P\x83\x98_\xa1\x98\xd6\xd2g-\xefr\x14<\xd1\xb84\x94\xa09\x9f\x12I\xed\xd5dT#f\xb4\xf3\x88\xcf\xde\x00\xd4\x81WN\xca\xb5c\xbf\r\xb0Q\xa9\xbaC\xd2\xa2\x1d~\xc5D(\x92A\x12f\x83fn\xd0\xb6\x02\x116t:|\x94\xc7\xac\xf6\xbc~m\xd6\xd1\xe5\xe0\xdd\xc2\x9cl#\x85\xab\xe7\xa9\xcb\"\xd2\x97\x10\xa5\xa8\xc1\x8d@U\a]Gi^\xd2\xdf\xb0\xa5!\x836\x92\xc9\x92\xe4'}], 0xa, "7bad65c4da5338577feb172ca63250224c76e2027f000000000000007e2ac7fe2e31a2e87e3ee43ed92dfbb6bc0700de24db4ec870b8000000000002002c65e7495fe9afeb28bb60e91e23e104f6dbbf40e1fc2ab1a77fd9f6414e438f03"}, 0xfffffc43) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000100000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010000004400050000000000000000000000000000000000000000003c00000002000000ffffffff00000000000000000000000006000000040100"/176], 0xfc}}, 0x0) 1.770535354s ago: executing program 1 (id=2963): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305615, &(0x7f0000000040)={0x0, {0xffff, 0x3}}) lsm_get_self_attr(0x64, 0x0, 0x0, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) write$tun(r0, &(0x7f0000000480)={@val={0xa}, @void, @eth={@multicast, @empty, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x2c, 0x11, 0xff, @local, @mcast2, {[], {0x4f19, 0x4e20, 0x2c, 0x0, @gue={{0x2, 0x0, 0x3, 0x5, 0x100}, "4a7bcf2ff4b0eb146be9179758764889bc96b279095526539feca0cf"}}}}}}}}, 0x66) 1.472265466s ago: executing program 1 (id=2964): readv(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f0000000080)=""/200, 0xc8}, {0x0}], 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@setlink={0x28, 0x13, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x2624, 0x7920}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0008cd}, 0x20048000) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x32, 0xd86, 0x2c1, 0x9, 0x4, 0x7f, 0x5, 0x29d0}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)={@link_local={0x3}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @timestamp_reply={0xe, 0x0, 0x0, 0x9, 0x10, 0x431, 0x80, 0x2}}}}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r0, 0x0, 0x5004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f000000c2c0)=[0x0], 0x1}, 0x58) dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x7d) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.471423993s ago: executing program 6 (id=2965): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f01726a067818b990b13bfddb7e78270010720596bb3b4d821d976f5843061cc2e3afbae82d7932d192321fa3b3042f100"/187], &(0x7f0000000340)='syzkaller\x00'}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0x2, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2], 0x1, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x3]}}]}}]}, 0x8c}}, 0x4000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000001040)={r3, 0x1, 0x3, 0x7fff}, &(0x7f0000001080)=0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = dup(r6) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000000008001240"], 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_io_uring_setup(0x10d, 0x0, &(0x7f0000000340), 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='numa_maps\x00') read$FUSE(r8, &(0x7f0000004180)={0x2020}, 0x2020) 806.16759ms ago: executing program 7 (id=2966): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x50, r1, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x50}, 0x4, 0x700000000000000}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)={0x5d, r5, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x48, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x0, 0x1, 0x80000000}]}]}, 0xfffffffffffffc3e}, 0x1, 0x0, 0x0, 0x4884}, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6, 0x0, 0x0, 0x6}]}) socket$inet6(0xa, 0x1, 0x0) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000040)={{0x1}}) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f0000000180)={{0x1, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r8, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r7, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r9, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) 562.909109ms ago: executing program 6 (id=2967): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000003700), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) connect$qrtr(0xffffffffffffffff, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000240)=[r2], &(0x7f00000000c0)=[0x4], &(0x7f0000000440)=[0x0], &(0x7f0000000040), 0x0, 0x300}) 500.851146ms ago: executing program 6 (id=2968): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) ioctl$USBDEVFS_BULK(r1, 0x5523, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045510, &(0x7f0000000000)) 393.051922ms ago: executing program 6 (id=2969): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e78, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x80}}]}, {0x2}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000340), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000300)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) 152.752225ms ago: executing program 1 (id=2970): socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=@delchain={0x29d8, 0x65, 0x0, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0x1fff7, 0x7}, {0xe, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x2988, 0x2, [@TCA_MATCHALL_ACT={0x1604, 0x2, [@m_connmark={0x164, 0x1d, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xf2a3, 0xfffffffa, 0x20000000, 0x0, 0x1}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x5, 0x6, 0xca, 0xfffffffe}, 0x5bd}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0xd, 0x0, 0x3, 0x9}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x2, 0x5, 0x5}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x1, 0x4}, 0x3ff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x7, 0x20000003, 0x10000, 0x3}, 0x4}}]}, {0x8c, 0x6, "276dc8d3fca4bd225728bd8d45b70c2d86e898000551cc3737d6b839c6e3c87990f92895a764f137812e0026021f6649d668fa74d542d02c54c5fda119d6f98a421ca63cd646c6afe48b601e7ad92f31824b2ddc93f9ac1fe9cbef8b87a6e810f6725ba854c77b375ae3344d7bdeb16f535de361e6745e6f66427099f3546cd1d8e7a11243e9dc2d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}, @m_bpf={0xd4, 0x7, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x34, 0x4, [{0x9b, 0x6, 0xa8, 0x6}, {0xff7f, 0x9, 0x5, 0x6}, {0x6, 0x9, 0xb, 0x82a}, {0x7, 0xff, 0xa, 0x1}, {0xfffc, 0xe, 0xfd, 0x9}, {0xb0a, 0xce, 0x40, 0x4}]}]}, {0x77, 0x6, "a0604a2017745bc70c1856f6dd97175bedd06250000ec1add9be4a11f896fb0924f62443cf4daa0bd4ec5f21b2ac99f874b2a715d81f55ecc9568eea4d8ae9f04ff38aa5b93f1e37a32365a9c959594e6c57a8be540fae0a3537ac5b627129e97c51252206be05d826fd3bde6242ba8c2cf0ab"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_nat={0x1d4, 0x10, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x0, 0x4, 0xd8, 0x9}, @multicast1, @multicast1, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x40, 0xe, 0x6, 0x2, 0x5}, @broadcast, @broadcast, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7fff, 0xa9d, 0x0, 0xffff, 0xffff}, @multicast2, @multicast1, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x2, 0x5, 0x1000, 0x10001}, @dev={0xac, 0x14, 0x14, 0x3b}, @loopback, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xff, 0x6, 0x1, 0x5, 0x8}, @remote, @private=0xa010101, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x100, 0x8, 0x81, 0x1}, @dev={0xac, 0x14, 0x14, 0x3d}, @broadcast, 0xffffff00}}]}, {0xba, 0x6, "29bec96dcfbc840716c09f88359c1bae782ee5cf0f9f1e9db92534443c82a68b774c4172a3cb833f2d5dd0d8c9fcbb56bb133059474818733b4a22b69344a4d2d93ec0e606febd44ea05962f71e454ffb29d6b72551e386b06ceb5a3334f8fd6173317ff9cb1600729ef5fadd6c28d31cf760b0eaa8ab8a047702c5f1c0a086ae35cd7affe6965c8fcdec4de3416a3163ad36942584a61732a644a56b530026f43cded790c2753d62eaf0a430513911c7709054f217f"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_vlan={0x134, 0x14, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xa80}]}, {0x100, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_connmark={0x10c0, 0x1c, 0x0, 0x0, {{0xd}, {0x90, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7fff, 0x0, 0x7, 0x7, 0x1}, 0xcfc3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x97, 0x1abcf5ee4e8b0e3f, 0x992, 0x1}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x0, 0x10000000, 0x7fffffff, 0x8}, 0x69}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x5, 0x0, 0x6, 0x100}, 0xfff7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x80, 0x8001, 0x4, 0xd1886ae, 0x1}}}]}, {0x1004, 0x6, "d7b1f44aa922419d0b421652db85ee0e1db601a14f436679e18186e91f824e40f807a0a2ca81c915527db762876a2e01f05b035f32acafd469b92b3b5e9b3f9ff6d7433a6b059c1882cc2b3d6f032dd105b2c1599130255d8b6eded82ae6e253e5973ef1aafcde2fa67387830a36958bd6bef742d055f6e7bc082e39cf490a80a640ddafe122bc2d727e5c16b08cf99e06ea8b4167c69a5508de1830235a8085d1dc2b8e8bfb0285a7c2f955603d5704119aec08c0a3347c04e9252f1f01f43ec6afd957670596ce004ab697c9dba54ec88c8e8074442423101c415f99ed9a3ca0a59b3b87a354aad7794ffdf7a38747683359be40c113fa3214237e1e3ef464da3f8d65e988def3b6e7707598a9b50be98fb00ff573251715e6391a8afa16b1c08ac3cd2a2a87bb7c92060a81ff0489bfbad9d6f5dbb14918cda7adc58a19842c851fdfd5ccfd769e289eb768bc4691763678fb98ab382f2f6b42e82e9f5c059e915eed8536a8638b2a2cedfc0695933e575f5177f261e2dbe1a81c825c1dad89235f887b9bb95ff1773a8f7dcd424de5c29708a2640d45d6532e95d4ce8582a4ef5565f74e9c6276cf1d3ff134e6fc2ba37398882ebd32fe591d926a191dbc769a13e8dc9b2e12412410cb8044bf93aa79f50fd6f9417ca6ef7002455312bb6b75f8480916a5242fe8314b476fe78adf51c05f013413c3e844e3f641d9af54355eb37b54e66d5afcc3ac4a9d3d50bc148d6bd21f38d1e0faa4bc24ea22ff6258978b54fe797ce8d495c0ed63ac1f3da4e3dc269866a33683d462c5f91eae3b6873cc3ce36020f9c9b7fb31ab527c28882edc71ec1bdb584c13723de3de8a1d426b81211dda48437245be1d6d1cae7abc9f32ad30ebb08ae412134c704a478d9bdffa29d24007b36092442f86b15d0d098d8292352a6f22181db3992bbc6d382429fd030d3f7c8f1102909e98029f8b356649e6961dac28d154a74826d488cc9469951e95675e63a686dd28c800a4f47a6edde33dd283eb1a6f5ddf158bc465d38728d6329327b4fb0205208f3ff218a5f6b65f0ea46cad02481855a6c8f5b9670ae04c5b03b9bb85e19a443499dec1ee2267741e8863714422f3cb4b927c176cede5d3d7b507d22ab13b85008f70c7eee7180099229c8d0416f559dbfde8c0e33f1e63caec107ab0d3d259698066166ec2310dfdf65b520dec361a6f9fb757671693c5f9cb0e9140bc880ae698e973adf37b769542f15e29ac60481883ce6e04806c5dd8b8a72c1deb1c944b74d4074875b5f005848a1f8107400abaa0358993286c585e32a10d4bb7d41b55714ee46e9d2495af466facfa54eabf3ef5083e1c9453ce1d3f803752fe42a44fbb68c724f3bb0c10f64a39454ea25f84e5ad2d17daf7587ef632756355ffdbad57d8a9276b8fcb3b3fd8fd072998d9ef15c29707fa5caeaeab07e37d208809898dc5205ddaa2687a1836b715a374045d5155555b010a430f4d9ba49654ee74100a25269062fdbccc1932adc19bb381d9124adb3de63022163e47cc7536623dc9c388c712a49f1f98ddaff9bf94ca133318d59c75223d85f46b515716ba36d357c05ccce5d3e8b3fecbab0935fde1722ce6fa420b394779ef112bc6f4e999c4f438c17251e1a605c37bef2a007fb116b3f9af3c7a15b19851257d53d77d38ec5d36c8beb86f9a59743a8bed20bdf5b7fae08f914ff0be426ff88ae1f2b87157dbec6fc4de4f4284b9cdca654a664ab2ee964904a61e1d8d4d17a9aacc8a7e2911e1f3b7ba9a6c2c83ee194b9216ef2a981a90fdd2246e9d0ab8ceeaff98c831dc8ea0f8fd50e1f2cb5bd3d9372468afdd125a5a8af2f937d0d97bdd3ef2cc3d050145cfc439e547169338b614f43403ffd470f9adb939304ff4cd2db0c6bc42c0cb2befd2f4463fc783eb4a148d8b0806bf7cefd1f2f0fa23519935db59d8feac12d9c3bedc965c0e58dd96790a858166d4d7c8bacaa6c069069ed6ba7182e1019daee92a2339e19c8c9f30dcea4375c2ddf8a4b16f4470f1d4f69ffed3d91a971a101efeab23af8fac778b3f0d97a88c158e30d54c35932483cbccaaa9c8dc50e3533d84ca6653856157b48e52018adba95a74444aad1a3d60fae75167fb9626c39d917a5c0f2211d7372bb10d9538c9466b87df27f2cb5f24fc65036632459ce6fffe9af7ba1de37964c93eea570626e4cdbd8c511ffe314c9226d77ac9b76b46d97e4e45ff092e1a13c12be0525022b22f5caabb91633e48089b0b13cfe25bd87e97653d85746f27f1d55749a0ab57826233e92ea2f5eace66696a9c971595cbdfd9ca745b6b125909aed94f5e354f016735c4c920a6a9aafc73ea677e958c8cfb682ab88673d99cb35f726df35bf44c78ebd05a464f1fe35815663e280c384aa40b49508fdc4ea1cdb534c8e60d326cb686403c31171ae0048e4576e1ee68e8e17303bdff345fd08c01c98b1cf4c24b265f76cc445665b0274b9e2717f6c29c1cac56ea0700962c8bfb67027dae90d5ff18a72cf460478f2a0fa8eaf9f26f920524f67a806705ea121d23f81e2c252c774eee59392a156d5b5682b04233f296a8ab0dced6d8ccfbb1dd8c222cb84eb44a809d6bd34c21d8c4df4baa0a6332166aeaf617e8155257949bb2fa3e68fdebd651bcd3da8f2c3e11f16d1f7a7d3af87b6084cb216d50bea79e8dd34b7527ef266acbc3ac2c448d3647a0a58c633794d12c6eaa11363ae26011671f6b7e6afc85a82163e8d567a6ca64262eb0b3271f3b4bdf179a0dd30b2e6da2f2472ecbb43a76fe394ab22ee7d6a90f0dc693200c307563d798406ff7767e98cbf847c340b19c3daa7e693afda646734b6d1e9170345082afade0e205e00436e19dd9d3bb41cd1c9b5b41448dcc89ce411c15c9a1f4fec3cadb830dbf1a6a1c3f928508fdc3db702b0ea5ead1b6bcc6ebd46e107969fc1955adbe8c6c22eaa9833a1ddd4d0bedf6bae91339c6e3024487b8537bec46c4dcac8ee523590376ede0e2d4aa9e9d4911e9e248394ebc9801e43fda4efcea714876f1be09910750dcc526a16107b607b1a3ca53b9e3e47f18578bb7bb016e74b0cbcdda46574f6228f3f5af1666f17be7000e4f7f437d6b253701c756e894eae6a6d857fd597c21adc7da07368a522579810c85dc397499093a08dcfaab8e05eb59a45d0c3896aff96d4216948741f53e837e41ea6c6b61e5176184d3bea8dc54c41d5705ee5d19b466a7616a0a5b04abc9ffcdc43b1a47425eeed52478c68a1eab78aae212420052b54f4e817f27353bf4e1f664124d60e1fe2efb6ee971c699705f6d7577d38048e3df97b936d8dfc85dab136fb4b8c012c079fcbaf9f961d8462b7f3fc5c14b04c13649297b04edf0d10dd6744e68ac60e6d35267b0c294c49250e8324b6bdf9020106506c64bd9ca82a1072c65e789001ef918380ab3c4d6877b964f6bc071a1450fda6b06820be08317eeb30b379a0d335627c68050e893d01560a614de2f66639ffeb32d3a50bec03605950e4bea4127451400b1ead6f09bef5d4384d8026c55af30cc20165ac99885e8eb437f375486d17aaa66b3b09f4fbab8234a7ed3805195cb815967ca3f3c9984fdcf528447641acf81a5553a1b45d7d2d8f2a8bd3a898dba8a5eeec4c4695ea692b9bb520d19486f5ab2f48a0cd33551eddb90e62bd945f13c1f85af7017d99a6b1bbe46cbb5017007ee875b8e763d8e1850b8eea1af994cb8fcc715fc33886f0d0b4e8f8d20d7ffea1d79c7b8cc541b958fb985ecf36cdb502a8b32c0d2373bb9e90832ca658e20de70c2642e78412d744e4f910d3b3cd66543f7a97ebf9bb55d326d05f85a988ac6b2ca5eb86e683b48b781247aef0700c564ca62d175184fae63ace014a63eeefb9d9e82c7b07e40969c5f27af67c9a71cb6b99c79bbeea9412803f159f80d6b313b94c6259673cc403aa6a82a4a36e7e09ce29bb0ad9e3afba1b6a30b8218ecb315444d71189396de7af0004c216b505ad3cbcfbc28cab40c4d8bb2f7426687661864da1e68c66bde2868b4c0502fddf79ca7320e8a151fbe593c76fd8c5d19b0e4fbd9738e6ede88c83472ad73176c7a63f233248e4301ca3298fb4d9085bdc47e87e5c175dd6a814f0ca144dc6f597f1252b5bc9ac2b92de3ef9a831aefdbc4c1f124a22040acb28c695015aafd4757b64d8bc2da8bb1e12c0e61518638f7d05fa5cfefaa3fda7a1f7e72c62fa3c105caa0bb2fc644dc8ab063e20b4d426eb188f88ef4225d4b9a19433d00250b45b54677690569b7aba67d265f45a98001b1cf7a8f24f5523d150299a53668d27872b44775493c8526d777d4b3db8172fc683184756cc50d454edad11d06ab81cc19ed66030ea81d29a52964322891366b0244aabc6aac860e38e44ff808a77233a77c722d72a451b1ae5e5fbd3a91cad943ab4c4682c84338693c2cbdc79257df7317af3b160c136caddb4d7cd6c7439912d09e0e78fc601bf472efd285da4a0f1cb3424b4f201b6f233da219ba8d4cca0b739c5e88f1ebb094bec91a73c90c2cfa4a70623b7cbaabc870d33506171b0435de12de010068a3019a1baf10ebd3f0f49874a20377194ce6c9ae0b929e2f8ddf7f91588884e2d96b43364fd6782892983cbab9612c5d1735a34c0ea28e45eab578aba6e147962bf9f50f339b8280e544a978f94ebfabaf70820792ffcef2982b3c12ffe3b178cddd589c4fa3e2823861339455eb8414bca9fabae5c344997c6ab7702eb38de8b3c604501499f1385222bbe124775856c7373cd5a9f01513a46f3c4298c4e57091eb54078a077079ab762647fcf321023eda1fdf373fe07f0bf4b7642053a9a3f1e69edb999e42189d6ddd9f5b3743b06c687f25e614ec61b028818d60b4158bfa988cf1626ae96a4466b2a6abe99d10aa09d134c6a7d1e3bd10f624e3f0a95a4274fde381a91e8396672811366c440233d59995693f95a8976e7b7d3617e1e29b9cf26af3e802f7ae9f31344ef24a3e0fbc5bdeb96ac553ed5389605dd9a1d810a49ff361b99fd69da104036d806cf87858075760bad3795045ea7968a38e9925ceeff5cec2a290f862cbf842c6288e027e403ba79ce55133c05ac1887849d0afd5ed37bb0acf894fc3e12176976b388e31ec6496bd19f2ea229c4a0519c9966bcad0e10b11c38e8558b6b18bd44a0c4709c008e30c796de2ddfa9bb3c201675019ab3de6e2c0ad98f95bba72c871d3481a4ad0042bd5ae1ae217990907bd52e851b8782d8e8720092c9baf000405c73a59f8492cf434c3aeefb2f828732cd67ae6368efc59ffb056d4c0313af00315081ec17ab948ecb7956606378a32cd60f6a5c56c1b438aa5c54bb1c7cc56325106d93e0c258134cc02223c90bd40defbd2ce8676528377f14e38c4eb9cd9934ca18178d5f979d4a40c7cb3e3046de90ffa1274b7684b8dc46de9b98c7de0bddb80ef7dfa876cf1306f77f42480c6a802fa45b4901120c578e96f7a1322b4d660065222fbda4950b93ec76e8802be2e9631844020ff183dff37949b9699c4c47907eed163e1da045cbac26bb6953d4c18e9a0a50fabc68eb1ce15714f8738d6bd104bd391002a7c3d17506a896e00b124994c6b5e6af56328d0d5c33b11625e85892527616943a12c8f466f3373e67597b38f6083519d6de039d437afec4a766bb09ac66ecedcd80aa50e39e085e493f5fca6f95b18fc6189247305616ecee33ac976cbac8107a53acd46d9117be2e12de992caa1760eeb7932b4c8e87a"}, {0xc}, {0xc, 0x8, {0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_ACT={0x1ec, 0x2, [@m_ctinfo={0xec, 0x15, 0x0, 0x0, {{0xb}, {0x94, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xffffff51}, @TCA_CTINFO_ACT={0x18, 0x3, {0x9, 0x101, 0x20000000, 0x7, 0x4}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x1cd4}, @TCA_CTINFO_ACT={0x18, 0x3, {0xffffdd39, 0x2, 0x7, 0x5, 0xffffffff}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x10}, @TCA_CTINFO_ACT={0x18, 0x3, {0xd, 0x9, 0x0, 0x5, 0x7fff}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x3, 0x100, 0x8, 0x1, 0x800}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x9}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x9000}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x8001}]}, {0x2f, 0x6, "21cc8b81eef83a0927af6769f5d91680aa1b86e1dbf795abd19a69e5adf15ca631cb6f3b33fea61cd5bc09"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_bpf={0x7c, 0x13, 0x0, 0x0, {{0x8}, {0x48, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_OPS={0x1c, 0x4, [{0x9, 0xc, 0x4, 0x80000000}, {0x9, 0x1, 0x0, 0x101}, {0x100, 0x65, 0x5, 0xc3a}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x4, 0x81, 0x4, 0x9}]}]}, {0xd, 0x6, "1d7dd9652f83f82348"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ife={0x80, 0x4, 0x0, 0x0, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x18, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x1}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}, @TCA_IFE_TYPE={0x6, 0x5, 0xfff8}]}, {0x1f, 0x6, "8af5abc3d47ecb7c8892e99a57a7cb0648373bb2e555d1cdcd76f9"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}, @TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_ACT={0x1174, 0x2, [@m_tunnel_key={0xf4, 0xc, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}]}, {0xa5, 0x6, "a1378185ade8c841f1e93de1ec059cf69bc0e26c79744712a39e784b04a46d06389430d320dfee023c294bc82cce3fbf95e78ba88b98cc9a3450ac11e49b71d7d97cc167db3860e971f8cdf96a90ff05f8e557840f02bafdeed1a427b248b8d1412af4f89f534a3edf8b0589ec9a973f3de1fa9065f02c7c93ee4df33306e49e5beb6420c61e613113e6dc0608cce3f4cb86918bf27523daf6240dabc043897b37"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ct={0x107c, 0x1a, 0x0, 0x0, {{0x7}, {0x54, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0x2a3}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x80}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e21}, @TCA_CT_LABELS={0x14, 0x7, "a31065d36e76a8ce6aedb42f5e3637f5"}, @TCA_CT_ZONE={0x6, 0x4, 0x7}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @mcast1}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @empty}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0x7}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff3, 0x6}}]}}, @filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ARP_SHA={0xa, 0x3f, @multicast}]}}]}, 0x29d8}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x10000008, 0x8}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000380)=ANY=[@ANYRES16=r0], &(0x7f0000000080)='GPL\x00', 0x6, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000080)='./file0\x00', 0x1a8) socket$kcm(0x10, 0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000280)='9', 0x1, 0xffffffffffffffff) keyctl$chown(0x4, r4, 0xee00, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f00000003c0), &(0x7f0000000180)={'fscrypt:', @desc3}, &(0x7f0000000300)={0x0, "10f8b00f37651afa3619457e9e16eb9a2732bd7ca767a320c4c57e2370e6e4ac36d5cd133c26f88778b60974c73dc649dc65676cea8fc6ebfe50a657648e37bd", 0x20}, 0x48, r4) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r5, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r5, 0x8949, &(0x7f0000000000)) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0c00000004000000040000000800000000000000", @ANYRES32=r6, @ANYBLOB="000000000000000000ffff0000d1c72cd419a53a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 0s ago: executing program 5 (id=2971): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000000c0)={'gretap0\x00', &(0x7f0000000280)={'gretap0\x00', 0x0, 0x20, 0x20, 0x8, 0x800, {{0x1e, 0x4, 0x0, 0x9, 0x78, 0x64, 0x0, 0x8, 0x29, 0x0, @multicast1, @rand_addr=0x64010102, {[@lsrr={0x83, 0x17, 0x47, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @local, @private=0xa010100]}, @ssrr={0x89, 0x2b, 0x65, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x1a}, @private=0xa010101, @remote, @remote, @empty, @private=0xa010102, @rand_addr=0x64010101, @remote]}, @timestamp={0x44, 0x10, 0x67, 0x0, 0x8, [0x800, 0x5, 0x8]}, @generic={0x83, 0x10, "2c84d3680b1526558694a91c280e"}]}}}}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x8, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet_udp(0x2, 0x2, 0x0) kernel console output (not intermixed with test programs): x1 has invalid maxpacket 0 [ 509.959095][ T5993] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 509.964577][ T5993] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 509.968437][ T5993] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.974114][ T5993] usb 10-1: config 0 descriptor?? [ 510.181281][ T5993] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 510.188245][ T5993] usb 10-1: USB disconnect, device number 12 [ 510.195252][ T5993] usblp0: removed [ 510.408678][T14761] random: crng reseeded on system resumption [ 510.635701][ T5993] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 510.765711][ T5993] usb 10-1: device descriptor read/64, error -71 [ 511.005620][ T5993] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 511.025681][ T9619] usb 40-1: device descriptor read/8, error -110 [ 511.135688][ T5993] usb 10-1: device descriptor read/64, error -71 [ 511.245980][ T5993] usb usb10-port1: attempt power cycle [ 511.437886][ T9619] usb usb40-port1: attempt power cycle [ 511.585821][ T5993] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 511.606030][ T5993] usb 10-1: device descriptor read/8, error -71 [ 511.855785][ T5993] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 511.876286][ T5993] usb 10-1: device descriptor read/8, error -71 [ 511.985954][ T5993] usb usb10-port1: unable to enumerate USB device [ 512.267568][ T9619] usb usb40-port1: unable to enumerate USB device [ 512.494265][ T5301] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 512.500301][ T5301] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 512.504271][ T5301] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 512.508682][ T5301] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 512.511608][ T5301] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 512.518265][ T5961] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 512.521546][ T5961] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 512.524719][ T5961] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 512.528610][ T5961] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 512.532090][ T5961] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 512.634421][T10765] usb 6-1: string descriptor 0 read error: -71 [ 512.647088][T10765] usbhid 6-1:0.0: can't add hid device: -71 [ 512.649044][T10765] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 512.653762][T10765] usb 6-1: USB disconnect, device number 42 [ 512.731030][T14770] lo speed is unknown, defaulting to 1000 [ 512.734582][T14770] lo speed is unknown, defaulting to 1000 [ 512.860601][T14770] chnl_net:caif_netlink_parms(): no params data found [ 512.933997][T14770] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.937299][T14770] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.940340][T14770] bridge_slave_0: entered allmulticast mode [ 512.944189][T14770] bridge_slave_0: entered promiscuous mode [ 512.949204][T14770] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.952338][T14770] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.955359][T14770] bridge_slave_1: entered allmulticast mode [ 512.959559][T14770] bridge_slave_1: entered promiscuous mode [ 512.986646][T14770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 512.993226][T14770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 513.064286][T14770] team0: Port device team_slave_0 added [ 513.069610][T14770] team0: Port device team_slave_1 added [ 513.092729][T14770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 513.094976][T14770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 513.103145][T14770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 513.110354][T14770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 513.113247][T14770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 513.123940][T14770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 513.162923][T14770] hsr_slave_0: entered promiscuous mode [ 513.166431][T14770] hsr_slave_1: entered promiscuous mode [ 513.566607][T14788] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2347'. [ 513.908712][ T40] audit: type=1326 audit(1765621797.946:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14798 comm="syz.4.2351" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f76579 code=0x80000000 [ 514.340637][T14770] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 514.380915][T14811] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2354'. [ 514.391882][T14770] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 514.415193][T14770] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 514.435869][T14770] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 514.543193][T14770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 514.545762][ T5961] Bluetooth: hci1: command tx timeout [ 514.553418][T14770] 8021q: adding VLAN 0 to HW filter on device team0 [ 514.604964][ T1189] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.607983][ T1189] bridge0: port 1(bridge_slave_0) entered forwarding state [ 514.654005][ T1189] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.657082][ T1189] bridge0: port 2(bridge_slave_1) entered forwarding state [ 515.001529][T14770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 515.034949][T14770] veth0_vlan: entered promiscuous mode [ 515.052974][T14770] veth1_vlan: entered promiscuous mode [ 515.079985][T14770] veth0_macvtap: entered promiscuous mode [ 515.087789][T14770] veth1_macvtap: entered promiscuous mode [ 515.115584][T14770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 515.125837][T14770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 515.134092][ T61] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.137101][ T61] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.140678][ T61] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.143513][ T61] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.202414][ T1189] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 515.205872][ T1189] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 515.227174][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 515.229806][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 515.378787][T14834] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2358'. [ 515.481549][T14837] input: syz0 as /devices/virtual/input/input58 [ 515.992022][T14846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 516.018044][T14846] bond0: (slave rose0): Enslaving as an active interface with an up link [ 516.096481][ T5301] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 516.101650][ T5301] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 516.106634][ T5301] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 516.110522][ T5301] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 516.114385][ T5301] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 516.460269][ T13] bridge_slave_1: left allmulticast mode [ 516.462166][ T13] bridge_slave_1: left promiscuous mode [ 516.464138][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.470347][ T13] bridge_slave_0: left allmulticast mode [ 516.472423][ T13] bridge_slave_0: left promiscuous mode [ 516.474747][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.625693][ T5961] Bluetooth: hci1: command tx timeout [ 516.675301][ T13] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 516.846176][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 516.852216][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 516.856584][ T13] bond0 (unregistering): Released all slaves [ 516.951821][ T13] bond1 (unregistering): Released all slaves [ 517.048394][ T13] bond2 (unregistering): Released all slaves [ 517.130630][ T13] bond3 (unregistering): Released all slaves [ 517.212504][T14883] FAULT_INJECTION: forcing a failure. [ 517.212504][T14883] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 517.217065][T14883] CPU: 1 UID: 0 PID: 14883 Comm: syz.1.2368 Tainted: G L syzkaller #0 PREEMPT(full) [ 517.217083][T14883] Tainted: [L]=SOFTLOCKUP [ 517.217087][T14883] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 517.217094][T14883] Call Trace: [ 517.217098][T14883] [ 517.217102][T14883] dump_stack_lvl+0x16c/0x1f0 [ 517.217120][T14883] should_fail_ex+0x512/0x640 [ 517.217140][T14883] _copy_from_iter+0x2a4/0x16c0 [ 517.217161][T14883] ? __pfx__copy_from_iter+0x10/0x10 [ 517.217178][T14883] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 517.217200][T14883] copy_page_from_iter+0xde/0x180 [ 517.217219][T14883] tun_build_skb.constprop.0+0x2e8/0x1560 [ 517.217242][T14883] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 517.217262][T14883] ? __lock_acquire+0x436/0x2890 [ 517.217273][T14883] ? __lock_acquire+0x436/0x2890 [ 517.217288][T14883] ? find_held_lock+0x2b/0x80 [ 517.217303][T14883] tun_get_user+0x149c/0x3cc0 [ 517.217326][T14883] ? __pfx_tun_get_user+0x10/0x10 [ 517.217343][T14883] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 517.217358][T14883] ? find_held_lock+0x2b/0x80 [ 517.217373][T14883] ? tun_get+0x191/0x370 [ 517.217394][T14883] tun_chr_write_iter+0xdc/0x210 [ 517.217426][T14883] vfs_write+0x7d3/0x11d0 [ 517.217449][T14883] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 517.217475][T14883] ? __pfx_vfs_write+0x10/0x10 [ 517.217496][T14883] ? find_held_lock+0x2b/0x80 [ 517.217521][T14883] ksys_write+0x12a/0x250 [ 517.217536][T14883] ? __pfx_ksys_write+0x10/0x10 [ 517.217552][T14883] ? do_user_addr_fault+0x843/0x1370 [ 517.217568][T14883] __do_fast_syscall_32+0xe8/0x680 [ 517.217585][T14883] do_fast_syscall_32+0x32/0x80 [ 517.217600][T14883] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 517.217614][T14883] RIP: 0023:0xf7f21579 [ 517.217623][T14883] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 517.217634][T14883] RSP: 002b:00000000f5416520 EFLAGS: 00000293 ORIG_RAX: 0000000000000004 [ 517.217645][T14883] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 00000000800005c0 [ 517.217655][T14883] RDX: 00000000000000be RSI: 00000000f73b6ff4 RDI: 0000000000000000 [ 517.217662][T14883] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 517.217668][T14883] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 517.217675][T14883] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 517.217688][T14883] [ 517.349182][ T13] bond4 (unregistering): Released all slaves [ 517.426034][ T13] bond5 (unregistering): (slave veth3): Releasing active interface [ 517.430311][ T13] bond5 (unregistering): (slave veth0_to_bond): Releasing active interface [ 517.434802][ T13] bond5 (unregistering): Released all slaves [ 517.444574][T14855] lo speed is unknown, defaulting to 1000 [ 517.449191][T14855] lo speed is unknown, defaulting to 1000 [ 517.552717][ T13] tipc: Left network mode [ 517.623841][T14855] chnl_net:caif_netlink_parms(): no params data found [ 517.728752][T14899] FAULT_INJECTION: forcing a failure. [ 517.728752][T14899] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 517.732972][T14899] CPU: 3 UID: 0 PID: 14899 Comm: syz.6.2373 Tainted: G L syzkaller #0 PREEMPT(full) [ 517.732991][T14899] Tainted: [L]=SOFTLOCKUP [ 517.732995][T14899] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 517.733003][T14899] Call Trace: [ 517.733007][T14899] [ 517.733013][T14899] dump_stack_lvl+0x16c/0x1f0 [ 517.733031][T14899] should_fail_ex+0x512/0x640 [ 517.733053][T14899] _copy_from_user+0x2e/0xd0 [ 517.733071][T14899] get_compat_msghdr+0xa7/0x170 [ 517.733084][T14899] ? __pfx_get_compat_msghdr+0x10/0x10 [ 517.733100][T14899] ___sys_sendmsg+0x1ae/0x1d0 [ 517.733113][T14899] ? __pfx____sys_sendmsg+0x10/0x10 [ 517.733131][T14899] ? find_held_lock+0x2b/0x80 [ 517.733155][T14899] __sys_sendmsg+0x16d/0x220 [ 517.733167][T14899] ? __pfx___sys_sendmsg+0x10/0x10 [ 517.733183][T14899] ? do_user_addr_fault+0x843/0x1370 [ 517.733200][T14899] __do_fast_syscall_32+0xe8/0x680 [ 517.733216][T14899] do_fast_syscall_32+0x32/0x80 [ 517.733231][T14899] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 517.733245][T14899] RIP: 0023:0xf7f23579 [ 517.733254][T14899] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 517.733265][T14899] RSP: 002b:00000000f541655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 517.733276][T14899] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000000 [ 517.733283][T14899] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 0000000000000000 [ 517.733289][T14899] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 517.733296][T14899] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 517.733302][T14899] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 517.733315][T14899] [ 517.878240][T14855] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.880789][T14855] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.883318][T14855] bridge_slave_0: entered allmulticast mode [ 517.887193][T14855] bridge_slave_0: entered promiscuous mode [ 517.892250][T14855] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.894638][T14855] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.897103][T14855] bridge_slave_1: entered allmulticast mode [ 517.900180][T14855] bridge_slave_1: entered promiscuous mode [ 517.916429][T14855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 517.920863][T14855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 517.935919][T14855] team0: Port device team_slave_0 added [ 517.939124][T14913] Cannot find add_set index 32771 as target [ 517.939442][T14855] team0: Port device team_slave_1 added [ 517.973002][T14855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 517.975186][T14855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 517.988514][T14855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 518.016189][T14855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 518.018685][T14855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 518.028501][T14855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 518.057351][T14855] hsr_slave_0: entered promiscuous mode [ 518.059736][T14855] hsr_slave_1: entered promiscuous mode [ 518.061825][T14855] debugfs: 'hsr0' already exists in 'hsr' [ 518.063698][T14855] Cannot create hsr debugfs directory [ 518.146000][ T5961] Bluetooth: hci2: command tx timeout [ 518.336723][ T13] hsr_slave_0: left promiscuous mode [ 518.346701][ T13] hsr_slave_1: left promiscuous mode [ 518.479051][T14923] FAULT_INJECTION: forcing a failure. [ 518.479051][T14923] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 518.484356][T14923] CPU: 1 UID: 0 PID: 14923 Comm: syz.1.2378 Tainted: G L syzkaller #0 PREEMPT(full) [ 518.484383][T14923] Tainted: [L]=SOFTLOCKUP [ 518.484390][T14923] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 518.484400][T14923] Call Trace: [ 518.484406][T14923] [ 518.484414][T14923] dump_stack_lvl+0x16c/0x1f0 [ 518.484439][T14923] should_fail_ex+0x512/0x640 [ 518.484469][T14923] _copy_from_user+0x2e/0xd0 [ 518.484495][T14923] get_info+0x110/0x620 [ 518.484521][T14923] ? __pfx_get_info+0x10/0x10 [ 518.484543][T14923] ? __might_fault+0xe3/0x190 [ 518.484562][T14923] ? __might_fault+0xe3/0x190 [ 518.484582][T14923] ? lock_acquire+0x179/0x330 [ 518.484602][T14923] ? __pfx___might_resched+0x10/0x10 [ 518.484632][T14923] ? bpf_lsm_capable+0x9/0x10 [ 518.484654][T14923] ? security_capable+0x7e/0x260 [ 518.484680][T14923] do_ip6t_get_ctl+0x169/0xa50 [ 518.484710][T14923] ? __mutex_unlock_slowpath+0x161/0x790 [ 518.484735][T14923] ? __pfx_do_ip6t_get_ctl+0x10/0x10 [ 518.484770][T14923] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 518.484798][T14923] nf_getsockopt+0x7c/0xe0 [ 518.484820][T14923] ipv6_getsockopt+0x1f7/0x280 [ 518.484845][T14923] ? __pfx_ipv6_getsockopt+0x10/0x10 [ 518.484868][T14923] ? _parse_integer_limit+0x17f/0x1d0 [ 518.484891][T14923] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 518.484913][T14923] sctp_getsockopt+0x19f/0x7050 [ 518.484941][T14923] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 518.484961][T14923] ? __pfx_sctp_getsockopt+0x10/0x10 [ 518.484986][T14923] ? __lock_acquire+0x436/0x2890 [ 518.485014][T14923] ? __pfx___might_resched+0x10/0x10 [ 518.485037][T14923] ? get_pid_task+0xfc/0x250 [ 518.485055][T14923] ? aa_sk_perm+0x2f2/0xae0 [ 518.485073][T14923] ? __pfx_aa_sk_perm+0x10/0x10 [ 518.485088][T14923] ? __lock_acquire+0x436/0x2890 [ 518.485108][T14923] ? aa_sock_opt_perm+0xfd/0x1b0 [ 518.485132][T14923] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 518.485151][T14923] do_sock_getsockopt+0x324/0x410 [ 518.485174][T14923] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 518.485193][T14923] ? __fget_files+0x204/0x3c0 [ 518.485231][T14923] __sys_getsockopt+0x123/0x1b0 [ 518.485253][T14923] __ia32_sys_getsockopt+0xbc/0x160 [ 518.485269][T14923] ? __do_fast_syscall_32+0x9a/0x680 [ 518.485291][T14923] ? lockdep_hardirqs_on+0x7c/0x110 [ 518.485311][T14923] __do_fast_syscall_32+0xe8/0x680 [ 518.485334][T14923] do_fast_syscall_32+0x32/0x80 [ 518.485357][T14923] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 518.485378][T14923] RIP: 0023:0xf7f21579 [ 518.485392][T14923] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 518.485408][T14923] RSP: 002b:00000000f53f555c EFLAGS: 00000296 ORIG_RAX: 000000000000016d [ 518.485425][T14923] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000029 [ 518.485436][T14923] RDX: 0000000000000040 RSI: 0000000080000440 RDI: 0000000080000200 [ 518.485447][T14923] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 518.485458][T14923] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 518.485468][T14923] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 518.485490][T14923] [ 518.715841][ T5961] Bluetooth: hci1: command tx timeout [ 518.849507][ T13] team0 (unregistering): Port device team_slave_1 removed [ 518.876504][ T13] team0 (unregistering): Port device team_slave_0 removed [ 519.408397][T14855] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 519.414051][T14855] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 519.418601][T14855] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 519.423551][T14855] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 519.517533][T14922] lo speed is unknown, defaulting to 1000 [ 519.523901][T14922] lo speed is unknown, defaulting to 1000 [ 519.551201][T14855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 519.600846][T14855] 8021q: adding VLAN 0 to HW filter on device team0 [ 519.617148][ T1189] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.619571][ T1189] bridge0: port 1(bridge_slave_0) entered forwarding state [ 519.628354][T10756] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.631483][T10756] bridge0: port 2(bridge_slave_1) entered forwarding state [ 519.648328][ T13] IPVS: stop unused estimator thread 0... [ 519.920544][T14855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 520.226740][ T5961] Bluetooth: hci2: command tx timeout [ 520.253257][T14855] veth0_vlan: entered promiscuous mode [ 520.262682][T14855] veth1_vlan: entered promiscuous mode [ 520.313108][T14855] veth0_macvtap: entered promiscuous mode [ 520.319053][T14855] veth1_macvtap: entered promiscuous mode [ 520.333424][T14855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 520.347284][T14855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 520.358184][ T7163] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.361602][ T7163] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.364926][ T7163] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.368176][ T7163] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.382366][T14955] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 520.384557][T14955] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 520.388869][T14955] vhci_hcd vhci_hcd.0: Device attached [ 520.505631][ T54] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 520.625182][ T1189] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 520.629101][ T1189] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 520.652041][ T7898] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 520.654962][ T7898] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 520.676080][ T54] usb 6-1: Using ep0 maxpacket: 8 [ 520.676248][ T7178] usb 48-1: SetAddress Request (14) to port 0 [ 520.680079][ T54] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 520.680916][ T7178] usb 48-1: new SuperSpeed USB device number 14 using vhci_hcd [ 520.685171][ T54] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 520.692719][ T54] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.731048][T14960] FAULT_INJECTION: forcing a failure. [ 520.731048][T14960] name failslab, interval 1, probability 0, space 0, times 0 [ 520.736324][T14960] CPU: 0 UID: 0 PID: 14960 Comm: syz.7.2364 Tainted: G L syzkaller #0 PREEMPT(full) [ 520.736354][T14960] Tainted: [L]=SOFTLOCKUP [ 520.736362][T14960] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 520.736373][T14960] Call Trace: [ 520.736380][T14960] [ 520.736389][T14960] dump_stack_lvl+0x16c/0x1f0 [ 520.736417][T14960] should_fail_ex+0x512/0x640 [ 520.736445][T14960] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 520.736472][T14960] should_failslab+0xc2/0x120 [ 520.736498][T14960] kmem_cache_alloc_node_noprof+0x86/0x800 [ 520.736521][T14960] ? __alloc_skb+0x156/0x410 [ 520.736554][T14960] ? __alloc_skb+0x156/0x410 [ 520.736579][T14960] __alloc_skb+0x156/0x410 [ 520.736606][T14960] ? __alloc_skb+0x35d/0x410 [ 520.736633][T14960] ? __pfx___alloc_skb+0x10/0x10 [ 520.736666][T14960] ? netlink_autobind.isra.0+0x158/0x370 [ 520.736709][T14960] netlink_alloc_large_skb+0x69/0x140 [ 520.736735][T14960] netlink_sendmsg+0x698/0xdd0 [ 520.736761][T14960] ? __pfx_netlink_sendmsg+0x10/0x10 [ 520.736786][T14960] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 520.736816][T14960] ____sys_sendmsg+0xa5d/0xc30 [ 520.736843][T14960] ? __pfx_____sys_sendmsg+0x10/0x10 [ 520.736866][T14960] ? get_compat_msghdr+0x11a/0x170 [ 520.736897][T14960] ___sys_sendmsg+0x134/0x1d0 [ 520.736919][T14960] ? __pfx____sys_sendmsg+0x10/0x10 [ 520.736950][T14960] ? find_held_lock+0x2b/0x80 [ 520.736990][T14960] __sys_sendmsg+0x16d/0x220 [ 520.737011][T14960] ? __pfx___sys_sendmsg+0x10/0x10 [ 520.737044][T14960] __do_fast_syscall_32+0xe8/0x680 [ 520.737071][T14960] do_fast_syscall_32+0x32/0x80 [ 520.737095][T14960] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 520.737119][T14960] RIP: 0023:0xf70dd579 [ 520.737134][T14960] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 520.737151][T14960] RSP: 002b:00000000f54cd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 520.737169][T14960] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000240 [ 520.737182][T14960] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 520.737193][T14960] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 520.737205][T14960] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 520.737215][T14960] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 520.737239][T14960] [ 520.795919][ T5961] Bluetooth: hci1: command tx timeout [ 520.925105][T14963] random: crng reseeded on system resumption [ 521.004411][T14966] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2383'. [ 521.335858][T14971] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2384'. [ 521.807080][T14956] vhci_hcd: connection reset by peer [ 521.817449][ T1189] vhci_hcd vhci_hcd.5: stop threads [ 521.819265][ T1189] vhci_hcd vhci_hcd.5: release socket [ 521.822998][ T1189] vhci_hcd vhci_hcd.5: disconnect device [ 522.233063][T14981] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 522.249921][T14981] evm: overlay not supported [ 522.307165][ T5961] Bluetooth: hci2: command tx timeout [ 522.391633][T14983] input: syz0 as /devices/virtual/input/input60 [ 522.495556][T14989] FAULT_INJECTION: forcing a failure. [ 522.495556][T14989] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 522.500154][T14989] CPU: 1 UID: 0 PID: 14989 Comm: syz.5.2391 Tainted: G L syzkaller #0 PREEMPT(full) [ 522.500174][T14989] Tainted: [L]=SOFTLOCKUP [ 522.500178][T14989] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 522.500185][T14989] Call Trace: [ 522.500189][T14989] [ 522.500194][T14989] dump_stack_lvl+0x16c/0x1f0 [ 522.500212][T14989] should_fail_ex+0x512/0x640 [ 522.500232][T14989] _copy_to_user+0x32/0xd0 [ 522.500250][T14989] simple_read_from_buffer+0xcb/0x170 [ 522.500267][T14989] proc_fail_nth_read+0x197/0x240 [ 522.500286][T14989] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 522.500305][T14989] ? rw_verify_area+0xcf/0x6c0 [ 522.500319][T14989] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 522.500337][T14989] vfs_read+0x1e4/0xcf0 [ 522.500353][T14989] ? __pfx___mutex_lock+0x10/0x10 [ 522.500369][T14989] ? __pfx_vfs_read+0x10/0x10 [ 522.500383][T14989] ? find_held_lock+0x2b/0x80 [ 522.500402][T14989] ? __fget_files+0x20e/0x3c0 [ 522.500422][T14989] ksys_read+0x12a/0x250 [ 522.500437][T14989] ? __pfx_ksys_read+0x10/0x10 [ 522.500456][T14989] __do_fast_syscall_32+0xe8/0x680 [ 522.500473][T14989] do_fast_syscall_32+0x32/0x80 [ 522.500487][T14989] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 522.500502][T14989] RIP: 0023:0xf70ad579 [ 522.500511][T14989] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 522.500521][T14989] RSP: 002b:00000000f549d590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 522.500532][T14989] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f549d620 [ 522.500539][T14989] RDX: 000000000000000f RSI: 00000000f7446ff4 RDI: 0000000000000000 [ 522.500546][T14989] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 522.500552][T14989] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 522.500558][T14989] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 522.500572][T14989] [ 523.288837][T10763] usb 6-1: USB disconnect, device number 43 [ 523.363241][T15008] syzkaller0: entered promiscuous mode [ 523.365202][T15008] syzkaller0: entered allmulticast mode [ 523.627178][T15012] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.629744][T15012] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.692242][T15012] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 523.699949][T15012] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 523.784024][ T61] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.790342][ T61] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.795566][ T61] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.801732][ T61] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.194156][T15019] 8021q: adding VLAN 0 to HW filter on device bond1 [ 524.288510][T15019] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2400'. [ 524.291574][T15019] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2400'. [ 524.296046][T15019] netlink: 'syz.6.2400': attribute type 10 has an invalid length. [ 524.385736][ T5961] Bluetooth: hci2: command tx timeout [ 524.776581][T15028] syzkaller0: entered promiscuous mode [ 524.778399][T15028] syzkaller0: entered allmulticast mode [ 525.805351][ T7178] usb 48-1: device descriptor read/8, error -110 [ 525.932629][T15046] 9pnet_virtio: no channels available for device syz [ 525.961239][T15046] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2408'. [ 526.260249][ T7178] usb usb48-port1: attempt power cycle [ 526.293506][T15047] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2409'. [ 526.380946][T15043] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.488119][T15059] syzkaller0: entered promiscuous mode [ 526.490420][T15059] syzkaller0: entered allmulticast mode [ 526.661433][T15043] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.915813][T15043] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.011284][T15043] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.129475][ T7163] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.140572][ T7163] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.159827][ T7163] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.185019][ T83] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.251185][ T7178] usb usb48-port1: unable to enumerate USB device [ 527.364674][T15072] random: crng reseeded on system resumption [ 528.349157][T15080] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2419'. [ 528.580142][T15083] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 528.772774][T15086] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2421'. [ 528.844934][T15086] hsr_slave_0 (unregistering): left promiscuous mode [ 529.057030][T15095] input: syz0 as /devices/virtual/input/input61 [ 529.237318][T15091] lo speed is unknown, defaulting to 1000 [ 529.241109][T15091] lo speed is unknown, defaulting to 1000 [ 529.271654][T15106] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 529.440080][T15115] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 529.446344][T15093] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2422'. [ 529.994262][T15120] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2429'. [ 530.300872][T15127] input: syz0 as /devices/virtual/input/input62 [ 530.452907][ T40] audit: type=1326 audit(1765621814.486:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15128 comm="syz.7.2433" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x0 [ 530.466296][T15133] block nbd6: not configured, cannot reconfigure [ 530.985623][T10653] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 531.102783][T15148] overlay: Bad value for 'index' [ 531.145580][T10653] usb 10-1: Using ep0 maxpacket: 8 [ 531.149728][T10653] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 531.154535][T10653] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 531.158729][T10653] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 531.162897][T10653] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 531.168432][T10653] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 531.172317][T10653] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.382259][T10653] usb 10-1: GET_CAPABILITIES returned 0 [ 531.384655][T10653] usbtmc 10-1:16.0: can't read capabilities [ 531.536190][ T24] usb 12-1: new low-speed USB device number 2 using dummy_hcd [ 531.665781][ T24] usb 12-1: device descriptor read/64, error -71 [ 531.704142][T15152] afs: Unknown parameter 'dyn€|' [ 531.905743][ T24] usb 12-1: new low-speed USB device number 3 using dummy_hcd [ 532.035928][ T24] usb 12-1: device descriptor read/64, error -71 [ 532.146953][ T24] usb usb12-port1: attempt power cycle [ 532.379057][T15162] random: crng reseeded on system resumption [ 532.506044][ T24] usb 12-1: new low-speed USB device number 4 using dummy_hcd [ 532.536451][ T24] usb 12-1: device descriptor read/8, error -71 [ 532.785642][ T24] usb 12-1: new low-speed USB device number 5 using dummy_hcd [ 532.806336][ T24] usb 12-1: device descriptor read/8, error -71 [ 532.919177][ T24] usb usb12-port1: unable to enumerate USB device [ 534.135783][ T7178] usb 10-1: USB disconnect, device number 17 [ 535.293214][T15182] input: syz0 as /devices/virtual/input/input63 [ 536.345708][T10653] usb 12-1: new high-speed USB device number 6 using dummy_hcd [ 536.817316][T10653] usb 12-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 14129, setting to 64 [ 536.822114][T10653] usb 12-1: config 0 interface 0 has no altsetting 0 [ 536.826900][T10653] usb 12-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 536.830803][T10653] usb 12-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 536.835719][T10653] usb 12-1: Product: syz [ 536.837587][T10653] usb 12-1: Manufacturer: syz [ 536.839651][T10653] usb 12-1: SerialNumber: syz [ 536.843674][T10653] usb 12-1: config 0 descriptor?? [ 536.851584][T10653] usb 12-1: selecting invalid altsetting 0 [ 537.081463][T15194] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2451'. [ 537.084926][T15190] usb 12-1: cannot submit urb 0, error -2: endpoint not enabled [ 537.088948][ T5993] usb 12-1: USB disconnect, device number 6 [ 537.098365][T15201] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 537.100608][T15201] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 537.103267][T15201] vhci_hcd vhci_hcd.0: Device attached [ 537.366213][T10653] usb 40-1: SetAddress Request (38) to port 0 [ 537.368276][T10653] usb 40-1: new SuperSpeed USB device number 38 using vhci_hcd [ 537.621588][T15203] vhci_hcd: connection reset by peer [ 537.641938][ T13] vhci_hcd vhci_hcd.1: stop threads [ 537.643654][ T13] vhci_hcd vhci_hcd.1: release socket [ 537.645942][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 537.787072][T15223] comedi comedi0: Minor 47 could not be opened [ 537.867974][T15225] 8021q: adding VLAN 0 to HW filter on device bond1 [ 537.871374][T15227] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2461'. [ 537.875587][T15227] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2461'. [ 537.889820][T15227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 537.896429][T15227] bond1: (slave bond0): making interface the new active one [ 537.901480][T15227] bond1: (slave bond0): Enslaving as an active interface with an up link [ 537.932712][T15225] bond1: (slave bond0): Releasing active interface [ 537.953651][T15225] bridge_slave_0: left allmulticast mode [ 537.955864][T15225] bridge_slave_0: left promiscuous mode [ 537.964615][T15225] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.971564][T15225] bridge_slave_1: left allmulticast mode [ 537.974007][T15225] bridge_slave_1: left promiscuous mode [ 537.976919][T15225] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.986616][T15225] bond0: (slave bond_slave_0): Releasing backup interface [ 537.993689][T15225] bond0: (slave bond_slave_1): Releasing backup interface [ 538.004126][T15225] team0: Port device team_slave_0 removed [ 538.010346][T15225] team0: Port device team_slave_1 removed [ 538.013423][T15225] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 538.016653][T15225] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 538.020966][T15225] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 538.024032][T15225] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 538.028664][T15225] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 538.073214][T15229] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2462'. [ 538.077252][T15229] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 538.084081][T15229] input: syz0 as /devices/virtual/input/input64 [ 538.304860][T15234] overlay: Unknown parameter 'uid<00000000000000060929' [ 538.367939][T15235] loop5: detected capacity change from 0 to 7 [ 538.495180][T15235] Dev loop5: unable to read RDB block 7 [ 538.497689][T15235] loop5: unable to read partition table [ 538.500039][T15235] loop5: partition table beyond EOD, truncated [ 538.502034][T15235] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 538.967623][T15244] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2467'. [ 539.065806][ T54] usb 11-1: new high-speed USB device number 24 using dummy_hcd [ 539.215939][ T54] usb 11-1: Using ep0 maxpacket: 16 [ 539.219847][ T54] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 539.228829][ T54] usb 11-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 539.232704][ T54] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.236492][ T54] usb 11-1: Product: syz [ 539.238347][ T54] usb 11-1: Manufacturer: syz [ 539.240974][ T54] usb 11-1: SerialNumber: syz [ 539.244921][ T54] usb 11-1: config 0 descriptor?? [ 539.250199][ T54] em28xx 11-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 539.254068][ T54] em28xx 11-1:0.0: DVB interface 0 found: bulk [ 539.468829][T15257] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2471'. [ 539.663472][ T40] audit: type=1326 audit(1765621823.696:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15238 comm="syz.6.2465" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 539.835682][ T40] audit: type=1326 audit(1765621823.706:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15238 comm="syz.6.2465" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 539.843459][ T40] audit: type=1326 audit(1765621823.706:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15238 comm="syz.6.2465" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 539.851060][ T40] audit: type=1326 audit(1765621823.706:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15238 comm="syz.6.2465" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 539.859308][ T40] audit: type=1326 audit(1765621823.706:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15238 comm="syz.6.2465" exe="/syz-executor" sig=0 arch=40000003 syscall=288 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 539.866122][ T40] audit: type=1326 audit(1765621823.706:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15238 comm="syz.6.2465" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 539.872909][ T40] audit: type=1326 audit(1765621823.706:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15238 comm="syz.6.2465" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 539.879418][ T40] audit: type=1326 audit(1765621823.706:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15238 comm="syz.6.2465" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 539.886024][ T40] audit: type=1326 audit(1765621823.706:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15238 comm="syz.6.2465" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 539.935444][ T40] audit: type=1326 audit(1765621823.966:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15238 comm="syz.6.2465" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 540.611125][T15271] 8021q: adding VLAN 0 to HW filter on device bond1 [ 540.619165][T15271] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2476'. [ 540.622586][T15271] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2476'. [ 540.630394][T15271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 540.633001][ T54] em28xx 11-1:0.0: unknown em28xx chip ID (0) [ 540.639836][T15271] bond1: (slave bond0): making interface the new active one [ 540.643053][T15271] bond1: (slave bond0): Enslaving as an active interface with an up link [ 542.270910][T15284] 9pnet_virtio: no channels available for device syz [ 542.465798][T10653] usb 40-1: device descriptor read/8, error -110 [ 542.674266][T15282] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2478'. [ 542.755588][T10763] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 542.878085][T10653] usb usb40-port1: attempt power cycle [ 542.926495][T10763] usb 6-1: Using ep0 maxpacket: 16 [ 542.930745][T10763] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 542.934170][T10763] usb 6-1: config 0 has no interfaces? [ 542.937990][T10763] usb 6-1: New USB device found, idVendor=13b1, idProduct=0024, bcdDevice= e.a0 [ 542.940986][T10763] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.943583][T10763] usb 6-1: Product: syz [ 542.944928][T10763] usb 6-1: Manufacturer: syz [ 542.946739][T10763] usb 6-1: SerialNumber: syz [ 542.949698][T10763] usb 6-1: config 0 descriptor?? [ 543.059812][T15300] afs: Unknown parameter '€' [ 543.154628][T15288] kvm: apic: phys broadcast and lowest prio [ 543.343781][T15308] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2484'. [ 543.363382][T15308] netlink: 'syz.5.2484': attribute type 4 has an invalid length. [ 543.425864][ T83] wlan0: Trigger new scan to find an IBSS to join [ 543.456383][T10653] usb usb40-port1: unable to enumerate USB device [ 543.516074][ T54] em28xx 11-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 543.522254][ T54] em28xx 11-1:0.0: board has no eeprom [ 543.595694][ T54] em28xx 11-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 543.598536][ T54] em28xx 11-1:0.0: dvb set to bulk mode. [ 543.600478][T10653] em28xx 11-1:0.0: Binding DVB extension [ 543.605209][ T54] usb 11-1: USB disconnect, device number 24 [ 543.608816][ T54] em28xx 11-1:0.0: Disconnecting em28xx [ 543.621004][T15311] FAULT_INJECTION: forcing a failure. [ 543.621004][T15311] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 543.626850][T15311] CPU: 2 UID: 0 PID: 15311 Comm: syz.6.2485 Tainted: G L syzkaller #0 PREEMPT(full) [ 543.626873][T15311] Tainted: [L]=SOFTLOCKUP [ 543.626877][T15311] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 543.626885][T15311] Call Trace: [ 543.626889][T15311] [ 543.626893][T15311] dump_stack_lvl+0x16c/0x1f0 [ 543.626913][T15311] should_fail_ex+0x512/0x640 [ 543.626934][T15311] __kvm_read_guest_page+0x186/0x250 [ 543.626954][T15311] kvm_fetch_guest_virt+0x128/0x1a0 [ 543.626974][T15311] __do_insn_fetch_bytes+0x4fa/0x720 [ 543.626990][T15311] ? __pfx___do_insn_fetch_bytes+0x10/0x10 [ 543.627011][T15311] x86_decode_insn+0xf88/0x6170 [ 543.627029][T15311] ? find_held_lock+0x2b/0x80 [ 543.627048][T15311] ? do_raw_read_unlock+0x44/0xe0 [ 543.627062][T15311] ? __pfx_x86_decode_insn+0x10/0x10 [ 543.627081][T15311] ? vmx_cache_reg+0x333/0x5e0 [ 543.627100][T15311] ? kvm_register_read_raw+0xe9/0x240 [ 543.627116][T15311] ? init_decode_cache+0xd/0x2a0 [ 543.627133][T15311] ? init_emulate_ctxt+0x337/0x510 [ 543.627150][T15311] ? __pfx_init_emulate_ctxt+0x10/0x10 [ 543.627200][T15311] ? kvm_multiple_exception+0x379/0x750 [ 543.627230][T15311] x86_emulate_instruction+0x838/0x1c00 [ 543.627244][T15311] ? __kvm_get_msr+0x12e/0x460 [ 543.627263][T15311] ? __pfx___kvm_get_msr+0x10/0x10 [ 543.627295][T15311] handle_ud+0x103/0x280 [ 543.627319][T15311] ? __pfx_handle_ud+0x10/0x10 [ 543.627342][T15311] ? __lock_acquire+0x436/0x2890 [ 543.627361][T15311] ? rcu_is_watching+0x12/0xc0 [ 543.627384][T15311] ? __vmx_complete_interrupts+0x111/0x4e0 [ 543.627409][T15311] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 543.627443][T15311] handle_exception_nmi+0x856/0x1720 [ 543.627472][T15311] ? __pfx_handle_exception_nmi+0x10/0x10 [ 543.627496][T15311] vmx_handle_exit+0x129b/0x1a00 [ 543.627522][T15311] vcpu_run+0x3468/0x5a80 [ 543.627543][T15311] ? vmx_vcpu_load_vmcs+0x222/0x770 [ 543.627577][T15311] ? __pfx_vcpu_run+0x10/0x10 [ 543.627613][T15311] ? kvm_arch_vcpu_ioctl_run+0xfd3/0x1860 [ 543.627635][T15311] kvm_arch_vcpu_ioctl_run+0xfd3/0x1860 [ 543.627665][T15311] kvm_vcpu_ioctl+0x76d/0x16d0 [ 543.627697][T15311] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 543.627725][T15311] ? tomoyo_path_number_perm+0x18d/0x580 [ 543.627756][T15311] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 543.627794][T15311] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 543.627821][T15311] ? do_vfs_ioctl+0x128/0x14f0 [ 543.627844][T15311] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 543.627877][T15311] kvm_vcpu_compat_ioctl+0x20f/0x3d0 [ 543.627906][T15311] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 543.627936][T15311] ? __fget_files+0x20e/0x3c0 [ 543.627960][T15311] ? fput+0x40/0xf0 [ 543.627982][T15311] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 543.628011][T15311] __ia32_compat_sys_ioctl+0x242/0x370 [ 543.628038][T15311] __do_fast_syscall_32+0xe8/0x680 [ 543.628065][T15311] do_fast_syscall_32+0x32/0x80 [ 543.628089][T15311] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 543.628112][T15311] RIP: 0023:0xf7f23579 [ 543.628128][T15311] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 543.628146][T15311] RSP: 002b:00000000f541655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 543.628165][T15311] RAX: ffffffffffffffda RBX: 000000000000000d RCX: 000000000000ae80 [ 543.628177][T15311] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 543.628188][T15311] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 543.628199][T15311] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 543.628216][T15311] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 543.628245][T15311] [ 543.630651][T10653] em28xx 11-1:0.0: Registering input extension [ 543.775903][ T54] em28xx 11-1:0.0: Closing input extension [ 543.782867][ T54] em28xx 11-1:0.0: Freeing device [ 544.040418][T15321] random: crng reseeded on system resumption [ 544.369140][T15324] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2488'. [ 544.895410][ T40] kauditd_printk_skb: 738 callbacks suppressed [ 544.895426][ T40] audit: type=1326 audit(1765621828.926:1581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15330 comm="syz.6.2491" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x0 [ 544.904913][T15336] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 544.907755][T15336] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 544.912149][T15336] vhci_hcd vhci_hcd.0: Device attached [ 545.185708][ T54] usb 48-1: SetAddress Request (18) to port 0 [ 545.187930][ T54] usb 48-1: new SuperSpeed USB device number 18 using vhci_hcd [ 545.293744][ T24] usb 6-1: USB disconnect, device number 44 [ 545.492694][T15338] vhci_hcd: connection reset by peer [ 545.494711][ T1189] vhci_hcd vhci_hcd.5: stop threads [ 545.496985][ T1189] vhci_hcd vhci_hcd.5: release socket [ 545.499054][ T1189] vhci_hcd vhci_hcd.5: disconnect device [ 545.503303][T15341] syzkaller1: entered promiscuous mode [ 545.505233][T15341] syzkaller1: entered allmulticast mode [ 546.062835][T15353] netlink: 'syz.5.2494': attribute type 1 has an invalid length. [ 546.066302][T15353] FAULT_INJECTION: forcing a failure. [ 546.066302][T15353] name failslab, interval 1, probability 0, space 0, times 0 [ 546.071210][T15353] CPU: 3 UID: 0 PID: 15353 Comm: syz.5.2494 Tainted: G L syzkaller #0 PREEMPT(full) [ 546.071241][T15353] Tainted: [L]=SOFTLOCKUP [ 546.071247][T15353] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 546.071259][T15353] Call Trace: [ 546.071267][T15353] [ 546.071275][T15353] dump_stack_lvl+0x16c/0x1f0 [ 546.071303][T15353] should_fail_ex+0x512/0x640 [ 546.071331][T15353] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 546.071357][T15353] should_failslab+0xc2/0x120 [ 546.071383][T15353] kmem_cache_alloc_node_noprof+0x86/0x800 [ 546.071405][T15353] ? __alloc_skb+0x156/0x410 [ 546.071440][T15353] ? __alloc_skb+0x156/0x410 [ 546.071466][T15353] __alloc_skb+0x156/0x410 [ 546.071492][T15353] ? __alloc_skb+0x35d/0x410 [ 546.071517][T15353] ? __pfx___alloc_skb+0x10/0x10 [ 546.071545][T15353] ? genl_rcv_msg+0x4b0/0x800 [ 546.071569][T15353] ? genl_rcv_msg+0x4bb/0x800 [ 546.071601][T15353] netlink_ack+0x15d/0xb80 [ 546.071630][T15353] netlink_rcv_skb+0x332/0x420 [ 546.071652][T15353] ? __pfx_genl_rcv_msg+0x10/0x10 [ 546.071677][T15353] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 546.071701][T15353] ? netlink_deliver_tap+0x1ae/0xd30 [ 546.071716][T15353] genl_rcv+0x28/0x40 [ 546.071730][T15353] netlink_unicast+0x5aa/0x870 [ 546.071745][T15353] ? __pfx_netlink_unicast+0x10/0x10 [ 546.071763][T15353] netlink_sendmsg+0x8c8/0xdd0 [ 546.071779][T15353] ? __pfx_netlink_sendmsg+0x10/0x10 [ 546.071794][T15353] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 546.071813][T15353] ____sys_sendmsg+0xa5d/0xc30 [ 546.071829][T15353] ? __pfx_____sys_sendmsg+0x10/0x10 [ 546.071843][T15353] ? get_compat_msghdr+0x11a/0x170 [ 546.071870][T15353] ___sys_sendmsg+0x134/0x1d0 [ 546.071890][T15353] ? __pfx____sys_sendmsg+0x10/0x10 [ 546.071921][T15353] ? find_held_lock+0x2b/0x80 [ 546.071962][T15353] __sys_sendmsg+0x16d/0x220 [ 546.071982][T15353] ? __pfx___sys_sendmsg+0x10/0x10 [ 546.072011][T15353] ? do_user_addr_fault+0x843/0x1370 [ 546.072039][T15353] __do_fast_syscall_32+0xe8/0x680 [ 546.072068][T15353] do_fast_syscall_32+0x32/0x80 [ 546.072091][T15353] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 546.072114][T15353] RIP: 0023:0xf70ad579 [ 546.072129][T15353] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 546.072146][T15353] RSP: 002b:00000000f549d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 546.072171][T15353] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 546.072184][T15353] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 546.072196][T15353] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 546.072207][T15353] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 546.072218][T15353] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 546.072258][T15353] [ 546.221885][T15355] afs: Unknown parameter '€' [ 546.395715][ T1189] wlan0: Trigger new scan to find an IBSS to join [ 546.465757][ T1189] wlan0: Trigger new scan to find an IBSS to join [ 546.498732][ T40] audit: type=1326 audit(1765621830.536:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15358 comm="syz.1.2496" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f21579 code=0x0 [ 546.860347][T15366] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2497'. [ 546.976921][T15370] afs: Unknown parameter '€' [ 547.158351][T15358] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 548.558985][T15395] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 548.561318][T15395] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 548.578216][T15395] vhci_hcd vhci_hcd.0: Device attached [ 548.835692][ T24] usb 52-1: SetAddress Request (2) to port 0 [ 548.845697][ T24] usb 52-1: new SuperSpeed USB device number 2 using vhci_hcd [ 548.950234][ T40] audit: type=1800 audit(1765621832.986:1583): pid=15391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2503" name="blkio.throttle.io_service_bytes_recursive" dev="9p" ino=71827863 res=0 errno=0 [ 548.992012][T15402] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2505'. [ 548.996042][T15402] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 549.009530][T15402] input: syz0 as /devices/virtual/input/input66 [ 549.330861][T15396] vhci_hcd: connection reset by peer [ 549.337595][ T7163] vhci_hcd vhci_hcd.7: stop threads [ 549.339311][ T7163] vhci_hcd vhci_hcd.7: release socket [ 549.345596][ T7163] vhci_hcd vhci_hcd.7: disconnect device [ 549.348649][T15413] random: crng reseeded on system resumption [ 549.355746][ T7163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.358043][ T83] wlan0: Trigger new scan to find an IBSS to join [ 549.539463][T15407] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2508'. [ 549.824766][T15420] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 549.888192][T15424] option changes via remount are deprecated (pid=15423 comm=syz.5.2511) [ 550.142454][T15427] netlink: 'syz.7.2512': attribute type 10 has an invalid length. [ 550.151574][T15427] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 550.156842][T15427] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 550.163188][T15427] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 550.230488][ T54] usb 48-1: device descriptor read/8, error -110 [ 550.413050][T15435] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 550.415194][T15435] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 550.418559][T15435] vhci_hcd vhci_hcd.0: Device attached [ 550.433791][ T40] audit: type=1800 audit(1765621834.466:1584): pid=15435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2513" name="SYSV00000000" dev="hugetlbfs" ino=7 res=0 errno=0 [ 550.595702][T10653] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 550.616124][ T54] usb usb48-port1: attempt power cycle [ 550.665766][T10653] usb 49-1: new full-speed USB device number 4 using vhci_hcd [ 550.738099][T15441] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2516'. [ 550.742016][T15441] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 550.749292][T15441] input: syz0 as /devices/virtual/input/input67 [ 551.020366][T15436] vhci_hcd: connection reset by peer [ 551.023455][ T83] vhci_hcd vhci_hcd.6: stop threads [ 551.027946][ T83] vhci_hcd vhci_hcd.6: release socket [ 551.031332][ T83] vhci_hcd vhci_hcd.6: disconnect device [ 551.206072][ T54] usb usb48-port1: unable to enumerate USB device [ 551.365690][T15453] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 551.367935][T15453] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 551.383220][T15453] vhci_hcd vhci_hcd.0: Device attached [ 551.402923][T15453] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2519'. [ 552.146586][T15454] vhci_hcd: connection closed [ 552.147288][ T1140] vhci_hcd vhci_hcd.7: stop threads [ 552.152161][ T1140] vhci_hcd vhci_hcd.7: release socket [ 552.154438][ T1140] vhci_hcd vhci_hcd.7: disconnect device [ 552.371587][T15466] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 552.373782][T15466] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 552.378382][T15466] vhci_hcd vhci_hcd.0: Device attached [ 552.386782][T13611] wlan0: Trigger new scan to find an IBSS to join [ 552.676780][ T54] usb 48-1: SetAddress Request (22) to port 0 [ 552.685712][ T54] usb 48-1: new SuperSpeed USB device number 22 using vhci_hcd [ 553.125712][T15467] vhci_hcd: connection reset by peer [ 553.128376][T10756] vhci_hcd vhci_hcd.5: stop threads [ 553.130873][T10756] vhci_hcd vhci_hcd.5: release socket [ 553.133538][T10756] vhci_hcd vhci_hcd.5: disconnect device [ 553.277184][T10756] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 553.309196][T15491] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 553.568611][T15498] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2526'. [ 553.572613][T15498] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 553.580717][T15498] input: syz0 as /devices/virtual/input/input68 [ 553.742044][T15501] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 553.744380][T15501] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 553.781240][T15501] vhci_hcd vhci_hcd.0: Device attached [ 553.905748][ T24] usb 52-1: device descriptor read/8, error -110 [ 554.229920][T15529] random: crng reseeded on system resumption [ 554.297353][ T24] usb usb52-port1: attempt power cycle [ 554.589835][T15502] vhci_hcd: connection closed [ 554.590899][ T61] vhci_hcd vhci_hcd.6: stop threads [ 554.595256][ T61] vhci_hcd vhci_hcd.6: release socket [ 554.600331][ T61] vhci_hcd vhci_hcd.6: disconnect device [ 554.756337][T15534] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2532'. [ 554.773358][T15534] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2532'. [ 554.886866][ T24] usb usb52-port1: unable to enumerate USB device [ 555.629287][T15537] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2535'. [ 555.633493][T15537] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 555.646438][T15537] input: syz0 as /devices/virtual/input/input69 [ 555.826022][T10653] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 555.848446][ T40] audit: type=1326 audit(1765621839.886:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15542 comm="syz.1.2536" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f21579 code=0x0 [ 555.878728][ T6031] usb 11-1: new high-speed USB device number 25 using dummy_hcd [ 555.885697][T15541] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 556.035661][ T6031] usb 11-1: Using ep0 maxpacket: 16 [ 556.038780][ T6031] usb 11-1: too many configurations: 123, using maximum allowed: 8 [ 556.043012][ T6031] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 556.049362][ T6031] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 556.054799][ T6031] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 556.060262][ T6031] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 556.065907][ T6031] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 556.071393][ T6031] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 556.079693][ T6031] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 556.088120][ T6031] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 556.094164][ T6031] usb 11-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 556.099415][ T6031] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 556.105585][ T6031] usb 11-1: SerialNumber: syz [ 556.113900][ T6031] usb 11-1: config 0 descriptor?? [ 556.126967][ T6031] input: bcm5974 as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/input/input70 [ 556.234609][T15555] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 556.237356][T15555] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 556.241437][T15555] vhci_hcd vhci_hcd.0: Device attached [ 556.505769][ T839] usb 40-1: SetAddress Request (42) to port 0 [ 556.508588][ T839] usb 40-1: new SuperSpeed USB device number 42 using vhci_hcd [ 556.512028][ T5335] bcm5974 11-1:0.0: could not read from device [ 556.518726][ T5335] bcm5974 11-1:0.0: could not read from device [ 556.522678][ T6031] usb 11-1: USB disconnect, device number 25 [ 556.528176][ T5335] bcm5974 11-1:0.0: could not read from device [ 556.537254][ T5335] bcm5974 11-1:0.0: could not read from device [ 556.885706][T15556] vhci_hcd: connection reset by peer [ 556.889685][T13611] vhci_hcd vhci_hcd.1: stop threads [ 556.891849][T13611] vhci_hcd vhci_hcd.1: release socket [ 556.893856][T13611] vhci_hcd vhci_hcd.1: disconnect device [ 557.363696][T15566] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 557.566161][T10769] usb usb50-port1: attempt power cycle [ 557.745728][ T54] usb 48-1: device descriptor read/8, error -110 [ 557.865448][T15573] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 558.156727][ T54] usb usb48-port1: attempt power cycle [ 558.326232][ T40] audit: type=1326 audit(1765621842.366:1586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15582 comm="syz.6.2545" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x0 [ 558.336446][T10769] usb usb50-port1: unable to enumerate USB device [ 558.400859][T15594] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2544'. [ 558.404470][T15594] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2544'. [ 558.726426][ T54] usb usb48-port1: unable to enumerate USB device [ 558.822617][T15595] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2546'. [ 559.293203][T15601] 9pnet_virtio: no channels available for device syz [ 559.424096][T15601] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2547'. [ 560.892024][T15608] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2549'. [ 560.892111][T15614] 9pnet_virtio: no channels available for device syz [ 561.585660][ T839] usb 40-1: device descriptor read/8, error -110 [ 561.976815][ T839] usb usb40-port1: attempt power cycle [ 562.125860][T15614] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2551'. [ 562.536593][ T839] usb usb40-port1: unable to enumerate USB device [ 562.537871][T15637] afs: Unknown parameter '€' [ 562.770699][T15642] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2557'. [ 563.673322][T15655] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2560'. [ 563.676665][T15655] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 563.683112][T15655] input: syz0 as /devices/virtual/input/input71 [ 564.068816][T15658] afs: Unknown parameter '€' [ 564.117327][T15652] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2559'. [ 564.844088][T15679] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2566'. [ 564.851880][T15679] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2566'. [ 564.925665][ T6033] usb 11-1: new high-speed USB device number 26 using dummy_hcd [ 565.085683][ T6033] usb 11-1: Using ep0 maxpacket: 8 [ 565.089611][ T6033] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 565.093728][ T6033] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 565.098383][ T6033] usb 11-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 565.102589][ T6033] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 565.107455][ T6033] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 565.111060][ T6033] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.118013][ T6033] usbtmc 11-1:16.0: bulk endpoints not found [ 565.745010][T15685] random: crng reseeded on system resumption [ 566.041449][T15691] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2568'. [ 566.050285][T15691] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2568'. [ 566.081021][T15692] netlink: 'syz.1.2569': attribute type 1 has an invalid length. [ 566.083608][T15692] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2569'. [ 566.087032][T15692] NCSI netlink: No device for ifindex 0 [ 567.589691][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 567.690553][ T6033] usb 11-1: USB disconnect, device number 26 [ 568.073345][T15717] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2576'. [ 568.094981][T15717] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2576'. [ 568.458204][T15720] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 568.936351][T15727] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2579'. [ 568.939354][T15727] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 568.993884][T15727] input: syz0 as /devices/virtual/input/input72 [ 569.067375][T15733] FAULT_INJECTION: forcing a failure. [ 569.067375][T15733] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 569.067411][T15733] CPU: 3 UID: 0 PID: 15733 Comm: syz.6.2582 Tainted: G L syzkaller #0 PREEMPT(full) [ 569.067427][T15733] Tainted: [L]=SOFTLOCKUP [ 569.067432][T15733] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 569.067439][T15733] Call Trace: [ 569.067443][T15733] [ 569.067447][T15733] dump_stack_lvl+0x16c/0x1f0 [ 569.067465][T15733] should_fail_ex+0x512/0x640 [ 569.067485][T15733] _copy_to_user+0x32/0xd0 [ 569.067503][T15733] simple_read_from_buffer+0xcb/0x170 [ 569.067521][T15733] proc_fail_nth_read+0x197/0x240 [ 569.067540][T15733] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 569.067559][T15733] ? rw_verify_area+0xcf/0x6c0 [ 569.067572][T15733] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 569.067590][T15733] vfs_read+0x1e4/0xcf0 [ 569.067606][T15733] ? __pfx___mutex_lock+0x10/0x10 [ 569.067623][T15733] ? __pfx_vfs_read+0x10/0x10 [ 569.067636][T15733] ? find_held_lock+0x2b/0x80 [ 569.067655][T15733] ? __fget_files+0x20e/0x3c0 [ 569.067674][T15733] ksys_read+0x12a/0x250 [ 569.067689][T15733] ? __pfx_ksys_read+0x10/0x10 [ 569.067708][T15733] __do_fast_syscall_32+0xe8/0x680 [ 569.067724][T15733] do_fast_syscall_32+0x32/0x80 [ 569.067739][T15733] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 569.067753][T15733] RIP: 0023:0xf7f23579 [ 569.067761][T15733] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 569.067772][T15733] RSP: 002b:00000000f5416590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 569.067782][T15733] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5416620 [ 569.067789][T15733] RDX: 000000000000000f RSI: 00000000f73b6ff4 RDI: 0000000000000000 [ 569.067796][T15733] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 569.067802][T15733] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 569.067808][T15733] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 569.067822][T15733] [ 569.098888][T15735] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 569.176900][T15735] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 569.244550][T15735] vhci_hcd vhci_hcd.0: Device attached [ 569.495669][ T6031] usb 52-1: SetAddress Request (6) to port 0 [ 569.497881][ T6031] usb 52-1: new SuperSpeed USB device number 6 using vhci_hcd [ 569.501547][T15748] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 569.957408][T15756] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2586'. [ 569.985697][T15756] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2586'. [ 570.797022][T15736] vhci_hcd: connection reset by peer [ 570.799868][ T6075] vhci_hcd vhci_hcd.7: stop threads [ 570.801599][ T6075] vhci_hcd vhci_hcd.7: release socket [ 570.803501][ T6075] vhci_hcd vhci_hcd.7: disconnect device [ 571.064612][T15771] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2589'. [ 571.070268][T15771] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2589'. [ 572.471591][T15784] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2591'. [ 573.011228][T15793] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 573.013847][T15793] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 573.017152][T15793] vhci_hcd vhci_hcd.0: Device attached [ 573.317329][ T54] usb 48-1: SetAddress Request (26) to port 0 [ 573.319525][ T54] usb 48-1: new SuperSpeed USB device number 26 using vhci_hcd [ 573.936090][T15804] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 573.941295][T15804] input: syz0 as /devices/virtual/input/input73 [ 574.020214][T15794] vhci_hcd: connection reset by peer [ 574.023824][ T6075] vhci_hcd vhci_hcd.5: stop threads [ 574.027196][ T6075] vhci_hcd vhci_hcd.5: release socket [ 574.030483][ T6075] vhci_hcd vhci_hcd.5: disconnect device [ 574.429853][T15813] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2601'. [ 574.435259][T15813] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2601'. [ 574.545632][ T6031] usb 52-1: device descriptor read/8, error -110 [ 574.936057][ T6031] usb usb52-port1: attempt power cycle [ 575.405197][T15823] ubi: mtd0 is already attached to ubi31 [ 576.008539][T15827] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 576.436401][ T6031] usb usb52-port1: unable to enumerate USB device [ 576.965205][T15842] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 576.967369][T15842] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 576.971398][T15842] vhci_hcd vhci_hcd.0: Device attached [ 577.035849][T15847] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 577.038008][T15847] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 577.058468][T15847] vhci_hcd vhci_hcd.0: Device attached [ 577.265661][T10763] usb 40-1: SetAddress Request (46) to port 0 [ 577.267999][T10763] usb 40-1: new SuperSpeed USB device number 46 using vhci_hcd [ 577.384349][T15850] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2611'. [ 577.526220][T10765] usb 50-1: SetAddress Request (34) to port 0 [ 577.536388][T10765] usb 50-1: new SuperSpeed USB device number 34 using vhci_hcd [ 578.365851][T15843] vhci_hcd: connection reset by peer [ 578.368410][T10756] vhci_hcd vhci_hcd.1: stop threads [ 578.370216][T10756] vhci_hcd vhci_hcd.1: release socket [ 578.372021][T10756] vhci_hcd vhci_hcd.1: disconnect device [ 578.395909][ T54] usb 48-1: device descriptor read/8, error -110 [ 578.434476][T15863] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2614'. [ 578.439078][T15864] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2614'. [ 578.743531][T15869] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2615'. [ 578.754402][T15869] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2615'. [ 578.796350][ T54] usb usb48-port1: attempt power cycle [ 579.379343][ T54] usb usb48-port1: unable to enumerate USB device [ 579.417037][T15848] vhci_hcd: connection reset by peer [ 579.436125][ T1140] vhci_hcd vhci_hcd.6: stop threads [ 579.437834][ T1140] vhci_hcd vhci_hcd.6: release socket [ 579.440853][ T1140] vhci_hcd vhci_hcd.6: disconnect device [ 579.595339][ T40] audit: type=1326 audit(1765621863.626:1587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15877 comm="syz.5.2618" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x0 [ 580.881279][T15904] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2622'. [ 581.175289][T15906] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 581.182818][T15906] input: syz0 as /devices/virtual/input/input74 [ 581.304693][ T40] audit: type=1800 audit(1765621865.336:1588): pid=15902 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2622" name="blkio.throttle.io_service_bytes_recursive" dev="9p" ino=71827863 res=0 errno=0 [ 581.459379][T15911] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2621'. [ 581.473829][T15911] wireguard0: entered promiscuous mode [ 581.475701][T15911] wireguard0: entered allmulticast mode [ 581.667450][ T1189] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 581.797110][T15922] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2627'. [ 581.802105][T15922] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2627'. [ 582.475697][T10763] usb 40-1: device descriptor read/8, error -110 [ 582.631039][T10765] usb 50-1: device descriptor read/8, error -110 [ 582.886603][T10763] usb usb40-port1: attempt power cycle [ 583.018599][T15939] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 583.020724][T15939] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 583.023559][T15939] vhci_hcd vhci_hcd.0: Device attached [ 583.186056][T10765] usb 50-1: SetAddress Request (35) to port 0 [ 583.188946][T10765] usb 50-1: new SuperSpeed USB device number 35 using vhci_hcd [ 583.446181][T10763] usb usb40-port1: unable to enumerate USB device [ 583.586652][T15940] vhci_hcd: connection reset by peer [ 583.590232][ T41] vhci_hcd vhci_hcd.6: stop threads [ 583.592010][ T41] vhci_hcd vhci_hcd.6: release socket [ 583.593924][ T41] vhci_hcd vhci_hcd.6: disconnect device [ 584.076852][T15954] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 584.079505][T15954] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 584.085012][T15954] vhci_hcd vhci_hcd.0: Device attached [ 584.511199][ T7178] usb 48-1: SetAddress Request (30) to port 0 [ 584.565652][ T7178] usb 48-1: new SuperSpeed USB device number 30 using vhci_hcd [ 585.370646][T15969] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2639'. [ 585.376488][T15969] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2639'. [ 585.506088][T10756] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 585.918636][T15962] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2638'. [ 586.210589][T15955] vhci_hcd: connection reset by peer [ 586.213216][ T7162] vhci_hcd vhci_hcd.5: stop threads [ 586.215590][ T7162] vhci_hcd vhci_hcd.5: release socket [ 586.218051][ T7162] vhci_hcd vhci_hcd.5: disconnect device [ 586.404923][T15975] 9pnet_virtio: no channels available for device syz [ 586.822240][T15974] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2641'. [ 586.881852][T15977] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 587.466667][T15993] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 587.503274][T15994] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2644'. [ 587.535842][T15995] 9pnet_virtio: no channels available for device syz [ 587.571167][T15995] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2645'. [ 588.311419][T10765] usb 50-1: device descriptor read/8, error -110 [ 588.370150][T16007] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 588.372663][T16007] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 588.375315][T16007] vhci_hcd vhci_hcd.0: Device attached [ 588.420666][T10765] usb usb50-port1: attempt power cycle [ 588.645681][ T6033] usb 52-1: SetAddress Request (10) to port 0 [ 588.648428][ T6033] usb 52-1: new SuperSpeed USB device number 10 using vhci_hcd [ 588.988574][T10765] usb usb50-port1: unable to enumerate USB device [ 589.470711][T16008] vhci_hcd: connection reset by peer [ 589.475299][ T1140] vhci_hcd vhci_hcd.7: stop threads [ 589.479219][ T1140] vhci_hcd vhci_hcd.7: release socket [ 589.485600][ T1140] vhci_hcd vhci_hcd.7: disconnect device [ 589.675759][ T7178] usb 48-1: device descriptor read/8, error -110 [ 589.704302][T16028] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 589.886946][T16035] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2651'. [ 590.222718][T16038] input: syz0 as /devices/virtual/input/input75 [ 590.299266][ T7178] usb usb48-port1: attempt power cycle [ 590.616807][T16054] netlink: 'syz.5.2659': attribute type 1 has an invalid length. [ 590.886036][ T7178] usb usb48-port1: unable to enumerate USB device [ 591.088769][T16051] syz.5.2659 (16051): drop_caches: 1 [ 591.112380][T16051] syz.5.2659 (16051): drop_caches: 1 [ 591.296759][T16064] genirq: Flags mismatch irq 4. 00200000 (das16m1) vs. 00200080 (ttyS0) [ 591.459326][T16069] input: syz0 as /devices/virtual/input/input76 [ 591.719598][T16073] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2665'. [ 591.729433][T16073] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2665'. [ 592.622578][T16078] afs: Unknown parameter '€' [ 592.755804][T16086] fuse: Bad value for 'fd' [ 592.828139][T16076] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 592.830991][T16076] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 592.887675][T16076] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 592.892123][T16076] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 592.896073][T16076] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 592.899522][T16076] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 593.407355][T16090] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2669'. [ 593.446956][T16100] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2672'. [ 593.489882][T16101] 9pnet_virtio: no channels available for device syz [ 593.750085][T16101] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2671'. [ 593.755057][ T6033] usb 52-1: device descriptor read/8, error -110 [ 593.969445][T16103] 9pnet_virtio: no channels available for device syz [ 594.118924][T16105] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2673'. [ 594.225579][ T5961] Bluetooth: hci1: command 0x0c1a tx timeout [ 594.630676][ T6033] usb usb52-port1: attempt power cycle [ 594.797506][T16113] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2675'. [ 594.946266][ T5961] Bluetooth: hci2: command 0x0405 tx timeout [ 595.196902][ T6033] usb usb52-port1: unable to enumerate USB device [ 595.267818][T16120] Cache volume key already in use (9p,syz,) [ 595.647866][T16120] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2676'. [ 596.305666][ T5961] Bluetooth: hci1: command 0x0c1a tx timeout [ 596.393119][T16145] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 596.799937][T16162] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2690'. [ 597.026269][ T5961] Bluetooth: hci2: command 0x0405 tx timeout [ 598.385730][ T5961] Bluetooth: hci1: command 0x0c1a tx timeout [ 598.597058][T16179] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2693'. [ 598.700004][T16180] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 598.758895][ T40] audit: type=1800 audit(1765621882.796:1589): pid=16178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2693" name="blkio.throttle.io_service_bytes_recursive" dev="9p" ino=71827863 res=0 errno=0 [ 599.063781][T16191] netlink: 'syz.5.2697': attribute type 1 has an invalid length. [ 599.106816][ T5961] Bluetooth: hci2: command 0x0405 tx timeout [ 599.123656][T16193] syz.1.2698 (16193): drop_caches: 1 [ 599.138442][T16193] syz.1.2698 (16193): drop_caches: 1 [ 599.165393][T16193] netlink: 'syz.1.2698': attribute type 1 has an invalid length. [ 599.284170][T16190] syz.5.2697 (16190): drop_caches: 1 [ 599.333442][T16190] syz.5.2697 (16190): drop_caches: 1 [ 599.515946][ T40] audit: type=1326 audit(1765621883.556:1590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16203 comm="syz.5.2702" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x0 [ 600.074791][T16218] 9pnet_virtio: no channels available for device syz [ 600.138750][T16220] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2704'. [ 600.162617][T16221] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2703'. [ 600.882672][T16233] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 601.447055][T16251] input: syz0 as /devices/virtual/input/input77 [ 601.522804][T16254] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2713'. [ 601.525806][T16254] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2713'. [ 601.725745][T16258] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 601.727987][T16258] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 601.730573][T16258] vhci_hcd vhci_hcd.0: Device attached [ 602.005629][ T54] usb 48-1: SetAddress Request (34) to port 0 [ 602.008328][ T54] usb 48-1: new SuperSpeed USB device number 34 using vhci_hcd [ 602.584570][T16266] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2715'. [ 603.056799][T16259] vhci_hcd: connection reset by peer [ 603.059716][ T6075] vhci_hcd vhci_hcd.5: stop threads [ 603.061410][ T6075] vhci_hcd vhci_hcd.5: release socket [ 603.063200][ T6075] vhci_hcd vhci_hcd.5: disconnect device [ 603.601760][T16276] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2717'. [ 603.613115][T16276] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2717'. [ 604.392143][ T40] audit: type=1326 audit(1765621888.426:1591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16282 comm="syz.7.2720" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x0 [ 604.486929][T16290] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 604.489756][T16290] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 604.495719][T16290] vhci_hcd vhci_hcd.0: Device attached [ 604.775769][ T6031] usb 50-1: SetAddress Request (38) to port 0 [ 604.778120][ T6031] usb 50-1: new SuperSpeed USB device number 38 using vhci_hcd [ 605.225761][T16298] netlink: zone id is out of range [ 605.227662][T16298] netlink: zone id is out of range [ 605.231170][T16298] netlink: set zone limit has 8 unknown bytes [ 606.179425][T16304] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2725'. [ 606.561726][T16291] vhci_hcd: connection reset by peer [ 606.564065][ T61] vhci_hcd vhci_hcd.6: stop threads [ 606.566577][ T61] vhci_hcd vhci_hcd.6: release socket [ 606.568973][ T61] vhci_hcd vhci_hcd.6: disconnect device [ 607.105633][ T54] usb 48-1: device descriptor read/8, error -110 [ 607.172802][T16313] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2727'. [ 607.496599][ T54] usb usb48-port1: attempt power cycle [ 607.699065][T16317] syzkaller0: entered promiscuous mode [ 607.701953][T16317] syzkaller0: entered allmulticast mode [ 608.066471][ T54] usb usb48-port1: unable to enumerate USB device [ 609.825742][ T6031] usb 50-1: device descriptor read/8, error -110 [ 610.216048][ T6031] usb usb50-port1: attempt power cycle [ 610.362724][T16359] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 610.416049][T16362] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 610.418911][T16362] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 610.422702][T16362] vhci_hcd vhci_hcd.0: Device attached [ 610.685601][T10769] usb 48-1: SetAddress Request (38) to port 0 [ 610.687681][T10769] usb 48-1: new SuperSpeed USB device number 38 using vhci_hcd [ 610.786382][ T6031] usb usb50-port1: unable to enumerate USB device [ 611.533511][T16380] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 611.535648][T16380] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 611.596397][T16380] vhci_hcd vhci_hcd.0: Device attached [ 611.865656][ T54] usb 52-1: SetAddress Request (14) to port 0 [ 611.868164][ T54] usb 52-1: new SuperSpeed USB device number 14 using vhci_hcd [ 612.371391][T16363] vhci_hcd: connection reset by peer [ 612.373961][T10756] vhci_hcd vhci_hcd.5: stop threads [ 612.376214][T10756] vhci_hcd vhci_hcd.5: release socket [ 612.378471][T10756] vhci_hcd vhci_hcd.5: disconnect device [ 612.385710][T10756] wlan0: Trigger new scan to find an IBSS to join [ 612.652826][T16381] vhci_hcd: connection reset by peer [ 612.655477][T13611] vhci_hcd vhci_hcd.7: stop threads [ 612.657273][T13611] vhci_hcd vhci_hcd.7: release socket [ 612.659108][T13611] vhci_hcd vhci_hcd.7: disconnect device [ 612.996639][T16391] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 612.999102][T16391] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 613.003489][T16391] vhci_hcd vhci_hcd.0: Device attached [ 613.107007][T16394] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 613.164426][T16391] lo speed is unknown, defaulting to 1000 [ 613.167206][T16391] lo speed is unknown, defaulting to 1000 [ 613.218133][T16392] vhci_hcd: connection closed [ 613.219495][T10756] vhci_hcd vhci_hcd.5: stop threads [ 613.222930][T10756] vhci_hcd vhci_hcd.5: release socket [ 613.227351][T10756] vhci_hcd vhci_hcd.5: disconnect device [ 613.665849][T10756] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 613.959559][T16416] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 613.962379][T16416] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 613.966765][T16416] vhci_hcd vhci_hcd.0: Device attached [ 614.237131][ T6033] usb 50-1: SetAddress Request (42) to port 0 [ 614.240031][ T6033] usb 50-1: new SuperSpeed USB device number 42 using vhci_hcd [ 614.283872][T16423] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 614.649277][T16429] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 614.939563][T16417] vhci_hcd: connection reset by peer [ 614.941990][ T1189] vhci_hcd vhci_hcd.6: stop threads [ 614.943893][ T1189] vhci_hcd vhci_hcd.6: release socket [ 614.949598][ T1189] vhci_hcd vhci_hcd.6: disconnect device [ 615.226882][T16443] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 615.371572][T15277] wlan0: Trigger new scan to find an IBSS to join [ 615.663353][T16449] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2758'. [ 615.755825][T10769] usb 48-1: device descriptor read/8, error -110 [ 616.152961][T10769] usb usb48-port1: attempt power cycle [ 616.285617][ T7178] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 616.361237][T16460] FAULT_INJECTION: forcing a failure. [ 616.361237][T16460] name failslab, interval 1, probability 0, space 0, times 0 [ 616.366072][T16460] CPU: 3 UID: 0 PID: 16460 Comm: syz.6.2761 Tainted: G L syzkaller #0 PREEMPT(full) [ 616.366102][T16460] Tainted: [L]=SOFTLOCKUP [ 616.366110][T16460] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 616.366120][T16460] Call Trace: [ 616.366129][T16460] [ 616.366136][T16460] dump_stack_lvl+0x16c/0x1f0 [ 616.366158][T16460] should_fail_ex+0x512/0x640 [ 616.366177][T16460] ? __kmalloc_cache_noprof+0x5f/0x800 [ 616.366191][T16460] should_failslab+0xc2/0x120 [ 616.366209][T16460] __kmalloc_cache_noprof+0x80/0x800 [ 616.366221][T16460] ? tcf_block_get_ext+0x3c6/0x1860 [ 616.366237][T16460] ? tcf_block_get_ext+0x3c6/0x1860 [ 616.366250][T16460] tcf_block_get_ext+0x3c6/0x1860 [ 616.366264][T16460] ? do_raw_spin_lock+0x12c/0x2b0 [ 616.366279][T16460] tcf_block_get+0xa8/0x100 [ 616.366292][T16460] ? __pfx_tcf_block_get+0x10/0x10 [ 616.366304][T16460] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 616.366322][T16460] ? lockdep_init_map_type+0x5c/0x270 [ 616.366333][T16460] ? do_init_timer+0xc9/0x110 [ 616.366352][T16460] sfq_init+0xef/0x24d0 [ 616.366368][T16460] ? qdisc_alloc+0x763/0xa50 [ 616.366377][T16460] ? qdisc_create+0x71/0xfa0 [ 616.366391][T16460] ? tc_modify_qdisc+0x122f/0x2230 [ 616.366406][T16460] ? netlink_unicast+0x5aa/0x870 [ 616.366419][T16460] ? netlink_sendmsg+0x8c8/0xdd0 [ 616.366431][T16460] ? ____sys_sendmsg+0xa5d/0xc30 [ 616.366445][T16460] ? ___sys_sendmsg+0x134/0x1d0 [ 616.366455][T16460] ? __sys_sendmsg+0x16d/0x220 [ 616.366466][T16460] ? do_fast_syscall_32+0x32/0x80 [ 616.366480][T16460] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 616.366496][T16460] ? lockdep_init_map_type+0x5c/0x270 [ 616.366528][T16460] ? __pfx_sfq_init+0x10/0x10 [ 616.366554][T16460] ? __pfx_sfq_init+0x10/0x10 [ 616.366571][T16460] qdisc_create+0x457/0xfa0 [ 616.366588][T16460] tc_modify_qdisc+0x122f/0x2230 [ 616.366607][T16460] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 616.366622][T16460] ? __lock_acquire+0x436/0x2890 [ 616.366642][T16460] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 616.366657][T16460] rtnetlink_rcv_msg+0x3c9/0xe90 [ 616.366673][T16460] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 616.366688][T16460] ? __lock_acquire+0x436/0x2890 [ 616.366701][T16460] netlink_rcv_skb+0x158/0x420 [ 616.366714][T16460] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 616.366728][T16460] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 616.366746][T16460] ? netlink_deliver_tap+0x1ae/0xd30 [ 616.366761][T16460] netlink_unicast+0x5aa/0x870 [ 616.366776][T16460] ? __pfx_netlink_unicast+0x10/0x10 [ 616.366789][T16460] ? __pfx___might_resched+0x10/0x10 [ 616.366813][T16460] netlink_sendmsg+0x8c8/0xdd0 [ 616.366831][T16460] ? __pfx_netlink_sendmsg+0x10/0x10 [ 616.366846][T16460] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 616.366865][T16460] ____sys_sendmsg+0xa5d/0xc30 [ 616.366881][T16460] ? __pfx_____sys_sendmsg+0x10/0x10 [ 616.366895][T16460] ? get_compat_msghdr+0x11a/0x170 [ 616.366913][T16460] ___sys_sendmsg+0x134/0x1d0 [ 616.366925][T16460] ? __pfx____sys_sendmsg+0x10/0x10 [ 616.366943][T16460] ? find_held_lock+0x2b/0x80 [ 616.366966][T16460] __sys_sendmsg+0x16d/0x220 [ 616.366978][T16460] ? __pfx___sys_sendmsg+0x10/0x10 [ 616.366995][T16460] ? do_user_addr_fault+0x843/0x1370 [ 616.367011][T16460] __do_fast_syscall_32+0xe8/0x680 [ 616.367027][T16460] do_fast_syscall_32+0x32/0x80 [ 616.367041][T16460] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 616.367055][T16460] RIP: 0023:0xf7f23579 [ 616.367064][T16460] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 616.367076][T16460] RSP: 002b:00000000f541655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 616.367087][T16460] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 616.367094][T16460] RDX: 0000000000040000 RSI: 0000000000000000 RDI: 0000000000000000 [ 616.367100][T16460] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 616.367107][T16460] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 616.367113][T16460] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 616.367127][T16460] [ 616.682012][T16474] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2764'. [ 616.739823][T16477] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2765'. [ 616.751388][T16477] FAULT_INJECTION: forcing a failure. [ 616.751388][T16477] name failslab, interval 1, probability 0, space 0, times 0 [ 616.768443][T16477] CPU: 2 UID: 0 PID: 16477 Comm: syz.7.2765 Tainted: G L syzkaller #0 PREEMPT(full) [ 616.768476][T16477] Tainted: [L]=SOFTLOCKUP [ 616.768483][T16477] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 616.768494][T16477] Call Trace: [ 616.768501][T16477] [ 616.768509][T16477] dump_stack_lvl+0x16c/0x1f0 [ 616.768536][T16477] should_fail_ex+0x512/0x640 [ 616.768563][T16477] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 616.768589][T16477] should_failslab+0xc2/0x120 [ 616.768617][T16477] kmem_cache_alloc_node_noprof+0x86/0x800 [ 616.768638][T16477] ? __alloc_skb+0x156/0x410 [ 616.768671][T16477] ? __alloc_skb+0x156/0x410 [ 616.768697][T16477] __alloc_skb+0x156/0x410 [ 616.768721][T16477] ? __alloc_skb+0x35d/0x410 [ 616.768748][T16477] ? __pfx___alloc_skb+0x10/0x10 [ 616.768782][T16477] ? netlink_autobind.isra.0+0x158/0x370 [ 616.768811][T16477] netlink_alloc_large_skb+0x69/0x140 [ 616.768835][T16477] netlink_sendmsg+0x698/0xdd0 [ 616.768862][T16477] ? __pfx_netlink_sendmsg+0x10/0x10 [ 616.768887][T16477] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 616.768918][T16477] ____sys_sendmsg+0xa5d/0xc30 [ 616.768945][T16477] ? __pfx_____sys_sendmsg+0x10/0x10 [ 616.768969][T16477] ? get_compat_msghdr+0x11a/0x170 [ 616.769000][T16477] ___sys_sendmsg+0x134/0x1d0 [ 616.769021][T16477] ? __pfx____sys_sendmsg+0x10/0x10 [ 616.769053][T16477] ? find_held_lock+0x2b/0x80 [ 616.769093][T16477] __sys_sendmsg+0x16d/0x220 [ 616.769113][T16477] ? __pfx___sys_sendmsg+0x10/0x10 [ 616.769142][T16477] ? do_user_addr_fault+0x843/0x1370 [ 616.769170][T16477] __do_fast_syscall_32+0xe8/0x680 [ 616.769197][T16477] do_fast_syscall_32+0x32/0x80 [ 616.769221][T16477] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 616.769244][T16477] RIP: 0023:0xf70dd579 [ 616.769259][T16477] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 616.769277][T16477] RSP: 002b:00000000f54cd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 616.769295][T16477] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000000 [ 616.769307][T16477] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 616.769318][T16477] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 616.769328][T16477] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 616.769339][T16477] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 616.769364][T16477] [ 616.882119][ T12] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 616.945965][ T54] usb 52-1: device descriptor read/8, error -110 [ 617.156172][T16485] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 617.347924][ T54] usb usb52-port1: attempt power cycle [ 617.387828][ T40] audit: type=1326 audit(1765621901.426:1592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16497 comm="syz.6.2772" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 617.395676][ T40] audit: type=1326 audit(1765621901.426:1593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16497 comm="syz.6.2772" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 617.403344][ T40] audit: type=1326 audit(1765621901.436:1594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16497 comm="syz.6.2772" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 617.410314][ T40] audit: type=1326 audit(1765621901.436:1595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16497 comm="syz.6.2772" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 617.418155][ T40] audit: type=1326 audit(1765621901.436:1596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16497 comm="syz.6.2772" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 617.426652][ T40] audit: type=1326 audit(1765621901.436:1597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16497 comm="syz.6.2772" exe="/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 617.435483][ T40] audit: type=1326 audit(1765621901.436:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16497 comm="syz.6.2772" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 617.443809][ T40] audit: type=1326 audit(1765621901.436:1599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16497 comm="syz.6.2772" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 617.451523][ T40] audit: type=1326 audit(1765621901.456:1600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16497 comm="syz.6.2772" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 617.462399][ T40] audit: type=1326 audit(1765621901.456:1601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16497 comm="syz.6.2772" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 617.601725][T10769] usb usb48-port1: unable to enumerate USB device [ 617.875586][T16498] netfs: Couldn't get user pages (rc=-14) [ 617.917650][ T54] usb usb52-port1: unable to enumerate USB device [ 618.159451][T16512] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2777'. [ 618.356836][T16516] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2776'. [ 618.385819][T10756] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 619.276205][ T6033] usb 50-1: device descriptor read/8, error -110 [ 619.497971][T16534] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 619.500672][T16534] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 619.520320][T16537] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2779'. [ 619.525793][T16534] vhci_hcd vhci_hcd.0: Device attached [ 619.676553][ T6033] usb usb50-port1: attempt power cycle [ 619.805647][ T24] usb 52-1: SetAddress Request (18) to port 0 [ 619.807782][ T24] usb 52-1: new SuperSpeed USB device number 18 using vhci_hcd [ 620.041998][T16547] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2786'. [ 620.044907][T16547] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2786'. [ 620.048109][T16535] vhci_hcd: connection reset by peer [ 620.050377][T16547] netlink: 'syz.5.2786': attribute type 10 has an invalid length. [ 620.052936][ T1150] vhci_hcd vhci_hcd.7: stop threads [ 620.054703][ T1150] vhci_hcd vhci_hcd.7: release socket [ 620.059443][T16547] syz_tun: entered promiscuous mode [ 620.061522][ T1150] vhci_hcd vhci_hcd.7: disconnect device [ 620.069769][T16547] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 620.256595][ T6033] usb usb50-port1: unable to enumerate USB device [ 620.436004][T16554] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 620.438103][T16554] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 620.440925][T16554] vhci_hcd vhci_hcd.0: Device attached [ 621.656192][T10769] usb 48-1: SetAddress Request (42) to port 0 [ 621.658712][T10769] usb 48-1: new SuperSpeed USB device number 42 using vhci_hcd [ 622.095784][T16555] vhci_hcd: connection reset by peer [ 622.102646][T13611] vhci_hcd vhci_hcd.5: stop threads [ 622.115133][T13611] vhci_hcd vhci_hcd.5: release socket [ 622.128868][T13611] vhci_hcd vhci_hcd.5: disconnect device [ 622.389411][T16572] netlink: 'syz.1.2793': attribute type 10 has an invalid length. [ 622.395056][T16572] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 622.567523][T16575] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 623.030063][T16589] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2792'. [ 623.676540][T16596] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 624.391602][T16616] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 624.393754][T16616] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 624.399159][T16616] vhci_hcd vhci_hcd.0: Device attached [ 624.679336][T16621] netlink: 'syz.1.2804': attribute type 29 has an invalid length. [ 625.991449][T16617] vhci_hcd: connection reset by peer [ 625.993404][T10756] vhci_hcd vhci_hcd.7: stop threads [ 625.995140][T10756] vhci_hcd vhci_hcd.7: release socket [ 626.000327][ T24] usb 52-1: device descriptor read/8, error -110 [ 626.002509][T10756] vhci_hcd vhci_hcd.7: disconnect device [ 626.387966][ T24] usb usb52-port1: attempt power cycle [ 626.670140][T16639] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2808'. [ 626.705996][T10769] usb 48-1: device descriptor read/8, error -110 [ 627.106615][T10769] usb usb48-port1: attempt power cycle [ 627.219692][T16643] xt_CT: You must specify a L4 protocol and not use inversions on it [ 627.225334][T16643] netlink: 188 bytes leftover after parsing attributes in process `syz.6.2809'. [ 627.296062][ T24] usb usb52-port1: unable to enumerate USB device [ 627.686055][T10769] usb usb48-port1: unable to enumerate USB device [ 628.417928][T16665] lo speed is unknown, defaulting to 1000 [ 628.448553][T16665] lo speed is unknown, defaulting to 1000 [ 628.541100][T16662] lo speed is unknown, defaulting to 1000 [ 628.543693][T16662] lo speed is unknown, defaulting to 1000 [ 628.622285][T16663] orangefs_mount: mount request failed with -4 [ 629.036901][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.710463][T16683] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2818'. [ 629.813495][T16679] 9pnet_virtio: no channels available for device syz [ 630.460300][T16691] fuseblk: Unknown parameter 'ro000' [ 630.611849][T16697] overlayfs: maximum fs stacking depth exceeded [ 630.670141][T16701] afs: Unknown parameter '€' [ 630.793466][T16708] fuse: Bad value for 'fd' [ 631.244665][T16711] lo speed is unknown, defaulting to 1000 [ 631.246998][T16711] lo speed is unknown, defaulting to 1000 [ 631.249589][T16711] lo speed is unknown, defaulting to 1000 [ 631.256263][T16711] infiniband syú0: RDMA CMA: cma_listen_on_dev, error -98 [ 631.276660][T16711] lo speed is unknown, defaulting to 1000 [ 631.280363][T16711] lo speed is unknown, defaulting to 1000 [ 631.283241][T16711] lo speed is unknown, defaulting to 1000 [ 631.286735][T16711] lo speed is unknown, defaulting to 1000 [ 631.289795][T16711] lo speed is unknown, defaulting to 1000 [ 631.292758][T16711] lo speed is unknown, defaulting to 1000 [ 631.650505][T16717] debugfs: 'ttyS3' already exists in 'caif_serial' [ 632.359940][T16721] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 632.362621][T16721] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 632.403102][T16721] vhci_hcd vhci_hcd.0: Device attached [ 632.880307][ T9619] usb 48-1: SetAddress Request (46) to port 0 [ 632.882340][ T9619] usb 48-1: new SuperSpeed USB device number 46 using vhci_hcd [ 633.159538][T16733] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2831'. [ 633.233197][T16735] input: syz0 as /devices/virtual/input/input79 [ 633.868048][T16746] afs: Unknown parameter '€' [ 633.872015][T16722] vhci_hcd: connection reset by peer [ 633.876255][ T6075] vhci_hcd vhci_hcd.5: stop threads [ 633.877925][ T6075] vhci_hcd vhci_hcd.5: release socket [ 633.881521][ T6075] vhci_hcd vhci_hcd.5: disconnect device [ 633.951824][T16748] fuse: Bad value for 'fd' [ 634.467275][T16755] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2837'. [ 634.615900][ T54] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 634.780536][ T54] usb 6-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 634.784346][ T54] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 634.788110][ T54] usb 6-1: Product: syz [ 634.789909][ T54] usb 6-1: Manufacturer: syz [ 634.791913][ T54] usb 6-1: SerialNumber: syz [ 634.796057][ T54] usb 6-1: config 0 descriptor?? [ 634.802810][ T54] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 634.805445][ T54] dvb-usb: bulk message failed: -22 (2/0) [ 634.811659][ T54] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 634.816419][ T54] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 634.819319][ T54] usb 6-1: media controller created [ 634.833086][ T54] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 634.989557][T16761] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 635.011330][T16753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 635.014428][T16753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 635.112796][T16765] dvb-usb: bulk message failed: -22 (4/0) [ 635.116723][T16765] cxusb: i2c read failed [ 637.299497][ T54] cxusb: set interface failed [ 637.301218][ T54] dvb-usb: bulk message failed: -22 (1/0) [ 637.339639][ T54] DVB: Unable to find symbol mt352_attach() [ 637.341758][ T54] dvb-usb: bulk message failed: -22 (5/0) [ 637.344020][ T54] zl10353_read_register: readreg error (reg=127, ret==-121) [ 637.355729][ T54] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 637.408740][ T54] rc_core: IR keymap rc-dvico-mce not found [ 637.410710][ T54] Registered IR keymap rc-empty [ 637.412737][ T54] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0 [ 637.424865][ T54] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0/input80 [ 637.430790][ T54] dvb-usb: schedule remote query interval to 100 msecs. [ 637.433000][ T54] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 637.437244][ T54] usb 6-1: USB disconnect, device number 45 [ 637.508150][ T54] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 637.610110][T16789] netlink: 'syz.6.2846': attribute type 1 has an invalid length. [ 637.730663][ T40] kauditd_printk_skb: 68 callbacks suppressed [ 637.730676][ T40] audit: type=1800 audit(1765621921.766:1670): pid=16778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2842" name="blkio.throttle.io_service_bytes_recursive" dev="9p" ino=71827863 res=0 errno=0 [ 637.767012][T16786] syz.6.2846 (16786): drop_caches: 1 [ 637.807457][T16786] syz.6.2846 (16786): drop_caches: 1 [ 637.839654][T16793] 9pnet_virtio: no channels available for device syz [ 638.253706][ T9619] usb 48-1: device descriptor read/8, error -110 [ 638.258194][T16790] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2847'. [ 638.536385][T16803] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2850'. [ 638.544462][T16803] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2850'. [ 638.702430][ T9619] usb usb48-port1: attempt power cycle [ 639.358797][ T9619] usb usb48-port1: unable to enumerate USB device [ 640.705327][T16830] syz.7.2857 (16830): drop_caches: 1 [ 640.718020][T16831] netlink: 'syz.7.2857': attribute type 1 has an invalid length. [ 640.746440][T16830] syz.7.2857 (16830): drop_caches: 1 [ 641.280130][T16841] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 641.282239][T16841] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 641.284984][T16841] vhci_hcd vhci_hcd.0: Device attached [ 641.545660][ T54] usb 52-1: SetAddress Request (22) to port 0 [ 641.545714][ T54] usb 52-1: new SuperSpeed USB device number 22 using vhci_hcd [ 642.789943][T16862] netlink: 'syz.1.2866': attribute type 1 has an invalid length. [ 642.994718][T16857] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2864'. [ 643.007025][T16842] vhci_hcd: connection reset by peer [ 643.011521][ T12] vhci_hcd vhci_hcd.7: stop threads [ 643.013764][ T12] vhci_hcd vhci_hcd.7: release socket [ 643.018120][ T12] vhci_hcd vhci_hcd.7: disconnect device [ 643.052755][T16861] syz.1.2866 (16861): drop_caches: 1 [ 643.106824][T16861] syz.1.2866 (16861): drop_caches: 1 [ 643.250870][T16866] netlink: 'syz.1.2867': attribute type 1 has an invalid length. [ 643.413823][T16865] syz.1.2867 (16865): drop_caches: 1 [ 643.492886][T16865] syz.1.2867 (16865): drop_caches: 1 [ 643.755339][T16875] afs: Unknown parameter '€' [ 644.761436][T16891] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 644.764360][T16891] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 644.795412][T16891] vhci_hcd vhci_hcd.0: Device attached [ 644.881639][T16896] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 645.115738][T10765] usb 48-1: SetAddress Request (50) to port 0 [ 645.117880][T10765] usb 48-1: new SuperSpeed USB device number 50 using vhci_hcd [ 645.277537][T16905] netlink: 'syz.6.2877': attribute type 1 has an invalid length. [ 645.437123][T16903] syz.6.2877 (16903): drop_caches: 1 [ 645.649360][T16903] syz.6.2877 (16903): drop_caches: 1 [ 645.857336][T16916] afs: Unknown parameter '€' [ 646.625766][T16892] vhci_hcd: connection reset by peer [ 646.628299][ T7898] vhci_hcd vhci_hcd.5: stop threads [ 646.630576][ T7898] vhci_hcd vhci_hcd.5: release socket [ 646.632537][ T7898] vhci_hcd vhci_hcd.5: disconnect device [ 646.635715][ T54] usb 52-1: device descriptor read/8, error -110 [ 647.046086][ T54] usb usb52-port1: attempt power cycle [ 647.100649][ T40] audit: type=1326 audit(1765621931.136:1671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16926 comm="syz.6.2883" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x0 [ 647.603486][T16941] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 647.627445][ T54] usb usb52-port1: unable to enumerate USB device [ 648.230911][T16946] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2887'. [ 648.292730][T16954] 9pnet_virtio: no channels available for device syz [ 649.077413][T16958] afs: Unknown parameter '€' [ 649.679806][T16969] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 649.682444][T16969] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 649.685834][T16969] vhci_hcd vhci_hcd.0: Device attached [ 649.896592][T16975] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 649.965670][ T24] usb 50-1: SetAddress Request (46) to port 0 [ 649.968368][ T24] usb 50-1: new SuperSpeed USB device number 46 using vhci_hcd [ 650.145700][T10765] usb 48-1: device descriptor read/8, error -110 [ 650.195796][T16970] vhci_hcd: connection reset by peer [ 650.199544][ T6075] vhci_hcd vhci_hcd.6: stop threads [ 650.201662][ T6075] vhci_hcd vhci_hcd.6: release socket [ 650.203987][ T6075] vhci_hcd vhci_hcd.6: disconnect device [ 650.606102][T10765] usb usb48-port1: attempt power cycle [ 650.617805][T16986] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 650.620038][T16986] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 650.622754][T16986] vhci_hcd vhci_hcd.0: Device attached [ 650.735719][T10765] usb 48-1: SetAddress Request (52) to port 0 [ 650.740040][T10765] usb 48-1: new SuperSpeed USB device number 52 using vhci_hcd [ 651.115595][T16994] vhci_hcd: connection reset by peer [ 651.118035][ T7898] vhci_hcd vhci_hcd.5: stop threads [ 651.119731][ T7898] vhci_hcd vhci_hcd.5: release socket [ 651.122309][ T7898] vhci_hcd vhci_hcd.5: disconnect device [ 651.558865][T17006] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 651.715638][T17013] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2901'. [ 652.331514][T17010] random: crng reseeded on system resumption [ 652.366559][T17017] 9pnet_virtio: no channels available for device syz [ 652.445672][T17021] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2904'. [ 652.543875][T17024] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 653.317492][T17032] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 653.743960][T17046] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 654.940855][T17064] 9pnet_virtio: no channels available for device syz [ 655.002427][T17070] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2914'. [ 655.025668][ T24] usb 50-1: device descriptor read/8, error -110 [ 655.302732][T17072] 9pnet_virtio: no channels available for device syz [ 655.422541][ T24] usb usb50-port1: attempt power cycle [ 655.576672][T17075] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2919'. [ 655.825655][T10765] usb 48-1: device descriptor read/8, error -110 [ 655.827572][T17079] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 655.996468][ T24] usb usb50-port1: unable to enumerate USB device [ 656.216788][T10765] usb usb48-port1: unable to enumerate USB device [ 656.367533][T17099] random: crng reseeded on system resumption [ 657.077256][T17102] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2927'. [ 657.336238][T17105] syz.6.2928 (17105): drop_caches: 1 [ 657.359981][T17105] syz.6.2928 (17105): drop_caches: 1 [ 657.467574][T17109] syz.5.2930 (17109): drop_caches: 1 [ 657.548593][T17109] syz.5.2930 (17109): drop_caches: 1 [ 658.455812][ T40] audit: type=1326 audit(1765621942.496:1672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17125 comm="syz.6.2936" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x0 [ 658.458184][T17133] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 659.098628][T17139] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2937'. [ 659.845679][T17160] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 660.596873][ T40] audit: type=1326 audit(1765621944.636:1673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17165 comm="syz.1.2946" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f21579 code=0x0 [ 660.899719][T17174] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 660.901971][T17174] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 660.904626][T17174] vhci_hcd vhci_hcd.0: Device attached [ 661.187174][ T24] usb 52-1: SetAddress Request (26) to port 0 [ 661.189670][ T24] usb 52-1: new SuperSpeed USB device number 26 using vhci_hcd [ 661.383324][T17178] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 661.405988][T17179] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 661.926393][T17175] vhci_hcd: connection reset by peer [ 661.929064][T15277] vhci_hcd vhci_hcd.7: stop threads [ 661.930900][T15277] vhci_hcd vhci_hcd.7: release socket [ 661.933408][T15277] vhci_hcd vhci_hcd.7: disconnect device [ 662.046420][T17154] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2941'. [ 662.389082][T17185] syz.5.2950 (17185): drop_caches: 1 [ 662.407928][T17185] syz.5.2950 (17185): drop_caches: 1 [ 662.415074][T17185] netlink: 'syz.5.2950': attribute type 1 has an invalid length. [ 662.557546][T17193] FAULT_INJECTION: forcing a failure. [ 662.557546][T17193] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 662.563158][T17193] CPU: 3 UID: 0 PID: 17193 Comm: syz.5.2952 Tainted: G L syzkaller #0 PREEMPT(full) [ 662.563184][T17193] Tainted: [L]=SOFTLOCKUP [ 662.563190][T17193] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 662.563200][T17193] Call Trace: [ 662.563207][T17193] [ 662.563215][T17193] dump_stack_lvl+0x16c/0x1f0 [ 662.563243][T17193] should_fail_ex+0x512/0x640 [ 662.563273][T17193] should_fail_alloc_page+0xe7/0x130 [ 662.563301][T17193] prepare_alloc_pages+0x401/0x670 [ 662.563327][T17193] ? kernel_text_address+0x8d/0x100 [ 662.563350][T17193] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 662.563384][T17193] ? stack_trace_save+0x8e/0xc0 [ 662.563414][T17193] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 662.563436][T17193] ? trace_mm_page_alloc+0x11b/0x180 [ 662.563469][T17193] ? kmem_cache_alloc_noprof+0x25e/0x770 [ 662.563489][T17193] ? __pmd_alloc+0xbf/0x9c0 [ 662.563515][T17193] ? __handle_mm_fault+0xbeb/0x2bb0 [ 662.563532][T17193] ? handle_mm_fault+0x3fe/0xad0 [ 662.563548][T17193] ? do_user_addr_fault+0x7a6/0x1370 [ 662.563569][T17193] ? exc_page_fault+0x64/0xc0 [ 662.563587][T17193] ? asm_exc_page_fault+0x26/0x30 [ 662.563603][T17193] ? _copy_to_user+0xb6/0xd0 [ 662.563628][T17193] ? syslog_print+0x35e/0x620 [ 662.563644][T17193] ? do_syslog+0x3dc/0x6c0 [ 662.563663][T17193] ? __ia32_sys_syslog+0x73/0xb0 [ 662.563683][T17193] ? __do_fast_syscall_32+0xe8/0x680 [ 662.563705][T17193] ? do_fast_syscall_32+0x32/0x80 [ 662.563726][T17193] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 662.563756][T17193] ? policy_nodemask+0xea/0x4e0 [ 662.563785][T17193] alloc_pages_mpol+0x1fb/0x550 [ 662.563810][T17193] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 662.563833][T17193] alloc_pages_noprof+0x131/0x390 [ 662.563850][T17193] pte_alloc_one+0x1e/0x3d0 [ 662.563866][T17193] __pte_alloc+0x6d/0x3f0 [ 662.563881][T17193] ? __pfx___pte_alloc+0x10/0x10 [ 662.563896][T17193] ? do_raw_spin_lock+0x12c/0x2b0 [ 662.563909][T17193] ? find_held_lock+0x2b/0x80 [ 662.563924][T17193] do_anonymous_page+0x1092/0x2190 [ 662.563936][T17193] ? do_raw_spin_unlock+0x172/0x230 [ 662.563949][T17193] ? _raw_spin_unlock+0x28/0x50 [ 662.563961][T17193] ? __pmd_alloc+0x6aa/0x9c0 [ 662.563986][T17193] __handle_mm_fault+0x1ecf/0x2bb0 [ 662.564011][T17193] ? __pfx___handle_mm_fault+0x10/0x10 [ 662.564043][T17193] ? find_vma+0xbf/0x140 [ 662.564065][T17193] ? __pfx_find_vma+0x10/0x10 [ 662.564103][T17193] handle_mm_fault+0x3fe/0xad0 [ 662.564125][T17193] do_user_addr_fault+0x7a6/0x1370 [ 662.564150][T17193] ? rcu_is_watching+0x12/0xc0 [ 662.564177][T17193] exc_page_fault+0x64/0xc0 [ 662.564200][T17193] asm_exc_page_fault+0x26/0x30 [ 662.564217][T17193] RIP: 0010:_copy_to_user+0xb6/0xd0 [ 662.564244][T17193] Code: 89 ee 48 89 ef e8 ba 40 14 fd 4d 85 ff 75 a8 e8 a0 46 14 fd 89 de 4c 89 e7 e8 46 24 7d fd 0f 01 cb 48 89 d9 48 89 ef 4c 89 e6 a4 0f 1f 00 0f 01 ca 48 89 cb eb 80 66 2e 0f 1f 84 00 00 00 00 [ 662.564263][T17193] RSP: 0018:ffffc90007fb7bd0 EFLAGS: 00050246 [ 662.564279][T17193] RAX: 0000000000000001 RBX: 000000000000005d RCX: 000000000000005d [ 662.564293][T17193] RDX: ffffed100531140c RSI: ffff88802988a000 RDI: 0000000080000400 [ 662.564304][T17193] RBP: 0000000080000400 R08: 0000000000000000 R09: ffffed100531140b [ 662.564316][T17193] R10: ffff88802988a05c R11: ffff888028c1aff0 R12: ffff88802988a000 [ 662.564327][T17193] R13: 000000008000045d R14: 00007ffffffff000 R15: 0000000000000000 [ 662.564357][T17193] syslog_print+0x35e/0x620 [ 662.564376][T17193] ? __pfx_syslog_print+0x10/0x10 [ 662.564393][T17193] ? get_pid_task+0x106/0x250 [ 662.564411][T17193] ? find_held_lock+0x2b/0x80 [ 662.564450][T17193] ? bpf_lsm_capable+0x9/0x10 [ 662.564474][T17193] ? security_capable+0x7e/0x260 [ 662.564526][T17193] do_syslog+0x3dc/0x6c0 [ 662.564547][T17193] ? __pfx_do_syslog+0x10/0x10 [ 662.564566][T17193] ? __fget_files+0x20e/0x3c0 [ 662.564598][T17193] ? ksys_write+0x1ac/0x250 [ 662.564623][T17193] ? __pfx_ksys_write+0x10/0x10 [ 662.564653][T17193] __ia32_sys_syslog+0x73/0xb0 [ 662.564675][T17193] ? lockdep_hardirqs_on+0x7c/0x110 [ 662.564698][T17193] __do_fast_syscall_32+0xe8/0x680 [ 662.564727][T17193] do_fast_syscall_32+0x32/0x80 [ 662.564751][T17193] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 662.564773][T17193] RIP: 0023:0xf70ad579 [ 662.564787][T17193] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 662.564805][T17193] RSP: 002b:00000000f549d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000067 [ 662.564822][T17193] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 0000000080000400 [ 662.564835][T17193] RDX: 00000000000000f8 RSI: 0000000000000000 RDI: 0000000000000000 [ 662.564846][T17193] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 662.564857][T17193] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 662.564869][T17193] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 662.564892][T17193] [ 662.857565][T10763] usb 11-1: new high-speed USB device number 27 using dummy_hcd [ 663.013342][T17191] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2951'. [ 663.017578][T10763] usb 11-1: Using ep0 maxpacket: 16 [ 663.021694][T10763] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 663.026441][T10763] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 663.030539][T10763] usb 11-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 663.034447][T10763] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.040145][T10763] usb 11-1: config 0 descriptor?? [ 663.057563][ T40] audit: type=1326 audit(1765621947.096:1674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17203 comm="syz.7.2955" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x0 [ 663.450840][T10763] kye 0003:0458:5016.0015: control desc unexpectedly large [ 663.459754][T10763] input: HID 0458:5016 as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/0003:0458:5016.0015/input/input82 [ 663.638770][T10763] input: HID 0458:5016 as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/0003:0458:5016.0015/input/input83 [ 663.690682][T10763] kye 0003:0458:5016.0015: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.6-1/input0 [ 663.907816][T17187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 663.912582][T17187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 664.065682][ T6033] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 664.219619][ T6033] usb 10-1: config index 0 descriptor too short (expected 39, got 27) [ 664.223203][ T6033] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 664.227521][ T6033] usb 10-1: config 0 interface 0 has no altsetting 0 [ 664.235401][ T6033] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 664.239528][ T6033] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 664.242972][ T6033] usb 10-1: Product: syz [ 664.244813][ T6033] usb 10-1: Manufacturer: syz [ 664.248365][ T6033] usb 10-1: SerialNumber: syz [ 664.256267][ T6033] usb 10-1: config 0 descriptor?? [ 664.261902][ T6033] hub 10-1:0.0: bad descriptor, ignoring hub [ 664.264489][ T6033] hub 10-1:0.0: probe with driver hub failed with error -5 [ 664.277938][ T6033] usb 10-1: selecting invalid altsetting 0 [ 664.477239][ C3] kye 0003:0458:5016.0015: usb_submit_urb(ctrl) failed: -1 [ 664.605592][ T54] usb 11-1: reset high-speed USB device number 27 using dummy_hcd [ 664.873590][T17226] syz.1.2960 (17226): drop_caches: 1 [ 664.888189][T17226] syz.1.2960 (17226): drop_caches: 1 [ 664.895345][T17226] netlink: 'syz.1.2960': attribute type 1 has an invalid length. [ 665.182321][T17217] usb 10-1: reset high-speed USB device number 18 using dummy_hcd [ 665.303024][T17232] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2962'. [ 665.406230][T10769] usb 11-1: USB disconnect, device number 27 [ 665.869605][ T40] audit: type=1800 audit(1765621949.866:1675): pid=17235 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2962" name="blkio.throttle.io_service_bytes_recursive" dev="9p" ino=71827863 res=0 errno=0 [ 666.101577][ T40] audit: type=1326 audit(1765621950.136:1676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17243 comm="syz.7.2966" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x0 [ 666.197606][T10769] usb 10-1: USB disconnect, device number 18 [ 666.236416][ T24] usb 52-1: device descriptor read/8, error -110 [ 666.637042][ T24] usb usb52-port1: attempt power cycle [ 667.108143][ T1140] ref_tracker: reference already released. [ 667.111019][ T1140] ref_tracker: allocated in: [ 667.112979][ T1140] netdev_watchdog_up+0x183/0x200 [ 667.115014][ T1140] netif_carrier_on+0xfb/0x120 [ 667.116682][ T1140] e1000_watchdog+0xd13/0x1520 [ 667.118709][ T1140] process_one_work+0x9ba/0x1b20 [ 667.120866][ T1140] worker_thread+0x6c8/0xf10 [ 667.122827][ T1140] kthread+0x3c5/0x780 [ 667.124582][ T1140] ret_from_fork+0x983/0xb10 [ 667.126567][ T1140] ret_from_fork_asm+0x1a/0x30 [ 667.128659][ T1140] ref_tracker: freed in: [ 667.130125][ T1140] dev_deactivate_many+0x28d/0xc40 [ 667.131767][ T1140] dev_deactivate+0xf8/0x1c0 [ 667.133240][ T1140] linkwatch_do_dev+0x11e/0x160 [ 667.134889][ T1140] __linkwatch_run_queue+0x2a7/0x8a0 [ 667.136558][ T1140] linkwatch_event+0x8f/0xc0 [ 667.138537][ T1140] process_one_work+0x9ba/0x1b20 [ 667.140604][ T1140] worker_thread+0x6c8/0xf10 [ 667.142545][ T1140] kthread+0x3c5/0x780 [ 667.144261][ T1140] ret_from_fork+0x983/0xb10 [ 667.146249][ T1140] ret_from_fork_asm+0x1a/0x30 [ 667.148891][ T1140] ------------[ cut here ]------------ [ 667.151609][ T1140] WARNING: lib/ref_tracker.c:323 at ref_tracker_free+0x61a/0x830, CPU#2: kworker/u32:7/1140 [ 667.155969][ T1140] Modules linked in: [ 667.157972][ T1140] CPU: 2 UID: 0 PID: 1140 Comm: kworker/u32:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 667.162504][ T1140] Tainted: [L]=SOFTLOCKUP [ 667.164315][ T1140] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 667.167831][ T1140] Workqueue: events_unbound linkwatch_event [ 667.169777][ T1140] RIP: 0010:ref_tracker_free+0x61a/0x830 [ 667.171985][ T1140] Code: 00 44 8b 73 18 31 ff 44 89 f6 e8 c1 d4 df fc 45 85 f6 0f 85 a6 00 00 00 e8 13 da df fc 48 8b 34 24 48 89 ef e8 d7 3a 99 06 90 <0f> 0b 90 bb ea ff ff ff e9 50 fd ff ff e8 f4 d9 df fc 4c 8d 6d 44 [ 667.179855][ T1140] RSP: 0000:ffffc90004faf828 EFLAGS: 00010202 [ 667.182305][ T1140] RAX: 0000000000000201 RBX: ffff888043c193c0 RCX: 0000000000000000 [ 667.185469][ T1140] RDX: 0000000000000202 RSI: ffffffff8dac831b RDI: 0000000000000001 [ 667.188674][ T1140] RBP: ffff888043a28618 R08: 0000000000000001 R09: 0000000000000001 [ 667.191864][ T1140] R10: ffffffff9088b3d7 R11: ffff888027a0aff0 R12: 1ffff920009f5f07 [ 667.195041][ T1140] R13: ffffc90004faf858 R14: 00000000078204a6 R15: ffff888043c193d8 [ 667.198011][ T1140] FS: 0000000000000000(0000) GS:ffff888097902000(0000) knlGS:0000000000000000 [ 667.201335][ T1140] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 667.204211][ T1140] CR2: 000000000c35e3fc CR3: 0000000073c88000 CR4: 0000000000352ef0 [ 667.207576][ T1140] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 667.210911][ T1140] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 667.214244][ T1140] Call Trace: [ 667.215732][ T1140] [ 667.217019][ T1140] ? __pfx_ref_tracker_free+0x10/0x10 [ 667.219304][ T1140] ? dev_deactivate_many+0x28d/0xc40 [ 667.221613][ T1140] ? dev_deactivate+0xf8/0x1c0 [ 667.223670][ T1140] ? linkwatch_do_dev+0x11e/0x160 [ 667.225887][ T1140] ? __linkwatch_run_queue+0x2a7/0x8a0 [ 667.228237][ T1140] ? linkwatch_event+0x8f/0xc0 [ 667.230244][ T1140] ? process_one_work+0x9ba/0x1b20 [ 667.232340][ T1140] ? worker_thread+0x6c8/0xf10 [ 667.234287][ T1140] ? kthread+0x3c5/0x780 [ 667.236101][ T1140] ? ret_from_fork+0x983/0xb10 [ 667.238082][ T1140] ? ret_from_fork_asm+0x1a/0x30 [ 667.239996][ T1140] ? netif_freeze_queues+0x17d/0x1e0 [ 667.241883][ T1140] dev_deactivate_many+0x28d/0xc40 [ 667.243814][ T1140] ? __pfx_dev_deactivate_many+0x10/0x10 [ 667.246078][ T1140] ? ref_tracker_free+0x331/0x830 [ 667.248063][ T1140] ? __mutex_lock+0x1211/0x1ca0 [ 667.250069][ T1140] ? __pfx_ref_tracker_free+0x10/0x10 [ 667.252053][ T1140] dev_deactivate+0xf8/0x1c0 [ 667.253886][ T1140] ? __pfx_dev_deactivate+0x10/0x10 [ 667.255961][ T1140] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 667.258260][ T1140] linkwatch_do_dev+0x11e/0x160 [ 667.260194][ T1140] __linkwatch_run_queue+0x2a7/0x8a0 [ 667.262042][ T1140] ? __pfx___linkwatch_run_queue+0x10/0x10 [ 667.263987][ T1140] linkwatch_event+0x8f/0xc0 [ 667.265601][ T1140] ? __pfx_linkwatch_event+0x10/0x10 [ 667.267595][ T1140] ? rcu_is_watching+0x12/0xc0 [ 667.269479][ T1140] process_one_work+0x9ba/0x1b20 [ 667.271363][ T1140] ? __pfx_process_one_work+0x10/0x10 [ 667.273488][ T1140] ? assign_work+0x1a0/0x250 [ 667.275163][ T1140] worker_thread+0x6c8/0xf10 [ 667.276944][ T1140] ? __pfx_worker_thread+0x10/0x10 [ 667.278784][ T1140] kthread+0x3c5/0x780 [ 667.280134][ T1140] ? __pfx_kthread+0x10/0x10 [ 667.281723][ T1140] ? rcu_is_watching+0x12/0xc0 [ 667.283375][ T1140] ? __pfx_kthread+0x10/0x10 [ 667.284939][ T1140] ret_from_fork+0x983/0xb10 [ 667.286848][ T1140] ? __pfx_ret_from_fork+0x10/0x10 [ 667.289054][ T1140] ? __switch_to+0x7af/0x10d0 [ 667.291066][ T1140] ? __pfx_kthread+0x10/0x10 [ 667.293046][ T1140] ret_from_fork_asm+0x1a/0x30 [ 667.295152][ T1140] [ 667.296529][ T1140] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 667.299635][ T1140] CPU: 2 UID: 0 PID: 1140 Comm: kworker/u32:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 667.304313][ T1140] Tainted: [L]=SOFTLOCKUP [ 667.306141][ T1140] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 667.310593][ T1140] Workqueue: events_unbound linkwatch_event [ 667.313084][ T1140] Call Trace: [ 667.314529][ T1140] [ 667.315803][ T1140] dump_stack_lvl+0x3d/0x1f0 [ 667.317740][ T1140] vpanic+0x640/0x6f0 [ 667.319443][ T1140] ? ref_tracker_free+0x61a/0x830 [ 667.321547][ T1140] panic+0xca/0xd0 [ 667.323141][ T1140] ? __pfx_panic+0x10/0x10 [ 667.325068][ T1140] ? check_panic_on_warn+0x1f/0xb0 [ 667.327267][ T1140] check_panic_on_warn+0xab/0xb0 [ 667.329423][ T1140] __warn+0x108/0x3c0 [ 667.331157][ T1140] __report_bug+0x2a0/0x520 [ 667.333101][ T1140] ? ref_tracker_free+0x61a/0x830 [ 667.335255][ T1140] ? __pfx___report_bug+0x10/0x10 [ 667.337397][ T1140] ? lockdep_hardirqs_on+0x7c/0x110 [ 667.339629][ T1140] ? irqentry_exit+0x1dd/0x8c0 [ 667.341676][ T1140] ? trace_irq_disable.constprop.0+0xd4/0x110 [ 667.344290][ T1140] ? ref_tracker_free+0x61a/0x830 [ 667.346407][ T1140] ? ref_tracker_free+0x61a/0x830 [ 667.348551][ T1140] report_bug+0xb2/0x220 [ 667.350367][ T1140] ? ref_tracker_free+0x61a/0x830 [ 667.352506][ T1140] handle_bug+0x127/0x260 [ 667.354389][ T1140] exc_invalid_op+0x17/0x50 [ 667.356337][ T1140] asm_exc_invalid_op+0x1a/0x20 [ 667.358395][ T1140] RIP: 0010:ref_tracker_free+0x61a/0x830 [ 667.360707][ T1140] Code: 00 44 8b 73 18 31 ff 44 89 f6 e8 c1 d4 df fc 45 85 f6 0f 85 a6 00 00 00 e8 13 da df fc 48 8b 34 24 48 89 ef e8 d7 3a 99 06 90 <0f> 0b 90 bb ea ff ff ff e9 50 fd ff ff e8 f4 d9 df fc 4c 8d 6d 44 [ 667.368834][ T1140] RSP: 0000:ffffc90004faf828 EFLAGS: 00010202 [ 667.371323][ T1140] RAX: 0000000000000201 RBX: ffff888043c193c0 RCX: 0000000000000000 [ 667.374611][ T1140] RDX: 0000000000000202 RSI: ffffffff8dac831b RDI: 0000000000000001 [ 667.377937][ T1140] RBP: ffff888043a28618 R08: 0000000000000001 R09: 0000000000000001 [ 667.381241][ T1140] R10: ffffffff9088b3d7 R11: ffff888027a0aff0 R12: 1ffff920009f5f07 [ 667.384491][ T1140] R13: ffffc90004faf858 R14: 00000000078204a6 R15: ffff888043c193d8 [ 667.387830][ T1140] ? ref_tracker_free+0x619/0x830 [ 667.389962][ T1140] ? __pfx_ref_tracker_free+0x10/0x10 [ 667.392161][ T1140] ? dev_deactivate_many+0x28d/0xc40 [ 667.394413][ T1140] ? dev_deactivate+0xf8/0x1c0 [ 667.396465][ T1140] ? linkwatch_do_dev+0x11e/0x160 [ 667.398619][ T1140] ? __linkwatch_run_queue+0x2a7/0x8a0 [ 667.400935][ T1140] ? linkwatch_event+0x8f/0xc0 [ 667.402999][ T1140] ? process_one_work+0x9ba/0x1b20 [ 667.405170][ T1140] ? worker_thread+0x6c8/0xf10 [ 667.407213][ T1140] ? kthread+0x3c5/0x780 [ 667.409067][ T1140] ? ret_from_fork+0x983/0xb10 [ 667.411123][ T1140] ? ret_from_fork_asm+0x1a/0x30 [ 667.413243][ T1140] ? netif_freeze_queues+0x17d/0x1e0 [ 667.415517][ T1140] dev_deactivate_many+0x28d/0xc40 [ 667.417635][ T1140] ? __pfx_dev_deactivate_many+0x10/0x10 [ 667.420032][ T1140] ? ref_tracker_free+0x331/0x830 [ 667.422239][ T1140] ? __mutex_lock+0x1211/0x1ca0 [ 667.424313][ T1140] ? __pfx_ref_tracker_free+0x10/0x10 [ 667.426593][ T1140] dev_deactivate+0xf8/0x1c0 [ 667.428582][ T1140] ? __pfx_dev_deactivate+0x10/0x10 [ 667.430788][ T1140] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 667.433378][ T1140] linkwatch_do_dev+0x11e/0x160 [ 667.435536][ T1140] __linkwatch_run_queue+0x2a7/0x8a0 [ 667.437757][ T1140] ? __pfx___linkwatch_run_queue+0x10/0x10 [ 667.440166][ T1140] linkwatch_event+0x8f/0xc0 [ 667.442153][ T1140] ? __pfx_linkwatch_event+0x10/0x10 [ 667.444376][ T1140] ? rcu_is_watching+0x12/0xc0 [ 667.446353][ T1140] process_one_work+0x9ba/0x1b20 [ 667.448422][ T1140] ? __pfx_process_one_work+0x10/0x10 [ 667.450721][ T1140] ? assign_work+0x1a0/0x250 [ 667.452644][ T1140] worker_thread+0x6c8/0xf10 [ 667.454612][ T1140] ? __pfx_worker_thread+0x10/0x10 [ 667.456741][ T1140] kthread+0x3c5/0x780 [ 667.458515][ T1140] ? __pfx_kthread+0x10/0x10 [ 667.460494][ T1140] ? rcu_is_watching+0x12/0xc0 [ 667.462560][ T1140] ? __pfx_kthread+0x10/0x10 [ 667.464543][ T1140] ret_from_fork+0x983/0xb10 [ 667.466437][ T1140] ? __pfx_ret_from_fork+0x10/0x10 [ 667.468619][ T1140] ? __switch_to+0x7af/0x10d0 [ 667.470638][ T1140] ? __pfx_kthread+0x10/0x10 [ 667.472611][ T1140] ret_from_fork_asm+0x1a/0x30 [ 667.474698][ T1140] [ 667.476739][ T1140] Kernel Offset: disabled [ 667.478571][ T1140] Rebooting in 86400 seconds..