last executing test programs: 4m42.052789421s ago: executing program 3 (id=90): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = userfaultfd(0x801) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r5, 0x6b, 0x1, &(0x7f0000000240)=[{0x2, 0x2, {0x2, 0x0, 0x4}, {0x1, 0x1}, 0x2, 0x2}, {0x2, 0x0, {0x1, 0x1, 0x4}, {0x0, 0xf0}, 0xfe, 0x2}, {0x0, 0x0, {0x2, 0x0, 0x1}, {0x0, 0xf0, 0x2}, 0x1, 0xff}], 0x54) setsockopt$SO_J1939_FILTER(r5, 0x6b, 0x1, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) read$alg(r1, &(0x7f0000001340)=""/4096, 0x1000) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_LAPIC(r6, 0x8400ae8e, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, 0x0) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0xfe}) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000480)={0x0, 0x40, 0xffff, 0x9, 0x3ff, 0x6}, &(0x7f0000000440)=0x14) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000140)=0x19) ioctl$TIOCSTI(r8, 0x5412, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="5400000010001fff000000000000000100000000", @ANYRES32=0x0, @ANYBLOB="0000000000050000ff001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="090c0000800001000a0001000180c20000000000"], 0x54}}, 0x0) r10 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000000)={r7}, 0xffe6) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002b00)='/sys/kernel/warn_count', 0x40, 0x82) read$FUSE(r11, &(0x7f0000002b40)={0x2020}, 0x2020) r12 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r12, &(0x7f0000001300)='7', 0x1) syz_usb_control_io$hid(r10, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 4m38.899771583s ago: executing program 3 (id=98): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) 4m38.332872955s ago: executing program 3 (id=101): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x1f00, {0x6, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x4c}}, 0x8000) 4m37.352638343s ago: executing program 3 (id=106): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x2, 0x2) r1 = socket$packet(0x11, 0x3, 0x300) bind$packet(r1, &(0x7f0000000240)={0x11, 0x19, 0x0, 0x1, 0xa, 0x6, @local}, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xe, 0x4, 0x8, 0xb, 0x100, 0xffffffffffffffff, 0xffffffff}, 0x50) r2 = signalfd(r1, &(0x7f0000000080)={[0x5d5, 0x101]}, 0x8) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x4e22, @rand_addr=0x64010100}, {0x2, 0x4e22, @multicast2}, {0x2, 0x4e21, @loopback}, 0x1e4, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000140)='wlan0\x00', 0x5, 0x4, 0xc24}) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r3 = socket(0x80000000000000a, 0x5, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x104) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x3, 0x0, @mcast1={0xff, 0x7}, 0x8a}}, {{0xa, 0x0, 0x10001, @local}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x5, @mcast1={0xff, 0x7}, 0x4000}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xa}, 0x3}}}, 0x108) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x3, 0x0, @mcast1={0xff, 0x7}, 0x8a}}, {{0xa, 0x0, 0x10001, @local}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3}}}, 0x108) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x503, 0x0, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x14e15, 0x29852}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xfd54, 0x2, 0x0, 0x1, [@IFLA_GRE_OKEY={0x0, 0x5, 0xee}, @IFLA_GRE_OFLAGS={0x0, 0x3, 0x6}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}]}, 0x40}}, 0x48840) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) unshare(0x26020480) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000000600)={0x10, {{0x2, 0x4e23, @remote}}, 0x1, 0x6, [{{0x2, 0x4e23, @empty}}, {{0x2, 0x4e23, @rand_addr=0x64010101}}, {{0x2, 0x4e21, @rand_addr=0x64010102}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e23, @local}}]}, 0x38c) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r8, 0xfffd, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x4}}) 4m37.122532226s ago: executing program 3 (id=108): syz_open_dev$ptys(0xc, 0x3, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) read$FUSE(r0, &(0x7f0000001280)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x130, 0x0, 0x4fcb6233, {0x0, 0xfffffff7, 0x0, '\x00', {0x1, 0x801, 0x8000000000000000, 0x804, r1, 0x0, 0x1000, '\x00', 0x6, 0x81, 0xffffffff, 0x3, {0x8, 0x8}, {0x4000000000006, 0x9}, {0x2f, 0x7}, {0x1000000000, 0xa00}, 0x80008003, 0xa, 0xfffffffe, 0x4}}}}) r2 = getegid() mount$fuse(0x0, 0x0, &(0x7f0000000100), 0x2000000, &(0x7f0000000340)={{}, 0x2c, {}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@default_permissions}, {@max_read={'max_read', 0x3d, 0xc2f9901}}, {@blksize={'blksize', 0x3d, 0xe00}}, {@blksize={'blksize', 0x3d, 0x200}}], [{@permit_directio}, {@fsuuid={'fsuuid', 0x3d, {[0x32, 0x37, 0x33, 0x36, 0x30, 0x1b, 0x36, 0x5a], 0x2d, [0x31, 0x35, 0x32, 0x64], 0x2d, [0x63, 0xf1, 0x66, 0x30], 0x2d, [0x30, 0x63, 0x62, 0x64], 0x2d, [0x3e, 0x30, 0x62, 0x65, 0x64, 0x33, 0x37, 0x63]}}}, {@subj_role={'subj_role', 0x3d, '$&%\\%-#:@'}}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@smackfsdef}, {@smackfstransmute={'smackfstransmute', 0x3d, ']/\\.!-(}]%'}}]}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x18}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = geteuid() mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x800, &(0x7f00000006c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',access=any,aname=-,directio,rootcontext=system_u,uid<', @ANYRESDEC=r5, @ANYBLOB=',d\x00\x00\x00\x00\x00\x00\x00\x00ure,\x00']) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006180)="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", 0x2000, &(0x7f00000082c0)={&(0x7f0000001780)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x7, 0x400, 0x101, 0xfff8, 0x5, 0x1c14f818, 0x0, 0x0, 0x8, 0x8}}, &(0x7f0000000600)={0x18, 0x0, 0x4, {0x7}}, &(0x7f0000001800)={0x18, 0x0, 0x1, {0x2f93}}, &(0x7f0000001840)={0x18, 0x0, 0x0, {0x7}}, &(0x7f0000001880)={0x18, 0x0, 0x5, {0xfe4c}}, &(0x7f00000018c0)={0x28, 0x0, 0x89, {{0x7, 0xfffffffffffffffa}}}, &(0x7f0000001900)={0x60, 0x0, 0xa, {{0x7ff, 0x7, 0x3, 0xc, 0x80000, 0x9, 0x4}}}, &(0x7f0000001980)={0x18, 0x0, 0x8001, {0x5}}, &(0x7f00000019c0)={0x17, 0x0, 0x0, {'workdir'}}, &(0x7f0000001a00)={0x20, 0x0, 0x4, {0x0, 0x1d}}, &(0x7f0000001a80)={0x78, 0x0, 0x800, {0x5, 0xfffffffd, 0x0, {0x3, 0x1, 0x7, 0x285, 0x7, 0x8, 0x1, 0x21, 0xe, 0xa000, 0x6, 0x0, 0x0, 0xa, 0x4}}}, &(0x7f0000001b00)={0x90, 0x0, 0x0, {0x4, 0x3, 0x7ff, 0x5, 0x2, 0x5, {0x2, 0x1, 0x0, 0x7ff, 0x7, 0x2, 0xbc3, 0x4, 0xc, 0x6000, 0x10001, 0x0, 0x0, 0x65, 0x2}}}, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1000000000000000012372501bf0e56c"], &(0x7f0000001d40)=ANY=[@ANYBLOB="e001000000000000080000000000000005000000000000000000000000000000001000000000000008000000000000001000000002000000020000000000000001000000000000000100e6ffffff00000000000000000000b42e000000000000030000000000000054a9a25209000000fa0000000080000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff030000930a0000000000000000000000000000ffffff7f0000000000000000060000000000000000000000010000000000000005000000000000003200000000000000080000000200000001000000000000003e31000000000000fe0400000000000001800000000000001c6a0000000000000800000000000000000000000910000080ffffff0020000005000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000090ffffff7f000000000300000000000000008000000000000002000000010000007d55000000000000020000000000000003000000000000000600000000000000e100000000000000020000000900000006000000000000006503000000000000980100000000000008000000000000000000008000000000000400000000000009000000810000000100000000a0000081000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="070000000000000000000000040000000000000005000000000000000000000007000000"], &(0x7f0000001f40)={0xa0, 0x0, 0xfffffffffffffffd, {{0x6, 0x3, 0x77, 0xfff, 0xfffffff7, 0xd9, {0x2, 0x8, 0x200, 0x0, 0x3, 0xe, 0x8, 0x7, 0x8, 0x4000, 0xd, r1, 0xee01, 0xcad, 0x5}}, {0x0, 0x6168fb009502b14e}}}, &(0x7f0000002000)={0x20, 0x0, 0x6, {0x0, 0x0, 0x8, 0x4157c751}}, &(0x7f0000008180)={0x130, 0x0, 0x3, {0x901d, 0x9, 0x0, '\x00', {0x80, 0x6, 0x6, 0x4, r5, 0xee01, 0x4000, '\x00', 0x2, 0xfffffffffffffffc, 0xfffffffffffffff6, 0x7, {0xffff, 0x80000001}, {0x2, 0x1ff}, {0x0, 0x2}, {0x0, 0x7d1}, 0x6b08, 0x4, 0x10, 0x4}}}}) ptrace$PTRACE_GETSIGMASK(0x420a, 0x0, 0x8, &(0x7f0000000240)) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r6, &(0x7f0000004180)="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", 0x2000, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x5, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x0, {0x40, 0x3, 0x6, 0x6c1, 0x1000, 0xfffffffffffffffc, 0x0, 0x0, 0x120, 0x2000, 0x0, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r6, &(0x7f0000000440)={0x50, 0x0, r7, {0x7, 0x29, 0x0, 0x14c0348, 0x40, 0x1, 0xfffffff1, 0x0, 0x0, 0x0, 0x80, 0x7fffffff}}, 0x50) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x42, 0x42) ioctl$TIOCSWINSZ(r8, 0x5414, &(0x7f00000000c0)={0x3ff, 0x6, 0x8, 0x5}) 4m36.871292747s ago: executing program 3 (id=109): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2(0x0, 0x5000) socket(0x10, 0x2, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000180)=ANY=[], 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x4f) accept4(r2, 0x0, 0x0, 0x800) openat$ipvs(0xffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) pipe(&(0x7f0000000240)) r3 = syz_io_uring_setup(0x118d, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff, 0xc2}, 0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r1, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r3, 0x47f5, 0x77cf, 0x0, 0x0, 0x0) 4m36.782331597s ago: executing program 32 (id=109): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2(0x0, 0x5000) socket(0x10, 0x2, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000180)=ANY=[], 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x4f) accept4(r2, 0x0, 0x0, 0x800) openat$ipvs(0xffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) pipe(&(0x7f0000000240)) r3 = syz_io_uring_setup(0x118d, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff, 0xc2}, 0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r1, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r3, 0x47f5, 0x77cf, 0x0, 0x0, 0x0) 2m57.698711163s ago: executing program 4 (id=620): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x7cff, 0xbd, 0x4, 0x6, 0x1ff}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x3e, 0x20}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x8}], 0x2}, 0x5) 2m57.356591052s ago: executing program 4 (id=621): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r2 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$kcm(0x29, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x12, 0x8, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f00000000c0)=0x32) ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f0000000000)=0x31) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$getregset(0x4211, r4, 0x2, 0x0) socket$isdn_base(0x22, 0x3, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x101d0}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r1, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240), 0xfffffecc) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x3) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r5 = getpid() syz_pidfd_open(r5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) 2m56.420017221s ago: executing program 4 (id=630): bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0xd, @any, 0x4, 0x1}, 0xe) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f00000002c0)={0x0, "fbd78df8363b88d9c3a4cae9b29b529de5e20000000000001400", 0x3}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffffffffffcfe, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000000540)=""/102391, 0x18ff7) r2 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) userfaultfd(0x801) socket(0x18, 0x0, 0x1) 2m55.389880033s ago: executing program 4 (id=635): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[]) chdir(&(0x7f0000000100)='./file0\x00') openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x1c1840, 0x92) r2 = syz_open_dev$vim2m(&(0x7f0000000440), 0x4, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc0405602, &(0x7f00000001c0)=@fd={0x4, 0x1, 0x4, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ';\'S;'}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000008000000040000000600000001000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000009924aa70ef04d40379fa826236cc2fa7f4800b1391b8cafadc", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) r5 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r5, &(0x7f00000001c0)="f1", 0x1) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r6, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r6, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0xfeffffffffffffff, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r8, r9, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000300)={{{@in=@private, @in6=@ipv4={""/10, ""/2, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000000400)=0xe4) mount$afs(&(0x7f00000000c0)=@cell={0x23, '', 'syz1'}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x200000e, &(0x7f0000000500)={[{}, {@flock_strict}, {@flock_write}, {}, {@dyn}, {@flock_strict}], [{@uid_gt={'uid>', r8}}, {@euid_gt}, {@context={'context', 0x3d, 'staff_u'}}, {@dont_hash}, {@uid_eq={'uid', 0x3d, r10}}, {@subj_type={'subj_type', 0x3d, '9p\x00'}}]}) sendfile(r5, r1, 0x0, 0x40001) sendfile(r5, r3, 0x0, 0x7ffff000) 2m54.281892064s ago: executing program 4 (id=639): open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) open_tree(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x35dc00, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) fchmod(r0, 0x48) socket$nl_route(0x10, 0x3, 0x0) read$FUSE(r1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f0000000000)=@generic={0x1, 0x4d, 0xea1a}) socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r4 = socket$inet6(0x10, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0080bd2dca8a9848a3c728f1c46b7b31afdc1338d509fd7f00000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 2m53.287607571s ago: executing program 4 (id=644): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (fail_nth: 35) 2m52.719346287s ago: executing program 33 (id=644): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (fail_nth: 35) 1m39.133860202s ago: executing program 2 (id=1003): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0x5}, 0x18) r3 = io_uring_setup(0x2f00, &(0x7f0000000700)={0x0, 0xe8e2, 0x400, 0x20001, 0x2d6}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000540), 0x2400) 1m38.14115155s ago: executing program 2 (id=1009): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x900, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x789d2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xc, 0x0, 0x1, 0x4, 0x9, 0x4cca}, {0x6, 0x1, 0x5, 0x10, 0x7, 0x312}, 0x3, 0x10, 0xd1d}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xa89d84ea6e694e0f}, @TCA_TBF_BURST={0x8, 0x6, 0xb1a}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56f41, 0x1070b923, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0xffe0}, {0x1, 0xb}, {0xc, 0xd}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x5}}, @TCA_HTB_DIRECT_QLEN={0x8}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40040c5}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1m36.679042461s ago: executing program 2 (id=1014): socket$packet(0x11, 0x3, 0x300) socket$kcm(0x10, 0x2, 0x4) r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='fuseblk\x00', &(0x7f0000000200)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='{:\'@-\x00', &(0x7f0000000180)='%*.\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='fuseblk\x00', &(0x7f0000000100)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000a40)='^,/\x00', &(0x7f0000000a80)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='\x1c@\\\x00', &(0x7f00000002c0)='\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000300)='\xe7', &(0x7f0000000340)='\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000380)='}\x00', &(0x7f0000000880)='\xc1J\xaf\xfd,\x86\xbc\xa9\x02\xf2\xf6\xe2\xcd\x9f\xf6\x83\xeb\xba_6\xfdR\xd0\x8d\xc1\xf6.$w\xab|*`\x11H+^\xbb\x8ar\xb1\x8ec\xecQ\x94\x15\xbe\x80E\x9c\x93Hq?<(+\xceb0\xcc\xad\xdd\x1c\xee\x19\x1b\x91Z\x85\xb7\x04\xe7\xaf\xe0W,G\xc8\xc0\xbcR\x90\x17\x19@m\xa5\x19\x16i\xc8\x99)\xa5\xb0\xba\xbc\xe0rV\x06\xd0B\x0f\xcdF\xbc\x8e\x8a^%8k\x849@\x15=kxS\x1c\xc1\xdaT\x9c\b\xb6\xd8\xa0st~\xf1\x93\xb8\xba\xa5gV\x18F\x8f\xf4b\xdc\x19_P\x81\xa4\xc3\\g\x11\xd1\xc8 U\xba\x03\xc9\xf17\x88\r\xb99]\xdfM\xc8AQB\xc3\xf0\xf7t\xee\x95&w\xc3;\xf1C\xea!J\x19\xe1\xfe\x0f\x84\xdfY\x10\xed\x1c\xb2n\xc0ME\xaa\x9e\xd1f\x92q\xeb\xdb)\xcd1(>\x8e\x0f}\x03\xdd\xf8\x84\x9bz!\x80F\xc5ls< \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x98\x1c\x9f\xbd\xcd\xea\xc3w\xa3\xf5\x1d.\x00\x00\x00\xa0\xf4\xe9\xe2\x83\xac\xde\x95cmvM\x12\xc1O\x1f#\xcd\x90\x1e\x03\x1e}\xe7w\xe7\"Oh`\xed\bM9\xaf\xa3BQ\xbf\xfd1\x1cG\xb5\xed\x86\xb9Q(\x19dZ\x8da\x008e*\x928\xcf\x0f\x0e\x05\x1dM?\x11$E\xc3\x12\x1e\xffI\x84t0D\xec\xf3T\xe2\xddJm\x87\xc9\xb1\xff\n\xa1\x13\xcbo\xc6\xda\x84\x02\xa3\x14\xf2q\x96\xa8Sa\xe4\x1f\x01\xa2]\xb2\xc9\xd5\xff\xfd\xf2\xb5\xf5\xef \xc7\x02\x927\xdb\xa5\a\x9eS\xb6\xe2\xbaL\x99n\xb4\xe3\xf7\x0eU\xc0', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000240)='fuseblk\x00', 0x0, r0) 1m36.597999157s ago: executing program 2 (id=1015): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) getpriority(0x1, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x108) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000280)={0x50, 0x0, r3, {0x7, 0x1f, 0x1, 0x8888b1, 0x0, 0x1, 0x2, 0xa, 0x0, 0x0, 0x2, 0x8}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0xa4901, 0x28) write$tcp_congestion(r4, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r4, r2) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x6faa, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0x3e0}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@rand_addr=0x64010102, 0x0, 0x93}, 0x0, @in=@local, 0x3505}}, 0xe4) r5 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x2503, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000000140)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) eventfd(0xc) close(0x3) 1m35.126512755s ago: executing program 2 (id=1018): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) io_setup(0x200, &(0x7f00000010c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0xfffe, r5, 0x0}]) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xf) write$UHID_INPUT(r4, &(0x7f0000001040)={0xe, {"a2e3ad21ed0d52f90b9b6e0987f70e06d038e7ff7fc6e5539b3248298b089b0708346d090890e0878f0e1ac6e7049b334a959bfc9a240d2567f3988f7ef319520100ffe8d1780700523c921b1b9b31070d075d0936cd3b78130daa61f94b61404d64aec1b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb056d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498be0800000000000000f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c088215ec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6f44ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d208001349b41db6efcffac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ec126c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b8247068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2a15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee53259289d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c1980778efa5ea567b7b7430acc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a0700d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8440daaa69bf5c8f4350aeae9ca1207e76061b28f27da19acc7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211c7847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7beddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5409711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e781171e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e24919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b906ce2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf3f2aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7ae288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f00000000000000000000b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289d8523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c78e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d53588a0f9455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d664130bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7899484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e7c7b2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df06720ba2b26bbfcc807c8aabb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db38b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ea4cd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f031755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb24ee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1040}}, 0x1006) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0) socket$netlink(0x10, 0x3, 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x14) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chown(&(0x7f00000003c0)='./cgroup\x00', 0x0, 0x0) stat(&(0x7f0000000240)='./file0/file0\x00', 0x0) 1m34.787466187s ago: executing program 2 (id=1024): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SYNPROXY={0x2c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x7ff}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xfffffffc}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x401}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xe1}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xa}]}, @CTA_TIMEOUT={0x8}, @CTA_LABELS={0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0xd1) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write(r2, &(0x7f0000000000)="0d000000010001", 0x7) (async) r3 = openat$uinput(0xffffff9c, &(0x7f0000000180), 0x802, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f00000004c0)={{0x0, 0x0, 0x0, 0x4}, 'syz1\x00', 0xfffffffe}) (async) ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x0) (async) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r3, 0x5501) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r3], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) (async) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCGETS(r5, 0x560d, &(0x7f0000000240)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r6, &(0x7f0000000180)=[{{&(0x7f0000000040)={0xa, 0x4e27, 0x0, @remote, 0x6}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000000)="d6", 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e1e, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x201}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000140)='d', 0x1}], 0x1}}], 0x2, 0x2004c0d0) close_range(r6, 0xffffffffffffffff, 0x0) (async) ioctl$UI_DEV_DESTROY(r3, 0x5502) 1m34.707508853s ago: executing program 34 (id=1024): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SYNPROXY={0x2c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x7ff}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xfffffffc}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x401}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xe1}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xa}]}, @CTA_TIMEOUT={0x8}, @CTA_LABELS={0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0xd1) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write(r2, &(0x7f0000000000)="0d000000010001", 0x7) (async) r3 = openat$uinput(0xffffff9c, &(0x7f0000000180), 0x802, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f00000004c0)={{0x0, 0x0, 0x0, 0x4}, 'syz1\x00', 0xfffffffe}) (async) ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x0) (async) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r3, 0x5501) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r3], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) (async) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCGETS(r5, 0x560d, &(0x7f0000000240)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r6, &(0x7f0000000180)=[{{&(0x7f0000000040)={0xa, 0x4e27, 0x0, @remote, 0x6}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000000)="d6", 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e1e, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x201}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000140)='d', 0x1}], 0x1}}], 0x2, 0x2004c0d0) close_range(r6, 0xffffffffffffffff, 0x0) (async) ioctl$UI_DEV_DESTROY(r3, 0x5502) 4.940459369s ago: executing program 1 (id=1486): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) io_setup(0x200, &(0x7f00000010c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0xfffe, r5, 0x0}]) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xf) write$UHID_INPUT(r4, &(0x7f0000001040)={0xe, {"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", 0x1040}}, 0x1006) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x14) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chown(&(0x7f00000003c0)='./cgroup\x00', 0x0, 0x0) stat(&(0x7f0000000240)='./file0/file0\x00', 0x0) 3.688151549s ago: executing program 0 (id=1492): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x900, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x789d2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xc, 0x0, 0x1, 0x4, 0x9, 0x4cca}, {0x6, 0x1, 0x5, 0x10, 0x7, 0x312}, 0x3, 0x10, 0xd1d}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xa89d84ea6e694e0f}, @TCA_TBF_BURST={0x8, 0x6, 0xb1a}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56f41, 0x1070b923, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0xffe0}, {0x1, 0xb}, {0xc, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x40040c5}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.543753374s ago: executing program 0 (id=1493): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9c, 0x11e41e7a, 0x10000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, 0x0, 0x6000000b) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) add_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000080)="000001020200", 0x6, 0xfffffffffffffffb) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000039c0)={0x1b, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000791d7b5af8ff00000000bfa20000000000000702000000000000000085000000430000009500"/72], &(0x7f0000003a80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioprio_get$pid(0x5, r1) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x6, 0x7, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x800, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x2000000000004, 0xa], 0x41000, 0x1c4213}) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="e0000000", @ANYRES16, @ANYBLOB="010000000000000000000100000008"], 0xe0}}, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000280)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}, {&(0x7f0000000480)="e77561ea296f9fb13bcd546171ea7fb6c3194da870c81ee2f9a90b19f4dae7a8eae658628150d421053b9203da57aa156ab39cc12f2be68d9332b23ff8eb6aa3ab54d1cb83404caeb845b2e8bb1ebae5ee70fbe3adbcc9cce13788cb019e3f173fe45c0df5da3e57a5b15fc7172a4cfe98d3f843a4204f0e80fbe2a9b671bdcc27c640b7ab19a4cb704ca05c4b8bad9b2a54ba5c67f25fdee6b74f68ce48c3f6b5899f7e20ef", 0xa6}, {&(0x7f00000005c0)="2ac9ca1316fce060d43761ed1930547241742b0a8ded94371cd555ab8e3186c808f6ad51a15e81da4dde592532246fb7b2d66877b4c7bb4db29ad2047c1f419440405c3508d461f8080a47541cd8b4b2ca9d9ae2a30831dee955d1017d745685a5d3a213e0bbe4ac518d2ed9ee98bf19515e1a2dbecd4b306013e5fca9146ca011991af71fffa4785fbd1e25d1145e331827787c6035826ef0a2ada751e6276d2a39b4779db03f447a2dd3015af91b6ce9bff71f674f4daa48d3abb881bfc6467ddcd68956687580a1f109d76125580075d2e0a0b1b1d2814e2014a06101", 0xde}], 0x3) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2.890809822s ago: executing program 1 (id=1495): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, 0x0) mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x8) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) pread64(r2, 0x0, 0x0, 0x0) 2.590169924s ago: executing program 0 (id=1496): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000000)="c09509619c041650", 0x8}, {&(0x7f0000000340)="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", 0xfd}, {&(0x7f0000000180)="fdb94eac2343ea415986bd9fb4b92c2563f6d3217f40973210f90e6f0c8aca17ef635c3af6d5428a96ccd099e775d5f0631bddd281305bee694bfcae4c5abf287e7e81216bfcdaefe624dbbf66de30935d30020e2a0a0b0a6ad1553943fb1b0c08abaee240b36d8fa81808bfecb6af", 0x6f}, {&(0x7f00000000c0)="495379f9eb7917a4d03f2693c19f3c28d9706eba0f2b", 0x16}], 0x4) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2a, 0x8000004, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2a, 0x8000004, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 2.391092628s ago: executing program 0 (id=1498): r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000810) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$int_out(r2, 0x0, &(0x7f0000000040)) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendmsg$NFC_CMD_LLC_SET_PARAMS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x7, &(0x7f0000001fc0)={&(0x7f0000001f40)={0x24, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x4f}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000045}, 0x5000) sendfile(r4, r4, 0x0, 0x200900) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) syz_extract_tcp_res(&(0x7f0000000580)={0x41424344}, 0x8147, 0x200) syz_extract_tcp_res(&(0x7f00000005c0)={0x41424344}, 0xff, 0x1) syz_emit_ethernet(0x64, &(0x7f0000000600)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x18, 0x56, 0x64, 0x0, 0x55, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x44}, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x4e21, 0x4e22, r5, r6, 0x0, 0x0, 0x7, 0x10, 0xfffd, 0x0, 0x4, {[@exp_smc={0xfe, 0x6}]}}, {"a9584fad2efd778020b2854d8d74836df7d1639e4774f6b1e1e0378178f718150ac60cdaeb1f"}}}}}}, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000500)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x1, 0x8, 0x4c, 0x65, 0x0, 0x3, 0x6, 0x0, @private=0xa010102, @private=0xa010102, {[@rr={0x7, 0xb, 0x35, [@broadcast, @empty]}]}}, {{0x4e22, 0x4e23, r6, 0x41424344, 0x1, 0x0, 0xb, 0xc2, 0x5, 0x0, 0x9, {[@window={0x3, 0x3}, @generic={0x1, 0x12, "ff9a30062b66ab5f75734e0d07e2adcd"}]}}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(0xffffffffffffffff, 0x3b82, &(0x7f0000000100)={0x18, 0x0, 0x1, 0x0, &(0x7f00000000c0)=[{0x80000001, 0xfffffffffffffffa}]}) writev(r0, &(0x7f00000000c0)=[{0x0}], 0x1) openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 2.247972489s ago: executing program 5 (id=1499): connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)={@ifindex, r0, 0x2f}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@fallback=r0, r2, 0x2f, 0x2038, 0x4, @void, @void, @value=r3}, 0x20) 2.166364859s ago: executing program 5 (id=1500): r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000810) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$int_out(r2, 0x0, &(0x7f0000000040)) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendmsg$NFC_CMD_LLC_SET_PARAMS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x7, &(0x7f0000001fc0)={&(0x7f0000001f40)={0x24, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x4f}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000045}, 0x5000) sendfile(r4, r4, 0x0, 0x200900) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) syz_extract_tcp_res(&(0x7f0000000580)={0x41424344}, 0x8147, 0x200) syz_extract_tcp_res(&(0x7f00000005c0)={0x41424344}, 0xff, 0x1) syz_emit_ethernet(0x64, &(0x7f0000000600)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x18, 0x56, 0x64, 0x0, 0x55, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x44}, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x4e21, 0x4e22, r5, r6, 0x0, 0x0, 0x7, 0x10, 0xfffd, 0x0, 0x4, {[@exp_smc={0xfe, 0x6}]}}, {"a9584fad2efd778020b2854d8d74836df7d1639e4774f6b1e1e0378178f718150ac60cdaeb1f"}}}}}}, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000500)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x1, 0x8, 0x4c, 0x65, 0x0, 0x3, 0x6, 0x0, @private=0xa010102, @private=0xa010102, {[@rr={0x7, 0xb, 0x35, [@broadcast, @empty]}]}}, {{0x4e22, 0x4e23, r6, 0x41424344, 0x1, 0x0, 0xb, 0xc2, 0x5, 0x0, 0x9, {[@window={0x3, 0x3}, @generic={0x1, 0x12, "ff9a30062b66ab5f75734e0d07e2adcd"}]}}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(0xffffffffffffffff, 0x3b82, &(0x7f0000000100)={0x18, 0x0, 0x1, 0x0, &(0x7f00000000c0)=[{0x80000001, 0xfffffffffffffffa}]}) writev(r0, &(0x7f00000000c0)=[{0x0}], 0x1) openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 1.950263357s ago: executing program 1 (id=1501): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r0, r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0xcc0, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e86dd", 0x0, 0x401, 0x32, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.942044938s ago: executing program 1 (id=1502): setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x8}, 0x10) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, &(0x7f0000000100)=""/222, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@mcast2}, 0x14) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8000, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x3) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = userfaultfd(0x801) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0) socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x200000, {0x2, 0x14, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}}, 0x1c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x70bd26, 0x0, {0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2900}}, 0x1c}}, 0x8c0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c61"], 0x50}}, 0x4000800) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) r7 = userfaultfd(0x80801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000100)) 1.465894296s ago: executing program 6 (id=1503): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x60, 0x43, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001600), 0x1, r1}, 0x38) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f0000000200)={0x800080, 0x858, 0x8, 0xc, 0x43, 0x558}) poll(&(0x7f0000000000)=[{r2, 0x230}], 0x1, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) sendmmsg(r0, &(0x7f0000002940)=[{{0x0, 0x4a, &(0x7f0000000100)=[{&(0x7f00000001c0)}], 0x1}}], 0x1, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) 1.429311767s ago: executing program 0 (id=1504): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, 0x0, &(0x7f00000000c0)) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r3, {0xfff3, 0x10}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x20000000, 0x4012}, 0x20000050) 1.27303267s ago: executing program 6 (id=1505): getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e0000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000000)='`', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[r2], 0x1, 0x800}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r3}, 0x18) r4 = socket$vsock_stream(0x28, 0x1, 0x0) r5 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x0) ioctl$SG_GET_ACCESS_COUNT(r5, 0x2289, &(0x7f0000000140)) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10) 1.209485171s ago: executing program 5 (id=1506): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000002000000000000000080000079920200", @ANYRES32, @ANYBLOB="0d0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000900000000000000109500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @in6=@empty, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x2f, 0x0, 0xee01}, {0x8000, 0x10, 0x5, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000}, {0x0, 0x0, 0xfffffffffffffffc}, 0x3, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x32}, 0x0, @in=@remote, 0x0, 0x0, 0x0, 0x6, 0xfffffffd, 0xda}}, 0xe4) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) 1.20281651s ago: executing program 6 (id=1507): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x503, 0x3f000000, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x2}, @IFLA_BR_MCAST_ROUTER={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 1.156201399s ago: executing program 0 (id=1508): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000002240)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a0, 0xec, 0x111, 0x4b4, 0xec, 0x700, 0x1d8, 0x278, 0x278, 0x1d8, 0x278, 0x3, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0xffff, {0x80000000}}}}, {{@ipv6={@empty, @private1, [0xff, 0xffffffff, 0xff, 0xff], [0xffffffff, 0xffffffff, 0x1ff000180, 0xffffffff], 'bond_slave_0\x00', 'macsec0\x00', {}, {}, 0x1d, 0x4, 0x6}, 0x0, 0xa4, 0xec}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0x66, {0x4}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x2fc) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49dd, 0x6, 0x9, 0x3, 0x0, "fa3d76170000001b"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) sendto$inet(r3, &(0x7f0000000000)='\x00', 0x1, 0x24008800, 0x0, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) write$char_usb(r4, &(0x7f00000008c0)='-0', 0x2) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000140)={0x14, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220500"], 0x0}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0x4, 0x1000000b, 0x240, 0x4, "00000000000000000000c2041a02003d00"}) r5 = syz_open_pts(r0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6, 0x0, 0x8}, 0x18) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x6, 0x0, 0x7fff0006}]}) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_opts(r9, 0x0, 0x34, 0x0, &(0x7f0000000040)) close_range(r7, 0xffffffffffffffff, 0x0) r10 = dup3(r5, r0, 0x0) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000000)=0x17) 1.080169958s ago: executing program 6 (id=1509): r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000810) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$int_out(r2, 0x0, &(0x7f0000000040)) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendmsg$NFC_CMD_LLC_SET_PARAMS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x7, &(0x7f0000001fc0)={&(0x7f0000001f40)={0x24, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x4f}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000045}, 0x5000) sendfile(r4, r4, 0x0, 0x200900) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) syz_extract_tcp_res(&(0x7f0000000580)={0x41424344}, 0x8147, 0x200) syz_extract_tcp_res(&(0x7f00000005c0)={0x41424344}, 0xff, 0x1) syz_emit_ethernet(0x64, &(0x7f0000000600)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x18, 0x56, 0x64, 0x0, 0x55, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x44}, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x4e21, 0x4e22, r5, r6, 0x0, 0x0, 0x7, 0x10, 0xfffd, 0x0, 0x4, {[@exp_smc={0xfe, 0x6}]}}, {"a9584fad2efd778020b2854d8d74836df7d1639e4774f6b1e1e0378178f718150ac60cdaeb1f"}}}}}}, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000500)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x1, 0x8, 0x4c, 0x65, 0x0, 0x3, 0x6, 0x0, @private=0xa010102, @private=0xa010102, {[@rr={0x7, 0xb, 0x35, [@broadcast, @empty]}]}}, {{0x4e22, 0x4e23, r6, 0x41424344, 0x1, 0x0, 0xb, 0xc2, 0x5, 0x0, 0x9, {[@window={0x3, 0x3}, @generic={0x1, 0x12, "ff9a30062b66ab5f75734e0d07e2adcd"}]}}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(0xffffffffffffffff, 0x3b82, &(0x7f0000000100)={0x18, 0x0, 0x1, 0x0, &(0x7f00000000c0)=[{0x80000001, 0xfffffffffffffffa}]}) writev(r0, &(0x7f00000000c0), 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 1.035088779s ago: executing program 1 (id=1510): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x7, @remote}, r2}}, 0x48) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)}, 0x45) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0x8) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000010000000000000653c7070cd968bcc000000"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r4}, 0x18) r5 = socket$l2tp(0x2, 0x2, 0x73) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10) sendmmsg$inet(r5, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x700}], 0x40000cf, 0x0) 337.49244ms ago: executing program 5 (id=1511): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000400)=0x10000002) 288.849025ms ago: executing program 5 (id=1512): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$read(0xb, r0, &(0x7f0000000080), 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) r2 = fsopen(&(0x7f0000000080)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x18) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f0000000140)='./file0\x00') r4 = openat2(r3, &(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x8}, 0x18) socketpair$unix(0x1, 0x2, 0x0, 0x0) keyctl$get_keyring_id(0x0, r0, 0x10000000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7070000000400000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c43000000e8fe55a1190015000600142603600e1209001b0000000401a80016000a0004", 0x37}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) ioctl$VIDIOC_G_ENC_INDEX(r4, 0x8818564c, &(0x7f0000000980)) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0xfd, 0x9, 0x1, 0x1}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x9, r7, 0x4}, 0x38) r8 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(r8, 0x40046109, &(0x7f0000000140)=0x11) write$cgroup_subtree(r6, &(0x7f0000000080)=ANY=[@ANYRESDEC=r1, @ANYRESOCT, @ANYRES16=r7, @ANYRES64=r5, @ANYRES64, @ANYRES32=r8], 0xfe33) 202.75937ms ago: executing program 5 (id=1513): openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x478242, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c800}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000c40)={0x2020}, 0x2020) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r1 = openat$ptp1(0xffffff9c, &(0x7f0000000180), 0x82401, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000500)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee0800108e8d8ef52a985162f7ce06bbace80170000000000000000090000001fb791643a5ee4d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e97010000000000000000a9b7", 0xd8}], 0x1}, 0x64040084) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000080)={0x1b, 0x2, 0x0, "b43d70dde5dbbbe40f00f401bbe6c9000000c67f00"}) ioctl$CDROMVOLCTRL(0xffffffffffffffff, 0x31f, &(0x7f0000000080)={0x8, 0x1, 0x8, 0x7}) 152.449643ms ago: executing program 1 (id=1514): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111}}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtaction={0xfe8, 0x30, 0xffff, 0x70bd2d, 0x20000000, {}, [{0xfd4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10001, 0x5, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x6}}}]]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2b9, 0xf, 0x4, 0xfffffff8, 0x2e3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_bpf={0xf1c, 0x3, 0x0, 0x0, {{0x8}, {0xef4, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xeed, 0x6, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xfe8}}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x2, @loopback, 0xa09c}, {0xa, 0x2, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}}, 0xffffffffffffffff, 0x40099d}}, 0x48) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000040)="58000000140019234083", 0xa}], 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) listen(r6, 0x3) 101.83802ms ago: executing program 6 (id=1515): r0 = msgget(0x1, 0x64d) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) msgsnd(r0, &(0x7f00000001c0)={0x4621266119a96b9f}, 0x8, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x68, 0x10, 0x503, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, 0x0, 0x201a0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_BROADCAST={0xa, 0x2, @remote}, @IFLA_MAP={0x20, 0xe, {0xd, 0xfffffffffffffffe, 0x7, 0x0, 0x8, 0x8}}]}, 0x68}}, 0x800) 0s ago: executing program 6 (id=1516): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r0, &(0x7f0000000340)="8fcb0000000000", 0x7) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x3c) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0xf400}, 0x58) kernel console output (not intermixed with test programs): 'Ê' [ 237.621815][ T9327] fuse: Unknown parameter 'Ê' [ 237.623719][ T9327] fuse: Unknown parameter 'Ê' [ 237.625404][ T40] audit: type=1800 audit(1765913100.015:70): pid=9323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.873" name="bus" dev="ramfs" ino=23319 res=0 errno=0 [ 237.632842][ T9327] fuse: Unknown parameter 'Ê' [ 237.635025][ T9327] fuse: Unknown parameter 'Ê' [ 237.636927][ T9327] fuse: Unknown parameter 'Ê' [ 237.638958][ T9327] fuse: Unknown parameter 'Ê' [ 237.641118][ T9327] fuse: Unknown parameter 'Ê' [ 237.643446][ T9327] fuse: Unknown parameter 'Ê' [ 237.645851][ T9327] fuse: Unknown parameter 'Ê' [ 237.648007][ T9327] fuse: Unknown parameter 'Ê' [ 237.649765][ T9327] fuse: Unknown parameter 'Ê' [ 237.651425][ T9327] fuse: Unknown parameter 'Ê' [ 237.653105][ T9327] fuse: Unknown parameter 'Ê' [ 237.654969][ T9327] fuse: Unknown parameter 'Ê' [ 237.656676][ T9327] fuse: Unknown parameter 'Ê' [ 237.658432][ T9327] fuse: Unknown parameter 'Ê' [ 237.660121][ T9327] fuse: Unknown parameter 'Ê' [ 237.661952][ T9327] fuse: Unknown parameter 'Ê' [ 237.663962][ T9327] fuse: Unknown parameter 'Ê' [ 237.665728][ T9327] fuse: Unknown parameter 'Ê' [ 237.667515][ T9327] fuse: Unknown parameter 'Ê' [ 237.669776][ T9327] fuse: Unknown parameter 'Ê' [ 237.671858][ T9327] fuse: Unknown parameter 'Ê' [ 237.674021][ T9327] fuse: Unknown parameter 'Ê' [ 237.675894][ T9327] fuse: Unknown parameter 'Ê' [ 237.677761][ T9327] fuse: Unknown parameter 'Ê' [ 237.679760][ T9327] fuse: Unknown parameter 'Ê' [ 237.681555][ T9327] fuse: Unknown parameter 'Ê' [ 237.683265][ T9327] fuse: Unknown parameter 'Ê' [ 237.684997][ T9327] fuse: Unknown parameter 'Ê' [ 237.686733][ T9327] fuse: Unknown parameter 'Ê' [ 237.688623][ T9327] fuse: Unknown parameter 'Ê' [ 237.690279][ T9327] fuse: Unknown parameter 'Ê' [ 237.691948][ T9327] fuse: Unknown parameter 'Ê' [ 237.693606][ T9327] fuse: Unknown parameter 'Ê' [ 237.695595][ T9327] fuse: Unknown parameter 'Ê' [ 237.697161][ T9327] fuse: Unknown parameter 'Ê' [ 237.698860][ T9327] fuse: Unknown parameter 'Ê' [ 237.700353][ T9327] fuse: Unknown parameter 'Ê' [ 237.702026][ T9327] fuse: Unknown parameter 'Ê' [ 237.703589][ T9327] fuse: Unknown parameter 'Ê' [ 237.705228][ T9327] fuse: Unknown parameter 'Ê' [ 237.706844][ T9327] fuse: Unknown parameter 'Ê' [ 237.708509][ T9327] fuse: Unknown parameter 'Ê' [ 237.710464][ T9327] fuse: Unknown parameter 'Ê' [ 237.712575][ T9327] fuse: Unknown parameter 'Ê' [ 237.714687][ T9327] fuse: Unknown parameter 'Ê' [ 237.716783][ T9327] fuse: Unknown parameter 'Ê' [ 237.719085][ T9327] fuse: Unknown parameter 'Ê' [ 237.721062][ T9327] fuse: Unknown parameter 'Ê' [ 237.722990][ T9327] fuse: Unknown parameter 'Ê' [ 237.724946][ T9327] fuse: Unknown parameter 'Ê' [ 237.727015][ T9327] fuse: Unknown parameter 'Ê' [ 237.728873][ T9327] fuse: Unknown parameter 'Ê' [ 237.730304][ T9327] fuse: Unknown parameter 'Ê' [ 237.732126][ T9327] fuse: Unknown parameter 'Ê' [ 237.734011][ T9327] fuse: Unknown parameter 'Ê' [ 237.735637][ T9327] fuse: Unknown parameter 'Ê' [ 237.828654][ T64] Bluetooth: hci3: command 0x0c1a tx timeout [ 237.828682][ T5941] Bluetooth: hci1: command 0x0c1a tx timeout [ 237.988537][ T6027] usb 48-1: device descriptor read/8, error -110 [ 238.379555][ T6027] usb usb48-port1: attempt power cycle [ 238.578496][ T9350] tipc: Enabling of bearer rejected, failed to enable media [ 238.848267][ T9356] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 238.850403][ T9356] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 238.865698][ T9356] vhci_hcd vhci_hcd.0: Device attached [ 238.999034][ T6027] usb usb48-port1: unable to enumerate USB device [ 239.139045][ T827] usb 38-1: SetAddress Request (22) to port 0 [ 239.141235][ T827] usb 38-1: new SuperSpeed USB device number 22 using vhci_hcd [ 239.297628][ T9359] vhci_hcd: connection reset by peer [ 239.300091][ T46] vhci_hcd vhci_hcd.0: stop threads [ 239.302063][ T46] vhci_hcd vhci_hcd.0: release socket [ 239.305888][ T46] vhci_hcd vhci_hcd.0: disconnect device [ 239.918584][ T64] Bluetooth: hci3: command 0x0c1a tx timeout [ 240.029691][ T9390] netlink: 20 bytes leftover after parsing attributes in process `syz.1.890'. [ 240.088316][ T9390] netlink: 8 bytes leftover after parsing attributes in process `syz.1.890'. [ 240.364840][ T9399] FAULT_INJECTION: forcing a failure. [ 240.364840][ T9399] name failslab, interval 1, probability 0, space 0, times 0 [ 240.373667][ T9399] CPU: 3 UID: 0 PID: 9399 Comm: syz.5.894 Tainted: G L syzkaller #0 PREEMPT(full) [ 240.373687][ T9399] Tainted: [L]=SOFTLOCKUP [ 240.373690][ T9399] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 240.373697][ T9399] Call Trace: [ 240.373702][ T9399] [ 240.373706][ T9399] dump_stack_lvl+0x16c/0x1f0 [ 240.373728][ T9399] should_fail_ex+0x512/0x640 [ 240.373740][ T9399] ? kmem_cache_alloc_noprof+0x62/0x770 [ 240.373758][ T9399] should_failslab+0xc2/0x120 [ 240.373775][ T9399] kmem_cache_alloc_noprof+0x83/0x770 [ 240.373788][ T9399] ? anon_vma_clone+0x405/0x5c0 [ 240.373799][ T9399] ? anon_vma_fork+0x200/0x620 [ 240.373813][ T9399] ? anon_vma_fork+0x200/0x620 [ 240.373823][ T9399] anon_vma_fork+0x200/0x620 [ 240.373836][ T9399] dup_mmap+0x12d3/0x20e0 [ 240.373859][ T9399] ? __pfx_dup_mmap+0x10/0x10 [ 240.373882][ T9399] ? __percpu_down_read+0x55/0x150 [ 240.373895][ T9399] copy_process+0x3b9f/0x7430 [ 240.373918][ T9399] ? __pfx_copy_process+0x10/0x10 [ 240.373938][ T9399] ? _copy_from_user+0x59/0xd0 [ 240.373952][ T9399] kernel_clone+0xfc/0x910 [ 240.373967][ T9399] ? get_pid_task+0xfc/0x250 [ 240.373978][ T9399] ? __pfx_kernel_clone+0x10/0x10 [ 240.374002][ T9399] __do_sys_clone3+0x212/0x290 [ 240.374018][ T9399] ? __pfx___do_sys_clone3+0x10/0x10 [ 240.374042][ T9399] ? __fget_files+0x20e/0x3c0 [ 240.374064][ T9399] ? do_user_addr_fault+0x843/0x1370 [ 240.374080][ T9399] __do_fast_syscall_32+0xe8/0x680 [ 240.374099][ T9399] do_fast_syscall_32+0x32/0x80 [ 240.374116][ T9399] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 240.374130][ T9399] RIP: 0023:0xf70ed579 [ 240.374140][ T9399] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 240.374151][ T9399] RSP: 002b:00000000f54dd42c EFLAGS: 00000286 ORIG_RAX: 00000000000001b3 [ 240.374162][ T9399] RAX: ffffffffffffffda RBX: 00000000f54dd460 RCX: 0000000000000058 [ 240.374168][ T9399] RDX: 0000000000000000 RSI: 0000000000a00400 RDI: 0000000000000000 [ 240.374175][ T9399] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 240.374181][ T9399] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 240.374187][ T9399] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 240.374201][ T9399] [ 240.718475][ T10] usb 42-1: device descriptor read/8, error -110 [ 240.854479][ T9410] netlink: 8 bytes leftover after parsing attributes in process `syz.5.897'. [ 241.146275][ T9413] tipc: New replicast peer: 255.255.255.255 [ 241.154053][ T9413] tipc: Enabled bearer , priority 10 [ 241.159011][ T10] usb usb42-port1: attempt power cycle [ 241.171643][ T9413] netlink: 12 bytes leftover after parsing attributes in process `syz.2.898'. [ 241.177704][ T9413] tipc: Disabling bearer [ 241.523715][ T9421] netlink: 'syz.1.901': attribute type 21 has an invalid length. [ 241.526173][ T9421] netlink: 128 bytes leftover after parsing attributes in process `syz.1.901'. [ 241.529843][ T9421] netlink: 'syz.1.901': attribute type 5 has an invalid length. [ 241.532409][ T9421] netlink: 3 bytes leftover after parsing attributes in process `syz.1.901'. [ 241.742272][ T10] usb usb42-port1: unable to enumerate USB device [ 241.989030][ T5941] Bluetooth: hci3: command 0x0c1a tx timeout [ 242.443843][ T9438] ovl_lookup_single: 231 callbacks suppressed [ 242.443862][ T9438] overlayfs: failed lookup in lower (newroot/236, name='file0', err=-40): overlapping layers [ 242.453328][ T9438] overlayfs: failed lookup in lower (newroot/236, name='file0', err=-40): overlapping layers [ 242.457896][ T9438] overlayfs: failed lookup in lower (newroot/236, name='file0', err=-40): overlapping layers [ 242.462616][ T9438] overlayfs: failed lookup in lower (newroot/236, name='file0', err=-40): overlapping layers [ 242.467057][ T9438] overlayfs: failed lookup in lower (newroot/236, name='file0', err=-40): overlapping layers [ 242.472356][ T9438] overlayfs: failed lookup in lower (newroot/236, name='file0', err=-40): overlapping layers [ 242.476828][ T9438] overlayfs: failed lookup in lower (newroot/236, name='file0', err=-40): overlapping layers [ 242.481556][ T9438] overlayfs: failed lookup in lower (newroot/236, name='file0', err=-40): overlapping layers [ 242.485761][ T9438] overlayfs: failed lookup in lower (newroot/236, name='file0', err=-40): overlapping layers [ 242.490711][ T9438] overlayfs: failed lookup in lower (newroot/236, name='file0', err=-40): overlapping layers [ 242.538603][ T6023] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 242.598887][ T24] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 242.668534][ T6023] usb 10-1: device descriptor read/64, error -71 [ 242.752201][ T24] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 242.756049][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.760095][ T24] usb 7-1: Product: syz [ 242.762036][ T24] usb 7-1: Manufacturer: syz [ 242.764032][ T24] usb 7-1: SerialNumber: syz [ 242.772163][ T24] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 242.802106][ T6070] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 242.842444][ T9448] netlink: 'syz.1.908': attribute type 4 has an invalid length. [ 242.845695][ T9448] netlink: 17 bytes leftover after parsing attributes in process `syz.1.908'. [ 242.908490][ T6023] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 243.048487][ T6023] usb 10-1: device descriptor read/64, error -71 [ 243.158968][ T6023] usb usb10-port1: attempt power cycle [ 243.210098][ T6022] usb 7-1: USB disconnect, device number 3 [ 243.498643][ T6023] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 243.519077][ T6023] usb 10-1: device descriptor read/8, error -71 [ 243.761876][ T6023] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 243.778930][ T6023] usb 10-1: device descriptor read/8, error -71 [ 243.814509][ T9459] netlink: 44 bytes leftover after parsing attributes in process `syz.1.912'. [ 243.828825][ T6070] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 243.833157][ T6070] ath9k_htc: Failed to initialize the device [ 243.871136][ T6022] usb 7-1: ath9k_htc: USB layer deinitialized [ 243.890161][ T6023] usb usb10-port1: unable to enumerate USB device [ 244.082406][ T5941] Bluetooth: hci3: command 0x0c1a tx timeout [ 244.228746][ T827] usb 38-1: device descriptor read/8, error -110 [ 244.619155][ T827] usb usb38-port1: attempt power cycle [ 244.813703][ T9479] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 244.815831][ T9479] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 244.819348][ T9479] vhci_hcd vhci_hcd.0: Device attached [ 244.958614][ T827] usb 38-1: SetAddress Request (24) to port 0 [ 244.962146][ T827] usb 38-1: new SuperSpeed USB device number 24 using vhci_hcd [ 245.405073][ T9481] vhci_hcd: connection reset by peer [ 245.405873][ T46] vhci_hcd vhci_hcd.0: stop threads [ 245.405890][ T46] vhci_hcd vhci_hcd.0: release socket [ 245.405982][ T46] vhci_hcd vhci_hcd.0: disconnect device [ 245.603044][ T9494] binder: 9491:9494 ioctl 0 80000040 returned -22 [ 246.443683][ T9507] XFS (nullb0): Invalid superblock magic number [ 246.459604][ T9507] fuse: Unknown parameter '_id' [ 246.573863][ T9514] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 246.576292][ T9514] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 246.591888][ T40] audit: type=1326 audit(1765913108.985:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9517 comm="syz.5.926" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70ed579 code=0x0 [ 246.655589][ T9514] vhci_hcd vhci_hcd.0: Device attached [ 246.717640][ T9523] syz_tun: entered allmulticast mode [ 246.918522][ T6070] usb 40-1: SetAddress Request (22) to port 0 [ 246.920566][ T6070] usb 40-1: new SuperSpeed USB device number 22 using vhci_hcd [ 247.011390][ T9518] vhci_hcd: connection reset by peer [ 247.013596][ T6053] vhci_hcd vhci_hcd.1: stop threads [ 247.015066][ T6053] vhci_hcd vhci_hcd.1: release socket [ 247.016711][ T6053] vhci_hcd vhci_hcd.1: disconnect device [ 247.708896][ T9542] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 247.708914][ T9542] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 247.709119][ T9542] vhci_hcd vhci_hcd.0: Device attached [ 247.998563][ T6057] usb 48-1: SetAddress Request (10) to port 0 [ 248.001193][ T6057] usb 48-1: new SuperSpeed USB device number 10 using vhci_hcd [ 248.326405][ T9543] vhci_hcd: connection reset by peer [ 248.329812][ T1140] vhci_hcd vhci_hcd.5: stop threads [ 248.332345][ T1140] vhci_hcd vhci_hcd.5: release socket [ 248.334801][ T1140] vhci_hcd vhci_hcd.5: disconnect device [ 249.161302][ T9571] binder: 9562:9571 ioctl 0 80000040 returned -22 [ 249.988828][ T827] usb 38-1: device descriptor read/8, error -110 [ 250.174591][ T9581] fuse: Unknown parameter 'smackfsfloor' [ 250.389009][ T827] usb usb38-port1: unable to enumerate USB device [ 250.392620][ T9590] input: syz1 as /devices/virtual/input/input15 [ 251.381697][ T9595] nilfs2: Unknown parameter 'discardllb0' [ 251.822366][ T9613] netlink: 12 bytes leftover after parsing attributes in process `syz.5.953'. [ 251.978614][ T34] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 251.998204][ T6070] usb 40-1: device descriptor read/8, error -110 [ 252.138482][ T34] usb 7-1: Using ep0 maxpacket: 8 [ 252.170244][ T34] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 252.173400][ T34] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 252.177763][ T34] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 252.181584][ T34] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 252.185029][ T34] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 252.218665][ T34] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 252.222623][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.409193][ T6070] usb usb40-port1: attempt power cycle [ 252.529100][ T9623] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 252.531945][ T9623] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 252.535668][ T9623] vhci_hcd vhci_hcd.0: Device attached [ 252.798539][ T6023] usb 38-1: SetAddress Request (26) to port 0 [ 252.798595][ T6023] usb 38-1: new SuperSpeed USB device number 26 using vhci_hcd [ 252.982665][ T6070] usb usb40-port1: unable to enumerate USB device [ 252.983163][ T9630] netlink: 'syz.1.957': attribute type 4 has an invalid length. [ 253.010618][ T9630] netlink: 'syz.1.957': attribute type 4 has an invalid length. [ 253.038582][ T6057] usb 48-1: device descriptor read/8, error -110 [ 253.150067][ T9634] binder: 9633:9634 unknown command 0 [ 253.150081][ T9634] binder: 9633:9634 ioctl c0306201 80000080 returned -22 [ 253.150963][ T9634] binder: 9633:9634 ioctl c0487c04 800009c0 returned -22 [ 253.429683][ T6057] usb usb48-port1: attempt power cycle [ 253.496318][ T34] usb 7-1: GET_CAPABILITIES returned 0 [ 253.496342][ T34] usbtmc 7-1:16.0: can't read capabilities [ 253.999537][ T6057] usb usb48-port1: unable to enumerate USB device [ 254.590842][ T9624] vhci_hcd: connection reset by peer [ 254.592819][ T1140] vhci_hcd vhci_hcd.0: stop threads [ 254.594555][ T1140] vhci_hcd vhci_hcd.0: release socket [ 254.596351][ T1140] vhci_hcd vhci_hcd.0: disconnect device [ 254.661213][ T9643] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 254.663312][ T9643] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 254.665999][ T9643] vhci_hcd vhci_hcd.0: Device attached [ 254.938561][ T34] usb 48-1: SetAddress Request (14) to port 0 [ 254.940536][ T34] usb 48-1: new SuperSpeed USB device number 14 using vhci_hcd [ 255.285389][ T9644] vhci_hcd: connection reset by peer [ 255.288833][ T6045] vhci_hcd vhci_hcd.5: stop threads [ 255.293056][ T6045] vhci_hcd vhci_hcd.5: release socket [ 255.296474][ T6045] vhci_hcd vhci_hcd.5: disconnect device [ 255.504480][ T9653] No source specified [ 256.194591][ T9670] netlink: 44 bytes leftover after parsing attributes in process `syz.1.967'. [ 257.198748][ T60] usb 7-1: USB disconnect, device number 4 [ 257.349765][ T9691] sit0: entered promiscuous mode [ 257.355912][ T9691] netlink: 'syz.0.974': attribute type 1 has an invalid length. [ 257.359258][ T9691] netlink: 1 bytes leftover after parsing attributes in process `syz.0.974'. [ 257.369154][ T9691] Cannot find map_set index 2 as target [ 257.592747][ T9696] netlink: 4 bytes leftover after parsing attributes in process `syz.1.972'. [ 257.599268][ T9696] program syz.1.972 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 257.828608][ T6023] usb 38-1: device descriptor read/8, error -110 [ 258.048681][ T1110] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 258.048706][ T1110] ata1.00: irq_stat 0x40000000 [ 258.048714][ T1110] ata1.00: failed command: ZAC MANAGEMENT OUT [ 258.048724][ T1110] ata1.00: cmd 9f/02:00:00:00:00/00:00:00:00:00/40 tag 0 [ 258.048724][ T1110] res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error) [ 258.048754][ T1110] ata1.00: status: { DRDY ERR } [ 258.048762][ T1110] ata1.00: error: { ABRT } [ 258.048779][ T1110] ata1.00: device reported invalid CHS sector 0 [ 258.219481][ T6023] usb usb38-port1: attempt power cycle [ 258.789439][ T6023] usb usb38-port1: unable to enumerate USB device [ 259.730477][ T9732] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.798330][ T9732] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.884779][ T9732] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.975765][ T9732] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.988574][ T34] usb 48-1: device descriptor read/8, error -110 [ 260.081054][ T6045] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.097919][ T6045] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.122721][ T6045] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.146539][ T6045] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.163569][ T9739] netlink: 4 bytes leftover after parsing attributes in process `syz.2.988'. [ 260.233664][ C3] ata1: illegal qc_active transition (00000000->00000200) [ 260.379354][ T34] usb usb48-port1: attempt power cycle [ 260.472295][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.475006][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.562726][ T1110] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 260.570899][ T1110] ata1.00: configured for UDMA/100 [ 260.627222][ T9751] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 260.689827][ T9753] netlink: 272 bytes leftover after parsing attributes in process `syz.1.993'. [ 260.949098][ T34] usb usb48-port1: unable to enumerate USB device [ 261.552059][ T9781] sit0: left promiscuous mode [ 261.564261][ T9781] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.566891][ T9781] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.606747][ T40] audit: type=1800 audit(1765913123.995:72): pid=9782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1002" name="file1" dev="overlay" ino=1238 res=0 errno=0 [ 261.618540][ T9783] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 261.621360][ T9783] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 261.625286][ T9783] vhci_hcd vhci_hcd.0: Device attached [ 261.644134][ T9781] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.652644][ T9781] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.692052][ T9781] mac80211_hwsim hwsim7 wlan0: left promiscuous mode [ 261.696295][ T9781] bridge1: left allmulticast mode [ 261.697444][ T9781] gretap1: left promiscuous mode [ 261.704071][ T6023] syz0: Port: 1 Link DOWN [ 261.704097][ T8727] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.706088][ T8727] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.706126][ T8727] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.706156][ T8727] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.875542][ T9781] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1002'. [ 261.888583][ T827] usb 40-1: SetAddress Request (26) to port 0 [ 261.888637][ T827] usb 40-1: new SuperSpeed USB device number 26 using vhci_hcd [ 262.072071][ T9796] binder: 9795:9796 unknown command 0 [ 262.073867][ T9796] binder: 9795:9796 ioctl c0306201 80004a40 returned -22 [ 262.180967][ T9784] vhci_hcd: connection reset by peer [ 262.183519][ T12] vhci_hcd vhci_hcd.1: stop threads [ 262.185968][ T12] vhci_hcd vhci_hcd.1: release socket [ 262.188899][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 262.308105][ T9798] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1007'. [ 262.373797][ T9798] syzkaller0: entered promiscuous mode [ 262.375448][ T9798] syzkaller0: entered allmulticast mode [ 264.228856][ T9836] binder: 9829:9836 ioctl 0 80000040 returned -22 [ 265.767484][ T9855] binder: 9854:9855 ioctl 4018620d 80004a80 returned -22 [ 265.770819][ T9855] binder: 9854:9855 ioctl c0306201 800001c0 returned -14 [ 265.774054][ T9855] binder: 9854:9855 ioctl c0306201 80004a40 returned -14 [ 265.814815][ T5941] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 266.046839][ T64] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 266.051155][ T64] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 266.055976][ T64] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 266.060454][ T64] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 266.063820][ T64] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 266.277360][ T9867] chnl_net:caif_netlink_parms(): no params data found [ 266.626817][ T9885] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1030'. [ 266.710197][ T9867] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.713054][ T9867] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.715646][ T9867] bridge_slave_0: entered allmulticast mode [ 266.718671][ T9867] bridge_slave_0: entered promiscuous mode [ 266.722503][ T9867] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.724992][ T9867] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.727663][ T9867] bridge_slave_1: entered allmulticast mode [ 266.731240][ T9867] bridge_slave_1: entered promiscuous mode [ 266.750672][ T9867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.762194][ T9867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.778733][ T9867] team0: Port device team_slave_0 added [ 266.800403][ T9867] team0: Port device team_slave_1 added [ 266.826641][ T9867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.838427][ T9867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 266.857206][ T9867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.862632][ T9867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.864830][ T9867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 266.877202][ T9867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.915685][ T9867] hsr_slave_0: entered promiscuous mode [ 266.919461][ T9867] hsr_slave_1: entered promiscuous mode [ 266.922511][ T9867] debugfs: 'hsr0' already exists in 'hsr' [ 266.924900][ T9867] Cannot create hsr debugfs directory [ 266.929580][ T9887] binder: 9884:9887 ioctl 0 80000040 returned -22 [ 266.952615][ T827] usb 40-1: device descriptor read/8, error -110 [ 267.220110][ T9867] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 267.227982][ T9867] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 267.241271][ T9867] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 267.252233][ T9899] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 267.254836][ T9899] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 267.262188][ T9867] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 267.265706][ T9899] vhci_hcd vhci_hcd.0: Device attached [ 267.344234][ T9867] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.344287][ T9867] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.344397][ T9867] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.344457][ T9867] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.408717][ T827] usb 40-1: SetAddress Request (27) to port 0 [ 267.408996][ T827] usb 40-1: new SuperSpeed USB device number 27 using vhci_hcd [ 267.534939][ T9867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.579112][ T9867] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.598070][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.637257][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.637306][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.148566][ T64] Bluetooth: hci2: command tx timeout [ 268.381971][ T9867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.458588][ T9900] vhci_hcd: connection reset by peer [ 268.459052][ T6045] vhci_hcd vhci_hcd.1: stop threads [ 268.459072][ T6045] vhci_hcd vhci_hcd.1: release socket [ 268.459137][ T6045] vhci_hcd vhci_hcd.1: disconnect device [ 268.662047][ T9929] netlink: 'syz.0.1035': attribute type 4 has an invalid length. [ 268.667574][ T9929] netlink: 'syz.0.1035': attribute type 4 has an invalid length. [ 268.685756][ T9867] veth0_vlan: entered promiscuous mode [ 268.692317][ T9867] veth1_vlan: entered promiscuous mode [ 268.719370][ T9867] veth0_macvtap: entered promiscuous mode [ 268.723789][ T9867] veth1_macvtap: entered promiscuous mode [ 268.735410][ T9867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.745899][ T9867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.753899][ T6054] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.825180][ T6054] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.825263][ T6054] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.825292][ T6054] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.891637][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.894936][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.927546][ T92] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.931720][ T92] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.057019][ T9937] syzkaller0: entered promiscuous mode [ 269.058851][ T9937] syzkaller0: entered allmulticast mode [ 269.229117][ T9941] usb usb5: usbfs: process 9941 (syz.6.1026) did not claim interface 0 before use [ 269.636378][ T6023] libceph: connect (1)[c::]:6789 error -101 [ 269.640201][ T6023] libceph: mon0 (1)[c::]:6789 connect error [ 269.669517][ T9948] ceph: No mds server is up or the cluster is laggy [ 270.099169][ T9965] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 270.101293][ T9965] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 270.120297][ T9965] vhci_hcd vhci_hcd.0: Device attached [ 270.230315][ T64] Bluetooth: hci2: command tx timeout [ 270.413685][ T34] usb 38-1: SetAddress Request (30) to port 0 [ 270.413744][ T34] usb 38-1: new SuperSpeed USB device number 30 using vhci_hcd [ 270.418303][ T9978] syzkaller0: entered promiscuous mode [ 270.418318][ T9978] syzkaller0: entered allmulticast mode [ 270.779820][ T9966] binder: 9963:9966 ioctl 0 80000040 returned -22 [ 271.060796][ T9968] vhci_hcd: connection reset by peer [ 271.063074][ T6054] vhci_hcd vhci_hcd.0: stop threads [ 271.065869][ T6054] vhci_hcd vhci_hcd.0: release socket [ 271.067640][ T6054] vhci_hcd vhci_hcd.0: disconnect device [ 271.512393][ T9983] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 272.238518][ T10] usb 10-1: new high-speed USB device number 6 using dummy_hcd ./file0/file0[ 272.388472][ T10] usb 10-1: Using ep0 maxpacket: 16 [ 272.390430][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.391567][ T64] Bluetooth: hci2: command tx timeout [ 272.395217][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.490215][ T9993] binder: 9989:9993 ioctl 0 80000040 returned -22 ./file0./file0fuse[ 272.683495][ T827] usb 40-1: device descriptor read/8, error -110 [ 272.789013][ T827] usb usb40-port1: attempt power cycle [ 272.976017][ T10] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 272.982313][ T10] usb 10-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 272.986508][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.999709][ T10] usb 10-1: config 0 descriptor?? [ 273.172996][T10010] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1056'. [ 273.208279][ T40] audit: type=1326 audit(1765913135.595:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9992 comm="syz.5.1051" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x0 [ 273.321071][T10013] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 273.323164][T10013] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 273.334807][T10013] vhci_hcd vhci_hcd.0: Device attached [ 273.349259][ T827] usb usb40-port1: unable to enumerate USB device [ 273.460037][T10014] binder: 10009:10014 ioctl 0 80000040 returned -22 [ 274.014418][T10015] vhci_hcd: connection closed [ 274.031390][ T1140] vhci_hcd vhci_hcd.0: stop threads [ 274.034665][ T1140] vhci_hcd vhci_hcd.0: release socket [ 274.036811][ T1140] vhci_hcd vhci_hcd.0: disconnect device [ 274.301363][ T40] audit: type=1326 audit(1765913136.695:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10022 comm="syz.6.1057" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf708d579 code=0x0 [ 274.339643][T10012] netlink: 'syz.5.1051': attribute type 2 has an invalid length. [ 274.348498][T10012] netlink: 244 bytes leftover after parsing attributes in process `syz.5.1051'. [ 274.479247][ T64] Bluetooth: hci2: command tx timeout [ 274.829984][T10028] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 274.832088][T10028] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 274.835533][T10028] vhci_hcd vhci_hcd.0: Device attached [ 274.897873][T10034] syzkaller0: entered promiscuous mode [ 274.897894][T10034] syzkaller0: entered allmulticast mode [ 275.098592][ T827] usb 40-1: SetAddress Request (30) to port 0 [ 275.098649][ T827] usb 40-1: new SuperSpeed USB device number 30 using vhci_hcd [ 275.473167][T10029] vhci_hcd: connection reset by peer [ 275.475240][ T6054] vhci_hcd vhci_hcd.1: stop threads [ 275.477910][ T6054] vhci_hcd vhci_hcd.1: release socket [ 275.480980][ T6054] vhci_hcd vhci_hcd.1: disconnect device [ 275.508483][ T34] usb 38-1: device descriptor read/8, error -110 [ 275.614070][ T10] usbhid 10-1:0.0: can't add hid device: -71 [ 275.623254][ T10] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 275.627339][ T10] usb 10-1: USB disconnect, device number 6 [ 275.918877][ T34] usb usb38-port1: attempt power cycle [ 276.113535][T10053] syz.5.1065 (10053): /proc/10047/oom_adj is deprecated, please use /proc/10047/oom_score_adj instead. [ 276.131916][T10053] tmpfs: Bad value for 'mpol' [ 276.135753][T10053] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1065'. [ 276.139655][T10053] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1065'. [ 276.509102][ T34] usb usb38-port1: unable to enumerate USB device [ 276.644689][T10063] syzkaller0: entered promiscuous mode [ 276.647060][T10063] syzkaller0: entered allmulticast mode [ 276.768873][T10064] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 276.771084][T10064] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 276.798471][T10064] vhci_hcd vhci_hcd.0: Device attached [ 276.872880][T10069] syzkaller0: entered promiscuous mode [ 276.872896][T10069] syzkaller0: entered allmulticast mode [ 277.061716][T10076] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1072'. [ 277.068631][ T24] usb 50-1: SetAddress Request (2) to port 0 [ 277.068676][ T24] usb 50-1: new SuperSpeed USB device number 2 using vhci_hcd [ 277.235928][T10080] netlink: 'syz.0.1071': attribute type 4 has an invalid length. [ 277.787708][T10066] vhci_hcd: connection reset by peer [ 277.788907][ T6053] vhci_hcd vhci_hcd.6: stop threads [ 277.788924][ T6053] vhci_hcd vhci_hcd.6: release socket [ 277.790115][ T6053] vhci_hcd vhci_hcd.6: disconnect device [ 277.852491][T10086] binder: 10084:10086 ioctl 0 80000040 returned -22 [ 279.192470][T10112] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 279.195279][T10112] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 279.244329][T10112] vhci_hcd vhci_hcd.0: Device attached [ 279.518626][ T60] usb 48-1: SetAddress Request (18) to port 0 [ 279.518802][ T60] usb 48-1: new SuperSpeed USB device number 18 using vhci_hcd [ 280.156213][ T827] usb 40-1: device descriptor read/8, error -110 [ 280.373529][T10129] usb usb5: usbfs: process 10129 (syz.6.1085) did not claim interface 0 before use [ 280.574969][ T827] usb usb40-port1: attempt power cycle [ 280.795925][T10136] syzkaller0: entered promiscuous mode [ 280.795946][T10136] syzkaller0: entered allmulticast mode [ 280.855271][T10113] vhci_hcd: connection reset by peer [ 280.857408][ T6053] vhci_hcd vhci_hcd.5: stop threads [ 280.857433][ T6053] vhci_hcd vhci_hcd.5: release socket [ 280.857498][ T6053] vhci_hcd vhci_hcd.5: disconnect device [ 280.955104][T10138] netlink: 'syz.1.1086': attribute type 4 has an invalid length. [ 281.129362][ T827] usb usb40-port1: unable to enumerate USB device [ 281.500570][T10152] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1090'. [ 281.814023][T10155] binder: 10151:10155 ioctl 0 80000040 returned -22 [ 281.828977][ T40] audit: type=1326 audit(1765913144.225:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10160 comm="syz.5.1092" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 281.837695][ T40] audit: type=1326 audit(1765913144.225:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10160 comm="syz.5.1092" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 281.848117][T10161] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1092'. [ 281.850934][ T40] audit: type=1326 audit(1765913144.235:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10160 comm="syz.5.1092" exe="/syz-executor" sig=0 arch=40000003 syscall=266 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 281.859138][ T40] audit: type=1326 audit(1765913144.235:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10160 comm="syz.5.1092" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 281.867406][ T40] audit: type=1326 audit(1765913144.235:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10160 comm="syz.5.1092" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 281.876020][ T40] audit: type=1326 audit(1765913144.235:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10160 comm="syz.5.1092" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 281.883364][ T40] audit: type=1326 audit(1765913144.235:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10160 comm="syz.5.1092" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 281.890505][ T40] audit: type=1326 audit(1765913144.235:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10160 comm="syz.5.1092" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 281.897324][ T40] audit: type=1326 audit(1765913144.235:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10160 comm="syz.5.1092" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 281.904075][ T40] audit: type=1326 audit(1765913144.235:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10160 comm="syz.5.1092" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 282.160335][ T24] usb 50-1: device descriptor read/8, error -110 [ 282.361102][T10173] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 282.366188][T10173] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 282.371431][T10173] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 282.376099][T10173] UDF-fs: Scanning with blocksize 512 failed [ 282.379751][T10173] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 282.383951][T10173] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 282.387983][T10173] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 282.391792][T10173] UDF-fs: Scanning with blocksize 1024 failed [ 282.395055][T10173] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 282.399963][T10173] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 282.403983][T10173] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 282.407216][T10173] UDF-fs: Scanning with blocksize 2048 failed [ 282.410521][T10173] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 282.414715][T10173] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 282.418942][T10173] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 282.422194][T10173] UDF-fs: Scanning with blocksize 4096 failed [ 282.424766][T10173] UDF-fs: warning (device loop5): udf_fill_super: No partition found (1) [ 282.588883][ T24] usb usb50-port1: attempt power cycle [ 282.938962][T10180] binder: 10178:10180 ioctl 0 80000040 returned -22 [ 282.975003][T10182] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 282.977857][T10182] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 282.981935][T10182] vhci_hcd vhci_hcd.0: Device attached [ 283.379710][ T24] usb usb50-port1: unable to enumerate USB device [ 283.514792][T10183] vhci_hcd: connection closed [ 283.516844][ T8727] vhci_hcd vhci_hcd.5: stop threads [ 283.522372][ T8727] vhci_hcd vhci_hcd.5: release socket [ 283.524956][ T8727] vhci_hcd vhci_hcd.5: disconnect device [ 283.939295][T10190] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 283.942008][T10190] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 283.945889][T10190] vhci_hcd vhci_hcd.0: Device attached [ 284.218490][ T24] usb 50-1: SetAddress Request (6) to port 0 [ 284.218525][ T24] usb 50-1: new SuperSpeed USB device number 6 using vhci_hcd [ 284.291232][T10197] netlink: 'syz.0.1104': attribute type 6 has an invalid length. [ 284.548507][ T60] usb 48-1: device descriptor read/8, error -110 [ 284.580605][T10191] vhci_hcd: connection reset by peer [ 284.583171][ T8727] vhci_hcd vhci_hcd.6: stop threads [ 284.584923][ T8727] vhci_hcd vhci_hcd.6: release socket [ 284.598450][ T8727] vhci_hcd vhci_hcd.6: disconnect device [ 284.632992][T10205] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 284.688576][T10207] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1107'. [ 284.708822][T10207] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1107'. [ 284.747352][T10207] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1107'. [ 284.959605][ T60] usb usb48-port1: attempt power cycle [ 285.020163][T10211] binder: 10206:10211 ioctl 0 80000040 returned -22 [ 285.817623][T10216] pim6reg1: entered promiscuous mode [ 285.819671][T10216] pim6reg1: entered allmulticast mode [ 286.059212][ T60] usb usb48-port1: unable to enumerate USB device [ 287.103046][T10230] syzkaller0: entered allmulticast mode [ 287.126581][T10231] tipc: Started in network mode [ 287.128196][T10231] tipc: Node identity 1a80f57259c5, cluster identity 4711 [ 287.130666][T10231] tipc: Enabled bearer , priority 0 [ 287.133256][T10231] syzkaller0: entered promiscuous mode [ 287.134931][T10231] syzkaller0: entered allmulticast mode [ 287.158887][T10229] tipc: Resetting bearer [ 287.172266][T10229] tipc: Disabling bearer [ 287.327754][T10239] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1116'. [ 287.363701][T10239] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1116'. [ 287.416193][T10239] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1116'. [ 287.570652][T10245] binder: 10238:10245 ioctl 0 80000040 returned -22 [ 287.860904][T10251] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1118'. [ 287.896648][T10252] syzkaller1: entered promiscuous mode [ 287.898948][T10252] syzkaller1: entered allmulticast mode [ 288.568890][T10276] tipc: Started in network mode [ 288.571425][T10276] tipc: Node identity a6e0bb13782e, cluster identity 4711 [ 288.842015][T10276] tipc: Enabled bearer , priority 0 [ 288.875131][T10279] syzkaller0: entered promiscuous mode [ 288.899618][T10279] syzkaller0: entered allmulticast mode [ 288.966403][T10275] tipc: Resetting bearer [ 288.975302][T10275] tipc: Disabling bearer [ 289.049980][T10284] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1127'. [ 289.073150][T10284] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1127'. [ 289.113721][T10284] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1127'. [ 289.158725][T10296] FAULT_INJECTION: forcing a failure. [ 289.158725][T10296] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 289.164283][T10296] CPU: 2 UID: 0 PID: 10296 Comm: syz.0.1131 Tainted: G L syzkaller #0 PREEMPT(full) [ 289.164313][T10296] Tainted: [L]=SOFTLOCKUP [ 289.164320][T10296] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 289.164331][T10296] Call Trace: [ 289.164338][T10296] [ 289.164346][T10296] dump_stack_lvl+0x16c/0x1f0 [ 289.164379][T10296] should_fail_ex+0x512/0x640 [ 289.164402][T10296] _copy_from_user+0x2e/0xd0 [ 289.164422][T10296] do_handle_open+0xea/0xd10 [ 289.164451][T10296] ? __fget_files+0x20e/0x3c0 [ 289.164477][T10296] ? __pfx_do_handle_open+0x10/0x10 [ 289.164508][T10296] ? arch_syscall_is_vdso_sigreturn+0x1bd/0x230 [ 289.164541][T10296] ? syscall_user_dispatch+0x78/0x140 [ 289.164566][T10296] ? do_user_addr_fault+0x843/0x1370 [ 289.164593][T10296] ? __do_fast_syscall_32+0xe8/0x680 [ 289.164622][T10296] __do_fast_syscall_32+0xe8/0x680 [ 289.164653][T10296] do_fast_syscall_32+0x32/0x80 [ 289.164681][T10296] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 289.164705][T10296] RIP: 0023:0xf70cd579 [ 289.164721][T10296] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 289.164739][T10296] RSP: 002b:00000000f54bd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000156 [ 289.164757][T10296] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000100 [ 289.164770][T10296] RDX: 0000000000264d81 RSI: 0000000000000000 RDI: 0000000000000000 [ 289.164780][T10296] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 289.164790][T10296] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 289.164802][T10296] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 289.164826][T10296] [ 289.268938][ T24] usb 50-1: device descriptor read/8, error -110 [ 289.411634][T10290] binder: 10283:10290 ioctl 0 80000040 returned -22 [ 289.670755][ T24] usb usb50-port1: attempt power cycle [ 290.238908][ T24] usb usb50-port1: unable to enumerate USB device [ 290.608252][T10326] tipc: Enabled bearer , priority 0 [ 290.611715][T10326] syzkaller0: entered promiscuous mode [ 290.613691][T10326] syzkaller0: entered allmulticast mode [ 290.637118][T10325] tipc: Resetting bearer [ 290.677217][T10325] tipc: Disabling bearer [ 290.949798][T10335] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1142'. [ 291.062219][T10335] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1142'. [ 291.210101][T10335] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1142'. [ 291.303492][T10347] binder: 10338:10347 ioctl 0 80000040 returned -22 [ 291.306385][T10335] binder: 10333:10335 ioctl 0 80000040 returned -22 [ 291.478644][T10354] netlink: 'syz.6.1146': attribute type 4 has an invalid length. [ 291.943027][T10366] tipc: New replicast peer: 255.255.255.255 [ 291.945533][T10366] tipc: Enabled bearer , priority 10 [ 291.950677][T10366] tipc: Disabling bearer [ 292.090075][ T6027] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 292.263051][ T6027] usb 10-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 292.266070][ T6027] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.268868][ T6027] usb 10-1: Product: syz [ 292.271476][ T6027] usb 10-1: Manufacturer: syz [ 292.278567][ T6027] usb 10-1: SerialNumber: syz [ 292.303213][ T6027] usb 10-1: config 0 descriptor?? [ 292.532453][ T24] usb 10-1: USB disconnect, device number 7 [ 293.076972][T10384] tipc: Enabled bearer , priority 0 [ 293.203032][T10387] tipc: Resetting bearer [ 293.220710][T10384] syzkaller0: entered promiscuous mode [ 293.226254][T10383] tipc: Resetting bearer [ 293.242684][T10383] tipc: Disabling bearer [ 293.376800][T10391] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 293.379560][T10391] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 293.439436][T10391] vhci_hcd vhci_hcd.0: Device attached [ 293.529717][T10398] netlink: 'syz.6.1157': attribute type 4 has an invalid length. [ 293.718874][ T24] usb 48-1: SetAddress Request (22) to port 0 [ 293.721137][ T24] usb 48-1: new SuperSpeed USB device number 22 using vhci_hcd [ 293.756235][T10401] binder: 10399:10401 ioctl 0 80000040 returned -22 [ 294.114680][T10392] vhci_hcd: connection reset by peer [ 294.116913][ T12] vhci_hcd vhci_hcd.5: stop threads [ 294.118679][ T12] vhci_hcd vhci_hcd.5: release socket [ 294.120727][ T12] vhci_hcd vhci_hcd.5: disconnect device [ 295.180608][T10432] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 295.182121][T10432] overlayfs: missing 'lowerdir' [ 295.508672][ T5941] Bluetooth: hci2: command 0x0405 tx timeout [ 296.165738][T10455] __nla_validate_parse: 2 callbacks suppressed [ 296.165750][T10455] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1175'. [ 296.550696][T10469] tipc: Enabled bearer , priority 0 [ 296.553283][T10469] syzkaller0: entered promiscuous mode [ 296.555084][T10469] syzkaller0: entered allmulticast mode [ 296.561019][T10469] tipc: Resetting bearer [ 296.564087][T10468] tipc: Resetting bearer [ 296.578655][T10468] tipc: Disabling bearer [ 297.836304][T10501] tipc: Enabled bearer , priority 0 [ 297.839015][T10501] syzkaller0: entered promiscuous mode [ 297.840773][T10501] syzkaller0: entered allmulticast mode [ 297.845329][T10501] tipc: Resetting bearer [ 297.848165][T10500] tipc: Resetting bearer [ 297.856176][T10500] tipc: Disabling bearer [ 298.788481][ T24] usb 48-1: device descriptor read/8, error -110 [ 299.179914][ T24] usb usb48-port1: attempt power cycle [ 299.748957][ T24] usb usb48-port1: unable to enumerate USB device [ 299.824543][T10585] tipc: Enabled bearer , priority 0 [ 299.828165][T10585] syzkaller0: entered promiscuous mode [ 299.831053][T10585] syzkaller0: entered allmulticast mode [ 299.840709][T10585] tipc: Resetting bearer [ 299.846431][T10584] tipc: Resetting bearer [ 299.856497][T10584] tipc: Disabling bearer [ 300.116818][T10593] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 300.118956][T10593] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 300.144049][T10593] vhci_hcd vhci_hcd.0: Device attached [ 300.300388][T10598] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 300.300415][T10598] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 300.301162][T10598] vhci_hcd vhci_hcd.0: Device attached [ 300.408903][ T6023] usb 38-1: SetAddress Request (34) to port 0 [ 300.408995][ T6023] usb 38-1: new SuperSpeed USB device number 34 using vhci_hcd [ 300.578476][ T34] usb 48-1: SetAddress Request (26) to port 0 [ 300.578513][ T34] usb 48-1: new SuperSpeed USB device number 26 using vhci_hcd [ 300.717672][T10606] binder: 10602:10606 ioctl 0 80000040 returned -22 [ 300.731969][T10594] vhci_hcd: connection reset by peer [ 300.733189][ T6054] vhci_hcd vhci_hcd.0: stop threads [ 300.733206][ T6054] vhci_hcd vhci_hcd.0: release socket [ 300.733263][ T6054] vhci_hcd vhci_hcd.0: disconnect device [ 301.047740][T10599] vhci_hcd: connection reset by peer [ 301.049916][ T102] vhci_hcd vhci_hcd.5: stop threads [ 301.049932][ T102] vhci_hcd vhci_hcd.5: release socket [ 301.050726][ T102] vhci_hcd vhci_hcd.5: disconnect device [ 301.738490][T10618] binder: 10614:10618 ioctl 0 80000040 returned -22 [ 301.835338][T10623] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1211'. [ 301.861057][T10623] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 302.786939][T10645] XFS (nullb0): Invalid superblock magic number [ 303.332342][T10661] tipc: Enabled bearer , priority 0 [ 303.335840][T10661] syzkaller0: entered promiscuous mode [ 303.338247][T10661] syzkaller0: entered allmulticast mode [ 303.346381][T10661] tipc: Resetting bearer [ 303.352722][T10660] tipc: Resetting bearer [ 303.367465][T10660] tipc: Disabling bearer [ 303.714889][T10669] vivid-002: disconnect [ 304.625000][T10662] vivid-002: reconnect [ 304.641137][T10670] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 304.643878][T10670] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 304.646613][T10670] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 304.649645][T10670] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 304.700347][T10670] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 304.803905][T10678] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1224'. [ 304.822666][T10678] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1224'. [ 304.859454][T10678] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1224'. [ 305.082066][T10683] binder: 10675:10683 ioctl 0 80000040 returned -22 [ 305.401847][T10682] binder: 10676:10682 ioctl 0 80000040 returned -22 [ 305.508544][ T6023] usb 38-1: device descriptor read/8, error -110 [ 305.678666][ T34] usb 48-1: device descriptor read/8, error -110 [ 305.899065][ T6023] usb usb38-port1: attempt power cycle [ 306.078546][ T5941] Bluetooth: hci1: command 0x0c1a tx timeout [ 306.088999][ T34] usb usb48-port1: attempt power cycle [ 306.182943][T10701] QAT: Stopping all acceleration devices. [ 306.373030][T10706] binder: 10697:10706 ioctl 0 80000040 returned -22 [ 306.648889][ T34] usb usb48-port1: unable to enumerate USB device [ 306.708459][ T5941] Bluetooth: hci2: command 0x0405 tx timeout [ 306.708483][ T64] Bluetooth: hci3: command 0x0c1a tx timeout [ 306.759098][ T6023] usb usb38-port1: unable to enumerate USB device [ 307.234552][T10721] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 307.236961][T10721] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 307.240303][T10721] vhci_hcd vhci_hcd.0: Device attached [ 307.242405][T10720] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 307.244227][T10720] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 307.246534][T10720] vhci_hcd vhci_hcd.0: Device attached [ 307.508585][ T6023] usb 40-1: SetAddress Request (34) to port 0 [ 307.510956][ T6023] usb 40-1: new SuperSpeed USB device number 34 using vhci_hcd [ 307.513446][ T24] usb 38-1: SetAddress Request (38) to port 0 [ 307.515448][ T24] usb 38-1: new SuperSpeed USB device number 38 using vhci_hcd [ 307.614462][T10722] vhci_hcd: connection reset by peer [ 307.617645][T10734] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 307.619713][T10734] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 307.621367][ T8727] vhci_hcd vhci_hcd.1: stop threads [ 307.624306][ T8727] vhci_hcd vhci_hcd.1: release socket [ 307.628484][ T8727] vhci_hcd vhci_hcd.1: disconnect device [ 307.633836][T10734] vhci_hcd vhci_hcd.0: Device attached [ 307.658200][T10724] vhci_hcd: connection reset by peer [ 307.660766][ T13] vhci_hcd vhci_hcd.0: stop threads [ 307.665057][ T13] vhci_hcd vhci_hcd.0: release socket [ 307.667008][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 307.908671][ T827] usb 50-1: SetAddress Request (10) to port 0 [ 307.908707][ T827] usb 50-1: new SuperSpeed USB device number 10 using vhci_hcd [ 308.578540][T10735] vhci_hcd: connection reset by peer [ 308.578809][ T1202] vhci_hcd vhci_hcd.6: stop threads [ 308.582656][ T1202] vhci_hcd vhci_hcd.6: release socket [ 308.584378][ T1202] vhci_hcd vhci_hcd.6: disconnect device [ 308.788507][ T64] Bluetooth: hci2: command 0x0405 tx timeout [ 309.642690][T10766] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1245'. [ 309.677803][T10766] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1245'. [ 309.731952][T10772] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 309.734117][T10772] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 309.749161][T10772] vhci_hcd vhci_hcd.0: Device attached [ 309.764437][T10766] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1245'. [ 310.010511][T10766] binder: 10765:10766 ioctl 0 80000040 returned -22 [ 310.173150][T10782] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 310.562231][T10790] vlan2: entered promiscuous mode [ 310.563986][T10790] batadv0: entered promiscuous mode [ 310.570184][T10787] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 310.572954][T10787] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 310.576628][T10787] vhci_hcd vhci_hcd.0: Device attached [ 310.683380][T10794] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 310.684103][T10794] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 310.684185][T10794] UDF-fs: warning (device nbd5): udf_load_vrs: No anchor found [ 310.684281][T10794] UDF-fs: Scanning with blocksize 512 failed [ 310.687805][T10794] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 310.688182][T10794] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 310.688257][T10794] UDF-fs: warning (device nbd5): udf_load_vrs: No anchor found [ 310.688266][T10794] UDF-fs: Scanning with blocksize 1024 failed [ 310.689453][T10794] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 310.718152][T10794] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 310.722406][T10794] UDF-fs: warning (device nbd5): udf_load_vrs: No anchor found [ 310.725746][T10794] UDF-fs: Scanning with blocksize 2048 failed [ 310.729950][T10794] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 310.733586][T10794] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 310.737602][T10794] UDF-fs: warning (device nbd5): udf_load_vrs: No anchor found [ 310.740432][T10794] UDF-fs: Scanning with blocksize 4096 failed [ 310.743149][T10794] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1) [ 310.940241][T10776] vhci_hcd: connection closed [ 310.940275][ T64] Bluetooth: hci2: command 0x0405 tx timeout [ 310.958766][ T1140] vhci_hcd vhci_hcd.6: stop threads [ 310.958789][ T1140] vhci_hcd vhci_hcd.6: release socket [ 310.958984][ T1140] vhci_hcd vhci_hcd.6: disconnect device [ 311.684882][T10788] vhci_hcd: connection closed [ 311.685169][ T1140] vhci_hcd vhci_hcd.1: stop threads [ 311.685185][ T1140] vhci_hcd vhci_hcd.1: release socket [ 311.685257][ T1140] vhci_hcd vhci_hcd.1: disconnect device [ 311.801551][T10800] random: crng reseeded on system resumption [ 311.891677][T10798] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1252'. [ 311.930636][T10805] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1255'. [ 311.958674][T10805] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1255'. [ 312.019846][T10805] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1255'. [ 312.090750][T10817] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 312.094611][T10817] Invalid source name [ 312.207098][T10809] binder: 10804:10809 ioctl 0 80000040 returned -22 [ 312.494449][T10823] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1259'. [ 312.497664][T10823] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1259'. [ 312.548516][ T6023] usb 40-1: device descriptor read/8, error -110 [ 312.551027][ T24] usb 38-1: device descriptor read/8, error -110 [ 312.883925][T10830] Cannot find del_set index 2 as target [ 312.945806][T10828] binder: 10826:10828 ioctl 0 80000040 returned -22 [ 312.958553][ T827] usb 50-1: device descriptor read/8, error -110 [ 312.963737][ T24] usb usb38-port1: attempt power cycle [ 312.966935][ T6023] usb usb40-port1: attempt power cycle [ 313.281452][T10837] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 313.342902][T10839] netlink: 'syz.6.1263': attribute type 4 has an invalid length. [ 313.467660][ T827] usb usb50-port1: attempt power cycle [ 313.631494][T10845] netlink: 'syz.1.1265': attribute type 4 has an invalid length. [ 313.780187][ T6023] usb usb40-port1: unable to enumerate USB device [ 313.783012][ T24] usb usb38-port1: unable to enumerate USB device [ 313.807411][T10844] mkiss: ax0: crc mode is auto. [ 314.021740][T10853] tipc: Enabled bearer , priority 0 [ 314.024343][T10853] syzkaller0: entered promiscuous mode [ 314.026132][T10853] syzkaller0: entered allmulticast mode [ 314.039352][T10853] tipc: Resetting bearer [ 314.044564][T10852] tipc: Resetting bearer [ 314.060566][ T827] usb usb50-port1: unable to enumerate USB device [ 314.082949][T10852] tipc: Disabling bearer [ 314.198878][T10857] netlink: 'syz.6.1270': attribute type 8 has an invalid length. [ 314.204020][T10857] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1270'. [ 314.213837][T10857] bond0: entered promiscuous mode [ 314.216156][T10857] bond_slave_0: entered promiscuous mode [ 314.219346][T10857] bond_slave_1: entered promiscuous mode [ 314.223734][T10857] bond0: left promiscuous mode [ 314.225916][T10857] bond_slave_0: left promiscuous mode [ 314.228562][T10857] bond_slave_1: left promiscuous mode [ 314.250303][T10859] netlink: 'syz.6.1270': attribute type 8 has an invalid length. [ 314.255726][T10859] bond0: entered promiscuous mode [ 314.257239][T10859] bond_slave_0: entered promiscuous mode [ 314.259134][T10859] bond_slave_1: entered promiscuous mode [ 314.261922][T10859] bond0: left promiscuous mode [ 314.263529][T10859] bond_slave_0: left promiscuous mode [ 314.265249][T10859] bond_slave_1: left promiscuous mode [ 314.502980][T10868] bridge_slave_0: left allmulticast mode [ 314.505396][T10868] bridge_slave_0: left promiscuous mode [ 314.507877][T10868] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.581136][T10868] bridge_slave_1: left allmulticast mode [ 314.583619][T10868] bridge_slave_1: left promiscuous mode [ 314.586812][T10868] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.596570][T10868] bond0: (slave bond_slave_0): Releasing backup interface [ 314.604051][T10868] bond0: (slave bond_slave_1): Releasing backup interface [ 314.613519][T10868] team0: Port device team_slave_0 removed [ 314.624676][T10868] team0: Port device team_slave_1 removed [ 314.627589][T10868] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 314.634440][T10868] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 314.639745][T10868] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 314.642779][T10868] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 314.647128][T10868] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 314.666327][T10870] team0: Mode changed to "loadbalance" [ 314.667115][T10869] netlink: 'syz.1.1271': attribute type 4 has an invalid length. [ 314.755101][T10868] vlan0: entered promiscuous mode [ 314.786991][T10868] team0: Port device vlan0 added [ 315.708557][T10893] FAULT_INJECTION: forcing a failure. [ 315.708557][T10893] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 315.713394][T10893] CPU: 2 UID: 0 PID: 10893 Comm: syz.0.1278 Tainted: G L syzkaller #0 PREEMPT(full) [ 315.713413][T10893] Tainted: [L]=SOFTLOCKUP [ 315.713416][T10893] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 315.713423][T10893] Call Trace: [ 315.713428][T10893] [ 315.713434][T10893] dump_stack_lvl+0x16c/0x1f0 [ 315.713455][T10893] should_fail_ex+0x512/0x640 [ 315.713469][T10893] _copy_from_iter+0x2a4/0x16c0 [ 315.713483][T10893] ? _copy_from_iter+0x161/0x16c0 [ 315.713495][T10893] ? __pfx__copy_from_iter+0x10/0x10 [ 315.713508][T10893] ? __pfx__copy_from_iter+0x10/0x10 [ 315.713523][T10893] copy_page_from_iter+0xde/0x180 [ 315.713537][T10893] skb_copy_datagram_from_iter+0x2a0/0x740 [ 315.713555][T10893] tun_get_user+0x1850/0x3cc0 [ 315.713573][T10893] ? __pfx_tun_get_user+0x10/0x10 [ 315.713585][T10893] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 315.713603][T10893] ? find_held_lock+0x2b/0x80 [ 315.713618][T10893] ? tun_get+0x191/0x370 [ 315.713631][T10893] tun_chr_write_iter+0xdc/0x210 [ 315.713644][T10893] vfs_write+0x7d3/0x11d0 [ 315.713660][T10893] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 315.713673][T10893] ? __pfx_vfs_write+0x10/0x10 [ 315.713687][T10893] ? find_held_lock+0x2b/0x80 [ 315.713709][T10893] ksys_write+0x12a/0x250 [ 315.713724][T10893] ? __pfx_ksys_write+0x10/0x10 [ 315.713739][T10893] ? trace_irq_enable.constprop.0+0x2f/0x110 [ 315.713760][T10893] __do_fast_syscall_32+0xe8/0x680 [ 315.713779][T10893] do_fast_syscall_32+0x32/0x80 [ 315.713795][T10893] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 315.713810][T10893] RIP: 0023:0xf70cd579 [ 315.713818][T10893] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 315.713835][T10893] RSP: 002b:00000000f54bd520 EFLAGS: 00000293 ORIG_RAX: 0000000000000004 [ 315.713846][T10893] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000200 [ 315.713853][T10893] RDX: 000000000000fef3 RSI: 00000000f7466ff4 RDI: 0000000000000000 [ 315.713859][T10893] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 315.713865][T10893] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 315.713871][T10893] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 315.713884][T10893] [ 316.063918][ T40] kauditd_printk_skb: 29 callbacks suppressed [ 316.063933][ T40] audit: type=1326 audit(1765913178.455:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10899 comm="syz.6.1281" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf708d579 code=0x0 [ 316.170128][T10908] openvswitch: netlink: IPv4 tun info is not correct [ 316.518767][T10914] __nla_validate_parse: 1 callbacks suppressed [ 316.518779][T10914] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1284'. [ 316.900532][T10926] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1288'. [ 316.986141][T10926] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1288'. [ 317.698594][T10926] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1288'. [ 317.709375][T10945] binder: 10925:10945 ioctl 0 80000040 returned -22 [ 317.955035][T10964] FAULT_INJECTION: forcing a failure. [ 317.955035][T10964] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 317.968310][T10964] CPU: 0 UID: 0 PID: 10964 Comm: syz.0.1292 Tainted: G L syzkaller #0 PREEMPT(full) [ 317.968340][T10964] Tainted: [L]=SOFTLOCKUP [ 317.968346][T10964] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 317.968379][T10964] Call Trace: [ 317.968386][T10964] [ 317.968393][T10964] dump_stack_lvl+0x16c/0x1f0 [ 317.968424][T10964] should_fail_ex+0x512/0x640 [ 317.968446][T10964] should_fail_alloc_page+0xe7/0x130 [ 317.968474][T10964] prepare_alloc_pages+0x401/0x670 [ 317.968501][T10964] ? __ia32_compat_sys_socketcall+0x3c6/0x780 [ 317.968524][T10964] ? __do_fast_syscall_32+0xe8/0x680 [ 317.968553][T10964] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 317.968575][T10964] ? __lock_acquire+0x436/0x2890 [ 317.968603][T10964] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 317.968625][T10964] ? find_held_lock+0x2b/0x80 [ 317.968648][T10964] ? page_table_check_set+0x7dd/0xa40 [ 317.968679][T10964] ? __lock_acquire+0x436/0x2890 [ 317.968694][T10964] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 317.968721][T10964] ? policy_nodemask+0xea/0x4e0 [ 317.968776][T10964] alloc_pages_mpol+0x1fb/0x550 [ 317.968806][T10964] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 317.968835][T10964] ? find_held_lock+0x2b/0x80 [ 317.968857][T10964] ? percpu_ref_put_many.constprop.0+0xc4/0x2a0 [ 317.968883][T10964] folio_alloc_mpol_noprof+0x36/0x2f0 [ 317.968902][T10964] vma_alloc_folio_noprof+0xed/0x1e0 [ 317.968919][T10964] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 317.968937][T10964] ? rcu_read_unlock+0x2d/0xb0 [ 317.968962][T10964] do_wp_page+0x202f/0x5010 [ 317.968994][T10964] ? __pfx_do_wp_page+0x10/0x10 [ 317.969021][T10964] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 317.969049][T10964] __handle_mm_fault+0x1bd2/0x2bb0 [ 317.969071][T10964] ? reacquire_held_locks+0xcd/0x1f0 [ 317.969089][T10964] ? __pfx___handle_mm_fault+0x10/0x10 [ 317.969110][T10964] ? lock_vma_under_rcu+0x176/0x580 [ 317.969137][T10964] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 317.969169][T10964] handle_mm_fault+0x3fe/0xad0 [ 317.969192][T10964] do_user_addr_fault+0x60c/0x1370 [ 317.969218][T10964] ? rcu_is_watching+0x12/0xc0 [ 317.969246][T10964] exc_page_fault+0x64/0xc0 [ 317.969272][T10964] asm_exc_page_fault+0x26/0x30 [ 317.969289][T10964] RIP: 0023:0xf71f91d2 [ 317.969304][T10964] Code: c7 4d de 26 00 56 53 83 ec 1c 8b 6c 24 30 8b 55 1c 65 a1 68 00 00 00 39 c2 0f 84 11 01 00 00 80 7d 18 02 74 2b b8 08 00 00 00 0f c1 45 00 83 c0 08 85 c0 0f 88 0e 01 00 00 a8 01 75 7a 31 d2 [ 317.969322][T10964] RSP: 002b:00000000f54bc350 EFLAGS: 00010293 [ 317.969337][T10964] RAX: 0000000000000008 RBX: 00000000f7466ff4 RCX: 00000000ffffffff [ 317.969348][T10964] RDX: 0000000000000000 RSI: 00000000f72f5529 RDI: 00000000f7466ff4 [ 317.969358][T10964] RBP: 00000000f7fc6e40 R08: 0000000000000000 R09: 0000000000000000 [ 317.969369][T10964] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 317.969379][T10964] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 317.969404][T10964] [ 318.110508][T10964] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 318.137155][ T64] Bluetooth: hci1: unexpected event for opcode 0x1005 [ 318.309447][T10971] 9p: Bad value for 'rfdno' [ 318.311247][T10971] 9p: Bad value for 'rfdno' [ 319.032716][T10985] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1297'. [ 319.081034][ T40] audit: type=1326 audit(1765913181.415:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10984 comm="syz.6.1297" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 319.097858][ T40] audit: type=1326 audit(1765913181.415:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10984 comm="syz.6.1297" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 319.106279][ T40] audit: type=1326 audit(1765913181.415:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10984 comm="syz.6.1297" exe="/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 319.115681][ T40] audit: type=1326 audit(1765913181.415:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10984 comm="syz.6.1297" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 319.123857][ T40] audit: type=1326 audit(1765913181.415:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10984 comm="syz.6.1297" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 319.134786][ T40] audit: type=1326 audit(1765913181.415:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10984 comm="syz.6.1297" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 319.161425][ T40] audit: type=1326 audit(1765913181.415:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10984 comm="syz.6.1297" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 319.174529][ T40] audit: type=1326 audit(1765913181.415:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10984 comm="syz.6.1297" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 319.183809][ T40] audit: type=1326 audit(1765913181.425:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10984 comm="syz.6.1297" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 319.410867][T10995] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1302'. [ 319.414429][T10995] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1302'. [ 319.441227][T10995] nbd: must specify a size in bytes for the device [ 319.444066][T10995] i2c i2c-1: Invalid block write size 34 [ 319.622733][T11002] tipc: Cannot configure node identity twice [ 319.698522][ T6094] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 319.861099][ T6094] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 319.867499][ T6094] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.873605][ T6094] usb 5-1: Product: syz [ 319.876324][ T6094] usb 5-1: Manufacturer: syz [ 319.879358][ T6094] usb 5-1: SerialNumber: syz [ 319.886801][ T6094] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 319.903003][ T6057] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 319.915936][T11005] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1305'. [ 319.947240][T11005] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1305'. [ 320.002552][T11005] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1305'. [ 320.051699][T11011] openvswitch: netlink: IP tunnel TTL not specified. [ 320.053847][T11011] FAULT_INJECTION: forcing a failure. [ 320.053847][T11011] name failslab, interval 1, probability 0, space 0, times 0 [ 320.057859][T11011] CPU: 1 UID: 0 PID: 11011 Comm: syz.5.1306 Tainted: G L syzkaller #0 PREEMPT(full) [ 320.057876][T11011] Tainted: [L]=SOFTLOCKUP [ 320.057880][T11011] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 320.057886][T11011] Call Trace: [ 320.057891][T11011] [ 320.057895][T11011] dump_stack_lvl+0x16c/0x1f0 [ 320.057915][T11011] should_fail_ex+0x512/0x640 [ 320.057928][T11011] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 320.057944][T11011] should_failslab+0xc2/0x120 [ 320.057961][T11011] kmem_cache_alloc_node_noprof+0x86/0x800 [ 320.057974][T11011] ? __alloc_skb+0x156/0x410 [ 320.057989][T11011] ? __alloc_skb+0x156/0x410 [ 320.057999][T11011] __alloc_skb+0x156/0x410 [ 320.058010][T11011] ? __alloc_skb+0x35d/0x410 [ 320.058021][T11011] ? __pfx___alloc_skb+0x10/0x10 [ 320.058033][T11011] ? genl_rcv_msg+0x4b0/0x800 [ 320.058042][T11011] ? genl_rcv_msg+0x4bb/0x800 [ 320.058055][T11011] netlink_ack+0x15d/0xb80 [ 320.058074][T11011] netlink_rcv_skb+0x332/0x420 [ 320.058090][T11011] ? __pfx_genl_rcv_msg+0x10/0x10 [ 320.058101][T11011] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 320.058122][T11011] ? netlink_deliver_tap+0x1ae/0xd30 [ 320.058138][T11011] genl_rcv+0x28/0x40 [ 320.058154][T11011] netlink_unicast+0x5aa/0x870 [ 320.058171][T11011] ? __pfx_netlink_unicast+0x10/0x10 [ 320.058192][T11011] netlink_sendmsg+0x8c8/0xdd0 [ 320.058209][T11011] ? __pfx_netlink_sendmsg+0x10/0x10 [ 320.058226][T11011] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 320.058247][T11011] ____sys_sendmsg+0xa5d/0xc30 [ 320.058266][T11011] ? __pfx_____sys_sendmsg+0x10/0x10 [ 320.058282][T11011] ? get_compat_msghdr+0x11a/0x170 [ 320.058302][T11011] ___sys_sendmsg+0x134/0x1d0 [ 320.058316][T11011] ? __pfx____sys_sendmsg+0x10/0x10 [ 320.058336][T11011] ? find_held_lock+0x2b/0x80 [ 320.058371][T11011] __sys_sendmsg+0x16d/0x220 [ 320.058387][T11011] ? __pfx___sys_sendmsg+0x10/0x10 [ 320.058406][T11011] ? do_user_addr_fault+0x843/0x1370 [ 320.058422][T11011] __do_fast_syscall_32+0xe8/0x680 [ 320.058441][T11011] do_fast_syscall_32+0x32/0x80 [ 320.058458][T11011] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 320.058471][T11011] RIP: 0023:0xf70ed579 [ 320.058481][T11011] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 320.058492][T11011] RSP: 002b:00000000f54dd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 320.058502][T11011] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 320.058509][T11011] RDX: 000000002004c094 RSI: 0000000000000000 RDI: 0000000000000000 [ 320.058515][T11011] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 320.058521][T11011] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 320.058528][T11011] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 320.058541][T11011] [ 320.319966][ T6094] usb 5-1: USB disconnect, device number 5 [ 320.951204][ T6057] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 320.954495][ T6057] ath9k_htc: Failed to initialize the device [ 320.957857][ T6094] usb 5-1: ath9k_htc: USB layer deinitialized [ 321.314922][T11044] binder: 11036:11044 ioctl 0 80000040 returned -22 [ 321.913990][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 321.916060][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.093288][T11040] bond3: entered promiscuous mode [ 322.095897][T11040] 8021q: adding VLAN 0 to HW filter on device bond3 [ 323.191194][T11075] __nla_validate_parse: 4 callbacks suppressed [ 323.191207][T11075] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1318'. [ 323.222834][T11075] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1318'. [ 323.263030][T11083] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1320'. [ 323.276729][T11075] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1318'. [ 323.947870][T11085] binder: 11074:11085 ioctl 0 80000040 returned -22 [ 324.401457][T11110] mkiss: ax0: crc mode is auto. [ 326.218576][T11152] FAULT_INJECTION: forcing a failure. [ 326.218576][T11152] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 326.224022][T11152] CPU: 1 UID: 0 PID: 11152 Comm: syz.1.1337 Tainted: G L syzkaller #0 PREEMPT(full) [ 326.224055][T11152] Tainted: [L]=SOFTLOCKUP [ 326.224059][T11152] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 326.224065][T11152] Call Trace: [ 326.224070][T11152] [ 326.224075][T11152] dump_stack_lvl+0x16c/0x1f0 [ 326.224095][T11152] should_fail_ex+0x512/0x640 [ 326.224111][T11152] _copy_to_user+0x32/0xd0 [ 326.224125][T11152] simple_read_from_buffer+0xcb/0x170 [ 326.224141][T11152] proc_fail_nth_read+0x197/0x240 [ 326.224160][T11152] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 326.224179][T11152] ? rw_verify_area+0xcf/0x6c0 [ 326.224198][T11152] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 326.224216][T11152] vfs_read+0x1e4/0xcf0 [ 326.224232][T11152] ? __pfx___mutex_lock+0x10/0x10 [ 326.224250][T11152] ? __pfx_vfs_read+0x10/0x10 [ 326.224263][T11152] ? find_held_lock+0x2b/0x80 [ 326.224281][T11152] ? __fget_files+0x20e/0x3c0 [ 326.224301][T11152] ksys_read+0x12a/0x250 [ 326.224315][T11152] ? __pfx_ksys_read+0x10/0x10 [ 326.224329][T11152] ? syscall_user_dispatch+0x78/0x140 [ 326.224348][T11152] __do_fast_syscall_32+0xe8/0x680 [ 326.224366][T11152] do_fast_syscall_32+0x32/0x80 [ 326.224383][T11152] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 326.224397][T11152] RIP: 0023:0xf7ff3579 [ 326.224406][T11152] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 326.224417][T11152] RSP: 002b:00000000f54a4590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 326.224427][T11152] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000f54a4620 [ 326.224437][T11152] RDX: 000000000000000f RSI: 00000000f7486ff4 RDI: 0000000000000000 [ 326.224445][T11152] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 326.224452][T11152] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 326.224458][T11152] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 326.224472][T11152] [ 327.148535][ T6094] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 327.301568][ T6094] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 327.305015][ T6094] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.308177][ T6094] usb 10-1: Product: syz [ 327.310593][ T6094] usb 10-1: Manufacturer: syz [ 327.312103][ T6094] usb 10-1: SerialNumber: syz [ 327.322189][ T6094] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 327.334407][ T6057] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 327.794510][ T6094] usb 10-1: USB disconnect, device number 8 [ 328.369253][T11172] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 328.388614][ T6057] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive [ 328.391151][ T6057] ath9k_htc: Failed to initialize the device [ 328.393586][ T6094] usb 10-1: ath9k_htc: USB layer deinitialized [ 328.434909][T11172] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1347'. [ 328.438176][T11172] netlink: 'syz.5.1347': attribute type 10 has an invalid length. [ 328.440792][T11172] netlink: 2 bytes leftover after parsing attributes in process `syz.5.1347'. [ 328.443696][T11172] team0: entered promiscuous mode [ 328.445208][T11172] team_slave_0: entered promiscuous mode [ 328.446975][T11172] team_slave_1: entered promiscuous mode [ 328.449244][T11172] bridge0: port 4(team0) entered blocking state [ 328.451252][T11172] bridge0: port 4(team0) entered disabled state [ 328.453224][T11172] team0: entered allmulticast mode [ 328.454733][T11172] team_slave_0: entered allmulticast mode [ 328.456388][T11172] team_slave_1: entered allmulticast mode [ 328.461316][T11172] bridge0: port 4(team0) entered blocking state [ 328.463236][T11172] bridge0: port 4(team0) entered forwarding state [ 328.832502][T11192] FAULT_INJECTION: forcing a failure. [ 328.832502][T11192] name failslab, interval 1, probability 0, space 0, times 0 [ 328.836790][T11192] CPU: 0 UID: 0 PID: 11192 Comm: syz.0.1351 Tainted: G L syzkaller #0 PREEMPT(full) [ 328.836808][T11192] Tainted: [L]=SOFTLOCKUP [ 328.836812][T11192] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 328.836819][T11192] Call Trace: [ 328.836823][T11192] [ 328.836827][T11192] dump_stack_lvl+0x16c/0x1f0 [ 328.836848][T11192] should_fail_ex+0x512/0x640 [ 328.836860][T11192] ? __kmalloc_cache_noprof+0x5f/0x800 [ 328.836875][T11192] should_failslab+0xc2/0x120 [ 328.836892][T11192] __kmalloc_cache_noprof+0x80/0x800 [ 328.836903][T11192] ? lockdep_init_map_type+0x5c/0x270 [ 328.836915][T11192] ? fuse_alloc_inode+0xf7/0x1e0 [ 328.836931][T11192] ? lockdep_init_map_type+0x5c/0x270 [ 328.836942][T11192] ? __pfx_fuse_inode_set+0x10/0x10 [ 328.836961][T11192] ? fuse_alloc_inode+0xf7/0x1e0 [ 328.836976][T11192] ? __pfx_fuse_inode_eq+0x10/0x10 [ 328.836989][T11192] fuse_alloc_inode+0xf7/0x1e0 [ 328.837005][T11192] ? __pfx_fuse_alloc_inode+0x10/0x10 [ 328.837020][T11192] alloc_inode+0x64/0x240 [ 328.837033][T11192] iget5_locked+0x67/0xb0 [ 328.837046][T11192] fuse_iget+0x200/0x8d0 [ 328.837064][T11192] ? __pfx_fuse_iget+0x10/0x10 [ 328.837082][T11192] ? __fuse_simple_request+0x60c/0xe20 [ 328.837096][T11192] fuse_lookup_name+0x481/0x780 [ 328.837115][T11192] ? __pfx_fuse_lookup_name+0x10/0x10 [ 328.837132][T11192] ? __pfx___mutex_lock+0x10/0x10 [ 328.837160][T11192] fuse_lookup+0x26a/0x560 [ 328.837176][T11192] ? __pfx_fuse_lookup+0x10/0x10 [ 328.837192][T11192] ? __lock_acquire+0x436/0x2890 [ 328.837209][T11192] ? lockdep_init_map_type+0x5c/0x270 [ 328.837223][T11192] __lookup_slow+0x251/0x460 [ 328.837235][T11192] ? __pfx___lookup_slow+0x10/0x10 [ 328.837259][T11192] lookup_slow+0x50/0x70 [ 328.837270][T11192] path_lookupat+0x5e9/0xc40 [ 328.837284][T11192] ? kasan_save_stack+0x42/0x60 [ 328.837298][T11192] ? kasan_save_stack+0x33/0x60 [ 328.837314][T11192] filename_lookup+0x224/0x5f0 [ 328.837328][T11192] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 328.837343][T11192] ? __pfx_filename_lookup+0x10/0x10 [ 328.837371][T11192] ? find_held_lock+0x2b/0x80 [ 328.837386][T11192] do_linkat+0x14c/0x5d0 [ 328.837398][T11192] ? __pfx_do_linkat+0x10/0x10 [ 328.837407][T11192] ? strncpy_from_user+0x203/0x2e0 [ 328.837420][T11192] ? getname_flags.part.0+0x1c5/0x550 [ 328.837434][T11192] __ia32_sys_linkat+0xea/0x130 [ 328.837445][T11192] __do_fast_syscall_32+0xe8/0x680 [ 328.837464][T11192] do_fast_syscall_32+0x32/0x80 [ 328.837481][T11192] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 328.837494][T11192] RIP: 0023:0xf70cd579 [ 328.837503][T11192] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 328.837514][T11192] RSP: 002b:00000000f547b55c EFLAGS: 00000296 ORIG_RAX: 000000000000012f [ 328.837525][T11192] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000800001c0 [ 328.837531][T11192] RDX: 00000000ffffff9c RSI: 00000000800003c0 RDI: 0000000000001000 [ 328.837538][T11192] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 328.837544][T11192] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 328.837550][T11192] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 328.837563][T11192] [ 329.027471][T11197] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 329.029714][T11197] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 329.034151][T11197] vhci_hcd vhci_hcd.0: Device attached [ 329.191401][T11204] FAULT_INJECTION: forcing a failure. [ 329.191401][T11204] name failslab, interval 1, probability 0, space 0, times 0 [ 329.191423][T11204] CPU: 2 UID: 0 PID: 11204 Comm: syz.6.1357 Tainted: G L syzkaller #0 PREEMPT(full) [ 329.191438][T11204] Tainted: [L]=SOFTLOCKUP [ 329.191442][T11204] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 329.191449][T11204] Call Trace: [ 329.191453][T11204] [ 329.191457][T11204] dump_stack_lvl+0x16c/0x1f0 [ 329.191478][T11204] should_fail_ex+0x512/0x640 [ 329.191490][T11204] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 329.191505][T11204] should_failslab+0xc2/0x120 [ 329.191522][T11204] kmem_cache_alloc_node_noprof+0x86/0x800 [ 329.191535][T11204] ? __alloc_skb+0x156/0x410 [ 329.191551][T11204] ? __alloc_skb+0x156/0x410 [ 329.191561][T11204] __alloc_skb+0x156/0x410 [ 329.191572][T11204] ? __alloc_skb+0x35d/0x410 [ 329.191582][T11204] ? __pfx___alloc_skb+0x10/0x10 [ 329.191599][T11204] alloc_skb_with_frags+0xe0/0x860 [ 329.191614][T11204] ? __might_fault+0xe3/0x190 [ 329.191625][T11204] ? __might_fault+0x13b/0x190 [ 329.191640][T11204] sock_alloc_send_pskb+0x7f9/0x980 [ 329.191652][T11204] ? _copy_from_iter+0x161/0x16c0 [ 329.191667][T11204] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 329.191686][T11204] ? find_held_lock+0x2b/0x80 [ 329.191701][T11204] ? dev_get_by_index+0x17c/0x380 [ 329.191719][T11204] packet_sendmsg+0x1fe4/0x54a0 [ 329.191742][T11204] ? aa_sk_perm+0x2f2/0xae0 [ 329.191757][T11204] ? __pfx_packet_sendmsg+0x10/0x10 [ 329.191768][T11204] ? __pfx_aa_sk_perm+0x10/0x10 [ 329.191780][T11204] ? __might_fault+0xe3/0x190 [ 329.191795][T11204] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 329.191815][T11204] __sys_sendto+0x4a3/0x520 [ 329.191828][T11204] ? __pfx___sys_sendto+0x10/0x10 [ 329.191851][T11204] ? ksys_write+0x1ac/0x250 [ 329.191866][T11204] ? __pfx_ksys_write+0x10/0x10 [ 329.191883][T11204] __ia32_sys_sendto+0xdd/0x1b0 [ 329.191895][T11204] ? __do_fast_syscall_32+0x9a/0x680 [ 329.191912][T11204] ? lockdep_hardirqs_on+0x7c/0x110 [ 329.191928][T11204] __do_fast_syscall_32+0xe8/0x680 [ 329.191945][T11204] do_fast_syscall_32+0x32/0x80 [ 329.191962][T11204] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 329.191976][T11204] RIP: 0023:0xf708d579 [ 329.191985][T11204] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 329.191995][T11204] RSP: 002b:00000000f547d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000171 [ 329.192006][T11204] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 329.192013][T11204] RDX: 0000000000000031 RSI: 0000000024040801 RDI: 0000000080000300 [ 329.192019][T11204] RBP: 0000000000000014 R08: 0000000000000000 R09: 0000000000000000 [ 329.192026][T11204] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 329.192032][T11204] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 329.192045][T11204] [ 329.298930][ T24] usb 48-1: SetAddress Request (30) to port 0 [ 329.356486][ T24] usb 48-1: new SuperSpeed USB device number 30 using vhci_hcd [ 329.428538][ T6094] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 329.532334][T11216] tipc: Enabled bearer , priority 0 [ 329.535459][T11216] syzkaller0: entered promiscuous mode [ 329.537379][T11216] syzkaller0: entered allmulticast mode [ 329.541012][T11198] vhci_hcd: connection reset by peer [ 329.543149][ T8727] vhci_hcd vhci_hcd.5: stop threads [ 329.543906][T11216] sch_tbf: peakrate 786 is lower than or equals to rate 19658 ! [ 329.544851][ T8727] vhci_hcd vhci_hcd.5: release socket [ 329.544910][ T8727] vhci_hcd vhci_hcd.5: disconnect device [ 329.554563][T11216] tipc: Resetting bearer [ 329.557587][T11215] tipc: Resetting bearer [ 329.566468][T11215] tipc: Disabling bearer [ 329.590150][ T6094] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 329.593249][ T6094] usb 5-1: config 0 interface 0 has no altsetting 0 [ 329.597805][ T6094] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 329.601446][ T6094] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 329.603987][ T6094] usb 5-1: Product: syz [ 329.605343][ T6094] usb 5-1: Manufacturer: syz [ 329.606877][ T6094] usb 5-1: SerialNumber: syz [ 329.610278][ T6094] usb 5-1: config 0 descriptor?? [ 329.614417][ T6094] usb 5-1: selecting invalid altsetting 0 [ 329.696361][T11219] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1363'. [ 329.718734][T11219] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1363'. [ 329.770922][T11219] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1363'. [ 329.822013][ T6094] usb 5-1: USB disconnect, device number 6 [ 329.843221][T11219] binder: 11218:11219 ioctl 0 80000040 returned -22 [ 329.945098][ T5941] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 329.947593][T11226] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1364'. [ 330.283895][T11232] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 330.285978][T11232] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 330.325106][T11232] vhci_hcd vhci_hcd.0: Device attached [ 330.646830][T11242] netlink: 'syz.0.1367': attribute type 4 has an invalid length. [ 330.829222][ T827] usb 50-1: SetAddress Request (14) to port 0 [ 330.829261][ T827] usb 50-1: new SuperSpeed USB device number 14 using vhci_hcd [ 331.531618][T11252] fuse: Unknown parameter 'user_id00000000000000000000' [ 331.586353][T11233] vhci_hcd: connection reset by peer [ 331.588684][ T6045] vhci_hcd vhci_hcd.6: stop threads [ 331.602955][ T6045] vhci_hcd vhci_hcd.6: release socket [ 331.603047][ T6045] vhci_hcd vhci_hcd.6: disconnect device [ 332.680435][T11274] netlink: 'syz.5.1377': attribute type 4 has an invalid length. [ 332.762160][T11276] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 334.348492][ T60] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 334.388544][ T24] usb 48-1: device descriptor read/8, error -110 [ 334.470784][T11294] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 334.470804][T11294] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 334.473986][T11294] vhci_hcd vhci_hcd.0: Device attached [ 334.499427][ T60] usb 5-1: Using ep0 maxpacket: 8 [ 334.504372][ T60] usb 5-1: unable to get BOS descriptor or descriptor too short [ 334.508708][ T60] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 334.508803][ T60] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 334.508900][ T60] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 334.515480][ T60] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 334.515500][ T60] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.515510][ T60] usb 5-1: Product: syz [ 334.515518][ T60] usb 5-1: Manufacturer: syz [ 334.515526][ T60] usb 5-1: SerialNumber: syz [ 334.748465][ T6021] usb 40-1: SetAddress Request (38) to port 0 [ 334.748498][ T6021] usb 40-1: new SuperSpeed USB device number 38 using vhci_hcd [ 334.759174][ T60] usb 5-1: 0:2 : does not exist [ 334.803546][ T60] usb 5-1: USB disconnect, device number 7 [ 334.826679][ T7314] udevd[7314]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 334.829350][ T24] usb usb48-port1: attempt power cycle [ 335.189031][T11295] vhci_hcd: connection reset by peer [ 335.198808][ T6053] vhci_hcd vhci_hcd.1: stop threads [ 335.200965][ T6053] vhci_hcd vhci_hcd.1: release socket [ 335.203175][ T6053] vhci_hcd vhci_hcd.1: disconnect device [ 335.390488][ T24] usb usb48-port1: unable to enumerate USB device [ 335.511170][T11313] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 335.514234][T11313] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 335.517985][T11313] vhci_hcd vhci_hcd.0: Device attached [ 335.535025][T11315] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 335.537857][T11315] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 335.627578][T11313] random: crng reseeded on system resumption [ 335.667871][T11313] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 335.692849][T11315] vhci_hcd vhci_hcd.0: Device attached [ 335.788672][ T6094] usb 48-1: SetAddress Request (34) to port 0 [ 335.798565][ T6094] usb 48-1: new SuperSpeed USB device number 34 using vhci_hcd [ 335.864741][T11323] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 335.866744][T11323] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 335.970917][T11323] vhci_hcd vhci_hcd.0: Device attached [ 335.978501][ T34] usb 38-1: SetAddress Request (42) to port 0 [ 335.980502][ T34] usb 38-1: new SuperSpeed USB device number 42 using vhci_hcd [ 336.286132][T11317] vhci_hcd: connection reset by peer [ 336.286559][ T12] vhci_hcd vhci_hcd.0: stop threads [ 336.286583][ T12] vhci_hcd vhci_hcd.0: release socket [ 336.286662][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 336.767725][T11330] 9p: Bad value for 'wfdno' [ 336.840251][T11314] vhci_hcd: connection reset by peer [ 336.847453][ T13] vhci_hcd vhci_hcd.5: stop threads [ 336.847471][ T13] vhci_hcd vhci_hcd.5: release socket [ 336.847579][ T13] vhci_hcd vhci_hcd.5: disconnect device [ 337.014781][T11324] vhci_hcd: connection reset by peer [ 337.023927][ T13] vhci_hcd vhci_hcd.6: stop threads [ 337.023945][ T13] vhci_hcd vhci_hcd.6: release socket [ 337.025872][ T13] vhci_hcd vhci_hcd.6: disconnect device [ 337.026774][ T827] usb 50-1: device descriptor read/8, error -110 [ 337.219453][T11341] QAT: Stopping all acceleration devices. [ 337.324413][ T5941] Bluetooth: hci1: unexpected event for opcode 0x1005 [ 337.430551][ T827] usb usb50-port1: attempt power cycle [ 337.681662][T11353] binder: 11347:11353 ioctl 0 80000040 returned -22 [ 337.986319][T11368] binder: 11363:11368 ioctl 40044591 0 returned -22 [ 338.009021][ T827] usb usb50-port1: unable to enumerate USB device [ 338.447595][T11378] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1407'. [ 338.462628][T11378] netlink: 'syz.5.1407': attribute type 4 has an invalid length. [ 338.465794][T11378] netlink: 17 bytes leftover after parsing attributes in process `syz.5.1407'. [ 338.599926][T11381] binder: 11374:11381 ioctl 0 80000040 returned -22 [ 338.804808][T11384] binder: 11382:11384 ioctl 0 80000040 returned -22 [ 339.330478][T11396] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1413'. [ 339.366561][T11396] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1413'. [ 339.454375][T11396] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1413'. [ 339.472948][T11402] FAULT_INJECTION: forcing a failure. [ 339.472948][T11402] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 339.477696][T11402] CPU: 3 UID: 0 PID: 11402 Comm: syz.1.1414 Tainted: G L syzkaller #0 PREEMPT(full) [ 339.477714][T11402] Tainted: [L]=SOFTLOCKUP [ 339.477718][T11402] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 339.477725][T11402] Call Trace: [ 339.477729][T11402] [ 339.477733][T11402] dump_stack_lvl+0x16c/0x1f0 [ 339.477756][T11402] should_fail_ex+0x512/0x640 [ 339.477771][T11402] _copy_to_user+0x32/0xd0 [ 339.477784][T11402] simple_read_from_buffer+0xcb/0x170 [ 339.477800][T11402] proc_fail_nth_read+0x197/0x240 [ 339.477819][T11402] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 339.477838][T11402] ? rw_verify_area+0xcf/0x6c0 [ 339.477852][T11402] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 339.477869][T11402] vfs_read+0x1e4/0xcf0 [ 339.477885][T11402] ? __pfx___mutex_lock+0x10/0x10 [ 339.477908][T11402] ? __pfx_vfs_read+0x10/0x10 [ 339.477921][T11402] ? find_held_lock+0x2b/0x80 [ 339.477939][T11402] ? __fget_files+0x20e/0x3c0 [ 339.477959][T11402] ksys_read+0x12a/0x250 [ 339.477973][T11402] ? __pfx_ksys_read+0x10/0x10 [ 339.477987][T11402] ? syscall_user_dispatch+0x78/0x140 [ 339.478002][T11402] ? fput+0x70/0xf0 [ 339.478013][T11402] __do_fast_syscall_32+0xe8/0x680 [ 339.478032][T11402] do_fast_syscall_32+0x32/0x80 [ 339.478049][T11402] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 339.478063][T11402] RIP: 0023:0xf7ff3579 [ 339.478072][T11402] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 339.478083][T11402] RSP: 002b:00000000f54e6590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 339.478094][T11402] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54e6620 [ 339.478100][T11402] RDX: 000000000000000f RSI: 00000000f7486ff4 RDI: 0000000000000000 [ 339.478107][T11402] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 339.478112][T11402] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 339.478119][T11402] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 339.478132][T11402] [ 339.777164][T11403] mkiss: ax0: crc mode is auto. [ 339.811578][T11399] binder: 11395:11399 ioctl 0 80000040 returned -22 [ 339.838981][ T6021] usb 40-1: device descriptor read/8, error -110 [ 339.894636][T11411] netlink: 'syz.1.1416': attribute type 4 has an invalid length. [ 339.903407][T11403] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1412'. [ 340.246294][ T6021] usb usb40-port1: attempt power cycle [ 340.303268][T11415] x_tables: ip_tables: udp match: only valid for protocol 17 [ 340.585683][T11429] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1422'. [ 340.859503][ T6021] usb usb40-port1: unable to enumerate USB device [ 340.888946][ T6094] usb 48-1: device descriptor read/8, error -110 [ 341.026968][T11442] netlink: 'syz.6.1421': attribute type 10 has an invalid length. [ 341.039679][ T34] usb 38-1: device descriptor read/8, error -110 [ 341.045401][T11442] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 341.055004][T11442] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 341.067240][T11442] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 341.279085][ T6094] usb usb48-port1: attempt power cycle [ 341.439418][ T34] usb usb38-port1: attempt power cycle [ 341.441738][T11445] binder: 11443:11445 ioctl 0 80000040 returned -22 [ 341.485163][T11447] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1426'. [ 341.505540][T11447] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1426'. [ 341.550629][T11447] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1426'. [ 341.671222][T11453] syzkaller0: entered promiscuous mode [ 341.673547][T11453] syzkaller0: entered allmulticast mode [ 341.739897][T11451] binder: 11446:11451 ioctl 0 80000040 returned -22 [ 341.806242][T11456] input: syz1 as /devices/virtual/input/input17 [ 341.849785][ T6094] usb usb48-port1: unable to enumerate USB device [ 342.019363][ T34] usb usb38-port1: unable to enumerate USB device [ 342.155339][T11463] netlink: 'syz.0.1430': attribute type 4 has an invalid length. [ 342.751205][T11469] netlink: 'syz.5.1432': attribute type 4 has an invalid length. [ 344.387569][T11490] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 344.387590][T11490] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 344.387824][T11490] vhci_hcd vhci_hcd.0: Device attached [ 344.698520][ T34] usb 48-1: SetAddress Request (38) to port 0 [ 344.698579][ T34] usb 48-1: new SuperSpeed USB device number 38 using vhci_hcd [ 345.088656][T11493] vhci_hcd: connection reset by peer [ 345.168627][ T1140] vhci_hcd vhci_hcd.5: stop threads [ 345.170420][ T1140] vhci_hcd vhci_hcd.5: release socket [ 345.172318][ T1140] vhci_hcd vhci_hcd.5: disconnect device [ 346.084328][T11512] QAT: Stopping all acceleration devices. [ 347.068538][T11525] __nla_validate_parse: 1 callbacks suppressed [ 347.068550][T11525] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1446'. [ 347.244139][T11525] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1446'. [ 347.328004][T11525] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1446'. [ 347.694031][T11538] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 347.696145][T11538] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 347.724691][T11532] binder: 11524:11532 ioctl 0 80000040 returned -22 [ 347.767659][T11538] vhci_hcd vhci_hcd.0: Device attached [ 348.500966][T11552] netlink: 'syz.1.1444': attribute type 4 has an invalid length. [ 348.505631][T11552] netlink: 'syz.1.1444': attribute type 4 has an invalid length. [ 348.606687][T11553] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 348.609095][T11553] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 348.779716][T11553] vhci_hcd vhci_hcd.0: Device attached [ 349.060909][T11559] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1451'. [ 349.069156][ T827] usb 38-1: SetAddress Request (46) to port 0 [ 349.071193][ T827] usb 38-1: new SuperSpeed USB device number 46 using vhci_hcd [ 349.080449][T11559] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1451'. [ 349.129133][T11559] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1451'. [ 349.251183][T11539] vhci_hcd: connection closed [ 349.258541][ T62] vhci_hcd vhci_hcd.5: stop threads [ 349.262287][ T62] vhci_hcd vhci_hcd.5: release socket [ 349.268680][ T62] vhci_hcd vhci_hcd.5: disconnect device [ 349.368602][T11554] vhci_hcd: connection reset by peer [ 349.370678][ T13] vhci_hcd vhci_hcd.0: stop threads [ 349.373021][ T13] vhci_hcd vhci_hcd.0: release socket [ 349.377352][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 349.380107][T11563] binder: 11558:11563 ioctl 0 80000040 returned -22 [ 349.748555][ T34] usb 48-1: device descriptor read/8, error -110 [ 350.153028][ T34] usb usb48-port1: attempt power cycle [ 350.317366][T11582] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1457'. [ 350.362285][T11582] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1457'. [ 350.493589][T11582] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1457'. [ 350.741379][ T34] usb usb48-port1: unable to enumerate USB device [ 350.840894][T11586] binder: 11581:11586 ioctl 0 80000040 returned -22 [ 351.173270][T11591] netlink: 'syz.1.1458': attribute type 4 has an invalid length. [ 351.507604][T11600] FAULT_INJECTION: forcing a failure. [ 351.507604][T11600] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 351.519312][T11600] CPU: 0 UID: 0 PID: 11600 Comm: syz.1.1462 Tainted: G L syzkaller #0 PREEMPT(full) [ 351.519355][T11600] Tainted: [L]=SOFTLOCKUP [ 351.519362][T11600] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 351.519373][T11600] Call Trace: [ 351.519380][T11600] [ 351.519388][T11600] dump_stack_lvl+0x16c/0x1f0 [ 351.519419][T11600] should_fail_ex+0x512/0x640 [ 351.519443][T11600] _copy_to_user+0x32/0xd0 [ 351.519464][T11600] simple_read_from_buffer+0xcb/0x170 [ 351.519492][T11600] proc_fail_nth_read+0x197/0x240 [ 351.519522][T11600] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 351.519552][T11600] ? rw_verify_area+0xcf/0x6c0 [ 351.519573][T11600] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 351.519602][T11600] vfs_read+0x1e4/0xcf0 [ 351.519629][T11600] ? __pfx___mutex_lock+0x10/0x10 [ 351.519657][T11600] ? __pfx_vfs_read+0x10/0x10 [ 351.519679][T11600] ? find_held_lock+0x2b/0x80 [ 351.519709][T11600] ? __fget_files+0x20e/0x3c0 [ 351.519743][T11600] ksys_read+0x12a/0x250 [ 351.519772][T11600] ? __pfx_ksys_read+0x10/0x10 [ 351.519805][T11600] __do_fast_syscall_32+0xe8/0x680 [ 351.519835][T11600] do_fast_syscall_32+0x32/0x80 [ 351.519863][T11600] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 351.519885][T11600] RIP: 0023:0xf7ff3579 [ 351.519899][T11600] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 351.519917][T11600] RSP: 002b:00000000f54e6590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 351.519935][T11600] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000f54e6620 [ 351.519947][T11600] RDX: 000000000000000f RSI: 00000000f7486ff4 RDI: 0000000000000000 [ 351.519958][T11600] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 351.519968][T11600] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 351.519978][T11600] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 351.520003][T11600] [ 351.643388][T11605] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1463'. [ 351.846903][T11580] bridge0: port 3(syz_tun) entered disabled state [ 351.878910][T11580] syz_tun (unregistering): left allmulticast mode [ 351.880906][T11580] syz_tun (unregistering): left promiscuous mode [ 351.882989][T11580] bridge0: port 3(syz_tun) entered disabled state [ 352.391333][ T5941] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 352.605980][T11628] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1470'. [ 352.634842][T11628] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1470'. [ 352.797049][T11628] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1470'. [ 353.112900][T11646] binder: 11634:11646 ioctl 0 80000040 returned -22 [ 353.210562][T11630] binder: 11627:11630 ioctl 0 80000040 returned -22 [ 353.765481][ T5941] Bluetooth: hci1: unexpected event for opcode 0x1005 [ 353.768061][T11683] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1476'. [ 353.923526][T11688] FAULT_INJECTION: forcing a failure. [ 353.923526][T11688] name failslab, interval 1, probability 0, space 0, times 0 [ 353.929564][T11688] CPU: 3 UID: 0 PID: 11688 Comm: syz.5.1479 Tainted: G L syzkaller #0 PREEMPT(full) [ 353.929585][T11688] Tainted: [L]=SOFTLOCKUP [ 353.929589][T11688] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 353.929596][T11688] Call Trace: [ 353.929600][T11688] [ 353.929604][T11688] dump_stack_lvl+0x16c/0x1f0 [ 353.929625][T11688] should_fail_ex+0x512/0x640 [ 353.929638][T11688] ? kmem_cache_alloc_noprof+0x62/0x770 [ 353.929653][T11688] should_failslab+0xc2/0x120 [ 353.929670][T11688] kmem_cache_alloc_noprof+0x83/0x770 [ 353.929683][T11688] ? mas_alloc_nodes+0x27b/0x380 [ 353.929698][T11688] ? mas_alloc_nodes+0x27b/0x380 [ 353.929711][T11688] mas_alloc_nodes+0x27b/0x380 [ 353.929725][T11688] mas_preallocate+0x5e3/0xee0 [ 353.929741][T11688] ? __memcg_slab_post_alloc_hook+0x422/0x880 [ 353.929761][T11688] ? __pfx_mas_preallocate+0x10/0x10 [ 353.929781][T11688] ? anon_vma_name+0x81/0x2f0 [ 353.929794][T11688] __split_vma+0x34a/0x1050 [ 353.929808][T11688] ? __pfx___split_vma+0x10/0x10 [ 353.929823][T11688] ? __pfx_mas_prev_range+0x10/0x10 [ 353.929840][T11688] ? can_vma_merge_right+0xa5/0x530 [ 353.929853][T11688] vma_modify+0x189d/0x2310 [ 353.929869][T11688] ? __pfx_vma_modify+0x10/0x10 [ 353.929884][T11688] vma_modify_flags+0x235/0x3a0 [ 353.929897][T11688] ? __pfx_vma_modify_flags+0x10/0x10 [ 353.929918][T11688] mlock_fixup+0x301/0xf00 [ 353.929932][T11688] ? __pfx_mlock_fixup+0x10/0x10 [ 353.929948][T11688] apply_vma_lock_flags+0x254/0x370 [ 353.929962][T11688] ? __pfx_apply_vma_lock_flags+0x10/0x10 [ 353.929975][T11688] ? __pfx___might_resched+0x10/0x10 [ 353.929995][T11688] ? __pfx_down_write_killable+0x10/0x10 [ 353.930007][T11688] ? __mutex_unlock_slowpath+0x161/0x790 [ 353.930025][T11688] do_mlock+0x2a5/0x800 [ 353.930038][T11688] ? __fget_files+0x20e/0x3c0 [ 353.930054][T11688] ? __pfx_do_mlock+0x10/0x10 [ 353.930067][T11688] ? fput+0x70/0xf0 [ 353.930078][T11688] ? ksys_write+0x1ac/0x250 [ 353.930093][T11688] ? __pfx_ksys_write+0x10/0x10 [ 353.930108][T11688] ? do_user_addr_fault+0x843/0x1370 [ 353.930124][T11688] __ia32_sys_mlock+0x57/0x80 [ 353.930137][T11688] __do_fast_syscall_32+0xe8/0x680 [ 353.930156][T11688] do_fast_syscall_32+0x32/0x80 [ 353.930173][T11688] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 353.930187][T11688] RIP: 0023:0xf70ed579 [ 353.930196][T11688] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 353.930206][T11688] RSP: 002b:00000000f54dd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000096 [ 353.930217][T11688] RAX: ffffffffffffffda RBX: 00000000807d8000 RCX: 0000000000800000 [ 353.930224][T11688] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 353.930230][T11688] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 353.930236][T11688] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 353.930242][T11688] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 353.930275][T11688] [ 354.152081][ T827] usb 38-1: device descriptor read/8, error -110 [ 354.500022][T11709] syz.6.1478 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 354.506251][T11709] loop2: detected capacity change from 0 to 7 [ 354.519227][T11709] Dev loop2: unable to read RDB block 7 [ 354.521138][T11709] loop2: unable to read partition table [ 354.522987][T11709] loop2: partition table beyond EOD, truncated [ 354.547314][T11709] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 354.548967][T11711] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 354.552551][T11711] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 354.556280][T11711] vhci_hcd vhci_hcd.0: Device attached [ 354.561730][ T827] usb usb38-port1: attempt power cycle [ 354.818564][ T34] usb 48-1: SetAddress Request (42) to port 0 [ 354.821043][ T34] usb 48-1: new SuperSpeed USB device number 42 using vhci_hcd [ 355.129551][ T827] usb usb38-port1: unable to enumerate USB device [ 355.161342][T11712] vhci_hcd: connection reset by peer [ 355.181987][ T6052] vhci_hcd vhci_hcd.5: stop threads [ 355.192860][ T6052] vhci_hcd vhci_hcd.5: release socket [ 355.198860][ T6052] vhci_hcd vhci_hcd.5: disconnect device [ 355.648133][T11740] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1485'. [ 356.003554][T11745] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 356.006402][T11745] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 356.021064][T11745] vhci_hcd vhci_hcd.0: Device attached [ 356.089545][T11752] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 356.089564][T11752] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 356.089792][T11752] vhci_hcd vhci_hcd.0: Device attached [ 356.298498][ T6057] usb 40-1: SetAddress Request (42) to port 0 [ 356.298552][ T6057] usb 40-1: new SuperSpeed USB device number 42 using vhci_hcd [ 356.599245][ T10] usb 50-1: SetAddress Request (18) to port 0 [ 356.599299][ T10] usb 50-1: new SuperSpeed USB device number 18 using vhci_hcd [ 356.653723][T11747] vhci_hcd: connection reset by peer [ 356.654112][ T62] vhci_hcd vhci_hcd.1: stop threads [ 356.654135][ T62] vhci_hcd vhci_hcd.1: release socket [ 356.654226][ T62] vhci_hcd vhci_hcd.1: disconnect device [ 356.932193][T11754] vhci_hcd: connection reset by peer [ 356.934997][ T1140] vhci_hcd vhci_hcd.6: stop threads [ 356.937507][ T1140] vhci_hcd vhci_hcd.6: release socket [ 356.937738][T11769] tipc: Enabled bearer , priority 0 [ 356.940078][ T1140] vhci_hcd vhci_hcd.6: disconnect device [ 356.945224][T11769] syzkaller0: entered promiscuous mode [ 356.947576][T11769] syzkaller0: entered allmulticast mode [ 356.966311][T11769] tipc: Resetting bearer [ 356.972134][T11768] tipc: Resetting bearer [ 356.983538][T11768] tipc: Disabling bearer [ 357.387669][T11773] netlink: 'syz.0.1493': attribute type 4 has an invalid length. [ 357.839322][T11779] vlan3: entered promiscuous mode [ 357.845301][T11779] vlan3: entered allmulticast mode [ 357.848112][T11779] hsr_slave_1: entered allmulticast mode [ 358.537669][T11790] binder: 11785:11790 ioctl 0 80000040 returned -22 [ 358.817579][T11800] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1502'. [ 359.005315][T11795] binder: 11791:11795 ioctl 0 80000040 returned -22 [ 359.788553][ T24] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 359.908604][ T34] usb 48-1: device descriptor read/8, error -110 [ 359.946276][T11840] binder: 11817:11840 ioctl 0 80000040 returned -22 [ 359.948654][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 359.954892][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 359.960595][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 359.967430][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 359.978571][ T24] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 359.981826][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.990407][ T24] usb 5-1: config 0 descriptor?? [ 360.309722][ T34] usb usb48-port1: attempt power cycle [ 360.419535][ T24] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 360.421824][ T24] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 360.428900][ T24] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 360.439452][ T24] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 360.457003][ T24] shield 0003:0955:7214.0003: unknown main item tag 0x0 [ 360.461822][ T24] input: HID 0955:7214 Haptics as /devices/virtual/input/input18 [ 360.537771][T11852] netlink: 'syz.5.1513': attribute type 4 has an invalid length. [ 360.539994][ T24] shield 0003:0955:7214.0003: Registered Thunderstrike controller [ 360.543193][T11852] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1513'. [ 360.547369][ T24] shield 0003:0955:7214.0003: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 360.550428][T11852] .`: renamed from bond0 (while UP) [ 360.618906][T11819] random: crng reseeded on system resumption [ 360.642367][ T6023] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 360.642404][ T9] usb 5-1: USB disconnect, device number 8 [ 360.646775][ T9] ------------[ cut here ]------------ [ 360.647200][ T6023] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 360.649060][ T9] workqueue: work disable count underflowed [ 360.649069][ T9] WARNING: kernel/workqueue.c:4359 at enable_work+0x2ca/0x310, CPU#0: kworker/0:0/9 [ 360.649092][ T9] Modules linked in: [ 360.649114][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 360.649130][ T9] Tainted: [L]=SOFTLOCKUP [ 360.649134][ T9] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 360.649142][ T9] Workqueue: usb_hub_wq hub_event [ 360.649155][ T9] RIP: 0010:enable_work+0x2ca/0x310 [ 360.649169][ T9] Code: ff e8 da ed 39 00 90 0f 0b 90 e9 b4 fe ff ff e8 cc ed 39 00 e8 d7 e8 f0 09 e9 49 ff ff ff e8 bd ed 39 00 48 8d 3d e6 6b 07 0f <67> 48 0f b9 3a e9 33 fe ff ff 48 89 ef e8 b4 cb a2 00 e9 f7 fd ff [ 360.649193][ T9] RSP: 0018:ffffc900001b7348 EFLAGS: 00010093 [ 360.649202][ T9] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81846723 [ 360.649210][ T9] RDX: ffff88801d29c980 RSI: ffffffff818468f3 RDI: ffffffff908bd4e0 [ 360.649217][ T9] RBP: ffff888050103738 R08: 0000000000000005 R09: 0000000000000000 [ 360.649224][ T9] R10: 0000000000000000 R11: ffff88801d29d4b0 R12: 1ffff92000036e6a [ 360.649231][ T9] R13: ffffffff8fc51cdf R14: ffff888050103698 R15: ffff888050103730 [ 360.649238][ T9] FS: 0000000000000000(0000) GS:ffff8880976fd000(0000) knlGS:0000000000000000 [ 360.649261][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 360.649270][ T9] CR2: 0000000080006000 CR3: 0000000070541000 CR4: 0000000000352ef0 [ 360.649278][ T9] Call Trace: [ 360.649282][ T9] [ 360.649288][ T9] ? __pfx_enable_work+0x10/0x10 [ 360.649306][ T9] cancel_delayed_work_sync+0x96/0xf0 [ 360.649323][ T9] thermal_zone_device_unregister+0x28e/0x4d0 [ 360.649337][ T9] ? __pfx_shield_remove+0x10/0x10 [ 360.655106][ T6023] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 360.656830][ T9] power_supply_unregister+0x10a/0x150 [ 360.665970][ T6023] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 360.666459][ T9] shield_remove+0x75/0x130 [ 360.719923][ T9] ? __pfx_shield_remove+0x10/0x10 [ 360.721586][ T9] hid_device_remove+0xd1/0x260 [ 360.723142][ T9] ? __pfx_hid_device_remove+0x10/0x10 [ 360.724881][ T9] device_remove+0xcb/0x170 [ 360.726357][ T9] device_release_driver_internal+0x44b/0x620 [ 360.728302][ T9] bus_remove_device+0x22f/0x450 [ 360.729851][ T9] device_del+0x396/0x9f0 [ 360.731250][ T9] ? __pfx_device_del+0x10/0x10 [ 360.732815][ T9] ? do_raw_spin_lock+0x12c/0x2b0 [ 360.734404][ T9] hid_destroy_device+0x19c/0x240 [ 360.735973][ T9] usbhid_disconnect+0xa0/0xe0 [ 360.737546][ T9] usb_unbind_interface+0x1dd/0x9e0 [ 360.739201][ T9] ? kernfs_remove_by_name_ns+0xbe/0x100 [ 360.741039][ T9] ? __pfx_usb_unbind_interface+0x10/0x10 [ 360.742842][ T9] device_remove+0x125/0x170 [ 360.744333][ T9] device_release_driver_internal+0x44b/0x620 [ 360.746360][ T9] bus_remove_device+0x22f/0x450 [ 360.747941][ T9] device_del+0x396/0x9f0 [ 360.749239][ T9] ? __pfx_device_del+0x10/0x10 [ 360.750822][ T9] ? kobject_put+0x218/0x6f0 [ 360.752318][ T9] usb_disable_device+0x355/0x820 [ 360.753924][ T9] usb_disconnect+0x2e1/0x9e0 [ 360.755405][ T9] hub_event+0x1d84/0x52f0 [ 360.756857][ T9] ? __lock_acquire+0x436/0x2890 [ 360.758411][ T9] ? do_raw_spin_unlock+0x172/0x230 [ 360.760055][ T9] ? __pfx_hub_event+0x10/0x10 [ 360.761582][ T9] ? interval_tree_span_iter_first+0x310/0x600 [ 360.763514][ T9] ? finish_task_switch.isra.0+0x202/0xbd0 [ 360.765362][ T9] ? rcu_is_watching+0x12/0xc0 [ 360.766901][ T9] process_one_work+0x9ba/0x1b20 [ 360.768491][ T9] ? __pfx_process_one_work+0x10/0x10 [ 360.770186][ T9] ? assign_work+0x1a0/0x250 [ 360.771697][ T9] worker_thread+0x6c8/0xf10 [ 360.773176][ T9] ? __pfx_worker_thread+0x10/0x10 [ 360.774793][ T9] kthread+0x3c5/0x780 [ 360.776086][ T9] ? __pfx_kthread+0x10/0x10 [ 360.777594][ T9] ? rcu_is_watching+0x12/0xc0 [ 360.779104][ T9] ? __pfx_kthread+0x10/0x10 [ 360.780722][ T9] ret_from_fork+0x983/0xb10 [ 360.782071][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 360.783533][ T9] ? __switch_to+0x7af/0x10d0 [ 360.784893][ T9] ? __pfx_kthread+0x10/0x10 [ 360.786195][ T9] ret_from_fork_asm+0x1a/0x30 [ 360.787740][ T9] [ 360.788760][ T9] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 360.791093][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 360.794422][ T9] Tainted: [L]=SOFTLOCKUP [ 360.795790][ T9] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 360.799176][ T9] Workqueue: usb_hub_wq hub_event [ 360.800815][ T9] Call Trace: [ 360.801904][ T9] [ 360.802881][ T9] dump_stack_lvl+0x3d/0x1f0 [ 360.804381][ T9] vpanic+0x640/0x6f0 [ 360.805661][ T9] ? enable_work+0x2ca/0x310 [ 360.807095][ T9] panic+0xca/0xd0 [ 360.808255][ T9] ? __pfx_panic+0x10/0x10 [ 360.809640][ T9] ? check_panic_on_warn+0x1f/0xb0 [ 360.811319][ T9] check_panic_on_warn+0xab/0xb0 [ 360.812913][ T9] __warn+0x108/0x3c0 [ 360.814101][ T9] __report_bug+0x2a0/0x520 [ 360.815429][ T9] ? enable_work+0x2ca/0x310 [ 360.816885][ T9] ? __pfx___report_bug+0x10/0x10 [ 360.818486][ T9] ? __wait_for_common+0x1e0/0x4e0 [ 360.820015][ T9] ? enable_work+0x2c3/0x310 [ 360.821488][ T9] ? enable_work+0xf3/0x310 [ 360.822893][ T9] ? find_held_lock+0x2b/0x80 [ 360.824407][ T9] report_bug_entry+0xe1/0x290 [ 360.825899][ T9] ? enable_work+0x2ca/0x310 [ 360.827287][ T9] handle_bug+0x18a/0x260 [ 360.828538][ T9] exc_invalid_op+0x17/0x50 [ 360.830071][ T9] asm_exc_invalid_op+0x1a/0x20 [ 360.831692][ T9] RIP: 0010:enable_work+0x2ca/0x310 [ 360.833391][ T9] Code: ff e8 da ed 39 00 90 0f 0b 90 e9 b4 fe ff ff e8 cc ed 39 00 e8 d7 e8 f0 09 e9 49 ff ff ff e8 bd ed 39 00 48 8d 3d e6 6b 07 0f <67> 48 0f b9 3a e9 33 fe ff ff 48 89 ef e8 b4 cb a2 00 e9 f7 fd ff [ 360.838904][ T9] RSP: 0018:ffffc900001b7348 EFLAGS: 00010093 [ 360.840825][ T9] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81846723 [ 360.843287][ T9] RDX: ffff88801d29c980 RSI: ffffffff818468f3 RDI: ffffffff908bd4e0 [ 360.845734][ T9] RBP: ffff888050103738 R08: 0000000000000005 R09: 0000000000000000 [ 360.848188][ T9] R10: 0000000000000000 R11: ffff88801d29d4b0 R12: 1ffff92000036e6a [ 360.850763][ T9] R13: ffffffff8fc51cdf R14: ffff888050103698 R15: ffff888050103730 [ 360.853447][ T9] ? enable_work+0xf3/0x310 [ 360.854953][ T9] ? enable_work+0x2c3/0x310 [ 360.856602][ T9] ? enable_work+0x2c3/0x310 [ 360.858130][ T9] ? __pfx_enable_work+0x10/0x10 [ 360.859722][ T9] cancel_delayed_work_sync+0x96/0xf0 [ 360.861408][ T9] thermal_zone_device_unregister+0x28e/0x4d0 [ 360.863386][ T9] ? __pfx_shield_remove+0x10/0x10 [ 360.865018][ T9] power_supply_unregister+0x10a/0x150 [ 360.866779][ T9] shield_remove+0x75/0x130 [ 360.868229][ T9] ? __pfx_shield_remove+0x10/0x10 [ 360.869875][ T9] hid_device_remove+0xd1/0x260 [ 360.871421][ T9] ? __pfx_hid_device_remove+0x10/0x10 [ 360.873163][ T9] device_remove+0xcb/0x170 [ 360.874576][ T9] device_release_driver_internal+0x44b/0x620 [ 360.876507][ T9] bus_remove_device+0x22f/0x450 [ 360.878133][ T9] device_del+0x396/0x9f0 [ 360.879527][ T9] ? __pfx_device_del+0x10/0x10 [ 360.881056][ T9] ? do_raw_spin_lock+0x12c/0x2b0 [ 360.882632][ T9] hid_destroy_device+0x19c/0x240 [ 360.884205][ T9] usbhid_disconnect+0xa0/0xe0 [ 360.885726][ T9] usb_unbind_interface+0x1dd/0x9e0 [ 360.887368][ T9] ? kernfs_remove_by_name_ns+0xbe/0x100 [ 360.889067][ T9] ? __pfx_usb_unbind_interface+0x10/0x10 [ 360.890813][ T9] device_remove+0x125/0x170 [ 360.892237][ T9] device_release_driver_internal+0x44b/0x620 [ 360.894121][ T9] bus_remove_device+0x22f/0x450 [ 360.895667][ T9] device_del+0x396/0x9f0 [ 360.897031][ T9] ? __pfx_device_del+0x10/0x10 [ 360.898538][ T9] ? kobject_put+0x218/0x6f0 [ 360.900005][ T9] usb_disable_device+0x355/0x820 [ 360.901588][ T9] usb_disconnect+0x2e1/0x9e0 [ 360.903047][ T9] hub_event+0x1d84/0x52f0 [ 360.904519][ T9] ? __lock_acquire+0x436/0x2890 [ 360.906051][ T9] ? do_raw_spin_unlock+0x172/0x230 [ 360.907675][ T9] ? __pfx_hub_event+0x10/0x10 [ 360.909173][ T9] ? interval_tree_span_iter_first+0x310/0x600 [ 360.911083][ T9] ? finish_task_switch.isra.0+0x202/0xbd0 [ 360.912904][ T9] ? rcu_is_watching+0x12/0xc0 [ 360.914396][ T9] process_one_work+0x9ba/0x1b20 [ 360.916035][ T9] ? __pfx_process_one_work+0x10/0x10 [ 360.917749][ T9] ? assign_work+0x1a0/0x250 [ 360.919201][ T9] worker_thread+0x6c8/0xf10 [ 360.920663][ T9] ? __pfx_worker_thread+0x10/0x10 [ 360.922235][ T9] kthread+0x3c5/0x780 [ 360.923482][ T9] ? __pfx_kthread+0x10/0x10 [ 360.924950][ T9] ? rcu_is_watching+0x12/0xc0 [ 360.926476][ T9] ? __pfx_kthread+0x10/0x10 [ 360.927935][ T9] ret_from_fork+0x983/0xb10 [ 360.929396][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 360.930965][ T9] ? __switch_to+0x7af/0x10d0 [ 360.932475][ T9] ? __pfx_kthread+0x10/0x10 [ 360.933943][ T9] ret_from_fork_asm+0x1a/0x30 [ 360.935460][ T9] [ 360.937185][ T9] Kernel Offset: disabled [ 360.938558][ T9] Rebooting in 86400 seconds..