last executing test programs: 13m9.291459305s ago: executing program 32 (id=925): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102383, 0xfffffffffffffff6) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000040)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r1) r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) fcntl$setlease(r5, 0x400, 0x1) r6 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$full(0xffffff9c, 0x0, 0x214000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10a942, 0x9f667fd378a54ed4) write$P9_RREADLINK(r2, &(0x7f0000000040)={0x10, 0x17, 0x2, {0xffffffffffffffc1, './file0'}}, 0xfffffdab) socket(0x1e, 0x4, 0x0) syz_io_uring_setup(0x110, 0x0, &(0x7f0000000040), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x0, 0xc3) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x80, &(0x7f0000000200)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) sched_getattr(r3, &(0x7f0000000000)={0x38}, 0x38, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) getdents64(r4, &(0x7f0000001340)=""/4096, 0x1000) 13m0.833700784s ago: executing program 34 (id=944): socket$pppoe(0x18, 0x1, 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73f72cc9f0ba1f8483a0000005e1206021f1f00000e000a0010000000028000001294", 0x2e}], 0x1}, 0x4004850) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x9c, 0x30, 0x1, 0x0, 0x0, {}, [{0x88, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0x2000f}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x40, 0x1, 0x0, 0x0, {{0x8}, {0x18, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x14, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x7ff}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r3 = getpid() r4 = msgget$private(0x0, 0x6c2) msgsnd(r4, &(0x7f0000000340)={0x3}, 0x2000, 0x8cff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_clone3(&(0x7f000000c340)={0x8a902180, 0x0, 0x0, 0x0, {0x2b}, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x3}, 0x58) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001240)=[{0x10, 0x110, 0x1, "dc"}], 0x10, 0x3e00}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, 0x0, &(0x7f0000000400), 0x401, 0xffffffffffffffff, 0x0, 0xa002a0}, 0x38) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 12m45.269479303s ago: executing program 35 (id=955): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x3fff, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000002e00)='ns/cgroup\x00') syz_usbip_server_init(0x6) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4544f0fffcff30c000"], &(0x7f0000000280)='syzkaller\x00', 0x6, 0x1e, &(0x7f0000000300)=""/30, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000c00)={0x4, 0xb, 0x902c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x7}, 0x94) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r4, 0xc0945662, &(0x7f0000000040)={0xfffffff8, 0x0, '\x00', {0x0, @bt={0x6, 0x9f, 0x0, 0x2, 0x7, 0x8, 0x6, 0x11, 0x1, 0x5, 0x6, 0x983, 0x0, 0x20010, 0x1c, 0x21, {0x5, 0x3}, 0x8, 0x5}}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000400)={0x20, r7, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x609202, 0x0) ioctl$AUTOFS_IOC_FAIL(r9, 0x4c80, 0x7000000) socket$nl_sock_diag(0x10, 0x3, 0x4) 12m42.572356174s ago: executing program 36 (id=958): openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000000)=0xfc2, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) fchdir(r2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}, @printk={@u, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r3, 0x2000000, 0xe, 0x0, &(0x7f00000001c0)="5cdd3086ddffff6633c9bbac88a8", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x94, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000000)='.\x00', 0x91000a7a) r6 = inotify_init1(0x800) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r8, 0x5, &(0x7f00000005c0)='fd', 0x0, r7) write$tun(r7, &(0x7f0000000380)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x2) r10 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r10, r10) setpgid(0x0, r10) fchdir(r9) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) inotify_add_watch(r6, &(0x7f0000000180)='./control\x00', 0xa4000960) r11 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r11, 0x6, 0x0, 0x0, 0x0) fsmount(r11, 0x1, 0x0) 10m44.652449756s ago: executing program 37 (id=1256): syz_emit_ethernet(0x76, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaa"], 0x0) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) close(r0) file_setattr(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x19cc2, 0x7fff, 0x5, 0x1000d, 0x5}, 0x54, 0x1000) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000080), 0x101100, 0x0) ioctl$FBIOBLANK(r1, 0x4611, 0x3) 10m41.645978069s ago: executing program 38 (id=1280): openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x6, 0x7fff0000}]}) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x142, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000380)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x13ff, 0x0, &(0x7f00000001c0)="0f589e", 0x3, 0x0, 0x3f, 0x2, 0xfffffffc, 0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) (fail_nth: 1) 10m40.987879352s ago: executing program 39 (id=1281): openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x6, 0x7fff0000}]}) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x142, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x2, 0x1, 0x2, 0x3, 0x2, "d53a76bf7382f431"}) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000380)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x13ff, 0x0, &(0x7f00000001c0)="0f589e", 0x3, 0x0, 0x3f, 0x2, 0xfffffffc, 0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 10m11.174104791s ago: executing program 40 (id=1440): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c0000001805017b0000000000000000050000000800b8"], 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) keyctl$chown(0x4, 0x0, 0xee01, 0x0) ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000440)=0x9) keyctl$setperm(0x5, 0x0, 0x30925) keyctl$search(0xa, 0x0, &(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0xffffffffffffffff) syz_emit_ethernet(0x0, 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000100)={0x5, 0x20001000, 0xffffffffffffffff, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000000)={0x3, 0x20000000, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x10) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x20044041) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c}}, 0x884) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000050000f30500000a140000001100010000000000000000000300000a"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0xd84df6f06f1b1f1f) r7 = socket$inet_udp(0x2, 0x2, 0x0) openat$cdrom(0xffffff9c, &(0x7f0000000280), 0x0, 0x0) bind$inet(r7, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) connect$inet(r7, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r7, &(0x7f0000004d00), 0x0, 0xf00) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r8, 0x400452c8, &(0x7f0000000100)) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c9, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0x1, 0x8}, @window={0x3, 0x7a31, 0x7fff}, @sack_perm, @sack_perm, @mss={0x2, 0x4}, @window={0x3, 0x800, 0x6}, @window={0x3, 0x1, 0x10}, @sack_perm], 0x8) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb6954f5b37ec270b5d9810cbf733ebb4c626db0d30c443bee493b1156f902ac267879261f7974643fcc38736d806d84f6639ba08f22c82f40fc2c013472107d85f97e97050a77e72feedbc2ba14634add03936a2d7c2077c21192d84eff7c62bcc80ba581aafc2648eddde8cc8cde6ac4c19a633f014c47b985a3d66316731c1f61c223947d72ca9a278d5e69d54cbb7adb07641aced002b508458f6afcf567c64e45771316aac426a78678997b752546a9"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) 9m27.985001359s ago: executing program 6 (id=1843): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x40000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0) futex_waitv(&(0x7f00000001c0)=[{0x4, 0x0, 0x3}], 0x1, 0x0, 0x0, 0x1) read$FUSE(r4, &(0x7f0000000580)={0x2020}, 0x2020) read$eventfd(r4, &(0x7f00000027c0), 0x8) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", r3, 0xffffffffffffffff}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000040)={0x2000, 0x101, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r6, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) close(0x3) ioctl$SW_SYNC_IOC_INC(r1, 0x40045701, &(0x7f00000000c0)=0x402) ioctl$SYNC_IOC_FILE_INFO(r5, 0xc0383e04, &(0x7f00000003c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r4, &(0x7f0000002800)={0x2020}, 0x2020) 9m27.984748486s ago: executing program 6 (id=1844): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000300)) socket$packet(0x11, 0x3, 0x300) syz_io_uring_setup(0x8ce, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000280)) openat$dsp1(0xffffffffffffff9c, 0x0, 0x88a01, 0x0) writev(0xffffffffffffffff, &(0x7f0000000780)=[{0x0}, {0x0}], 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) signalfd(r4, &(0x7f0000000340)={[0xabed2e56, 0x3]}, 0x8) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x1000000}) r5 = io_uring_setup(0x694d, &(0x7f00000000c0)={0x0, 0x41f0b, 0x0, 0x2, 0x253}) io_uring_register$IORING_REGISTER_FILES(r5, 0x1e, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0xffffffff, 0x161902) socket(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c000000060a0b04000000000000000002000000500004802c0001800b000100736f636b657400001c000280080002400000000b0800014000000003080003000000008920000180080001006475700014000280080001400000000c08000240000000020900010073797a30000000000900020073797a320000000014000000110001"], 0xa4}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 9m27.925668884s ago: executing program 6 (id=1845): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0xfffffffc, 0xffdffff8, 0xb, 0xf, "000000000000000000000042d8663000"}) r1 = syz_open_pts(r0, 0x2000) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000340)=0x8) ioctl$TCXONC(r1, 0x540a, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x6, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000f8ffffff000000000000000085000000360000001800000003000000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r2, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x7}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x2a, &(0x7f0000000580)={@local, @random="50a245d5cde0", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x3, 0x1d, 0x66, 0x0, 0xb, 0x2, 0x0, @rand_addr=0x64010100, @local}, {0x11, 0x7, 0x0, @broadcast}}}}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a310000000014000380100000800c0001800600010046c80000140000001100010000000000000000000200000a"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x9) accept4$inet6(r6, 0x0, 0x0, 0x800) 9m26.633912551s ago: executing program 6 (id=1849): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000040)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000080)={0x1, 0x0, [{0x40000000, 0x8, 0x1, 0x0, 0xff, 0x5, 0x1}]}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r2) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r7 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) fcntl$setlease(r7, 0x400, 0x1) r8 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) 9m24.661776366s ago: executing program 6 (id=1857): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0xfffffffc, 0xffdffff8, 0xb, 0xf, "000000000000000000000042d8663000"}) r1 = syz_open_pts(r0, 0x2000) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000340)=0x8) ioctl$TCXONC(r1, 0x540a, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x6, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000f8ffffff000000000000000085000000360000001800000003000000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r2, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x7}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x2a, &(0x7f0000000580)={@local, @random="50a245d5cde0", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x3, 0x1d, 0x66, 0x0, 0xb, 0x2, 0x0, @rand_addr=0x64010100, @local}, {0x11, 0x7, 0x0, @broadcast}}}}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a310000000014000380100000800c0001800600010046c80000140000001100010000000000000000000200000a"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x9) accept4$inet6(r6, 0x0, 0x0, 0x800) 9m9.641690693s ago: executing program 41 (id=1857): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0xfffffffc, 0xffdffff8, 0xb, 0xf, "000000000000000000000042d8663000"}) r1 = syz_open_pts(r0, 0x2000) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000340)=0x8) ioctl$TCXONC(r1, 0x540a, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x6, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000f8ffffff000000000000000085000000360000001800000003000000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r2, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x7}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x2a, &(0x7f0000000580)={@local, @random="50a245d5cde0", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x3, 0x1d, 0x66, 0x0, 0xb, 0x2, 0x0, @rand_addr=0x64010100, @local}, {0x11, 0x7, 0x0, @broadcast}}}}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a310000000014000380100000800c0001800600010046c80000140000001100010000000000000000000200000a"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x9) accept4$inet6(r6, 0x0, 0x0, 0x800) 6m50.672790437s ago: executing program 1 (id=2732): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x884}, 0x40) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r2 = eventfd2(0x43, 0x1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x1, r2}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000005c0)={0x0, r2}) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x19, 0x0, @void}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r3}, 0x8) 6m50.672271053s ago: executing program 1 (id=2733): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/direction\x00', 0x1, 0x0) write(r0, &(0x7f00000003c0)="82e449fe870fbb36cb2e31", 0xb) 6m50.583493998s ago: executing program 1 (id=2734): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r0, 0x0, 0x0) 6m50.512220307s ago: executing program 1 (id=2736): ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000180)={0x7, 0x80000, 0xffffffffffffffff}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f00000001c0)={{&(0x7f0000fea000/0x14000)=nil, 0x14000}, 0x3}) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000012020000000000000000000001050000018000000000000000010000850200000000000000010000000000000400000000da"], 0x0, 0x52}, 0x20) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'pim6reg\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) r4 = dup(r3) write$binfmt_elf64(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="7f454c4606ff05a0020000000000000002003e"], 0xbe) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) close(r2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000200)={0x1c0000000000000, 0x9, 0x3}) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1e1c"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x600, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{}, {}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x200}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x0, 0x800000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {0x10000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x10000}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c000000020605000000000000000000000000070e0003006269746d61703a697000000005000400010000000900020073797a3000000000240007800c00028008000140000000020c000180080001400000fa03080008400000005c05000500020000000500010006"], 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x54}}, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) 6m50.393566118s ago: executing program 1 (id=2739): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) truncate(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat(r0, &(0x7f00000002c0)='./file1\x00', 0x42) mount$bind(&(0x7f0000000540)='./file1\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x5040, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 6m50.333264057s ago: executing program 1 (id=2741): r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x4001) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000000)) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000180)={0x53, 0xfffffffffffffffb, 0xffffffffffffff0f, 0x0, @buffer={0x0, 0x0, &(0x7f0000000240)=""/86}, &(0x7f00000000c0)="8516a69e20db268c99540c0c4d755ef653e8f4a6151d2e4d9f4c076575f96acf7c1518d5f60238b377d659f7bb700debccf243dbb01f49c4cb23c6c6bf4119e0df3d877e3263e5e3d9d4f4335d1eff843c53a999bed1ba0070eeda8f6717e0ea1d71aa6a3acedb5ed60c20a93f34bd93bfec5a81ec493fb3a69dff6dd7481d79822d14c335fbd34fd723beaea2", 0x0, 0xfffffffb, 0x10039, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x4001) (async) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000000)) (async) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000180)={0x53, 0xfffffffffffffffb, 0xffffffffffffff0f, 0x0, @buffer={0x0, 0x0, &(0x7f0000000240)=""/86}, &(0x7f00000000c0)="8516a69e20db268c99540c0c4d755ef653e8f4a6151d2e4d9f4c076575f96acf7c1518d5f60238b377d659f7bb700debccf243dbb01f49c4cb23c6c6bf4119e0df3d877e3263e5e3d9d4f4335d1eff843c53a999bed1ba0070eeda8f6717e0ea1d71aa6a3acedb5ed60c20a93f34bd93bfec5a81ec493fb3a69dff6dd7481d79822d14c335fbd34fd723beaea2", 0x0, 0xfffffffb, 0x10039, 0x0, 0x0}) (async) 6m35.363960581s ago: executing program 42 (id=2741): r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x4001) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000000)) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000180)={0x53, 0xfffffffffffffffb, 0xffffffffffffff0f, 0x0, @buffer={0x0, 0x0, &(0x7f0000000240)=""/86}, &(0x7f00000000c0)="8516a69e20db268c99540c0c4d755ef653e8f4a6151d2e4d9f4c076575f96acf7c1518d5f60238b377d659f7bb700debccf243dbb01f49c4cb23c6c6bf4119e0df3d877e3263e5e3d9d4f4335d1eff843c53a999bed1ba0070eeda8f6717e0ea1d71aa6a3acedb5ed60c20a93f34bd93bfec5a81ec493fb3a69dff6dd7481d79822d14c335fbd34fd723beaea2", 0x0, 0xfffffffb, 0x10039, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x4001) (async) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000000)) (async) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000180)={0x53, 0xfffffffffffffffb, 0xffffffffffffff0f, 0x0, @buffer={0x0, 0x0, &(0x7f0000000240)=""/86}, &(0x7f00000000c0)="8516a69e20db268c99540c0c4d755ef653e8f4a6151d2e4d9f4c076575f96acf7c1518d5f60238b377d659f7bb700debccf243dbb01f49c4cb23c6c6bf4119e0df3d877e3263e5e3d9d4f4335d1eff843c53a999bed1ba0070eeda8f6717e0ea1d71aa6a3acedb5ed60c20a93f34bd93bfec5a81ec493fb3a69dff6dd7481d79822d14c335fbd34fd723beaea2", 0x0, 0xfffffffb, 0x10039, 0x0, 0x0}) (async) 5m36.645968867s ago: executing program 4 (id=3127): socket$l2tp(0x2, 0x2, 0x73) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) read$FUSE(r2, &(0x7f0000002980)={0x2020}, 0x2020) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x40081, 0x0) socket$packet(0x11, 0x3, 0x300) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x121102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = add_key$keyring(&(0x7f0000002280), &(0x7f00000022c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000002300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0x6f) r6 = add_key$fscrypt_provisioning(&(0x7f0000002a40), &(0x7f0000002a80)={'syz', 0x2}, &(0x7f0000002ac0)=ANY=[@ANYBLOB="02000000000000006161616161616161616161616161616161616161616161616161616161616161314d6931313131313131313131313131313131313131313131313131"], 0x48, r4) keyctl$KEYCTL_MOVE(0x1e, r6, r4, 0xfffffffffffffffb, 0x1) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4038587a, &(0x7f00000002c0)={{0xffffffffffffffff, 0x0, 0x440400, &(0x7f00000000c0)={@align=0x80000000, {0x8, 0x8, 0x8, 0x8000000000000003}}, 0x2, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x9}, {[0xffffffff, 0x5, 0x6, 0x5]}, 0x800000, 0xd0, &(0x7f0000000180)=""/208}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x0, 0x0, &(0x7f0000000680)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) 5m36.405257634s ago: executing program 4 (id=3129): sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, 0x0, 0x8080) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0041, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TCSETS(r0, 0x40204706, &(0x7f00000000c0)={0x8, 0x1, 0x10000, 0x3f, 0x1a, "3eccd25569e209000400"}) 5m36.015807096s ago: executing program 4 (id=3131): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x48100, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xfe) r3 = openat$userio(0xffffff9c, &(0x7f0000000000), 0x200000, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000100)={0x1, 0x5}, 0x2) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40440, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x4000000) ioctl$int_in(r4, 0x5452, &(0x7f0000000180)=0x3) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x123202, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000001000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) r8 = eventfd(0xfffffff9) ioctl$VHOST_SET_VRING_KICK(r7, 0x4008af20, &(0x7f0000000400)={0x1, r8}) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r6}, 0xc) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000130000005d0000000000000095000000000000000a621cf434b9eaafdc0a00e9bfde908990817b364e51afe9c81a97f0570759f1cae63487ff68fffffffffffe8e3932e2b7185a25a4cf8a9456aa8a701c318c67edb6e9330b53c0eeba8644311ba75411890700000000000000d8e5b1dc91c5499bea0977"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r9, 0x0, 0xd00, 0x0, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8640888a8", 0x0, 0x1200, 0x5000000}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000200)=0x7e) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_GET(r10, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={0x0}}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB, @ANYRES32=r11, @ANYBLOB="0a00340002020202020200000800"], 0x38}}, 0x0) 5m35.856163256s ago: executing program 4 (id=3132): socket$alg(0x26, 0x5, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x1e) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') r0 = syz_open_dev$loop(&(0x7f0000000100), 0x18bdb, 0x325967a866143452) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x1200000000000000, 0x2, 0x0, 0x0, 0x0, 0x14, 0xd, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0x7fff]}}) 5m35.766339536s ago: executing program 4 (id=3133): openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0xfeda, 0x0, 0x0, 0x53}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000000)='./file0\x00', 0x2e, 0x400, 0x23456}) io_uring_enter(r0, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) syz_emit_vhci(&(0x7f0000004040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x5}, @hci_rp_read_def_err_data_reporting={{0x58}, {0x7f, 0x73}}}}, 0x8) 5m34.867345517s ago: executing program 4 (id=3140): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newqdisc={0x178, 0x24, 0x4, 0x200000, 0x4, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x148, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_PARMS={0x38, 0x1, {0x100, 0x5, 0xd, 0x9, 0x81, 0x101, 0xe, 0xc40, 0x7fffffff, 0xfffffffd, 0xa, 0xb, 0x1f, 0x6, 0xca11, 0xffff}}, @TCA_GRED_LIMIT={0x8, 0x5, 0xe6}]}}]}, 0x178}, 0x1, 0x0, 0x0, 0x845}, 0x24008004) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000772904202404019957c201020301090210000904430002"], 0x0) syz_usb_ep_read(r5, 0x5, 0xb4, &(0x7f0000000200)=""/180) syz_usb_control_io(r5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000800000000000000000000000850000000e000000850000000700000095"], &(0x7f0000000680)='GPL\x00'}, 0x94) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a32000000000300078008001240000000000500050002000000050001000600000016000300686173683a6e65742c706f72742c6e6503000000"], 0x5c}}, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x24, &(0x7f0000001240)=ANY=[@ANYBLOB="0d02000000dae50060625b9e90319fd475be08f457c7a7e41c20fee892fdbb71439d0d37a5349720d4af81170688e3993a49e3e560511ed506b2090bef672e1692d91aad863223c80ff14468f61ffad7a62eb95bcf00f375380e79e9a587ea349d41903a053eb53f9c3bf194604d2b2148d221ccd240affd90fd4b270507df392c607cb3dbc1a077f326cd797deb4a6c716f49a5be10c2cd28621f29bc9a1f33d5a4adcf5b5c9af95b781de21cdc2962c05fa2e12a45bc000000000000000000d76267fdc33e7241da974dbfef6dde0185ed4742ae205f9c3ad69a408275adfaa46698f4a7b24a06ab244777e3aa3da6d9a7cdf6419bcafa3603acaf935b1cf65c0466497cb4031c39ee8b1705286f94c783915236c4632a41f4d83c526a18c4e7cff4f0ff609bbf74bb7a057f27b16b59ad7b8868c078b58a9cfea67d0f36e1961dbd0b9f1fe04687e7b5b1ae32193e17f245d9179f5ac3183ab4ec49072363f24641b74942a18f7aac8a62b78b90331a90e34590a2fd49482213d5441464fab755d22b7ff3400af334e58d432c1d451c78b18ddc9eb185c844b81636ab0babca63178f7f140939bd6df8f9b1111f48448bf3346df379d282f040c650fc28241e4f6a5400ae60690afccc3b81cb4fc3af8888814dfb9d3e69792f92e4f298ca1b4f7b9c5e0d96223f981f02bb7293acb111720d1baf77d90d1f5e83527177eb491d34e9108d44985f18418fbb128098255a39199b8733d145e803c5a6d9058bb7603b242e7b290bbb92d37b7593a2e203dce13d117878647f5934e5f770cc853a5dba4a8f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) personality(0xfe47fef9f5ff7379) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r4) r10 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r8, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x3c, r9, 0x917, 0x70bd28, 0x0, {0x1, 0x0, 0xffff}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r10}]}, 0x3c}, 0x1, 0x620b}, 0x40) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="000425bd7000fbdbdf1acda1d100"/26], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20004000) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000406010800000000000000000a0000050500010700000000c68c561089ca4236"], 0x1c}, 0x1, 0x0, 0x0, 0x4002}, 0x24000000) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_FLUSH(r11, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1b0bedcfedaa5e5f0f32b07fdb2d0f69fd422a29dd09fbe23bcb00d678633835742bdb8ce4fb4681f8ee21778703f98106c028bb7884de7797249e6b19185dbf68e0d5d9a13ca3e911d9c1394d93caba83465a5f7444ed6c03d1602fb5c02572e80d1c268c9b11c87a93550f3846082ee66d0f1edbb0dbfc772de8e59b8b9aa1a4bee7f50beb9534b8720cbf1790a59123cdd66b861aa4a5a289483327f2b65b8aff792089ddd585ec2a700782e594e56a10415e76eec99bf1b88d2f234db95be6aa", @ANYRES16, @ANYBLOB="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"], 0x168}, 0x1, 0x0, 0x0, 0x4080}, 0x8000) r12 = syz_open_dev$evdev(&(0x7f0000000000), 0x641, 0x101001) write$evdev(r12, &(0x7f0000000300)=[{{0x77359400}, 0x2, 0x10, 0xb}, {{}, 0x0, 0x97, 0x10}, {{0x0, 0xea60}, 0x14, 0xa, 0x2eca}], 0xfed1) 5m34.799589107s ago: executing program 43 (id=3140): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newqdisc={0x178, 0x24, 0x4, 0x200000, 0x4, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x148, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_PARMS={0x38, 0x1, {0x100, 0x5, 0xd, 0x9, 0x81, 0x101, 0xe, 0xc40, 0x7fffffff, 0xfffffffd, 0xa, 0xb, 0x1f, 0x6, 0xca11, 0xffff}}, @TCA_GRED_LIMIT={0x8, 0x5, 0xe6}]}}]}, 0x178}, 0x1, 0x0, 0x0, 0x845}, 0x24008004) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000772904202404019957c201020301090210000904430002"], 0x0) syz_usb_ep_read(r5, 0x5, 0xb4, &(0x7f0000000200)=""/180) syz_usb_control_io(r5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000800000000000000000000000850000000e000000850000000700000095"], &(0x7f0000000680)='GPL\x00'}, 0x94) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a32000000000300078008001240000000000500050002000000050001000600000016000300686173683a6e65742c706f72742c6e6503000000"], 0x5c}}, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x24, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) personality(0xfe47fef9f5ff7379) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r4) r10 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r8, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x3c, r9, 0x917, 0x70bd28, 0x0, {0x1, 0x0, 0xffff}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r10}]}, 0x3c}, 0x1, 0x620b}, 0x40) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="000425bd7000fbdbdf1acda1d100"/26], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20004000) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000406010800000000000000000a0000050500010700000000c68c561089ca4236"], 0x1c}, 0x1, 0x0, 0x0, 0x4002}, 0x24000000) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_FLUSH(r11, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1b0bedcfedaa5e5f0f32b07fdb2d0f69fd422a29dd09fbe23bcb00d678633835742bdb8ce4fb4681f8ee21778703f98106c028bb7884de7797249e6b19185dbf68e0d5d9a13ca3e911d9c1394d93caba83465a5f7444ed6c03d1602fb5c02572e80d1c268c9b11c87a93550f3846082ee66d0f1edbb0dbfc772de8e59b8b9aa1a4bee7f50beb9534b8720cbf1790a59123cdd66b861aa4a5a289483327f2b65b8aff792089ddd585ec2a700782e594e56a10415e76eec99bf1b88d2f234db95be6aa", @ANYRES16, @ANYBLOB="000227bd700000dcdf251800000094000280080002000800000024000380080002000c0000000800010006000000080002000600000008000100ff0300001c000380080001006a000000080001000600000008000200080000000400040008000100faffffff3c0003800800010008000000080001000700000008000200470000000800020086100000080001000800000008000200080000000800020000040000200002800800010001050000080002002802000004000400080002000200000024000980080002000700000008000100010000000800010006000000080001000e0000007c0004801400078008000300fdffffff080002000600000014000780080001001100000008000200030000000900010073797a31000000001c000780080001001e00000008000400a2f3000008000400000000001c0007800800030000000000080003000600000008000300070000000900010073797a3100000000"], 0x168}, 0x1, 0x0, 0x0, 0x4080}, 0x8000) r12 = syz_open_dev$evdev(&(0x7f0000000000), 0x641, 0x101001) write$evdev(r12, &(0x7f0000000300)=[{{0x77359400}, 0x2, 0x10, 0xb}, {{}, 0x0, 0x97, 0x10}, {{0x0, 0xea60}, 0x14, 0xa, 0x2eca}], 0xfed1) 4m33.336874097s ago: executing program 2 (id=3422): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/pid\x00') ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400004, 0xc, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0xb7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x5) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0xb7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x1) 4m32.879865343s ago: executing program 2 (id=3423): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8000008, 0x80, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x20, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x6, 0x7, 0x5, 0x8, 0x4c74, 0xffff7fff, 0x7, 0x3, 0xe, 0x3, 0x80008071, 0x7, 0x17, 0xffffffff, 0x7, 0x5, 0x80003e, 0x18e, 0x6, 0x6, 0x0, 0x8, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2009, 0xfffffffc, 0x573a, 0x0, 0x0, 0x5, 0x2f, 0x8, 0x312, 0x66abcbd2, 0xea4, 0x5, 0x4, 0x1007, 0x7, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x6c, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4000004, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x200009, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x6, 0x40a, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0x7, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x1000515, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6cff, 0x6, 0x38, 0x200, 0x1fd, 0x80, 0x7, 0x4, 0x2950bfaf, 0x3000, 0xa2, 0x8, 0xcc, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ef, 0x2006, 0x80a2cd, 0x4, 0x25], [0xc, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x6, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffc, 0xa620, 0x1, 0x5, 0x801, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0x10000, 0xf, 0x7e, 0x9, 0x9622, 0x6, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0xe1c4, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x4, 0x11) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mount$cgroup(0x0, 0x0, 0x0, 0x2008000, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = memfd_create(&(0x7f0000000080)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x84\x14n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) splice(r3, 0x0, r2, 0x0, 0x4, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000240)={'raw\x00', 0x0, [0x8, 0x3, 0xfd, 0xe, 0x5]}, &(0x7f0000000000)=0x54) openat$mice(0xffffffffffffff9c, &(0x7f0000000880), 0x41) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0x5) readv(r4, &(0x7f0000000700)=[{&(0x7f0000000400)=""/38, 0x26}], 0x1) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r5, &(0x7f0000000040)="e2", 0x918) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 4m31.484086187s ago: executing program 2 (id=3431): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400004, 0xc, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0xb7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x5) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0xb7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x1) 4m30.835585154s ago: executing program 2 (id=3436): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x201c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008044) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4m30.730414825s ago: executing program 2 (id=3437): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610430000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = memfd_secret(0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) r2 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}}) signalfd(r2, &(0x7f0000000180)={[0x9e]}, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, {0x2}}, './file1\x00'}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x80800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}], 0x1}, 0x0) utimensat(r3, &(0x7f0000000140)='./file1\x00', &(0x7f0000000200), 0x0) syz_open_dev$swradio(&(0x7f0000002440), 0x1, 0x2) r8 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000380)=@base={0x1f, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r8}}) 4m29.860976294s ago: executing program 2 (id=3439): fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_io_uring_setup(0x6641, &(0x7f0000003cc0)={0x0, 0xc866, 0x400, 0x0, 0x286}, &(0x7f0000003d40), &(0x7f0000003d80), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_CLOCK(r0, 0x1d, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setuid(0xee01) setgid(0x0) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x2, 0x0, 0x4141}, 0x30, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x17) 4m14.775223033s ago: executing program 44 (id=3439): fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_io_uring_setup(0x6641, &(0x7f0000003cc0)={0x0, 0xc866, 0x400, 0x0, 0x286}, &(0x7f0000003d40), &(0x7f0000003d80), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_CLOCK(r0, 0x1d, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setuid(0xee01) setgid(0x0) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x2, 0x0, 0x4141}, 0x30, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x17) 2m18.208282512s ago: executing program 5 (id=4243): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x1, 0xd0102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000020000000100000c"], 0x0, 0x3c, 0x0, 0x0, 0x3}, 0x28) socket$inet(0x2, 0x2, 0x0) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) unshare(0x22020400) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) dup3(r2, r1, 0x80000) pselect6(0x40, &(0x7f0000001380)={0x6, 0xfffffffffffffffa, 0x9, 0x5d7, 0xa, 0x8, 0xc444}, &(0x7f00000013c0)={0xf, 0x9, 0x400, 0x9, 0x6, 0xb, 0x4ea2, 0x400}, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000002640)='memory.stat\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000002680)={0x2020}, 0x2020) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) read$FUSE(r3, &(0x7f00000005c0)={0x2020}, 0x2020) io_setup(0x7, &(0x7f0000000540)) socket(0x29, 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') r6 = syz_open_dev$vim2m(&(0x7f0000000440), 0x80, 0x2) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f00000046c0)={0xd, 0x3, "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"}) ioctl$vim2m_VIDIOC_EXPBUF(r6, 0xc0405668, &(0x7f00000004c0)={0x0, 0x3, 0x2}) 2m17.746722385s ago: executing program 5 (id=4247): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x40002, 0x80) getdents64(r1, &(0x7f0000000440)=""/33, 0x21) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r2 = gettid() r3 = gettid() tkill(r3, 0xb) ptrace$ARCH_GET_UNTAG_MASK(0x1e, r3, &(0x7f0000000480), 0x4001) syz_emit_ethernet(0x22, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c2000001aaaaaaaaaabb0800450f4a1e66bd8e722887c341917c9078ac1e0001e0000001"], 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000540)='::&/\x00\xa2\xeb\xca\xb6\xb2\xb4\x7f\xcf^\x85\xff\x8e\x7f\x8c\x9a\xaf\xf7\x1a\xb5\"D\x93\x8b\x15\x8c\x9f\xd0\x8e!\x17\xf8\x87*]\xd6S\xd4\xa6\x9d\xea\xe79\x8e\xbd\xed\xdc~\x13{d\xfb\xadh\x91;\x1c0\xff\xfeK\xa9B\x05\xc4o4\x84\xfdcg\x9d\x91\xb1\xdd\n\x84\x80\xb6\x91\x1b4P\xbd\xca%\x15\x94\x82~\x83\x7f\xbaa\xc7\xb0\xed\xda\xd5\xec7\xa3\x93\xf6\x90|\xb8D\"\x9a\x8b\xa9\xdb\xb0!\x10\xb4\x18\xab\xab\xcb4\xa4w\xaa\xb0Q\xa5\x9e\xa9|\vPi2.\x91\xd6\xff8\x7f,K\xebK\xfaW\xff\f\b\xaa\x06\xcd\x98\xa4kU*\x82\x97\x97i\xc7\xc9\xfbO\a\x98\x1d\x1e', 0x0, 0xffffffffffffffff) r4 = eventfd2(0x0, 0x0) writev(r4, &(0x7f0000000480)=[{&(0x7f0000000000)="f67804e83b4e100b", 0x8}, {0x0, 0x8}], 0x2) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000018c0)='\xf5\xfc\xd2S?\x10s{\x84\x11\n\xaen|\xec]\x95zx8*\xa2d\x11\xb5\xb1\x01\x00\x00\x00\xe49{\x8a{\x81s\xea$\xdfg\xb1\x03DY!\x97\xadM\xd7\xff\x8a\xcd[>\x12e\xc3]d8\xba\x8ec\x00\x00\x00\x00\x00\x00\x00\xa0\xe2\xd5y\xec\x90\x00\x98Y\x91\x19\x16\x89\xd0\x1a\xad\xcd\xd6\xd0\xc6\xb9\xeb\x95\xd3\x9cl\x9cu#\xb4\xee\xe5\x9d\t\fV\xd4\xda\xfc`2?\x15P\xba\x14b\x1c\xcc\xd5\xb9jA$s\xb9g3\x15M\xd9\xb9 \xca[\xc7\xec\xa9;\xee\x01\xc9\xc4\x1f\xc3\xe4\xfa\xd3fU\x0e\x86\xc8\xa7\xaf\xaf\x04p\xa3\x8bb\xbf\\\xdb\x83\x00\x96sy\x14\x1eo\xcc9&\x946\xf9\xf5v\xee\xb5m$;\x01\xb8\xeau\x00\xd1S=\x920H\xc2z\xb5\xbe\x95\xef\xeb\xd1\xc8\xa1\xba\xach\xbef\xa8\x86\xc2\x18\x9cC\x15\x9c^\xcf\xe9\xbcp\xb4Ff\x00\x9d>p\"\x19\xd8}|~\xae\xdb\a59f\xb8?\xba\xf2\x8e\xa5y\x11\xfb\xde\x93\xbe\x7f\xb7\x12\x983\xf3\x19\xc7\xc0/\xe9\x1a\x80=\xa72)\xd2\x00\x00\x00', &(0x7f00000004c0)='\xa4\x93\xaatH\x98\xb7\x8c\xd5\xff\a\x03X\x11\xcbN\xc6L\xff\xdf{c\xdd\xeek\x05\\_\xed<]\xcd\xfbX\xbfK\xf4g\f\xce\xe8\xc0\xb5S\x13\x9f\x9b\x18\xb3U\xb4>\"\xf9 \xf0\x80j\xf4\xac\x01\x1a\xf3{\xe3I\x0f\x98\xd1\fF\xe53\xa2\xb9\xc0\xbe\xfa\xe9+\xdc\x05\xf4\xcc\xce~\x16\xfb\xd7\xabn\x8d\xeb\xc8\xfb\x1e\x00\xf0F\xc5\x87\x02\x19\x13yfz`ph', 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4038587a, &(0x7f0000000380)={{r0, &(0x7f00000000c0)='\xf5\xfc\xd2S?\x10s{\x84\x11\n\xaen|\xec]\x95zx8*\xa2d\x11\xb5\xb1\x01\x00\x00\x00\xe49{\x8a{\x81s\xea$\xdfg\xb1\x03DY!\x97\xadM\xd7\xff\x8a\xcd[>\x12e\xc3]d8\xba\x8ec\x00\x00\x00\x00\x00\x00\x00\xa0\xe2\xd5y\xec\x90\x00\x98Y\x91\x19\x16\x89\xd0\x1a\xad\xcd\xd6\xd0\xc6\xb9\xeb\x95\xd3\x9cl\x9cu#\xb4\xee\xe5\x9d\t\fV\xd4\xda\xfc`2?\x15P\xba\x14b\x1c\xcc\xd5\xb9jA$s\xb9g3\x15M\xd9\xb9 \xca[\xc7\xec\xa9;\xee\x01\xc9\xc4\x1f\xc3\xe4\xfa\xd3fU\x0e\x86\xc8\xa7\xaf\xaf\x04p\xa3\x8bb\xbf\\\xdb\x83\x00\x96sy\x14\x1eo\xcc9&\x946\xf9\xf5v\xee\xb5m$;\x01\xb8\xeau\x00\xd1S=\x920H\xc2z\xb5\xbe\x95\xef\xeb\xd1\xc8\xa1\xba\xach\xbef\xa8\x86\xc2\x18\x9cC\x15\x9c^\xcf\xe9\xbcp\xb4Ff\x00\x9d>p\"\x19\xd8}|~\xae\xdb\a59f\xb8?\xba\xf2\x8e\xa5y\x11\xfb\xde\x93\xbe\x7f\xb7\x12\x983\xf3\x19\xc7\xc0/\xe9\x1a\x80=\xa72)\xd2\x00', 0x40, &(0x7f0000000200)={@align=0x2, {0xfeff, 0x5ca6, 0xfffffbff, 0x8000}}, 0xf9a, &(0x7f0000000240), &(0x7f00000002c0)=0x7fffffff}, {[0x8, 0x50bb, 0xfffffffd, 0x7ff]}, 0x1, 0x67, &(0x7f0000000300)=""/103}) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f00000003c0)={"88d49da7", 0x7f53, 0x1, 0x99, 0x7, 0x7, "74b980d43fefa2d29bdf87a49d988b", 'KV\x00a', "a124f95b", ',2:r', ["aa44eb43f967a289e8c57c4d", "bc9140a9db4b260da0a1f282", "6d348fd760bad8d9e79aba84", "e1c376e7bba8d7495b01a39c"]}) tkill(r2, 0xb) 2m17.485264076s ago: executing program 5 (id=4251): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newsa={0x15c, 0x10, 0x413, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x2b, 0x0, 0xee00}, {@in6=@remote, 0x0, 0x32}, @in=@multicast1, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x9}, {0x0, 0x4, 0xcc}, {0xf6, 0x8}, 0x70bd27, 0x0, 0xa, 0x1, 0x1}, [@algo_aead={0x70, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x120, 0x80, "e58d92554972a213a3c4316bd05255f9dd0029b918510b2a3703ad16f27f1fd650c9fbae"}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES16=r0, @ANYRES32, @ANYRESDEC=0x0], 0x48) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) r3 = accept4$alg(r2, 0x0, 0x0, 0x80000) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)={0x30000000}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0x8, 0xf}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xd0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r7, r6}, 0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0) bind$inet(r8, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000002240)={0x10, 0xffffffffffffffda}, 0x10) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000d080)="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", 0x2000, 0x0) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r8, &(0x7f0000000000), 0xffffffffffffff94, 0x201, 0x0, 0x0) recvfrom$inet(r8, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r9 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r10, r11, r12, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x70, 0x6000, @fd, 0x8, 0x0, 0x0, 0x1}) io_uring_enter(r9, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000d5ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m16.477648559s ago: executing program 5 (id=4263): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r0, 0x89e7, &(0x7f0000000180)={0x200009}) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x5202, 0x0) fchmodat(0xffffffffffffffff, &(0x7f00000005c0)='./file0\x00', 0x140) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_connect$uac2(0x2, 0x105, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000a80)={0xa, &(0x7f00000007c0)={0xa, 0x6, 0x200, 0x40, 0x2, 0x7f, 0x40, 0xb7}, 0x27, &(0x7f0000000580)={0x5, 0xf, 0x27, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x5d, "feef66d29a3f5d74f1852bc25f87928e"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x80, 0xb4, 0x7, 0x1, 0x5}]}, 0x6, [{0x78, &(0x7f0000000840)=ANY=[@ANYBLOB="7803d9c90514c96c6e9d8489840f875b4495a96b05b8f9cc278450d276984b1b88c5c69f47094b79cc41ea5c9b47b2b6c4e2f3cb395016fd2bd8e7f64e5375ee474dd9174c71254e1255ca5b56e2ab2478ffe38f1cffa4d4943524b567506ece66307d5802a605ebc05c277b2ab4a6e63a2ac4a62c77b06b"]}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x41a}}, {0x35, &(0x7f0000000600)=ANY=[@ANYBLOB="3503caf51c4e3938fa9b46c3bb01ac9e5064323cfeb95a4cb944eaa0010d85490bf2cfcb144faccf5146369727aedbb6291af19d23000000000000000000"]}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0xc07}}, {0x9f, &(0x7f0000000c80)=ANY=[@ANYBLOB="9f03391c87ce2abbbcae894870a49340339a4fa6d765d3aa9c4277e616822d085905db4f0b04b44ad35dae16b37e1ddaf88eb34946dabdba4885ecc9268eb4997725eb8d8613f45d24ab3c6f51b07a4b44d1ae6bdd91b796cfd23027761de75580ad53cd0316df6bb883ccefa8e298b8520cf6ccc8869a00c0fb8677d564308bb99d2e9916eb62603b33c761c0c910ad884ae75e183a3065efaf020a0690143adb36110920c540afa5"]}]}) syz_usb_control_io(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x1, 0xfffffffffffffffe, 0x0, 0xffff}, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0xe, 0x0, 0x7, 0x5, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab000e271f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1ff032aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f757036303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e0800000092e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9be7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa5200002fe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb0972d39e4b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e501ddddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b605908000000f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c332c34812382e57c0e0d83f3f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217b6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2a434b9048ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b4783d66661a92f174f2b88cd544b2a8e1b05ea7cf51578169fff7765f9978883b4b5983b42a35a05dabfc325ec2a2ec2f9b0882fdcf5d6f72272d2ff0d8eea60f5494ba42b4d40f144f0ab680a6f40f9094d3afb58a1efd6109894b8605c6b3b3f020c222f6446195b2274f634fbb737948a1f36ea729467e132385e9da614e4625175f4443b97a675934db90010e4b884200c3546c4d86d712c3939e11be3343f693846f509ad4c445ade5cd6d126d5694462ac5d3b527c3bd51c0a715a28d65fe94b255d02cdc1fab99b5b9c352f1b284115e4046285a824d22b6f0afbed8d6096a72fef72ebd6aae78b02fa1993e8fe2020ae93aae2bcfffa40b98549f1fb9fcefa74329909a207336d07f6f59da423ac5fa47852055d5ce6d2c56bdbbcdbf3458ba478c669f39d5272e65c90908ea2cb86d38f8ebf80a8cb85d8399b42403c94b8662af5cf1411526f177b4d476169a5d5a8c37d0d8893a77d0bd47b8a0bba60b3e26094209c889585f997ff556bcd2cc223f9c0c44de9d0fe1b5a8a815f652e79747d3e1f413fa0575d51f652d22883e143065c5ad74bdc864754ba3dad5a8fc8fc2c807d1a51dfb29884adee415c13f2ce14d307bd6165ec6ba68a766adfcbe444ea72d586bb47dd98a225467aab538a77667d19bae2e51727ba6d190e6d7"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, @fallback=0x16}, 0x94) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x300000f, 0x12, r3, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@ifindex, 0x1f, 0x1, 0x1, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0], 0x0}, 0x40) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48883, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000800)={'wlan1\x00', 0x1000}) r7 = socket$kcm(0x2, 0xf, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f00000004c0)=ANY=[@ANYBLOB="700000bb08004500452c00000000002f9078ac1e0001e0000001000065a812bab2bffc037e000000675202bc9ad7d168f600b4000086ddffff00000000562e233f9a85ac6e2b5e74e5ae3acc3502b8acf4643d48fa1a6b78f55f48635d8cc71477f5e820756349943917bfaab88ea8000d01eb40d5ad87c94688b91e334260afafbbbc96a87dc3de7614b82bd18dc9dc9e2b289571394f3f89f1538736b35e9b65084e212ea3f2b013281d53e20778617c3794c83364f3ac8a295224"], 0xfdef) r8 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x26, 0x0, @void}, 0x10) ioctl$FS_IOC_FIEMAP(r8, 0xc020660b, &(0x7f0000000b00)=ANY=[@ANYRESOCT=r3]) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32=r2, @ANYRES32, @ANYBLOB='#\x00\x00\x00\b \x00\x00', @ANYRES32=r4, @ANYRES32=r8, @ANYBLOB="baca55aff1e14fec69bff0464472c1629ffcf420fa1f81a5579d5eaae1fc54bd6f016e1fe1637e8139195d0b0dfe0e0de5cb7cc0d57f0b7b7e7711eaaf3a41406fea4fa283bf54623dacc6a75338e9553392e1a221dda862c1dc4053f17852685f274cf12cde9f4da78d8118ca58c199d621d58013342d23b2ff2a0d77aed2e2403dcb0a7f1baf9c966ae7cb0d413ce4ff02fa7a5d0c00", @ANYRES64=r5], 0x20) rename(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000480)='./file0/file0\x00') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x2b0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ffff200000000067000aac14140ce000000d49e832f0", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m15.000621575s ago: executing program 5 (id=4268): socket$inet_tcp(0x2, 0x1, 0x0) ioperm(0x200, 0xf7a, 0x7) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) syz_clone(0x21000200, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x3) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x13) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x1d, 0x0, &(0x7f00000000c0)=""/21, 0x20, 0x0, 0xfffffe47, 0x0, 0x0, 0x0, 0xe4e2288bca9cf3ba, 0x0, 0xfffffffe}, 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, r5}, 0x14) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000040)=0x93bd, 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="0201140084dc18000e1a80009f0001852900002f0600ac141430e0000001808a8972bd0b72e41082b1a3d206", @ANYBLOB="195460834abffe799524c9cc1076da67db0581f96e6e913fb778bdbb73bc0800000000000000e3d933f03de46a538a0a18df3b9fb72cde8988f783e70a"], 0xdd12}], 0x1, 0x0, 0x0, 0x30008803}, 0x44040) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r6, 0x68, &(0x7f0000000200)}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001540)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc, 0x0, 0x9}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r8, 0xc008ae88, &(0x7f0000000200)={0x63, 0x0, [{0x40000083, 0x0, 0x9}]}) write$binfmt_script(r2, &(0x7f000000e0c0), 0x10010) 2m14.705853802s ago: executing program 5 (id=4272): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c00000002060500000000000000000000000a0005000400000000000900020073797a32000000000500010007000000050005000a00000010000300686173683a69702c6d616300140007800500150001000000080012"], 0x5c}}, 0x0) 2m14.527116336s ago: executing program 45 (id=4272): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c00000002060500000000000000000000000a0005000400000000000900020073797a32000000000500010007000000050005000a00000010000300686173683a69702c6d616300140007800500150001000000080012"], 0x5c}}, 0x0) 1m16.030884195s ago: executing program 7 (id=4593): r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff}) io_setup(0x7f, &(0x7f0000000940)=0x0) io_submit(r2, 0xfdef, &(0x7f00000002c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000080)="c3", 0x1}]) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) io_destroy(r2) close_range(r3, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0x47d, &(0x7f0000000600)={{0x12, 0x1, 0x310, 0x9e, 0xf4, 0xa3, 0x10, 0xaf0, 0x8304, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46b, 0x1, 0x7f, 0x5, 0x20, 0x6, "", [{{0x9, 0x4, 0x6c, 0x4, 0x6, 0xb6, 0x49, 0x2e, 0x1, [@uac_control={{0xa, 0x24, 0x1, 0x7f, 0x35}, [@extension_unit={0x7, 0x24, 0x8, 0x4, 0x0, 0xff}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x402, 0x6, 0x8, 0x50c, 0xc2, 0x6}, @extension_unit={0x9, 0x24, 0x8, 0x6, 0x3, 0xfc, "12e1"}, @processing_unit={0x7, 0x24, 0x7, 0x4, 0x1, 0x9b}, @selector_unit={0x8, 0x24, 0x5, 0x6, 0xff, "9e77bb"}]}], [{{0x9, 0x5, 0xc, 0x2, 0x200, 0x9, 0x7, 0x8, [@generic={0xf5, 0xd, "5ab132062f8c2ec1d652200ccc15b636cdd74757658e572f718c23cc90f56dc4bc7f806c98882cbf62cc66947b55eb249c1edd118867d113fe52d879e62022700cb4042fdb12bd20fde45cde71ef15ff9878067c93d99bc5d6a4d331c6142906b2ceb860fb229fb72f578d474e303d202a68aec334180881a19bd0b11eff484c7b4beb308f1f320ed7a4ea2c283b7ad57dc632175c8a45a715cb56f3f3bf50d7a5c2c8d85f3e322030b580a5b9ed063631ebbb9c4fae0ec7d0b7de37a7ec8b3e007a618c2b2f72f66c7d7b552219419c0c078b4d6f8c0c0fd943efeef2db5af23d0778345c5823ca1385d5a74e1f46b6efc132"}]}}, {{0x9, 0x5, 0xc, 0x1, 0x40, 0x7, 0x43, 0x3, [@generic={0xed, 0x11, "f8f3d15f959756b3f8e18f9f55d829e56dd487d775ddf820d3041d58a37e2d7e3a619197fa2fcb2722892c810485f7724c5b40584ff91ecbdbc4eaee6d2de807a33043808556f32b6e1cdee9c12c962eef0d3dacd4dd3a4c1e75d5a09d8e330a2b0614c9fae4b19f4b9d4221f89d6ebf23c4f72a3ee788e166d384e4d51c4c12bcccdfcb9caeca4209e669bd0f7a0e31729d8f1d7b7f0918e1391751848b693c60b6396230cb6f81cd73f6863ad8a32032a14ea890ebe948edc8f23a10ea4d7f095b2318f8bf6d5e9ff8542b654a935870d11d1918f23a6b54ce01e35c5f1dcf9997b967d4fd4f840a61dc"}]}}, {{0x9, 0x5, 0x1, 0x8, 0x8, 0x0, 0xe, 0xad, [@generic={0xd2, 0x22, "770b9e65b41feb9a325f94460f4bac15758b72fe931e3b4641965bf5f5498dccced07e643e420bb4c5d04d04a173f51b6ecab371024f8d787c0eca197b9befbf59c33c0f953c8cc002b6744478195b08ba13dacea141a2f7cb9ee16e28ca4e96d6929a8f1ee6094ebd29afca89cab06d11fb3dde4b605895966b025ff6923c4af618aa50bbb1ae62ba0f62fc97aa40e4d545ce5632a585bbe79999137323439994edfd88926eeb9aea7c362b9f435a45bb03526ca8d9386493d8f8825942f92423f4874b537394ea24d210b0b5abf2a9"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x38, 0xcc}]}}, {{0x9, 0x5, 0xd, 0x3, 0x3ff, 0x7f, 0xff, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x81, 0x101}]}}, {{0x9, 0x5, 0xc, 0x8, 0x40, 0x5, 0x3, 0x5, [@generic={0x39, 0x7, "239bc2da8a029cb6830312ddddb8d98b45100a19e7b32b22d1a7ecef85a19255ca1ca1fec9dc41eb50ab996275fbe9f685ed554989f768"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x3ff, 0xf, 0x4, 0x4, [@generic={0xec, 0x8, "f1a331bd3a37a1a72e6e9fa8b6f86d440e37372d9d2fc80e027d09b32d905430ba9f3817bdcd9ea654b5f102bf24fa1db59ed18e901f2bc4dc6546b3e4418fe282ab19456e2bec8bcbe004be7c6d3ec35c02f5674c38053a7d504d7c0d2e2a0651eea01b30cdc1cd5f1c60e03def7707a91c28b27837b261d83d13098011837c7a66f7a28ef050bc03af5753b207be6e5ede8ce45dcdfb3edf8ce18f736f4fe160755b292ba6403401842c971cc06427689e62b019fe0378b390f25191d6f1928622e435d86515c9b674544e407f6ee7dfa30c56deecce7a22175976cd68d7ca9ed3fd24ef4b28469cab"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x3, 0x6}]}}]}}]}}]}}, &(0x7f0000000b40)={0xa, &(0x7f0000000a80)={0xa, 0x6, 0x300, 0x6, 0x8, 0x2, 0x10, 0xf}, 0x13, &(0x7f0000000ac0)=ANY=[@ANYBLOB="050f13000203100b0b10010401009702005d00"], 0x1, [{0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x446}}]}) r7 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r7, 0x83, 0xc4, &(0x7f0000000440)=ANY=[@ANYBLOB="110000bc00000000c768ba419a82cd68aae02464511fc65d000000b90f7229c4fa133c4e12d5301c8d2c464c60a6389918b94b7a356d2acef6bfeca369b60a9b49a736754467ccd468e11de01ed165aa0493faba6a8467c8fa28b2c60009a858b455a29c9ac49cb73e84d8b9cf2680ebfa8a7d9ec40885fab453e96196741b5b5bf97edc89ec80303ee5c202a2fc84673b306470e485d00c26ae19aadae0a572c45c7f588ff2bf0a50b0e91aaa3bfdf976edf2caf03b4ab10e46450104cb3ef5e436f1c47a2f5046dade88bf0f87fd36643e64efd058a44a9ccc6b2294b557a3b09d7983a07d9e"]) openat$ppp(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$BLKCRYPTOGENERATEKEY(r6, 0xc030128a, &(0x7f0000000080)={&(0x7f0000000000)=""/42, 0x2a}) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x4b564d03, 0x0, 0x100}]}) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000003f0007012bbd700000000000017c00000400fc800c0001"], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x0) 1m14.246152297s ago: executing program 7 (id=4603): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x64}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000007c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\f\n5', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 1m13.852054036s ago: executing program 7 (id=4604): r0 = socket(0xa, 0x5, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x2000000000000130, &(0x7f0000000140)=ANY=[], 0x2c, 0x4855}, 0x24000052) 1m13.729780623s ago: executing program 7 (id=4606): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}}, 0x4084) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) chdir(&(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1e2) mount(&(0x7f00000000c0)=@sr0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000040)='hfsplus\x00', 0x18001, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, 0x0) mkdir(&(0x7f0000000000)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2003, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@gettaction={0x48, 0x32, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}, {0x20, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c004}, 0x24048840) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x25dfdbfb, {0x7, 0x0, 0x0, r8, 0x80, 0x6a}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000890}, 0x20000000) ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f0000000240)={0x80000000, 0x3}) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="180000f0ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c000000100003040000fff30000ea0000000400", @ANYRES32=r6, @ANYBLOB="60bc010004a701003c00128009000100626f6e64000000002c"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) write$binfmt_script(r4, &(0x7f0000000040), 0x4) 1m13.3282084s ago: executing program 7 (id=4610): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) fchdir(0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x702, 0xe, 0x0, &(0x7f0000000580)="e460334470d8d400eb00c152869d", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1m12.660520935s ago: executing program 7 (id=4611): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x40000000e, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x44, 0x2, 0x200, "4649f6441214bdf0c12f00007f9d0000310fa145d5dbff7fff00", 0x32314d56}) socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) socket$nl_generic(0x10, 0x3, 0x10) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./ffs\x00', 0x1ff) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r2, &(0x7f00000001c0)='functionfs\x00', 0xb) read(r1, &(0x7f0000000100), 0xb) mount(&(0x7f0000000240)=@filename='usb0\x00', &(0x7f0000000280)='./ffs\x00', &(0x7f0000000100), 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) io_setup(0x7, &(0x7f0000000280)) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) openat$sysfs(0xffffff9c, &(0x7f0000000140)='/sys/power/resume', 0x42, 0x17a) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r3, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) syz_open_dev$mouse(&(0x7f0000000140), 0x5a21, 0x20000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xfdff8000) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r4, 0x0) ftruncate(r4, 0x2) 1m12.284192544s ago: executing program 46 (id=4611): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x40000000e, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x44, 0x2, 0x200, "4649f6441214bdf0c12f00007f9d0000310fa145d5dbff7fff00", 0x32314d56}) socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) socket$nl_generic(0x10, 0x3, 0x10) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./ffs\x00', 0x1ff) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r2, &(0x7f00000001c0)='functionfs\x00', 0xb) read(r1, &(0x7f0000000100), 0xb) mount(&(0x7f0000000240)=@filename='usb0\x00', &(0x7f0000000280)='./ffs\x00', &(0x7f0000000100), 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) io_setup(0x7, &(0x7f0000000280)) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) openat$sysfs(0xffffff9c, &(0x7f0000000140)='/sys/power/resume', 0x42, 0x17a) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r3, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) syz_open_dev$mouse(&(0x7f0000000140), 0x5a21, 0x20000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xfdff8000) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r4, 0x0) ftruncate(r4, 0x2) 6.643293925s ago: executing program 3 (id=5079): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0xc, {"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", 0x7c4}}, 0x1006) io_uring_setup(0x585f, &(0x7f00000001c0)={0x0, 0x2c28, 0x80, 0x0, 0x10000000}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3ff, 0xffffffffffffffff, 0x0, 0x100000000000000}, 0x38) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, 0x2, 0x3, 0x801, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x6, 0x3}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x23}}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000005e0001002dbd7000fddbdb2500000000", @ANYRES32=r7], 0x1c}, 0x1, 0x0, 0x0, 0xa911}, 0x40000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0xc8) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000706010200000000000000000500000a050001000700000000000200737957300000000000000640000100020073797a3100000000000000"], 0x32}, 0x1, 0x0, 0x0, 0x20004055}, 0x48000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x7fff7ffc}]}) r9 = openat$vicodec0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r9, 0xc0185647, &(0x7f0000000040)={0xf020000, 0x386, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90b, 0x0, '\x00', @string=0x0}}) 5.769750801s ago: executing program 3 (id=5082): socket$nl_route(0x10, 0x3, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x4903, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b2b, &(0x7f0000000040)={'wlan1\x00', @random="008000"}) ioctl(r0, 0x8b2a, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip_vti0\x00'}) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000080)=""/230) gettid() r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000"], 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10004, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r6, 0xa) syz_usb_control_io$hid(r2, &(0x7f0000000540)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x2, "288e51a1"}]}}, 0x0}, 0x0) 4.450312778s ago: executing program 8 (id=5089): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000010400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0xffffffbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000200000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), r5) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6d706f6c3d6c6f63616c2c6d706f6c3d6c6f639e"]) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r8], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000001c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x2000, 0xc6, 0x9, 0x0, 0x0, [{0x5, 0x3, 0x7, '\x00', 0xa}, {0xfa, 0x9, 0x3, '\x00', 0x8}, {0x6, 0x8, 0x0, '\x00', 0x3}, {0xbe, 0x0, 0x81, '\x00', 0x8}, {0x3, 0x3a, 0x4, '\x00', 0x7}, {0x6, 0x4, 0xd}, {0x8, 0x5, 0x8, '\x00', 0x40}, {0xc, 0x9, 0x6, '\x00', 0x2}, {0x1, 0xe3, 0x5}, {0x1, 0x4, 0x1, '\x00', 0x7}, {0x8, 0x0, 0x69, '\x00', 0x3}, {0x0, 0x8, 0xf, '\x00', 0x2e}, {0x6, 0x4, 0x9, '\x00', 0x9}, {0x6, 0x3, 0x96, '\x00', 0x3}, {0x5, 0x5, 0x4c, '\x00', 0x4}, {0x3f, 0xe, 0x3, '\x00', 0x7}, {0xc0, 0x6, 0x8, '\x00', 0x3}, {0xf2, 0x4, 0xbf, '\x00', 0x2}, {0x6, 0xf7, 0x2, '\x00', 0xf1}, {0x6, 0x9, 0xd, '\x00', 0xc}, {0x6, 0xf, 0x1, '\x00', 0xf}, {0x3, 0x2, 0x52, '\x00', 0x49}, {0xf7, 0xf, 0x6, '\x00', 0x7}, {0xf9, 0x2, 0x4}]}}) r9 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000080)='ip\x00\x03cr\x80e\x83', &(0x7f0000000240)='.\x8bR\xafH\xd6e\x11\'\xec\xbb\xcb\xa0/\x1f\x16\xcf\xe2\xb5\xfc\xeb1\x12\xfdC\xb8\xa0\x01\xa3~\x971W\x96\xec\xaf\x1c\x91\xeb\xa8e\xfe\x17\x02xEA\x0f\x14\r\xae\xc1\xfe\x06\x12\beSb{~R\xf0\x06\x00\x00\x00\xf92\xce\x81p\x1fC\n\x9f(\x00\xc5\x1d\x9c\xccCq\x06\x1b-\f\xc9\xd9+\xa4\x14\xd8\xf4\xef\xf5^2\x14\xb8=\x03\x00\xd5M\x04\xf4{H\xd0\xc8\xf7\x10\xe1R \x9a^\xdfq*L\xc4lP6\x8f\xff&>\x94\x882\x1c\x00\x00\xc5\xbdD(\xa5\x17\x11\xd6\t\x12\x7fe\xba\xfc\x93\xf4\xd8\xb5\x04\xcb\x98\xd1QF\xe5\x1b\xb30x/\x86\x02\x1ct\xc7\x88\xd2\xce\xd5\x9e1\xef`\xad\x05\x11\xc9\xd8<\xc6~\x97\xd5\xde\xe3Eh\\\x84\x14\x9e\b\xe1\x9b\x00\'\xe8!\x8c\xc3\x97\x8a\xcf\xfc\x8fe\xa6\x0f\x8b\x912c\x1b>8\xc5\xa3_\xab\xf1\xf5\r\xb6\xe7\xfcS9\xd1.\x8b\xf3\xbc,?\xb2\x9aBDPY=r\xfa8I\x16\xa2\x18\xd4\xa5\x8b\xaf\xd1\x8a\xbb\x0e\x15O\xc9p@\xadaw\x84\xc9\xdd\x87a[\xdf\xc2\xa4\xf9@T/\xf5\xd1t\xc7\xeb\x04y\rr\xba^\x9f\xf4\xfb\xaa#\xf6lX\'\x03u\xc6XZ\x8eK*Zs\xdb\xcaV\x92\x84\xc5\x05i]\xb6N\xa9&a\xe6\xa1\xedgd\xc2\x8b1Kq\x90U\xe0\x9a\xee\xd6BdU?\r\xd2\x13}u\xf6\x9entz\vW\x04\x968\xc5v\xe0t:\xe0D\xe8\xca\xb8\xd5\xb0\x89\x90\x928\x1d\r\x8b\xf2#8\xf5rI=6\xa1L\x19>I\f\xe7\xab\x98\xd2x\x82\x820\xf6\x8b]T\xd1\xe0\xefD\xc3\x94O\xdd\\\xd6\xb5z.\xc9z>\xdab\xcdw\xbf\x91\x190we\xa5\xfc\xf9\xaf\xedA&\xd50\xa9\xf0\xbeX\xe8\xd0', 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x8000000000000, 0x80000004000080, 0x0, 0x8, 0x0, 0x4, 0x0, 0x8000], 0x1, 0x3c4210}) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8102, 0x0) r11 = syz_open_dev$loop(&(0x7f0000000180), 0x800000000000006, 0x128202) ioctl$LOOP_CONFIGURE(r11, 0x4c0a, &(0x7f0000001ac0)={r10, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0xe, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f54016d1a85a056f5d759ded130e04d528539f3d328973747a75d1f3d000017deb7d6193b3e7772fd29f35239d200000000008000", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x6]}}) r12 = dup(r11) mmap(&(0x7f00002f7000/0x3000)=nil, 0x3000, 0x2000007, 0x13, r12, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.158697075s ago: executing program 8 (id=5090): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_connect(0x3, 0x100f, &(0x7f0000001300)={{0x12, 0x1, 0x310, 0x1, 0x18, 0xc8, 0x10, 0xaf0, 0x7601, 0x6706, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xffd, 0x4, 0x80, 0x40, 0xa0, 0x4, "", [{{0x9, 0x4, 0x71, 0x2, 0x3, 0xa8, 0x41, 0x17, 0x8, [@uac_control={{0xa, 0x24, 0x1, 0x3ff, 0x43}, [@input_terminal={0xc, 0x24, 0x2, 0x5, 0x203, 0x2, 0x8, 0x8001, 0x0, 0x3}, @extension_unit={0xa, 0x24, 0x8, 0x1, 0xf, 0x9, "7fa4be"}, @extension_unit={0xd, 0x24, 0x8, 0x6, 0x3, 0x40, "a0e22fba4ad6"}, @processing_unit={0xb, 0x24, 0x7, 0x3, 0x5, 0xc, "2ccb6701"}, @selector_unit={0xb, 0x24, 0x5, 0x5, 0x2, "e28cb0acac72"}]}, @uac_as={[@as_header={0x7, 0x24, 0x1, 0x4, 0x2}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x703, 0x6, 0x8, "b66d873addbe5e701a"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x9, 0x3, 0xe, "4d5494"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x9, 0xff, 0x4, 0x8, 0x72}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x9, 0x2, 0x9, 0x9, "8b82ac", "213195"}, @as_header={0x7, 0x24, 0x1, 0x9, 0x2, 0x3}]}], [{{0x9, 0x5, 0x0, 0x0, 0x440, 0x1, 0xcb, 0xa}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0x5c, 0xfb, 0xd1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x3}]}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x4, 0x4, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x9, 0x82f0}, @generic={0xa1, 0x31, "084e23ea660558c4df2228f047206575d139fd5bdcf02b0bbc8eb74a39aa0439bf271cc63ac6b74569278345ed2d285ed56aa5bed10164c213cf36137145ee1bfa30f52cce78cce7fb5af4d80e52eb7ee497366b3edd497e5ce7003be7df44886a8af6c3a4c45a1922caa815dc18e8b803196f48c4464f951e7e90fa4aea1072a7c02e1654c2235204701848282dafbccdfa31c1c3c955cc81fedd0f079eda"}]}}]}}, {{0x9, 0x4, 0x7c, 0xa4, 0xe, 0x2, 0x2, 0xff, 0x7, [@uac_as={[@format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x25, 0x2, 0x4, 0x5, "a9d351102b"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x8, 0x6, 0x7, 0xb}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x40, 0x1, 0xd, 0x2, 0x10}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x2, 0x3, 0x1, 0x1, "f95a3a21cecf1844"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xf5, 0x6, 0x0, 0x0, 0xfc}]}, @generic={0x8e, 0x11, "82ae1134cdbb81bf5afdb6f71eb4613b20ce3417c3217db72b22dd20d9ca111aeafe671343f118789d4cccc348485434be3e0bfd33d3db67e4a276b450b78251be1c99c577cbe48e77201869067b8412ab95ff246810d997a1830150fe2c3df2d7f78449d07839c86b740594be2425c499179bc857ad45a789e16e2b4b73dded54d3c55aa1bac3fb81063274"}], [{{0x9, 0x5, 0x1, 0x0, 0x400, 0x9, 0x3, 0x2, [@generic={0x7c, 0x31, "251b86aff575d61f5e683885e25f6bb6fd614751c45669a9c5dccd0ec0365d521d654d6790a63e14e236304cc9e503396590a05329010289ffe67d0a8da9e4d374d2c94d528e6371c197ae722e2f356334eeb802f94685d1f852c5e5c071280d5649e05256118aaf40cc18ec05051b081b6694e4ae573fb4689d"}]}}, {{0x9, 0x5, 0xe, 0xc, 0x200, 0x9, 0x40, 0x2, [@generic={0x52, 0xe, "e15a0f8983b5803069fc8b3d297d921b495e334afdde92905918401f2b831f6898866a6b1a3b55546b490c60180df3de8f8a81c9ea1fb23965706c895e9041e5879b9337233de9f143ea9c04ae0cf4ad"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x6}]}}, {{0x9, 0x5, 0xd, 0x8, 0x200, 0x2, 0xa, 0x5}}, {{0x9, 0x5, 0x5, 0x0, 0x20, 0xba, 0x9, 0x5, [@generic={0x1f, 0xf, "954ef33c509edb611911e3500b548df7a53c75ba646fc1fdff14625a91"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x80, 0x38}]}}, {{0x9, 0x5, 0xd, 0x0, 0x10, 0x3, 0x0, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0xd15}, @generic={0xdb, 0x31, "348a39fdbf6e6bcb13a9547a96f84b4d603f426298845519a368975d6284fe65dab726d8dfb688282aaf6d394cd46d0106f6363e1de4f640d6af680ecf2a7bce255db46f276c80b4497cb72883664ca00033306f23e6b55f6b268102a48ab63a4c3d3593fbbef1c7224660231bc2ff97c2e2067e6f252d0f1b7496f42b4c762d12f9f8c10cc95753045ee067ba13ea0cf08d533692c13c04e584e3e9038a392d51544fe5c9f13216430a24139bb9d76144787c994e6c9cdebbfca51e7f403dd0be3672b577f63591aa0400034bd526c8783d99393350917678"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x400, 0x7, 0x1, 0x5, [@generic={0x7b, 0x7, "87d3caac40cb5f2b3a5d88d83fac654a63842d39a54219260250796ae908e33314ec41775d77099bca4bd4983324882401d571ce96355bfaa18cd15d2fe7fa5564b079e75145c7a19a777040acf34bf8a80eea6fbce7b9244a1245a395f847aee96b0998b99adb3d220bb3d7708d63bd98aa19dcc7b75ce6dd"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x1, 0xff, 0x2, [@generic={0x7c, 0x3, "08af12d713ce3e32734715faa818b56fefa435cad1e2a4bf2b493d7978b020bae13f89500d8e1c4f0bb4738ac2b6d4f664f612a61fc284ffe51507805303ea90cec5c7f37c00e89432c96508aa87a81df9842c1f1e8e66a73874b7147a55f8990476a218819c36be1c93b1a8493681538e14c2d97586e82d06d2"}]}}, {{0x9, 0x5, 0x2, 0x1, 0x400, 0x2, 0x4, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x8706}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x5}]}}, {{0x9, 0x5, 0x3, 0x3, 0x3ff, 0x6, 0x7, 0x10}}, {{0x9, 0x5, 0x3, 0x10, 0x20, 0x8, 0x3, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x9}]}}, {{0x9, 0x5, 0xf, 0x0, 0x610, 0xb, 0x7, 0xc0, [@generic={0xed, 0x21, "7123cd7ad9a099dd2a6bea8f4388d432bb7dc1f1de5ed35861caf889d8b2ff6c8e3bcac58aa10d900b8b07fd0e664c6fe3b68c0266ea2abe601caca02f7979c515b3586bff4d87053227710d55ffa933bc5be37ec8e91aef9c20798cb3caaa71fab3673ab5c5b2ed3d19b50b056302989545845ce42e1093cc336a50db7c60ac6baec7d14d9ee2bd0267a395cd2fbc2a4a09044f60d9305b386c1aca73a2684d153e6686a2587569c9a6a2015f057e3dc209c305ece87d2b5ea76fbdf613369441f8750fa00f71e0658356bc5805c9f44089f8503c18234479735db926058392ee84772ee80a292500c251"}, @generic={0x61, 0x78, "af0de4d24321ad4e8a7653c9641aefbd830e3cb7993c899ee4699df3b03757cf581df20e75736a7a0a60ec803e9f0183e0c033bac200fb303cc8df49f12f0effca7cde9a4b78415b35f13d0896142067cbf5c2045bfb961e84b475c12e33a2"}]}}, {{0x9, 0x5, 0x0, 0x2, 0x3ff, 0xfa, 0xa, 0x91, [@generic={0x40, 0xd, "2cd1a90c695c18976a8741787996d46310907c656f42b6a55751dbb7d8a57150d27a4abdac6c5e827a1ca29ac3167828bb842a9a6ffe0625b772c1316cda"}, @generic={0xbe, 0x4, "b25dfff6f383ad803d2932e3d8ffa5b7a3922c30bd98230f7950b1de9d9b9c46e11bb65c00cd53d868e6bf1eee411d364a76cda80c27af2b164b572081d5377439f95dae8dff941ced26b2e3b0efa3f1ac0118a38a3c2fe1757e03a9b8fb58121cbc40ac1b8f6ffd503bceb7f69069d8ff81ac4298b1ab1a48f9f973905e28cdfd69cc813506f9be7890cc553d5dbed90e7abae29b416b8ea02ec6e626610d89a77dabf5944f49d2744ecf77f3bef4809d58ced0f2076e50ef57e612"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x10, 0x40, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x2}]}}, {{0x9, 0x5, 0x2, 0x1c, 0x10, 0x9c, 0x3, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x80, 0xb}]}}]}}, {{0x9, 0x4, 0x1e, 0x3, 0x6, 0x2b, 0xe0, 0xa8, 0x81, [], [{{0x9, 0x5, 0x80, 0x3, 0x10, 0x40, 0x7, 0x63, [@generic={0x7c, 0x22, "db0399982251fd1f423191345aab3cb4c16c02832733a9bd49e225bfebf7505d3142ebcc019a3e1adfb4b1883d29697765a97d2328ddb864ca90ff013adfd57b4db1425847e8b94a8254aa74be3d5a51b0b33b2913f053164ffd8c9269c2e31f974cfec1e69524810e62178f79364eb28ee804c95d979ca90752"}, @generic={0x4a, 0x23, "c08ef81578558d872f52e9e385b3b099b7acd00feee053bb53efdbd76925783f03e3859a8a68082b9bfef0dfa54d3e42d7f5f24ed00d3ce8e8e507393f77e858c3e3a43d2d078a55"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x40, 0x3, 0x40, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x5}]}}, {{0x9, 0x5, 0x2, 0x8, 0x20, 0x0, 0xf, 0x5, [@generic={0xc8, 0x8, "b848a6de5dc55ed8f2b47dee0a83a65e8a55cdf3b4958bf2a12b86706023a21bbd7b8cf00abdae929316a0b0daec2da9f66a80f2025ccd83220c63e37578ca8afc35441826900a7651b3ea62decd3b26093418eaf3fa77a4f8247dc30a15dbeda4f29faac06ea035ddc78d6c138107ccabb7b378ba1eeaa704b721238d9c33e7c4fba439459fda20c7ab73fc428f0ebd2c3ba2988f044373fc7dd16edea1015f5807730f1b8a4b58f11489340612ac5bf5bdf16a54171cbd55346f46e7f902e3e82d684de621"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x60, 0x7ff}]}}, {{0x9, 0x5, 0xa, 0x2, 0x3ff, 0x8, 0x63, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x4, 0x8000}, @generic={0xe3, 0xa, "7ced60d8ab1c650d6ccb5a2b9dbc1df7fff18d4b1566c1b908e8b1e1938ce94f62ff4727ff3367f4a355d1e39136e3e26c218755331f415f05dff4b7cbc9acc59a38b5824d93765a125d0c1190cdca179056794f73ac7e93701d9f81b1894853091616cc796ded5b02c6e81e96110fc0bdf6c6090508642cf647fd9757cd70211a2f9daaa71b3c864460c1b5ec2c825e591e88f47bed318093cea10b9926d8c025c8480a6e7898dddc18436e696a16bb3565963f7a70a1040cc3edcc4314c2023be9deba5252e08cea051ddc40dfecd5301221955f250e7bfe6eee3a5cce409712"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0x5, 0x80, 0x14, [@generic={0xf8, 0x6, "1c16e956d77417730ae318b869499073d1bbb8fb896120c462b898f2a06a5d0fda8fd78c89af2288e97546f7a28f40b996d0a5d5b3537d98424a48cbaea97cfbb1f81eae730cf65c2c1df8f1fe282bf13cb9eb4fc08e7ed84ebeeee0cf1c6660131f62bfcb0822ea6bf525d491596a78aa0a9559febf47ecfced67ed3089f80bc1f9796a0afb3a42e8eca42bd2efc041cd91bab274a04f0b4f9a7f28bc0d65e02bf738c7c5895c31ed9c126d3ba91839077e12f60bfbd57d98c301104df3f32bc0eeb3c7a4ee67a25f3522add95f8b977f670acdc84f3c217be4ee3e5c37f7b512be716a6c0bcaade2987175b550d62eb64281f02506"}, @generic={0xf4, 0x6, "59a3470d5ba01d8b2faa3b2268dfea71b6519bb4589fcdbb1eac873b99d2903882b7ebcda745bc8e1049fb095b1f8ee308c32b46d058ed2e26c3c1ed2e21491bdb25658eeed8e1f8e3b7413e2831f566acbfe74fe7ac6fb73f99d91a7dd09c1b8d395d071416ec7dac76d7404b3af536de2069fcd1445358f2714c6a3c4dd3c4c05e1b00db79ea34a229591d75bd2050ca5710a1ee3036d4a700dd20a2267966651b532a9dcc42426b679ba514cf9b688bf9504897ba784ed1af3b04b2dfe7a897743ccd66318d1d0b963b8e8a0b1656581f2107eb4b1f725e88bc8ed3cd55f59b12dbdf28c0b9f4d29b7b9a6ce2b9496977"}]}}, {{0x9, 0x5, 0xe, 0x1, 0x40, 0x2, 0x40, 0x1}}]}}, {{0x9, 0x4, 0x6d, 0x0, 0x9, 0x40, 0x69, 0x63, 0x0, [], [{{0x9, 0x5, 0x7, 0x10, 0x40, 0x1, 0x7, 0x6, [@generic={0x28, 0xf, "10feec29574e06555df3e09878f610984ccdc3b0770ac1a439033c37fc319a60e0c9d5d0a5bf"}]}}, {{0x9, 0x5, 0x4, 0x1, 0x20, 0x81}}, {{0x9, 0x5, 0x1, 0x18, 0x400, 0x80, 0x9, 0xfb, [@generic={0x7e, 0x24, "86e4eb02c99f19b30863c29b383ca561d944385120427ed12765f0d40a0884a37cbb950f6119199b72f6465ab5477461baa6bd153668a396929c6009002236fac329ef1e2a946f81a9250660c4d228e5181c25fd68f0321dc591eb2f0db562a6b75dac3ae41b4b63d39f164ad4ad6809d2db82bdd4d1aa456e99851c"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x8, 0x3, 0x9, 0x7, [@generic={0xd2, 0x20, "96f04f7426a517e6a350b17b7d2e70727a3f34b28616c563209ce4792c9c5ac02b89563d198a8ec1d0ad1571ff8098768a1b39a2c815b5acfbb83ae4e51e98b787af1f0e239cd3df8a135c33cc37dbbf197cc60aee9ca6aebcdddeb4aae85667da0738f1fb71c57b1bca22329ceaf85bbbb50c85a6e2aead09f9b03c435a4a129a92fe6325f9609c0b606772bb08cca9caed5b92681687340c23318a934062d4decc709cc84bca5f927b187bdc063b2273d71000d7dac4ffc4bd71a4be994e52aff7c64944ecb1ceb30459062337aef3"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x3ff, 0xb2, 0x6, 0x1, [@generic={0xfe, 0x7, "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"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x1, 0x7f}]}}, {{0x9, 0x5, 0x80, 0x0, 0x40, 0x10, 0xbf, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x0, 0x7}]}}, {{0x9, 0x5, 0x973616acaa3e11b7, 0x2, 0x0, 0x9, 0x3, 0x1, [@generic={0x58, 0x22, "03bc2f81db601be6f2bf4aab35da015d0671bef1e6596074e4713d7af84d59c225a35cbfc4696f256db258ca5a31f2efef2d16e4d383520b9bd0080a3d5909cdb5bd44fb6b36fe95d070c79a759b10d8eea7db968ba9"}, @generic={0x1c, 0xe, "150e2874b3b7196fef207478c5cdea8207ebca4b80848db71b27"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x6, 0x0, 0x1}}, {{0x9, 0x5, 0x2, 0x1, 0x8, 0x4, 0x2, 0x5}}]}}]}}]}}, &(0x7f00000025c0)={0xa, &(0x7f0000002340)={0xa, 0x6, 0x201, 0x2, 0xf6, 0xd4, 0x40}, 0xcd, &(0x7f0000002380)={0x5, 0xf, 0xcd, 0x3, [@generic={0xbe, 0x10, 0xa, "8e0792c855dbb9a30f3db3ce29e09611f9ccf988487dc8f66e7b37621bb8a36de1cd02caa62a6752de03a8c4c50394708c44309fb93e0bf6599851ef21b9ad897db002b464530dc2e66fda20ab67b71624779b1593fa04caf9009428ef2c317af6bbbbde462e12b8c88f1ae57a11c84ddf037198ce04bff08ae31c75efe895dd354ab0645598ad045600dc611411c044bd4ac3599c1eb047e11f5c34d773ff499922346015980a84fc29e4e57614f3a421c19f165003537c745b27"}, @ext_cap={0x7, 0x10, 0x2, 0x1e, 0x3, 0xa, 0x6}, @ptm_cap={0x3}]}, 0x5, [{0x4, &(0x7f0000002480)=@lang_id={0x4, 0x3, 0x44b}}, {0x4, &(0x7f00000024c0)=@lang_id={0x4, 0x3, 0x40b}}, {0x4, &(0x7f0000002500)=@lang_id={0x4, 0x3, 0x421}}, {0x4, &(0x7f0000002540)=@string={0x4, 0x3, "a8a9"}}, {0x40, &(0x7f0000002580)=@string={0x40, 0x3, "bc7ea0e505b9137c89c02866cde0d26de2b410874ae7827e7bd037c3e01a47089a0b17cdfbbffb08c9d3472cdcef08bfefacbf9b5434f820380515ac222e"}}]}) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000200)={0xc, &(0x7f00000000c0)={0x40, 0x0, 0xf2, {0xf2, 0x31, "fafc9442fd9687b5af5625ae4434f73d9399169ed2c37ce02b15e786e73ad86655f819c1500520f9122904ff56b78bc19a39c5973c2ac38459fa098a2847b3ef0e273aa0916c7d8187a80c78321c1bfd9ec6187916e11a1b7edfb42ca59e0d74e4a9fb2307f02e952deba7af69fcb0f95537cfc88b04bb6ceb637b9bc82c7b303d3e3d59b545c8ebeb15ff66a6238d925086f18a42a8c40a6e1adffcd356fcde65f79d8c32b0ef2abb2d741f6fd75ca7b4fa98ee96603e6b09fa99d5ccd38630fa4d8b6bc1412e7622eadee96993c0ca647d32eed362a48939844e491358375f2dd2c996600b6b423952be553392ef80"}}, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000380)={0x10, &(0x7f0000000240)={0x40, 0x8, 0x78, "5729e1cef41e6dc89cfbcabf808e2d9eedcb608dc5e91eb73a96f363244f8fdb45f0098c215e1c9ab9eb5c6277023f8ba7b93457c2bfebb757fefdbaeec902eb281805cbd87fd648211c1cabe92b44d5d030a011db9ef39f2f63f161c9b7dfe933407539dcab731bab141c1207a459d61904309f8842511a"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x6d}}) read$char_usb(r1, &(0x7f0000000480)=""/74, 0x4a) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x28, 0x0, 0x1, 0x0, 0xffffffff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2001, 0x56}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x10000075}, 0x4008000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) timerfd_settime(0xffffffffffffffff, 0x2, &(0x7f0000000080)={{}, {0x0, 0x3938700}}, 0x0) write$char_usb(r1, &(0x7f00000003c0)="90", 0x1) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) 4.003972779s ago: executing program 0 (id=5091): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8, 0x20, 0x0, 0x3, 0xf7, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x90}, {0xeda7, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x0, 0x957b, 0x80, 0x1, 0xe3}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2e24, 0x2, 0x3, 0x51}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfd2e, 0x4000, 0x1, 0x2ec}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa483, 0x20000, 0x0, 0x1eb}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x341e, 0x400, 0x1, 0x161}, 0xffffffffffffffff}], 0x4, &(0x7f0000001700)={0x2e, 0x24, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x40}, 0x0, 0x0, '\x00', {0x2, 0xc2a, 0x0, &(0x7f0000000700)=@buf_4k="7d4e2be03a5f926ec7e6ae24f9027567671195e7de37612f3395bf6dad07d4176c936082b22e938753841f79c7ebda3edf610149f91a2eb7654c8d5459fa2d9b35247ab98c58fae30d61f7ad7c7ca58c3187438a00520f0fdc86d6e36b596ce3cb47191844f8cda46a424d6c16145d54539b48e82cf96b4f3d4504de908b8a52a9e3829db695e23565eec23aab2a19283a0f81bcb63efecdc38ad2e200af5cad5d62737bb72839bbc808650828eb43bd7e8ccaf21dc17c4e53140c441c878ef7dc1c52b3bc4de849621ba861ee729fd3e97cbc26b39520dfa496ba05d60f702e4f3d7b8c54515fb6f3a542f07495c2a22f40a3f101caf3d853eaaa796398cedaf450923f2a45d36b548c32ec4ced507b5e9978e894135c5b4cfc4d4958907bec0bbbd47650df274fc759027e8c4d256f88027c6393bab881354f456d9d40ff645318ce9d192a6b0791dfe24a8fd0feb2141d96b2d2b2b9899455795edb26534f16153d65dabf3b51d6b9533b1fe1c1211c964a502d8242b6bd9c333d022b0d67f463fed5eb581e7c8f64bc22c1ca22b1762a6c85cf1dc38f807dee991dfd7f0fd3cc87888d5a1c81f7c1fde0215bfdb17d73a152153c78a6ef1fa3cdfc9611421341bf8438c663dd6da4ef078b21f1f61b896e3167accb6d019511fac45cff0c8d42a718d56bc083b37e106b9fabeee7a056cf2aa849cb8d36883f97d4b3fce4d15dc0722bed7da6443e634b5090f2edbe75152b8c06c5f98097c856a54f44756eec8018bb1a6872ace6b633d747bdaddc8198ec16140cddf0b0590773744551b19aaddfaf52d5978ab58b47c01b0c897fc01433ca5ca80e8e31272025153e7c013ffed01165208170437a7260518ebb61abfc1c9c3cee6fe695270143f3f82eb57d19fd7ec10a953add15fb29dc69ecc8f5acf8ef191084c91cb9161dee6558d5f1e3f8dec901d0f1782b6a16c28ab097165688db9d69f908cda468398d3fc9f8968be64be3e1e2e93c8cb9e159eb65de5b2aeb7ea415a02271827f9215739bd99e2725c64ae2305cc3d0bc24dd843a1c0efe5d56d339840d8661101afb584c4914d28653e20593959c91678317717b709c4fdd34a83bd0bb518280d3df88ce091129d179744f281528f9b7c945232df22b1333addbfa0d0967eb8c4247750cea570dec3e76caff8232a1ce9d36167492548baea9a22a2881342eeedf8ef600da11003e799dc7fd9ac01d740d75909d15792893e46ec16d7ebe8dd303dc3d9a7635214cfbc38bb5c8e914b44e6863813031e0acb737433fe5804bb23c2840bd059793c6225a21a163ab6648e71ba179766ca3b6aa985296266ad606916912a0c5d47b304717ee3fb35c09c449fbaf5c6043e7b9688d999e7e1d798ee5eec1dfc8dd3016449d21a405df934349b5c6eac54523f64389d963ae4a5dedbaa4ed5706a4978cb7735530450b66826c18add6bfeb66e7c2cb89f4b3386a8efe945984bc302088a39885a875aa580ea1c5d5a4587742907e44e251bd2622bd13c852b0709943e89e6e5fad8c19d28a38312e1662b982b6350a030188c2ca75819a1ae7d252c7b79b26496e67e5807e7fd17bb476ef3c8c453e9747956317c3c351ebff8a9592e4ad4de16e5334f1641ac0891a1b0f22386008a07c6622f1882893ba141bdd108ffe8ccecdf470c70bce48b1bf7e19cb5d22cb68afd28acc8c5d2698a3b9743db51ccb19c3d9a0dc37571f25734bc2f1176c3686d5d5db5d4cb8422964d97940667b7323d47b9418a36a4fdb89d575d520305421eac1bef6b032af0d9cdba93e01c0445acadbdab573b04454846d5c2d7329216d5dfeea73a010ace2a56d4bd1b1cba3ad72313ff24be8e9f938dfe71b9f2db939a81af729ea241460af427f9d08da60743e158ee3479b97026fbf6ef79abcd8f26d33ed2aed86917d782a343fd5983a9e989e19294d8cf2158b842230fc60d7f704bfea66545d08a084c59fc0b5019566ad6f8e1ae008e67fdd2a9dc940c0a85aead53ec134ac90cc747129fb60ae2b0723af07f08ebe3e084c69a78cba3229b55002225fa69ac4498bd17e5844fbe9c90370effeda02eec3ad1de2082123dd3897816674e01395ba9ca96d0eeddaf8eb4fbfea8fabb41bc35995b925f79ebeb30954c64754cbaa0de021693bf87a51f584962707ddccd42983087e60e89913da8135b2e046ddc2e51a59e88d758a186020ba07afbd9cbf0842e954053a3f65412c90abcdd83aa9c9c21510fd603c4f5e3f88ad3b739febfe26f56575e192b4c42389727b9deb89ee091356faae0e120838789a70970533673d64901c02a0212f51d008a728e2e677d2bba4aad494e6806caf17f8071933acf8fc08303efae4e724d3924c2da95b97ef776e8668ae2055e604a7c9f965dba62f2ef4df316bb12c90e5797c7229d826da9f315e28e07c971c3683a1de781678bf7a0e0a9d8392315e6688b2c22ceded4d43b0c7b66e044b8ccc72cb8ea09dafd6abcba56ff57a745171b073b73f6e30df37a64924846d8ca77a1bd2159d7c6a8bfaedc65ec3e300c70f63b465036578e3f845337cb4b3d6b42212e93866023631dc4bfffaab10ee36fb175367ffc523e1bb29bb80ad6239bdc1a84e372716329e37eb302db45e3a20fd7f5e6e23ad87d9cf33673525ed7f9ffd3ee52be2400e5c6641c924d07b6f0622ec3b8043e8d9d4883541e8a54e946190c2539011dc1e56b9d744d88ecd8f9a64d9021d1c7ae2ee789a100a9f6e22fcb2b7dae7c5acca565e6e084240a18d89d42e95508be353d1636ec9786c0949caaa0ec709643e64aafccf2dbeffd88157069cd7ffe7199b3e5f3bc40c33e93fa1ec8168bba9accb17eb0df0875ec9ef21cb8da6771f6d1121ffa72c539afd9d2359613f31f648bb9987c3607c4e3abd8ecad9c26dd9e6083c095231c2478de671b70e3db653c71296c50066575aed4b571b96f2fdce209edf9eea38daf39660ad218bc30882c31fb99be121593f606c8e8408fd19e234f7540772e3ab7faae2d047055c2b434c3090582f1c0148006fb451dd85c2eec75b6744f3b6543c319c290dd1a9d73f4b2ac2298d70814de77b240c5e9a8e39da9e3467b7378027ec0c1748a04da2081aa0d754ed7ba3be6391ac6e2e55c570b3b5deac591d175448d9062344c69b84f320b76180706a9a9c5a1ad35237a9efdb111f4fa7a3c1a48045306fffa3f133931198478f7abef01a0e133339ae1217409b438571759fa7b3b0f3c994870c52c69c3f16dfd89705c78e839dd5d3690a1c235acae5eb41f8e557f4126cb83b8452a6834a14f0b55479eb4df96ad06aa4401456468cb6d55ca67917c9e625939a7ef649aa44592e5567e8d15e94420276b3a3575fe406a5c6cb08e6aa571d9a964dc0f141ced0a78e7f71f234fc6b6090bc3028d68cacd0b41eb591c63b16ebc424f837b344ee61652b6797416138a99c632ce6ece50e1de387a53dcd5b96c2a46c79d51f97e5ebdf610c0a96a70e704f90f46f0abb23a1903d038fea545937067f101b1f767ded92c44ffbf25fc509835dc8a8eda36816b92efdebdc27e248850e32caf6937f318f331ba90a711dbf6b158189335899192d1316c1ca0d2173bee196fab18eb3b540353d84225ee512efa59700addf5845a04e92389264de38a76ec7202af8a4eb1a793d5e90e96b9f54209105be0f20249f941ad8ce62267a167058ff643614149e4bc744a5705d4401aca0f6f0d698f42bf38b41339ec5384b314c2a1ac06154e0845ad3c06cc5f7819f8ac9447390183475f1290071b2be27a352f5293de307be0075d028b838e50c63049722eb1ee1f7c5d888220469bb6dbc1cc8c80d3e4d7e50152a45ca7578f79bc0804803426495c2325410f3d352bd80204c9f27bd6ba2fff2556c6f1648ff61e7540fd6cbba1e2eee5ccd9c360555ae20f2365d24b5fe3553094977b51b2324439a822d14a71e9c4b634a571325da0bedd677affb587dbfbf85ef1fd3922773c04353cfa508fe1a3c61c9e8f96905105df9801e4af2e1fb68658ac90ece14b98e17c7cdb9496c5faaac5e34da9f3365b8d89439ce113eada74e117d743dbab2b3dd71d9d6bcc84e3f90d92c7daf0b9eebb6d6c96e9dbbb97628170607d0556e8c171006015a3a37786c4078a7494a2722d4de3528e49220c2ea93d1db57ff3bfa9882e01240ad38173fb64d4cd36303adaedb7c197449e096371c6507e06f11137badceb305198736bf8163650bc6b78d024f19aad1e407b466507b53630eeda9f7d94cf7728a5791b890835bdb6df8999a99fe3730e586c62fbe0645d36882950dd7447b083ca3722064df395a879df962316719f3082ba7e20a58c863b6cf7bf8919a508c96814eaad94957da11378fe0bad1bc38cd4d162ec08ef27dc7cdb94b9ce8340421dee6458c6d1294dd478384aa47ff497d8709b41d7bf446b4b5efeb312e52fb24546e725c33f1321f51ac656c258f17f206d262efbe3f6c55a29e99952e0e0eec4df2088df63faf3e1d8eb60fb4f21cd377960956ac18fb69db2ce1e4fe59c779acf8914db94bf2c8573b5ecf97f4b08b757dbcb014924d7f03fa9d8574704567d521c9d6e29e5211bc3b2e3c0e23938a735bf62c465be6ab5081d176df31df46d530b4d7033a7b0760e3d234bc53b6720027b971c869683e7190bc86b8df2ff6be0ee93427c2b38f844a5d1a1692f95852cdb8ebd95831f5481e426674ccaeb53a80b8d5deab86e3d71c1b1f4f06f38c88d6bb1aef91573cf88c9eb6868cdb67bbaae3caf694482ce7c0efa8c19e323975e830bd418935b821e106b2bfee1ee6c9ea530b31a1cf51a28b679a2c87d0bbe3da5d922fc518a6e0950034122d8e312e679c4ae927447db39c1fb7e021f00a55b27dd19bc45468cc345684c9fe5e7c7d23f43e314b4c6122b4c01ab20f977520fa0a0ec1f606a47c34ac38a553bdfecb0656e92dc39eeb6bb9d067f3112cfeddfe39d0deb2f4c19dd34c353e685dcb03e09b6fd490a50dcd255f069ec4c4ff09c0c485b35b39b602f866b246fc01ee8940de07bd9bcc6beb1f6c38a02c290f8df62b4f3b0731c4a200f72ccd1bab818f114f1b50e51fe8824a6d5b1146b0b66aa0d0332942b9738dcef56717c1914a1e41663f75cbfe50d592269ceeb772612deb68e910c9fccac1f5973423cadad5ab954c10f69b10d3b283136ecbb3f7498dabf5acd495579ecc9b1d02ebb91d51098db3a7ea0ad65035c050d2f14afadb475d272b3d67ef1236fe3908ece443cef09b3eeae32fa29bec51df9e83137be68532416f32770001510ee5ee6dae33ece492573dfff4165850e1a1d1c7bc46c3d12df515289a19418a044fff7602fe79f1e68b2f108df1115053e301285a3cd5610c374788cff98139ae095e5f663d70f89b0d7ed1a62390f260c8fda7f688766b46f0f29a0a1bd06589a5e0a9e593fe3157cc0eed8e19edffd13c064f61a61fdc853e967737906f6a54c04c8df08c86e71e78d46ea44919575f02b1bbcd339172d8b22fa8de096fe19118de7c1dad306f171f90abc35980141f0fadc61d222ca364812669289158f1f4ea883a7a6932c94581d3575a782ebae8ba6c09de45a627c5a8a2384146cfddd477d65eccb2b6862b281ebf8593d7d225a7faa61e1db8b62158807319e7c37df3039e8da2f945d0d93d731001c9a28cb9a912753d6917c641258703189af6ed5116b3ff55ee742b6d78df3d6d17ccdda9bc3020660c532c6eb726f464f6be45a7d8"}}, &(0x7f0000001780)) r6 = syz_io_uring_setup(0x14d8, &(0x7f00000017c0)={0x0, 0x6012, 0x8000, 0x3, 0x12f, 0x0, r5}, &(0x7f0000001840), &(0x7f0000001880), &(0x7f00000018c0)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x4, 0xd0, 0x3, 0x3f8, 0x4, 0x0, 0x2004cb, 0x3, 0x100000008, 0xfffffffffffffff8, 0xfffffffffffffffd, 0x9, 0x2000000000003ff, 0x2, 0x0, 0x8], 0x3000, 0x200282}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000001c0)=0x2) ioctl$KVM_CAP_HYPERV_SEND_IPI(r1, 0x4068aea3, &(0x7f0000000340)) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_ublk_setup_io_uring(0x2ca6, &(0x7f0000000200)={0x0, 0xd9aa, 0x20000, 0x0, 0x2e5, 0x0, r6}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) 2.760365845s ago: executing program 0 (id=5096): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) r1 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x8d, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000340)={{0xa, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) r3 = syz_ublk_setup_io_uring(0x31cf, &(0x7f0000000040)={0x0, 0x5000, 0x400, 0x0, 0x1005}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x4199831, 0xffffffffffffffff, 0x10000000) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x0, 0x0, r1, 0x1212, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) mremap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) clock_gettime(0x0, &(0x7f00000025c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000010026bd700002d4df6de18b0403", @ANYRES32=r8, @ANYBLOB="9e4e0600c16e03002c001280110001006272696467655f736c617665000000001400058005001c0004"], 0x4c}, 0x1, 0x0, 0x0, 0x2400c881}, 0x200088c2) 2.701089981s ago: executing program 3 (id=5097): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) connect$802154_dgram(r0, &(0x7f0000000340)={0x24, @short={0x2, 0x1}}, 0x14) ioctl$DVB_DEMUX_DMX_GET_STC(r0, 0xc0106f32, &(0x7f0000000240)={0xfffffff7}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x8002) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f00000002c0)={0x0, 0x2, 0x9}) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000000)=@usbdevfs_driver={0x0, 0x80805517, 0x0}) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}, {0x0}], 0x2) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) listen(0xffffffffffffffff, 0x10000) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)}], 0x1) 2.603410199s ago: executing program 3 (id=5098): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) keyctl$join(0x1, &(0x7f00000000c0)={'syz', 0x0}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x50, 0x30, 0x9, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9}}}]}]}, 0x50}}, 0x0) io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0xc89f, 0x10, 0x0, 0xc9}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() getpriority(0x0, r2) sched_setattr(r2, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7ffd, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x118f}, 0x0) r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) r4 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) keyctl$read(0xb, r3, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, r3) r5 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x4, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f00000012c0)=0x2) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f00007ff000/0x2000)=nil) mremap(&(0x7f0000691000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000908000/0x1000)=nil) io_setup(0x2007, &(0x7f0000000980)) r6 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x4000) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f00000001c0)={0x28, 0x0, 0x0, 0x0, &(0x7f0000ba9000/0x2000)=nil, 0x2000, 0x4d0a}) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYBLOB="010026bd70000000000025000000180001801400020064756d"], 0x2c}, 0x1, 0x0, 0x0, 0x2008040}, 0x880) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.232091352s ago: executing program 0 (id=5099): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="e00000000a06010100000000000000000300000908000940800000010900020073797a31000000000500010007000000080009400000000588000880"], 0x13a}, 0x1, 0x0, 0x0, 0x2000c880}, 0x48084) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r2 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) mq_timedsend(r2, 0x0, 0x0, 0x8, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) socket$netlink(0x10, 0x3, 0x10) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x41) syz_open_dev$evdev(&(0x7f0000000180), 0x404, 0x60000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x42, 0x0) openat$ppp(0xffffff9c, &(0x7f00000003c0), 0x8000, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) ioctl$SOUND_MIXER_READ_CAPS(r4, 0x80044dfc, &(0x7f0000000140)) r6 = io_uring_setup(0x7c27, &(0x7f00000004c0)={0x0, 0xccd0, 0x800, 0xfffffffd, 0x17e}) io_uring_register$IORING_REGISTER_CLOCK(r6, 0x1d, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r4, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000002000)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f40)=ANY=[@ANYBLOB="100000010100000001000000", @ANYRES32], 0x10, 0xc898}}], 0x2, 0x48d0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000240)={0x81, 0x1, "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"}) 1.276231479s ago: executing program 3 (id=5103): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYBLOB="ad43f8fffffffbdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x8886}, 0x80) 1.275349106s ago: executing program 0 (id=5104): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x9618, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) ioctl$SOUND_PCM_READ_RATE(0xffffffffffffffff, 0x80045002, &(0x7f0000000140)) syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000300)={0x2, &(0x7f0000000340)=[{0xb1, 0x57, 0x0, 0xab49}, {0x6, 0x3, 0x6, 0x8}]}, 0x8) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) syz_extract_tcp_res(0x0, 0x6, 0x5) syz_emit_ethernet(0x30f, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)={0x0, 0x2, [0x4a1, 0xc34, 0xf62, 0x4b]}) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x800}, 0x0) syz_io_uring_setup(0x45, &(0x7f00000001c0)={0x0, 0xf20f, 0x100, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e4, 0x0) sendmmsg$inet6(r3, &(0x7f0000000800)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0xf}, 0x5}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000300)="e2", 0x1}], 0x1}}, {{&(0x7f0000000240)={0xa, 0x4e21, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xb}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000005c0)='j', 0x1}]}}], 0x2, 0x44) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e22, @multicast2}}}, &(0x7f0000000280)=0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x880b1) sendmsg$nl_generic(r4, 0x0, 0x42a33c354f860177) ioctl$TIOCSETD(r1, 0x5423, 0x0) 1.171344481s ago: executing program 3 (id=5105): socket$nl_route(0x10, 0x3, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x4903, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b2b, &(0x7f0000000040)={'wlan1\x00', @random="008000"}) ioctl(r0, 0x8b2a, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip_vti0\x00'}) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000080)=""/230) gettid() r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921"], 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10004, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r6, 0xa) syz_usb_control_io$hid(r2, &(0x7f0000000540)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x2, "288e51a1"}]}}, 0x0}, 0x0) 734.909106ms ago: executing program 8 (id=5109): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$inet(0x2, 0x3, 0x1) sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x0, @empty=0x1000000}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r1, @ANYRES32=r1, @ANYRES32=r1], 0x10}, 0x88800) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) write(r2, 0x0, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000040), 0x4) write$P9_RVERSION(r2, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0) sendmsg$tipc(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004094}, 0x5) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/softnet_stat\x00') exit(0xffff) write$eventfd(r4, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x62c40, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0x7, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) r7 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/ipc\x00') open_by_handle_at(r7, &(0x7f00000001c0)=ANY=[@ANYBLOB="20000000f10000000c000000000301c59bc42508d04e591f00000000"], 0x0) r8 = inotify_init() inotify_add_watch(r8, &(0x7f0000000180)='./file0\x00', 0x24) syz_fuse_handle_req(r5, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_INFO(r9, 0x0, 0x80, 0x0, &(0x7f0000000140)) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r10, &(0x7f00000004c0)={0x1f, 0x64, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xe, 0x1}, 0xe) 594.422ms ago: executing program 9 (id=5111): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000017000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000280)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x8, 0x4, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0xfffffc01, 0x0, r1}, 0x48) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0x1, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000300)={'syztnl0\x00', r3, 0x29, 0x4, 0x2b, 0x0, 0x24, @private0={0xfc, 0x0, '\x00', 0x1}, @local, 0x1, 0x700, 0x8, 0x5}}) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000480), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000000)={0x8002, 0x8, 0x101}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f00000001c0)={0x8, 0x8, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000080)={0x8, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000280)={0x40, 0x4, 0xc}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f0000000200)={r7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2, {r2}}, './file0\x00'}) r9 = syz_open_dev$mouse(&(0x7f0000000400), 0x7, 0x20000) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@ifindex=r3, 0x1f, 0x0, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@ifindex=r3, r8, 0x17, 0x0, r9, @void, @value, @void, @void, r10}, 0x20) socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r12 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r12, &(0x7f0000000080)={0x11, 0x800, r13, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x200080d4}, 0x4c014) setsockopt$SO_TIMESTAMP(r12, 0x1, 0x1d, &(0x7f0000000640)=0x1, 0x4) 533.334537ms ago: executing program 8 (id=5112): setns(0xc9, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="c628ff331497a868c576ca904c68d3118bcf66e1b628a2433e74cd5f100822843841f0c9ff86daaa9c34c544fedfde7989afb08f70f1f0983b8be6db1dd542299988398a42e6b7555d114b5e5bf97ea066cd2bbe6bdc43033535eefa92d0e490744b10efafc1859f918b838f861087b7ee5102877ecb6f2eb927f559f20aadc464b102b809474145a4f62de34d9dc344e6aa17f1", @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r2, 0x20) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r4) socket$netlink(0x10, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="6de55d34fa56"}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r6, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) openat$dlm_plock(0xffffff9c, &(0x7f0000000000), 0x141a00, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r7) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/midi1_num_groups\x00', 0x1, 0x0) write(r8, &(0x7f0000000600)="05", 0x1) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x84, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x40, 0x12, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0xae9}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0xffffffffffffff5c}]}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 501.950235ms ago: executing program 8 (id=5113): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) setns(0xc9, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="0413"], 0x4) 440.751289ms ago: executing program 8 (id=5114): write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a44000010203010902"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 421.632141ms ago: executing program 9 (id=5115): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) utimes(0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r1 = socket$key(0xf, 0x3, 0x2) sendto$inet(r1, &(0x7f0000000100)="1858cf4b7de292a2", 0x8, 0x20000000, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101) mount_setattr(r2, &(0x7f0000001d80)='.\x00', 0x8800, &(0x7f0000000240)={0x1, 0x4, 0x80000}, 0x20) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f00000014c0)={&(0x7f0000000140)=@x25, 0x80, &(0x7f0000001480)=[{0x0}], 0x1}, 0x4000000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0xffffffffffffff4d, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c000000130001000400000000000000000000004e29bb108db51cd0142409dbe9bbc13c1ec9fe4ca9b0aac1472d5750adc4d236a30b5f16ee94ba90f6ea195c261d239a82078d18003d07533eb31736c5fdaa62469213d378c9c0b1ec6d1c3971", @ANYRES32=r0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5, @ANYRES8=r0], 0x3c}, 0x1, 0x0, 0x0, 0x80040d0}, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ptrace(0x10, 0x1) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 324.627327ms ago: executing program 9 (id=5116): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1ff, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000040)=0x6) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080), 0x3) r2 = openat$cgroup_root(0xffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f0000000140)={'ipvs\x00'}, &(0x7f0000000180)=0x1e) io_uring_register$IORING_REGISTER_BUFFERS2(r3, 0xf, &(0x7f0000000480)={0x3, 0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000001c0)=""/245, 0xf5}, {&(0x7f00000002c0)=""/59, 0x3b}, {&(0x7f0000000300)=""/194, 0xc2}], &(0x7f0000000440)=[0x1, 0x2, 0x800, 0x8001, 0xf, 0x0]}, 0x20) r4 = openat$dsp1(0xffffff9c, &(0x7f00000004c0), 0x200440, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, &(0x7f0000000500)=0xa18) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000540)={{{@in=@initdev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@multicast2}}, &(0x7f0000000640)=0xe4) quotactl_fd$Q_GETNEXTQUOTA(r3, 0xffffffff80000900, r5, &(0x7f0000000680)) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000700)=@req={0xec51, 0xc7d, 0x0, 0x401}, 0x10) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000740)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000780), r6) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r7, 0x6628) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f00000007c0)={0x7ff, r1, 0x2}) ioctl$EVIOCSCLOCKID(r8, 0x400445a0, &(0x7f0000000800)=0x1) r9 = getegid() r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000880), r3) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r4, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x7c, r10, 0x10, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xe1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x1810}, 0x20080000) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000a00)=@security={'security\x00', 0xe, 0x4, 0x414, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x380, 0x380, 0x380, 0xffffffff, 0x4, &(0x7f00000009c0), {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0xff000000, 'veth1_vlan\x00', 'macvtap0\x00', {0xff}, {}, 0x33, 0x2, 0x2}, 0x0, 0xc0, 0x11c, 0x0, {}, [@common=@ah={{0x2c}, {[0x80, 0x8001]}}, @common=@inet=@socket3={{0x24}, 0x1}]}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0x5a3, 0xb, [0xb, 0xc, 0x32, 0x1c, 0x17, 0x31, 0x33, 0x18, 0x16, 0x2e, 0x15, 0x32, 0x9, 0x8, 0x32, 0x3c], 0x2, 0x9, 0xfc19}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x1c}, @multicast2, 0xffffffff, 0xffffffff, 'netdevsim0\x00', 'bond_slave_1\x00', {}, {0xff}, 0x1d, 0x2, 0x78}, 0x0, 0xb8, 0xdc, 0x0, {}, [@common=@ttl={{0x24}, {0x0, 0xe}}, @common=@icmp={{0x24}, {0xd, "c187"}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x8, 0x3, 0x7f}}}, {{@uncond, 0x0, 0x154, 0x188, 0x0, {}, [@common=@addrtype={{0x2c}, {0x0, 0x10c, 0x0, 0x1}}, @common=@unspec=@conntrack1={{0xb8}, {{@ipv4=@loopback, [0xff, 0xff000000, 0xff000000, 0xff000000], @ipv4=@broadcast, [0xff000000, 0x0, 0xff000000], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff000000, 0xff, 0xff], @ipv6=@mcast1, [0xff, 0xffffffff, 0xff000000, 0xff000000], 0x1, 0x2, 0x32, 0x4e24, 0x4e20, 0x4e24, 0x4e22, 0x1180, 0x300}, 0x0, 0x1}}]}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{0x2, 0x1, 0x4}, {0x4, 0x6, 0x3}, {0x4, 0x6, 0x5}, 0x9, 0x9}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x470) ioctl$NBD_DISCONNECT(r3, 0xab08) r11 = shmget(0x2, 0x1000, 0x20, &(0x7f0000ffc000/0x1000)=nil) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r8, 0xc018937b, &(0x7f0000000e80)={{0x1, 0x1, 0x18, r1, {r5, r9}}, './file0\x00'}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000ec0)={{{@in=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000fc0)=0xe4) shmctl$IPC_SET(r11, 0x1, &(0x7f0000001000)={{0x0, r5, r12, r13, r9, 0x20, 0x100}, 0x4, 0x0, 0x81a, 0x9, 0x0, 0x0, 0x9}) socket$nl_netfilter(0x10, 0x3, 0xc) 324.284206ms ago: executing program 9 (id=5117): syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@local, @remote, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @link_local, @loopback, @broadcast, @multicast1}}}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') read$FUSE(r3, &(0x7f0000000400)={0x2020}, 0x2020) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000ac0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r2, &(0x7f00000000c0), 0x2) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0x6c}}, 0x0) 173.856124ms ago: executing program 0 (id=5118): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c00)=@newtfilter={0x84, 0x2c, 0xd2f, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x58, 0x2, [@TCA_U32_SEL={0x54, 0x5, {0x4, 0x8, 0x4, 0x4, 0x2, 0x4, 0x6, 0x769, [{0x40, 0x2, 0x7ffffffe, 0x401}, {0xfffffff9, 0x9, 0x2, 0x8}, {0x7, 0x7, 0x101, 0x2}, {0x1, 0x6, 0xfffffffc, 0xffff}]}}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e, 0xffffffff}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) (fail_nth: 6) 2.806731ms ago: executing program 9 (id=5119): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) setns(0xc9, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/84, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="0413"], 0x4) 536.67µs ago: executing program 0 (id=5120): mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4006, &(0x7f0000000000)=0x4, 0x7, 0x2) syz_open_dev$hidraw(&(0x7f0000000280), 0x4, 0x90743) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc854}, 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) epoll_create(0x5) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(0x0, 0x0, 0x2) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x501, 0x70bd2c, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) sendmsg$NL80211_CMD_DEL_KEY(r2, 0x0, 0x24002000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4001) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000200)={@remote}, 0x14) 0s ago: executing program 9 (id=5121): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r0 = socket(0x2b, 0x1, 0xa0c7) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000040), &(0x7f00000000c0)=0x40) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'lo\x00'}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, 0x0, 0x1) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000240)={'pcl812\x00', [0x100, 0x4, 0x13600, 0x6, 0x0, 0x10005, 0x79, 0x3, 0x80008, 0x5, 0x2, 0x64, 0x7, 0x1, 0x6, 0xfd, 0x6, 0x9, 0x3, 0x7fffffff, 0xb740, 0xca9f, 0x9, 0x20001e58, 0x8, 0xf39e, 0x3, 0x1539b804, 0x7, 0x1, 0x2]}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe3a}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000008c00)=@delchain={0x1c, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x4020114}, 0x40000) socket(0xa, 0x3, 0x3a) openat$fuse(0xffffff9c, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x4a, 0x0, 0x84, 0xfffffffe}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000fe00bb9f00000000000000000000000000006d1835c0be4eec5b49c958de7fc5bcfebac76b8f530000000000000007e37736306ab221e4333d4ffbd323bf370d49094c55388fb3ae4cb6b108376a55b094f329c166371150c57bf82e415aa97276ad8e1ca405c8d0ee29e79833e3b15dfe72fa561ed8012a27132f351ba2b2cd5687b7cd0d31afc62dafb8962dae9eaa6c726b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x202, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x5, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) r7 = socket(0xa, 0x3, 0x3a) getsockopt$inet_mreqn(r7, 0x0, 0x24, 0x0, 0x0) kernel console output (not intermixed with test programs): tlink: 28 bytes leftover after parsing attributes in process `syz.3.4425'. [ 877.348778][T22960] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4426'. [ 877.508482][T22970] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4428'. [ 878.615520][T23015] FAULT_INJECTION: forcing a failure. [ 878.615520][T23015] name failslab, interval 1, probability 0, space 0, times 0 [ 878.626499][T23015] CPU: 3 UID: 0 PID: 23015 Comm: syz.3.4436 Tainted: G L syzkaller #0 PREEMPT(full) [ 878.626542][T23015] Tainted: [L]=SOFTLOCKUP [ 878.626548][T23015] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 878.626557][T23015] Call Trace: [ 878.626564][T23015] [ 878.626571][T23015] dump_stack_lvl+0x100/0x190 [ 878.626594][T23015] should_fail_ex.cold+0x5/0xa [ 878.626613][T23015] should_failslab+0xc2/0x120 [ 878.626635][T23015] __kmalloc_noprof+0xfc/0x820 [ 878.626652][T23015] ? stack_trace_save+0x8e/0xc0 [ 878.626674][T23015] ? fib_create_info+0x5bf/0x4640 [ 878.626699][T23015] fib_create_info+0x5bf/0x4640 [ 878.626733][T23015] ? netlink_deliver_tap+0xa4d/0xcc0 [ 878.626758][T23015] ? netlink_unicast+0x62b/0x850 [ 878.626769][T23015] ? netlink_sendmsg+0x8b0/0xda0 [ 878.626784][T23015] ? ____sys_sendmsg+0xa4d/0xbe0 [ 878.626799][T23015] ? ___sys_sendmsg+0x190/0x1e0 [ 878.626814][T23015] ? __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 878.626841][T23015] ? __pfx_fib_create_info+0x10/0x10 [ 878.626861][T23015] ? lock_acquire+0x1b9/0x370 [ 878.626888][T23015] fib_table_insert+0x169/0x1c70 [ 878.626913][T23015] ? trace_contention_end+0x126/0x160 [ 878.626930][T23015] ? __mutex_lock+0x26d/0x1bd0 [ 878.626949][T23015] ? inet_rtm_newroute+0x148/0x210 [ 878.626969][T23015] ? rcu_is_watching+0x12/0xc0 [ 878.626989][T23015] ? __pfx_fib_table_insert+0x10/0x10 [ 878.627012][T23015] ? lockdep_hardirqs_on+0x78/0x100 [ 878.627035][T23015] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 878.627059][T23015] ? rtm_to_fib_config+0x879/0x13b0 [ 878.627078][T23015] ? inet_rtm_newroute+0x172/0x210 [ 878.627097][T23015] inet_rtm_newroute+0x172/0x210 [ 878.627115][T23015] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 878.627144][T23015] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 878.627166][T23015] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 878.627186][T23015] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 878.627206][T23015] rtnetlink_rcv_msg+0x95e/0xe90 [ 878.627231][T23015] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 878.627261][T23015] ? ref_tracker_free+0x37e/0x6c0 [ 878.627286][T23015] netlink_rcv_skb+0x159/0x420 [ 878.627303][T23015] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 878.627327][T23015] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 878.627352][T23015] ? netlink_deliver_tap+0x1ae/0xcc0 [ 878.627378][T23015] netlink_unicast+0x585/0x850 [ 878.627399][T23015] ? __pfx_netlink_unicast+0x10/0x10 [ 878.627423][T23015] netlink_sendmsg+0x8b0/0xda0 [ 878.627463][T23015] ? __pfx_netlink_sendmsg+0x10/0x10 [ 878.627483][T23015] ? apparmor_socket_sendmsg+0x15b/0x270 [ 878.627505][T23015] ____sys_sendmsg+0xa4d/0xbe0 [ 878.627519][T23015] ? __pfx_netlink_sendmsg+0x10/0x10 [ 878.627538][T23015] ? __pfx_____sys_sendmsg+0x10/0x10 [ 878.627559][T23015] ? _kstrtoull+0x13c/0x1f0 [ 878.627576][T23015] ? __pfx__kstrtoull+0x10/0x10 [ 878.627593][T23015] ___sys_sendmsg+0x190/0x1e0 [ 878.627613][T23015] ? __pfx____sys_sendmsg+0x10/0x10 [ 878.627628][T23015] ? __lock_acquire+0x49f/0x1a40 [ 878.627675][T23015] __sys_sendmmsg+0x309/0x440 [ 878.627700][T23015] ? __pfx___sys_sendmmsg+0x10/0x10 [ 878.627724][T23015] ? find_held_lock+0x2b/0x80 [ 878.627750][T23015] ? __mutex_unlock_slowpath+0x35d/0x930 [ 878.627777][T23015] ? fput+0x79/0x100 [ 878.627795][T23015] ? ksys_write+0x1ac/0x250 [ 878.627815][T23015] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 878.627839][T23015] ? lockdep_hardirqs_on+0x78/0x100 [ 878.627857][T23015] __do_fast_syscall_32+0xe7/0x970 [ 878.627877][T23015] ? lockdep_hardirqs_on+0x78/0x100 [ 878.627897][T23015] do_fast_syscall_32+0x32/0x70 [ 878.627913][T23015] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 878.627934][T23015] RIP: 0023:0xf6ffefec [ 878.627954][T23015] Code: Unable to access opcode bytes at 0xf6ffefc2. [ 878.627962][T23015] RSP: 002b:00000000f53ed50c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 878.627977][T23015] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 878.627988][T23015] RDX: 0000000000000235 RSI: 0000000000000000 RDI: 0000000000000000 [ 878.627995][T23015] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 878.628002][T23015] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 878.628012][T23015] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 878.628034][T23015] [ 878.865218][T23020] 9pnet_virtio: no channels available for device syz [ 879.665690][T23035] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4442'. [ 879.677833][T23035] ptrace attach of "/syz-executor exec"[20880] was attempted by "/syz-executor exec"[23035] [ 879.851042][T23042] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 879.859661][T23042] fuse: Bad value for 'fd' [ 880.127971][T23060] IPv6: NLM_F_CREATE should be specified when creating new route [ 880.271228][T23059] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4451'. [ 880.626705][ T29] IPVS: starting estimator thread 0... [ 880.729551][T23072] IPVS: using max 26 ests per chain, 62400 per kthread [ 881.284684][T23102] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4458'. [ 881.571194][T23091] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4457'. [ 881.734835][T23116] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.749156][T23116] netdevsim netdevsim8 eth3 (unregistering): unset [1, 1] type 2 family 0 port 43038 - 0 [ 881.842067][T23116] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.845659][T23116] netdevsim netdevsim8 eth2 (unregistering): unset [1, 1] type 2 family 0 port 43038 - 0 [ 881.964925][T23116] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.969223][T23116] netdevsim netdevsim8 eth1 (unregistering): unset [1, 1] type 2 family 0 port 43038 - 0 [ 882.060803][T23116] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.064439][T23116] netdevsim netdevsim8 eth0 (unregistering): unset [1, 1] type 2 family 0 port 43038 - 0 [ 882.227356][T23125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4462'. [ 882.240354][T23125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4462'. [ 882.244004][T23125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4462'. [ 882.254109][T23125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4462'. [ 882.258318][T23125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4462'. [ 883.428604][ T12] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 43038 - 0 [ 883.432162][ T12] netdevsim netdevsim8 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 883.458668][T23131] bond1: peer notification delay (512) is not a multiple of miimon (5), value rounded to 510 ms [ 883.505412][T23131] bond1 (unregistering): Released all slaves [ 883.590122][T23128] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4463'. [ 883.607606][T23138] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4466'. [ 883.714794][T12740] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 43038 - 0 [ 883.718399][T12740] netdevsim netdevsim8 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 883.722687][T12740] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 43038 - 0 [ 883.725407][T12740] netdevsim netdevsim8 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 883.843262][T23146] FAULT_INJECTION: forcing a failure. [ 883.843262][T23146] name failslab, interval 1, probability 0, space 0, times 0 [ 883.847356][T23146] CPU: 1 UID: 0 PID: 23146 Comm: syz.7.4467 Tainted: G L syzkaller #0 PREEMPT(full) [ 883.847375][T23146] Tainted: [L]=SOFTLOCKUP [ 883.847379][T23146] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 883.847386][T23146] Call Trace: [ 883.847390][T23146] [ 883.847395][T23146] dump_stack_lvl+0x100/0x190 [ 883.847413][T23146] should_fail_ex.cold+0x5/0xa [ 883.847445][T23146] should_failslab+0xc2/0x120 [ 883.847461][T23146] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 883.847476][T23146] ? alloc_vmap_area+0x640/0x2bb0 [ 883.847494][T23146] alloc_vmap_area+0x640/0x2bb0 [ 883.847512][T23146] ? kasan_save_track+0x14/0x30 [ 883.847526][T23146] ? __kasan_kmalloc+0xaa/0xb0 [ 883.847540][T23146] ? __pfx_alloc_vmap_area+0x10/0x10 [ 883.847556][T23146] ? __get_vm_area_node+0x101/0x330 [ 883.847574][T23146] __get_vm_area_node+0x1ca/0x330 [ 883.847592][T23146] __vmalloc_node_range_noprof+0x228/0x1630 [ 883.847610][T23146] ? vmalloc_array_noprof+0x43/0x70 [ 883.847625][T23146] ? __lock_acquire+0x49f/0x1a40 [ 883.847646][T23146] ? vmalloc_array_noprof+0x43/0x70 [ 883.847663][T23146] ? find_held_lock+0x2b/0x80 [ 883.847677][T23146] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 883.847694][T23146] ? is_bpf_text_address+0x8a/0x1a0 [ 883.847710][T23146] ? bpf_ksym_find+0x124/0x1c0 [ 883.847723][T23146] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 883.847739][T23146] ? is_bpf_text_address+0x94/0x1a0 [ 883.847755][T23146] ? kernel_text_address+0x8d/0x100 [ 883.847774][T23146] ? vmalloc_array_noprof+0x43/0x70 [ 883.847787][T23146] __vmalloc_node_noprof+0xad/0xf0 [ 883.847804][T23146] ? vmalloc_array_noprof+0x43/0x70 [ 883.847819][T23146] __vmalloc_noprof+0xa3/0x120 [ 883.847836][T23146] ? __pfx___vmalloc_noprof+0x10/0x10 [ 883.847855][T23146] ? find_held_lock+0x2b/0x80 [ 883.847869][T23146] ? __might_fault+0xc5/0x140 [ 883.847881][T23146] vmalloc_array_noprof+0x43/0x70 [ 883.847895][T23146] do_update_counters.constprop.0+0x53/0x9c0 [ 883.847913][T23146] update_counters+0x127/0x1c0 [ 883.847926][T23146] ? __pfx_update_counters+0x10/0x10 [ 883.847947][T23146] do_ebt_set_ctl+0x2c5/0x4a0 [ 883.847961][T23146] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 883.847979][T23146] ? nf_sockopt_find.isra.0+0x222/0x290 [ 883.847996][T23146] nf_setsockopt+0x8d/0xf0 [ 883.848010][T23146] ip_setsockopt+0xcb/0xf0 [ 883.848027][T23146] raw_setsockopt+0x60/0x1b0 [ 883.848042][T23146] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 883.848062][T23146] do_sock_setsockopt+0xf3/0x1d0 [ 883.848081][T23146] __sys_setsockopt+0x119/0x190 [ 883.848103][T23146] __ia32_sys_setsockopt+0xbc/0x160 [ 883.848117][T23146] ? __do_fast_syscall_32+0x98/0x970 [ 883.848132][T23146] ? lockdep_hardirqs_on+0x78/0x100 [ 883.848145][T23146] __do_fast_syscall_32+0xe7/0x970 [ 883.848158][T23146] ? lockdep_hardirqs_on+0x78/0x100 [ 883.848172][T23146] do_fast_syscall_32+0x32/0x70 [ 883.848190][T23146] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 883.848209][T23146] RIP: 0023:0xf7fe2fec [ 883.848223][T23146] Code: Unable to access opcode bytes at 0xf7fe2fc2. [ 883.848228][T23146] RSP: 002b:00000000f548550c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 883.848239][T23146] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 883.848246][T23146] RDX: 0000000000000081 RSI: 0000000080000240 RDI: 0000000000000088 [ 883.848255][T23146] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 883.848263][T23146] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 883.848270][T23146] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 883.848284][T23146] [ 883.848301][T23146] syz.7.4467: vmalloc error: size 16, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null) [ 883.961966][T12740] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 43038 - 0 [ 883.969653][T12740] netdevsim netdevsim8 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 883.986475][T23146] ,cpuset=/,mems_allowed=0-1 [ 883.987969][T23146] CPU: 1 UID: 0 PID: 23146 Comm: syz.7.4467 Tainted: G L syzkaller #0 PREEMPT(full) [ 883.987987][T23146] Tainted: [L]=SOFTLOCKUP [ 883.987991][T23146] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 883.987998][T23146] Call Trace: [ 883.988003][T23146] [ 883.988007][T23146] dump_stack_lvl+0x100/0x190 [ 883.988024][T23146] warn_alloc.cold+0x94/0xa8 [ 883.988036][T23146] ? __pfx_warn_alloc+0x10/0x10 [ 883.988048][T23146] ? lockdep_hardirqs_on+0x78/0x100 [ 883.988063][T23146] ? __get_vm_area_node+0x2cd/0x330 [ 883.988083][T23146] ? __get_vm_area_node+0x208/0x330 [ 883.988106][T23146] __vmalloc_node_range_noprof+0xccd/0x1630 [ 883.988138][T23146] ? __lock_acquire+0x49f/0x1a40 [ 883.988159][T23146] ? vmalloc_array_noprof+0x43/0x70 [ 883.988176][T23146] ? find_held_lock+0x2b/0x80 [ 883.988190][T23146] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 883.988207][T23146] ? is_bpf_text_address+0x8a/0x1a0 [ 883.988223][T23146] ? bpf_ksym_find+0x124/0x1c0 [ 883.988236][T23146] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 883.988253][T23146] ? is_bpf_text_address+0x94/0x1a0 [ 883.988269][T23146] ? kernel_text_address+0x8d/0x100 [ 883.988287][T23146] ? vmalloc_array_noprof+0x43/0x70 [ 883.988300][T23146] __vmalloc_node_noprof+0xad/0xf0 [ 883.988317][T23146] ? vmalloc_array_noprof+0x43/0x70 [ 883.988332][T23146] __vmalloc_noprof+0xa3/0x120 [ 883.988349][T23146] ? __pfx___vmalloc_noprof+0x10/0x10 [ 883.988368][T23146] ? find_held_lock+0x2b/0x80 [ 883.988381][T23146] ? __might_fault+0xc5/0x140 [ 883.988394][T23146] vmalloc_array_noprof+0x43/0x70 [ 883.988408][T23146] do_update_counters.constprop.0+0x53/0x9c0 [ 883.988427][T23146] update_counters+0x127/0x1c0 [ 883.988440][T23146] ? __pfx_update_counters+0x10/0x10 [ 883.988461][T23146] do_ebt_set_ctl+0x2c5/0x4a0 [ 883.988475][T23146] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 883.988493][T23146] ? nf_sockopt_find.isra.0+0x222/0x290 [ 883.988509][T23146] nf_setsockopt+0x8d/0xf0 [ 883.988524][T23146] ip_setsockopt+0xcb/0xf0 [ 883.988541][T23146] raw_setsockopt+0x60/0x1b0 [ 883.988556][T23146] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 883.988574][T23146] do_sock_setsockopt+0xf3/0x1d0 [ 883.988594][T23146] __sys_setsockopt+0x119/0x190 [ 883.988611][T23146] __ia32_sys_setsockopt+0xbc/0x160 [ 883.988625][T23146] ? __do_fast_syscall_32+0x98/0x970 [ 883.988639][T23146] ? lockdep_hardirqs_on+0x78/0x100 [ 883.988651][T23146] __do_fast_syscall_32+0xe7/0x970 [ 883.988665][T23146] ? lockdep_hardirqs_on+0x78/0x100 [ 883.988679][T23146] do_fast_syscall_32+0x32/0x70 [ 883.988694][T23146] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 883.988708][T23146] RIP: 0023:0xf7fe2fec [ 883.988722][T23146] Code: Unable to access opcode bytes at 0xf7fe2fc2. [ 883.988727][T23146] RSP: 002b:00000000f548550c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 883.988738][T23146] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 883.988745][T23146] RDX: 0000000000000081 RSI: 0000000080000240 RDI: 0000000000000088 [ 883.988752][T23146] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 883.988758][T23146] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 883.988764][T23146] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 883.988778][T23146] [ 883.988812][T23146] Mem-Info: [ 884.099624][T23145] bond1 (unregistering): Released all slaves [ 884.100430][T23146] active_anon:10825 inactive_anon:6418 isolated_anon:0 [ 884.100430][T23146] active_file:5504 inactive_file:16815 isolated_file:0 [ 884.100430][T23146] unevictable:1768 dirty:415 writeback:0 [ 884.100430][T23146] slab_reclaimable:7551 slab_unreclaimable:74339 [ 884.100430][T23146] mapped:24347 shmem:14918 pagetables:1978 [ 884.100430][T23146] sec_pagetables:338 bounce:0 [ 884.100430][T23146] kernel_misc_reclaimable:0 [ 884.100430][T23146] free:28664 free_pcp:5345 free_cma:0 [ 884.125431][T23146] Node 0 active_anon:18660kB inactive_anon:28kB active_file:0kB inactive_file:6208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:20196kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8256kB pagetables:1124kB sec_pagetables:1132kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 884.140457][T23146] Node 1 active_anon:24640kB inactive_anon:25644kB active_file:22016kB inactive_file:61052kB unevictable:5536kB isolated(anon):0kB isolated(file):0kB mapped:97360kB dirty:1760kB writeback:0kB shmem:39476kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:10348kB pagetables:6788kB sec_pagetables:220kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 884.186207][T23146] Node 0 DMA free:3460kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 884.202891][T23146] lowmem_reserve[]: 0 280 280 280 280 [ 884.204757][T23146] Node 0 DMA32 free:20716kB boost:28732kB min:41504kB low:44696kB high:47888kB reserved_highatomic:2048KB free_highatomic:728KB active_anon:18660kB inactive_anon:28kB active_file:0kB inactive_file:6208kB unevictable:1536kB writepending:0kB zspages:3292kB present:1032196kB managed:286968kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 884.216173][T23146] lowmem_reserve[]: 0 0 0 0 0 [ 884.217707][T23146] Node 1 DMA32 free:90384kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24536kB inactive_anon:25644kB active_file:22016kB inactive_file:61060kB unevictable:5536kB writepending:1752kB zspages:4440kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:21684kB local_pcp:1224kB free_cma:0kB [ 884.229954][T23146] lowmem_reserve[]: 0 0 0 0 0 [ 884.231463][T23146] Node 0 DMA: 285*4kB (U) 10*8kB (U) 8*16kB (U) 14*32kB (U) 6*64kB (U) 0*128kB 1*256kB (U) 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 3460kB [ 884.235892][T23146] Node 0 DMA32: 501*4kB (UMH) 7*8kB (MH) 46*16kB (UH) 264*32kB (UEH) 68*64kB (UEH) 16*128kB (UE) 0*256kB 2*512kB (UE) 0*1024kB 1*2048kB (U) 0*4096kB = 20716kB [ 884.242740][T23146] Node 1 DMA32: 138*4kB (UME) 359*8kB (UME) 187*16kB (UME) 221*32kB (UM) 132*64kB (UME) 98*128kB (UME) 98*256kB (UME) 26*512kB (UME) 13*1024kB (UM) 2*2048kB (UM) 0*4096kB = 90288kB [ 884.248582][T23146] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 884.251746][T23146] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 884.254612][T23146] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 884.257693][T23146] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 884.261925][T23146] 38793 total pagecache pages [ 884.263888][T23146] 1542 pages in swap cache [ 884.265687][T23146] Free swap = 93248kB [ 884.267882][T23146] Total swap = 124996kB [ 884.269647][T23146] 524155 pages RAM [ 884.271209][T23146] 0 pages HighMem/MovableOnly [ 884.273137][T23146] 211520 pages reserved [ 884.274812][T23146] 0 pages cma reserved [ 885.479901][T23214] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.4476' sets config #24 [ 885.576517][ T91] usb 12-1: new full-speed USB device number 6 using dummy_hcd [ 885.763834][ T91] usb 12-1: config 0 has an invalid interface number: 8 but max is 0 [ 885.767172][ T91] usb 12-1: config 0 has no interface number 0 [ 885.769707][ T91] usb 12-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 885.774258][ T91] usb 12-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 885.780014][ T91] usb 12-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 885.785633][ T91] usb 12-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 885.791747][ T91] usb 12-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 885.795126][ T91] usb 12-1: Product: syz [ 885.799047][ T91] usb 12-1: SerialNumber: syz [ 885.818299][ T91] usb 12-1: config 0 descriptor?? [ 885.828148][ T91] cm109 12-1:0.8: invalid payload size 0, expected 4 [ 885.833042][ T91] input: CM109 USB driver as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.8/input/input115 [ 885.929498][T23220] bridge0: port 3(dummy0) entered disabled state [ 885.931685][T23220] bridge0: port 2(bridge_slave_1) entered disabled state [ 885.934169][T23220] bridge0: port 1(bridge_slave_0) entered disabled state [ 886.120621][T23220] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 886.155568][T23220] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 886.233960][T23220] 0·: left allmulticast mode [ 886.236367][T23220] hsr_slave_0: left allmulticast mode [ 886.238156][T23220] hsr_slave_1: left allmulticast mode [ 886.289150][T23220] ipvlan0: left allmulticast mode [ 886.290929][T23220] veth0_vlan: left allmulticast mode [ 886.332918][T23220] geneve2: left allmulticast mode [ 886.342706][T23220] bond4: left promiscuous mode [ 886.344710][T23220] bridge1: left promiscuous mode [ 886.361959][T23220] geneve3: left promiscuous mode [ 886.368032][T23220] bridge2: left promiscuous mode [ 886.373627][T23219] tipc: Started in network mode [ 886.376161][T23219] tipc: Node identity d26db566706, cluster identity 4711 [ 886.379571][T23219] tipc: Enabled bearer , priority 0 [ 886.400971][T23223] syzkaller0: entered promiscuous mode [ 886.405570][T23223] syzkaller0: entered allmulticast mode [ 886.412145][T23224] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 886.448345][T23227] tipc: Resetting bearer [ 886.453817][ T13] netdevsim netdevsim8 eth0: unset [1, 0] type 2 family 0 port 43038 - 0 [ 886.458530][ T13] netdevsim netdevsim8 eth1: unset [1, 0] type 2 family 0 port 43038 - 0 [ 886.479709][ T13] netdevsim netdevsim8 eth2: unset [1, 0] type 2 family 0 port 43038 - 0 [ 886.483506][ T13] netdevsim netdevsim8 eth3: unset [1, 0] type 2 family 0 port 43038 - 0 [ 886.589044][T23218] tipc: Resetting bearer [ 886.615496][T23218] tipc: Disabling bearer [ 886.841561][T23240] syzkaller0: entered promiscuous mode [ 886.843977][T23240] syzkaller0: entered allmulticast mode [ 886.878155][T23240] FAULT_INJECTION: forcing a failure. [ 886.878155][T23240] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 886.883609][T23240] CPU: 2 UID: 0 PID: 23240 Comm: syz.0.4483 Tainted: G L syzkaller #0 PREEMPT(full) [ 886.883637][T23240] Tainted: [L]=SOFTLOCKUP [ 886.883645][T23240] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 886.883657][T23240] Call Trace: [ 886.883664][T23240] [ 886.883671][T23240] dump_stack_lvl+0x100/0x190 [ 886.883696][T23240] should_fail_ex.cold+0x5/0xa [ 886.883719][T23240] _copy_from_iter+0x1f4/0x1690 [ 886.883748][T23240] ? _copy_from_iter+0x350/0x1690 [ 886.883773][T23240] ? _copy_from_iter+0x270/0x1690 [ 886.883801][T23240] ? __pfx__copy_from_iter+0x10/0x10 [ 886.883831][T23240] ? __pfx__copy_from_iter+0x10/0x10 [ 886.883857][T23240] ? _copy_from_iter+0x270/0x1690 [ 886.883888][T23240] copy_page_from_iter+0x238/0x300 [ 886.883918][T23240] skb_copy_datagram_from_iter+0x399/0x720 [ 886.883948][T23240] packet_sendmsg+0x227e/0x5100 [ 886.883985][T23240] ? aa_sk_perm+0x309/0xaa0 [ 886.884014][T23240] ? __pfx_aa_sk_perm+0x10/0x10 [ 886.884037][T23240] ? __pfx_packet_sendmsg+0x10/0x10 [ 886.884057][T23240] ? __might_fault+0xc5/0x140 [ 886.884084][T23240] ? apparmor_socket_sendmsg+0x15b/0x270 [ 886.884108][T23240] __sys_sendto+0x48b/0x4e0 [ 886.884128][T23240] ? __pfx_packet_sendmsg+0x10/0x10 [ 886.884150][T23240] ? __pfx___sys_sendto+0x10/0x10 [ 886.884190][T23240] ? fput+0x79/0x100 [ 886.884211][T23240] ? ksys_write+0x1ac/0x250 [ 886.884236][T23240] __ia32_sys_sendto+0xdd/0x1b0 [ 886.884256][T23240] ? __do_fast_syscall_32+0x98/0x970 [ 886.884280][T23240] ? lockdep_hardirqs_on+0x78/0x100 [ 886.884299][T23240] __do_fast_syscall_32+0xe7/0x970 [ 886.884320][T23240] ? lockdep_hardirqs_on+0x78/0x100 [ 886.884344][T23240] do_fast_syscall_32+0x32/0x70 [ 886.884365][T23240] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 886.884389][T23240] RIP: 0023:0xf709efec [ 886.884408][T23240] Code: Unable to access opcode bytes at 0xf709efc2. [ 886.884416][T23240] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000171 [ 886.884434][T23240] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 886.884446][T23240] RDX: 000000000000fdef RSI: 0000000000000004 RDI: 0000000080000140 [ 886.884456][T23240] RBP: 0000000000000014 R08: 0000000000000000 R09: 0000000000000000 [ 886.884468][T23240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 886.884477][T23240] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 886.884501][T23240] [ 888.252394][T23260] ebtables: wrong size: *len 168, entries_size 48, replsz 48 [ 888.365429][ T29] libceph: connect (1)[c::]:6789 error -101 [ 888.369589][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 888.384808][T23266] FAULT_INJECTION: forcing a failure. [ 888.384808][T23266] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 888.389268][T23266] CPU: 0 UID: 0 PID: 23266 Comm: syz.0.4487 Tainted: G L syzkaller #0 PREEMPT(full) [ 888.389288][T23266] Tainted: [L]=SOFTLOCKUP [ 888.389292][T23266] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 888.389299][T23266] Call Trace: [ 888.389303][T23266] [ 888.389308][T23266] dump_stack_lvl+0x100/0x190 [ 888.389354][T23266] should_fail_ex.cold+0x5/0xa [ 888.389365][T23266] ? prepare_alloc_pages+0x16d/0x5f0 [ 888.389383][T23266] should_fail_alloc_page+0xeb/0x140 [ 888.389400][T23266] prepare_alloc_pages+0x1f0/0x5f0 [ 888.389418][T23266] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 888.389434][T23266] ? rcu_is_watching+0x12/0xc0 [ 888.389449][T23266] ? trace_mm_page_alloc+0x164/0x1c0 [ 888.389465][T23266] ? __alloc_frozen_pages_noprof+0x2d1/0x2dc0 [ 888.389480][T23266] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 888.389495][T23266] ? stack_trace_save+0x8e/0xc0 [ 888.389510][T23266] ? __pfx_stack_trace_save+0x10/0x10 [ 888.389526][T23266] ? stack_depot_save_flags+0x27/0x9d0 [ 888.389544][T23266] ? is_bpf_text_address+0x94/0x1a0 [ 888.389560][T23266] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 888.389575][T23266] ? __kasan_slab_alloc+0x89/0x90 [ 888.389589][T23266] ? kmem_cache_alloc_node_noprof+0x27d/0x6b0 [ 888.389603][T23266] ? alloc_vmap_area+0x182f/0x2bb0 [ 888.389617][T23266] ? __get_vm_area_node+0x1ca/0x330 [ 888.389631][T23266] ? __vmalloc_node_range_noprof+0x228/0x1630 [ 888.389648][T23266] ? __vmalloc_node_noprof+0xad/0xf0 [ 888.389668][T23266] ? __vmalloc_noprof+0xa3/0x120 [ 888.389683][T23266] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 888.389698][T23266] ? bpf_prog_alloc+0x3b/0x200 [ 888.389711][T23266] ? bpf_prog_create_from_user+0xb4/0x2f0 [ 888.389729][T23266] ? do_seccomp+0x7f7/0x2740 [ 888.389740][T23266] ? __do_fast_syscall_32+0xe7/0x970 [ 888.389755][T23266] ? do_fast_syscall_32+0x32/0x70 [ 888.389768][T23266] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 888.389786][T23266] alloc_pages_bulk_noprof+0x5de/0x13c0 [ 888.389802][T23266] ? policy_nodemask+0xed/0x4f0 [ 888.389819][T23266] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 888.389841][T23266] __kasan_populate_vmalloc+0xf0/0x210 [ 888.389857][T23266] alloc_vmap_area+0x95d/0x2bb0 [ 888.389876][T23266] ? kasan_save_track+0x14/0x30 [ 888.389890][T23266] ? __kasan_kmalloc+0xaa/0xb0 [ 888.389904][T23266] ? __pfx_alloc_vmap_area+0x10/0x10 [ 888.389920][T23266] ? __get_vm_area_node+0x101/0x330 [ 888.389937][T23266] __get_vm_area_node+0x1ca/0x330 [ 888.389956][T23266] __vmalloc_node_range_noprof+0x228/0x1630 [ 888.389974][T23266] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 888.389990][T23266] ? stack_trace_save+0x8e/0xc0 [ 888.390005][T23266] ? __pfx_stack_trace_save+0x10/0x10 [ 888.390021][T23266] ? stack_depot_save_flags+0x27/0x9d0 [ 888.390039][T23266] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 888.390055][T23266] ? kasan_save_stack+0x3f/0x50 [ 888.390068][T23266] ? kasan_save_stack+0x30/0x50 [ 888.390082][T23266] ? do_seccomp+0x7ae/0x2740 [ 888.390093][T23266] ? __do_fast_syscall_32+0xe7/0x970 [ 888.390107][T23266] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 888.390131][T23266] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 888.390146][T23266] __vmalloc_node_noprof+0xad/0xf0 [ 888.390163][T23266] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 888.390180][T23266] __vmalloc_noprof+0xa3/0x120 [ 888.390197][T23266] ? __pfx___vmalloc_noprof+0x10/0x10 [ 888.390218][T23266] bpf_prog_alloc_no_stats+0x58/0x640 [ 888.390236][T23266] bpf_prog_alloc+0x3b/0x200 [ 888.390251][T23266] bpf_prog_create_from_user+0xb4/0x2f0 [ 888.390270][T23266] ? __pfx_seccomp_check_filter+0x10/0x10 [ 888.390283][T23266] do_seccomp+0x7f7/0x2740 [ 888.390296][T23266] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 888.390311][T23266] ? __fget_files+0x21f/0x3d0 [ 888.390322][T23266] ? __pfx_do_seccomp+0x10/0x10 [ 888.390335][T23266] ? fput+0x79/0x100 [ 888.390348][T23266] ? ksys_write+0x1ac/0x250 [ 888.390358][T23266] ? __pfx_ksys_write+0x10/0x10 [ 888.390371][T23266] __do_fast_syscall_32+0xe7/0x970 [ 888.390385][T23266] ? lockdep_hardirqs_on+0x78/0x100 [ 888.390400][T23266] do_fast_syscall_32+0x32/0x70 [ 888.390414][T23266] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 888.390429][T23266] RIP: 0023:0xf709efec [ 888.390443][T23266] Code: Unable to access opcode bytes at 0xf709efc2. [ 888.390449][T23266] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000162 [ 888.390460][T23266] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000000008 [ 888.390467][T23266] RDX: 0000000080000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 888.390474][T23266] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 888.390480][T23266] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 888.390486][T23266] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 888.390500][T23266] [ 888.420788][T23262] ceph: No mds server is up or the cluster is laggy [ 888.632104][T23261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 888.635338][T23261] 8021q: adding VLAN 0 to HW filter on device team0 [ 888.647257][T23261] bridge0: port 3(dummy0) entered blocking state [ 888.650959][T23261] bridge0: port 3(dummy0) entered forwarding state [ 888.664921][T23261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 888.708591][ C0] cm109_urb_ctl_callback: 3 callbacks suppressed [ 888.708613][ C0] cm109 12-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 888.709659][T16966] usb 12-1: USB disconnect, device number 6 [ 888.710606][ C0] cm109 12-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 888.720746][T23261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 888.772261][T23261] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 888.818043][T16966] cm109 12-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 888.824010][T23261] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 888.828793][T23261] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 888.863547][T23261] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 888.915466][ T6773] bridge0: port 1(bridge_slave_0) entered blocking state [ 888.917796][ T6773] bridge0: port 1(bridge_slave_0) entered forwarding state [ 888.973339][ T6773] bridge0: port 2(bridge_slave_1) entered blocking state [ 888.975605][ T6773] bridge0: port 2(bridge_slave_1) entered forwarding state [ 889.331106][T23287] syzkaller0: entered promiscuous mode [ 889.332846][T23287] syzkaller0: entered allmulticast mode [ 889.371010][ T2126] block nbd1: Possible stuck request ffff888027397000: control (read@0,1024B). Runtime 330 seconds [ 889.755857][T16966] usb 12-1: new high-speed USB device number 7 using dummy_hcd [ 889.917465][T16966] usb 12-1: Using ep0 maxpacket: 8 [ 889.920860][T16966] usb 12-1: config 0 has an invalid interface number: 55 but max is 0 [ 889.923533][T16966] usb 12-1: config 0 has no interface number 0 [ 889.925447][T16966] usb 12-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 889.945967][T16966] usb 12-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 889.955934][T16966] usb 12-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 889.963524][T16966] usb 12-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 889.976003][T16966] usb 12-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 889.978893][T16966] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.988856][T16966] usb 12-1: config 0 descriptor?? [ 889.998180][T16966] ldusb 12-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 890.237705][ T29] usb 12-1: USB disconnect, device number 7 [ 890.267461][ T29] ldusb 12-1:0.55: LD USB Device #0 now disconnected [ 890.656133][ T91] usb 13-1: new full-speed USB device number 30 using dummy_hcd [ 890.665836][ T29] usb 12-1: new high-speed USB device number 8 using dummy_hcd [ 890.820354][ T29] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 890.829198][ T29] usb 12-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 890.838066][ T91] usb 13-1: config 0 has an invalid interface number: 205 but max is 0 [ 890.841647][ T91] usb 13-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 890.847693][ T91] usb 13-1: config 0 has no interface number 0 [ 890.848316][ T29] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.850388][ T91] usb 13-1: config 0 interface 205 has no altsetting 0 [ 890.869763][ T29] usb 12-1: config 0 descriptor?? [ 890.872867][ T91] usb 13-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 890.884334][ T91] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 890.891492][ T91] usb 13-1: Product: syz [ 890.896716][ T91] usb 13-1: Manufacturer: syz [ 890.898798][ T91] usb 13-1: SerialNumber: syz [ 890.915217][ T91] usb 13-1: config 0 descriptor?? [ 890.942146][ T91] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 890.957027][ T91] dvb-usb: bulk message failed: -22 (3/0) [ 890.990407][ T91] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 890.996977][ T91] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 891.008914][ T91] usb 13-1: media controller created [ 891.013467][ T91] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 891.031696][ T91] dvb-usb: bulk message failed: -22 (6/0) [ 891.044677][ T91] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 891.058065][ T91] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb13/13-1/input/input116 [ 891.072534][ T91] dvb-usb: schedule remote query interval to 150 msecs. [ 891.079972][ T91] dvb-usb: bulk message failed: -22 (3/0) [ 891.220908][ T91] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 891.246289][ T91] dvb-usb: bulk message failed: -22 (1/0) [ 891.259293][ T91] dvb-usb: error while querying for an remote control event. [ 891.440627][ T6899] dvb-usb: bulk message failed: -22 (1/0) [ 891.446386][ T6899] dvb-usb: error while querying for an remote control event. [ 891.617482][ T6899] dvb-usb: bulk message failed: -22 (1/0) [ 891.622246][ T6899] dvb-usb: error while querying for an remote control event. [ 891.785851][ T6899] dvb-usb: bulk message failed: -22 (1/0) [ 891.788409][ T6899] dvb-usb: error while querying for an remote control event. [ 891.854322][T23318] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 891.857040][T23318] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 891.873161][T23318] vhci_hcd vhci_hcd.0: Device attached [ 891.956165][ T6899] dvb-usb: bulk message failed: -22 (1/0) [ 891.958667][ T6899] dvb-usb: error while querying for an remote control event. [ 891.961318][T23323] syzkaller0: entered promiscuous mode [ 891.964444][T23323] syzkaller0: entered allmulticast mode [ 892.077804][ T29] usbhid 12-1:0.0: can't add hid device: -71 [ 892.100016][ T29] usbhid 12-1:0.0: probe with driver usbhid failed with error -71 [ 892.118350][ T6899] dvb-usb: bulk message failed: -22 (1/0) [ 892.123767][ T6899] dvb-usb: error while querying for an remote control event. [ 892.129867][ T29] usb 12-1: USB disconnect, device number 8 [ 892.149201][ T5826] usb 38-1: SetAddress Request (18) to port 0 [ 892.156892][ T5826] usb 38-1: new SuperSpeed USB device number 18 using vhci_hcd [ 892.287452][ T6899] dvb-usb: bulk message failed: -22 (1/0) [ 892.289282][ T6899] dvb-usb: error while querying for an remote control event. [ 892.421156][T23319] vhci_hcd: connection reset by peer [ 892.424997][ T13] vhci_hcd vhci_hcd.0: stop threads [ 892.427486][ T13] vhci_hcd vhci_hcd.0: release socket [ 892.429352][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 892.455671][ T6899] dvb-usb: bulk message failed: -22 (1/0) [ 892.457608][ T6899] dvb-usb: error while querying for an remote control event. [ 892.615748][ T6899] dvb-usb: bulk message failed: -22 (1/0) [ 892.617589][ T6899] dvb-usb: error while querying for an remote control event. [ 892.775717][ T6899] dvb-usb: bulk message failed: -22 (1/0) [ 892.780242][ T6899] dvb-usb: error while querying for an remote control event. [ 892.818729][ T6899] usb 13-1: USB disconnect, device number 30 [ 892.862369][ T6899] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 893.255641][ T6899] usb 13-1: new high-speed USB device number 31 using dummy_hcd [ 893.427562][ T6899] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 893.445701][ T6899] usb 13-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 893.449515][ T6899] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.454922][ T6899] usb 13-1: config 0 descriptor?? [ 894.188030][ T6899] usbhid 13-1:0.0: can't add hid device: -71 [ 894.194184][ T6899] usbhid 13-1:0.0: probe with driver usbhid failed with error -71 [ 894.195695][T10126] usb 12-1: new high-speed USB device number 9 using dummy_hcd [ 894.206520][ T6899] usb 13-1: USB disconnect, device number 31 [ 894.347735][T10126] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 894.351615][T10126] usb 12-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 894.354787][T10126] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 894.361354][T10126] usb 12-1: config 0 descriptor?? [ 894.465385][T23365] configfs-gadget.g1 gadget.0 syzkaller0: entered promiscuous mode [ 895.170141][T10126] usbhid 12-1:0.0: can't add hid device: -71 [ 895.172148][T10126] usbhid 12-1:0.0: probe with driver usbhid failed with error -71 [ 895.186352][T10126] usb 12-1: USB disconnect, device number 9 [ 895.823410][T23389] syzkaller0: entered promiscuous mode [ 895.826530][T23389] syzkaller0: entered allmulticast mode [ 896.048346][T23394] binder: 23393:23394 unknown command 1 [ 896.050662][T23394] binder: 23393:23394 ioctl c0306201 800002c0 returned -22 [ 896.118682][T23395] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 896.120733][T23395] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 896.148877][T23395] vhci_hcd vhci_hcd.0: Device attached [ 896.448479][T23398] geneve2: entered promiscuous mode [ 896.448495][T23398] geneve2: entered allmulticast mode [ 896.449261][ T13] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 896.449581][ T13] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 896.449615][ T13] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 896.453088][ T13] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 896.552863][T23404] netlink: 'syz.8.4530': attribute type 1 has an invalid length. [ 896.574022][T23404] bond8: option mode: invalid value (8) [ 896.587350][T23404] bond8 (unregistering): Released all slaves [ 896.728090][T23396] vhci_hcd: connection closed [ 896.730461][ T13] vhci_hcd vhci_hcd.0: stop threads [ 896.734739][ T13] vhci_hcd vhci_hcd.0: release socket [ 896.737547][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 896.750543][T23404] bridge0: port 3(dummy0) entered disabled state [ 896.754829][T23404] dummy0: left allmulticast mode [ 896.759608][T23404] dummy0: left promiscuous mode [ 896.761934][T23404] bridge0: port 3(dummy0) entered disabled state [ 896.788442][T23404] netlink: 'syz.8.4530': attribute type 10 has an invalid length. [ 896.790943][T23404] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4530'. [ 896.793803][T23404] dummy0: entered promiscuous mode [ 896.886713][T23408] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4531'. [ 896.935551][T23410] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4532'. [ 896.939484][T23410] ptrace attach of "/syz-executor exec"[20880] was attempted by "/syz-executor exec"[23410] [ 897.144344][T23416] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4534'. [ 897.312551][ T5826] usb 38-1: device descriptor read/8, error -110 [ 897.439552][T23424] usb 2-1: USB disconnect, device number 2 [ 897.480271][T16966] libceph: connect (1)[c::]:6789 error -101 [ 897.483692][T16966] libceph: mon0 (1)[c::]:6789 connect error [ 897.697004][ T5826] usb usb38-port1: attempt power cycle [ 897.745684][T16966] libceph: connect (1)[c::]:6789 error -101 [ 897.747541][T16966] libceph: mon0 (1)[c::]:6789 connect error [ 898.080326][T23423] ceph: No mds server is up or the cluster is laggy [ 898.277589][ T5826] usb usb38-port1: unable to enumerate USB device [ 898.454756][T23441] pim6reg: entered allmulticast mode [ 898.668231][T23434] pim6reg: left allmulticast mode [ 898.720957][T23441] tmpfs: Unknown parameter 'usrquota2{ÿ"!â!ÁØ œÊ¥%`(eôù~~†Ê•øÙr³ÊB7†v–‡' [ 899.086747][T23445] netlink: 'syz.0.4541': attribute type 1 has an invalid length. [ 899.188759][T23445] 8021q: adding VLAN 0 to HW filter on device bond1 [ 899.194992][T23448] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4542'. [ 899.357799][T23445] gretap1: entered promiscuous mode [ 899.416776][T23445] bond1: (slave gretap1): making interface the new active one [ 899.459643][T23445] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 900.640440][T23472] ubi16: attaching mtd0 [ 900.642614][T23472] ubi16 warning: ubi_attach: valid VID header but corrupted EC header at PEB 0 [ 900.647054][T23472] ubi16: scanning is finished [ 900.710533][T23478] netlink: 'syz.8.4550': attribute type 21 has an invalid length. [ 900.723764][T23478] netlink: 128 bytes leftover after parsing attributes in process `syz.8.4550'. [ 900.743224][T23478] netlink: 3 bytes leftover after parsing attributes in process `syz.8.4550'. [ 900.833856][T23472] ubi16: attached mtd0 (name "mtdram test device", size 0 MiB) [ 900.837862][T23472] ubi16: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 900.840674][T23472] ubi16: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 900.843336][T23472] ubi16: VID header offset: 64 (aligned 64), data offset: 128 [ 900.846492][T23472] ubi16: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 900.849566][T23472] ubi16: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 900.852923][T23472] ubi16: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3990659659 [ 900.857355][T23472] ubi16: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 900.863246][T23487] ubi16: background thread "ubi_bgt16d" started, PID 23487 [ 900.868968][T23487] ubi16: scrubbed PEB 0 (LEB 2147479551:0), data moved to PEB 31 [ 901.828099][T23518] openvswitch: netlink: Missing valid actions attribute. [ 901.830359][T23518] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 901.921995][T23520] tmpfs: Unknown parameter '‘Çhè9å­±ÍH{üÛÞdx‰iÿ‰©ø8¼àã­0ZÑl |wµ?–VHü²C\W4ÒÙÆtµC|þA [ 901.921995][T23520] Ä5¾' [ 901.949572][T23512] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4563'. [ 901.951201][T13143] Bluetooth: hci6: Frame reassembly failed (-84) [ 901.956643][T13143] Bluetooth: hci6: Frame reassembly failed (-84) [ 902.485153][T22304] Bluetooth: hci5: command 0xfc11 tx timeout [ 902.547187][ T5760] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 903.273378][T23540] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4572'. [ 903.278725][T23540] ptrace attach of "/syz-executor exec"[20880] was attempted by "/syz-executor exec"[23540] [ 903.737185][ T5921] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 904.003446][ T5760] Bluetooth: hci6: command 0x1003 tx timeout [ 904.004739][ T5755] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 904.544751][T23571] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4578'. [ 904.601280][T23577] siw: device registration error -23 [ 905.120987][T23581] netlink: 204 bytes leftover after parsing attributes in process `syz.3.4579'. [ 905.681106][T23592] devtmpfs: Unknown parameter '/' [ 911.244327][T23630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 911.251614][T23630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 911.268668][T23633] autofs: Unknown parameter 'fd0x0000000000000000' [ 911.303339][T23630] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4589'. [ 911.366540][ T5847] IPVS: starting estimator thread 0... [ 911.464729][T23640] IPVS: using max 31 ests per chain, 74400 per kthread [ 912.061665][ T1481] page_pool_release_retry() stalled pool shutdown: id 192, 1 inflight 60 sec [ 912.214664][T11962] usb 12-1: new high-speed USB device number 10 using dummy_hcd [ 912.384888][T11962] usb 12-1: Using ep0 maxpacket: 16 [ 912.390106][T11962] usb 12-1: config 127 has an invalid interface number: 108 but max is 0 [ 912.392757][T11962] usb 12-1: config 127 has no interface number 0 [ 912.396092][T11962] usb 12-1: config 127 interface 108 altsetting 4 has a duplicate endpoint with address 0xC, skipping [ 912.399486][T11962] usb 12-1: config 127 interface 108 altsetting 4 endpoint 0xD has an invalid bInterval 127, changing to 10 [ 912.402965][T11962] usb 12-1: config 127 interface 108 altsetting 4 has a duplicate endpoint with address 0xC, skipping [ 912.407372][T11962] usb 12-1: config 127 interface 108 altsetting 4 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 912.411452][T11962] usb 12-1: config 127 interface 108 has no altsetting 0 [ 912.417997][T11962] usb 12-1: New USB device found, idVendor=0af0, idProduct=8304, bcdDevice= 0.00 [ 912.421040][T11962] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.423638][T11962] usb 12-1: Product: syz [ 912.426204][T11962] usb 12-1: Manufacturer: syz [ 912.428021][T11962] usb 12-1: SerialNumber: syz [ 912.645878][T23645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 912.653108][T23645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 913.292197][T23667] netlink: 'syz.8.4600': attribute type 1 has an invalid length. [ 913.330807][T11962] hso 12-1:127.108: Not our interface [ 913.360359][T11962] usb-storage 12-1:127.108: USB Mass Storage device detected [ 913.984586][T11962] usb 12-1: USB disconnect, device number 10 [ 914.175915][T23685] netlink: 'syz.7.4606': attribute type 8 has an invalid length. [ 914.178490][T23685] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4606'. [ 914.190808][ T12] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 914.203033][ T12] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 914.203297][T23685] netlink: 'syz.7.4606': attribute type 8 has an invalid length. [ 914.209599][ T12] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 914.209652][T23685] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4606'. [ 914.212620][ T12] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 914.275130][ T42] kauditd_printk_skb: 48 callbacks suppressed [ 914.275143][ T42] audit: type=1800 audit(2000000516.310:14894): pid=23685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.4606" name="dummy_udc" dev="gadgetfs" ino=34850 res=0 errno=0 [ 914.340368][T23690] wg2 speed is unknown, defaulting to 1000 [ 914.343414][T23690] wg2 speed is unknown, defaulting to 1000 [ 914.351906][T23690] wg2 speed is unknown, defaulting to 1000 [ 914.355052][T23693] fuse: Bad value for 'fd' [ 914.446459][T23697] fuse: Unknown parameter 'fd0x0000000000000008' [ 914.530916][ T91] wg2 speed is unknown, defaulting to 1000 [ 914.534897][T23690] infiniband syz0: set active [ 914.536792][T23690] infiniband syz0: added wg2 [ 914.551990][T23690] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 914.557481][T23690] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 914.563070][T23690] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 914.588038][T23690] RDS/IB: syz0: added [ 914.589716][T23690] smc: adding ib device syz0 with port count 1 [ 914.591904][T23690] smc: ib device syz0 port 1 has pnetid SYZ2 (user defined) [ 914.594284][ T91] wg2 speed is unknown, defaulting to 1000 [ 914.596743][T23690] wg2 speed is unknown, defaulting to 1000 [ 915.004661][T23690] wg2 speed is unknown, defaulting to 1000 [ 915.098143][T23690] wg2 speed is unknown, defaulting to 1000 [ 915.269186][ T5824] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 915.278436][ T5824] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 915.298710][T23690] wg2 speed is unknown, defaulting to 1000 [ 915.399775][ T5824] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 915.403940][ T5824] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 915.433785][T23690] wg2 speed is unknown, defaulting to 1000 [ 915.517181][ T5824] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 915.521318][ T5824] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 915.658536][ T5824] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 915.663003][ T5824] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 915.689195][ T5760] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 915.697527][T23690] wg2 speed is unknown, defaulting to 1000 [ 915.698322][ T5760] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 915.705182][ T5760] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 915.715829][ T5760] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 915.718687][ T5760] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 915.772928][ T5755] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 915.777131][ T5755] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 915.781315][ T5755] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 915.790399][ T5755] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 915.794478][ T5755] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 915.931317][ T42] audit: type=1804 audit(2000000517.960:14895): pid=23706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.4614" name="/newroot/392/file0" dev="tmpfs" ino=2150 res=1 errno=0 [ 916.020208][ T5824] bridge_slave_1: left allmulticast mode [ 916.021982][ T5824] bridge_slave_1: left promiscuous mode [ 916.023778][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 916.029192][ T5824] bridge_slave_0: left allmulticast mode [ 916.031587][ T5824] bridge_slave_0: left promiscuous mode [ 916.034068][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 916.215173][ T5824] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 916.221386][ T5824] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 916.240096][ T5824] bond0 (unregistering): Released all slaves [ 916.253900][T23690] wg2 speed is unknown, defaulting to 1000 [ 916.461534][T23730] fuse: Bad value for 'fd' [ 916.535659][T23703] wg2 speed is unknown, defaulting to 1000 [ 916.565789][ T5458] 8021q: adding VLAN 0 to HW filter on device eth17 [ 916.610594][T23733] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 916.630125][T23733] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 916.640711][T23733] kvm: requested 107276 ns i8254 timer period limited to 200000 ns [ 916.648112][T23733] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 916.652782][T23733] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 916.660261][T23733] kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 916.665712][T23733] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 916.674692][T23733] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 916.677501][T23733] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 916.679942][T23733] kvm: requested 100571 ns i8254 timer period limited to 200000 ns [ 916.857541][ T5458] 8021q: adding VLAN 0 to HW filter on device eth18 [ 916.893536][ T5824] hsr_slave_0: left promiscuous mode [ 916.896558][ T5824] hsr_slave_1: left promiscuous mode [ 916.898573][ T5824] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 916.900888][ T5824] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 916.903902][ T5824] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 916.907075][ T5824] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 916.918449][ T5824] veth1_macvtap: left promiscuous mode [ 916.920342][ T5824] veth0_macvtap: left promiscuous mode [ 916.925382][ T5824] veth1_vlan: left promiscuous mode [ 916.927235][ T5824] veth0_vlan: left promiscuous mode [ 917.175859][ T5824] team0 (unregistering): Port device team_slave_1 removed [ 917.188798][ T5824] team0 (unregistering): Port device team_slave_0 removed [ 917.494075][ T5458] 8021q: adding VLAN 0 to HW filter on device eth19 [ 917.516571][T23703] bridge0: port 1(bridge_slave_0) entered blocking state [ 917.519210][T23703] bridge0: port 1(bridge_slave_0) entered disabled state [ 917.521937][T23703] bridge_slave_0: entered allmulticast mode [ 917.525098][T23703] bridge_slave_0: entered promiscuous mode [ 917.545808][T23703] bridge0: port 2(bridge_slave_1) entered blocking state [ 917.548677][T23703] bridge0: port 2(bridge_slave_1) entered disabled state [ 917.551111][T23703] bridge_slave_1: entered allmulticast mode [ 917.554344][T23703] bridge_slave_1: entered promiscuous mode [ 917.598435][T23703] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 917.614718][T23703] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 917.649287][T23703] team0: Port device team_slave_0 added [ 917.654034][T23703] team0: Port device team_slave_1 added [ 917.702512][T23703] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 917.707517][T23703] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 917.727587][T23703] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 917.772749][T23703] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 917.779792][T23703] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 917.804651][T23703] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 917.838920][ T5755] Bluetooth: hci1: command tx timeout [ 917.877613][ T5824] IPVS: stop unused estimator thread 0... [ 917.943184][ T5458] 8021q: adding VLAN 0 to HW filter on device eth20 [ 917.988153][T23703] hsr_slave_0: entered promiscuous mode [ 917.991102][T23703] hsr_slave_1: entered promiscuous mode [ 919.408816][T23833] xt_connbytes: Forcing CT accounting to be enabled [ 919.411057][T23833] xt_TPROXY: Can be used only with -p tcp or -p udp [ 919.454246][T18960] block nbd1: Possible stuck request ffff888027397000: control (read@0,1024B). Runtime 360 seconds [ 919.648037][T23833] ceph: No mds server is up or the cluster is laggy [ 919.689346][ T5826] libceph: connect (1)[c::]:6789 error -101 [ 919.692127][ T5826] libceph: mon0 (1)[c::]:6789 connect error [ 919.914704][ T5755] Bluetooth: hci1: command tx timeout [ 919.958546][T23703] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 919.966013][T23703] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 919.969619][T23703] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 919.974982][T23703] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 919.979553][T23703] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 920.061697][T23703] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 920.075098][T23703] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 920.123601][T23703] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 920.230584][T23703] 8021q: adding VLAN 0 to HW filter on device bond0 [ 920.251243][T23703] 8021q: adding VLAN 0 to HW filter on device team0 [ 920.270845][ T1177] bridge0: port 1(bridge_slave_0) entered blocking state [ 920.273909][ T1177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 920.426383][T23879] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4637'. [ 920.481935][T23880] ptrace attach of "/syz-executor exec"[18043] was attempted by "/syz-executor exec"[23880] [ 920.570277][ T1177] bridge0: port 2(bridge_slave_1) entered blocking state [ 920.573348][ T1177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 920.941535][T23703] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 921.110043][T23703] veth0_vlan: entered promiscuous mode [ 921.116687][T23703] veth1_vlan: entered promiscuous mode [ 921.136024][T23703] veth0_macvtap: entered promiscuous mode [ 921.140173][T23703] veth1_macvtap: entered promiscuous mode [ 921.151318][T23703] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 921.160199][T23703] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 921.169634][ T5855] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 921.174969][ T5855] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 921.187700][ T91] usb 13-1: new high-speed USB device number 32 using dummy_hcd [ 921.190873][ T5855] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 921.201184][ T5855] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 921.286539][ T1177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 921.315843][ T1177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 921.352296][ T1177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 921.356758][ T1177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 921.364101][ T91] usb 13-1: Using ep0 maxpacket: 32 [ 921.381027][ T91] usb 13-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice= 0.40 [ 921.386046][ T91] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.397059][ T91] usb 13-1: Product: syz [ 921.405305][ T91] usb 13-1: Manufacturer: syz [ 921.407671][ T91] usb 13-1: SerialNumber: syz [ 921.667197][ T91] usb 13-1: Quirk or no altset; falling back to MIDI 1.0 [ 921.672639][ T91] snd-usb-audio 13-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 921.678654][ T91] usb 13-1: Quirk or no altset; falling back to MIDI 1.0 [ 921.681370][ T91] snd-usb-audio 13-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 921.686413][ T91] usb 13-1: Quirk or no altset; falling back to MIDI 1.0 [ 921.711481][ T91] snd-usb-audio 13-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 921.717884][ T91] usb 13-1: USB disconnect, device number 32 [ 921.750411][T16474] udevd[16474]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb13/13-1/13-1:1.2/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 921.786864][ T5921] usb 14-1: new high-speed USB device number 2 using dummy_hcd [ 921.797170][T23950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 921.800899][T23950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 921.975610][ T5921] usb 14-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 921.983323][ T5921] usb 14-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 921.986639][ T5921] usb 14-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 921.990005][ T5921] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.994666][ T5755] Bluetooth: hci1: command tx timeout [ 921.996197][T23935] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 922.019624][ T5921] usb 14-1: Quirk or no altset; falling back to MIDI 1.0 [ 922.379463][T23970] netlink: 'syz.3.4648': attribute type 1 has an invalid length. [ 922.424880][T23970] 8021q: adding VLAN 0 to HW filter on device bond2 [ 922.545099][T23970] bond2: (slave geneve2): making interface the new active one [ 922.571575][T23970] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 922.589265][ T5855] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 922.608527][ T5855] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 922.621382][ T5855] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 922.639082][ T5855] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 924.073906][ T5755] Bluetooth: hci1: command tx timeout [ 924.149632][T24000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 924.152985][T24000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 924.238918][T13618] usb 14-1: USB disconnect, device number 2 [ 924.292783][T24009] tipc: Enabled bearer , priority 0 [ 924.306173][T24009] syzkaller0: entered promiscuous mode [ 924.308031][T24009] syzkaller0: entered allmulticast mode [ 924.325624][T24009] tipc: Resetting bearer [ 924.335426][T24007] tipc: Resetting bearer [ 924.360389][T24007] tipc: Disabling bearer [ 925.477796][T24041] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4666'. [ 925.489400][T24041] 8021q: adding VLAN 0 to HW filter on device bond3 [ 925.498846][T24043] vlan1: entered promiscuous mode [ 925.500807][T24043] bridge0: entered promiscuous mode [ 925.508376][T24041] bond3: entered allmulticast mode [ 925.787049][T24053] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4669'. [ 925.811275][T24037] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4663'. [ 926.303416][T24066] FAULT_INJECTION: forcing a failure. [ 926.303416][T24066] name failslab, interval 1, probability 0, space 0, times 0 [ 926.308505][T24066] CPU: 3 UID: 0 PID: 24066 Comm: syz.0.4672 Tainted: G L syzkaller #0 PREEMPT(full) [ 926.308538][T24066] Tainted: [L]=SOFTLOCKUP [ 926.308543][T24066] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 926.308550][T24066] Call Trace: [ 926.308555][T24066] [ 926.308559][T24066] dump_stack_lvl+0x100/0x190 [ 926.308576][T24066] should_fail_ex.cold+0x5/0xa [ 926.308589][T24066] should_failslab+0xc2/0x120 [ 926.308604][T24066] kmem_cache_alloc_noprof+0x91/0x6a0 [ 926.308618][T24066] ? __pfx_map_id_range_down+0x10/0x10 [ 926.308634][T24066] ? rcu_is_watching+0x12/0xc0 [ 926.308646][T24066] ? security_inode_alloc+0x3b/0x2c0 [ 926.308663][T24066] security_inode_alloc+0x3b/0x2c0 [ 926.308676][T24066] inode_init_always_gfp+0xc77/0xfb0 [ 926.308690][T24066] alloc_inode+0x8e/0x250 [ 926.308704][T24066] new_inode+0x22/0x1c0 [ 926.308720][T24066] proc_pid_make_inode+0x22/0x160 [ 926.308738][T24066] proc_pident_instantiate+0x85/0x310 [ 926.308758][T24066] proc_pident_lookup+0x1e3/0x270 [ 926.308776][T24066] ? __pfx_down_read+0x10/0x10 [ 926.308793][T24066] __lookup_slow+0x155/0x320 [ 926.308809][T24066] lookup_slow+0x50/0x70 [ 926.308824][T24066] link_path_walk+0x1377/0x1cc0 [ 926.308846][T24066] path_openat+0x1c9/0x4280 [ 926.308856][T24066] ? kasan_save_track+0x14/0x30 [ 926.308870][T24066] ? __kasan_slab_alloc+0x89/0x90 [ 926.308884][T24066] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 926.308897][T24066] ? do_sys_openat2+0xc7/0x1e0 [ 926.308916][T24066] ? __pfx_path_openat+0x10/0x10 [ 926.308932][T24066] do_file_open+0x20e/0x430 [ 926.308942][T24066] ? __lock_acquire+0x49f/0x1a40 [ 926.308961][T24066] ? __pfx_do_file_open+0x10/0x10 [ 926.308977][T24066] ? __pfx_kfree_link+0x10/0x10 [ 926.308997][T24066] ? _raw_spin_unlock+0x28/0x50 [ 926.309008][T24066] ? alloc_fd+0x471/0x7a0 [ 926.309024][T24066] do_sys_openat2+0x10f/0x1e0 [ 926.309039][T24066] ? __pfx_do_sys_openat2+0x10/0x10 [ 926.309056][T24066] ? irqentry_exit+0x24d/0xa00 [ 926.309069][T24066] ? lockdep_hardirqs_on+0x78/0x100 [ 926.309084][T24066] __ia32_compat_sys_openat+0x12d/0x210 [ 926.309101][T24066] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 926.309123][T24066] do_int80_emulation+0x14b/0x720 [ 926.309139][T24066] asm_int80_emulation+0x1a/0x20 [ 926.309167][T24066] RIP: 0023:0xf71d72eb [ 926.309177][T24066] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 926.309188][T24066] RSP: 002b:00000000f548d3cc EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 926.309200][T24066] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f548d490 [ 926.309207][T24066] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 926.309213][T24066] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 926.309220][T24066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 926.309226][T24066] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 926.309240][T24066] [ 927.419834][T24090] syzkaller0: entered promiscuous mode [ 927.421647][T24090] syzkaller0: entered allmulticast mode [ 927.742200][T24103] tipc: Enabled bearer , priority 0 [ 927.745887][T24103] syzkaller0: entered promiscuous mode [ 927.750223][T24103] syzkaller0: entered allmulticast mode [ 927.759999][T24103] tipc: Resetting bearer [ 927.786852][T24102] tipc: Resetting bearer [ 927.824465][T24102] tipc: Disabling bearer [ 927.929886][T24114] FAULT_INJECTION: forcing a failure. [ 927.929886][T24114] name failslab, interval 1, probability 0, space 0, times 0 [ 927.934144][T24114] CPU: 0 UID: 0 PID: 24114 Comm: syz.9.4688 Tainted: G L syzkaller #0 PREEMPT(full) [ 927.934162][T24114] Tainted: [L]=SOFTLOCKUP [ 927.934166][T24114] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 927.934173][T24114] Call Trace: [ 927.934178][T24114] [ 927.934182][T24114] dump_stack_lvl+0x100/0x190 [ 927.934198][T24114] should_fail_ex.cold+0x5/0xa [ 927.934212][T24114] should_failslab+0xc2/0x120 [ 927.934227][T24114] __kmalloc_cache_noprof+0x91/0x6c0 [ 927.934254][T24114] ? nfnetlink_rcv_batch+0x780/0x2880 [ 927.934274][T24114] nfnetlink_rcv_batch+0x780/0x2880 [ 927.934297][T24114] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 927.934313][T24114] ? find_held_lock+0x2b/0x80 [ 927.934328][T24114] ? __local_bh_enable_ip+0x9e/0x120 [ 927.934342][T24114] ? lockdep_hardirqs_on+0x78/0x100 [ 927.934355][T24114] ? __dev_queue_xmit+0xa12/0x4970 [ 927.934387][T24114] ? __nla_parse+0x40/0x60 [ 927.934402][T24114] nfnetlink_rcv+0x3bd/0x440 [ 927.934431][T24114] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 927.934450][T24114] netlink_unicast+0x585/0x850 [ 927.934464][T24114] ? __pfx_netlink_unicast+0x10/0x10 [ 927.934480][T24114] netlink_sendmsg+0x8b0/0xda0 [ 927.934494][T24114] ? __pfx_netlink_sendmsg+0x10/0x10 [ 927.934508][T24114] ? apparmor_socket_sendmsg+0x15b/0x270 [ 927.934523][T24114] ____sys_sendmsg+0xa4d/0xbe0 [ 927.934533][T24114] ? __pfx_netlink_sendmsg+0x10/0x10 [ 927.934546][T24114] ? __pfx_____sys_sendmsg+0x10/0x10 [ 927.934563][T24114] ___sys_sendmsg+0x190/0x1e0 [ 927.934575][T24114] ? __pfx____sys_sendmsg+0x10/0x10 [ 927.934594][T24114] ? find_held_lock+0x2b/0x80 [ 927.934617][T24114] __sys_sendmsg+0x160/0x210 [ 927.934632][T24114] ? __pfx___sys_sendmsg+0x10/0x10 [ 927.934651][T24114] ? __pfx_ksys_write+0x10/0x10 [ 927.934665][T24114] __do_fast_syscall_32+0xe7/0x970 [ 927.934679][T24114] ? lockdep_hardirqs_on+0x78/0x100 [ 927.934693][T24114] do_fast_syscall_32+0x32/0x70 [ 927.934707][T24114] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 927.934722][T24114] RIP: 0023:0xf70aefec [ 927.934736][T24114] Code: Unable to access opcode bytes at 0xf70aefc2. [ 927.934741][T24114] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 927.934752][T24114] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 927.934759][T24114] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 927.934765][T24114] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 927.934771][T24114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 927.934777][T24114] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 927.934792][T24114] [ 927.950291][T24116] tipc: Enabled bearer , priority 0 [ 928.031698][T24116] syzkaller0: entered promiscuous mode [ 928.033462][T24116] syzkaller0: entered allmulticast mode [ 928.050530][T24116] FAULT_INJECTION: forcing a failure. [ 928.050530][T24116] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 928.057035][T24116] CPU: 3 UID: 0 PID: 24116 Comm: syz.8.4689 Tainted: G L syzkaller #0 PREEMPT(full) [ 928.057067][T24116] Tainted: [L]=SOFTLOCKUP [ 928.057072][T24116] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 928.057079][T24116] Call Trace: [ 928.057083][T24116] [ 928.057088][T24116] dump_stack_lvl+0x100/0x190 [ 928.057104][T24116] should_fail_ex.cold+0x5/0xa [ 928.057116][T24116] _copy_from_user+0x2e/0xd0 [ 928.057134][T24116] get_user_ifreq+0x116/0x1c0 [ 928.057152][T24116] sock_do_ioctl+0x16e/0x280 [ 928.057169][T24116] ? __pfx_sock_do_ioctl+0x10/0x10 [ 928.057189][T24116] ? do_vfs_ioctl+0x226/0x13e0 [ 928.057206][T24116] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 928.057223][T24116] compat_sock_ioctl+0x568/0x760 [ 928.057237][T24116] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 928.057249][T24116] ? hook_file_ioctl_common+0x140/0x440 [ 928.057267][T24116] ? __fget_files+0x21f/0x3d0 [ 928.057279][T24116] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 928.057292][T24116] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 928.057310][T24116] __do_fast_syscall_32+0xe7/0x970 [ 928.057325][T24116] ? lockdep_hardirqs_on+0x78/0x100 [ 928.057339][T24116] do_fast_syscall_32+0x32/0x70 [ 928.057353][T24116] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 928.057368][T24116] RIP: 0023:0xf709efec [ 928.057381][T24116] Code: Unable to access opcode bytes at 0xf709efc2. [ 928.057386][T24116] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 928.057398][T24116] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000008922 [ 928.057405][T24116] RDX: 0000000080002280 RSI: 0000000000000000 RDI: 0000000000000000 [ 928.057415][T24116] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 928.057422][T24116] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 928.057429][T24116] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 928.057443][T24116] [ 928.121601][T24115] tipc: Resetting bearer [ 928.150403][T24115] tipc: Disabling bearer [ 928.259109][T24125] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 928.633700][ T5854] usb 13-1: new high-speed USB device number 33 using dummy_hcd [ 928.824838][ T5854] usb 13-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 133 [ 928.833476][ T5854] usb 13-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 928.849614][ T5854] usb 13-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 928.858031][ T5854] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 928.863169][ T5854] usb 13-1: Product: syz [ 928.867920][ T5854] usb 13-1: Manufacturer: syz [ 928.871882][ T5854] usb 13-1: SerialNumber: syz [ 928.883915][T24132] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 929.048664][T24145] create_pit_timer: 8 callbacks suppressed [ 929.048679][T24145] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 929.090586][ T5854] usblp 13-1:1.0: usblp0: USB Unidirectional printer dev 33 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 929.121358][T24148] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4699'. [ 929.226580][T24152] FAULT_INJECTION: forcing a failure. [ 929.226580][T24152] name failslab, interval 1, probability 0, space 0, times 0 [ 929.230633][T24152] CPU: 1 UID: 0 PID: 24152 Comm: syz.0.4700 Tainted: G L syzkaller #0 PREEMPT(full) [ 929.230652][T24152] Tainted: [L]=SOFTLOCKUP [ 929.230656][T24152] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 929.230663][T24152] Call Trace: [ 929.230668][T24152] [ 929.230673][T24152] dump_stack_lvl+0x100/0x190 [ 929.230689][T24152] should_fail_ex.cold+0x5/0xa [ 929.230702][T24152] should_failslab+0xc2/0x120 [ 929.230718][T24152] __kmalloc_noprof+0xfc/0x820 [ 929.230732][T24152] ? rcu_is_watching+0x12/0xc0 [ 929.230746][T24152] ? tomoyo_realpath_from_path+0xb6/0x690 [ 929.230766][T24152] tomoyo_realpath_from_path+0xb6/0x690 [ 929.230786][T24152] tomoyo_path_number_perm+0x23c/0x580 [ 929.230801][T24152] ? tomoyo_path_number_perm+0x22e/0x580 [ 929.230816][T24152] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 929.230831][T24152] ? get_pid_task+0x106/0x250 [ 929.230857][T24152] ? find_held_lock+0x2b/0x80 [ 929.230871][T24152] ? __fget_files+0x215/0x3d0 [ 929.230881][T24152] ? hook_file_ioctl_common+0x140/0x440 [ 929.230895][T24152] ? __fget_files+0x215/0x3d0 [ 929.230908][T24152] ? __fget_files+0x21f/0x3d0 [ 929.230920][T24152] security_file_ioctl_compat+0xd3/0x230 [ 929.230936][T24152] __ia32_compat_sys_ioctl+0xc2/0x360 [ 929.230954][T24152] __do_fast_syscall_32+0xe7/0x970 [ 929.230968][T24152] ? lockdep_hardirqs_on+0x78/0x100 [ 929.230982][T24152] do_fast_syscall_32+0x32/0x70 [ 929.230997][T24152] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 929.231012][T24152] RIP: 0023:0xf709efec [ 929.231026][T24152] Code: Unable to access opcode bytes at 0xf709efc2. [ 929.231031][T24152] RSP: 002b:00000000f546c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 929.231042][T24152] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005412 [ 929.231049][T24152] RDX: 0000000080000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 929.231056][T24152] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 929.231062][T24152] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 929.231068][T24152] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 929.231082][T24152] [ 929.231087][T24152] ERROR: Out of memory at tomoyo_realpath_from_path. [ 929.356289][ T5825] usb 13-1: USB disconnect, device number 33 [ 929.367024][ T5825] usblp0: removed [ 929.490679][T24155] tipc: Enabled bearer , priority 0 [ 929.497410][T24155] syzkaller0: mtu less than device minimum [ 929.502373][T24154] tipc: Disabling bearer [ 929.603040][T24157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 929.607906][T24157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 930.775540][T24176] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.4705'. [ 930.966201][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 930.969861][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.017905][T24183] overlayfs: failed to resolve './bus': -2 [ 931.085725][T24188] netlink: 'syz.9.4710': attribute type 4 has an invalid length. [ 931.089004][T24188] netlink: 152 bytes leftover after parsing attributes in process `syz.9.4710'. [ 931.089502][T24189] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4711'. [ 931.103990][T24188] .`: renamed from bond0 (while UP) [ 931.131903][T24188] xt_connbytes: Forcing CT accounting to be enabled [ 931.135098][T24188] xt_SECMARK: invalid mode: 0 [ 932.008814][T24207] input: syz0 as /devices/virtual/input/input118 [ 932.219215][T24233] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4723'. [ 932.505995][T24239] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4724'. [ 933.301497][T24258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 933.305391][T24258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 933.891961][T24269] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4734'. [ 933.908727][T24269] ptrace attach of "/syz-executor exec"[18043] was attempted by "/syz-executor exec"[24269] [ 935.046360][T24286] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4736'. [ 935.054029][T24286] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4736'. [ 935.070513][T24286] netlink: 'syz.0.4736': attribute type 12 has an invalid length. [ 935.077971][T24286] netlink: 'syz.0.4736': attribute type 13 has an invalid length. [ 935.252957][T24275] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 935.311452][T24299] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4743'. [ 935.314960][T24300] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4743'. [ 935.524199][T24305] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 936.228244][T24323] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4750'. [ 936.331939][T24326] xt_CT: No such helper "pptp" [ 936.917038][T24359] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 936.960989][T24361] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 936.963034][T24361] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 936.966758][T24361] vhci_hcd vhci_hcd.0: Device attached [ 937.273225][ T1349] usb 37-1: new high-speed USB device number 9 using vhci_hcd [ 937.501211][T24366] Bluetooth: MGMT ver 1.23 [ 937.503482][T24366] Bluetooth: hci1: too big key_count value 4608 [ 937.644158][T24369] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4767'. [ 937.735123][T24371] syzkaller0: entered promiscuous mode [ 937.736923][T24371] syzkaller0: entered allmulticast mode [ 937.859318][T24362] vhci_hcd: connection closed [ 937.859549][T12740] vhci_hcd vhci_hcd.0: stop threads [ 937.864378][T12740] vhci_hcd vhci_hcd.0: release socket [ 937.866285][T12740] vhci_hcd vhci_hcd.0: disconnect device [ 937.875897][T24373] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4769'. [ 937.879335][T24373] ptrace attach of "/syz-executor exec"[23703] was attempted by "/syz-executor exec"[24373] [ 937.930267][T24376] bridge_slave_0: left allmulticast mode [ 937.932563][T24376] bridge_slave_0: left promiscuous mode [ 937.935345][T24376] bridge0: port 1(bridge_slave_0) entered disabled state [ 937.942002][T24376] bridge_slave_1: left allmulticast mode [ 937.944736][T24376] bridge_slave_1: left promiscuous mode [ 937.947156][T24376] bridge0: port 2(bridge_slave_1) entered disabled state [ 937.960442][T24376] .`: (slave bond_slave_0): Releasing backup interface [ 937.969290][T24376] .`: (slave bond_slave_1): Releasing backup interface [ 937.979537][T24376] team0: Port device team_slave_0 removed [ 937.989041][T24376] team0: Port device team_slave_1 removed [ 937.992107][T24376] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 937.996556][T24376] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 938.001889][T24376] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 938.006350][T24376] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 938.011346][T24376] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 938.353179][ T91] usb 14-1: new high-speed USB device number 3 using dummy_hcd [ 938.504605][ T91] usb 14-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 938.507636][ T91] usb 14-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 938.512108][ T91] usb 14-1: New USB device found, idVendor=0ccd, idProduct=0014, bcdDevice= 0.40 [ 938.515181][ T91] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 938.517656][ T91] usb 14-1: Product: syz [ 938.519001][ T91] usb 14-1: Manufacturer: syz [ 938.520472][ T91] usb 14-1: SerialNumber: syz [ 938.761372][T24382] trusted_key: encrypted_key: hex blob is missing [ 938.805415][ T91] usb 14-1: 0:1 : does not exist [ 938.807612][ T91] usb 14-1: unit 2 not found! [ 938.809410][ T91] usb 14-1: unit 80 not found! [ 938.852953][ T91] usb 14-1: USB disconnect, device number 3 [ 938.918546][T16474] udevd[16474]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb14/14-1/14-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 939.051661][T24397] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4778'. [ 939.056411][T24397] ptrace attach of "/syz-executor exec"[20316] was attempted by "/syz-executor exec"[24397] [ 939.480947][T24405] random: crng reseeded on system resumption [ 939.507358][T24405] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4781'. [ 940.043125][ T5854] usb 14-1: new high-speed USB device number 4 using dummy_hcd [ 940.221449][ T5854] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 940.225532][ T5854] usb 14-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 940.229917][ T5854] usb 14-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 940.307075][ T5854] usb 14-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 940.326581][ T5854] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.338476][ T5854] usb 14-1: Product: syz [ 940.344973][ T5854] usb 14-1: Manufacturer: syz [ 940.351350][ T5854] usb 14-1: SerialNumber: syz [ 940.390216][ T5854] hub 14-1:1.0: bad descriptor, ignoring hub [ 940.393351][ T5854] hub 14-1:1.0: probe with driver hub failed with error -5 [ 940.478616][ T5755] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 940.484639][ T5755] Bluetooth: hci1: Injecting HCI hardware error event [ 940.495330][ T5760] Bluetooth: hci1: hardware error 0x00 [ 940.631466][T24423] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4787'. [ 940.636593][T24423] ptrace attach of "/syz-executor exec"[20880] was attempted by "/syz-executor exec"[24423] [ 940.667017][ T5854] usblp 14-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 940.924366][ T5825] usb 14-1: USB disconnect, device number 4 [ 940.935026][ T5825] usblp0: removed [ 941.127781][T24456] fuse: Bad value for 'fd' [ 941.641381][T24469] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 941.646190][T24469] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 942.196685][T24481] openvswitch: netlink: IP tunnel TTL not specified. [ 942.459409][T24494] fuse: Bad value for 'fd' [ 942.792896][ T5760] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 942.813581][ T1481] usb 13-1: new high-speed USB device number 34 using dummy_hcd [ 942.942917][ T1349] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 942.964978][ T1481] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 942.972163][ T1481] usb 13-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 942.980369][ T1481] usb 13-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 942.991917][ T1481] usb 13-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 942.999221][ T1481] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.005124][ T1481] usb 13-1: Product: syz [ 943.008493][ T1481] usb 13-1: Manufacturer: syz [ 943.012712][ T1481] usb 13-1: SerialNumber: syz [ 943.036251][ T1481] hub 13-1:1.0: bad descriptor, ignoring hub [ 943.042095][ T1481] hub 13-1:1.0: probe with driver hub failed with error -5 [ 943.242655][ T1481] usblp 13-1:1.0: usblp0: USB Unidirectional printer dev 34 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 943.544221][ T5854] usb 13-1: USB disconnect, device number 34 [ 943.551686][ T5854] usblp0: removed [ 944.219699][T24536] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4810'. [ 945.071595][T24560] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4815'. [ 945.082337][T24560] ptrace attach of "/syz-executor exec"[20880] was attempted by "/syz-executor exec"[24560] [ 945.103932][T24561] input: syz0 as /devices/virtual/input/input119 [ 946.132089][T24593] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4823'. [ 946.136945][T24593] ptrace attach of "/syz-executor exec"[20316] was attempted by "/syz-executor exec"[24593] [ 946.382949][T24603] FAULT_INJECTION: forcing a failure. [ 946.382949][T24603] name failslab, interval 1, probability 0, space 0, times 0 [ 946.387841][T24603] CPU: 2 UID: 0 PID: 24603 Comm: syz.9.4826 Tainted: G L syzkaller #0 PREEMPT(full) [ 946.387871][T24603] Tainted: [L]=SOFTLOCKUP [ 946.387879][T24603] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 946.387888][T24603] Call Trace: [ 946.387895][T24603] [ 946.387902][T24603] dump_stack_lvl+0x100/0x190 [ 946.387929][T24603] should_fail_ex.cold+0x5/0xa [ 946.387950][T24603] should_failslab+0xc2/0x120 [ 946.387971][T24603] __kmalloc_noprof+0xfc/0x820 [ 946.387986][T24603] ? pfkey_sadb2xfrm_user_sec_ctx+0x7c/0x360 [ 946.388006][T24603] pfkey_sadb2xfrm_user_sec_ctx+0x7c/0x360 [ 946.388023][T24603] pfkey_compile_policy+0x693/0xab0 [ 946.388042][T24603] xfrm_user_policy+0x383/0x880 [ 946.388056][T24603] ? __pfx_xfrm_user_policy+0x10/0x10 [ 946.388067][T24603] ? apparmor_capable+0x1d7/0x4d0 [ 946.388082][T24603] ? bpf_lsm_capable+0x9/0x10 [ 946.388096][T24603] ? ns_capable+0xd2/0xf0 [ 946.388110][T24603] do_ipv6_setsockopt+0x31eb/0x43a0 [ 946.388129][T24603] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 946.388147][T24603] ? __lock_acquire+0x49f/0x1a40 [ 946.388172][T24603] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 946.388206][T24603] ? find_held_lock+0x2b/0x80 [ 946.388237][T24603] ? __pfx___might_resched+0x10/0x10 [ 946.388270][T24603] ? ipv6_setsockopt+0xcb/0x170 [ 946.388283][T24603] ipv6_setsockopt+0xcb/0x170 [ 946.388299][T24603] rawv6_setsockopt+0xee/0x5a0 [ 946.388311][T24603] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 946.388328][T24603] ? aa_sock_opt_perm+0xfe/0x1b0 [ 946.388340][T24603] ? sock_common_setsockopt+0x2e/0xf0 [ 946.388358][T24603] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 946.388378][T24603] do_sock_setsockopt+0xf3/0x1d0 [ 946.388397][T24603] __sys_setsockopt+0x119/0x190 [ 946.388414][T24603] __ia32_sys_setsockopt+0xbc/0x160 [ 946.388429][T24603] ? __do_fast_syscall_32+0x98/0x970 [ 946.388443][T24603] ? lockdep_hardirqs_on+0x78/0x100 [ 946.388456][T24603] __do_fast_syscall_32+0xe7/0x970 [ 946.388470][T24603] ? lockdep_hardirqs_on+0x78/0x100 [ 946.388484][T24603] do_fast_syscall_32+0x32/0x70 [ 946.388498][T24603] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 946.388513][T24603] RIP: 0023:0xf70aefec [ 946.388527][T24603] Code: Unable to access opcode bytes at 0xf70aefc2. [ 946.388532][T24603] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 946.388544][T24603] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000029 [ 946.388551][T24603] RDX: 0000000000000022 RSI: 0000000080000000 RDI: 00000000000000b9 [ 946.388558][T24603] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 946.388564][T24603] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 946.388571][T24603] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 946.388585][T24603] [ 946.697204][T24618] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4832'. [ 946.701568][T24618] ptrace attach of "/syz-executor exec"[20316] was attempted by "/syz-executor exec"[24618] [ 946.804076][T24622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 946.808812][T24622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 947.167438][T24641] 8021q: VLANs not supported on ip6tnl0 [ 947.382280][T24647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 947.391145][T24647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 947.461578][T16966] libceph: connect (1)[c::]:6789 error -101 [ 947.463769][T16966] libceph: mon0 (1)[c::]:6789 connect error [ 947.465858][T16966] libceph: connect (1)[c::]:6789 error -101 [ 947.467984][T16966] libceph: mon0 (1)[c::]:6789 connect error [ 947.520339][T24663] ceph: No mds server is up or the cluster is laggy [ 947.860010][T24674] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4841'. [ 947.863394][T24674] ptrace attach of "/syz-executor exec"[23703] was attempted by "/syz-executor exec"[24674] [ 948.317174][T24699] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4848'. [ 948.401198][T24702] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 948.426790][T19280] Bluetooth: hci5: Frame reassembly failed (-84) [ 948.788210][T24711] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4850'. [ 948.810323][T24711] ptrace attach of "/syz-executor exec"[20316] was attempted by "/syz-executor exec"[24711] [ 949.524773][ T2126] block nbd1: Possible stuck request ffff888027397000: control (read@0,1024B). Runtime 390 seconds [ 950.223298][T24738] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4857'. [ 950.472542][ T5760] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 950.472653][ T5755] Bluetooth: hci5: command 0x1003 tx timeout [ 950.489495][T24754] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4862'. [ 950.493576][T24754] ptrace attach of "/syz-executor exec"[18043] was attempted by "/syz-executor exec"[24754] [ 950.585431][T24760] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4864'. [ 951.349146][T24778] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4866'. [ 951.382362][ T5825] usb 14-1: new high-speed USB device number 5 using dummy_hcd [ 951.512570][ T5825] usb 14-1: device descriptor read/64, error -71 [ 951.545603][T24790] FAULT_INJECTION: forcing a failure. [ 951.545603][T24790] name failslab, interval 1, probability 0, space 0, times 0 [ 951.549712][T24790] CPU: 0 UID: 0 PID: 24790 Comm: syz.0.4869 Tainted: G L syzkaller #0 PREEMPT(full) [ 951.549731][T24790] Tainted: [L]=SOFTLOCKUP [ 951.549735][T24790] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 951.549742][T24790] Call Trace: [ 951.549746][T24790] [ 951.549751][T24790] dump_stack_lvl+0x100/0x190 [ 951.549768][T24790] should_fail_ex.cold+0x5/0xa [ 951.549781][T24790] should_failslab+0xc2/0x120 [ 951.549796][T24790] __kmalloc_noprof+0xfc/0x820 [ 951.549810][T24790] ? rcu_is_watching+0x12/0xc0 [ 951.549824][T24790] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 951.549842][T24790] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 951.549860][T24790] genl_family_rcv_msg_doit+0xc7/0x300 [ 951.549875][T24790] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 951.549889][T24790] ? genl_get_cmd+0x3e7/0x760 [ 951.549905][T24790] ? bpf_lsm_capable+0x9/0x10 [ 951.549917][T24790] ? security_capable+0x80/0x260 [ 951.549930][T24790] ? ns_capable+0xd2/0xf0 [ 951.549943][T24790] genl_rcv_msg+0x560/0x800 [ 951.549958][T24790] ? __pfx_genl_rcv_msg+0x10/0x10 [ 951.549972][T24790] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 951.549991][T24790] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 951.550007][T24790] ? __pfx_nl80211_post_doit+0x10/0x10 [ 951.550025][T24790] netlink_rcv_skb+0x159/0x420 [ 951.550038][T24790] ? __pfx_genl_rcv_msg+0x10/0x10 [ 951.550052][T24790] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 951.550069][T24790] ? netlink_deliver_tap+0x1ae/0xcc0 [ 951.550090][T24790] genl_rcv+0x28/0x40 [ 951.550102][T24790] netlink_unicast+0x585/0x850 [ 951.550116][T24790] ? __pfx_netlink_unicast+0x10/0x10 [ 951.550131][T24790] netlink_sendmsg+0x8b0/0xda0 [ 951.550145][T24790] ? __pfx_netlink_sendmsg+0x10/0x10 [ 951.550159][T24790] ? apparmor_socket_sendmsg+0x15b/0x270 [ 951.550174][T24790] ____sys_sendmsg+0xa4d/0xbe0 [ 951.550185][T24790] ? __pfx_netlink_sendmsg+0x10/0x10 [ 951.550198][T24790] ? __pfx_____sys_sendmsg+0x10/0x10 [ 951.550215][T24790] ___sys_sendmsg+0x190/0x1e0 [ 951.550228][T24790] ? __pfx____sys_sendmsg+0x10/0x10 [ 951.550246][T24790] ? find_held_lock+0x2b/0x80 [ 951.550269][T24790] __sys_sendmsg+0x160/0x210 [ 951.550285][T24790] ? __pfx___sys_sendmsg+0x10/0x10 [ 951.550304][T24790] ? __pfx_ksys_write+0x10/0x10 [ 951.550318][T24790] __do_fast_syscall_32+0xe7/0x970 [ 951.550332][T24790] ? lockdep_hardirqs_on+0x78/0x100 [ 951.550346][T24790] do_fast_syscall_32+0x32/0x70 [ 951.550361][T24790] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 951.550376][T24790] RIP: 0023:0xf709efec [ 951.550389][T24790] Code: Unable to access opcode bytes at 0xf709efc2. [ 951.550394][T24790] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 951.550405][T24790] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080003740 [ 951.550412][T24790] RDX: 0000000000008800 RSI: 0000000000000000 RDI: 0000000000000000 [ 951.550419][T24790] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 951.550425][T24790] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 951.550431][T24790] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 951.550445][T24790] [ 951.579472][T24793] program syz.8.4870 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 951.651687][T24798] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4872'. [ 951.656488][T24798] ptrace attach of "/syz-executor exec"[20316] was attempted by "/syz-executor exec"[24798] [ 951.760491][ T5825] usb 14-1: new high-speed USB device number 6 using dummy_hcd [ 951.804050][T24808] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4875'. [ 951.892447][ T5825] usb 14-1: device descriptor read/64, error -71 [ 952.002717][ T5825] usb usb14-port1: attempt power cycle [ 952.362745][ T5825] usb 14-1: new high-speed USB device number 7 using dummy_hcd [ 952.386319][ T5825] usb 14-1: device descriptor read/8, error -71 [ 952.642625][ T5825] usb 14-1: new high-speed USB device number 8 using dummy_hcd [ 952.666576][ T5825] usb 14-1: device descriptor read/8, error -71 [ 952.772412][T24823] FAULT_INJECTION: forcing a failure. [ 952.772412][T24823] name failslab, interval 1, probability 0, space 0, times 0 [ 952.777404][T24823] CPU: 3 UID: 0 PID: 24823 Comm: syz.8.4878 Tainted: G L syzkaller #0 PREEMPT(full) [ 952.777445][T24823] Tainted: [L]=SOFTLOCKUP [ 952.777453][T24823] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 952.777465][T24823] Call Trace: [ 952.777471][T24823] [ 952.777478][T24823] dump_stack_lvl+0x100/0x190 [ 952.777505][T24823] should_fail_ex.cold+0x5/0xa [ 952.777524][T24823] should_failslab+0xc2/0x120 [ 952.777546][T24823] __kmalloc_cache_noprof+0x91/0x6c0 [ 952.777564][T24823] ? rtnl_newlink+0x126/0x2380 [ 952.777590][T24823] ? __pfx_rtnl_newlink+0x10/0x10 [ 952.777614][T24823] rtnl_newlink+0x126/0x2380 [ 952.777650][T24823] ? __pfx_rtnl_newlink+0x10/0x10 [ 952.777673][T24823] ? rcu_is_watching+0x12/0xc0 [ 952.777694][T24823] ? kasan_quarantine_put+0x104/0x240 [ 952.777714][T24823] ? lockdep_hardirqs_on+0x78/0x100 [ 952.777738][T24823] ? kfree_skbmem+0x19a/0x210 [ 952.777755][T24823] ? kmem_cache_free+0x127/0x6b0 [ 952.777778][T24823] ? __lock_acquire+0x49f/0x1a40 [ 952.777809][T24823] ? find_held_lock+0x2b/0x80 [ 952.777838][T24823] ? find_held_lock+0x2b/0x80 [ 952.777859][T24823] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 952.777882][T24823] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 952.777908][T24823] ? __pfx_rtnl_newlink+0x10/0x10 [ 952.777933][T24823] rtnetlink_rcv_msg+0x95e/0xe90 [ 952.777960][T24823] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 952.777998][T24823] ? ref_tracker_free+0x37e/0x6c0 [ 952.778029][T24823] netlink_rcv_skb+0x159/0x420 [ 952.778048][T24823] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 952.778074][T24823] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 952.778101][T24823] ? netlink_deliver_tap+0x1ae/0xcc0 [ 952.778132][T24823] netlink_unicast+0x585/0x850 [ 952.778154][T24823] ? __pfx_netlink_unicast+0x10/0x10 [ 952.778178][T24823] netlink_sendmsg+0x8b0/0xda0 [ 952.778199][T24823] ? __pfx_netlink_sendmsg+0x10/0x10 [ 952.778219][T24823] ? apparmor_socket_sendmsg+0x15b/0x270 [ 952.778240][T24823] ____sys_sendmsg+0xa4d/0xbe0 [ 952.778256][T24823] ? __pfx_netlink_sendmsg+0x10/0x10 [ 952.778277][T24823] ? __pfx_____sys_sendmsg+0x10/0x10 [ 952.778307][T24823] ___sys_sendmsg+0x190/0x1e0 [ 952.778326][T24823] ? __pfx____sys_sendmsg+0x10/0x10 [ 952.778355][T24823] ? find_held_lock+0x2b/0x80 [ 952.778392][T24823] __sys_sendmsg+0x160/0x210 [ 952.778414][T24823] ? __pfx___sys_sendmsg+0x10/0x10 [ 952.778444][T24823] ? __pfx_ksys_write+0x10/0x10 [ 952.778465][T24823] __do_fast_syscall_32+0xe7/0x970 [ 952.778487][T24823] ? lockdep_hardirqs_on+0x78/0x100 [ 952.778508][T24823] do_fast_syscall_32+0x32/0x70 [ 952.778529][T24823] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 952.778551][T24823] RIP: 0023:0xf709efec [ 952.778572][T24823] Code: Unable to access opcode bytes at 0xf709efc2. [ 952.778579][T24823] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 952.778595][T24823] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000280 [ 952.778606][T24823] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 952.778615][T24823] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 952.778624][T24823] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 952.778633][T24823] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 952.778655][T24823] [ 952.782751][ T5825] usb usb14-port1: unable to enumerate USB device [ 952.983008][T24833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4880'. [ 953.090889][T24841] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4882'. [ 953.095560][T24841] ptrace attach of "/syz-executor exec"[20316] was attempted by "/syz-executor exec"[24841] [ 953.551295][T24849] Invalid ELF header magic: != ELF [ 954.489754][T24891] comedi comedi1: comedi_parport: I/O base address not correctly aligned [ 954.565317][T24899] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4891'. [ 954.569042][T24899] ptrace attach of "/syz-executor exec"[20880] was attempted by "/syz-executor exec"[24899] [ 954.602268][ T9] usb 14-1: new high-speed USB device number 9 using dummy_hcd [ 954.763797][ T9] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 954.776980][ T9] usb 14-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 954.790370][ T9] usb 14-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 954.812592][ T9] usb 14-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 954.816856][ T9] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 954.820907][ T9] usb 14-1: Product: syz [ 954.822605][ T9] usb 14-1: Manufacturer: syz [ 954.824344][ T9] usb 14-1: SerialNumber: syz [ 954.831959][ T9] hub 14-1:1.0: bad descriptor, ignoring hub [ 954.834216][ T9] hub 14-1:1.0: probe with driver hub failed with error -5 [ 954.964341][ T42] audit: type=1326 audit(2000000557.002:14896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24919 comm="syz.0.4896" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf709efec code=0x0 [ 955.061558][ T9] usblp 14-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 955.355175][ T91] usb 14-1: USB disconnect, device number 9 [ 955.370560][ T91] usblp0: removed [ 956.137469][T24963] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4900'. [ 956.141704][T24963] ptrace attach of "/syz-executor exec"[18043] was attempted by "/syz-executor exec"[24963] [ 956.733456][T24985] ./bus: Can't lookup blockdev [ 956.808366][T24993] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4911'. [ 957.038301][T24998] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4912'. [ 957.043255][T24998] ptrace attach of "/syz-executor exec"[23703] was attempted by "/syz-executor exec"[24998] [ 957.270973][T25008] siw: device registration error -23 [ 957.592802][T25031] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4921'. [ 957.597399][T25031] ptrace attach of "/syz-executor exec"[18043] was attempted by "/syz-executor exec"[25031] [ 957.762057][ T91] usb 14-1: new high-speed USB device number 10 using dummy_hcd [ 957.943477][ T91] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 957.946999][ T91] usb 14-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 957.950210][ T91] usb 14-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 957.959052][ T91] usb 14-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 957.963181][ T91] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.966110][ T91] usb 14-1: Product: syz [ 957.967777][ T91] usb 14-1: Manufacturer: syz [ 957.969721][ T91] usb 14-1: SerialNumber: syz [ 957.982453][ T91] hub 14-1:1.0: bad descriptor, ignoring hub [ 957.986364][ T91] hub 14-1:1.0: probe with driver hub failed with error -5 [ 958.051378][T25055] netlink: 'syz.8.4925': attribute type 2 has an invalid length. [ 958.055817][T25055] netlink: 'syz.8.4925': attribute type 1 has an invalid length. [ 958.193311][ T91] usblp 14-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 958.309559][T25077] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4930'. [ 958.317012][T25077] ptrace attach of "/syz-executor exec"[18043] was attempted by "/syz-executor exec"[25077] [ 958.473005][ T5825] usb 14-1: USB disconnect, device number 10 [ 958.483145][ T5825] usblp0: removed [ 959.035547][T25096] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4932'. [ 959.793709][T25125] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4939'. [ 959.798839][T25125] ptrace attach of "/syz-executor exec"[20316] was attempted by "/syz-executor exec"[25125] [ 959.953595][T25118] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4937'. [ 959.956585][T25118] tipc: Invalid UDP bearer configuration [ 959.956616][T25118] tipc: Enabling of bearer rejected, failed to enable media [ 961.104898][T25161] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4948'. [ 961.109240][T25161] ptrace attach of "/syz-executor exec"[18043] was attempted by "/syz-executor exec"[25161] [ 961.136044][T25163] netlink: 'syz.3.4949': attribute type 8 has an invalid length. [ 961.259950][T25174] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4953'. [ 961.844832][T25188] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(7) [ 961.847599][T25188] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 961.877063][T25188] vhci_hcd vhci_hcd.0: Device attached [ 962.161928][ T1481] usb 54-1: SetAddress Request (18) to port 0 [ 962.169990][ T1481] usb 54-1: new SuperSpeed USB device number 18 using vhci_hcd [ 962.321092][T25189] vhci_hcd: connection reset by peer [ 962.324071][ T5824] vhci_hcd vhci_hcd.8: stop threads [ 962.325920][ T5824] vhci_hcd vhci_hcd.8: release socket [ 962.327800][ T5824] vhci_hcd vhci_hcd.8: disconnect device [ 963.089985][T25215] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4960'. [ 963.093736][T25215] ptrace attach of "/syz-executor exec"[20316] was attempted by "/syz-executor exec"[25215] [ 964.050755][T25244] syz_tun: entered allmulticast mode [ 964.110835][T25244] syz_tun: left allmulticast mode [ 964.298705][T25254] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4966'. [ 965.811751][ T5826] usb 13-1: new high-speed USB device number 35 using dummy_hcd [ 966.042691][T25302] FAULT_INJECTION: forcing a failure. [ 966.042691][T25302] name failslab, interval 1, probability 0, space 0, times 0 [ 966.046683][T25302] CPU: 0 UID: 0 PID: 25302 Comm: syz.9.4980 Tainted: G L syzkaller #0 PREEMPT(full) [ 966.046701][T25302] Tainted: [L]=SOFTLOCKUP [ 966.046705][T25302] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 966.046711][T25302] Call Trace: [ 966.046715][T25302] [ 966.046720][T25302] dump_stack_lvl+0x100/0x190 [ 966.046736][T25302] should_fail_ex.cold+0x5/0xa [ 966.046749][T25302] should_failslab+0xc2/0x120 [ 966.046777][T25302] kmem_cache_alloc_noprof+0x91/0x6a0 [ 966.046793][T25302] ? skb_clone+0x190/0x400 [ 966.046811][T25302] skb_clone+0x190/0x400 [ 966.046826][T25302] nfnetlink_rcv_batch+0x1c8/0x2880 [ 966.046844][T25302] ? kmem_cache_free+0x127/0x6b0 [ 966.046858][T25302] ? kfree_skbmem+0x19f/0x210 [ 966.046870][T25302] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 966.046886][T25302] ? find_held_lock+0x2b/0x80 [ 966.046900][T25302] ? __dev_queue_xmit+0xa12/0x4970 [ 966.046912][T25302] ? __local_bh_enable_ip+0x9e/0x120 [ 966.046925][T25302] ? lockdep_hardirqs_on+0x78/0x100 [ 966.046939][T25302] ? __dev_queue_xmit+0xa12/0x4970 [ 966.046957][T25302] ? __asan_memset+0x23/0x50 [ 966.046969][T25302] ? __nla_validate_parse+0x1e7/0x28b0 [ 966.046986][T25302] ? __pfx___nla_validate_parse+0x10/0x10 [ 966.046999][T25302] ? rcu_is_watching+0x12/0xc0 [ 966.047013][T25302] ? apparmor_capable+0x1d7/0x4d0 [ 966.047029][T25302] ? __nla_parse+0x40/0x60 [ 966.047060][T25302] nfnetlink_rcv+0x3bd/0x440 [ 966.047077][T25302] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 966.047095][T25302] netlink_unicast+0x585/0x850 [ 966.047110][T25302] ? __pfx_netlink_unicast+0x10/0x10 [ 966.047126][T25302] netlink_sendmsg+0x8b0/0xda0 [ 966.047140][T25302] ? __pfx_netlink_sendmsg+0x10/0x10 [ 966.047154][T25302] ? apparmor_socket_sendmsg+0x15b/0x270 [ 966.047168][T25302] ____sys_sendmsg+0xa4d/0xbe0 [ 966.047178][T25302] ? __pfx_netlink_sendmsg+0x10/0x10 [ 966.047191][T25302] ? __pfx_____sys_sendmsg+0x10/0x10 [ 966.047208][T25302] ___sys_sendmsg+0x190/0x1e0 [ 966.047221][T25302] ? __pfx____sys_sendmsg+0x10/0x10 [ 966.047239][T25302] ? find_held_lock+0x2b/0x80 [ 966.047261][T25302] __sys_sendmsg+0x160/0x210 [ 966.047277][T25302] ? __pfx___sys_sendmsg+0x10/0x10 [ 966.047300][T25302] ? __pfx_ksys_write+0x10/0x10 [ 966.047313][T25302] __do_fast_syscall_32+0xe7/0x970 [ 966.047327][T25302] ? lockdep_hardirqs_on+0x78/0x100 [ 966.047341][T25302] do_fast_syscall_32+0x32/0x70 [ 966.047356][T25302] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 966.047370][T25302] RIP: 0023:0xf70aefec [ 966.047384][T25302] Code: Unable to access opcode bytes at 0xf70aefc2. [ 966.047389][T25302] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 966.047401][T25302] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 966.047408][T25302] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 966.047414][T25302] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 966.047421][T25302] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 966.047427][T25302] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 966.047441][T25302] [ 966.081569][ T5826] usb 13-1: device descriptor read/64, error -71 [ 966.123555][T25306] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4981'. [ 966.153145][T25306] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4981'. [ 966.361626][ T5826] usb 13-1: new high-speed USB device number 36 using dummy_hcd [ 966.491607][ T5826] usb 13-1: device descriptor read/64, error -71 [ 966.601820][ T5826] usb usb13-port1: attempt power cycle [ 966.929809][T25317] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4984'. [ 966.941724][ T5826] usb 13-1: new high-speed USB device number 37 using dummy_hcd [ 966.962364][ T5826] usb 13-1: device descriptor read/8, error -71 [ 966.981274][T25319] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4985'. [ 967.201703][ T5826] usb 13-1: new high-speed USB device number 38 using dummy_hcd [ 967.223102][ T5826] usb 13-1: device descriptor read/8, error -71 [ 967.271714][ T1481] usb 54-1: device descriptor read/8, error -110 [ 967.331779][ T5826] usb usb13-port1: unable to enumerate USB device [ 967.350440][T25326] FAULT_INJECTION: forcing a failure. [ 967.350440][T25326] name failslab, interval 1, probability 0, space 0, times 0 [ 967.355115][T25326] CPU: 3 UID: 0 PID: 25326 Comm: syz.9.4986 Tainted: G L syzkaller #0 PREEMPT(full) [ 967.355141][T25326] Tainted: [L]=SOFTLOCKUP [ 967.355146][T25326] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 967.355156][T25326] Call Trace: [ 967.355162][T25326] [ 967.355167][T25326] dump_stack_lvl+0x100/0x190 [ 967.355184][T25326] should_fail_ex.cold+0x5/0xa [ 967.355194][T25326] ? __pfx___css_rstat_updated+0x10/0x10 [ 967.355228][T25326] should_failslab+0xc2/0x120 [ 967.355246][T25326] kmem_cache_alloc_noprof+0x91/0x6a0 [ 967.355260][T25326] ? __pfx_from_vfsgid+0x10/0x10 [ 967.355275][T25326] ? fuse_request_alloc+0x22/0x200 [ 967.355291][T25326] fuse_request_alloc+0x22/0x200 [ 967.355304][T25326] fuse_chan_send_bg+0x73/0x800 [ 967.355320][T25326] fuse_simple_background+0x273/0x2e0 [ 967.355338][T25326] fuse_flush_writepages+0x418/0x780 [ 967.355360][T25326] fuse_iomap_writeback_range+0x918/0x1a10 [ 967.355380][T25326] ? folio_clear_dirty_for_io+0x34d/0x960 [ 967.355400][T25326] iomap_writeback_folio+0xc09/0x2730 [ 967.355420][T25326] iomap_writepages+0x13e/0x2a0 [ 967.355432][T25326] ? __pfx_iomap_writepages+0x10/0x10 [ 967.355446][T25326] ? __lock_acquire+0x49f/0x1a40 [ 967.355465][T25326] fuse_writepages+0x270/0x330 [ 967.355478][T25326] ? __pfx_fuse_writepages+0x10/0x10 [ 967.355491][T25326] ? __lock_acquire+0x49f/0x1a40 [ 967.355514][T25326] ? find_held_lock+0x2b/0x80 [ 967.355528][T25326] ? is_bpf_text_address+0x8a/0x1a0 [ 967.355543][T25326] ? is_bpf_text_address+0x8a/0x1a0 [ 967.355559][T25326] ? __pfx_fuse_writepages+0x10/0x10 [ 967.355573][T25326] do_writepages+0x278/0x600 [ 967.355589][T25326] ? __pfx_do_writepages+0x10/0x10 [ 967.355606][T25326] __writeback_single_inode+0x164/0x1300 [ 967.355623][T25326] ? find_held_lock+0x2b/0x80 [ 967.355639][T25326] ? __pfx___writeback_single_inode+0x10/0x10 [ 967.355656][T25326] ? do_raw_spin_unlock+0x145/0x1e0 [ 967.355670][T25326] writeback_single_inode+0x51c/0xfc0 [ 967.355689][T25326] write_inode_now+0x174/0x1f0 [ 967.355706][T25326] ? kasan_record_aux_stack+0xa7/0xc0 [ 967.355717][T25326] ? __pfx_write_inode_now+0x10/0x10 [ 967.355733][T25326] ? filp_close+0x26/0x30 [ 967.355743][T25326] ? __range_close+0x137/0x7a0 [ 967.355754][T25326] ? __ia32_sys_close_range+0x3ce/0x5d0 [ 967.355781][T25326] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 967.355799][T25326] fuse_flush+0x278/0x6a0 [ 967.355815][T25326] ? __pfx_fuse_flush+0x10/0x10 [ 967.355841][T25326] ? find_held_lock+0x2b/0x80 [ 967.355855][T25326] ? __pfx_fuse_flush+0x10/0x10 [ 967.355870][T25326] filp_flush+0xe7/0x190 [ 967.355881][T25326] filp_close+0x1c/0x30 [ 967.355891][T25326] __range_close+0x137/0x7a0 [ 967.355905][T25326] __ia32_sys_close_range+0x3ce/0x5d0 [ 967.355918][T25326] ? __pfx___ia32_sys_close_range+0x10/0x10 [ 967.355930][T25326] ? ksys_write+0x1ac/0x250 [ 967.355940][T25326] ? __pfx_ksys_write+0x10/0x10 [ 967.355953][T25326] __do_fast_syscall_32+0xe7/0x970 [ 967.355968][T25326] ? lockdep_hardirqs_on+0x78/0x100 [ 967.355982][T25326] do_fast_syscall_32+0x32/0x70 [ 967.355996][T25326] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 967.356011][T25326] RIP: 0023:0xf70aefec [ 967.356025][T25326] Code: Unable to access opcode bytes at 0xf70aefc2. [ 967.356030][T25326] RSP: 002b:00000000f547c50c EFLAGS: 00000292 ORIG_RAX: 00000000000001b4 [ 967.356042][T25326] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000006 [ 967.356049][T25326] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 967.356055][T25326] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 967.356061][T25326] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 967.356068][T25326] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 967.356081][T25326] [ 967.573892][T25334] syzkaller0: entered promiscuous mode [ 967.576169][T25334] syzkaller0: entered allmulticast mode [ 967.662914][ T1481] usb usb54-port1: attempt power cycle [ 968.223345][ T1481] usb usb54-port1: unable to enumerate USB device [ 968.602206][T25353] fuse: Bad value for 'group_id' [ 968.604350][T25353] fuse: Bad value for 'group_id' [ 968.860762][T25363] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4994'. [ 968.866832][T25363] ptrace attach of "/syz-executor exec"[23703] was attempted by "/syz-executor exec"[25363] [ 968.980764][T25372] wg2 speed is unknown, defaulting to 1000 [ 970.027176][T25399] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5003'. [ 970.052023][T25406] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5004'. [ 970.060047][T25406] syz_tun: entered promiscuous mode [ 970.255357][T25399] program syz.8.5003 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 971.247585][T25479] netlink: 'syz.9.5011': attribute type 10 has an invalid length. [ 971.255229][T25479] netlink: 40 bytes leftover after parsing attributes in process `syz.9.5011'. [ 971.261508][T25479] dummy0: entered promiscuous mode [ 971.264679][T25479] bridge0: port 1(dummy0) entered blocking state [ 971.271601][T25479] bridge0: port 1(dummy0) entered disabled state [ 971.276615][T25479] dummy0: entered allmulticast mode [ 971.285269][T25479] bridge0: port 1(dummy0) entered blocking state [ 971.287610][T25479] bridge0: port 1(dummy0) entered forwarding state [ 972.310861][T25506] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5016'. [ 976.260773][T25618] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5031'. [ 976.263665][T25618] FAULT_INJECTION: forcing a failure. [ 976.263665][T25618] name failslab, interval 1, probability 0, space 0, times 0 [ 976.267856][T25618] CPU: 3 UID: 0 PID: 25618 Comm: syz.8.5031 Tainted: G L syzkaller #0 PREEMPT(full) [ 976.267874][T25618] Tainted: [L]=SOFTLOCKUP [ 976.267878][T25618] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 976.267885][T25618] Call Trace: [ 976.267889][T25618] [ 976.267894][T25618] dump_stack_lvl+0x100/0x190 [ 976.267910][T25618] should_fail_ex.cold+0x5/0xa [ 976.267923][T25618] should_failslab+0xc2/0x120 [ 976.267950][T25618] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 976.267967][T25618] ? __alloc_skb+0x5b7/0x710 [ 976.267981][T25618] ? __alloc_skb+0x140/0x710 [ 976.267997][T25618] __alloc_skb+0x140/0x710 [ 976.268010][T25618] ? __alloc_skb+0x5b7/0x710 [ 976.268023][T25618] ? __pfx___alloc_skb+0x10/0x10 [ 976.268041][T25618] netlink_ack+0x117/0xb80 [ 976.268058][T25618] netlink_rcv_skb+0x333/0x420 [ 976.268070][T25618] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 976.268088][T25618] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 976.268104][T25618] ? netlink_deliver_tap+0x1ae/0xcc0 [ 976.268126][T25618] netlink_unicast+0x585/0x850 [ 976.268140][T25618] ? __pfx_netlink_unicast+0x10/0x10 [ 976.268155][T25618] netlink_sendmsg+0x8b0/0xda0 [ 976.268169][T25618] ? __pfx_netlink_sendmsg+0x10/0x10 [ 976.268183][T25618] ? apparmor_socket_sendmsg+0x15b/0x270 [ 976.268198][T25618] ____sys_sendmsg+0xa4d/0xbe0 [ 976.268208][T25618] ? __pfx_netlink_sendmsg+0x10/0x10 [ 976.268221][T25618] ? __pfx_____sys_sendmsg+0x10/0x10 [ 976.268238][T25618] ___sys_sendmsg+0x190/0x1e0 [ 976.268255][T25618] ? __pfx____sys_sendmsg+0x10/0x10 [ 976.268273][T25618] ? find_held_lock+0x2b/0x80 [ 976.268297][T25618] __sys_sendmsg+0x160/0x210 [ 976.268312][T25618] ? __pfx___sys_sendmsg+0x10/0x10 [ 976.268331][T25618] ? __pfx_ksys_write+0x10/0x10 [ 976.268345][T25618] __do_fast_syscall_32+0xe7/0x970 [ 976.268359][T25618] ? lockdep_hardirqs_on+0x78/0x100 [ 976.268373][T25618] do_fast_syscall_32+0x32/0x70 [ 976.268388][T25618] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 976.268402][T25618] RIP: 0023:0xf709efec [ 976.268417][T25618] Code: Unable to access opcode bytes at 0xf709efc2. [ 976.268422][T25618] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 976.268434][T25618] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 976.268441][T25618] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 976.268448][T25618] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 976.268454][T25618] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 976.268461][T25618] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 976.268475][T25618] [ 976.881029][ T9] usb 13-1: new full-speed USB device number 39 using dummy_hcd [ 977.143007][ T42] audit: type=1326 audit(2000000579.184:14897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25656 comm="syz.0.5040" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf709efec code=0x0 [ 977.544350][ T9] usb 13-1: unable to get BOS descriptor or descriptor too short [ 977.549047][ T9] usb 13-1: unable to read config index 0 descriptor/start: -71 [ 977.553009][ T9] usb 13-1: can't read configurations, error -71 [ 977.936935][T25697] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5048'. [ 977.943852][T25697] ptrace attach of "/syz-executor exec"[20316] was attempted by "/syz-executor exec"[25697] [ 978.284702][T25713] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5053'. [ 978.994033][T25748] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5057'. [ 978.999270][T25748] ptrace attach of "/syz-executor exec"[20316] was attempted by "/syz-executor exec"[25748] [ 979.570534][T25793] netlink: 32 bytes leftover after parsing attributes in process `syz.9.5062'. [ 979.601299][ T2126] block nbd1: Possible stuck request ffff888027397000: control (read@0,1024B). Runtime 420 seconds [ 979.835427][T25821] syzkaller0: entered promiscuous mode [ 979.842260][T25821] syzkaller0: entered allmulticast mode [ 979.857767][T25821] input: syz1 as /devices/virtual/input/input120 [ 979.860296][T25821] input: failed to attach handler leds to device input120, error: -6 [ 979.906845][T25831] xt_HMARK: proto mask must be zero with L3 mode [ 979.980780][ T1349] usb 13-1: new high-speed USB device number 41 using dummy_hcd [ 980.003164][T25844] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5070'. [ 980.047182][T25844] vlan4: entered allmulticast mode [ 980.049544][T25844] dummy0: entered allmulticast mode [ 980.054403][T25844] bridge0: port 3(vlan4) entered blocking state [ 980.057733][T25844] bridge0: port 3(vlan4) entered disabled state [ 980.076956][T25844] vlan4: entered promiscuous mode [ 980.079450][T25844] dummy0: entered promiscuous mode [ 980.122492][ T1349] usb 13-1: device descriptor read/64, error -71 [ 980.371931][ T1349] usb 13-1: new high-speed USB device number 42 using dummy_hcd [ 980.510809][ T1349] usb 13-1: device descriptor read/64, error -71 [ 980.631102][ T1349] usb usb13-port1: attempt power cycle [ 980.980900][ T1349] usb 13-1: new high-speed USB device number 43 using dummy_hcd [ 981.023083][ T1349] usb 13-1: device descriptor read/8, error -71 [ 981.084813][T25861] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5074'. [ 981.226531][T25874] dummy0: left allmulticast mode [ 981.229020][T25874] bridge0: port 1(dummy0) entered disabled state [ 981.237406][T25876] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5077'. [ 981.244970][T25874] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 981.258729][T25874] netlink: 'syz.9.5078': attribute type 2 has an invalid length. [ 981.274892][T25873] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 981.280727][ T1349] usb 13-1: new high-speed USB device number 44 using dummy_hcd [ 981.311597][ T1349] usb 13-1: device descriptor read/8, error -71 [ 981.430930][ T1349] usb usb13-port1: unable to enumerate USB device [ 982.120519][T25891] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5081'. [ 982.200486][T25899] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5083'. [ 983.444625][T25921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 983.445817][T25922] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5088'. [ 983.452624][T25921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 983.459096][T25921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 983.468346][T25921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 983.526731][T25933] tmpfs: Bad value for 'mpol' [ 983.528922][T25933] netlink: 76 bytes leftover after parsing attributes in process `syz.8.5089'. [ 983.541846][T25933] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 983.559241][T25933] kvm: pic: single mode not supported [ 983.559745][T25933] kvm: pic: non byte write [ 983.564278][T25933] kvm: pic: non byte write [ 983.567097][T25933] kvm: pic: non byte write [ 983.569534][T25933] kvm: pic: non byte write [ 983.572133][T25933] kvm: pic: non byte write [ 983.575063][T25933] kvm: pic: non byte write [ 983.577664][T25933] kvm: pic: non byte write [ 983.580151][T25933] kvm: pic: non byte write [ 983.583478][T25933] kvm: pic: non byte write [ 983.585898][T25933] kvm: pic: non byte write [ 983.895514][T25952] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 983.990636][ T5826] usb 13-1: new high-speed USB device number 45 using dummy_hcd [ 984.140714][ T5826] usb 13-1: Using ep0 maxpacket: 8 [ 984.149043][ T5826] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 984.157759][ T5826] usb 13-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 984.162972][ T5826] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.171582][ T5826] usb 13-1: config 0 descriptor?? [ 984.383411][T25947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 984.399298][T25947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 984.475783][ T5826] iowarrior 13-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 985.555912][T25993] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5096'. [ 985.663575][T26001] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5099'. [ 986.765896][T26023] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5106'. [ 986.771515][T26023] ptrace attach of "/syz-executor exec"[23703] was attempted by "/syz-executor exec"[26023] [ 986.832305][T26032] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5107'. [ 986.837036][T26032] ubi: mtd0 is already attached to ubi16 [ 986.956024][T26035] 9p: Bad value for 'wfdno' [ 987.095704][ T5825] usb 13-1: USB disconnect, device number 45 [ 987.480288][T26073] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5115'. [ 987.485100][T26073] ptrace attach of "/syz-executor exec"[23703] was attempted by "/syz-executor exec"[26073] [ 987.747289][T26084] syzkaller0: entered promiscuous mode [ 987.749528][T26084] syzkaller0: entered allmulticast mode [ 987.760530][ T5825] usb 13-1: new high-speed USB device number 46 using dummy_hcd [ 987.926853][T26098] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 987.934862][T26098] [ 987.935687][T26098] ============================================ [ 987.937589][T26098] WARNING: possible recursive locking detected [ 987.939512][T26098] syzkaller #0 Tainted: G L [ 987.941429][T26098] -------------------------------------------- [ 987.943311][T26098] syz.9.5121/26098 is trying to acquire lock: [ 987.945164][T26098] ffff88805085e160 (&rmidi->open_mutex){+.+.}-{4:4}, at: snd_rawmidi_kernel_open+0xa4/0x190 [ 987.948257][T26098] [ 987.948257][T26098] but task is already holding lock: [ 987.950503][T26098] ffff88804d313d60 (&rmidi->open_mutex){+.+.}-{4:4}, at: snd_rawmidi_open+0x296/0xba0 [ 987.953393][T26098] [ 987.953393][T26098] other info that might help us debug this: [ 987.955811][T26098] Possible unsafe locking scenario: [ 987.955811][T26098] [ 987.958059][T26098] CPU0 [ 987.959116][T26098] ---- [ 987.960151][T26098] lock(&rmidi->open_mutex); [ 987.961612][T26098] lock(&rmidi->open_mutex); [ 987.963062][T26098] [ 987.963062][T26098] *** DEADLOCK *** [ 987.963062][T26098] [ 987.965509][T26098] May be due to missing lock nesting notation [ 987.965509][T26098] [ 987.968001][T26098] 2 locks held by syz.9.5121/26098: [ 987.969637][T26098] #0: ffff88804d313d60 (&rmidi->open_mutex){+.+.}-{4:4}, at: snd_rawmidi_open+0x296/0xba0 [ 987.971001][ T5825] usb 13-1: config 0 has no interfaces? [ 987.972733][T26098] #1: ffff88805085e460 (&ump->open_mutex){+.+.}-{4:4}, at: snd_ump_legacy_open+0x120/0x4e0 [ 987.972771][T26098] [ 987.972771][T26098] stack backtrace: [ 987.980076][T26098] CPU: 3 UID: 0 PID: 26098 Comm: syz.9.5121 Tainted: G L syzkaller #0 PREEMPT(full) [ 987.980093][T26098] Tainted: [L]=SOFTLOCKUP [ 987.980097][T26098] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 987.980104][T26098] Call Trace: [ 987.980108][T26098] [ 987.980114][T26098] dump_stack_lvl+0x100/0x190 [ 987.980127][T26098] print_deadlock_bug.cold+0xbd/0xca [ 987.980149][T26098] __lock_acquire+0x1256/0x1a40 [ 987.980170][T26098] lock_acquire+0x1b9/0x370 [ 987.980185][T26098] ? snd_rawmidi_kernel_open+0xa4/0x190 [ 987.980199][T26098] ? __pfx___might_resched+0x10/0x10 [ 987.980217][T26098] __mutex_lock+0x1a4/0x1bd0 [ 987.980231][T26098] ? snd_rawmidi_kernel_open+0xa4/0x190 [ 987.980248][T26098] ? snd_rawmidi_kernel_open+0xa4/0x190 [ 987.980262][T26098] ? __mutex_lock+0x26d/0x1bd0 [ 987.980275][T26098] ? snd_ump_legacy_open+0x120/0x4e0 [ 987.980290][T26098] ? __pfx___mutex_lock+0x10/0x10 [ 987.980305][T26098] ? __pfx___mutex_lock+0x10/0x10 [ 987.980322][T26098] ? snd_rawmidi_kernel_open+0xa4/0x190 [ 987.980338][T26098] snd_rawmidi_kernel_open+0xa4/0x190 [ 987.980352][T26098] snd_ump_legacy_open+0x367/0x4e0 [ 987.980366][T26098] open_substream+0x480/0x970 [ 987.980378][T26098] rawmidi_open_priv+0x595/0x6f0 [ 987.980392][T26098] snd_rawmidi_open+0x4c9/0xba0 [ 987.980406][T26098] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 987.980421][T26098] ? __pfx_default_wake_function+0x10/0x10 [ 987.980434][T26098] ? do_raw_spin_lock+0x128/0x260 [ 987.980446][T26098] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 987.980458][T26098] snd_open+0x201/0x450 [ 987.980475][T26098] ? __pfx_snd_open+0x10/0x10 [ 987.980491][T26098] chrdev_open+0x234/0x6a0 [ 987.980502][T26098] ? __pfx_chrdev_open+0x10/0x10 [ 987.980513][T26098] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 987.980527][T26098] do_dentry_open+0x6ab/0x14d0 [ 987.980540][T26098] ? __pfx_chrdev_open+0x10/0x10 [ 987.980552][T26098] vfs_open+0x82/0x3f0 [ 987.980566][T26098] path_openat+0x2873/0x4280 [ 987.980580][T26098] ? __pfx_path_openat+0x10/0x10 [ 987.980592][T26098] do_file_open+0x20e/0x430 [ 987.980602][T26098] ? __lock_acquire+0x49f/0x1a40 [ 987.980619][T26098] ? __pfx_do_file_open+0x10/0x10 [ 987.980633][T26098] ? _raw_spin_unlock+0x28/0x50 [ 987.980643][T26098] ? alloc_fd+0x471/0x7a0 [ 987.980655][T26098] do_sys_openat2+0x10f/0x1e0 [ 987.980668][T26098] ? __pfx_do_sys_openat2+0x10/0x10 [ 987.980683][T26098] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 987.980696][T26098] ? __ia32_sys_futex_time32+0x2fd/0x470 [ 987.980710][T26098] __ia32_compat_sys_openat+0x12d/0x210 [ 987.980725][T26098] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 987.980746][T26098] do_int80_emulation+0x14b/0x720 [ 987.980760][T26098] asm_int80_emulation+0x1a/0x20 [ 987.980772][T26098] RIP: 0023:0xf71e72eb [ 987.980781][T26098] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 987.980792][T26098] RSP: 002b:00000000f549d03c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 987.980803][T26098] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f549d100 [ 987.980810][T26098] RDX: 0000000000141102 RSI: 0000000000000000 RDI: 0000000000000000 [ 987.980816][T26098] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 987.980822][T26098] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 987.980829][T26098] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 987.980838][T26098] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 988.217861][ T5825] usb 13-1: string descriptor 0 read error: -71 [ 988.220317][ T5825] usb 13-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 988.223158][ T5825] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 988.232556][ T5825] usb 13-1: config 0 descriptor?? [ 988.234479][ T5825] usb 13-1: can't set config #0, error -71 [ 988.236752][ T5825] usb 13-1: USB disconnect, device number 46 [ 988.563667][T23047] syz_tun (unregistering): left allmulticast mode [ 988.569894][ T5796] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.715314][ T5796] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.807410][ T5796] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.854184][ T5796] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.989309][ T5796] .` (unregistering): Released all slaves [ 989.095135][ T5458] 8021q: adding VLAN 0 to HW filter on device eth21 [ 989.208957][ T5458] 8021q: adding VLAN 0 to HW filter on device eth22 [ 989.287972][ T5796] hsr_slave_0: left promiscuous mode [ 989.290664][ T5796] hsr_slave_1: left promiscuous mode [ 989.295157][ T5796] veth1_macvtap: left promiscuous mode [ 989.296910][ T5796] veth0_macvtap: left promiscuous mode [ 989.298710][ T5796] veth1_vlan: left promiscuous mode [ 989.300446][ T5796] veth0_vlan: left promiscuous mode [ 989.389688][ T5458] 8021q: adding VLAN 0 to HW filter on device eth23 [ 989.507092][ T5458] 8021q: adding VLAN 0 to HW filter on device eth24 [ 989.845861][ T5796] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 989.849773][ T5796] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 989.916313][ T5796] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 989.920590][ T5796] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 990.026820][ T5796] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.031268][ T5796] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 990.102145][ T5796] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.106438][ T5796] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 990.190734][ T5796] bridge_slave_1: left promiscuous mode [ 990.193261][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 990.197215][ T5796] bridge_slave_0: left allmulticast mode [ 990.199660][ T5796] bridge_slave_0: left promiscuous mode [ 990.202188][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 990.206653][ T5796] lo: left allmulticast mode [ 990.287837][ T5796] bond1 (unregistering): (slave gretap1): Releasing active interface [ 990.308066][ T5796] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 990.312889][ T5796] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 990.317344][ T5796] bond0 (unregistering): Released all slaves [ 990.322014][ T5796] bond1 (unregistering): Released all slaves [ 990.399799][ T5796] tipc: Left network mode [ 990.447566][ T5458] 8021q: adding VLAN 0 to HW filter on device eth25 [ 990.549466][ T5458] 8021q: adding VLAN 0 to HW filter on device eth26 [ 990.660101][ T5458] 8021q: adding VLAN 0 to HW filter on device eth27 [ 990.695396][ T5796] hsr_slave_0: left promiscuous mode [ 990.697600][ T5796] hsr_slave_1: left promiscuous mode [ 990.700344][ T5796] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 990.703429][ T5796] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 990.706996][ T5796] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 990.710039][ T5796] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 990.715245][ T5796] veth1_macvtap: left promiscuous mode [ 990.717174][ T5796] veth0_macvtap: left promiscuous mode [ 990.827601][ T5796] team0 (unregistering): Port device team_slave_1 removed [ 990.833140][ T5796] team0 (unregistering): Port device team_slave_0 removed [ 990.848701][ T1177] smc: removing ib device syz0 [ 990.857198][ T1177] smbdirect: ib_dev[syz0] removed [ 990.871969][ T1349] wg2 speed is unknown, defaulting to 1000 [ 990.873569][ T5458] 8021q: adding VLAN 0 to HW filter on device eth28 [ 990.873878][ T1349] syz0: Port: 1 Link DOWN [ 991.214470][ T5796] IPVS: stop unused estimator thread 0... [ 992.391213][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.393798][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.220167][ T5156] udevd[5156]: worker [15849] /devices/virtual/block/nbd1 timeout; kill it [ 994.223782][ T5156] udevd[5156]: seq 25043 '/devices/virtual/block/nbd1' killed