last executing test programs: 2m30.230854137s ago: executing program 3 (id=495): prctl$PR_SET_MM(0x41555856, 0xf7354000, &(0x7f0000ffa000/0x3000)=nil) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xc) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x40) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)=ANY=[], 0x0) ptrace(0x10, r0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4004004) ptrace$pokeuser(0x6, r0, 0x118, 0x5fbffffd) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendto$inet6(r1, &(0x7f0000000640)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x59, 0x88, 0xfe, 0x0, 0x2a}, 0xe) shutdown(r1, 0x1) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5, 0xd, 0x65}]}}}]}, 0x3c}, 0x1, 0x2}, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x7b, 0xa004) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04d64020"], 0x7) 2m29.927772273s ago: executing program 3 (id=499): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(0xffffffffffffffff, &(0x7f0000000040)="09000000010000", 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) unlink(&(0x7f0000000080)='./file0/file1\x00') 2m29.102963583s ago: executing program 3 (id=501): mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a\x9e@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e*\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x4, 0x90743) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r0, 0x29, 0x33, 0x0, &(0x7f0000000080)) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc854}, 0x50) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$FBIOBLANK(r1, 0x4611, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) epoll_create(0x5) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(0x0, 0x0, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x501, 0x70bd2c, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) sendmsg$NL80211_CMD_DEL_KEY(r3, 0x0, 0x24002000) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x1ac}, 0x1, 0x0, 0x0, 0xc000}, 0x40d0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4001) socket$inet_mptcp(0x2, 0x1, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x1, 0x0) write(r5, &(0x7f00000002c0)='16', 0x2) 2m27.858230085s ago: executing program 3 (id=504): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x10b, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x0, &(0x7f00000006c0)={@ptr={0x70742a85, 0xfffffffe, 0x0, 0x0, 0x2, 0x32}, @fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r2}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0x1, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000ac0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a80)={&(0x7f00000005c0)=@newtclass={0x49c, 0x28, 0x200, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xfff3, 0x8}, {0xfffb, 0xfff6}, {0xfff1, 0xffff}}, [@c_cbq={{0x8}, {0x470, 0x2, [@TCA_CBQ_LSSOPT={0x18, 0x1, {0xd, 0x2, 0x1e, 0xd8, 0x6e, 0x0, 0x8a, 0x60000}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x3, 0xfff2}, 0x3692, 0x8}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0xd, 0x6}, 0x3, 0x5}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x8, 0x1, 0x5, 0x0, 0x6, 0x4a}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0xd2bb5fc34d9b90e3, 0x7}, 0x5, 0x5}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x6, 0x4, 0x2, 0xfffffff9, 0x5, 0x4, 0x7, 0x3, 0x9, 0x8000, 0xf4dc, 0x1, 0xb, 0x1, 0x16, 0xfdc, 0xd, 0x3, 0x6000000, 0x6, 0x2, 0x6, 0x1000, 0x3, 0x2, 0x5, 0x7, 0x10, 0x7, 0x3, 0x8, 0x2, 0x1, 0x485, 0x101, 0x5, 0x0, 0x8, 0x8, 0xfe000000, 0x4, 0x2, 0xffff, 0x0, 0x6, 0x7, 0xedf, 0x6, 0x1, 0xa, 0x9, 0x4, 0x7, 0x1, 0x5, 0x1, 0x5, 0x0, 0x5, 0x0, 0xa14, 0x5, 0x7, 0x4, 0x2d5f, 0xf, 0x7, 0x64, 0x7, 0xffff, 0x9, 0x2, 0xfffffffa, 0x1ad1, 0x8, 0x2, 0x768251fa, 0x9, 0x8, 0x2, 0x9, 0x9, 0x84, 0x1, 0x6, 0xfffffffe, 0x6, 0x0, 0x5, 0xffff, 0x6, 0x6, 0xfffffffe, 0x7, 0x8, 0x8000, 0x7, 0xe, 0x400, 0x96a, 0x1, 0x5, 0x0, 0x3, 0x0, 0x0, 0x81, 0x8, 0x7f, 0x8001, 0x8, 0x6, 0x4e, 0xffffffff, 0x0, 0xcf, 0x3, 0xf8, 0x7, 0xfffffff7, 0x80, 0xb2, 0xfffffff7, 0x2, 0x5, 0x12, 0xff, 0x5, 0x7, 0x1, 0x4, 0x7fff, 0xe, 0x7, 0x6, 0x2, 0xa7dd, 0x9, 0x501eb69, 0xfff, 0x5, 0x5, 0x4, 0x8, 0xd2, 0x1, 0x5b3, 0x97, 0xfffffffc, 0x5, 0x9, 0xfffffffb, 0x1, 0x4, 0x200, 0xae7, 0xb, 0x4, 0x0, 0xfffffff8, 0x5, 0x9, 0x5, 0x5, 0x401, 0x3, 0x5, 0x5, 0x3, 0x9, 0x9, 0x6, 0xfff, 0xd8c, 0x7, 0x10001, 0x1dd, 0x5, 0x80000000, 0x5, 0x9, 0xf688, 0x80000000, 0x9, 0x6, 0x9, 0x7, 0x8, 0xcd9c3c, 0xa9, 0x4, 0x4, 0x4d03, 0x1, 0x400, 0xffffffff, 0x7, 0xfffffff8, 0x9, 0xd, 0xfffffff9, 0x1, 0x3, 0x1, 0x6, 0x100, 0x9, 0x5fd820d5, 0x5, 0x1, 0x4a3b, 0x6, 0xd, 0x4, 0x22400000, 0x5, 0x101, 0x4, 0x9, 0xa7a5, 0x9, 0x4, 0x5, 0x6422, 0x8, 0x101, 0x9, 0x7, 0x7, 0x7, 0x5, 0x8, 0x9, 0x1, 0x74, 0x7, 0x8, 0x6, 0x4, 0x3, 0x519ff06, 0xb80, 0xd, 0xcf, 0x3, 0x5, 0x200, 0x64, 0x3074, 0x80000000, 0xffff0000, 0x9, 0xfffffffe, 0x8000, 0x400, 0x3]}, @TCA_CBQ_WRROPT={0x10, 0x2, {0xd, 0x6, 0x58, 0x8, 0x2, 0x168f}}]}}]}, 0x49c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40840) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8, 0x1a, 0x81}, @IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x7f}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x8044) 2m27.409194682s ago: executing program 3 (id=506): ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000180)={{}, "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"}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0x4e811) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = openat$autofs(0xffffff9c, &(0x7f00000011c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000001200)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x31, &(0x7f00000002c0)=0xfffffffc, 0x4) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) epoll_create1(0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) brk(0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1821000000000000000000000000000061124000000000009500000900000000000000800796f2ae28f9d7e919536584a947"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r6 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0xa) fchdir(r7) sendmsg$netlink(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001140)=ANY=[@ANYBLOB="14010000200001030000000000000000010100800c00010007"], 0x114}], 0x1}, 0x0) dup(0xffffffffffffffff) pipe2$9p(&(0x7f0000000080), 0x0) syz_emit_vhci(&(0x7f00000012c0)=ANY=[@ANYBLOB="02c92010a200170401361e35fdea4282593894246e0200000000000000c204283cab9730382a000000"], 0x15) r8 = openat$vsock(0xffffff9c, &(0x7f0000000040), 0x42c2, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r8, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001240)={&(0x7f00000013c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02002dbd7000ff00df2514000000080003006a675186b14487602a1026f93231a4ba312a8119f75745185205fe338139b806216e3f3e0de83e6927457fbffabd7f", @ANYRES32=r2, @ANYBLOB="0c00990002000000460000000500740005000000050019000000000008001400", @ANYRES32=r2, @ANYBLOB="0500e400010000000c004300008000008a0e0000"], 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='nr_inodes=1E']) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2m26.79032237s ago: executing program 3 (id=509): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGREP(r1, 0x80084523, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r3, r2, &(0x7f00000000c0)=0x58, 0x5) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f}, @TCA_CTINFO_ACT={0x18, 0x3, {0x7, 0x8, 0x20000000, 0x1e1, 0x21}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 2m11.795452779s ago: executing program 32 (id=509): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGREP(r1, 0x80084523, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r3, r2, &(0x7f00000000c0)=0x58, 0x5) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f}, @TCA_CTINFO_ACT={0x18, 0x3, {0x7, 0x8, 0x20000000, 0x1e1, 0x21}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 2m11.158681707s ago: executing program 1 (id=615): ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000100)={0x6, 0x0, 0xffffffffffffffff}) write$nci(r0, &(0x7f00000001c0)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x1, 0x2, 0x2, 0x1, {0x1, 0xda, "94746a827752365cb6c4c95e243565bcaa98e660a261b1751d026ac7e29a76145979cf3ddab97bf2025a2931af16ae4af0ed5608d851aabe3759ccecf1d1432f2ca7d839923825c752b88e5b388b2b66ecf4897f6bbf1532c4e625fd6b51f35f1fd7ed12401c059700eaaad6f890e3f158a698f0e124406a1e9b046d344a8017fb4e397b6fa14e166f400d0710918f1cb60dbeb40df743e43ad05839db4c159e5878e0f7e068ebe81d55ddffcd774f5613800578a6f6885e2332d73924b04badbc3f6d482e1f2970a927f1a57ceb67575a49705e16d69c964e94"}}, 0xdf) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) r2 = openat$binfmt(0xffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[@ANYRESHEX=r1], 0xc8) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x1, 0x963b01) ioctl$EVIOCGSW(r3, 0x8040451b, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="50030000000000000000000000000000000000000900020073797a31000000000500010007000000050005e9090000000c00078008001240fffffffa0c000300686173683a6970000500040000000000"], 0x50}, 0x1, 0x0, 0x0, 0x4004010}, 0x0) 2m11.121958398s ago: executing program 1 (id=617): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x39d}) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x1000000000000000, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r0 = socket(0x10, 0x3, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0x18, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x1, &(0x7f0000000080)=0x1, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r4) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x20, r5, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x10000}, 0x800) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000040)={0x3}) ioctl$KVM_SET_ONE_REG(r6, 0x4010aeac, &(0x7f0000000180)=@other={0x20300002000006a7, 0x0}) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000100)=0x2, 0x4) sendmsg$nl_route_sched(r7, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x58, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x2, 0x8, 0x22, 0xff}, {0x4, 0x2, 0x3, 0xa159, 0xffe, 0x9}, 0x3, 0x6, 0x41e}}]}}]}, 0x58}}, 0x0) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_SNDBIT(r9, 0x4004556a, 0xfffffffffffffffe) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x403, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10023}}, 0x20}}, 0x0) 2m10.833805403s ago: executing program 1 (id=621): mkdir(&(0x7f0000000150)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) splice(r0, 0x0, r1, 0x0, 0x88000cc, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000740)={{{@in6=@loopback, @in=@dev}}, {{@in=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000840)=0xe4) mkdir(&(0x7f0000000300)='./config/usb_gadget/g_syz\x00', 0x1ff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r4, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc000800050009000000140004"], 0x58}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x44, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x8, 0x30}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1438a}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000880}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g_syz/functions/ecm.usb0/ifname\x00', 0x1, 0x0) write(r5, &(0x7f0000000700)='syzkaller%d', 0xb) 2m10.73060383s ago: executing program 1 (id=624): ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f00000005c0)="1a6be8754556c820a33ae608b8") openat$kvm(0xffffffffffffff9c, &(0x7f0000000a80), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a80), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000100)={0x8000000000000000, 0xf7e83000, 0x1000, 0x0, 0x1}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) (async) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r5, 0x2000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r5, 0x2000) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f00000000c0)=0x200000000) recvmmsg(r3, &(0x7f00000002c0), 0x220, 0x100, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) (async) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x9b1002, 0x0) openat$khugepaged_scan(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000003c0)={[{@verity_off}, {@default_permissions}, {@workdir={'workdir', 0x3d, './bus'}}, {@redirect_dir_follow}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000700)='./bus\x00', 0x149100, 0x80) lseek(r6, 0x8, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r7 = openat$autofs(0xffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r7, 0xc0189374, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffff7e}}, './file0\x00'}) 2m10.546842054s ago: executing program 1 (id=627): mkdir(&(0x7f0000000150)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) splice(r0, 0x0, r1, 0x0, 0x88000cc, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000740)={{{@in6=@loopback, @in=@dev}}, {{@in=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000840)=0xe4) mkdir(&(0x7f0000000300)='./config/usb_gadget/g_syz\x00', 0x1ff) mkdir(0x0, 0x1ff) mkdir(&(0x7f0000000500)='./config/usb_gadget/g_syz/functions/ecm.usb0\x00', 0x1ff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r4, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x44, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x8, 0x30}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1438a}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000880}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c000180060006008848"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g_syz/functions/ecm.usb0/ifname\x00', 0x1, 0x0) write(r8, &(0x7f0000000700)='syzkaller%d', 0xb) 2m10.178687587s ago: executing program 1 (id=628): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e8001000816dfb927000fccbff2500278788", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}}, 0x4084) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="0300000000000015280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 2m10.065604247s ago: executing program 33 (id=628): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e8001000816dfb927000fccbff2500278788", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}}, 0x4084) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="0300000000000015280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 2m0.474212562s ago: executing program 4 (id=690): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280), 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) write(r1, &(0x7f00000002c0)="3066313232373a6945dbaa1cb304a0eff0c8f86346bd4d226ac22b02c91ce7c0e945e69f651d3374068662913a3efd7ea031304e451abc63fe48971d22d900000000000000002d1c9dfeb45e4424b873d9e80c252aafd9920f4935ceb52447b62f36003c8271681600000000000100000000000000000000ac820f5ccd1b0c6e55e7e1cf50377a0a38f494a7fcd6f4d22263f3b1dcef90a03e206ecd0e881d7cb037e0ac95429ab55db1b5a4", 0xac) 2m0.420699694s ago: executing program 4 (id=691): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)="09000000010000", 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) unlink(&(0x7f0000000080)='./file0/file1\x00') 2m0.103203169s ago: executing program 4 (id=693): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8947, &(0x7f0000000040)={'vlan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000019080), 0x109100, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r5, 0xee01, 0x0) keyctl$setperm(0x5, r5, 0x30925) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff) write$nci(r6, &(0x7f00000004c0)=ANY=[], 0x102) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xee01}, {0xfffffffffffffffd, 0x0, 0x0, 0x7fff, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0xd, 0xffffffeffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x40}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x3, 0xb7, 0x3, 0xffffff7e}}, 0xe4) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) socket$inet6_udp(0xa, 0x2, 0x0) 1m58.792100823s ago: executing program 4 (id=698): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, '.\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000002e00)='ns/cgroup\x00') openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffe, 0x9, @empty, 0x4}}}, 0x108) r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r5, &(0x7f0000001b00)=[{&(0x7f0000000000)=""/108, 0x6c}, {&(0x7f0000000500)=""/129, 0x81}], 0x2, 0x0, 0x8) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000d40)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x8b101a, 0x0) write$binfmt_register(r3, &(0x7f0000000300)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x3, 0x3a, '@$', 0x3a, 'ns/cgroup\x00', 0x3a, './file0/../file0', 0x3a, [0x71, 0x43, 0x4f, 0x4f]}, 0x40) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x18f883, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r6, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x14) 1m57.666487647s ago: executing program 4 (id=708): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292", 0xc) r1 = accept4(r0, 0x0, 0x0, 0x800) write(r1, &(0x7f00000002c0)="3066313232373a6945dbaa1cb304a0eff0c8f86346bd4d226ac22b02c91ce7c0e945e69f651d3374068662913a3efd7ea031304e451abc63fe48971d22d900000000000000002d1c9dfeb45e4424b873d9e80c252aafd9920f4935ceb52447b62f36003c8271681600000000000100000000000000000000ac820f5ccd1b0c6e55e7e1cf50377a0a38f494a7fcd6f4d22263f3b1dcef90a03e206ecd0e881d7cb037e0ac95429ab55db1b5a4", 0xac) 1m57.478980373s ago: executing program 4 (id=709): syslog(0x2, &(0x7f0000000740)=""/158, 0x9e) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc01c5869, &(0x7f0000000100)={r0, &(0x7f0000000000)='.\x00', 0x8000, &(0x7f0000000040)={@align=0x10, {0x2, 0xa, 0xbb6, 0x3}}, 0xa000, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x6}) openat$snapshot(0xffffff9c, &(0x7f0000000180), 0x454007, 0x0) write$fault_inject(r1, &(0x7f0000000140)='10\x00', 0x3) 1m57.285781668s ago: executing program 34 (id=709): syslog(0x2, &(0x7f0000000740)=""/158, 0x9e) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc01c5869, &(0x7f0000000100)={r0, &(0x7f0000000000)='.\x00', 0x8000, &(0x7f0000000040)={@align=0x10, {0x2, 0xa, 0xbb6, 0x3}}, 0xa000, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x6}) openat$snapshot(0xffffff9c, &(0x7f0000000180), 0x454007, 0x0) write$fault_inject(r1, &(0x7f0000000140)='10\x00', 0x3) 50.339509526s ago: executing program 0 (id=1206): bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000018c0)={@cgroup, 0xffffffffffffffff, 0x2f, 0x20, 0x4}, 0x20) 50.100232786s ago: executing program 0 (id=1208): openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x101802, 0x0) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, 0x0, 0x800) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}, @IFLA_ADDRESS={0xa}]}, 0x48}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r6, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 49.541973301s ago: executing program 0 (id=1209): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f000000bbc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001180)="dd9e", 0x2}], 0x1, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10, 0x20000041}}], 0x1, 0xc004) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) recvmmsg(r1, &(0x7f0000001140)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}}], 0x700, 0x2, 0x0) 47.911393685s ago: executing program 0 (id=1213): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x2000c044) socket$netlink(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r0, 0x0, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) 47.849643011s ago: executing program 0 (id=1214): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x40030000000000, 0x0, 0x20000400}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x9a, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x64, 0x2b, 0x0, @private2, @local, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "82f63de64f6ce2ee11028289aefdb3449391a823213e6336516748a7949bb108", "402fa83b1d661c18462075368a186092", {"9ddeb8f71aa23d391b8fa99e9816af2d", "040876a663a86d97f46b9665cc18492b"}}}}}}}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e20, @remote}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @empty}], 0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000040)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x22}}, @in={0x2, 0x4e21, @loopback}]}, &(0x7f0000000080)=0x10) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000207d1eed2c000000000001090224000100000000090400000103"], 0x0) syz_usb_control_io$rtl8150(r5, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) r6 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000100)='source\x00', &(0x7f0000000200)='127.0.0.1:6789:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000300)='ms_mode\x00', &(0x7f0000000400)='prefer-crc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) (async) nanosleep(&(0x7f0000000500)={0x1}, 0x0) 44.573971463s ago: executing program 0 (id=1238): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) read(r1, 0x0, 0xfdce) listen(r0, 0x10) r3 = syz_io_uring_setup(0x2ea1, &(0x7f0000000080)={0x0, 0x400b98d, 0x4000, 0xfffffffc}, &(0x7f0000000400)=0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r7 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x40801) ioctl$BLKTRACESETUP(r7, 0xc0401273, &(0x7f0000000200)={'\x00', 0x8, 0x6f14, 0x6, 0x3, 0x11c3adec}) ioctl$BLKTRACESTART(r7, 0x1276, 0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000380)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x1}}) io_uring_enter(r3, 0x2, 0xfffffffd, 0x10, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f40)=ANY=[@ANYRESOCT], 0x7c}, 0x1, 0x0, 0x0, 0x2000c881}, 0x14) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a5c000000060a030400000000000000000a0000050900010073797a3100000000300004802c00013cb24425b68637306b657400001c00028008000300000000d3080002400000ca20bdada308e4192c013660de5f03001708000140000000030900020073797a3200100000140000001100010000000000000000000100000ad72c8e4b478cefe53747f6658929df54577538765dcbf90431c4aa27e8f563f561a344"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, 0x0) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, 0x0) listen(r9, 0xfffffffc) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), 0xffffffffffffffff) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r11, &(0x7f00000000c0)="1c", 0x10002, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r10, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 29.300023506s ago: executing program 35 (id=1238): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) read(r1, 0x0, 0xfdce) listen(r0, 0x10) r3 = syz_io_uring_setup(0x2ea1, &(0x7f0000000080)={0x0, 0x400b98d, 0x4000, 0xfffffffc}, &(0x7f0000000400)=0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r7 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x40801) ioctl$BLKTRACESETUP(r7, 0xc0401273, &(0x7f0000000200)={'\x00', 0x8, 0x6f14, 0x6, 0x3, 0x11c3adec}) ioctl$BLKTRACESTART(r7, 0x1276, 0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000380)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x1}}) io_uring_enter(r3, 0x2, 0xfffffffd, 0x10, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f40)=ANY=[@ANYRESOCT], 0x7c}, 0x1, 0x0, 0x0, 0x2000c881}, 0x14) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a5c000000060a030400000000000000000a0000050900010073797a3100000000300004802c00013cb24425b68637306b657400001c00028008000300000000d3080002400000ca20bdada308e4192c013660de5f03001708000140000000030900020073797a3200100000140000001100010000000000000000000100000ad72c8e4b478cefe53747f6658929df54577538765dcbf90431c4aa27e8f563f561a344"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, 0x0) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, 0x0) listen(r9, 0xfffffffc) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), 0xffffffffffffffff) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r11, &(0x7f00000000c0)="1c", 0x10002, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r10, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 8.116934779s ago: executing program 2 (id=1389): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0), 0x12) syz_usb_connect(0x0, 0x39, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x400448ca, 0x0) ioctl(r0, 0x400448c9, 0x0) bind$bt_hci(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000000)={0x0, 0x20006, 0x3, 0x2, 0x9e, "3f3c5e0000ff775cfffffffff903e7ffffff00", 0x401, 0x91}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x304000, 0x800, 0x0, 0x3}, 0x1c) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) write(r0, &(0x7f0000000200)="4a00000011007f0314066f9a70932d490675bc59083301", 0x17) 5.439946175s ago: executing program 2 (id=1404): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff0000000000010902"], 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/ipc\x00') ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, &(0x7f0000000ec0)={{r2, 0x0, 0x101200, 0x0, 0xa94, &(0x7f0000000340), 0x0}, 0x0, &(0x7f0000000dc0)}) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) unshare(0x28000600) socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r4, &(0x7f0000000400)={0x50, 0x0, r5, {0x7, 0x1f, 0x8, 0x10628, 0x9, 0xba, 0xe88, 0xabe6, 0x0, 0x0, 0x4, 0x8001}}, 0x50) syz_fuse_handle_req(r4, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f0000004200)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x3, 0x0, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x8, 0xffffffff, 0xfffffffe, 0x0, 0x80000, 0x8000, 0x0, 0x0, r6, 0x1, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_fuse_handle_req(r4, &(0x7f0000006340)="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", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r7, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1) dup3(r4, r7, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) sendfile(r3, r8, 0x0, 0x2c0c) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) 3.423128155s ago: executing program 7 (id=1415): mkdir(&(0x7f0000000150)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) splice(r0, 0x0, r1, 0x0, 0x88000cc, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000740)={{{@in6=@loopback, @in=@dev}}, {{@in=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000840)=0xe4) mkdir(&(0x7f0000000300)='./config/usb_gadget/g_syz\x00', 0x1ff) mkdir(&(0x7f0000000400)='./config/usb_gadget/g_syz/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000500)='./config/usb_gadget/g_syz/functions/ecm.usb0\x00', 0x1ff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r4, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x44, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x8, 0x30}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1438a}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000880}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c000180060006008848"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g_syz/functions/ecm.usb0/ifname\x00', 0x1, 0x0) write(r8, &(0x7f0000000700)='syzkaller%d', 0xb) 3.026683959s ago: executing program 7 (id=1416): socket(0x10, 0x3, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0x1b10, 0x0, 0x1, 0x2}, 0x2f, [0x4, 0x1, 0x704d, 0x1, 0x5, 0x1, 0x2, 0x0, 0x4, 0xfffffc01, 0xfffffffb, 0x8, 0x1, 0x100, 0xfe, 0x48, 0x7, 0x5, 0x2ca, 0x8, 0x76, 0x8, 0x0, 0x81, 0x40, 0x19b1, 0x8000, 0x7, 0x797, 0x4000000, 0x3, 0x3, 0xe, 0x7, 0x5, 0x1, 0x5, 0xe, 0x7, 0x10001, 0x9, 0x7f, 0x8, 0x6, 0xfffffff7, 0x4, 0x7, 0x40, 0x7f, 0x9, 0x1, 0x6, 0x0, 0x2284919, 0x4, 0x5643fa73, 0xfffeffff, 0x6, 0x800, 0x2, 0x8a, 0x6, 0x2, 0x6], [0xfffffed2, 0x7fffffff, 0xffff, 0x8, 0xe62, 0x3, 0x3, 0x9, 0xc33, 0x3, 0x7, 0x800, 0x6c368000, 0x8, 0x1000007, 0x0, 0x10, 0x5, 0x8, 0x8001, 0x3, 0x7fff, 0x80000009, 0x0, 0x5, 0x4, 0x401, 0x8, 0x40, 0xc10, 0x80000001, 0x3, 0x3, 0x3, 0x7, 0x8, 0x8, 0x5, 0x4, 0x9, 0x5, 0x3, 0x2, 0x3, 0x0, 0x11e, 0xa4, 0x0, 0x5, 0xd69, 0x9, 0xf404, 0xf1, 0x3, 0x3, 0x1, 0x6, 0x6, 0x0, 0x6, 0x8, 0x6, 0x4, 0x1000068], [0x1, 0x1, 0x4, 0xfffffffc, 0x0, 0x7fff, 0x405, 0x9, 0x2, 0xffc, 0x7, 0x4, 0xc, 0x7, 0xa, 0xa, 0x8, 0x7, 0x5, 0x5, 0x2, 0x30000000, 0x644, 0x7, 0x80000001, 0x7, 0x5, 0x7f, 0x7ff, 0xd, 0x400, 0xf, 0x41, 0x81, 0xc99, 0x25a, 0x2, 0x0, 0x2, 0x5d9fffa, 0x3ff, 0x40, 0x1, 0x8, 0x10000, 0xe7, 0x200, 0x7af5, 0x0, 0xb, 0x0, 0xffff, 0x7, 0xc, 0x2, 0x81, 0x9, 0x2, 0x7, 0x100, 0x7, 0x3, 0x6, 0x10], [0xffffff80, 0xd5800000, 0x0, 0x4, 0x2, 0x62a, 0x3, 0x407, 0xb343, 0x4, 0x1, 0x8, 0x8000, 0x8, 0xffffff81, 0x80000000, 0x5, 0x3, 0x201, 0xfff, 0x3, 0xfffffffd, 0x3c63, 0x7, 0x6, 0xe6, 0xffffffff, 0x3, 0x2, 0x7, 0x1, 0x7, 0x7, 0x8, 0x1, 0xf, 0x9, 0x17cb, 0x0, 0x3, 0x6fe, 0xe, 0x7, 0x13a, 0x7, 0x0, 0xb757, 0x2, 0x11b, 0x996, 0x54, 0x8c1, 0x0, 0x5, 0x4, 0x2, 0x5, 0x10000400, 0x9, 0x5, 0x3, 0xfffffffb, 0xc, 0x6]}, 0x45c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$kcm(0x2d, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_ublk_setup_io_uring(0x791b, &(0x7f00000003c0)={0x0, 0xef18, 0x1, 0x3, 0x30f}, &(0x7f0000000440), &(0x7f0000000780), &(0x7f00000007c0)) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158, 0x0, r3}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1700000004000000080000000c00000000000000", @ANYRES32, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000019000000000000495482aac9ef8b3414fe94b10000"], 0x50) r11 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$pokeuser(0x6, r11, 0x118, 0xffffb453) ptrace$pokeuser(0x6, r11, 0x104, 0x7) io_uring_setup(0x14b6, &(0x7f00000002c0)={0x0, 0xf553, 0x8000, 0x1, 0x6e, 0x0, r4}) syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255, 0x0, r4}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1, 0x401f0, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00'], 0x48) r12 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r13 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r13, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_script(r13, &(0x7f00000000c0), 0x28) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000140)={r0}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 2.378360416s ago: executing program 2 (id=1419): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, 0x0, &(0x7f00000001c0)) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000340)=r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) r5 = syz_open_dev$vim2m(&(0x7f0000000040), 0x6, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r5, 0xc044560f, &(0x7f0000000280)=@mmap={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "37bb54f0"}}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlink(0x0, &(0x7f0000000300)='./file0/file0\x00') r6 = syz_open_procfs(0xffffffffffffffff, 0x0) ptrace$ARCH_SHSTK_LOCK(0x1e, r1, 0x1, 0x5003) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@ipv4_delroute={0x28, 0x19, 0x1, 0x70bd2f, 0x25dfdbf9, {0x2, 0x20, 0x14, 0x0, 0xff, 0x2, 0xff, 0x2, 0x1800}, [@RTA_DST={0x8, 0x1, @local}, @RTA_METRICS={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x44050}, 0x1000) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) read$FUSE(r6, &(0x7f00000031c0)={0x2020}, 0x2020) 2.364231503s ago: executing program 7 (id=1420): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0xb8}}, 0x20050800) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x4, 0x0, 0x0, 'queue1\x00', 0x1}) write$sndseq(r1, &(0x7f0000000340)=[{0x84, 0x74, 0x0, 0x0, @time={0xe, 0x425}, {0xfd}, {0x7}, @raw32={[0x2, 0x6, 0x8000008]}}, {0x2, 0xc, 0x5, 0x83, @tick=0x8, {0x80, 0x40}, {0x3}, @connect={{0x4, 0x2}, {0x3, 0x9}}}, {0x6, 0x7, 0x9, 0x3, @tick=0x1, {0x10, 0x5}, {0xce, 0x2}, @raw8={"93ec0ccdd44e1cfec21c2b14"}}, {0xf7, 0x81, 0x1, 0xaf, @tick, {0x70, 0x3c}, {0x1}, @queue={0x9, {0x7, 0x8001}}}, {0x2, 0xff, 0x81, 0xc0, @time={0xd1a, 0xc88}, {0xc, 0x9}, {0x48, 0x5}, @result={0xa80, 0x9f92}}], 0x8c) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x2000c011}, 0x0) (async) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000540)={0x1, 0x81, 0x7, &(0x7f0000000040)={0x8, "f045ab7e871ec7e18cbeecfc381bcec6b71fb2ce035ff4cb1e31f5a0b8fa7e9b86"}}) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x0, 0x400, 0x80, 0x89, 0x0, 0x8, 0x7], 0x100000, 0x240046}) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x2, 0x3}]}, @ptr]}}, 0x0, 0x3e}, 0x28) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000000000010006000000ff00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r8}, 0xc) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mkdir(&(0x7f0000000000)='./mydev\x00', 0x1ff) (async) ioctl$CEC_ADAP_G_PHYS_ADDR(r6, 0x80026101, &(0x7f0000000140)) (async) mount(0x0, &(0x7f0000000100)='./mydev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) (async) r9 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mydev/kmsg\x00', 0x1, 0x0) write(r9, 0x0, 0x53) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) (async, rerun: 64) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}, {0x0}], 0x2) (rerun: 64) 2.340191257s ago: executing program 6 (id=1421): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x88020, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000095, 0x0, 0xfffffffffffffffd}]}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000000c0)={0xffffffffffffffff, 0xc8, 0x3}) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x3, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x67f, 0x6, 0xf3b8, 0xfffffffffffffffe, 0x800000000001000, 0x400, 0x4002004c4, 0x8, 0x1, 0x2000000097, 0x10, 0x0, 0x5, 0x7, 0x8, 0x8], 0xeeee8000, 0x402}) syz_io_uring_setup(0xeff, &(0x7f00000002c0)={0x0, 0x57b0, 0x80, 0xfffffffb, 0x40055}, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000000c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 1) 2.217472387s ago: executing program 7 (id=1422): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}], 0x20) setresgid(0x0, 0xee01, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x240, 0x0) r3 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0xea}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r3, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xd) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000440)=0x1) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="d80000001c0081044e81f782db44b9040a1d08020a000000401296a1180002000f00000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d3227e7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x40000) r7 = gettid() setns(0xc9, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$tipc(0x1e, 0x2, 0x0) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x5, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x8ef7, 0x8, 0x0, 0x6, 0xf5, 0x81, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x3, 0x800, 0x300000, 0x7, 0xe, 0x5, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0xfff, 0x2, 0x200, 0x2, 0x400008, 0x8, 0x4, 0x2, 0x0, 0x8, 0x1009, 0x1, 0x19a2, 0x8, 0x2, 0x9, 0x1, 0x4, 0x7, 0x1000, 0x2, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x2, 0xfffffffe, 0x3, 0x0, 0x5, 0x27, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x2, 0x0, 0x2, 0xffffffff, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0xb, 0x6, 0x2, 0x1, 0x0, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0x34711b8a, 0xcd4, 0xffff, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3, 0x1000, 0x2, 0xe, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x7, 0x400009, 0x2, 0x20000005, 0x80, 0x9, 0xb, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x40, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3faa, 0x4, 0x2, 0x2f08, 0x9, 0x4, 0xe47, 0x4, 0x0, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a4, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r8, 0x5501) readv(r8, &(0x7f00000005c0)=[{&(0x7f00000003c0)=""/138, 0x8a}], 0x1) 1.828154866s ago: executing program 6 (id=1423): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, 0x0, 0x0) r2 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(r3, 0x0) setreuid(0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r5, 0x40045612, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) r7 = openat$autofs(0xffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {r3, r4}}, './file0\x00'}) recvmmsg(r6, &(0x7f0000007700), 0x318, 0xfc0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x136) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000400000000000000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0xb6df4c32c1d5c814}, 0x94) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e23, @multicast2}}, [0x9e8, 0x7, 0x0, 0x7, 0x0, 0x205a305173, 0x10ff, 0xfffffffffffffff9, 0x8, 0x0, 0x4, 0x100, 0x6, 0x7, 0x7]}, &(0x7f0000000600)=0xfc) sendfile(r8, r8, 0x0, 0x23) 1.80376605s ago: executing program 6 (id=1424): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c00078005001500267d00000500010007000000050005000a000000050004"], 0x5c}}, 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x810, r0, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x1000000, @private0}, 0x1c) r4 = socket$kcm(0x29, 0x2, 0x0) close(r4) socket$kcm(0x2, 0x200000000000001, 0x106) r5 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r5, 0x400, 0x1) ioctl$VT_RESIZE(r5, 0x5609, &(0x7f0000000000)={0x4d6, 0x9, 0x10}) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f0000000000)={{@my=0x1, 0xffffffff}, @any, 0x0, 0x0, 0x8000000, 0x0, 0x6}) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x8002) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0x403c5404, &(0x7f0000000040)={{0x1, 0x0, 0x400006, 0x3}, 0x1, 0x0, 'id0\x00', 'timer1\x00', 0x0, 0x7}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x3, 0x0, 0x7fff8000}]}) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1f8) syz_emit_ethernet(0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x1, 0x6, 0x4d, 0x39cc191a, 0x60, 0x9, 0x5b2, 0xffffffff, 0x0, 0x6, 0x3, 0x0, 0x2a8, 0x4, 0x10007, 0x4, 0x3c5b, 0x1, 0xb, 0x4000000b, 0xfffffffd, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0x11, 0x0, 0xffffffff, 0x2, 0x406, 0x3, 0x2, 0x5, 0x3e, 0x8b, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0xffff, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x43, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8002, 0x9, 0x3fe, 0x401, 0x6, 0x2, 0xfb, 0x5, 0xffffffff, 0x5f31, 0xbcf5, 0x1, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x3, 0x6, 0xb, 0xa, 0x1, 0x6, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x88f6, 0x400004], [0x6, 0x6, 0x80000001, 0x6, 0xff, 0x100, 0x8d2, 0xd, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x5, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0xffffffff, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x835, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x6, 0x6, 0x5, 0x0, 0xfffffffd, 0x80ce7, 0x1ff, 0x3, 0x7, 0x100, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x0, 0xf, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x8, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7b, 0x20100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x2, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') write$proc_mixer(0xffffffffffffffff, 0x0, 0x5) 1.626064695s ago: executing program 6 (id=1426): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x6, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000feffffff00000000000004008500000036000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010400000850000007100000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x72f4}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000003040)=@delchain={0x258c, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x255c, 0x2, [@TCA_CGROUP_ACT={0x4}, @TCA_CGROUP_ACT={0x1eb8, 0x1, [@m_pedit={0x1eb4, 0x1f, 0x0, 0x0, {{0xa}, {0x1ddc, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xeb0, 0x2, {{{0x0, 0x2, 0xf7b18ef080a2fc83, 0x76, 0x2}, 0x4, 0xea, [{0xe, 0x80, 0xe41, 0xd3, 0x4, 0x4}, {0xfff, 0xfffffffb, 0x6, 0x5, 0x6, 0x6}, {0xfff, 0x5, 0x4, 0xe, 0x3, 0x6}, {0x3, 0x6, 0x7, 0x7fff, 0x2, 0x3}, {0x316f, 0x9, 0x5a3, 0x5b, 0x3ff, 0x7ff}, {0x2, 0x2ef, 0x9, 0xfe7c, 0x6, 0x7f6}]}, [{0x6, 0x5, 0x2, 0x0, 0x5, 0x6}, {0xf233, 0x4, 0x5, 0x20cb, 0x7fffffff, 0x9}, {0xf30, 0x9, 0x3a, 0x5, 0xfffffff7, 0x101}, {0x5, 0x80000001, 0x7f, 0x3800, 0x5, 0x9}, {0x0, 0x200, 0xb, 0xa, 0x6, 0x6}, {0x7fff, 0x3, 0x1, 0x3, 0x4, 0x1ff}, {0x2, 0x9, 0x5, 0xd, 0xe8, 0x5f}, {0x4, 0xfff, 0x4, 0x5, 0xffff, 0x7}, {0x3, 0x5, 0xffff, 0x6, 0x12}, {0x3, 0x9, 0x2, 0xa4a, 0x1, 0x41c4}, {0xa99, 0x60, 0x3, 0x3, 0x5, 0x200}, {0x8, 0x9, 0x3ff, 0xf, 0x1, 0x35bfcab6}, {0x5, 0x4, 0x8, 0x0, 0x9, 0x101}, {0x4a00, 0xfffffffd, 0x5, 0x6, 0x5, 0x401}, {0x2, 0x5, 0x200, 0x561, 0xb3f, 0x645}, {0x2, 0x8, 0x55, 0x97, 0xfffffffb, 0x1}, {0x400, 0x9, 0x2, 0x7, 0x8, 0xed1}, {0xffffff80, 0x7, 0x4, 0x8, 0x8001, 0x2}, {0x1, 0x6617, 0x3, 0x8, 0x7, 0x10}, {0x4, 0x1, 0x5, 0x2470, 0x2, 0x551}, {0xfff, 0x21, 0x5, 0x3, 0x9, 0x9}, {0x7ff, 0x7ff, 0x0, 0x9, 0x10001, 0x3}, {0xd, 0x0, 0x138, 0x5, 0x2, 0xfffffffe}, {0x5, 0x2, 0x7, 0x1ff, 0xffff8c3c, 0x2}, {0x1, 0x4, 0x0, 0xe, 0x2, 0xbf5}, {0x99, 0x0, 0x3, 0x330, 0xffffffff, 0x5}, {0x2, 0x570f, 0x94, 0x3569, 0x1ce7a, 0x1}, {0x4, 0x3, 0x7, 0xfa2, 0x4}, {0x4, 0x1, 0x3, 0x3192, 0x28, 0x3}, {0xa5, 0x6, 0x7f, 0x6, 0x6, 0xffff8001}, {0x9, 0x50ea6efa, 0x0, 0x3ff, 0x401, 0x40}, {0x332cda67, 0xc, 0x10000, 0x6, 0x8, 0x6c}, {0x80, 0xffff, 0xffff, 0x3, 0x7, 0x9}, {0x7a7, 0x8001, 0x5, 0x4, 0xc, 0x3}, {0x800, 0x8, 0x8, 0x400, 0x5, 0x400}, {0x7fff, 0x2, 0x1, 0x81, 0x827, 0xfff}, {0x9, 0x2, 0x6, 0x3ff, 0x4, 0x1}, {0x6, 0x7fff, 0x7, 0x80, 0x6fb, 0x5ea3}, {0xf1, 0x7, 0x4e, 0x1, 0x2, 0x8}, {0xca5, 0x3, 0x9, 0x668, 0x3, 0x5}, {0x1, 0x7, 0x4, 0x4, 0x8001, 0x4}, {0x6, 0x44, 0x732, 0x5, 0x5, 0x7ff}, {0x1, 0xfffffffa, 0x3ff, 0x0, 0x0, 0x80000001}, {0x3, 0x1, 0x3, 0xd3, 0x401, 0x7ff}, {0x8000, 0x4, 0x5a, 0x0, 0x8, 0x6}, {0xfff, 0x7, 0x6, 0x8, 0x5, 0x4}, {0x3ff, 0x6, 0x3, 0xe1, 0x10001, 0x6}, {0x3, 0x8e, 0xfffffff8, 0x17979e3c, 0x0, 0x9}, {0x6, 0x8, 0x9, 0x2, 0x9, 0x7}, {0x9, 0x58e, 0x1, 0x8, 0xffffffc0, 0x800}, {0x9, 0x7, 0x2, 0x5, 0x5, 0xb68e}, {0x3, 0x3, 0x2, 0xa8, 0x3, 0xfffffff9}, {0x0, 0x4, 0x5, 0x4d072854, 0x7, 0x3}, {0xad, 0x48, 0x2, 0x3, 0x7fff, 0x6}, {0x200, 0x4, 0x8, 0x46ef3c83, 0x5, 0x2}, {0x1, 0x4, 0x7a57, 0x3, 0x7, 0x7}, {0x80000001, 0x12000, 0x951e, 0x30132812, 0xc4, 0x3}, {0x9, 0x100, 0x401, 0x5, 0x2, 0x10000}, {0x8, 0x808000, 0x6, 0x8, 0x4, 0x8}, {0x5, 0x8, 0x1, 0x3, 0x5e, 0x8}, {0x7, 0x7ff, 0xdbe, 0x8, 0x1, 0x7}, {0x5, 0x6, 0x9, 0x73b8, 0x7, 0x174}, {0x9, 0x3, 0x6, 0xb5f7, 0x9, 0x7}, {0xf70, 0x2, 0x8, 0x8, 0xb971, 0x7ff}, {0x0, 0x4, 0x9, 0x5, 0x8, 0x80000000}, {0x2, 0x6, 0xffffffff, 0x6, 0x10000, 0x7}, {0x0, 0x4, 0x0, 0x81, 0x80, 0x4}, {0xc7ef, 0x3b6, 0x3553, 0x1b4000, 0xfffeffff, 0x6}, {0xffff, 0x482d6f93, 0x2, 0xf, 0x7f, 0x6}, {0x4, 0x1, 0x8, 0xffffff70, 0x7f, 0xf76d}, {0x7, 0xaab, 0x1, 0x7e, 0x8, 0x3}, {0xfff, 0x9, 0x10000000, 0x7fffffff, 0x1, 0x4}, {0x6, 0x2, 0x3, 0x3, 0x4, 0xc98c}, {0x1000, 0xffffffff, 0xb03, 0x6, 0x8, 0x8}, {0x7fff, 0x7, 0x432, 0x5, 0x6112, 0x1}, {0x507, 0x3, 0xfffffff1, 0x3, 0x8000, 0x3}, {0x8, 0x0, 0x4, 0x1e1, 0x3, 0xd}, {0x68699737, 0x4, 0xc, 0x23, 0x2, 0x4}, {0xffff8001, 0xfffffff8, 0x0, 0x680, 0x3, 0x5}, {0x40000000, 0x1335cc2, 0x3, 0x1ff, 0xffff3dd3, 0x3}, {0x7, 0x3, 0xfa, 0x0, 0x3, 0x2}, {0x1f2, 0xffffffff, 0x7, 0x967, 0x7, 0x2}, {0x39ab712c, 0x1000, 0x8, 0x4, 0x882b, 0x7fff}, {0x5, 0x1, 0x7fffffff, 0x2, 0xffffff81, 0x514}, {0x200, 0xe, 0x80000001, 0x6, 0x101, 0xff}, {0x3ff, 0x6, 0x8, 0x412f, 0x9, 0x4}, {0x7, 0x42, 0x0, 0x4, 0x4}, {0xa1d, 0xfffffffe, 0x7fff, 0x0, 0x1, 0x9f0d}, {0x6, 0x5, 0x6, 0xfffffffb, 0x8, 0xfffffffd}, {0x1ff, 0x8, 0x2, 0x7, 0x0, 0x3}, {0x0, 0x2, 0x4, 0x8, 0x8, 0x7}, {0xbfff, 0x6, 0x6, 0x2, 0x2248, 0x5}, {0x5, 0x8, 0x7fffffff, 0xffffffff, 0x8, 0x3}, {0xfffffff8, 0x5, 0x2, 0x401, 0x3, 0xea2}, {0x7f, 0x40, 0xe1, 0x18000, 0xa, 0x6}, {0x267, 0x3, 0x0, 0x8, 0x100, 0x5}, {0x8, 0x0, 0x9, 0x4, 0x4, 0x9}, {0x3, 0x51, 0x7fff, 0xf6d49c7, 0x7fff, 0x1321}, {0x5, 0x3, 0x8001, 0x6, 0x4, 0x101}, {0x362, 0x6, 0x5, 0x8bc, 0x5, 0x200}, {0x7, 0x3, 0x0, 0x8, 0xefd, 0x7f}, {0x6, 0x10, 0x4, 0x80, 0x4, 0x2}, {0xb07, 0x1, 0x81e, 0x9, 0x4, 0x5}, {0x875f, 0x3, 0xaff, 0x9, 0xcf, 0xd}, {0x9, 0x3, 0x8, 0x5, 0x2, 0x9}, {0x4, 0x80000001, 0x10, 0xffffffff, 0x0, 0x2}, {0x0, 0x7f, 0x335, 0xfffff783, 0x2}, {0x2, 0x620, 0x8, 0x40, 0x6, 0x2}, {0x7, 0x0, 0xaa74, 0x4, 0x5, 0x7}, {0x8001, 0x1, 0x25f1, 0x9, 0x80000000}, {0x1ff, 0x2, 0x4, 0x2, 0x400, 0x9}, {0x9, 0x3, 0x2, 0xa, 0x6, 0x6}, {0x7f, 0x67a2, 0x4, 0x200, 0x4, 0x42ca}, {0x7, 0x2, 0x7, 0x5, 0x1}, {0x2, 0x8, 0x2, 0xff, 0xfffffffe, 0x8}, {0x101, 0x10000, 0x5, 0x6, 0x7, 0x4}, {0x80000000, 0x5, 0x8, 0x9, 0x62, 0x2}, {0x7, 0x7, 0x8bad2458, 0x6, 0x1, 0x46ee}, {0x0, 0xe, 0xffffff9a, 0x4, 0x2}, {0x0, 0x4, 0xf, 0x75, 0x4, 0x401}, {0xc0000000, 0x2, 0x6, 0xe1, 0x605, 0x5}, {0x80, 0x0, 0x0, 0x4, 0x6, 0x8}, {0x3ff, 0xfff, 0x0, 0x6d, 0xc, 0x1}, {0x7, 0x2, 0x1, 0x1, 0x2, 0xd}, {0x8, 0x5, 0xc, 0xffff63de, 0x2, 0xfffffd61}, {0xffff, 0x7, 0x0, 0x6, 0x8, 0x7}, {0xc, 0x3, 0x101, 0xf8, 0xb, 0x200}, {0x9, 0x9, 0x5, 0x8, 0x9, 0x3}], [{0x3}, {}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x5, 0x3}, {0x1, 0x1}, {0x1}, {}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x9d3413911b582539}, {}, {0x2, 0x2dc49a858e50177e}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3}, {}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x3}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {0x5, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {0x2}, {0x3}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x3}, {0x3}, {0x4, 0x1}, {0x2}, {0x1}, {0x6}, {}, {0x1, 0x1}, {0x2}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x4}, {0x1}, {0x1}, {0x2}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x1}, {0x5}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {0x3}, {0x5}, {}, {0x3, 0x1}, {0x3}, {0x1}, {0x4}, {0x1}, {0x2}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4}]}}, @TCA_PEDIT_KEYS_EX={0x78, 0x5, 0x0, 0x1, [{0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_PARMS_EX={0xeb0, 0x4, {{{0x9, 0x7, 0x4, 0x80000000, 0xe}, 0x0, 0x39, [{0x635598a5, 0x1, 0x6, 0x9, 0x1, 0xffffffff}, {0x6f8, 0x6, 0xfffffffa, 0x800, 0x7, 0x100}, {0x2, 0x7ff, 0x40, 0xa4b6, 0x1, 0x80000000}, {0x562, 0xf, 0xfffffffe, 0x2, 0x9}, {0xffffe9c7, 0x8, 0x3, 0xffff, 0x8, 0x8}, {0x3d, 0x8, 0x9, 0x1, 0x7, 0x10000}]}, [{0x30000000, 0x2, 0x7, 0xff, 0x1000, 0x1}, {0x8d, 0xff, 0x5, 0x6, 0x9, 0x100}, {0x2, 0x5, 0x5, 0x5, 0x1, 0x8}, {0x2, 0x5, 0x104, 0x80000000, 0x33, 0x6}, {0x1, 0x40, 0x8001, 0xb6, 0x8, 0x13b9}, {0x1ff, 0xe5, 0x9, 0x4, 0x5, 0x3}, {0x5, 0x7, 0x7, 0x1, 0x2, 0xb4cc}, {0x9, 0x6, 0x7ff, 0x1, 0x9, 0xcaf1}, {0x200, 0x7, 0xffffffff, 0x3, 0x389e, 0x200}, {0x9, 0x2, 0x2, 0x0, 0x45, 0x4}, {0x5, 0x10001, 0x2, 0x0, 0xffff, 0x8}, {0x6, 0x0, 0x1, 0x7, 0x1ff, 0x6}, {0x100, 0x6, 0x3, 0x0, 0x800, 0x9}, {0xbd, 0x0, 0xab8b, 0x5, 0x6, 0x3}, {0x660e, 0x5, 0x3, 0x7c1, 0x3, 0xff}, {0x2, 0x2, 0x24d1, 0x8000, 0xc, 0x1}, {0x8, 0x6, 0x3, 0x1, 0x5, 0x10000}, {0x1000, 0x9, 0x1, 0x8, 0x5, 0xe3e2}, {0x68a, 0x7, 0x9, 0x8, 0x2, 0x3ff}, {0x40, 0x5, 0x7941, 0x6f, 0x5, 0x8000}, {0x7, 0x98c, 0x5, 0x29, 0xffffffff, 0x2}, {0x3, 0x3, 0x8, 0xfff, 0xfffffffd, 0x3}, {0x4, 0x9, 0x80000000, 0x4, 0x9, 0x8001}, {0x4, 0xff, 0x1, 0x9, 0x2, 0xfff}, {0x6, 0x1, 0x2, 0x9, 0x572, 0xbd}, {0x81, 0x0, 0x2, 0x1, 0x4}, {0x0, 0x200, 0x3, 0x640, 0x5, 0x10001}, {0x9, 0x4, 0x6, 0x7, 0x2, 0x1}, {0xff, 0x45, 0x4, 0x474, 0x7, 0xbf67}, {0x5, 0x4, 0xfffffff8, 0x29ae, 0x6, 0xa}, {0x521, 0x0, 0x80000000, 0x5, 0x4, 0x9}, {0x3, 0xfffffff9, 0x6, 0x0, 0x5, 0x6}, {0x800, 0x101, 0x8, 0x80000001, 0x7, 0x5}, {0x8, 0x7fffffff, 0xffffffff, 0x3, 0x2cb6, 0x7}, {0x7, 0x7, 0xf0, 0x1, 0x3, 0x80000001}, {0xe9, 0x7, 0x8, 0x9, 0xb4f, 0x5}, {0x8001, 0x0, 0x9, 0x5, 0x6, 0x1a}, {0x3, 0x9, 0xb60, 0x45a, 0x40, 0xe}, {0x0, 0x0, 0x4, 0x6, 0x0, 0x6}, {0xf, 0x7, 0x6, 0x7fff, 0x6, 0xead}, {0x5, 0x800, 0xfffffffc, 0x6, 0xd0b3, 0x5}, {0x9, 0x1, 0x7fffffff, 0xffffff80, 0x0, 0x4}, {0xd, 0x8001, 0x7cba5ce, 0xb736, 0x66ec, 0xff}, {0x3, 0x5, 0xfff, 0x7, 0xc0, 0x5}, {0xe2d0, 0x2, 0x40, 0x8, 0x1, 0x7}, {0x800, 0xfffffff6, 0x2, 0x1, 0x427a9637, 0xe2e4}, {0x3, 0x8, 0x8, 0xe1, 0x7, 0x3}, {0x2, 0x7, 0x5, 0x0, 0x71, 0x3}, {0x0, 0x6, 0x8, 0x3, 0x8, 0x9}, {0xab3, 0x1, 0x7, 0x9, 0x9e, 0x7}, {0x100, 0x4, 0x4, 0x8, 0x0, 0x9}, {0x4000, 0x439492f4, 0x101, 0xffff, 0xc2000, 0x94}, {0xfff, 0x2, 0x5, 0x2, 0x3d, 0x7}, {0xa, 0x7, 0x31, 0x0, 0x3, 0x6}, {0x8, 0x9, 0x4, 0xffffff00, 0x7, 0x2}, {0x9, 0x53, 0x8, 0x4, 0x5, 0x8}, {0xfff, 0x5, 0xc, 0x3, 0x8, 0x6}, {0xfffffffb, 0x9, 0x8, 0x5, 0xffff, 0x3ff}, {0x9, 0x7, 0x0, 0x1, 0x5, 0xfffffeff}, {0x8001, 0x5, 0x8, 0x4, 0x7, 0x1}, {0x0, 0x71e, 0x137a, 0x8, 0xfffffff1, 0x519}, {0x7, 0x9, 0x400, 0x8, 0x5, 0x30}, {0x9, 0x6, 0x9, 0x800, 0x94f8, 0x7f8}, {0xffffff80, 0x3, 0x2, 0xa, 0xbd, 0xffffffff}, {0x5b0, 0x7, 0x4, 0xc3f, 0x40, 0x3ff}, {0x401, 0x7, 0x3, 0x1, 0x1, 0x100}, {0x3, 0x3, 0x7, 0x5be, 0x1, 0x8}, {0x9, 0x4, 0x2a, 0x4, 0x9, 0x75}, {0x9, 0x1, 0x4, 0xf, 0x80000000, 0x7966}, {0x7ec, 0x1, 0x0, 0x55, 0xffff5a93, 0x3}, {0x800, 0xb2, 0x401, 0x6, 0x5, 0x1}, {0xfffffc01, 0x9, 0x5, 0xb, 0x1, 0x8}, {0x8, 0x1, 0x6, 0x8, 0xfffffffc}, {0x6, 0x100, 0x4, 0x4, 0x7, 0x5}, {0x5, 0x4, 0xfffffffd, 0x4, 0x3ff, 0xfffffffa}, {0x401, 0x1, 0x4c, 0x1, 0x7, 0x6}, {0x8, 0x2, 0xd2, 0x0, 0x0, 0x2}, {0x2, 0x7, 0x80000000, 0x4, 0x1, 0x47}, {0x6, 0x8, 0x1, 0x2, 0x7, 0x4}, {0x4, 0xc4, 0x9, 0x8, 0x16a8, 0x14}, {0x4416, 0x1fe00000, 0x9, 0x100, 0x21, 0x54b}, {0xfffffffd, 0x3, 0x1, 0x401, 0x6000, 0x6}, {0x6, 0x2, 0xffffffff, 0xfffffff9, 0x1c, 0x4}, {0x2, 0xffffff2c, 0x6f, 0x1, 0x6, 0xc6f7}, {0x8001, 0x0, 0x4, 0x4, 0x4, 0x1}, {0xb, 0x6, 0x87, 0x5, 0x7f, 0xa}, {0x2, 0x1, 0xa, 0x10, 0x7ff, 0x4}, {0x6, 0x6f9, 0x7, 0x2, 0x16fa, 0xff}, {0x7fff, 0x9, 0x2, 0x8, 0x4, 0x5}, {0x8ad4, 0x3, 0x3e3, 0x1ff, 0x33d9, 0x6}, {0x6, 0x8001, 0x1, 0x9, 0x80000000, 0x81}, {0x1000, 0xd8, 0x1ff, 0x2, 0x3, 0x6}, {0x8, 0x80, 0xfffffffe, 0x81, 0x0, 0x800}, {0x9, 0x6, 0x4, 0x7, 0x49, 0x1}, {0x1, 0x80000000, 0x8, 0x401, 0x7, 0x10000}, {0x4, 0x5, 0x2, 0x8, 0x7}, {0x3, 0x100, 0x7, 0x0, 0xfffffffe}, {0xc, 0x0, 0xbe32, 0x4, 0xeb8, 0x42584fd5}, {0x5, 0x4, 0x0, 0x2, 0x1, 0x4}, {0x5, 0x8, 0x2, 0x0, 0xa4, 0x5}, {0x2, 0x5, 0x7d, 0x2dc, 0x4, 0x7}, {0x8000, 0x3, 0xa, 0x1, 0x5, 0x800}, {0x0, 0x1, 0xfb80, 0x7fff80, 0x9, 0x1a}, {0x8, 0xc77c, 0x7, 0x5, 0x8, 0x1c4}, {0x6, 0x22, 0x10001, 0x0, 0x28000, 0x8fb}, {0x7, 0x401, 0x4, 0x8001, 0x9, 0x5f}, {0x505015b6, 0x7ff, 0xffffffdf, 0x9, 0x5d6ddcdb, 0xa}, {0xf, 0x2, 0x8, 0x917, 0x40, 0x9}, {0x800, 0x10001, 0x2, 0x8, 0x3ff, 0x17}, {0x8, 0x1, 0x3, 0x31, 0x480, 0x3}, {0x8, 0xfffffff8, 0xc12c, 0x32b, 0x6, 0x2}, {0x5, 0x40, 0x60000000, 0xb, 0x7996, 0xcab}, {0x1, 0x2, 0x1, 0x0, 0xfbe, 0x8}, {0x0, 0x6, 0x6, 0x0, 0xf74, 0xa}, {0x3, 0x7ff, 0x2, 0x1000, 0x1, 0x3}, {0x3, 0x0, 0x8000, 0x3, 0x3, 0x7}, {0x7, 0x9, 0x6, 0x8001, 0x3ff, 0x1}, {0xff, 0x7f, 0x40, 0x8001, 0x3, 0xd}, {0x5b, 0x9, 0x3, 0x4, 0x4, 0x401}, {0x2ffc00, 0x5a3, 0xfffffffc, 0x0, 0x3, 0x6}, {0x0, 0x10, 0xfc75, 0x3, 0x10001, 0x74}, {0x5, 0x1000, 0x0, 0x0, 0x6, 0x78b}, {0x800, 0x0, 0x0, 0xf, 0xfff, 0xa}, {0x5, 0xffffff7f, 0x4, 0xb2b, 0xffffff0b, 0x7}, {0x8, 0x9, 0xe, 0x2, 0x4, 0x9}, {0x1, 0x1, 0x5e2c, 0x7, 0x2, 0xe90a}, {0x8, 0x5, 0xb, 0x7, 0xfffffbff, 0xb72}, {0x7, 0x9d7, 0xfffffff7, 0x0, 0x4, 0xd7}], [{0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x5}, {0x3}, {0x4, 0x1}, {0x7}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0xc9115c7b76057f4c}, {0x5}, {0x6, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x48e08d2962794f0f}, {0x4}, {0x4}, {0x2}, {0x4, 0x1}, {0x2}, {0x4}, {0x4}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x4}, {0x5}, {}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {0x4}, {}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4}, {0x5, 0x1}, {0x5}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x5}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x2ca7b3a445c9f89}, {0x4, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x4, 0x7079ea56bb099a1b}, {0x4}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x2}, {0x5, 0x28743431175d1f77}]}}]}, {0xae, 0x6, "39082d10a3f2be1bc3d4407cf252401efe9cae88148b0ca16cca79c55a89e87fb7173b43d1b723bc759044890105e0c60fe8b8e70f76bb1006ac581cea6acd36ce52ceff4576daf3577bbd3174e9a2c99c9f27c70688a3b4f5858b54931ba1cf6d789433a1007803002af242e23316b8ed34c53b2a110cd9caebb00f75c0b1609edc8771520ad2e75f5aaeea6a25e5b3423ca696061b8c4a597d156ec03f0f2019a8df89118dcb436531"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_CGROUP_POLICE={0x464, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0xdeb}, @TCA_POLICE_RESULT={0x8, 0x5, 0x101}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4207, 0x8, 0x4, 0x8, 0x6, {0x54, 0x0, 0x3ff, 0x1, 0x9, 0x351b}, {0x80, 0x2, 0x4b1, 0x3, 0x2, 0x6}, 0x3, 0x7, 0x6}}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0xfffffff7, 0x7ac, 0x4, 0x6, 0x1000, 0x10, 0x9, 0x401, 0x6, 0x2, 0x6, 0x3, 0x4, 0xc, 0x2, 0x2, 0x800, 0x2, 0x100, 0x4, 0x4, 0xffff, 0x4, 0x6, 0x5, 0x7, 0x10, 0x10000, 0x1, 0xc4d2, 0x6, 0x8, 0x2, 0x81, 0x3, 0x8000, 0x8, 0xa, 0x1, 0x9, 0x2, 0x6, 0x8, 0x401, 0x137, 0x200, 0x4, 0x4, 0x1, 0x10001, 0x6f, 0x8, 0xc, 0x5, 0x1, 0x800, 0xbe72, 0x8, 0x2, 0xff, 0x3, 0x10001, 0x6bae, 0xe6, 0x7fffffff, 0x6963, 0x2, 0x7fffffff, 0xa715, 0x3e2, 0x7, 0x6, 0x5, 0x3, 0xc66, 0x4e7, 0x2, 0x81f, 0x0, 0x7fffffff, 0x9, 0x5, 0x0, 0xe00, 0xffff8ae8, 0x4, 0x233, 0x9, 0x4, 0x7fffffff, 0x1cc, 0x10001, 0x4, 0x8, 0xe, 0x3, 0x3, 0x400, 0x1, 0xfffffe01, 0x6, 0xe, 0x6, 0x9, 0xcf, 0x0, 0x16b7, 0x101, 0x0, 0x8001, 0x100, 0x1, 0xad2, 0xc3, 0x5, 0xe0863ae4, 0x9, 0x586, 0x8f0, 0x7fffffff, 0x8, 0x40, 0x4, 0xfffffffb, 0xffff7fff, 0x5, 0x0, 0xd, 0x100, 0x4, 0x3, 0xb, 0x4, 0x7fffffff, 0x7, 0x9, 0x1dc4, 0x4f, 0xfffffffc, 0x80, 0x8, 0x3bb, 0x5, 0x5, 0x3ff, 0x2, 0x81, 0x779, 0x7fff, 0x3, 0x5, 0x80, 0x2, 0x3, 0x7, 0xf967, 0x3, 0x4, 0x3, 0x76, 0x80, 0x3, 0x0, 0x6, 0x7, 0xffffff01, 0x4, 0x80000001, 0xae, 0x80, 0x32a, 0x4, 0x7, 0x7, 0x9, 0x54, 0x2, 0x56ad, 0x4000, 0x8, 0x80, 0x6, 0x0, 0x9, 0x9, 0x3, 0x1, 0x5, 0x0, 0x6, 0x2, 0x2, 0xe6f, 0xc4d, 0x3, 0x41, 0x1ff, 0x1, 0xf, 0x9, 0xfffffff8, 0x0, 0xfffffff7, 0x9, 0x1, 0xffff, 0x3, 0x4, 0x10001, 0x1000, 0xfffffff8, 0x9, 0xff, 0x7, 0x7ff, 0x1, 0x6, 0x7, 0x180000, 0xfff, 0xffffffff, 0x1000, 0x9, 0x7f, 0x8, 0x8, 0x3, 0x8, 0x4, 0x3, 0x935, 0x80, 0x81, 0x7ff, 0x4b, 0xffffffff, 0x101000, 0x0, 0x35b, 0x7, 0x81, 0x580, 0x9, 0x200, 0x7, 0xc1, 0xfc55, 0x401, 0x1, 0x5, 0x2e70, 0x9, 0x7, 0x2, 0x5]}, @TCA_POLICE_RATE64={0xc}]}, @TCA_CGROUP_ACT={0x238, 0x1, [@m_mpls={0xc4, 0x1b, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x3}]}, {0x90, 0x6, "41541e96cab53739b5d094a411b9a30158b02d820c6af720685f492dd0c6bed4407e8a676e60cea9816b3aaee1bac041337b1ea64ba94730993b783e81ae2541b7ef009eb6204638b200a486e88e1362cba336d81f508e642102dafa4c95993a49174045367e35652e8702e181d4547f578abb820153aa7dbbb7ce2fda5002e0a19e6861936faab7b05026ed"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_mirred={0x170, 0x20, 0x0, 0x0, {{0xb}, {0x104, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x4582, 0x4, 0x10000000, 0x7fffffff, 0x6}, 0x3, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7ff, 0xd6, 0x0, 0xe9e, 0xfffffffb}, 0x1, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x5, 0x5, 0x4, 0x800}, 0x0, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x2134bfbb, 0x1, 0xfffffffc, 0x2}, 0x2, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x4, 0x8, 0x7, 0x5d3}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x52cb960c, 0x3, 0xdb5}, 0x2, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x7, 0x10000000, 0x6, 0x101}, 0x2, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffffc, 0x1, 0x5, 0x9, 0x7}, 0x1, r1}}]}, {0x44, 0x6, "35587e6dec6a8f6bb35043cd58ae38988b699843dbcc67437343684e1d953a0d8482b28bce3e01d769605c0835208fe088e8f42fce6c5d0e6b3b6ab60d9b31a5"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x258c}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) socket(0x10, 0x803, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/vhci\x00', 0x2, 0x0) read$FUSE(r2, &(0x7f00000002c0)={0x2020}, 0x2020) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x4}]}) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) syz_emit_ethernet(0xb6, &(0x7f00000023c0)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='westwood', 0x8) getsockopt$inet_tcp_buf(r2, 0x6, 0xd, 0x0, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x160341) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.575483031s ago: executing program 5 (id=1428): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000380), 0x10, 0x2) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000180)={0x23, 0x3, 0x1c, 0x1, 0x0, 0x3e8, 0x0}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r2) socket$inet6(0xa, 0x3, 0x7) syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x7, 0x96603) r3 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRESDEC=r3, @ANYRES8=r3], 0x7c}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) openat$vcs(0xffffff9c, 0x0, 0x50040, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd7000ffd9df2502000000ff000008"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4040) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r5 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x40c1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r6, &(0x7f0000000140), 0x2, 0x0) mkdirat$cgroup(r6, &(0x7f00000000c0)='syz1\x00', 0x1ff) write$nbd(r5, &(0x7f0000000400)=ANY=[], 0x34) openat$nci(0xffffff9c, 0x0, 0x2, 0x0) 1.45143492s ago: executing program 2 (id=1429): socket$netlink(0x10, 0x3, 0x10) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0) ioctl$SNAPSHOT_S2RAM(r0, 0x330b) openat$dsp(0xffffffffffffff9c, 0x0, 0x101c02, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000280)={'vxcan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r4 = getpid() syz_pidfd_open(r4, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x400000000008, 0x7, 0x8000003}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="910904000000000095000000000000000c321aa1ca721f126d80eef2e5c5ee308fd5a77d9ed691b85c54b9664d4fa62b59c3ae0b33b41507d374e46e1f3c07fd0082441b0303c70f4f6e09c3085b0991cae600"/96], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) pipe2$watch_queue(0x0, 0x80) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x29}) shmctl$IPC_RMID(r5, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/fib_triestat\x00') r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r7, &(0x7f0000000000)={0x24, @short={0x2, 0x0, 0xffff}}, 0x9) preadv(r6, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x28182, 0x0) ioctl$AUTOFS_IOC_FAIL(r8, 0x4c80, 0xffffffffffffffb6) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x0, {}, 0xfd}, 0x18) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0, {0x3, 0x0, 0x0, '\x00', 0x0, 0x40000}}) io_uring_enter(0xffffffffffffffff, 0x521c, 0x1, 0x61, 0x0, 0x18) 1.335569138s ago: executing program 7 (id=1430): mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a\x9e@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e*\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x4, 0x90743) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r0, 0x29, 0x33, 0x0, &(0x7f0000000080)) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc854}, 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$FBIOBLANK(r1, 0x4611, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) epoll_create(0x5) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(0x0, 0x0, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x501, 0x70bd2c, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) sendmsg$NL80211_CMD_DEL_KEY(r3, 0x0, 0x24002000) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x1ac}, 0x1, 0x0, 0x0, 0xc000}, 0x40d0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4001) socket$inet_mptcp(0x2, 0x1, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x1, 0x0) write(r5, &(0x7f00000002c0)='16', 0x2) 637.350011ms ago: executing program 6 (id=1431): mkdir(&(0x7f0000000150)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) splice(r0, 0x0, r1, 0x0, 0x88000cc, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000740)={{{@in6=@loopback, @in=@dev}}, {{@in=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000840)=0xe4) mkdir(&(0x7f0000000300)='./config/usb_gadget/g_syz\x00', 0x1ff) mkdir(&(0x7f0000000400)='./config/usb_gadget/g_syz/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000500)='./config/usb_gadget/g_syz/functions/ecm.usb0\x00', 0x1ff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r4, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x44, r6, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x8, 0x30}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r8 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1438a}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000880}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c000180060006008848"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r11 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g_syz/functions/ecm.usb0/ifname\x00', 0x1, 0x0) write(r11, &(0x7f0000000700)='syzkaller%d', 0xb) 531.860145ms ago: executing program 5 (id=1432): mkdir(&(0x7f0000000150)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) splice(r0, 0x0, r1, 0x0, 0x88000cc, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000740)={{{@in6=@loopback, @in=@dev}}, {{@in=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000840)=0xe4) mkdir(&(0x7f0000000300)='./config/usb_gadget/g_syz\x00', 0x1ff) mkdir(&(0x7f0000000400)='./config/usb_gadget/g_syz/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000500)='./config/usb_gadget/g_syz/functions/ecm.usb0\x00', 0x1ff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r4, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x44, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x8, 0x30}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1438a}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000880}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c000180060006008848"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g_syz/functions/ecm.usb0/ifname\x00', 0x1, 0x0) write(r8, &(0x7f0000000700)='syzkaller%d', 0xb) 530.318018ms ago: executing program 2 (id=1433): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, 0x0, 0x0) r2 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(r3, 0x0) setreuid(0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r5, 0x40045612, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) r7 = openat$autofs(0xffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {r3, r4}}, './file0\x00'}) recvmmsg(r6, &(0x7f0000007700), 0x318, 0xfc0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x136) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000400000000000000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0xb6df4c32c1d5c814}, 0x94) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e23, @multicast2}}, [0x9e8, 0x7, 0x0, 0x7, 0x0, 0x205a305173, 0x10ff, 0xfffffffffffffff9, 0x8, 0x0, 0x4, 0x100, 0x6, 0x7, 0x7]}, &(0x7f0000000600)=0xfc) sendfile(r8, r8, 0x0, 0x23) 378.268113ms ago: executing program 2 (id=1434): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0), 0x12) syz_usb_connect(0x0, 0x39, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x400448ca, 0x0) ioctl(r0, 0x400448c9, 0x0) bind$bt_hci(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000000)={0x0, 0x20006, 0x3, 0x2, 0x9e, "3f3c5e0000ff775cfffffffff903e7ffffff00", 0x401, 0x91}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) write(r0, &(0x7f0000000200)="4a00000011007f0314066f9a70932d490675bc59083301", 0x17) 373.799541ms ago: executing program 6 (id=1435): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x41, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$KVM_SET_CLOCK(r1, 0xc048aec8, &(0x7f00000000c0)={0x5, 0xc, 0x1ff, 0x20004, 0x4}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd(0x3a07) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x34, r7, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x88050}, 0x20000000) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000180)={0x0, 0x0, @pic={0x7, 0x0, 0x3, 0x7, 0x2, 0x7, 0x8, 0xc1, 0x80, 0x7, 0x3, 0x8, 0x4, 0x8, 0x6e, 0x1}}) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000080)={0x27800000000, 0x0, 0x2, r4, 0x1}) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x277ffffffff, 0x0, 0x8, r4}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@ipv6_deladdr={0x40, 0x15, 0x801, 0x70bd2d, 0x25dfdbfc, {0xa, 0xf1, 0x8}, [@IFA_LOCAL={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc000905850200"], 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000800)={0x24, &(0x7f0000000540)=ANY=[@ANYBLOB="200c62000000d4fea1645079c82bd9dba3345cef118f9c43641d02756be197240e948624b1f6b5223b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r10, 0xc01064c8, &(0x7f0000000200)={0x0, 0x2000000, 0x0}) r11 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r11, &(0x7f0000000300)=""/227, 0xe3) read$char_usb(0xffffffffffffffff, &(0x7f0000000400)=""/186, 0x110) syz_open_dev$evdev(&(0x7f0000000040), 0x3e, 0x208604) r12 = userfaultfd(0x801) ioctl$UFFDIO_API(r12, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r12, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) 240.772568ms ago: executing program 5 (id=1436): mkdir(&(0x7f0000000150)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) splice(r0, 0x0, r1, 0x0, 0x88000cc, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000740)={{{@in6=@loopback, @in=@dev}}, {{@in=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000840)=0xe4) mkdir(&(0x7f0000000300)='./config/usb_gadget/g_syz\x00', 0x1ff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r4, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x44, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x8, 0x30}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000880}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g_syz/functions/ecm.usb0/ifname\x00', 0x1, 0x0) write(r5, &(0x7f0000000700)='syzkaller%d', 0xb) 174.574546ms ago: executing program 5 (id=1437): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c00078005001500267d00000500010007000000050005000a000000050004"], 0x5c}}, 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x810, r0, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x1000000, @private0}, 0x1c) r4 = socket$kcm(0x29, 0x2, 0x0) close(r4) socket$kcm(0x2, 0x200000000000001, 0x106) r5 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r5, 0x400, 0x1) ioctl$VT_RESIZE(r5, 0x5609, &(0x7f0000000000)={0x4d6, 0x9, 0x10}) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f0000000000)={{@my=0x1, 0xffffffff}, @any, 0x0, 0x0, 0x8000000, 0x0, 0x6}) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x8002) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0x403c5404, &(0x7f0000000040)={{0x1, 0x0, 0x400006, 0x3}, 0x1, 0x0, 'id0\x00', 'timer1\x00', 0x0, 0x7}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x3, 0x0, 0x7fff8000}]}) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1f8) syz_emit_ethernet(0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x1, 0x6, 0x4d, 0x39cc191a, 0x60, 0x9, 0x5b2, 0xffffffff, 0x0, 0x6, 0x3, 0x0, 0x2a8, 0x4, 0x10007, 0x4, 0x3c5b, 0x1, 0xb, 0x4000000b, 0xfffffffd, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0x11, 0x0, 0xffffffff, 0x2, 0x406, 0x3, 0x2, 0x5, 0x3e, 0x8b, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0xffff, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x43, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8002, 0x9, 0x3fe, 0x401, 0x6, 0x2, 0xfb, 0x5, 0xffffffff, 0x5f31, 0xbcf5, 0x1, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x3, 0x6, 0xb, 0xa, 0x1, 0x6, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x88f6, 0x400004], [0x6, 0x6, 0x80000001, 0x6, 0xff, 0x100, 0x8d2, 0xd, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x5, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0xffffffff, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x835, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x6, 0x6, 0x5, 0x0, 0xfffffffd, 0x80ce7, 0x1ff, 0x3, 0x7, 0x100, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x0, 0xf, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x8, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7b, 0x20100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x2, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') write$proc_mixer(0xffffffffffffffff, 0x0, 0x5) 131.72496ms ago: executing program 7 (id=1438): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff0000000000010902"], 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/ipc\x00') ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, &(0x7f0000000ec0)={{r2, 0x0, 0x101200, 0x0, 0xa94, &(0x7f0000000340), 0x0}, 0x0, &(0x7f0000000dc0)}) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) unshare(0x28000600) socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r4, &(0x7f0000000400)={0x50, 0x0, r5, {0x7, 0x1f, 0x8, 0x10628, 0x9, 0xba, 0xe88, 0xabe6, 0x0, 0x0, 0x4, 0x8001}}, 0x50) syz_fuse_handle_req(r4, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f0000004200)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x3, 0x0, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x8, 0xffffffff, 0xfffffffe, 0x0, 0x80000, 0x8000, 0x0, 0x0, r6, 0x1, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_fuse_handle_req(r4, &(0x7f0000006340)="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", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r7, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1) dup3(r4, r7, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) sendfile(r3, r8, 0x0, 0x2c0c) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) 113.218439ms ago: executing program 5 (id=1439): socket(0x10, 0x3, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0x1b10, 0x0, 0x1, 0x2}, 0x2f, [0x4, 0x1, 0x704d, 0x1, 0x5, 0x1, 0x2, 0x0, 0x4, 0xfffffc01, 0xfffffffb, 0x8, 0x1, 0x100, 0xfe, 0x48, 0x7, 0x5, 0x2ca, 0x8, 0x76, 0x8, 0x0, 0x81, 0x40, 0x19b1, 0x8000, 0x7, 0x797, 0x4000000, 0x3, 0x3, 0xe, 0x7, 0x5, 0x1, 0x5, 0xe, 0x7, 0x10001, 0x9, 0x7f, 0x8, 0x6, 0xfffffff7, 0x4, 0x7, 0x40, 0x7f, 0x9, 0x1, 0x6, 0x0, 0x2284919, 0x4, 0x5643fa73, 0xfffeffff, 0x6, 0x800, 0x2, 0x8a, 0x6, 0x2, 0x6], [0xfffffed2, 0x7fffffff, 0xffff, 0x8, 0xe62, 0x3, 0x3, 0x9, 0xc33, 0x3, 0x7, 0x800, 0x6c368000, 0x8, 0x1000007, 0x0, 0x10, 0x5, 0x8, 0x8001, 0x3, 0x7fff, 0x80000009, 0x0, 0x5, 0x4, 0x401, 0x8, 0x40, 0xc10, 0x80000001, 0x3, 0x3, 0x3, 0x7, 0x8, 0x8, 0x5, 0x4, 0x9, 0x5, 0x3, 0x2, 0x3, 0x0, 0x11e, 0xa4, 0x0, 0x5, 0xd69, 0x9, 0xf404, 0xf1, 0x3, 0x3, 0x1, 0x6, 0x6, 0x0, 0x6, 0x8, 0x6, 0x4, 0x1000068], [0x1, 0x1, 0x4, 0xfffffffc, 0x0, 0x7fff, 0x405, 0x9, 0x2, 0xffc, 0x7, 0x4, 0xc, 0x7, 0xa, 0xa, 0x8, 0x7, 0x5, 0x5, 0x2, 0x30000000, 0x644, 0x7, 0x80000001, 0x7, 0x5, 0x7f, 0x7ff, 0xd, 0x400, 0xf, 0x41, 0x81, 0xc99, 0x25a, 0x2, 0x0, 0x2, 0x5d9fffa, 0x3ff, 0x40, 0x1, 0x8, 0x10000, 0xe7, 0x200, 0x7af5, 0x0, 0xb, 0x0, 0xffff, 0x7, 0xc, 0x2, 0x81, 0x9, 0x2, 0x7, 0x100, 0x7, 0x3, 0x6, 0x10], [0xffffff80, 0xd5800000, 0x0, 0x4, 0x2, 0x62a, 0x3, 0x407, 0xb343, 0x4, 0x1, 0x8, 0x8000, 0x8, 0xffffff81, 0x80000000, 0x5, 0x3, 0x201, 0xfff, 0x3, 0xfffffffd, 0x3c63, 0x7, 0x6, 0xe6, 0xffffffff, 0x3, 0x2, 0x7, 0x1, 0x7, 0x7, 0x8, 0x1, 0xf, 0x9, 0x17cb, 0x0, 0x3, 0x6fe, 0xe, 0x7, 0x13a, 0x7, 0x0, 0xb757, 0x2, 0x11b, 0x996, 0x54, 0x8c1, 0x0, 0x5, 0x4, 0x2, 0x5, 0x10000400, 0x9, 0x5, 0x3, 0xfffffffb, 0xc, 0x6]}, 0x45c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$kcm(0x2d, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_ublk_setup_io_uring(0x791b, &(0x7f00000003c0)={0x0, 0xef18, 0x1, 0x3, 0x30f}, &(0x7f0000000440), &(0x7f0000000780), &(0x7f00000007c0)) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158, 0x0, r3}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1700000004000000080000000c00000000000000", @ANYRES32, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000019000000000000495482aac9ef8b3414fe94b10000"], 0x50) ptrace(0x10, 0x0) ptrace$pokeuser(0x6, 0x0, 0x118, 0xffffb453) ptrace$pokeuser(0x6, 0x0, 0x104, 0x7) io_uring_setup(0x14b6, &(0x7f00000002c0)={0x0, 0xf553, 0x8000, 0x1, 0x6e, 0x0, r4}) syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255, 0x0, r4}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1, 0x401f0, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00'], 0x48) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r12 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r12, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_script(r12, &(0x7f00000000c0), 0x28) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000140)={r0}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 0s ago: executing program 5 (id=1440): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x6, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000feffffff00000000000004008500000036000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010400000850000007100000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x72f4}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000003040)=@delchain={0x258c, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x255c, 0x2, [@TCA_CGROUP_ACT={0x4}, @TCA_CGROUP_ACT={0x1eb8, 0x1, [@m_pedit={0x1eb4, 0x1f, 0x0, 0x0, {{0xa}, {0x1ddc, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xeb0, 0x2, {{{0x0, 0x2, 0xf7b18ef080a2fc83, 0x76, 0x2}, 0x4, 0xea, [{0xe, 0x80, 0xe41, 0xd3, 0x4, 0x4}, {0xfff, 0xfffffffb, 0x6, 0x5, 0x6, 0x6}, {0xfff, 0x5, 0x4, 0xe, 0x3, 0x6}, {0x3, 0x6, 0x7, 0x7fff, 0x2, 0x3}, {0x316f, 0x9, 0x5a3, 0x5b, 0x3ff, 0x7ff}, {0x2, 0x2ef, 0x9, 0xfe7c, 0x6, 0x7f6}]}, [{0x6, 0x5, 0x2, 0x0, 0x5, 0x6}, {0xf233, 0x4, 0x5, 0x20cb, 0x7fffffff, 0x9}, {0xf30, 0x9, 0x3a, 0x5, 0xfffffff7, 0x101}, {0x5, 0x80000001, 0x7f, 0x3800, 0x5, 0x9}, {0x0, 0x200, 0xb, 0xa, 0x6, 0x6}, {0x7fff, 0x3, 0x1, 0x3, 0x4, 0x1ff}, {0x2, 0x9, 0x5, 0xd, 0xe8, 0x5f}, {0x4, 0xfff, 0x4, 0x5, 0xffff, 0x7}, {0x3, 0x5, 0xffff, 0x6, 0x12}, {0x3, 0x9, 0x2, 0xa4a, 0x1, 0x41c4}, {0xa99, 0x60, 0x3, 0x3, 0x5, 0x200}, {0x8, 0x9, 0x3ff, 0xf, 0x1, 0x35bfcab6}, {0x5, 0x4, 0x8, 0x0, 0x9, 0x101}, {0x4a00, 0xfffffffd, 0x5, 0x6, 0x5, 0x401}, {0x2, 0x5, 0x200, 0x561, 0xb3f, 0x645}, {0x2, 0x8, 0x55, 0x97, 0xfffffffb, 0x1}, {0x400, 0x9, 0x2, 0x7, 0x8, 0xed1}, {0xffffff80, 0x7, 0x4, 0x8, 0x8001, 0x2}, {0x1, 0x6617, 0x3, 0x8, 0x7, 0x10}, {0x4, 0x1, 0x5, 0x2470, 0x2, 0x551}, {0xfff, 0x21, 0x5, 0x3, 0x9, 0x9}, {0x7ff, 0x7ff, 0x0, 0x9, 0x10001, 0x3}, {0xd, 0x0, 0x138, 0x5, 0x2, 0xfffffffe}, {0x5, 0x2, 0x7, 0x1ff, 0xffff8c3c, 0x2}, {0x1, 0x4, 0x0, 0xe, 0x2, 0xbf5}, {0x99, 0x0, 0x3, 0x330, 0xffffffff, 0x5}, {0x2, 0x570f, 0x94, 0x3569, 0x1ce7a, 0x1}, {0x4, 0x3, 0x7, 0xfa2, 0x4}, {0x4, 0x1, 0x3, 0x3192, 0x28, 0x3}, {0xa5, 0x6, 0x7f, 0x6, 0x6, 0xffff8001}, {0x9, 0x50ea6efa, 0x0, 0x3ff, 0x401, 0x40}, {0x332cda67, 0xc, 0x10000, 0x6, 0x8, 0x6c}, {0x80, 0xffff, 0xffff, 0x3, 0x7, 0x9}, {0x7a7, 0x8001, 0x5, 0x4, 0xc, 0x3}, {0x800, 0x8, 0x8, 0x400, 0x5, 0x400}, {0x7fff, 0x2, 0x1, 0x81, 0x827, 0xfff}, {0x9, 0x2, 0x6, 0x3ff, 0x4, 0x1}, {0x6, 0x7fff, 0x7, 0x80, 0x6fb, 0x5ea3}, {0xf1, 0x7, 0x4e, 0x1, 0x2, 0x8}, {0xca5, 0x3, 0x9, 0x668, 0x3, 0x5}, {0x1, 0x7, 0x4, 0x4, 0x8001, 0x4}, {0x6, 0x44, 0x732, 0x5, 0x5, 0x7ff}, {0x1, 0xfffffffa, 0x3ff, 0x0, 0x0, 0x80000001}, {0x3, 0x1, 0x3, 0xd3, 0x401, 0x7ff}, {0x8000, 0x4, 0x5a, 0x0, 0x8, 0x6}, {0xfff, 0x7, 0x6, 0x8, 0x5, 0x4}, {0x3ff, 0x6, 0x3, 0xe1, 0x10001, 0x6}, {0x3, 0x8e, 0xfffffff8, 0x17979e3c, 0x0, 0x9}, {0x6, 0x8, 0x9, 0x2, 0x9, 0x7}, {0x9, 0x58e, 0x1, 0x8, 0xffffffc0, 0x800}, {0x9, 0x7, 0x2, 0x5, 0x5, 0xb68e}, {0x3, 0x3, 0x2, 0xa8, 0x3, 0xfffffff9}, {0x0, 0x4, 0x5, 0x4d072854, 0x7, 0x3}, {0xad, 0x48, 0x2, 0x3, 0x7fff, 0x6}, {0x200, 0x4, 0x8, 0x46ef3c83, 0x5, 0x2}, {0x1, 0x4, 0x7a57, 0x3, 0x7, 0x7}, {0x80000001, 0x12000, 0x951e, 0x30132812, 0xc4, 0x3}, {0x9, 0x100, 0x401, 0x5, 0x2, 0x10000}, {0x8, 0x808000, 0x6, 0x8, 0x4, 0x8}, {0x5, 0x8, 0x1, 0x3, 0x5e, 0x8}, {0x7, 0x7ff, 0xdbe, 0x8, 0x1, 0x7}, {0x5, 0x6, 0x9, 0x73b8, 0x7, 0x174}, {0x9, 0x3, 0x6, 0xb5f7, 0x9, 0x7}, {0xf70, 0x2, 0x8, 0x8, 0xb971, 0x7ff}, {0x0, 0x4, 0x9, 0x5, 0x8, 0x80000000}, {0x2, 0x6, 0xffffffff, 0x6, 0x10000, 0x7}, {0x0, 0x4, 0x0, 0x81, 0x80, 0x4}, {0xc7ef, 0x3b6, 0x3553, 0x1b4000, 0xfffeffff, 0x6}, {0xffff, 0x482d6f93, 0x2, 0xf, 0x7f, 0x6}, {0x4, 0x1, 0x8, 0xffffff70, 0x7f, 0xf76d}, {0x7, 0xaab, 0x1, 0x7e, 0x8, 0x3}, {0xfff, 0x9, 0x10000000, 0x7fffffff, 0x1, 0x4}, {0x6, 0x2, 0x3, 0x3, 0x4, 0xc98c}, {0x1000, 0xffffffff, 0xb03, 0x6, 0x8, 0x8}, {0x7fff, 0x7, 0x432, 0x5, 0x6112, 0x1}, {0x507, 0x3, 0xfffffff1, 0x3, 0x8000, 0x3}, {0x8, 0x0, 0x4, 0x1e1, 0x3, 0xd}, {0x68699737, 0x4, 0xc, 0x23, 0x2, 0x4}, {0xffff8001, 0xfffffff8, 0x0, 0x680, 0x3, 0x5}, {0x40000000, 0x1335cc2, 0x3, 0x1ff, 0xffff3dd3, 0x3}, {0x7, 0x3, 0xfa, 0x0, 0x3, 0x2}, {0x1f2, 0xffffffff, 0x7, 0x967, 0x7, 0x2}, {0x39ab712c, 0x1000, 0x8, 0x4, 0x882b, 0x7fff}, {0x5, 0x1, 0x7fffffff, 0x2, 0xffffff81, 0x514}, {0x200, 0xe, 0x80000001, 0x6, 0x101, 0xff}, {0x3ff, 0x6, 0x8, 0x412f, 0x9, 0x4}, {0x7, 0x42, 0x0, 0x4, 0x4}, {0xa1d, 0xfffffffe, 0x7fff, 0x0, 0x1, 0x9f0d}, {0x6, 0x5, 0x6, 0xfffffffb, 0x8, 0xfffffffd}, {0x1ff, 0x8, 0x2, 0x7, 0x0, 0x3}, {0x0, 0x2, 0x4, 0x8, 0x8, 0x7}, {0xbfff, 0x6, 0x6, 0x2, 0x2248, 0x5}, {0x5, 0x8, 0x7fffffff, 0xffffffff, 0x8, 0x3}, {0xfffffff8, 0x5, 0x2, 0x401, 0x3, 0xea2}, {0x7f, 0x40, 0xe1, 0x18000, 0xa, 0x6}, {0x267, 0x3, 0x0, 0x8, 0x100, 0x5}, {0x8, 0x0, 0x9, 0x4, 0x4, 0x9}, {0x3, 0x51, 0x7fff, 0xf6d49c7, 0x7fff, 0x1321}, {0x5, 0x3, 0x8001, 0x6, 0x4, 0x101}, {0x362, 0x6, 0x5, 0x8bc, 0x5, 0x200}, {0x7, 0x3, 0x0, 0x8, 0xefd, 0x7f}, {0x6, 0x10, 0x4, 0x80, 0x4, 0x2}, {0xb07, 0x1, 0x81e, 0x9, 0x4, 0x5}, {0x875f, 0x3, 0xaff, 0x9, 0xcf, 0xd}, {0x9, 0x3, 0x8, 0x5, 0x2, 0x9}, {0x4, 0x80000001, 0x10, 0xffffffff, 0x0, 0x2}, {0x0, 0x7f, 0x335, 0xfffff783, 0x2}, {0x2, 0x620, 0x8, 0x40, 0x6, 0x2}, {0x7, 0x0, 0xaa74, 0x4, 0x5, 0x7}, {0x8001, 0x1, 0x25f1, 0x9, 0x80000000}, {0x1ff, 0x2, 0x4, 0x2, 0x400, 0x9}, {0x9, 0x3, 0x2, 0xa, 0x6, 0x6}, {0x7f, 0x67a2, 0x4, 0x200, 0x4, 0x42ca}, {0x7, 0x2, 0x7, 0x5, 0x1}, {0x2, 0x8, 0x2, 0xff, 0xfffffffe, 0x8}, {0x101, 0x10000, 0x5, 0x6, 0x7, 0x4}, {0x80000000, 0x5, 0x8, 0x9, 0x62, 0x2}, {0x7, 0x7, 0x8bad2458, 0x6, 0x1, 0x46ee}, {0x0, 0xe, 0xffffff9a, 0x4, 0x2}, {0x0, 0x4, 0xf, 0x75, 0x4, 0x401}, {0xc0000000, 0x2, 0x6, 0xe1, 0x605, 0x5}, {0x80, 0x0, 0x0, 0x4, 0x6, 0x8}, {0x3ff, 0xfff, 0x0, 0x6d, 0xc, 0x1}, {0x7, 0x2, 0x1, 0x1, 0x2, 0xd}, {0x8, 0x5, 0xc, 0xffff63de, 0x2, 0xfffffd61}, {0xffff, 0x7, 0x0, 0x6, 0x8, 0x7}, {0xc, 0x3, 0x101, 0xf8, 0xb, 0x200}, {0x9, 0x9, 0x5, 0x8, 0x9, 0x3}], [{0x3}, {}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x5, 0x3}, {0x1, 0x1}, {0x1}, {}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x9d3413911b582539}, {}, {0x2, 0x2dc49a858e50177e}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3}, {}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x3}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {0x5, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {0x2}, {0x3}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x3}, {0x3}, {0x4, 0x1}, {0x2}, {0x1}, {0x6}, {}, {0x1, 0x1}, {0x2}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x4}, {0x1}, {0x1}, {0x2}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x1}, {0x5}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {0x3}, {0x5}, {}, {0x3, 0x1}, {0x3}, {0x1}, {0x4}, {0x1}, {0x2}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4}]}}, @TCA_PEDIT_KEYS_EX={0x78, 0x5, 0x0, 0x1, [{0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_PARMS_EX={0xeb0, 0x4, {{{0x9, 0x7, 0x4, 0x80000000, 0xe}, 0x0, 0x39, [{0x635598a5, 0x1, 0x6, 0x9, 0x1, 0xffffffff}, {0x6f8, 0x6, 0xfffffffa, 0x800, 0x7, 0x100}, {0x2, 0x7ff, 0x40, 0xa4b6, 0x1, 0x80000000}, {0x562, 0xf, 0xfffffffe, 0x2, 0x9}, {0xffffe9c7, 0x8, 0x3, 0xffff, 0x8, 0x8}, {0x3d, 0x8, 0x9, 0x1, 0x7, 0x10000}]}, [{0x30000000, 0x2, 0x7, 0xff, 0x1000, 0x1}, {0x8d, 0xff, 0x5, 0x6, 0x9, 0x100}, {0x2, 0x5, 0x5, 0x5, 0x1, 0x8}, {0x2, 0x5, 0x104, 0x80000000, 0x33, 0x6}, {0x1, 0x40, 0x8001, 0xb6, 0x8, 0x13b9}, {0x1ff, 0xe5, 0x9, 0x4, 0x5, 0x3}, {0x5, 0x7, 0x7, 0x1, 0x2, 0xb4cc}, {0x9, 0x6, 0x7ff, 0x1, 0x9, 0xcaf1}, {0x200, 0x7, 0xffffffff, 0x3, 0x389e, 0x200}, {0x9, 0x2, 0x2, 0x0, 0x45, 0x4}, {0x5, 0x10001, 0x2, 0x0, 0xffff, 0x8}, {0x6, 0x0, 0x1, 0x7, 0x1ff, 0x6}, {0x100, 0x6, 0x3, 0x0, 0x800, 0x9}, {0xbd, 0x0, 0xab8b, 0x5, 0x6, 0x3}, {0x660e, 0x5, 0x3, 0x7c1, 0x3, 0xff}, {0x2, 0x2, 0x24d1, 0x8000, 0xc, 0x1}, {0x8, 0x6, 0x3, 0x1, 0x5, 0x10000}, {0x1000, 0x9, 0x1, 0x8, 0x5, 0xe3e2}, {0x68a, 0x7, 0x9, 0x8, 0x2, 0x3ff}, {0x40, 0x5, 0x7941, 0x6f, 0x5, 0x8000}, {0x7, 0x98c, 0x5, 0x29, 0xffffffff, 0x2}, {0x3, 0x3, 0x8, 0xfff, 0xfffffffd, 0x3}, {0x4, 0x9, 0x80000000, 0x4, 0x9, 0x8001}, {0x4, 0xff, 0x1, 0x9, 0x2, 0xfff}, {0x6, 0x1, 0x2, 0x9, 0x572, 0xbd}, {0x81, 0x0, 0x2, 0x1, 0x4}, {0x0, 0x200, 0x3, 0x640, 0x5, 0x10001}, {0x9, 0x4, 0x6, 0x7, 0x2, 0x1}, {0xff, 0x45, 0x4, 0x474, 0x7, 0xbf67}, {0x5, 0x4, 0xfffffff8, 0x29ae, 0x6, 0xa}, {0x521, 0x0, 0x80000000, 0x5, 0x4, 0x9}, {0x3, 0xfffffff9, 0x6, 0x0, 0x5, 0x6}, {0x800, 0x101, 0x8, 0x80000001, 0x7, 0x5}, {0x8, 0x7fffffff, 0xffffffff, 0x3, 0x2cb6, 0x7}, {0x7, 0x7, 0xf0, 0x1, 0x3, 0x80000001}, {0xe9, 0x7, 0x8, 0x9, 0xb4f, 0x5}, {0x8001, 0x0, 0x9, 0x5, 0x6, 0x1a}, {0x3, 0x9, 0xb60, 0x45a, 0x40, 0xe}, {0x0, 0x0, 0x4, 0x6, 0x0, 0x6}, {0xf, 0x7, 0x6, 0x7fff, 0x6, 0xead}, {0x5, 0x800, 0xfffffffc, 0x6, 0xd0b3, 0x5}, {0x9, 0x1, 0x7fffffff, 0xffffff80, 0x0, 0x4}, {0xd, 0x8001, 0x7cba5ce, 0xb736, 0x66ec, 0xff}, {0x3, 0x5, 0xfff, 0x7, 0xc0, 0x5}, {0xe2d0, 0x2, 0x40, 0x8, 0x1, 0x7}, {0x800, 0xfffffff6, 0x2, 0x1, 0x427a9637, 0xe2e4}, {0x3, 0x8, 0x8, 0xe1, 0x7, 0x3}, {0x2, 0x7, 0x5, 0x0, 0x71, 0x3}, {0x0, 0x6, 0x8, 0x3, 0x8, 0x9}, {0xab3, 0x1, 0x7, 0x9, 0x9e, 0x7}, {0x100, 0x4, 0x4, 0x8, 0x0, 0x9}, {0x4000, 0x439492f4, 0x101, 0xffff, 0xc2000, 0x94}, {0xfff, 0x2, 0x5, 0x2, 0x3d, 0x7}, {0xa, 0x7, 0x31, 0x0, 0x3, 0x6}, {0x8, 0x9, 0x4, 0xffffff00, 0x7, 0x2}, {0x9, 0x53, 0x8, 0x4, 0x5, 0x8}, {0xfff, 0x5, 0xc, 0x3, 0x8, 0x6}, {0xfffffffb, 0x9, 0x8, 0x5, 0xffff, 0x3ff}, {0x9, 0x7, 0x0, 0x1, 0x5, 0xfffffeff}, {0x8001, 0x5, 0x8, 0x4, 0x7, 0x1}, {0x0, 0x71e, 0x137a, 0x8, 0xfffffff1, 0x519}, {0x7, 0x9, 0x400, 0x8, 0x5, 0x30}, {0x9, 0x6, 0x9, 0x800, 0x94f8, 0x7f8}, {0xffffff80, 0x3, 0x2, 0xa, 0xbd, 0xffffffff}, {0x5b0, 0x7, 0x4, 0xc3f, 0x40, 0x3ff}, {0x401, 0x7, 0x3, 0x1, 0x1, 0x100}, {0x3, 0x3, 0x7, 0x5be, 0x1, 0x8}, {0x9, 0x4, 0x2a, 0x4, 0x9, 0x75}, {0x9, 0x1, 0x4, 0xf, 0x80000000, 0x7966}, {0x7ec, 0x1, 0x0, 0x55, 0xffff5a93, 0x3}, {0x800, 0xb2, 0x401, 0x6, 0x5, 0x1}, {0xfffffc01, 0x9, 0x5, 0xb, 0x1, 0x8}, {0x8, 0x1, 0x6, 0x8, 0xfffffffc}, {0x6, 0x100, 0x4, 0x4, 0x7, 0x5}, {0x5, 0x4, 0xfffffffd, 0x4, 0x3ff, 0xfffffffa}, {0x401, 0x1, 0x4c, 0x1, 0x7, 0x6}, {0x8, 0x2, 0xd2, 0x0, 0x0, 0x2}, {0x2, 0x7, 0x80000000, 0x4, 0x1, 0x47}, {0x6, 0x8, 0x1, 0x2, 0x7, 0x4}, {0x4, 0xc4, 0x9, 0x8, 0x16a8, 0x14}, {0x4416, 0x1fe00000, 0x9, 0x100, 0x21, 0x54b}, {0xfffffffd, 0x3, 0x1, 0x401, 0x6000, 0x6}, {0x6, 0x2, 0xffffffff, 0xfffffff9, 0x1c, 0x4}, {0x2, 0xffffff2c, 0x6f, 0x1, 0x6, 0xc6f7}, {0x8001, 0x0, 0x4, 0x4, 0x4, 0x1}, {0xb, 0x6, 0x87, 0x5, 0x7f, 0xa}, {0x2, 0x1, 0xa, 0x10, 0x7ff, 0x4}, {0x6, 0x6f9, 0x7, 0x2, 0x16fa, 0xff}, {0x7fff, 0x9, 0x2, 0x8, 0x4, 0x5}, {0x8ad4, 0x3, 0x3e3, 0x1ff, 0x33d9, 0x6}, {0x6, 0x8001, 0x1, 0x9, 0x80000000, 0x81}, {0x1000, 0xd8, 0x1ff, 0x2, 0x3, 0x6}, {0x8, 0x80, 0xfffffffe, 0x81, 0x0, 0x800}, {0x9, 0x6, 0x4, 0x7, 0x49, 0x1}, {0x1, 0x80000000, 0x8, 0x401, 0x7, 0x10000}, {0x4, 0x5, 0x2, 0x8, 0x7}, {0x3, 0x100, 0x7, 0x0, 0xfffffffe}, {0xc, 0x0, 0xbe32, 0x4, 0xeb8, 0x42584fd5}, {0x5, 0x4, 0x0, 0x2, 0x1, 0x4}, {0x5, 0x8, 0x2, 0x0, 0xa4, 0x5}, {0x2, 0x5, 0x7d, 0x2dc, 0x4, 0x7}, {0x8000, 0x3, 0xa, 0x1, 0x5, 0x800}, {0x0, 0x1, 0xfb80, 0x7fff80, 0x9, 0x1a}, {0x8, 0xc77c, 0x7, 0x5, 0x8, 0x1c4}, {0x6, 0x22, 0x10001, 0x0, 0x28000, 0x8fb}, {0x7, 0x401, 0x4, 0x8001, 0x9, 0x5f}, {0x505015b6, 0x7ff, 0xffffffdf, 0x9, 0x5d6ddcdb, 0xa}, {0xf, 0x2, 0x8, 0x917, 0x40, 0x9}, {0x800, 0x10001, 0x2, 0x8, 0x3ff, 0x17}, {0x8, 0x1, 0x3, 0x31, 0x480, 0x3}, {0x8, 0xfffffff8, 0xc12c, 0x32b, 0x6, 0x2}, {0x5, 0x40, 0x60000000, 0xb, 0x7996, 0xcab}, {0x1, 0x2, 0x1, 0x0, 0xfbe, 0x8}, {0x0, 0x6, 0x6, 0x0, 0xf74, 0xa}, {0x3, 0x7ff, 0x2, 0x1000, 0x1, 0x3}, {0x3, 0x0, 0x8000, 0x3, 0x3, 0x7}, {0x7, 0x9, 0x6, 0x8001, 0x3ff, 0x1}, {0xff, 0x7f, 0x40, 0x8001, 0x3, 0xd}, {0x5b, 0x9, 0x3, 0x4, 0x4, 0x401}, {0x2ffc00, 0x5a3, 0xfffffffc, 0x0, 0x3, 0x6}, {0x0, 0x10, 0xfc75, 0x3, 0x10001, 0x74}, {0x5, 0x1000, 0x0, 0x0, 0x6, 0x78b}, {0x800, 0x0, 0x0, 0xf, 0xfff, 0xa}, {0x5, 0xffffff7f, 0x4, 0xb2b, 0xffffff0b, 0x7}, {0x8, 0x9, 0xe, 0x2, 0x4, 0x9}, {0x1, 0x1, 0x5e2c, 0x7, 0x2, 0xe90a}, {0x8, 0x5, 0xb, 0x7, 0xfffffbff, 0xb72}, {0x7, 0x9d7, 0xfffffff7, 0x0, 0x4, 0xd7}], [{0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x5}, {0x3}, {0x4, 0x1}, {0x7}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0xc9115c7b76057f4c}, {0x5}, {0x6, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x48e08d2962794f0f}, {0x4}, {0x4}, {0x2}, {0x4, 0x1}, {0x2}, {0x4}, {0x4}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x4}, {0x5}, {}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {0x4}, {}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4}, {0x5, 0x1}, {0x5}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x5}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x2ca7b3a445c9f89}, {0x4, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x4, 0x7079ea56bb099a1b}, {0x4}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x2}, {0x5, 0x28743431175d1f77}]}}]}, {0xae, 0x6, "39082d10a3f2be1bc3d4407cf252401efe9cae88148b0ca16cca79c55a89e87fb7173b43d1b723bc759044890105e0c60fe8b8e70f76bb1006ac581cea6acd36ce52ceff4576daf3577bbd3174e9a2c99c9f27c70688a3b4f5858b54931ba1cf6d789433a1007803002af242e23316b8ed34c53b2a110cd9caebb00f75c0b1609edc8771520ad2e75f5aaeea6a25e5b3423ca696061b8c4a597d156ec03f0f2019a8df89118dcb436531"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_CGROUP_POLICE={0x464, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0xdeb}, @TCA_POLICE_RESULT={0x8, 0x5, 0x101}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4207, 0x8, 0x4, 0x8, 0x6, {0x54, 0x0, 0x3ff, 0x1, 0x9, 0x351b}, {0x80, 0x2, 0x4b1, 0x3, 0x2, 0x6}, 0x3, 0x7, 0x6}}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0xfffffff7, 0x7ac, 0x4, 0x6, 0x1000, 0x10, 0x9, 0x401, 0x6, 0x2, 0x6, 0x3, 0x4, 0xc, 0x2, 0x2, 0x800, 0x2, 0x100, 0x4, 0x4, 0xffff, 0x4, 0x6, 0x5, 0x7, 0x10, 0x10000, 0x1, 0xc4d2, 0x6, 0x8, 0x2, 0x81, 0x3, 0x8000, 0x8, 0xa, 0x1, 0x9, 0x2, 0x6, 0x8, 0x401, 0x137, 0x200, 0x4, 0x4, 0x1, 0x10001, 0x6f, 0x8, 0xc, 0x5, 0x1, 0x800, 0xbe72, 0x8, 0x2, 0xff, 0x3, 0x10001, 0x6bae, 0xe6, 0x7fffffff, 0x6963, 0x2, 0x7fffffff, 0xa715, 0x3e2, 0x7, 0x6, 0x5, 0x3, 0xc66, 0x4e7, 0x2, 0x81f, 0x0, 0x7fffffff, 0x9, 0x5, 0x0, 0xe00, 0xffff8ae8, 0x4, 0x233, 0x9, 0x4, 0x7fffffff, 0x1cc, 0x10001, 0x4, 0x8, 0xe, 0x3, 0x3, 0x400, 0x1, 0xfffffe01, 0x6, 0xe, 0x6, 0x9, 0xcf, 0x0, 0x16b7, 0x101, 0x0, 0x8001, 0x100, 0x1, 0xad2, 0xc3, 0x5, 0xe0863ae4, 0x9, 0x586, 0x8f0, 0x7fffffff, 0x8, 0x40, 0x4, 0xfffffffb, 0xffff7fff, 0x5, 0x0, 0xd, 0x100, 0x4, 0x3, 0xb, 0x4, 0x7fffffff, 0x7, 0x9, 0x1dc4, 0x4f, 0xfffffffc, 0x80, 0x8, 0x3bb, 0x5, 0x5, 0x3ff, 0x2, 0x81, 0x779, 0x7fff, 0x3, 0x5, 0x80, 0x2, 0x3, 0x7, 0xf967, 0x3, 0x4, 0x3, 0x76, 0x80, 0x3, 0x0, 0x6, 0x7, 0xffffff01, 0x4, 0x80000001, 0xae, 0x80, 0x32a, 0x4, 0x7, 0x7, 0x9, 0x54, 0x2, 0x56ad, 0x4000, 0x8, 0x80, 0x6, 0x0, 0x9, 0x9, 0x3, 0x1, 0x5, 0x0, 0x6, 0x2, 0x2, 0xe6f, 0xc4d, 0x3, 0x41, 0x1ff, 0x1, 0xf, 0x9, 0xfffffff8, 0x0, 0xfffffff7, 0x9, 0x1, 0xffff, 0x3, 0x4, 0x10001, 0x1000, 0xfffffff8, 0x9, 0xff, 0x7, 0x7ff, 0x1, 0x6, 0x7, 0x180000, 0xfff, 0xffffffff, 0x1000, 0x9, 0x7f, 0x8, 0x8, 0x3, 0x8, 0x4, 0x3, 0x935, 0x80, 0x81, 0x7ff, 0x4b, 0xffffffff, 0x101000, 0x0, 0x35b, 0x7, 0x81, 0x580, 0x9, 0x200, 0x7, 0xc1, 0xfc55, 0x401, 0x1, 0x5, 0x2e70, 0x9, 0x7, 0x2, 0x5]}, @TCA_POLICE_RATE64={0xc}]}, @TCA_CGROUP_ACT={0x238, 0x1, [@m_mpls={0xc4, 0x1b, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x3}]}, {0x90, 0x6, "41541e96cab53739b5d094a411b9a30158b02d820c6af720685f492dd0c6bed4407e8a676e60cea9816b3aaee1bac041337b1ea64ba94730993b783e81ae2541b7ef009eb6204638b200a486e88e1362cba336d81f508e642102dafa4c95993a49174045367e35652e8702e181d4547f578abb820153aa7dbbb7ce2fda5002e0a19e6861936faab7b05026ed"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_mirred={0x170, 0x20, 0x0, 0x0, {{0xb}, {0x104, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x4582, 0x4, 0x10000000, 0x7fffffff, 0x6}, 0x3, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7ff, 0xd6, 0x0, 0xe9e, 0xfffffffb}, 0x1, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x5, 0x5, 0x4, 0x800}, 0x0, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x2134bfbb, 0x1, 0xfffffffc, 0x2}, 0x2, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x4, 0x8, 0x7, 0x5d3}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x52cb960c, 0x3, 0xdb5}, 0x2, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x7, 0x10000000, 0x6, 0x101}, 0x2, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffffc, 0x1, 0x5, 0x9, 0x7}, 0x1, r1}}]}, {0x44, 0x6, "35587e6dec6a8f6bb35043cd58ae38988b699843dbcc67437343684e1d953a0d8482b28bce3e01d769605c0835208fe088e8f42fce6c5d0e6b3b6ab60d9b31a5"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x258c}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) socket(0x10, 0x803, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/vhci\x00', 0x2, 0x0) read$FUSE(r2, &(0x7f00000002c0)={0x2020}, 0x2020) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x4}]}) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) syz_emit_ethernet(0xb6, &(0x7f00000023c0)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='westwood', 0x8) getsockopt$inet_tcp_buf(r2, 0x6, 0xd, 0x0, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x160341) bpf$PROG_LOAD(0x5, 0x0, 0x0) kernel console output (not intermixed with test programs): d [ 197.622890][ T9084] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 198.123972][ T9090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.952'. [ 198.130576][ T9091] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 198.138353][ T9090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.952'. [ 198.142782][ T9090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.952'. [ 198.147031][ T9090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.952'. [ 198.150565][ T9090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.952'. [ 198.240744][ T9094] netlink: 12 bytes leftover after parsing attributes in process `syz.6.944'. [ 198.288025][ T9094] netlink: 12 bytes leftover after parsing attributes in process `syz.6.944'. [ 198.358027][ T9094] netlink: 12 bytes leftover after parsing attributes in process `syz.6.944'. [ 198.395899][ T5837] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 198.435157][ T9106] random: crng reseeded on system resumption [ 198.546217][ T5837] usb 7-1: Using ep0 maxpacket: 32 [ 198.549436][ T5837] usb 7-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 198.555102][ T5837] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.567079][ T5837] usb 7-1: config 0 descriptor?? [ 198.595985][ T5837] as10x_usb: device has been detected [ 198.598775][ T5837] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 198.644877][ T5837] usb 7-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 198.669383][ T5837] as10x_usb: error during firmware upload part1 [ 198.672330][ T5837] Registered device nBox DVB-T Dongle [ 198.785887][ T7957] usb 7-1: USB disconnect, device number 18 [ 198.812641][ T7957] Unregistered device nBox DVB-T Dongle [ 198.814354][ T7957] as10x_usb: device has been disconnected [ 199.072057][ T9111] xt_l2tp: invalid flags combination: 8 [ 199.797638][ T9134] siw: device registration error -23 [ 199.847048][ T9135] siw: device registration error -23 [ 200.590485][ T9138] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 200.777397][ T9142] netlink: 'syz.6.961': attribute type 11 has an invalid length. [ 200.843264][ T9142] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.848356][ T9142] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.859009][ T9142] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.902409][ T9142] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.912876][ T9142] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.927004][ T9142] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 200.931193][ T9142] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 200.940389][ T9142] veth1_vlan: left promiscuous mode [ 200.944336][ T9142] veth0_vlan: left promiscuous mode [ 200.948301][ T9142] veth0_vlan: entered promiscuous mode [ 200.951760][ T9142] veth1_vlan: entered promiscuous mode [ 200.961035][ T9142] veth1_macvtap: left promiscuous mode [ 200.964864][ T9142] veth0_macvtap: left promiscuous mode [ 200.968898][ T9142] veth0_macvtap: entered promiscuous mode [ 200.971546][ T9142] veth1_macvtap: entered promiscuous mode [ 200.979327][ T9142] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 200.982190][ T9142] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 200.985301][ T9142] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 200.991412][ T9142] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 200.996375][ T9142] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 201.079344][ T9145] mac80211_hwsim hwsim14 wlan0: entered promiscuous mode [ 201.093842][ T9145] mac80211_hwsim hwsim14 wlan0: entered allmulticast mode [ 201.106831][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.109400][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.118957][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.122057][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.188536][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.191578][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.194642][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.199502][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.316532][ T5730] Bluetooth: hci3: command 0x0405 tx timeout [ 201.705615][ T9126] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 202.527578][ T9162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.532023][ T9162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.644193][ T9162] mac80211_hwsim hwsim7 wlan0: left promiscuous mode [ 202.647449][ T9162] mac80211_hwsim hwsim7 wlan0: left allmulticast mode [ 202.675876][ T5821] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.678753][ T5821] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.681457][ T5821] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.684158][ T5821] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.689034][ T5821] netdevsim netdevsim10 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.907715][ T9194] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 203.915623][ T9194] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 203.947787][ T9194] tmpfs: Unknown parameter 'usrquotaÀ' [ 205.361146][ T9216] siw: device registration error -23 [ 206.096079][ T9219] random: crng reseeded on system resumption [ 206.489694][ T9225] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 206.606640][ T9234] __nla_validate_parse: 7 callbacks suppressed [ 206.606823][ T9234] netlink: 8 bytes leftover after parsing attributes in process `syz.6.988'. [ 206.695843][ T9234] vlan2: entered allmulticast mode [ 206.697662][ T9234] dummy0: entered allmulticast mode [ 206.716614][ T9234] bridge0: port 3(vlan2) entered blocking state [ 206.720227][ T9234] bridge0: port 3(vlan2) entered disabled state [ 206.728783][ T9234] vlan2: entered promiscuous mode [ 206.730468][ T9234] dummy0: entered promiscuous mode [ 207.072368][ T9247] FAULT_INJECTION: forcing a failure. [ 207.072368][ T9247] name failslab, interval 1, probability 0, space 0, times 0 [ 207.085883][ T9247] CPU: 3 UID: 0 PID: 9247 Comm: syz.5.992 Tainted: G L syzkaller #0 PREEMPT(full) [ 207.085903][ T9247] Tainted: [L]=SOFTLOCKUP [ 207.085907][ T9247] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 207.085913][ T9247] Call Trace: [ 207.085918][ T9247] [ 207.085923][ T9247] dump_stack_lvl+0x100/0x190 [ 207.085943][ T9247] should_fail_ex.cold+0x5/0xa [ 207.085957][ T9247] should_failslab+0xc2/0x120 [ 207.085969][ T9247] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 207.085987][ T9247] ? __alloc_skb+0x140/0x710 [ 207.086002][ T9247] __alloc_skb+0x140/0x710 [ 207.086013][ T9247] ? __alloc_skb+0x5b7/0x710 [ 207.086024][ T9247] ? __pfx___alloc_skb+0x10/0x10 [ 207.086035][ T9247] ? genl_rcv_msg+0x4be/0x800 [ 207.086052][ T9247] netlink_ack+0x117/0xb80 [ 207.086067][ T9247] netlink_rcv_skb+0x333/0x420 [ 207.086078][ T9247] ? __pfx_genl_rcv_msg+0x10/0x10 [ 207.086091][ T9247] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 207.086107][ T9247] ? netlink_deliver_tap+0x1ae/0xcc0 [ 207.086125][ T9247] genl_rcv+0x28/0x40 [ 207.086136][ T9247] netlink_unicast+0x585/0x850 [ 207.086149][ T9247] ? __pfx_netlink_unicast+0x10/0x10 [ 207.086163][ T9247] netlink_sendmsg+0x8b0/0xda0 [ 207.086176][ T9247] ? __pfx_netlink_sendmsg+0x10/0x10 [ 207.086188][ T9247] ? apparmor_socket_sendmsg+0x15b/0x270 [ 207.086207][ T9247] ____sys_sendmsg+0xa4d/0xbe0 [ 207.086222][ T9247] ? __pfx_netlink_sendmsg+0x10/0x10 [ 207.086233][ T9247] ? __pfx_____sys_sendmsg+0x10/0x10 [ 207.086255][ T9247] ___sys_sendmsg+0x190/0x1e0 [ 207.086272][ T9247] ? __pfx____sys_sendmsg+0x10/0x10 [ 207.086295][ T9247] ? find_held_lock+0x2b/0x80 [ 207.086314][ T9247] __sys_sendmsg+0x160/0x210 [ 207.086327][ T9247] ? __pfx___sys_sendmsg+0x10/0x10 [ 207.086344][ T9247] ? __pfx_ksys_write+0x10/0x10 [ 207.086362][ T9247] __do_fast_syscall_32+0x13a/0x8b0 [ 207.086377][ T9247] ? lockdep_hardirqs_on+0x7d/0x110 [ 207.086391][ T9247] do_fast_syscall_32+0x32/0x70 [ 207.086405][ T9247] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 207.086419][ T9247] RIP: 0023:0xf707efec [ 207.086432][ T9247] Code: Unable to access opcode bytes at 0xf707efc2. [ 207.086436][ T9247] RSP: 002b:00000000f546d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 207.086446][ T9247] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000100 [ 207.086453][ T9247] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 207.086459][ T9247] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 207.086465][ T9247] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 207.086470][ T9247] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 207.086483][ T9247] [ 207.952700][ T9264] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(10) [ 207.955523][ T9264] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 207.962629][ T9264] vhci_hcd vhci_hcd.0: Device attached [ 208.245701][ T29] usb 50-1: SetAddress Request (2) to port 0 [ 208.247985][ T29] usb 50-1: new SuperSpeed USB device number 2 using vhci_hcd [ 208.308857][ T9272] random: crng reseeded on system resumption [ 208.361618][ T9273] siw: device registration error -23 [ 209.155130][ T9265] vhci_hcd: connection reset by peer [ 209.158982][ T12] vhci_hcd vhci_hcd.6: stop threads [ 209.161187][ T12] vhci_hcd vhci_hcd.6: release socket [ 209.170635][ T12] vhci_hcd vhci_hcd.6: disconnect device [ 209.535646][ T24] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 209.548237][ T9283] netlink: 'syz.5.1003': attribute type 11 has an invalid length. [ 209.568381][ T9283] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 209.602756][ T9295] netlink: 'syz.0.1008': attribute type 11 has an invalid length. [ 209.606677][ T9295] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1008'. [ 209.646697][ T9295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.651660][ T9295] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.660387][ T9295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.696436][ T24] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 209.701579][ T24] usb 7-1: config 0 has no interfaces? [ 209.703772][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.722002][ T9295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.729001][ T9295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.736107][ T24] usb 7-1: config 0 descriptor?? [ 209.740889][ T9295] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 209.744516][ T9295] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 209.750768][ T9295] veth1_vlan: left promiscuous mode [ 209.752982][ T9295] veth0_vlan: left promiscuous mode [ 209.755275][ T9295] veth0_vlan: entered promiscuous mode [ 209.758653][ T9295] veth1_vlan: entered promiscuous mode [ 209.763486][ T9295] veth1_macvtap: left promiscuous mode [ 209.768364][ T9295] veth0_macvtap: left promiscuous mode [ 209.771117][ T9295] veth0_macvtap: entered promiscuous mode [ 209.773604][ T9295] veth1_macvtap: entered promiscuous mode [ 209.782052][ T9295] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 209.785027][ T9295] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 209.788357][ T9295] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 209.791596][ T9295] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 209.796748][ T9295] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 209.801948][ T5742] wlan0 speed is unknown, defaulting to 1000 [ 209.813544][ T9303] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1009'. [ 209.817060][ T9303] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 209.856302][ T9299] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 209.858528][ T9299] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 209.876828][ T9300] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 209.938293][ T5821] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.952437][ T5821] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.961305][ T5821] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.973586][ T5821] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.981725][ T5821] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.988947][ T9307] netlink: 'syz.5.1011': attribute type 11 has an invalid length. [ 210.053581][ T9307] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 210.214864][ T9317] siw: device registration error -23 [ 210.339394][ T9323] FAULT_INJECTION: forcing a failure. [ 210.339394][ T9323] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 210.346540][ T9323] CPU: 3 UID: 0 PID: 9323 Comm: syz.5.1017 Tainted: G L syzkaller #0 PREEMPT(full) [ 210.346561][ T9323] Tainted: [L]=SOFTLOCKUP [ 210.346565][ T9323] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 210.346588][ T9323] Call Trace: [ 210.346593][ T9323] [ 210.346598][ T9323] dump_stack_lvl+0x100/0x190 [ 210.346617][ T9323] should_fail_ex.cold+0x5/0xa [ 210.346631][ T9323] _copy_from_user+0x2e/0xd0 [ 210.346646][ T9323] kstrtouint_from_user+0xd6/0x1d0 [ 210.346663][ T9323] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 210.346678][ T9323] ? __lock_acquire+0x4c5/0x1ec0 [ 210.346699][ T9323] proc_fail_nth_write+0x83/0x220 [ 210.346716][ T9323] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 210.346735][ T9323] vfs_write+0x2aa/0x1050 [ 210.346750][ T9323] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 210.346766][ T9323] ? __pfx_vfs_write+0x10/0x10 [ 210.346780][ T9323] ? find_held_lock+0x2b/0x80 [ 210.346790][ T9323] ? __fget_files+0x215/0x3d0 [ 210.346808][ T9323] ? __fget_files+0x21f/0x3d0 [ 210.346828][ T9323] ksys_write+0x12a/0x250 [ 210.346842][ T9323] ? __pfx_ksys_write+0x10/0x10 [ 210.346861][ T9323] do_int80_emulation+0x166/0x650 [ 210.346877][ T9323] asm_int80_emulation+0x1a/0x20 [ 210.346889][ T9323] RIP: 0023:0xf71b74eb [ 210.346898][ T9323] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 210.346908][ T9323] RSP: 002b:00000000f544c4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 210.346940][ T9323] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f544c5d0 [ 210.346947][ T9323] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 210.346953][ T9323] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 210.346959][ T9323] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 210.346965][ T9323] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 210.346979][ T9323] [ 210.932065][ T9331] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1019'. [ 210.936587][ T9331] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 211.053282][ T9327] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 211.155752][ T9333] devtmpfs: Unknown parameter 'redirect_dir' [ 211.224177][ T9336] FAULT_INJECTION: forcing a failure. [ 211.224177][ T9336] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 211.230278][ T9333] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 211.233210][ T9336] CPU: 3 UID: 0 PID: 9336 Comm: syz.6.1021 Tainted: G L syzkaller #0 PREEMPT(full) [ 211.233230][ T9336] Tainted: [L]=SOFTLOCKUP [ 211.233234][ T9336] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 211.233240][ T9336] Call Trace: [ 211.233244][ T9336] [ 211.233248][ T9336] dump_stack_lvl+0x100/0x190 [ 211.233267][ T9336] should_fail_ex.cold+0x5/0xa [ 211.233282][ T9336] _copy_from_user+0x2e/0xd0 [ 211.233296][ T9336] bpf_test_init.isra.0+0xaf/0x100 [ 211.233315][ T9336] bpf_prog_test_run_xdp+0x587/0x1670 [ 211.233337][ T9336] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 211.233358][ T9336] ? fput+0x7c/0x100 [ 211.233369][ T9336] ? __bpf_prog_get+0x97/0x290 [ 211.233382][ T9336] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 211.233413][ T9336] __sys_bpf+0x2265/0x4a30 [ 211.233433][ T9336] ? __pfx___sys_bpf+0x10/0x10 [ 211.233449][ T9336] ? find_held_lock+0x2b/0x80 [ 211.233460][ T9336] ? get_pid_task+0xfc/0x250 [ 211.233477][ T9336] ? get_pid_task+0xfc/0x250 [ 211.233496][ T9336] ? proc_fail_nth_write+0x9f/0x220 [ 211.233511][ T9336] ? find_held_lock+0x2b/0x80 [ 211.233524][ T9336] ? rcu_read_lock_any_held+0x6a/0x90 [ 211.233534][ T9336] ? find_held_lock+0x2b/0x80 [ 211.233543][ T9336] ? ksys_write+0x190/0x250 [ 211.233558][ T9336] ? ksys_write+0x190/0x250 [ 211.233582][ T9336] ? fput+0x7c/0x100 [ 211.233593][ T9336] ? __ia32_sys_bpf+0xcc/0x170 [ 211.233609][ T9336] __ia32_sys_bpf+0xcc/0x170 [ 211.233628][ T9336] ? __do_fast_syscall_32+0xb3/0x8b0 [ 211.233644][ T9336] __do_fast_syscall_32+0x13a/0x8b0 [ 211.233658][ T9336] ? lockdep_hardirqs_on+0x7d/0x110 [ 211.233672][ T9336] do_fast_syscall_32+0x32/0x70 [ 211.233686][ T9336] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 211.233700][ T9336] RIP: 0023:0xf6feefec [ 211.233713][ T9336] Code: Unable to access opcode bytes at 0xf6feefc2. [ 211.233717][ T9336] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 211.233728][ T9336] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000800002c0 [ 211.233734][ T9336] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 211.233741][ T9336] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 211.233747][ T9336] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 211.233752][ T9336] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 211.233766][ T9336] [ 211.333792][ T9340] netlink: 'syz.6.1023': attribute type 11 has an invalid length. [ 211.360826][ T9340] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 211.559671][ T9346] CacheFiles: Failed to register: -2 [ 211.813904][ T9355] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1025'. [ 211.839150][ T9355] vlan2: entered allmulticast mode [ 211.842415][ T9355] dummy0: entered allmulticast mode [ 211.943641][ T9352] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 212.283133][ T5904] usb 7-1: USB disconnect, device number 19 [ 213.306698][ T29] usb 50-1: device descriptor read/8, error -110 [ 213.359318][ T9364] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 213.374778][ T9372] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1030'. [ 213.378482][ T9372] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 213.456808][ T9373] siw: device registration error -23 [ 213.497786][ T9380] random: crng reseeded on system resumption [ 214.443914][ T9393] FAULT_INJECTION: forcing a failure. [ 214.443914][ T9393] name failslab, interval 1, probability 0, space 0, times 0 [ 214.473817][ T9393] CPU: 2 UID: 0 PID: 9393 Comm: syz.5.1035 Tainted: G L syzkaller #0 PREEMPT(full) [ 214.473852][ T9393] Tainted: [L]=SOFTLOCKUP [ 214.473859][ T9393] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 214.473871][ T9393] Call Trace: [ 214.473879][ T9393] [ 214.473889][ T9393] dump_stack_lvl+0x100/0x190 [ 214.473921][ T9393] should_fail_ex.cold+0x5/0xa [ 214.473947][ T9393] should_failslab+0xc2/0x120 [ 214.473969][ T9393] __kmalloc_noprof+0xfc/0x840 [ 214.473998][ T9393] ? rcu_is_watching+0x13/0xc0 [ 214.474029][ T9393] ? tomoyo_realpath_from_path+0xb6/0x690 [ 214.474058][ T9393] tomoyo_realpath_from_path+0xb6/0x690 [ 214.474088][ T9393] tomoyo_path_number_perm+0x23c/0x580 [ 214.474119][ T9393] ? tomoyo_path_number_perm+0x22e/0x580 [ 214.474151][ T9393] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 214.474182][ T9393] ? get_pid_task+0x106/0x250 [ 214.474235][ T9393] ? find_held_lock+0x2b/0x80 [ 214.474255][ T9393] ? __fget_files+0x215/0x3d0 [ 214.474282][ T9393] ? hook_file_ioctl_common+0x140/0x440 [ 214.474310][ T9393] ? __fget_files+0x215/0x3d0 [ 214.474343][ T9393] ? __fget_files+0x21f/0x3d0 [ 214.474375][ T9393] security_file_ioctl_compat+0xd3/0x230 [ 214.474409][ T9393] __ia32_compat_sys_ioctl+0xc2/0x360 [ 214.474453][ T9393] __do_fast_syscall_32+0x13a/0x8b0 [ 214.474509][ T9393] ? lockdep_hardirqs_on+0x7d/0x110 [ 214.474536][ T9393] do_fast_syscall_32+0x32/0x70 [ 214.474564][ T9393] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 214.474588][ T9393] RIP: 0023:0xf707efec [ 214.474612][ T9393] Code: Unable to access opcode bytes at 0xf707efc2. [ 214.474623][ T9393] RSP: 002b:00000000f546d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 214.474646][ T9393] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c1105511 [ 214.474663][ T9393] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 214.474677][ T9393] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 214.474690][ T9393] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 214.474703][ T9393] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 214.474731][ T9393] [ 214.474741][ T9393] ERROR: Out of memory at tomoyo_realpath_from_path. [ 214.607289][ T29] usb usb50-port1: attempt power cycle [ 214.671758][ T9400] FAULT_INJECTION: forcing a failure. [ 214.671758][ T9400] name failslab, interval 1, probability 0, space 0, times 0 [ 214.676850][ T9400] CPU: 1 UID: 0 PID: 9400 Comm: syz.0.1038 Tainted: G L syzkaller #0 PREEMPT(full) [ 214.676878][ T9400] Tainted: [L]=SOFTLOCKUP [ 214.676884][ T9400] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 214.676894][ T9400] Call Trace: [ 214.676899][ T9400] [ 214.676906][ T9400] dump_stack_lvl+0x100/0x190 [ 214.676932][ T9400] should_fail_ex.cold+0x5/0xa [ 214.676952][ T9400] should_failslab+0xc2/0x120 [ 214.676970][ T9400] __kvmalloc_node_noprof+0x113/0x9b0 [ 214.676994][ T9400] ? trace_sched_exit_tp+0x120/0x160 [ 214.677018][ T9400] ? bpf_test_run_xdp_live+0x13a/0x760 [ 214.677044][ T9400] bpf_test_run_xdp_live+0x13a/0x760 [ 214.677068][ T9400] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 214.677096][ T9400] ? __mutex_unlock_slowpath+0x35d/0x930 [ 214.677120][ T9400] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 214.677138][ T9400] ? find_held_lock+0x2b/0x80 [ 214.677156][ T9400] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 214.677178][ T9400] ? bpf_dispatcher_change_prog+0x6c3/0xa50 [ 214.677215][ T9400] ? 0xffffffffa0405200 [ 214.677229][ T9400] ? 0xffffffffa0405200 [ 214.677242][ T9400] ? 0xffffffffa0405200 [ 214.677254][ T9400] ? bpf_dispatcher_change_prog+0x2de/0xa50 [ 214.677280][ T9400] bpf_prog_test_run_xdp+0xd86/0x1670 [ 214.677313][ T9400] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 214.677344][ T9400] ? fput+0x7c/0x100 [ 214.677360][ T9400] ? __bpf_prog_get+0x97/0x290 [ 214.677377][ T9400] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 214.677401][ T9400] __sys_bpf+0x2265/0x4a30 [ 214.677430][ T9400] ? __pfx___sys_bpf+0x10/0x10 [ 214.677453][ T9400] ? find_held_lock+0x2b/0x80 [ 214.677466][ T9400] ? get_pid_task+0xfc/0x250 [ 214.677489][ T9400] ? get_pid_task+0xfc/0x250 [ 214.677516][ T9400] ? proc_fail_nth_write+0x9f/0x220 [ 214.677538][ T9400] ? find_held_lock+0x2b/0x80 [ 214.677557][ T9400] ? rcu_read_lock_any_held+0x6a/0x90 [ 214.677572][ T9400] ? find_held_lock+0x2b/0x80 [ 214.677658][ T9400] ? ksys_write+0x190/0x250 [ 214.677680][ T9400] ? ksys_write+0x190/0x250 [ 214.677715][ T9400] ? fput+0x7c/0x100 [ 214.677733][ T9400] ? __ia32_sys_bpf+0xcc/0x170 [ 214.677762][ T9400] __ia32_sys_bpf+0xcc/0x170 [ 214.677790][ T9400] ? __do_fast_syscall_32+0xb3/0x8b0 [ 214.677813][ T9400] __do_fast_syscall_32+0x13a/0x8b0 [ 214.677831][ T9400] ? lockdep_hardirqs_on+0x7d/0x110 [ 214.677851][ T9400] do_fast_syscall_32+0x32/0x70 [ 214.677870][ T9400] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 214.677891][ T9400] RIP: 0023:0xf70cefec [ 214.677912][ T9400] Code: Unable to access opcode bytes at 0xf70cefc2. [ 214.677919][ T9400] RSP: 002b:00000000f54bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 214.677942][ T9400] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000600 [ 214.677953][ T9400] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 214.677999][ T9400] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 214.678008][ T9400] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 214.678017][ T9400] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 214.678037][ T9400] [ 215.145040][ T9410] netlink: 'syz.6.1041': attribute type 11 has an invalid length. [ 215.417026][ T9421] random: crng reseeded on system resumption [ 215.896991][ T29] usb usb50-port1: unable to enumerate USB device [ 215.901621][ T9408] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 215.906552][ T9408] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 215.910641][ T9408] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 215.947545][ T9411] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 216.075271][ T9430] FAULT_INJECTION: forcing a failure. [ 216.075271][ T9430] name failslab, interval 1, probability 0, space 0, times 0 [ 216.080666][ T9430] CPU: 1 UID: 0 PID: 9430 Comm: syz.5.1044 Tainted: G L syzkaller #0 PREEMPT(full) [ 216.080696][ T9430] Tainted: [L]=SOFTLOCKUP [ 216.080702][ T9430] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 216.080713][ T9430] Call Trace: [ 216.080721][ T9430] [ 216.080728][ T9430] dump_stack_lvl+0x100/0x190 [ 216.080759][ T9430] should_fail_ex.cold+0x5/0xa [ 216.080780][ T9430] should_failslab+0xc2/0x120 [ 216.080800][ T9430] __kmalloc_noprof+0xfc/0x840 [ 216.080827][ T9430] ? tomoyo_encode2+0xfb/0x3c0 [ 216.080852][ T9430] tomoyo_encode2+0xfb/0x3c0 [ 216.080875][ T9430] tomoyo_encode+0x29/0x50 [ 216.080894][ T9430] tomoyo_realpath_from_path+0x18c/0x690 [ 216.080920][ T9430] tomoyo_path_number_perm+0x23c/0x580 [ 216.080946][ T9430] ? tomoyo_path_number_perm+0x22e/0x580 [ 216.080972][ T9430] ? __lock_acquire+0x424/0x1ec0 [ 216.080994][ T9430] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 216.081045][ T9430] ? __rcu_read_unlock+0x26a/0x5e0 [ 216.081067][ T9430] ? rcu_is_watching+0x13/0xc0 [ 216.081091][ T9430] ? hook_file_ioctl_common+0x140/0x440 [ 216.081119][ T9430] ? __rcu_read_unlock+0x27f/0x5e0 [ 216.081142][ T9430] ? __fget_files+0x21f/0x3d0 [ 216.081171][ T9430] security_file_ioctl_compat+0xd3/0x230 [ 216.081198][ T9430] __ia32_compat_sys_ioctl+0xc2/0x360 [ 216.081221][ T9430] __do_fast_syscall_32+0x13a/0x8b0 [ 216.081242][ T9430] ? lockdep_hardirqs_on+0x7d/0x110 [ 216.081263][ T9430] do_fast_syscall_32+0x32/0x70 [ 216.081286][ T9430] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 216.081309][ T9430] RIP: 0023:0xf707efec [ 216.081331][ T9430] Code: Unable to access opcode bytes at 0xf707efc2. [ 216.081338][ T9430] RSP: 002b:00000000f542b50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 216.081356][ T9430] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040026f34 [ 216.081367][ T9430] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 216.081377][ T9430] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 216.081387][ T9430] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 216.081396][ T9430] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 216.081420][ T9430] [ 216.083898][ T9430] ERROR: Out of memory at tomoyo_realpath_from_path. [ 216.477735][ T9438] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1048'. [ 216.482247][ T9438] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1048'. [ 216.486278][ T9438] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1048'. [ 216.490083][ T9438] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1048'. [ 216.492984][ T9438] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1048'. [ 216.572060][ T9442] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1049'. [ 216.576872][ T9442] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 216.598174][ T9444] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1047'. [ 217.419457][ T9453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1052'. [ 217.429064][ T9453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1052'. [ 217.433255][ T9453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1052'. [ 217.437748][ T9453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1052'. [ 217.441846][ T9453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1052'. [ 217.580312][ T9457] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 217.631021][ T9449] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1051'. [ 217.638627][ T9449] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 217.736331][ T9465] netlink: 'syz.0.1054': attribute type 11 has an invalid length. [ 217.825045][ T9465] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 218.030716][ T9470] random: crng reseeded on system resumption [ 218.197424][ T9463] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 218.403627][ T9469] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1055'. [ 218.764957][ T9481] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1058'. [ 218.768933][ T9481] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1058'. [ 218.772372][ T9481] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1058'. [ 218.847933][ T35] block nbd0: Possible stuck request ffff888027227000: control (read@0,4096B). Runtime 150 seconds [ 218.945241][ T9486] netlink: 'syz.6.1062': attribute type 11 has an invalid length. [ 218.973063][ T9486] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 219.034254][ T9486] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 219.305615][ T9513] wlan0 speed is unknown, defaulting to 1000 [ 219.761874][ T77] IPVS: starting estimator thread 0... [ 219.803236][ T9528] FAULT_INJECTION: forcing a failure. [ 219.803236][ T9528] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 219.809560][ T9528] CPU: 2 UID: 0 PID: 9528 Comm: syz.2.1070 Tainted: G L syzkaller #0 PREEMPT(full) [ 219.809581][ T9528] Tainted: [L]=SOFTLOCKUP [ 219.809585][ T9528] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 219.809591][ T9528] Call Trace: [ 219.809596][ T9528] [ 219.809601][ T9528] dump_stack_lvl+0x100/0x190 [ 219.809621][ T9528] should_fail_ex.cold+0x5/0xa [ 219.809636][ T9528] _copy_from_iter+0x1f4/0x1690 [ 219.809652][ T9528] ? __asan_memset+0x23/0x50 [ 219.809668][ T9528] ? __pfx__copy_from_iter+0x10/0x10 [ 219.809681][ T9528] ? __pfx___alloc_skb+0x10/0x10 [ 219.809699][ T9528] netlink_sendmsg+0x808/0xda0 [ 219.809713][ T9528] ? __pfx_netlink_sendmsg+0x10/0x10 [ 219.809726][ T9528] ? apparmor_socket_sendmsg+0x15b/0x270 [ 219.809744][ T9528] ____sys_sendmsg+0xa4d/0xbe0 [ 219.809760][ T9528] ? __pfx_netlink_sendmsg+0x10/0x10 [ 219.809771][ T9528] ? __pfx_____sys_sendmsg+0x10/0x10 [ 219.809793][ T9528] ___sys_sendmsg+0x190/0x1e0 [ 219.809811][ T9528] ? __pfx____sys_sendmsg+0x10/0x10 [ 219.809833][ T9528] ? find_held_lock+0x2b/0x80 [ 219.809852][ T9528] __sys_sendmsg+0x160/0x210 [ 219.809866][ T9528] ? __pfx___sys_sendmsg+0x10/0x10 [ 219.809882][ T9528] ? __pfx_ksys_write+0x10/0x10 [ 219.809900][ T9528] __do_fast_syscall_32+0x13a/0x8b0 [ 219.809915][ T9528] ? lockdep_hardirqs_on+0x7d/0x110 [ 219.809930][ T9528] do_fast_syscall_32+0x32/0x70 [ 219.809944][ T9528] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 219.809959][ T9528] RIP: 0023:0xf7f54fec [ 219.809973][ T9528] Code: Unable to access opcode bytes at 0xf7f54fc2. [ 219.809978][ T9528] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 219.809988][ T9528] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000240 [ 219.809995][ T9528] RDX: 0000000000004000 RSI: 0000000000000000 RDI: 0000000000000000 [ 219.810001][ T9528] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 219.810007][ T9528] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 219.810013][ T9528] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 219.810027][ T9528] [ 219.945703][ T9526] IPVS: using max 44 ests per chain, 105600 per kthread [ 219.973803][ T9533] random: crng reseeded on system resumption [ 220.084715][ T5737] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 220.094774][ T5737] CPU: 2 UID: 0 PID: 5737 Comm: kworker/u34:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 220.094800][ T5737] Tainted: [L]=SOFTLOCKUP [ 220.094805][ T5737] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 220.094813][ T5737] Workqueue: hci4 hci_rx_work [ 220.094830][ T5737] Call Trace: [ 220.094835][ T5737] [ 220.094840][ T5737] dump_stack_lvl+0x100/0x190 [ 220.094856][ T5737] sysfs_warn_dup.cold+0x1c/0x28 [ 220.094905][ T5737] sysfs_create_dir_ns+0x24b/0x2b0 [ 220.094925][ T5737] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 220.094942][ T5737] ? find_held_lock+0x2b/0x80 [ 220.094953][ T5737] ? kobject_add_internal+0x25f/0x930 [ 220.094971][ T5737] ? kobject_add_internal+0x25f/0x930 [ 220.095004][ T5737] ? do_raw_spin_unlock+0x145/0x1e0 [ 220.095022][ T5737] kobject_add_internal+0x2c8/0x930 [ 220.095046][ T5737] kobject_add+0x16a/0x1e0 [ 220.095062][ T5737] ? __pfx_kobject_add+0x10/0x10 [ 220.095077][ T5737] ? class_to_subsys+0x10f/0x150 [ 220.095100][ T5737] ? kobject_put+0xb9/0x640 [ 220.095115][ T5737] ? _raw_spin_unlock+0x28/0x50 [ 220.095132][ T5737] device_add+0x294/0x1970 [ 220.095147][ T5737] ? __pfx_dev_set_name+0x10/0x10 [ 220.095163][ T5737] ? __pfx_device_add+0x10/0x10 [ 220.095178][ T5737] ? mgmt_send_event_skb+0x2fb/0x460 [ 220.095194][ T5737] hci_conn_add_sysfs+0x1a3/0x260 [ 220.095209][ T5737] le_conn_complete_evt+0x121b/0x2120 [ 220.095226][ T5737] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 220.095237][ T5737] ? hci_event_packet+0x186/0xcd0 [ 220.095247][ T5737] ? hci_event_packet+0x186/0xcd0 [ 220.095261][ T5737] hci_le_enh_conn_complete_evt+0x23d/0x3b0 [ 220.095274][ T5737] ? skb_pull_data+0x15f/0x1e0 [ 220.095292][ T5737] hci_le_meta_evt+0x34a/0x5f0 [ 220.095305][ T5737] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 220.095318][ T5737] hci_event_packet+0x51c/0xcd0 [ 220.095330][ T5737] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 220.095343][ T5737] ? __pfx_hci_event_packet+0x10/0x10 [ 220.095356][ T5737] ? lockdep_hardirqs_on+0x7d/0x110 [ 220.095373][ T5737] hci_rx_work+0x451/0xfc0 [ 220.095387][ T5737] process_one_work+0xac7/0x1b10 [ 220.095404][ T5737] ? __pfx_process_one_work+0x10/0x10 [ 220.095422][ T5737] ? __pfx_hci_rx_work+0x10/0x10 [ 220.095433][ T5737] worker_thread+0x5ef/0xe50 [ 220.095449][ T5737] ? __pfx_worker_thread+0x10/0x10 [ 220.095460][ T5737] ? kthread+0x13a/0x450 [ 220.095469][ T5737] ? __pfx_worker_thread+0x10/0x10 [ 220.095479][ T5737] kthread+0x373/0x450 [ 220.095489][ T5737] ? __pfx_kthread+0x10/0x10 [ 220.095500][ T5737] ret_from_fork+0x730/0xd60 [ 220.095516][ T5737] ? __pfx_ret_from_fork+0x10/0x10 [ 220.095532][ T5737] ? __switch_to+0x800/0x10f0 [ 220.095545][ T5737] ? __pfx_kthread+0x10/0x10 [ 220.095555][ T5737] ret_from_fork_asm+0x1a/0x30 [ 220.095573][ T5737] [ 220.193157][ T5737] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 220.199744][ T5737] Bluetooth: hci4: failed to register connection device [ 220.315819][ T7957] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 220.350462][ T9551] siw: device registration error -23 [ 220.455683][ T7957] usb 7-1: device descriptor read/64, error -71 [ 220.705619][ T7957] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 220.855590][ T7957] usb 7-1: device descriptor read/64, error -71 [ 220.903222][ T5737] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 220.908205][ T5737] CPU: 3 UID: 0 PID: 5737 Comm: kworker/u34:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 220.908226][ T5737] Tainted: [L]=SOFTLOCKUP [ 220.908231][ T5737] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 220.908240][ T5737] Workqueue: hci1 hci_rx_work [ 220.908257][ T5737] Call Trace: [ 220.908263][ T5737] [ 220.908267][ T5737] dump_stack_lvl+0x100/0x190 [ 220.908286][ T5737] sysfs_warn_dup.cold+0x1c/0x28 [ 220.908306][ T5737] sysfs_create_dir_ns+0x24b/0x2b0 [ 220.908325][ T5737] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 220.908341][ T5737] ? find_held_lock+0x2b/0x80 [ 220.908351][ T5737] ? kobject_add_internal+0x25f/0x930 [ 220.908368][ T5737] ? kobject_add_internal+0x25f/0x930 [ 220.908387][ T5737] ? do_raw_spin_unlock+0x145/0x1e0 [ 220.908404][ T5737] kobject_add_internal+0x2c8/0x930 [ 220.908423][ T5737] kobject_add+0x16a/0x1e0 [ 220.908439][ T5737] ? __pfx_kobject_add+0x10/0x10 [ 220.908454][ T5737] ? class_to_subsys+0x10f/0x150 [ 220.908471][ T5737] ? kobject_put+0xb9/0x640 [ 220.908485][ T5737] ? _raw_spin_unlock+0x28/0x50 [ 220.908499][ T5737] device_add+0x294/0x1970 [ 220.908514][ T5737] ? __pfx_dev_set_name+0x10/0x10 [ 220.908531][ T5737] ? __pfx_device_add+0x10/0x10 [ 220.908551][ T5737] ? mgmt_send_event_skb+0x2fb/0x460 [ 220.908567][ T5737] hci_conn_add_sysfs+0x1a3/0x260 [ 220.908585][ T5737] le_conn_complete_evt+0x121b/0x2120 [ 220.908606][ T5737] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 220.908621][ T5737] ? hci_event_packet+0x186/0xcd0 [ 220.908635][ T5737] ? hci_event_packet+0x186/0xcd0 [ 220.908654][ T5737] hci_le_enh_conn_complete_evt+0x23d/0x3b0 [ 220.908674][ T5737] ? skb_pull_data+0x15f/0x1e0 [ 220.908698][ T5737] hci_le_meta_evt+0x34a/0x5f0 [ 220.908710][ T5737] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 220.908724][ T5737] hci_event_packet+0x51c/0xcd0 [ 220.908736][ T5737] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 220.908749][ T5737] ? __pfx_hci_event_packet+0x10/0x10 [ 220.908762][ T5737] ? lockdep_hardirqs_on+0x7d/0x110 [ 220.908779][ T5737] hci_rx_work+0x451/0xfc0 [ 220.908793][ T5737] process_one_work+0xac7/0x1b10 [ 220.908811][ T5737] ? __pfx_process_one_work+0x10/0x10 [ 220.908828][ T5737] ? __pfx_hci_rx_work+0x10/0x10 [ 220.908840][ T5737] worker_thread+0x5ef/0xe50 [ 220.908855][ T5737] ? __pfx_worker_thread+0x10/0x10 [ 220.908866][ T5737] ? kthread+0x13a/0x450 [ 220.908875][ T5737] ? __pfx_worker_thread+0x10/0x10 [ 220.908886][ T5737] kthread+0x373/0x450 [ 220.908895][ T5737] ? __pfx_kthread+0x10/0x10 [ 220.908906][ T5737] ret_from_fork+0x730/0xd60 [ 220.908922][ T5737] ? __pfx_ret_from_fork+0x10/0x10 [ 220.908938][ T5737] ? __switch_to+0x800/0x10f0 [ 220.908950][ T5737] ? __pfx_kthread+0x10/0x10 [ 220.908961][ T5737] ret_from_fork_asm+0x1a/0x30 [ 220.908978][ T5737] [ 220.908994][ T5737] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 220.976269][ T7957] usb usb7-port1: attempt power cycle [ 221.039478][ T5737] Bluetooth: hci1: failed to register connection device [ 221.137225][ T9565] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 221.142711][ T9565] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 221.166921][ T9565] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 221.174312][ T9565] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 221.178464][ T9565] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 221.181242][ T9565] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 221.197558][ T9565] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 221.213353][ T9565] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 221.216643][ T9565] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 221.225024][ T9565] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 221.232948][ T9565] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 221.345592][ T7957] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 221.366152][ T7957] usb 7-1: device descriptor read/8, error -71 [ 221.777516][ T7957] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 222.449829][ T7957] usb 7-1: device descriptor read/8, error -71 [ 222.555985][ T7957] usb usb7-port1: unable to enumerate USB device [ 222.592043][ T9596] __nla_validate_parse: 18 callbacks suppressed [ 222.592064][ T9596] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1098'. [ 222.607351][ T9596] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1098'. [ 222.616844][ T9596] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1098'. [ 222.623709][ T9596] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1098'. [ 222.642492][ T9596] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1098'. [ 222.660698][ T9597] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1089'. [ 222.673922][ T9597] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 222.834042][ T9579] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1086'. [ 222.842125][ T9579] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 222.948315][ T9600] FAULT_INJECTION: forcing a failure. [ 222.948315][ T9600] name failslab, interval 1, probability 0, space 0, times 0 [ 222.952265][ T9600] CPU: 2 UID: 0 PID: 9600 Comm: syz.6.1091 Tainted: G L syzkaller #0 PREEMPT(full) [ 222.952283][ T9600] Tainted: [L]=SOFTLOCKUP [ 222.952287][ T9600] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 222.952293][ T9600] Call Trace: [ 222.952297][ T9600] [ 222.952301][ T9600] dump_stack_lvl+0x100/0x190 [ 222.952319][ T9600] should_fail_ex.cold+0x5/0xa [ 222.952333][ T9600] should_failslab+0xc2/0x120 [ 222.952345][ T9600] __kmalloc_noprof+0xfc/0x840 [ 222.952361][ T9600] ? rcu_is_watching+0x13/0xc0 [ 222.952377][ T9600] ? tomoyo_realpath_from_path+0xb6/0x690 [ 222.952392][ T9600] tomoyo_realpath_from_path+0xb6/0x690 [ 222.952408][ T9600] tomoyo_path_number_perm+0x23c/0x580 [ 222.952424][ T9600] ? tomoyo_path_number_perm+0x22e/0x580 [ 222.952442][ T9600] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 222.952459][ T9600] ? get_pid_task+0x106/0x250 [ 222.952487][ T9600] ? find_held_lock+0x2b/0x80 [ 222.952497][ T9600] ? __fget_files+0x215/0x3d0 [ 222.952512][ T9600] ? hook_file_ioctl_common+0x140/0x440 [ 222.952533][ T9600] ? __fget_files+0x215/0x3d0 [ 222.952550][ T9600] ? __fget_files+0x21f/0x3d0 [ 222.952568][ T9600] security_file_ioctl_compat+0xd3/0x230 [ 222.952586][ T9600] __ia32_compat_sys_ioctl+0xc2/0x360 [ 222.952603][ T9600] __do_fast_syscall_32+0x13a/0x8b0 [ 222.952618][ T9600] ? lockdep_hardirqs_on+0x7d/0x110 [ 222.952632][ T9600] do_fast_syscall_32+0x32/0x70 [ 222.952646][ T9600] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 222.952660][ T9600] RIP: 0023:0xf6feefec [ 222.952673][ T9600] Code: Unable to access opcode bytes at 0xf6feefc2. [ 222.952677][ T9600] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 222.952689][ T9600] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae80 [ 222.952695][ T9600] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 222.952701][ T9600] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 222.952707][ T9600] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 222.952713][ T9600] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 222.952727][ T9600] [ 222.952731][ T9600] ERROR: Out of memory at tomoyo_realpath_from_path. [ 223.146109][ T5737] Bluetooth: hci1: command 0x0406 tx timeout [ 223.225650][ T5730] Bluetooth: hci3: command 0x0405 tx timeout [ 223.226019][ T5740] Bluetooth: hci4: command 0x0c1a tx timeout [ 223.229467][ T5737] Bluetooth: hci2: command 0x0c1a tx timeout [ 223.365633][ T29] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 223.540279][ T29] usb 7-1: Using ep0 maxpacket: 16 [ 223.552268][ T29] usb 7-1: New USB device found, idVendor=0e41, idProduct=4642, bcdDevice= 0.40 [ 223.573920][ T9619] siw: device registration error -23 [ 223.583505][ T29] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 223.590344][ T29] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 223.605229][ T29] usb 7-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 223.663496][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.669550][ T29] usb 7-1: Product: 붹껊騗腮ᚂ쉿ŭꬫᔎ⌲ä¨ì¾Œï¢…햇৽ [ 223.672394][ T29] usb 7-1: Manufacturer: 䞖ฬ屦毻仗᫢ä§â´…鹩㺙鼸뻭ꅣ䮛ꪧ翜嶌櫴봰꘠콒뇠ﱒᾠ笃줽æŠé„薘୭糑ì±ãº´éƒ‘ᜄ峡胻ইⵑ㦓ﴕ꿤 [ 223.687848][ T29] usb 7-1: SerialNumber: ည [ 224.197244][ T29] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 224.205795][ T29] usb 7-1: MIDIStreaming interface descriptor not found [ 224.280739][ T9626] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1100'. [ 224.285004][ T29] usb 7-1: USB disconnect, device number 24 [ 224.287922][ T9626] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1100'. [ 224.291863][ T9626] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1100'. [ 224.494517][ T42] audit: type=1800 audit(1787677717.869:4802): pid=9632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1104" name="file0" dev="overlay" ino=1673 res=0 errno=0 [ 224.567959][ T5734] udevd[5734]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 224.681933][ T9645] netlink: 'syz.0.1106': attribute type 11 has an invalid length. [ 224.813339][ T9645] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 224.854575][ T9645] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 224.856399][ T9649] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 224.863734][ T9649] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 224.869855][ T9649] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 224.879934][ T9649] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 224.936017][ T3261] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 225.065623][ T3261] usb 10-1: device descriptor read/64, error -71 [ 225.311142][ T3261] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 225.446059][ T3261] usb 10-1: device descriptor read/64, error -71 [ 225.560247][ T3261] usb usb10-port1: attempt power cycle [ 225.624315][ T9668] FAULT_INJECTION: forcing a failure. [ 225.624315][ T9668] name failslab, interval 1, probability 0, space 0, times 0 [ 225.629929][ T9668] CPU: 0 UID: 0 PID: 9668 Comm: syz.0.1113 Tainted: G L syzkaller #0 PREEMPT(full) [ 225.629956][ T9668] Tainted: [L]=SOFTLOCKUP [ 225.629961][ T9668] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 225.629970][ T9668] Call Trace: [ 225.629976][ T9668] [ 225.629983][ T9668] dump_stack_lvl+0x100/0x190 [ 225.630010][ T9668] should_fail_ex.cold+0x5/0xa [ 225.630030][ T9668] should_failslab+0xc2/0x120 [ 225.630046][ T9668] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 225.630072][ T9668] ? __alloc_skb+0x140/0x710 [ 225.630094][ T9668] __alloc_skb+0x140/0x710 [ 225.630109][ T9668] ? __alloc_skb+0x5b7/0x710 [ 225.630126][ T9668] ? __pfx___alloc_skb+0x10/0x10 [ 225.630142][ T9668] ? genl_rcv_msg+0x4be/0x800 [ 225.630166][ T9668] netlink_ack+0x117/0xb80 [ 225.630188][ T9668] netlink_rcv_skb+0x333/0x420 [ 225.630204][ T9668] ? __pfx_genl_rcv_msg+0x10/0x10 [ 225.630223][ T9668] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 225.630248][ T9668] ? netlink_deliver_tap+0x1ae/0xcc0 [ 225.630275][ T9668] genl_rcv+0x28/0x40 [ 225.630290][ T9668] netlink_unicast+0x585/0x850 [ 225.630309][ T9668] ? __pfx_netlink_unicast+0x10/0x10 [ 225.630331][ T9668] netlink_sendmsg+0x8b0/0xda0 [ 225.630350][ T9668] ? __pfx_netlink_sendmsg+0x10/0x10 [ 225.630386][ T9668] ? apparmor_socket_sendmsg+0x15b/0x270 [ 225.630413][ T9668] ____sys_sendmsg+0xa4d/0xbe0 [ 225.630435][ T9668] ? __pfx_netlink_sendmsg+0x10/0x10 [ 225.630459][ T9668] ? __pfx_____sys_sendmsg+0x10/0x10 [ 225.630492][ T9668] ___sys_sendmsg+0x190/0x1e0 [ 225.630517][ T9668] ? __pfx____sys_sendmsg+0x10/0x10 [ 225.630550][ T9668] ? find_held_lock+0x2b/0x80 [ 225.630579][ T9668] __sys_sendmsg+0x160/0x210 [ 225.630598][ T9668] ? __pfx___sys_sendmsg+0x10/0x10 [ 225.630623][ T9668] ? __pfx_ksys_write+0x10/0x10 [ 225.630648][ T9668] __do_fast_syscall_32+0x13a/0x8b0 [ 225.630668][ T9668] ? lockdep_hardirqs_on+0x7d/0x110 [ 225.630690][ T9668] do_fast_syscall_32+0x32/0x70 [ 225.630709][ T9668] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 225.630729][ T9668] RIP: 0023:0xf70cefec [ 225.630748][ T9668] Code: Unable to access opcode bytes at 0xf70cefc2. [ 225.630755][ T9668] RSP: 002b:00000000f54bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 225.630772][ T9668] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000400 [ 225.630781][ T9668] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 225.630790][ T9668] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 225.630799][ T9668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 225.630809][ T9668] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 225.630830][ T9668] [ 225.906107][ T3261] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 225.927274][ T3261] usb 10-1: device descriptor read/8, error -71 [ 226.165936][ T3261] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 226.187595][ T3261] usb 10-1: device descriptor read/8, error -71 [ 226.296225][ T3261] usb usb10-port1: unable to enumerate USB device [ 226.905749][ T5740] Bluetooth: hci2: command 0x0c1a tx timeout [ 226.906158][ T5730] Bluetooth: hci3: command 0x0405 tx timeout [ 226.908359][ T5740] Bluetooth: hci1: command 0x0406 tx timeout [ 226.909040][ T5737] Bluetooth: hci4: command 0x0c1a tx timeout [ 227.777678][ T9727] __nla_validate_parse: 15 callbacks suppressed [ 227.777690][ T9727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1131'. [ 227.786804][ T9727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1131'. [ 227.790209][ T9727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1131'. [ 227.793130][ T9727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1131'. [ 227.797125][ T9727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1131'. [ 227.924860][ T9741] siw: device registration error -23 [ 227.996867][ T9742] FAULT_INJECTION: forcing a failure. [ 227.996867][ T9742] name failslab, interval 1, probability 0, space 0, times 0 [ 228.002436][ T9742] CPU: 0 UID: 0 PID: 9742 Comm: syz.5.1135 Tainted: G L syzkaller #0 PREEMPT(full) [ 228.002458][ T9742] Tainted: [L]=SOFTLOCKUP [ 228.002462][ T9742] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 228.002468][ T9742] Call Trace: [ 228.002473][ T9742] [ 228.002479][ T9742] dump_stack_lvl+0x100/0x190 [ 228.002501][ T9742] should_fail_ex.cold+0x5/0xa [ 228.002515][ T9742] should_failslab+0xc2/0x120 [ 228.002528][ T9742] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 228.002561][ T9742] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 228.002580][ T9742] ? scm_fp_dup+0x63/0x410 [ 228.002594][ T9742] kmemdup_noprof+0x29/0x60 [ 228.002610][ T9742] scm_fp_dup+0x63/0x410 [ 228.002623][ T9742] __unix_dgram_recvmsg+0x9b1/0xc30 [ 228.002639][ T9742] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 228.002653][ T9742] ? __lock_acquire+0x4c5/0x1ec0 [ 228.002670][ T9742] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 228.002687][ T9742] unix_seqpacket_recvmsg+0x119/0x160 [ 228.002699][ T9742] ? __pfx_unix_seqpacket_recvmsg+0x10/0x10 [ 228.002712][ T9742] ____sys_recvmsg+0x5eb/0x670 [ 228.002732][ T9742] ? __pfx_____sys_recvmsg+0x10/0x10 [ 228.002753][ T9742] ? rcu_is_watching+0x13/0xc0 [ 228.002769][ T9742] ? ___sys_recvmsg+0x177/0x1a0 [ 228.002784][ T9742] ? kfree+0x1e5/0x6d0 [ 228.002801][ T9742] ___sys_recvmsg+0x16a/0x1a0 [ 228.002818][ T9742] ? __pfx____sys_recvmsg+0x10/0x10 [ 228.002863][ T9742] ? __pfx___might_resched+0x10/0x10 [ 228.002880][ T9742] do_recvmmsg+0x54d/0x740 [ 228.002900][ T9742] ? __pfx_do_recvmmsg+0x10/0x10 [ 228.002922][ T9742] ? find_held_lock+0x2b/0x80 [ 228.002932][ T9742] ? ksys_write+0x190/0x250 [ 228.002947][ T9742] ? ksys_write+0x190/0x250 [ 228.002967][ T9742] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 228.002985][ T9742] __sys_recvmmsg+0x21f/0x270 [ 228.002999][ T9742] ? __pfx___sys_recvmmsg+0x10/0x10 [ 228.003014][ T9742] ? ksys_write+0x1ac/0x250 [ 228.003031][ T9742] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 228.003049][ T9742] ? __do_fast_syscall_32+0xb3/0x8b0 [ 228.003064][ T9742] ? lockdep_hardirqs_on+0x7d/0x110 [ 228.003077][ T9742] __do_fast_syscall_32+0x13a/0x8b0 [ 228.003091][ T9742] ? lockdep_hardirqs_on+0x7d/0x110 [ 228.003105][ T9742] do_fast_syscall_32+0x32/0x70 [ 228.003120][ T9742] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 228.003134][ T9742] RIP: 0023:0xf707efec [ 228.003149][ T9742] Code: Unable to access opcode bytes at 0xf707efc2. [ 228.003154][ T9742] RSP: 002b:00000000f544c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000151 [ 228.003165][ T9742] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080001140 [ 228.003172][ T9742] RDX: 0000000000000700 RSI: 0000000000000002 RDI: 0000000000000000 [ 228.003179][ T9742] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 228.003185][ T9742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 228.003191][ T9742] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 228.003204][ T9742] [ 228.377088][ T9746] netlink: 'syz.2.1133': attribute type 4 has an invalid length. [ 228.625638][ T5904] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 228.795551][ T5904] usb 7-1: Using ep0 maxpacket: 32 [ 228.798234][ T5904] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 228.802055][ T5904] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 228.805648][ T5904] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 228.809854][ T5904] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.814038][ T5904] usb 7-1: config 0 descriptor?? [ 228.822350][ T5904] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 228.985819][ T5730] Bluetooth: hci1: command 0x0406 tx timeout [ 228.988078][ T5733] Bluetooth: hci2: command 0x0c1a tx timeout [ 228.990811][ T5737] Bluetooth: hci4: command 0x0c1a tx timeout [ 229.074789][ T9748] FAULT_INJECTION: forcing a failure. [ 229.074789][ T9748] name failslab, interval 1, probability 0, space 0, times 0 [ 229.080013][ T9748] CPU: 3 UID: 0 PID: 9748 Comm: syz.0.1136 Tainted: G L syzkaller #0 PREEMPT(full) [ 229.080035][ T9748] Tainted: [L]=SOFTLOCKUP [ 229.080039][ T9748] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 229.080045][ T9748] Call Trace: [ 229.080051][ T9748] [ 229.080055][ T9748] dump_stack_lvl+0x100/0x190 [ 229.080075][ T9748] should_fail_ex.cold+0x5/0xa [ 229.080089][ T9748] should_failslab+0xc2/0x120 [ 229.080101][ T9748] __kmalloc_noprof+0xfc/0x840 [ 229.080118][ T9748] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 229.080135][ T9748] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 229.080152][ T9748] genl_family_rcv_msg_doit+0xc7/0x300 [ 229.080165][ T9748] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 229.080178][ T9748] ? genl_get_cmd+0x3e7/0x760 [ 229.080193][ T9748] ? __dev_queue_xmit+0xa33/0x4970 [ 229.080204][ T9748] ? __radix_tree_lookup+0x217/0x2b0 [ 229.080219][ T9748] genl_rcv_msg+0x560/0x800 [ 229.080233][ T9748] ? __pfx_genl_rcv_msg+0x10/0x10 [ 229.080246][ T9748] ? __pfx_ctrl_getfamily+0x10/0x10 [ 229.080263][ T9748] netlink_rcv_skb+0x159/0x420 [ 229.080274][ T9748] ? __pfx_genl_rcv_msg+0x10/0x10 [ 229.080287][ T9748] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 229.080304][ T9748] ? netlink_deliver_tap+0x1ae/0xcc0 [ 229.080325][ T9748] genl_rcv+0x28/0x40 [ 229.080336][ T9748] netlink_unicast+0x585/0x850 [ 229.080349][ T9748] ? __pfx_netlink_unicast+0x10/0x10 [ 229.080363][ T9748] netlink_sendmsg+0x8b0/0xda0 [ 229.080376][ T9748] ? __pfx_netlink_sendmsg+0x10/0x10 [ 229.080389][ T9748] ? apparmor_socket_sendmsg+0x15b/0x270 [ 229.080406][ T9748] __sys_sendto+0x48b/0x4e0 [ 229.080418][ T9748] ? __pfx_netlink_sendmsg+0x10/0x10 [ 229.080429][ T9748] ? __pfx___sys_sendto+0x10/0x10 [ 229.080454][ T9748] __ia32_compat_sys_socketcall+0x59a/0x770 [ 229.080472][ T9748] ? __fget_files+0x21f/0x3d0 [ 229.080493][ T9748] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 229.080519][ T9748] ? fput+0x7c/0x100 [ 229.080552][ T9748] do_int80_emulation+0x166/0x650 [ 229.080579][ T9748] asm_int80_emulation+0x1a/0x20 [ 229.080597][ T9748] RIP: 0023:0xf72074eb [ 229.080614][ T9748] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 229.080628][ T9748] RSP: 002b:00000000f54bc34c EFLAGS: 00000246 ORIG_RAX: 0000000000000066 [ 229.080640][ T9748] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000f54bc3f4 [ 229.080646][ T9748] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 229.080653][ T9748] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 229.080659][ T9748] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 229.080665][ T9748] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 229.080678][ T9748] [ 229.193334][ T9750] io-wq is not configured for unbound workers [ 229.278231][ T42] audit: type=1800 audit(1787677722.659:4803): pid=9759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1141" name="file0" dev="overlay" ino=664 res=0 errno=0 [ 229.354284][ T9764] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1142'. [ 229.361109][ T9764] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1142'. [ 229.364159][ T9764] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1142'. [ 229.367938][ T9764] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1142'. [ 229.370861][ T9764] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1142'. [ 229.399054][ T5904] libceph: connect (2)127.0.0.1:6789 error -101 [ 229.401767][ T5904] libceph: ceph_tcp_connect failed: -101 [ 229.413982][ T5904] libceph: mon0 (2)127.0.0.1:6789 connect error [ 229.531152][ T9773] FAULT_INJECTION: forcing a failure. [ 229.531152][ T9773] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.535531][ T9773] CPU: 1 UID: 0 PID: 9773 Comm: syz.0.1145 Tainted: G L syzkaller #0 PREEMPT(full) [ 229.535551][ T9773] Tainted: [L]=SOFTLOCKUP [ 229.535555][ T9773] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 229.535561][ T9773] Call Trace: [ 229.535567][ T9773] [ 229.535572][ T9773] dump_stack_lvl+0x100/0x190 [ 229.535596][ T9773] should_fail_ex.cold+0x5/0xa [ 229.535611][ T9773] _copy_from_user+0x2e/0xd0 [ 229.535625][ T9773] ? __pfx_sync_file_ioctl+0x10/0x10 [ 229.535639][ T9773] sync_file_ioctl+0x707/0xea0 [ 229.535656][ T9773] ? __pfx_sync_file_ioctl+0x10/0x10 [ 229.535669][ T9773] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 229.535683][ T9773] ? do_vfs_ioctl+0x226/0x13e0 [ 229.535703][ T9773] ? find_held_lock+0x2b/0x80 [ 229.535713][ T9773] ? __fget_files+0x215/0x3d0 [ 229.535728][ T9773] ? hook_file_ioctl_common+0x140/0x440 [ 229.535749][ T9773] ? __fget_files+0x21f/0x3d0 [ 229.535765][ T9773] ? __pfx_sync_file_ioctl+0x10/0x10 [ 229.535779][ T9773] compat_ptr_ioctl+0x6e/0xa0 [ 229.535792][ T9773] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 229.535805][ T9773] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 229.535821][ T9773] __do_fast_syscall_32+0x13a/0x8b0 [ 229.535837][ T9773] ? lockdep_hardirqs_on+0x7d/0x110 [ 229.535852][ T9773] do_fast_syscall_32+0x32/0x70 [ 229.535866][ T9773] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 229.535882][ T9773] RIP: 0023:0xf70cefec [ 229.535895][ T9773] Code: Unable to access opcode bytes at 0xf70cefc2. [ 229.535900][ T9773] RSP: 002b:00000000f54bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 229.535911][ T9773] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000040103e05 [ 229.535918][ T9773] RDX: 0000000080000300 RSI: 0000000000000000 RDI: 0000000000000000 [ 229.535925][ T9773] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 229.535930][ T9773] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 229.535936][ T9773] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 229.535949][ T9773] [ 229.565569][ T5813] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 229.633047][ T9776] 8021q: adding VLAN 0 to HW filter on device bond1 [ 229.686014][ T5904] libceph: connect (2)127.0.0.1:6789 error -101 [ 229.693445][ T5904] libceph: ceph_tcp_connect failed: -101 [ 229.698785][ T5904] libceph: mon0 (2)127.0.0.1:6789 connect error [ 229.757549][ T5813] usb 10-1: device descriptor read/64, error -71 [ 229.846855][ T3261] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 229.996384][ T3261] usb 5-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 230.000166][ T3261] usb 5-1: config 0 has no interfaces? [ 230.003850][ T3261] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.006865][ T3261] usb 5-1: Product: syz [ 230.008296][ T3261] usb 5-1: Manufacturer: syz [ 230.009815][ T3261] usb 5-1: SerialNumber: syz [ 230.013371][ T3261] usb 5-1: config 0 descriptor?? [ 230.015679][ T5813] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 230.145625][ T5813] usb 10-1: device descriptor read/64, error -71 [ 230.205831][ T5904] libceph: connect (2)127.0.0.1:6789 error -101 [ 230.208360][ T5904] libceph: ceph_tcp_connect failed: -101 [ 230.210259][ T5904] libceph: mon0 (2)127.0.0.1:6789 connect error [ 230.239534][ T9777] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 230.257502][ T5813] usb usb10-port1: attempt power cycle [ 230.258204][ T9799] mac80211_hwsim hwsim14 syzkaller0: entered promiscuous mode [ 230.262414][ T9799] mac80211_hwsim hwsim14 syzkaller0: entered allmulticast mode [ 230.307265][ T5742] usb 5-1: USB disconnect, device number 14 [ 230.600468][ T5813] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 230.626507][ T5813] usb 10-1: device descriptor read/8, error -71 [ 230.874151][ T5737] Bluetooth: hci1: unexpected event for opcode 0x2035 [ 230.887923][ T5737] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 230.888353][ T5813] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 230.912822][ T5813] usb 10-1: device descriptor read/8, error -71 [ 231.025839][ T5813] usb usb10-port1: unable to enumerate USB device [ 231.065921][ T5737] Bluetooth: hci4: command 0x0c1a tx timeout [ 231.395814][ T5904] libceph: connect (2)127.0.0.1:6789 error -101 [ 231.398935][ T5904] libceph: ceph_tcp_connect failed: -101 [ 231.401577][ T5904] libceph: mon0 (2)127.0.0.1:6789 connect error [ 231.416131][ T9765] ceph: No mds server is up or the cluster is laggy [ 231.426341][ T9816] FAULT_INJECTION: forcing a failure. [ 231.426341][ T9816] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 231.431384][ T9816] CPU: 0 UID: 0 PID: 9816 Comm: syz.6.1159 Tainted: G L syzkaller #0 PREEMPT(full) [ 231.431419][ T9816] Tainted: [L]=SOFTLOCKUP [ 231.431424][ T9816] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 231.431432][ T9816] Call Trace: [ 231.431439][ T9816] [ 231.431446][ T9816] dump_stack_lvl+0x100/0x190 [ 231.431468][ T9816] should_fail_ex.cold+0x5/0xa [ 231.431484][ T9816] _copy_to_user+0x32/0xd0 [ 231.431502][ T9816] do_sock_getsockopt+0x631/0x6e0 [ 231.431527][ T9816] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 231.431546][ T9816] ? finish_task_switch.isra.0+0x3b3/0x10d0 [ 231.431581][ T9816] ? find_held_lock+0x2b/0x80 [ 231.431605][ T9816] ? __fget_files+0x21f/0x3d0 [ 231.431761][ T9816] __sys_getsockopt+0x133/0x1d0 [ 231.431785][ T9816] ? __ia32_sys_getsockopt+0xbc/0x160 [ 231.431799][ T9816] __ia32_sys_getsockopt+0xbc/0x160 [ 231.431814][ T9816] ? __do_fast_syscall_32+0xb3/0x8b0 [ 231.431831][ T9816] ? lockdep_hardirqs_on+0x7d/0x110 [ 231.431846][ T9816] __do_fast_syscall_32+0x13a/0x8b0 [ 231.431862][ T9816] ? lockdep_hardirqs_on+0x7d/0x110 [ 231.431878][ T9816] do_fast_syscall_32+0x32/0x70 [ 231.431895][ T9816] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 231.431911][ T9816] RIP: 0023:0xf6feefec [ 231.431929][ T9816] Code: Unable to access opcode bytes at 0xf6feefc2. [ 231.431934][ T9816] RSP: 002b:00000000f53bc50c EFLAGS: 00000292 ORIG_RAX: 000000000000016d [ 231.431947][ T9816] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000000000008 [ 231.431955][ T9816] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000080000040 [ 231.431962][ T9816] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 231.431969][ T9816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 231.431977][ T9816] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 231.431992][ T9816] [ 231.514113][ T5904] usb 7-1: USB disconnect, device number 25 [ 232.389370][ T37] IPVS: starting estimator thread 0... [ 232.558064][ T9827] IPVS: using max 44 ests per chain, 105600 per kthread [ 232.558629][ T9836] netlink: 'syz.2.1162': attribute type 11 has an invalid length. [ 232.624358][ T9836] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 232.643599][ T9829] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 232.787304][ T9847] siw: device registration error -23 [ 232.829860][ T9852] __nla_validate_parse: 18 callbacks suppressed [ 232.829874][ T9852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1171'. [ 232.844753][ T9852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1171'. [ 232.850066][ T9852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1171'. [ 232.853889][ T9852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1171'. [ 232.858417][ T9852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1171'. [ 232.880049][ T9852] Cache volume key already in use (9p,syz,) [ 233.244317][ T36] IPVS: starting estimator thread 0... [ 233.355607][ T9870] IPVS: using max 29 ests per chain, 69600 per kthread [ 233.363687][ T9874] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 233.366266][ T9874] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 233.368772][ T9874] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 233.370671][ T9874] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 233.395545][ T7957] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 233.494466][ T9883] netlink: 'syz.2.1177': attribute type 11 has an invalid length. [ 233.531864][ T9883] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 233.543101][ T9887] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1180'. [ 233.548392][ T7957] usb 11-1: device descriptor read/64, error -71 [ 233.552527][ T9887] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1180'. [ 233.556849][ T9887] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1180'. [ 233.560798][ T9887] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1180'. [ 233.564446][ T9887] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1180'. [ 233.579065][ T9879] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 233.819836][ T7957] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 233.881670][ T9889] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 233.976303][ T7957] usb 11-1: device descriptor read/64, error -71 [ 234.101705][ T7957] usb usb11-port1: attempt power cycle [ 234.524828][ T9916] siw: device registration error -23 [ 234.545520][ T7957] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 235.256194][ T7957] usb 11-1: device descriptor read/8, error -71 [ 235.336524][ T9920] netlink: 'syz.0.1192': attribute type 11 has an invalid length. [ 235.382168][ T9920] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 235.392569][ T5737] Bluetooth: hci4: command 0x0c1a tx timeout [ 235.394068][ T5733] Bluetooth: hci2: command 0x0c1a tx timeout [ 235.394515][ T5737] Bluetooth: hci3: command 0x0405 tx timeout [ 235.396611][ T5733] Bluetooth: hci1: command 0x0406 tx timeout [ 235.526583][ T9920] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 235.575643][ T7957] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 235.608988][ T7957] usb 11-1: device descriptor read/8, error -71 [ 236.145580][ T7957] usb usb11-port1: unable to enumerate USB device [ 236.203707][ T9939] siw: device registration error -23 [ 236.950378][ T9943] netlink: 'syz.2.1201': attribute type 11 has an invalid length. [ 237.153022][ T9955] netlink: 'syz.2.1203': attribute type 11 has an invalid length. [ 237.251704][ T9955] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 237.284560][ T9951] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 237.335079][ T9962] random: crng reseeded on system resumption [ 238.332046][ T9989] siw: device registration error -23 [ 238.676318][ T5742] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 238.826045][ T5742] usb 11-1: device descriptor read/64, error -71 [ 239.085710][ T5742] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 239.225616][ T5742] usb 11-1: device descriptor read/64, error -71 [ 239.339878][ T5742] usb usb11-port1: attempt power cycle [ 239.715539][ T5742] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 239.749944][ T5742] usb 11-1: device descriptor read/8, error -71 [ 239.866147][T10002] netlink: 'syz.0.1214': attribute type 4 has an invalid length. [ 239.871010][T10003] netlink: 'syz.2.1215': attribute type 11 has an invalid length. [ 239.877590][ T9956] __nla_validate_parse: 13 callbacks suppressed [ 239.877603][ T9956] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1204'. [ 239.917025][ T9956] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 239.942742][T10005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1216'. [ 239.952980][T10005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1216'. [ 239.956438][T10005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1216'. [ 239.959570][T10005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1216'. [ 239.962492][T10005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1216'. [ 240.009967][ T5742] usb 11-1: new high-speed USB device number 9 using dummy_hcd [ 240.036674][ T5742] usb 11-1: device descriptor read/8, error -71 [ 240.145903][ T5742] usb usb11-port1: unable to enumerate USB device [ 240.155798][ T5959] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 240.212376][T10007] netlink: 'syz.5.1217': attribute type 11 has an invalid length. [ 240.270802][T10009] netlink: 'syz.5.1219': attribute type 11 has an invalid length. [ 240.305894][ T5959] usb 5-1: Using ep0 maxpacket: 32 [ 240.311014][ T5959] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 240.320901][ T5959] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 240.325904][T10009] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 240.332353][ T5959] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 240.338939][ T5959] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.345258][ T5959] usb 5-1: config 0 descriptor?? [ 240.362929][ T5959] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 240.399601][T10009] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1219'. [ 240.405081][T10009] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 240.485251][T10018] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 240.588206][T10021] siw: device registration error -23 [ 240.947523][ T5959] libceph: connect (2)127.0.0.1:6789 error -101 [ 240.950237][ T5959] libceph: ceph_tcp_connect failed: -101 [ 240.952535][ T5959] libceph: mon0 (2)127.0.0.1:6789 connect error [ 241.205787][ T5959] libceph: connect (2)127.0.0.1:6789 error -101 [ 241.208984][ T5959] libceph: ceph_tcp_connect failed: -101 [ 241.211747][ T5959] libceph: mon0 (2)127.0.0.1:6789 connect error [ 241.328699][T10030] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 241.441226][T10028] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 241.603323][T10035] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1226'. [ 241.611240][T10035] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1226'. [ 241.614588][T10035] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1226'. [ 241.716629][ T5959] libceph: connect (2)127.0.0.1:6789 error -101 [ 241.721246][ T5959] libceph: ceph_tcp_connect failed: -101 [ 241.723665][ T5959] libceph: mon0 (2)127.0.0.1:6789 connect error [ 241.819651][T10044] siw: device registration error -23 [ 241.915622][T10047] FAULT_INJECTION: forcing a failure. [ 241.915622][T10047] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 241.920847][T10047] CPU: 1 UID: 0 PID: 10047 Comm: syz.5.1229 Tainted: G L syzkaller #0 PREEMPT(full) [ 241.920875][T10047] Tainted: [L]=SOFTLOCKUP [ 241.920880][T10047] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 241.920890][T10047] Call Trace: [ 241.920898][T10047] [ 241.920906][T10047] dump_stack_lvl+0x100/0x190 [ 241.920936][T10047] should_fail_ex.cold+0x5/0xa [ 241.920966][T10047] _copy_to_user+0x32/0xd0 [ 241.920991][T10047] simple_read_from_buffer+0xcb/0x170 [ 241.921019][T10047] proc_fail_nth_read+0x1af/0x230 [ 241.921044][T10047] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 241.921069][T10047] ? rw_verify_area+0xce/0x6d0 [ 241.921095][T10047] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 241.921118][T10047] vfs_read+0x1e4/0xb40 [ 241.921145][T10047] ? __pfx_vfs_read+0x10/0x10 [ 241.921175][T10047] ? __fget_files+0x21f/0x3d0 [ 241.921207][T10047] ksys_read+0x12a/0x250 [ 241.921230][T10047] ? __pfx_ksys_read+0x10/0x10 [ 241.921259][T10047] do_int80_emulation+0x166/0x650 [ 241.921285][T10047] asm_int80_emulation+0x1a/0x20 [ 241.921302][T10047] RIP: 0023:0xf71b74eb [ 241.921315][T10047] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 241.921330][T10047] RSP: 002b:00000000f544c4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 241.921346][T10047] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000f544c5d0 [ 241.921358][T10047] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 241.921367][T10047] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 241.921378][T10047] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 241.921388][T10047] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 241.921411][T10047] [ 242.495591][ T5742] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 242.635532][ T5742] usb 10-1: device descriptor read/64, error -71 [ 242.754933][T10041] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 242.875628][ T5742] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 242.887836][T10062] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 242.937510][T10002] ceph: No mds server is up or the cluster is laggy [ 243.015617][ T5742] usb 10-1: device descriptor read/64, error -71 [ 243.021384][ T10] usb 5-1: USB disconnect, device number 15 [ 243.136509][ T5742] usb usb10-port1: attempt power cycle [ 243.258681][T10081] pim6reg: entered allmulticast mode [ 243.278899][T10071] pim6reg: left allmulticast mode [ 243.485570][ T5742] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 243.506949][ T5742] usb 10-1: device descriptor read/8, error -71 [ 243.745707][ T5742] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 243.789178][ T5742] usb 10-1: device descriptor read/8, error -71 [ 243.905671][ T5742] usb usb10-port1: unable to enumerate USB device [ 244.457337][T10104] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 244.602139][T10108] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 244.657588][T10112] FAULT_INJECTION: forcing a failure. [ 244.657588][T10112] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.663718][T10112] CPU: 1 UID: 0 PID: 10112 Comm: syz.2.1246 Tainted: G L syzkaller #0 PREEMPT(full) [ 244.663747][T10112] Tainted: [L]=SOFTLOCKUP [ 244.663753][T10112] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 244.663763][T10112] Call Trace: [ 244.663771][T10112] [ 244.663779][T10112] dump_stack_lvl+0x100/0x190 [ 244.663811][T10112] should_fail_ex.cold+0x5/0xa [ 244.663835][T10112] _copy_from_user+0x2e/0xd0 [ 244.663858][T10112] move_addr_to_kernel+0x65/0x170 [ 244.663887][T10112] get_compat_msghdr+0x3c7/0x480 [ 244.663910][T10112] ? __pfx_get_compat_msghdr+0x10/0x10 [ 244.663939][T10112] ___sys_sendmsg+0x1b6/0x1e0 [ 244.663965][T10112] ? __pfx____sys_sendmsg+0x10/0x10 [ 244.663999][T10112] ? find_held_lock+0x2b/0x80 [ 244.664027][T10112] __sys_sendmsg+0x160/0x210 [ 244.664047][T10112] ? __pfx___sys_sendmsg+0x10/0x10 [ 244.664097][T10112] __do_fast_syscall_32+0x13a/0x8b0 [ 244.664120][T10112] ? lockdep_hardirqs_on+0x7d/0x110 [ 244.664143][T10112] do_fast_syscall_32+0x32/0x70 [ 244.664165][T10112] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 244.664185][T10112] RIP: 0023:0xf7f54fec [ 244.664204][T10112] Code: Unable to access opcode bytes at 0xf7f54fc2. [ 244.664211][T10112] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 244.664227][T10112] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000100 [ 244.664238][T10112] RDX: 0000000030004001 RSI: 0000000000000000 RDI: 0000000000000000 [ 244.664249][T10112] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 244.664259][T10112] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 244.664269][T10112] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 244.664291][T10112] [ 245.114962][T10117] random: crng reseeded on system resumption [ 245.362299][T10121] siw: device registration error -23 [ 246.386154][ T852] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 246.834401][T10114] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 246.873091][T10138] netlink: 'syz.6.1255': attribute type 11 has an invalid length. [ 246.901850][T10138] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 246.951547][T10138] __nla_validate_parse: 6 callbacks suppressed [ 246.951559][T10138] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1255'. [ 246.957045][T10138] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 247.293049][T10148] random: crng reseeded on system resumption [ 247.440392][ T852] usb 11-1: new high-speed USB device number 10 using dummy_hcd [ 247.500044][T10155] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1260'. [ 247.507001][T10155] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1260'. [ 247.510983][T10155] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1260'. [ 247.515185][T10155] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1260'. [ 247.522645][T10155] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1260'. [ 247.588234][ T852] usb 11-1: device descriptor read/64, error -71 [ 247.765220][T10157] netlink: 'syz.2.1261': attribute type 11 has an invalid length. [ 247.825736][ T852] usb 11-1: new high-speed USB device number 11 using dummy_hcd [ 247.888339][T10162] siw: device registration error -23 [ 247.966331][ T852] usb 11-1: device descriptor read/64, error -71 [ 248.077690][ T852] usb usb11-port1: attempt power cycle [ 248.435772][ T852] usb 11-1: new high-speed USB device number 12 using dummy_hcd [ 248.471886][ T852] usb 11-1: device descriptor read/8, error -71 [ 248.715697][ T852] usb 11-1: new high-speed USB device number 13 using dummy_hcd [ 248.736410][ T852] usb 11-1: device descriptor read/8, error -71 [ 248.856314][ T852] usb usb11-port1: unable to enumerate USB device [ 248.907622][ T35] block nbd0: Possible stuck request ffff888027227000: control (read@0,4096B). Runtime 180 seconds [ 248.933837][T10168] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1264'. [ 248.944197][T10168] input: syz1 as /devices/virtual/input/input12 [ 250.296977][ T5904] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 250.823310][T10195] siw: device registration error -23 [ 251.293130][T10200] netlink: 'syz.6.1270': attribute type 11 has an invalid length. [ 251.343267][T10202] random: crng reseeded on system resumption [ 252.265729][T10179] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 252.326926][T10212] netlink: 'syz.6.1273': attribute type 11 has an invalid length. [ 252.450152][T10212] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 252.744085][T10212] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1273'. [ 252.749072][T10212] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 252.830445][T10214] netlink: 'syz.6.1274': attribute type 11 has an invalid length. [ 252.860663][T10214] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 252.901797][T10214] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1274'. [ 252.907562][T10214] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 255.308427][ T1434] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.310699][ T1434] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.959084][ T5140] udevd[5140]: worker [5939] /devices/virtual/block/nbd0 timeout; kill it [ 255.963356][ T5140] udevd[5140]: seq 10952 '/devices/virtual/block/nbd0' killed [ 257.458922][T10228] netlink: 'syz.5.1276': attribute type 11 has an invalid length. [ 257.512471][T10228] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 257.591598][T10228] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1276'. [ 257.595358][T10228] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 257.772429][T10234] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1278'. [ 257.986115][ T5835] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 258.055689][T10239] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1280'. [ 258.337263][ T5835] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 258.341283][ T5835] usb 7-1: config 0 has no interfaces? [ 258.343012][ T5835] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.347451][ T5835] usb 7-1: config 0 descriptor?? [ 258.483424][ T5737] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 258.492635][ T5737] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 258.500941][ T5737] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 258.507601][ T5737] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 258.514086][ T5737] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 258.827040][T10243] lo speed is unknown, defaulting to 1000 [ 258.950517][T10243] wlan0 speed is unknown, defaulting to 1000 [ 258.953695][T10245] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1282'. [ 258.971816][T10257] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 259.107685][T10262] netlink: 'syz.5.1284': attribute type 11 has an invalid length. [ 259.137583][T10262] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 259.190194][T10262] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1284'. [ 259.193691][T10262] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 259.256069][T10243] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.259031][T10243] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.261864][T10243] bridge_slave_0: entered allmulticast mode [ 259.267772][T10243] bridge_slave_0: entered promiscuous mode [ 259.272221][T10243] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.275267][T10243] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.279373][T10243] bridge_slave_1: entered allmulticast mode [ 259.282859][T10243] bridge_slave_1: entered promiscuous mode [ 259.329758][T10243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.342907][T10243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.424732][T10243] team0: Port device team_slave_0 added [ 259.444053][T10243] team0: Port device team_slave_1 added [ 259.492477][T10243] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.494908][T10243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 259.504375][T10243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.509403][T10243] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.511652][T10243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 259.520005][T10243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.612517][T10243] hsr_slave_0: entered promiscuous mode [ 259.614833][T10243] hsr_slave_1: entered promiscuous mode [ 259.617200][T10243] debugfs: 'hsr0' already exists in 'hsr' [ 259.619129][T10243] Cannot create hsr debugfs directory [ 259.849272][T10274] netlink: 'syz.5.1287': attribute type 11 has an invalid length. [ 259.945137][T10275] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 260.002549][T10243] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 260.011470][T10243] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 260.064170][T10243] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 260.068550][T10275] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1287'. [ 260.071866][T10275] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 260.077800][T10243] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 260.082795][T10243] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 260.093631][T10243] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 260.113867][T10243] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 260.131183][T10243] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 260.258212][T10243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.280807][T10243] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.290143][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.292332][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.309266][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.311793][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.558631][T10292] input: syz0 as /devices/virtual/input/input13 [ 260.586026][ T5730] Bluetooth: hci5: command tx timeout [ 260.674109][T10300] netlink: 'syz.6.1298': attribute type 11 has an invalid length. [ 260.733769][ T5904] usb 7-1: USB disconnect, device number 26 [ 260.797789][T10313] netlink: 'syz.5.1300': attribute type 11 has an invalid length. [ 260.910299][ T5806] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 260.913680][T10243] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.061180][T10243] veth0_vlan: entered promiscuous mode [ 261.067732][T10243] veth1_vlan: entered promiscuous mode [ 261.087632][T10243] veth0_macvtap: entered promiscuous mode [ 261.091755][T10243] veth1_macvtap: entered promiscuous mode [ 261.101563][T10243] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.108018][T10243] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.187422][ T5821] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.208534][ T5821] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.211351][ T5821] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.217445][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.220318][ T5821] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.224400][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.260337][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.295587][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.324642][T10330] siw: device registration error -23 [ 261.525522][T10334] netlink: 'syz.5.1295': attribute type 11 has an invalid length. [ 261.587174][T10334] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 261.697683][T10334] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1295'. [ 261.700744][T10334] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 261.882499][T10342] netlink: 'syz.7.1296': attribute type 11 has an invalid length. [ 262.036357][T10346] mac80211_hwsim hwsim16 wlan0: entered promiscuous mode [ 262.044841][T10346] mac80211_hwsim hwsim16 wlan0: entered allmulticast mode [ 262.160309][T10342] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1296'. [ 262.175745][T10342] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 262.249445][T10350] input: syz0 as /devices/virtual/input/input14 [ 262.528126][T10363] netlink: 'syz.6.1306': attribute type 11 has an invalid length. [ 262.649996][T10364] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 262.665567][ T5730] Bluetooth: hci5: command tx timeout [ 262.668973][T10363] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1306'. [ 262.669006][T10363] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 262.958293][T10366] FAULT_INJECTION: forcing a failure. [ 262.958293][T10366] name failslab, interval 1, probability 0, space 0, times 0 [ 262.964927][T10366] CPU: 1 UID: 0 PID: 10366 Comm: syz.5.1308 Tainted: G L syzkaller #0 PREEMPT(full) [ 262.964945][T10366] Tainted: [L]=SOFTLOCKUP [ 262.964949][T10366] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 262.964955][T10366] Call Trace: [ 262.964960][T10366] [ 262.964966][T10366] dump_stack_lvl+0x100/0x190 [ 262.964985][T10366] should_fail_ex.cold+0x5/0xa [ 262.965000][T10366] should_failslab+0xc2/0x120 [ 262.965012][T10366] __kmalloc_cache_noprof+0x91/0x6d0 [ 262.965027][T10366] ? memtype_get_idx+0xb0/0xc0 [ 262.965041][T10366] ? memtype_get_idx+0x3d/0xc0 [ 262.965056][T10366] memtype_get_idx+0x3d/0xc0 [ 262.965069][T10366] seq_read_iter+0xac5/0x1270 [ 262.965091][T10366] seq_read+0x344/0x4d0 [ 262.965106][T10366] ? __pfx_seq_read+0x10/0x10 [ 262.965128][T10366] ? lock_acquire+0x1b9/0x370 [ 262.965147][T10366] full_proxy_read+0x135/0x1a0 [ 262.965161][T10366] ? __pfx_full_proxy_read+0x10/0x10 [ 262.965174][T10366] vfs_read+0x1e4/0xb40 [ 262.965191][T10366] ? __pfx_vfs_read+0x10/0x10 [ 262.965210][T10366] ? find_held_lock+0x2b/0x80 [ 262.965220][T10366] ? __fget_files+0x215/0x3d0 [ 262.965238][T10366] ? __fget_files+0x21f/0x3d0 [ 262.965257][T10366] ksys_read+0x12a/0x250 [ 262.965271][T10366] ? __pfx_ksys_read+0x10/0x10 [ 262.965285][T10366] ? ksys_write+0x1ac/0x250 [ 262.965300][T10366] ? __pfx_ksys_write+0x10/0x10 [ 262.965318][T10366] __do_fast_syscall_32+0x13a/0x8b0 [ 262.965332][T10366] ? lockdep_hardirqs_on+0x7d/0x110 [ 262.965346][T10366] do_fast_syscall_32+0x32/0x70 [ 262.965361][T10366] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 262.965374][T10366] RIP: 0023:0xf707efec [ 262.965389][T10366] Code: Unable to access opcode bytes at 0xf707efc2. [ 262.965393][T10366] RSP: 002b:00000000f546d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000003 [ 262.965416][T10366] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080003380 [ 262.965423][T10366] RDX: 0000000000002020 RSI: 0000000000000000 RDI: 0000000000000000 [ 262.965429][T10366] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 262.965435][T10366] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 262.965441][T10366] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 262.965455][T10366] [ 263.316218][ T7957] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 263.387898][T10382] siw: device registration error -23 [ 263.466495][ T7957] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 263.470019][ T7957] usb 10-1: config 0 has no interfaces? [ 263.471940][ T7957] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.477051][ T7957] usb 10-1: config 0 descriptor?? [ 263.565606][ T5959] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 263.707669][ T5959] usb 7-1: device descriptor read/64, error -71 [ 263.955646][ T5959] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 264.095831][ T5959] usb 7-1: device descriptor read/64, error -71 [ 264.206438][ T5959] usb usb7-port1: attempt power cycle [ 264.565617][ T5959] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 264.588026][ T5959] usb 7-1: device descriptor read/8, error -71 [ 264.635636][ T29] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 264.755584][ T5730] Bluetooth: hci5: command tx timeout [ 264.806112][ T29] usb 12-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 264.816259][ T29] usb 12-1: config 0 has no interfaces? [ 264.820681][ T29] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.838522][ T29] usb 12-1: config 0 descriptor?? [ 264.843477][ T5959] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 264.866309][ T5959] usb 7-1: device descriptor read/8, error -71 [ 264.976091][ T5959] usb usb7-port1: unable to enumerate USB device [ 266.351151][ T5959] usb 10-1: USB disconnect, device number 14 [ 266.364292][T10407] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1320'. [ 266.374823][T10407] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1320'. [ 266.379975][T10407] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1320'. [ 266.383204][T10407] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1320'. [ 266.386857][T10407] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1320'. [ 266.613354][T10421] netlink: 'syz.5.1326': attribute type 11 has an invalid length. [ 266.734567][T10424] netlink: 'syz.2.1324': attribute type 11 has an invalid length. [ 266.801698][T10424] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 266.819474][T10424] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1324'. [ 266.822288][T10424] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 266.826082][ T5730] Bluetooth: hci5: command tx timeout [ 266.868845][T10430] netlink: 'syz.5.1335': attribute type 11 has an invalid length. [ 267.119326][T10440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1327'. [ 267.285604][ T5904] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 267.424153][ T5806] usb 12-1: USB disconnect, device number 2 [ 267.426909][ T5904] usb 10-1: device descriptor read/64, error -71 [ 267.427899][T10442] netlink: 'syz.6.1329': attribute type 11 has an invalid length. [ 267.514797][T10445] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 267.564028][T10442] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1329'. [ 267.567083][T10442] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 267.685748][ T5904] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 267.782575][T10450] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1332'. [ 267.846398][ T5904] usb 10-1: device descriptor read/64, error -71 [ 267.968118][ T5904] usb usb10-port1: attempt power cycle [ 268.095622][ T29] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 268.247252][ T29] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 268.251439][ T29] usb 7-1: config 0 has no interfaces? [ 268.253218][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.258437][ T29] usb 7-1: config 0 descriptor?? [ 268.325955][ T5904] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 268.342285][T10455] netlink: 'syz.7.1336': attribute type 11 has an invalid length. [ 268.356919][ T5904] usb 10-1: device descriptor read/8, error -71 [ 268.388379][T10455] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1336'. [ 268.392108][T10455] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 268.606155][ T5904] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 268.646369][ T5904] usb 10-1: device descriptor read/8, error -71 [ 268.755729][ T5904] usb usb10-port1: unable to enumerate USB device [ 269.677024][ T10] usb 11-1: new high-speed USB device number 14 using dummy_hcd [ 269.846348][ T10] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 269.850619][ T10] usb 11-1: config 0 has no interfaces? [ 269.853208][ T10] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.859437][ T10] usb 11-1: config 0 descriptor?? [ 271.084613][ T10] usb 7-1: USB disconnect, device number 31 [ 271.355524][T10495] netlink: 'syz.5.1346': attribute type 11 has an invalid length. [ 271.473195][T10495] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 271.507948][T10495] __nla_validate_parse: 7 callbacks suppressed [ 271.507966][T10495] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1346'. [ 271.525554][T10495] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 271.884038][T10511] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1351'. [ 271.946063][ T10] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 272.085776][ T10] usb 7-1: device descriptor read/64, error -71 [ 272.192815][T10514] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1352'. [ 272.345497][ T10] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 272.437212][ T5806] usb 11-1: USB disconnect, device number 14 [ 272.495660][ T10] usb 7-1: device descriptor read/64, error -71 [ 272.553603][T10519] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 272.615959][ T10] usb usb7-port1: attempt power cycle [ 272.965721][ T10] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 272.987036][ T5806] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 272.991310][ T10] usb 7-1: device descriptor read/8, error -71 [ 273.146376][ T5806] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 273.150560][ T5806] usb 10-1: config 0 has no interfaces? [ 273.152853][ T5806] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.160101][ T5806] usb 10-1: config 0 descriptor?? [ 273.256193][ T10] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 273.276924][ T10] usb 7-1: device descriptor read/8, error -71 [ 273.396605][ T10] usb usb7-port1: unable to enumerate USB device [ 274.005114][T10537] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1359'. [ 274.506993][T10516] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 274.680442][T10540] netlink: 'syz.7.1360': attribute type 11 has an invalid length. [ 274.700404][T10542] syz.2.1361 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=0, oom_score_adj=1000 [ 274.704102][T10542] CPU: 0 UID: 0 PID: 10542 Comm: syz.2.1361 Tainted: G L syzkaller #0 PREEMPT(full) [ 274.704125][T10542] Tainted: [L]=SOFTLOCKUP [ 274.704130][T10542] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 274.704139][T10542] Call Trace: [ 274.704144][T10542] [ 274.704150][T10542] dump_stack_lvl+0x100/0x190 [ 274.704172][T10542] dump_header+0xfb/0x606 [ 274.704189][T10542] oom_kill_process.cold+0xd/0x380 [ 274.704205][T10542] out_of_memory+0x340/0x14f0 [ 274.704224][T10542] ? __pfx_out_of_memory+0x10/0x10 [ 274.704243][T10542] mem_cgroup_out_of_memory+0xc6/0x130 [ 274.704263][T10542] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 274.704281][T10542] ? find_held_lock+0x2b/0x80 [ 274.704296][T10542] ? do_raw_spin_unlock+0x145/0x1e0 [ 274.704317][T10542] ? _raw_spin_unlock+0x28/0x50 [ 274.704332][T10542] try_charge_memcg+0x6e1/0xdf0 [ 274.704350][T10542] ? __pfx_try_charge_memcg+0x10/0x10 [ 274.704364][T10542] ? find_held_lock+0x2b/0x80 [ 274.704375][T10542] ? rcu_read_unlock+0x17/0x60 [ 274.704389][T10542] ? rcu_read_unlock+0x17/0x60 [ 274.704410][T10542] __memcg_slab_post_alloc_hook+0x4a1/0x1270 [ 274.704431][T10542] ? kasan_unpoison+0x27/0x60 [ 274.704450][T10542] __kvmalloc_node_noprof+0x750/0x9b0 [ 274.704471][T10542] ? io_uring_setup.cold+0x1f4/0x1c5e [ 274.704493][T10542] io_uring_setup.cold+0x1f4/0x1c5e [ 274.704511][T10542] ? ksys_write+0x190/0x250 [ 274.704528][T10542] ? ksys_write+0x190/0x250 [ 274.704544][T10542] ? __pfx_io_uring_setup+0x10/0x10 [ 274.704562][T10542] ? do_futex+0x190/0x440 [ 274.704580][T10542] ? __pfx_do_futex+0x10/0x10 [ 274.704604][T10542] ? fput+0x7c/0x100 [ 274.704616][T10542] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 274.704637][T10542] ? ksys_write+0x1ac/0x250 [ 274.704655][T10542] ? __pfx_ksys_write+0x10/0x10 [ 274.704675][T10542] __ia32_sys_io_uring_setup+0xc2/0x170 [ 274.704693][T10542] __do_fast_syscall_32+0x13a/0x8b0 [ 274.704712][T10542] do_fast_syscall_32+0x32/0x70 [ 274.704728][T10542] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 274.704744][T10542] RIP: 0023:0xf7f54fec [ 274.704760][T10542] Code: Unable to access opcode bytes at 0xf7f54fc2. [ 274.704765][T10542] RSP: 002b:00000000f54164bc EFLAGS: 00000282 ORIG_RAX: 00000000000001a9 [ 274.704778][T10542] RAX: ffffffffffffffda RBX: 000000000000001d RCX: 0000000080000040 [ 274.704785][T10542] RDX: 00000000f7180f17 RSI: 0000000000000001 RDI: 00000000f541653c [ 274.704792][T10542] RBP: 00000000800000c0 R08: 0000000000000000 R09: 0000000000000000 [ 274.704799][T10542] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 274.704806][T10542] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 274.704821][T10542] [ 274.704826][T10542] memory: usage 0kB, limit 0kB, failcnt 91 [ 274.779847][T10543] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1360'. [ 274.782890][T10542] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 274.785775][T10543] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 274.787250][T10542] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 274.815129][T10542] Memory cgroup stats for /syz2/test: [ 274.815236][T10542] cache 0 [ 274.819007][T10542] rss 0 [ 274.820123][T10542] rss_huge 0 [ 274.821512][T10542] shmem 0 [ 274.822763][T10542] mapped_file 0 [ 274.824210][T10542] dirty 0 [ 274.825594][T10542] writeback 0 [ 274.827013][T10542] workingset_refault_anon 0 [ 274.828975][T10542] workingset_refault_file 0 [ 274.830897][T10542] swap 0 [ 274.831988][T10542] swapcached 0 [ 274.832992][T10542] pgpgin 0 [ 274.833955][T10542] pgpgout 0 [ 274.834969][T10542] pgfault 3 [ 274.836359][T10542] pgmajfault 0 [ 274.837625][T10542] inactive_anon 0 [ 274.839001][T10542] active_anon 0 [ 274.840361][T10542] inactive_file 0 [ 274.841934][T10542] active_file 0 [ 274.843617][T10542] unevictable 0 [ 274.845726][T10542] hierarchical_memory_limit 0 [ 274.848064][T10542] hierarchical_memsw_limit 9223372036854771712 [ 274.850721][T10542] total_cache 0 [ 274.852123][T10542] total_rss 0 [ 274.853554][T10542] total_rss_huge 0 [ 274.855186][T10542] total_shmem 0 [ 274.856797][T10542] total_mapped_file 0 [ 274.858358][T10542] total_dirty 0 [ 274.859730][T10542] total_writeback 0 [ 274.861202][T10542] total_workingset_refault_anon 0 [ 274.864466][T10542] total_workingset_refault_file 0 [ 274.866898][T10542] total_swap 0 [ 274.868299][T10542] total_swapcached 0 [ 274.870029][T10542] total_pgpgin 0 [ 274.871724][T10542] total_pgpgout 0 [ 274.873344][T10542] total_pgfault 3 [ 274.874858][T10542] total_pgmajfault 0 [ 274.876712][T10542] total_inactive_anon 0 [ 274.878140][T10542] total_active_anon 0 [ 274.879556][T10542] total_inactive_file 0 [ 274.880971][T10542] total_active_file 0 [ 274.882329][T10542] total_unevictable 0 [ 274.883717][T10542] anon_cost 0 [ 274.884883][T10542] file_cost 0 [ 274.886534][T10542] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2/test,task_memcg=/syz2/test,task=syz.2.1361,pid=10541,uid=0 [ 274.892853][T10542] Memory cgroup out of memory: Killed process 10541 (syz.2.1361) total-vm:102024kB, anon-rss:1300kB, file-rss:22760kB, shmem-rss:0kB, UID:0 pgtables:108kB oom_score_adj:1000 [ 275.016019][T10547] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 275.856851][T10567] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1368'. [ 275.989150][ T5806] usb 10-1: USB disconnect, device number 19 [ 276.360079][T10572] netlink: 'syz.7.1371': attribute type 11 has an invalid length. [ 276.393259][T10572] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1371'. [ 276.396507][T10572] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 276.476121][T10581] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 276.627005][T10586] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1369'. [ 276.708283][ T34] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 276.837264][ T34] usb 7-1: device descriptor read/64, error -71 [ 276.846028][T10596] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1377'. [ 276.855251][T10596] input: syz1 as /devices/virtual/input/input15 [ 277.076133][ T34] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 277.206293][ T34] usb 7-1: device descriptor read/64, error -71 [ 277.318131][ T34] usb usb7-port1: attempt power cycle [ 277.676470][ T34] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 277.717281][ T34] usb 7-1: device descriptor read/8, error -71 [ 277.957038][ T34] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 277.987286][ T34] usb 7-1: device descriptor read/8, error -71 [ 278.005571][ T29] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 278.098759][ T34] usb usb7-port1: unable to enumerate USB device [ 278.158477][ T29] usb 12-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 278.166636][ T29] usb 12-1: config 0 has no interfaces? [ 278.168347][ T29] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.180631][ T29] usb 12-1: config 0 descriptor?? [ 278.405559][T10605] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1380'. [ 278.505573][T10577] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 278.986342][ T35] block nbd0: Possible stuck request ffff888027227000: control (read@0,4096B). Runtime 210 seconds [ 279.053980][T10609] netlink: 'syz.6.1381': attribute type 11 has an invalid length. [ 279.070768][T10609] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1381'. [ 279.073444][T10609] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 279.140412][T10613] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 279.351436][T10623] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1382'. [ 280.230155][T10638] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 280.480611][T10644] netlink: 'syz.6.1391': attribute type 11 has an invalid length. [ 280.508607][T10644] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1391'. [ 280.511332][T10644] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 280.624877][T10648] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 280.773345][ T5806] usb 12-1: USB disconnect, device number 3 [ 280.830952][T10654] mac80211_hwsim hwsim16 syzkaller0: entered promiscuous mode [ 280.834062][T10654] mac80211_hwsim hwsim16 syzkaller0: entered allmulticast mode [ 281.276168][ T5806] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 281.415551][ T5806] usb 12-1: device descriptor read/64, error -71 [ 281.636042][T10630] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 281.665598][ T5806] usb 12-1: new high-speed USB device number 5 using dummy_hcd [ 281.672305][T10673] netlink: 'syz.5.1400': attribute type 11 has an invalid length. [ 281.703762][T10673] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1400'. [ 281.709073][T10673] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 281.815576][ T5806] usb 12-1: device descriptor read/64, error -71 [ 281.925909][ T5806] usb usb12-port1: attempt power cycle [ 281.982085][T10679] FAULT_INJECTION: forcing a failure. [ 281.982085][T10679] name failslab, interval 1, probability 0, space 0, times 0 [ 281.986176][T10679] CPU: 2 UID: 0 PID: 10679 Comm: syz.5.1402 Tainted: G L syzkaller #0 PREEMPT(full) [ 281.986203][T10679] Tainted: [L]=SOFTLOCKUP [ 281.986208][T10679] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 281.986226][T10679] Call Trace: [ 281.986232][T10679] [ 281.986238][T10679] dump_stack_lvl+0x100/0x190 [ 281.986263][T10679] should_fail_ex.cold+0x5/0xa [ 281.986276][T10679] should_failslab+0xc2/0x120 [ 281.986288][T10679] kmem_cache_alloc_noprof+0x92/0x6a0 [ 281.986305][T10679] ? do_getname+0x35/0x390 [ 281.986320][T10679] do_getname+0x35/0x390 [ 281.986332][T10679] user_path_at+0x26/0x60 [ 281.986348][T10679] __ia32_sys_mount+0x1fb/0x310 [ 281.986360][T10679] ? __pfx___ia32_sys_mount+0x10/0x10 [ 281.986371][T10679] ? ksys_write+0x1ac/0x250 [ 281.986386][T10679] ? __pfx_ksys_write+0x10/0x10 [ 281.986403][T10679] __do_fast_syscall_32+0x13a/0x8b0 [ 281.986417][T10679] ? lockdep_hardirqs_on+0x7d/0x110 [ 281.986431][T10679] do_fast_syscall_32+0x32/0x70 [ 281.986445][T10679] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 281.986459][T10679] RIP: 0023:0xf707efec [ 281.986472][T10679] Code: Unable to access opcode bytes at 0xf707efc2. [ 281.986477][T10679] RSP: 002b:00000000f546d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 281.986488][T10679] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 00000000800000c0 [ 281.986495][T10679] RDX: 0000000080000080 RSI: 000000000000c000 RDI: 0000000000000000 [ 281.986501][T10679] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 281.986507][T10679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 281.986513][T10679] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 281.986526][T10679] [ 282.267816][T10681] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 282.325722][ T5806] usb 12-1: new high-speed USB device number 6 using dummy_hcd [ 282.357094][ T5806] usb 12-1: device descriptor read/8, error -71 [ 282.447668][ T34] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 282.606797][ T34] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 282.612085][ T34] usb 7-1: config 0 has no interfaces? [ 282.615106][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.624098][ T34] usb 7-1: config 0 descriptor?? [ 282.627350][ T5806] usb 12-1: new high-speed USB device number 7 using dummy_hcd [ 282.667802][ T5806] usb 12-1: device descriptor read/8, error -71 [ 282.786007][ T5806] usb usb12-port1: unable to enumerate USB device [ 282.842975][T10701] FAULT_INJECTION: forcing a failure. [ 282.842975][T10701] name failslab, interval 1, probability 0, space 0, times 0 [ 282.847899][T10701] CPU: 1 UID: 0 PID: 10701 Comm: syz.6.1408 Tainted: G L syzkaller #0 PREEMPT(full) [ 282.847919][T10701] Tainted: [L]=SOFTLOCKUP [ 282.847922][T10701] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 282.847929][T10701] Call Trace: [ 282.847934][T10701] [ 282.847938][T10701] dump_stack_lvl+0x100/0x190 [ 282.847970][T10701] should_fail_ex.cold+0x5/0xa [ 282.847986][T10701] should_failslab+0xc2/0x120 [ 282.847998][T10701] __kmalloc_cache_node_noprof+0x94/0x720 [ 282.848009][T10701] ? find_held_lock+0x2b/0x80 [ 282.848019][T10701] ? vm_map_ram+0x31d/0xf80 [ 282.848029][T10701] ? vm_map_ram+0x6d9/0xf80 [ 282.848041][T10701] vm_map_ram+0x6d9/0xf80 [ 282.848055][T10701] fuse_readdir_uncached+0x859/0x1c30 [ 282.848077][T10701] ? lock_acquire+0x1b9/0x370 [ 282.848090][T10701] ? find_held_lock+0x2b/0x80 [ 282.848100][T10701] ? __pfx_fuse_readdir_uncached+0x10/0x10 [ 282.848117][T10701] ? mark_held_locks+0x40/0x70 [ 282.848129][T10701] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 282.848144][T10701] ? lockdep_hardirqs_on+0x7d/0x110 [ 282.848157][T10701] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 282.848188][T10701] ? rcu_is_watching+0x13/0xc0 [ 282.848204][T10701] ? trace_sched_exit_tp+0x120/0x160 [ 282.848221][T10701] ? __schedule+0x126b/0x6920 [ 282.848245][T10701] ? preempt_schedule_common+0x3c/0xb0 [ 282.848258][T10701] ? preempt_schedule_thunk+0x16/0x40 [ 282.848273][T10701] fuse_readdir+0x9bb/0x1f20 [ 282.848294][T10701] ? apparmor_file_permission+0x13f/0x1c0 [ 282.848320][T10701] iterate_dir+0x296/0xae0 [ 282.848337][T10701] __ia32_sys_getdents64+0x13a/0x2c0 [ 282.848353][T10701] ? __pfx___ia32_sys_getdents64+0x10/0x10 [ 282.848369][T10701] ? __pfx_filldir64+0x10/0x10 [ 282.848383][T10701] ? ksys_write+0x1ac/0x250 [ 282.848398][T10701] ? __pfx_ksys_write+0x10/0x10 [ 282.848415][T10701] __do_fast_syscall_32+0x13a/0x8b0 [ 282.848430][T10701] ? lockdep_hardirqs_on+0x7d/0x110 [ 282.848443][T10701] do_fast_syscall_32+0x32/0x70 [ 282.848458][T10701] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 282.848471][T10701] RIP: 0023:0xf6feefec [ 282.848485][T10701] Code: Unable to access opcode bytes at 0xf6feefc2. [ 282.848490][T10701] RSP: 002b:00000000f53bc50c EFLAGS: 00000292 ORIG_RAX: 00000000000000dc [ 282.848501][T10701] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000100 [ 282.848508][T10701] RDX: 0000000000000086 RSI: 0000000000000000 RDI: 0000000000000000 [ 282.848514][T10701] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 282.848519][T10701] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 282.848526][T10701] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 282.848539][T10701] [ 282.975099][T10704] netlink: 'syz.6.1409': attribute type 11 has an invalid length. [ 282.988731][T10704] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1409'. [ 282.991655][T10704] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 283.051095][T10706] pim6reg: entered allmulticast mode [ 283.255276][T10706] geneve2: entered promiscuous mode [ 283.265920][ T12] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 54472 - 0 [ 283.272502][ T12] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 54472 - 0 [ 283.277343][ T12] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 54472 - 0 [ 283.281359][ T12] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 54472 - 0 [ 283.285539][T10711] mac80211_hwsim hwsim12 syzkaller0: entered promiscuous mode [ 283.288359][T10711] mac80211_hwsim hwsim12 syzkaller0: entered allmulticast mode [ 284.488203][T10722] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 285.238728][ T29] usb 7-1: USB disconnect, device number 40 [ 285.255967][T10735] netlink: 'syz.6.1418': attribute type 11 has an invalid length. [ 285.269708][T10735] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1418'. [ 285.272707][T10735] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 285.376432][T10744] FAULT_INJECTION: forcing a failure. [ 285.376432][T10744] name failslab, interval 1, probability 0, space 0, times 0 [ 285.380463][T10744] CPU: 0 UID: 0 PID: 10744 Comm: syz.6.1421 Tainted: G L syzkaller #0 PREEMPT(full) [ 285.380483][T10744] Tainted: [L]=SOFTLOCKUP [ 285.380488][T10744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 285.380494][T10744] Call Trace: [ 285.380498][T10744] [ 285.380503][T10744] dump_stack_lvl+0x100/0x190 [ 285.380523][T10744] should_fail_ex.cold+0x5/0xa [ 285.380538][T10744] should_failslab+0xc2/0x120 [ 285.380550][T10744] __kmalloc_noprof+0xfc/0x840 [ 285.380566][T10744] ? rcu_is_watching+0x13/0xc0 [ 285.380583][T10744] ? tomoyo_realpath_from_path+0xb6/0x690 [ 285.380599][T10744] tomoyo_realpath_from_path+0xb6/0x690 [ 285.380614][T10744] tomoyo_path_number_perm+0x23c/0x580 [ 285.380631][T10744] ? tomoyo_path_number_perm+0x22e/0x580 [ 285.380648][T10744] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 285.380666][T10744] ? get_pid_task+0x106/0x250 [ 285.380695][T10744] ? find_held_lock+0x2b/0x80 [ 285.380705][T10744] ? __fget_files+0x215/0x3d0 [ 285.380721][T10744] ? hook_file_ioctl_common+0x140/0x440 [ 285.380737][T10744] ? __fget_files+0x215/0x3d0 [ 285.380754][T10744] ? __fget_files+0x21f/0x3d0 [ 285.380772][T10744] security_file_ioctl_compat+0xd3/0x230 [ 285.380791][T10744] __ia32_compat_sys_ioctl+0xc2/0x360 [ 285.380808][T10744] __do_fast_syscall_32+0x13a/0x8b0 [ 285.380823][T10744] ? lockdep_hardirqs_on+0x7d/0x110 [ 285.380838][T10744] do_fast_syscall_32+0x32/0x70 [ 285.380852][T10744] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 285.380866][T10744] RIP: 0023:0xf6feefec [ 285.380879][T10744] Code: Unable to access opcode bytes at 0xf6feefc2. [ 285.380884][T10744] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 285.380895][T10744] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae80 [ 285.380902][T10744] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 285.380908][T10744] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 285.380914][T10744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 285.380920][T10744] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 285.380933][T10744] [ 285.380938][T10744] ERROR: Out of memory at tomoyo_realpath_from_path. [ 285.405621][T10714] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 285.406207][T10746] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1422'. [ 285.406796][T10709] syz.6.1410 (10709) used greatest stack depth: 17912 bytes left [ 285.473116][T10749] input: syz1 as /devices/virtual/input/input16 [ 285.782916][T10752] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1423'. [ 285.791200][T10752] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1423'. [ 285.794376][T10752] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1423'. [ 285.797829][T10752] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1423'. [ 285.800854][T10752] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1423'. [ 286.030388][T10760] netlink: 'syz.5.1427': attribute type 11 has an invalid length. [ 286.203927][T10767] random: crng reseeded on system resumption [ 287.000756][T10775] netlink: 'syz.6.1431': attribute type 11 has an invalid length. [ 287.081186][T10775] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1431'. [ 287.084313][T10775] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 287.133068][T10779] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 287.156758][T10781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1433'. [ 287.163436][T10781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1433'. [ 287.167387][T10781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1433'. [ 287.170326][T10781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1433'. [ 287.173948][T10781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1433'. [ 287.421156][T10790] netlink: 'syz.5.1436': attribute type 11 has an invalid length. [ 287.595641][ T29] usb 11-1: new high-speed USB device number 15 using dummy_hcd [ 287.725760][ T29] usb 11-1: device descriptor read/64, error -71 [ 287.795610][ T5904] usb 12-1: new high-speed USB device number 8 using dummy_hcd [ 287.946937][ T43] INFO: task syz.3.509:7504 blocked in I/O wait for more than 143 seconds. [ 287.951276][ T43] Tainted: G L syzkaller #0 [ 287.954899][ T43] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 287.959075][ T43] task:syz.3.509 state:D stack:26328 pid:7504 tgid:7503 ppid:5736 task_flags:0x400040 flags:0x08080002 [ 287.961107][ T5904] usb 12-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 287.964258][ T43] Call Trace: [ 287.964278][ T43] [ 287.964291][ T43] __schedule+0x1259/0x6920 [ 287.964334][ T43] ? __pfx___schedule+0x10/0x10 [ 287.964354][ T43] ? find_held_lock+0x2b/0x80 [ 287.964374][ T43] ? schedule+0x225/0x2c0 [ 287.964400][ T43] schedule+0xdd/0x2c0 [ 287.970871][ T5904] usb 12-1: config 0 has no interfaces? [ 287.971211][ T43] io_schedule+0x8a/0xf0 [ 287.972681][ T5904] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.974805][ T43] folio_wait_bit_common+0x3c0/0xad0 [ 287.980872][ T5904] usb 12-1: config 0 descriptor?? [ 287.983731][ T29] usb 11-1: new high-speed USB device number 16 using dummy_hcd [ 287.996126][ T43] ? folio_wait_bit_common+0x2a0/0xad0 [ 287.998786][ T43] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 288.001248][ T43] ? __pfx_wake_page_function+0x10/0x10 [ 288.003474][ T43] ? __pfx___might_resched+0x10/0x10 [ 288.005222][ T43] ? compaction_free+0x17d/0x470 [ 288.007411][ T43] migrate_pages_batch+0x165f/0x4680 [ 288.009511][ T43] ? __print_lock_name+0x20/0x80 [ 288.011811][ T43] ? __pfx_compaction_alloc+0x10/0x10 [ 288.013778][ T43] ? __pfx_compaction_free+0x10/0x10 [ 288.015597][ T43] ? __pfx_migrate_pages_batch+0x10/0x10 [ 288.017314][ T43] ? rcu_is_watching+0x13/0xc0 [ 288.018826][ T43] ? __pfx_clockevents_program_event+0x10/0x10 [ 288.020775][ T43] migrate_pages_sync+0x4db/0x880 [ 288.022281][ T43] ? __pfx_compaction_alloc+0x10/0x10 [ 288.023852][ T43] ? __pfx_compaction_free+0x10/0x10 [ 288.026458][ T43] ? lockdep_hardirqs_on+0x7d/0x110 [ 288.028079][ T43] ? __pfx_migrate_pages_sync+0x10/0x10 [ 288.029814][ T43] migrate_pages+0x1a83/0x2850 [ 288.031291][ T43] ? isolate_migratepages_block+0xd74/0x6200 [ 288.033111][ T43] ? __pfx_compaction_alloc+0x10/0x10 [ 288.034735][ T43] ? __pfx_compaction_free+0x10/0x10 [ 288.036489][ T43] ? __pfx_migrate_pages+0x10/0x10 [ 288.038163][ T43] ? __pfx_isolate_migratepages_block+0x10/0x10 [ 288.040131][ T43] ? putback_movable_pages+0x7f1/0xc00 [ 288.041844][ T43] compact_zone+0x2643/0x4640 [ 288.043309][ T43] ? debug_object_free+0x295/0x550 [ 288.044844][ T43] ? __entry_text_end+0xc9d/0x102039 [ 288.046524][ T43] ? __pfx_compact_zone+0x10/0x10 [ 288.048066][ T43] ? __flush_work+0xa38/0xcb0 [ 288.049690][ T43] ? __flush_work+0xa38/0xcb0 [ 288.051275][ T43] compact_node+0x17f/0x2c0 [ 288.052982][ T43] ? __pfx_compact_node+0x10/0x10 [ 288.054945][ T43] ? __lru_add_drain_all+0x4a6/0x820 [ 288.056785][ T43] sysctl_compaction_handler+0x141/0x210 [ 288.058467][ T43] proc_sys_call_handler+0x47f/0x5a0 [ 288.060127][ T43] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 288.061846][ T43] ? splice_from_pipe_next+0x1ec/0x5a0 [ 288.063564][ T43] iter_file_splice_write+0x830/0x10b0 [ 288.065214][ T43] ? __pfx_iter_file_splice_write+0x10/0x10 [ 288.067046][ T43] ? __pfx_copy_splice_read+0x10/0x10 [ 288.068663][ T43] ? __pfx_iter_file_splice_write+0x10/0x10 [ 288.070444][ T43] direct_splice_actor+0x192/0x690 [ 288.072049][ T43] splice_direct_to_actor+0x345/0xa30 [ 288.073742][ T43] ? __pfx_direct_splice_actor+0x10/0x10 [ 288.075830][ T43] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 288.077744][ T43] do_splice_direct+0x174/0x240 [ 288.079393][ T43] ? __pfx_do_splice_direct+0x10/0x10 [ 288.081166][ T43] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 288.083142][ T43] ? rw_verify_area+0xce/0x6d0 [ 288.084605][ T43] do_sendfile+0xadc/0xe20 [ 288.086013][ T43] ? __pfx_do_sendfile+0x10/0x10 [ 288.087515][ T43] ? __might_fault+0xc5/0x140 [ 288.088942][ T43] __ia32_compat_sys_sendfile+0x162/0x220 [ 288.090659][ T43] ? __pfx___ia32_compat_sys_sendfile+0x10/0x10 [ 288.092660][ T43] __do_fast_syscall_32+0x13a/0x8b0 [ 288.094251][ T43] ? lockdep_hardirqs_on+0x7d/0x110 [ 288.096024][ T43] do_fast_syscall_32+0x32/0x70 [ 288.097550][ T43] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 288.099628][ T43] RIP: 0023:0xf709efec [ 288.101006][ T43] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 00000000000000bb [ 288.103528][ T43] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000000005 [ 288.106735][ T43] RDX: 00000000800000c0 RSI: 0000000000000005 RDI: 0000000000000000 [ 288.109171][ T43] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 288.111668][ T43] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 288.114381][ T43] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 288.117279][ T43] [ 288.118359][ T43] [ 288.118359][ T43] Showing all locks held in the system: [ 288.120691][ T43] locks held by kworker/1:0/29: 6, on CPU#1: [ 288.122492][ T43] #0: ffff888021418d40 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 288.125828][ T43] #1: ffffc90000577d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 288.129300][ T43] #2: ffff8880248211d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bb/0x4420 [ 288.132351][ T43] #3: ffff888024826568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2b3e/0x4420 [ 288.135561][ T29] usb 11-1: device descriptor read/64, error -71 [ 288.135866][ T43] #4: ffff888023c41060 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x2b67/0x4420 [ 288.140852][ T43] #5: ffff88802b33c0a0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2c/0x140 [ 288.144449][ T43] locks held by khungtaskd/43: 1, last CPU#0: [ 288.146543][ T43] #0: ffffffff8ede9be0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 288.149654][ T43] locks held by getty/5533: 2, on CPU#3: [ 288.151613][ T43] #0: ffff88807ac368a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 288.154867][ T43] #1: ffffc9000019b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 288.158261][ T43] locks held by udevd/5939: 1, on CPU#2: [ 288.159912][ T43] #0: ffff888027198350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 288.162760][ T43] locks held by syz.3.509/7504: 1, on CPU#3: [ 288.164574][ T43] #0: ffff88806bc28460 (sb_writers#3){.+.+}-{0:0}, at: splice_direct_to_actor+0x345/0xa30 [ 288.167932][ T43] locks held by syz.0.1238/10083: 1, on CPU#1: [ 288.169807][ T43] #0: ffff888027198350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 288.172796][ T43] locks held by syz.2.1434/10788: 1, on CPU#1: [ 288.174728][ T43] #0: ffff88804c498ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_open+0x22/0xb0 [ 288.177815][ T43] [ 288.178591][ T43] ============================================= [ 288.178591][ T43] [ 288.181111][ T43] NMI backtrace for cpu 1 [ 288.181126][ T43] CPU: 1 UID: 0 PID: 43 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 288.181147][ T43] Tainted: [L]=SOFTLOCKUP [ 288.181152][ T43] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 288.181162][ T43] Call Trace: [ 288.181168][ T43] [ 288.181173][ T43] dump_stack_lvl+0x100/0x190 [ 288.181192][ T43] nmi_cpu_backtrace.cold+0x12d/0x151 [ 288.181208][ T43] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 288.181224][ T43] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 288.181244][ T43] sys_info+0x141/0x190 [ 288.181260][ T43] watchdog+0xcb1/0x1030 [ 288.181276][ T43] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 288.181289][ T43] ? __pfx_watchdog+0x10/0x10 [ 288.181302][ T43] ? __kthread_parkme+0x18f/0x230 [ 288.181319][ T43] ? kthread+0x13a/0x450 [ 288.181328][ T43] ? __pfx_watchdog+0x10/0x10 [ 288.181340][ T43] kthread+0x373/0x450 [ 288.181349][ T43] ? __pfx_kthread+0x10/0x10 [ 288.181360][ T43] ret_from_fork+0x730/0xd60 [ 288.181375][ T43] ? __pfx_ret_from_fork+0x10/0x10 [ 288.181391][ T43] ? __switch_to+0x800/0x10f0 [ 288.181403][ T43] ? __pfx_kthread+0x10/0x10 [ 288.181414][ T43] ret_from_fork_asm+0x1a/0x30 [ 288.181430][ T43] [ 288.181434][ T43] Sending NMI from CPU 1 to CPUs 0,2-3: [ 288.224505][ C2] NMI backtrace for cpu 2 [ 288.224526][ C2] CPU: 2 UID: 0 PID: 0 Comm: swapper/2 Tainted: G L syzkaller #0 PREEMPT(full) [ 288.224547][ C2] Tainted: [L]=SOFTLOCKUP [ 288.224552][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 288.224562][ C2] RIP: 0010:__sanitizer_cov_trace_pc+0x46/0x70 [ 288.224587][ C2] Code: 00 01 00 ff 74 1e f6 c4 01 74 44 a9 00 00 00 0f 75 3d f7 c1 00 00 00 f0 75 35 8b 82 34 17 00 00 85 c0 74 2b 8b 82 08 17 00 00 <83> f8 02 75 20 48 8b 8a 10 17 00 00 8b 92 0c 17 00 00 48 8b 01 48 [ 288.224602][ C2] RSP: 0000:ffffc9000047fc48 EFLAGS: 00000046 [ 288.224616][ C2] RAX: 0000000040000000 RBX: ffff88801cb24b00 RCX: 0000000000000002 [ 288.224626][ C2] RDX: ffff88801cb24b00 RSI: ffffffff81aaebb0 RDI: ffff88801cb24b00 [ 288.224636][ C2] RBP: ffff8880248b4b00 R08: 0000000000000007 R09: 0000000000000000 [ 288.224645][ C2] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 288.224654][ C2] R13: 0000000000000000 R14: ffff8880248b64de R15: ffff8880248b64dc [ 288.224664][ C2] FS: 0000000000000000(0000) GS:ffff888096b82000(0000) knlGS:0000000000000000 [ 288.224702][ C2] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 288.224714][ C2] CR2: 0000000080003000 CR3: 000000004c4e9000 CR4: 0000000000352ef0 [ 288.224725][ C2] Call Trace: [ 288.224732][ C2] [ 288.224738][ C2] __switch_to+0x800/0x10f0 [ 288.224759][ C2] __schedule+0x1259/0x6920 [ 288.224775][ C2] ? do_raw_spin_unlock+0x145/0x1e0 [ 288.224800][ C2] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 288.224816][ C2] ? lockdep_hardirqs_on+0x7d/0x110 [ 288.224834][ C2] ? __pfx___schedule+0x10/0x10 [ 288.224849][ C2] ? rcu_is_watching+0x13/0xc0 [ 288.224870][ C2] ? tick_nohz_idle_exit+0x1a1/0x3f0 [ 288.224889][ C2] schedule_idle+0x54/0x80 [ 288.224904][ C2] do_idle+0x365/0x5b0 [ 288.224923][ C2] ? __pfx_do_idle+0x10/0x10 [ 288.224941][ C2] ? finish_task_switch.isra.0+0x149/0x10d0 [ 288.224963][ C2] cpu_startup_entry+0x4f/0x60 [ 288.224982][ C2] start_secondary+0x21d/0x2d0 [ 288.225001][ C2] ? __pfx_start_secondary+0x10/0x10 [ 288.225024][ C2] common_startup_64+0x13e/0x158 [ 288.225043][ C2] [ 288.225052][ C0] NMI backtrace for cpu 0 [ 288.225069][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 288.225084][ C0] Tainted: [L]=SOFTLOCKUP [ 288.225088][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 288.225094][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 288.225112][ C0] Code: d8 a1 02 e9 43 4f 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d e3 6e 22 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 288.225123][ C0] RSP: 0000:ffffffff8ea07cf0 EFLAGS: 00000206 [ 288.225132][ C0] RAX: 00000000003f29d7 RBX: ffffffff8ea91500 RCX: ffffffff8bc93115 [ 288.225139][ C0] RDX: 0000000000000001 RSI: ffffffff8e3e71d6 RDI: ffffffff8c61bb80 [ 288.225146][ C0] RBP: fffffbfff1d522a0 R08: 0000000000000001 R09: ffffed10056467bd [ 288.225152][ C0] R10: ffff88802b233deb R11: 0000000000000001 R12: 0000000000000000 [ 288.225158][ C0] R13: 0000000000000000 R14: 1ffffffff1d40fa2 R15: dffffc0000000000 [ 288.225165][ C0] FS: 0000000000000000(0000) GS:ffff888096982000(0000) knlGS:0000000000000000 [ 288.225187][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 288.225196][ C0] CR2: 00000000f7238b50 CR3: 000000004c493000 CR4: 0000000000352ef0 [ 288.225202][ C0] Call Trace: [ 288.225207][ C0] [ 288.225211][ C0] default_idle+0x9/0x10 [ 288.225226][ C0] default_idle_call+0x6c/0xb0 [ 288.225239][ C0] do_idle+0x3ae/0x5b0 [ 288.225255][ C0] ? __pfx_do_idle+0x10/0x10 [ 288.225268][ C0] ? finish_task_switch.isra.0+0x149/0x10d0 [ 288.225284][ C0] cpu_startup_entry+0x4f/0x60 [ 288.225298][ C0] rest_init+0x2d3/0x2e0 [ 288.225313][ C0] ? __pfx_rest_init+0x10/0x10 [ 288.225329][ C0] ? __pfx_kernel_init+0x10/0x10 [ 288.225344][ C0] ? acpi_ut_status_exit+0x111/0x1c0 [ 288.225406][ C0] ? acpi_ut_status_exit+0x111/0x1c0 [ 288.225418][ C0] ? acpi_enable_subsystem+0x4d9/0x4f0 [ 288.225430][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 288.225475][ C0] start_kernel+0x48e/0x490 [ 288.225490][ C0] x86_64_start_reservations+0x24/0x30 [ 288.225503][ C0] x86_64_start_kernel+0x12b/0x130 [ 288.225516][ C0] common_startup_64+0x13e/0x158 [ 288.225529][ C0] [ 288.225536][ C3] NMI backtrace for cpu 3 [ 288.225553][ C3] CPU: 3 UID: 0 PID: 0 Comm: swapper/3 Tainted: G L syzkaller #0 PREEMPT(full) [ 288.225577][ C3] Tainted: [L]=SOFTLOCKUP [ 288.225583][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 288.225592][ C3] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 288.225613][ C3] Code: d8 a1 02 e9 43 4f 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d e3 6e 22 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 288.225627][ C3] RSP: 0000:ffffc9000048fe00 EFLAGS: 00000206 [ 288.225639][ C3] RAX: 00000000003b3699 RBX: ffff88801cb22580 RCX: ffffffff8bc93115 [ 288.225648][ C3] RDX: 0000000000000001 RSI: ffffffff8e3e71d6 RDI: ffffffff8c61bb80 [ 288.225660][ C3] RBP: ffffed10039644b0 R08: 0000000000000001 R09: ffffed10056a67bd [ 288.225670][ C3] R10: ffff88802b533deb R11: 0000000000000001 R12: 0000000000000000 [ 288.225680][ C3] R13: 0000000000000000 R14: 1ffff92000091fc4 R15: dffffc0000000000 [ 288.225689][ C3] FS: 0000000000000000(0000) GS:ffff888096c82000(0000) knlGS:0000000000000000 [ 288.225718][ C3] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 288.225729][ C3] CR2: 00000000f7379d68 CR3: 0000000078720000 CR4: 0000000000352ef0 [ 288.225738][ C3] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 288.225746][ C3] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 288.225754][ C3] Call Trace: [ 288.225762][ C3] [ 288.225767][ C3] default_idle+0x9/0x10 [ 288.225786][ C3] default_idle_call+0x6c/0xb0 [ 288.225803][ C3] do_idle+0x3ae/0x5b0 [ 288.225830][ C3] ? __pfx_do_idle+0x10/0x10 [ 288.225846][ C3] ? finish_task_switch.isra.0+0x149/0x10d0 [ 288.225870][ C3] cpu_startup_entry+0x4f/0x60 [ 288.225893][ C3] start_secondary+0x21d/0x2d0 [ 288.225911][ C3] ? __pfx_start_secondary+0x10/0x10 [ 288.225933][ C3] common_startup_64+0x13e/0x158 [ 288.225952][ C3] [ 288.227277][ T43] Kernel panic - not syncing: hung_task: blocked tasks [ 288.227293][ T43] CPU: 1 UID: 0 PID: 43 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 288.227310][ T43] Tainted: [L]=SOFTLOCKUP [ 288.227315][ T43] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 288.227322][ T43] Call Trace: [ 288.227326][ T43] [ 288.227331][ T43] dump_stack_lvl+0x100/0x190 [ 288.227350][ T43] vpanic+0x553/0x970 [ 288.227362][ T43] ? __pfx_vpanic+0x10/0x10 [ 288.227373][ T43] ? rcu_is_watching+0x13/0xc0 [ 288.227393][ T43] panic+0xd1/0xe0 [ 288.227403][ T43] ? __pfx_panic+0x10/0x10 [ 288.227416][ T43] ? nmi_trigger_cpumask_backtrace+0x263/0x2a0 [ 288.227435][ T43] ? nmi_trigger_cpumask_backtrace+0x26d/0x2a0 [ 288.227453][ T43] ? watchdog.cold+0x1ec/0x234 [ 288.227520][ T43] watchdog.cold+0x1fd/0x234 [ 288.227536][ T43] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 288.227550][ T43] ? __pfx_watchdog+0x10/0x10 [ 288.227564][ T43] ? __kthread_parkme+0x18f/0x230 [ 288.227581][ T43] ? kthread+0x13a/0x450 [ 288.227591][ T43] ? __pfx_watchdog+0x10/0x10 [ 288.227603][ T43] kthread+0x373/0x450 [ 288.227613][ T43] ? __pfx_kthread+0x10/0x10 [ 288.227627][ T43] ret_from_fork+0x730/0xd60 [ 288.227644][ T43] ? __pfx_ret_from_fork+0x10/0x10 [ 288.227660][ T43] ? __switch_to+0x800/0x10f0 [ 288.227673][ T43] ? __pfx_kthread+0x10/0x10 [ 288.227684][ T43] ret_from_fork_asm+0x1a/0x30 [ 288.227701][ T43] [ 288.506853][ T43] Kernel Offset: disabled [ 288.508118][ T43] Rebooting in 86400 seconds..